release-skill 0.9.17 → 0.9.18

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.17",
+  "version": "0.9.18",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codebuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.17",
+  "version": "0.9.18",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.17",
+  "version": "0.9.18",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.9.17.",
+      "Prepare a release plan for version 0.9.18.",
       "Help me understand the release workflow."
     ]
   }

package/.cursor-plugin/plugin.json

@@ -0,0 +1,10 @@
+{
+  "name": "release-skill",
+  "version": "0.9.18",
+  "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
+  "author": {
+    "name": "广州市风荷科技有限公司"
+  },
+  "license": "Apache-2.0",
+  "skills": "./adapters/cursor/skills/"
+}

package/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.17",
+  "version": "0.9.18",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.qoder-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.17",
+  "version": "0.9.18",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/CHANGELOG.md

@@ -1,9 +1,43 @@
 # Changelog
 
-<!-- release-skill:changelog:start version=0.9.17 locale=en baseline=sha256:83fe967a104a1b324ea1b704cfc6ee67d6a2999f3d6c0e2d92411435fa6986a2 -->
+<!-- release-skill:changelog:start version=0.9.18 locale=en baseline=sha256:486d52ac38ecb11f043c79661728004fb1c1593089915741867cdc0f449be275 -->
+## [0.9.18] - 2026-09-11
+
+0.9.18 is a local source candidate that adds first-class Cursor packaging, Foundation-backed host verification, and a final local distribution path for Claude, Codex, Kimi, CodeBuddy, WorkBuddy, Qoder, and Cursor. The three Foundation dependencies remain pinned to the exact 0.21.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+
+### Security
+
+- Cursor must be closed before its plugin tree is scanned or replaced. Failed upgrades preserve or restore a complete old or new directory instead of publishing a mixed tree.
+- Host verification receives only caller-declared roots and records mechanism observations separately from release-domain publication and verification state.
+- Hub publication remains a compare-and-swap operation. A partial Hub publication is never rolled back or force-pushed automatically.
+
+### Added
+
+- The npm package now includes `.cursor-plugin/plugin.json` and a self-contained `adapters/cursor/` projection with all release-skill Skills and runtime resources.
+- Release verification can invoke Foundation 0.21.0 host verification with explicit executable and user-state roots, including Cursor project-level plugin verification.
+- The final local updater can distribute the verified release to the declared Claude, Codex, Kimi, CodeBuddy, WorkBuddy, Qoder, and Cursor installations.
+- Skill Family Hub remains the central marketplace. Its release entry is published through the existing Git Data API after release verification.
+
+### Changed
+
+- Local host updates verify the frozen snapshot and manifest identity before installation, and Cursor updates use Foundation fixed-set publication for first install and atomic full-directory replacement for upgrades.
+- Platform generation, public-file projection, package allowlists, schemas, and release-finish guidance now treat Cursor as a declared host and adapter.
+
+### Fixed
+
+- Cursor plugin names reject underscores so generated local plugin directories remain compatible with Cursor's manifest requirements.
+- The package's native prebuild allowlist and fixed resource-closure checks now include every generated adapter, including Cursor.
+
+### Upgrade Notes
+
+Upgrade from 0.9.17 to obtain Cursor packaging and local installation, the Foundation-backed host verification bridge, and the unified seven-host local finish path. Remove the old release-skill standalone marketplace; use the ifoohoo/skill-family-hub repository and Hub-qualified plugin id release-skill@skill-family-hub. Reload each host after updating; an `UPDATED` filesystem result alone does not prove that the running host loaded the new version.
+<!-- release-skill:changelog:end version=0.9.18 locale=en -->
+
+
+<!-- release-skill:changelog:start version=0.9.17 locale=en baseline=sha256:b7b382ee18c66d75612df7c83aa80439100237bf7d1ce3e36dc0cf1a038ed051 -->
 ## [0.9.17] - 2026-09-09
 
-0.9.17 is a local source candidate that adds explicit offline verification of historical release records and a self-contained Qoder projection, while preserving the setup-root and Kimi initial-directory trust fixes. The three Foundation dependencies remain pinned to the exact 0.17.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance; it also does not establish Hub acceptance.
+0.9.17 is a local source candidate that adds explicit offline verification of historical release records and a self-contained Qoder projection, while preserving the setup-root and Kimi initial-directory trust fixes. The three Foundation dependencies are pinned to the exact 0.21.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance; it also does not establish Hub acceptance.
 
