bigpowers 2.86.4 → 2.86.6

package/scripts/check-skill-links.py

@@ -53,12 +53,47 @@ def check_file_links(smd: str, root: str) -> list[str]:
     return problems
 
 
+def check_machine_paths(path: str, root: str) -> list[str]:
+    """Machine-absolute path scan for non-Markdown sources (scripts, hooks)."""
+    rel = os.path.relpath(path, root)
+    problems = []
+    try:
+        with open(path, encoding="utf-8") as f:
+            text = f.read()
+    except (UnicodeDecodeError, OSError):
+        return problems
+    for i, line in enumerate(text.splitlines(), 1):
+        stripped = line.strip()
+        # The pattern definition in lib/link_utils.py names these prefixes; a
+        # regex describing them is not itself a violation.
+        if "MACHINE_PATH_RE" in line or stripped.startswith("#"):
+            continue
+        if MACHINE_PATH_RE.search(line):
+            problems.append(
+                f"{rel}:{i}: machine-absolute path: {stripped[:100]}"
+            )
+    return problems
+
+
 def check(root: str) -> list[str]:
     problems = []
     for tree in ("skills", os.path.join(".pi", "skills")):
         pattern = os.path.join(root, tree, "*", "SKILL.md")
         for smd in sorted(glob.glob(pattern)):
             problems.extend(check_file_links(smd, root))
+
+    # scripts/ was previously unscanned, which let a hardcoded
+    # /Users/<name>/Developer/... path ship in scripts/hermes-verify-e39s02.sh
+    # while this gate reported OK.
+    for pattern in (
+        "scripts/*.sh",
+        "scripts/lib/*.sh",
+        "scripts/adapters/*.sh",
+        "*.sh",
+        "*.py",
+    ):
+        for src in sorted(glob.glob(os.path.join(root, pattern))):
+            problems.extend(check_machine_paths(src, root))
     return problems
 
 

package/scripts/generate-workflow-diagrams.sh

@@ -0,0 +1,102 @@
+#!/usr/bin/env bash
+# story: e37s05
+# generate-workflow-diagrams.sh — render docs/WORKFLOWS.md from specs/workflows/*.yaml.
+#
+# specs/assets/bigpowers-workflow.svg was a find-and-replace of a BMad Method
+# chart with bigpowers skill names dropped into BMad's slots. Nothing regenerated
+# it, so it drifted: it routed PLAN through define-success (archived), placed
+# seed-conventions in PHASE 4 when it is the greenfield entry point, omitted the
+# whole planning spine, build-epic and the entire verify/release arc, and used
+# "Sprints" — a word absent from every bigpowers doctrine file.
+#
+# A diagram nothing regenerates is a diagram that lies. This derives the chains
+# from the same YAML the /slash commands read, so the source cannot drift from
+# the picture without the picture changing.
+#
+# Usage: bash scripts/generate-workflow-diagrams.sh [--check]
+#   --check  fail if the committed output is stale (for CI)
+
+set -euo pipefail
+source "$(dirname "${BASH_SOURCE[0]}")/lib/python-env.sh"
+source "$(dirname "${BASH_SOURCE[0]}")/lib/skill-common.sh"
+resolve_repo_root
+cd "$REPO_ROOT"
+
+OUT="docs/WORKFLOWS.md"
+CHECK=0
+[[ "${1:-}" == "--check" ]] && CHECK=1
+
+TMP=$(mktemp)
+trap 'rm -f "$TMP"' EXIT
+
+$PYTHON - "$TMP" <<'PY'
+import sys, glob, os
+import yaml
+
+out = open(sys.argv[1], "w", encoding="utf-8")
+w = out.write
+
+w("# bigpowers Workflows\n\n")
+w("<!-- story: e37s05 -->\n\n")
+w("> **Generated** by `scripts/generate-workflow-diagrams.sh` from\n")
+w("> `specs/workflows/*.yaml`. Do not hand-edit — change the YAML and re-run.\n")
+w("> CI enforces freshness via `--check`.\n\n")
+w("Each recipe below is a composed chain of skills, invocable as a slash command.\n\n")
+
+recipes = []
+for path in sorted(glob.glob("specs/workflows/*.yaml")):
+    d = yaml.safe_load(open(path, encoding="utf-8")) or {}
+    if d.get("name") and d.get("skills"):
+        recipes.append(d)
+
+w("## Recipes\n\n")
+w("| Command | Chain | Purpose |\n|---|---|---|\n")
+for r in recipes:
+    chain = " → ".join("`%s`" % s for s in r["skills"])
+    desc = (r.get("description") or "").replace("|", "\\|").strip()
+    w("| `%s` | %s | %s |\n" % (r.get("command", "/" + r["name"]), chain, desc))
+w("\n")
+
+w("## Chains\n\n```mermaid\nflowchart LR\n")
+for i, r in enumerate(recipes):
+    w("  subgraph %s[\"%s\"]\n" % ("w%d" % i, r.get("command", r["name"])))
+    prev = None
+    for j, s in enumerate(r["skills"]):
+        node = "n%d_%d" % (i, j)
+        w("    %s[\"%s\"]\n" % (node, s))
+        if prev:
+            w("    %s --> %s\n" % (prev, node))
+        prev = node
+    w("  end\n")
+w("```\n\n")
+
+# Skill reuse across recipes is the interesting structural fact: it shows which
+# skills are load-bearing across the catalog.
+counts = {}
+for r in recipes:
+    for s in r["skills"]:
+        counts[s] = counts.get(s, 0) + 1
+shared = sorted([(v, k) for k, v in counts.items() if v > 1], reverse=True)
+if shared:
+    w("## Skills shared across recipes\n\n")
+    w("| Skill | Recipes |\n|---|---|\n")
+    for v, k in shared:
+        w("| `%s` | %d |\n" % (k, v))
+    w("\n")
+
+w("_%d recipes, %d distinct skills._\n" % (len(recipes), len(counts)))
+out.close()
+PY
+
+if [[ "$CHECK" -eq 1 ]]; then
+  if [[ ! -f "$OUT" ]] || ! diff -q "$TMP" "$OUT" >/dev/null 2>&1; then
+    echo "generate-workflow-diagrams: $OUT is stale — run bash scripts/generate-workflow-diagrams.sh" >&2
+    exit 1
+  fi
+  echo "generate-workflow-diagrams: $OUT is current"
+  exit 0
+fi
+
+mkdir -p "$(dirname "$OUT")"
+cp "$TMP" "$OUT"
+echo "generate-workflow-diagrams: wrote $OUT"

