release-skill 0.7.3 → 0.7.4

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "release-skill",
       "source": "./",
-      "version": "0.7.3",
+      "version": "0.7.4",
       "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
       "author": {
         "name": "广州市风荷科技有限公司"

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.7.3",
+  "version": "0.7.4",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codebuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.7.3",
+  "version": "0.7.4",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.7.3",
+  "version": "0.7.4",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.7.3.",
+      "Prepare a release plan for version 0.7.4.",
       "Help me understand the release workflow."
     ]
   }

package/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.7.3",
+  "version": "0.7.4",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.7.4 locale=en baseline=sha256:c1d8df84f44367edc819829462687c58f30eb7ea23b8761c317254bd386ece85 -->
+## [0.7.4] - 2026-08-22
+
+v0.7.4 recognizes declared plugin hosts in both generated adapter trees and registered platform projection trees, so valid releases such as Skill Family Audit are no longer blocked by a false missing-host result.
+
+### Fixed
+
+- **Registry-driven projection surfaces**: each platform descriptor now declares its exact `platforms/*` skill projection surface. The resource-closure gate derives the host from the existing `buildAdapter.name` authority. Claude, Codex, Kimi, and WorkBuddy projections satisfy declared-host coverage without copying adapter trees; unknown platform projections still fail closed. The changed closure algorithm is identified as `skill-resource-closure-v3`, so frozen plans from earlier checker versions cannot cross the publish boundary.
+<!-- release-skill:changelog:end version=0.7.4 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.7.3 locale=en baseline=sha256:18caf087c567201044292c958694b39ae9989d4c1abb1886aaa5a1ce8ca57bca -->
 ## [0.7.3] - 2026-08-22
 

package/INSTALL.md

@@ -2,7 +2,7 @@
 
 [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.7.3 -->
+<!-- release-skill:release-version: 0.7.4 -->
 ## Prerequisites
 
 - Node.js 22.0.0 or later
@@ -114,7 +114,7 @@ tag pinned to the exact version (never the bare repository URL, which installs
 the latest release or default branch), confirm the trust prompt, then reload:
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.7.3
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.7.4
    /plugins reload
    ```
 

package/INSTALL.zh-CN.md

@@ -2,7 +2,7 @@
 
 [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.7.3 -->
+<!-- release-skill:release-version: 0.7.4 -->
 ## 前置条件
 
 - Node.js 22.0.0 或更高版本
@@ -104,7 +104,7 @@ Kimi Code 有交互式插件市场，但**没有可脚本化的非交互安装
 （切勿使用裸仓库地址，它会安装最新 release 或默认分支），确认信任提示后重新加载：
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.7.3
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.7.4
    /plugins reload
    ```
 

package/README.md

@@ -2,7 +2,7 @@
 
 [简体中文](README.zh-CN.md) · Installation: [English](INSTALL.md) / [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.7.3 -->
+<!-- release-skill:release-version: 0.7.4 -->
 Release preparation for Claude Code, CodeBuddy, WorkBuddy, Codex, and Kimi Code, with human-edited files kept intact.
 
 release-skill helps a maintainer answer three questions: what will be released,
@@ -14,17 +14,17 @@ Setup surfaces only the deterministic `compactSummary` review view; the full
 report stays in a temporary session directory.
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.7.3** (2026-08-22)
+**0.7.4** (2026-08-22)
 
-v0.7.3 adopts Foundation 0.8.1 so generated host adapters can initialize Foundation reports and managed projection without rewriting Foundation package identity.
+v0.7.4 recognizes declared plugin hosts in both generated adapter trees and registered platform projection trees, so valid releases such as Skill Family Audit are no longer blocked by a false missing-host result.
 
 **Fixed**
 
-- **Foundation-owned bundle identity**: release-skill now consumes the exact 0.8.1 Contracts, Harness, and Engineering Kit packages and removes its report.mjs identity rewrite. Claude, Codex, Kimi, and WorkBuddy adapters now reach release-domain GATE_FAILED diagnostics for missing plans, while a frozen Codex distribution completes Foundation managed projection and reaches DISTRIBUTED.
+- **Registry-driven projection surfaces**: each platform descriptor now declares its exact `platforms/*` skill projection surface. The resource-closure gate derives the host from the existing `buildAdapter.name` authority. Claude, Codex, Kimi, and WorkBuddy projections satisfy declared-host coverage without copying adapter trees; unknown platform projections still fail closed. The changed closure algorithm is identified as `skill-resource-closure-v3`, so frozen plans from earlier checker versions cannot cross the publish boundary.
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **Current boundary:** v0.7.3 is the current source candidate; v0.7.2 remains
+> **Current boundary:** v0.7.4 is the current source candidate; v0.7.3 remains
 > the latest published release. v0.4.1 was an earlier published milestone;
 > v0.2.2 previously held published status before the platform verification
 > convergence fix was added.
@@ -44,8 +44,8 @@ v0.7.3 adopts Foundation 0.8.1 so generated host adapters can initialize Foundat
 > publish global preflight.
 
