release-skill 0.9.28 → 0.9.30

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codebuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.9.28.",
+      "Prepare a release plan for version 0.9.30.",
       "Help me understand the release workflow."
     ]
   }

package/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.qoder-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/CHANGELOG.md

@@ -1,5 +1,75 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.9.30 locale=en baseline=sha256:f96989498b14d998fb38751ca6bd2610255761ebb1618018ec2ca362ebe707a5 -->
+## [0.9.30] - 2026-10-16
+
+0.9.30 fixes the private Hub hook's missing release-evidence argument while retaining exact Foundation 0.25.0 dependencies. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+
+### Security
+
+- The hook rejects missing or invalid evidence paths before remote access; the authoritative Hub gate validates the original release evidence.
+- Gate failure prevents Git Data API writes. Partial Hub publication is never rolled back or force-pushed, and completed steps are not overwritten. Writes remain bound to the observed branch head through compare-and-swap.
+
+### Changed
+
+- Skill Family Hub remains the unified market; entries are updated via GitHub Git Data API after post-verify validation.
+
+### Fixed
+
+- The private Hub hook forwards the absolute path supplied through `RELEASE_SKILL_HUB_RELEASE_EVIDENCE` to `npm run release:check -- --release-evidence <file>`. The path must name an existing regular file; symbolic links are rejected.
+
+### Upgrade Notes
+
+Before running `postverify`, maintainers set the `RELEASE_SKILL_HUB_RELEASE_EVIDENCE` environment variable to the absolute path of the original Hub evidence descriptor; the existing `envAllowlist` forwards only that key. The descriptor and referenced native records are not copied or rewritten.
+
+A new plan freezes the corrected hook and still requires independent checkpoint approval. Historical plans, approvals and frozen hooks remain unchanged and are not replayed. `ALREADY_CURRENT` still requires the authoritative Hub gate.
+
+Existing Hub users need no configuration migration. The old release-skill standalone marketplace is deprecated; use `ifoohoo/skill-family-hub` and `release-skill@skill-family-hub`.
+
+This note does not authorize publication or prove real-host business or consumer installation verification. No consumer installation or update is added.
+<!-- release-skill:changelog:end version=0.9.30 locale=en -->
+
+
+<!-- release-skill:changelog:start version=0.9.29 locale=en baseline=sha256:b0f764fb7dc5897a2bc031a06114e766eb3bb2a39fe4778c0c23bc620921bf40 -->
+## [0.9.29] - 2026-10-16
+
+0.9.29 fixes Qoder local updates rejecting the valid ./skills/ layout in Foundation 0.25.0's frozen manifest. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+
+### Security
+
+- The skills path must be a non-empty string naming an existing directory within the plugin. The installed name/version/skills must match this release's frozen manifest. Both UPDATED and ALREADY_CURRENT branches validate the actual installed payload.
+- Frozen snapshot digest, identity, Hub repository/ref and entry source.url/source.sha checks remain in effect. Missing, invalid or escaping paths and payload drift still fail; no automatic initial installation is added.
+- Hub writes remain bound to the observed branch head through compare-and-swap. Partial Hub publication is never rolled back or force-pushed automatically, and completed steps are not overwritten.
+
+### Changed
+
+- Skill Family Hub remains the unified marketplace. After release validation, Hub entries are updated via GitHub Git Data API. This mechanism remains unchanged and is not claimed to have been executed in this release.
+
+### Fixed
+
+- Resolved incorrect path hardcoding in 0.9.28 that rejected valid ./skills/ directory from Foundation 0.25.0's frozen manifest. Qoder plugins now read skills path from verified frozen manifest, ensuring compatibility with both ./adapters/qoder/skills/ and ./skills/ layouts.
+
+### Upgrade Notes
+
+- Existing installations may continue using the existing local-finish entry point,
+  provided they maintain authorization.
+
+- The release note does not constitute a release authorization, nor does it confirm
+  real-world host business validation.
+
+- Do not infer published status from this document; actual release status must be
+  referenced from approved plans, approvals, and execution records.
+
+- The path must be a valid existing directory within the plugin and match the frozen
+  manifest exactly.
+
+- No new configuration parameters or migration steps are introduced.
+- Users of the existing Skill Family Hub do not need to perform configuration migration.
+- The old release-skill standalone marketplace is deprecated and should be removed.
+  Replace it with the `ifoohoo/skill-family-hub` repository and `release-skill@skill-family-hub`.
+<!-- release-skill:changelog:end version=0.9.29 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.9.28 locale=en baseline=sha256:cd1f7e8115d51b08d4d406835280d7be7716c5010255adb0afa4d3e4d4eadac6 -->
 ## [0.9.28] - 2026-10-15
 

package/INSTALL.md

@@ -2,7 +2,7 @@
 
 [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.9.28 -->
+<!-- release-skill:release-version: 0.9.30 -->
 ## Prerequisites
 
 - Node.js `>=22.22.2 <23` (22.22.2 or newer, and below 23)
@@ -125,7 +125,7 @@ tag pinned to the exact version (never the bare repository URL, which installs
 the latest release or default branch), confirm the trust prompt, then reload:
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.28
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.30
    /plugins reload
    ```
 

package/INSTALL.zh-CN.md

@@ -2,7 +2,7 @@
 
 [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.9.28 -->
+<!-- release-skill:release-version: 0.9.30 -->
 ## 前置条件
 
 - Node.js `>=22.22.2 <23`（22.22.2 及以上，且低于 23）
@@ -113,7 +113,7 @@ release-skill 当前只采用并验证 Kimi Code 的交互式 TUI 路径，**无
 （切勿使用裸仓库地址，它会安装最新 release 或默认分支），确认信任提示后重新加载：
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.28
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.30
    /plugins reload
    ```
 

package/README.md

@@ -2,7 +2,7 @@
 
 [简体中文](README.zh-CN.md) · Installation: [English](INSTALL.md) / [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.9.28 -->
+<!-- release-skill:release-version: 0.9.30 -->
 Release preparation for Claude Code, CodeBuddy, WorkBuddy, Codex, and Kimi Code, with human-edited files kept intact.
 
 release-skill helps a maintainer answer three questions: what will be released,
@@ -14,37 +14,36 @@ Setup surfaces only the deterministic `compactSummary` review view; the full
 report stays in a temporary session directory.
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.28** (2026-10-15)
+**0.9.30** (2026-10-16)
 