package/scripts/golden-g13-test-orphans.sh

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+# story: e37s05
+# golden-g13-test-orphans.sh — every scripts/test-*.sh must be wired into a gate.
+#
+# Before this gate, 33 of 35 test scripts were reachable from nothing: not CI,
+# not Preflight, not package.json, not another script. Writing a test was not
+# enough to make it run, so tests accumulated as dead weight and regressions
+# they would have caught shipped anyway (test-adapters.sh silently exercised 1
+# of 21 adapters for months).
+#
+# Usage: bash scripts/golden-g13-test-orphans.sh [--self-test]
+# Exit 0: every test script is referenced by the gate list
+# Exit 1: at least one orphan (or, under --self-test, the gate failed to notice
+#         a deliberately unlisted script)
+
+set -euo pipefail
+source "$(dirname "${BASH_SOURCE[0]}")/lib/skill-common.sh"
+resolve_repo_root
+cd "$REPO_ROOT"
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+NC='\033[0m'
+
+GATES_FILE="scripts/lib/golden-suite-gates.sh"
+
+find_orphans() { # $1 = extra script basename to consider (may be empty)
+  local extra="${1:-}"
+  local orphans=""
+  local f b
+  for f in scripts/test-*.sh; do
+    [[ -e "$f" ]] || continue
+    b="$(basename "$f")"
+    grep -q "$b" "$GATES_FILE" || orphans+="  $b"$'\n'
+  done
+  if [[ -n "$extra" ]]; then
+    grep -q "$extra" "$GATES_FILE" || orphans+="  $extra"$'\n'
+  fi
+  printf '%s' "$orphans"
+}
+
+if [[ "${1:-}" == "--self-test" ]]; then
+  echo "=== G-13 self-test: prove the gate can fail ==="
+  # A name that is definitely not in the gate list must be reported.
+  if [[ -n "$(find_orphans "test-definitely-not-wired.sh")" ]]; then
+    echo -e "${GREEN}PASS${NC} G-13 reports an unlisted test script"
+    echo "G-13 self-test: PASS"
+    exit 0
+  fi
+  echo -e "${RED}FAIL${NC} G-13 did not report an unlisted script — vacuous gate"
+  echo "G-13 self-test: FAIL"
+  exit 1
+fi
+
+echo "=== G-13: test-script orphan check ==="
+ORPHANS="$(find_orphans "")"
+TOTAL=$(ls scripts/test-*.sh 2>/dev/null | wc -l | tr -d ' ')
+
+if [[ -z "$ORPHANS" ]]; then
+  echo "  ok  : all $TOTAL test script(s) are wired into $GATES_FILE"
+  echo -e "${GREEN}PASS${NC}"
+  echo "G-13: PASS"
+  exit 0
+fi
+
+echo "  orphaned test scripts (present but reachable from no gate):"
+printf '%s' "$ORPHANS"
+echo -e "${RED}FAIL${NC} add them to GOLDEN_GATES in $GATES_FILE, or delete them"
+echo "G-13: FAIL"
+exit 1

