release-skill 0.9.11 → 0.9.13

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codebuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.9.11.",
+      "Prepare a release plan for version 0.9.13.",
       "Help me understand the release workflow."
     ]
   }

package/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/CHANGELOG.md

@@ -1,5 +1,46 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.9.13 locale=en baseline=sha256:86e8ee0d0aeb161c7fc652f85976b300b649ee6da04d29f9274ebcc69a8eab10 -->
+## [0.9.13] - 2026-09-05
+
+0.9.13 is a local source candidate that prevents new CodeBuddy release configurations from silently inheriting another product family's marketplace. It also brings the README black-box scenario versions under the existing version synchronization command. The three Foundation dependencies remain pinned to the exact 0.17.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+
+### Security
+
+- Already-frozen historical plans without `marketplace` retain the legacy interpretation for deterministic reconcile. New configuration validation changes do not weaken frozen-plan identity, approval, publish, verification, or recovery checks. Skill Family Hub updates remain compare-and-swap operations; a partial Hub publication is never rolled back or force-pushed, and release-skill does not introduce a second Hub registry or state machine.
+
+### Fixed
+
+- New `codebuddy-plugin` distributions must declare `marketplace` explicitly, so each project selects its own Hub instead of inheriting the legacy `artifact-skill-set` default.
+- The first-user and security-reviewer README black-box prompts now receive their candidate version from `sync-version`, preventing their assertions from drifting behind the package version.
+- The project-private postVerify hook continues to publish the verified release-skill entry and public snapshot to Skill Family Hub through GitHub's Git Data API.
+
+### Upgrade Notes
+
+Upgrade from 0.9.12 before preparing a new CodeBuddy release configuration. Add the intended Hub name to every new `codebuddy-plugin` distribution through its `marketplace` field. Remove any release-skill standalone marketplace registration, add or update `ifoohoo/skill-family-hub`, and use `release-skill@skill-family-hub`. Existing frozen plans remain recoverable, and other distribution types are unaffected.
+<!-- release-skill:changelog:end version=0.9.13 locale=en -->
+
+
+<!-- release-skill:changelog:start version=0.9.12 locale=en baseline=sha256:c2511de86192c1798c17e579bed689c57c450516b10bd85d6a508b0b6e5e19b1 -->
+## [0.9.12] - 2026-09-04
+
+0.9.12 is a local source candidate that fixes the frozen postVerify execution closure used to publish verified releases into Skill Family Hub. It retains the 0.9.11 first-release baseline and GitHub-only distribution changes, with the three Foundation dependencies still pinned to the exact 0.17.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+
+### Security
+
+- The repair does not weaken the frozen execution-bundle boundary: the hook still runs from the verified tag plus the digest-bound private script. Hub branch updates remain compare-and-swap operations; a partial Hub publication is retained for recovery and is never rolled back or force-pushed.
+
+### Fixed
+
+- The Hub postVerify hook now imports proposal projection from a dependency-free public module. A detached frozen-tag worktree can load the module without node_modules, while runtime proposal transports continue to use the same implementation through a compatibility re-export.
+- The project-private postVerify hook continues to publish verified entries and public snapshots to Skill Family Hub through GitHub's Git Data API.
+
+### Upgrade Notes
+
+Upgrade from 0.9.11 before relying on the bundled `hub-api-publish` postVerify hook. Remove any `release-skill` standalone marketplace registration, add or update `ifoohoo/skill-family-hub`, and use `release-skill@skill-family-hub`. Releases that do not use this hook are unaffected.
+<!-- release-skill:changelog:end version=0.9.12 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.9.11 locale=en baseline=sha256:c8015d6a26b39a9056c121425b8758a108048d78815476e7bf3d2711cec6ee25 -->
 ## [0.9.11] - 2026-09-04
 

package/INSTALL.md

@@ -2,7 +2,7 @@
 
 [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.9.11 -->
+<!-- release-skill:release-version: 0.9.13 -->
 ## Prerequisites
 
 - Node.js 22.0.0 or later
@@ -110,7 +110,7 @@ tag pinned to the exact version (never the bare repository URL, which installs
 the latest release or default branch), confirm the trust prompt, then reload:
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.11
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.13
    /plugins reload
    ```
 

package/INSTALL.zh-CN.md

@@ -2,7 +2,7 @@
 
 [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.9.11 -->
+<!-- release-skill:release-version: 0.9.13 -->
 ## 前置条件
 
 - Node.js 22.0.0 或更高版本
@@ -101,7 +101,7 @@ release-skill 当前只采用并验证 Kimi Code 的交互式 TUI 路径，**无
 （切勿使用裸仓库地址，它会安装最新 release 或默认分支），确认信任提示后重新加载：
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.11
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.13
    /plugins reload
    ```
 

package/README.md

@@ -2,7 +2,7 @@
 
 [简体中文](README.zh-CN.md) · Installation: [English](INSTALL.md) / [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.9.11 -->
+<!-- release-skill:release-version: 0.9.13 -->
 Release preparation for Claude Code, CodeBuddy, WorkBuddy, Codex, and Kimi Code, with human-edited files kept intact.
 
 release-skill helps a maintainer answer three questions: what will be released,
@@ -14,30 +14,27 @@ Setup surfaces only the deterministic `compactSummary` review view; the full
 report stays in a temporary session directory.
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.11** (2026-09-04)
+**0.9.13** (2026-09-05)
 
-0.9.11 is a local source candidate that makes first-release verification advance its public baseline and permits an explicit empty distribution list for GitHub-only plugin releases. It consumes the three Foundation packages at the exact 0.17.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+0.9.13 is a local source candidate that prevents new CodeBuddy release configurations from silently inheriting another product family's marketplace. It also brings the README black-box scenario versions under the existing version synchronization command. The three Foundation dependencies remain pinned to the exact 0.17.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
 
 **Security**
 
-- First-release baseline advancement runs only after immutable publication verification succeeds. Configuration writes are validated and atomic; restoration failures retain their phase and publication-state details in verification evidence without changing a successful publication result.
-- An empty distribution list does not skip the GitHub snapshot, tag, or GitHub Release actions, and it does not grant a marketplace registration.
-- Hub branch updates use compare-and-swap against the observed branch head. A partial Hub publication is retained for recovery and is never rolled back or force-pushed.
+- Already-frozen historical plans without `marketplace` retain the legacy interpretation for deterministic reconcile. New configuration validation changes do not weaken frozen-plan identity, approval, publish, verification, or recovery checks. Skill Family Hub updates remain compare-and-swap operations; a partial Hub publication is never rolled back or force-pushed, and release-skill does not introduce a second Hub registry or state machine.
 
