release-skill 0.9.1 → 0.9.4

package/adapters/workbuddy/bin/rules.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "kind": "skill-family.contracts.rules",
-  "contractsVersion": "1.14.0",
+  "contractsVersion": "1.15.0",
   "budget": {
     "firstVersionMax": 20,
     "absoluteMax": 30,

package/adapters/workbuddy/schemas/release-project.schema.json

@@ -791,6 +791,10 @@
           "items": {
             "type": "string"
           }
+        },
+        "preHookPublicSurfaceCheck": {
+          "type": "boolean",
+          "description": "Run the ephemeral public-surface closure gate before declared hooks"
         }
       }
     }

package/adapters/workbuddy/schemas/release-run.schema.json

@@ -601,7 +601,47 @@
           "foundationStatus": { "const": "observed" },
           "payloadMatches": { "const": true },
           "observationDigest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
-          "observedAt": { "type": "string", "format": "date-time" }
+          "observedAt": { "type": "string", "format": "date-time" },
+          "extraInstalledPaths": {
+            "type": "array",
+            "minItems": 1,
+            "uniqueItems": true,
+            "items": {
+              "type": "string",
+              "pattern": "^(?!/)(?!\\.\\/)(?!.*\\\\)(?!.*:)(?!.*(?:^|/)\\.\\.?(?:/|$))(?!.*\\/\\/)(?!.*\\u0000)(?!.*\\/$).+$"
+            }
+          },
+          "extraInstalledLinks": {
+            "type": "array",
+            "minItems": 1,
+            "uniqueItems": true,
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["path", "targetBase64", "bytes", "statMode"],
+              "properties": {
+                "path": {
+                  "type": "string",
+                  "pattern": "^(?!/)(?!\\.\\/)(?!.*\\\\)(?!.*:)(?!.*(?:^|/)\\.\\.?(?:/|$))(?!.*\\/\\/)(?!.*\\u0000)(?!.*\\/$).+$"
+                },
+                "targetBase64": {
+                  "type": "string",
+                  "minLength": 4,
+                  "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
+                },
+                "bytes": {
+                  "type": "integer",
+                  "minimum": 1,
+                  "maximum": 9007199254740991
+                },
+                "statMode": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "maximum": 65535
+                }
+              }
+            }
+          }
         }
       }
     },

package/adapters/workbuddy/skills/release-config/SKILL.md

@@ -46,7 +46,7 @@ prepare 的真实输出是 plan 内的 `workflowDecision`。
 
 ## 正向执行路径
 
-1. 运行 `release-skill route --root <path> --json` 获取 diff 分类
+1. 运行 `release-skill route --root <path> [--target-version <ver>] --json` 获取 diff 分类；已知目标版本时显式传入，route 只是工作流建议
 2. 若推荐 `workflowKind === 'config-only'`，则使用本技能
 3. 执行步骤②：运行 `release-skill assess --root <path> --offline --json` 进行 schema validation
 4. 执行步骤③：运行 `release-skill prepare --offline --workflow config --target-version <ver> --json`
@@ -61,8 +61,10 @@ prepare 的真实输出是 plan 内的 `workflowDecision`。
 ## 确定性脚本调用
 
 ```bash
-# Step 1: Diff classification confirmation (config-only)
+# Step 1: Diff classification confirmation (config-only; pass the known target)
 node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" route --root <path> --json
+node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" route \
+  --root <path> --target-version <version> --json
 
 # Step 2: Assess with schema validation
 node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" assess --root <path> --offline --json
@@ -96,7 +98,7 @@ node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" verify \
 | prepare 检测到基线漂移 | BASELINE_DRIFT_DETECTED | 人工审查 drift 后决定是否继续或回滚 |
 | workflowDecision 不可判定（无对比 plan） | indeterminable | fail-safe 到 publish-needed，走场景 B |
 | approval expired | APPROVAL_EXPIRED | 重新执行 approve，digest 必须匹配 |
-| remote conflict at publish | REMOTE_CONFLICT | 人工决策：force override 或 cancel |
+| remote conflict at publish | REMOTE_CONFLICT | 人工决策；不得 force override 或覆盖远端状态 |
 
 ## 决策树 (Step 4)
 

package/adapters/workbuddy/skills/release-docs/SKILL.md

@@ -36,7 +36,7 @@ plan 记录 `workflowKind: 'docs'` 与 `workflowDecision`（绑定进 plan diges
 
 ## 正向执行路径
 
-1. 运行 `release-skill route --root <path> [--target-version <ver>] --json` 获取 diff 分类和工作流推荐
+1. 运行 `release-skill route --root <path> [--target-version <ver>] --json` 获取 diff 分类和工作流建议；已知目标版本时显式传入，route 不承担发布授权
 2. 若推荐 `workflowKind === 'docs-only'`，则使用本技能
 3. 执行步骤②：调用 `check-style.mjs <doc-path>...` 执行事实/可读性/风格检查
 4. 执行步骤③：调用 `render-public-site.mjs --check [--repo <name>]` 验证渲染无漂移
@@ -49,8 +49,10 @@ plan 记录 `workflowKind: 'docs'` 与 `workflowDecision`（绑定进 plan diges
 ## 确定性脚本调用
 
