release-skill 0.7.1 → 0.7.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -78,9 +78,9 @@
     "ajv-formats": "3.0.1",
     "libnpmpublish": "11.1.0",
     "npm-registry-fetch": "18.0.2",
-    "skill-family-contracts": "0.8.0",
-    "skill-family-engineering-kit": "0.8.0",
-    "skill-family-harness-node": "0.8.0",
+    "skill-family-contracts": "0.8.1",
+    "skill-family-engineering-kit": "0.8.1",
+    "skill-family-harness-node": "0.8.1",
     "yaml": "2.9.0"
   },
   "devDependencies": {

package/platform-manifest.json

@@ -2,11 +2,11 @@
   "schemaVersion": "1.0.0",
   "platformId": "release-skill",
   "platformName": "release-skill Plugin Platform",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "logicalRoot": "skills-src/",
   "logicalRootDigest": "3767fc36f42ca561f5e839cea7b7e5bc16d08c47867b5bd6086f25efd0cb0f06",
   "projectionDigest": "419f7f9601015459956e10aae74f42240ab2ac248238ff7494f3e761643d1749",
-  "projectionId": "release-skill:platform:0.7.1",
+  "projectionId": "release-skill:platform:0.7.3",
   "manifestRequired": true,
   "projectionSources": {
     "skills-src-root": {

package/scripts/build-bundle.mjs

@@ -150,17 +150,6 @@ function verifyRuntimeReadsResolve(content, outDir) {
   return [...missing].sort();
 }
 
-// Inlined Foundation modules must not perform bundle-relative runtime reads
-// of files that adapter closures do not ship. skill-family-harness-node's
-// report.mjs reads its own package.json at module init
-// (readFileSync(new URL("../package.json", import.meta.url))); once inlined
-// into the bundle that read resolves next to the bundle and breaks in
-// adapter closures (which ship no package.json by design — the banner
-// injects __bundlePkg instead). Neutralize the read at build time with the
-// same injected package identity, fail-closed if Foundation changes shape.
-const REPORT_PACKAGE_META_READ_RE =
-  /JSON\.parse\(readFileSync\(new URL\("\.\.\/package\.json", import\.meta\.url\), "utf8"\)\)/;
-
 async function buildBundle() {
   // Dynamic import so the script works even if esbuild is not yet installed.
   let esbuild;
@@ -175,25 +164,6 @@ async function buildBundle() {
   const sourceDigest = await computeBundleSourceDigest(PKG_ROOT);
   const banner = buildBanner({ name: pkgJson.name, version: pkgJson.version }, sourceDigest);
 
-  const identity = Object.freeze({ name: pkgJson.name, version: pkgJson.version });
-
-  const identityPlugins = [{
-    name: 'inline-foundation-package-identity',
-    setup(build) {
-      build.onLoad({ filter: /skill-family-harness-node[\\/]src[\\/]report\.mjs$/ }, async (args) => {
-        const source = await readFile(args.path, 'utf-8');
-        const injected = source.replace(REPORT_PACKAGE_META_READ_RE, () =>
-          `Object.freeze(${JSON.stringify(identity)})`);
-        if (injected === source) {
-          throw new Error(
-            'build-bundle: could not neutralize Foundation report.mjs package.json read',
-          );
-        }
-        return { contents: injected, loader: 'js' };
-      });
-    },
-  }];
-
   const result = await esbuild.build({
     entryPoints: [ENTRY],
     absWorkingDir: PKG_ROOT,
@@ -203,7 +173,6 @@ async function buildBundle() {
     target: 'node22',
     outfile: OUTFILE,
     banner: { js: banner },
-    plugins: identityPlugins,
     // External: Node.js builtins, native addon loader, and the native addon itself.
     external: [
       'node:*',

package/src/artifacts/safe-fs-backend-internal.mjs

@@ -180,8 +180,9 @@ function validateManifestEntry(entry, key) {
 
 function requireAddon(addonPath) {
   try {
-    // Use PKG_ROOT-relative resolution so bundled mode can find the addon.
-    const require = createRequire(resolve(PKG_ROOT, 'package.json'));
+    // Anchor require() to a file present in both the source package and every
+    // generated adapter. Adapter roots intentionally do not ship package.json.
+    const require = createRequire(resolve(PKG_ROOT, 'bin/release-skill.mjs'));
     return require(addonPath);
   } catch (err) {
     throw new ReleaseError(SAFE_WRITE_UNAVAILABLE, sanitizeError(err));