@harness-mix/cli 0.1.4 → 0.1.6

package/src/main/adapters/claude.js

@@ -20,7 +20,7 @@ const CLAUDE_PERMISSION_MODES = [
   { id: "acceptEdits", label: "接受编辑", description: "允许文件编辑；其他受保护操作前询问" },
   { id: "auto", label: "自动模式", description: "由 Claude 判断权限请求" },
   { id: "dontAsk", label: "免询问", description: "跳过权限询问（非绕过检查）" },
-  { id: "bypassPermissions", label: "绕过权限", description: "跳过全部权限检查，谨慎使用", dangerous: true },
+  { id: "bypassPermissions", label: "绕过权限 (YOLO)", description: "跳过全部权限检查（YOLO 模式），自动放行工具执行", dangerous: true },
 ];
 
 function summarizeInput(input) {
@@ -244,14 +244,25 @@ async function loadSdk() {
   return import("@anthropic-ai/claude-agent-sdk");
 }
 
+function normalizeClaudePermissionMode(mode) {
+  if (mode === 'yolo' || mode === 'skip' || mode === 'dangerously-skip-permissions') {
+    return 'bypassPermissions';
+  }
+  return mode;
+}
+
 /** 建立一个常驻 SDK 会话（open 与 fork 共用）：构造 query、启动事件泵 */
-function spawnSession(sdk, { cwd, resumeId, newSessionId, permissionMode, modelId, effort, emit, collaboration, onPlanLimit }) {
+function spawnSession(sdk, { cwd, resumeId, newSessionId, permissionMode, modelId, effort, emit, collaboration, managedMcp = [], onPlanLimit, isWorker = false }) {
   const input = new MessageQueue();
+  const normalizedPermissionMode = normalizeClaudePermissionMode(permissionMode) || (isWorker ? 'bypassPermissions' : undefined);
+  const isBypass = normalizedPermissionMode === 'bypassPermissions' || isWorker;
+
   const session = {
     nativeSessionId: resumeId || newSessionId,
     cwd,
     collaborationEnabled: !!collaboration,
-    permissionMode,
+    permissionMode: normalizedPermissionMode,
+    isWorker,
     model: undefined,
     input,
     query: undefined,
@@ -265,14 +276,22 @@ function spawnSession(sdk, { cwd, resumeId, newSessionId, permissionMode, modelI
     prompt: input,
     options: {
       cwd,
-      ...(collaboration ? { mcpServers: { 'harness-mix': collaboration } } : {}),
+      mcpServers: require('./managed-mcp').namedServers(managedMcp, collaboration),
+      settingSources: ['user', 'project', 'local'],
       ...(resumeId ? { resume: resumeId } : {}),
       ...(!resumeId && newSessionId ? { sessionId: newSessionId } : {}),
       ...(effort ? { effort } : {}),
-      ...(permissionMode ? { permissionMode } : {}),
+      ...(normalizedPermissionMode ? { permissionMode: normalizedPermissionMode } : {}),
+      ...(isBypass ? { allowDangerouslySkipPermissions: true } : {}),
       ...(modelId ? { model: modelId } : {}),
       ...(process.env.HARNESS_MIX_CLAUDE_EXECUTABLE ? { pathToClaudeCodeExecutable: process.env.HARNESS_MIX_CLAUDE_EXECUTABLE } : {}),
       canUseTool: (toolName, toolInput, { signal, suggestions }) => {
+        if (toolName !== 'AskUserQuestion') {
+          const currentMode = normalizeClaudePermissionMode(session.permissionMode);
+          if (currentMode === 'bypassPermissions' || session.isWorker) {
+            return { behavior: 'allow', updatedInput: toolInput };
+          }
+        }
         const requestId = randomUUID();
         emit(projectApproval(requestId, toolName, toolInput, suggestions));
         return new Promise((resolve) => {
@@ -373,17 +392,26 @@ function create() {
         : { available: true, detail: "Agent SDK 就绪（内置原生 CLI；未检测到独立 claude 命令）" };
     },
 
