agentbundle 0.2.0__tar.gz → 0.3.0__tar.gz

{agentbundle-0.2.0 → agentbundle-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentbundle
-Version: 0.2.0
+Version: 0.3.0
 Summary: Reference CLI and distribution pipeline for the agent-ready-repo adapter contract.
 Author-email: eugenelim <eugenelim@users.noreply.github.com>
 License: Apache-2.0 OR MIT
@@ -24,14 +24,14 @@ contract. Ships the `agentbundle` console script — install, validate,
 adapt, and inspect packs — plus the build pipeline (`agentbundle.build`)
 that projects pack sources into adapter-shaped trees.
 
-As of 0.2.0, credential resolution lives in the build-projected
-`credentials_shim` sibling that the `credential-brokers` pack drops
-alongside each `auth: creds` consumer skill's `scripts/`. The
-`agentbundle.credentials` module that previous releases (0.1.x)
-exposed has been removed; consumers import `from .credentials_shim
-import …` against the projected sibling instead. See the
-`credential-broker-contract` spec and this package's `CHANGELOG.md`
-for the migration recipe.
+As of 0.2.0 the `agentbundle.credentials` module that earlier releases
+(0.1.x) exposed has been removed — `agentbundle` no longer ships a
+credential-resolution module. Since RFC-0023, `auth: creds` consumers
+resolve credentials through the standalone, pip-installable `credbroker`
+library, imported in-process (`from credbroker import …`); it replaced the
+build-projected `credentials_shim` sibling, which now survives only as the
+`sso-broker` companion. See the `credbroker` package, RFC-0023, and this
+package's `CHANGELOG.md` for the migration history.
 
 See the [top-level README](https://github.com/eugenelim/agent-ready-repo#readme)
 for install routes, the pack catalogue, and the adapter contract.

agentbundle-0.3.0/README.md

@@ -0,0 +1,19 @@
+# agentbundle
+
+Runtime library and reference CLI for the
+[agent-ready-repo](https://github.com/eugenelim/agent-ready-repo) adapter
+contract. Ships the `agentbundle` console script — install, validate,
+adapt, and inspect packs — plus the build pipeline (`agentbundle.build`)
+that projects pack sources into adapter-shaped trees.
+
+As of 0.2.0 the `agentbundle.credentials` module that earlier releases
+(0.1.x) exposed has been removed — `agentbundle` no longer ships a
+credential-resolution module. Since RFC-0023, `auth: creds` consumers
+resolve credentials through the standalone, pip-installable `credbroker`
+library, imported in-process (`from credbroker import …`); it replaced the
+build-projected `credentials_shim` sibling, which now survives only as the
+`sso-broker` companion. See the `credbroker` package, RFC-0023, and this
+package's `CHANGELOG.md` for the migration history.
+
+See the [top-level README](https://github.com/eugenelim/agent-ready-repo#readme)
+for install routes, the pack catalogue, and the adapter contract.

{agentbundle-0.2.0 → agentbundle-0.3.0}/agentbundle/_data/adapter.schema.json

@@ -49,7 +49,8 @@
                     "dropped",
                     "codex-agent-toml",
                     "copilot-agent-md",
-                    "copilot-hooks-json"
+                    "copilot-hooks-json",
+                    "gemini-command-toml"
                   ]
                 },
                 "target-path": {"type": "string"},
@@ -93,7 +94,8 @@
                       "dropped",
                       "codex-agent-toml",
                       "copilot-agent-md",
-                      "copilot-hooks-json"
+                      "copilot-hooks-json",
+                      "gemini-command-toml"
                     ]
                   },
                   "else": {
@@ -113,7 +115,8 @@
                           "dropped",
                           "codex-agent-toml",
                           "copilot-agent-md",
-                          "copilot-hooks-json"
+                          "copilot-hooks-json",
+                          "gemini-command-toml"
                         ]
                       },
                       "user": {
@@ -129,7 +132,8 @@
                           "dropped",
                           "codex-agent-toml",
                           "copilot-agent-md",
-                          "copilot-hooks-json"
+                          "copilot-hooks-json",
+                          "gemini-command-toml"
                         ]
                       }
                     }
@@ -254,6 +258,13 @@
             "values": {
               "type": "object",
               "additionalProperties": {"type": "string"}
+            },
+            "related-values": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": {"type": "string"}
+              }
             }
           }
         }

