@thesmurph/agentlink 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # Changelog
 
+## 0.2.0
+
+Corrects the path table against the code each harness actually ships, checked
+with `scripts/verify-paths.mjs`. Paths now come from evidence rather than from
+documentation that may describe an older layout.
+
+- Qoder and Grok read `.agents/skills` themselves, so they need no link. Both
+  were aliases; Qoder's own directory holds settings and repowiki, not skills,
+  and Grok's binary states that it scans `.agents/skills/` at every tier.
+- opencode's `.opencode/skills` is confirmed in its shipped binary.
+- Kilo Code's skills path is now reported as unknown. `.claude/skills` came from
+  a third-party table and appears nowhere in its 195 MB binary, so agentlink
+  stopped writing links there rather than guessing.
+- Factory Droid's home-directory instructions file has no evidence behind it and
+  is flagged unverified, though both of its skills paths are confirmed.
+- Claude Code, Codex, Pi, Copilot, Qwen and Mastra Code rows were confirmed as
+  they stood.
+
+## 0.1.2
+
+- `list` explains what `unverified` means: the vendor's docs do not confirm that
+  path, so the link may sit where nothing reads it. It is not an error.
+- An explicit `--harnesses`, `--all` or `--detected` sets the saved selection, so
+  sync now reports what it added or dropped instead of changing it quietly.
+  `sync --json` gains `selection.added` and `selection.removed`.
+- Colour is written only to a TTY, and `NO_COLOR` is honoured, so piped output
+  and CI logs contain no escape codes.
+
+## 0.1.1
+
+- `list` shows what is linked rather than only what is installed. A `✓` means
+  agentlink is linking that harness; a trailing note appears when a harness is
+  installed but not linked, or linked but not installed. `list --json` gains
+  `selected` and a top-level `linked` array.
+- Fixed: `list` printed one mark for two different facts, so a deselected
+  harness looked selected. The selection itself was always saved correctly.
+
 ## 0.1.0
 
 First release.

package/README.md

@@ -32,7 +32,7 @@ agentlink init           create AGENTS.md + .agents/skills, migrate, link
 agentlink sync           re-link after adding or moving a skill
 agentlink fix            fold stray real copies into .agents, then link
 agentlink select         change which harnesses are linked
-agentlink list           every harness, where it reads from, whether it is installed
+agentlink list           what is linked, where each harness reads from, what is installed
 agentlink doctor         drift, duplicates, invalid skills, broken links
 agentlink adopt          move an existing CLAUDE.md or GEMINI.md into AGENTS.md
 agentlink unlink         remove the links agentlink created

