agentbundle 0.7.0__tar.gz → 0.9.0__tar.gz

{agentbundle-0.7.0 → agentbundle-0.9.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentbundle
-Version: 0.7.0
+Version: 0.9.0
 Summary: npm for your coding agent. Install packs of skills, subagents, and hooks into any repo, for every major agent.
 Author-email: eugenelim <eugenelim@users.noreply.github.com>
 License: Apache-2.0 OR MIT
@@ -33,37 +33,37 @@ pip install agentbundle
 **Install into a repo** — so everyone who clones it gets the pack. `core` is the flagship pack, the loop itself:
 
 ```bash
-agentbundle install --pack core git+https://github.com/eugenelim/agent-ready-repo
+agentbundle install --pack core
 ```
 
-It lands in the repo's agent config — subagents and skills included — and you commit it like any other project file. This is the default scope: the pack belongs to the project and the whole team.
+No catalogue argument needed: it defaults to the agent-ready-repo catalogue. It lands in the repo's agent config — subagents and skills included — and you commit it like any other project file. This is the default scope: the pack belongs to the project and the whole team.
 
 **Install for yourself, everywhere** — so a pack follows you across every project, with no per-repo setup:
 
 ```bash
-agentbundle install --pack research git+https://github.com/eugenelim/agent-ready-repo --scope user
+agentbundle install --pack research --scope user
 ```
 
 User-scope packs land in your home directory, not the repo — they're yours, not the team's, and they're there in every project you open.
 
-A catalogue is a git URL or a local path, and the install auto-detects your agent (`--adapter` overrides).
+The install auto-detects your agent (`--adapter` overrides). Multi-IDE? Install the same pack for each agent at the same scope — they coexist, and the agents that read `.agents/skills/` (codex, cursor, gemini, copilot) share one skill copy instead of fighting over it. To install from a **different** catalogue, pass it as a trailing argument — a git URL or a local path (`agentbundle install --pack core <catalogue>`); a `config set source <catalogue>` makes that the default, and an editable clone (`pip install -e`) defaults to itself.
 
 ## More commands
 
 ```bash
-# See what a catalogue offers
-agentbundle list-packs    git+https://github.com/eugenelim/agent-ready-repo
-agentbundle list-profiles git+https://github.com/eugenelim/agent-ready-repo
+# See what the catalogue offers (bare uses the default; or name one explicitly)
+agentbundle list-packs
+agentbundle list-profiles
 
 # Install a whole curated profile — a single-scope set of packs — in one command
-agentbundle install --profile inception git+https://github.com/eugenelim/agent-ready-repo
+agentbundle install --profile inception
 
 # Preview any install without writing a file
-agentbundle install --pack core git+https://github.com/eugenelim/agent-ready-repo --dry-run
+agentbundle install --pack core --dry-run
 
 # Upgrade to the version the catalogue ships — shows installed → target, asks first
-agentbundle upgrade --pack core git+https://github.com/eugenelim/agent-ready-repo
-agentbundle upgrade --pack core git+https://github.com/eugenelim/agent-ready-repo --yes  # skip the prompt (CI)
+agentbundle upgrade --pack core
+agentbundle upgrade --pack core --yes  # skip the prompt (CI)
 
 # Uninstall — previews remove (Tier-1) vs keep (your edits), asks first
 agentbundle uninstall --pack core --dry-run

{agentbundle-0.7.0 → agentbundle-0.9.0}/README.md

@@ -15,37 +15,37 @@ pip install agentbundle
 **Install into a repo** — so everyone who clones it gets the pack. `core` is the flagship pack, the loop itself:
 
 ```bash
-agentbundle install --pack core git+https://github.com/eugenelim/agent-ready-repo
+agentbundle install --pack core
 ```
 
-It lands in the repo's agent config — subagents and skills included — and you commit it like any other project file. This is the default scope: the pack belongs to the project and the whole team.
+No catalogue argument needed: it defaults to the agent-ready-repo catalogue. It lands in the repo's agent config — subagents and skills included — and you commit it like any other project file. This is the default scope: the pack belongs to the project and the whole team.
 
 **Install for yourself, everywhere** — so a pack follows you across every project, with no per-repo setup:
 