-    async open({ thread, emit, collaboration }) {
+    async inspectIntegrations(session) {
+      const rows = await session.query.mcpServerStatus();
+      return rows.map(row => ({ name: row.name, status: row.status, tools: (row.tools || []).map(t => t.name) }));
+    },
+    async open({ thread, emit, collaboration, managedMcp }) {
       const sdk = await loadSdk();
+      const isWorker = Boolean(thread.parentThreadId);
+      const rawMode = thread.options?.permissionMode;
+      const permissionMode = normalizeClaudePermissionMode(rawMode) || (isWorker ? 'bypassPermissions' : undefined);
       return spawnSession(sdk, {
         cwd: thread.cwd,
         resumeId: thread.restore ? thread.nativeSessionId : undefined,
         newSessionId: thread.restore ? undefined : thread.nativeSessionId,
         effort: thread.options?.thinking,
-        permissionMode: thread.options?.permissionMode,
+        permissionMode,
+        isWorker,
         modelId: thread.options?.model?.id,
         emit,
         collaboration,
+        managedMcp,
         onPlanLimit,
       });
     },
@@ -406,11 +434,19 @@ function create() {
     },
 
     async cancel(session) {
+      for (const pending of session.pendingApprovals?.values() ?? []) {
+        pending.resolve({ behavior: "deny", message: "用户取消了请求", interrupt: true });
+      }
+      session.pendingApprovals?.clear();
       // 原生优雅中断；超时后由 Host 走 close 兜底
       await Promise.race([
         session.query?.interrupt().catch(() => {}),
-        new Promise((r) => setTimeout(r, 5_000)),
+        new Promise((r) => setTimeout(r, 2_000)),
       ]);
+      if (session.state.turn) {
+        session.state.turn.resolve();
+        session.state.turn = null;
+      }
     },
 
     async listCommands(session) {
@@ -446,10 +482,12 @@ function create() {
       const copied = await getSessionMessages(result.sessionId, { dir: source.cwd });
       const checkpointMap = Object.fromEntries(copied.map((entry, index) => [history[index].uuid, entry.uuid]));
       // Fork 出的新原生会话立即拉起常驻进程（resume 到新 sessionId），与 open() 同路径
+      const isWorker = Boolean(source.parentThreadId);
       const session = spawnSession(sdk, {
         cwd: source.cwd,
         resumeId: result.sessionId,
         permissionMode: source.options?.permissionMode,
+        isWorker,
         emit,
         onPlanLimit,
       });
@@ -470,8 +508,9 @@ function create() {
       return session.model;
     },
     async setPermissionMode(session, mode) {
-      session.permissionMode = mode;
-      await session.query?.setPermissionMode(mode);
+      const normalized = normalizeClaudePermissionMode(mode);
+      session.permissionMode = normalized;
+      await session.query?.setPermissionMode(normalized);
     },
     async setThinkingLevel(session, level) {
       const models = await this.listModelsFor(session);
@@ -509,6 +548,7 @@ function create() {
   };
 }
 
+manifest.integrations = { mcp: true, skills: { global: ['.claude/skills'], project: ['.claude/skills'], overrides: { '.claude/skills': { env: 'CLAUDE_CONFIG_DIR', suffix: 'skills' } } } };
 module.exports = {
   manifest,
   create,

package/src/main/adapters/codebuddy.js

@@ -1,2 +1,3 @@
 const { nativeAcp } = require('./native-acp');
 module.exports = nativeAcp({ id: 'codebuddy', name: 'CodeBuddy', aliases: ['workbuddy', 'WorkBuddy'], args: ['--acp'] });
+module.exports.manifest.integrations.skills = { global: ['.codebuddy/skills'], project: ['.codebuddy/skills'] };

package/src/main/adapters/codex-app-server.js

@@ -1,6 +1,6 @@
 const { JsonlProcess, cliSpawn } = require('../host/jsonl');
 
