Agent Package Manager

Procedures

Step 1: Assess the repository and the requested APM outcome

1. Inspect the repository root for apm.yml, apm.lock.yaml, .github/, .claude/, .cursor/, .opencode/, and apm_modules/.
2. Execute apm --version and apm config to confirm the installed CLI and current configuration.
3. If apm.yml exists, read references/manifest-and-lockfile.md before changing dependencies, scripts, or compilation settings.
4. If the request is about package installation, updates, pruning, or removal, read references/command-workflows.md before executing APM commands.
5. If no apm.yml exists and the user wants APM in the repository, initialize the project with apm init or apm init --yes.
6. If the repository already uses another agent configuration flow and the user did not ask to migrate it, limit the change to the requested APM scope instead of replacing the existing setup.

Step 2: Shape or repair the manifest deliberately

1. Read assets/apm.yml.template when the repository needs a fresh or repaired manifest structure.
2. Keep name and version present at the top level; treat them as required contract fields.
3. Add APM package dependencies under dependencies.apm and MCP servers under dependencies.mcp.
4. Prefer canonical dependency forms in apm.yml after installation. Default to the repository shorthand owner/repo/path for GitHub-hosted skills and packages, for example webmaxru/agent-skills/skills/webmcp, and preserve explicit path, ref, and alias only when they are needed.
5. Use pinned refs for shared team packages when reproducibility matters more than automatic drift.
6. Keep local path dependencies only for active local development. Replace them with remote references before recommending bundle distribution.