@shadowob/cloud 1.1.6-dev.311

package/images/openclaw-runner/warm-runtime-deps.mjs

@@ -0,0 +1,95 @@
+import { existsSync, mkdirSync, readdirSync, readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { pathToFileURL } from 'node:url'
+
+const packageRoot = process.env.OPENCLAW_PACKAGE_ROOT || '/app/node_modules/openclaw'
+const configPath = process.argv[2] || process.env.OPENCLAW_CONFIG_PATH || ''
+
+function loadConfig() {
+  if (configPath && existsSync(configPath)) {
+    return JSON.parse(readFileSync(configPath, 'utf-8'))
+  }
+
+  return {
+    plugins: {
+      enabled: true,
+      load: { paths: ['/app/extensions/shadowob'] },
+      entries: {
+        'openclaw-shadowob': { enabled: true },
+        bonjour: { enabled: false },
+      },
+    },
+    channels: {
+      shadowob: { enabled: true },
+    },
+  }
+}
+
+function findRuntimeDepsChunk() {
+  const distDir = join(packageRoot, 'dist')
+  const chunk = readdirSync(distDir).find(
+    (name) => name.startsWith('bundled-runtime-deps-') && name.endsWith('.js'),
+  )
+  if (!chunk) {
+    return null
+  }
+  return join(distDir, chunk)
+}
+
+async function main() {
+  const stageDir = process.env.OPENCLAW_PLUGIN_STAGE_DIR
+  if (stageDir) {
+    mkdirSync(stageDir, { recursive: true })
+  }
+
+  const runtimeDepsChunk = findRuntimeDepsChunk()
+  if (!runtimeDepsChunk) {
+    console.warn(
+      `[runtime-deps] OpenClaw bundled runtime deps chunk not found in ${join(
+        packageRoot,
+        'dist',
+      )}; skipping build-time prewarm`,
+    )
+    return
+  }
+
+  const runtimeDeps = await import(pathToFileURL(runtimeDepsChunk).href)
+  const config = loadConfig()
+  const scan = runtimeDeps.c({
+    packageRoot,
+    config,
+    includeConfiguredChannels: true,
+    env: process.env,
+  })
+
+  if (scan.conflicts.length > 0) {
+    console.warn(
+      `[runtime-deps] ${scan.conflicts.length} bundled dependency conflict(s) detected`,
+    )
+  }
+
+  if (scan.missing.length === 0) {
+    console.log(`[runtime-deps] bundled runtime deps already staged (${scan.deps.length} specs)`)
+    return
+  }
+
+  const missingSpecs = scan.missing.map((dep) => `${dep.name}@${dep.version}`)
+  const installSpecs = scan.deps.map((dep) => `${dep.name}@${dep.version}`)
+  const installRoot = runtimeDeps.o(packageRoot, { env: process.env })
+
+  console.log(
+    `[runtime-deps] staging ${missingSpecs.length}/${installSpecs.length} bundled runtime deps in ${installRoot}`,
+  )
+  const result = runtimeDeps.i({
+    installRoot,
+    missingSpecs,
+    installSpecs,
+    env: process.env,
+  })
+  console.log(`[runtime-deps] staged ${result.installSpecs.length} bundled runtime deps`)
+}
+
+main().catch((err) => {
+  console.error(`[runtime-deps] failed: ${err instanceof Error ? err.message : String(err)}`)
+  process.exit(1)
+})

