@sanqianx/project-knowledge 5.0.19 → 5.0.20

package/_site/_test/project-store-test.js

@@ -1,90 +1,90 @@
-const assert = require('assert');
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const { SCHEMAS } = require('../lib/contracts');
-const { StorageLayout } = require('../lib/storage-layout');
-const { ProjectRegistryStore } = require('../lib/project-registry-store');
-const { ProjectStore } = require('../lib/project-store');
-
-(async () => {
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'pk-project-store-'));
-  const layout = new StorageLayout({ dataDir: root });
-  const registry = new ProjectRegistryStore({ layout });
-  const projects = new ProjectStore({ layout });
-  await registry.initialize();
-
-  const create = id => projects.create(id, {
-    displayName: id,
-    storageName: `${id}-stable`,
-    repoPath: path.join(root, 'repos', id),
-    knowledgePath: path.join(root, 'knowledge', id),
-  }, { trackingStartCommit: 'base' });
-  await Promise.all([create('project-a'), create('project-b')]);
-  await Promise.all([
-    registry.add('project-a', { displayName: 'A' }),
-    registry.add('project-b', { displayName: 'B' }),
-  ]);
-  assert.deepStrictEqual(new Set(registry.listIds()), new Set(['project-a', 'project-b']));
-
-  await Promise.all([
-    projects.updateState('project-a', state => { state.lastAnalyzedCommit = 'commit-a'; }),
-    projects.updateState('project-b', state => { state.lastAnalyzedCommit = 'commit-b'; }),
-  ]);
-  assert.strictEqual(projects.readState('project-a').lastAnalyzedCommit, 'commit-a');
-  assert.strictEqual(projects.readState('project-b').lastAnalyzedCommit, 'commit-b');
-
-  const order = [];
-  await Promise.all([
-    projects.updateState('project-a', async state => {
-      order.push('first-start');
-      await new Promise(resolve => setTimeout(resolve, 40));
-      order.push('first-end');
-      state.lastAnalyzedCommit = 'commit-a-2';
-    }),
-    projects.updateState('project-a', state => {
-      order.push('second');
-      state.lastAnalyzedCommit = 'commit-a-3';
-    }),
-  ]);
-  assert.deepStrictEqual(order, ['first-start', 'first-end', 'second']);
-  assert.strictEqual(projects.readState('project-a').lastAnalyzedCommit, 'commit-a-3');
-  const revision = projects.readState('project-a').revision;
-  await assert.rejects(
-    projects.updateState('project-a', state => state, { expectedRevision: revision - 1 }),
-    error => error.code === 'PROJECT_BUSY',
-  );
-
-  const configBefore = projects.readConfig('project-a');
-  const renamed = await projects.updateConfig('project-a', { displayName: 'Renamed A' });
-  assert.strictEqual(renamed.projectId, configBefore.projectId);
-  assert.strictEqual(renamed.storageName, configBefore.storageName);
-  assert.strictEqual(renamed.knowledgePath, configBefore.knowledgePath);
-  await assert.rejects(projects.updateConfig('project-a', { repoPath: path.join(root, 'unverified-move') }), error => error.code === 'INVALID_ARGUMENT');
-  const moved = await projects.updateConfig('project-a', { repoPath: path.join(root, 'verified-move') }, { allowRepoPath: true });
-  assert.strictEqual(moved.repoPath, path.resolve(root, 'verified-move'));
-  await assert.rejects(projects.updateConfig('project-a', { knowledgePath: path.join(root, 'other') }), error => error.code === 'IMMUTABLE_FIELD');
-
-  const requirementPath = layout.getProjectRequirementsPath('project-a');
-  assert.strictEqual(fs.existsSync(requirementPath), false);
-  await Promise.all(Array.from({ length: 20 }, (_, index) => projects.appendRequirement('project-a', {
-    schema: SCHEMAS.requirement,
-    id: `req-${index}`,
-    ts: new Date().toISOString(),
-    projectId: 'project-a',
-    requirement: `requirement ${index}`,
-  })));
-  assert.strictEqual(projects.readRequirements('project-a').length, 20);
-  assert.strictEqual(fs.existsSync(layout.getProjectRequirementsPath('project-b')), false);
-
-  fs.writeFileSync(layout.getProjectStatePath('project-b'), '{broken', 'utf8');
-  assert.throws(() => projects.readState('project-b'), error => error.code === 'DATA_CORRUPT');