package/scripts/golden-g14-adapter-dispatch.sh

@@ -0,0 +1,113 @@
+#!/usr/bin/env bash
+# story: e37s05
+# golden-g14-adapter-dispatch.sh — an adapter that can render must be dispatched.
+#
+# scripts/lib/srp-engine.py builds its dispatch list from targets.yaml entries
+# carrying a skill.adapter. An adapter that defines render_skill() but is
+# declared `skill: null` therefore never runs during sync, while its install
+# function still reads a rendered directory that is never produced — the target
+# reports success and installs nothing
+# (BUG-2026-07-26-null-skill-adapters-install-nothing).
+#
+# Context-only bridges (aider, goose, ...) are exempt by construction: they
+# define no render_skill, so there is nothing to dispatch.
+#
+# Usage: bash scripts/golden-g14-adapter-dispatch.sh [--self-test]
+# Exit 0: every rendering adapter is dispatched
+# Exit 1: at least one rendering adapter is undispatched (or, under
+#         --self-test, the gate failed to notice an injected one)
+
+set -euo pipefail
+source "$(dirname "${BASH_SOURCE[0]}")/lib/python-env.sh"
+source "$(dirname "${BASH_SOURCE[0]}")/lib/skill-common.sh"
+resolve_repo_root
+cd "$REPO_ROOT"
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+NC='\033[0m'
+
+check() { # $1 = targets.yaml path
+  $PYTHON - "$1" <<'PY'
+import sys, os, re
+import yaml
+
+targets_path = sys.argv[1]
+data = yaml.safe_load(open(targets_path, encoding="utf-8")) or {}
+
+dispatched = set()
+for t in data.get("targets") or []:
+    skill = t.get("skill")
+    if isinstance(skill, dict) and skill.get("adapter"):
+        dispatched.add(skill["adapter"])
+
+problems = []
+adapter_dir = os.path.join("scripts", "adapters")
+for fn in sorted(os.listdir(adapter_dir)):
+    if not fn.endswith(".sh"):
+        continue
+    aid = fn[:-3]
+    src = open(os.path.join(adapter_dir, fn), encoding="utf-8").read()
+    if not re.search(r"^render_skill\(\)", src, re.M):
+        continue  # context-only bridge — nothing to dispatch
+    if aid not in dispatched:
+        problems.append(
+            f"{aid}: defines render_skill() but targets.yaml does not dispatch it "
+            f"(skill.adapter missing or null) — sync renders nothing for it"
+        )
+
+if problems:
+    for p in problems:
+        print(f"  UNDISPATCHED {p}")
+    print(f"\n{len(problems)} rendering adapter(s) never run during sync")
+    sys.exit(1)
+
+print(f"  ok  : all rendering adapters are dispatched ({len(dispatched)} in registry)")
+sys.exit(0)
+PY
+}
+
+if [[ "${1:-}" == "--self-test" ]]; then
+  echo "=== G-14 self-test: prove the gate can fail ==="
+  TMP=$(mktemp -d)
+  trap 'rm -rf "$TMP"' EXIT
+  $PYTHON - "$TMP/targets.yaml" <<'PY'
+import sys, yaml
+d = yaml.safe_load(open("scripts/targets.yaml", encoding="utf-8"))
+# Null out the first dispatched adapter — the gate must notice.
+for t in d.get("targets") or []:
+    s = t.get("skill")
+    if isinstance(s, dict) and s.get("adapter"):
+        print(f"injected: {t['id']} skill -> null")
+        t["skill"] = None
+        break
+yaml.dump(d, open(sys.argv[1], "w", encoding="utf-8"), default_flow_style=False, sort_keys=False)
+PY
+  set +e
+  check "$TMP/targets.yaml" >/dev/null 2>&1
+  rc=$?
+  set -e
+  if [[ $rc -ne 0 ]]; then
+    echo -e "${GREEN}PASS${NC} G-14 detected an injected undispatched adapter"
+    echo "G-14 self-test: PASS"
+    exit 0
+  fi
+  echo -e "${RED}FAIL${NC} G-14 passed on an injected null adapter — vacuous gate"
+  echo "G-14 self-test: FAIL"
+  exit 1
+fi
+
+echo "=== G-14: adapter dispatch coverage ==="
+set +e
+out=$(check "scripts/targets.yaml" 2>&1)
+rc=$?
+set -e
+echo "$out"
+if [[ $rc -eq 0 ]]; then
+  echo -e "${GREEN}PASS${NC}"
+  echo "G-14: PASS"
+  exit 0
+fi
+echo -e "${RED}FAIL${NC} see BUG-2026-07-26-null-skill-adapters-install-nothing"
+echo "G-14: FAIL"
+exit 1

