skill-family-engineering-kit 0.19.2 → 0.20.0

package/package.json

@@ -8,8 +8,8 @@
     "url": "https://github.com/ifoohoo/skill-family-engineering-kit/issues"
   },
   "dependencies": {
-    "skill-family-contracts": "0.19.2",
-    "skill-family-harness-node": "0.19.2"
+    "skill-family-contracts": "0.20.0",
+    "skill-family-harness-node": "0.20.0"
   },
   "description": "Build-time scaffold, adoption planning, projection, and checks.",
   "engines": {
@@ -51,7 +51,7 @@
     "url": "https://github.com/ifoohoo/skill-family-engineering-kit.git"
   },
   "type": "module",
-  "version": "0.19.2",
+  "version": "0.20.0",
   "scripts": {
     "check": "node --test",
     "test": "node --test"

package/release-notes/0.19.3.yaml

@@ -0,0 +1,15 @@
+version: 0.19.3
+date: 2026-09-08
+locales:
+  en:
+    summary: Engineering Kit 0.19.3 aligns its package, release documentation, and generated projections with the Foundation Adoption Review Qoder distribution patch. Public commands and behavior are unchanged.
+    changes:
+      changed:
+        - Aligns the package version, release documentation, and verified public package projection with Foundation 0.19.3 without adding a command, capability, or adapter path.
+    upgradeNotes: Pin all three Foundation packages to exactly 0.19.3 and rebuild official Bundles under the existing source-identity and integrity rules. The capability catalog, host descriptors, drivers, since values, and maturity are unchanged.
+  zh-CN:
+    summary: Engineering Kit 0.19.3 将包版本、发布文档和生成投影与 Foundation Adoption Review 的 Qoder 分发补丁对齐。公开命令和行为保持不变。
+    changes:
+      changed:
+        - 包版本、发布文档和经验证的公开 package.json 投影与 Foundation 0.19.3 数值对齐，不增加命令、能力或 adapter 路径。
+    upgradeNotes: 三个 Foundation 包须一起精确锁定到 0.19.3，并按既有来源身份与完整性规则重建官方 Bundle。能力目录、宿主 descriptor、driver、since 字段和成熟度均不变。

package/release-notes/0.20.0.yaml

@@ -0,0 +1,21 @@
+version: 0.20.0
+date: 2026-09-10
+locales:
+  en:
+    summary: Engineering Kit 0.20.0 adds Cursor project Skill projection and a fixed Cursor Agent verification driver on the existing host-verification path.
+    changes:
+      added:
+        - Registers `.cursor/skills` as the Cursor project Skill root while preserving manual lifecycle planning.
+        - Adds `cursor-agent-print-v1` with fixed workspace, ask-mode, sandbox, JSON output, version, and failure checks.
+      changed:
+        - Qualifies project-level Skill discovery through Cursor CLI menu discovery and one explicit invocation, without requiring a duplicate IDE check.
+    upgradeNotes: Pin all three Foundation packages to exactly 0.20.0 and rebuild official Bundles. Cursor stays manual/developer-preview; the driver does not add automatic trust, model selection, or Marketplace lifecycle management.
+  zh-CN:
+    summary: Engineering Kit 0.20.0 在既有宿主验证路径上增加 Cursor 项目级 Skill 投影和固定 Cursor Agent 验证驱动。
+    changes:
+      added:
+        - 登记 `.cursor/skills` 作为 Cursor 项目级 Skill 根，生命周期计划继续保持手动。
+        - 增加 `cursor-agent-print-v1`，固定工作区、问答模式、沙箱、JSON 输出、版本与失败检查。
+      changed:
+        - 通过 Cursor CLI 菜单发现和一次显式调用取得项目级 Skill 发现资格，不重复执行 IDE 图形界面检查。
+    upgradeNotes: 三个 Foundation 包须一起精确锁定到 0.20.0，并重建官方 Bundle。Cursor 继续保持 manual/developer-preview；驱动不增加自动信任、模型选择或 Marketplace 生命周期管理。

package/src/host-verification-drivers.mjs

@@ -66,7 +66,7 @@ function workBuddyNativeLifecyclePlan({ request, roots, prompt }) {
     nativeStage("preflight", [{ step: "version-probe", args: ["--version"] }]),
     nativeStage("validate-v1", [manage("plugin-validate", "validate", roots.sourceRoot)]),
     nativeStage("marketplace-add", [manage("marketplace-add", "marketplace", "add", roots.sourceRoot, "--name", request.source.marketplaceId)]),
-    nativeStage("install-v1", [manage("plugin-install", "install", plugin, "--scope", "local", "--json")]),
+    nativeStage("install-v1", [manage("plugin-install", "install", plugin, "--scope", "local")]),
     nativeStage("discover-v1", [manage("plugin-list", "list", "--json")]),
     nativeStage("invoke-v1", [invoke("plugin-invoke")]),
     nativeStage("disable", [
@@ -324,6 +324,27 @@ export const QODER_DRIVER = Object.freeze({
   versionPattern: /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/u,
 });
 