{agentbundle-0.2.0 → agentbundle-0.3.0}/agentbundle/_data/adapter.toml

@@ -30,13 +30,40 @@
 # `copilot-agent-md` (markdown → `.github/agents/<name>.agent.md`); `hook-wiring`
 # flips `dropped`→`copilot-hooks-json` (one self-contained `<name>.json` per
 # source file at `.github/hooks/`); `hook-body` retargets `tools/hooks/`→
-# `.github/hooks/`; `skill` gains a user target (`~/.copilot/instructions/`);
+# `.github/hooks/`; `skill` gained a user target (later flipped to
+# `.github/skills/` SKILL.md in v0.11 — see the [contract] note below);
 # `[adapter.copilot.scope]` gains `user = "~"` + `allowed-prefixes.user`; new
 # `copilot-agent-frontmatter-v0.10` mapping. `command` stays `dropped`
 # (copilot-cli#618/#1113). Two-pack bump (research + core), not all-pack.
+# docs/specs/codex-agent-config-projection: corrects the existing codex
+# `codex-agent-frontmatter-v0.8` mapping to preserve `model` and `tools`
+# intent as documented Codex agent config instead of dropping those fields.
+# RFC-0026 / ADR-0015 / docs/specs/cursor-full-parity (v0.11): new native
+# `cursor` full-parity adapter projecting all five primitives to `.cursor/*`
+# at both scopes. NO new projection mode and NO adapter.schema.json change —
+# skill→direct-directory, agent→direct-file (+ `cursor-agent-frontmatter-v0.11`;
+# `tools` dropped + `readonly` derived inline by cursor.py), hook-body→
+# direct-file, hook-wiring→merge-json (aggregated `.cursor/hooks.json`,
+# event-remapped + `version` key via cursor.py's merge helper), command→
+# direct-file (Cursor honours commands). kiro-ide-hook dropped. Same `.cursor/`
+# prefix at both scopes (claude-code/codex pattern; no prefix rewrite).
+# Distribution-only (not in SELF_HOST_ADAPTERS).
 
 [contract]
-version = "0.10"
+# v0.12 (docs/specs/copilot-skills-and-web, 2026-06-11): copilot `skill` flips
+# `instruction-file`→`direct-directory` (first-class Agent Skills at
+# `.github/skills/<name>/SKILL.md`); the `copilot-instruction` frontmatter-default
+# is retired. Web correction (RFC-0024 § Errata E1) is docs/comments-only.
+# (Lands atop RFC-0026's cursor v0.11; the two co-bumped — copilot takes v0.12.)
+# RFC-0027 / ADR-0016 / docs/specs/gemini-full-parity (v0.13): new native
+# `gemini` full-parity adapter projecting all five primitives to `.gemini/*` at
+# both scopes. One new projection mode (`gemini-command-toml`); a bespoke
+# `.gemini/settings.json` merge carrying `hooks` (event-remapped, fail-closed) +
+# a static `context.fileName` bridge (from `context-filenames`). agent `tools:`
+# kept and name-mapped; tier-preserving model map. hook-body lands under
+# `.gemini/hooks/` (the cursor model — single prefix at both scopes). kiro-ide-hook
+# dropped. Distribution-only (not in SELF_HOST_ADAPTERS).
+version = "0.13"
 
 # Sibling schemas this contract references — pack metadata and the
 # per-pack Claude-plugin manifest. Defined by spec AC #3 + #4.
@@ -68,12 +95,16 @@ source-path = ".apm/commands/"
 [primitive."kiro-ide-hook"]
 source-path = ".apm/kiro-ide-hooks/"
 
-# RFC-0013 § 4c — `shared-libs/` carries Python sibling files that the
-# build pipeline projects into every consumer skill declaring
-# `metadata.auth: creds`. The projection is cross-cutting (not adapter-
-# keyed) and lives in `agentbundle.build.shared_libs`; the declaration
-# here documents the source path so future readers see the full
-# primitive surface in one place.
+# RFC-0013 § 4c / RFC-0023 — `shared-libs/` carries Python sibling
+# files. The original projection into every `metadata.auth: creds`
+# skill's `scripts/` was RETIRED in RFC-0023 (those consumers resolve
+# via the `credbroker` pip library, imported in-process). What survives
+# in `agentbundle.build.shared_libs` is source enumeration
+# (`collect_sources`): the `adapter-root-bins` companion-shim rail reads
+# this path to locate `credentials_shim.py` for projection into
+# `<scope-root>/.agentbundle/bin/`. The declaration here documents the
+# source path so future readers see the full primitive surface in one
+# place.
 [primitive."shared-libs"]
 source-path = ".apm/shared-libs/"
 