-**Changed**
+**Fixed**
 
-- After a release reaches VERIFIED, a unit whose previous public baseline is `mode: none` is advanced to a bound baseline with the resolved repository and ref plus the exact frozen commit, tree, and manifest digest. Mixed plans and custom in-root config paths use the same existing atomic update path, preserve an explicit GitHub host, and report only units that changed.
-- `releaseUnits[].distributions` remains required but may now be an explicit empty list. Such a unit still freezes and publishes its GitHub snapshot, tag, and GitHub Release, while npm and marketplace actions are omitted; postPublish and postVerify hooks remain independent.
-- Pinned `skill-family-contracts`, `skill-family-harness-node`, and `skill-family-engineering-kit` dependencies were upgraded from 0.16.0 to the exact published 0.17.0 versions.
-- Skill Family Hub remains the single marketplace source. After verification, the project-private postVerify hook applies the Hub proposal and publishes its private entry and public snapshot through GitHub's Git Data API.
+- New `codebuddy-plugin` distributions must declare `marketplace` explicitly, so each project selects its own Hub instead of inheriting the legacy `artifact-skill-set` default.
+- The first-user and security-reviewer README black-box prompts now receive their candidate version from `sync-version`, preventing their assertions from drifting behind the package version.
+- The project-private postVerify hook continues to publish the verified release-skill entry and public snapshot to Skill Family Hub through GitHub's Git Data API.
 
 **Upgrade Notes**
 
-Remove any `release-skill` standalone marketplace registration, add or update `ifoohoo/skill-family-hub`, and use `release-skill@skill-family-hub`. Use `distributions: []` only when the release unit is intentionally GitHub-only and marketplace registration is handled by an independent verified workflow. Existing non-empty distribution lists keep their behavior. After installing or reloading the official 0.9.11 release, a historical first release may be reverified without republishing; confirm that its configured previous public baseline changed from `none` to the verified frozen coordinates.
+Upgrade from 0.9.12 before preparing a new CodeBuddy release configuration. Add the intended Hub name to every new `codebuddy-plugin` distribution through its `marketplace` field. Remove any release-skill standalone marketplace registration, add or update `ifoohoo/skill-family-hub`, and use `release-skill@skill-family-hub`. Existing frozen plans remain recoverable, and other distribution types are unaffected.
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **Current boundary:** v0.9.11 is the current source candidate. This README
+> **Current boundary:** v0.9.13 is the current source candidate. This README
 > records intended scope and verification boundaries; it is not evidence of
 > publication, consumer-installation verification, or independent acceptance.
 > Release availability must be established from the corresponding release records
@@ -61,7 +58,7 @@ Remove any `release-skill` standalone marketplace registration, add or update `i
 > publish global preflight.
 
 <!-- release-skill:capability:safe-first-command -->
-> **Production path verified since the v0.1.1 milestone; v0.9.11 is the current
+> **Production path verified since the v0.1.1 milestone; v0.9.13 is the current
 > source candidate. Its README does not establish publication,
 > consumer-installation verification, or independent acceptance.**
 > The npm-installed CLI is the supported user entry. Source checkout
@@ -90,7 +87,7 @@ checkpoints remain intact and use matching-version recovery. Evidence v1 stays
 read-only; v2 uses a closed top level with phase extensions in `details`.
 Summaries and recovery suggestions are diagnostic, never publication authority.
 
-The current 0.9.11 candidate includes the narrow R-05 Hook cache v2 consumer
+The current 0.9.13 candidate includes the narrow R-05 Hook cache v2 consumer
 path, the public `postverify` path, and the stable isolated install-tree record
 path (A2/A3). It also removes the repository's own marketplace indexes and
 uses Skill Family Hub as the single marketplace source. It still
@@ -787,10 +784,11 @@ unsupported. When a plan declares postVerify hooks, release-finish must receive
 the completed postVerify run produced by `ship`, rather than the earlier verify
 run. The core prepare, publish, and verify workflow remains cross-platform.
 
-A `codebuddy-plugin` distribution may optionally declare `marketplace` (and
-`marketplaceSource`, the URL consumers use to add the marketplace) to override
-the default unified marketplace `artifact-skill-set`; undeclared distributions
-keep the default and produce byte-identical frozen plans.
+New `codebuddy-plugin` project configurations must declare `marketplace`
+explicitly so product families cannot silently inherit another family's Hub.
+`marketplaceSource`, the URL consumers use to add that marketplace, remains
+optional. Only already-frozen historical plans that lack `marketplace` retain
+the legacy `artifact-skill-set` interpretation so reconcile can replay them.
 
 For every npm distribution, `prepare` statically checks the exact packed
 tarball against concrete `package.json` entry targets. `publish` and

package/README.zh-CN.md

@@ -2,36 +2,33 @@
 
 [English](README.md) · 安装指南：[中文](INSTALL.zh-CN.md) / [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.9.11 -->
+<!-- release-skill:release-version: 0.9.13 -->
 面向 Claude Code、CodeBuddy、WorkBuddy、Codex 和 Kimi Code 的发布准备工具，完整保留人工维护的文件内容。
 
 release-skill 帮助维护者回答三个问题：准备发布什么、还有哪些检查未通过、最终发布的内容是什么。它不重新生成、也不回写项目源文件。`prepare` 把每个配置的公开文件复制到隔离快照并验证字节——先冻结并供人工审阅，再从同一份冻结产物发布。`setup` 只显示确定性的 `compactSummary` 审阅视图，完整报告保留在临时会话目录中。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.11** (2026-09-04)
+**0.9.13** (2026-09-05)
 
-0.9.11 是修复首次发布验证后基线推进、并允许 GitHub-only 插件发布显式使用空分发列表的本地源码候选，三项 Foundation 依赖均精确升级到已发布的 0.17.0。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收。
+0.9.13 是阻止新的 CodeBuddy 发布配置静默继承其他产品线市场的本地源码候选，并把 README 黑盒场景中的候选版本交给现有版本同步命令统一维护。三项 Foundation 依赖仍精确固定在已发布的 0.17.0。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收。
 
 **安全**
 
-- 首次发布基线只在不可变发布内容验证成功后推进。配置写入会先验证并采用原子更新；若恢复失败，验证证据会保留阶段与发布状态详情，同时不把已经成功的发布结果降级。
-- 空分发列表不会跳过 GitHub 快照、tag 或 GitHub Release，也不会自动获得市场登记。
-- Hub 分支更新以已观察的分支头做比较后写入。Hub 局部发布会保留为可恢复状态，不回滚、不覆盖，也不强推。
+- 已经冻结且未携带 `marketplace` 的历史计划仍按旧语义执行，以便确定性地恢复发布。新的配置校验不放宽冻结计划身份、批准、发布、验证或恢复检查。Skill Family Hub 更新继续采用比较后写入；Hub 局部发布不回滚、不覆盖，也不强推，release-skill 中没有增加第二套 Hub Registry 或状态机。
 