-
-  const registryData = registry.read();
-  assert.deepStrictEqual(Object.keys(registryData.projects).sort(), ['project-a', 'project-b']);
-  assert.strictEqual(Object.prototype.hasOwnProperty.call(registryData.projects['project-a'], 'lastAnalyzedCommit'), false);
-  console.log('project-store-test PASS');
-})().catch(error => {
-  console.error(error.stack || error.message);
-  process.exitCode = 1;
-});
+const assert = require('assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { SCHEMAS } = require('../lib/contracts');
+const { StorageLayout } = require('../lib/storage-layout');
+const { ProjectRegistryStore } = require('../lib/project-registry-store');
+const { ProjectStore } = require('../lib/project-store');
+
+(async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'pk-project-store-'));
+  const layout = new StorageLayout({ dataDir: root });
+  const registry = new ProjectRegistryStore({ layout });
+  const projects = new ProjectStore({ layout });
+  await registry.initialize();
+
+  const create = id => projects.create(id, {
+    displayName: id,
+    storageName: `${id}-stable`,
+    repoPath: path.join(root, 'repos', id),
+    knowledgePath: path.join(root, 'knowledge', id),
+  }, { trackingStartCommit: 'base' });
+  await Promise.all([create('project-a'), create('project-b')]);
+  await Promise.all([
+    registry.add('project-a', { displayName: 'A' }),
+    registry.add('project-b', { displayName: 'B' }),
+  ]);
+  assert.deepStrictEqual(new Set(registry.listIds()), new Set(['project-a', 'project-b']));
+
+  await Promise.all([
+    projects.updateState('project-a', state => { state.lastAnalyzedCommit = 'commit-a'; }),
+    projects.updateState('project-b', state => { state.lastAnalyzedCommit = 'commit-b'; }),
+  ]);
+  assert.strictEqual(projects.readState('project-a').lastAnalyzedCommit, 'commit-a');
+  assert.strictEqual(projects.readState('project-b').lastAnalyzedCommit, 'commit-b');
+
+  const order = [];
+  await Promise.all([
+    projects.updateState('project-a', async state => {
+      order.push('first-start');
+      await new Promise(resolve => setTimeout(resolve, 40));
+      order.push('first-end');
+      state.lastAnalyzedCommit = 'commit-a-2';
+    }),
+    projects.updateState('project-a', state => {
+      order.push('second');
+      state.lastAnalyzedCommit = 'commit-a-3';
+    }),
+  ]);
+  assert.deepStrictEqual(order, ['first-start', 'first-end', 'second']);
+  assert.strictEqual(projects.readState('project-a').lastAnalyzedCommit, 'commit-a-3');
+  const revision = projects.readState('project-a').revision;
+  await assert.rejects(
+    projects.updateState('project-a', state => state, { expectedRevision: revision - 1 }),
+    error => error.code === 'PROJECT_BUSY',
+  );
+
+  const configBefore = projects.readConfig('project-a');
+  const renamed = await projects.updateConfig('project-a', { displayName: 'Renamed A' });
+  assert.strictEqual(renamed.projectId, configBefore.projectId);
+  assert.strictEqual(renamed.storageName, configBefore.storageName);
+  assert.strictEqual(renamed.knowledgePath, configBefore.knowledgePath);
+  await assert.rejects(projects.updateConfig('project-a', { repoPath: path.join(root, 'unverified-move') }), error => error.code === 'INVALID_ARGUMENT');
+  const moved = await projects.updateConfig('project-a', { repoPath: path.join(root, 'verified-move') }, { allowRepoPath: true });
+  assert.strictEqual(moved.repoPath, path.resolve(root, 'verified-move'));
+  await assert.rejects(projects.updateConfig('project-a', { knowledgePath: path.join(root, 'other') }), error => error.code === 'IMMUTABLE_FIELD');
+
+  const requirementPath = layout.getProjectRequirementsPath('project-a');
+  assert.strictEqual(fs.existsSync(requirementPath), false);
+  await Promise.all(Array.from({ length: 20 }, (_, index) => projects.appendRequirement('project-a', {
+    schema: SCHEMAS.requirement,
+    id: `req-${index}`,
+    ts: new Date().toISOString(),
+    projectId: 'project-a',
+    requirement: `requirement ${index}`,
+  })));