+export const CURSOR_DRIVER = Object.freeze({
+  hostId: "cursor",
+  driverId: "cursor-agent-print-v1",
+  driverVersion: "1.0.0",
+  executableBasename: "cursor-agent",
+  probeArgs: Object.freeze(["--version"]),
+  // Frozen invocation (S-047): `cursor-agent --print --output-format json
+  // --mode ask --sandbox enabled --workspace <workspace> <prompt>`.  The
+  // workspace is derived from `<workspace>/.cursor/skills/<skill-id>` and is
+  // also the process cwd.  Never add force, trust, model, history, worktree,
+  // remote-session or MCP auto-approval flags.
+  promptFlag: "--print",
+  outputArgs: Object.freeze(["--output-format", "json", "--mode", "ask", "--sandbox", "enabled"]),
+  cwdFlag: "--workspace",
+  promptTrailing: true,
+  textProtocol: true,
+  // Cursor currently reports a date plus a seven-character lowercase commit
+  // abbreviation, for example `2026.09.08-6caf4ff`.
+  versionPattern: /^[0-9]{4}\.(?:0[1-9]|1[0-2])\.(?:0[1-9]|[12][0-9]|3[01])-[0-9a-f]{7}$/u,
+});
+
 export const BUILT_IN_HOST_VERIFICATION_DRIVERS = Object.freeze({
   [KIMI_DRIVER.driverId]: KIMI_DRIVER,
   [WORKBUDDY_DRIVER.driverId]: WORKBUDDY_DRIVER,
@@ -331,6 +352,7 @@ export const BUILT_IN_HOST_VERIFICATION_DRIVERS = Object.freeze({
   [CLAUDE_DRIVER.driverId]: CLAUDE_DRIVER,
   [CODEX_DRIVER.driverId]: CODEX_DRIVER,
   [QODER_DRIVER.driverId]: QODER_DRIVER,
+  [CURSOR_DRIVER.driverId]: CURSOR_DRIVER,
 });
 
 export function getBuiltInHostVerificationDriver(driverId) {
@@ -354,7 +376,7 @@ export function getBuiltInHostVerificationDriver(driverId) {
  * - CodeBuddy points HOME at the existing state root only; its project skill
  *   discovery is the fresh cwd `.codebuddy/skills` tree and therefore does
  *   not set CODEBUDDY_CONFIG_DIR.
- * - claude, codex and qoder point HOME at the existing state root only
+ * - claude, codex, qoder and cursor point HOME at the existing state root only
  *   (their login state lives under HOME); no model override, --config-dir or
  *   CODEX_HOME override is ever projected.
  */
@@ -376,8 +398,8 @@ export function driverEnvironment({ driver, sessionRoot, existingUserStateRoot,
 }
 
 /**
- * Frozen stream-protocol evaluation, one per admitted driver.  All three
- * 0.12.0 drivers share the minimal "exit status + frozen structure" shape
+ * Frozen stream-protocol evaluation, one per admitted driver.  Text-protocol
+ * drivers share the minimal "exit status + frozen structure" shape
  * (R-04/R-05/R-06): the raw stream text is read from the private evidence
  * only and never enters the public result.  The product never judges any
  * fixed output string: domain output semantics belong to the consumer and
@@ -398,6 +420,9 @@ export function driverEnvironment({ driver, sessionRoot, existingUserStateRoot,
  *   `is_error`; `is_error: true` (including the frozen quota-exhausted
  *   error_code 118) is a determined failure that maps to the existing
  *   failed + execution-failed, with no account state entering the result.
+ * - cursor: `--output-format json` output must be one object with
+ *   `type=result`, `subtype=success`, `is_error=false` and a string `result`;
+ *   extra fields are allowed and the answer text is never judged.
  */
 export function evaluateDriverStreamProtocol({ driver, stdoutText, exitOk }) {
   if (driver.driverId === CLAUDE_DRIVER.driverId) {
@@ -409,6 +434,9 @@ export function evaluateDriverStreamProtocol({ driver, stdoutText, exitOk }) {
   if (driver.driverId === QODER_DRIVER.driverId) {
     return exitOk && qoderJsonOk(stdoutText);
   }
+  if (driver.driverId === CURSOR_DRIVER.driverId) {
+    return exitOk && cursorJsonOk(stdoutText);
+  }
   return exitOk;
 }
 