@@ -88,6 +119,16 @@ source-path = ".apm/shared-libs/"
 [primitive."adapter-root-bins"]
 source-path = ".apm/adapter-root-bins/"
 
+# credbroker-user-scope T3 — `user-libs/` carries vendored Python package
+# source projected to the per-scope lib floor (`~/.agentbundle/lib/` at user
+# scope, `<repo>/.agentbundle/lib/` self-host staging) as the lowest-precedence
+# `sys.path` import target. Build-pipeline-only like `adapter-root-bins`: no
+# per-adapter projection rules (the target is `<scope-root>/.agentbundle/lib/`,
+# fenced by `allowed-prefixes.<scope>`, not by per-adapter target paths), so the
+# declaration carries the source path only.
+[primitive."user-libs"]
+source-path = ".apm/user-libs/"
+
 # ---------------------------------------------------------------------------
 # Claude Code adapter — 5 projections (one per primitive) + v0.3 forks
 #
@@ -392,12 +433,16 @@ allowed-prefixes.user = [".kiro/", ".agentbundle/"]
 # Copilot adapter — 5 projections (one per primitive)
 # ---------------------------------------------------------------------------
 
+# `skill` projects as first-class Copilot Agent Skills (docs/specs/copilot-skills-and-web,
+# RFC-0024 § Errata E2): `direct-directory` passthrough of our canonical
+# `.apm/skills/<name>/SKILL.md` to `.github/skills/<name>/SKILL.md` (repo) and
+# `~/.copilot/skills/<name>/SKILL.md` (user, via the install rewrite). Copilot
+# accepts our Claude SKILL.md verbatim. Was `instruction-file`→`.github/instructions/`.
 [[adapter.copilot.projection]]
 primitive = "skill"
-mode = "instruction-file"
-target-path = ".github/instructions/"
-frontmatter-default = "copilot-instruction"
-on-conflict = "prompt-then-overwrite"
+mode = "direct-directory"
+target-path = ".github/skills/"
+on-conflict = "prompt-then-preserve"
 
 [[adapter.copilot.projection]]
 primitive = "agent"
@@ -422,25 +467,26 @@ on-conflict = "prompt-then-preserve"
 primitive = "command"
 mode = "dropped"
 
-# Scope dimension for Copilot (RFC-0024 / ADR-0013 / docs/specs/copilot-full-parity).
-# Copilot is now a full-parity, user-scope-capable adapter: the app + CLI
-# discover agents/instructions/hooks from `.github/` (repo) and `~/.copilot/`
-# (user). The repo-only restriction RFC-0012 recorded is superseded-in-part.
-# `skill` keeps its `instruction-file` mode; its user target
-# (`~/.copilot/instructions/<name>.instructions.md`) is produced by the install
-# handler's copilot user-scope prefix rewrite (`.github/X/`→`.copilot/X/`),
-# since the build adapter is scope-agnostic and emits repo-relpaths.
+# Scope dimension for Copilot (RFC-0024 / ADR-0013 / docs/specs/copilot-full-parity,
+# skill surface per docs/specs/copilot-skills-and-web). Copilot is a full-parity,
+# user-scope-capable adapter: the app + CLI discover skills/agents/hooks from
+# `.github/` (repo) and `~/.copilot/` (user). The repo-only restriction RFC-0012
+# recorded is superseded-in-part. `skill` projects as a `direct-directory`
+# `SKILL.md` tree; its user target (`~/.copilot/skills/<name>/SKILL.md`) is
+# produced by the install handler's copilot user-scope prefix rewrite
+# (`.github/X/`→`.copilot/X/`), since the build adapter is scope-agnostic and
+# emits repo-relpaths.
 [adapter.copilot.scope]
 repo = "."
 user = "~"
-# RFC-0024: repo-scope agents at `.github/agents/`, instructions at
-# `.github/instructions/`, hook wiring + bodies at `.github/hooks/`.
-allowed-prefixes.repo = [".github/instructions/", ".github/agents/", ".github/hooks/"]
+# RFC-0024 + copilot-skills-and-web: repo-scope skills at `.github/skills/`,
+# agents at `.github/agents/`, hook wiring + bodies at `.github/hooks/`.
+allowed-prefixes.repo = [".github/skills/", ".github/agents/", ".github/hooks/"]
 # User-scope home is `~/.copilot/` — the prefix the install rewrite produces
 # from the adapter's repo-relpaths. `.agentbundle/` carries the install
 # state file (`~/.agentbundle/state.toml`), same as every other user-scope-
 # capable adapter (claude-code, codex).
-allowed-prefixes.user = [".copilot/agents/", ".copilot/instructions/", ".copilot/hooks/", ".agentbundle/"]
+allowed-prefixes.user = [".copilot/skills/", ".copilot/agents/", ".copilot/hooks/", ".agentbundle/"]
 