 ```bash
-agentbundle install --pack research git+https://github.com/eugenelim/agent-ready-repo --scope user
+agentbundle install --pack research --scope user
 ```
 
 User-scope packs land in your home directory, not the repo — they're yours, not the team's, and they're there in every project you open.
 
-A catalogue is a git URL or a local path, and the install auto-detects your agent (`--adapter` overrides).
+The install auto-detects your agent (`--adapter` overrides). Multi-IDE? Install the same pack for each agent at the same scope — they coexist, and the agents that read `.agents/skills/` (codex, cursor, gemini, copilot) share one skill copy instead of fighting over it. To install from a **different** catalogue, pass it as a trailing argument — a git URL or a local path (`agentbundle install --pack core <catalogue>`); a `config set source <catalogue>` makes that the default, and an editable clone (`pip install -e`) defaults to itself.
 
 ## More commands
 
 ```bash
-# See what a catalogue offers
-agentbundle list-packs    git+https://github.com/eugenelim/agent-ready-repo
-agentbundle list-profiles git+https://github.com/eugenelim/agent-ready-repo
+# See what the catalogue offers (bare uses the default; or name one explicitly)
+agentbundle list-packs
+agentbundle list-profiles
 
 # Install a whole curated profile — a single-scope set of packs — in one command
-agentbundle install --profile inception git+https://github.com/eugenelim/agent-ready-repo
+agentbundle install --profile inception
 
 # Preview any install without writing a file
-agentbundle install --pack core git+https://github.com/eugenelim/agent-ready-repo --dry-run
+agentbundle install --pack core --dry-run
 
 # Upgrade to the version the catalogue ships — shows installed → target, asks first
-agentbundle upgrade --pack core git+https://github.com/eugenelim/agent-ready-repo
-agentbundle upgrade --pack core git+https://github.com/eugenelim/agent-ready-repo --yes  # skip the prompt (CI)
+agentbundle upgrade --pack core
+agentbundle upgrade --pack core --yes  # skip the prompt (CI)
 
 # Uninstall — previews remove (Tier-1) vs keep (your edits), asks first
 agentbundle uninstall --pack core --dry-run

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/_data/adapter.toml

@@ -84,7 +84,13 @@
 # `_append_layout_section` step (append-if-exists / never-create / never-
 # overwrite) into an adopter-owned `agentbundle-layout.toml`. Additive +
 # optional — packs pinned below v0.16 build and validate unchanged.
-version = "0.16"
+# RFC-0052 / ADR-0039+0040 (v0.17): the `[contract.shared-prefixes]` registry
+# (below) classifies each allowed-prefix as `shared` (a path more than one
+# adapter reads) or — by absence — `private`, and a shared prefix declares its
+# reader cohort. cursor/gemini/copilot route the `skill` primitive to the shared
+# `.agents/skills/` home (joining codex) and gain it in `allowed-prefixes` at
+# both scopes; their agent/hook/command projection stays native.
+version = "0.17"
 
 # Sibling schemas this contract references — pack metadata and the
 # per-pack Claude-plugin manifest. Defined by spec AC #3 + #4.
@@ -92,6 +98,16 @@ version = "0.16"
 pack = "pack.schema.json"
 plugin-manifest = "plugin-manifest.schema.json"
 
