npm - release-skill - Versions diffs - 0.9.26 → 0.9.27 - Mend

release-skill 0.9.26 → 0.9.27

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (35) hide show

package/.claude-plugin/plugin.json +1 -1
package/.codebuddy-plugin/plugin.json +1 -1
package/.codex-plugin/plugin.json +2 -2
package/.cursor-plugin/plugin.json +1 -1
package/.kimi-plugin/plugin.json +1 -1
package/.qoder-plugin/plugin.json +1 -1
package/CHANGELOG.md +25 -0
package/INSTALL.md +2 -2
package/INSTALL.zh-CN.md +2 -2
package/README.md +9 -9
package/README.zh-CN.md +9 -9
package/adapters/claude/.claude-plugin/plugin.json +1 -1
package/adapters/claude/bin/release-skill.bundle.mjs +13 -6
package/adapters/claude/skills/release-help/SKILL.md +2 -2
package/adapters/codex/.codex-plugin/plugin.json +2 -2
package/adapters/codex/bin/release-skill.bundle.mjs +13 -6
package/adapters/codex/skills/release-help/SKILL.md +2 -2
package/adapters/cursor/.cursor-plugin/plugin.json +1 -1
package/adapters/cursor/bin/release-skill.bundle.mjs +13 -6
package/adapters/cursor/skills/release-help/SKILL.md +2 -2
package/adapters/kimi/.kimi-plugin/plugin.json +1 -1
package/adapters/kimi/bin/release-skill.bundle.mjs +13 -6
package/adapters/kimi/skills/release-help/SKILL.md +2 -2
package/adapters/qoder/.qoder-plugin/plugin.json +1 -1
package/adapters/qoder/bin/release-skill.bundle.mjs +13 -6
package/adapters/qoder/skills/release-help/SKILL.md +2 -2
package/adapters/workbuddy/.codebuddy-plugin/plugin.json +1 -1
package/adapters/workbuddy/bin/release-skill.bundle.mjs +13 -6
package/adapters/workbuddy/skills/release-help/SKILL.md +2 -2
package/bin/release-skill.bundle.mjs +13 -6
package/package.json +1 -1
package/platform-manifest.json +4 -4
package/skills/release-help/SKILL.md +2 -2
package/skills-src/release-help/SKILL.md +2 -2
package/src/commands/post-release-local.mjs +13 -4

package/.claude-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codebuddy-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codex-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.9.26.",
+      "Prepare a release plan for version 0.9.27.",
       "Help me understand the release workflow."
     ]
   }

package/.cursor-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.kimi-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.qoder-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/CHANGELOG.md CHANGED Viewed

@@ -1,5 +1,30 @@
 # Changelog
+<!-- release-skill:changelog:start version=0.9.27 locale=en baseline=sha256:69bb1c474b2b31ec80eead86837455a7ec3b128baa671245db12cf509fa53a5b -->
+## [0.9.27] - 2026-10-13
+0.9.27 fixes Kimi local-host observation when a managed plugin root contains kimi.plugin.json and no package.json. The WorkBuddy lite-wb selector remains the 0.9.26 fix and is not part of this version. The three Foundation dependencies remain pinned to 0.22.0. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+### Security
+- Existing safety boundaries are unchanged: Hub publication remains a compare-and-swap operation bound to the observed branch head. Partial Hub publication is never rolled back or force-pushed automatically, and completed steps are not overwritten.
+- Approval, publication, post-publication verification, consumer installation, real-host loading, and independent acceptance still require their own actual records. This note does not prove any of those outcomes. Reading a Kimi plugin manifest does not establish authentication or real-host qualification.
+### Changed
+- The distribution path is unchanged: Skill Family Hub remains the central marketplace, and its entry is still updated through the existing GitHub Git Data API after release verification.
+- The WorkBuddy CODEBUDDY_FORCE_LITE_WB_BUNDLE selector shipped in 0.9.26. This version does not change that selector.
+### Fixed
+- Kimi local host observation still reads package.json when that file is present, and that path is unchanged. When the read fails with the existing missing-resource or ENOENT shape, observation reads kimi.plugin.json in the same managed root and uses its name and version in the existing identity comparison, together with the GitHub tag ref and installed SHA from installed.json. A missing kimi.plugin.json still fails closed. Declared-root checks, tag ref handling, installed SHA handling, and git HEAD comparison stay as they are. This fallback does not add package.json to any Kimi projection.
+### Upgrade Notes
+For consumers already using Skill Family Hub, no configuration migration is required. Installations still using the old release-skill standalone marketplace should remove it and use the ifoohoo/skill-family-hub repository with the Hub-qualified plugin id release-skill@skill-family-hub; this migration path is unchanged. The existing --unit release-selection contract is unchanged.
+<!-- release-skill:changelog:end version=0.9.27 locale=en -->
 <!-- release-skill:changelog:start version=0.9.26 locale=en baseline=sha256:233636f011ef5211286935424f64ef11eb1170dc297f40a2dd65e6572c459bb0 -->
 ## [0.9.26] - 2026-10-12

