refactor(extensions): decouple plugin capability publication

Move provider-neutral Agent, Tool, and Skill contribution contracts into product domains while keeping OpenCode parsing and lifecycle in its adapter and composition path. Scope publication generations by owner so future sibling adapters cannot overwrite each other.

Author: limityan

docs/architecture/extensions/opencode-extension-compatibility.md

@@ -356,6 +356,19 @@ Node 进程永久累积；这不是 package-plugin 的 workspace-scoped runtime
 执行版本记录不是源码备份。软件包或文件的完整旧版本副本仍在且摘要匹配时可以重建；本地原位源码已变化、
 旧 worker 又丢失时不能从当前来源重建后仍称为旧版本。此时只允许准备当前来源或等待用户恢复源码。
 
+### 4.4 能力投影与多生态边界
+
+OpenCode 的 Config Hook、contributor 归属和 Tool registration 仍由 OpenCode adapter 解释。adapter 只把已经验证的
+Agent、Tool 引用和 workspace Skill 根转换成 `product-domains` 的生态无关贡献；Core 的能力发布模块负责选择原生 Tool
+基线、生成 runtime/route identity、原子替换 Agent route，并按 `(workspace, publication owner)` 保存 Skill generation。
+因此一个生态更新或撤销时不会覆盖另一个生态的 Skill 贡献。
+
+这条公共边界只覆盖当前已经存在的能力提交语义。DeepSeek Harness 当前仍是静态投影，不执行 Cordis 插件；后续增加
+可执行适配时，可以为已经验证过 BitFun owner 语义的能力输出同一贡献类型，但必须保留独立的 Cordis 来源解析、Host
+协议、执行句柄和生命周期，也不得进入 OpenCode 的 Config Hook、Hook dispatch 或 Plugin Host 组装路径。当前配置型
+Skill 根的扫描、优先级锚点和合并仍属于 OpenCode consumer；DeepSeek Harness 的 Skill 发布要等真实来源与优先级语义确定后
+再扩展该 owner。本边界不定义统一 Plugin Host、统一插件协议或跨生态配置模型。
+
 ## 5. 大类风险
 
 | 大类 | 整体风险 | 主要控制点 |

docs/architecture/product-architecture.md

@@ -653,7 +653,9 @@ flowchart LR
   但不能访问内部状态、绕过既有编排或复制业务规则。任何入口都不直接调用 Plugin Host。
 - 插件只进入扩展贡献接口，不直接写内核状态、工具结果、权限结果或审计事实。
 - 当前 package-plugin 路径由 Core 持有 workspace 逻辑实例和贡献代际，沿类型化 `HookFunctionRuntime` 调用
-  OpenCode adapter；adapter 持有共享 Bun Plugin Host 的 wire、连接和物理生命周期，并复用 services 的进程树原语。
+  OpenCode adapter；adapter 解释 OpenCode Config/Contributor/Tool 形态后输出生态无关的 Agent、Tool 引用和 Skill 根贡献，
+  Core 的通用发布模块只把这些贡献提交给既有能力 owner。OpenCode 专属组装路径仍持有 Config 调用和 Tool registration
+  转换；adapter 持有共享 Bun Plugin Host 的 wire、连接和物理生命周期，并复用 services 的进程树原语。
   legacy managed-package 请求可靠性仍由 `PluginRuntimeClient` 承担，standalone `.js` Tool worker 仍由
   `ScriptToolRuntime` 承担。三者不共享生命周期对象，也不能互相外推已交付能力。
 - 外部来源的 Command、Tool、Subagent、MCP 仍保留能力专属 DTO 和 owner，但它们的发现调度统一由
@@ -662,7 +664,8 @@ flowchart LR
   注入 management owner 后可以调用。通用 Server `/ws` 当前没有绑定可信工作区的 management owner，因此返回类型化 `unsupported`；只有注入 Host 持有的作用域化 owner 并通过 WebSocket round-trip 后，Server 才交付该共享边界。
 - 每个生态适配层独立保留该生态的外部格式、来源顺序和调用语义，并映射到 BitFun 归属模块；它本身不成为新的
   业务归属模块，也不能依赖或修改兄弟生态 adapter。通用目录、`ExternalSourceControlPlane` 和能力归属模块只依赖开放生态 ID、
-  来源限定身份与能力专属 provider 契约，不按 OpenCode、Codex 或 Claude Code 分支行为。
+  来源限定身份与能力专属 provider 契约，不按 OpenCode、Codex、Claude Code 或 DeepSeek Harness 分支行为。不同生态
+  可以复用已存在的中立贡献 DTO 与发布动作，但不因此共享配置解析、Host 协议、执行句柄或生命周期。
 - 产品组装是组装根，只在组装期选择能力、服务实现、插件运行时绑定和降级策略。
 - 对外能力接口只提供现有归属模块的窄用例、只读状态、事件和明确错误；它不是第二个 Agent Runtime、通用服务
   定位器或插件 Host。外部产品扩展、外部 SDK 控制端和“使用外部 Runtime 组装新产品”是三种不同交付路径，