 ### Security
 

package/INSTALL.md

@@ -2,7 +2,7 @@
 
 [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.9.17 -->
+<!-- release-skill:release-version: 0.9.18 -->
 ## Prerequisites
 
 - Node.js 22.0.0 or later
@@ -125,7 +125,7 @@ tag pinned to the exact version (never the bare repository URL, which installs
 the latest release or default branch), confirm the trust prompt, then reload:
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.17
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.18
    /plugins reload
    ```
 
@@ -146,13 +146,22 @@ The effective configuration root is explicit `kimiHome`, then
 `KIMI_CODE_HOME`, then `~/.kimi-code`. The TUI process and post-operation
 observation use that same root. The TUI working directory is the resolved release
 project root passed through `--root`. After explicit confirmation of the frozen
-plan and selection of Kimi for update, release-finish accepts only the initial
-standard `Trust this folder?` dialog with `No, exit` selected and
-`Trust this folder` available. It moves to that row, verifies the new selection,
-confirms it, and waits for the known command prompt. Unknown rows or selections,
-a failed move, timeout, early exit, or a folder-trust dialog after the plugin
-command fails closed. release-finish still strips ANSI/OSC control sequences and
-soft wrapping before it checks the frozen repository, tag, and selected
+plan and selection of Kimi for update, release-finish reads the complete initial
+`Trust this folder?` dialog and requires exactly one positive
+`Trust this folder` action and exactly one selected action. If the positive action
+is already selected, it confirms without sending a direction key. If a known
+rejection action is selected, it moves once according to the action's position,
+reads the complete dialog again, and verifies the positive selection before
+confirming. Unknown or duplicate actions, a missing or duplicate positive action,
+an unverifiable selection, a failed move, timeout, early exit, or a folder-trust
+dialog after the plugin command fails closed. When a later Kimi version presents
+a new reproducible blocking layout, capture the Kimi version, visible actions,
+selected action, and their relationship first. Add the nearest regression and
+continue compatibility work when those facts uniquely identify the current
+directory, positive trust action, and selection result; stop and escalate when
+directory identity or action semantics remain ambiguous. release-finish still
+strips ANSI/OSC control sequences and soft wrapping before it checks the frozen
+repository, tag, and selected
 `Trust and install` action inside the plugin trust dialog. This local check is
 not part of `verify` and does not alter the `VERIFIED` release state.
 
@@ -198,6 +207,44 @@ For a single session from a source checkout you can also point CodeBuddy at the
 generated plugin directory with `--plugin-dir <path>/adapters/workbuddy`; the
 adapter never references files outside its own directory.
 
+## Install as a Cursor Local plugin
+
+`adapters/cursor/` contains `.cursor-plugin/plugin.json`, all public Skills and a
+self-contained runtime. Skills resolve the plugin from the absolute `SKILL.md`
+path supplied by Cursor and validate the root manifest; no plugin-root environment
+variable is required.
+
+Declare `cursor` in `postPublish.localHostUpdate.hosts` and set
+`cursor.sourcePath: adapters/cursor`. The directory and manifest identity are
+frozen with the public snapshot. Optional `cursor.dependencyInstall:
+npm-ci-ignore-scripts` installs lockfile dependencies in a candidate outside the
+scanner root.
+
+On macOS, quit Cursor and run the installed finishing entry. Supply the real
+absolute plugins root, commonly `.cursor/plugins` inside the user directory:
+
+```bash
+node <installed-plugin-root>/bin/release-skill-local-finish.mjs \
+  --root <release-project-root> --plan <frozen-plan-path> --run <completed-run-path> \
+  --update-local-hosts --hosts cursor --confirm-plan <planDigest> \
+  --cursor-plugins-root <absolute-cursor-plugins-root> --json
+```
+
+The command verifies the plan, run lineage and frozen snapshot before installing
+the complete plugin at `<cursor-plugins-root>/local/<plugin>`. First installation
+never overwrites an existing directory. Upgrades atomically exchange whole
+directories and retain the old version at `backups/<plugin>/release-*/plugin`.
+An identical version and full closure returns `ALREADY_CURRENT`; a completed
+write returns `UPDATED` with restart instructions. Indeterminate exchanges retain
+both sides for manual inspection; do not retry blindly. If backup relocation
+fails while the exchanged mapping remains provable, the script restores the old
+directory and reports failure.
+
+Restart Cursor or run Reload Window, then verify the Local source, version,
+public Skills and a real business invocation separately. Installation does not
+prove loading and never changes `VERIFIED`. Other operating systems, a running
+Cursor process or unavailable process observation return `MANUAL_REQUIRED`.
+
 ## Install as a Qoder plugin
 
 The npm package ships `.qoder-plugin/plugin.json` and a generated,

package/INSTALL.zh-CN.md

@@ -2,7 +2,7 @@
 
 [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.9.17 -->
+<!-- release-skill:release-version: 0.9.18 -->
 ## 前置条件
 