package/images/opencode-runner/Dockerfile

@@ -0,0 +1,87 @@
+# syntax=docker/dockerfile:1.7
+
+# ─── OpenCode Runner ──────────────────────────────────────────────────────
+# Native cc-connect runner for OpenCode.
+#
+# Build from the repository root:
+#   docker build -t ghcr.io/buggyblues/opencode-runner:latest \
+#     -f apps/cloud/images/opencode-runner/Dockerfile .
+# ──────────────────────────────────────────────────────────────────────────
+
+FROM golang:1.25-bookworm AS cc-builder
+
+ARG CC_CONNECT_REF=63b5d59127b3004bc7002f2d51892b1f2a91ea83
+ARG CC_CONNECT_REPO=https://github.com/buggyblues/cc-connect.git
+
+WORKDIR /build
+
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends ca-certificates git && \
+    rm -rf /var/lib/apt/lists/*
+
+RUN git clone --depth 1 "${CC_CONNECT_REPO}" /tmp/cc-connect && \
+    cd /tmp/cc-connect && \
+    git fetch --depth 1 origin "${CC_CONNECT_REF}" && \
+    git checkout "${CC_CONNECT_REF}" && \
+    CGO_ENABLED=0 go build \
+      -tags "no_web no_acp no_cursor no_devin no_iflow no_kimi no_qoder no_feishu no_telegram no_discord no_slack no_dingtalk no_wecom no_weixin no_qq no_qqbot no_line no_weibo" \
+      -ldflags "-s -w" \
+      -o /build/cc-connect ./cmd/cc-connect
+
+FROM node:22-bookworm-slim AS node-deps
+
+WORKDIR /build
+
+RUN npm init -y && \
+    npm install --no-audit --fund=false \
+      opencode-ai@latest \
+      @shadowob/cli@latest \
+      @shadowob/connector@latest
+
+FROM node:22-bookworm-slim AS runner
+
+LABEL org.opencontainers.image.source="https://github.com/nicepkg/shadow"
+LABEL org.opencontainers.image.description="Shadow Cloud OpenCode Runner (cc-connect + OpenCode)"
+
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends ca-certificates curl git tini && \
+    rm -rf /var/lib/apt/lists/*
+
+RUN userdel -r node 2>/dev/null || true; \
+    groupdel node 2>/dev/null || true; \
+    groupadd -g 1000 shadow; \
+    useradd -u 1000 -g shadow -m -d /home/shadow -s /usr/sbin/nologin shadow
+
+WORKDIR /app
+RUN mkdir -p /home/shadow/.cc-connect /home/shadow/.config/opencode /etc/openclaw \
+             /etc/shadowob /var/log/shadowob /workspace /tmp/npm-cache && \
+    ln -s /home/shadow /home/openclaw && \
+    chown -R shadow:shadow /home/shadow /etc/shadowob /var/log/shadowob \
+      /workspace /tmp/npm-cache /app
+
+COPY --from=node-deps --chown=shadow:shadow /build/node_modules ./node_modules
+COPY --from=node-deps --chown=shadow:shadow /build/package.json ./package.json
+COPY --from=cc-builder /build/cc-connect /usr/local/bin/cc-connect
+
+RUN ln -s /app/node_modules/.bin/opencode /usr/local/bin/opencode && \
+    ln -s /app/node_modules/.bin/shadowob /usr/local/bin/shadowob && \
+    ln -s /app/node_modules/.bin/shadowob-connector /usr/local/bin/shadowob-connector
+
+COPY --chown=shadow:shadow apps/cloud/images/cc-connect-runner/entrypoint.mjs /app/entrypoint.mjs
+
+HEALTHCHECK --interval=15s --timeout=5s --start-period=30s --retries=3 \
+  CMD curl -f http://localhost:3100/health || exit 1
+
+EXPOSE 3100
+
+ENV NODE_ENV=production
+ENV HOME=/home/shadow
+ENV SHADOW_RUNNER_HEALTH_PORT=3100
+ENV OPENCLAW_NO_RESPAWN=1
+ENV SHADOW_RUNNER_NAME=opencode-runner
+ENV npm_config_cache=/tmp/npm-cache
+
+USER shadow
+
+ENTRYPOINT ["tini", "--"]
+CMD ["node", "/app/entrypoint.mjs"]

