Activation, rollback, and uninstall

Activate

node scripts/install-plugin-generation.js
node scripts/install-plugin-generation.js --verify

Installation stages with private permissions, verifies the manifest signature against the plugin trust store, validates all files, the shared skill index, and 14 signed projections, updates previous, and atomically switches current. A failed verification leaves the active generation unchanged.

Roll back

node scripts/install-plugin-generation.js --rollback
node scripts/install-plugin-generation.js --verify

Rollback verifies previous, restores verified copy targets and the index from that generation, revalidates every signed receipt and stable dispatcher, and then swaps current and previous.

Uninstall

node scripts/install-plugin-generation.js --uninstall

Uninstall removes only paths carrying Prometheus ownership/generation evidence. User-created collisions and unrelated skill directories remain untouched. Generation payloads, trust policy, signatures, receipts, and recovery records should be archived according to release policy before deliberate removal.

Stale-cache removal

After activation, search configured hook paths, target symlinks, copy receipts, stable index links, and service definitions for obsolete version directories. Remove only certified Prometheus-owned stale projections. Keep immutable release history and the active/previous generations.