-let shared;
+const shared = new Map();
 
 /**
  * A single native Codex app-server connection shared by every Codex thread.
@@ -8,16 +8,18 @@ let shared;
  * traffic to the Adapter session that registered the native thread id.
  */
 class CodexAppServer {
-  constructor(diagnostic) {
+  constructor(diagnostic, codexHome) {
     this.refs = 0;
     this.routes = new Map();
     this.notifications = new Set();
     this.diagnostics = new Set(diagnostic ? [diagnostic] : []);
     this.closed = false;
+    this.codexHome = codexHome ? require('node:path').resolve(codexHome) : null;
     // The Desktop-bundled CLI and the PATH CLI can be different versions.
     const executable = process.env.HARNESS_MIX_CODEX_EXECUTABLE || process.env.CODEXHOST_STOCK_CODEX_PATH;
     const { command, args } = executable ? { command: executable, args: ['app-server', '--listen', 'stdio://'] } : cliSpawn('codex', ['app-server', '--stdio']);
-    this.process = new JsonlProcess(command, args, {}, {
+    const env = { ...process.env, ...(this.codexHome ? { CODEX_HOME: this.codexHome } : {}) };
+    this.process = new JsonlProcess(command, args, { env }, {
       onEvent: (message) => this.#notification(message),
       onRequest: (message) => this.#request(message),
       onDiagnostic: (line) => this.#diagnostic(line),
@@ -36,16 +38,21 @@ class CodexAppServer {
     });
   }
 
-  static async acquire(diagnostic) {
-    if (!shared || shared.closed) shared = new CodexAppServer(diagnostic);
-    else if (diagnostic) shared.diagnostics.add(diagnostic);
-    shared.refs++;
+  static async acquire(diagnostic, codexHome) {
+    const key = codexHome ? require('node:path').resolve(codexHome).toLowerCase() : '<default>';
+    let server = shared.get(key);
+    if (!server || server.closed) {
+      server = new CodexAppServer(diagnostic, codexHome);
+      server.sharedKey = key;
+      shared.set(key, server);
+    } else if (diagnostic) server.diagnostics.add(diagnostic);
+    server.refs++;
     try {
-      await shared.ready;
-      return shared;
+      await server.ready;
+      return server;
     } catch (error) {
-      shared.refs--;
-      if (shared.refs === 0) shared.stop();
+      server.refs--;
+      if (server.refs === 0) server.stop();
       throw error;
     }
   }
@@ -78,7 +85,7 @@ class CodexAppServer {
     this.routes.clear();
     this.notifications.clear();
     this.process.stop();
-    if (shared === this) shared = undefined;
+    if (this.sharedKey && shared.get(this.sharedKey) === this) shared.delete(this.sharedKey);
   }
 
   #route(message) {
@@ -112,7 +119,7 @@ class CodexAppServer {
     this.closed = true;
     for (const route of this.routes.values()) route.onExit?.(error);
     this.routes.clear();
-    if (shared === this) shared = undefined;
+    if (this.sharedKey && shared.get(this.sharedKey) === this) shared.delete(this.sharedKey);
   }
 }
 

package/src/main/adapters/codex.js

@@ -356,10 +356,11 @@ function create() {
         : { available: true, detail: String(result.stdout).trim() };
     },
 
