fix(portable): correct the Copilot, CodeWhale, VS Code, and Hermes client records - #732

Closes #728.

Four record corrections on the pinned portable clients block, plus the rendered output they feed. No adapter, registry, or discovery interpreter changed; nothing about what the compiler writes changed.

Corrections

1. GitHub Copilot CLI (Host support: GitHub Copilot CLI — native and Open Plugin Spec projection with verified discovery precedence #698) — discovery.shadowedBy now records the two locations its published file-locations table puts ahead of the emitted tree, per surface: .plugin/plugin.json for manifest (the manifest order is .plugin/plugin.json, plugin.json, .github/plugin/plugin.json, .claude-plugin/plugin.json, so the emitted root still wins over the Claude manifest — asserted against the claude+portable composite) and .mcp.json for mcp (the table publishes MCP configuration as .mcp.json, .github/mcp.json; the emitted root mcp.json is proven only by the 1.0.83 probe, which ran with no .mcp.json present). Its mcp row is degraded: the probe listed one stdio server, and no streamable-http server was registered, launched, or authenticated. The local-install deprecation and the unspawned-server placeholders row stay visible.
2. CodeWhale (Host support: CodeWhale — Agent Plugins bundles, hash-bound trust, skills, MCP, and TUI hook profile #709) — the narrowed mcp reason now covers the whole plugin boundary from the pinned MCP guide and the same commit's docs/PLUGIN_BUNDLES.md: HTTPS-or-loopback endpoints with no user information, query, or fragment; literal headers rejected in favor of env_headers/bearer_token_env_var; redirects held to the reviewed origin; and capabilities.network_hosts matching the normalized endpoint host set exactly. That declaration rides in extensions["net.codewhale"], which this projection writes only from an authored portable.extensions, and a remote server emitted without it is a validation error — "an active bundle must be … free of validation errors" — so the record says the bundle stays inactive there rather than loading with a narrowed surface. No new portable field, no relaxed trust policy.
3. VS Code (Host support: Copilot editor/VS Code — Agent Plugins namespace, hooks, skills, instructions, and MCP #706) — chat.pluginLocations carries the already-supported register role, matching the local-plugin documentation ("register it with the chat.pluginLocations setting … false to keep it registered but disabled"), so the generated instructions print Register:. Cline is asserted in the same test and unchanged: its cp -R action really copies, so install stays. The validator now refuses a register anchor against any non-local-directory source.
4. Hermes (Host support: Hermes Agent — portable package conformance and optional native Python hooks #697) — install.source is the new repository value: the plugin guide separates hermes plugins install <name> (index name, resolved to repo @ pinned ref) from hermes plugins install user/repo (from Git; "Explicit owner/repo or Git-URL identifiers never touch the index"). The recorded command keeps --no-enable, so the install still leaves the plugin disabled, and no local-directory form is claimed.

The install-source enum genuinely lacked Git, so it gained one value (repository) — the smallest compatible metadata addition. Non-local install prose names its source (Install from a marketplace … / Install from a Git repository …), the agent-plugins tier sentence says a client loads the bundle (the recorded action alone reports whether it copies or registers), and the generated host reference gains an install-source column in both locales.

Tests

• packages/agent-bundle/tests/portable-adapter.test.ts: a record test holding each correction to its pinned source (both shadowed surfaces, the quoted file-locations rows, stdio-only evidence, CodeWhale's remote restrictions, register vs install role, repository source), plus validator coverage that repository is accepted, git is refused, and a register action against a repository source is refused.
• packages/agent-bundle/tests/install-surface.test.ts: a four-row inventory matrix (no component, skills only, MCP only, skills and MCP) asserting the whole rendered line per client — tier sentence, paths this build wrote, action role, source, Not loaded list, both .plugin/plugin.json and .mcp.json hypotheticals — and asserting the MCP narrowings (Copilot's stdio subset and unspawned server, CodeWhale's endpoint/header/secret-URL/redirect clauses and inactive-bundle consequence) appear only when the build wrote mcp.json. The composite test asserts Copilot still reads the root manifest with .claude-plugin/plugin.json present, hands mcp to the build's .mcp.json, and prints neither MCP-document narrowing there.
• Generated en/zh reference verified through pnpm docs:site:build: install-source column, repository for Hermes, register for VS Code, install for Cline, .plugin/plugin.json (manifest) and .mcp.json (mcp) shadow cells, both intro rewrites.

Local gate

Run on this branch, which contains current origin/main (b5cf7575e0):

• pnpm build — pass
• pnpm typecheck — pass
• pnpm lint — pass (1483 files)
• pnpm test:unit — pass, 4439 passed / 0 failed / 6 skipped (a first run under a machine load average of 300 timed out in seven unrelated timing-sensitive tests — codex-plugin-validation, event-ipc, install, mcp-probe-service, uninstall, two web-host-routes-unit; re-run clean once load dropped)
• pnpm docs:site:build — pass, language parity checked, 0 broken links / 28329 anchors
• Touched files re-run after every edit round: install-surface, portable-adapter, adapter-capability-states, adapter-metadata

No native client was executed for this change; the corrections are document review over pinned sources.

Deslop

Deslop: claude-opus-5, 3 edits (helper reduced to the source sentence it prints, CodeWhale reason held to the upstream wording, remote-form quote pinned in evidence instead of paraphrased in the reason).

Self-review

Reviewers: claude-fable-5-1-thinking-high (change-risk-reviewer, two rounds) and gpt-5.6-sol-max (two rounds).

Fable, round 1:

1. Copilot's new file-locations evidence claimed the published order covered skills and mcp.json, and the composite assertion locked in an unproven mcp.json read beside .mcp.json — fixed: the evidence quotes the table's own rows, scopes the root mcp.json read to the probe that ran without .mcp.json, and the record gained the .mcp.json → mcp shadow; the composite assertion now expects plugin.json, skills.
2. CodeWhale's reason understated a validation failure as a missing declaration — fixed: it now states the bundle fails validation and stays inactive.
3. register with a non-local source would render as an install — fixed: validator guard plus a negative test.
4. Changeset trailer cited the issue — fixed: (#732).
5. Wrong GitHub anchor in the CodeWhale citation — fixed: #plugin-contributed-mcp.

Sol, round 1:

1. The agent-plugins tier sentence said "installs this bundle", contradicting the register action — fixed: "loads this bundle as one plugin".
2. The generated-reference intro said every install copies the artifact, though a skills-tier install copies one component — fixed in both locales.
3. No regression test for the generated reference output — dismissed, and Sol accepted the dismissal ("proportionate"), as did Fable: the unit glob is packages/**/tests/**, so reaching website/plugins/generated-reference.ts needs a test-only export of renderHosts or a cross-workspace import; website/docs/*/reference/hosts.md is generated and gitignored, and AGENTS.md designates pnpm docs:site:build as its gate. That gate passes, and both locales' rendered rows were verified directly.
4. Incomplete per-client clause coverage — fixed: the matrix asserts CodeWhale's endpoint/header/secret-URL/redirect clauses, the inactive-bundle consequence, and Copilot's unspawned-server row.

Round 2: Fable confirmed all five findings resolved with no new risk from the tier rename or the new shadow. Sol confirmed 1, 2 and 4 fixed and asked for one more composite assertion (Copilot's placeholders narrowing suppressed once .mcp.json takes mcp) — added in d9cfb26af4.