release-skill 0.6.2 → 0.7.0

package/bin/rules.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "kind": "skill-family.contracts.rules",
-  "contractsVersion": "1.5.0",
+  "contractsVersion": "1.7.0",
   "budget": {
     "firstVersionMax": 20,
     "absoluteMax": 30,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.6.2",
+  "version": "0.7.0",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -65,6 +65,7 @@
     "sync:public-files:check": "node scripts/sync-public-files.mjs --check",
     "build:adapters": "node scripts/build-adapters.mjs",
     "build:adapters:check": "node scripts/build-adapters.mjs --check",
+    "build:adapters:apply": "node scripts/build-adapters.mjs --apply",
     "build:bundle": "node scripts/build-bundle.mjs",
     "build:bundle:check": "node scripts/build-bundle.mjs --check",
     "native:build": "node-gyp rebuild --directory native/safe-write",
@@ -77,8 +78,9 @@
     "ajv-formats": "3.0.1",
     "libnpmpublish": "11.1.0",
     "npm-registry-fetch": "18.0.2",
-    "skill-family-contracts": "0.5.0",
-    "skill-family-harness-node": "0.5.0",
+    "skill-family-contracts": "0.8.0",
+    "skill-family-engineering-kit": "0.8.0",
+    "skill-family-harness-node": "0.8.0",
     "yaml": "2.9.0"
   },
   "devDependencies": {
@@ -86,7 +88,7 @@
     "node-gyp": "12.3.0"
   },
   "engines": {
-    "node": ">=22.0.0"
+    "node": ">=22.22.2 <23"
   },
   "keywords": [
     "release",

package/platform-manifest.json

@@ -2,11 +2,11 @@
   "schemaVersion": "1.0.0",
   "platformId": "release-skill",
   "platformName": "release-skill Plugin Platform",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "logicalRoot": "skills-src/",
-  "logicalRootDigest": "6d504094e1bf7d38beb6d886ff48ea442e7563b6061a7145a14c2d71a60292f5",
-  "projectionDigest": "2ca5c5d0b71e10622911426d3abf9c0dfae72237ee6001d4eaaada90acb7a0d7",
-  "projectionId": "release-skill:platform:0.6.0",
+  "logicalRootDigest": "3767fc36f42ca561f5e839cea7b7e5bc16d08c47867b5bd6086f25efd0cb0f06",
+  "projectionDigest": "419f7f9601015459956e10aae74f42240ab2ac248238ff7494f3e761643d1749",
+  "projectionId": "release-skill:platform:0.7.0",
   "manifestRequired": true,
   "projectionSources": {
     "skills-src-root": {

package/references/.render-manifest.json

@@ -1,13 +1,13 @@
 {
-  "source": "references",
+  "source": "standards",
   "files": {
     "00-target-state.md": {
       "digest": "d66f8c33b2df2bbcb235ce123f786c18c19b3a797197495793d9af566618099d",
       "bytes": 6335
     },
     "01-state-machine.md": {
-      "digest": "4698e3763f76774798e269ae163fcf87ba8ca358a9638c5bff693f5921455f9f",
-      "bytes": 9114
+      "digest": "711265e093be13f582ac8be89c391eff79ac22f56c25b91d1ccaef31856ef269",
+      "bytes": 12086
     },
     "02-project-config.md": {
       "digest": "f866490d5897c2baf38fd3a6770964c052bea4418f034b75965ecfe49c2f4387",
@@ -22,8 +22,8 @@
       "bytes": 4682
     },
     "05-evidence-and-errors.md": {
-      "digest": "3df7644a6db614ee5f67689834f97227752834cf6c27762dee66650675c34168",
-      "bytes": 11592
+      "digest": "f1352256e3b9e2c96c1aa6689fa921a909ab41f80832c5a3356a10590b640929",
+      "bytes": 12014
     },
     "06-adapter-contract.md": {
       "digest": "4b1ec9ba843345df47c1d133a8bf1aa644bf12a4ecf760cb1d566a43f1e9a9d2",