 <!-- release-skill:capability:safe-first-command -->
-> **Production path verified since the v0.1.1 milestone; v0.7.3 is the current
-> source candidate and v0.7.2 is the latest published release.** The npm-installed CLI is the supported user entry. Source checkout
+> **Production path verified since the v0.1.1 milestone; v0.7.4 is the current
+> source candidate and v0.7.3 is the latest published release.** The npm-installed CLI is the supported user entry. Source checkout
 > is the development/contributor fallback.
 >
 > **Start here:**

package/README.zh-CN.md

@@ -2,23 +2,23 @@
 
 [English](README.md) · 安装指南：[中文](INSTALL.zh-CN.md) / [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.7.3 -->
+<!-- release-skill:release-version: 0.7.4 -->
 面向 Claude Code、CodeBuddy、WorkBuddy、Codex 和 Kimi Code 的发布准备工具，完整保留人工维护的文件内容。
 
 release-skill 帮助维护者回答三个问题：准备发布什么、还有哪些检查未通过、最终发布的内容是什么。它不重新生成、也不回写项目源文件。`prepare` 把每个配置的公开文件复制到隔离快照并验证字节——先冻结并供人工审阅，再从同一份冻结产物发布。`setup` 只显示确定性的 `compactSummary` 审阅视图，完整报告保留在临时会话目录中。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.7.3** (2026-08-22)
+**0.7.4** (2026-08-22)
 
-v0.7.3 升级到 Foundation 0.8.1。生成的宿主适配器现在可以初始化 Foundation 报告并执行托管投影，无需改写 Foundation 包身份。
+v0.7.4 同时识别生成的 adapter 目录和平台注册的投影目录，不再把 Skill Family Audit 这类合法发布误判为缺少宿主面。
 
 **修复**
 
-- **由 Foundation 自主管理 bundle 身份**：release-skill 现在精确依赖 0.8.1 版 Contracts、Harness 和 Engineering Kit，并删除对 report.mjs 身份的改写。Claude、Codex、Kimi 和 WorkBuddy 适配器遇到缺失计划时会返回 release-skill 的 GATE_FAILED 诊断；Codex 适配器也能从冻结输入完成 Foundation 托管投影并达到 DISTRIBUTED。
+- **由平台注册表统一识别投影面**：每个平台描述符现在声明精确的 `platforms/*` 技能投影目录。资源闭包门禁继续从既有 `buildAdapter.name` 权威字段派生宿主名。Claude、Codex、Kimi 和 WorkBuddy 投影无需复制 adapter 目录即可满足宿主覆盖；未知平台投影仍会失败关闭。变更后的闭包算法标识为 `skill-resource-closure-v3`，旧检查器冻结的计划不能越过发布边界。
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **当前边界：** v0.7.3 是当前源码候选，v0.7.2 是最新已发布版本。v0.4.1 是更早的已发布里程碑（v0.2.2 曾处于已发布状态，后因平台验证收敛修复而更新）。
+> **当前边界：** v0.7.4 是当前源码候选，v0.7.3 是最新已发布版本。v0.4.1 是更早的已发布里程碑（v0.2.2 曾处于已发布状态，后因平台验证收敛修复而更新）。
 > v0.1.1 已完成 GitHub 与 npm 的
 > 真实生产发布，是首次生产验证的历史里程碑，并从冻结 Git ref 完成精确 npm
 > 安装及 Claude/Codex 消费者安装验证；"当前发布版本"与"首次生产验证里程碑"
@@ -31,7 +31,7 @@ v0.7.3 升级到 Foundation 0.8.1。生成的宿主适配器现在可以初始
 > 远端唯一性检查在 `publish` 全局预检执行。
 