-**变更**
+**修复**
 
-- 发布达到 VERIFIED 后，`previousPublicBaseline` 为 `mode: none` 的单元会转为 bound 基线，写入解析后的仓库与 ref，以及本次冻结的精确 commit、tree 和 manifest digest。混合计划与根目录内的自定义配置路径复用既有原子更新路径，保留显式 GitHub host，并且只报告实际发生变化的单元。
-- `releaseUnits[].distributions` 仍为必填字段，但现在可以显式设置为空列表。该单元仍会冻结并发布 GitHub 快照、tag 和 GitHub Release，只省略 npm 与市场动作；postPublish 和 postVerify hook 继续独立执行。
-- 精确固定的 `skill-family-contracts`、`skill-family-harness-node` 和 `skill-family-engineering-kit` 依赖从 0.16.0 升级到已发布的 0.17.0。
-- Skill Family Hub 继续作为唯一市场来源。验证完成后，项目私有的 postVerify hook 会应用 Hub 提案，并通过 GitHub Git Data API 发布 Hub 私有条目和公开快照。
+- 新的 `codebuddy-plugin` 分发必须显式声明 `marketplace`。每个项目据此选择自己的 Hub，不再继承旧的 `artifact-skill-set` 默认值。
+- 首次使用者与安全审阅者的 README 黑盒提示词现在通过 `sync-version` 接收候选版本，避免其中的断言落后于包版本。
+- 项目私有的 postVerify hook 继续通过 GitHub Git Data API，把已验证的 release-skill 条目和公开快照发布到 Skill Family Hub。
 
 **升级说明**
 
-删除各宿主中独立的 `release-skill` 市场登记，添加或更新 `ifoohoo/skill-family-hub`，并使用 `release-skill@skill-family-hub`。仅在发布单元有意采用 GitHub-only 发布、且市场登记由独立的已验证流程处理时使用 `distributions: []`。既有非空分发列表的行为不变。安装或重新加载正式发布并已验证的 0.9.11 后，可以直接重新验证历史首次发布，无需重复发布；随后应确认配置中的上一公开基线已从 `none` 更新为本次验证的精确冻结坐标。
+准备新的 CodeBuddy 发布配置前，应从 0.9.12 升级到本版本，并在每个 `codebuddy-plugin` 分发的 `marketplace` 字段中填写目标 Hub。删除各宿主中独立的 `release-skill` 市场登记，添加或更新 `ifoohoo/skill-family-hub`，并使用 `release-skill@skill-family-hub`。已经冻结的历史计划仍可恢复，其他分发类型不受影响。
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **当前边界：** v0.9.11 只是当前源码候选。本 README 记录预期范围与验证边界，
+> **当前边界：** v0.9.13 只是当前源码候选。本 README 记录预期范围与验证边界，
 > 不代表已经发布、完成消费者安装验证或通过独立验收。
 > 版本可用性以对应发布记录及发布后验证结果为准。
 > v0.4.1 是更早的已发布里程碑（v0.2.2 曾处于已发布状态，后因平台验证收敛修复而更新）。
@@ -47,7 +44,7 @@ release-skill 帮助维护者回答三个问题：准备发布什么、还有哪
 > 远端唯一性检查在 `publish` 全局预检执行。
 
 <!-- release-skill:capability:safe-first-command -->
-> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.11 是当前源码候选，本 README 不证明该候选已经发布、完成消费者安装验证或通过独立验收。**
+> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.13 是当前源码候选，本 README 不证明该候选已经发布、完成消费者安装验证或通过独立验收。**
 > npm 安装的 CLI 是受支持的用户入口；源码 checkout 保留为开发/贡献者路径。
 >
 > **第一条命令：**
@@ -65,7 +62,7 @@ marketplace 委托目标工作区发布的边界不变。
 
 旧 production 计划缺少 `sourceAuthority` 时，在外部写入前拒绝。未发生外部写入的计划必须重新 prepare 并批准新摘要，不能补写旧计划或迁移批准。已有 `PARTIAL` 保留检查点，走匹配版本的恢复路径。evidence v1 只读；v2 顶层封闭，阶段扩展放在 `details`。摘要和恢复建议只作诊断，不构成发布权威。
 
-当前 0.9.11 候选包含窄范围的 R-05 Hook cache v2 消费路径、公开 `postverify`
+当前 0.9.13 候选包含窄范围的 R-05 Hook cache v2 消费路径、公开 `postverify`
 路径和稳定隔离安装树记录路径（A2/A3），并删除仓库自有市场索引，统一以
 Skill Family Hub 为市场来源。当前仍不包含 R-02 安全整树盘点、R-10 历史发布验证
 的产品实现、真实 Kimi/WorkBuddy 公开市场安装与调用门禁或 Audit 公开离线发布记录
@@ -669,7 +666,7 @@ WorkBuddy 本机更新仅支持 macOS；其他平台返回不支持并跳过。
 release-finish 必须接收 `ship` 产出的已完成 postVerify run，不能直接使用较早的
 verify run；核心 prepare、publish、verify 流程仍跨平台。
 
-`codebuddy-plugin` 分发可以可选地声明 `marketplace`（以及 `marketplaceSource`，即消费者添加市场所用的 URL）来覆盖默认统一市场 `artifact-skill-set`；未声明的分发保持默认值，冻结计划字节不变。
+新的 `codebuddy-plugin` 项目配置必须显式声明 `marketplace`，避免不同产品线误用同一市场；`marketplaceSource`（消费者添加市场所用的 URL）仍可按需声明。只有已经冻结、且未携带该字段的历史计划会继续按旧规则解释为 `artifact-skill-set`，以保证 reconcile 可以重放原计划。
 
 每个 npm 分发在 `prepare` 时都会针对精确封装的 tarball 静态校验
 `package.json` 声明的具体入口。`publish` 与 `reconcile` 在任何远端动作前对同一

package/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/claude/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.11"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.13"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "42faaeb2d272e94efd6075f39b6553540afc307ce64a853a8021eb474fdb380b";
+const __bundleSourceDigest = "e80838f3bb1cdc89e9112bcf4a4a9b5912c963cfb5d9ea27d692c7fb24dd48d6";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136313,6 +136313,49 @@ var init_notify_handoff = __esm({
   }
 });
 