package/references/01-state-machine.md

@@ -6,7 +6,7 @@
 
 ## 1. 状态定义
 
-发布生命周期包含 7 个主状态和 3 个异常状态，共计 10 个状态。
+发布生命周期包含 9 个主状态和 3 个异常状态，共计 12 个状态。
 
 ### 1.1 主状态
 
@@ -18,6 +18,8 @@
 | **APPROVED** | 人工审阅并批准了冻结的发布计划 | 批准记录绑定到发布计划 hash，且未过期 |
 | **PUBLISHING** | 外部写操作正在按检查点依次执行 | `publish` 命令读取已批准计划并开始执行 |
 | **PUBLISHED** | 所有发布检查点均已成功完成 | 最后一个检查点的 `observe` 验证通过 |
+| **DISTRIBUTING** | 发布后分发正在执行：载荷物化、目标镜像推送与 distribute 阶段 postPublish hooks 按检查点依次进行 | 计划声明 `postPublish`（targets 或 hooks），`ship` 路由到 `distribute` 并通过全部安全门后开始执行 |
+| **DISTRIBUTED** | 分发完成：全部目标与 distribute 阶段 hooks 成功（或远端已一致而幂等跳过） | `distribute` run 无失败且无待批准检查点 |
 | **VERIFIED** | 发布后验证全部通过 | `verify` 命令在全新环境中完成安装、调用、泄漏审计和远端一致性校验 |
 
 ### 1.2 异常状态
@@ -48,7 +50,15 @@
 | PUBLISHING | PUBLISHED | 所有检查点成功 |
 | PUBLISHING | PARTIAL | 至少一个检查点成功但后续失败 |
 | PUBLISHING | BLOCKED | 外部服务阻断且无法继续 |
-| PUBLISHED | VERIFIED | `verify` 的远端、npm、Claude/Codex 等自动化检查全部通过；新计划中的 Kimi/CodeBuddy 人工安装任务不由系统核验且不阻塞该状态 |
+| PUBLISHED | DISTRIBUTING | 计划声明 `postPublish`（targets 或 hooks），`ship` 路由到 `distribute` 开始执行 |
+| PUBLISHED | VERIFIED | 无 `postPublish` 声明时，`verify` 的远端、npm、Claude/Codex 等自动化检查全部通过（Kimi/CodeBuddy 人工安装任务不由系统核验且不阻塞）；声明了 `postPublish` 时必须先经 DISTRIBUTING/DISTRIBUTED 门禁 |
+| DISTRIBUTING | DISTRIBUTED | 全部目标与 distribute 阶段 hooks 成功（或远端已一致幂等跳过），且无待批准检查点 |
+| DISTRIBUTING | PARTIAL | 至少一个外部 checkpoint 已成功后，目标/hooks 失败或存在待批准 checkpoint |
+| DISTRIBUTING | NEEDS_INPUT | `requiresApproval` hook 缺少 checkpoint 级批准，且尚无任何外部副作用 |
+| DISTRIBUTING | BLOCKED | 零外部写入落地且安全门或 hook 失败（失败关闭） |
+| DISTRIBUTED | VERIFIED | `verify` 的 distribute 门禁通过：存在 DISTRIBUTED（或经 `blocksVerified:false` 合法豁免的 PARTIAL）分发 run，且安装/远端校验全部通过 |
+| NEEDS_INPUT | DISTRIBUTING | checkpoint 批准补齐后重跑 `distribute` |
+| PARTIAL | DISTRIBUTING | `distribute` 重跑即 reconcile：跳过已一致目标，仅重跑安全未完成项 |
 | PUBLISHED | POST_PUBLISH_VERIFY_FAILED | 发布后验证失败（保留 PUBLISHED 事实但标记验证失败） |
 | NEEDS_INPUT | DISCOVERED | 用户提供输入后重新开始评估 |
 | NEEDS_INPUT | ASSESSED | 用户提供输入后恢复评估 |
@@ -66,6 +76,14 @@
 - APPROVED -> PREPARED：当 plan digest、目标版本或已批准 action 列表变化时，批准自动失效。planVersion 2 计划的 digest 只绑定信任边界（冻结产物身份、动作列表、目标版本、配置摘要），工作区基线（Git tree hash、workspace digest）是记录层审计数据，不使批准失效；planVersion 1（旧版）计划维持旧规则，Git tree hash 与 workspace digest 变化同样使批准失效。
 - PUBLISHING -> PARTIAL：当任一检查点成功后下一检查点失败时，自动计算 PARTIAL 状态。
 
