release-skill 0.9.8 → 0.9.9

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "release-skill",
       "source": "./",
-      "version": "0.9.8",
+      "version": "0.9.9",
       "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
       "author": {
         "name": "广州市风荷科技有限公司"

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codebuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.9.8.",
+      "Prepare a release plan for version 0.9.9.",
       "Help me understand the release workflow."
     ]
   }

package/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.9.9 locale=en baseline=sha256:44d7cba7d5e4cbe182157c8b200e3a2d9b494d61a9555cd5af5c62c97a60fb37 -->
+## [0.9.9] - 2026-09-04
+
+0.9.9 is a local source candidate that makes Kimi Code plugin trust compare the complete displayed installation identity with the frozen URL. It consumes the three Foundation packages at the exact 0.16.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+
+### Security
+
+- Kimi Code extracts the complete installation identity from the plugin trust dialog, removes ANSI/OSC control sequences and soft wrapping, and compares the result exactly with the frozen installation URL. Similar repository names and tag prefixes or suffixes fail closed.
+- Claude and Codex continue to verify the frozen marketplace repository, ref, and commit before the first marketplace or plugin write when a rebind is required. An unreachable remote, missing ref, or commit mismatch returns `MANUAL_REQUIRED` for that host with zero host writes; other selected hosts continue.
+- Kimi Code continues only when the selected row is confirmed as `Trust and install`. A `Trust this folder?` dialog, an unknown screen, timeout, EOF, or mismatched identity fails closed before unintended confirmation.
+- Any host plan remains a qualified frozen-plan path and requires a VERIFIED-run from the same release lineage before host acceptance; this source candidate does not provide that acceptance.
+
+### Changed
+
+- The English and Chinese README scope descriptions identify 0.9.9 as the current source candidate.
+- The public release-finish flow continues to treat a `proposal-inbox` postVerify hook as proposal delivery plus delivery evidence. The receiver applies, renders, and synchronizes the proposal under its own runbook and governance; no Hub repository or push sequence is built into the public Skill.
+- Kimi Code continues to resolve its effective configuration root from explicit `kimiHome`, then `KIMI_CODE_HOME`, then `~/.kimi-code`; the TUI process and post-install observation use the same root.
+- The current 0.9.9 candidate keeps the narrow R-05 Hook cache v2 consumer path, keeps the CodeBuddy plugin entry explicit as `marketplace: release-skill`, and keeps `--root <project-root>` in release-finish local-finish examples. Foundation dependencies remain pinned to the three released 0.16.0 packages.
+
+### Upgrade Notes
+
+Prepare and approve a new 0.9.9 production plan for these changes. After verify reaches `VERIFIED`, complete every declared postVerify hook with its own immutable checkpoint approval before running release-finish. Real-host acceptance can begin only after 0.9.9 is officially published and VERIFIED; the official 0.9.9 entry must be installed or reloaded first. A source candidate, an older installed entry, or the mere existence of plan and run files cannot complete real-host acceptance. Each selected host must complete a first successful update. On the second run, Claude, Kimi, CodeBuddy, and WorkBuddy must report `ALREADY_CURRENT`; Codex may report `UPDATED` only when it reinstalls the same exact 0.9.9 frozen reference, payload validation passes, and `restartRequired=true` is declared. The local updater uses the Kimi Code TUI path verified for 0.40.1; it does not switch to a web or REST installation path. Confirm that the complete frozen installation URL shown by the plugin trust dialog is exact, and never approve a folder-trust dialog as part of plugin installation. This candidate does not claim that 0.9.9 has already been published or VERIFIED.
+<!-- release-skill:changelog:end version=0.9.9 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.9.8 locale=en baseline=sha256:ed56048811dd7946bfdaa4022d0430906db713ef86eed1528395dbfb031b075e -->
 ## [0.9.8] - 2026-09-04
 

package/INSTALL.md

@@ -2,7 +2,7 @@
 
 [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.9.8 -->
+<!-- release-skill:release-version: 0.9.9 -->
 ## Prerequisites
 
 - Node.js 22.0.0 or later
@@ -114,7 +114,7 @@ tag pinned to the exact version (never the bare repository URL, which installs
 the latest release or default branch), confirm the trust prompt, then reload:
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.8
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.9
    /plugins reload
    ```
 

package/INSTALL.zh-CN.md

@@ -2,7 +2,7 @@
 
 [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.9.8 -->
+<!-- release-skill:release-version: 0.9.9 -->
 ## 前置条件
 
 - Node.js 22.0.0 或更高版本
@@ -104,7 +104,7 @@ release-skill 当前只采用并验证 Kimi Code 的交互式 TUI 路径，**无
 （切勿使用裸仓库地址，它会安装最新 release 或默认分支），确认信任提示后重新加载：
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.8
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.9
    /plugins reload
    ```
 

package/README.md

@@ -2,7 +2,7 @@
 
 [简体中文](README.zh-CN.md) · Installation: [English](INSTALL.md) / [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.9.8 -->
+<!-- release-skill:release-version: 0.9.9 -->
 Release preparation for Claude Code, CodeBuddy, WorkBuddy, Codex, and Kimi Code, with human-edited files kept intact.
 
 release-skill helps a maintainer answer three questions: what will be released,
@@ -14,33 +14,31 @@ Setup surfaces only the deterministic `compactSummary` review view; the full
 report stays in a temporary session directory.
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.8** (2026-09-04)
+**0.9.9** (2026-09-04)
 