-    async open({ thread, emit, diagnostic, collaboration }) {
-      const host = await CodexAppServer.acquire(diagnostic);
+    async open({ thread, emit, diagnostic, collaboration, managedMcp = [] }) {
+      const host = await CodexAppServer.acquire(diagnostic, thread.options?.codexHome);
       try {
-        const options = { ...threadOptions(thread), ...(collaboration ? { config: { 'mcp_servers.harness-mix': collaboration } } : {}) };
+        const servers = require('./managed-mcp').namedServers(managedMcp, collaboration);
+        const options = { ...threadOptions(thread), ...(Object.keys(servers).length ? { config: Object.fromEntries(Object.entries(servers).map(([name, value]) => [`mcp_servers.${name}`, value])) } : {}) };
         const result = thread.restore
           ? await host.request('thread/resume', { threadId: thread.nativeSessionId, ...options })
           : await host.request('thread/start', options);
@@ -400,8 +401,19 @@ function create() {
     },
 
     async cancel(session) {
+      for (const pending of session.pendingApprovals?.values() ?? []) {
+        pending.resolve({ action: 'decline' });
+      }
+      session.pendingApprovals?.clear();
       if (!session.state.nativeTurnId) return;
-      await session.host.request('turn/interrupt', { threadId: session.nativeSessionId, turnId: session.state.nativeTurnId });
+      await Promise.race([
+        session.host.request('turn/interrupt', { threadId: session.nativeSessionId, turnId: session.state.nativeTurnId }).catch(() => {}),
+        new Promise((r) => setTimeout(r, 2_000)),
+      ]);
+      if (session.state.turn) {
+        session.state.turn.resolve();
+        session.state.turn = null;
+      }
     },
 
     async respond(session, requestId, response) {
@@ -521,7 +533,7 @@ function create() {
     async fork(source, { emit, diagnostic, message }) {
       const lastTurnId = message?.coreTurn?.nativeTurnRef?.turnId ?? message?.coreTurn?.nativeTurnRef?.checkpointId;
       if (message && !lastTurnId) throw new Error('这条回复缺少 Codex 原生 Turn ID，无法精确分支');
-      const host = await CodexAppServer.acquire(diagnostic);
+      const host = await CodexAppServer.acquire(diagnostic, source.options?.codexHome);
       try {
         const result = await host.request('thread/fork', {
           threadId: source.nativeSessionId,
@@ -556,4 +568,12 @@ function create() {
   };
 }
 
+// Global discovery: ~/.agents/skills is the recommended location; $CODEX_HOME/skills
+// (~/.codex/skills) is deprecated upstream but still loaded for backwards compatibility.
+// https://developers.openai.com/codex/skills
+manifest.integrations = { mcp: true, skills: {
+  global: ['.agents/skills', '.codex/skills'],
+  project: ['.agents/skills'],
+  overrides: { '.codex/skills': { env: 'CODEX_HOME', suffix: 'skills' } },
+} };
 module.exports = { manifest, create, projectNotification, queueRequest, usageView, modelView };

package/src/main/adapters/cursor.js

@@ -1,2 +1,6 @@
 const { nativeAcp } = require('./native-acp');
-module.exports = nativeAcp({ id: 'cursor-cli', name: 'Cursor', aliases: ['cursor', 'cursor-cli', 'cursorcli'], args: ['acp'] });
+module.exports = nativeAcp({ id: 'cursor-cli', name: 'Cursor', aliases: ['cursor', 'cursor-cli', 'cursorcli'], args: ['acp'] });
+module.exports.manifest.integrations.skills = {
+  global: ['.cursor/skills', '.agents/skills', '.claude/skills', '.codex/skills'],
+  project: ['.cursor/skills', '.agents/skills', '.claude/skills', '.codex/skills'],
+};

package/src/main/adapters/dsh.js

@@ -431,7 +431,7 @@ function create() {
   }).create();
   const openWeb = web.open.bind(web);
   web.open = async context => {
-    if (!context.collaboration) return openWeb(context);
+    if (!context.collaboration && !context.managedMcp?.length) return openWeb(context);
     const session = await acp.open(context);
     session.dshAcpLead = true;
     return session;
@@ -443,4 +443,12 @@ function create() {
   return web;
 }
 