-0.9.28 adds optional host coverage diagnosis to `setup --assess-adoption`, checking whether hosts in the declared scope have the required release wiring. The three Foundation dependencies are pinned to 0.25.0. The Codex 0.154.0 static loading check consumes the original bytes of 11 generated Skills in an isolated project; this does not establish installation, session selection, or business execution. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+0.9.30 fixes the private Hub hook's missing release-evidence argument while retaining exact Foundation 0.25.0 dependencies. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
 
 **Security**
 
-- Existing safety boundaries are unchanged: Hub publication remains a compare-and-swap operation bound to the observed branch head. Partial Hub publication is never rolled back or force-pushed automatically, and completed steps are not overwritten.
-- Approval, publication, post-publication verification, consumer installation, real-host loading, and independent acceptance still require their own actual records. This note does not prove any of those outcomes. Reading a Kimi plugin manifest does not establish authentication or real-host qualification.
-
-**Added**
-
-- `--host-coverage <file>` accepts an input file specifying declared support scope, delivery scope for this round, initial installation obligations, and installation observations, reporting per-host coverage status and factual gaps; Skill collects facts and interprets CLI output but does not implement comparison logic.
-- `--observe-hosts` uses commands defined by the platform registry to read plugin lists for in-scope Claude and Codex hosts when coverage input is explicitly supplied, and checks plugin and marketplace identities. Excluded targets and targets without identity do not trigger native commands.
+- The hook rejects missing or invalid evidence paths before remote access; the authoritative Hub gate validates the original release evidence.
+- Gate failure prevents Git Data API writes. Partial Hub publication is never rolled back or force-pushed, and completed steps are not overwritten. Writes remain bound to the observed branch head through compare-and-swap.
 
 **Changed**
 
-- The three Foundation dependencies are pinned to 0.25.0. The Codex 0.154.0 static loading check consumes the original bytes of 11 generated Skills in an isolated project; this does not establish installation, session selection, or business execution.
-- The distribution path is unchanged: Skill Family Hub remains the central marketplace, and its entry is still updated through the existing GitHub Git Data API after release verification.
+- Skill Family Hub remains the unified market; entries are updated via GitHub Git Data API after post-verify validation.
 
 **Fixed**
 
-- Records missing identity, source, a valid observation timestamp, or installed version are not considered successful coverage; real-time unknown status cannot be overridden by old installed snapshots; multiple list entries matching the target are rejected; invalid or duplicate inputs still bind to the existing digest binding.
-- Kimi direct release and Hub localHostUpdate records that bind the same unit, host, plugin, version, GitHub host, repository, tag, and commit now merge into exactly one existing direct executable target. Marketplace index metadata is irrelevant only for Kimi, whose installation uses the frozen GitHub release. Different frozen identities still fail closed. Other hosts retain current marketplace identity checks.
+- The private Hub hook forwards the absolute path supplied through `RELEASE_SKILL_HUB_RELEASE_EVIDENCE` to `npm run release:check -- --release-evidence <file>`. The path must name an existing regular file; symbolic links are rejected.
 
 **Upgrade Notes**
 
-For consumers already using Skill Family Hub, no configuration migration is required. Installations still using the old release-skill standalone marketplace should remove it and use the ifoohoo/skill-family-hub repository with the Hub-qualified plugin id release-skill@skill-family-hub; this migration path is unchanged. The existing --unit release-selection contract is unchanged. Without new options, the original four top-level states and exit codes are preserved, and no host scanning occurs; no plugin installation or updates, no host configuration or credential modifications; observed installation lists do not imply actual loading or business execution; existing configurations require no migration; explicit fact file input is mandatory for this round’s coverage check.
+Before running `postverify`, maintainers set the `RELEASE_SKILL_HUB_RELEASE_EVIDENCE` environment variable to the absolute path of the original Hub evidence descriptor; the existing `envAllowlist` forwards only that key. The descriptor and referenced native records are not copied or rewritten.
+
+A new plan freezes the corrected hook and still requires independent checkpoint approval. Historical plans, approvals and frozen hooks remain unchanged and are not replayed. `ALREADY_CURRENT` still requires the authoritative Hub gate.
+
+Existing Hub users need no configuration migration. The old release-skill standalone marketplace is deprecated; use `ifoohoo/skill-family-hub` and `release-skill@skill-family-hub`.
+
+This note does not authorize publication or prove real-host business or consumer installation verification. No consumer installation or update is added.
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **Current boundary:** v0.9.28: this README records capabilities and verification boundaries;
+> **Current boundary:** v0.9.30: this README records capabilities and verification boundaries;
 > it is not evidence of
 > publication, consumer-installation verification, or independent acceptance.
 > Release availability must be established from the corresponding release records
@@ -68,7 +67,7 @@ For consumers already using Skill Family Hub, no configuration migration is requ
 > publish global preflight.
 
 <!-- release-skill:capability:safe-first-command -->
-> **Production path verified since the v0.1.1 milestone; for v0.9.28,
+> **Production path verified since the v0.1.1 milestone; for v0.9.30,
 > publication, consumer-installation verification, and independent acceptance
 > require version-specific release records and verification results.**
 > The npm-installed CLI is the supported user entry. Source checkout

package/README.zh-CN.md

@@ -2,43 +2,42 @@
 
 [English](README.md) · 安装指南：[中文](INSTALL.zh-CN.md) / [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.9.28 -->
+<!-- release-skill:release-version: 0.9.30 -->
 面向 Claude Code、CodeBuddy、WorkBuddy、Codex 和 Kimi Code 的发布准备工具，完整保留人工维护的文件内容。
 
 release-skill 帮助维护者回答三个问题：准备发布什么、还有哪些检查未通过、最终发布的内容是什么。它不重新生成、也不回写项目源文件。`prepare` 把每个配置的公开文件复制到隔离快照并验证字节——先冻结并供人工审阅，再从同一份冻结产物发布。`setup` 只显示确定性的 `compactSummary` 审阅视图，完整报告保留在临时会话目录中。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.28** (2026-10-15)
+**0.9.30** (2026-10-16)
 
-0.9.28 版本新增可选宿主接入覆盖诊断功能，通过 `setup --assess-adoption` 的可选参数，核对声明范围内的宿主是否具备所需接线。该版本精确依赖 Foundation 0.25.0 的公开包根 API，采用 Codex 0.154.0 静态加载规则检查，基于 11 份真实生成 Skill 的原字节在隔离环境中完成诊断，不证明安装、会话选择或业务执行通过。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收。
+0.9.30 修复项目私有 Hub 钩子漏传发布证据参数的问题，继续使用精确的 Foundation 0.25.0 依赖。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收。
 