+### 2.2 分发阶段与 postVerify 阶段（v0.6.3）
+
+postPublish hooks 分两个阶段，各自对应独立的 distribute run：
+
+- **distribute 阶段**（默认 `phase: distribute`）：在 DISTRIBUTING 中执行，载荷只能来自冻结 tagCommit 的 detached worktree（时序契约）。全部目标与 distribute 阶段 hooks 成功后进入 DISTRIBUTED；`verify` 在到达 VERIFIED 前检查 distribute 门禁——存在未 SUCCEEDED 且未经 `blocksVerified: false` 合法豁免的 hook 时不得 VERIFIED。NEEDS_INPUT/BLOCKED 不得静默转 VERIFIED（承袭治理规则）。
+- **postVerify 阶段**（`phase: postVerify`）：主 run VERIFIED 后由 ship/verify 路由触发，产出独立的 distribute run（复用现有 run 记录与 checkpoint 机制）；失败即该 run PARTIAL、reconcile 可续。主 run 的 VERIFIED 不回退，但 postVerify run 的失败必须以证据显著记录，绝不静默。
+- **checkpoint 级批准**：`requiresApproval: true` 的 hook 执行前需要绑定 `(planDigest, hookId)` 的独立批准记录（24h 过期、5 分钟时钟偏移容忍）。批准未获时：尚无外部 checkpoint 成功 → checkpoint 标记 `AWAITING_APPROVAL`、run 进 NEEDS_INPUT；已有外部 checkpoint 成功 → run 保持 PARTIAL。
+
 ---
 
 ## 3. 禁止转换
@@ -84,6 +102,8 @@
 | APPROVED -> VERIFIED | 不能跳过发布直接验证 |
 | APPROVED -> PUBLISHED | 不能跳过发布执行直接到已发布 |
 | PUBLISHING -> VERIFIED | 发布完成后必须先到 PUBLISHED |
+| DISTRIBUTING -> VERIFIED | 分发必须先达 DISTRIBUTED 再经 verify distribute 门禁 |
+| DISTRIBUTING -> APPROVED | 分发进行中不能回退到批准 |
 | PUBLISHING -> APPROVED | 发布进行中不能回退到批准 |
 | PUBLISHING -> PREPARED | 发布进行中不能回退到准备 |
 | PUBLISHED -> PUBLISHING | 已发布的不能重新发布同一计划 |

package/references/02-project-config.md

@@ -103,7 +103,7 @@ postPublish:                # 可选；发布后分发配置（W2 closure）
         email: <string>         # RFC 5322 valid
       payloadDir: <string>      # 相对路径
       dryRun?: boolean          # 可选；只本地执行
-      materialize?: {          # 可选；分发前钩子
+      materialize?: {          # 可选；缺省时载荷由冻结 publicFiles 经 Foundation 托管投影物化
         command: <string>       # 可执行文件
         args: [<string>]        # 参数数组，禁止 shell 字符串
         outputMarker?: <string> # 输出标记，用于验证