package/INSTALL.md CHANGED Viewed

@@ -2,7 +2,7 @@
 [简体中文](INSTALL.zh-CN.md)
-<!-- release-skill:release-version: 0.9.26 -->
+<!-- release-skill:release-version: 0.9.27 -->
 ## Prerequisites
 - Node.js `>=22.22.2 <23` (22.22.2 or newer, and below 23)
@@ -125,7 +125,7 @@ tag pinned to the exact version (never the bare repository URL, which installs
 the latest release or default branch), confirm the trust prompt, then reload:
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.26
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.27
    /plugins reload
    ```

package/INSTALL.zh-CN.md CHANGED Viewed

@@ -2,7 +2,7 @@
 [English](INSTALL.md)
-<!-- release-skill:release-version: 0.9.26 -->
+<!-- release-skill:release-version: 0.9.27 -->
 ## 前置条件
 - Node.js `>=22.22.2 <23`（22.22.2 及以上，且低于 23）
@@ -113,7 +113,7 @@ release-skill 当前只采用并验证 Kimi Code 的交互式 TUI 路径，**无
 （切勿使用裸仓库地址，它会安装最新 release 或默认分支），确认信任提示后重新加载：
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.26
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.27
    /plugins reload
    ```

package/README.md CHANGED Viewed

@@ -2,7 +2,7 @@
 [简体中文](README.zh-CN.md) · Installation: [English](INSTALL.md) / [简体中文](INSTALL.zh-CN.md)
-<!-- release-skill:release-version: 0.9.26 -->
+<!-- release-skill:release-version: 0.9.27 -->
 Release preparation for Claude Code, CodeBuddy, WorkBuddy, Codex, and Kimi Code, with human-edited files kept intact.
 release-skill helps a maintainer answer three questions: what will be released,
@@ -14,31 +14,31 @@ Setup surfaces only the deterministic `compactSummary` review view; the full
 report stays in a temporary session directory.
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.26** (2026-10-12)
+**0.9.27** (2026-10-13)
-0.9.26 corrects wording that treated the current installed version as permanently a source candidate. It also makes existing WorkBuddy CLI calls in local host updates select the official lite-wb bundle. The three Foundation dependencies remain pinned to 0.22.0. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+0.9.27 fixes Kimi local-host observation when a managed plugin root contains kimi.plugin.json and no package.json. The WorkBuddy lite-wb selector remains the 0.9.26 fix and is not part of this version. The three Foundation dependencies remain pinned to 0.22.0. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
 **Security**
 - Existing safety boundaries are unchanged: Hub publication remains a compare-and-swap operation bound to the observed branch head. Partial Hub publication is never rolled back or force-pushed automatically, and completed steps are not overwritten.
-- Approval, publication, post-publication verification, consumer installation, real-host loading, and independent acceptance still require their own actual records. This note does not prove any of those outcomes. Selecting the WorkBuddy bundle does not establish authentication or real-host qualification.
+- Approval, publication, post-publication verification, consumer installation, real-host loading, and independent acceptance still require their own actual records. This note does not prove any of those outcomes. Reading a Kimi plugin manifest does not establish authentication or real-host qualification.
 **Changed**
 - The distribution path is unchanged: Skill Family Hub remains the central marketplace, and its entry is still updated through the existing GitHub Git Data API after release verification.
+- The WorkBuddy CODEBUDDY_FORCE_LITE_WB_BUNDLE selector shipped in 0.9.26. This version does not change that selector.
 **Fixed**
-- The help and prepare skills, both READMEs, and README acceptance prompts describe capabilities and evidence boundaries without assigning a permanent candidate status to the current version. Version synchronization retains necessary version references without restoring that status assertion. Existing regression checks cover these boundaries.
-- The WorkBuddy branch of local host update commands sets CODEBUDDY_FORCE_LITE_WB_BUNDLE=1 to select the official lite-wb bundle. Other hosts do not receive this selector. Existing authentication filtering, exact-source checks, and fail-closed behavior remain in place.
+- Kimi local host observation still reads package.json when that file is present, and that path is unchanged. When the read fails with the existing missing-resource or ENOENT shape, observation reads kimi.plugin.json in the same managed root and uses its name and version in the existing identity comparison, together with the GitHub tag ref and installed SHA from installed.json. A missing kimi.plugin.json still fails closed. Declared-root checks, tag ref handling, installed SHA handling, and git HEAD comparison stay as they are. This fallback does not add package.json to any Kimi projection.
 **Upgrade Notes**
-For consumers already using Skill Family Hub, no configuration migration is required. Installations still using the old release-skill standalone marketplace should remove it and use the ifoohoo/skill-family-hub repository with the Hub-qualified plugin id release-skill@skill-family-hub; this migration path is unchanged. The existing --unit release-selection contract is unchanged. This update adds no automatic first-time installation capability and does not change the existing MANUAL_REQUIRED boundary.
+For consumers already using Skill Family Hub, no configuration migration is required. Installations still using the old release-skill standalone marketplace should remove it and use the ifoohoo/skill-family-hub repository with the Hub-qualified plugin id release-skill@skill-family-hub; this migration path is unchanged. The existing --unit release-selection contract is unchanged.
 <!-- release-skill:managed:end id=latest-release -->
 <!-- release-skill:capability:external-write-boundary -->
-> **Current boundary:** v0.9.26: this README records capabilities and verification boundaries;
+> **Current boundary:** v0.9.27: this README records capabilities and verification boundaries;
 > it is not evidence of
 > publication, consumer-installation verification, or independent acceptance.
 > Release availability must be established from the corresponding release records
@@ -62,7 +62,7 @@ For consumers already using Skill Family Hub, no configuration migration is requ
 > publish global preflight.
 <!-- release-skill:capability:safe-first-command -->
-> **Production path verified since the v0.1.1 milestone; for v0.9.26,
+> **Production path verified since the v0.1.1 milestone; for v0.9.27,
 > publication, consumer-installation verification, and independent acceptance
 > require version-specific release records and verification results.**
 > The npm-installed CLI is the supported user entry. Source checkout