+// src/core/proposal-document.mjs
+function proposalFileName(unitId, version) {
+  if (typeof unitId !== "string" || unitId.length === 0 || typeof version !== "string" || version.length === 0) {
+    throw new ReleaseError(GATE_FAILED, "proposal file name requires unitId and version", { unitId, version });
+  }
+  return `incoming/${unitId}-${version}.json`;
+}
+function buildProposalDocument(context) {
+  const required = ["unitId", "version", "tag", "commit", "planDigest", "runId"];
+  for (const field of required) {
+    if (typeof context?.[field] !== "string" || context[field].length === 0) {
+      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
+    }
+  }
+  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
+  return {
+    schemaVersion: PROPOSAL_SCHEMA_VERSION,
+    kind: PROPOSAL_KIND,
+    unitId,
+    version,
+    tag,
+    sha: commit,
+    commit,
+    ...typeof tree === "string" && tree.length > 0 ? { tree } : {},
+    ...typeof manifestDigest === "string" && manifestDigest.length > 0 ? { manifestDigest } : {},
+    planDigest,
+    runId,
+    ...publishedAt !== void 0 ? { publishedAt } : {},
+    ...verifyEvidence !== void 0 ? { verifyEvidence } : {},
+    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`
+  };
+}
+var PROPOSAL_SCHEMA_VERSION, PROPOSAL_KIND;
+var init_proposal_document = __esm({
+  "src/core/proposal-document.mjs"() {
+    init_errors3();
+    PROPOSAL_SCHEMA_VERSION = 1;
+    PROPOSAL_KIND = "release-skill/update-proposal";
+    __name(proposalFileName, "proposalFileName");
+    __name(buildProposalDocument, "buildProposalDocument");
+  }
+});
+
 // src/core/proposal-inbox.mjs
 import { execFile as execFileCb14 } from "node:child_process";
 import { promisify as promisify14 } from "node:util";
@@ -136389,37 +136432,6 @@ function parseLsRemote(stdout) {
   }
   return refs;
 }
-function proposalFileName(unitId, version) {
-  if (typeof unitId !== "string" || unitId.length === 0 || typeof version !== "string" || version.length === 0) {
-    throw new ReleaseError(GATE_FAILED, "proposal file name requires unitId and version", { unitId, version });
-  }
-  return `incoming/${unitId}-${version}.json`;
-}
-function buildProposalDocument(context) {
-  const required = ["unitId", "version", "tag", "commit", "planDigest", "runId"];
-  for (const field of required) {
-    if (typeof context?.[field] !== "string" || context[field].length === 0) {
-      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
-    }
-  }
-  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
-  return {
-    schemaVersion: PROPOSAL_SCHEMA_VERSION,
-    kind: PROPOSAL_KIND,
-    unitId,
-    version,
-    tag,
-    sha: commit,
-    commit,
-    ...typeof tree === "string" && tree.length > 0 ? { tree } : {},
-    ...typeof manifestDigest === "string" && manifestDigest.length > 0 ? { manifestDigest } : {},
-    planDigest,
-    runId,
-    ...publishedAt !== void 0 ? { publishedAt } : {},
-    ...verifyEvidence !== void 0 ? { verifyEvidence } : {},
-    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`
-  };
-}
 function buildManualSyncPrompt({ remoteUrl, proposalPath, branch }) {
   const safeRemoteUrl = redactUrlCredentialsIfPresent(remoteUrl);
   return `manual sync required: review proposal ${proposalPath} in downstream repository ${safeRemoteUrl} (branch ${branch}); suggested action: open a pull request or apply the proposal through the downstream governance workflow`;
@@ -136729,15 +136741,15 @@ async function executeProposalInboxLocalFileHook(params) {
     })
   };
 }
-var execFileAsync3, PROPOSAL_SCHEMA_VERSION, PROPOSAL_KIND, PROBE_TIMEOUT_MS, GIT_TIMEOUT_MS, TRANSFER_TIMEOUT_MS, TMP_PREFIX, SAFE_BRANCH_RE, SHA_RE2, NEVER_PROMPT_ENV, AUTH_FAILURE_PATTERNS, TRANSPORT_FAILURE_PATTERNS;
+var execFileAsync3, PROBE_TIMEOUT_MS, GIT_TIMEOUT_MS, TRANSFER_TIMEOUT_MS, TMP_PREFIX, SAFE_BRANCH_RE, SHA_RE2, NEVER_PROMPT_ENV, AUTH_FAILURE_PATTERNS, TRANSPORT_FAILURE_PATTERNS;
 var init_proposal_inbox = __esm({
   "src/core/proposal-inbox.mjs"() {
     init_errors3();
     init_presets();
     init_git_url_policy();
+    init_proposal_document();
+    init_proposal_document();
     execFileAsync3 = promisify14(execFileCb14);
-    PROPOSAL_SCHEMA_VERSION = 1;
-    PROPOSAL_KIND = "release-skill/update-proposal";
     PROBE_TIMEOUT_MS = 3e4;
     GIT_TIMEOUT_MS = 12e4;
     TRANSFER_TIMEOUT_MS = 3e5;
@@ -136779,8 +136791,6 @@ var init_proposal_inbox = __esm({
     __name(stderrTail, "stderrTail");
     __name(classifyNetFailure, "classifyNetFailure");
     __name(parseLsRemote, "parseLsRemote");
-    __name(proposalFileName, "proposalFileName");
-    __name(buildProposalDocument, "buildProposalDocument");
     __name(buildManualSyncPrompt, "buildManualSyncPrompt");
     __name(crossCheckPushedCommit, "crossCheckPushedCommit");
     __name(observeProposalInboxGitPush, "observeProposalInboxGitPush");

package/adapters/claude/schemas/release-project.schema.json

@@ -352,6 +352,7 @@
                   "then": {
                     "required": [
                       "plugin",
+                      "marketplace",
                       "entrySkill"
                     ]
                   }

package/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.9.11.",
+      "Prepare a release plan for version 0.9.13.",
       "Help me understand the release workflow."
     ]
   }

package/adapters/codex/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.11"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.13"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "42faaeb2d272e94efd6075f39b6553540afc307ce64a853a8021eb474fdb380b";
+const __bundleSourceDigest = "e80838f3bb1cdc89e9112bcf4a4a9b5912c963cfb5d9ea27d692c7fb24dd48d6";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136313,6 +136313,49 @@ var init_notify_handoff = __esm({
   }
 });
 