package/dist/cli.js

@@ -13,13 +13,20 @@ import { apply, mergeState, plan, pruneStale, readState, unlink, writeState } fr
 import { resolveScope } from "./scope.js";
 import { selectMany } from "./ui.js";
 const ESC = String.fromCharCode(27);
-const BOLD = `${ESC}[1m`;
-const DIM = `${ESC}[2m`;
-const RED = `${ESC}[31m`;
-const GREEN = `${ESC}[32m`;
-const YELLOW = `${ESC}[33m`;
-const CYAN = `${ESC}[36m`;
-const RESET = `${ESC}[0m`;
+// Colour only when something is reading it: a TTY, and not opted out. Piped
+// output and CI logs stay free of escape codes.
+const useColor = process.env.NO_COLOR === undefined &&
+    process.env.FORCE_COLOR !== "0" &&
+    (process.env.FORCE_COLOR !== undefined || process.stdout.isTTY === true);
+const paint = (code) => (useColor ? `${ESC}[${code}m` : "");
+const BOLD = paint("1");
+const DIM = paint("2");
+const RED = paint("31");
+const GREEN = paint("32");
+const YELLOW = paint("33");
+const CYAN = paint("36");
+const RESET = paint("0");
+;
 const COMMANDS = ["init", "sync", "select", "fix", "list", "doctor", "adopt", "unlink", "help", "version"];
 function parseArgs(argv) {
     const options = {
@@ -258,6 +265,11 @@ async function syncLinks(paths, chosen, options, context) {
             pruned,
             native: linkPlan.native,
             unknown: linkPlan.unknown,
+            selection: {
+                harnesses: chosen.map((h) => h.id),
+                added: chosen.map((h) => h.id).filter((id) => !previous.harnesses.includes(id)),
+                removed: previous.harnesses.filter((id) => !chosen.some((h) => h.id === id)),
+            },
             aliases: linkPlan.aliases,
             skills: linkPlan.skillsFound,
             conflicts: conflicts.map((fix) => fix.target),
@@ -274,6 +286,11 @@ async function syncLinks(paths, chosen, options, context) {
     }
     const where = paths.scope === "global" ? "~" : path.basename(paths.root);
     process.stdout.write(`\n${BOLD}agentlink${RESET} ${DIM}${where} · ${chosen.length} harness${chosen.length === 1 ? "" : "es"}${options.dryRun ? " · dry run" : ""}${RESET}\n`);
+    // An explicit --harnesses/--all/--detected changes the saved selection, so
+    // say which harnesses that added or dropped rather than letting it pass.
+    const selection = selectionChange(previous.harnesses, chosen);
+    if (selection)
+        step("select", selection);
     for (const result of results) {
         const symbol = result.state === "skipped"
             ? `${YELLOW}!${RESET}`
@@ -326,9 +343,12 @@ async function syncLinks(paths, chosen, options, context) {
         process.exit(1);
 }
 async function runList(paths, options) {
+    const state = readState(paths);
+    const selected = new Set(state.harnesses);
     const rows = detectAll().map(({ harness, installed, reasons }) => ({
         id: harness.id,
         label: harness.label,
+        selected: selected.has(harness.id),
         installed,
         reasons,
         instructions: describe(harness.instructions[paths.scope]),
@@ -338,18 +358,28 @@ async function runList(paths, options) {
         source: harness.source,
     }));
     if (options.json) {
-        process.stdout.write(`${JSON.stringify({ scope: paths.scope, harnesses: rows }, null, 2)}\n`);
+        process.stdout.write(`${JSON.stringify({ scope: paths.scope, root: paths.root, linked: [...selected], harnesses: rows }, null, 2)}\n`);
         return;
     }
     const width = Math.max(...rows.map((row) => row.label.length));
-    process.stdout.write(`\n${BOLD}harnesses${RESET} ${DIM}· scope: ${paths.scope}${RESET}\n\n`);
+    const installedCount = rows.filter((row) => row.installed).length;
+    process.stdout.write(`\n${BOLD}harnesses${RESET} ${DIM}· scope: ${paths.scope} · ${selected.size} linked · ${installedCount} installed here${RESET}\n\n`);
     for (const row of rows) {
-        const mark = row.installed ? `${GREEN}●${RESET}` : `${DIM}○${RESET}`;
+        // The leading mark is the tool's own state: what is actually linked.
+        // Availability is only called out when it is surprising.
+        const mark = row.selected ? `${GREEN}✓${RESET}` : `${DIM}·${RESET}`;
+        const note = row.selected && !row.installed
+            ? `  ${YELLOW}selected, not installed${RESET}`
+            : !row.selected && row.installed
+                ? `  ${DIM}installed, not linked${RESET}`
+                : "";
         const flag = !row.instructionsVerified || !row.skillsVerified ? ` ${YELLOW}unverified${RESET}` : "";
-        process.stdout.write(`  ${mark} ${row.label.padEnd(width)}  ${DIM}instructions${RESET} ${row.instructions}  ${DIM}skills${RESET} ${row.skills}${flag}\n`);
+        process.stdout.write(`  ${mark} ${row.label.padEnd(width)}  ${DIM}instructions${RESET} ${row.instructions}  ${DIM}skills${RESET} ${row.skills}${flag}${note}\n`);
     }
-    process.stdout.write(`\n  ${GREEN}●${RESET} present on this machine   ${DIM}native = harness reads AGENTS.md / .agents/skills itself${RESET}\n` +
-        `  ${DIM}agentlink list --json prints the source URL for every row${RESET}\n`);
+    process.stdout.write(`\n  ${GREEN}✓${RESET} linked   ${DIM}·${RESET} not linked   ${DIM}change with \`agentlink select\`${RESET}\n` +
+        `  ${DIM}native = harness reads AGENTS.md / .agents/skills itself${RESET}\n` +
+        `  ${YELLOW}unverified${RESET} ${DIM}= the vendor's docs do not confirm that path, so the link may sit where nothing reads it.${RESET}\n` +
+        `  ${DIM}It is not an error. \`list --json\` prints the source URL for every endpoint.${RESET}\n`);
 }
 function describe(endpoint) {
     if (endpoint.native)
@@ -511,6 +541,17 @@ function dedupe(harnesses) {
 function step(verb, message) {
     process.stdout.write(`  ${GREEN}✓${RESET} ${DIM}${verb.padEnd(7)}${RESET}${message}\n`);
 }
+/** Describe a change to the saved selection, or null when nothing changed. */
+function selectionChange(before, chosen) {
+    const after = chosen.map((harness) => harness.id);
+    const added = after.filter((id) => !before.includes(id));
+    const removed = before.filter((id) => !after.includes(id));
+    if (added.length === 0 && removed.length === 0)
+        return null;
+    // The first run has nothing to compare against; the list above already says it.
+    const parts = [added.length ? `+${added.join(" ")}` : "", removed.length ? `-${removed.join(" ")}` : ""];
+    return `${after.length} harness${after.length === 1 ? "" : "es"}${before.length ? ` (was ${before.length})` : ""}: ${parts.filter(Boolean).join(" ")}`;
+}
 function version() {
     try {
         const file = fileURLToPath(new URL("../package.json", import.meta.url));