 # ---------------------------------------------------------------------------
 # Codex adapter — 5 projections (one per primitive)
@@ -488,6 +534,183 @@ user = "~"
 allowed-prefixes.repo = [".agents/skills/", ".codex/", ".agentbundle/", "tools/hooks/"]
 allowed-prefixes.user = [".agents/skills/", ".codex/", ".agentbundle/"]
 
+# ---------------------------------------------------------------------------
+# Cursor adapter — full-parity native adapter (RFC-0026 / ADR-0015 /
+# docs/specs/cursor-full-parity, v0.11).
+#
+# Projects all five catalogue primitives to Cursor's native `.cursor/*`
+# discovery paths at both repo and user scope. Cursor's CLI and IDE share one
+# `.cursor/` layout (no RFC-0022-style split). No new projection mode and no
+# adapter.schema.json change: every primitive reuses an already-enumerated
+# mode. The agent uses `direct-file` + a frontmatter mapping (the kiro-ide
+# `.md` shape); because Cursor subagents have no per-agent tool allowlist,
+# cursor.py drops the source `tools` and derives a `readonly` flag for
+# non-mutating agents (documented degradation, the ADR-0013 Copilot shape).
+# hook-wiring is `merge-json` to an aggregated `.cursor/hooks.json`; cursor.py's
+# merge helper remaps source events via `hook-event-map` and adds a `version`
+# key. `command` is first-class (Cursor is the second adapter after claude-code
+# to honour commands). `kiro-ide-hook` is dropped (Kiro-only), declared in the
+# table form since the schema's array `primitive` enum admits only the five
+# standard primitives. Scope prefix is identical at both scopes (the
+# claude-code/codex pattern), so the user-scope home is the generic
+# user-rooting of the repo-relpath — NO Cursor-specific prefix rewrite.
+# Distribution-only: cursor is NOT in SELF_HOST_ADAPTERS.
+# ---------------------------------------------------------------------------
+
+[[adapter.cursor.projection]]
+primitive = "skill"
+mode = "direct-directory"
+target-path = ".cursor/skills/"
+on-conflict = "prompt-then-preserve"
+
+[[adapter.cursor.projection]]
+primitive = "agent"
+mode = "direct-file"
+target-path = ".cursor/agents/"
+frontmatter-mapping = "cursor-agent-frontmatter-v0.11"
+on-conflict = "prompt-then-preserve"
+
+[[adapter.cursor.projection]]
+primitive = "hook-body"
+mode = "direct-file"
+target-path = ".cursor/hooks/"
+on-conflict = "prompt-then-preserve"
+
+[[adapter.cursor.projection]]
+primitive = "hook-wiring"
+mode = "merge-json"
+target-path = ".cursor/hooks.json"
+managed-key = "hooks"
+on-conflict = "merge-managed-key-only"
+# Hook-event map (RFC-0026 decision 4). Our hook-wiring source uses Claude-
+# native PascalCase event names (e.g. `[[hooks.SessionStart]]`); Cursor's
+# hooks.json uses camelCase event keys. cursor.py's merge helper reads this
+# table to translate each source event; a source event with no entry here is
+# dropped with a build-time log line (fail-open, the no-silent-caps rule —
+# deliberately unlike copilot-hooks-json's fail-closed map). The map lives in
+# the contract, not the adapter code. (Erratum vs RFC-0026: the RFC spelled the
+# source vocabulary `agentSpawn`/…; the shipped source is Claude PascalCase, so
+# the map keys on PascalCase — target events unchanged. See the spec Changelog.)
+hook-event-map = { SessionStart = "sessionStart", UserPromptSubmit = "beforeSubmitPrompt", PreToolUse = "preToolUse", PostToolUse = "postToolUse", Stop = "stop" }
+
+[[adapter.cursor.projection]]
+primitive = "command"
+mode = "direct-file"
+target-path = ".cursor/commands/"
+on-conflict = "prompt-then-preserve"
+
+# kiro-ide-hook — dropped (Kiro-only primitive). Declared in the table form,
+# not the projection array, because the schema's array `primitive` enum admits
+# only skill/agent/hook-body/hook-wiring/command (kiro-ide / kiro-cli set the
+# table-form precedent).
+[adapter.cursor.projections.kiro-ide-hook]
+mode = "dropped"
+
+# Scope dimension for Cursor (RFC-0026 / ADR-0015). Cursor's `.cursor/` prefix
+# is identical at repo and user scope (the claude-code/codex shape), so the
+# divergent user-scope home is produced by the generic user-root resolution,
+# not a Cursor-specific prefix rewrite. `.agentbundle/` carries the install
+# state file at both scopes (as every scope-capable adapter lists it).
+[adapter.cursor.scope]
+repo = "."
+user = "~"
+allowed-prefixes.repo = [".cursor/", ".agentbundle/"]
+allowed-prefixes.user = [".cursor/", ".agentbundle/"]
+
+# ---------------------------------------------------------------------------
+# Gemini adapter — full-parity native adapter (RFC-0027 / ADR-0016 /
+# docs/specs/gemini-full-parity, v0.13).
+#
+# Projects all five catalogue primitives to Gemini CLI's native `.gemini/*`
+# discovery paths at both repo and user scope. Unlike Cursor, gemini KEEPS and
+# name-maps the agent `tools:` allowlist (Gemini has a real per-agent tool
+# allowlist) and applies a tier-preserving `model` map (`gemini-agent-frontmatter`).
+# `command` uses the new `gemini-command-toml` mode (markdown body → TOML `prompt`;