package/references/06-adapter-contract.md

@@ -170,12 +170,14 @@ marketplace install action 的安装侧载荷校验以 action 参数 `payloadCon
 1. 发布计划已冻结且 schema 验证通过。
 2. 发布计划摘要与批准记录中的摘要匹配。
 3. 批准记录存在且未超过 24 小时有效期。
-4. Git tree hash 与批准记录中的匹配。
+4. 工作区基线按 `planVersion` 分叉校验（与 `01-state-machine.md` §4.4 及根 `AGENTS.md` 的 Release Authorization 语义一致）：
+   - **planVersion 1（旧版）计划**：继续绑定基线——Git tree hash（及 workspace digest）必须与批准记录中的匹配；批准后基线变化即使批准失效，硬失败（`BASELINE_CHANGED`）。
+   - **planVersion 2 计划**：digest 只绑定信任边界（冻结产物身份：git commit/tree、manifestDigest、npm tarball 摘要；外部动作列表；目标版本；配置摘要）。工作区基线（tree hash、workspace digest）是记录层审计数据：不参与 digest、不使批准失效；publish/reconcile 检测到基线漂移时记录 warning 级证据事件并继续执行，产物身份与完整性由外部写之前的冻结产物复验保证。
 5. 目标版本与批准记录中的匹配。
 6. 远端无冲突状态（preflight 通过）。
 7. `context.externalWritesAuthorized === true`。
 
-任一条件不满足时，execute 返回对应错误码（`AUTH_MISSING`、`BASELINE_CHANGED`、`REMOTE_CONFLICT` 等）并拒绝执行。
+任一条件不满足时，execute 返回对应错误码（`AUTH_MISSING`、`BASELINE_CHANGED`（仅 planVersion 1）、`REMOTE_CONFLICT` 等）并拒绝执行。
 
 ### 3.2 批准记录结构
 
@@ -195,6 +197,7 @@ marketplace install action 的安装侧载荷校验以 action 参数 `payloadCon
 
 - `approvedActions` 不得包含通配符。
 - `expiresAt` 不得晚于 `approvedAt` + 24 小时。
+- `baseline` 的约束力按 `planVersion` 分叉（见 §3.1 条件 4）：planVersion 1 计划中它是批准绑定字段；planVersion 2 计划中它只是记录层审计数据，不使批准失效。
 
 ---
 
@@ -234,7 +237,7 @@ marketplace install action 的安装侧载荷校验以 action 参数 `payloadCon
 1. 重新验证发布计划 schema。
 2. 重新验证发布计划摘要。
 3. 检查批准记录是否过期。
-4. 检查 Git tree hash 是否变化。
+4. 按 planVersion 分叉复验工作区基线：planVersion 1 计划基线变化即失败（`BASELINE_CHANGED`）；planVersion 2 计划基线漂移仅记录 warning 级证据事件并继续，产物身份由外部写之前的冻结产物复验保证。
 5. 执行远程 preflight。
 6. 按批准的操作列表顺序执行每个检查点。
 7. 每个检查点：preflight -> execute -> observe -> 记录。

package/schemas/.render-manifest.json

@@ -21,17 +21,21 @@
       "digest": "b7e14522a5aba818cab191545f23d2323be0e4c80566e9d3e4da576103a00490",
       "bytes": 2390
     },
+    "postpublish-approval-record.schema.json": {
+      "digest": "e365c9e9f5aa189ca6788e68dbedfa718aa120f2c197534417c21e019b9a29a4",
+      "bytes": 1744
+    },
     "release-plan.schema.json": {
-      "digest": "5e988a5301b89b3d3260154ffae12669af0e4d6ec7f9db8c44df21037ea0eaf6",
-      "bytes": 46948
+      "digest": "48b7755dfbeee88ccf78c3200000ab2f5dd06db42bc7b423aed0f81a91cc0418",
+      "bytes": 54672
     },
     "release-project.schema.json": {
-      "digest": "546e05845cd83a3b1db0a54036f9555081420337e9df961d783d2d2630800ef7",
-      "bytes": 41898
+      "digest": "cc2061799c3a0dd6daea940148e3497b7a4ae8cafb987bf51de7c34c1fed921d",
+      "bytes": 46932
     },
     "release-run.schema.json": {
-      "digest": "6dd239c59f7045df11d13d6ba2027610d3c55c27a6af5bc87676b0eaad9600fd",
-      "bytes": 17663
+      "digest": "9755a8caa58dd02509ac8e6f869aec5e74d8ae3f7339a3f944977bfad7b729ad",
+      "bytes": 17897
     }
   }
 }