 **安全**
 
-- 既有安全边界保持不变：Hub 写入继续绑定已观察的分支头，按 compare-and-swap 比较后写入。部分发布时不回滚、不覆盖已成功步骤，也不自动强推。
-- 批准、发布、发布后验证、消费者安装、真实宿主加载和独立验收仍分别需要实际记录。本说明不能证明这些结果，读取 Kimi 插件清单也不能证明认证已成立或真实宿主资格已经通过。
-
-**新增**
-
-- `--host-coverage <file>` 接收包含项目声明支持范围、本轮交付范围、首次安装义务与安装观察的输入文件，报告每个宿主的覆盖状态及事实缺口；Skill 仅负责收集事实并解释 CLI 输出，不参与差异比较逻辑。
-- `--observe-hosts` 在显式提供覆盖输入时，使用平台注册表定义的命令只读获取本轮纳入的 Claude、Codex 插件列表，核对插件与市场身份；已排除或缺少身份的目标不启动原生命令。
+- 钩子在访问远端前拒绝缺失或非法的证据路径，证据内容交由 Hub 正式门禁验证。
+- 门禁失败不进行 Git Data API 写入；部分发布不回滚、不覆盖已完成步骤、不自动强推；写入绑定观察到的分支头并比较后写入。
 
 **变更**
 
-- Foundation 三个依赖锁步升级为 0.25.0，采用 Codex 0.154.0 静态加载规则检查，基于11份真实生成Skill原字节在隔离环境中完成诊断，不证明安装、会话选择或业务执行通过。
-- 分发路径保持不变：Skill Family Hub 仍是统一市场；发布验证完成后，Hub 条目仍通过既有 GitHub Git Data API 更新。
+- Skill Family Hub 仍是统一市场，验证后经 GitHub Git Data API 更新条目。
 
 **修复**
 
-- 缺失身份、来源、有效时间或 installed 版本的记录不能视为覆盖成功；实时未知状态不能由旧的 installed 快照覆盖；同一目标匹配多条列表记录时将被拒绝；无效或重复输入仍绑定原有摘要路径。
-- Kimi 的直接发布记录与 Hub 的 localHostUpdate 记录绑定同一单元、宿主、插件、版本、GitHub 主机、仓库、标签和提交时，合并为一个原有可执行目标。Kimi 使用冻结的 GitHub Release，该场景不再比较市场索引元数据；不同冻结身份仍被拒绝。其他宿主的市场身份校验保持不变。
+- 项目私有 Hub 钩子把 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE` 指定的绝对路径传给 `npm run release:check -- --release-evidence <file>`。路径必须指向已有普通文件，不接受符号链接。
 
 **升级说明**
 
-已使用 Skill Family Hub 的消费者升级时无需迁移配置。若仍使用旧版独立的 `release-skill` 市场，应移除旧市场，改用 ifoohoo/skill-family-hub 仓库与 Hub 限定插件名 release-skill@skill-family-hub；这条迁移路径保持不变。既有 --unit 选择合同保持不变。 不使用新选项时，保留原有的四种顶层状态和退出码，不扫描宿主；不安装或更新插件，不修改宿主配置或凭据；安装列表的观察结果不证明插件已真实加载或完成业务执行；现有配置无需迁移；本轮覆盖检查需显式提供事实文件。
+维护者在运行 `postverify` 前，将环境变量 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE` 设为原始 Hub 证据描述符的绝对路径；现有 `envAllowlist` 只转发该键。描述符及其引用的原生记录不复制、不改写。
+
+新计划冻结修正的钩子，仍须取得独立检查点批准；历史计划、批准和冻结钩子保持不变，不重放。`ALREADY_CURRENT` 仍须通过 Hub 正式门禁。
+
+已使用 Hub 的用户无需配置迁移。旧版独立的 `release-skill` 市场已弃用，应改用 `ifoohoo/skill-family-hub` 与 `release-skill@skill-family-hub`。
+
+本说明不授权发布，也不证明真实宿主业务或消费者安装验证完成；不新增消费者安装或更新动作。
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **当前边界：** v0.9.28 的能力范围与验证边界见本 README，
+> **当前边界：** v0.9.30 的能力范围与验证边界见本 README，
 > 不代表已经发布、完成消费者安装验证或通过独立验收。
 > 版本可用性以对应发布记录及发布后验证结果为准。
 > v0.4.1 是更早的已发布里程碑（v0.2.2 曾处于已发布状态，后因平台验证收敛修复而更新）。
@@ -54,7 +53,7 @@ release-skill 帮助维护者回答三个问题：准备发布什么、还有哪
 > 远端唯一性检查在 `publish` 全局预检执行。
 
 <!-- release-skill:capability:safe-first-command -->
-> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.28 的发布、消费者安装验证和独立验收状态须由该版本的发布记录及验证结果确认。**
+> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.30 的发布、消费者安装验证和独立验收状态须由该版本的发布记录及验证结果确认。**
 > npm 安装的 CLI 是受支持的用户入口；源码 checkout 保留为开发/贡献者路径。
 >
 > **第一条命令：**

package/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/claude/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.28"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.30"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "9683591bbfad41292831f35e071273e6812b7e5b27adcb0e237dac9672605a36";
+const __bundleSourceDigest = "52acbaddf4e589b42b49defb03ff5dfa59e0306f37a3ce0e8e3aaa240b9cfba4";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136643,10 +136643,15 @@ async function readQoderManifest(root, label) {
   }
   return manifest;
 }
-function assertQoderPluginManifest(target, manifest, label) {
-  if (manifest.name !== target.plugin || manifest.version !== target.version || manifest.skills !== "./adapters/qoder/skills/") {
+async function assertQoderPluginManifest(target, manifest, label, pluginRoot, frozenSkills) {
+  if (manifest.name !== target.plugin || manifest.version !== target.version || typeof manifest.skills !== "string" || manifest.skills.length === 0 || frozenSkills !== void 0 && manifest.skills !== frozenSkills) {
     throw new Error(`${label} does not match the frozen Qoder plugin identity and projection path`);
   }
+  const skillsRoot = await resolveContained(pluginRoot, manifest.skills);
+  if (!(await lstat45(skillsRoot)).isDirectory()) {
+    throw new Error(`${label} skills path must name a contained directory`);
+  }
+  return manifest.skills;
 }
 async function assertFrozenQoderManifest(target, root) {
   const { snapshotDir: snapshotRoot } = await verifyFrozenSnapshot({
@@ -136655,7 +136660,7 @@ async function assertFrozenQoderManifest(target, root) {
     expectedDigest: target.manifestDigest
   });
   const manifest = await readQoderManifest(snapshotRoot, "frozen Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest");
+  return assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest", snapshotRoot);
 }
 async function assertQoderHubEntry(target, marketplaceRoot) {
   const marketplace = parseJson2(
@@ -136678,10 +136683,11 @@ async function verifyQoderInstalledPayload({
   target,
   root,
   installPath,
+  frozenSkills,
   verifyInstalledPayload
 }) {
   const manifest = await readQoderManifest(installPath, "installed Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest");
+  await assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest", installPath, frozenSkills);
   await verifyInstalledPayload({
     snapshotPath: target.snapshotPath,
     manifestDigest: target.manifestDigest,
@@ -136694,7 +136700,7 @@ async function runQoderUpdate(target, detected, run6, {
   verifyInstalledPayload
 }) {
   const env = hostEnvironment("qoder");
-  await assertFrozenQoderManifest(target, root);
+  const frozenSkills = await assertFrozenQoderManifest(target, root);
   const marketplace = await observeQoderMarketplace(target, detected.command, env, run6);
   if (!marketplace.installed) {
     return {
@@ -136715,6 +136721,7 @@ async function runQoderUpdate(target, detected, run6, {
       target,
       root,
       installPath: before.installPath,
+      frozenSkills,
       verifyInstalledPayload
     });
     return { status: "ALREADY_CURRENT", version: target.version };
@@ -136741,6 +136748,7 @@ async function runQoderUpdate(target, detected, run6, {
     target,
     root,
     installPath: after.installPath,
+    frozenSkills,
     verifyInstalledPayload
   });
   return {