 <!-- release-skill:capability:safe-first-command -->
-> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.7.3 是当前源码候选，v0.7.2 是最新已发布版本。**
+> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.7.4 是当前源码候选，v0.7.3 是最新已发布版本。**
 > npm 安装的 CLI 是受支持的用户入口；源码 checkout 保留为开发/贡献者路径。
 >
 > **第一条命令：**

package/adapters/claude/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "release-skill",
       "source": "./",
-      "version": "0.7.3",
+      "version": "0.7.4",
       "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
       "author": {
         "name": "广州市风荷科技有限公司"

package/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.7.3",
+  "version": "0.7.4",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/claude/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.7.3"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.7.4"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "0e814c8b806446476595498baed8b129ca3cb024e3b922049db5774f022c90be";
+const __bundleSourceDigest = "94f8a4247206a95c5365d48448b1cce5e47d4fc42a711ac72e761565bc2dcb69";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -36390,8 +36390,13 @@ function getPlatform(id) {
   if (!platform) throw new Error(`unknown platform: ${id}`);
   return platform;
 }
+function resolveSkillProjectionSurfaceHost(surfaceId, registry = PLATFORMS) {
+  const platform = registry.find((item) => item.skillProjectionSurface === surfaceId);
+  return platform?.buildAdapter?.name ?? null;
+}
 function assertRegistry(registry = PLATFORMS) {
   const seen = /* @__PURE__ */ new Set();
+  const seenSkillProjectionSurfaces = /* @__PURE__ */ new Set();
   for (const platform of registry) {
     const label = platform?.id ?? "<missing id>";
     if (typeof platform?.id !== "string" || platform.id.length === 0) {
@@ -36440,6 +36445,16 @@ function assertRegistry(registry = PLATFORMS) {
     if (typeof platform.buildAdapter.name !== "string" || platform.buildAdapter.name.length === 0) {
       throw new Error(`platform registry: ${label} buildAdapter needs a non-empty name (its adapter directory name)`);
     }
+    if (typeof platform.skillProjectionSurface !== "string" || !SKILL_PROJECTION_SURFACE_PATTERN.test(platform.skillProjectionSurface)) {
+      throw new Error(`platform registry: ${label} skillProjectionSurface must match platforms/<slug>`);
+    }
+    if (seenSkillProjectionSurfaces.has(platform.skillProjectionSurface)) {
+      throw new Error(`platform registry: duplicate skillProjectionSurface "${platform.skillProjectionSurface}"; aliases must be unique`);
+    }
+    seenSkillProjectionSurfaces.add(platform.skillProjectionSurface);
+    if (resolveSkillProjectionSurfaceHost(platform.skillProjectionSurface, registry) !== platform.buildAdapter.name) {
+      throw new Error(`platform registry: ${label} skillProjectionSurface must map to buildAdapter.name`);
+    }
     if (!VALID_LIST_OUTPUTS.has(platform.jsonProtocol?.listOutput)) {
       throw new Error(`platform registry: ${label} has illegal jsonProtocol.listOutput "${platform.jsonProtocol?.listOutput}"`);
     }
@@ -36567,7 +36582,7 @@ function resolveCapabilityConflicts(platform) {
   }
   return { hasConflict: false, conflicts: [] };
 }
-var CLAUDE, CODEX, KIMI, CODEBUDDY, PLATFORMS, VALID_DISTRIBUTION_TYPES, VALID_ACTION_TYPES, VALID_SOURCE_FORMS, VALID_MARKETPLACE_REF_FORMS, VALID_LIST_OUTPUTS, VALID_CLI_OUTPUTS, VALID_ENTRY_VERSION_BINDING, VALID_INSTALL_METHODS, VALID_REF_STRENGTHS, VALID_OUTPUT_PROTOCOLS, VALID_IDENTITY_EVIDENCE, VALID_DEGRADATION_POLICIES;
+var CLAUDE, CODEX, KIMI, CODEBUDDY, PLATFORMS, VALID_DISTRIBUTION_TYPES, VALID_ACTION_TYPES, VALID_SOURCE_FORMS, VALID_MARKETPLACE_REF_FORMS, VALID_LIST_OUTPUTS, VALID_CLI_OUTPUTS, VALID_ENTRY_VERSION_BINDING, VALID_INSTALL_METHODS, VALID_REF_STRENGTHS, VALID_OUTPUT_PROTOCOLS, VALID_IDENTITY_EVIDENCE, VALID_DEGRADATION_POLICIES, SKILL_PROJECTION_SURFACE_PATTERN;