@@ -485,3 +513,19 @@ function qoderJsonOk(stdoutText) {
   if (typeof parsed.is_error !== "boolean") return false;
   return !parsed.is_error;
 }
+
+function cursorJsonOk(stdoutText) {
+  let parsed;
+  try {
+    parsed = JSON.parse(stdoutText);
+  } catch {
+    return false;
+  }
+  return typeof parsed === "object"
+    && parsed !== null
+    && !Array.isArray(parsed)
+    && parsed.type === "result"
+    && parsed.subtype === "success"
+    && parsed.is_error === false
+    && typeof parsed.result === "string";
+}

package/src/host-verification.mjs

@@ -14,6 +14,7 @@ import {
   CLAUDE_DRIVER,
   CODEBUDDY_DRIVER,
   CODEX_DRIVER,
+  CURSOR_DRIVER,
   driverEnvironment,
   evaluateDriverStreamProtocol,
   getBuiltInHostVerificationDriver,
@@ -219,9 +220,10 @@ function assertRootIsolation({ inputRoots, writeRoots, existingUserStateRoot })
  * must be a real (non-symlink) directory.  The WorkBuddy config root is a
  * fresh write root under the same one-way state rule.
  *
- * Codex and Qoder freeze their discovery layout structurally: the installed
- * parent must be `<workspace>/.codex/skills` / `<fresh-ws>/.qoder/skills`
- * (basenames `skills` and `.codex` / `.qoder`), so the discovery target can
+ * Codex, Qoder and Cursor freeze their discovery layout structurally: the
+ * installed parent must be `<workspace>/.codex/skills`,
+ * `<fresh-ws>/.qoder/skills` or `<workspace>/.cursor/skills` (basenames
+ * `skills` and `.codex` / `.qoder` / `.cursor`), so the discovery target can
  * never escape the fresh workspace or reach a real user skill root.
  *
  * Claude freezes the classic plugin layout structurally: the installed
@@ -274,6 +276,10 @@ async function assertDiscoveryLayout({ driver, installedRoot, existingUserStateR
     if (path.basename(skillsRoot) !== "skills") throw fail("Qoder skills directory must be named skills");
     if (path.basename(path.dirname(skillsRoot)) !== ".qoder") throw fail("Qoder discovery root must be named .qoder");
   }
+  if (driver.driverId === CURSOR_DRIVER.driverId) {
+    if (path.basename(skillsRoot) !== "skills") throw fail("Cursor skills directory must be named skills");
+    if (path.basename(path.dirname(skillsRoot)) !== ".cursor") throw fail("Cursor discovery root must be named .cursor");
+  }
   if (driver.driverId === CLAUDE_DRIVER.driverId) {
     // Classic Claude plugin layout `<plugin-root>/skills/<skill-id>/SKILL.md`:
     // the skills directory basename is pinned so the --plugin-dir target
@@ -299,7 +305,9 @@ async function assertDiscoveryLayout({ driver, installedRoot, existingUserStateR
  * (`promptTrailing`) so the vector matches the frozen argv byte-for-byte:
  * claude `-p --verbose --no-session-persistence --output-format stream-json
  * <prompt> --plugin-dir <dir>`, codex `exec --json --ephemeral <prompt>`,
- * qoder `-p -o json --no-session-persistence --cwd <fresh-ws> <prompt>`
+ * qoder `-p -o json --no-session-persistence --cwd <fresh-ws> <prompt>`,
+ * cursor `--print --output-format json --mode ask --sandbox enabled
+ * --workspace <workspace> <prompt>`
  * where the --cwd target is the fresh workspace two segments above the
  * installed parent (`<fresh-ws>/.qoder/skills/<skill-id>`).  The claude
  * `--plugin-dir` target is the plugin root one segment above the installed
@@ -484,16 +492,16 @@ export async function runHostVerification({ request, bindings, hostsRoot } = {})
     const installedRoot = requiredBinding(bindings.installedSkillRoot, "installedSkillRoot");
     // The install target is a fresh write root: the same central isolation
     // check covers it against every protected input root, the three other
-    // fresh write roots, and the one-way existing user state rule.  Codex
-    // freezes `<workspace>/.codex/skills/<skill-id>` as its sole discovery
-    // projection (DES-013 §4.2, R-07): the installed target legitimately sits
+    // fresh write roots, and the one-way existing user state rule.  Codex and