package/README.zh-CN.md CHANGED Viewed

@@ -2,37 +2,37 @@
 [English](README.md) · 安装指南：[中文](INSTALL.zh-CN.md) / [English](INSTALL.md)
-<!-- release-skill:release-version: 0.9.26 -->
+<!-- release-skill:release-version: 0.9.27 -->
 面向 Claude Code、CodeBuddy、WorkBuddy、Codex 和 Kimi Code 的发布准备工具，完整保留人工维护的文件内容。
 release-skill 帮助维护者回答三个问题：准备发布什么、还有哪些检查未通过、最终发布的内容是什么。它不重新生成、也不回写项目源文件。`prepare` 把每个配置的公开文件复制到隔离快照并验证字节——先冻结并供人工审阅，再从同一份冻结产物发布。`setup` 只显示确定性的 `compactSummary` 审阅视图，完整报告保留在临时会话目录中。
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.26** (2026-10-12)
+**0.9.27** (2026-10-13)
-0.9.26 修正了将当前安装版本永久描述为“源码候选”的措辞，并让本机宿主更新中的既有 WorkBuddy CLI 调用选择官方 lite-wb 包。Foundation 三个依赖继续固定为 0.22.0。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收。
+0.9.27 修复 Kimi 本机宿主观察：受管插件根只有 kimi.plugin.json、没有 package.json 时不再失败。WorkBuddy 的 lite-wb 选择器修复已在 0.9.26 完成，不属于本版。Foundation 三个依赖继续固定为 0.22.0。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收。
 **安全**
 - 既有安全边界保持不变：Hub 写入继续绑定已观察的分支头，按 compare-and-swap 比较后写入。部分发布时不回滚、不覆盖已成功步骤，也不自动强推。
-- 批准、发布、发布后验证、消费者安装、真实宿主加载和独立验收仍分别需要实际记录。本说明不能证明这些结果，选择 WorkBuddy 包也不能证明认证已成立或真实宿主资格已经通过。
+- 批准、发布、发布后验证、消费者安装、真实宿主加载和独立验收仍分别需要实际记录。本说明不能证明这些结果，读取 Kimi 插件清单也不能证明认证已成立或真实宿主资格已经通过。
 **变更**
 - 分发路径保持不变：Skill Family Hub 仍是统一市场；发布验证完成后，Hub 条目仍通过既有 GitHub Git Data API 更新。
+- WorkBuddy 的 CODEBUDDY_FORCE_LITE_WB_BUNDLE 选择器已随 0.9.26 交付，本版不改动该选择器。
 **修复**
-- help 和 prepare 技能、两份 README 及 README 验收提示现在说明能力与证据边界，不再给当前版本固定候选身份。版本同步继续保留必要的版本引用，但不再恢复这一状态断言。既有回归检查覆盖这些边界。
-- 本机宿主更新命令的 WorkBuddy 分支通过 CODEBUDDY_FORCE_LITE_WB_BUNDLE=1 选择官方 lite-wb 包；其他宿主不接收该选择器。原有认证信息过滤、精确来源检查和失败关闭行为保持不变。
+- Kimi 本机宿主观察在 package.json 存在时仍读取该文件，这条路径保持不变。读取失败且错误属于既有 missing-resource 或 ENOENT 形态时，改为读取同一受管根下的 kimi.plugin.json，并用其 name 与 version 参加既有身份比较，同时继续使用 installed.json 中的 GitHub tag ref 与 installedSha。kimi.plugin.json 同样缺失时仍按原错误失败关闭。声明根检查、tag ref、installedSha 与 git HEAD 比较逻辑不变。该回退不会给任何 Kimi 投影补上 package.json。
 **升级说明**
-已使用 Skill Family Hub 的消费者升级时无需迁移配置。若仍使用旧版独立的 `release-skill` 市场，应移除旧市场，改用 ifoohoo/skill-family-hub 仓库与 Hub 限定插件名 release-skill@skill-family-hub；这条迁移路径保持不变。既有 --unit 选择合同保持不变。本次不增加首次自动安装能力，也不改变原 MANUAL_REQUIRED 边界。
+已使用 Skill Family Hub 的消费者升级时无需迁移配置。若仍使用旧版独立的 `release-skill` 市场，应移除旧市场，改用 ifoohoo/skill-family-hub 仓库与 Hub 限定插件名 release-skill@skill-family-hub；这条迁移路径保持不变。既有 --unit 选择合同保持不变。
 <!-- release-skill:managed:end id=latest-release -->
 <!-- release-skill:capability:external-write-boundary -->
