NDDev-it-com · rldyourmnd · Jul 21, 2026 · Jul 21, 2026
@@ -8,7 +8,7 @@ changes.
 
 - **Author:** Danil Silantyev (github:rldyourmnd), CEO NDDev
 - **License:** AGPL-3.0-or-later
-- **Build version:** 2.1.7
+- **Build version:** 2.1.8
 - **Verified ZCode runtime:** app 3.3.6, CLI 0.15.2, model GLM-5.2
 
 ## What this repository contains

@@ -1 +1 @@
-2.1.7
+2.1.8
@@ -1,6 +1,6 @@
 {
   "name": "nddev-zcode-app",
-  "build_version": "2.1.7",
+  "build_version": "2.1.8",
   "source_root": "zcode_tools/marketplaces/",
   "installer": "cli-tools/scripts/install.sh install --setup <id>",
   "layout": {

@@ -2,15 +2,15 @@
   "schema_version": 2,
   "module": {
     "repository": "NDDev-it-com/nddev-zcode-app",
-    "setup_digest": "sha256:fe9ee33516d5795283c454d143c547a5e3259373a318bd61e509395d20cf8d83"
+    "setup_digest": "sha256:b76c39a46d8cedff7852271eecb9b932499785971c4e7d273b7f5f14660a60b7"
   },
   "harness": {
     "repository": "NDDev-it-com/nddev-harnesses",
-    "commit": "f780fef978b4e5dd4992dd313cd9ebbf4090e035"
+    "commit": "f957869a19679a1fbf338cd7381168dcb12a04eb"
   },
   "adapter": {
     "id": "zcode",
-    "version": "2.1.7"
+    "version": "2.1.8"
   },
   "vendor": {
     "app_version": "3.3.6",
@@ -30,8 +30,8 @@
     }
   ],
   "lanes": [],
-  "generated_at_utc": "2026-07-21T04:55:47Z",
-  "expires_at_utc": "2027-01-17T04:55:47Z",
+  "generated_at_utc": "2026-07-21T06:50:08Z",
+  "expires_at_utc": "2027-01-17T06:50:08Z",
   "promotion": {
     "decision": "pending",
     "waivers": []

@@ -1,5 +1,5 @@
 {
-  "build_version": "2.1.7",
+  "build_version": "2.1.8",
   "zcode_app_version": "3.3.6",
   "zcode_cli_version": "0.15.2",
   "zcode_runtime": "GLM-5.2",

@@ -10,7 +10,7 @@
       "name": "core",
       "source": "./plugins/core",
       "description": "Reusable toolkit: skills, slash commands, and a reviewer subagent for building plugins, managing MCP servers and providers, authoring skills, and listing or removing components.",
-      "version": "2.1.7",
+      "version": "2.1.8",
       "author": {
         "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev"
       },

@@ -1,6 +1,6 @@
 {
   "name": "core",
-  "version": "2.1.7",
+  "version": "2.1.8",
   "description": "Reusable ZCode toolkit: skills, slash commands, and a reviewer subagent for building plugins, managing MCP servers and providers, authoring skills, and listing or removing components.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",

@@ -53,8 +53,11 @@ Recognized keys (all **hyphenated**, NOT snake_case):
 - `allowed-tools` (optional) — inline comma list, e.g. `Read, Bash`. NOT multi-line.
 - `model` (optional) — model override.
 - `skills` (optional) — auto-mounted skills.
-- `disable-noninteractive` (optional) — hide the command from headless/
-  non-interactive runs.
+
+Only the five keys above are accepted by `validate-components`. ZCode is
+Claude-Code-lineage and may accept further keys (e.g. a headless-visibility
+toggle), but none is confirmed on 3.3.6 — probe with `devtest-plugin` before
+authoring one, since an unrecognized key fails validation.
 
 **Do NOT use snake_case** (`allowed_tools`, `argument_hint`) — they are silently
 ignored. No `version`, `name`, or `tags`. A command whose name collides with a

@@ -33,6 +33,13 @@ permission model.
 
 ## Path A: classic MCP server
 
+### First-party ZCode servers (ready examples)
+
+z.ai documents three maintained MCP servers you can register as-is rather than
+authoring from scratch: **`zai-mcp-server`** (Z.ai platform tools),
+**`web-search-prime`** (search), and **`web-reader`** (page reading). Prefer one
+of these before writing a new stdio server for the same capability.
+
 ### Where
 
 Register in the active marketplace's `mcp.json`:

@@ -60,9 +60,21 @@ Adds a model provider definition to `v2-config.template.json`.
 Beyond OpenAI and Anthropic, ZCode 3.3.6 documents **GLM Coding Plan (Z.ai and
 BigModel), OpenRouter, Moonshot, MiniMax, and Xiaomi MiMo**, plus custom
 Anthropic/OpenAI-compatible endpoints. Author each as a `custom:*` provider with
-the matching `kind` (`anthropic` or `openai`) and its base URL. Verified GLM
-endpoints: Z.ai `https://api.z.ai/api/anthropic`, BigModel
-`https://open.bigmodel.cn/api/anthropic`; models `GLM-5.2` and `GLM-5-Turbo`.
+the matching `kind` (`anthropic` or `openai`) and its base URL. Documented
+endpoints (z.ai Connect-Models docs, verified 3.3.6):
+
+| Provider | `kind` | Base URL |
+| --- | --- | --- |
+| Z.ai (GLM) | `anthropic` | `https://api.z.ai/api/anthropic` |
+| Z.ai (OpenAI coding) | `openai` | `https://api.z.ai/api/coding/paas/v4` |
+| BigModel | `anthropic` | `https://open.bigmodel.cn/api/anthropic` |
+| Moonshot | `anthropic` | `https://api.moonshot.cn/anthropic` |
+| MiniMax | `anthropic` | `https://api.minimaxi.com/anthropic` |
+| Xiaomi MiMo | `openai` | `https://api.xiaomimimo.com/v1` |
+| OpenRouter | `openai` | `https://openrouter.ai/api` |
+
+Models `GLM-5.2` and `GLM-5-Turbo` (the GLM Coding Plan and Resource Package are
+separate purchase tiers, not separate endpoints).
 Account authentication ("Continue with Z.ai / BigModel") uses the OAuth preference
 (`modelProviderFamilyModes.zai: oauth`); explicit API keys are `custom:*`
 providers. Never reuse a ZCode-owned `builtin:*` identity for a custom provider.