 ```bash
-# Step 1: Diff classification (from release-skill route)
+# Step 1: Diff classification (from release-skill route; pass the known target)
 node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" route --root <path> --json
+node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" route \
+  --root <path> --target-version <version> --json
 
 # Step 2: Style-guard three gates (check-style.mjs takes file paths only)
 node "${WORKBUDDY_ROOT}/adapters/workbuddy/skills/skill-family-docs-style-guard/scripts/check-style.mjs" \

package/adapters/workbuddy/skills/release-finish/SKILL.md

@@ -21,6 +21,7 @@ description: 发布达到 VERIFIED 后处理可选的本地收尾：按发布分
 
 ```bash
 node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill-local-finish.mjs" \
+  --root <project-root> \
   --plan <plan-path> \
   --run <verified-run-path> \
   --json
@@ -42,6 +43,7 @@ node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill-local-finish.mjs" \
 
 ```bash
 node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill-local-finish.mjs" \
+  --root <project-root> \
   --plan <plan-path> \
   --run <verified-run-path> \
   --update-local-hosts \

package/adapters/workbuddy/skills/release-help/SKILL.md

@@ -17,6 +17,16 @@ description: "Discoverable entry point for release-skill: dependency and environ
 - 只读诊断：运行 dry-run 检查，不修改任何文件
 - 故障引导：根据错误码指向对应的修复 Skill
 
+## 0.9.4 候选边界
+
+当前源码候选允许多发布单元项目在计划冻结前显式选择本轮范围。`prepare` 和新建的 `ship` 状态支持重复传入 `--unit <id>`；未传时继续选择全部配置单元。成功选择会列出选中与延期单元。延期单元不进入本轮计划，也不获得发布状态。
+
+选择只影响按单元绑定的检查与动作。完整配置、生成物新鲜度和顶层 Hook 仍覆盖整个项目。`publicSourceAuthorityReceipt` 涉及的 coordinator 和 subjects 必须作为完整闭包共同选择，系统不会自动扩选。计划冻结后，`plan.units` 是唯一范围权威；publish、reconcile、verify 和 distribute 不接受 `--unit`。
+
+0.9.3 引入的四项工作流保护、Hook cache v2 和稳定隔离安装树记录在 0.9.4 继续保留。0.9.4 精确消费 Foundation 0.16.0 的公开包根 API。Hook cache 只复用绝对路径或经真实 cwd 校验的 cwd-relative executable identity；裸 PATH、PATHEXT、Windows 和观察不可用时，Hook 仍冷执行，缓存复用失败关闭且不写入 v2 cache。缓存没有 TTL。
+
+稳定隔离安装树记录只在宿主命令退出、目录已隔离且扫描期间没有并发写入时执行；宿主附加链接只记录、不跟随，声明载荷中的 symlink 失败关闭，legacy 全树语义保持不变。0.9.4 仍是源码候选，不能从本说明推断已批准、发布或验证。
+
 **阶段通过规则**: `status` 与 `readiness.localPreparation.status` 只判断本地 help/assess/prepare；其充要条件是 `READY` 且 exit code 为 0。`missingRequired` 列出缺失的 Node/Git。生产发布必须另外读取 `readiness.productionPublish`：缺少 npm/gh 时为 `NOT_READY`，依赖存在时仍是 `AUTH_CHECK_REQUIRED`，因为 help 不访问网络、不验证认证。Agent 无权把本地就绪解释为生产就绪。
 