package/dist/harnesses.js

@@ -27,6 +27,7 @@ export const HARNESSES = [
         label: "Claude Code",
         bins: ["claude"],
         configRoot: ".claude",
+        npmPackage: "@anthropic-ai/claude-code",
         // Claude Code reads CLAUDE.md, not AGENTS.md, and never scans .agents/skills.
         instructions: scopes({ native: false, alias: "CLAUDE.md", note: "Claude Code has no AGENTS.md fallback" }, { native: false, alias: ".claude/CLAUDE.md" }),
         skills: scopes({ native: false, alias: ".claude/skills" }, { native: false, alias: ".claude/skills" }),
@@ -37,6 +38,7 @@ export const HARNESSES = [
         label: "OpenAI Codex CLI",
         bins: ["codex"],
         configRoot: ".codex",
+        npmPackage: "@openai/codex",
         // Codex reads AGENTS.md in the repo and ~/.codex/AGENTS.md globally.
         instructions: scopes({ native: true }, { native: false, alias: ".codex/AGENTS.md" }),
         // Codex's user-level skills directory is $HOME/.agents/skills: native both ways.
@@ -48,6 +50,7 @@ export const HARNESSES = [
         label: "Pi",
         bins: ["pi"],
         configRoot: ".pi",
+        npmPackage: "@earendil-works/pi-coding-agent",
         instructions: scopes({ native: true }, { native: false, alias: ".pi/agent/AGENTS.md" }),
         // Pi reads ~/.agents/skills and .agents/skills directly.
         skills: scopes(NATIVE, NATIVE),
@@ -58,6 +61,7 @@ export const HARNESSES = [
         label: "Oh My Pi (omp)",
         bins: ["omp"],
         configRoot: ".omp",
+        npmPackage: "@oh-my-pi/pi-coding-agent",
         instructions: scopes({ native: true, note: "standalone AGENTS.md via the agents-md provider" }, { native: false, alias: ".omp/agent/AGENTS.md" }),
         // omp scans its own .omp/skills trees; it does not read .agents/skills.
         skills: scopes({ native: false, alias: ".omp/skills" }, { native: false, alias: ".omp/agent/skills" }),
@@ -68,6 +72,7 @@ export const HARNESSES = [
         label: "GitHub Copilot CLI",
         bins: ["copilot"],
         configRoot: ".copilot",
+        npmPackage: "@github/copilot",
         // Copilot CLI reads AGENTS.md everywhere, but its *user* instructions live
         // in a differently named file.
         instructions: scopes({ native: true }, { native: false, alias: ".copilot/copilot-instructions.md" }),
@@ -88,8 +93,11 @@ export const HARNESSES = [
         label: "opencode",
         bins: ["opencode"],
         configRoot: ".config/opencode",
+        npmPackage: "opencode-ai",
         instructions: scopes({ native: true }, { native: false, alias: ".config/opencode/AGENTS.md" }),
-        skills: scopes({ native: false, alias: ".opencode/skills", verified: false }, { native: false, alias: ".config/opencode/skills", verified: false }),
+        // .opencode/skills confirmed in the shipped binary; the home-directory
+        // equivalent is not a literal anywhere in it.
+        skills: scopes({ native: false, alias: ".opencode/skills" }, { native: false, alias: ".config/opencode/skills", verified: false }),
         source: "https://opencode.ai/docs/rules/",
     },
     {
@@ -97,6 +105,7 @@ export const HARNESSES = [
         label: "Qwen Code",
         bins: ["qwen"],
         configRoot: ".qwen",
+        npmPackage: "@qwen-code/qwen-code",
         instructions: scopes({ native: true, note: "QWEN.md is the legacy name" }, { native: false, alias: ".qwen/AGENTS.md", note: "not documented by Qwen", verified: false }),
         skills: scopes({ native: false, alias: ".qwen/skills" }, { native: false, alias: ".qwen/skills" }),
         source: "https://qwenlm.github.io/qwen-code-docs/en/users/features/skills/",
@@ -115,9 +124,13 @@ export const HARNESSES = [
         label: "Kilo Code",
         bins: ["kilo"],
         configRoot: ".config/kilo",
+        npmPackage: "@kilocode/cli",
