feat(portable): record eleven more clients of the emitted artifact

[ScriptedAlchemy]

Records ten more third-party clients of the artifact Agent Bundle already
emits, in the same pinned clients block and through the same validator that
#721 landed. No adapter, no projection, and no compiler output changes: every
row is dated evidence about a reader of the existing package.

Client	Issue	Tier	Install source	Evidence
GitHub Copilot CLI	#698	agent-plugins	local directory	live CLI run, 1.0.83
CodeWhale	#709	agent-plugins	local directory	pinned repo docs
Kiro (Powers)	#707	agent-plugins	local directory (IDE import)	pinned docs
Hermes Agent	#697	agent-plugins	marketplace	pinned docs
VS Code	#706	agent-plugins	local directory	pinned docs
Gemini CLI	#695	skills	local directory	live CLI run, 0.58.0
OpenCode	#693	skills	local directory	live CLI run, 1.18.29
Cline	#705	skills	local directory	pinned docs
Zed Agent	#708	skills	local directory	pinned docs
Pi	#694	skills	local directory (register)	live install, 0.73.1

Each record carries the paths the client reads, its install action under the
role its own documentation gives it, and a dated row per surface it does and
does not load. INSTALL.md and the generated en/zh host reference render them
through clientCompatibilityFrom, so a record that claims a tier its rows do
not support, loads a surface without naming the file it reads, or declares an
install block without a source and exactly one install action fails the build.

Gate

Run on portable-client-records-b, which contains current origin/main
(72a8857ebe):

• pnpm build — pass
• pnpm typecheck — pass
• pnpm lint — pass
• pnpm test:unit — 0 failed, 4433 passed
• pnpm docs:site:build — pass (locale parity and link checks clean)
• packages/agent-bundle/tests/{install-surface,portable-adapter}.test.ts — 47 passed

Self-review (gpt-5.6-sol-max, tip 9f38233d97)

Fixed:

1. Pi was none against an existing release. @mariozechner/pi-coding-agent@0.73.1
   installs and exposes a pi binary whose own --help documents
   --skill <path>; its packaged docs/skills.md and docs/packages.md pin the
   discovery contract, including skills/ as a package convention directory. The
   record is now skills with a register action and a live-probe evidence set;
   the missing turn (no provider key) is recorded as the one thing not exercised.
2. Amp was recorded at all. Removed: the owner scoped Host support: Amp — native plugin factory, explicit skill registration, and skill-scoped MCP #711 to a native
   adapter, and the pinned contract now lives on that issue. A none-tier
   portable row would contradict it.
3. A narrowed placeholders row printed for a bundle with no MCP document.
   placeholders is a behavior of mcp.json, so it now maps to that path in
   CLIENT_SURFACE_PATHS and is gated like every other surface.
4. A pointer was rendered as an install. New register role for a client
   that reads the emitted tree where it lies (Pi's --skill, and the same shape
   in the follow-up records); INSTALL.md renders "Register:" for it, and the
   validator requires exactly one install or register action.

Deferred to a follow-up on this table, each with the reviewer's reason recorded:
Copilot's .plugin/plugin.json precedence row and its stdio-only MCP evidence,
CodeWhale's network_hosts restriction in its narrowed MCP reason, the
install-versus-register re-reading of the VS Code chat.pluginLocations row
and the Cline copy row, a repository install source for Hermes, and per-client
tier/path/install assertions in portable-adapter.test.ts. None of them changes
what the compiler writes; all of them change record prose or one rendered word.

Gate (re-run at 9f38233d97)

• pnpm build, pnpm typecheck, pnpm lint — pass
• pnpm test:unit — 0 failed, 4433 passed
• pnpm docs:site:build — pass
• packages/agent-bundle/tests/{install-surface,portable-adapter}.test.ts — 47 passed

[changeset-bot]

🦋 Changeset detected

Latest commit: 9f38233

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
agent-bundle	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-07T00:46:42.463819Z	2b095d7	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2b095d7782

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Probe Pi's actual published package before assigning none

This probes two unrelated package names and therefore incorrectly concludes that Pi has no installable release. Pi's upstream coding-agent README installs the CLI with npm install -g @mariozechner/pi-coding-agent; because that release was never exercised, the none tier causes the generated host reference and INSTALL.md to falsely report that Pi loads nothing. Probe the official scoped package and record its actual skill compatibility instead.

AGENTS.md reference: AGENTS.md:L128-L131

Useful? React with 👍 / 👎.

[ScriptedAlchemy]

The deferred record-only findings in this PR now have a concrete owner: #728, checked against main b5cf7575e0bcfa6da23e12d2c5628146bdbe5cb1.

It covers Copilot CLI manifest precedence/MCP evidence scope, CodeWhale remote-policy qualifications, VS Code registration wording, Hermes repository-source classification, and per-client rendered-output regressions. Cline's actual copy action remains install; roles should not be changed mechanically.

Do not repeat work already fixed by #727: duplicate authored client keys, the stale Pi none record, and Swival's registration/MCP/precedence corrections. I also corrected #694's stale closeout and refreshed #711 to preserve Amp's separate native-adapter scope and the accepted no-account verification boundary.

The completed records remain records of the existing portable artifact, not evidence that new native adapters or authenticated tool journeys were delivered. No code or merge action was performed during this reconciliation.