package/scripts/land-branch.sh

@@ -36,12 +36,18 @@ COMMIT_MSG="${ARGS[1]:-}"
 
 [ -n "$FEATURE_BRANCH" ] && [ -n "$COMMIT_MSG" ] || usage_land
 
-if [[ ! "$COMMIT_MSG" =~ $CONVENTIONAL_REGEX ]]; then
+# Both checks below judge the subject line, not the whole message. The length
+# test used to read ${#COMMIT_MSG}, so any Conventional Commit carrying a body
+# was rejected no matter how short its subject — the error text said "subject
+# line" while the check measured the entire string.
+COMMIT_SUBJECT="${COMMIT_MSG%%$'\n'*}"
+
+if [[ ! "$COMMIT_SUBJECT" =~ $CONVENTIONAL_REGEX ]]; then
   land_branch_deny "Commit message must follow Conventional Commits: <type>(<scope>): <subject>"
 fi
 
-if [ ${#COMMIT_MSG} -gt 72 ]; then
-  land_branch_deny "Commit subject line must be 72 characters or less"
+if [ ${#COMMIT_SUBJECT} -gt 72 ]; then
+  land_branch_deny "Commit subject line must be 72 characters or less (got ${#COMMIT_SUBJECT})"
 fi
 
 # Block AI agent attribution (P1 — CONVENTIONS.md § Git Attribution)

package/scripts/lib/adapter-guard.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+# story: e37s05
+# adapter-guard.sh — shared skill-name validation for every render adapter.
+#
+# Adapters interpolate the SkillIR `name` straight into a filesystem path
+# (mkdir -p "$dir/$IR_NAME"). A name containing "/" or ".." therefore writes
+# outside the destination directory.
+#
+# Ten adapters carried a private copy of this check (qwen_is_unsafe_skill_name
+# and friends) and nine had none at all — and the nine unguarded ones were
+# exactly the nine that never got a per-target test. One guard, sourced by every
+# adapter, replaces both the duplication and the gap.
+
+# Returns 0 (true) when the name must not be used as a path component.
+bp_is_unsafe_skill_name() {
+  local name="${1-}"
+  [[ -z "$name" || "$name" == "null" || "$name" == *"/"* || "$name" == *".."* || "$name" == .* ]]
+}
+
+# Echoes the name when safe; otherwise reports on stderr and returns 1.
+# Usage inside render_skill:  name="$(bp_assert_safe_skill_name "$IR_NAME" adaptername)" || return 1
+bp_assert_safe_skill_name() {
+  local name="${1-}"
+  local adapter="${2:-adapter}"
+  if bp_is_unsafe_skill_name "$name"; then
+    echo "${adapter}: refusing unsafe skill name: ${name:-<empty>}" >&2
+    return 1
+  fi
+  printf '%s' "$name"
+}