+# Shared-prefix registry (RFC-0052 / ADR-0039). Each key is a `shared` prefix —
+# a path more than one shipped adapter reads — mapped to its reader cohort (the
+# shipped adapters that read it). Every prefix NOT listed here is `private`
+# (adapter-exclusive). The install-time cross-adapter disclosure names a shared
+# prefix's *other* shipped cohort members; the footprint gate co-owns a shared
+# path across same-pack rows. A future adapter joins a cohort by one line here.
+[contract.shared-prefixes]
+".agents/skills/" = ["codex", "cursor", "gemini", "copilot"]
+".kiro/skills/" = ["kiro-ide", "kiro-cli"]
+
 # ---------------------------------------------------------------------------
 # Primitive types — source paths within a pack's .apm/ directory
 # ---------------------------------------------------------------------------
@@ -477,7 +493,10 @@ allowed-prefixes.user = [".kiro/", ".agentbundle/"]
 [[adapter.copilot.projection]]
 primitive = "skill"
 mode = "direct-directory"
-target-path = ".github/skills/"
+# RFC-0052 / ADR-0040: cohort skill home. Copilot reads `.agents/skills/`
+# (project) and `~/.agents/skills/` (personal); routing skills there lets the
+# whole cohort (codex, cursor, gemini, copilot) share one co-owned copy.
+target-path = ".agents/skills/"
 on-conflict = "prompt-then-preserve"
 
 [[adapter.copilot.projection]]
@@ -517,12 +536,14 @@ repo = "."
 user = "~"
 # RFC-0024 + copilot-skills-and-web: repo-scope skills at `.github/skills/`,
 # agents at `.github/agents/`, hook wiring + bodies at `.github/hooks/`.
-allowed-prefixes.repo = [".github/skills/", ".github/agents/", ".github/hooks/"]
-# User-scope home is `~/.copilot/` — the prefix the install rewrite produces
-# from the adapter's repo-relpaths. `.agentbundle/` carries the install
-# state file (`~/.agentbundle/state.toml`), same as every other user-scope-
-# capable adapter (claude-code, codex).
-allowed-prefixes.user = [".copilot/skills/", ".copilot/agents/", ".copilot/hooks/", ".agentbundle/"]
+# RFC-0052: skills route to the shared `.agents/skills/` home; agents + hooks
+# stay native under `.github/` (ADR-0040 moves only the skill primitive).
+allowed-prefixes.repo = [".agents/skills/", ".github/skills/", ".github/agents/", ".github/hooks/"]
+# User-scope home is `~/.copilot/` for agents/hooks (the prefix the install
+# rewrite produces) and `~/.agents/skills/` for skills (scope-agnostic, no
+# rewrite). `.agentbundle/` carries the install state file
+# (`~/.agentbundle/state.toml`), same as every other user-scope-capable adapter.
+allowed-prefixes.user = [".agents/skills/", ".copilot/skills/", ".copilot/agents/", ".copilot/hooks/", ".agentbundle/"]
 
 # ---------------------------------------------------------------------------
 # Codex adapter — 5 projections (one per primitive)
@@ -596,7 +617,10 @@ allowed-prefixes.user = [".agents/skills/", ".codex/", ".agentbundle/"]
 [[adapter.cursor.projection]]
 primitive = "skill"
 mode = "direct-directory"
-target-path = ".cursor/skills/"
+# RFC-0052 / ADR-0040: cohort skill home. Cursor reads `.agents/skills/` and
+# `~/.agents/skills/` alongside `.cursor/skills/`; route skills there to share
+# one co-owned copy across the cohort.
+target-path = ".agents/skills/"
 on-conflict = "prompt-then-preserve"
 
 [[adapter.cursor.projection]]
@@ -650,8 +674,10 @@ mode = "dropped"
 [adapter.cursor.scope]
 repo = "."
 user = "~"
-allowed-prefixes.repo = [".cursor/", ".agentbundle/"]
-allowed-prefixes.user = [".cursor/", ".agentbundle/"]
+# RFC-0052: skills route to the shared `.agents/skills/` home (both scopes);
+# agents/hooks stay under `.cursor/` (ADR-0040 moves only the skill primitive).
+allowed-prefixes.repo = [".agents/skills/", ".cursor/", ".agentbundle/"]
+allowed-prefixes.user = [".agents/skills/", ".cursor/", ".agentbundle/"]
 
