release-skill 0.9.30 → 0.9.32

package/adapters/codex/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.30"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.32"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "52acbaddf4e589b42b49defb03ff5dfa59e0306f37a3ce0e8e3aaa240b9cfba4";
+const __bundleSourceDigest = "b023c0808411ba0bf3fea258860422e38fe89a744a6c33676eb07e08c2a43b0b";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -137228,17 +137228,198 @@ function parseCodeBuddyRemoteObservation(target, stdout) {
   };
 }
 function kimiExpectProgram({ removePlugin } = {}) {
-  const removeCommand = removePlugin ? `submitCommand "/plugins remove $removePlugin"
-expect {
-  -nocase -re {(remove|delete|uninstall).*(confirm|sure)|(confirm|sure).*(remove|delete|uninstall)} {
+  const removeCommand = removePlugin ? `proc kimi22RemoveIdentity {dialog} {
+  set identity ""
+  foreach rawLine [split $dialog "\\n"] {
+    set line [string trim $rawLine]
+    if {[regexp -nocase {Remove .+ \\(([^()]+)\\)\\?} $line match pluginId]} {
+      if {$identity ne "" && $identity ne $pluginId} { return "" }
+      set identity $pluginId
+    }
+  }
+  return $identity
+}
+
+proc kimi22RemoveDialogComplete {dialog} {
+  set hasCancel 0
+  set hasRemove 0
+  foreach rawLine [split $dialog "\\n"] {
+    set line [string trim $rawLine]
+    regsub {^\u276F[ \\t]*} $line {} label
+    set label [string trim $label]
+    if {[string equal -nocase $label "Cancel"]} { set hasCancel 1 }
+    if {[string equal -nocase $label "Remove plugin"]} { set hasRemove 1 }
+  }
+  return [expr {$hasCancel && $hasRemove}]
+}
+
+proc kimi22RemoveAction {dialog state unknownCode} {
+  set labels {}
+  set selectedCount 0
+  set selectedIndex -1
+  set selectedLabel ""
+  set removeCount 0
+  set removeIndex -1
+  foreach rawLine [split $dialog "\\n"] {
+    set line [string trim $rawLine]
+    if {$line eq ""} { continue }
+    set selected [regexp {^\u276F[ \\t]*} $line]
+    if {$selected} {
+      regsub {^\u276F[ \\t]*} $line {} label
+      set label [string trim $label]
+    } else {
+      set label $line
+    }
+    set knownAction [expr {
+      [string equal -nocase $label "Cancel"]
+      || [string equal -nocase $label "Remove plugin"]
+    }]
+    if {!$knownAction && $selected} {
+      puts stderr "KIMI_TUI_STATE:$state:unknown"
+      exit $unknownCode
+    }
+    if {!$knownAction} { continue }
+    set index [llength $labels]
+    lappend labels $label
+    if {[string equal -nocase $label "Remove plugin"]} {
+      incr removeCount
+      set removeIndex $index
+    }
+    if {$selected} {
+      incr selectedCount
+      set selectedIndex $index
+      set selectedLabel $label
+    }
+  }
+  if {[llength $labels] != 2 || $removeCount != 1 || $selectedCount != 1} {
+    puts stderr "KIMI_TUI_STATE:$state:unknown"
+    exit $unknownCode
+  }
+  if {[string equal -nocase $selectedLabel "Remove plugin"]} {
+    return selected-remove
+  }
+  if {![string equal -nocase $selectedLabel "Cancel"]} {
+    puts stderr "KIMI_TUI_STATE:$state:unknown"
+    exit $unknownCode
+  }
+  if {$selectedIndex + 1 == $removeIndex} { return move-down }
+  if {$selectedIndex - 1 == $removeIndex} { return move-up }
+  puts stderr "KIMI_TUI_STATE:$state:unknown"
+  exit $unknownCode
+}
+
+proc readKimi22RemoveDialog {prefix state timeoutCode unknownCode eofCode} {
+  global expect_out
+  set dialogBuffer $prefix
+  set cleaned [cleanScreen $dialogBuffer]
+  if {![regexp -nocase {Remove .+ \\(([^()]+)\\)\\?} $cleaned]} {
     expect {
-      -ex $removePlugin {
-        send -- "\\033\\[B"
-        send -- "\\033\\[13u"
+      -nocase -re {Remove [^\\r\\n]*\\([^\\r\\n]+\\)\\?} {
+        append dialogBuffer $expect_out(buffer)
       }
-      timeout { failTimeout remove-confirmation 125 127 }
-      eof { failEof remove-confirmation 126 }
+      timeout { failTimeout $state $timeoutCode $unknownCode }
+      eof { failEof $state $eofCode }
     }
+    set cleaned [cleanScreen $dialogBuffer]
+  }
+  while {![kimi22RemoveDialogComplete $cleaned]} {
+    expect {
+      -nocase -re {Trust this folder\\?} { unexpectedDirectoryTrust }
+      -nocase -re {(?:Cancel|Remove plugin)[^\\r\\n]*\\r*\\n} {
+        append dialogBuffer $expect_out(buffer)
+      }
+      -re {([^\\r\\n]+\\r*\\n)} {
+        append dialogBuffer $expect_out(buffer)
+      }
+      timeout { failTimeout $state $timeoutCode $unknownCode }