-> **当前边界：** v0.9.26 的能力范围与验证边界见本 README，
+> **当前边界：** v0.9.27 的能力范围与验证边界见本 README，
 > 不代表已经发布、完成消费者安装验证或通过独立验收。
 > 版本可用性以对应发布记录及发布后验证结果为准。
 > v0.4.1 是更早的已发布里程碑（v0.2.2 曾处于已发布状态，后因平台验证收敛修复而更新）。
@@ -48,7 +48,7 @@ release-skill 帮助维护者回答三个问题：准备发布什么、还有哪
 > 远端唯一性检查在 `publish` 全局预检执行。
 <!-- release-skill:capability:safe-first-command -->
-> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.26 的发布、消费者安装验证和独立验收状态须由该版本的发布记录及验证结果确认。**
+> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.27 的发布、消费者安装验证和独立验收状态须由该版本的发布记录及验证结果确认。**
 > npm 安装的 CLI 是受支持的用户入口；源码 checkout 保留为开发/贡献者路径。
 >
 > **第一条命令：**

package/adapters/claude/.claude-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/claude/bin/release-skill.bundle.mjs CHANGED Viewed

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.26"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.27"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "e423ce89a99a1ec7350c5243cca4a6570684945b0ba83452cc9892789985489d";
+const __bundleSourceDigest = "25d576aeb1a7c01598399f326190124dbdd91b562e32ad4d9a532e3399654151";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136645,10 +136645,17 @@ async function observeKimiTarget(target, kimiHome, run6) {
   const pluginRoot = await resolveContained(managedRoot, target.plugin);
   const declaredRoot = await resolveContained(managedRoot, relative28(managedRoot, entry.root));
   if (declaredRoot !== pluginRoot) throw new Error("Kimi installed plugin root does not match its managed root");
-  const packageJson = parseJson2(
-    await readFileContained(pluginRoot, "package.json", { encoding: "utf8" }),
-    "Kimi installed package manifest"
-  );
+  let manifestText;
+  let manifestLabel = "Kimi installed package manifest";
+  try {
+    manifestText = await readFileContained(pluginRoot, "package.json", { encoding: "utf8" });
+  } catch (error) {
+    const missing = error?.code === "ENOENT" || error?.details?.causeCode === "ENOENT" || error?.details?.kind === "missing-resource";
+    if (!missing) throw error;
+    manifestLabel = "Kimi installed plugin manifest";
+    manifestText = await readFileContained(pluginRoot, "kimi.plugin.json", { encoding: "utf8" });
+  }
+  const packageJson = parseJson2(manifestText, manifestLabel);
   const refName = entry.github.ref?.kind === "tag" ? entry.github.ref.value : void 0;
   const revision = entry.github.installedSha;
   let gitHeadExact = true;