+manifest.integrations = { mcp: true, skills: {
+  global: ['.dsh/skills', '.agents/skills'],
+  project: ['.dsh/skills', '.agents/skills'],
+  overrides: {
+    '.dsh/skills': { env: 'DSH_HOME', suffix: 'skills' },
+    '.agents/skills': { env: 'DSH_AGENTS_HOME', suffix: 'skills' },
+  },
+} };
 module.exports = { manifest, create, projectWireEvent, flattenCatalog };

package/src/main/adapters/grok.js

@@ -31,7 +31,7 @@ function grokAdapter() {
         return new Promise(resolve => execFile(cli.command, cli.args, { windowsHide: true, timeout: 10000 }, (error, out) => resolve({ available: !error, detail: error ? `${name} CLI 不可用` : out.trim() })));
       },
       async describe() { return { models: null, thinkingLevels: [], permissionModes: [] }; },
-      async open({ thread, emit, diagnostic = () => {}, collaboration }) {
+      async open({ thread, emit, diagnostic = () => {}, collaboration, managedMcp = [] }) {
         const cli = command(args);
         const session = { cwd: thread.cwd, nativeSessionId: null, collaborationEnabled: !!collaboration, state: { configOptions: [], models: null, modes: null, commands: [], usage: undefined, loading: true }, pendingApprovals: new Map(), tools: new Map(), emit };
         session.process = new JsonlProcess(cli.command, cli.args, { cwd: thread.cwd }, {
@@ -105,7 +105,7 @@ function grokAdapter() {
           session.state.agentCapabilities = init.agentCapabilities;
           session.state.commands = init._meta?.availableCommands || [];
           // L1 会话级注入：Grok 原生协议的 session/new 自带 mcpServers 槽（ACP 形态 stdio 定义）
-          const mcpServers = collaboration ? [{ name: 'harness-mix', command: collaboration.command, args: collaboration.args, env: Object.entries(collaboration.env).map(([envName, value]) => ({ name: envName, value })) }] : [];
+          const mcpServers = require('./managed-mcp').acpServers(managedMcp, collaboration);
           const result = await session.process.request(thread.restore ? 'session/load' : 'session/new', { cwd: thread.cwd, mcpServers, ...(thread.restore ? { sessionId: thread.nativeSessionId } : {}) });
           session.nativeSessionId = result.sessionId || thread.nativeSessionId;
           session.state.configOptions = result.configOptions || result._meta?.['x.ai/sessionConfig']?.options || [];
@@ -274,4 +274,8 @@ async function doGrokCompact(session, userContext, hooks) {
   });
   hooks?.emit?.({ kind: 'completed', finalAnswer: outcome !== 'cancelled' });
 }
-module.exports = { ...grokAdapter(), projectUsage, parseGrokCompactionUpdate, doGrokCompact };
+module.exports = { ...grokAdapter(), projectUsage, parseGrokCompactionUpdate, doGrokCompact };
+module.exports.manifest.integrations = { mcp: true, skills: {
+  global: ['.grok/skills', '.agents/skills', '.claude/skills'],
+  project: ['.grok/skills', '.claude/skills'],
+} };

package/src/main/adapters/hermes.js

@@ -22,3 +22,11 @@ module.exports = acpAdapter({
   usage: false,
   contextUsage: false,
 });
+// ~/.hermes/skills is Hermes' single source of truth (categories become subdirectories);
+// it has no documented project-scope skills directory. HERMES_HOME relocates the home.
+// https://hermes-agent.nousresearch.com/docs/user-guide/features/skills
+module.exports.manifest.integrations.skills = {
+  global: ['.hermes/skills'],
+  project: [],
+  overrides: { '.hermes/skills': { env: 'HERMES_HOME', suffix: 'skills' } },
+};