 # ---------------------------------------------------------------------------
 # Gemini adapter — full-parity native adapter (RFC-0027 / ADR-0016 /
@@ -685,7 +711,10 @@ allowed-prefixes.user = [".cursor/", ".agentbundle/"]
 [[adapter.gemini.projection]]
 primitive = "skill"
 mode = "direct-directory"
-target-path = ".gemini/skills/"
+# RFC-0052 / ADR-0040: cohort skill home. Gemini CLI reads `.agents/skills/`
+# and `~/.agents/skills/`, and its docs now make the alias precedence-winning
+# over `.gemini/skills/`; route skills there to share one co-owned copy.
+target-path = ".agents/skills/"
 on-conflict = "prompt-then-preserve"
 
 [[adapter.gemini.projection]]
@@ -744,8 +773,10 @@ mode = "dropped"
 [adapter.gemini.scope]
 repo = "."
 user = "~"
-allowed-prefixes.repo = [".gemini/", ".agentbundle/"]
-allowed-prefixes.user = [".gemini/", ".agentbundle/"]
+# RFC-0052: skills route to the shared `.agents/skills/` home (both scopes);
+# agents/hooks stay under `.gemini/` (ADR-0040 moves only the skill primitive).
+allowed-prefixes.repo = [".agents/skills/", ".gemini/", ".agentbundle/"]
+allowed-prefixes.user = [".agents/skills/", ".gemini/", ".agentbundle/"]
 
 # ---------------------------------------------------------------------------
 # Frontmatter mappings — rewrite rules applied when projecting a primitive

agentbundle-0.9.0/agentbundle/_data/install-defaults.toml

@@ -0,0 +1,10 @@
+# Packaged install default — layer 4 of the catalogue-source resolution chain
+# (RFC-0046 / ADR-0036). When `agentbundle install`/`upgrade` is run with no
+# `catalogue` positional and layers 1–3 (explicit arg, user config, editable
+# detection) yield nothing, this source is used.
+#
+# Private-fork pattern: blank the `source` value below (or delete this file
+# entirely) to disable the packaged GitHub default — layers 1–3 still apply, so
+# an editable clone or a `config set source` still resolves.
+[defaults]
+source = "git+https://github.com/eugenelim/agent-ready-repo"

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/adapters/codex.py

@@ -72,7 +72,7 @@ def project_packs(pack_paths: list[Path], contract: dict, output_root: Path) ->
                 dir=str(agents_md.parent),
             )
             try:
-                with os.fdopen(fd, "w", encoding="utf-8") as handle:
+                with os.fdopen(fd, "w", encoding="utf-8", newline="\n") as handle:
                     handle.write(stripped)
                 os.replace(tmp_path, agents_md)
             except BaseException:

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/adapters/cursor.py

@@ -251,7 +251,7 @@ def _project_agent_as_md(
             out_fm["readonly"] = readonly
 
         output_text = _serialize_frontmatter_md(out_fm) + body
-        (target_dir / entry.name).write_text(output_text, encoding="utf-8")
+        (target_dir / entry.name).write_text(output_text, encoding="utf-8", newline="\n")
 
 
 def _derive_readonly(frontmatter: dict[str, Any]) -> bool | None:
@@ -357,7 +357,7 @@ def _project_hooks_json(source_dir: Path, output_root: Path, rule: dict) -> None
     target_path.parent.mkdir(parents=True, exist_ok=True)
     target_path.write_text(
         json.dumps(existing, indent=2, sort_keys=True) + "\n",
-        encoding="utf-8",
+        encoding="utf-8", newline="\n",
     )
 
 