+# fail-closed on multi-injection). `hook-body` lands under `.gemini/hooks/` (the
+# cursor model — a single `.gemini/` prefix at both scopes, no `tools/hooks/`), and
+# the carried hook command is path-rewritten `tools/hooks/`→`.gemini/hooks/` by
+# gemini.py's settings-merge helper. `hook-wiring` is `merge-json` into a shared
+# `.gemini/settings.json`: gemini.py's bespoke `_project_settings_json` helper (the
+# cursor `_project_hooks_json` shape, NOT the generic merge_json module) writes the
+# `hooks` map (event-remapped via `hook-event-map`, FAIL-CLOSED on an unmapped event
+# — the copilot precedent, unlike cursor's fail-open) AND a static `context.fileName`
+# bridge sourced from `context-filenames`, in one managed-merge that preserves
+# adopter keys. SINGLE-WRITER (cursor model): the file is written only when the pack
+# ships hook-wiring — repo-scope install writes merge-json targets whole-file, so a
+# settings.json emitted for every pack would clobber another pack's hooks. The
+# `context` bridge rides in that same write; the base `core` pack ships both the
+# session-start wiring and `AGENTS.md`, so the bridge lands with it. `kiro-ide-hook` is dropped
+# (Kiro-only), declared in the table form. Scope prefix is identical at both scopes
+# (the claude-code/cursor pattern), so the user-scope home is the generic
+# user-rooting of the repo-relpath — NO gemini-specific prefix rewrite.
+# Distribution-only: gemini is NOT in SELF_HOST_ADAPTERS.
+# ---------------------------------------------------------------------------
+
+[[adapter.gemini.projection]]
+primitive = "skill"
+mode = "direct-directory"
+target-path = ".gemini/skills/"
+on-conflict = "prompt-then-preserve"
+
+[[adapter.gemini.projection]]
+primitive = "agent"
+mode = "direct-file"
+target-path = ".gemini/agents/"
+frontmatter-mapping = "gemini-agent-frontmatter"
+on-conflict = "prompt-then-preserve"
+
+[[adapter.gemini.projection]]
+primitive = "hook-body"
+mode = "direct-file"
+target-path = ".gemini/hooks/"
+on-conflict = "prompt-then-preserve"
+
+[[adapter.gemini.projection]]
+primitive = "hook-wiring"
+mode = "merge-json"
+target-path = ".gemini/settings.json"
+managed-key = "hooks"
+on-conflict = "merge-managed-key-only"
+# Hook-event map (RFC-0027 decision 6). Our hook-wiring source uses Claude-native
+# PascalCase event names (e.g. `[[hooks.SessionStart]]`); Gemini's settings.json
+# uses its own event vocabulary. gemini.py's settings-merge helper reads this table
+# to translate each source event; a source event with no entry here **fails the
+# build** (fail-closed — the copilot-hooks-json precedent, deliberately unlike
+# cursor's fail-open drop-with-log). The map lives in the contract, not the adapter
+# code.
+hook-event-map = { SessionStart = "SessionStart", SessionEnd = "SessionEnd", UserPromptSubmit = "BeforeAgent", PreToolUse = "BeforeTool", PostToolUse = "AfterTool", Stop = "AfterAgent" }
+# Static `context.fileName` bridge (RFC-0027 decision 5). gemini.py's settings-merge
+# helper emits `context = { fileName = <this list> }` into the same `.gemini/settings.json`
+# so Gemini CLI reads the canonical `AGENTS.md` (and `GEMINI.md` if present). Data
+# lives in the contract, not a literal in code; written in the single hook-wiring
+# settings.json write (core ships both the wiring and AGENTS.md).
+context-filenames = ["AGENTS.md", "GEMINI.md"]
+
+[[adapter.gemini.projection]]
+primitive = "command"
+mode = "gemini-command-toml"
+target-path = ".gemini/commands/"
+on-conflict = "prompt-then-preserve"
+
+# kiro-ide-hook — dropped (Kiro-only primitive). Declared in the table form, not the
+# projection array, because the schema's array `primitive` enum admits only the five
+# standard primitives (the kiro-ide / kiro-cli / cursor precedent).
+[adapter.gemini.projections.kiro-ide-hook]
+mode = "dropped"
+
+# Scope dimension for Gemini (RFC-0027 / ADR-0016). Gemini's `.gemini/` prefix is
+# identical at repo and user scope (the claude-code/cursor shape), so the divergent
+# user-scope home is produced by the generic user-root resolution, not a
+# gemini-specific prefix rewrite. Every projected target (skills, agents, commands,
+# settings.json, AND hook bodies at `.gemini/hooks/`) is under `.gemini/`, so the
+# two allowed-prefix lists are identical. `.agentbundle/` carries the install state
+# file at both scopes.
+[adapter.gemini.scope]
+repo = "."
+user = "~"
+allowed-prefixes.repo = [".gemini/", ".agentbundle/"]
+allowed-prefixes.user = [".gemini/", ".agentbundle/"]
+
 # ---------------------------------------------------------------------------
 # Frontmatter mappings — rewrite rules applied when projecting a primitive
 # ---------------------------------------------------------------------------
@@ -541,15 +764,19 @@ values = { Read = "read", Grep = "grep", Glob = "glob", Edit = "write", Write =
 rename = "model"
 values = { opus = "claude-opus-4.6", sonnet = "claude-sonnet-4.5", haiku = "claude-haiku-4.5" }
 