+  assert.strictEqual(projects.readRequirements('project-a').length, 20);
+  assert.strictEqual(fs.existsSync(layout.getProjectRequirementsPath('project-b')), false);
+
+  fs.writeFileSync(layout.getProjectStatePath('project-b'), '{broken', 'utf8');
+  assert.throws(() => projects.readState('project-b'), error => error.code === 'DATA_CORRUPT');
+
+  const registryData = registry.read();
+  assert.deepStrictEqual(Object.keys(registryData.projects).sort(), ['project-a', 'project-b']);
+  assert.strictEqual(Object.prototype.hasOwnProperty.call(registryData.projects['project-a'], 'lastAnalyzedCommit'), false);
+  console.log('project-store-test PASS');
+})().catch(error => {
+  console.error(error.stack || error.message);
+  process.exitCode = 1;
+});

package/_site/_test/registry-events-test.js

@@ -1,38 +1,38 @@
-'use strict';
-const assert = require('node:assert/strict');
-const http = require('node:http');
-const { RegistryEvents } = require('../lib/registry-events');
-const { createRequestHandler } = require('../lib/server-app');
-
-(async () => {
-  const events = new RegistryEvents(), received = [];
-  const off = events.subscribe(event => received.push(event));
-  assert.equal(received[0].type, 'registry-snapshot');
-  const runtime = { registryEvents: events, logger: { debug: async () => {}, info: async () => {} },
-    moduleBridge: { syncEngineConfiguration: async () => ({}) },
-    settingsStore: { read: () => ({ brain: { id: 'brain-default', name: 'before' }, knowledge: { rootPath: '' } }), updatePatch: async patch => ({ brain: patch.brain }) } };
-  // Exercise the real HTTP completion hook independently of business stores.
-  const handler = createRequestHandler(runtime, { host: '127.0.0.1', port: 0 });
-  const server = http.createServer(handler);
-  await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
-  try {
-    const base = `http://127.0.0.1:${server.address().port}`;
-    const reader = await fetch(`${base}/api/registry/events`);
-    const stream = reader.body.getReader();
-    const first = new TextDecoder().decode((await stream.read()).value);
-    assert.match(first, /registry-snapshot/);
-    const mutation = await fetch(`${base}/api/brain`, { method: 'PATCH', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ name: 'after' }) });
-    assert.equal(mutation.status, 200);
-    const change = new TextDecoder().decode((await stream.read()).value);
-    assert.match(change, /registry-changed/);
-    assert.equal(received[1].revision, 1);
-    const reconnect = []; events.subscribe(event => reconnect.push(event))();
-    assert.equal(reconnect[0].revision, 1);
-    assert.equal(reconnect[0].instanceId, received[0].instanceId);
-    await stream.cancel();
-    off(); events.publish(['brain']);
-    assert.equal(received.length, 2, 'unsubscribed observers receive no more updates');
-    assert.notEqual(new RegistryEvents().instanceId, events.instanceId, 'restart makes old revisions distinguishable');
-    console.log('registry-events-test PASS (real SSE, reconnect identity and unsubscribe)');
-  } finally { server.closeAllConnections(); await new Promise(resolve => server.close(resolve)); }
-})().catch(error => { console.error(error); process.exitCode = 1; });
+'use strict';
+const assert = require('node:assert/strict');
+const http = require('node:http');
+const { RegistryEvents } = require('../lib/registry-events');
+const { createRequestHandler } = require('../lib/server-app');
+
+(async () => {
+  const events = new RegistryEvents(), received = [];
+  const off = events.subscribe(event => received.push(event));
+  assert.equal(received[0].type, 'registry-snapshot');
+  const runtime = { registryEvents: events, logger: { debug: async () => {}, info: async () => {} },
+    moduleBridge: { syncEngineConfiguration: async () => ({}) },
+    settingsStore: { read: () => ({ brain: { id: 'brain-default', name: 'before' }, knowledge: { rootPath: '' } }), updatePatch: async patch => ({ brain: patch.brain }) } };
+  // Exercise the real HTTP completion hook independently of business stores.