package/images/opencode-runner/RUNNER.md

@@ -0,0 +1,202 @@
+# OpenCode Runner Research
+
+Research date: 2026-05-14.
+
+## Target role
+
+`opencode` should run through the ShadowOB `cc-connect` fork, not through
+OpenClaw gateway or ACPX. The runner process should be:
+
+```text
+cc-connect fork -> agent type "opencode" -> opencode CLI
+```
+
+Shadow transport should come from the cc-connect ShadowOB platform.
+
+## Current repository state
+
+The OpenCode adapter and image now use the cc-connect fork path. The runtime
+package emits `cc-connect-config.toml`, `opencode.json`, `.opencode` runtime
+files, workspace bootstrap files, and ShadowOB skill files through
+`runtime-files.json`.
+
+## Native OpenCode configuration
+
+OpenCode uses JSON/JSONC config and keeps several extensibility surfaces native:
+
+| Concern | Native OpenCode surface |
+| --- | --- |
+| Global config | `~/.config/opencode/opencode.json`. |
+| Project config | `opencode.json` or `opencode.jsonc` at the project root. |
+| Custom config | `OPENCODE_CONFIG`. |
+| Models/providers | `model`, `provider`, `enabled_providers`, `disabled_providers`. |
+| Agents | `agent` object and Markdown agents under `.opencode/agents` or global config locations. |
+| Default agent | `default_agent`, which must be a primary agent. |
+| Subagents | Agent config can mark subtask behavior; commands can force `subtask`. |
+| Commands | `command` config entries or Markdown files under `.opencode/commands` and global command directories. |
+| Skills | `.opencode/skills/<name>/SKILL.md`, plus compatible `.claude/skills` and `.agents/skills` discovery. |
+| MCP | `mcp` config object for local and remote MCP servers. |
+| Hooks/plugins | OpenCode plugins under `.opencode/plugins` or `~/.config/opencode/plugins`, plus npm-loaded plugins. |
+| Logs and sessions | OpenCode native session data plus cc-connect session state; exact collection should be verified during implementation. |
+
+## Shadow slash command bridge
+
+The runner package always materializes `/etc/shadowob/slash-commands.json` so
+Shadow can load a stable command index. The OpenCode runner owns its catalog in
+`apps/cloud/src/runtimes/slash-commands/opencode.ts`; this is intentionally not
+a common runtime artifact.
+
+Official OpenCode TUI commands researched from the docs include `/connect`,
+`/compact`, `/details`, `/editor`, `/exit`, `/export`, `/help`, `/init`,
+`/models`, `/new`, `/redo`, `/sessions`, `/share`, `/themes`, `/thinking`,
+`/undo`, and `/unshare`.
+
+Current Cloud injection registers only names that do not collide with
+cc-connect's universal bot commands: `/connect`, `/details`, `/editor`,
+`/exit`, `/export`, `/init`, `/models`, `/redo`, `/share`, `/themes`,
+`/thinking`, `/undo`, and `/unshare`. Overlapping control commands such as
+`/new`, `/compact`, `/help`, and `/sessions` remain cc-connect-managed.
+
+cc-connect local commands are prompt-backed. Direct OpenCode TUI passthrough
+should be added in the cc-connect OpenCode agent only after the collision policy
+is explicit and tested.
+
+## Schema and type anchors
+
+- Main schema URL: `https://opencode.ai/config.json`.
+- TUI schema URL: `https://opencode.ai/tui.json`.
+- Config type: JSON or JSONC, with merged global and project config layers.
+- cc-connect type anchor: `../cc-connect/agent/opencode/opencode.go`.
+- Test rule: generated `opencode.json` must validate against the schema URL and
+  then survive an OpenCode startup smoke test.
+
+## Provider and authentication notes
+
+- OpenCode uses `/connect` to store provider credentials under
+  `~/.local/share/opencode/auth.json`. Cloud should materialize that credential
+  file from Secret data or pass provider env only through a controlled adapter.
+- `opencode.json` owns the provider catalog. Custom OpenAI-compatible providers
+  use `provider.<id>.npm = "@ai-sdk/openai-compatible"`, `options.baseURL`,
+  optional headers/API key, and a `models` map.
+- If a provider/model uses `/v1/responses`, OpenCode docs direct users to the
+  AI SDK OpenAI package rather than the OpenAI-compatible chat-completions
+  package. The adapter must record this distinction in provider metadata.
+- Subscription or OAuth flows are provider-specific and interactive through
+  `/connect`; they are not a universal bootstrap method for disposable runner
+  containers.
+- Keep provider config and provider credentials separate: `opencode.json`
+  describes available providers/models, while raw keys belong in Secret data or
+  a generated auth file with `0600` mode.
+
+## Security, audit, cost, network, and tools
+
+- Permissions: `permission` can be a global action or per-tool object. Actions