package/schemas/postpublish-approval-record.schema.json

@@ -0,0 +1,47 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://release-skill.dev/schemas/postpublish-approval-record/v1",
+  "title": "PostPublish Hook Approval Record",
+  "description": "Schema for checkpoint-level approval of a requiresApproval postPublish hook (v0.6.3 R1, design §2.7 ruling 2). Binds the approval to (planDigest, hookId); the plan-level approval-record schema is untouched. runId is audit-only and never participates in binding or validation semantics.",
+  "type": "object",
+  "required": [
+    "planDigest",
+    "hookId",
+    "actor",
+    "approvedAt",
+    "expiresAt"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "planDigest": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$",
+      "description": "SHA-256 digest of the frozen release plan whose postPublish hooks block this approval binds to"
+    },
+    "hookId": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9._-]*$",
+      "description": "id of the requiresApproval postPublish hook being approved (must be declared in the frozen plan)"
+    },
+    "actor": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Identity of the approver"
+    },
+    "approvedAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "ISO 8601 timestamp when approval was granted"
+    },
+    "expiresAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "ISO 8601 timestamp when approval expires (max 24h after approvedAt; 5-minute clock skew tolerated at validation)"
+    },
+    "runId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Audit-only identifier of the distribute run present when approval was granted; never a binding"
+    }
+  }
+}