 var init_registry2 = __esm({
   async "src/platforms/registry.mjs"() {
     await init_kimi();
@@ -36582,6 +36597,7 @@ var init_registry2 = __esm({
     __name(codexCrossValidateListEntry, "codexCrossValidateListEntry");
     CLAUDE = Object.freeze({
       id: "claude",
+      skillProjectionSurface: "platforms/claude-code",
       distributionType: "claude-plugin",
       actionType: "claude-marketplace-install",
       // Runtime adapter implementing this platform's marketplace-install action.
@@ -36646,6 +36662,7 @@ var init_registry2 = __esm({
     });
     CODEX = Object.freeze({
       id: "codex",
+      skillProjectionSurface: "platforms/codex",
       distributionType: "codex-plugin",
       actionType: "codex-marketplace-install",
       adapter: "plugin-marketplace",
@@ -36706,6 +36723,7 @@ var init_registry2 = __esm({
     });
     KIMI = Object.freeze({
       id: "kimi",
+      skillProjectionSurface: "platforms/kimi-code",
       distributionType: "kimi-plugin",
       actionType: "kimi-marketplace-install",
       adapter: "plugin-marketplace",
@@ -36765,6 +36783,7 @@ var init_registry2 = __esm({
     });
     CODEBUDDY = Object.freeze({
       id: "codebuddy",
+      skillProjectionSurface: "platforms/workbuddy",
       distributionType: "codebuddy-plugin",
       actionType: "codebuddy-marketplace-install",
       adapter: "plugin-marketplace",
@@ -36847,7 +36866,9 @@ var init_registry2 = __esm({
     VALID_OUTPUT_PROTOCOLS = /* @__PURE__ */ new Set(["structured", "text", "none"]);
     VALID_IDENTITY_EVIDENCE = /* @__PURE__ */ new Set(["list-record", "install-output", "filesystem-payload", "human-attestation"]);
     VALID_DEGRADATION_POLICIES = /* @__PURE__ */ new Set(["block", "human-attestation", "human-attestation-with-fallback"]);
+    SKILL_PROJECTION_SURFACE_PATTERN = /^platforms\/[a-z0-9]+(?:-[a-z0-9]+)*$/u;
     __name(getPlatform, "getPlatform");
+    __name(resolveSkillProjectionSurfaceHost, "resolveSkillProjectionSurfaceHost");
     __name(assertRegistry, "assertRegistry");
     assertRegistry();
     __name(resolvePlatformRoute, "resolvePlatformRoute");
@@ -44399,8 +44420,13 @@ async function collectRegularFiles(dir, results) {
   }
 }
 function inferSurfaceHost(surfaceId, defaultHost) {
-  const match = ADAPTER_SURFACE_PATTERN.exec(surfaceId);
-  return match?.[1] ?? defaultHost;
+  const adapterMatch = ADAPTER_SURFACE_PATTERN.exec(surfaceId);
+  if (adapterMatch) return adapterMatch[1];
+  const platformMatch = PLATFORM_SURFACE_PATTERN.exec(surfaceId);
+  if (platformMatch) {
+    return resolveSkillProjectionSurfaceHost(surfaceId) ?? `unknown-platform:${platformMatch[1]}`;
+  }
+  return defaultHost;
 }
 function receiptProjection(result) {
   return {
@@ -44509,6 +44535,7 @@ async function checkSkillResourceClosure({
     const pluginRoot = resolvePluginRoot(skill, scanRoot2);
     const surfaceId = relativeStable(scanRoot2, pluginRoot);
     const surfaceHost = inferSurfaceHost(surfaceId, host);
+    const firstSkillOnSurface = !surfaceMap.has(surfaceId);
     const surface = surfaceMap.get(surfaceId) ?? {
       id: surfaceId,
       host: surfaceHost,
@@ -44518,6 +44545,19 @@ async function checkSkillResourceClosure({
     };
     surface.skillCount += 1;
     surfaceMap.set(surfaceId, surface);
+    if (firstSkillOnSurface && PLATFORM_SURFACE_PATTERN.test(surfaceId) && resolveSkillProjectionSurfaceHost(surfaceId) === null) {
+      findings.push({
+        host: surfaceHost,
+        surface: surfaceId,
+        skill: null,
+        line: null,
+        reference: surfaceId,
+        classification: CLASSIFICATION.UNKNOWN_PLATFORM_SURFACE,