         instructions: scopes({ native: true }, { native: false, alias: ".config/kilo/AGENTS.md", note: "not documented by Kilo" }),
-        // Kilo Code reads Claude Code's skills directory for compatibility.
-        skills: scopes({ native: false, alias: ".claude/skills", note: "shares Claude Code's directory", verified: false }, { native: false, alias: ".config/kilo/skills", note: "unconfirmed", verified: false }),
+        // No skills path survived inspection of the shipped binary: its config
+        // directory holds command/, themes/ and config files, and .claude/skills
+        // (a third-party claim) appears nowhere in 195 MB. Reported as unknown
+        // rather than linked into a directory nothing reads.
+        skills: scopes({ native: false, note: "unresolved: not found in the shipped binary" }, { native: false, note: "unresolved: not found in the shipped binary" }),
         source: "https://github.com/intellectronica/ruler#skills-support-experimental",
     },
     {
@@ -125,7 +138,8 @@ export const HARNESSES = [
         label: "Factory Droid",
         bins: ["droid"],
         configRoot: ".factory",
-        instructions: scopes({ native: true, note: "AGENTS.md may also live in the home directory" }, { native: false, alias: ".factory/AGENTS.md" }),
+        npmPackage: "@factory/cli",
+        instructions: scopes({ native: true, note: "AGENTS.md may also live in the home directory" }, { native: false, alias: ".factory/AGENTS.md", note: "not found in the shipped binary", verified: false }),
         skills: scopes({ native: false, alias: ".factory/skills" }, { native: false, alias: ".factory/skills" }),
         source: "https://docs.factory.ai/harness/skills",
     },
@@ -143,6 +157,7 @@ export const HARNESSES = [
         label: "Mastra Code",
         bins: ["mastracode"],
         configRoot: ".mastracode",
+        npmPackage: "mastracode",
         instructions: scopes({ native: true }, { native: false, alias: ".mastracode/AGENTS.md", note: "not documented by Mastra", verified: false }),
         // Mastra Code lists .agents/skills as a project source and Agent Skills
         // spec compatibility, so both scopes are native.
@@ -155,7 +170,9 @@ export const HARNESSES = [
         bins: ["grok"],
         configRoot: ".grok",
         instructions: scopes({ native: true, note: "reads AGENTS.md, CLAUDE.md, AGENT.md" }, { native: false, alias: ".grok/AGENTS.md", note: "not documented by Grok", verified: false }),
-        skills: scopes({ native: false, alias: ".grok/skills" }, { native: false, alias: ".grok/skills" }),
+        // The binary's embedded documentation: "Grok also scans `.agents/skills/`
+        // (and `commands/`) at each tier (alongside `.grok/`)".
+        skills: scopes(NATIVE, NATIVE),
         source: "https://docs.x.ai/docs/grok-cli/skills",
     },
     {
@@ -163,8 +180,11 @@ export const HARNESSES = [
         label: "Qoder CLI",
         bins: ["qodercli", "qoder"],
         configRoot: ".qoder",
+        npmPackage: "@qoder-ai/qodercli",
         instructions: scopes({ native: true, note: "configurable via context.fileName" }, { native: false, alias: ".qoder/AGENTS.md", note: "not documented by Qoder", verified: false }),
-        skills: scopes({ native: false, alias: ".qoder/skills" }, { native: false, alias: ".qoder/skills" }),
+        // Confirmed in the shipped bundle: .agents/skills is present, .qoder/skills
+        // is not. Its own config directory holds settings and repowiki, not skills.
+        skills: scopes(NATIVE, NATIVE),
         source: "https://docs.qoder.com/cli/Skills",
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thesmurph/agentlink",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "One source of truth for agent instructions and skills, symlinked into every coding-agent harness.",
   "keywords": [
     "agents.md",