package/adapters/claude/skills/release-help/SKILL.md

@@ -29,9 +29,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
 
-## 0.9.28 能力与证据边界
+## 0.9.30 能力与证据边界
 
-release-skill 0.9.28 精确依赖 Foundation 0.25.0 的公开包根 API。本版本新增可选宿主覆盖诊断能力，支持通过 `--host-coverage <file>` 提供输入文件，报告每个宿主在声明范围内的覆盖状态与事实缺口；同时采用 Codex 0.154.0 静态加载规则检查，基于 11 份真实生成 Skill 的原字节在隔离环境中完成诊断，不证明安装、会话选择或业务执行通过。批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.30 保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 静态加载规则检查 11 份真实生成 Skill 的原字节等既有事实；本版修复私有 Hub 的 postVerify 钩子：通过既有 `envAllowlist` 传递 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE`，其值为原始描述符所指向的已有普通文件绝对路径（拒绝符号链接），交由 Hub `npm run release:check -- --release-evidence <file>` 验证。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。
 
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。
 

package/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.9.28.",
+      "Prepare a release plan for version 0.9.30.",
       "Help me understand the release workflow."
     ]
   }

package/adapters/codex/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.28"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.30"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "9683591bbfad41292831f35e071273e6812b7e5b27adcb0e237dac9672605a36";
+const __bundleSourceDigest = "52acbaddf4e589b42b49defb03ff5dfa59e0306f37a3ce0e8e3aaa240b9cfba4";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136643,10 +136643,15 @@ async function readQoderManifest(root, label) {
   }
   return manifest;
 }
-function assertQoderPluginManifest(target, manifest, label) {
-  if (manifest.name !== target.plugin || manifest.version !== target.version || manifest.skills !== "./adapters/qoder/skills/") {
+async function assertQoderPluginManifest(target, manifest, label, pluginRoot, frozenSkills) {
+  if (manifest.name !== target.plugin || manifest.version !== target.version || typeof manifest.skills !== "string" || manifest.skills.length === 0 || frozenSkills !== void 0 && manifest.skills !== frozenSkills) {
     throw new Error(`${label} does not match the frozen Qoder plugin identity and projection path`);
   }
+  const skillsRoot = await resolveContained(pluginRoot, manifest.skills);
+  if (!(await lstat45(skillsRoot)).isDirectory()) {
+    throw new Error(`${label} skills path must name a contained directory`);
+  }
+  return manifest.skills;
 }
 async function assertFrozenQoderManifest(target, root) {
   const { snapshotDir: snapshotRoot } = await verifyFrozenSnapshot({
@@ -136655,7 +136660,7 @@ async function assertFrozenQoderManifest(target, root) {
     expectedDigest: target.manifestDigest
   });
   const manifest = await readQoderManifest(snapshotRoot, "frozen Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest");
+  return assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest", snapshotRoot);
 }
 async function assertQoderHubEntry(target, marketplaceRoot) {
   const marketplace = parseJson2(
@@ -136678,10 +136683,11 @@ async function verifyQoderInstalledPayload({
   target,
   root,
   installPath,
+  frozenSkills,
   verifyInstalledPayload
 }) {
   const manifest = await readQoderManifest(installPath, "installed Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest");
+  await assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest", installPath, frozenSkills);
   await verifyInstalledPayload({
     snapshotPath: target.snapshotPath,
     manifestDigest: target.manifestDigest,
@@ -136694,7 +136700,7 @@ async function runQoderUpdate(target, detected, run6, {
   verifyInstalledPayload
 }) {
   const env = hostEnvironment("qoder");
-  await assertFrozenQoderManifest(target, root);
+  const frozenSkills = await assertFrozenQoderManifest(target, root);
   const marketplace = await observeQoderMarketplace(target, detected.command, env, run6);
   if (!marketplace.installed) {
     return {
@@ -136715,6 +136721,7 @@ async function runQoderUpdate(target, detected, run6, {
       target,
       root,
       installPath: before.installPath,
+      frozenSkills,
       verifyInstalledPayload
     });
     return { status: "ALREADY_CURRENT", version: target.version };
@@ -136741,6 +136748,7 @@ async function runQoderUpdate(target, detected, run6, {
     target,
     root,
     installPath: after.installPath,
+    frozenSkills,
     verifyInstalledPayload
   });
   return {

package/adapters/codex/skills/release-help/SKILL.md

@@ -37,9 +37,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
 
-## 0.9.28 能力与证据边界
+## 0.9.30 能力与证据边界
 
-release-skill 0.9.28 精确依赖 Foundation 0.25.0 的公开包根 API。本版本新增可选宿主覆盖诊断能力，支持通过 `--host-coverage <file>` 提供输入文件，报告每个宿主在声明范围内的覆盖状态与事实缺口；同时采用 Codex 0.154.0 静态加载规则检查，基于 11 份真实生成 Skill 的原字节在隔离环境中完成诊断，不证明安装、会话选择或业务执行通过。批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.30 保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 静态加载规则检查 11 份真实生成 Skill 的原字节等既有事实；本版修复私有 Hub 的 postVerify 钩子：通过既有 `envAllowlist` 传递 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE`，其值为原始描述符所指向的已有普通文件绝对路径（拒绝符号链接），交由 Hub `npm run release:check -- --release-evidence <file>` 验证。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。
 