package/adapters/claude/skills/release-help/SKILL.md CHANGED Viewed

@@ -29,9 +29,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
-## 0.9.26 能力与证据边界
+## 0.9.27 能力与证据边界
-release-skill 0.9.26 精确依赖 Foundation 0.22.0 的公开包根 API。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.27 精确依赖 Foundation 0.22.0 的公开包根 API。本版修复 Kimi 本机宿主观察：受管插件根只有 kimi.plugin.json、没有 package.json 时不再失败。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。

package/adapters/codex/.codex-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.9.26.",
+      "Prepare a release plan for version 0.9.27.",
       "Help me understand the release workflow."
     ]
   }

package/adapters/codex/bin/release-skill.bundle.mjs CHANGED Viewed

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.26"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.27"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "e423ce89a99a1ec7350c5243cca4a6570684945b0ba83452cc9892789985489d";
+const __bundleSourceDigest = "25d576aeb1a7c01598399f326190124dbdd91b562e32ad4d9a532e3399654151";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136645,10 +136645,17 @@ async function observeKimiTarget(target, kimiHome, run6) {
   const pluginRoot = await resolveContained(managedRoot, target.plugin);
   const declaredRoot = await resolveContained(managedRoot, relative28(managedRoot, entry.root));
   if (declaredRoot !== pluginRoot) throw new Error("Kimi installed plugin root does not match its managed root");
-  const packageJson = parseJson2(
-    await readFileContained(pluginRoot, "package.json", { encoding: "utf8" }),
-    "Kimi installed package manifest"
-  );
+  let manifestText;
+  let manifestLabel = "Kimi installed package manifest";
+  try {
+    manifestText = await readFileContained(pluginRoot, "package.json", { encoding: "utf8" });
+  } catch (error) {
+    const missing = error?.code === "ENOENT" || error?.details?.causeCode === "ENOENT" || error?.details?.kind === "missing-resource";
+    if (!missing) throw error;
+    manifestLabel = "Kimi installed plugin manifest";
+    manifestText = await readFileContained(pluginRoot, "kimi.plugin.json", { encoding: "utf8" });
+  }
+  const packageJson = parseJson2(manifestText, manifestLabel);
   const refName = entry.github.ref?.kind === "tag" ? entry.github.ref.value : void 0;
   const revision = entry.github.installedSha;
   let gitHeadExact = true;

package/adapters/codex/skills/release-help/SKILL.md CHANGED Viewed

@@ -37,9 +37,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
-## 0.9.26 能力与证据边界
+## 0.9.27 能力与证据边界
-release-skill 0.9.26 精确依赖 Foundation 0.22.0 的公开包根 API。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.27 精确依赖 Foundation 0.22.0 的公开包根 API。本版修复 Kimi 本机宿主观察：受管插件根只有 kimi.plugin.json、没有 package.json 时不再失败。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。

package/adapters/cursor/.cursor-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/cursor/bin/release-skill.bundle.mjs CHANGED Viewed