package/src/cli.ts

@@ -14,13 +14,20 @@ import { resolveScope, type Scope, type ScopePaths } from "./scope.js";
 import { selectMany, type Choice } from "./ui.js";
 
 const ESC = String.fromCharCode(27);
-const BOLD = `${ESC}[1m`;
-const DIM = `${ESC}[2m`;
-const RED = `${ESC}[31m`;
-const GREEN = `${ESC}[32m`;
-const YELLOW = `${ESC}[33m`;
-const CYAN = `${ESC}[36m`;
-const RESET = `${ESC}[0m`;
+// Colour only when something is reading it: a TTY, and not opted out. Piped
+// output and CI logs stay free of escape codes.
+const useColor =
+  process.env.NO_COLOR === undefined &&
+  process.env.FORCE_COLOR !== "0" &&
+  (process.env.FORCE_COLOR !== undefined || process.stdout.isTTY === true);
+const paint = (code: string): string => (useColor ? `${ESC}[${code}m` : "");
+const BOLD = paint("1");
+const DIM = paint("2");
+const RED = paint("31");
+const GREEN = paint("32");
+const YELLOW = paint("33");
+const CYAN = paint("36");
+const RESET = paint("0");;
 
 interface Options {
   command: string;
@@ -298,6 +305,11 @@ async function syncLinks(
           pruned,
           native: linkPlan.native,
           unknown: linkPlan.unknown,
+          selection: {
+            harnesses: chosen.map((h) => h.id),
+            added: chosen.map((h) => h.id).filter((id) => !previous.harnesses.includes(id)),
+            removed: previous.harnesses.filter((id) => !chosen.some((h) => h.id === id)),
+          },
           aliases: linkPlan.aliases,
           skills: linkPlan.skillsFound,
           conflicts: conflicts.map((fix) => fix.target),
@@ -321,6 +333,11 @@ async function syncLinks(
     `\n${BOLD}agentlink${RESET} ${DIM}${where} · ${chosen.length} harness${chosen.length === 1 ? "" : "es"}${options.dryRun ? " · dry run" : ""}${RESET}\n`,
   );
 