+// src/core/proposal-document.mjs
+function proposalFileName(unitId, version) {
+  if (typeof unitId !== "string" || unitId.length === 0 || typeof version !== "string" || version.length === 0) {
+    throw new ReleaseError(GATE_FAILED, "proposal file name requires unitId and version", { unitId, version });
+  }
+  return `incoming/${unitId}-${version}.json`;
+}
+function buildProposalDocument(context) {
+  const required = ["unitId", "version", "tag", "commit", "planDigest", "runId"];
+  for (const field of required) {
+    if (typeof context?.[field] !== "string" || context[field].length === 0) {
+      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
+    }
+  }
+  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
+  return {
+    schemaVersion: PROPOSAL_SCHEMA_VERSION,
+    kind: PROPOSAL_KIND,
+    unitId,
+    version,
+    tag,
+    sha: commit,
+    commit,
+    ...typeof tree === "string" && tree.length > 0 ? { tree } : {},
+    ...typeof manifestDigest === "string" && manifestDigest.length > 0 ? { manifestDigest } : {},
+    planDigest,
+    runId,
+    ...publishedAt !== void 0 ? { publishedAt } : {},
+    ...verifyEvidence !== void 0 ? { verifyEvidence } : {},
+    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`
+  };
+}
+var PROPOSAL_SCHEMA_VERSION, PROPOSAL_KIND;
+var init_proposal_document = __esm({
+  "src/core/proposal-document.mjs"() {
+    init_errors3();
+    PROPOSAL_SCHEMA_VERSION = 1;
+    PROPOSAL_KIND = "release-skill/update-proposal";
+    __name(proposalFileName, "proposalFileName");
+    __name(buildProposalDocument, "buildProposalDocument");
+  }
+});
+
 // src/core/proposal-inbox.mjs
 import { execFile as execFileCb14 } from "node:child_process";
 import { promisify as promisify14 } from "node:util";
@@ -136389,37 +136432,6 @@ function parseLsRemote(stdout) {
   }
   return refs;
 }
-function proposalFileName(unitId, version) {
-  if (typeof unitId !== "string" || unitId.length === 0 || typeof version !== "string" || version.length === 0) {
-    throw new ReleaseError(GATE_FAILED, "proposal file name requires unitId and version", { unitId, version });
-  }
-  return `incoming/${unitId}-${version}.json`;
-}
-function buildProposalDocument(context) {
-  const required = ["unitId", "version", "tag", "commit", "planDigest", "runId"];
-  for (const field of required) {
-    if (typeof context?.[field] !== "string" || context[field].length === 0) {
-      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
-    }
-  }
-  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
-  return {
-    schemaVersion: PROPOSAL_SCHEMA_VERSION,
-    kind: PROPOSAL_KIND,
-    unitId,
-    version,
-    tag,
-    sha: commit,
-    commit,
-    ...typeof tree === "string" && tree.length > 0 ? { tree } : {},
-    ...typeof manifestDigest === "string" && manifestDigest.length > 0 ? { manifestDigest } : {},
-    planDigest,
-    runId,
-    ...publishedAt !== void 0 ? { publishedAt } : {},
-    ...verifyEvidence !== void 0 ? { verifyEvidence } : {},
-    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`
-  };
-}
 function buildManualSyncPrompt({ remoteUrl, proposalPath, branch }) {
   const safeRemoteUrl = redactUrlCredentialsIfPresent(remoteUrl);
   return `manual sync required: review proposal ${proposalPath} in downstream repository ${safeRemoteUrl} (branch ${branch}); suggested action: open a pull request or apply the proposal through the downstream governance workflow`;
@@ -136729,15 +136741,15 @@ async function executeProposalInboxLocalFileHook(params) {
     })
   };
 }
-var execFileAsync3, PROPOSAL_SCHEMA_VERSION, PROPOSAL_KIND, PROBE_TIMEOUT_MS, GIT_TIMEOUT_MS, TRANSFER_TIMEOUT_MS, TMP_PREFIX, SAFE_BRANCH_RE, SHA_RE2, NEVER_PROMPT_ENV, AUTH_FAILURE_PATTERNS, TRANSPORT_FAILURE_PATTERNS;
+var execFileAsync3, PROBE_TIMEOUT_MS, GIT_TIMEOUT_MS, TRANSFER_TIMEOUT_MS, TMP_PREFIX, SAFE_BRANCH_RE, SHA_RE2, NEVER_PROMPT_ENV, AUTH_FAILURE_PATTERNS, TRANSPORT_FAILURE_PATTERNS;
 var init_proposal_inbox = __esm({
   "src/core/proposal-inbox.mjs"() {
     init_errors3();
     init_presets();
     init_git_url_policy();
+    init_proposal_document();
+    init_proposal_document();
     execFileAsync3 = promisify14(execFileCb14);
-    PROPOSAL_SCHEMA_VERSION = 1;
-    PROPOSAL_KIND = "release-skill/update-proposal";
     PROBE_TIMEOUT_MS = 3e4;
     GIT_TIMEOUT_MS = 12e4;
     TRANSFER_TIMEOUT_MS = 3e5;
@@ -136779,8 +136791,6 @@ var init_proposal_inbox = __esm({
     __name(stderrTail, "stderrTail");
     __name(classifyNetFailure, "classifyNetFailure");
     __name(parseLsRemote, "parseLsRemote");
-    __name(proposalFileName, "proposalFileName");
-    __name(buildProposalDocument, "buildProposalDocument");
     __name(buildManualSyncPrompt, "buildManualSyncPrompt");
     __name(crossCheckPushedCommit, "crossCheckPushedCommit");
     __name(observeProposalInboxGitPush, "observeProposalInboxGitPush");

package/adapters/codex/schemas/release-project.schema.json

@@ -352,6 +352,7 @@
                   "then": {
                     "required": [
                       "plugin",
+                      "marketplace",
                       "entrySkill"
                     ]
                   }

package/adapters/kimi/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/kimi/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.11"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.13"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "42faaeb2d272e94efd6075f39b6553540afc307ce64a853a8021eb474fdb380b";
+const __bundleSourceDigest = "e80838f3bb1cdc89e9112bcf4a4a9b5912c963cfb5d9ea27d692c7fb24dd48d6";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136313,6 +136313,49 @@ var init_notify_handoff = __esm({
   }
 });
 
+// src/core/proposal-document.mjs
+function proposalFileName(unitId, version) {
+  if (typeof unitId !== "string" || unitId.length === 0 || typeof version !== "string" || version.length === 0) {
+    throw new ReleaseError(GATE_FAILED, "proposal file name requires unitId and version", { unitId, version });
+  }
+  return `incoming/${unitId}-${version}.json`;
+}
+function buildProposalDocument(context) {
+  const required = ["unitId", "version", "tag", "commit", "planDigest", "runId"];
+  for (const field of required) {
+    if (typeof context?.[field] !== "string" || context[field].length === 0) {
+      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
+    }
+  }
+  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
+  return {
+    schemaVersion: PROPOSAL_SCHEMA_VERSION,
+    kind: PROPOSAL_KIND,
+    unitId,
+    version,
+    tag,
+    sha: commit,
+    commit,
+    ...typeof tree === "string" && tree.length > 0 ? { tree } : {},
+    ...typeof manifestDigest === "string" && manifestDigest.length > 0 ? { manifestDigest } : {},
+    planDigest,
+    runId,
+    ...publishedAt !== void 0 ? { publishedAt } : {},
+    ...verifyEvidence !== void 0 ? { verifyEvidence } : {},
+    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`
+  };
+}
+var PROPOSAL_SCHEMA_VERSION, PROPOSAL_KIND;
+var init_proposal_document = __esm({
+  "src/core/proposal-document.mjs"() {
+    init_errors3();
+    PROPOSAL_SCHEMA_VERSION = 1;
+    PROPOSAL_KIND = "release-skill/update-proposal";
+    __name(proposalFileName, "proposalFileName");
+    __name(buildProposalDocument, "buildProposalDocument");
+  }
+});
+
 // src/core/proposal-inbox.mjs
 import { execFile as execFileCb14 } from "node:child_process";
 import { promisify as promisify14 } from "node:util";
@@ -136389,37 +136432,6 @@ function parseLsRemote(stdout) {
   }
   return refs;
 }
-function proposalFileName(unitId, version) {
-  if (typeof unitId !== "string" || unitId.length === 0 || typeof version !== "string" || version.length === 0) {
-    throw new ReleaseError(GATE_FAILED, "proposal file name requires unitId and version", { unitId, version });
-  }
-  return `incoming/${unitId}-${version}.json`;
-}
-function buildProposalDocument(context) {
-  const required = ["unitId", "version", "tag", "commit", "planDigest", "runId"];
-  for (const field of required) {
-    if (typeof context?.[field] !== "string" || context[field].length === 0) {
-      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
-    }
-  }
-  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
-  return {
-    schemaVersion: PROPOSAL_SCHEMA_VERSION,
-    kind: PROPOSAL_KIND,
-    unitId,
-    version,
-    tag,
-    sha: commit,
-    commit,
-    ...typeof tree === "string" && tree.length > 0 ? { tree } : {},
-    ...typeof manifestDigest === "string" && manifestDigest.length > 0 ? { manifestDigest } : {},
-    planDigest,
-    runId,
-    ...publishedAt !== void 0 ? { publishedAt } : {},
-    ...verifyEvidence !== void 0 ? { verifyEvidence } : {},
-    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`
-  };
-}
 function buildManualSyncPrompt({ remoteUrl, proposalPath, branch }) {
   const safeRemoteUrl = redactUrlCredentialsIfPresent(remoteUrl);
   return `manual sync required: review proposal ${proposalPath} in downstream repository ${safeRemoteUrl} (branch ${branch}); suggested action: open a pull request or apply the proposal through the downstream governance workflow`;
@@ -136729,15 +136741,15 @@ async function executeProposalInboxLocalFileHook(params) {
     })
   };
 }
-var execFileAsync3, PROPOSAL_SCHEMA_VERSION, PROPOSAL_KIND, PROBE_TIMEOUT_MS, GIT_TIMEOUT_MS, TRANSFER_TIMEOUT_MS, TMP_PREFIX, SAFE_BRANCH_RE, SHA_RE2, NEVER_PROMPT_ENV, AUTH_FAILURE_PATTERNS, TRANSPORT_FAILURE_PATTERNS;
+var execFileAsync3, PROBE_TIMEOUT_MS, GIT_TIMEOUT_MS, TRANSFER_TIMEOUT_MS, TMP_PREFIX, SAFE_BRANCH_RE, SHA_RE2, NEVER_PROMPT_ENV, AUTH_FAILURE_PATTERNS, TRANSPORT_FAILURE_PATTERNS;
 var init_proposal_inbox = __esm({
   "src/core/proposal-inbox.mjs"() {
     init_errors3();
     init_presets();
     init_git_url_policy();
+    init_proposal_document();
+    init_proposal_document();
     execFileAsync3 = promisify14(execFileCb14);
-    PROPOSAL_SCHEMA_VERSION = 1;
-    PROPOSAL_KIND = "release-skill/update-proposal";
     PROBE_TIMEOUT_MS = 3e4;
     GIT_TIMEOUT_MS = 12e4;
     TRANSFER_TIMEOUT_MS = 3e5;
@@ -136779,8 +136791,6 @@ var init_proposal_inbox = __esm({
     __name(stderrTail, "stderrTail");
     __name(classifyNetFailure, "classifyNetFailure");
     __name(parseLsRemote, "parseLsRemote");
-    __name(proposalFileName, "proposalFileName");
-    __name(buildProposalDocument, "buildProposalDocument");
     __name(buildManualSyncPrompt, "buildManualSyncPrompt");
     __name(crossCheckPushedCommit, "crossCheckPushedCommit");
     __name(observeProposalInboxGitPush, "observeProposalInboxGitPush");