 - Node.js 22.0.0 或更高版本
@@ -113,7 +113,7 @@ release-skill 当前只采用并验证 Kimi Code 的交互式 TUI 路径，**无
 （切勿使用裸仓库地址，它会安装最新 release 或默认分支），确认信任提示后重新加载：
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.17
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.18
    /plugins reload
    ```
 
@@ -127,11 +127,16 @@ release-finish 会重新读取 Kimi 的受管安装根，不复用操作前的
 
 有效配置根依次取显式 `kimiHome`、`KIMI_CODE_HOME`、`~/.kimi-code`，TUI 进程和
 操作后观察使用同一根，TUI 工作目录固定为 `--root` 指定的当前发布项目。用户确认冻结
-计划并显式选择更新 Kimi 后，release-finish 只接受初始标准 `Trust this folder?` 界面：
-当前必须选中 `No, exit`，且存在 `Trust this folder` 目标行。流程移动到目标行，重新确认
-选中项，再提交并等待已知命令提示符。出现未知行或选中项、移动后无法确认、超时、提前
-退出，或者插件命令发出后再次出现目录信任时，该宿主失败并停止。release-finish 仍会先
-清理 ANSI/OSC 控制序列和软换行，再在插件信任对话框内核对冻结仓库、标签和当前选中的
+计划并显式选择更新 Kimi 后，release-finish 会读取完整的初始 `Trust this folder?`
+对话框，并要求其中只有一个正向项 `Trust this folder` 和一个选中项。正向项已经选中时，
+流程不发送方向键，直接确认；已知拒绝项选中时，流程按它与正向项的相对位置移动一次，
+重新读取完整对话框并确认正向项已选中，然后才提交。出现未知或重复选项、正向项缺失或
+重复、选中状态无法核验、移动后无法确认、超时、提前退出，或者插件命令发出后再次出现
+目录信任时，该宿主失败并停止。若后续 Kimi 版本出现新的可复现阻断界面，先记录 Kimi
+版本、可见选项、选中项及其相对关系；这些事实足以唯一确认当前目录、正向信任项和选择
+结果时，在最近测试补回归与兼容并继续，目录身份或选项语义仍有歧义时停止并交回主会话。
+release-finish 仍会先清理 ANSI/OSC 控制序列和软换行，再在插件信任对话框内核对冻结
+仓库、标签和当前选中的
 `Trust and install`。这个本机检查不属于 `verify`，也不会改变
 已经完成的 `VERIFIED` 发布状态。
 
@@ -189,6 +194,35 @@ qoder plugins install release-skill@skill-family-hub --scope user --json
 或新开会话，再由真实发现的 release-skill 完成一次只读发布业务调用，才能宣称新版已
 生效。这些本机结果不会改变 `VERIFIED`。
 
+## 安装为 Cursor 本地插件
+
+包内 `adapters/cursor/` 包含 `.cursor-plugin/plugin.json`、全部公开 Skill 和自足运行资源。
+Skill 根据宿主实际加载的 `SKILL.md` 绝对路径定位插件根，并检查根清单；不依赖插件根环境变量。
+
+发布项目在 `postPublish.localHostUpdate.hosts` 中声明 `cursor`，并设置
+`cursor.sourcePath: adapters/cursor`。该相对目录与清单身份随公开快照冻结；需要锁文件依赖时，
+可设置 `cursor.dependencyInstall: npm-ci-ignore-scripts`，脚本只在扫描根外的候选中安装依赖。
+
+macOS 上先退出 Cursor，再运行已安装版本的收尾入口。插件根必须使用真实绝对路径；
+常见位置是用户目录下的 `.cursor/plugins`，命令不会自动推断它。
+
+```bash
+node <installed-plugin-root>/bin/release-skill-local-finish.mjs \
+  --root <release-project-root> --plan <frozen-plan-path> --run <completed-run-path> \
+  --update-local-hosts --hosts cursor --confirm-plan <planDigest> \
+  --cursor-plugins-root <absolute-cursor-plugins-root> --json
+```
+
+命令先复验计划、运行谱系和冻结快照，再把完整插件放到 `<cursor-plugins-root>/local/<plugin>`。
+首次安装不覆盖已有目录；升级整体交换目录，并把旧版保存到 `backups/<plugin>/release-*/plugin`。
+相同版本和完整闭包一致时返回 `ALREADY_CURRENT`；写入成功返回 `UPDATED` 和重启提示。
+交换结果不确定时保留现场并要求人工检查，禁止原样重试。备份迁移失败且交换映射可确认时，
+脚本恢复原目录并报告失败。
+
+重启 Cursor 或执行 Reload Window 后，分别核对 Local 来源、版本、公开 Skill 和一次实际业务调用。
+安装成功不等于新版已加载；本机结果不改变 `VERIFIED`。其他操作系统、Cursor 仍运行或进程状态
+无法判断时，自动安装返回 `MANUAL_REQUIRED`。
+
 ## 消费端安装验证边界
 