 **边界**: help 不修改文件系统、不执行外部写操作、不生成发布计划。优先探测 PATH 上的全局安装命令 `release-skill`，不可用时回退到源码路径。每个 unit 必须配置 `previousPublicBaseline`：首次发布且确认无前序版本用 none，已有版本用 bound + repo/ref/commit；none 不是绕过 publish 唯一性预检的开关。v0.1.1 已完成 GitHub/npm 真实生产发布、冻结 Git ref 的 Claude/Codex 消费者安装、精确 npm 安装 smoke 与最终 VERIFIED；生产等价本地协议套件继续覆盖 fake gh/npm/Claude/Codex 和本地 bare Git。测试未做 OS 级禁网，且一次成功发布不能证明其他项目的认证、权限、限流或最终一致性行为；每个项目的首次生产发布仍应作为受监控 canary。
@@ -26,7 +36,7 @@ description: "Discoverable entry point for release-skill: dependency and environ
 1. 使用插件根相对路径运行 CLI：`node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" help --json`
 2. 检查 `readiness.localPreparation`；需要生产发布时再检查 `readiness.productionPublish`
 3. 若环境就绪且缺少 `.release-skill/project.yaml`，先路由 `release-setup`；配置已存在才运行 `release-assess`
-4. 默认在审阅本地计划和快照后停止；只有用户明确要求且完成摘要审批时才路由到 `release-publish`
+4. 默认在审阅本地计划和快照后停止；只有用户明确要求且完成摘要审批时才进入 `release-publish`。已持有合法批准的 production plan 时，publish 自行完成权威校验，不把 route 当作授权门
 
 ## 确定性脚本调用
 
@@ -38,6 +48,9 @@ node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" assess --root <path> --off
 # 日常发布快速路径：发布前确认可读计划摘要，状态文件可恢复。
 # 受限 postPublish hook 的 checkpoint 批准与计划批准分开。
 node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" ship --root <path> --target-version <version> --json
+# 多发布单元项目显式选择本轮范围；未传 --unit 时仍为全部单元
+node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" ship --root <path> \
+  --target-version <version> --unit <unit-a> --unit <unit-b> --json
 # 开发阶段执行声明 hooks 并生成 prepare 可复用的内容绑定收据
 # 配置时刻即授权（FM-16 处置 A）：hook 是任意本地进程、无隔离、触发前无确认点，
 # 命令调用本身即授权执行配置中的 hooks
@@ -76,7 +89,7 @@ node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" docs refresh --unit <id> \
 | CLI 入口不存在 | 确认 `${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs` 存在；不存在时重新安装插件 |
 | 项目配置不存在 | 路由 `release-setup`，默认只读；不得直接生成或覆盖 README/配置 |
 | assess 失败 | 运行 `node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" assess --offline --json` 获取详情 |
-| 请求生产发布 | 已有公开版本先调用 `release-prepare --online --production` 观察 bound 基线；人工审阅后再路由 `release-publish` |
+| 请求生产发布 | 已有公开版本先调用 `release-prepare --online --production` 观察 bound 基线；人工审阅后直接调用 `release-publish`，由 publish 自行完成计划、approval、digest、远端冲突和 `PARTIAL` 校验 |
 | RELEASE_DOCS_INVALID | 配置或说明源语义非法（重复键、alias、未知字段、版本漂移等）；修正配置或说明源后重新演练 |
 | RELEASE_DOCS_TRANSLATION_MISSING | 配置语种缺失或多余；补齐说明源语种，与 `releaseDocuments.locales` 完全一致，不得回退 |
 