+        resolutionRoot: surfaceId,
+        resolvedTarget: surfaceId,
+        code: FINDING_CODE.UNKNOWN_PLATFORM_SURFACE
+      });
+    }
     if (!skillsBySurface.has(surfaceId)) skillsBySurface.set(surfaceId, []);
     skillsBySurface.get(surfaceId).push(skill);
     const content = await readFile12(resolve17(scanRoot2, skill), "utf8");
@@ -44711,13 +44751,14 @@ function evaluateDeclaredHostSurfaceCoverage(expectedHosts, surfaces) {
   }
   return { passed: missing.length === 0, missing };
 }
-var CHECKER_VERSION, BARE_PREFIXES, EXPLICIT_PREFIXES, SOURCE_TREE_PATTERN, MACHINE_ABSOLUTE_PATTERN, HOME_DIRECTORY_PATTERN, ADAPTER_SURFACE_PATTERN, CLOSURE_RESOURCE_DIRS, GLOB_PATTERN, SOURCE_ONLY_MARKER, TRANSPORT_EXCLUSIONS, CLASSIFICATION, FINDING_CODE;
+var CHECKER_VERSION, BARE_PREFIXES, EXPLICIT_PREFIXES, SOURCE_TREE_PATTERN, MACHINE_ABSOLUTE_PATTERN, HOME_DIRECTORY_PATTERN, ADAPTER_SURFACE_PATTERN, PLATFORM_SURFACE_PATTERN, CLOSURE_RESOURCE_DIRS, GLOB_PATTERN, SOURCE_ONLY_MARKER, TRANSPORT_EXCLUSIONS, CLASSIFICATION, FINDING_CODE;
 var init_skill_resource_closure = __esm({
-  "src/core/skill-resource-closure.mjs"() {
+  async "src/core/skill-resource-closure.mjs"() {
     init_src();
     init_errors3();
     init_frozen();
-    CHECKER_VERSION = "skill-resource-closure-v2";
+    await init_registry2();
+    CHECKER_VERSION = "skill-resource-closure-v3";
     BARE_PREFIXES = ["references/", "assets/", "schemas/", "examples/", "scripts/"];
     EXPLICIT_PREFIXES = [
       "<plugin-root>/",
@@ -44731,6 +44772,7 @@ var init_skill_resource_closure = __esm({
     MACHINE_ABSOLUTE_PATTERN = /^(?:\/(?:Users|home|root|tmp|var|etc|opt)(?:\/|$)|[A-Za-z]:[\\/])/u;
     HOME_DIRECTORY_PATTERN = /^(?:~|\$HOME|\$\{HOME\})\/.+/u;
     ADAPTER_SURFACE_PATTERN = /^adapters\/([^/]+)$/u;
+    PLATFORM_SURFACE_PATTERN = /^platforms\/(.+)$/u;
     CLOSURE_RESOURCE_DIRS = Object.freeze(["references", "assets", "schemas", "examples", "scripts"]);
     GLOB_PATTERN = /[*?\[]/u;
     SOURCE_ONLY_MARKER = /(?:\bsource-only\b|仅源码包)/iu;
@@ -44748,7 +44790,8 @@ var init_skill_resource_closure = __esm({
       HOME_DIRECTORY: "home_directory",
       OUT_OF_BOUNDS: "out_of_bounds",
       RESOURCE_DRIFT: "resource_drift",
-      STALE_RESOURCE: "stale_resource"
+      STALE_RESOURCE: "stale_resource",
+      UNKNOWN_PLATFORM_SURFACE: "unknown_platform_surface"
     });
     FINDING_CODE = Object.freeze({
       SNAPSHOT_UNSAFE: "SNAPSHOT_UNSAFE",
@@ -44760,7 +44803,8 @@ var init_skill_resource_closure = __esm({
       OUT_OF_BOUNDS: "OUT_OF_BOUNDS",
       SYMLINK_NOT_ALLOWED: "SYMLINK_NOT_ALLOWED",
       RESOURCE_DRIFT: "RESOURCE_DRIFT",
-      STALE_RESOURCE: "STALE_RESOURCE"
+      STALE_RESOURCE: "STALE_RESOURCE",
+      UNKNOWN_PLATFORM_SURFACE: "UNKNOWN_PLATFORM_SURFACE"
     });
     __name(toPosix, "toPosix");
     __name(relativeStable, "relativeStable");
@@ -100763,7 +100807,7 @@ var init_prepare = __esm({
     init_evidence();
     await init_plan();
     init_digest();
-    init_skill_resource_closure();
+    await init_skill_resource_closure();
     init_public_map();
     init_public_path();
     init_scan();
@@ -102785,7 +102829,7 @@ var init_publish = __esm({
     init_baseline2();
     init_previous_public_baseline();
     init_evidence();
-    init_skill_resource_closure();
+    await init_skill_resource_closure();
     init_checkpoints();
     await init_run();
     init_errors3();
@@ -105332,7 +105376,7 @@ var init_verify = __esm({
     init_public_path();
     init_npm();
     init_verification_gates();
-    init_skill_resource_closure();
+    await init_skill_resource_closure();
     init_checkpoints();
     init_installation_contract();
     init_npm_entry_closure();