package/scripts/lib/golden-suite-gates.sh

@@ -19,6 +19,34 @@ GOLDEN_GATES=(
   # first so a vacuous gate is caught before its verdict is trusted.
   "g12-status-selftest:bash scripts/golden-g12-status-consistency.sh --self-test:false"
   "g12-status-consistency:bash scripts/golden-g12-status-consistency.sh:false"
+  # Anti-vacuity for the target-contract seam: every contract declared in
+  # targets.yaml must have a real assertion, and an unknown contract must FAIL
+  # rather than SKIP+exit 0 (seven contracts were fail-open before this).
+  # Writing a test must be enough to make it run: G-13 fails if any
+  # scripts/test-*.sh is absent from this list.
+  "g13-test-orphans-selftest:bash scripts/golden-g13-test-orphans.sh --self-test:false"
+  "g13-test-orphans:bash scripts/golden-g13-test-orphans.sh:false"
+  # An adapter that defines render_skill() must be dispatched by targets.yaml,
+  # or sync renders nothing for it while its install still claims success.
+  # docs/WORKFLOWS.md is generated from specs/workflows/*.yaml; a diagram nothing
+  # regenerates is a diagram that lies (see specs/archive/assets/README.md).
+  "workflow-diagrams-fresh:bash scripts/generate-workflow-diagrams.sh --check:false"
+  "g14-adapter-dispatch-selftest:bash scripts/golden-g14-adapter-dispatch.sh --self-test:false"
+  "g14-adapter-dispatch:bash scripts/golden-g14-adapter-dispatch.sh:false"
+  "target-contracts:bash scripts/test-target-contracts.sh:false"
+  # Registry-driven replacements for the 25 hand-written per-target scripts.
+  "install-hub:bash scripts/test-install-hub.sh:false"
+  "adapter-render:bash scripts/test-adapter-render.sh:false"
+  "adapters:bash scripts/test-adapters.sh:false"
+  # Previously orphaned: present in scripts/ but reachable from no gate.
+  "tombstone-mechanism:bash scripts/test-tombstone-mechanism.sh:false"
+  "trace-strict:bash scripts/test-trace-strict.sh:false"
+  "trace-matrix-size:bash scripts/test-trace-matrix-size.sh:false"
+  "setup-no-pyyaml:bash scripts/test-setup-no-pyyaml.sh:false"
+  "install-distribute-only:bash scripts/test-install-distribute-only.sh:false"
+  "completeness-critic-scope:bash scripts/test-completeness-critic-scope.sh:false"
+  "epics-wiki-zero-stories:bash scripts/test-generate-epics-wiki-zero-stories.sh:false"
+  "golden-g11-worktree-venv:bash scripts/test-golden-g11-worktree-venv.sh:false"
   "install-helpers:bash scripts/test-install-helpers.sh:false"
   "import-boundaries:bash scripts/check-import-boundaries.sh:false"
   "skill-catalog:bash scripts/validate-skill-catalog.sh:false"

package/scripts/lib/install-targets-b.sh

@@ -107,10 +107,6 @@ install_agy() {
   echo "  NOTE: Antigravity uses ~/.gemini/antigravity-cli/skills/ — not .gemini/extensions/ (Gemini CLI)"
 }
 
-install_antigravity() {
-  install_agy
-}
-
 uninstall_agy() {
   echo ""
   echo "Antigravity CLI → removing management from $AGY_CONFIG_DIR/"
@@ -122,10 +118,6 @@ uninstall_agy() {
   fi
 }
 
-uninstall_antigravity() {
-  uninstall_agy
-}
-
 # ── Codex CLI (e65s02) ───────────────────────────────────────────────────────
 
 CODEX_CONFIG_DIR="$HOME/.codex"

package/scripts/lib/sync-render.sh

@@ -54,49 +54,6 @@ render_gemini_command() {
   } > "$GEMINI_COMMANDS/$IR_NAME.toml"
 }
 
-render_gemini_hooks_manifest() {
-  local hookdir="${GEMINI_HOOKS_DIR:-$GEMINI_EXT_DIR/hooks}"
-  mkdir -p "$hookdir"
-  cat > "$hookdir/hooks-manifest.json" <<'JSON'
-{
-  "schema_version": 1,
-  "target": "gemini",
-  "config_path": "~/.gemini/settings.json",
-  "events_total": 11,
-  "events": [
-    "BeforeTool",
-    "AfterTool",
-    "BeforeAgent",
-    "AfterAgent",
-    "BeforeModel",
-    "BeforeToolSelection",
-    "AfterModel",
-    "SessionStart",
-    "SessionEnd",
-    "Notification",
-    "PreCompress"
-  ],
-  "shipped_hooks": [
-    {
-      "event": "SessionStart",
-      "script": "session-start",
-      "matcher": "startup|clear|compact",
-      "wave": "a",
-      "status": "shipped"
-    },
-    {
-      "event": "BeforeTool",
-      "script": "before-tool-git-guard.sh",
-      "matcher": "run_shell_command",
-      "wave": "a",
-      "status": "template"
-    }
-  ],
-  "polyglot_launcher": "run-hook.cmd"
-}
-JSON
-}
-
 render_pi_skill() {
   mkdir -p "$PI_SKILLS/$IR_NAME"
   {