@@ -85,8 +98,10 @@ node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" docs refresh --unit <id> \
 对于不清楚如何开始的用户，推荐使用 `release-skill route` 命令进行自动化工作流选择：
 
 ```bash
-# 快速分类变更并推荐工作流
+# 快速分类变更并推荐工作流；已知目标版本时显式传入，未知时省略
 node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" route --root <path> --json
+node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" route --root <path> \
+  --target-version <version> --json
 
 # JSON 输出包含 classification 和 recommendation 字段
 {

package/adapters/workbuddy/skills/release-marketplace/SKILL.md

@@ -44,7 +44,7 @@ byte、platform manifest 是核心 gate，由 workspace 自己的生成器与
 
 ## 正向执行路径
 
-1. 运行 `release-skill route --root <path> --json` 获取 diff 分类
+1. 运行 `release-skill route --root <path> [--target-version <ver>] --json` 获取 diff 分类；已知目标版本时显式传入，route 只是工作流建议
 2. 若推荐 `workflowKind === 'marketplace-only'`，则使用本技能
 3. 执行步骤②：手动审查并更新 `plugins.mjs`（唯一 truth source）
 4. 执行步骤③：调用 workspace 自己的生成器再生成 `public-snapshot/`
@@ -59,6 +59,8 @@ byte、platform manifest 是核心 gate，由 workspace 自己的生成器与
 # Step 1: Diff classification confirmation (marketplace-only)
 node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" route \
   --root <workspace-root> --json
+node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" route \
+  --root <workspace-root> --target-version <version> --json
 
 # Step 2: Manual review and update plugins.mjs
 # Human-in-the-loop: entry is the sole truth source

package/adapters/workbuddy/skills/release-prepare/SKILL.md

@@ -13,6 +13,10 @@ description: Freeze an immutable release plan with local configuration, document
 
 运行项目构建/测试 hook，生成公开快照并扫描泄漏，冻结不可变发布计划。prepare 自身不调用发布 adapter，但会执行用户配置的 hook。
 
+0.9.4 候选允许多发布单元项目在冻结前显式选择本轮范围。`--unit <id>` 可以重复传入；未传时仍选择全部单元。显式选择只跳过延期单元的单元级工作，完整配置校验、生成物新鲜度和顶层 Hook 仍全部执行。计划冻结后以 `plan.units` 为唯一范围权威，publish、reconcile、verify 和 distribute 不接受单元选择。
+
+0.9.3 引入的 Hook cache v2 继续只复用有完整身份和输入证据的成功 Hook 结果。裸 PATH、PATHEXT、Windows、TTL、损坏记录或 Foundation 观察不可用时，缓存保持失败关闭，Hook 仍按完整路径冷执行；该机制不改变 prepare 的计划、批准和发布权威。
+
 **Hook 授权契约（配置时刻即授权，FM-16 处置 A）**: hook 是任意本地进程——在 `.release-skill/project.yaml` 中配置 hook 命令即完成授权，构成「配置时刻即授权」的显式契约。hook 不提供沙箱、无文件系统/网络隔离、触发前无确认点，命令调用本身即授权执行已配置的 hook 和 gate，不再设置额外人工授权环节；hook 可能产生项目目录外的副作用或远端写入，配置者须对其内容负责。旧参数 `--acknowledge-hook-side-effects` 和 `--acknowledge-gate-side-effects` 仍可解析，但只作为无效果的兼容输入，不能改变授权或执行语义。恢复「触发前强制确认门」属于后续加固项（属设计变更，需随新版本引入），当前版本不提供该确认门。
 
 **阶段通过规则**: 本阶段的通过只能由 CLI exit code 0 和结构化状态码 `PREPARED` 确认。Agent 无权自行宣布计划冻结成功。
@@ -23,11 +27,13 @@ description: Freeze an immutable release plan with local configuration, document
 
 **发布文档新鲜度门**: 配置了 `releaseDocuments` 的单元在 hook 授权门前先执行同一只读规划器：`clean` 继续；`changes` 抛 `RELEASE_DOCS_STALE`，详情列出相对路径、语种、`refreshDigest` 和精确演练/写入参数数组。prepare 只检查、不写工作树。正式 prepare 前先运行只读演练；有变化时向用户展示文件/语种/版本/`refreshDigest`，只有在用户明确授权"本地发布文档写入"后，才执行带 `--write --confirm-refresh <refreshDigest> --ack-local-document-write` 三项绑定的写入，随后运行聚焦校验，要求维护者审阅并提交刷新结果，再重新 prepare。该授权不扩展为 hook、提交、push 或 publish 授权。
 
+**显式发布范围**: 只有用户已经指出本轮要发布哪些单元时，才把这些 ID 逐个传给 `--unit`。release-skill 不根据失败自动排除单元。选择命中 `publicSourceAuthorityReceipt` 的 coordinator 或 subject 时，必须包含收据声明的完整单元闭包；缺少单元时按命令返回的精确 argv 重新选择，不自动扩选。成功后展示 `releaseScope.selectedUnitIds`、`releaseScope.deferredUnitIds` 和批准摘要。延期仅表示没有进入本轮计划，不表示通过或失败。