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。
 

package/adapters/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/cursor/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.28"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.30"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "9683591bbfad41292831f35e071273e6812b7e5b27adcb0e237dac9672605a36";
+const __bundleSourceDigest = "52acbaddf4e589b42b49defb03ff5dfa59e0306f37a3ce0e8e3aaa240b9cfba4";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136643,10 +136643,15 @@ async function readQoderManifest(root, label) {
   }
   return manifest;
 }
-function assertQoderPluginManifest(target, manifest, label) {
-  if (manifest.name !== target.plugin || manifest.version !== target.version || manifest.skills !== "./adapters/qoder/skills/") {
+async function assertQoderPluginManifest(target, manifest, label, pluginRoot, frozenSkills) {
+  if (manifest.name !== target.plugin || manifest.version !== target.version || typeof manifest.skills !== "string" || manifest.skills.length === 0 || frozenSkills !== void 0 && manifest.skills !== frozenSkills) {
     throw new Error(`${label} does not match the frozen Qoder plugin identity and projection path`);
   }
+  const skillsRoot = await resolveContained(pluginRoot, manifest.skills);
+  if (!(await lstat45(skillsRoot)).isDirectory()) {
+    throw new Error(`${label} skills path must name a contained directory`);
+  }
+  return manifest.skills;
 }
 async function assertFrozenQoderManifest(target, root) {
   const { snapshotDir: snapshotRoot } = await verifyFrozenSnapshot({
@@ -136655,7 +136660,7 @@ async function assertFrozenQoderManifest(target, root) {
     expectedDigest: target.manifestDigest
   });
   const manifest = await readQoderManifest(snapshotRoot, "frozen Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest");
+  return assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest", snapshotRoot);
 }
 async function assertQoderHubEntry(target, marketplaceRoot) {
   const marketplace = parseJson2(
@@ -136678,10 +136683,11 @@ async function verifyQoderInstalledPayload({
   target,
   root,
   installPath,
+  frozenSkills,
   verifyInstalledPayload
 }) {
   const manifest = await readQoderManifest(installPath, "installed Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest");
+  await assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest", installPath, frozenSkills);
   await verifyInstalledPayload({
     snapshotPath: target.snapshotPath,
     manifestDigest: target.manifestDigest,
@@ -136694,7 +136700,7 @@ async function runQoderUpdate(target, detected, run6, {
   verifyInstalledPayload
 }) {
   const env = hostEnvironment("qoder");
-  await assertFrozenQoderManifest(target, root);
+  const frozenSkills = await assertFrozenQoderManifest(target, root);
   const marketplace = await observeQoderMarketplace(target, detected.command, env, run6);
   if (!marketplace.installed) {
     return {
@@ -136715,6 +136721,7 @@ async function runQoderUpdate(target, detected, run6, {
       target,
       root,
       installPath: before.installPath,
+      frozenSkills,
       verifyInstalledPayload
     });
     return { status: "ALREADY_CURRENT", version: target.version };
@@ -136741,6 +136748,7 @@ async function runQoderUpdate(target, detected, run6, {
     target,
     root,
     installPath: after.installPath,
+    frozenSkills,
     verifyInstalledPayload
   });
   return {

package/adapters/cursor/skills/release-help/SKILL.md

@@ -38,9 +38,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
 
-## 0.9.28 能力与证据边界
+## 0.9.30 能力与证据边界
 
-release-skill 0.9.28 精确依赖 Foundation 0.25.0 的公开包根 API。本版本新增可选宿主覆盖诊断能力，支持通过 `--host-coverage <file>` 提供输入文件，报告每个宿主在声明范围内的覆盖状态与事实缺口；同时采用 Codex 0.154.0 静态加载规则检查，基于 11 份真实生成 Skill 的原字节在隔离环境中完成诊断，不证明安装、会话选择或业务执行通过。批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.30 保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 静态加载规则检查 11 份真实生成 Skill 的原字节等既有事实；本版修复私有 Hub 的 postVerify 钩子：通过既有 `envAllowlist` 传递 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE`，其值为原始描述符所指向的已有普通文件绝对路径（拒绝符号链接），交由 Hub `npm run release:check -- --release-evidence <file>` 验证。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。
 
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。
 

package/adapters/kimi/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/kimi/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.28"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.30"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "9683591bbfad41292831f35e071273e6812b7e5b27adcb0e237dac9672605a36";
+const __bundleSourceDigest = "52acbaddf4e589b42b49defb03ff5dfa59e0306f37a3ce0e8e3aaa240b9cfba4";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136643,10 +136643,15 @@ async function readQoderManifest(root, label) {
   }
   return manifest;
 }
-function assertQoderPluginManifest(target, manifest, label) {
-  if (manifest.name !== target.plugin || manifest.version !== target.version || manifest.skills !== "./adapters/qoder/skills/") {
+async function assertQoderPluginManifest(target, manifest, label, pluginRoot, frozenSkills) {
+  if (manifest.name !== target.plugin || manifest.version !== target.version || typeof manifest.skills !== "string" || manifest.skills.length === 0 || frozenSkills !== void 0 && manifest.skills !== frozenSkills) {
     throw new Error(`${label} does not match the frozen Qoder plugin identity and projection path`);
   }
+  const skillsRoot = await resolveContained(pluginRoot, manifest.skills);
+  if (!(await lstat45(skillsRoot)).isDirectory()) {
+    throw new Error(`${label} skills path must name a contained directory`);
+  }
+  return manifest.skills;
 }
 async function assertFrozenQoderManifest(target, root) {
   const { snapshotDir: snapshotRoot } = await verifyFrozenSnapshot({
@@ -136655,7 +136660,7 @@ async function assertFrozenQoderManifest(target, root) {
     expectedDigest: target.manifestDigest
   });
   const manifest = await readQoderManifest(snapshotRoot, "frozen Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest");
+  return assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest", snapshotRoot);
 }
 async function assertQoderHubEntry(target, marketplaceRoot) {
   const marketplace = parseJson2(
@@ -136678,10 +136683,11 @@ async function verifyQoderInstalledPayload({
   target,
   root,
   installPath,
+  frozenSkills,
   verifyInstalledPayload
 }) {
   const manifest = await readQoderManifest(installPath, "installed Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest");
+  await assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest", installPath, frozenSkills);
   await verifyInstalledPayload({
     snapshotPath: target.snapshotPath,
     manifestDigest: target.manifestDigest,
@@ -136694,7 +136700,7 @@ async function runQoderUpdate(target, detected, run6, {
   verifyInstalledPayload
 }) {
   const env = hostEnvironment("qoder");
-  await assertFrozenQoderManifest(target, root);
+  const frozenSkills = await assertFrozenQoderManifest(target, root);
   const marketplace = await observeQoderMarketplace(target, detected.command, env, run6);
   if (!marketplace.installed) {
     return {
@@ -136715,6 +136721,7 @@ async function runQoderUpdate(target, detected, run6, {
       target,
       root,
       installPath: before.installPath,
+      frozenSkills,
       verifyInstalledPayload
     });
     return { status: "ALREADY_CURRENT", version: target.version };
@@ -136741,6 +136748,7 @@ async function runQoderUpdate(target, detected, run6, {
     target,
     root,
     installPath: after.installPath,
+    frozenSkills,
     verifyInstalledPayload
   });
   return {