package/scripts/lib/target-contracts.sh

@@ -82,6 +82,33 @@ assert_agy_skills_nonempty() {
   return 1
 }
 
+# Generic hooks-manifest assertion for every target that ships one under
+# scripts/hooks/<target>/. Before this existed, cline/codebuddy/codex/kilocode/
+# qwen/trae/windsurf all declared <target>_hooks_manifest in targets.yaml and
+# every one of them fell through run_contract's default branch to SKIP + exit 0
+# — seven declared contracts that could never fail.
+assert_hooks_manifest() {
+  local id="$1"
+  local contract="$2"
+  local target="${contract%_hooks_manifest}"
+  local manifest="scripts/hooks/${target}/hooks-manifest.json"
+
+  if [[ ! -f "$manifest" ]]; then
+    echo "FAIL $id:$contract — $manifest missing"
+    return 1
+  fi
+  # verify-install.sh sources this file without lib/python-env.sh, so resolve an
+  # interpreter locally rather than relying on $PYTHON being set.
+  local py="${PYTHON:-}"
+  [[ -n "$py" ]] || py="$(command -v python3 || command -v python || true)"
+  if [[ -n "$py" ]] && ! "$py" -c "import json; json.load(open('$manifest'))" 2>/dev/null; then
+    echo "FAIL $id:$contract — $manifest is not valid JSON"
+    return 1
+  fi
+  echo "PASS $id:$contract"
+  return 0
+}
+
 run_contract() {
   local id="$1"
   local contract="$2"
@@ -90,10 +117,19 @@ run_contract() {
     symlink_claude_md) assert_symlink_claude_md "$id" ;;
     cursor_rules_nonempty) assert_cursor_rules_nonempty "$id" ;;
     gemini_ext_exists) assert_gemini_ext_exists "$id" ;;
+    # gemini has its own adapter-level validator; keep it ahead of the generic
+    # pattern below so the more specific check wins.
     gemini_hooks_manifest) assert_gemini_hooks_manifest "$id" ;;
+    *_hooks_manifest) assert_hooks_manifest "$id" "$contract" ;;
     pi_skills_nonempty) assert_pi_skills_nonempty "$id" ;;
     agy_skills_nonempty) assert_agy_skills_nonempty "$id" ;;
     aider_bridge) assert_aider_bridge "$id" ;;
-    *) echo "SKIP $id:$contract — unknown contract"; return 0 ;;
+    # A contract declared in targets.yaml with no assertion behind it is a
+    # broken contract, not a no-op. Failing here is what makes the registry an
+    # enforced interface rather than documentation.
+    *)
+      echo "FAIL $id:$contract — unknown contract (no assertion implemented)"
+      return 1
+      ;;
   esac
 }

package/scripts/targets.yaml

@@ -47,7 +47,9 @@ targets:
   - id: cline
     name: Cline
     tier: default_on
-    skill: null
+    skill:
+      adapter: cline
+      output: .cline/skills
     context:
       adapter: cline
       mode: native
@@ -164,7 +166,9 @@ targets:
     # story: e68s02
     name: Qwen (Alibaba)
     tier: opt_in
-    skill: null
+    skill:
+      adapter: qwen
+      output: .qwen/skills
     context:
       adapter: qwen
       mode: symlink
@@ -172,17 +176,6 @@ targets:
     contracts:
       - agents_md_exists
       - qwen_hooks_manifest
-    name: Kilocode
-    tier: opt_in
-    skill:
-      adapter: kilocode
-      output: .kilocode/rules
-    context:
-      adapter: kilocode
-      mode: copy
-      file: AGENTS.md
-    contracts:
-      - agents_md_exists
 
   # Wave D (e37s12)
   - id: continue
@@ -303,3 +296,32 @@ targets:
       file: AGENTS.md
     contracts:
       - windsurf_hooks_manifest
+
+  # Registered by BUG-2026-07-26-null-skill-adapters-install-nothing: both ship
+  # a render_skill() adapter and an install function, but had no registry row,
+  # so srp-engine never rendered for them and install found nothing.
+  - id: opencode
+    name: OpenCode
+    tier: opt_in
+    skill:
+      adapter: opencode
+      output: .opencode/skills
+    context:
+      adapter: opencode
+      mode: symlink
+      file: AGENTS.md
+    contracts:
+      - agents_md_exists
+
+  - id: copilot
+    name: Copilot CLI
+    tier: opt_in
+    skill:
+      adapter: copilot
+      output: .copilot/skills
+    context:
+      adapter: copilot
+      mode: copy
+      file: AGENTS.md
+    contracts:
+      - agents_md_exists