release-skill 0.9.12 → 0.9.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.12",
+  "version": "0.9.14",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/platform-manifest.json

@@ -2,11 +2,11 @@
   "schemaVersion": "1.0.0",
   "platformId": "release-skill",
   "platformName": "release-skill Plugin Platform",
-  "version": "0.9.12",
+  "version": "0.9.14",
   "logicalRoot": "skills-src/",
-  "logicalRootDigest": "aec96745b30289ed48d576fbfc98ecd3aacb834f83394be76d4734d7d0fc0ad4",
-  "projectionDigest": "e5117d89c9f965e15a1464cc84f542cb1e75a685f842183d0cfc7a105ace5ceb",
-  "projectionId": "release-skill:platform:0.9.12",
+  "logicalRootDigest": "8b50c2e36a5f17c2836ef874e5fcc8212691adfad1a09b649478cf6ffa13ea64",
+  "projectionDigest": "0ecf606f8fa746c5c7feab61556325ba9951d68cbe27d12db145abd4b1f6924b",
+  "projectionId": "release-skill:platform:0.9.14",
   "manifestRequired": true,
   "projectionSources": {
     "skills-src-root": {

package/references/02-project-config.md

@@ -188,8 +188,18 @@ releaseUnits:
         - id: notify-downstream
           command: [node, scripts/notify-downstream.mjs]
           phase: postVerify
+      localHostUpdate:
+        plugin: postpublish-example
+        hosts: [claude, codex, kimi, codebuddy, workbuddy]
+        hub:
+          name: example-hub
+          githubHost: github.com
+          repo: example/example-hub
+          ref: refs/heads/main
 ```
 
+`localHostUpdate` 只声明 `postVerify` 完成后的本机更新候选。`plugin` 必须与冻结公开快照中的插件 manifest 身份一致，`hosts` 只能使用现有的五个 local-finish 宿主 ID，`hub.repo` 使用 `owner/repo`，`hub.ref` 必须是完整的 `refs/heads/...` 引用。声明该字段时，同一 `postPublish` 块至少要有一个 `phase: postVerify` Hook。prepare 只校验冻结声明和插件身份，不访问 Hub，也不要求 Hub 预先存在目标版本。
+
 ---
 
 ## 3. 公开源码镜像与分发包

package/references/05-evidence-and-errors.md

@@ -207,7 +207,8 @@ v2 的顶层结构封闭（`additionalProperties: false`），只接受 Schema
 
 ### 5.1 文件保留
 
-- 证据目录在执行完成后不得被自动删除。
+- 不得手工删除运行证据。下一次生产 prepare 会在现有项目锁内执行一次尽力清理，只删除已被更新完整谱系取代的终态谱系，以及没有有效计划或外部写入迹象的封口失败 prepare。
+- 当前 prepare、当前计划对应的全部 run、最近完整谱系、任何非终态或部分成功谱系，以及损坏、越界、身份含糊或信息冲突的目录都受保护。清理以 `.release-skill/runs/` 下的真实直接子目录为单位，不删除计划、批准或 ship 记录；单个删除失败只记录目录基名和错误码，不阻断 prepare。
 - `evidence.jsonl` 为追加写入，不得在执行过程中被截断。
 - `summary.json` 在执行结束时原子写入（writer 单次封口：`finish()` 只能成功一次，封口后 append/finish 均为 no-op；正常命令的成功与失败路径都必须封口）。
 - `states/` 台账为不可变写集：外部检查点成功后立即记账，失败时保留 `PARTIAL` 状态，reconcile 据此跳过已成功步骤。

package/schemas/release-plan.schema.json

@@ -1465,6 +1465,9 @@
           "const": "tag-worktree",
           "description": "时序契约：载荷只能来自 tagCommit 处的 detached worktree，绝不读取工作区状态"
         },
+        "localHostUpdate": {
+          "$ref": "#/definitions/planLocalHostUpdate"
+        },
         "executionBundle": {
           "type": "object",
           "description": "冻结的私有执行包（F-01/T1）：closure 直接采用 Foundation computeResourceClosure() 的返回（排序、去重、受收容读取与摘要均由 Foundation 完成），publicFiles 是从发布单元投影的公开映射。计划是该执行包的唯一事实源：随整个 plan digest 绑定，不维护平行 manifest，也不另造 bundle digest。字节写入计划权威 .release-skill 的 postpublish-bundles/<closure.digest>/<resource.path>；distribute/postVerify 在任何 hook/外部写之前经 Foundation 严格复验并重算闭包，任何不一致即失败。",
@@ -1598,7 +1601,44 @@
             }
           }
         }
-      ]
+      ],
+      "allOf": [{
+        "if": { "required": ["localHostUpdate"] },
+        "then": {
+          "required": ["hooks"],
+          "properties": {
+            "hooks": {
+              "contains": { "type": "object", "required": ["phase"], "properties": { "phase": { "const": "postVerify" } } }
+            }
+          }
+        }
+      }]
+    },
