release-skill 0.9.16 → 0.9.18

package/src/producers/build-adapters.mjs

@@ -3,11 +3,12 @@
  *
  * Reads skill metadata from skills-src/ and plugin.json templates,
  * generates self-contained adapter directories for each platform
- * (claude, codex, kimi, and the build-only workbuddy adapter).
+ * enabled by the platform registry (currently claude, codex, kimi,
+ * workbuddy, and qoder).
  *
  * Each adapter root contains:
- * - Plugin manifest (.claude-plugin/, .codex-plugin/, .kimi-plugin/, or
- *   .codebuddy-plugin/)
+ * - Plugin manifest (.claude-plugin/, .codex-plugin/, .kimi-plugin/,
+ *   .codebuddy-plugin/, or .qoder-plugin/)
  * - Skills with host-specific root resolution
  * - bin/release-skill.mjs (wrapper) + bin/release-skill.bundle.mjs (self-contained bundle)
  * - schemas/ (JSON Schema files)
@@ -208,7 +209,9 @@ export function computeBuildAdaptersDigest(sourceBytes) {
 // tree (adapters/workbuddy/, manifest .codebuddy-plugin/plugin.json). This is
 // what lets codebuddy join the publish pipeline WITHOUT changing a single byte
 // of the generated workbuddy adapter (the former BUILD_ONLY workbuddy entry).
-const REGISTRY_PLATFORMS = PLATFORM_REGISTRY.map((platform) => ({
+const REGISTRY_PLATFORMS = PLATFORM_REGISTRY
+  .filter((platform) => platform.buildAdapter.enabled)
+  .map((platform) => ({
   name: platform.buildAdapter?.name ?? platform.id,
   pluginDirName: platform.buildAdapter.pluginDirName,
   templateFileName: platform.buildAdapter.templateFileName,
@@ -216,25 +219,12 @@ const REGISTRY_PLATFORMS = PLATFORM_REGISTRY.map((platform) => ({
     ? { marketplaceFileName: platform.buildAdapter.marketplaceFileName }
     : {}),
   hasMarketplace: platform.buildAdapter.hasMarketplace,
-}));
+  }));
 
 /**
- * Build-only distribution adapters: generated, self-contained plugin trees
- * that are NOT wired into the automated publish/reconcile/verify pipeline —
- * no registry PLATFORMS membership, no distributionType/actionType in the
- * plan schemas, no automated install checkpoint. A host joins the pipeline
- * only with a full registry descriptor (strategy, CLI protocol, schema enum);
- * until then a build-only entry lets the build emit an installable adapter
- * tree without fabricating an unverified install protocol.
- *
- * Currently EMPTY: every platform the build emits now has a full registry
- * descriptor. workbuddy (the CodeBuddy/WorkBuddy plugin, manifest
- * `.codebuddy-plugin/plugin.json`, `${CODEBUDDY_PLUGIN_ROOT}` expanded inline
- * in skill content) moved into the registry as the `codebuddy` platform with
- * `buildAdapter.name = 'workbuddy'`, so its adapter tree is still produced —
- * byte-for-byte unchanged — via REGISTRY_PLATFORMS. This constant is retained
- * (still exported and consumed below) for future build-only hosts that have an
- * installable adapter tree but no verified install protocol yet.
+ * Compatibility export retained for callers that still import the historical
+ * build-only list. Every generated adapter now derives from the registry's
+ * buildAdapter.enabled flag, so this list must remain empty.
  */
 export const BUILD_ONLY_ADAPTERS = Object.freeze([]);
 
@@ -344,6 +334,25 @@ const KIMI_PREAMBLE = `\
 >\n\
 `;
 
+/**
+ * Qoder exposes the absolute location of the skill it loaded. The generated
+ * adapter uses that host-provided location to derive its self-contained root;
+ * Qoder does not expand Claude's plugin-root placeholder.
+ */
+const QODER_PREAMBLE = `\
+> **Qoder 安装入口解析协议**：在调用 CLI 前，Agent 必须从宿主当前已加载技能的元数据中取得本 \`SKILL.md\` 的实际绝对路径，并将该字面量记为 \`SKILL_FILE\`。\n\
+> \`SKILL_FILE\` 不是环境变量；禁止从工作目录、可执行搜索路径、源码仓库或 shell 调用上下文猜测。若宿主未提供该绝对路径，立即停止并报告安装定位失败。\n\
+> 对 \`SKILL_FILE\` 执行 \`realpath\`，取其目录向上两级得到 \`PLUGIN_ROOT\`；校验真实技能路径匹配 \`PLUGIN_ROOT/skills/*/SKILL.md\` 且仍位于插件根内（路径包含检查）。\n\
+> 令 \`RELEASE_SKILL_ENTRY=PLUGIN_ROOT/bin/release-skill.mjs\`，对入口执行 \`realpath\` containment、\`lstat\` 非符号链接且为普通文件校验。\n\
+> 每一次 shell 工具调用都必须在同一个调用中用上述已验证绝对值设置 \`RELEASE_SKILL_ENTRY\`，然后执行 \`node "$RELEASE_SKILL_ENTRY" ...\`；不得依赖前一次 shell 的变量。\n\
+>\n\
+`;
+
+const CURSOR_PREAMBLE = CODEX_PREAMBLE.replaceAll('Codex', 'Cursor').replace(
+  '> 令 `RELEASE_SKILL_ENTRY',
+  '> 校验 `PLUGIN_ROOT/.cursor-plugin/plugin.json` 是根内的普通文件，且名称为 `release-skill`；清单缺失或不一致时停止。Cursor 不保证注入插件根变量。\n> 令 `RELEASE_SKILL_ENTRY',
+);
+
 /**
  * Render SKILL.md content for a specific platform.
  *
@@ -351,13 +360,14 @@ const KIMI_PREAMBLE = `\
  * - Codex: replaces the Claude-only path with $RELEASE_SKILL_ENTRY,
  *   and prepends the path resolution protocol preamble.
  * - Kimi: same substitution as Codex, with the Kimi Code preamble.
+ * - Qoder: same substitution, with a host-loaded-path preamble.
  * - WorkBuddy: pure variable substitution (${CLAUDE_PLUGIN_ROOT} ->
  *   ${CODEBUDDY_PLUGIN_ROOT}); CodeBuddy expands the variable inline in
  *   skill content (official plugin reference), the same mechanism Claude
  *   uses, so no entry-resolution preamble is needed.
  *
  * @param {string} content - Canonical SKILL.md content.
- * @param {string} platformName - 'claude', 'codex', 'kimi', or 'workbuddy'.
+ * @param {string} platformName - 'claude', 'codex', 'kimi', 'workbuddy', or 'qoder'.
  * @returns {string}
  */
 function renderSkillForPlatform(content, platformName) {
@@ -367,9 +377,14 @@ function renderSkillForPlatform(content, platformName) {
     return content.replaceAll('${CLAUDE_PLUGIN_ROOT}', '${CODEBUDDY_PLUGIN_ROOT}');
   }
 