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/adapters/gemini.py

@@ -220,7 +220,7 @@ def _project_agent_as_md(
         frontmatter, body = _split_frontmatter(entry.read_text(encoding="utf-8"))
         out_fm = _apply_mapping(frontmatter, mapping, entry.stem)
         output_text = _serialize_frontmatter_md(out_fm) + body
-        (target_dir / entry.name).write_text(output_text, encoding="utf-8")
+        (target_dir / entry.name).write_text(output_text, encoding="utf-8", newline="\n")
 
 
 def _apply_mapping(
@@ -386,7 +386,7 @@ def _project_settings_json(
     target_path.parent.mkdir(parents=True, exist_ok=True)
     target_path.write_text(
         json.dumps(existing, indent=2, sort_keys=True) + "\n",
-        encoding="utf-8",
+        encoding="utf-8", newline="\n",
     )
 
 

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/adapters/kiro.py

@@ -297,7 +297,7 @@ def _project_agent_as_json(
         destination = target_dir / (entry.stem + ".json")
         destination.write_text(
             json.dumps(agent_json, indent=2, sort_keys=False) + "\n",
-            encoding="utf-8",
+            encoding="utf-8", newline="\n",
         )
 
 

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/adapters/kiro_ide.py

@@ -255,7 +255,7 @@ def _project_agent_as_md(
 
         output_text = _serialize_frontmatter_md(rewritten) + body
         destination = target_dir / entry.name  # preserves .md extension
-        destination.write_text(output_text, encoding="utf-8")
+        destination.write_text(output_text, encoding="utf-8", newline="\n")
 
 
 def _serialize_frontmatter_md(fields: dict[str, Any]) -> str:

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/main.py

@@ -498,7 +498,7 @@ def _run_per_pack_single(
         )
         destination.write_text(
             json.dumps(derived, indent=2, sort_keys=False) + "\n",
-            encoding="utf-8",
+            encoding="utf-8", newline="\n",
         )
         # Defence-in-depth: re-validate the written file against the schema
         # to catch any serialise/parse divergence introduced by json.dumps.
@@ -547,7 +547,7 @@ def _run_per_pack_apm(recipe: Recipe, packs: list[Pack], output_dir: Path) -> di
         pack_metadata = tomllib.loads((pack.path / "pack.toml").read_text(encoding="utf-8"))
         (per_pack_output / "apm.yml").write_text(
             _render_apm_yml(pack_metadata.get("pack", {})),
-            encoding="utf-8",
+            encoding="utf-8", newline="\n",
         )
         apm_source = pack.path / ".apm"
         if apm_source.exists():
@@ -568,7 +568,7 @@ def _run_per_pack_apm(recipe: Recipe, packs: list[Pack], output_dir: Path) -> di
         (hooks_dir / "install-marker.py").write_bytes(writer_bytes)
         (hooks_dir / "install-marker.json").write_text(
             json.dumps(_APM_INSTALL_MARKER_HOOK_JSON, indent=2) + "\n",
-            encoding="utf-8",
+            encoding="utf-8", newline="\n",
         )
 
         # Project pack.toml verbatim. The writer reads it for
@@ -630,7 +630,7 @@ def _run_aggregate(recipe: Recipe, output_dir: Path) -> dict:
     output_path.parent.mkdir(parents=True, exist_ok=True)
     output_path.write_text(
         json.dumps({"plugins": entries}, indent=2, sort_keys=True) + "\n",
-        encoding="utf-8",
+        encoding="utf-8", newline="\n",
     )
     return {"recipe": recipe.name, "type": recipe.type, "entries": len(entries)}
 

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/projections/codex_agent_toml.py

@@ -331,4 +331,4 @@ def project_codex_agent_toml(
         )
         toml_lines = _emit_fields(rewritten, body)
         destination = target_dir / (entry.stem + ".toml")
-        destination.write_text("\n".join(toml_lines) + "\n", encoding="utf-8")
+        destination.write_text("\n".join(toml_lines) + "\n", encoding="utf-8", newline="\n")

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/projections/copilot_agent_md.py