package/adapters/kimi/schemas/release-project.schema.json

@@ -352,6 +352,7 @@
                   "then": {
                     "required": [
                       "plugin",
+                      "marketplace",
                       "entrySkill"
                     ]
                   }

package/adapters/workbuddy/.codebuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/workbuddy/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.11"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.13"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "42faaeb2d272e94efd6075f39b6553540afc307ce64a853a8021eb474fdb380b";
+const __bundleSourceDigest = "e80838f3bb1cdc89e9112bcf4a4a9b5912c963cfb5d9ea27d692c7fb24dd48d6";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136313,6 +136313,49 @@ var init_notify_handoff = __esm({
   }
 });
 
+// src/core/proposal-document.mjs
+function proposalFileName(unitId, version) {
+  if (typeof unitId !== "string" || unitId.length === 0 || typeof version !== "string" || version.length === 0) {
+    throw new ReleaseError(GATE_FAILED, "proposal file name requires unitId and version", { unitId, version });
+  }
+  return `incoming/${unitId}-${version}.json`;
+}
+function buildProposalDocument(context) {
+  const required = ["unitId", "version", "tag", "commit", "planDigest", "runId"];
+  for (const field of required) {
+    if (typeof context?.[field] !== "string" || context[field].length === 0) {
+      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
+    }
+  }
+  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
+  return {
+    schemaVersion: PROPOSAL_SCHEMA_VERSION,
+    kind: PROPOSAL_KIND,
+    unitId,
+    version,
+    tag,
+    sha: commit,
+    commit,
+    ...typeof tree === "string" && tree.length > 0 ? { tree } : {},
+    ...typeof manifestDigest === "string" && manifestDigest.length > 0 ? { manifestDigest } : {},
+    planDigest,
+    runId,
+    ...publishedAt !== void 0 ? { publishedAt } : {},
+    ...verifyEvidence !== void 0 ? { verifyEvidence } : {},
+    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`
+  };
+}
+var PROPOSAL_SCHEMA_VERSION, PROPOSAL_KIND;
+var init_proposal_document = __esm({
+  "src/core/proposal-document.mjs"() {
+    init_errors3();
+    PROPOSAL_SCHEMA_VERSION = 1;
+    PROPOSAL_KIND = "release-skill/update-proposal";
+    __name(proposalFileName, "proposalFileName");
+    __name(buildProposalDocument, "buildProposalDocument");
+  }
+});
+
 // src/core/proposal-inbox.mjs
 import { execFile as execFileCb14 } from "node:child_process";
 import { promisify as promisify14 } from "node:util";
@@ -136389,37 +136432,6 @@ function parseLsRemote(stdout) {
   }
   return refs;
 }
-function proposalFileName(unitId, version) {
-  if (typeof unitId !== "string" || unitId.length === 0 || typeof version !== "string" || version.length === 0) {
-    throw new ReleaseError(GATE_FAILED, "proposal file name requires unitId and version", { unitId, version });
-  }
-  return `incoming/${unitId}-${version}.json`;
-}
-function buildProposalDocument(context) {
-  const required = ["unitId", "version", "tag", "commit", "planDigest", "runId"];
-  for (const field of required) {
-    if (typeof context?.[field] !== "string" || context[field].length === 0) {
-      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
-    }
-  }
-  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
-  return {
-    schemaVersion: PROPOSAL_SCHEMA_VERSION,
-    kind: PROPOSAL_KIND,
-    unitId,
-    version,
-    tag,
-    sha: commit,
-    commit,
-    ...typeof tree === "string" && tree.length > 0 ? { tree } : {},
-    ...typeof manifestDigest === "string" && manifestDigest.length > 0 ? { manifestDigest } : {},
-    planDigest,
-    runId,
-    ...publishedAt !== void 0 ? { publishedAt } : {},
-    ...verifyEvidence !== void 0 ? { verifyEvidence } : {},
-    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`
-  };
-}
 function buildManualSyncPrompt({ remoteUrl, proposalPath, branch }) {
   const safeRemoteUrl = redactUrlCredentialsIfPresent(remoteUrl);
   return `manual sync required: review proposal ${proposalPath} in downstream repository ${safeRemoteUrl} (branch ${branch}); suggested action: open a pull request or apply the proposal through the downstream governance workflow`;
@@ -136729,15 +136741,15 @@ async function executeProposalInboxLocalFileHook(params) {
     })
   };
 }
-var execFileAsync3, PROPOSAL_SCHEMA_VERSION, PROPOSAL_KIND, PROBE_TIMEOUT_MS, GIT_TIMEOUT_MS, TRANSFER_TIMEOUT_MS, TMP_PREFIX, SAFE_BRANCH_RE, SHA_RE2, NEVER_PROMPT_ENV, AUTH_FAILURE_PATTERNS, TRANSPORT_FAILURE_PATTERNS;
+var execFileAsync3, PROBE_TIMEOUT_MS, GIT_TIMEOUT_MS, TRANSFER_TIMEOUT_MS, TMP_PREFIX, SAFE_BRANCH_RE, SHA_RE2, NEVER_PROMPT_ENV, AUTH_FAILURE_PATTERNS, TRANSPORT_FAILURE_PATTERNS;
 var init_proposal_inbox = __esm({
   "src/core/proposal-inbox.mjs"() {
     init_errors3();
     init_presets();
     init_git_url_policy();
+    init_proposal_document();
+    init_proposal_document();
     execFileAsync3 = promisify14(execFileCb14);
-    PROPOSAL_SCHEMA_VERSION = 1;
-    PROPOSAL_KIND = "release-skill/update-proposal";
     PROBE_TIMEOUT_MS = 3e4;
     GIT_TIMEOUT_MS = 12e4;
     TRANSFER_TIMEOUT_MS = 3e5;
@@ -136779,8 +136791,6 @@ var init_proposal_inbox = __esm({
     __name(stderrTail, "stderrTail");
     __name(classifyNetFailure, "classifyNetFailure");
     __name(parseLsRemote, "parseLsRemote");
-    __name(proposalFileName, "proposalFileName");
-    __name(buildProposalDocument, "buildProposalDocument");
     __name(buildManualSyncPrompt, "buildManualSyncPrompt");
     __name(crossCheckPushedCommit, "crossCheckPushedCommit");
     __name(observeProposalInboxGitPush, "observeProposalInboxGitPush");