scripts/check-core-boundaries.test.mjs

@@ -849,6 +849,7 @@ test('contract and AI adapter tests keep reviewed feature and failure-domain top
         'tests/external_source_contracts/external_hook_catalog_contracts.rs',
         'tests/external_source_contracts/external_hook_contribution_contracts.rs',
         'tests/external_source_contracts/external_source_contracts.rs',
+        'tests/external_source_contracts/plugin_capability_contracts.rs',
         'tests/external_source_contracts/workspace_reference_contracts.rs',
       ],
       requiredFeatures: ['external-sources'],

scripts/core-boundaries/explicit-test-topology.mjs

@@ -186,6 +186,7 @@ export const productDomainsIntegrationTestTargets = [
       'tests/external_source_contracts/external_hook_catalog_contracts.rs',
       'tests/external_source_contracts/external_hook_contribution_contracts.rs',
       'tests/external_source_contracts/external_source_contracts.rs',
+      'tests/external_source_contracts/plugin_capability_contracts.rs',
       'tests/external_source_contracts/workspace_reference_contracts.rs',
     ],
     requiredFeatures: ['external-sources'],

scripts/core-boundaries/rules/source/forbidden-rules.mjs

@@ -8,6 +8,19 @@ const agentRuntimeRootUnexpectedLine = new RegExp(
 );
 
 export const forbiddenContentRules = [
+  {
+    path: 'src/crates/assembly/core/src/plugin_capability_publication.rs',
+    reason:
+      'generic plugin capability publication consumes provider-neutral product contracts and must not absorb ecosystem config, Host wire, or adapter lifecycle',
+    patterns: [
+      {
+        regex:
+          /\b(?:OpenCode|DeepSeek|HookFunction|serde_json|bitfun_[a-z0-9_]+_adapter)\b/,
+        message:
+          'plugin capability publication must not depend on ecosystem adapters, raw config, or Host runtime contracts',
+      },
+    ],
+  },
   {
     path: 'Cargo.toml',
     reason:
@@ -4150,7 +4163,7 @@ export const forbiddenContentUnderRules = [
           'src/crates/assembly/core/src/external_sources.rs',
           'src/crates/assembly/core/src/external_hooks.rs',
           'src/crates/assembly/core/src/instruction_sources.rs',
-          'src/crates/assembly/core/src/plugin_config_publication.rs',
+          'src/crates/assembly/core/src/plugin_host.rs',
         ],
         message:
           'only a reviewed product composition root may import bitfun-opencode-adapter through a capability-specific provider boundary',

scripts/core-boundaries/rules/source/public-api-rules.mjs

@@ -296,12 +296,8 @@ export const opencodeAdapterPublicApiEntries = [
   ),
   ...[
     'project_plugin_config',
-    'OpenCodePluginAgentProjection',
-    'OpenCodePluginConfigProjection',
+    'project_plugin_tool_ref',
     'OpenCodePluginConfigProjectionError',
-    'OpenCodePluginContributor',
-    'OpenCodePluginSkillRootProjection',
-    'OpenCodePluginToolRef',
   ].map(opencodePluginConfigProjectionEntry),
   opencodeAdapterEntry(
     'OpenCodeCommandProvider',
@@ -608,6 +604,27 @@ export const externalHookContractPublicApiEntries = [
   ),
 );
 