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.26"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.27"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "e423ce89a99a1ec7350c5243cca4a6570684945b0ba83452cc9892789985489d";
+const __bundleSourceDigest = "25d576aeb1a7c01598399f326190124dbdd91b562e32ad4d9a532e3399654151";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136645,10 +136645,17 @@ async function observeKimiTarget(target, kimiHome, run6) {
   const pluginRoot = await resolveContained(managedRoot, target.plugin);
   const declaredRoot = await resolveContained(managedRoot, relative28(managedRoot, entry.root));
   if (declaredRoot !== pluginRoot) throw new Error("Kimi installed plugin root does not match its managed root");
-  const packageJson = parseJson2(
-    await readFileContained(pluginRoot, "package.json", { encoding: "utf8" }),
-    "Kimi installed package manifest"
-  );
+  let manifestText;
+  let manifestLabel = "Kimi installed package manifest";
+  try {
+    manifestText = await readFileContained(pluginRoot, "package.json", { encoding: "utf8" });
+  } catch (error) {
+    const missing = error?.code === "ENOENT" || error?.details?.causeCode === "ENOENT" || error?.details?.kind === "missing-resource";
+    if (!missing) throw error;
+    manifestLabel = "Kimi installed plugin manifest";
+    manifestText = await readFileContained(pluginRoot, "kimi.plugin.json", { encoding: "utf8" });
+  }
+  const packageJson = parseJson2(manifestText, manifestLabel);
   const refName = entry.github.ref?.kind === "tag" ? entry.github.ref.value : void 0;
   const revision = entry.github.installedSha;
   let gitHeadExact = true;

package/adapters/cursor/skills/release-help/SKILL.md CHANGED Viewed

@@ -38,9 +38,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
-## 0.9.26 能力与证据边界
+## 0.9.27 能力与证据边界
-release-skill 0.9.26 精确依赖 Foundation 0.22.0 的公开包根 API。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.27 精确依赖 Foundation 0.22.0 的公开包根 API。本版修复 Kimi 本机宿主观察：受管插件根只有 kimi.plugin.json、没有 package.json 时不再失败。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。

package/adapters/kimi/.kimi-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/kimi/bin/release-skill.bundle.mjs CHANGED Viewed

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.26"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.27"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "e423ce89a99a1ec7350c5243cca4a6570684945b0ba83452cc9892789985489d";
+const __bundleSourceDigest = "25d576aeb1a7c01598399f326190124dbdd91b562e32ad4d9a532e3399654151";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136645,10 +136645,17 @@ async function observeKimiTarget(target, kimiHome, run6) {
   const pluginRoot = await resolveContained(managedRoot, target.plugin);
   const declaredRoot = await resolveContained(managedRoot, relative28(managedRoot, entry.root));
   if (declaredRoot !== pluginRoot) throw new Error("Kimi installed plugin root does not match its managed root");
-  const packageJson = parseJson2(
-    await readFileContained(pluginRoot, "package.json", { encoding: "utf8" }),
-    "Kimi installed package manifest"
-  );
+  let manifestText;
+  let manifestLabel = "Kimi installed package manifest";
+  try {
+    manifestText = await readFileContained(pluginRoot, "package.json", { encoding: "utf8" });
+  } catch (error) {
+    const missing = error?.code === "ENOENT" || error?.details?.causeCode === "ENOENT" || error?.details?.kind === "missing-resource";
+    if (!missing) throw error;
+    manifestLabel = "Kimi installed plugin manifest";
+    manifestText = await readFileContained(pluginRoot, "kimi.plugin.json", { encoding: "utf8" });
+  }
+  const packageJson = parseJson2(manifestText, manifestLabel);
   const refName = entry.github.ref?.kind === "tag" ? entry.github.ref.value : void 0;
   const revision = entry.github.installedSha;
   let gitHeadExact = true;

package/adapters/kimi/skills/release-help/SKILL.md CHANGED Viewed

@@ -37,9 +37,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
-## 0.9.26 能力与证据边界
+## 0.9.27 能力与证据边界
-release-skill 0.9.26 精确依赖 Foundation 0.22.0 的公开包根 API。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.27 精确依赖 Foundation 0.22.0 的公开包根 API。本版修复 Kimi 本机宿主观察：受管插件根只有 kimi.plugin.json、没有 package.json 时不再失败。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。

package/adapters/qoder/.qoder-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/qoder/bin/release-skill.bundle.mjs CHANGED Viewed