@@ -208,4 +208,4 @@ def project_copilot_agent_md(
             _validate_tools(frontmatter["tools"])
             emitted["tools"] = frontmatter["tools"]
         destination = target_dir / (entry.stem + ".agent.md")
-        destination.write_text(_emit(emitted, body), encoding="utf-8")
+        destination.write_text(_emit(emitted, body), encoding="utf-8", newline="\n")

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/projections/copilot_hooks_json.py

@@ -138,5 +138,5 @@ def project_copilot_hooks_json(
         destination = target_dir / (entry.stem + ".json")
         destination.write_text(
             json.dumps(document, indent=2, sort_keys=False) + "\n",
-            encoding="utf-8",
+            encoding="utf-8", newline="\n",
         )

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/projections/gemini_command_toml.py

@@ -227,4 +227,4 @@ def project_gemini_command_toml(
 
         destination = target_root / relative.with_suffix(".toml")
         destination.parent.mkdir(parents=True, exist_ok=True)
-        destination.write_text("\n".join(lines) + "\n", encoding="utf-8")
+        destination.write_text("\n".join(lines) + "\n", encoding="utf-8", newline="\n")

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/projections/kiro_ide_hook.py

@@ -191,7 +191,7 @@ def project(
         # POSIX-friendliness.
         target_path.write_text(
             json.dumps(body, indent=2, sort_keys=False) + "\n",
-            encoding="utf-8",
+            encoding="utf-8", newline="\n",
         )
 
 

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/projections/merge_into_agent_json.py

@@ -243,7 +243,7 @@ def _atomic_write(target_path: Path, data: dict) -> None:
     serialised = json.dumps(data, indent=2, sort_keys=False) + "\n"
     with tempfile.NamedTemporaryFile(
         mode="w",
-        encoding="utf-8",
+        encoding="utf-8", newline="\n",
         dir=str(target_path.parent),
         prefix=target_path.name + ".",
         suffix=".tmp",

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/projections/merge_json.py

@@ -54,5 +54,5 @@ def project_merge_json(source_dir: Path, output_root: Path, rule: dict) -> None:
     target_path.parent.mkdir(parents=True, exist_ok=True)
     target_path.write_text(
         json.dumps(existing, indent=2, sort_keys=True) + "\n",
-        encoding="utf-8",
+        encoding="utf-8", newline="\n",
     )

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/projections/user_merge_json.py

@@ -296,7 +296,7 @@ def _atomic_write(target_path: Path, data: dict) -> None:
     serialised = json.dumps(data, indent=2, sort_keys=False) + "\n"
     with tempfile.NamedTemporaryFile(
         mode="w",
-        encoding="utf-8",
+        encoding="utf-8", newline="\n",
         dir=str(target_path.parent),
         prefix=target_path.name + ".",
         suffix=".tmp",

{agentbundle-0.7.0 → agentbundle-0.9.0}/agentbundle/build/self_host.py

@@ -24,7 +24,9 @@ consumer.
 Self-host scope (see docs/specs/self-hosting/spec.md § Phased rollout):
 the `SELF_HOST_ADAPTERS` allow-list runs `claude-code` and `codex`.
 Kiro and Copilot stay distribution-only so self-host does not project
-`.kiro/` or `.github/instructions/`.
+`.kiro/` or `.github/instructions/`. Both `SELF_HOST_ADAPTERS` and
+`SELF_HOST_PACKS` are sourced from `recipes/self-host.toml` (see the
+`_DEFAULT_*` block below); the values named here are the current defaults.
 """
 
 from __future__ import annotations
@@ -79,27 +81,76 @@ TARGET_PATHS = (
     Path("AGENTS.md"),
 )
 