package/adapters/kimi/skills/release-help/SKILL.md

@@ -37,9 +37,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
 
-## 0.9.28 能力与证据边界
+## 0.9.30 能力与证据边界
 
-release-skill 0.9.28 精确依赖 Foundation 0.25.0 的公开包根 API。本版本新增可选宿主覆盖诊断能力，支持通过 `--host-coverage <file>` 提供输入文件，报告每个宿主在声明范围内的覆盖状态与事实缺口；同时采用 Codex 0.154.0 静态加载规则检查，基于 11 份真实生成 Skill 的原字节在隔离环境中完成诊断，不证明安装、会话选择或业务执行通过。批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.30 保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 静态加载规则检查 11 份真实生成 Skill 的原字节等既有事实；本版修复私有 Hub 的 postVerify 钩子：通过既有 `envAllowlist` 传递 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE`，其值为原始描述符所指向的已有普通文件绝对路径（拒绝符号链接），交由 Hub `npm run release:check -- --release-evidence <file>` 验证。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。
 
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。
 

package/adapters/qoder/.qoder-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/qoder/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.28"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.30"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "9683591bbfad41292831f35e071273e6812b7e5b27adcb0e237dac9672605a36";
+const __bundleSourceDigest = "52acbaddf4e589b42b49defb03ff5dfa59e0306f37a3ce0e8e3aaa240b9cfba4";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136643,10 +136643,15 @@ async function readQoderManifest(root, label) {
   }
   return manifest;
 }
-function assertQoderPluginManifest(target, manifest, label) {
-  if (manifest.name !== target.plugin || manifest.version !== target.version || manifest.skills !== "./adapters/qoder/skills/") {
+async function assertQoderPluginManifest(target, manifest, label, pluginRoot, frozenSkills) {
+  if (manifest.name !== target.plugin || manifest.version !== target.version || typeof manifest.skills !== "string" || manifest.skills.length === 0 || frozenSkills !== void 0 && manifest.skills !== frozenSkills) {
     throw new Error(`${label} does not match the frozen Qoder plugin identity and projection path`);
   }
+  const skillsRoot = await resolveContained(pluginRoot, manifest.skills);
+  if (!(await lstat45(skillsRoot)).isDirectory()) {
+    throw new Error(`${label} skills path must name a contained directory`);
+  }
+  return manifest.skills;
 }
 async function assertFrozenQoderManifest(target, root) {
   const { snapshotDir: snapshotRoot } = await verifyFrozenSnapshot({
@@ -136655,7 +136660,7 @@ async function assertFrozenQoderManifest(target, root) {
     expectedDigest: target.manifestDigest
   });
   const manifest = await readQoderManifest(snapshotRoot, "frozen Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest");
+  return assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest", snapshotRoot);
 }
 async function assertQoderHubEntry(target, marketplaceRoot) {
   const marketplace = parseJson2(
@@ -136678,10 +136683,11 @@ async function verifyQoderInstalledPayload({
   target,
   root,
   installPath,
+  frozenSkills,
   verifyInstalledPayload
 }) {
   const manifest = await readQoderManifest(installPath, "installed Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest");
+  await assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest", installPath, frozenSkills);
   await verifyInstalledPayload({
     snapshotPath: target.snapshotPath,
     manifestDigest: target.manifestDigest,
@@ -136694,7 +136700,7 @@ async function runQoderUpdate(target, detected, run6, {
   verifyInstalledPayload
 }) {
   const env = hostEnvironment("qoder");
-  await assertFrozenQoderManifest(target, root);
+  const frozenSkills = await assertFrozenQoderManifest(target, root);
   const marketplace = await observeQoderMarketplace(target, detected.command, env, run6);
   if (!marketplace.installed) {
     return {
@@ -136715,6 +136721,7 @@ async function runQoderUpdate(target, detected, run6, {
       target,
       root,
       installPath: before.installPath,
+      frozenSkills,
       verifyInstalledPayload
     });
     return { status: "ALREADY_CURRENT", version: target.version };
@@ -136741,6 +136748,7 @@ async function runQoderUpdate(target, detected, run6, {
     target,
     root,
     installPath: after.installPath,
+    frozenSkills,
     verifyInstalledPayload
   });
   return {

package/adapters/qoder/skills/release-help/SKILL.md

@@ -37,9 +37,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
 
-## 0.9.28 能力与证据边界
+## 0.9.30 能力与证据边界
 
-release-skill 0.9.28 精确依赖 Foundation 0.25.0 的公开包根 API。本版本新增可选宿主覆盖诊断能力，支持通过 `--host-coverage <file>` 提供输入文件，报告每个宿主在声明范围内的覆盖状态与事实缺口；同时采用 Codex 0.154.0 静态加载规则检查，基于 11 份真实生成 Skill 的原字节在隔离环境中完成诊断，不证明安装、会话选择或业务执行通过。批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.30 保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 静态加载规则检查 11 份真实生成 Skill 的原字节等既有事实；本版修复私有 Hub 的 postVerify 钩子：通过既有 `envAllowlist` 传递 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE`，其值为原始描述符所指向的已有普通文件绝对路径（拒绝符号链接），交由 Hub `npm run release:check -- --release-evidence <file>` 验证。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。
 