+  // An explicit --harnesses/--all/--detected changes the saved selection, so
+  // say which harnesses that added or dropped rather than letting it pass.
+  const selection = selectionChange(previous.harnesses, chosen);
+  if (selection) step("select", selection);
+
   for (const result of results) {
     const symbol =
       result.state === "skipped"
@@ -388,9 +405,12 @@ async function syncLinks(
 }
 
 async function runList(paths: ScopePaths, options: Options): Promise<void> {
+  const state = readState(paths);
+  const selected = new Set(state.harnesses);
   const rows = detectAll().map(({ harness, installed, reasons }) => ({
     id: harness.id,
     label: harness.label,
+    selected: selected.has(harness.id),
     installed,
     reasons,
     instructions: describe(harness.instructions[paths.scope]),
@@ -401,25 +421,37 @@ async function runList(paths: ScopePaths, options: Options): Promise<void> {
   }));
 
   if (options.json) {
-    process.stdout.write(`${JSON.stringify({ scope: paths.scope, harnesses: rows }, null, 2)}\n`);
+    process.stdout.write(
+      `${JSON.stringify({ scope: paths.scope, root: paths.root, linked: [...selected], harnesses: rows }, null, 2)}\n`,
+    );
     return;
   }
 
   const width = Math.max(...rows.map((row) => row.label.length));
+  const installedCount = rows.filter((row) => row.installed).length;
   process.stdout.write(
-    `\n${BOLD}harnesses${RESET} ${DIM}· scope: ${paths.scope}${RESET}\n\n`,
+    `\n${BOLD}harnesses${RESET} ${DIM}· scope: ${paths.scope} · ${selected.size} linked · ${installedCount} installed here${RESET}\n\n`,
   );
   for (const row of rows) {
-    const mark = row.installed ? `${GREEN}●${RESET}` : `${DIM}○${RESET}`;
-    const flag =
-      !row.instructionsVerified || !row.skillsVerified ? ` ${YELLOW}unverified${RESET}` : "";
+    // The leading mark is the tool's own state: what is actually linked.
+    // Availability is only called out when it is surprising.
+    const mark = row.selected ? `${GREEN}✓${RESET}` : `${DIM}·${RESET}`;
+    const note =
+      row.selected && !row.installed
+        ? `  ${YELLOW}selected, not installed${RESET}`
+        : !row.selected && row.installed
+          ? `  ${DIM}installed, not linked${RESET}`
+          : "";
+    const flag = !row.instructionsVerified || !row.skillsVerified ? ` ${YELLOW}unverified${RESET}` : "";
     process.stdout.write(
-      `  ${mark} ${row.label.padEnd(width)}  ${DIM}instructions${RESET} ${row.instructions}  ${DIM}skills${RESET} ${row.skills}${flag}\n`,
+      `  ${mark} ${row.label.padEnd(width)}  ${DIM}instructions${RESET} ${row.instructions}  ${DIM}skills${RESET} ${row.skills}${flag}${note}\n`,
     );
   }
   process.stdout.write(
-    `\n  ${GREEN}●${RESET} present on this machine   ${DIM}native = harness reads AGENTS.md / .agents/skills itself${RESET}\n` +
-      `  ${DIM}agentlink list --json prints the source URL for every row${RESET}\n`,
+    `\n  ${GREEN}✓${RESET} linked   ${DIM}·${RESET} not linked   ${DIM}change with \`agentlink select\`${RESET}\n` +
+      `  ${DIM}native = harness reads AGENTS.md / .agents/skills itself${RESET}\n` +
+      `  ${YELLOW}unverified${RESET} ${DIM}= the vendor's docs do not confirm that path, so the link may sit where nothing reads it.${RESET}\n` +
+      `  ${DIM}It is not an error. \`list --json\` prints the source URL for every endpoint.${RESET}\n`,
   );
 }
 
@@ -604,6 +636,19 @@ function step(verb: string, message: string): void {
   process.stdout.write(`  ${GREEN}✓${RESET} ${DIM}${verb.padEnd(7)}${RESET}${message}\n`);
 }
 