 **何时执行验证。** 消费端安装验证仅在安装契约关键文件相对已确认公开基线发生变化时执行；

package/README.md

@@ -2,7 +2,7 @@
 
 [简体中文](README.zh-CN.md) · Installation: [English](INSTALL.md) / [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.9.17 -->
+<!-- release-skill:release-version: 0.9.18 -->
 Release preparation for Claude Code, CodeBuddy, WorkBuddy, Codex, and Kimi Code, with human-edited files kept intact.
 
 release-skill helps a maintainer answer three questions: what will be released,
@@ -14,36 +14,40 @@ Setup surfaces only the deterministic `compactSummary` review view; the full
 report stays in a temporary session directory.
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.17** (2026-09-09)
+**0.9.18** (2026-09-11)
 
-0.9.17 is a local source candidate that adds explicit offline verification of historical release records and a self-contained Qoder projection, while preserving the setup-root and Kimi initial-directory trust fixes. The three Foundation dependencies remain pinned to the exact 0.17.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance; it also does not establish Hub acceptance.
+0.9.18 is a local source candidate that adds first-class Cursor packaging, Foundation-backed host verification, and a final local distribution path for Claude, Codex, Kimi, CodeBuddy, WorkBuddy, Qoder, and Cursor. The three Foundation dependencies remain pinned to the exact 0.21.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
 
 **Security**
 
-- Offline verification reads only paths explicitly supplied on the command line and redacts local path details from its JSON result. Historical consistency does not prove that records are globally latest or that remote objects still exist.
-- Qoder remains outside release distributions and publication checkpoints. The updater does not add a marketplace, perform a first install, uninstall, or reload the current session; `UPDATED` does not mean the new plugin has been loaded.
-- Any later central Skill Family Hub publication uses the existing Git Data API with compare-and-swap. A partial Hub publication remains recoverable and is never rolled back or force-pushed automatically.
+- Cursor must be closed before its plugin tree is scanned or replaced. Failed upgrades preserve or restore a complete old or new directory instead of publishing a mixed tree.
+- Host verification receives only caller-declared roots and records mechanism observations separately from release-domain publication and verification state.
+- Hub publication remains a compare-and-swap operation. A partial Hub publication is never rolled back or force-pushed automatically.
 
 **Added**
 
-- The public `release-skill verify-records` CLI checks caller-supplied plan, approval, target-run, and predecessor-run bytes. It reports `CONSISTENT`, `CONTRADICTED`, or `INSUFFICIENT` without scanning `.release-skill`, following paths from records, contacting remotes, writing files, or changing release state.
-- The npm package now includes `.qoder-plugin/plugin.json` and a self-contained `adapters/qoder/` projection. The existing post-release updater can update an already installed user-scope Qoder plugin only after the selected Hub source and frozen payload match.
+- The npm package now includes `.cursor-plugin/plugin.json` and a self-contained `adapters/cursor/` projection with all release-skill Skills and runtime resources.
+- Release verification can invoke Foundation 0.21.0 host verification with explicit executable and user-state roots, including Cursor project-level plugin verification.
+- The final local updater can distribute the verified release to the declared Claude, Codex, Kimi, CodeBuddy, WorkBuddy, Qoder, and Cursor installations.
+- Skill Family Hub remains the central marketplace. Its release entry is published through the existing Git Data API after release verification.
 
 **Changed**
 
-- The release-finish setup continuation uses the current `--root` release project directly. It no longer asks for a second project path, while project-level readiness and host-specific loading checks remain distinct.
+- Local host updates verify the frozen snapshot and manifest identity before installation, and Cursor updates use Foundation fixed-set publication for first install and atomic full-directory replacement for upgrades.
+- Platform generation, public-file projection, package allowlists, schemas, and release-finish guidance now treat Cursor as a declared host and adapter.
 
 **Fixed**
 
-- An authorized Kimi update can confirm the standard initial `Trust this folder?` dialog for the current release project before continuing. Unknown rows, selections, repeated trust dialogs, timeout, or early exit still stop that host.
+- Cursor plugin names reject underscores so generated local plugin directories remain compatible with Cursor's manifest requirements.
+- The package's native prebuild allowlist and fixed resource-closure checks now include every generated adapter, including Cursor.
 