+
 ## 正向执行路径
 
 1. 使用插件根相对路径运行 CLI：`CLI="node ${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs"`
 2. 配置含 `releaseDocuments` 时，先运行只读演练 `${CLI} docs refresh --unit <id> --json`；`status: "changes"` 时展示逐文件路径/语种/版本/`refreshDigest`，取得"本地发布文档写入"明确授权后才执行 `nextCommand.argv` 写入，审阅并提交刷新结果后再继续；`status: "clean"` 时直接进入 prepare
-3. 运行 `${CLI} prepare --root <path> --offline --json`
+3. 运行 `${CLI} prepare --root <path> --offline --json`；用户已明确选择范围时，为每个单元追加一个 `--unit <id>`
 4. 检查 exit code 0，读取 JSON 返回的 immutable `planPath=plans/<planDigest>.json`，再从该文件读取 `status`、`units`、`externalActions`
 5. 向用户展示可读的 `approvalSummary`：版本、公开仓库、分支策略、branch/tag、npm 与 GitHub Release 目标、全部外部动作、例外，以及需要独立 checkpoint 批准的 postPublish hook。`planDigest` 仅作为内部绑定字段，不要求用户复制或确认。后续 approve/publish 只能使用该 immutable planPath，等待确认后再 approve。计划批准不包含受限 postPublish hook 的 checkpoint 批准
 
@@ -62,6 +68,9 @@ node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" docs refresh --unit <id> -
 node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" docs refresh --unit <id> \
   --write --confirm-refresh <refreshDigest> --ack-local-document-write --json
 node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" prepare --root <path> --offline --json
+# 显式选择发布范围；未传 --unit 时仍准备全部配置单元
+node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" prepare --root <path> --offline \
+  --unit <unit-a> --unit <unit-b> --json
 # 生产 happy end：bound 基线必须 online；远端目标唯一性仍由 publish 全局预检
 node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" prepare --root <path> --online --production --json
 ```
@@ -79,11 +88,12 @@ node "${CODEBUDDY_PLUGIN_ROOT}/bin/release-skill.mjs" prepare --root <path> --on
 | GATE_FAILED (bound + offline) | 改用 `--online --production`，不得把 unobserved-offline plan 交给 publish |
 | GATE_FAILED (前序基线漂移) | 先取得并比较实际远端内容；人工选择 merge/adopt/reject。merge/adopt 都必须把接受内容落回 human-owned 权威源，并把 `previousPublicBaseline` 更新为接受状态的精确 repo/ref/commit 后重新 online production prepare；reject 停止调查，禁止改 `mode: none` 绕过 |
 | GATE_FAILED (`npm-entry-closure`) | 修复打包内容或入口声明后重新 prepare；不得用 `requiredPublicFiles`/`smokeBin` 缺省绕过 |
+| GATE_FAILED（发布范围依赖闭包不完整） | 按详情补齐 `publicSourceAuthorityReceipt` 声明涉及的 coordinator 和全部 subjects，再重新 prepare；不得自动扩选或忽略收据 |
 | GATE_FAILED (其他) | 修复门失败原因后重试；以 CLI exit code 为准 |
 | RELEASE_DOCS_STALE | 文档相对说明源已陈旧；按详情运行只读演练，展示文件/语种/版本/摘要，经用户授权“本地发布文档写入”后执行写入，审阅提交再重新 prepare |
 | RELEASE_DOCS_INVALID / TRANSLATION_MISSING / CONFLICT / REFRESH_STALE | 修复配置/说明源/目标或重新演练取得新 `refreshDigest`；不得扩大写入范围绕过 |
 | SECRET_DETECTED | 移除密钥并更新 allowlist |
-| CONFIG_INVALID | 检查 version.source 和 package.json |
+| CONFIG_INVALID | 检查 version.source、package.json，以及 `--unit` 是否为空、重复或不在 `releaseUnits[]` 中 |
 