+      eof { failEof $state $eofCode }
+    }
+    set cleaned [cleanScreen $dialogBuffer]
+  }
+  # Consume the initial synchronized frame before sending a selection key.
+  # Otherwise its remaining rows can be mistaken for the selection repaint.
+  if {[string last "\\033\\[?2026h" $dialogBuffer] > [string last "\\033\\[?2026l" $dialogBuffer]} {
+    expect {
+      -exact "\\033\\[?2026l" { append dialogBuffer $expect_out(buffer) }
+      timeout { failTimeout $state $timeoutCode $unknownCode }
+      eof { failEof $state $eofCode }
+    }
+    set cleaned [cleanScreen $dialogBuffer]
+  }
+  return $cleaned
+}
+
+proc readKimi22RemoveSelection {} {
+  global expect_out removePlugin
+  expect {
+    -nocase -re {Trust this folder\\?} { unexpectedDirectoryTrust }
+    -nocase -re {Remove [^\\r\\n]*\\([^\\r\\n]+\\)\\?} {
+      set dialog [readKimi22RemoveDialog $expect_out(buffer) remove-confirm-selection 125 127 126]
+      if {[kimi22RemoveIdentity $dialog] ne $removePlugin} {
+        puts stderr "KIMI_TUI_STATE:remove-confirm-selection:unknown"
+        exit 127
+      }
+      return $dialog
+    }
+    -exact "\\033\\[?2026l" {
+      # Kimi 2.2 redraws only the changed menu rows, with no title or final newline.
+      # The initial dialog already bound the plugin; require one complete new frame.
+      if {[string first "\\033\\[?2026h" $expect_out(buffer)] < 0} {
+        puts stderr "KIMI_TUI_STATE:remove-confirm-selection:unknown"
+        exit 127
+      }
+      return [cleanScreen $expect_out(buffer)]
+    }
+    timeout { failTimeout remove-confirm-selection 125 127 }
+    eof { failEof remove-confirm-selection 126 }
+  }
+}
+
+proc confirmKimi22Remove {} {
+  global expect_out promptPattern removePlugin
+  set dialog [readKimi22RemoveDialog $expect_out(buffer) remove-confirmation 125 127 126]
+  set identity [kimi22RemoveIdentity $dialog]
+  if {$identity eq "" || $identity ne $removePlugin} {
+    puts stderr "KIMI_TUI_STATE:remove-confirmation:unknown"
+    exit 127
+  }
+  set action [kimi22RemoveAction $dialog remove-confirmation 127]
+  if {$action eq "move-down"} {
+    send -- "\\033\\[B"
+  } elseif {$action eq "move-up"} {
+    send -- "\\033\\[A"
+  }
+  if {$action ne "selected-remove"} {
+    set confirmedDialog [readKimi22RemoveSelection]
+    set confirmedIdentity [kimi22RemoveIdentity $confirmedDialog]
+    if {$confirmedIdentity ne "" && $confirmedIdentity ne $removePlugin} {
+      puts stderr "KIMI_TUI_STATE:remove-confirm-selection:unknown"
+      exit 127
+    }
+    set confirmedAction [kimi22RemoveAction $confirmedDialog remove-confirm-selection 127]
+    if {$confirmedAction ne "selected-remove"} {
+      puts stderr "KIMI_TUI_STATE:remove-confirm-selection:unknown"
+      exit 127
+    }
+  }
+  send -- "\\033\\[13u"
+  expect {
+    -nocase -re {Trust this folder\\?} { unexpectedDirectoryTrust }
+    -re $promptPattern {}
+    timeout { failTimeout remove-prompt 128 130 }
+    eof { failEof remove-prompt 129 }
+  }
+}
+
+submitCommand "/plugins remove $removePlugin"
+expect {
+  -nocase -re {Confirm remove plugin "([^"\\r\\n]+)"\\?\\r*\\n} {
+    if {$expect_out(1,string) ne $removePlugin} {
+      puts stderr "KIMI_TUI_STATE:remove-confirmation:unknown"
+      exit 127
+    }
+    send -- "\\033\\[B"
+    send -- "\\033\\[13u"
     expect {
       -nocase -re {Trust this folder\\?} { unexpectedDirectoryTrust }
       -re $promptPattern {}
@@ -137246,6 +137427,9 @@ expect {
       eof { failEof remove-prompt 129 }
     }
   }
+  -nocase -re {Remove [^\\r\\n]*\\([^\\r\\n]+\\)\\?} {
+    confirmKimi22Remove
+  }
   -re $promptPattern {}
   -nocase -re {Trust this folder\\?} { unexpectedDirectoryTrust }
   timeout { failTimeout remove-dialog 122 124 }
@@ -146909,7 +147093,7 @@ async function runPostReleaseFinish({
   }
   const setupSkill = loaded.config.releaseFinish?.setupSkill;
   const candidates = observations.filter((entry) => entry.installation === "current" && entry.loaded === true && typeof entry.skillFile === "string");
-  const candidateOwners = new Set(candidates.map((entry) => `${entry.plugin}\0${entry.version}\0${entry.skillFile}`));
+  const candidateOwners = new Set(candidates.map((entry) => `${entry.unitId}\0${entry.plugin}\0${entry.version}`));
   const effectiveSetup = updateKeepsFeedback ? feedback.setup : null;
   let setupStep;
   if (!setupSkill) {