package/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.7.3",
+  "version": "0.7.4",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.7.3.",
+      "Prepare a release plan for version 0.7.4.",
       "Help me understand the release workflow."
     ]
   }

package/adapters/codex/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.7.3"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.7.4"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "0e814c8b806446476595498baed8b129ca3cb024e3b922049db5774f022c90be";
+const __bundleSourceDigest = "94f8a4247206a95c5365d48448b1cce5e47d4fc42a711ac72e761565bc2dcb69";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -36390,8 +36390,13 @@ function getPlatform(id) {
   if (!platform) throw new Error(`unknown platform: ${id}`);
   return platform;
 }
+function resolveSkillProjectionSurfaceHost(surfaceId, registry = PLATFORMS) {
+  const platform = registry.find((item) => item.skillProjectionSurface === surfaceId);
+  return platform?.buildAdapter?.name ?? null;
+}
 function assertRegistry(registry = PLATFORMS) {
   const seen = /* @__PURE__ */ new Set();
+  const seenSkillProjectionSurfaces = /* @__PURE__ */ new Set();
   for (const platform of registry) {
     const label = platform?.id ?? "<missing id>";
     if (typeof platform?.id !== "string" || platform.id.length === 0) {
@@ -36440,6 +36445,16 @@ function assertRegistry(registry = PLATFORMS) {
     if (typeof platform.buildAdapter.name !== "string" || platform.buildAdapter.name.length === 0) {
       throw new Error(`platform registry: ${label} buildAdapter needs a non-empty name (its adapter directory name)`);
     }
+    if (typeof platform.skillProjectionSurface !== "string" || !SKILL_PROJECTION_SURFACE_PATTERN.test(platform.skillProjectionSurface)) {
+      throw new Error(`platform registry: ${label} skillProjectionSurface must match platforms/<slug>`);
+    }
+    if (seenSkillProjectionSurfaces.has(platform.skillProjectionSurface)) {
+      throw new Error(`platform registry: duplicate skillProjectionSurface "${platform.skillProjectionSurface}"; aliases must be unique`);
+    }
+    seenSkillProjectionSurfaces.add(platform.skillProjectionSurface);
+    if (resolveSkillProjectionSurfaceHost(platform.skillProjectionSurface, registry) !== platform.buildAdapter.name) {
+      throw new Error(`platform registry: ${label} skillProjectionSurface must map to buildAdapter.name`);
+    }
     if (!VALID_LIST_OUTPUTS.has(platform.jsonProtocol?.listOutput)) {
       throw new Error(`platform registry: ${label} has illegal jsonProtocol.listOutput "${platform.jsonProtocol?.listOutput}"`);
     }
@@ -36567,7 +36582,7 @@ function resolveCapabilityConflicts(platform) {
   }
   return { hasConflict: false, conflicts: [] };
 }
-var CLAUDE, CODEX, KIMI, CODEBUDDY, PLATFORMS, VALID_DISTRIBUTION_TYPES, VALID_ACTION_TYPES, VALID_SOURCE_FORMS, VALID_MARKETPLACE_REF_FORMS, VALID_LIST_OUTPUTS, VALID_CLI_OUTPUTS, VALID_ENTRY_VERSION_BINDING, VALID_INSTALL_METHODS, VALID_REF_STRENGTHS, VALID_OUTPUT_PROTOCOLS, VALID_IDENTITY_EVIDENCE, VALID_DEGRADATION_POLICIES;
+var CLAUDE, CODEX, KIMI, CODEBUDDY, PLATFORMS, VALID_DISTRIBUTION_TYPES, VALID_ACTION_TYPES, VALID_SOURCE_FORMS, VALID_MARKETPLACE_REF_FORMS, VALID_LIST_OUTPUTS, VALID_CLI_OUTPUTS, VALID_ENTRY_VERSION_BINDING, VALID_INSTALL_METHODS, VALID_REF_STRENGTHS, VALID_OUTPUT_PROTOCOLS, VALID_IDENTITY_EVIDENCE, VALID_DEGRADATION_POLICIES, SKILL_PROJECTION_SURFACE_PATTERN;
 var init_registry2 = __esm({
   async "src/platforms/registry.mjs"() {
     await init_kimi();
@@ -36582,6 +36597,7 @@ var init_registry2 = __esm({