 重试时只保留最新结构化错误码和失败门，不沿用早期猜测；重跑确定性命令获得新证据。
 

package/adapters/workbuddy/skills/release-publish/SKILL.md

@@ -21,16 +21,23 @@ description: "从已批准的生产计划发布冻结 Git branch/tag、npm tarba
 
 ## 前置条件：工作流选择
 
-在运行 `release-publish` 之前，必须先完成快速入门决策路由（§4.3 Workflow Profile Support）：
-
-1. 使用 `release-skill route --root <path> --json` 确定变更类型
-2. 根据推荐的 `workflowKind` 选择对应路径：
-   - `docs-only` → 先执行 `release-docs` 完整流程
-   - `config-only` → 先执行 `release-config`，仅在 public surface 变化时进入 publish
-   - `marketplace-only` → 先执行 `release-marketplace`，然后由 workspace exclusive skill 接管
-   - `full-happy-end` → 直接进入标准完整流程：`prepare → approve → publish → verify`
-   - `reconcile` → 先执行 `release-reconcile` 恢复 PARTIAL 状态
-   - `help` → 无变更，无需 publish
+调用方持有合法、未过期且绑定当前 production plan 的 approval record 时，
+`release-publish` 直接执行自身的计划、批准、冻结制品身份和远端预检。`route` 只提供
+工作流建议，不是已批准 production plan 的授权门。
+
+尚未形成计划时，可以先使用 `release-skill route --root <path> --json` 确定变更类型。
+已知目标版本时一并传入 `--target-version <version>`，使恢复建议只读取与该目标绑定的
+完整运行血缘。未传目标时，route 仍按 diff/baseline 选择工作流；历史 diagnostics 只作
+报告，不得覆盖当前建议。
+
+根据推荐的 `workflowKind` 选择对应路径：
+
+- `docs-only` → 先执行 `release-docs` 完整流程
+- `config-only` → 先执行 `release-config`，仅在 public surface 变化时进入 publish
+- `marketplace-only` → 先执行 `release-marketplace`，然后由 workspace exclusive skill 接管
+- `full-happy-end` → 直接进入标准完整流程：`prepare → approve → publish → verify`
+- `reconcile` → 先执行 `release-reconcile` 恢复 PARTIAL 状态
+- `help` → 无变更，无需 publish
 
 **注意**: `release-publish` 是标准工作流中的第⑦步，必须在以下步骤之后：
 - 步骤⑤: `release-prepare` (或轻量级 prepare)

package/adapters/workbuddy/skills/release-verify/SKILL.md

@@ -29,6 +29,8 @@ verify 只接受 `PUBLISHED` 状态的源 run；`VERIFIED` 是终态，不会再
 
 验证远端所有自动化 action 的实际状态与冻结计划一致。执行精确 `<package>@<version>` npm 安装到隔离目录，验证包名、版本、静态入口闭包，并在配置时验证 bin 路径安全和 CLI 烟雾输出。对 Claude/Codex marketplace distribution 执行全新隔离消费者安装验证。新计划中的 Kimi/CodeBuddy 安装只返回 `manualFollowUps`，明确标记 `verifiedBySystem: false`，不阻塞 `VERIFIED`；缺少该策略字段的旧冻结计划继续走历史 attestation 兼容路径。
 