 **Upgrade Notes**
 
-Upgrade from 0.9.16 to use `release-skill verify-records`, the Qoder package projection, and the setup/Kimi fixes. Remove the old release-skill standalone marketplace; use the ifoohoo/skill-family-hub repository and Hub-qualified plugin id release-skill@skill-family-hub. The central Skill Family Hub must accept the Qoder entry before marketplace installation can begin. Real Qoder and Kimi installation, reload, and business invocation remain separate authorized follow-up work.
+Upgrade from 0.9.17 to obtain Cursor packaging and local installation, the Foundation-backed host verification bridge, and the unified seven-host local finish path. Remove the old release-skill standalone marketplace; use the ifoohoo/skill-family-hub repository and Hub-qualified plugin id release-skill@skill-family-hub. Reload each host after updating; an `UPDATED` filesystem result alone does not prove that the running host loaded the new version.
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **Current boundary:** v0.9.17 is the current source candidate. This README
+> **Current boundary:** v0.9.18 is the current source candidate. This README
 > records intended scope and verification boundaries; it is not evidence of
 > publication, consumer-installation verification, or independent acceptance.
 > Release availability must be established from the corresponding release records
@@ -67,7 +71,7 @@ Upgrade from 0.9.16 to use `release-skill verify-records`, the Qoder package pro
 > publish global preflight.
 
 <!-- release-skill:capability:safe-first-command -->
-> **Production path verified since the v0.1.1 milestone; v0.9.17 is the current
+> **Production path verified since the v0.1.1 milestone; v0.9.18 is the current
 > source candidate. Its README does not establish publication,
 > consumer-installation verification, or independent acceptance.**
 > The npm-installed CLI is the supported user entry. Source checkout
@@ -96,10 +100,11 @@ checkpoints remain intact and use matching-version recovery. Evidence v1 stays
 read-only; v2 uses a closed top level with phase extensions in `details`.
 Summaries and recovery suggestions are diagnostic, never publication authority.
 
-The current 0.9.17 candidate includes the narrow R-05 Hook cache v2 consumer
+The current 0.9.18 candidate includes the narrow R-05 Hook cache v2 consumer
 path, the public `postverify` path, and the stable isolated install-tree record
 path (A2/A3). It also adds the explicit-input `verify-records` command and a
-self-contained Qoder projection. Skill Family Hub remains the single
+self-contained Qoder projection, first-class Cursor packaging, and the
+Foundation-backed host verification bridge. Skill Family Hub remains the single
 marketplace source. The candidate
 also makes the `release-prepare` Skill organize existing assessment, refresh,
 focused-check, and prepare entry points without adding another execution
@@ -107,10 +112,10 @@ engine. `prepare --help` and `prepare -h` now return before configuration,
 locks, runs, or hooks can observe the request. The `release-finish` Skill can
 also report the source branch and continue into a configured setup entry after
 the selected host has loaded the released plugin. This candidate still excludes
-R-02 safe full-tree inventory and real Kimi/WorkBuddy/Qoder marketplace
-installation and invocation gates. The central Hub has not yet accepted the
-release-skill Qoder entry.
-Foundation dependencies are pinned to the three released 0.17.0 packages.
+R-02 safe full-tree inventory. Marketplace installation and live invocation
+remain host-level post-release checks; Cursor is distributed through its
+supported local-plugin directory rather than a Hub marketplace entry.
+Foundation dependencies are pinned to the three released 0.21.0 packages.
 For Kimi/CodeBuddy plans that still use the bundled-family distribution form,
 verify calls the released
 `runPluginVerification` entry with the complete frozen payload and records a
@@ -275,7 +280,13 @@ Qoder entry; the generated adapter alone does not prove Hub consumption. See
 [INSTALL.md](INSTALL.md#install-as-a-qoder-plugin) for the bounded install and
 post-release update contract.
 
-See [INSTALL.md](INSTALL.md) for CodeBuddy, Codex, Kimi Code, and Qoder commands.
+**Cursor:** `adapters/cursor/` is a complete Local plugin. After release verification,
+`release-finish` can install or atomically upgrade its frozen tree on macOS while
+Cursor is closed. It requires an explicit `--cursor-plugins-root` and preserves
+the displaced version outside `local/`. Restart and real Skill invocation remain
+separate checks. See [the Cursor instructions](INSTALL.md#install-as-a-cursor-local-plugin).
+
+See [INSTALL.md](INSTALL.md) for CodeBuddy, Codex, Kimi Code, Qoder, and Cursor commands.
 