+    "planLocalHostUpdate": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["plugin", "hosts", "hub"],
+      "properties": {
+        "plugin": { "type": "string", "minLength": 1, "pattern": ".*\\S.*" },
+        "hosts": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "type": "string", "enum": ["claude", "codex", "kimi", "codebuddy", "workbuddy"] }
+        },
+        "hub": { "$ref": "#/definitions/planLocalHostHub" }
+      }
+    },
+    "planLocalHostHub": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "repo", "ref"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1, "pattern": ".*\\S.*" },
+        "githubHost": { "type": "string", "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$" },
+        "repo": { "type": "string", "pattern": "^[A-Za-z0-9._-]+\\/[A-Za-z0-9._-]+$" },
+        "ref": { "type": "string", "pattern": "^refs\\/heads\\/[A-Za-z0-9][A-Za-z0-9._-]*(?:\\/[A-Za-z0-9][A-Za-z0-9._-]*)*$" }
+      }
     },
     "planPostPublishHook": {
       "type": "object",

package/schemas/release-project.schema.json

@@ -352,6 +352,7 @@
                   "then": {
                     "required": [
                       "plugin",
+                      "marketplace",
                       "entrySkill"
                     ]
                   }
@@ -1007,7 +1008,47 @@
             "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\).+$"
           },
           "uniqueItems": true
+        },
+        "localHostUpdate": {
+          "$ref": "#/definitions/localHostUpdate"
+        }
+      },
+      "allOf": [{
+        "if": { "required": ["localHostUpdate"] },
+        "then": {
+          "required": ["hooks"],
+          "properties": {
+            "hooks": {
+              "contains": { "type": "object", "required": ["phase"], "properties": { "phase": { "const": "postVerify" } } }
+            }
+          }
         }
+      }]
+    },
+    "localHostUpdate": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["plugin", "hosts", "hub"],
+      "properties": {
+        "plugin": { "type": "string", "minLength": 1, "pattern": ".*\\S.*" },
+        "hosts": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "type": "string", "enum": ["claude", "codex", "kimi", "codebuddy", "workbuddy"] }
+        },
+        "hub": { "$ref": "#/definitions/localHostHub" }
+      }
+    },
+    "localHostHub": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "repo", "ref"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1, "pattern": ".*\\S.*" },
+        "githubHost": { "type": "string", "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$" },
+        "repo": { "type": "string", "pattern": "^[A-Za-z0-9._-]+\\/[A-Za-z0-9._-]+$" },
+        "ref": { "type": "string", "pattern": "^refs\\/heads\\/[A-Za-z0-9][A-Za-z0-9._-]*(?:\\/[A-Za-z0-9][A-Za-z0-9._-]*)*$" }
       }
     },
     "postPublishHook": {

package/skills/release-finish/SKILL.md

@@ -35,7 +35,7 @@ node "${CLAUDE_PLUGIN_ROOT}/bin/release-skill-local-finish.mjs" \
 
 1. `merge.promptRequired=false` 时，发布工作流已经推进或初始化目标分支，不再询问合并。
 2. `merge.promptRequired=true` 时，向用户说明尚未覆盖的发布分支，并询问是否需要合并。用户同意后，先只读核对源分支、目标分支、工作区状态和项目既有合并方式，再用明确的分支名执行；本脚本不猜分支，也不自动推送。
-3. `localHostUpdate.promptRequired=true` 时，列出计划覆盖的宿主，询问是否更新本机插件。两个问题可以一次问完。
+3. `localHostUpdate.promptRequired=true` 时，列出计划覆盖的宿主，询问是否更新本机插件。Hub-backed 目标必须显示其声明的 Hub、插件和宿主，并明确这是人工安装/升级入口，不运行本机命令；Claude/Codex 使用现有 marketplace 管理入口，Kimi 使用冻结 GitHub Release 和现有人工确认路径，CodeBuddy/WorkBuddy 明确人工处理且不能固定 Hub ref。后续“用户同意更新”段仅适用于 `available=true` 的 executable externalActions 目标；Hub-backed 始终人工入口。两个问题可以一次问完。
 