package/schemas/release-plan.schema.json

@@ -1304,10 +1304,8 @@
     },
     "planPostPublish": {
       "type": "object",
-      "description": "冻结的发布后分发块：声明本身 + tag/tagCommit/unitId/payloadSource 绑定。整体参与 plan digest（planVersion 2 记录层剥离不包含该块），任何配置变更都会改变 planDigest。tagCommit 仅在 prepare 能冻结 create-tag 预期 commit 时存在（production 资产）；缺省时 distribute fail-closed。",
+      "description": "冻结的发布后分发块：声明本身 + tag/tagCommit/unitId/payloadSource 绑定。整体参与 plan digest（planVersion 2 记录层剥离不包含该块），任何配置变更都会改变 planDigest。tagCommit 仅在 prepare 能冻结 create-tag 预期 commit 时存在（production 资产）；缺省时 distribute fail-closed。materialize 钩子自 T6 起可选：载荷物化要么由消费者 materialize 钩子完成，要么由冻结 executionBundle.publicFiles 经 Foundation Engineering Kit 托管投影完成（两者至少其一，见 anyOf）。",
       "required": [
-        "materialize",
-        "targets",
         "commitIdentity",
         "tag",
         "unitId",
@@ -1325,6 +1323,13 @@
             "$ref": "#/definitions/planPostPublishTarget"
           }
         },
+        "hooks": {
+          "type": "array",
+          "description": "冻结的发布后钩子声明（v0.6.3 R1）；随整块参与 plan digest",
+          "items": {
+            "$ref": "#/definitions/planPostPublishHook"
+          }
+        },
         "commitIdentity": {
           "type": "object",
           "required": [
@@ -1370,6 +1375,197 @@
         "payloadSource": {
           "const": "tag-worktree",
           "description": "时序契约：载荷只能来自 tagCommit 处的 detached worktree，绝不读取工作区状态"
+        },
+        "executionBundle": {
+          "type": "object",
+          "description": "冻结的私有执行包（F-01/T1）：closure 直接采用 Foundation computeResourceClosure() 的返回（排序、去重、受收容读取与摘要均由 Foundation 完成），publicFiles 是从发布单元投影的公开映射。计划是该执行包的唯一事实源：随整个 plan digest 绑定，不维护平行 manifest，也不另造 bundle digest。字节写入计划权威 .release-skill 的 postpublish-bundles/<closure.digest>/<resource.path>；distribute/postVerify 在任何 hook/外部写之前经 Foundation 严格复验并重算闭包，任何不一致即失败。",
+          "required": [
+            "foundationMechanism",
+            "closure",
+            "publicFiles"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "foundationMechanism": {
+              "const": "foundation.harness.resource-closure"
+            },
+            "closure": {
+              "type": "object",
+              "description": "Foundation skill-family.resource-closure（schemaVersion 1）原样冻结",
+              "required": [
+                "schemaVersion",
+                "kind",
+                "digestAlgorithm",
+                "digest",
+                "resources"
+              ],
+              "additionalProperties": false,
+              "properties": {
+                "schemaVersion": {
+                  "const": 1
+                },
+                "kind": {
+                  "const": "skill-family.resource-closure"
+                },
+                "digestAlgorithm": {
+                  "const": "sha256"
+                },
+                "digest": {
+                  "type": "string",
+                  "pattern": "^[a-f0-9]{64}$"
+                },
+                "resources": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "required": [
+                      "path",
+                      "role",
+                      "exists",
+                      "sha256"
+                    ],
+                    "additionalProperties": false,
+                    "properties": {
+                      "path": {
+                        "type": "string",
+                        "minLength": 1,
+                        "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\).+$"
+                      },
+                      "role": {
+                        "const": "input",
+                        "description": "私有执行输入只有 input 资源；output 角色不属于执行包"
+                      },
+                      "exists": {
+                        "const": true
+                      },
+                      "sha256": {
+                        "type": "string",