+0.9.3 的稳定隔离安装树记录只消费宿主命令退出后的隔离树观察：宿主附加 link 记录自身但不跟随，声明载荷 symlink 失败关闭，legacy 全树语义保持不变。该观察属于安装树事实，不替代远端状态、发布计划或 `VERIFIED` 判断。
+
 **attestation 证明力边界**: `attest` 命令记录的旧计划兼容人工证明（`humanConfirmed: true` → `PASSED_MANUAL`）是本地自声明收据，不是签名见证：`--actor` 仅做非空字符串校验，无外部签名或身份核验，任何能运行 CLI 的进程都能自称任意 actor；伪造收据需写 `.release-skill` authority 目录，与直接改写收据文件属同一信任边界。因此旧兼容路径的人工证明只用于旧冻结计划收尾，不构成独立可审计的人工见证。新计划的 Kimi/CodeBuddy 安装一律走 `manualFollowUps`（`verifiedBySystem: false`），不参与 `VERIFIED` 终态判定。
 
 **阶段通过规则**: 只有 CLI exit code 0 和结构化状态码 `VERIFIED` 才是完整终态。

package/adapters/workbuddy/src/schemas/executable-identity-observation.schema.json

@@ -0,0 +1,162 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://contracts.skill-family.example/v1/executable-identity-observation.json",
+  "title": "Executable identity observation",
+  "description": "A single, private observation of an executable lookup and its explicit launch image. Absolute roots and file bytes are intentionally represented only by the bound root and digest facts.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "kind", "lookup", "canonicalEntry", "interpreter", "launch", "observationDigest"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "kind": { "const": "skill-family.executable-identity-observation" },
+    "lookup": { "$ref": "#/$defs/lookup" },
+    "canonicalEntry": { "$ref": "#/$defs/canonicalEntry" },
+    "interpreter": {
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["request", "canonicalEntry", "shebangArgs"],
+          "properties": {
+            "request": {
+              "oneOf": [
+                { "$ref": "#/$defs/bareCommand" },
+                { "$ref": "#/$defs/absolutePath" }
+              ]
+            },
+            "canonicalEntry": {
+              "allOf": [
+                { "$ref": "#/$defs/canonicalEntry" },
+                { "type": "object", "properties": { "entryKind": { "const": "native-binary" } } }
+              ]
+            },
+            "shebangArgs": {
+              "type": "array",
+              "maxItems": 8,
+              "items": { "type": "string", "minLength": 1, "maxLength": 256, "pattern": "^[^\\u0000\\r\\n]+$" }
+            }
+          }
+        }
+      ]
+    },
+    "launch": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["file", "argvPrefix"],
+      "properties": {
+        "file": { "$ref": "#/$defs/absolutePath" },
+        "argvPrefix": {
+          "type": "array",
+          "maxItems": 8,
+          "items": { "$ref": "#/$defs/absolutePath" }
+        }
+      }
+    },
+    "observationDigest": { "$ref": "#/$defs/sha256" }
+  },
+  "allOf": [
+    {
+      "if": {
+        "type": "object",
+        "properties": { "canonicalEntry": { "type": "object", "properties": { "entryKind": { "const": "interpreter-script" } }, "required": ["entryKind"] } },
+        "required": ["canonicalEntry"]
+      },
+      "then": {
+        "type": "object",
+        "properties": {
+          "interpreter": { "type": "object" },
+          "launch": { "type": "object", "properties": { "argvPrefix": { "type": "array", "minItems": 1 } } }
+        }
+      },
+      "else": {
+        "type": "object",
+        "properties": {
+          "interpreter": { "type": "null" },
+          "launch": { "type": "object", "properties": { "argvPrefix": { "type": "array", "maxItems": 0 } } }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+    "absolutePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 4096,
+      "pattern": "^/(?:[^/\\\\\\u0000]+(?:/[^/\\\\\\u0000]+)*)?$",
+      "not": { "pattern": "(?:^|/)\\.{1,2}(?:/|$)" }
+    },
+    "relativePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 4096,
+      "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*(?:^|/)\\.(?:/|$))(?!.*\\\\)(?!.*\\u0000)[^/\\\\\\u0000]+(?:/[^/\\\\\\u0000]+)*$"
+    },
+    "bareCommand": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256,
+      "pattern": "^[^/\\\\\\u0000]+$"
+    },
+    "rootBinding": { "$ref": "https://contracts.skill-family.example/v1/filesystem-root-binding.json" },
+    "lookup": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["requested", "mode", "selectedPath"],
+      "properties": {
+        "requested": { "type": "string", "minLength": 1, "maxLength": 4096 },
+        "mode": { "enum": ["absolute-path", "explicit-path-search"] },
+        "path": { "$ref": "#/$defs/absolutePath" },
+        "pathEntries": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 64,
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/absolutePath" }
+        },
+        "selectedPath": { "$ref": "#/$defs/absolutePath" }
+      },
+      "allOf": [
+        {
+          "if": { "type": "object", "properties": { "mode": { "const": "absolute-path" } }, "required": ["mode"] },
+          "then": {
+            "type": "object",
+            "required": ["path"],
+            "properties": { "path": {}, "pathEntries": false }
+          },
+          "else": {
+            "type": "object",
+            "required": ["pathEntries"],
+            "properties": { "pathEntries": {}, "path": false }
+          }
+        }
+      ]
+    },
+    "symlink": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "targetBase64", "bytes"],
+      "properties": {
+        "path": { "$ref": "#/$defs/absolutePath" },
+        "targetBase64": { "type": "string", "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$" },
+        "bytes": { "type": "integer", "minimum": 0, "maximum": 1048576 }
+      }
+    },
+    "canonicalEntry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "symlinkChain", "binding", "relPath", "sha256", "bytes", "statMode", "entryKind"],
+      "properties": {
+        "path": { "$ref": "#/$defs/absolutePath" },
+        "symlinkChain": { "type": "array", "maxItems": 40, "items": { "$ref": "#/$defs/symlink" } },
+        "binding": { "$ref": "#/$defs/rootBinding" },
+        "relPath": { "$ref": "#/$defs/relativePath" },
+        "sha256": { "$ref": "#/$defs/sha256" },
+        "bytes": { "type": "integer", "minimum": 0, "maximum": 1073741824 },
+        "statMode": { "type": "integer", "minimum": 0, "maximum": 4294967295 },
+        "entryKind": { "enum": ["native-binary", "interpreter-script", "opaque-executable"] }
+      }
+    }
+  }
+}