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.26"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.27"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "e423ce89a99a1ec7350c5243cca4a6570684945b0ba83452cc9892789985489d";
+const __bundleSourceDigest = "25d576aeb1a7c01598399f326190124dbdd91b562e32ad4d9a532e3399654151";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136645,10 +136645,17 @@ async function observeKimiTarget(target, kimiHome, run6) {
   const pluginRoot = await resolveContained(managedRoot, target.plugin);
   const declaredRoot = await resolveContained(managedRoot, relative28(managedRoot, entry.root));
   if (declaredRoot !== pluginRoot) throw new Error("Kimi installed plugin root does not match its managed root");
-  const packageJson = parseJson2(
-    await readFileContained(pluginRoot, "package.json", { encoding: "utf8" }),
-    "Kimi installed package manifest"
-  );
+  let manifestText;
+  let manifestLabel = "Kimi installed package manifest";
+  try {
+    manifestText = await readFileContained(pluginRoot, "package.json", { encoding: "utf8" });
+  } catch (error) {
+    const missing = error?.code === "ENOENT" || error?.details?.causeCode === "ENOENT" || error?.details?.kind === "missing-resource";
+    if (!missing) throw error;
+    manifestLabel = "Kimi installed plugin manifest";
+    manifestText = await readFileContained(pluginRoot, "kimi.plugin.json", { encoding: "utf8" });
+  }
+  const packageJson = parseJson2(manifestText, manifestLabel);
   const refName = entry.github.ref?.kind === "tag" ? entry.github.ref.value : void 0;
   const revision = entry.github.installedSha;
   let gitHeadExact = true;

package/adapters/qoder/skills/release-help/SKILL.md CHANGED Viewed

@@ -37,9 +37,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
-## 0.9.26 能力与证据边界
+## 0.9.27 能力与证据边界
-release-skill 0.9.26 精确依赖 Foundation 0.22.0 的公开包根 API。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.27 精确依赖 Foundation 0.22.0 的公开包根 API。本版修复 Kimi 本机宿主观察：受管插件根只有 kimi.plugin.json、没有 package.json 时不再失败。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。

package/adapters/workbuddy/.codebuddy-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/workbuddy/bin/release-skill.bundle.mjs CHANGED Viewed

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.26"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.27"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "e423ce89a99a1ec7350c5243cca4a6570684945b0ba83452cc9892789985489d";
+const __bundleSourceDigest = "25d576aeb1a7c01598399f326190124dbdd91b562e32ad4d9a532e3399654151";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136645,10 +136645,17 @@ async function observeKimiTarget(target, kimiHome, run6) {
   const pluginRoot = await resolveContained(managedRoot, target.plugin);
   const declaredRoot = await resolveContained(managedRoot, relative28(managedRoot, entry.root));
   if (declaredRoot !== pluginRoot) throw new Error("Kimi installed plugin root does not match its managed root");
-  const packageJson = parseJson2(
-    await readFileContained(pluginRoot, "package.json", { encoding: "utf8" }),
-    "Kimi installed package manifest"
-  );
+  let manifestText;
+  let manifestLabel = "Kimi installed package manifest";
+  try {
+    manifestText = await readFileContained(pluginRoot, "package.json", { encoding: "utf8" });
+  } catch (error) {
+    const missing = error?.code === "ENOENT" || error?.details?.causeCode === "ENOENT" || error?.details?.kind === "missing-resource";
+    if (!missing) throw error;
+    manifestLabel = "Kimi installed plugin manifest";
+    manifestText = await readFileContained(pluginRoot, "kimi.plugin.json", { encoding: "utf8" });
+  }
+  const packageJson = parseJson2(manifestText, manifestLabel);
   const refName = entry.github.ref?.kind === "tag" ? entry.github.ref.value : void 0;
   const revision = entry.github.installedSha;
   let gitHeadExact = true;

package/adapters/workbuddy/skills/release-help/SKILL.md CHANGED Viewed

@@ -29,9 +29,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
-## 0.9.26 能力与证据边界
+## 0.9.27 能力与证据边界
-release-skill 0.9.26 精确依赖 Foundation 0.22.0 的公开包根 API。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.27 精确依赖 Foundation 0.22.0 的公开包根 API。本版修复 Kimi 本机宿主观察：受管插件根只有 kimi.plugin.json、没有 package.json 时不再失败。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。