package/src/main/adapters/kiro.js

@@ -1,2 +1,3 @@
 const { nativeAcp } = require('./native-acp');
-module.exports = nativeAcp({ id: 'kiro-cli', name: 'Kiro', aliases: ['kiro', 'kiro-cli', 'kirocli'], args: ['acp', '--agent-engine', 'v3', '--auth-method', 'cli'] });
+module.exports = nativeAcp({ id: 'kiro-cli', name: 'Kiro', aliases: ['kiro', 'kiro-cli', 'kirocli'], args: ['acp', '--agent-engine', 'v3', '--auth-method', 'cli'] });
+module.exports.manifest.integrations.skills = { global: ['.kiro/skills'], project: ['.kiro/skills'] };

package/src/main/adapters/managed-mcp.js

@@ -0,0 +1,25 @@
+// Native sessions own connections, tool discovery, authentication and approvals.
+function nativeServers(managed = [], collaboration) {
+  return [...managed, ...(collaboration ? [{ name: 'harness-mix', ...collaboration }] : [])];
+}
+function acpServers(managed, collaboration) {
+  return nativeServers(managed, collaboration).map(s => {
+    if (s.url) {
+      return {
+        name: s.name,
+        url: s.url,
+        headers: Object.entries(s.http_headers || {}).map(([name, value]) => ({ name, value })),
+      };
+    }
+    return {
+      name: s.name,
+      command: s.command,
+      args: s.args || [],
+      env: Object.entries(s.env || {}).map(([name, value]) => ({ name, value })),
+    };
+  });
+}
+function namedServers(managed, collaboration) {
+  return Object.fromEntries(nativeServers(managed, collaboration).map(({ name, ...server }) => [name, server]));
+}
+module.exports = { nativeServers, acpServers, namedServers };

package/src/main/adapters/native-acp.js

@@ -237,13 +237,12 @@ function nativeAcp({ id, name, args, aliases = [], command = argv => nativeComma
       async describe() { return { models: null, thinkingLevels: [], permissionModes: [] }; },
       async describeFor(s) { return catalog(s); },
       async listModelsFor(s) { return catalog(s).models; },
-      async open({ thread, emit, diagnostic = () => {}, collaboration }) {
+      async open({ thread, emit, diagnostic = () => {}, collaboration, managedMcp = [] }) {
         const s = { vendor: id, cwd: thread.cwd, nativeSessionId: thread.restore ? thread.nativeSessionId : null,
           generation: 0, loading: true, active: false, closed: false, fault: null, emit, diagnostic,
           environment: thread.environment || {}, tools: new Map(), charges: new Map(), confirmed: {},
           state: { configOptions: [], models: null, modes: null, commands: [], usage: {} },
-          mcpServers: collaboration ? [{ name: 'harness-mix', command: collaboration.command, args: collaboration.args,
-            env: Object.entries(collaboration.env).map(([name, value]) => ({ name, value })) }] : [],
+          mcpServers: require('./managed-mcp').acpServers(managedMcp, collaboration),
           collaborationEnabled: !!collaboration,
         };
         s.interactions = new AcpInteractions(s, id);
@@ -430,6 +429,7 @@ function nativeAcp({ id, name, args, aliases = [], command = argv => nativeComma
     };
     return adapter;
   }
-  return { manifest, create };
+  manifest.integrations = { mcp: true };
+  return { manifest, create };
 }
 module.exports = { nativeAcp, catalog, project };

package/src/main/adapters/omp.js

@@ -10,3 +10,14 @@ module.exports = piFamily({
   packageHint: 'npm i -g @oh-my-pi/pi-coding-agent 或 https://omp.sh/install',
   aliases: ['omp', 'oh-my-pi'],
 });
+module.exports.manifest.integrations = {
+  mcp: false,
+  skills: {
+    global: ['.omp/agent/skills', '.agents/skills', '.pi/agent/skills'],
+    project: ['.omp/skills', '.agents/skills', '.pi/skills'],
+    overrides: {
+      '.omp/agent/skills': { env: 'OMP_CODING_AGENT_DIR', suffix: 'skills' },
+      '.pi/agent/skills': { env: 'PI_CODING_AGENT_DIR', suffix: 'skills' },
+    },
+  },
+};

package/src/main/adapters/openclaw.js

@@ -18,6 +18,12 @@ const manifest = {
   capabilities: { streaming: true, thinking: false, tools: true, approvals: true, questions: false, models: true, thinkingLevels: true, permissionModes: false, resume: true, fork: false, forkFromMessage: false, compaction: false, usage: true, contextUsage: true, attachments: true },
 };
 