-# Codex agent frontmatter v0.8 (docs/specs/dropped-primitives-coverage):
+# Codex agent frontmatter v0.8 (docs/specs/dropped-primitives-coverage,
+# amended by docs/specs/codex-agent-config-projection):
 # rewrite rules from claude-code-style markdown agent (YAML frontmatter with
 # `name`, `description`, optionally `tools`, `model`) to codex's TOML agent
-# shape (`name`, `description`, `developer_instructions`). The markdown body
-# lands in TOML `developer_instructions` via a mode-level convention in the
-# `codex-agent-toml` projection mode, NOT via a rename rule (frontmatter
-# mapping is keyed on frontmatter fields; the body is not one). Fields not
-# in this mapping (e.g., `tools`, `model`) drop silently — codex TOML agent
-# format has no equivalent slots; a future RFC can add MCP-server mapping.
+# shape. `model` maps Claude-style aliases to OpenAI model IDs. `tools`
+# maps Claude-style tool names to Codex capability intents; the
+# `codex-agent-toml` projection reduces duplicate intents to documented
+# config keys (`sandbox_mode`, `[features].shell_tool`, `web_search`,
+# `[tools].web_search`) and never emits a generic `tools = [...]` array.
+# The markdown body lands in TOML `developer_instructions` via a
+# mode-level convention in the `codex-agent-toml` projection mode, NOT
+# via a rename rule (frontmatter mapping is keyed on frontmatter fields;
+# the body is not one).
 [frontmatter-mapping."codex-agent-frontmatter-v0.8"]
 
 [frontmatter-mapping."codex-agent-frontmatter-v0.8".name]
@@ -558,6 +785,15 @@ rename = "name"
 [frontmatter-mapping."codex-agent-frontmatter-v0.8".description]
 rename = "description"
 
+[frontmatter-mapping."codex-agent-frontmatter-v0.8".tools]
+normalize = "to-list"
+values = { Read = "read", Grep = "read", Glob = "read", Edit = "write", Write = "write", MultiEdit = "write", Bash = "shell", WebFetch = "web_search", WebSearch = "web_search" }
+
+[frontmatter-mapping."codex-agent-frontmatter-v0.8".model]
+rename = "model"
+values = { opus = "gpt-5.5", sonnet = "gpt-5.5", haiku = "gpt-5.4-mini" }
+related-values = { model_reasoning_effort = { opus = "xhigh", sonnet = "medium", haiku = "medium" } }
+
 # Copilot agent frontmatter v0.10 (RFC-0024 / docs/specs/copilot-full-parity):
 # rewrite rules from claude-code-style markdown agent (YAML frontmatter with
 # `name`, `description`, optionally `tools`, `model`) to Copilot's `.agent.md`
@@ -575,10 +811,55 @@ rename = "name"
 [frontmatter-mapping."copilot-agent-frontmatter-v0.10".description]
 rename = "description"
 