+                        "pattern": "^[a-f0-9]{64}$"
+                      }
+                    }
+                  }
+                }
+              }
+            },
+            "publicFiles": {
+              "type": "array",
+              "description": "从已通过 schema 与运行时校验的发布单元投影进冻结计划的公开映射（T6 托管投影输入）",
+              "items": {
+                "type": "object",
+                "required": [
+                  "from",
+                  "to",
+                  "mode"
+                ],
+                "additionalProperties": false,
+                "properties": {
+                  "sourceScope": {
+                    "type": "string",
+                    "enum": [
+                      "unit",
+                      "workspace"
+                    ]
+                  },
+                  "from": {
+                    "type": "string",
+                    "minLength": 1,
+                    "pattern": "^(?!/)(?!\\.\\/)(?!.*\\\\)(?!.*:)(?!\\.\\.(/|$))(?!\\.$)(?!.*\\/\\.\\.\\/)(?!.*\\/\\.\\.$)(?!.*\\/\\.\\/)(?!.*\\/\\/)(?!.*\\0)(?!.*\\/\\.$)(?!.*\\/$).*$"
+                  },
+                  "to": {
+                    "type": "string",
+                    "minLength": 1,
+                    "pattern": "^(?!/)(?!\\.\\/)(?!.*\\\\)(?!.*:)(?!\\.\\.(/|$))(?!\\.$)(?!.*\\/\\.\\.\\/)(?!.*\\/\\.\\.$)(?!.*\\/\\.\\/)(?!.*\\/\\/)(?!.*\\0)(?!.*\\/\\.$)(?!.*\\/$).*$"
+                  },
+                  "mode": {
+                    "type": "string",
+                    "enum": [
+                      "preserve"
+                    ]
+                  }
+                }
+              }
+            }
+          }
+        }
+      },
+      "anyOf": [
+        {
+          "required": [
+            "materialize"
+          ]
+        },
+        {
+          "description": "无 materialize 钩子时，冻结的 executionBundle.publicFiles 必须非空：载荷由 Foundation 托管投影物化（F-06/T6）",
+          "required": [
+            "executionBundle"
+          ],
+          "properties": {
+            "executionBundle": {
+              "properties": {
+                "publicFiles": {
+                  "minItems": 1
+                }
+              }
+            }
+          }
+        }
+      ]
+    },
+    "planPostPublishHook": {
+      "type": "object",
+      "description": "冻结的发布后钩子声明项（v0.6.3 R1）：preset 与 command 运行时互斥；phase 缺省 distribute；blocksVerified 缺省 true 且仅 preset 可声明 false",
+      "required": [
+        "id"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9._-]*$"
+        },
+        "preset": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9._-]*$"
+        },
+        "command": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "string"
+          }
+        },
+        "phase": {
+          "type": "string",
+          "enum": [
+            "distribute",
+            "postVerify"
+          ]
+        },
+        "config": {
+          "type": "object"
+        },
+        "cwd": {
+          "type": "string",
+          "pattern": "^(?:\\.$|(?!\\/)(?!\\.\\/)(?!.*\\\\)(?!.*:)(?!\\.\\.(?:\\/|$))(?!.*\\/\\.\\.\\/)(?!.*\\/\\.\\.$)(?!.*\\/\\.\\/)(?!.*\\/\\/)(?!.*\\0)(?!.*\\/\\.$)(?!.*\\/\\/$)(?!.*\\/$).*)$"
+        },
+        "timeoutMs": {
+          "type": "integer",
+          "minimum": 1000,
+          "maximum": 7200000
+        },
+        "envAllowlist": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^(?!.*(?:TOKEN|SECRET|PASSWORD|PASSPHRASE|API_KEY|CREDENTIAL))[A-Z_][A-Z0-9_]*$"
+          },
+          "uniqueItems": true
+        },
+        "requiresApproval": {
+          "type": "boolean"
+        },
+        "blocksVerified": {
+          "type": "boolean"
         }
       }
     },
@@ -1488,7 +1684,7 @@
         },
         "remoteUrl": {
           "type": "string",
-          "pattern": "^(?:https?|file)://.+\\.git$"
+          "pattern": "^(?:https?|file)://[^@]+\\.git$"
         },
         "visibility": {
           "type": "string",