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。
 

package/adapters/workbuddy/.codebuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/workbuddy/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.28"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.30"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "9683591bbfad41292831f35e071273e6812b7e5b27adcb0e237dac9672605a36";
+const __bundleSourceDigest = "52acbaddf4e589b42b49defb03ff5dfa59e0306f37a3ce0e8e3aaa240b9cfba4";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136643,10 +136643,15 @@ async function readQoderManifest(root, label) {
   }
   return manifest;
 }
-function assertQoderPluginManifest(target, manifest, label) {
-  if (manifest.name !== target.plugin || manifest.version !== target.version || manifest.skills !== "./adapters/qoder/skills/") {
+async function assertQoderPluginManifest(target, manifest, label, pluginRoot, frozenSkills) {
+  if (manifest.name !== target.plugin || manifest.version !== target.version || typeof manifest.skills !== "string" || manifest.skills.length === 0 || frozenSkills !== void 0 && manifest.skills !== frozenSkills) {
     throw new Error(`${label} does not match the frozen Qoder plugin identity and projection path`);
   }
+  const skillsRoot = await resolveContained(pluginRoot, manifest.skills);
+  if (!(await lstat45(skillsRoot)).isDirectory()) {
+    throw new Error(`${label} skills path must name a contained directory`);
+  }
+  return manifest.skills;
 }
 async function assertFrozenQoderManifest(target, root) {
   const { snapshotDir: snapshotRoot } = await verifyFrozenSnapshot({
@@ -136655,7 +136660,7 @@ async function assertFrozenQoderManifest(target, root) {
     expectedDigest: target.manifestDigest
   });
   const manifest = await readQoderManifest(snapshotRoot, "frozen Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest");
+  return assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest", snapshotRoot);
 }
 async function assertQoderHubEntry(target, marketplaceRoot) {
   const marketplace = parseJson2(
@@ -136678,10 +136683,11 @@ async function verifyQoderInstalledPayload({
   target,
   root,
   installPath,
+  frozenSkills,
   verifyInstalledPayload
 }) {
   const manifest = await readQoderManifest(installPath, "installed Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest");
+  await assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest", installPath, frozenSkills);
   await verifyInstalledPayload({
     snapshotPath: target.snapshotPath,
     manifestDigest: target.manifestDigest,
@@ -136694,7 +136700,7 @@ async function runQoderUpdate(target, detected, run6, {
   verifyInstalledPayload
 }) {
   const env = hostEnvironment("qoder");
-  await assertFrozenQoderManifest(target, root);
+  const frozenSkills = await assertFrozenQoderManifest(target, root);
   const marketplace = await observeQoderMarketplace(target, detected.command, env, run6);
   if (!marketplace.installed) {
     return {
@@ -136715,6 +136721,7 @@ async function runQoderUpdate(target, detected, run6, {
       target,
       root,
       installPath: before.installPath,
+      frozenSkills,
       verifyInstalledPayload
     });
     return { status: "ALREADY_CURRENT", version: target.version };
@@ -136741,6 +136748,7 @@ async function runQoderUpdate(target, detected, run6, {
     target,
     root,
     installPath: after.installPath,
+    frozenSkills,
     verifyInstalledPayload
   });
   return {

package/adapters/workbuddy/skills/release-help/SKILL.md

@@ -29,9 +29,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
 
-## 0.9.28 能力与证据边界
+## 0.9.30 能力与证据边界
 
-release-skill 0.9.28 精确依赖 Foundation 0.25.0 的公开包根 API。本版本新增可选宿主覆盖诊断能力，支持通过 `--host-coverage <file>` 提供输入文件，报告每个宿主在声明范围内的覆盖状态与事实缺口；同时采用 Codex 0.154.0 静态加载规则检查，基于 11 份真实生成 Skill 的原字节在隔离环境中完成诊断，不证明安装、会话选择或业务执行通过。批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.30 保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 静态加载规则检查 11 份真实生成 Skill 的原字节等既有事实；本版修复私有 Hub 的 postVerify 钩子：通过既有 `envAllowlist` 传递 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE`，其值为原始描述符所指向的已有普通文件绝对路径（拒绝符号链接），交由 Hub `npm run release:check -- --release-evidence <file>` 验证。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。
 
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。
 

package/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.28"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.30"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "9683591bbfad41292831f35e071273e6812b7e5b27adcb0e237dac9672605a36";
+const __bundleSourceDigest = "52acbaddf4e589b42b49defb03ff5dfa59e0306f37a3ce0e8e3aaa240b9cfba4";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -136643,10 +136643,15 @@ async function readQoderManifest(root, label) {
   }
   return manifest;
 }
-function assertQoderPluginManifest(target, manifest, label) {
-  if (manifest.name !== target.plugin || manifest.version !== target.version || manifest.skills !== "./adapters/qoder/skills/") {
+async function assertQoderPluginManifest(target, manifest, label, pluginRoot, frozenSkills) {
+  if (manifest.name !== target.plugin || manifest.version !== target.version || typeof manifest.skills !== "string" || manifest.skills.length === 0 || frozenSkills !== void 0 && manifest.skills !== frozenSkills) {
     throw new Error(`${label} does not match the frozen Qoder plugin identity and projection path`);
   }
+  const skillsRoot = await resolveContained(pluginRoot, manifest.skills);
+  if (!(await lstat45(skillsRoot)).isDirectory()) {
+    throw new Error(`${label} skills path must name a contained directory`);
+  }
+  return manifest.skills;
 }
 async function assertFrozenQoderManifest(target, root) {
   const { snapshotDir: snapshotRoot } = await verifyFrozenSnapshot({
@@ -136655,7 +136660,7 @@ async function assertFrozenQoderManifest(target, root) {
     expectedDigest: target.manifestDigest
   });
   const manifest = await readQoderManifest(snapshotRoot, "frozen Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest");
+  return assertQoderPluginManifest(target, manifest, "frozen Qoder plugin manifest", snapshotRoot);
 }
 async function assertQoderHubEntry(target, marketplaceRoot) {
   const marketplace = parseJson2(
@@ -136678,10 +136683,11 @@ async function verifyQoderInstalledPayload({
   target,
   root,
   installPath,
+  frozenSkills,
   verifyInstalledPayload
 }) {
   const manifest = await readQoderManifest(installPath, "installed Qoder plugin manifest");
-  assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest");
+  await assertQoderPluginManifest(target, manifest, "installed Qoder plugin manifest", installPath, frozenSkills);
   await verifyInstalledPayload({
     snapshotPath: target.snapshotPath,
     manifestDigest: target.manifestDigest,
@@ -136694,7 +136700,7 @@ async function runQoderUpdate(target, detected, run6, {
   verifyInstalledPayload
 }) {
   const env = hostEnvironment("qoder");
-  await assertFrozenQoderManifest(target, root);
+  const frozenSkills = await assertFrozenQoderManifest(target, root);
   const marketplace = await observeQoderMarketplace(target, detected.command, env, run6);
   if (!marketplace.installed) {
     return {
@@ -136715,6 +136721,7 @@ async function runQoderUpdate(target, detected, run6, {
       target,
       root,
       installPath: before.installPath,
+      frozenSkills,
       verifyInstalledPayload
     });
     return { status: "ALREADY_CURRENT", version: target.version };
@@ -136741,6 +136748,7 @@ async function runQoderUpdate(target, detected, run6, {
     target,
     root,
     installPath: after.installPath,
+    frozenSkills,
     verifyInstalledPayload
   });
   return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/platform-manifest.json