+    // Cursor freeze their workspace-local skill roots: the installed target
+    // legitimately sits
     // inside the candidate workspace, which itself sits inside the caller's
-    // repository, and its exact position is pinned by the codex branch below
+    // repository, and its exact position is pinned by the driver branches below
     // (`dirname x3(installedRoot) === workspaceRoot`), so workspaceRoot and
     // repositoryRoot are not compared in this call; every other protected
     // input root stays bidirectionally disjoint.
     assertRootIsolation({
-      inputRoots: driver.driverId === CODEX_DRIVER.driverId
+      inputRoots: [CODEX_DRIVER.driverId, CURSOR_DRIVER.driverId].includes(driver.driverId)
         ? inputRoots.filter(([name]) => name !== "workspaceRoot" && name !== "repositoryRoot")
         : inputRoots,
       writeRoots: [...baseWriteRoots, ["installedSkillRoot", installedRoot]],
@@ -539,12 +547,14 @@ export async function runHostVerification({ request, bindings, hostsRoot } = {})
       if (gitInfo === null) return rejected();
       if (path.dirname(path.dirname(path.dirname(installedRoot))) !== workspaceRoot) return rejected();
     }
+    if (driver.driverId === CURSOR_DRIVER.driverId
+      && path.dirname(path.dirname(path.dirname(installedRoot))) !== workspaceRoot) return rejected();
     if (await stat(installedRoot).then(() => true, () => false)) return rejected();
     const adapterMembers = requiredMembers(bindings, "adapterMembers");
-    if (driver.driverId === QODER_DRIVER.driverId && !adapterMembers.includes("SKILL.md")) {
-      // R-08: a missing SKILL.md in the adapter table is a statically
-      // decidable preflight failure (the sole discovery projection cannot
-      // exist) — rejected before materialization with zero side effects.
+    if ([QODER_DRIVER.driverId, CURSOR_DRIVER.driverId].includes(driver.driverId) && !adapterMembers.includes("SKILL.md")) {
+      // A missing SKILL.md in the adapter table is a statically decidable
+      // preflight failure for these sole project-level projections — reject
+      // before materialization with zero side effects.
       return rejected();
     }
     if (driver.driverId === CODEX_DRIVER.driverId) {
@@ -595,10 +605,10 @@ export async function runHostVerification({ request, bindings, hostsRoot } = {})
       existingUserStateRoot,
       installedParent: path.dirname(installedRoot),
     });
-    // S-023: codex exec must start inside the trusted repository tree
-    // (R-07), so its process cwd is the candidate workspace, never the fresh
-    // session root.  All other drivers keep the fresh session root as cwd.
-    const processCwd = driver.driverId === CODEX_DRIVER.driverId
+    // Codex and Cursor must start in the candidate workspace selected by
+    // their frozen invocation vectors; all other drivers keep their existing
+    // cwd rules.
+    const processCwd = [CODEX_DRIVER.driverId, CURSOR_DRIVER.driverId].includes(driver.driverId)
       ? workspaceRoot
       : driver.driverId === CODEBUDDY_DRIVER.driverId
         ? discovery.projectRoot
@@ -734,8 +744,8 @@ export async function runHostVerification({ request, bindings, hostsRoot } = {})
       if (cause?.code !== "SFC2004") throw cause;
       return finishDeterminedProcess({ status: "failed", reason: "private-evidence-publication-failed", extra: { execution: publicExecution(invocation), snapshots } });
     }
-    // Frozen output-protocol judgement.  Only the three 0.12.0 drivers
-    // (textProtocol) decode the invocation stdout once more from the
+    // Frozen output-protocol judgement.  Drivers marked textProtocol decode
+    // the invocation stdout once more from the
     // private evidence (digest-bound) as UTF-8 text and judge the closed
     // driver protocol; the raw text itself never enters the public result.
     // Kimi and WorkBuddy keep their 0.11.0 raw-byte behavior: no decode, no