package/adapters/codex/skills/release-help/SKILL.md

@@ -37,9 +37,15 @@ description: "Discoverable entry point for release-skill: dependency and environ
 
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
 
-## 0.9.30 能力与证据边界
+## 0.9.32 能力与证据边界
 
-release-skill 0.9.30 保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 静态加载规则检查 11 份真实生成 Skill 的原字节等既有事实；本版修复私有 Hub 的 postVerify 钩子：通过既有 `envAllowlist` 传递 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE`，其值为原始描述符所指向的已有普通文件绝对路径（拒绝符号链接），交由 Hub `npm run release:check -- --release-evidence <file>` 验证。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。
+0.9.32 修复了 Kimi 2.2.0 移除菜单移动后，适配器因等待完整标题而失败的问题。真实终端只重绘变动的菜单行，不重发插件标题，末行也没有换行。适配器在移动后必须先重新观察选中项，确认唯一选中 `Remove plugin` 后才允许提交操作。读取帧前先核实初始精确插件 ID，读完该帧后才发送方向键，再读取完整增量帧并核对唯一选中项，完整标题重绘时仍核对精确 ID。未知、歧义、未移动、帧未完成、timeout、EOF 均导致失败关闭，不继续安装。 移除确认页仍采用 `Remove <displayName> (<id>)?`，包含 Cancel 和 Remove plugin 选项；已选中 `Remove plugin` 时无需方向键。显示名含 Confirm 或 Sure，或标题分块到达，仍核对精确身份，不触发旧宽泛正则路径。
+
+保留 Kimi 0.40.1 的实际确认措辞 `Confirm remove plugin "<id>"?`、括号粘贴与 CSI Enter 输入方式。冻结的安装 URL/ref/sha、安装后 name/version 与载荷核对规则未变。 真实 Kimi 2.2.0 已完成确认前的精确身份、移动及选中项观察，随后按 Esc 取消并退出，未执行移除、安装或更新。47 项聚焦测试通过，独立代码审阅无发现；真实消费者的完整更新与加载验收仍待执行。修复面向真实更新流程，提供方升级不扩大宿主授权，也无需重发原领域插件。
+
+同一 `unitId/plugin/version` 的共享环境 setup 按单元、插件、版本归并，Claude/Codex 不同物理 `skillFile` 路径不再视为多个 setup 归属。仅需一个已加载宿主的精确 setup 反馈即可满足共享环境检查要求。各宿主的安装、加载及专属配置仍需分别核实，反馈继续绑定 `host/unit/path/plan/config/root`；真正多插件归属仍需消歧，Kimi 失败或其他宿主失败均导致收尾状态为 FAILED，不改变 `VERIFIED`/`DISTRIBUTED` 发布状态。
+
+本版保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 对 11 份真实生成 Skill 的原字节静态检查能力。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。私有 Hub 的 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE` 环境变量继续要求原始描述符指向的已有普通文件绝对路径（拒绝符号链接），交由 `npm run release:check -- --release-evidence <file>` 验证。实际版本能力不能等同于发布状态或真实宿主验收。
 