@@ -2,11 +2,11 @@
   "schemaVersion": "1.0.0",
   "platformId": "release-skill",
   "platformName": "release-skill Plugin Platform",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "logicalRoot": "skills-src/",
-  "logicalRootDigest": "043a4f6c014adeddf4565a9d04839fd4a4f45b24a904fed105945e29197b02a7",
-  "projectionDigest": "6031c13a38f988088cdfd35f58e61906a348248cc543f0830f27e2432c6c5311",
-  "projectionId": "release-skill:platform:0.9.28",
+  "logicalRootDigest": "1ea3c60db0fbc3c3943d2103f76730500886d0994d5e406e4438d6479df86b62",
+  "projectionDigest": "77fdc2b733c05475ee6784e049ff4ce6b09dcd01f3d4391b3d264603827f1cfa",
+  "projectionId": "release-skill:platform:0.9.30",
   "manifestRequired": true,
   "projectionSources": {
     "skills-src-root": {

package/skills/release-help/SKILL.md

@@ -29,9 +29,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
 
-## 0.9.28 能力与证据边界
+## 0.9.30 能力与证据边界
 
-release-skill 0.9.28 精确依赖 Foundation 0.25.0 的公开包根 API。本版本新增可选宿主覆盖诊断能力，支持通过 `--host-coverage <file>` 提供输入文件，报告每个宿主在声明范围内的覆盖状态与事实缺口；同时采用 Codex 0.154.0 静态加载规则检查，基于 11 份真实生成 Skill 的原字节在隔离环境中完成诊断，不证明安装、会话选择或业务执行通过。批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.30 保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 静态加载规则检查 11 份真实生成 Skill 的原字节等既有事实；本版修复私有 Hub 的 postVerify 钩子：通过既有 `envAllowlist` 传递 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE`，其值为原始描述符所指向的已有普通文件绝对路径（拒绝符号链接），交由 Hub `npm run release:check -- --release-evidence <file>` 验证。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。
 
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。
 

package/skills-src/release-help/SKILL.md

@@ -29,9 +29,9 @@ description: "Discoverable entry point for release-skill: dependency and environ
 
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
 
-## 0.9.28 能力与证据边界
+## 0.9.30 能力与证据边界
 
-release-skill 0.9.28 精确依赖 Foundation 0.25.0 的公开包根 API。本版本新增可选宿主覆盖诊断能力，支持通过 `--host-coverage <file>` 提供输入文件，报告每个宿主在声明范围内的覆盖状态与事实缺口；同时采用 Codex 0.154.0 静态加载规则检查，基于 11 份真实生成 Skill 的原字节在隔离环境中完成诊断，不证明安装、会话选择或业务执行通过。批准、发布和验证状态以对应计划、批准及执行记录为准，不能由本说明推断。
+release-skill 0.9.30 保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 静态加载规则检查 11 份真实生成 Skill 的原字节等既有事实；本版修复私有 Hub 的 postVerify 钩子：通过既有 `envAllowlist` 传递 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE`，其值为原始描述符所指向的已有普通文件绝对路径（拒绝符号链接），交由 Hub `npm run release:check -- --release-evidence <file>` 验证。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。
 
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。
 

package/src/commands/post-release-local.mjs

@@ -857,14 +857,21 @@ async function readQoderManifest(root, label) {
   return manifest;
 }
 
-function assertQoderPluginManifest(target, manifest, label) {
+async function assertQoderPluginManifest(target, manifest, label, pluginRoot, frozenSkills) {
   if (
     manifest.name !== target.plugin
     || manifest.version !== target.version
-    || manifest.skills !== './adapters/qoder/skills/'
+    || typeof manifest.skills !== 'string'
+    || manifest.skills.length === 0
+    || (frozenSkills !== undefined && manifest.skills !== frozenSkills)
   ) {
     throw new Error(`${label} does not match the frozen Qoder plugin identity and projection path`);
   }
+  const skillsRoot = await resolveContained(pluginRoot, manifest.skills);
+  if (!(await lstat(skillsRoot)).isDirectory()) {
+    throw new Error(`${label} skills path must name a contained directory`);
+  }
+  return manifest.skills;
 }
 
 async function assertFrozenQoderManifest(target, root) {
@@ -874,7 +881,7 @@ async function assertFrozenQoderManifest(target, root) {
     expectedDigest: target.manifestDigest,
   });
   const manifest = await readQoderManifest(snapshotRoot, 'frozen Qoder plugin manifest');
-  assertQoderPluginManifest(target, manifest, 'frozen Qoder plugin manifest');
+  return assertQoderPluginManifest(target, manifest, 'frozen Qoder plugin manifest', snapshotRoot);
 }
 
 async function assertQoderHubEntry(target, marketplaceRoot) {
@@ -903,10 +910,11 @@ async function verifyQoderInstalledPayload({
   target,
   root,
   installPath,
+  frozenSkills,
   verifyInstalledPayload,
 }) {
   const manifest = await readQoderManifest(installPath, 'installed Qoder plugin manifest');
-  assertQoderPluginManifest(target, manifest, 'installed Qoder plugin manifest');
+  await assertQoderPluginManifest(target, manifest, 'installed Qoder plugin manifest', installPath, frozenSkills);
   await verifyInstalledPayload({
     snapshotPath: target.snapshotPath,
     manifestDigest: target.manifestDigest,
@@ -920,7 +928,7 @@ async function runQoderUpdate(target, detected, run, {
   verifyInstalledPayload,
 }) {
   const env = hostEnvironment('qoder');
-  await assertFrozenQoderManifest(target, root);
+  const frozenSkills = await assertFrozenQoderManifest(target, root);
   const marketplace = await observeQoderMarketplace(target, detected.command, env, run);
   if (!marketplace.installed) {
     return {
@@ -941,6 +949,7 @@ async function runQoderUpdate(target, detected, run, {
       target,
       root,
       installPath: before.installPath,
+      frozenSkills,
       verifyInstalledPayload,
     });
     return { status: 'ALREADY_CURRENT', version: target.version };
@@ -964,6 +973,7 @@ async function runQoderUpdate(target, detected, run, {
     target,
     root,
     installPath: after.installPath,
+    frozenSkills,
     verifyInstalledPayload,
   });
   return {