package/schemas/release-project.schema.json

@@ -886,10 +886,8 @@
     },
     "postPublish": {
       "type": "object",
-      "description": "发布后分发声明：materialize 钩子从冻结 tag 工作树物化载荷，targets 将载荷镜像或渲染市场索引推送到独立 git 远端。分发在 publish 之后由 distribute 命令执行，时序契约禁止读取工作区状态。",
+      "description": "发布后分发声明：载荷要么由 materialize 钩子从冻结 tag 工作树物化，要么（省略 materialize 时）由冻结的 publicFiles 映射经 Foundation Engineering Kit 托管投影物化（F-06/T6）；targets 将载荷镜像或渲染市场索引推送到独立 git 远端。分发在 publish 之后由 distribute 命令执行，时序契约禁止读取工作区状态。",
       "required": [
-        "materialize",
-        "targets",
         "commitIdentity"
       ],
       "additionalProperties": false,
@@ -904,6 +902,13 @@
             "$ref": "#/definitions/postPublishTarget"
           }
         },
+        "hooks": {
+          "type": "array",
+          "description": "发布后钩子声明（v0.6.3 R1）：每项为命名 preset（+config）或自定义 command 钩子（executable+参数数组，禁止 shell 字符串）。schema 层只校验形状；preset 与 command 互斥、preset 注册表归属等语义在运行时 fail-closed 校验（POSTPUBLISH_HOOK_INVALID）",
+          "items": {
+            "$ref": "#/definitions/postPublishHook"
+          }
+        },
         "commitIdentity": {
           "type": "object",
           "description": "分发仓库提交者身份（bot 身份），通过 git -c user.name/-c user.email 注入，绝不读取或修改全局 git 配置",
@@ -933,6 +938,82 @@
         "assertMainVersionAhead": {
           "type": "boolean",
           "description": "分发前校验主干版本源仍领先于目标版本，防止在已推进的主干上分发旧版本"
+        },
+        "executionFiles": {
+          "type": "array",
+          "description": "私有执行输入闭世界清单（F-01）：仅列出发布后命令需要、但冻结 tag 中不存在的父工作区领域文件；辅助文件（helper）必须显式列入，执行时不做任何临时发现。每个路径经 Foundation 路径分类与受收容读取；列表排序去重后随计划冻结为 executionBundle.closure，字节发布到计划权威 .release-skill 下的摘要寻址目录。tag 中已有的文件继续由 tagCommit 绑定，不得在此声明（执行包不得覆盖 tag 文件）。路径语法只由 schema 做第一层形状检查，最终以运行时 Foundation 分类为准。",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\).+$"
+          },
+          "uniqueItems": true
+        }
+      }
+    },
+    "postPublishHook": {
+      "type": "object",
+      "description": "发布后钩子声明项：preset（命名预设 + config）与 command（自定义命令）在运行时互斥校验；phase 缺省为 distribute（VERIFIED 之前执行），postVerify 在 verify 通过后作为独立 run 执行（R3）；blocksVerified 缺省 true，仅 preset 可声明 false",
+      "required": [
+        "id"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9._-]*$"
+        },
+        "preset": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9._-]*$",
+          "description": "预设注册表中的预设名（R2 起）；R1 无注册表，任何 preset 引用在运行时 fail-closed"
+        },
+        "command": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "string"
+          },
+          "description": "executable+参数数组（禁止 shell 字符串）；在冻结 tag 工作树中执行"
+        },
+        "phase": {
+          "type": "string",
+          "enum": [
+            "distribute",
+            "postVerify"
+          ],
+          "description": "执行阶段；缺省 distribute"
+        },
+        "config": {
+          "type": "object",
+          "description": "preset 钩子的配置对象；语义由预设注册表校验（R2 起）"
+        },
+        "cwd": {
+          "type": "string",
+          "pattern": "^(?:\\.$|(?!\\/)(?!\\.\\/)(?!.*\\\\)(?!.*:)(?!\\.\\.(?:\\/|$))(?!.*\\/\\.\\.\\/)(?!.*\\/\\.\\.$)(?!.*\\/\\.\\/)(?!.*\\/\\/)(?!.*\\0)(?!.*\\/\\.$)(?!.*\\/\\/$)(?!.*\\/$).*)$",
+          "description": "command 钩子执行目录（相对冻结 tag 工作树）；preset 钩子禁止声明（运行时 fail-closed）"
+        },
+        "timeoutMs": {
+          "type": "integer",
+          "minimum": 1000,
+          "maximum": 7200000
+        },
+        "envAllowlist": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^(?!.*(?:TOKEN|SECRET|PASSWORD|PASSPHRASE|API_KEY|CREDENTIAL))[A-Z_][A-Z0-9_]*$"
+          },
+          "uniqueItems": true,
+          "description": "允许透传给钩子进程的环境变量白名单；TOKEN/SECRET 等敏感子串在 schema 层即被拒绝"
+        },
+        "requiresApproval": {
+          "type": "boolean",
+          "description": "执行前需要 checkpoint 级批准（绑定 planDigest + hookId）；public-write preset 缺省 true"
+        },
+        "blocksVerified": {
+          "type": "boolean",
+          "description": "失败时是否阻断 VERIFIED；缺省 true；仅 preset 可声明 false（运行时 fail-closed 校验）"
         }
       }
     },
@@ -1057,8 +1138,8 @@
         },
         "remoteUrl": {
           "type": "string",
-          "pattern": "^(?:https?|file)://.+\\.git$",
-          "description": "仅允许 http(s) 或 file（测试传输）且以 .git 结尾的远端 URL"
+          "pattern": "^(?:https?|file)://[^@]+\\.git$",
+          "description": "仅允许 http(s) 或 file（测试传输）且以 .git 结尾的远端 URL；禁止任何 userinfo（user:password@）形态——凭证只属于宿主 git credential helper。schema 只是第一道门，运行时 Git URL 策略（new URL 解析）是最终权威"
         },
         "visibility": {
           "type": "string",