-# ---------------------------------------------------------------------------
-# Frontmatter defaults — fields injected when a primitive has no frontmatter
-# ---------------------------------------------------------------------------
+# Cursor agent frontmatter v0.11 (RFC-0026 / docs/specs/cursor-full-parity):
+# rewrite rules from claude-code-style markdown agent (YAML frontmatter with
+# `name`, `description`, optionally `tools`, `model`) to Cursor's subagent `.md`
+# shape. `name` / `description` / `model` pass through (identity renames; `model`
+# is emitted verbatim — Cursor resolves a known id or falls back to inherit, no
+# alias translation). `tools` is **absent** from this mapping: Cursor subagents
+# have no per-agent tool allowlist, so `cursor.py` drops the source `tools` and
+# derives a `readonly` flag for non-mutating agents (an agent whose declared
+# tool set contains none of Edit/Write/MultiEdit/NotebookEdit). `is_background`
+# is not emitted. This is the documented-degradation shape ADR-0013 accepted for
+# Copilot's tool handling.
+[frontmatter-mapping."cursor-agent-frontmatter-v0.11"]
+
+[frontmatter-mapping."cursor-agent-frontmatter-v0.11".name]
+rename = "name"
+
+[frontmatter-mapping."cursor-agent-frontmatter-v0.11".description]
+rename = "description"
 
-# Copilot instruction file default: applyTo covers the whole repo.
-[frontmatter-default."copilot-instruction"]
-applyTo = "**"
+[frontmatter-mapping."cursor-agent-frontmatter-v0.11".model]
+rename = "model"
+
+# Gemini agent frontmatter (RFC-0027 / docs/specs/gemini-full-parity, v0.13):
+# rewrite rules from claude-code-style markdown agent (YAML frontmatter with
+# `name`, `description`, optionally `tools`, `model`) to Gemini CLI's subagent `.md`
+# shape. `name` / `description` pass through (identity renames). Unlike Cursor,
+# Gemini has a real per-agent tool allowlist, so `tools` is KEPT and name-mapped to
+# Gemini's built-in tool identifiers (`normalize = "to-list"`, applied per element;
+# duplicates collapse — `Edit`+`MultiEdit`→single `replace` — and an unmapped token
+# drops with a build-time log line). `model` aliases map to Gemini model IDs; a
+# source value not in the map drops, leaving Gemini's default.
+[frontmatter-mapping."gemini-agent-frontmatter"]
+
+[frontmatter-mapping."gemini-agent-frontmatter".name]
+rename = "name"
+
+[frontmatter-mapping."gemini-agent-frontmatter".description]
+rename = "description"
+
+[frontmatter-mapping."gemini-agent-frontmatter".tools]
+normalize = "to-list"
+# Claude Code tool names → Gemini CLI built-in tool identifiers
+# (https://google-gemini.github.io/gemini-cli/docs/tools/). `MultiEdit` maps to
+# `replace` for parity with the codex/claude/kiro maps (collapses onto `Edit`).
+values = { Read = "read_file", Grep = "grep_search", Glob = "glob", Edit = "replace", MultiEdit = "replace", Write = "write_file", Bash = "run_shell_command", WebFetch = "web_fetch", WebSearch = "google_web_search", LS = "list_directory" }
+
+[frontmatter-mapping."gemini-agent-frontmatter".model]
+rename = "model"
+# Tier-preserving map to Gemini's stable 2.5 line. opus→pro (most capable),
+# sonnet→flash (balanced), haiku→flash-lite (fastest). A source value not in the
+# map is dropped, leaving Gemini's CLI default.
+values = { opus = "gemini-2.5-pro", sonnet = "gemini-2.5-flash", haiku = "gemini-2.5-flash-lite" }

{agentbundle-0.2.0 → agentbundle-0.3.0}/agentbundle/build/adapter_root_bins.py

@@ -189,6 +189,60 @@ def collect_companion_shim(packs_dir: Path) -> dict[str, Path]:
     return {}
 