 ### Offline historical record verification
 

package/README.zh-CN.md

@@ -2,42 +2,46 @@
 
 [English](README.md) · 安装指南：[中文](INSTALL.zh-CN.md) / [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.9.17 -->
+<!-- release-skill:release-version: 0.9.18 -->
 面向 Claude Code、CodeBuddy、WorkBuddy、Codex 和 Kimi Code 的发布准备工具，完整保留人工维护的文件内容。
 
 release-skill 帮助维护者回答三个问题：准备发布什么、还有哪些检查未通过、最终发布的内容是什么。它不重新生成、也不回写项目源文件。`prepare` 把每个配置的公开文件复制到隔离快照并验证字节——先冻结并供人工审阅，再从同一份冻结产物发布。`setup` 只显示确定性的 `compactSummary` 审阅视图，完整报告保留在临时会话目录中。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.17** (2026-09-09)
+**0.9.18** (2026-09-11)
 
-0.9.17 是一个本地源码候选。本版本增加显式的历史发布记录离线核验入口和自包含 Qoder 投影，并保留 setup 根目录与 Kimi 初始目录信任修复。三项 Foundation 依赖仍精确固定在已发布的 0.17.0。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收，也不代表 Hub 已接纳。
+0.9.18 是一个本地源码候选。本版本增加 Cursor 的正式打包与分发、基于 Foundation 的宿主核验，以及覆盖 Claude、Codex、Kimi、CodeBuddy、WorkBuddy、Qoder 和 Cursor 的最终本机分发路径。三项 Foundation 依赖继续精确固定在已发布的 0.21.0。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收。
 
 **安全**
 
-- 离线核验只读取命令行显式提供的路径，并从 JSON 结果中隐去本机路径细节。历史材料一致不代表记录是全局最新，也不证明远端对象仍然存在。
-- Qoder 不进入 release distribution 和发布检查点。更新入口不会添加市场、首次安装、卸载或重新加载当前会话；`UPDATED` 也不代表新版插件已经加载。
-- 后续如需发布到中央 Skill Family Hub，仍通过既有 GitHub Git Data API 执行比较后写入。Hub 部分发布保持可恢复，系统不会自动回滚；即不回滚、不覆盖已经成功的远端步骤。
+- 扫描或替换 Cursor 插件树前必须关闭 Cursor。升级失败时保留或恢复完整的旧目录或新目录，不会发布混合目录。
+- 宿主核验只接收调用方声明的根目录，并把机制观察结果与 release-skill 的发布、验证状态分别记录。
+- Hub 发布继续绑定已观察的分支头执行比较后写入。部分发布时不回滚、不覆盖已经成功的远端步骤。
 
 **新增**
 
-- 新增公共命令 `release-skill verify-records`，核验调用者显式提供的计划、批准、目标 run 和前驱 run 字节。命令返回 `CONSISTENT`、`CONTRADICTED` 或 `INSUFFICIENT`，不会扫描 `.release-skill`、跟随记录中的路径、访问远端、写文件或改变发布状态。
-- npm 包增加 `.qoder-plugin/plugin.json` 和自包含的 `adapters/qoder/` 投影。现有发布后更新入口只在所选 Hub 来源与冻结载荷一致时，更新已经存在的用户范围 Qoder 插件。
+- npm 包新增 `.cursor-plugin/plugin.json` 和自包含的 `adapters/cursor/` 投影，包含 release-skill 的全部 Skill 与运行资源。
+- 发布验证可通过显式的可执行文件根目录和用户状态根目录调用 Foundation 0.21.0 宿主核验，其中包括 Cursor 项目级插件核验。
+- 最终本机更新入口可以把已验证版本分发到声明的 Claude、Codex、Kimi、CodeBuddy、WorkBuddy、Qoder 和 Cursor 安装位置。
+- Skill Family Hub 继续作为中央市场。发布完成验证后，release-skill 通过既有 GitHub Git Data API 更新 Hub 条目。
 
 **变更**
 
-- release-finish 的 setup 续接直接使用当前 `--root` 发布项目，不再询问第二个项目路径。项目级就绪检查与各宿主的加载检查仍分别判断。
+- 本机宿主更新会先核对冻结快照、manifest 身份和版本。Cursor 首次安装使用 Foundation 固定集合发布，升级使用整个目录的原子替换。
+- 平台生成、公开文件投影、包内容许可清单、Schema 与 release-finish 指引现在统一把 Cursor 视为正式宿主和适配器。
 
 **修复**
 
-- 已授权的 Kimi 更新可以先确认当前发布项目的标准初始 `Trust this folder?` 界面，再继续插件操作。未知行、未知选中项、重复信任界面、超时或提前退出仍会停止该宿主。
+- Cursor 插件名不再接受下划线，生成的本机插件目录符合 Cursor manifest 的名称约束。
+- npm 包原生预构建许可清单和固定资源闭包检查现已覆盖包括 Cursor 在内的全部生成适配器。
 
