portable-resume-skills

Offline, local-only context migration · 9 sources × 9 hosts (derived from registries) · inert handoff, not live restore

English · 繁體中文 · 简体中文 · 日本語 · 한국어 · Español · Português · Français · Deutsch · Русский · العربية · हिन्दी · All languages

Clean-room-oriented Agent Skills for migrating bounded local coding-agent context into a fresh session. Readers never invoke the source agent CLI and never add a network path; recovered text is marked untrusted and stale.

Current release: 0.3.4
· PyPI · 81/81 packaging and
installed-runner cells (9 sources × 9 destinations, including Pi filesystem
install) · 7/7 exact native local plugin/extension installs verified · 8/8
host-native headless Skill invocations verified · 6/6 compatible public
marketplace installs verified. Cursor and Kimi marketplace pickers were also
exercised; other visual Skill picker paths and Pi native UI / picker remain
separate not-run claims.

Sources and destinations

Destination profiles: Claude Code, Codex, Cursor, OpenCode, Antigravity, Grok Build, Qwen Code, Kimi Code CLI, and Pi agent.

Requirements

• Python 3.11+; CI covers 3.11–3.14 on Ubuntu and macOS.
• Product runtime is stdlib-only.
• Optional trusted zstd binary for compressed Codex rollouts.

Quick start

Install the published package, then install every destination profile into its
user-global Skill root:

pipx install portable-resume
install-resume-skills quick-install all

From a source checkout, use pipx install . instead. To install only one host
or one project:

install-resume-skills quick-install qwen
install-resume-skills quick-install qwen --project "$PWD"

For a host-native public marketplace install, add the
portable-resume-marketplace:

# Claude Code
claude plugin marketplace add ImL1s/portable-resume-marketplace
claude plugin install portable-resume@portable-resume --scope user

# Codex
codex plugin marketplace add ImL1s/portable-resume-marketplace
codex plugin add portable-resume@portable-resume

Verified Cursor, Qwen, Grok, and Kimi commands plus direct Antigravity/OpenCode
fallbacks are in docs/install-hosts.md.

The lower-level transactional command remains available for previews, custom
roots, verification, and uninstall:

# Inspect capabilities and the registry-derived matrix (currently 9×9)
PYTHONPATH=src python3 scripts/portable-resume self-check --json
PYTHONPATH=src python3 scripts/install-resume-skills matrix --json
PYTHONPATH=src python3 scripts/install-resume-skills hosts

# Read a synthetic Claude fixture
PYTHONPATH=src python3 scripts/portable-resume claude show latest \
  --cwd /workspace/project \
  --source-root tests/fixtures/claude/s-cla-01-ordered-parent-chain/root \
  --format handoff

# Preview, install, verify, and uninstall one destination
PYTHONPATH=src python3 scripts/install-resume-skills install \
  --host qwen --scope project --project "$PWD" --dry-run --json
PYTHONPATH=src python3 scripts/install-resume-skills install \
  --host qwen --scope project --project "$PWD" --json
PYTHONPATH=src python3 scripts/install-resume-skills verify \
  --host qwen --scope project --project "$PWD" --json

Full roots, activation grammar, direct archives, and marketplace/plugin routes are in docs/install-hosts.md. Release assets are generated with:

python3 scripts/build_host_packages.py --output-dir host-packages

Release archives include nine direct-skill ZIPs (including Pi) plus supported Claude, Codex, Cursor, Antigravity, Grok, Qwen, and Kimi plugin/marketplace bundles. OpenCode remains a direct Skill install because its plugin surface is executable JavaScript/TypeScript rather than a Skill bundle.

Skill contract

python3 <skill>/scripts/run_reader.py show latest --cwd "$PWD" --json
python3 <skill>/scripts/run_reader.py show <session-id|path|text> --cwd "$PWD" --json
python3 <skill>/scripts/run_reader.py list --cwd "$PWD" --json

Activate resume-<source> using the host's documented grammar, run only the installed reader, and summarize its inert output after re-checking the repository. portable-resume/request-v1 files remain an optional advanced interface.

Safety invariants

• Source stores are immutable; stable no-follow reads fail closed on races.
• Source CLIs are never invoked.
• Recovered text is inert/untrusted and only best-effort redacted.
• Installer paths are contained under the selected skill root.
• Non-owned collisions require --force-with-backup; multi-root installs compensate on failure.
• Shared physical roots with divergent host renders fail before mutation.

Tests and CI/CD

Run all required local gates:

python3 scripts/self_verify.py
python3 scripts/check_secrets.py
PYTHONPATH=src python3 -m unittest discover -s tests -q
PYTHONPATH=src python3 scripts/smoke_installed_matrix.py

.github/workflows/ci.yml runs those gates across Ubuntu/macOS and Python 3.11–3.14, then builds and smoke-installs the exact wheel and sdist. .github/workflows/release.yml accepts only annotated vMAJOR.MINOR.PATCH tags reachable from main, re-runs dual-OS gates, builds release bytes once, tests those exact bytes, creates SHA-256 checksums and GitHub attestations, stages a GitHub Release, and publishes through PyPI Trusted Publishing.

Published release v0.3.2 also verifies the GitHub Release layout itself:
every SHA256SUMS entry is a flat asset basename, and both Ubuntu and macOS
validate a simulated flat download before publication. The immutable
release run,
commit, public artifact checks, GitHub Release, and PyPI evidence are archived
in docs/evidence-summary.md.

Key documentation

• docs/i18n/README.md — 12 localized quick-start guides
• docs/STATUS.md — done/not-done truth
• docs/install-hosts.md — per-host installation
• docs/source-formats.md — format and provenance registry
• docs/host-ui-smoke.md — live activation evidence protocol
• docs/release-claim.md — release gates and external setup
• SECURITY.md — threat model
• CONTRIBUTING.md — contributor workflow

License and limitations

Apache-2.0. This project is not affiliated with the host vendors. Do not copy ~/.grok/bundled/skills/** into this tree.

Headless slash/name activation is verified on all eight hosts. Public
marketplace installation is verified on all six compatible hosts, including
Cursor and Kimi picker flows. Other visual Skill pickers and vendor-curated
directory listings are not claimed; Cursor's full bubble graph is not claimed;
redaction is not complete DLP.