 
+def collect_pack_root_bins(pack_dir: Path) -> dict[str, Path]:
+    """Single-pack, companion-aware enumeration for install-time delivery.
+
+    Returns ``{basename → source_path}`` for one already-resolved
+    catalogue ``pack_dir``'s ``.apm/adapter-root-bins/*.py`` plus the AC22b
+    companion ``credentials_shim.py`` when the pack ships BOTH that
+    directory (at least one ``*.py``) AND
+    ``.apm/shared-libs/credentials_shim.py`` — the same ship-both opt-in as
+    :func:`collect_companion_shim`, scoped to one pack.
+
+    Why not :func:`compute_projections` / :func:`collect_sources`? Those
+    walk a multi-pack build-time ``packs/`` root and fold a ``working_tree``
+    target into each pair. ``agentbundle install`` operates on a single
+    resolved catalogue ``pack_dir`` and owns its own per-scope path-jail, so
+    it needs basenames + sources for one pack, not absolute targets under a
+    build tree (credbroker-user-scope plan T4 — the install-side seam). The
+    install caller composes ``.agentbundle/bin/<basename>`` relpaths from
+    :data:`TARGET_SUBDIR` and writes via ``safety.write_jailed`` with POSIX
+    :data:`EXECUTABLE_MODE`.
+
+    A bare ``adapter-root-bins/*.py`` glob would miss the companion and land
+    the per-platform Tier-2 backends (``_sso_keychain_macos.py`` etc.)
+    broken on macOS/Windows — they import ``Tier2HardFailError`` from the
+    shim. This helper carries it for exactly the ship-both case.
+
+    The ship-both opt-in here is the single-pack twin of
+    :func:`collect_companion_shim` (the multi-pack, ``packs/``-walking
+    enumeration). The two predicates are intentionally parallel — a change to
+    the opt-in rule must update both.
+    """
+    # Skip symlinks: install resolves ``pack_dir`` from an untrusted catalogue
+    # (a downloaded archive / git checkout), and these bytes land executable
+    # (``0o755``) under ``~/.agentbundle/bin/``. A symlinked ``*.py`` pointing
+    # out of tree (e.g. ``~/.ssh/id_rsa``) would otherwise read that content
+    # into the floor. The build-pipeline ``collect_sources`` twin operates on
+    # the trusted in-repo ``packs/`` and intentionally does not filter.
+    bins_dir = pack_dir / SOURCE_SUBDIR
+    # A symlinked primitive *directory* would let glob enumerate the link
+    # target's real (non-symlink) files, smuggling out-of-tree content in.
+    if not bins_dir.is_dir() or bins_dir.is_symlink():
+        return {}
+    sources: dict[str, Path] = {
+        src.name: src
+        for src in sorted(bins_dir.glob("*.py"))
+        if src.is_file() and not src.is_symlink()
+    }
+    if not sources:
+        return {}
+    shim_source = pack_dir / shared_libs.SOURCE_SUBDIR / SHIM_COMPANION_BASENAME
+    if shim_source.is_file() and not shim_source.is_symlink():
+        sources[SHIM_COMPANION_BASENAME] = shim_source
+    return sources
+
+
 def compute_projections(
     working_tree: Path, packs_dir: Path
 ) -> list[AdapterRootBinProjection]:

{agentbundle-0.2.0 → agentbundle-0.3.0}/agentbundle/build/adapters/__init__.py

@@ -7,7 +7,7 @@ from pathlib import Path
 from types import ModuleType
 from typing import Callable, Dict, Mapping
 
-from agentbundle.build.adapters import claude_code, codex, copilot, kiro, kiro_cli, kiro_ide
+from agentbundle.build.adapters import claude_code, codex, copilot, cursor, gemini, kiro, kiro_cli, kiro_ide
 
 
 def _kiro_alias_project(pack_path: Path, contract: dict, output_root: Path) -> None:
@@ -28,7 +28,9 @@ ADAPTERS: Dict[str, Callable] = {
     "kiro-cli": kiro_cli.project,
     "kiro": _kiro_alias_project,  # deprecated alias → kiro-ide (RFC-0022 D1)
     "copilot": copilot.project,
+    "cursor": cursor.project,
     "codex": codex.project,
+    "gemini": gemini.project,
 }
 
 # Module-keyed registry — the surface RFC-0003 F-cli AC requires.
@@ -42,5 +44,7 @@ registry: Mapping[str, ModuleType] = {
     "kiro_cli": kiro_cli,
     "kiro": kiro,  # legacy module; use kiro_ide for new code
     "copilot": copilot,
+    "cursor": cursor,
     "codex": codex,
+    "gemini": gemini,
 }