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。
 

package/adapters/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.30",
+  "version": "0.9.32",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/cursor/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.30"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.32"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "52acbaddf4e589b42b49defb03ff5dfa59e0306f37a3ce0e8e3aaa240b9cfba4";
+const __bundleSourceDigest = "b023c0808411ba0bf3fea258860422e38fe89a744a6c33676eb07e08c2a43b0b";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -137228,17 +137228,198 @@ function parseCodeBuddyRemoteObservation(target, stdout) {
   };
 }
 function kimiExpectProgram({ removePlugin } = {}) {
-  const removeCommand = removePlugin ? `submitCommand "/plugins remove $removePlugin"
-expect {
-  -nocase -re {(remove|delete|uninstall).*(confirm|sure)|(confirm|sure).*(remove|delete|uninstall)} {
+  const removeCommand = removePlugin ? `proc kimi22RemoveIdentity {dialog} {
+  set identity ""
+  foreach rawLine [split $dialog "\\n"] {
+    set line [string trim $rawLine]
+    if {[regexp -nocase {Remove .+ \\(([^()]+)\\)\\?} $line match pluginId]} {
+      if {$identity ne "" && $identity ne $pluginId} { return "" }
+      set identity $pluginId
+    }
+  }
+  return $identity
+}
+
+proc kimi22RemoveDialogComplete {dialog} {
+  set hasCancel 0
+  set hasRemove 0
+  foreach rawLine [split $dialog "\\n"] {
+    set line [string trim $rawLine]
+    regsub {^\u276F[ \\t]*} $line {} label
+    set label [string trim $label]
+    if {[string equal -nocase $label "Cancel"]} { set hasCancel 1 }
+    if {[string equal -nocase $label "Remove plugin"]} { set hasRemove 1 }
+  }
+  return [expr {$hasCancel && $hasRemove}]
+}
+
+proc kimi22RemoveAction {dialog state unknownCode} {
+  set labels {}
+  set selectedCount 0
+  set selectedIndex -1
+  set selectedLabel ""
+  set removeCount 0
+  set removeIndex -1
+  foreach rawLine [split $dialog "\\n"] {
+    set line [string trim $rawLine]
+    if {$line eq ""} { continue }
+    set selected [regexp {^\u276F[ \\t]*} $line]
+    if {$selected} {
+      regsub {^\u276F[ \\t]*} $line {} label
+      set label [string trim $label]
+    } else {
+      set label $line
+    }
+    set knownAction [expr {
+      [string equal -nocase $label "Cancel"]
+      || [string equal -nocase $label "Remove plugin"]
+    }]
+    if {!$knownAction && $selected} {
+      puts stderr "KIMI_TUI_STATE:$state:unknown"
+      exit $unknownCode
+    }
+    if {!$knownAction} { continue }
+    set index [llength $labels]
+    lappend labels $label
+    if {[string equal -nocase $label "Remove plugin"]} {
+      incr removeCount
+      set removeIndex $index
+    }
+    if {$selected} {
+      incr selectedCount
+      set selectedIndex $index
+      set selectedLabel $label
+    }
+  }
+  if {[llength $labels] != 2 || $removeCount != 1 || $selectedCount != 1} {
+    puts stderr "KIMI_TUI_STATE:$state:unknown"