package/adapters/workbuddy/schemas/release-project.schema.json

@@ -352,6 +352,7 @@
                   "then": {
                     "required": [
                       "plugin",
+                      "marketplace",
                       "entrySkill"
                     ]
                   }

package/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.11"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.13"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "42faaeb2d272e94efd6075f39b6553540afc307ce64a853a8021eb474fdb380b";
+const __bundleSourceDigest = "e80838f3bb1cdc89e9112bcf4a4a9b5912c963cfb5d9ea27d692c7fb24dd48d6";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136313,6 +136313,49 @@ var init_notify_handoff = __esm({
   }
 });
 
+// src/core/proposal-document.mjs
+function proposalFileName(unitId, version) {
+  if (typeof unitId !== "string" || unitId.length === 0 || typeof version !== "string" || version.length === 0) {
+    throw new ReleaseError(GATE_FAILED, "proposal file name requires unitId and version", { unitId, version });
+  }
+  return `incoming/${unitId}-${version}.json`;
+}
+function buildProposalDocument(context) {
+  const required = ["unitId", "version", "tag", "commit", "planDigest", "runId"];
+  for (const field of required) {
+    if (typeof context?.[field] !== "string" || context[field].length === 0) {
+      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
+    }
+  }
+  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
+  return {
+    schemaVersion: PROPOSAL_SCHEMA_VERSION,
+    kind: PROPOSAL_KIND,
+    unitId,
+    version,
+    tag,
+    sha: commit,
+    commit,
+    ...typeof tree === "string" && tree.length > 0 ? { tree } : {},
+    ...typeof manifestDigest === "string" && manifestDigest.length > 0 ? { manifestDigest } : {},
+    planDigest,
+    runId,
+    ...publishedAt !== void 0 ? { publishedAt } : {},
+    ...verifyEvidence !== void 0 ? { verifyEvidence } : {},
+    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`
+  };
+}
+var PROPOSAL_SCHEMA_VERSION, PROPOSAL_KIND;
+var init_proposal_document = __esm({
+  "src/core/proposal-document.mjs"() {
+    init_errors3();
+    PROPOSAL_SCHEMA_VERSION = 1;
+    PROPOSAL_KIND = "release-skill/update-proposal";
+    __name(proposalFileName, "proposalFileName");
+    __name(buildProposalDocument, "buildProposalDocument");
+  }
+});
+
 // src/core/proposal-inbox.mjs
 import { execFile as execFileCb14 } from "node:child_process";
 import { promisify as promisify14 } from "node:util";
@@ -136389,37 +136432,6 @@ function parseLsRemote(stdout) {
   }
   return refs;
 }
-function proposalFileName(unitId, version) {
-  if (typeof unitId !== "string" || unitId.length === 0 || typeof version !== "string" || version.length === 0) {
-    throw new ReleaseError(GATE_FAILED, "proposal file name requires unitId and version", { unitId, version });
-  }
-  return `incoming/${unitId}-${version}.json`;
-}
-function buildProposalDocument(context) {
-  const required = ["unitId", "version", "tag", "commit", "planDigest", "runId"];
-  for (const field of required) {
-    if (typeof context?.[field] !== "string" || context[field].length === 0) {
-      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
-    }
-  }
-  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
-  return {
-    schemaVersion: PROPOSAL_SCHEMA_VERSION,
-    kind: PROPOSAL_KIND,
-    unitId,
-    version,
-    tag,
-    sha: commit,
-    commit,
-    ...typeof tree === "string" && tree.length > 0 ? { tree } : {},
-    ...typeof manifestDigest === "string" && manifestDigest.length > 0 ? { manifestDigest } : {},
-    planDigest,
-    runId,
-    ...publishedAt !== void 0 ? { publishedAt } : {},
-    ...verifyEvidence !== void 0 ? { verifyEvidence } : {},
-    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`
-  };
-}
 function buildManualSyncPrompt({ remoteUrl, proposalPath, branch }) {
   const safeRemoteUrl = redactUrlCredentialsIfPresent(remoteUrl);
   return `manual sync required: review proposal ${proposalPath} in downstream repository ${safeRemoteUrl} (branch ${branch}); suggested action: open a pull request or apply the proposal through the downstream governance workflow`;
@@ -136729,15 +136741,15 @@ async function executeProposalInboxLocalFileHook(params) {
     })
   };
 }
-var execFileAsync3, PROPOSAL_SCHEMA_VERSION, PROPOSAL_KIND, PROBE_TIMEOUT_MS, GIT_TIMEOUT_MS, TRANSFER_TIMEOUT_MS, TMP_PREFIX, SAFE_BRANCH_RE, SHA_RE2, NEVER_PROMPT_ENV, AUTH_FAILURE_PATTERNS, TRANSPORT_FAILURE_PATTERNS;
+var execFileAsync3, PROBE_TIMEOUT_MS, GIT_TIMEOUT_MS, TRANSFER_TIMEOUT_MS, TMP_PREFIX, SAFE_BRANCH_RE, SHA_RE2, NEVER_PROMPT_ENV, AUTH_FAILURE_PATTERNS, TRANSPORT_FAILURE_PATTERNS;
 var init_proposal_inbox = __esm({
   "src/core/proposal-inbox.mjs"() {
     init_errors3();
     init_presets();
     init_git_url_policy();
+    init_proposal_document();
+    init_proposal_document();
     execFileAsync3 = promisify14(execFileCb14);
-    PROPOSAL_SCHEMA_VERSION = 1;
-    PROPOSAL_KIND = "release-skill/update-proposal";
     PROBE_TIMEOUT_MS = 3e4;
     GIT_TIMEOUT_MS = 12e4;
     TRANSFER_TIMEOUT_MS = 3e5;
@@ -136779,8 +136791,6 @@ var init_proposal_inbox = __esm({
     __name(stderrTail, "stderrTail");
     __name(classifyNetFailure, "classifyNetFailure");
     __name(parseLsRemote, "parseLsRemote");
-    __name(proposalFileName, "proposalFileName");
-    __name(buildProposalDocument, "buildProposalDocument");
     __name(buildManualSyncPrompt, "buildManualSyncPrompt");
     __name(crossCheckPushedCommit, "crossCheckPushedCommit");
     __name(observeProposalInboxGitPush, "observeProposalInboxGitPush");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/platform-manifest.json