+/** Describe a change to the saved selection, or null when nothing changed. */
+function selectionChange(before: string[], chosen: Harness[]): string | null {
+  const after = chosen.map((harness) => harness.id);
+  const added = after.filter((id) => !before.includes(id));
+  const removed = before.filter((id) => !after.includes(id));
+  if (added.length === 0 && removed.length === 0) return null;
+  // The first run has nothing to compare against; the list above already says it.
+  const parts = [added.length ? `+${added.join(" ")}` : "", removed.length ? `-${removed.join(" ")}` : ""];
+  return `${after.length} harness${after.length === 1 ? "" : "es"}${
+    before.length ? ` (was ${before.length})` : ""
+  }: ${parts.filter(Boolean).join(" ")}`;
+}
+
 function version(): void {
   try {
     const file = fileURLToPath(new URL("../package.json", import.meta.url));

package/src/harnesses.ts

@@ -38,6 +38,13 @@ export interface Harness {
   bins: string[];
   /** Config directory relative to $HOME (from `herdr integration status`). */
   configRoot: string;
+  /**
+   * The vendor's own npm package, where one exists. Used to check this table
+   * against the code that actually ships; third-party packages with similar
+   * names are deliberately absent, since inspecting the wrong artifact is how a
+   * wrong path gets into a table.
+   */
+  npmPackage?: string;
   instructions: Record<Scope, Endpoint>;
   skills: Record<Scope, Endpoint>;
   /** Primary documentation these paths were read from. */
@@ -83,6 +90,7 @@ export const HARNESSES: Harness[] = [
     label: "Claude Code",
     bins: ["claude"],
     configRoot: ".claude",
+    npmPackage: "@anthropic-ai/claude-code",
     // Claude Code reads CLAUDE.md, not AGENTS.md, and never scans .agents/skills.
     instructions: scopes(
       { native: false, alias: "CLAUDE.md", note: "Claude Code has no AGENTS.md fallback" },
@@ -99,6 +107,7 @@ export const HARNESSES: Harness[] = [
     label: "OpenAI Codex CLI",
     bins: ["codex"],
     configRoot: ".codex",
+    npmPackage: "@openai/codex",
     // Codex reads AGENTS.md in the repo and ~/.codex/AGENTS.md globally.
     instructions: scopes(
       { native: true },
@@ -113,6 +122,7 @@ export const HARNESSES: Harness[] = [
     label: "Pi",
     bins: ["pi"],
     configRoot: ".pi",
+    npmPackage: "@earendil-works/pi-coding-agent",
     instructions: scopes(
       { native: true },
       { native: false, alias: ".pi/agent/AGENTS.md" },
@@ -126,6 +136,7 @@ export const HARNESSES: Harness[] = [
     label: "Oh My Pi (omp)",
     bins: ["omp"],
     configRoot: ".omp",
+    npmPackage: "@oh-my-pi/pi-coding-agent",
     instructions: scopes(
       { native: true, note: "standalone AGENTS.md via the agents-md provider" },
       { native: false, alias: ".omp/agent/AGENTS.md" },
@@ -142,6 +153,7 @@ export const HARNESSES: Harness[] = [
     label: "GitHub Copilot CLI",
     bins: ["copilot"],
     configRoot: ".copilot",
+    npmPackage: "@github/copilot",
     // Copilot CLI reads AGENTS.md everywhere, but its *user* instructions live
     // in a differently named file.
     instructions: scopes(
@@ -171,12 +183,15 @@ export const HARNESSES: Harness[] = [
     label: "opencode",
     bins: ["opencode"],
     configRoot: ".config/opencode",
+    npmPackage: "opencode-ai",
     instructions: scopes(
       { native: true },
       { native: false, alias: ".config/opencode/AGENTS.md" },
     ),
+    // .opencode/skills confirmed in the shipped binary; the home-directory
+    // equivalent is not a literal anywhere in it.
     skills: scopes(
-      { native: false, alias: ".opencode/skills", verified: false },
+      { native: false, alias: ".opencode/skills" },
       { native: false, alias: ".config/opencode/skills", verified: false },
     ),