+  const handler = createRequestHandler(runtime, { host: '127.0.0.1', port: 0 });
+  const server = http.createServer(handler);
+  await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
+  try {
+    const base = `http://127.0.0.1:${server.address().port}`;
+    const reader = await fetch(`${base}/api/registry/events`);
+    const stream = reader.body.getReader();
+    const first = new TextDecoder().decode((await stream.read()).value);
+    assert.match(first, /registry-snapshot/);
+    const mutation = await fetch(`${base}/api/brain`, { method: 'PATCH', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ name: 'after' }) });
+    assert.equal(mutation.status, 200);
+    const change = new TextDecoder().decode((await stream.read()).value);
+    assert.match(change, /registry-changed/);
+    assert.equal(received[1].revision, 1);
+    const reconnect = []; events.subscribe(event => reconnect.push(event))();
+    assert.equal(reconnect[0].revision, 1);
+    assert.equal(reconnect[0].instanceId, received[0].instanceId);
+    await stream.cancel();
+    off(); events.publish(['brain']);
+    assert.equal(received.length, 2, 'unsubscribed observers receive no more updates');
+    assert.notEqual(new RegistryEvents().instanceId, events.instanceId, 'restart makes old revisions distinguishable');
+    console.log('registry-events-test PASS (real SSE, reconnect identity and unsubscribe)');
+  } finally { server.closeAllConnections(); await new Promise(resolve => server.close(resolve)); }
+})().catch(error => { console.error(error); process.exitCode = 1; });

package/_site/_test/release-version-sync-test.js

@@ -1,115 +1,115 @@
-const assert = require('assert');
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const { spawnSync } = require('child_process');
-
-const ROOT = path.resolve(__dirname, '..', '..');
-const SCRIPT = path.join(ROOT, '_site', 'scripts', 'sync-release-version.js');
-const TEMP = fs.mkdtempSync(path.join(os.tmpdir(), `project-knowledge-release-version-${process.pid}-`));
-const FILES = [
-  'package.json',
-  'package-lock.json',
-  'desktop/package.json',
-  'desktop/package-lock.json',
-  'plugins/project-knowledge/.claude-plugin/plugin.json',
-  'plugins/project-knowledge/.codex-plugin/plugin.json',
-  '.claude-plugin/marketplace.json',
-  'plugins/project-knowledge/.mcp.json',
-];
-
-function copyFixture() {
-  for (const relative of FILES) {
-    const destination = path.join(TEMP, relative);
-    fs.mkdirSync(path.dirname(destination), { recursive: true });
-    fs.copyFileSync(path.join(ROOT, relative), destination);
-  }
-}
-
-function run(args) {
-  return spawnSync(process.execPath, [SCRIPT, '--root', TEMP, ...args], {
-    cwd: ROOT,
-    encoding: 'utf8',
-    windowsHide: true,
-  });
-}
-
-function git(args) {
-  const result = spawnSync('git', args, { cwd: TEMP, encoding: 'utf8', windowsHide: true });
-  assert.strictEqual(result.status, 0, result.stderr || result.stdout);
-  return result;
-}
-
-try {
-  copyFixture();
-  git(['init', '-q']);
-  git(['config', 'user.email', 'release-test@example.local']);
-  git(['config', 'user.name', 'Release Test']);
-  git(['add', '.']);
-  git(['commit', '-q', '-m', 'fixture']);
-  const rootPackage = path.join(TEMP, 'package.json');
-  const value = JSON.parse(fs.readFileSync(rootPackage, 'utf8'));
-  value.version = '9.8.7';
-  fs.writeFileSync(rootPackage, `${JSON.stringify(value, null, 2)}\n`, 'utf8');
-
-  const before = run(['--check']);
-  assert.notStrictEqual(before.status, 0, 'check must fail before derived version files are synchronized');