package/adapters/workbuddy/src/schemas/filesystem-tree-observation.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://contracts.skill-family.example/v1/filesystem-tree-observation.json",
   "title": "Filesystem tree observation",
-  "description": "A complete same-pass fact observation of a bound filesystem tree (FND-DES-014 section 6.1). Private data only: it is returned by the public read-only harness entry, but never enters a public plugin verification result. The record keeps the original root binding so consumers re-verify the same bound root and never re-bind a replacement. Members are canonical relative paths sorted by Unicode code point; directories carry identity/type/permission facts only; file bytes come from the same native descriptor that supplies statMode.",
+  "description": "A complete same-pass fact observation of a bound filesystem tree (FND-DES-014 section 6.1). Private data only: it is returned by the public read-only harness entry, but never enters a public plugin verification result. The record keeps the original root binding so consumers re-verify the same bound root and never re-bind a replacement. Default and explicit reject preserve the 0.14 UTF-16 order; record mode uses Unicode code point order. Directories carry identity/type/permission facts only; file bytes come from the same native descriptor that supplies statMode.",
   "type": "object",
   "additionalProperties": false,
   "required": ["schemaVersion", "kind", "rootBinding", "members", "membersDigest"],
@@ -25,7 +25,8 @@
     "member": {
       "oneOf": [
         { "$ref": "#/$defs/fileMember" },
-        { "$ref": "#/$defs/directoryMember" }
+        { "$ref": "#/$defs/directoryMember" },
+        { "$ref": "#/$defs/symlinkMember" }
       ]
     },
     "fileMember": {
@@ -50,6 +51,21 @@
         "type": { "const": "directory" },
         "statMode": { "$ref": "#/$defs/statMode" }
       }
+    },
+    "symlinkMember": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "type", "targetBase64", "bytes", "statMode"],
+      "properties": {
+        "path": { "type": "string", "minLength": 1 },
+        "type": { "const": "symlink" },
+        "targetBase64": {
+          "type": "string",
+          "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
+        },
+        "bytes": { "type": "integer", "minimum": 0, "maximum": 1048576 },
+        "statMode": { "$ref": "#/$defs/statMode" }
+      }
     }
   }
 }