package/bin/release-skill.bundle.mjs CHANGED Viewed

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.26"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.27"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "e423ce89a99a1ec7350c5243cca4a6570684945b0ba83452cc9892789985489d";
+const __bundleSourceDigest = "25d576aeb1a7c01598399f326190124dbdd91b562e32ad4d9a532e3399654151";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136645,10 +136645,17 @@ async function observeKimiTarget(target, kimiHome, run6) {
   const pluginRoot = await resolveContained(managedRoot, target.plugin);
   const declaredRoot = await resolveContained(managedRoot, relative28(managedRoot, entry.root));
   if (declaredRoot !== pluginRoot) throw new Error("Kimi installed plugin root does not match its managed root");
-  const packageJson = parseJson2(
-    await readFileContained(pluginRoot, "package.json", { encoding: "utf8" }),
-    "Kimi installed package manifest"
-  );
+  let manifestText;
+  let manifestLabel = "Kimi installed package manifest";
+  try {
+    manifestText = await readFileContained(pluginRoot, "package.json", { encoding: "utf8" });
+  } catch (error) {
+    const missing = error?.code === "ENOENT" || error?.details?.causeCode === "ENOENT" || error?.details?.kind === "missing-resource";
+    if (!missing) throw error;
+    manifestLabel = "Kimi installed plugin manifest";
+    manifestText = await readFileContained(pluginRoot, "kimi.plugin.json", { encoding: "utf8" });
+  }
+  const packageJson = parseJson2(manifestText, manifestLabel);
   const refName = entry.github.ref?.kind === "tag" ? entry.github.ref.value : void 0;
   const revision = entry.github.installedSha;
   let gitHeadExact = true;

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/platform-manifest.json CHANGED Viewed

@@ -2,11 +2,11 @@
   "schemaVersion": "1.0.0",
   "platformId": "release-skill",
   "platformName": "release-skill Plugin Platform",
-  "version": "0.9.26",
+  "version": "0.9.27",
   "logicalRoot": "skills-src/",
-  "logicalRootDigest": "b32605fb6cf0bac83c6313cdfc8216073a1a3a11f83bb4e4c59016a0b93b5a43",
-  "projectionDigest": "544fb531a089493618b276dde92ca98c1ae3bf91bd1c5101a0f2d2b344133b56",
-  "projectionId": "release-skill:platform:0.9.26",
+  "logicalRootDigest": "0fa3132f1cabb5aa580e9984ee85a1762824ffd147bc91262ad9b60ad7f3b7a1",
+  "projectionDigest": "a47de2ca6763aba458a767d21d28fdab2581dcb0cd422593529056d34d052763",
+  "projectionId": "release-skill:platform:0.9.27",
   "manifestRequired": true,
   "projectionSources": {
     "skills-src-root": {

package/skills/release-help/SKILL.md CHANGED Viewed

@@ -29,9 +29,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
-## 0.9.26 能力与证据边界
+## 0.9.27 能力与证据边界
-release-skill 0.9.26 精确依赖 Foundation 0.22.0 的公开包根 API。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.27 精确依赖 Foundation 0.22.0 的公开包根 API。本版修复 Kimi 本机宿主观察：受管插件根只有 kimi.plugin.json、没有 package.json 时不再失败。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。

package/skills-src/release-help/SKILL.md CHANGED Viewed

@@ -29,9 +29,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
-## 0.9.26 能力与证据边界
+## 0.9.27 能力与证据边界
-release-skill 0.9.26 精确依赖 Foundation 0.22.0 的公开包根 API。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.27 精确依赖 Foundation 0.22.0 的公开包根 API。本版修复 Kimi 本机宿主观察：受管插件根只有 kimi.plugin.json、没有 package.json 时不再失败。本节说明当前版本的能力范围与证据边界；批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。

package/src/commands/post-release-local.mjs CHANGED Viewed

@@ -1898,10 +1898,19 @@ async function observeKimiTarget(target, kimiHome, run) {
   const pluginRoot = await resolveContained(managedRoot, target.plugin);
   const declaredRoot = await resolveContained(managedRoot, relative(managedRoot, entry.root));
   if (declaredRoot !== pluginRoot) throw new Error('Kimi installed plugin root does not match its managed root');
-  const packageJson = parseJson(
-    await readFileContained(pluginRoot, 'package.json', { encoding: 'utf8' }),
-    'Kimi installed package manifest',
-  );
+  let manifestText;
+  let manifestLabel = 'Kimi installed package manifest';
+  try {
+    manifestText = await readFileContained(pluginRoot, 'package.json', { encoding: 'utf8' });
+  } catch (error) {
+    const missing = error?.code === 'ENOENT'
+      || error?.details?.causeCode === 'ENOENT'
+      || error?.details?.kind === 'missing-resource';
+    if (!missing) throw error;
+    manifestLabel = 'Kimi installed plugin manifest';
+    manifestText = await readFileContained(pluginRoot, 'kimi.plugin.json', { encoding: 'utf8' });
+  }
+  const packageJson = parseJson(manifestText, manifestLabel);
   const refName = entry.github.ref?.kind === 'tag' ? entry.github.ref.value : undefined;
   const revision = entry.github.installedSha;
   let gitHeadExact = true;