 **升级说明**
 
-从 0.9.16 升级后，可使用 `release-skill verify-records`、Qoder 包投影及 setup/Kimi 修复。请移除独立的 `release-skill` 市场，改用 ifoohoo/skill-family-hub 仓库与 Hub 限定插件名 release-skill@skill-family-hub。中央 Skill Family Hub 必须先接纳 Qoder 条目，才能开始市场安装。真实 Qoder 与 Kimi 的安装、重载和业务调用仍是需要单独授权的后续工作。
+从 0.9.17 升级后，可获得 Cursor 打包与本机安装、基于 Foundation 的宿主核验桥，以及统一的七宿主本机收尾路径。请移除独立的 `release-skill` 市场，改用 ifoohoo/skill-family-hub 仓库与 Hub 限定插件名 release-skill@skill-family-hub。更新后仍需重新加载各宿主；文件系统返回 `UPDATED` 并不单独证明运行中的宿主已经加载新版。
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **当前边界：** v0.9.17 只是当前源码候选。本 README 记录预期范围与验证边界，
+> **当前边界：** v0.9.18 只是当前源码候选。本 README 记录预期范围与验证边界，
 > 不代表已经发布、完成消费者安装验证或通过独立验收。
 > 版本可用性以对应发布记录及发布后验证结果为准。
 > v0.4.1 是更早的已发布里程碑（v0.2.2 曾处于已发布状态，后因平台验证收敛修复而更新）。
@@ -53,7 +57,7 @@ release-skill 帮助维护者回答三个问题：准备发布什么、还有哪
 > 远端唯一性检查在 `publish` 全局预检执行。
 
 <!-- release-skill:capability:safe-first-command -->
-> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.17 是当前源码候选，本 README 不证明该候选已经发布、完成消费者安装验证或通过独立验收。**
+> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.18 是当前源码候选，本 README 不证明该候选已经发布、完成消费者安装验证或通过独立验收。**
 > npm 安装的 CLI 是受支持的用户入口；源码 checkout 保留为开发/贡献者路径。
 >
 > **第一条命令：**
@@ -71,16 +75,17 @@ marketplace 委托目标工作区发布的边界不变。
 
 旧 production 计划缺少 `sourceAuthority` 时，在外部写入前拒绝。未发生外部写入的计划必须重新 prepare 并批准新摘要，不能补写旧计划或迁移批准。已有 `PARTIAL` 保留检查点，走匹配版本的恢复路径。evidence v1 只读；v2 顶层封闭，阶段扩展放在 `details`。摘要和恢复建议只作诊断，不构成发布权威。
 
-当前 0.9.17 候选包含窄范围的 R-05 Hook cache v2 消费路径、公开 `postverify`
+当前 0.9.18 候选包含窄范围的 R-05 Hook cache v2 消费路径、公开 `postverify`
 路径和稳定隔离安装树记录路径（A2/A3），并增加只接受显式输入的 `verify-records`
-命令和自包含 Qoder 投影。Skill Family Hub 仍是唯一市场来源。
+命令、自包含 Qoder 投影、Cursor 正式打包，以及基于 Foundation 的宿主核验桥。
+Skill Family Hub 仍是唯一市场来源。
 `release-prepare` Skill 现在会组织项目已有的评估、刷新、聚焦检查和 prepare 入口，不新增执行引擎。
 `prepare --help` 和 `prepare -h` 会在配置、锁、run 或 Hook 观察请求之前返回。
 所选宿主加载已发布插件后，`release-finish` Skill 还可以报告源码分支，并继续执行已配置的 setup 入口。
-当前仍不包含 R-02 安全整树盘点和真实 Kimi/WorkBuddy/Qoder 市场安装与调用门禁；中央 Hub
-尚未接纳 release-skill 的 Qoder 条目。本范围说明不构成远端发布记录或消费者升级指引。
+当前仍不包含 R-02 安全整树盘点。市场安装与真实调用继续作为各宿主的发布后检查；Cursor
+通过其支持的本机插件目录分发，不进入 Hub 市场条目。本范围说明不构成远端发布记录或消费者升级指引。
 
-Foundation 三包精确依赖已发布的 0.17.0。仍采用 bundled-family 分发形态的
+Foundation 三包精确依赖已发布的 0.21.0。仍采用 bundled-family 分发形态的
 Kimi/CodeBuddy 计划会在 verify 阶段调用正式 `runPluginVerification`，把完整冻结载荷
 交给 Foundation，并记录最小的 `install-only` 观察收据。Kimi 映射为 `kimi-code`，
 CodeBuddy 映射为兼容的 `workbuddy`。`observed` 与 `payloadMatches` 只表示机制观察结果，
@@ -222,7 +227,12 @@ TUI 路径，见 [INSTALL.zh-CN.md](INSTALL.zh-CN.md#安装为-kimi-code-插件)
 用户范围的市场安装；生成适配器本身不能证明 Hub 消费成立。安装与发布后更新边界见
 [INSTALL.zh-CN.md](INSTALL.zh-CN.md#安装为-qoder-插件)。
 
