Global Coding-Agent Assets
August 24, 2026 ยท View on GitHub
Use this reference when a readiness run, screenshot, or user request points to Cursor, Qoder, Codex, Claude, Qwen, Copilot, Kimi Code, or DeepSeek Harness (DSH) settings, installed assets, global skills, user hooks, commands, agents, plugins, MCPs, or memories. Treat this as a configured asset inventory, not a session behavior report.
Scope
- Project assets:
.cursor,.qoder,.codex,.claude,.agents,.github,.kimi-code,.kimi, project rules, skills, agents, commands, hooks, workflows, settings, and MCP config. - User/global assets:
~/.{cursor,qoder,codex,claude,qwen,copilot,kimi-code}skills, hooks, commands, agents, rules, settings, and MCP config. - Plugin/marketplace assets: provider plugin caches and install evidence under
~/.cursor,~/.qoder,~/.codex,~/.claude,~/.qwen,~/.copilot, and~/.kimi-code, including plugin-declared Skills, MCPs, Commands, Hooks, Rules, and Subagents. - Memories:
~/.qoder/memories/**plus QoderSharedClientCacheapp-config.jsonmemory keys andcache/db/*.db*file presence; and Codex generated-memory metadata under~/.codex/memories/plus supportedconfig.tomlmemory settings. - Session observed behavior: cite
session-analysis.mjs sources/facetsseparately; configured assets do not prove runtime use.
Inventory Command
Run the read-only inventory when user-home or installed assets are in scope:
<node> <better-harness-root>/scripts/agent-customize/cli.mjs inventory --provider <cursor|qoder|codex|claude|qwen|copilot|kimi|dsh> --workspace <absolute-target-path>
<node> <better-harness-root>/scripts/coding-agent-practices/inventory.mjs <cursor|qoder|codex|claude|qwen|copilot|kimi> --workspace <absolute-target-path> --include-user-home --include-memories --format markdown
<cli> coding-agent-practices asset-integrity <cursor|qoder|codex|claude|qwen|copilot|kimi> --workspace <absolute-target-path> --language <en|zh-CN> --json [--include-memories] [--include-user-home]
Use --cursor-home <path>, --qoder-home <path>, --codex-home <path>,
--claude-home <path>, --qwen-home <path>, --copilot-home <path>,
--kimi-home <path>, --dsh-home <path>, --claude-state <file>,
--codex-app-path <path>, or
--shared-cache <path> for fixtures, alternate
installs, or non-standard homes. Use the agent-customize command as the
provider-specific configured asset source of truth; use the
coding-agent-practices wrapper when the report also needs the matrix shape or
Qoder/Codex memory metadata summary. For Qoder reports, project
summary.practiceCoverageRows; it resolves ~/.qoder assets separately from
the active SharedClientCache MCP home, excludes runtime-only project MCP
metadata, and omits zero-count rows.
For Claude-specific settings/state/Plugin precedence and privacy boundaries, continue with Claude Code Configured Assets. For Kimi Code configured-asset locations and evidence boundaries, continue with Kimi Code Configured Assets.
For DSH's filesystem-only winners, cwd-sensitive Instruction sources, privacy default, and unresolved runtime boundary, continue with DeepSeek Harness Configured Assets.
The provider-labelled asset-integrity command reuses that inventory for a lightweight second pass. It checks Memory filename-title collisions/similarity, enabled Plugin canonical/display-name and non-empty capability-fingerprint overlap, and Hook count/exact-duplicate/fan-out pressure when those surfaces are available. Treat exact name and fingerprint matches as owner-review candidates and similar E2E/P7/P8-style Plugin names as advisory families. Never edit a Plugin cache or disable a variant from naming similarity alone.
Evidence Levels
- Configured: path or settings entry exists.
- Inspected: metadata, frontmatter, settings sections, or plugin index was opened.
- Observed: session, audit, hook, permission, or tool event shows runtime use.
- Backstopped: CI, host policy, sandbox, or hook tests enforce the practice.
Report configured and inspected global assets as evidence, but do not claim a Skill, Hook, Command, MCP, Plugin, Agent, Workflow, or Memory was used unless session or audit evidence shows it. For the cross-asset Exists -> Routed -> Applied -> Effective check, continue with Knowledge-Asset Review.
Presence, Use, And Cleanup Eligibility
Customization Checkup projects the evidence ladder into these reader states:
observed: mapped runtime use exists in the bounded scope;configured-only: configuration was inspected but runtime use was not in scope;unobserved: a bounded window did not contain mapped use;candidate: sufficiently covered, outside a new-install grace period, unshadowed, owner-mapped, and safe for a disable-first plan;healthy: configured/effective state and observation are consistent;unavailable: active source, identity, or coverage cannot be established.
No observed use in one workspace cannot make a user/global asset a cleanup
candidate. User/global cleanup needs an explicitly enabled user-global session
pass and a declared time/session window. Plugin use can be demonstrated by an
observed plugin-owned Skill, MCP tool, Command, Hook, or Agent only when stable
metadata maps the child to the plugin. Ambiguous ownership stays unobserved.
Keep generated runtime state, caches, merged MCP snapshots, logs, and encrypted diagnostics read-only. Plan changes against author-owned files or supported host CLI operations.
Memory Boundary
Do not read raw memory text, private transcripts, auth files, token stores, model catalogs, or database rows by default. For memories, summarize only:
- memory root existence and category/path counts
- memory-related config keys such as Qoder
memory.fetch.enable,memory.retrieve.enable,memory.file_memory.prompt.enabled, andmemory.topictree.enable, or Codexfeatures.memories,memories.generate_memories, andmemories.use_memories - database file presence such as
local.db,memory.db, WAL, and SHM files - drift or risk notes such as stale, duplicated, or sensitive-looking category names without printing content
If raw memory content is explicitly requested, treat it as sensitive user data and ask for a bounded scope before opening files. For recall, stale-memory, adoption, or learning-loop claims, continue with Memory Review And Learning-Loop Evidence; metadata and configuration never prove that a task retrieved or applied a memory.
Report Projection
In AI Agent Practices, surface a compact matrix with these rows when the
inventory is in scope: Project assets, User/global assets,
Plugin/marketplace assets, Session observed behavior, and Memories. Each row
should show configured/inspected/observed status, strongest evidence, main gap,
and Low, Medium, or High confidence.
Current Harness coverage rows remain inventory-only. Project material
asset-integrity observations as ordinary grouped findings[] for Memories,
Plugins, and Hooks; do not add health status or evaluation fields to the
coverage rows.