 ## postVerify 提案送达边界
 

package/skills-src/release-finish/SKILL.md

@@ -35,7 +35,7 @@ node "${CLAUDE_PLUGIN_ROOT}/bin/release-skill-local-finish.mjs" \
 
 1. `merge.promptRequired=false` 时，发布工作流已经推进或初始化目标分支，不再询问合并。
 2. `merge.promptRequired=true` 时，向用户说明尚未覆盖的发布分支，并询问是否需要合并。用户同意后，先只读核对源分支、目标分支、工作区状态和项目既有合并方式，再用明确的分支名执行；本脚本不猜分支，也不自动推送。
-3. `localHostUpdate.promptRequired=true` 时，列出计划覆盖的宿主，询问是否更新本机插件。两个问题可以一次问完。
+3. `localHostUpdate.promptRequired=true` 时，列出计划覆盖的宿主，询问是否更新本机插件。Hub-backed 目标必须显示其声明的 Hub、插件和宿主，并明确这是人工安装/升级入口，不运行本机命令；Claude/Codex 使用现有 marketplace 管理入口，Kimi 使用冻结 GitHub Release 和现有人工确认路径，CodeBuddy/WorkBuddy 明确人工处理且不能固定 Hub ref。后续“用户同意更新”段仅适用于 `available=true` 的 executable externalActions 目标；Hub-backed 始终人工入口。两个问题可以一次问完。
 
 ## postVerify 提案送达边界
 

package/src/commands/post-release-local.mjs

@@ -157,6 +157,74 @@ function pluginTargets(plan) {
   ));
 }
 
+function hubTargets(plan) {
+  if (plan?.planVersion === undefined) return [];
+  return normalizePostPublishView(plan).flatMap((declaration) => {
+    const local = declaration.localHostUpdate;
+    if (!local) return [];
+    const hub = { ...local.hub, githubHost: local.hub.githubHost ?? 'github.com' };
+    const unit = (plan.units ?? []).find((candidate) => candidate.id === declaration.unitId);
+    const tag = (plan.externalActions ?? []).find((action) => action.type === 'create-tag' && action.unitId === declaration.unitId)?.parameters?.tag;
+    const manualInstruction = {
+      claude: 'Use Claude’s existing marketplace management entry.',
+      codex: 'Use Codex’s existing marketplace management entry.',
+      kimi: `Use the frozen GitHub Release${tag ? ` (${tag})` : ''} and the existing manual confirmation path; Kimi has no marketplace index.`,
+      codebuddy: 'Handle manually; CodeBuddy cannot pin a Hub ref in this flow.',
+      workbuddy: 'Handle manually; WorkBuddy cannot pin a Hub ref in this flow (it follows the CodeBuddy manual boundary).',
+    };
+    return local.hosts.map((host) => ({
+      targetKind: 'hub-backed',
+      executionMode: 'manual',
+      unitId: declaration.unitId,
+      host,
+      plugin: local.plugin,
+      hub,
+      message: `${manualInstruction[host]} Install or upgrade ${local.plugin} from Hub ${hub.name}; release-skill does not execute or probe this action.`,
+      ...(unit?.publicRepo ? { publicRepo: unit.publicRepo } : {}),
+      ...(tag ? { frozenTag: tag } : {}),
+    }));
+  });
+}
+
+function mergePostReleaseTargets(executableTargets, manualTargets) {
+  const byIdentity = new Map();
+  for (const target of [...executableTargets, ...manualTargets]) {
+    const key = `${target.unitId}\u0000${target.host}\u0000${target.plugin}`;
+    const existing = byIdentity.get(key);
+    if (existing && existing.targetKind === 'hub-backed' && target.targetKind === 'hub-backed') {
+      const sameHub = ['name', 'githubHost', 'repo', 'ref'].every((field) => existing.hub[field] === target.hub[field]);
+      if (!sameHub) throw new Error(`post-release target identity conflict for ${target.unitId}/${target.host}/${target.plugin}`);
+      continue;
+    }
+    const hubMatchesExecutable = (hub, executable) => executable.marketplace === hub.name
+      && executable.marketplaceRepo === hub.repo
+      && executable.marketplaceRef === hub.ref
+      && executable.githubHost === hub.githubHost;
+    // When the same frozen plugin is available through both sources, the
+    // executable action wins only when both frozen source identities agree.