+manifest.integrations = { mcp: false, skills: {
+  global: ['.openclaw/skills', '.agents/skills'],
+  project: ['skills', '.agents/skills'],
+  overrides: { '.openclaw/skills': { env: 'OPENCLAW_STATE_DIR', suffix: 'skills' } },
+} };
+
 const textOfContent = (result) => (result?.content ?? []).map((c) => (c?.type === "text" ? c.text : "")).filter(Boolean).join("\n");
 const stringifyArgs = (args) => {
   if (args == null) return undefined;

package/src/main/adapters/opencode.js

@@ -54,9 +54,14 @@ function create() {
       return new Promise(resolve => execFile(cli.command, cli.args, { windowsHide: true, timeout: 10000 }, (error, stdout) => resolve({ available: !error, detail: error ? 'OpenCode Server CLI unavailable' : `OpenCode ${stdout.trim()} · native HTTP/SSE` })));
     },
     async describe() { return { models: null, thinkingLevels: [], permissionModes: [] }; },
-    async open({ thread, emit, collaboration }) {
+    async inspectIntegrations(session) {
+      const rows = await session.host.request('GET', '/mcp', undefined, 5000);
+      return Object.entries(rows).map(([name, value]) => ({ name, status: value.status, tools: [] }));
+    },
+    async open({ thread, emit, collaboration, managedMcp = [] }) {
       // L2 注入：OPENCODE_CONFIG_CONTENT 是最高优先级的运行时内联配置，合并而非覆盖用户配置，会话结束即失效，不污染任何配置文件
-      const overlay = collaboration ? { env: { OPENCODE_CONFIG_CONTENT: JSON.stringify({ mcp: { 'harness-mix': { type: 'local', command: [collaboration.command, ...collaboration.args], environment: collaboration.env } } }) } } : undefined;
+      const servers = require('./managed-mcp').nativeServers(managedMcp, collaboration);
+      const overlay = servers.length ? { env: { OPENCODE_CONFIG_CONTENT: JSON.stringify({ mcp: Object.fromEntries(servers.map(s => [s.name, { type: 'local', command: [s.command, ...s.args], environment: s.env }])) }) } } : undefined;
       const host = await new OpenCodeServer(thread.cwd, overlay).start();
       try {
         // Read the model catalog, never provider credentials or auth files.
@@ -175,4 +180,9 @@ function create() {
   };
   return adapter;
 }
-module.exports = { manifest, create, projectEvent, projectPart, describeSession };
+manifest.integrations = { mcp: true, skills: {
+  global: ['.config/opencode/skills', '.claude/skills', '.agents/skills'],
+  project: ['.opencode/skills', '.claude/skills', '.agents/skills'],
+  overrides: { '.config/opencode/skills': { env: 'XDG_CONFIG_HOME', suffix: 'opencode/skills' } },
+} };
+module.exports = { manifest, create, projectEvent, projectPart, describeSession };

package/src/main/adapters/pi.js

@@ -8,3 +8,8 @@ module.exports = piFamily({
   bin: 'pi',
   packageHint: 'npm i -g @earendil-works/pi-coding-agent',
 });
+module.exports.manifest.integrations = { mcp: false, skills: {
+  global: ['.pi/agent/skills', '.agents/skills'],
+  project: ['.pi/skills', '.agents/skills'],
+  overrides: { '.pi/agent/skills': { env: 'PI_CODING_AGENT_DIR', suffix: 'skills' } },
+} };