-  if (platformName === 'codex' || platformName === 'kimi') {
-    const hostLabel = platformName === 'codex' ? 'Codex' : 'Kimi';
-    const preamble = platformName === 'codex' ? CODEX_PREAMBLE : KIMI_PREAMBLE;
+  if (platformName === 'codex' || platformName === 'kimi' || platformName === 'qoder' || platformName === 'cursor') {
+    const hostLabel = { codex: 'Codex', kimi: 'Kimi', qoder: 'Qoder', cursor: 'Cursor' }[platformName];
+    const preamble = {
+      codex: CODEX_PREAMBLE,
+      kimi: KIMI_PREAMBLE,
+      qoder: QODER_PREAMBLE,
+      cursor: CURSOR_PREAMBLE,
+    }[platformName];
     let rendered = content.replaceAll(
       '${CLAUDE_PLUGIN_ROOT}/bin/release-skill-local-finish.mjs',
       '$RELEASE_SKILL_LOCAL_FINISH_ENTRY',
@@ -382,6 +397,9 @@ function renderSkillForPlatform(content, platformName) {
         .replaceAll('RELEASE_SKILL_ENTRY', 'RELEASE_SKILL_LOCAL_FINISH_ENTRY')
         .replaceAll('release-skill.mjs', 'release-skill-local-finish.mjs')
       : preamble;
+    if (platformName === 'cursor' && /\$\{(?:CLAUDE|CURSOR|CODEBUDDY|KIMI)[A-Z_]*\}/u.test(rendered)) {
+      throw new Error('Cursor rendering contains a residual host-specific placeholder');
+    }
     // A remaining bare host-root reference has no safe path-derived equivalent.
     if (rendered.includes('${CLAUDE_PLUGIN_ROOT}')) {
       throw new Error(`${hostLabel} rendering found an unsupported bare CLAUDE_PLUGIN_ROOT reference`);

package/src/producers/foundation-resource-projection.mjs

@@ -55,9 +55,9 @@ import { digestBytes, publishFileOrReplace, readFileStrict, withTemporaryWorkspa
 import { canonicalJson } from '../core/digest.mjs';
 
 export const FOUNDATION_PACKAGES = Object.freeze({
-  'skill-family-contracts': '0.17.0',
-  'skill-family-engineering-kit': '0.17.0',
-  'skill-family-harness-node': '0.17.0',
+  'skill-family-contracts': '0.21.0',
+  'skill-family-engineering-kit': '0.21.0',
+  'skill-family-harness-node': '0.21.0',
 });
 
 export const BINDING_RECORD_PATH = 'bin/foundation-resource-binding.json';

package/src/schemas/host-descriptor.schema.json

@@ -25,7 +25,7 @@
       "additionalProperties": false,
       "required": ["driverId", "authStrategy", "credentialMutation"],
       "properties": {
-        "driverId": { "enum": ["kimi-code-print-v1", "workbuddy-codebuddy-print-v1", "codebuddy-print-v1", "claude-code-print-v1", "codex-exec-v1", "qodercli-print-v1"] },
+        "driverId": { "enum": ["kimi-code-print-v1", "workbuddy-codebuddy-print-v1", "codebuddy-print-v1", "claude-code-print-v1", "codex-exec-v1", "qodercli-print-v1", "cursor-agent-print-v1"] },
         "authStrategy": { "const": "existing-user-state" },
         "credentialMutation": { "const": "host-managed" }
       }
@@ -109,7 +109,14 @@
       }
     },
     {
-      "if": { "properties": { "hostId": { "enum": ["kimi-code", "workbuddy", "codebuddy", "claude", "codex", "qoder"] } }, "required": ["hostId"] },
+      "if": { "properties": { "hostId": { "const": "cursor" } }, "required": ["hostId"] },
+      "then": {
+        "required": ["verification"],
+        "properties": { "verification": { "type": "object", "properties": { "driverId": { "const": "cursor-agent-print-v1" } } } }
+      }
+    },
+    {
+      "if": { "properties": { "hostId": { "enum": ["kimi-code", "workbuddy", "codebuddy", "claude", "codex", "qoder", "cursor"] } }, "required": ["hostId"] },
       "else": { "properties": { "verification": false } }
     },
     {