-# Self-host allow-list (see self-hosting spec § Phased rollout).
-# Kiro and Copilot remain in the contract for distribution builds but
-# are excluded from the self-host runner.
-SELF_HOST_ADAPTERS: tuple[str, ...] = ("claude-code", "codex")
-
-# Self-host *pack* allow-list. This repo is the catalogue's home, not
-# an adopter — `make build-self` should only project the in-house
-# packs into the working tree. User-scope-default packs (architect,
-# atlassian, contracts, converters, credential-brokers, figma) are
-# advertised via `marketplace.json` but their primitives don't belong
-# in this repo's `.claude/skills/` (or future `.kiro/skills/`) tree.
-# `monorepo-extras` is repo-only by metadata but the bundle is not a
-# canonical monorepo consumer of `new-package`, so it's left out too.
-# `_aggregate_marketplace` intentionally ignores this filter — the
-# catalogue advertises every pack.
-SELF_HOST_PACKS: tuple[str, ...] = (
+# Built-in fallbacks for the self-host pack / adapter allow-lists. The
+# authoritative values live in `recipes/self-host.toml` (read at import below);
+# these are used only when that recipe is missing a key or can't be read, so
+# module import stays total. Kiro and Copilot remain in the contract for
+# distribution builds but are excluded from the self-host runner. This repo is
+# the catalogue's home, not an adopter, so `make build-self` only projects the
+# in-house packs; `_aggregate_marketplace` intentionally ignores the pack
+# filter — the catalogue advertises every pack. See the recipe for the full
+# rationale behind the pack selection.
+_DEFAULT_SELF_HOST_ADAPTERS: tuple[str, ...] = ("claude-code", "codex")
+_DEFAULT_SELF_HOST_PACKS: tuple[str, ...] = (
     "core",
     "governance-extras",
     "user-guide-diataxis",
 )
 
+_SELF_HOST_RECIPE = "self-host"
+
+
+def _read_recipe_text(name: str) -> str | None:
+    """Return the text of `recipes/<name>.toml`, or None if unreadable.
+
+    Mirrors `build.main`'s recipe resolution: filesystem first (dev / editable
+    install), then `importlib.resources` (zipapp, where the package lives inside
+    a `.pyz` archive that `Path.exists()` cannot traverse).
+    """
+    recipe_path = Path(__file__).resolve().parent / "recipes" / f"{name}.toml"
+    if recipe_path.exists():
+        return recipe_path.read_text(encoding="utf-8")
+    try:
+        from importlib.resources import files
+
+        resource = files("agentbundle.build").joinpath(f"recipes/{name}.toml")
+        if resource.is_file():
+            return resource.read_text(encoding="utf-8")
+    except (FileNotFoundError, ModuleNotFoundError):
+        pass
+    return None
+
+
+def _extract_self_host_lists(
+    recipe: dict,
+) -> tuple[tuple[str, ...], tuple[str, ...]]:
+    """Pull `(packs, adapters)` from a parsed self-host recipe, substituting the
+    built-in defaults for any list that is absent or empty."""
+    body = recipe.get("recipe", {})
+    packs = tuple(body.get("packs", {}).get("include", ())) or _DEFAULT_SELF_HOST_PACKS
+    adapters = (
+        tuple(body.get("adapters", {}).get("targets", ()))
+        or _DEFAULT_SELF_HOST_ADAPTERS
+    )
+    return packs, adapters
+
+
+def _load_self_host_lists() -> tuple[tuple[str, ...], tuple[str, ...]]:
+    """Read the self-host allow-lists from the recipe. Total: any read or parse
+    failure falls back to the built-in defaults so module import never raises."""
+    try:
+        text = _read_recipe_text(_SELF_HOST_RECIPE)
+        if text is None:
+            return _DEFAULT_SELF_HOST_PACKS, _DEFAULT_SELF_HOST_ADAPTERS
+        return _extract_self_host_lists(tomllib.loads(text))
+    except Exception:
+        # Unreadable (non-UTF-8 / permission / IO) or malformed recipe — fall
+        # back so module import is total (AC3).
+        return _DEFAULT_SELF_HOST_PACKS, _DEFAULT_SELF_HOST_ADAPTERS
+
+
+SELF_HOST_PACKS, SELF_HOST_ADAPTERS = _load_self_host_lists()
+
 
 def _filter_self_host_packs(pack_paths: list[Path]) -> list[Path]:
     """Return the subset of *pack_paths* whose directory name is in
@@ -195,7 +246,7 @@ def resolve_markers(
             text,
         )
         if replaced != text:
-            path.write_text(replaced, encoding="utf-8")
+            path.write_text(replaced, encoding="utf-8", newline="\n")
             modified += 1
     return modified
 