-  assert.match(before.stderr, /out of sync/);
-
-  const sync = run(['--stage']);
-  assert.strictEqual(sync.status, 0, sync.stderr || sync.stdout);
-  const check = run(['--check']);
-  assert.strictEqual(check.status, 0, check.stderr || check.stdout);
-  const matchingTag = run(['--check', '--tag', 'v9.8.7']);
-  assert.strictEqual(matchingTag.status, 0, matchingTag.stderr || matchingTag.stdout);
-  const mismatchedTag = run(['--check', '--tag', 'v9.8.8']);
-  assert.notStrictEqual(mismatchedTag.status, 0, 'check must reject a tag that does not match package.json');
-  assert.match(mismatchedTag.stderr, /must match package version/);
-
-  const claude = JSON.parse(fs.readFileSync(path.join(TEMP, 'plugins/project-knowledge/.claude-plugin/plugin.json'), 'utf8'));
-  const codex = JSON.parse(fs.readFileSync(path.join(TEMP, 'plugins/project-knowledge/.codex-plugin/plugin.json'), 'utf8'));
-  const marketplace = JSON.parse(fs.readFileSync(path.join(TEMP, '.claude-plugin/marketplace.json'), 'utf8'));
-  const mcp = JSON.parse(fs.readFileSync(path.join(TEMP, 'plugins/project-knowledge/.mcp.json'), 'utf8'));
-  const desktopLock = JSON.parse(fs.readFileSync(path.join(TEMP, 'desktop/package-lock.json'), 'utf8'));
-  assert.strictEqual(claude.version, '9.8.7');
-  assert.strictEqual(codex.version, '9.8.7');
-  assert.strictEqual(marketplace.plugins[0].version, '9.8.7');
-  const server = mcp.mcpServers['project-knowledge'];
-  const serialized = JSON.stringify(server);
-  assert.strictEqual(server.command, 'node', 'the MCP server must bootstrap through the local node runtime');
-  assert.strictEqual(server.args[0], '-e', 'the MCP server must use the node -e bootstrap chain');
-  assert(server.args[1].includes('mcp-launcher.cjs'), 'the bootstrap must load the bundled local launcher');
-  assert(!/npx/i.test(serialized) && !/@sanqianx\/project-knowledge@/.test(serialized), 'the pinned npx package form must stay rejected');
-  assert(!/https?:\/\//.test(serialized), 'the MCP bootstrap must not reference network sources');
-  assert.strictEqual(server.cwd, undefined, 'the MCP server must not pin a cwd');
-  assert(!server.args[1].includes('process.cwd'), 'the MCP bootstrap must never fall back to cwd source resolution');
-  assert(server.env && server.env.KB_PLUGIN_VERSION === '9.8.7', 'env.KB_PLUGIN_VERSION must follow the release version');
-  assert.strictEqual(desktopLock.version, '9.8.7');
-  assert.strictEqual(desktopLock.packages[''].version, '9.8.7');
-  const staged = git(['diff', '--cached', '--name-only']);
-  const stagedFiles = staged.stdout.split(/\r?\n/).filter(Boolean).sort();
-  assert.deepStrictEqual(stagedFiles, [
-    '.claude-plugin/marketplace.json',
-    'desktop/package-lock.json',
-    'desktop/package.json',
-    'package-lock.json',
-    'plugins/project-knowledge/.claude-plugin/plugin.json',
-    'plugins/project-knowledge/.codex-plugin/plugin.json',
-    'plugins/project-knowledge/.mcp.json',
-  ]);
-  const scripts = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf8')).scripts;
-  assert.strictEqual(scripts.preversion, 'npm run release:verify');
-  assert.strictEqual(scripts.version, 'node _site/scripts/sync-release-version.js --stage --web-only');
-  assert.strictEqual(scripts.postversion, 'npm run release:verify');
-  const desktopBytes = FILES.filter(file => file.startsWith('desktop/')).map(file => fs.readFileSync(path.join(TEMP, file)));
-  value.version = '9.8.8-rc.1'; fs.writeFileSync(rootPackage, JSON.stringify(value, null, 2) + '\n');