+    if (existing && existing.targetKind !== 'hub-backed' && target.targetKind === 'hub-backed') {
+      if (!hubMatchesExecutable(target.hub, existing)) {
+        throw new Error(`post-release target identity conflict for ${target.unitId}/${target.host}/${target.plugin}`);
+      }
+      continue;
+    }
+    if (existing && existing.targetKind === 'hub-backed' && target.targetKind !== 'hub-backed') {
+      if (!hubMatchesExecutable(existing.hub, target)) {
+        throw new Error(`post-release target identity conflict for ${target.unitId}/${target.host}/${target.plugin}`);
+      }
+      byIdentity.set(key, target);
+      continue;
+    }
+    if (existing && existing.actionId !== target.actionId) {
+      throw new Error(`post-release target identity conflict for ${target.unitId}/${target.host}/${target.plugin}`);
+    }
+    if (!existing) byIdentity.set(key, target);
+  }
+  return [...byIdentity.values()].sort((left, right) => (
+    left.host.localeCompare(right.host) || left.unitId.localeCompare(right.unitId) || left.plugin.localeCompare(right.plugin)
+  ));
+}
+
 function assertExecutableTarget(target) {
   for (const field of [
     'actionId', 'unitId', 'plugin', 'version',
@@ -200,7 +268,9 @@ export function derivePostReleaseChecklist(plan, {
   const uncovered = units.filter((unit) => (
     !BRANCH_ACTION_INCLUDED.has(unit.productionConfig?.branchStrategy)
   ));
-  const targets = pluginTargets(plan);
+  const executableTargets = pluginTargets(plan);
+  const manualTargets = hubTargets(plan);
+  const targets = mergePostReleaseTargets(executableTargets, manualTargets);
   const hasPendingPostVerify = postVerifyHooks(plan).length > 0 && !postVerifyComplete && targets.length > 0;
   const hasStatePath = typeof statePath === 'string' && statePath.length > 0;
   const selectedUnitIds = Array.isArray(unitIds) ? unitIds : undefined;
@@ -220,7 +290,7 @@ export function derivePostReleaseChecklist(plan, {
     },
     localHostUpdate: {
       promptRequired: targets.length > 0 && !hasPendingPostVerify,
-      available: targets.length > 0 && !hasPendingPostVerify,
+      available: executableTargets.length > 0 && !hasPendingPostVerify,
       ...(!hasPendingPostVerify && runPath ? { runPath } : {}),
       ...(hasPendingPostVerify ? {
         ...(hasStatePath ? { nextSteps: [buildShipNextStep({ root, statePath, unitIds: selectedUnitIds })] } : {}),
@@ -1359,7 +1429,7 @@ async function updateLocalHostPluginsInternal({
   const selected = new Set(Array.isArray(selectedHosts) ? selectedHosts : []);
   const unknown = [...selected].filter((host) => !checklist.localHostUpdate.hosts.includes(host));
   if (unknown.length > 0) throw new Error(`selected hosts are not declared by the plan: ${unknown.join(', ')}`);