     __name(codexCrossValidateListEntry, "codexCrossValidateListEntry");
     CLAUDE = Object.freeze({
       id: "claude",
+      skillProjectionSurface: "platforms/claude-code",
       distributionType: "claude-plugin",
       actionType: "claude-marketplace-install",
       // Runtime adapter implementing this platform's marketplace-install action.
@@ -36646,6 +36662,7 @@ var init_registry2 = __esm({
     });
     CODEX = Object.freeze({
       id: "codex",
+      skillProjectionSurface: "platforms/codex",
       distributionType: "codex-plugin",
       actionType: "codex-marketplace-install",
       adapter: "plugin-marketplace",
@@ -36706,6 +36723,7 @@ var init_registry2 = __esm({
     });
     KIMI = Object.freeze({
       id: "kimi",
+      skillProjectionSurface: "platforms/kimi-code",
       distributionType: "kimi-plugin",
       actionType: "kimi-marketplace-install",
       adapter: "plugin-marketplace",
@@ -36765,6 +36783,7 @@ var init_registry2 = __esm({
     });
     CODEBUDDY = Object.freeze({
       id: "codebuddy",
+      skillProjectionSurface: "platforms/workbuddy",
       distributionType: "codebuddy-plugin",
       actionType: "codebuddy-marketplace-install",
       adapter: "plugin-marketplace",
@@ -36847,7 +36866,9 @@ var init_registry2 = __esm({
     VALID_OUTPUT_PROTOCOLS = /* @__PURE__ */ new Set(["structured", "text", "none"]);
     VALID_IDENTITY_EVIDENCE = /* @__PURE__ */ new Set(["list-record", "install-output", "filesystem-payload", "human-attestation"]);
     VALID_DEGRADATION_POLICIES = /* @__PURE__ */ new Set(["block", "human-attestation", "human-attestation-with-fallback"]);
+    SKILL_PROJECTION_SURFACE_PATTERN = /^platforms\/[a-z0-9]+(?:-[a-z0-9]+)*$/u;
     __name(getPlatform, "getPlatform");
+    __name(resolveSkillProjectionSurfaceHost, "resolveSkillProjectionSurfaceHost");
     __name(assertRegistry, "assertRegistry");
     assertRegistry();
     __name(resolvePlatformRoute, "resolvePlatformRoute");
@@ -44399,8 +44420,13 @@ async function collectRegularFiles(dir, results) {
   }
 }
 function inferSurfaceHost(surfaceId, defaultHost) {
-  const match = ADAPTER_SURFACE_PATTERN.exec(surfaceId);
-  return match?.[1] ?? defaultHost;
+  const adapterMatch = ADAPTER_SURFACE_PATTERN.exec(surfaceId);
+  if (adapterMatch) return adapterMatch[1];
+  const platformMatch = PLATFORM_SURFACE_PATTERN.exec(surfaceId);
+  if (platformMatch) {
+    return resolveSkillProjectionSurfaceHost(surfaceId) ?? `unknown-platform:${platformMatch[1]}`;
+  }
+  return defaultHost;
 }
 function receiptProjection(result) {
   return {
@@ -44509,6 +44535,7 @@ async function checkSkillResourceClosure({
     const pluginRoot = resolvePluginRoot(skill, scanRoot2);
     const surfaceId = relativeStable(scanRoot2, pluginRoot);
     const surfaceHost = inferSurfaceHost(surfaceId, host);
+    const firstSkillOnSurface = !surfaceMap.has(surfaceId);
     const surface = surfaceMap.get(surfaceId) ?? {
       id: surfaceId,
       host: surfaceHost,
@@ -44518,6 +44545,19 @@ async function checkSkillResourceClosure({
     };
     surface.skillCount += 1;
     surfaceMap.set(surfaceId, surface);
+    if (firstSkillOnSurface && PLATFORM_SURFACE_PATTERN.test(surfaceId) && resolveSkillProjectionSurfaceHost(surfaceId) === null) {
+      findings.push({
+        host: surfaceHost,
+        surface: surfaceId,
+        skill: null,
+        line: null,
+        reference: surfaceId,
+        classification: CLASSIFICATION.UNKNOWN_PLATFORM_SURFACE,
+        resolutionRoot: surfaceId,
+        resolvedTarget: surfaceId,
+        code: FINDING_CODE.UNKNOWN_PLATFORM_SURFACE