+    exit $unknownCode
+  }
+  if {[string equal -nocase $selectedLabel "Remove plugin"]} {
+    return selected-remove
+  }
+  if {![string equal -nocase $selectedLabel "Cancel"]} {
+    puts stderr "KIMI_TUI_STATE:$state:unknown"
+    exit $unknownCode
+  }
+  if {$selectedIndex + 1 == $removeIndex} { return move-down }
+  if {$selectedIndex - 1 == $removeIndex} { return move-up }
+  puts stderr "KIMI_TUI_STATE:$state:unknown"
+  exit $unknownCode
+}
+
+proc readKimi22RemoveDialog {prefix state timeoutCode unknownCode eofCode} {
+  global expect_out
+  set dialogBuffer $prefix
+  set cleaned [cleanScreen $dialogBuffer]
+  if {![regexp -nocase {Remove .+ \\(([^()]+)\\)\\?} $cleaned]} {
     expect {
-      -ex $removePlugin {
-        send -- "\\033\\[B"
-        send -- "\\033\\[13u"
+      -nocase -re {Remove [^\\r\\n]*\\([^\\r\\n]+\\)\\?} {
+        append dialogBuffer $expect_out(buffer)
       }
-      timeout { failTimeout remove-confirmation 125 127 }
-      eof { failEof remove-confirmation 126 }
+      timeout { failTimeout $state $timeoutCode $unknownCode }
+      eof { failEof $state $eofCode }
     }
+    set cleaned [cleanScreen $dialogBuffer]
+  }
+  while {![kimi22RemoveDialogComplete $cleaned]} {
+    expect {
+      -nocase -re {Trust this folder\\?} { unexpectedDirectoryTrust }
+      -nocase -re {(?:Cancel|Remove plugin)[^\\r\\n]*\\r*\\n} {
+        append dialogBuffer $expect_out(buffer)
+      }
+      -re {([^\\r\\n]+\\r*\\n)} {
+        append dialogBuffer $expect_out(buffer)
+      }
+      timeout { failTimeout $state $timeoutCode $unknownCode }
+      eof { failEof $state $eofCode }
+    }
+    set cleaned [cleanScreen $dialogBuffer]
+  }
+  # Consume the initial synchronized frame before sending a selection key.
+  # Otherwise its remaining rows can be mistaken for the selection repaint.
+  if {[string last "\\033\\[?2026h" $dialogBuffer] > [string last "\\033\\[?2026l" $dialogBuffer]} {
+    expect {
+      -exact "\\033\\[?2026l" { append dialogBuffer $expect_out(buffer) }
+      timeout { failTimeout $state $timeoutCode $unknownCode }
+      eof { failEof $state $eofCode }
+    }
+    set cleaned [cleanScreen $dialogBuffer]
+  }
+  return $cleaned
+}
+
+proc readKimi22RemoveSelection {} {
+  global expect_out removePlugin
+  expect {
+    -nocase -re {Trust this folder\\?} { unexpectedDirectoryTrust }
+    -nocase -re {Remove [^\\r\\n]*\\([^\\r\\n]+\\)\\?} {
+      set dialog [readKimi22RemoveDialog $expect_out(buffer) remove-confirm-selection 125 127 126]
+      if {[kimi22RemoveIdentity $dialog] ne $removePlugin} {
+        puts stderr "KIMI_TUI_STATE:remove-confirm-selection:unknown"
+        exit 127
+      }
+      return $dialog
+    }
+    -exact "\\033\\[?2026l" {
+      # Kimi 2.2 redraws only the changed menu rows, with no title or final newline.
+      # The initial dialog already bound the plugin; require one complete new frame.
+      if {[string first "\\033\\[?2026h" $expect_out(buffer)] < 0} {