-  const targets = checklist.localHostUpdate.targets.filter((item) => selected.has(item.host));
+  const targets = pluginTargets(plan).filter((item) => selected.has(item.host));
   for (const target of targets) assertExecutableTarget(target);
 
   const results = [];

package/src/commands/prepare.mjs

@@ -77,6 +77,7 @@ import { acquireProjectLock } from '../artifacts/project-lock.mjs';
 import { observePreviousPublicBaseline } from '../core/previous-public-baseline.mjs';
 import { verifyFrozenNpmTarballContract } from '../adapters/npm.mjs';
 import { createProductionPrepareRunDir } from '../core/run.mjs';
+import { cleanupRunRetention } from '../core/run-retention.mjs';
 import {
   PLATFORMS,
   normalizeHostId,
@@ -895,6 +896,32 @@ async function processSnapshots(config, root, evidence, runDir, production = fal
   return { unitResults, snapshotDigests };
 }
 
+/** Validate Hub-backed plugin identities against the already frozen snapshot. */
+async function validateFrozenLocalHostUpdatePlugins(unitResults) {
+  for (const { unit, manifest } of unitResults) {
+    const declaration = unit.postPublish?.localHostUpdate;
+    if (!declaration) continue;
+    const manifestEntries = (manifest.entries ?? [])
+      .filter((entry) => /(?:^|\/)\.(?:claude|codex|kimi|codebuddy)-plugin\/plugin\.json$/u.test(entry.path));
+    const identities = new Set();
+    for (const entry of manifestEntries) {
+      try {
+        const parsed = JSON.parse(await readFile(resolve(manifest.outputDir, entry.path), 'utf8'));
+        if (typeof parsed?.name === 'string' && parsed.name.trim().length > 0) identities.add(parsed.name);
+      } catch (cause) {
+        throw new ReleaseError(GATE_FAILED, `unit "${unit.id}" localHostUpdate plugin manifest is unreadable`, {
+          unitId: unit.id, path: entry.path, cause: cause.code ?? cause.message,
+        });
+      }
+    }
+    if (identities.size === 0 || identities.size !== 1 || !identities.has(declaration.plugin)) {
+      throw new ReleaseError(GATE_FAILED, `unit "${unit.id}" localHostUpdate.plugin "${declaration.plugin}" does not match a frozen public plugin manifest`, {
+        unitId: unit.id, plugin: declaration.plugin, frozenPlugins: [...identities].sort(),
+      });
+    }
+  }
+}
+
 function resolveProductionBranch(unit, version) {
   const tagTemplate = unit.version?.tagTemplate ?? `${unit.id}-v{version}`;
   const tag = tagTemplate.replace('{version}', version);
@@ -3326,6 +3353,34 @@ export async function prepareRelease(options) {
   const evidence = createEvidenceWriter({ runDir, command: 'prepare', clock });
 
   try {
+    // R14-01: production prepare performs one best-effort retention pass only
+    // after the current run/evidence authority exists and before high-cost
+    // config, snapshot, and hook work begins. It never blocks prepare.