-  assert.strictEqual(run(['--web-only']).status, 0);
-  assert.strictEqual(run(['--check', '--web-only']).status, 0);
-  const resyncedMcp = JSON.parse(fs.readFileSync(path.join(TEMP, 'plugins/project-knowledge/.mcp.json'), 'utf8'));
-  assert.strictEqual(resyncedMcp.mcpServers['project-knowledge'].env.KB_PLUGIN_VERSION, '9.8.8-rc.1', 'KB_PLUGIN_VERSION must follow every version bump');
-  assert.notStrictEqual(run(['--check']).status, 0, 'desktop still needs explicit synchronization for desktop releases');
-  FILES.filter(file => file.startsWith('desktop/')).forEach((file, i) => assert.deepStrictEqual(fs.readFileSync(path.join(TEMP, file)), desktopBytes[i]));
-  console.log('release-version-sync-test PASS');
-} finally {
-  fs.rmSync(TEMP, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
-}
+const assert = require('assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+const ROOT = path.resolve(__dirname, '..', '..');
+const SCRIPT = path.join(ROOT, '_site', 'scripts', 'sync-release-version.js');
+const TEMP = fs.mkdtempSync(path.join(os.tmpdir(), `project-knowledge-release-version-${process.pid}-`));
+const FILES = [
+  'package.json',
+  'package-lock.json',
+  'desktop/package.json',
+  'desktop/package-lock.json',
+  'plugins/project-knowledge/.claude-plugin/plugin.json',
+  'plugins/project-knowledge/.codex-plugin/plugin.json',
+  '.claude-plugin/marketplace.json',
+  'plugins/project-knowledge/.mcp.json',
+];
+
+function copyFixture() {
+  for (const relative of FILES) {
+    const destination = path.join(TEMP, relative);
+    fs.mkdirSync(path.dirname(destination), { recursive: true });
+    fs.copyFileSync(path.join(ROOT, relative), destination);
+  }
+}
+
+function run(args) {
+  return spawnSync(process.execPath, [SCRIPT, '--root', TEMP, ...args], {
+    cwd: ROOT,
+    encoding: 'utf8',
+    windowsHide: true,
+  });
+}
+
+function git(args) {
+  const result = spawnSync('git', args, { cwd: TEMP, encoding: 'utf8', windowsHide: true });
+  assert.strictEqual(result.status, 0, result.stderr || result.stdout);
+  return result;
+}
+
+try {
+  copyFixture();
+  git(['init', '-q']);
+  git(['config', 'user.email', 'release-test@example.local']);
+  git(['config', 'user.name', 'Release Test']);
+  git(['add', '.']);
+  git(['commit', '-q', '-m', 'fixture']);
+  const rootPackage = path.join(TEMP, 'package.json');
+  const value = JSON.parse(fs.readFileSync(rootPackage, 'utf8'));
+  value.version = '9.8.7';
+  fs.writeFileSync(rootPackage, `${JSON.stringify(value, null, 2)}\n`, 'utf8');
+
+  const before = run(['--check']);
+  assert.notStrictEqual(before.status, 0, 'check must fail before derived version files are synchronized');
+  assert.match(before.stderr, /out of sync/);
+
+  const sync = run(['--stage']);
+  assert.strictEqual(sync.status, 0, sync.stderr || sync.stdout);
+  const check = run(['--check']);
+  assert.strictEqual(check.status, 0, check.stderr || check.stdout);
+  const matchingTag = run(['--check', '--tag', 'v9.8.7']);
+  assert.strictEqual(matchingTag.status, 0, matchingTag.stderr || matchingTag.stdout);
+  const mismatchedTag = run(['--check', '--tag', 'v9.8.8']);
+  assert.notStrictEqual(mismatchedTag.status, 0, 'check must reject a tag that does not match package.json');
+  assert.match(mismatchedTag.stderr, /must match package version/);
+
+  const claude = JSON.parse(fs.readFileSync(path.join(TEMP, 'plugins/project-knowledge/.claude-plugin/plugin.json'), 'utf8'));