+  are `allow`, `ask`, and `deny`; last matching granular rule wins.
+- Defaults: OpenCode is permissive by default; Cloud should generate an explicit
+  fail-closed baseline instead of relying on defaults.
+- Tool keys: `read`, `edit`, `glob`, `grep`, `bash`, `task`, `skill`, `lsp`,
+  `question`, `webfetch`, `websearch`, `external_directory`, and `doom_loop`.
+- Secret files: `.env` and `.env.*` are denied by default while `.env.example`
+  remains allowed; keep that behavior in generated config.
+- Network: control `webfetch`, `websearch`, remote MCP URLs, provider base URLs,
+  and remote organization defaults through local override config.
+- MCP: enable only named servers; remote MCP adds context and cost, so use
+  explicit `enabled` and tool allow/deny config.
+- Cost/audit: `small_model`, provider `timeout`/`chunkTimeout`, MCP tool count,
+  compaction, snapshot disk usage, and context-heavy MCP servers must be
+  auditable.
+- Logs: collect cc-connect daemon logs, OpenCode session state, model cache
+  files, and schema validation output.
+
+## cc-connect mapping
+
+The local fork exposes `core.RegisterAgent("opencode", New)`. Important options
+from `../cc-connect/agent/opencode/opencode.go`:
+
+- `work_dir`
+- `model`
+- `mode`: `default` or `yolo`
+- `cmd`
+- cc-connect model cache under `data_dir/projects/*.opencode-models.json`
+
+The fork drives OpenCode with `opencode run --format json` and keeps the
+session id for follow-up turns.
+
+Example generated project shape:
+
+```toml
+[[projects]]
+name = "agent-id"
+
+[projects.agent]
+type = "opencode"
+
+[projects.agent.options]
+work_dir = "/workspace"
+
+[[projects.platforms]]
+type = "shadowob"
+```
+
+## Capability notes
+
+- Models: write `model` and provider config in `opencode.json`, or use provider
+  refs in cc-connect when the model list is managed centrally.
+- Skills: materialize `.opencode/skills` first; optionally also emit
+  `.agents/skills` if a workflow must be shared with Codex.
+- MCP: write the OpenCode `mcp` object, not OpenClaw `mcp`.
+- Cron/routine: OpenCode does not provide the same native cron surface as
+  OpenClaw or Hermes in the researched docs; Cloud should own scheduling for
+  phase 1.
+- Hooks: prefer OpenCode plugins for deterministic lifecycle behavior.
+- Subagents: use OpenCode `agent` and command `subtask` config instead of
+  OpenClaw multi-agent routing.
+- Logs: collect cc-connect logs and OpenCode native session/log locations
+  separately. Implementation should run a container smoke test to pin the exact
+  current OpenCode log directory.
+
+## Migration implications
+
+- OpenClaw, ACPX, and `@shadowob/openclaw-shadowob` are not used by the
+  OpenCode runner image.
+- The image embeds the cc-connect fork plus the OpenCode CLI.
+- Generate `opencode.json`, `.opencode/agents`, `.opencode/commands`,
+  `.opencode/skills`, and `.opencode/plugins` as native artifacts.
+- Keep OpenCode model/provider config separate from cc-connect provider refs so
+  both CLI-native auth and Cloud-managed provider secrets can work.
+
+## Adapter and smoke tests
+
+Unit tests:
+
+- `opencode.json` validates against `https://opencode.ai/config.json`.
+- Generated permissions include explicit bash/edit/read/webfetch/websearch,
+  skill, task, external directory, and doom-loop behavior.
+- `.env` read denies and external directory restrictions are preserved.
+- cc-connect TOML contains `type = "opencode"` and no OpenClaw artifacts.
+- MCP entries use local/remote type-specific fields and do not enable all remote
+  organization defaults implicitly.
+
+Container smoke:
+
+- `cc-connect --version` and `opencode --version` work.
+- `opencode.json`, `.opencode/agents`, `.opencode/commands`, and
+  `.opencode/skills` exist and validate.
+- Start cc-connect with `type = "opencode"` and inspect daemon logs.
+- Assert no `/etc/openclaw/config.json` exists.
+- Check that the generated config blocks `git push` or another representative
+  denied command when Cloud policy says so.
+
+## Sources
+
+- Config: https://opencode.ai/docs/config
+- Providers: https://dev.opencode.ai/docs/providers/
+- Permissions: https://opencode.ai/docs/permissions
+- TUI slash commands: https://opencode.ai/docs/tui/
+- Agents: https://opencode.ai/docs/agents
+- Commands: https://opencode.ai/docs/commands
+- MCP servers: https://opencode.ai/docs/mcp-servers
+- Skills: https://opencode.ai/docs/skills
+- Plugins: https://opencode.ai/docs/plugins
+- OpenCode repository: https://github.com/opencode-ai/opencode
+- cc-connect fork source: https://github.com/buggyblues/cc-connect