+    if (production) {
+      try {
+        const retention = await (options.runRetentionFn ?? cleanupRunRetention)({
+          releaseDir,
+          currentRunDir: runDir,
+        });
+        await evidence.append({
+          phase: 'run-retention',
+          status: 'completed',
+          scanned: retention.scanned,
+          deleted: retention.deleted,
+          errors: retention.errors,
+        });
+      } catch (error) {
+        await evidence.append({
+          phase: 'run-retention',
+          status: 'warning',
+          scanned: 0,
+          deleted: 0,
+          errors: 1,
+          error: { code: error?.code ?? 'RUN_RETENTION_FAILED', message: error?.message ?? String(error) },
+        });
+      }
+    }
+
     // --- Step 1: Load and validate config ---
     await evidence.append({ phase: 'config', status: 'started' });
 
@@ -4212,6 +4267,7 @@ export async function prepareRelease(options) {
     const { unitResults, snapshotDigests } = await processSnapshots(
       selectedConfig, realRoot, evidence, runDir, production,
     );
+    await validateFrozenLocalHostUpdatePlugins(unitResults);
 
     // Snapshot gates always run on disposable writable copies. The public
     // snapshot authority is re-digested after every gate and is never exposed

package/src/core/postpublish.mjs

@@ -42,6 +42,9 @@ const SAFE_ID_RE = /^[a-z0-9][a-z0-9._-]*$/;
 
 /** Branch pattern (leading alphanumeric blocks option-like names). */
 const BRANCH_RE = /^[A-Za-z0-9][A-Za-z0-9._/-]*$/;
+const LOCAL_HOSTS = new Set(['claude', 'codex', 'kimi', 'codebuddy', 'workbuddy']);
+const HUB_HOST_RE = /^[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/u;
+const HUB_REF_RE = /^refs\/heads\/[A-Za-z0-9][A-Za-z0-9._-]*(?:\/[A-Za-z0-9][A-Za-z0-9._-]*)*$/u;
 
 /** Frozen payload source binding: payload only ever comes from the tag worktree. */
 export const PAYLOAD_SOURCE_TAG_WORKTREE = 'tag-worktree';
@@ -478,6 +481,54 @@ export function validatePostPublishDeclaration(postPublish, options = {}) {
     fail(`${unitLabel}assertMainVersionAhead must be a boolean`);
   }
 
+  const localHostUpdate = postPublish.localHostUpdate;
+  if (localHostUpdate !== undefined) {
+    if (!localHostUpdate || typeof localHostUpdate !== 'object' || Array.isArray(localHostUpdate)) {
+      fail(`${unitLabel}localHostUpdate must be a non-null object`);
+    }
+    if (typeof localHostUpdate.plugin !== 'string' || localHostUpdate.plugin.trim().length === 0) {
+      fail(`${unitLabel}localHostUpdate.plugin must be a non-empty string`);
+    }
+    if (!Array.isArray(localHostUpdate.hosts) || localHostUpdate.hosts.length === 0) {
+      fail(`${unitLabel}localHostUpdate.hosts must be a non-empty array`);
+    }
+    const hosts = new Set();
+    for (const host of localHostUpdate.hosts) {
+      if (typeof host !== 'string' || !LOCAL_HOSTS.has(host)) {
+        fail(`${unitLabel}localHostUpdate.hosts contains unsupported host ${JSON.stringify(host)}`);
+      }
+      if (hosts.has(host)) fail(`${unitLabel}localHostUpdate.hosts contains duplicate host "${host}"`);
+      hosts.add(host);
+    }
+    const hub = localHostUpdate.hub;
+    if (!hub || typeof hub !== 'object' || Array.isArray(hub)) {
+      fail(`${unitLabel}localHostUpdate.hub must be a non-null object`);
+    }
+    for (const field of ['name', 'repo', 'ref']) {
+      if (typeof hub[field] !== 'string' || hub[field].trim().length === 0) {
+        fail(`${unitLabel}localHostUpdate.hub.${field} must be a non-empty string`);
+      }
+    }
+    if (hub.githubHost !== undefined && (typeof hub.githubHost !== 'string' || !HUB_HOST_RE.test(hub.githubHost))) {
+      fail(`${unitLabel}localHostUpdate.hub.githubHost must be a non-empty string when provided`);
+    }
+    if (!/^[A-Za-z0-9._-]+\/[A-Za-z0-9._-]+$/u.test(hub.repo)) {
+      fail(`${unitLabel}localHostUpdate.hub.repo must be owner/repo`);
+    }
+    if (!HUB_REF_RE.test(hub.ref)) {
+      fail(`${unitLabel}localHostUpdate.hub.ref must be a refs/heads/... reference`);
+    }
+    if (!(postPublish.hooks ?? []).some((hook) => hook.phase === 'postVerify')) {
+      fail(`${unitLabel}localHostUpdate requires at least one postVerify hook`);
+    }
+    if (typeof options.expectedPlugin === 'string' && localHostUpdate.plugin !== options.expectedPlugin) {
+      fail(`${unitLabel}localHostUpdate.plugin must match the frozen public plugin manifest`, {
+        expectedPlugin: options.expectedPlugin,
+        plugin: localHostUpdate.plugin,
+      });
+    }
+  }
+
   return postPublish;
 }