+  const codex = JSON.parse(fs.readFileSync(path.join(TEMP, 'plugins/project-knowledge/.codex-plugin/plugin.json'), 'utf8'));
+  const marketplace = JSON.parse(fs.readFileSync(path.join(TEMP, '.claude-plugin/marketplace.json'), 'utf8'));
+  const mcp = JSON.parse(fs.readFileSync(path.join(TEMP, 'plugins/project-knowledge/.mcp.json'), 'utf8'));
+  const desktopLock = JSON.parse(fs.readFileSync(path.join(TEMP, 'desktop/package-lock.json'), 'utf8'));
+  assert.strictEqual(claude.version, '9.8.7');
+  assert.strictEqual(codex.version, '9.8.7');
+  assert.strictEqual(marketplace.plugins[0].version, '9.8.7');
+  const server = mcp.mcpServers['project-knowledge'];
+  const serialized = JSON.stringify(server);
+  assert.strictEqual(server.command, 'node', 'the MCP server must bootstrap through the local node runtime');
+  assert.strictEqual(server.args[0], '-e', 'the MCP server must use the node -e bootstrap chain');
+  assert(server.args[1].includes('mcp-launcher.cjs'), 'the bootstrap must load the bundled local launcher');
+  assert(!/npx/i.test(serialized) && !/@sanqianx\/project-knowledge@/.test(serialized), 'the pinned npx package form must stay rejected');
+  assert(!/https?:\/\//.test(serialized), 'the MCP bootstrap must not reference network sources');
+  assert.strictEqual(server.cwd, undefined, 'the MCP server must not pin a cwd');
+  assert(!server.args[1].includes('process.cwd'), 'the MCP bootstrap must never fall back to cwd source resolution');
+  assert(server.env && server.env.KB_PLUGIN_VERSION === '9.8.7', 'env.KB_PLUGIN_VERSION must follow the release version');
+  assert.strictEqual(desktopLock.version, '9.8.7');
+  assert.strictEqual(desktopLock.packages[''].version, '9.8.7');
+  const staged = git(['diff', '--cached', '--name-only']);
+  const stagedFiles = staged.stdout.split(/\r?\n/).filter(Boolean).sort();
+  assert.deepStrictEqual(stagedFiles, [
+    '.claude-plugin/marketplace.json',
+    'desktop/package-lock.json',
+    'desktop/package.json',
+    'package-lock.json',
+    'plugins/project-knowledge/.claude-plugin/plugin.json',
+    'plugins/project-knowledge/.codex-plugin/plugin.json',
+    'plugins/project-knowledge/.mcp.json',
+  ]);
+  const scripts = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf8')).scripts;
+  assert.strictEqual(scripts.preversion, 'npm run release:verify');
+  assert.strictEqual(scripts.version, 'node _site/scripts/sync-release-version.js --stage --web-only');
+  assert.strictEqual(scripts.postversion, 'npm run release:verify');
+  const desktopBytes = FILES.filter(file => file.startsWith('desktop/')).map(file => fs.readFileSync(path.join(TEMP, file)));
+  value.version = '9.8.8-rc.1'; fs.writeFileSync(rootPackage, JSON.stringify(value, null, 2) + '\n');
+  assert.strictEqual(run(['--web-only']).status, 0);
+  assert.strictEqual(run(['--check', '--web-only']).status, 0);
+  const resyncedMcp = JSON.parse(fs.readFileSync(path.join(TEMP, 'plugins/project-knowledge/.mcp.json'), 'utf8'));
+  assert.strictEqual(resyncedMcp.mcpServers['project-knowledge'].env.KB_PLUGIN_VERSION, '9.8.8-rc.1', 'KB_PLUGIN_VERSION must follow every version bump');
+  assert.notStrictEqual(run(['--check']).status, 0, 'desktop still needs explicit synchronization for desktop releases');
+  FILES.filter(file => file.startsWith('desktop/')).forEach((file, i) => assert.deepStrictEqual(fs.readFileSync(path.join(TEMP, file)), desktopBytes[i]));
+  console.log('release-version-sync-test PASS');
+} finally {
+  fs.rmSync(TEMP, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
+}