package/images/opencode-runner/entrypoint.mjs

@@ -0,0 +1,2 @@
+process.env.SHADOW_RUNNER_NAME ??= 'opencode-runner'
+await import('../cc-connect-runner/entrypoint.mjs')

package/package.json

@@ -0,0 +1,121 @@
+{
+  "name": "@shadowob/cloud",
+  "version": "1.1.6-dev.311",
+  "description": "shadowob-cloud — deploy AI agents to Kubernetes",
+  "type": "module",
+  "bin": {
+    "shadowob-cloud": "./dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "images",
+    "templates"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "development": "./src/index.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./cli": {
+      "development": "./src/cli.ts",
+      "import": "./dist/cli.js",
+      "default": "./dist/cli.js"
+    }
+  },
+  "dependencies": {
+    "@hono/node-server": "^1.19.11",
+    "@hono/zod-validator": "^0.5.0",
+    "@monaco-editor/react": "^4.7.0",
+    "@pulumi/kubernetes": "^4.21.0",
+    "@pulumi/pulumi": "^3.160.0",
+    "@tanstack/react-query": "^5.80.7",
+    "@tanstack/react-router": "^1.168.2",
+    "better-sqlite3": "^12.8.0",
+    "chalk": "^5.4.1",
+    "clsx": "^2.1.1",
+    "commander": "^13.1.0",
+    "date-fns": "^4.1.0",
+    "drizzle-orm": "^0.44.7",
+    "hono": "^4.12.17",
+    "i18next": "^25.8.14",
+    "i18next-browser-languagedetector": "^8.2.1",
+    "jsonc-parser": "^3.3.1",
+    "lucide-react": "^0.513.0",
+    "monaco-editor": "^0.55.1",
+    "node-ssh": "^13.2.1",
+    "postgres": "^3.4.9",
+    "react": "^19.2.5",
+    "react-dom": "^19.2.5",
+    "react-hook-form": "^7.56.4",
+    "react-i18next": "^16.5.4",
+    "smol-toml": "^1.6.1",
+    "tailwind-merge": "^3.3.0",
+    "typia": "^12.0.1",
+    "yaml": "^2.8.4",
+    "zod": "^3.25.76",
+    "zustand": "^5.0.13",
+    "@shadowob/sdk": "1.1.6-dev.311",
+    "@shadowob/shared": "1.1.6-dev.311"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.52.0",
+    "@rsbuild/core": "^1.3.21",
+    "@rsbuild/plugin-react": "^1.4.6",
+    "@standard-schema/spec": "^1.1.0",
+    "@tailwindcss/postcss": "^4.2.2",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^22.15.21",
+    "@types/react": "^19.1.6",
+    "@types/react-dom": "^19.1.6",
+    "@typia/unplugin": "^12.0.1",
+    "drizzle-kit": "^0.31.10",
+    "tailwindcss": "^4.2.4",
+    "ts-patch": "^3.3.0",
+    "tsup": "^8.5.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.9.3",
+    "typescript-json-schema": "^0.67.1",
+    "vitest": "^4.1.0",
+    "@shadowob/cloud-ui": "1.0.0"
+  },
+  "engines": {
+    "node": ">=22.14.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup && rsbuild build",
+    "dev": "tsup --watch",
+    "dev:backend": "tsup --watch",
+    "dev:frontend": "rsbuild dev",
+    "console:dev": "rsbuild dev",
+    "console:build": "rsbuild build",
+    "console:preview": "rsbuild preview",
+    "generate:plugin-library": "node --import tsx scripts/generate-plugin-library.ts",
+    "generate:schema": "node --import tsx scripts/generate-schema.ts",
+    "prebuild": "pnpm generate:plugin-library",
+    "predev": "pnpm generate:plugin-library",
+    "predev:backend": "pnpm generate:plugin-library",
+    "predev:frontend": "pnpm generate:plugin-library",
+    "preconsole:build": "pnpm generate:plugin-library",
+    "pretypecheck": "pnpm generate:plugin-library",
+    "typecheck": "tsc --noEmit && tsc -p tsconfig.dashboard.json --noEmit",
+    "pretest": "pnpm generate:plugin-library",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "pretest:e2e": "pnpm generate:plugin-library",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
+    "pretest:e2e:cli": "pnpm generate:plugin-library",
+    "test:e2e:cli": "vitest run --config vitest.cli.config.ts",
+    "pretest:e2e:console": "pnpm generate:plugin-library",
+    "test:e2e:console": "playwright test",
+    "test:e2e:console:ui": "playwright test --ui",
+    "test:e2e:console:visual": "playwright test e2e/console/visual-regression.spec.ts",
+    "test:e2e:console:visual:update": "playwright test e2e/console/visual-regression.spec.ts --update-snapshots"
+  }
+}