+        puts stderr "KIMI_TUI_STATE:remove-confirm-selection:unknown"
+        exit 127
+      }
+      return [cleanScreen $expect_out(buffer)]
+    }
+    timeout { failTimeout remove-confirm-selection 125 127 }
+    eof { failEof remove-confirm-selection 126 }
+  }
+}
+
+proc confirmKimi22Remove {} {
+  global expect_out promptPattern removePlugin
+  set dialog [readKimi22RemoveDialog $expect_out(buffer) remove-confirmation 125 127 126]
+  set identity [kimi22RemoveIdentity $dialog]
+  if {$identity eq "" || $identity ne $removePlugin} {
+    puts stderr "KIMI_TUI_STATE:remove-confirmation:unknown"
+    exit 127
+  }
+  set action [kimi22RemoveAction $dialog remove-confirmation 127]
+  if {$action eq "move-down"} {
+    send -- "\\033\\[B"
+  } elseif {$action eq "move-up"} {
+    send -- "\\033\\[A"
+  }
+  if {$action ne "selected-remove"} {
+    set confirmedDialog [readKimi22RemoveSelection]
+    set confirmedIdentity [kimi22RemoveIdentity $confirmedDialog]
+    if {$confirmedIdentity ne "" && $confirmedIdentity ne $removePlugin} {
+      puts stderr "KIMI_TUI_STATE:remove-confirm-selection:unknown"
+      exit 127
+    }
+    set confirmedAction [kimi22RemoveAction $confirmedDialog remove-confirm-selection 127]
+    if {$confirmedAction ne "selected-remove"} {
+      puts stderr "KIMI_TUI_STATE:remove-confirm-selection:unknown"
+      exit 127
+    }
+  }
+  send -- "\\033\\[13u"
+  expect {
+    -nocase -re {Trust this folder\\?} { unexpectedDirectoryTrust }
+    -re $promptPattern {}
+    timeout { failTimeout remove-prompt 128 130 }
+    eof { failEof remove-prompt 129 }
+  }
+}
+
+submitCommand "/plugins remove $removePlugin"
+expect {
+  -nocase -re {Confirm remove plugin "([^"\\r\\n]+)"\\?\\r*\\n} {
+    if {$expect_out(1,string) ne $removePlugin} {
+      puts stderr "KIMI_TUI_STATE:remove-confirmation:unknown"
+      exit 127
+    }
+    send -- "\\033\\[B"
+    send -- "\\033\\[13u"
     expect {
       -nocase -re {Trust this folder\\?} { unexpectedDirectoryTrust }
       -re $promptPattern {}
@@ -137246,6 +137427,9 @@ expect {
       eof { failEof remove-prompt 129 }
     }
   }
+  -nocase -re {Remove [^\\r\\n]*\\([^\\r\\n]+\\)\\?} {
+    confirmKimi22Remove
+  }
   -re $promptPattern {}
   -nocase -re {Trust this folder\\?} { unexpectedDirectoryTrust }
   timeout { failTimeout remove-dialog 122 124 }
@@ -146909,7 +147093,7 @@ async function runPostReleaseFinish({
   }
   const setupSkill = loaded.config.releaseFinish?.setupSkill;
   const candidates = observations.filter((entry) => entry.installation === "current" && entry.loaded === true && typeof entry.skillFile === "string");
-  const candidateOwners = new Set(candidates.map((entry) => `${entry.plugin}\0${entry.version}\0${entry.skillFile}`));
+  const candidateOwners = new Set(candidates.map((entry) => `${entry.unitId}\0${entry.plugin}\0${entry.version}`));
   const effectiveSetup = updateKeepsFeedback ? feedback.setup : null;
   let setupStep;
   if (!setupSkill) {