@@ -2,11 +2,11 @@
   "schemaVersion": "1.0.0",
   "platformId": "release-skill",
   "platformName": "release-skill Plugin Platform",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "logicalRoot": "skills-src/",
   "logicalRootDigest": "aec96745b30289ed48d576fbfc98ecd3aacb834f83394be76d4734d7d0fc0ad4",
   "projectionDigest": "e5117d89c9f965e15a1464cc84f542cb1e75a685f842183d0cfc7a105ace5ceb",
-  "projectionId": "release-skill:platform:0.9.11",
+  "projectionId": "release-skill:platform:0.9.13",
   "manifestRequired": true,
   "projectionSources": {
     "skills-src-root": {

package/schemas/release-project.schema.json

@@ -352,6 +352,7 @@
                   "then": {
                     "required": [
                       "plugin",
+                      "marketplace",
                       "entrySkill"
                     ]
                   }

package/src/core/proposal-document.mjs

@@ -0,0 +1,52 @@
+/**
+ * Pure proposal-document projection shared by runtime transports and frozen
+ * postVerify execution hooks. Keep this module free of package dependencies
+ * so a detached public-tag worktree can load it without node_modules.
+ *
+ * @module core/proposal-document
+ */
+
+import { ReleaseError, GATE_FAILED } from './errors.mjs';
+
+/** Proposal document identity. */
+export const PROPOSAL_SCHEMA_VERSION = 1;
+export const PROPOSAL_KIND = 'release-skill/update-proposal';
+
+/** Proposal file location inside the downstream repository. */
+export function proposalFileName(unitId, version) {
+  if (typeof unitId !== 'string' || unitId.length === 0
+    || typeof version !== 'string' || version.length === 0) {
+    throw new ReleaseError(GATE_FAILED, 'proposal file name requires unitId and version', { unitId, version });
+  }
+  return `incoming/${unitId}-${version}.json`;
+}
+
+/**
+ * Build the deterministic downstream proposal from a post-publish context.
+ * Local materialization paths are intentionally excluded.
+ */
+export function buildProposalDocument(context) {
+  const required = ['unitId', 'version', 'tag', 'commit', 'planDigest', 'runId'];
+  for (const field of required) {
+    if (typeof context?.[field] !== 'string' || context[field].length === 0) {
+      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
+    }
+  }
+  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
+  return {
+    schemaVersion: PROPOSAL_SCHEMA_VERSION,
+    kind: PROPOSAL_KIND,
+    unitId,
+    version,
+    tag,
+    sha: commit,
+    commit,
+    ...(typeof tree === 'string' && tree.length > 0 ? { tree } : {}),
+    ...(typeof manifestDigest === 'string' && manifestDigest.length > 0 ? { manifestDigest } : {}),
+    planDigest,
+    runId,
+    ...(publishedAt !== undefined ? { publishedAt } : {}),
+    ...(verifyEvidence !== undefined ? { verifyEvidence } : {}),
+    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`,
+  };
+}

package/src/core/proposal-inbox.mjs

@@ -53,12 +53,16 @@ import {
   describeGitRemoteUrlFailure,
   redactUrlCredentialsIfPresent,
 } from './git-url-policy.mjs';
+import { buildProposalDocument, proposalFileName } from './proposal-document.mjs';
 
-const execFileAsync = promisify(execFileCb);
+export {
+  PROPOSAL_SCHEMA_VERSION,
+  PROPOSAL_KIND,
+  buildProposalDocument,
+  proposalFileName,
+} from './proposal-document.mjs';
 
-/** Proposal document identity. */
-export const PROPOSAL_SCHEMA_VERSION = 1;
-export const PROPOSAL_KIND = 'release-skill/update-proposal';
+const execFileAsync = promisify(execFileCb);
 
 const PROBE_TIMEOUT_MS = 30_000;
 const GIT_TIMEOUT_MS = 120_000;
@@ -187,54 +191,6 @@ function parseLsRemote(stdout) {
 // Proposal document (deterministic projection of the §2.3 context)
 // ---------------------------------------------------------------------------
 
-/** Proposal file location inside the downstream repository. */
-export function proposalFileName(unitId, version) {
-  if (typeof unitId !== 'string' || unitId.length === 0
-    || typeof version !== 'string' || version.length === 0) {
-    throw new ReleaseError(GATE_FAILED, 'proposal file name requires unitId and version', { unitId, version });
-  }
-  return `incoming/${unitId}-${version}.json`;
-}
-
-/**
- * Build the proposal document from the §2.3 context projection. Pure and
- * deterministic. Deliberately EXCLUDES payloadDir (a local materialization
- * path has no place in a downstream-facing document), and optional frozen
- * fields are ABSENT rather than null when the plan did not freeze them.
- *
- * Field set suffices to backfill a missing downstream hub entry:
- * unitId/version/tag/sha/commit/tree/manifestDigest/planDigest/runId/
- * publishedAt/verifyEvidence/changeSummary.
- *
- * @param {object} context - The §2.3 context projection.
- * @returns {object} The proposal document.
- */
-export function buildProposalDocument(context) {
-  const required = ['unitId', 'version', 'tag', 'commit', 'planDigest', 'runId'];
-  for (const field of required) {
-    if (typeof context?.[field] !== 'string' || context[field].length === 0) {
-      throw new ReleaseError(GATE_FAILED, `proposal document requires context field "${field}"`, { field });
-    }
-  }
-  const { unitId, version, tag, commit, tree, manifestDigest, planDigest, runId, publishedAt, verifyEvidence } = context;
-  return {
-    schemaVersion: PROPOSAL_SCHEMA_VERSION,
-    kind: PROPOSAL_KIND,
-    unitId,
-    version,
-    tag,
-    sha: commit,
-    commit,
-    ...(typeof tree === 'string' && tree.length > 0 ? { tree } : {}),
-    ...(typeof manifestDigest === 'string' && manifestDigest.length > 0 ? { manifestDigest } : {}),
-    planDigest,
-    runId,
-    ...(publishedAt !== undefined ? { publishedAt } : {}),
-    ...(verifyEvidence !== undefined ? { verifyEvidence } : {}),
-    changeSummary: `release ${unitId} ${version} (tag ${tag}, commit ${commit})`,
-  };
-}
-
 /**
  * Deterministic manual-sync prompt (closure semantics): delivery success plus
  * this prompt in evidence IS the closed loop — downstream consumption is the