3.0 KiB
3.0 KiB
Third-party Harness Skills/MCP Implementation Checklist
Branch
- Create
feat/third-party-agent-skills-mcpfromfeat/codex-third-party-agent. - Record the approved direct-projection architecture.
Common capability layer
- Add provider-neutral runtime capability models.
- Resolve channel-effective QwenPaw Skills.
- Resolve enabled QwenPaw MCP DriverCards and credentials in memory.
- Filter resolvable DriverPolicy scope before projection.
- Keep secrets out of fingerprints, persistence, API responses, and logs.
- Add extensible Harness capability declarations.
- Add a provider-neutral read-only Skill discovery DTO and adapter API.
Codex
- Inject Skill roots through
skills/extraRoots/set. - Isolate app-server clients by capability fingerprint.
- Inject QwenPaw MCP through Codex runtime configuration.
- Discover Codex-owned MCP with
codex mcp list --json. - Mark discovered MCP as read-only and Codex-only.
- Bridge Codex filesystem/network permission requests to QwenPaw approvals.
- Discover Codex-owned Skills through app-server
skills/list.
Qoder
- Materialize cross-platform local Plugin Skill snapshots.
- Inject Plugin and Skill allowlist through Qoder SDK.
- Inject QwenPaw MCP through
QoderAgentOptions.mcp_servers. - Enable strict MCP configuration where supported.
- Declare Provider MCP discovery unsupported until a stable API exists.
- Discover Qoder Skills through
get_server_info().skills. - Enable Qoder user/project/local/plugin Skills in QwenPaw sessions.
UI
- Show inherited QwenPaw Skills/MCP status for third-party Agents.
- Group MCP by source and scope.
- Show editable versus read-only state.
- Show policy compatibility/degradation.
- Add all locale keys and dark-mode styling.
- Expose projected Skills/MCP panels in the third-party Agent sidebar.
- Keep native workspace panels hidden when third-party capability data is missing or stale.
- Filter nested sidebar group children using Harness capabilities.
- Group Skills into QwenPaw-managed editable and Provider-owned read-only sections.
- Hide all mutation and batch controls from Provider-owned Skills.
- Add a read-only detail drawer for Provider-owned Skills.
- Keep full Provider Skill names available through hover and details.
- Compact the empty state and cap the responsive Provider Skill grid.
- Keep the Skills page vertically scrollable across viewport sizes.
- Use third-party Agent terminology in user-facing Skills/MCP copy instead of the model-oriented Provider term.
Verification
- Add common resolver unit tests.
- Add Codex projection/discovery unit tests.
- Add Qoder Skill/MCP projection unit tests.
- Add portable path/copy cases for macOS, Linux, and Windows semantics.
- Add secret-redaction tests.
- Run targeted backend tests.
- Run targeted frontend tests.
- Run pre-commit only for changed files.