@@ -270,7 +321,7 @@ def _compose_agents_md(
     body = body_path.read_text(encoding="utf-8").replace("\r\n", "\n")
     if body and not body.endswith("\n"):
         body += "\n"
-    target_path.write_text(body, encoding="utf-8")
+    target_path.write_text(body, encoding="utf-8", newline="\n")
 
     if footer_path.exists():
         text = target_path.read_text(encoding="utf-8")
@@ -279,7 +330,7 @@ def _compose_agents_md(
             text += "\n"
         if footer and not footer.endswith("\n"):
             footer += "\n"
-        target_path.write_text(text + footer, encoding="utf-8")
+        target_path.write_text(text + footer, encoding="utf-8", newline="\n")
     return target_path
 
 
@@ -329,6 +380,7 @@ EXCLUDED_PATTERNS: tuple[str, ...] = (
     "README.md",  # root-level; nested README.md not excluded
     "LICENSE-*",
     ".gitignore",
+    ".gitattributes",
     ".github/**",
     "AGENTS.local.md",
     "AGENTS.md",  # root-level; nested AGENTS.md not excluded
@@ -535,7 +587,7 @@ def _aggregate_marketplace(
     }
     target.write_text(
         json.dumps(payload, indent=2, sort_keys=True) + "\n",
-        encoding="utf-8",
+        encoding="utf-8", newline="\n",
     )
     return target
 
@@ -1463,10 +1515,42 @@ def run_build_check_drift_gates(
     return 0
 
 
+def _refuse_fixture_packs_dir(packs_dir: Path, *, dry_run: bool) -> int | None:
+    """Refuse a real-write self-host whose `packs_dir` points into
+    `tests/fixtures/` (which would overwrite the working tree with fixture
+    data), unless `ALLOW_FIXTURE_PACKS` is set.
+
+    This is the cross-platform home of the guard that used to live only in the
+    Makefile `build-self` recipe — so the make-free entry
+    `python -m agentbundle.build self` (the only way to run build-self on
+    Windows) is protected too. Returns a non-zero exit code to refuse, or
+    `None` to proceed. Dry-run writes to a shadow temp dir, so it is never
+    guarded (matching the `run_self_host` dirty-tree check). `as_posix()`
+    normalises separators so the match is Windows-safe.
+    """
+    if dry_run or os.environ.get("ALLOW_FIXTURE_PACKS"):
+        return None
+    # Trailing slash mirrors the historical Makefile glob `*tests/fixtures/*`
+    # exactly — so a sibling like `my-tests/fixtures-backup/` doesn't over-match.
+    if "tests/fixtures/" in packs_dir.as_posix():
+        print(
+            "self-host: refusing — --packs-dir points into tests/fixtures/; "
+            "this would overwrite your working tree with fixture data. Set "
+            "ALLOW_FIXTURE_PACKS=1 to override, or use --packs-dir packs.",
+            file=sys.stderr,
+        )
+        return 2
+    return None
+
+
 def cmd_self(args) -> int:
+    packs_dir = Path(args.packs_dir).resolve()
+    refusal = _refuse_fixture_packs_dir(packs_dir, dry_run=args.dry_run)
+    if refusal is not None:
+        return refusal
     return run_self_host(
         working_tree=Path(args.output_dir).resolve(),
-        packs_dir=Path(args.packs_dir).resolve(),
+        packs_dir=packs_dir,
         dry_run=args.dry_run,
         force=args.force,
         no_symlink=getattr(args, "no_symlink", False),