+export const pluginCapabilityProjectionPublicApiEntries = [
+  'PluginContributorIdentity',
+  'PluginToolRef',
+  'PluginAgentProjection',
+  'PluginSkillRootContribution',
+  'PluginCapabilityProjection',
+].map((symbol) => ({
+  symbol,
+  owner: 'product-domains plugin capability projection contract owner',
+  consumer: 'ecosystem plugin adapters and bitfun-core capability publication',
+  verification:
+    'product-domain projection contract tests, OpenCode projection tests, bitfun-core publication tests, and core-boundary checks',
+  p0: 'provider-neutral Agent, Tool, and Skill contributions from executable plugin adapters',
+  contractSlice: contractSlices.bitfunPluginExtension,
+  wireImpact: false,
+  rationale:
+    'sibling executable plugin adapters need one typed contribution shape without sharing source formats, Host protocols, or lifecycle',
+  exit:
+    'remove only through a reviewed capability-publication migration with equivalent owner isolation and adapter-boundary tests',
+}));
+
 export const externalHookCatalogPublicApiEntries = [
   'EXTERNAL_HOOK_CATALOG_SCHEMA_V1',
   'ExternalHookSourceKind',
@@ -1419,6 +1436,12 @@ export const publicApiAllowlistRules = [
       'external source contracts must stay capability-specific, ecosystem-neutral, and explicitly consumer-backed',
     allowedSymbolEntries: externalSourceContractPublicApiEntries,
   },
+  {
+    path: 'src/crates/contracts/product-domains/src/plugin_capabilities.rs',
+    reason:
+      'executable plugin capability projections must stay ecosystem-neutral, behavior-light, and explicitly consumer-backed',
+    allowedSymbolEntries: pluginCapabilityProjectionPublicApiEntries,
+  },
   {
     path: 'src/crates/contracts/product-domains/src/external_subagents.rs',
     reason:

