[777genius]

Goal

Give each repository an isolated plugin environment with portable intent and locks, while preserving user installations, ownership, retained data and exact recovery. Source transports are isolated in #473; this PR is stacked on that source feature.

Current integration status

Gemini #474 is merged into this feature after all five current workflows passed, including every Core and native/packed authoring job. Its merged tree was checked against the reviewed Gemini tree. The feature also contains the reviewed shared core, source lifecycle and feature CI routing.

The separate assembly branch is a review/testing snapshot, without an extra PR. It currently includes the seven earlier project adapters plus Kimi and Devin/Windsurf, and ChatGPT's explicit project-scope refusal. Kimi/Devin integration is published at 48333d6. Their codec selection tests passed; independent merge review and remaining shared planner corrections are still being closed. This is not a claim that the final all-client matrix is green.

Separate client slices

Client	PR	Current boundary
Gemini	#474	Reviewed and merged into this feature; current slice workflows passed.
Codex	#475	Reviewed project components; genuine macOS and Windows project-skills lifecycle passed at the preserved source. Concrete TOML dependency-boundary correction and a fresh replay are being completed.
ChatGPT	#477	Reviewed early project refusal with no acquisition/effects; existing user/manual path preserved.
Cursor	#479	Reviewed scoped component lifecycle; native runtime qualification remains separate.
Claude	#480	Genuine native project test found workspace-trust suppression. Exact ownership and failed/indeterminate gates remain intact while the precise diagnostic is completed.
OpenCode	#481	Reviewed public project lifecycle; existing native user tests passed. A dedicated project native test remains required.
Qoder	#482	Genuine phase-one evidence exposed a capture-limit defect. Reviewed correction is being restored/published before a fresh phase-one observation and phase two.
Copilot	#483	Reviewed exact project configuration and data ownership; prepared readiness remains explicit.
Kiro	#484	Reviewed project lifecycle retaining the original user profile.
Grok	#485	Genuine inspection identifies project source but reports disabled/untrusted; implementation is bounded to honest skills-only preparation.
Cline	#486	Genuine skills discovery and explicit MCP-file selection observed; project MCP remains session preparation and cannot be promoted by attestation.
Kimi	#487	Two code reviews complete; source/SDK/CLI lifecycle evidence preserved; included in assembly.
Windsurf / Devin	#494	Two code reviews complete; pinned Devin contract and exact scoped ownership preserved; included in assembly.
VS Code	Separate slice in preparation	Narrow project-only scope; pinned hosted research must precede adapter qualification.

Verification and remaining gates

Core and all 14 client plans received two independent research/plan review rounds on GPT-6.1 Sol xhigh. Material amendments have their own pre-code reviews. Client code, manual merge resolutions and reconstructed corrections receive independent review and actual focused validation; historical passes remain attached to their original source.

The current combined planner run exposed two old scope expectations. Their correction must preserve meaningful unsupported-scope and missing-context refusals, with positive controls for newly qualified project clients. The unchanged architecture guard must pass after the Codex concrete-parser correction. Canonical fixture-root corrections must be exercised on Linux, macOS and Windows.

Genuine Codex evidence, raw artifacts, source/client identities and independent interpretations are preserved under project-scope native evidence. macOS and Windows project-skills discovery/lifecycle passed; Windows user-skill discovery and project MCP/trust/model runtime were not qualified.

Gen / Socket / Snyk remain documentation-only deferred work in docs/REGISTRY_SECURITY_PROVIDERS_BACKLOG.md. No provider integration, main merge or release is part of this PR's current operation.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}