package/adapters/cursor/skills/release-help/SKILL.md

@@ -38,9 +38,15 @@ description: "Discoverable entry point for release-skill: dependency and environ
 
 治理诊断只运行 release-skill 自己的只读检查程序，不运行目标 Skill、业务脚本、构建、hook 或发布动作，也不把 `prepare`、`verify`、`release-finish` 当作静态治理入口。用户要求实际接入或发布时，把已有授权带到对应原业务入口；各入口继续执行原有确认、副作用和状态机合同。
 
-## 0.9.30 能力与证据边界
+## 0.9.32 能力与证据边界
 
-release-skill 0.9.30 保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 静态加载规则检查 11 份真实生成 Skill 的原字节等既有事实；本版修复私有 Hub 的 postVerify 钩子：通过既有 `envAllowlist` 传递 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE`，其值为原始描述符所指向的已有普通文件绝对路径（拒绝符号链接），交由 Hub `npm run release:check -- --release-evidence <file>` 验证。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。
+0.9.32 修复了 Kimi 2.2.0 移除菜单移动后，适配器因等待完整标题而失败的问题。真实终端只重绘变动的菜单行，不重发插件标题，末行也没有换行。适配器在移动后必须先重新观察选中项，确认唯一选中 `Remove plugin` 后才允许提交操作。读取帧前先核实初始精确插件 ID，读完该帧后才发送方向键，再读取完整增量帧并核对唯一选中项，完整标题重绘时仍核对精确 ID。未知、歧义、未移动、帧未完成、timeout、EOF 均导致失败关闭，不继续安装。 移除确认页仍采用 `Remove <displayName> (<id>)?`，包含 Cancel 和 Remove plugin 选项；已选中 `Remove plugin` 时无需方向键。显示名含 Confirm 或 Sure，或标题分块到达，仍核对精确身份，不触发旧宽泛正则路径。
+
+保留 Kimi 0.40.1 的实际确认措辞 `Confirm remove plugin "<id>"?`、括号粘贴与 CSI Enter 输入方式。冻结的安装 URL/ref/sha、安装后 name/version 与载荷核对规则未变。 真实 Kimi 2.2.0 已完成确认前的精确身份、移动及选中项观察，随后按 Esc 取消并退出，未执行移除、安装或更新。47 项聚焦测试通过，独立代码审阅无发现；真实消费者的完整更新与加载验收仍待执行。修复面向真实更新流程，提供方升级不扩大宿主授权，也无需重发原领域插件。
+
+同一 `unitId/plugin/version` 的共享环境 setup 按单元、插件、版本归并，Claude/Codex 不同物理 `skillFile` 路径不再视为多个 setup 归属。仅需一个已加载宿主的精确 setup 反馈即可满足共享环境检查要求。各宿主的安装、加载及专属配置仍需分别核实，反馈继续绑定 `host/unit/path/plan/config/root`；真正多插件归属仍需消歧，Kimi 失败或其他宿主失败均导致收尾状态为 FAILED，不改变 `VERIFIED`/`DISTRIBUTED` 发布状态。
+
+本版保留 Foundation 0.25.0 精确依赖、可选宿主覆盖诊断输入 `--host-coverage <file>` 与 `--observe-hosts`、Codex 0.154.0 对 11 份真实生成 Skill 的原字节静态检查能力。静态检查不证明安装、会话选择或业务执行通过，批准、发布和验证状态以对应计划、批准及执行记录为准。Qoder 本机更新路径处理维持既有能力，支持 `./adapters/qoder/skills/` 与 `./skills/` 两种布局，仍核对安装 name/version/skills、路径包含性与实际载荷。私有 Hub 的 `RELEASE_SKILL_HUB_RELEASE_EVIDENCE` 环境变量继续要求原始描述符指向的已有普通文件绝对路径（拒绝符号链接），交由 `npm run release:check -- --release-evidence <file>` 验证。实际版本能力不能等同于发布状态或真实宿主验收。
 
 在冻结前，`prepare` 或新建 `ship` 状态时可重复传入 `--unit <id>`；未传入则默认选择全部单元。延期单元不进入发布计划，亦不获得发布状态。完整配置、生成物新鲜度检查及顶层 Hook 仍作用于全项目范围。`publicSourceAuthorityReceipt` 的 coordinator 与全部 subjects 必须共同选择。
 

package/adapters/kimi/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.30",
+  "version": "0.9.32",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"