package/src/main/adapters/qoder.js

@@ -5,3 +5,4 @@ module.exports = nativeAcp({
   id: 'qoder', name: 'Qoder', args: ['--acp'],
   capabilities: { questions: false, thinkingLevels: false, usage: true, contextUsage: true, attachments: true, fork: false, compaction: false },
 });
+module.exports.manifest.integrations.skills = { global: ['.qoder/skills'], project: ['.qoder/skills'] };

package/src/main/adapters/trae.js

@@ -5,3 +5,7 @@ module.exports = nativeAcp({
   id: 'trae', name: 'Trae', args: [],
   capabilities: { questions: false, thinkingLevels: false, usage: true, contextUsage: true, attachments: false, fork: false, compaction: false },
 });
+// Trae IDE uses .trae/skills; TraeCode CLI uses .traecli/skills. Both are registered so the
+// CLI-backed (ACP) session and the IDE share one managed root set.
+// https://docs.trae.cn/cli_skills
+module.exports.manifest.integrations.skills = { global: ['.trae/skills', '.traecli/skills'], project: ['.trae/skills', '.traecli/skills', '.agents/skills'] };

package/src/main/adapters/zcode.js

@@ -5,3 +5,6 @@ module.exports = nativeAcp({
   id: 'zcode', name: 'ZCode', args: [],
   capabilities: { questions: false, thinkingLevels: false, usage: true, contextUsage: true, attachments: false, fork: false, compaction: false },
 });
+// ZCode scans, per scope: .zcode/skills then .agents/skills (deeper workspace levels win).
+// https://zcode.z.ai/en/docs/skill
+module.exports.manifest.integrations.skills = { global: ['.zcode/skills', '.agents/skills'], project: ['.zcode/skills', '.agents/skills'] };

package/src/main/harness-adapter/manifest.js

@@ -1,4 +1,5 @@
-const { CAPABILITY_GROUPS, createCapabilities } = require('../shared-contracts');
+const path = require('node:path');
+const { CAPABILITY_GROUPS, createCapabilities } = require('../shared-contracts');
 
 // Adapter Manifest 校验与能力归一化（§22）。
 // 现有 Adapter 使用扁平 capability flags；Core/UI 消费分组结构（§22）。
@@ -16,7 +17,21 @@ function validateManifest(manifest) {
   if (!manifest || typeof manifest !== 'object') return ['manifest must be an object'];
   if (typeof manifest.id !== 'string' || !manifest.id) errors.push('manifest.id is required');
   if (typeof manifest.name !== 'string' || !manifest.name) errors.push('manifest.name is required');
-  if (manifest.icon != null && typeof manifest.icon !== 'string') errors.push('manifest.icon must be a string');
+  if (manifest.icon != null && typeof manifest.icon !== 'string') errors.push('manifest.icon must be a string');
+  if (manifest.integrations != null) {
+    const integrations = manifest.integrations;
+    if (!integrations || typeof integrations !== 'object' || Array.isArray(integrations)) errors.push('manifest.integrations must be an object');
+    else {
+      if (typeof integrations.mcp !== 'boolean') errors.push('manifest.integrations.mcp must be a boolean');
+      if (integrations.skills != null) {
+        const skills = integrations.skills;
+        if (!skills || typeof skills !== 'object' || Array.isArray(skills)) errors.push('manifest.integrations.skills must be an object');
+        else for (const scope of ['global', 'project']) {
+          if (!Array.isArray(skills[scope]) || skills[scope].some(value => typeof value !== 'string' || path.isAbsolute(value) || value.includes('..'))) errors.push(`manifest.integrations.skills.${scope} must contain safe relative paths`);
+        }
+      }
+    }
+  }
   const caps = manifest.capabilities;
   if (!caps || typeof caps !== 'object' || Array.isArray(caps)) {
     errors.push('manifest.capabilities must be an object');