-CodeBuddy、Codex、Kimi Code 和 Qoder 的完整命令见 [INSTALL.zh-CN.md](INSTALL.zh-CN.md)。
+**Cursor：** `adapters/cursor/` 是完整的 Local（本地）插件。发布验证完成后，
+`release-finish` 可在 macOS 上安装或整体原子升级冻结插件，操作前必须退出 Cursor，
+并显式传入 `--cursor-plugins-root`。旧版保存在 `local/` 外；重启后的加载和技能调用
+另行验证。操作说明见[Cursor 本地插件安装](INSTALL.zh-CN.md#安装为-cursor-本地插件)。
+
+CodeBuddy、Codex、Kimi Code、Qoder 和 Cursor 的完整命令见 [INSTALL.zh-CN.md](INSTALL.zh-CN.md)。
 
 ### 离线核验历史发布记录
 

package/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.17",
+  "version": "0.9.18",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/claude/bin/consumer-contract-vectors.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "kind": "skill-family.contracts.consumer-contract-vectors",
-  "foundationVersion": "0.17.0",
+  "foundationVersion": "0.21.0",
   "sets": [
     {
       "capabilityId": "foundation.contracts.object-validation",
@@ -15,7 +15,7 @@
           "vectorId": "foundation.contracts.object-validation.consumer-v1.indeterminate",
           "vectorSetId": "foundation.contracts.object-validation.consumer-v1",
           "capabilityId": "foundation.contracts.object-validation",
-          "foundationVersion": "0.17.0",
+          "foundationVersion": "0.21.0",
           "contractId": "skill-family-contracts:validateDocument",
           "caseClass": "indeterminate",
           "strategy": "real-pure",
@@ -31,7 +31,7 @@
           "vectorId": "foundation.contracts.object-validation.consumer-v1.negative",
           "vectorSetId": "foundation.contracts.object-validation.consumer-v1",
           "capabilityId": "foundation.contracts.object-validation",
-          "foundationVersion": "0.17.0",
+          "foundationVersion": "0.21.0",
           "contractId": "skill-family-contracts:validateDocument",
           "caseClass": "negative",
           "strategy": "real-pure",
@@ -47,7 +47,7 @@
           "vectorId": "foundation.contracts.object-validation.consumer-v1.positive",
           "vectorSetId": "foundation.contracts.object-validation.consumer-v1",
           "capabilityId": "foundation.contracts.object-validation",
-          "foundationVersion": "0.17.0",
+          "foundationVersion": "0.21.0",
           "contractId": "skill-family-contracts:validateDocument",
           "caseClass": "positive",
           "strategy": "real-pure",
@@ -71,7 +71,7 @@
           "vectorId": "foundation.harness.atomic-write.consumer-v1.indeterminate",
           "vectorSetId": "foundation.harness.atomic-write.consumer-v1",
           "capabilityId": "foundation.harness.atomic-write",
-          "foundationVersion": "0.17.0",
+          "foundationVersion": "0.21.0",
           "contractId": "skill-family-harness-node:writeFileAtomic",
           "caseClass": "indeterminate",
           "strategy": "official-fake",
@@ -84,7 +84,7 @@
           "vectorId": "foundation.harness.atomic-write.consumer-v1.negative",
           "vectorSetId": "foundation.harness.atomic-write.consumer-v1",
           "capabilityId": "foundation.harness.atomic-write",
-          "foundationVersion": "0.17.0",
+          "foundationVersion": "0.21.0",
           "contractId": "skill-family-harness-node:writeFileAtomic",
           "caseClass": "negative",
           "strategy": "official-fake",
@@ -97,7 +97,7 @@
           "vectorId": "foundation.harness.atomic-write.consumer-v1.positive",
           "vectorSetId": "foundation.harness.atomic-write.consumer-v1",
           "capabilityId": "foundation.harness.atomic-write",
-          "foundationVersion": "0.17.0",
+          "foundationVersion": "0.21.0",
           "contractId": "skill-family-harness-node:writeFileAtomic",
           "caseClass": "positive",
           "strategy": "official-fake",

package/adapters/claude/bin/error-codes.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "kind": "skill-family.contracts.error-codes",
-  "contractsVersion": "1.16.0",
+  "contractsVersion": "1.18.0",
   "policy": {
     "format": "^SFC[0-9]{4}$",
     "ranges": [