package/templates/agent-marketplace-buddy.template.json

@@ -0,0 +1,131 @@
+{
+  "version": "1.0.0",
+  "name": "agent-marketplace-buddy",
+  "title": "${i18n:title}",
+  "description": "${i18n:description}",
+  "environment": "production",
+  "use": [
+    {
+      "plugin": "model-provider"
+    },
+    {
+      "plugin": "shadowob",
+      "options": {
+        "servers": [
+          {
+            "id": "agent-marketplace-hq",
+            "name": "Agent Marketplace",
+            "slug": "agent-marketplace",
+            "channels": [
+              {
+                "id": "choose",
+                "title": "Choose",
+                "type": "text"
+              },
+              {
+                "id": "build",
+                "title": "Build",
+                "type": "text"
+              },
+              {
+                "id": "review",
+                "title": "Review",
+                "type": "text"
+              }
+            ]
+          }
+        ],
+        "buddies": [
+          {
+            "id": "marketplace-bot",
+            "name": "Marketplace Buddy"
+          }
+        ],
+        "bindings": [
+          {
+            "targetId": "marketplace-bot",
+            "targetType": "buddy",
+            "servers": ["agent-marketplace-hq"],
+            "channels": ["choose", "build", "review"],
+            "agentId": "agent-marketplace-buddy"
+          }
+        ]
+      }
+    }
+  ],
+  "deployments": {
+    "namespace": "agent-marketplace-buddy",
+    "agents": [
+      {
+        "id": "agent-marketplace-buddy",
+        "runtime": "openclaw",
+        "description": "Composable specialist-agent Buddy powered by wshobson/agents: plugin marketplace, domain agents, command workflows, and specialized skills.",
+        "identity": {
+          "name": "Marketplace Buddy",
+          "personality": "You are a precise agent librarian and workflow architect. You help teams choose the smallest useful specialist set, then run the relevant workflow.",
+          "systemPrompt": "Routing:\n1. Start by identifying the smallest plugin or specialist set that matches the task.\n2. Prefer mounted plugin README and docs before invoking a skill or command.\n3. For engineering tasks, select agents and skills by domain: backend, frontend, security, data, infra, docs, SEO, or operations.\n4. Avoid loading the whole marketplace into one answer; cite the selected plugin path.\n5. When a workflow command exists, use it as the source of truth."
+        },
+        "use": [
+          {
+            "plugin": "agent-pack",
+            "options": {
+              "packs": [
+                {
+                  "id": "wshobson-agents",
+                  "url": "https://github.com/wshobson/agents",
+                  "ref": "main",
+                  "autoImport": ["mcp"],
+                  "mounts": [
+                    {
+                      "kind": "skills",
+                      "from": "plugins"
+                    },
+                    {
+                      "kind": "commands",
+                      "from": "plugins"
+                    },
+                    {
+                      "kind": "agents",
+                      "from": "plugins"
+                    },
+                    {
+                      "kind": "instructions",
+                      "from": "docs"
+                    },
+                    {
+                      "kind": "instructions",
+                      "from": "plugins"
+                    }
+                  ],
+                  "instructionFiles": ["CLAUDE.md", "README.md"]
+                }
+              ],
+              "poll": "1h"
+            }
+          }
+        ],
+        "resources": {
+          "requests": {
+            "cpu": "100m",
+            "memory": "384Mi"
+          },
+          "limits": {
+            "cpu": "1000m",
+            "memory": "1Gi"
+          }
+        },
+        "configuration": {}
+      }
+    ]
+  },
+  "i18n": {
+    "en": {
+      "title": "Agent Marketplace Buddy",
+      "description": "A composable specialist-agent marketplace template for development, security, infrastructure, data, documentation, SEO, and workflow orchestration."
+    },
+    "zh-CN": {
+      "title": "Agent Marketplace Buddy",
+      "description": "可组合专家 agent 市场模板，覆盖开发、安全、基础设施、数据、文档、SEO 和 workflow 编排场景。"
+    }
+  }
+}