scripts/core-boundaries/self-test.mjs

@@ -1430,6 +1430,22 @@ export function runManifestParserSelfTest({
       throw new Error(`plugin runtime boundary rule must forbid: ${forbiddenContract}`);
     }
   }
+  const pluginCapabilityPublicationRuleText = forbiddenRuleTextForPath(
+    'src/crates/assembly/core/src/plugin_capability_publication.rs',
+  );
+  for (const forbiddenDependency of [
+    'OpenCode',
+    'DeepSeek',
+    'HookFunction',
+    'serde_json',
+    'bitfun_[a-z0-9_]+_adapter',
+  ]) {
+    if (!pluginCapabilityPublicationRuleText.includes(forbiddenDependency)) {
+      throw new Error(
+        `plugin capability publication boundary must forbid: ${forbiddenDependency}`,
+      );
+    }
+  }
   const pluginPublicApiRule = publicApiAllowlistRules.find(
     (rule) => rule.path === 'src/crates/contracts/runtime-ports/src/plugin.rs',
   );
@@ -1457,6 +1473,9 @@ export function runManifestParserSelfTest({
   const externalSubagentPublicApiRule = publicApiAllowlistRules.find(
     (rule) => rule.path === 'src/crates/contracts/product-domains/src/external_subagents.rs',
   );
+  const pluginCapabilityProjectionPublicApiRule = publicApiAllowlistRules.find(
+    (rule) => rule.path === 'src/crates/contracts/product-domains/src/plugin_capabilities.rs',
+  );
   const externalHookPublicApiRule = publicApiAllowlistRules.find(
     (rule) => rule.path === 'src/crates/contracts/product-domains/src/external_hook_contributions.rs',
   );
@@ -1604,12 +1623,26 @@ export function runManifestParserSelfTest({
   ).map((entry) => entry.symbol);
   if (
     opencodeAdapterPublicApiSymbols.join(',') !==
-    'load_opencode_package_adapter,load_opencode_config_snapshot,OpenCodeConfigSnapshot,OpenCodeConfigSnapshotError,project_plugin_config,OpenCodePluginAgentProjection,OpenCodePluginConfigProjection,OpenCodePluginConfigProjectionError,OpenCodePluginContributor,OpenCodePluginSkillRootProjection,OpenCodePluginToolRef,OpenCodeCommandProvider,OpenCodeCommandProviderOptions,OpenCodeConfiguredSkillRoot,OpenCodeSkillRootProvider,OpenCodeSkillRootProviderOptions,OpenCodeToolProvider,OpenCodeToolProviderOptions,OpenCodeSubagentProvider,OpenCodeSubagentProviderOptions,OpenCodeMcpProvider,OpenCodeMcpProviderOptions,OpenCodeHookProvider,OpenCodeHookProviderOptions,OpenCodeWorkspaceReferenceProvider,OpenCodeWorkspaceReferenceProviderOptions,load_opencode_user_instructions,OpenCodeInstructionSourceOptions'
+    'load_opencode_package_adapter,load_opencode_config_snapshot,OpenCodeConfigSnapshot,OpenCodeConfigSnapshotError,project_plugin_config,project_plugin_tool_ref,OpenCodePluginConfigProjectionError,OpenCodeCommandProvider,OpenCodeCommandProviderOptions,OpenCodeConfiguredSkillRoot,OpenCodeSkillRootProvider,OpenCodeSkillRootProviderOptions,OpenCodeToolProvider,OpenCodeToolProviderOptions,OpenCodeSubagentProvider,OpenCodeSubagentProviderOptions,OpenCodeMcpProvider,OpenCodeMcpProviderOptions,OpenCodeHookProvider,OpenCodeHookProviderOptions,OpenCodeWorkspaceReferenceProvider,OpenCodeWorkspaceReferenceProviderOptions,load_opencode_user_instructions,OpenCodeInstructionSourceOptions'
   ) {
     throw new Error(
       'OpenCode adapter public API budget must stay limited to the reviewed package factory, managed Plugin Host Config projection, and capability-specific command, configured Skill root, tool, subagent, MCP, static Hook, workspace Reference, and user Instruction providers',
     );
   }
+  if (!pluginCapabilityProjectionPublicApiRule) {
+    throw new Error('plugin capability projection must have a public API budget rule');
+  }
+  const pluginCapabilityProjectionSymbols = (
+    pluginCapabilityProjectionPublicApiRule.allowedSymbolEntries || []
+  ).map((entry) => entry.symbol);
+  if (
+    pluginCapabilityProjectionSymbols.join(',') !==
+    'PluginContributorIdentity,PluginToolRef,PluginAgentProjection,PluginSkillRootContribution,PluginCapabilityProjection'
+  ) {
+    throw new Error(
+      'plugin capability projection public API must stay limited to the reviewed provider-neutral contribution DTOs',
+    );
+  }
   const opencodeInstructionSymbols = new Set([
     'load_opencode_user_instructions',
     'OpenCodeInstructionSourceOptions',

src/apps/cli/src/dispatch/runner.rs

@@ -501,7 +501,6 @@ mod tests {
         let mut leader = command.spawn().expect("spawn process-group leader");
         let process_group = i32::try_from(leader.id()).expect("safe pid");
         let _guard = ProcessGroupGuard(process_group);
-        assert!(worker_process_alive(process_group as u32, job_id));
         for _ in 0..100 {
             if ready_path.is_file() {
                 break;
@@ -512,6 +511,7 @@ mod tests {
             ready_path.is_file(),
             "TERM-resistant child must be ready before cancellation"
         );
+        assert!(worker_process_alive(process_group as u32, job_id));
         let reaper = std::thread::spawn(move || leader.wait());
 