     source: "https://opencode.ai/docs/rules/",
@@ -186,6 +201,7 @@ export const HARNESSES: Harness[] = [
     label: "Qwen Code",
     bins: ["qwen"],
     configRoot: ".qwen",
+    npmPackage: "@qwen-code/qwen-code",
     instructions: scopes(
       { native: true, note: "QWEN.md is the legacy name" },
       { native: false, alias: ".qwen/AGENTS.md", note: "not documented by Qwen", verified: false },
@@ -216,14 +232,18 @@ export const HARNESSES: Harness[] = [
     label: "Kilo Code",
     bins: ["kilo"],
     configRoot: ".config/kilo",
+    npmPackage: "@kilocode/cli",
     instructions: scopes(
       { native: true },
       { native: false, alias: ".config/kilo/AGENTS.md", note: "not documented by Kilo" },
     ),
-    // Kilo Code reads Claude Code's skills directory for compatibility.
+    // No skills path survived inspection of the shipped binary: its config
+    // directory holds command/, themes/ and config files, and .claude/skills
+    // (a third-party claim) appears nowhere in 195 MB. Reported as unknown
+    // rather than linked into a directory nothing reads.
     skills: scopes(
-      { native: false, alias: ".claude/skills", note: "shares Claude Code's directory", verified: false },
-      { native: false, alias: ".config/kilo/skills", note: "unconfirmed", verified: false },
+      { native: false, note: "unresolved: not found in the shipped binary" },
+      { native: false, note: "unresolved: not found in the shipped binary" },
     ),
     source: "https://github.com/intellectronica/ruler#skills-support-experimental",
   },
@@ -232,9 +252,10 @@ export const HARNESSES: Harness[] = [
     label: "Factory Droid",
     bins: ["droid"],
     configRoot: ".factory",
+    npmPackage: "@factory/cli",
     instructions: scopes(
       { native: true, note: "AGENTS.md may also live in the home directory" },
-      { native: false, alias: ".factory/AGENTS.md" },
+      { native: false, alias: ".factory/AGENTS.md", note: "not found in the shipped binary", verified: false },
     ),
     skills: scopes(
       { native: false, alias: ".factory/skills" },
@@ -262,6 +283,7 @@ export const HARNESSES: Harness[] = [
     label: "Mastra Code",
     bins: ["mastracode"],
     configRoot: ".mastracode",
+    npmPackage: "mastracode",
     instructions: scopes(
       { native: true },
       { native: false, alias: ".mastracode/AGENTS.md", note: "not documented by Mastra", verified: false },
@@ -280,10 +302,9 @@ export const HARNESSES: Harness[] = [
       { native: true, note: "reads AGENTS.md, CLAUDE.md, AGENT.md" },
       { native: false, alias: ".grok/AGENTS.md", note: "not documented by Grok", verified: false },
     ),
-    skills: scopes(
-      { native: false, alias: ".grok/skills" },
-      { native: false, alias: ".grok/skills" },
-    ),
+    // The binary's embedded documentation: "Grok also scans `.agents/skills/`
+    // (and `commands/`) at each tier (alongside `.grok/`)".
+    skills: scopes(NATIVE, NATIVE),
     source: "https://docs.x.ai/docs/grok-cli/skills",
   },
   {
@@ -291,14 +312,14 @@ export const HARNESSES: Harness[] = [
     label: "Qoder CLI",
     bins: ["qodercli", "qoder"],
     configRoot: ".qoder",
+    npmPackage: "@qoder-ai/qodercli",
     instructions: scopes(
       { native: true, note: "configurable via context.fileName" },
       { native: false, alias: ".qoder/AGENTS.md", note: "not documented by Qoder", verified: false },
     ),
-    skills: scopes(
-      { native: false, alias: ".qoder/skills" },
-      { native: false, alias: ".qoder/skills" },
-    ),
+    // Confirmed in the shipped bundle: .agents/skills is present, .qoder/skills
+    // is not. Its own config directory holds settings and repowiki, not skills.
+    skills: scopes(NATIVE, NATIVE),
     source: "https://docs.qoder.com/cli/Skills",
   },
   {