+      });
+    }
     if (!skillsBySurface.has(surfaceId)) skillsBySurface.set(surfaceId, []);
     skillsBySurface.get(surfaceId).push(skill);
     const content = await readFile12(resolve17(scanRoot2, skill), "utf8");
@@ -44711,13 +44751,14 @@ function evaluateDeclaredHostSurfaceCoverage(expectedHosts, surfaces) {
   }
   return { passed: missing.length === 0, missing };
 }
-var CHECKER_VERSION, BARE_PREFIXES, EXPLICIT_PREFIXES, SOURCE_TREE_PATTERN, MACHINE_ABSOLUTE_PATTERN, HOME_DIRECTORY_PATTERN, ADAPTER_SURFACE_PATTERN, CLOSURE_RESOURCE_DIRS, GLOB_PATTERN, SOURCE_ONLY_MARKER, TRANSPORT_EXCLUSIONS, CLASSIFICATION, FINDING_CODE;
+var CHECKER_VERSION, BARE_PREFIXES, EXPLICIT_PREFIXES, SOURCE_TREE_PATTERN, MACHINE_ABSOLUTE_PATTERN, HOME_DIRECTORY_PATTERN, ADAPTER_SURFACE_PATTERN, PLATFORM_SURFACE_PATTERN, CLOSURE_RESOURCE_DIRS, GLOB_PATTERN, SOURCE_ONLY_MARKER, TRANSPORT_EXCLUSIONS, CLASSIFICATION, FINDING_CODE;
 var init_skill_resource_closure = __esm({
-  "src/core/skill-resource-closure.mjs"() {
+  async "src/core/skill-resource-closure.mjs"() {
     init_src();
     init_errors3();
     init_frozen();
-    CHECKER_VERSION = "skill-resource-closure-v2";
+    await init_registry2();
+    CHECKER_VERSION = "skill-resource-closure-v3";
     BARE_PREFIXES = ["references/", "assets/", "schemas/", "examples/", "scripts/"];
     EXPLICIT_PREFIXES = [
       "<plugin-root>/",
@@ -44731,6 +44772,7 @@ var init_skill_resource_closure = __esm({
     MACHINE_ABSOLUTE_PATTERN = /^(?:\/(?:Users|home|root|tmp|var|etc|opt)(?:\/|$)|[A-Za-z]:[\\/])/u;
     HOME_DIRECTORY_PATTERN = /^(?:~|\$HOME|\$\{HOME\})\/.+/u;
     ADAPTER_SURFACE_PATTERN = /^adapters\/([^/]+)$/u;
+    PLATFORM_SURFACE_PATTERN = /^platforms\/(.+)$/u;
     CLOSURE_RESOURCE_DIRS = Object.freeze(["references", "assets", "schemas", "examples", "scripts"]);
     GLOB_PATTERN = /[*?\[]/u;
     SOURCE_ONLY_MARKER = /(?:\bsource-only\b|仅源码包)/iu;
@@ -44748,7 +44790,8 @@ var init_skill_resource_closure = __esm({
       HOME_DIRECTORY: "home_directory",
       OUT_OF_BOUNDS: "out_of_bounds",
       RESOURCE_DRIFT: "resource_drift",
-      STALE_RESOURCE: "stale_resource"
+      STALE_RESOURCE: "stale_resource",
+      UNKNOWN_PLATFORM_SURFACE: "unknown_platform_surface"
     });
     FINDING_CODE = Object.freeze({
       SNAPSHOT_UNSAFE: "SNAPSHOT_UNSAFE",
@@ -44760,7 +44803,8 @@ var init_skill_resource_closure = __esm({
       OUT_OF_BOUNDS: "OUT_OF_BOUNDS",
       SYMLINK_NOT_ALLOWED: "SYMLINK_NOT_ALLOWED",
       RESOURCE_DRIFT: "RESOURCE_DRIFT",
-      STALE_RESOURCE: "STALE_RESOURCE"
+      STALE_RESOURCE: "STALE_RESOURCE",
+      UNKNOWN_PLATFORM_SURFACE: "UNKNOWN_PLATFORM_SURFACE"
     });
     __name(toPosix, "toPosix");
     __name(relativeStable, "relativeStable");
@@ -100763,7 +100807,7 @@ var init_prepare = __esm({
     init_evidence();
     await init_plan();
     init_digest();
-    init_skill_resource_closure();
+    await init_skill_resource_closure();
     init_public_map();
     init_public_path();
     init_scan();
@@ -102785,7 +102829,7 @@ var init_publish = __esm({
     init_baseline2();
     init_previous_public_baseline();
     init_evidence();
-    init_skill_resource_closure();
+    await init_skill_resource_closure();
     init_checkpoints();
     await init_run();
     init_errors3();
@@ -105332,7 +105376,7 @@ var init_verify = __esm({
     init_public_path();
     init_npm();
     init_verification_gates();
-    init_skill_resource_closure();
+    await init_skill_resource_closure();
     init_checkpoints();
     init_installation_contract();
     init_npm_entry_closure();