         let error = terminate_worker(process_group as u32, job_id)

src/crates/adapters/dsh-adapter/AGENTS.md

@@ -11,6 +11,14 @@ It does not execute Cordis plugins, install npm packages, or depend on a
 user-local `dsh` CLI. Execution of dsh bundles belongs to future Plugin Host /
 external-ACP work, not this adapter boundary.
 
+If executable dsh support is added, the dsh adapter may project capabilities
+whose BitFun owner semantics have been verified through the provider-neutral
+plugin capability contract. Cordis source parsing, execution handles, Host
+protocol, and lifecycle remain dsh-owned and must not reuse the OpenCode Config
+Hook or OpenCode Plugin Host composition path. The current configured Skill-root
+merge and precedence behavior remains OpenCode-owned; dsh Skill publication
+requires its own consumer evidence before that path is shared.
+
 ## Boundary Rules
 
 - Depend on stable contracts (`bitfun-runtime-ports`, `bitfun-product-domains`)

src/crates/adapters/opencode-adapter/AGENTS-CN.md

@@ -38,9 +38,10 @@ Agent/权限/Plugin Tool/Skill 投影，以及 Command、standalone Tool 和 Sub
 - 依赖 `bitfun-runtime-ports` 等稳定接口和 `PluginRuntimeAdapter` 边界 trait，不依赖
   `bitfun-core`、app crate、Tauri API、产品界面或具体服务管理器。
 - OpenCode 配置 JSON、来源顺序、加载器兼容、参数展开和受管 Plugin Host Config 贡献归属保留在本 crate 内。
-  跨 crate 输出使用类型化来源快照、Agent/权限/Plugin Tool/Skill 投影、adapter 绑定和 `PluginRuntimeClient` DTO，
+  跨 crate 输出使用类型化来源快照、生态无关的 Agent/权限/Plugin Tool/Skill 贡献、adapter 绑定和 `PluginRuntimeClient` DTO，
   不得把 OpenCode 原始 JSON 或源码语法暴露为产品接口。Config 投影不得生成 Agent runtime key、选择原生 Tool
-  基线、修改产品 registry 或扩成通用 Config 平台。
+  基线、修改产品 registry 或扩成通用 Config 平台；OpenCode contributor 解析和 Tool registration 转换仍留在本 crate，
+  不得让 OpenCode 专属 DTO 进入通用发布模块。
 - 当前源码探测只识别测试覆盖的声明式语法子集，不是通用 JS/TS 解析器；没有可识别入口的包和已识别但不支持的 hook
   必须返回诊断，其他语法不属于当前兼容范围。
 - 未支持的 OpenCode 能力必须显式返回类型化诊断或不支持状态，不得静默忽略。
@@ -49,7 +50,7 @@ Agent/权限/Plugin Tool/Skill 投影，以及 Command、standalone Tool 和 Sub
 - 经评审的产品组装根只选择并构造已编译的 OpenCode adapter/provider，再注入 `PluginRuntimeClient`；它不发现
   动态来源、不准备依赖，也不 import 插件模块。
 - Product Assembly 只允许从经过评审的组装模块（如 `bitfun-core/plugin_runtime`、
-  `bitfun-core/external_sources` 或 `bitfun-core/plugin_config_publication`）消费本 crate；增加其他消费方时必须同步
+  `bitfun-core/external_sources` 或 OpenCode 专属的 `bitfun-core/plugin_host` 组装路径）消费本 crate；增加其他消费方时必须同步
   边界脚本和聚焦组装路径测试。
 - 本 crate 不得依赖 Codex、Claude Code 或其他生态 adapter。新生态是由 Product Assembly 注册的同级 adapter，
   不是本 adapter 的模式。