-0.9.8 is a local source candidate that makes release-finish safe across receiver boundaries and current local hosts. It removes Hub-specific work from the public finishing flow, verifies frozen Claude and Codex marketplace identities before rebind writes, supports the Kimi Code 0.40.1 TUI, and skips empty distribute runs for plans that contain only postVerify hooks. It consumes the three Foundation packages at the exact 0.16.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+0.9.9 is a local source candidate that makes Kimi Code plugin trust compare the complete displayed installation identity with the frozen URL. It consumes the three Foundation packages at the exact 0.16.0 release. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
 
 **Security**
 
-- Claude and Codex verify the frozen marketplace repository, ref, and commit before the first marketplace or plugin write when a rebind is required. An unreachable remote, missing ref, or commit mismatch returns `MANUAL_REQUIRED` for that host with zero host writes; other selected hosts continue.
-- Kimi Code plugin trust proceeds only when the dialog contains the frozen repository and tag and the selected row is confirmed as `Trust and install`. A `Trust this folder?` dialog, an unknown screen, timeout, EOF, or mismatched identity fails closed before unintended confirmation.
-- Kimi Code reports success only after the TUI displays its install-finished result and the installed registry, package version, tag, revision, managed root, and payload all match the frozen plan.
+- Kimi Code extracts the complete installation identity from the plugin trust dialog, removes ANSI/OSC control sequences and soft wrapping, and compares the result exactly with the frozen installation URL. Similar repository names and tag prefixes or suffixes fail closed.
+- Claude and Codex continue to verify the frozen marketplace repository, ref, and commit before the first marketplace or plugin write when a rebind is required. An unreachable remote, missing ref, or commit mismatch returns `MANUAL_REQUIRED` for that host with zero host writes; other selected hosts continue.
+- Kimi Code continues only when the selected row is confirmed as `Trust and install`. A `Trust this folder?` dialog, an unknown screen, timeout, EOF, or mismatched identity fails closed before unintended confirmation.
 - Any host plan remains a qualified frozen-plan path and requires a VERIFIED-run from the same release lineage before host acceptance; this source candidate does not provide that acceptance.
 
 **Changed**
 
-- The public release-finish flow treats a `proposal-inbox` postVerify hook as proposal delivery plus delivery evidence. The receiver applies, renders, and synchronizes the proposal under its own runbook and governance; no Hub repository or push sequence is built into the public Skill.
-- Local-host ordering follows each host's frozen installation source. Receiver completion is not a universal prerequisite for updating unrelated hosts.
-- Kimi Code resolves its effective configuration root from explicit `kimiHome`, then `KIMI_CODE_HOME`, then `~/.kimi-code`; the TUI process and post-install observation use the same root.
-- The Kimi Code 0.40.1 TUI path normalizes ANSI/OSC control sequences and soft-wrapped URLs, uses a wide pseudo-terminal, submits commands through bracketed paste plus CSI Enter, and waits for explicit prompt, trust, install-result, reload, and exit states.
-- A single phase-aware postPublish predicate now requires distribute only for targets, explicit distribute hooks, or hooks whose omitted phase defaults to distribute. A plan containing only postVerify hooks moves from PUBLISHED directly to verify and runs postVerify independently after VERIFIED.
-- The current 0.9.8 candidate includes the narrow R-05 Hook cache v2 consumer path, keeps the CodeBuddy plugin entry explicit as `marketplace: release-skill`, and keeps `--root <project-root>` in release-finish local-finish examples. Foundation dependencies are pinned to the three released 0.16.0 packages.
+- The English and Chinese README scope descriptions identify 0.9.9 as the current source candidate.
+- The public release-finish flow continues to treat a `proposal-inbox` postVerify hook as proposal delivery plus delivery evidence. The receiver applies, renders, and synchronizes the proposal under its own runbook and governance; no Hub repository or push sequence is built into the public Skill.
+- Kimi Code continues to resolve its effective configuration root from explicit `kimiHome`, then `KIMI_CODE_HOME`, then `~/.kimi-code`; the TUI process and post-install observation use the same root.
+- The current 0.9.9 candidate keeps the narrow R-05 Hook cache v2 consumer path, keeps the CodeBuddy plugin entry explicit as `marketplace: release-skill`, and keeps `--root <project-root>` in release-finish local-finish examples. Foundation dependencies remain pinned to the three released 0.16.0 packages.
 
 **Upgrade Notes**
 
-Prepare and approve a new 0.9.8 production plan for these changes. After verify reaches `VERIFIED`, complete every declared postVerify hook with its own immutable checkpoint approval before running release-finish. Real-host acceptance can begin only after 0.9.8 is officially published and VERIFIED; the official 0.9.8 entry must be installed or reloaded first. A source candidate, an older installed entry, or the mere existence of plan and run files cannot complete real-host acceptance. Each selected host must complete a first successful update. On the second run, Claude, Kimi, CodeBuddy, and WorkBuddy must report `ALREADY_CURRENT`; Codex may report `UPDATED` only when it reinstalls the same exact 0.9.8 frozen reference, payload validation passes, and `restartRequired=true` is declared. The local updater uses the Kimi Code TUI path verified for 0.40.1; it does not switch to a web or REST installation path. Confirm the frozen repository and tag shown by the plugin trust dialog, and never approve a folder-trust dialog as part of plugin installation. This candidate does not claim that 0.9.8 has already been published or VERIFIED.
+Prepare and approve a new 0.9.9 production plan for these changes. After verify reaches `VERIFIED`, complete every declared postVerify hook with its own immutable checkpoint approval before running release-finish. Real-host acceptance can begin only after 0.9.9 is officially published and VERIFIED; the official 0.9.9 entry must be installed or reloaded first. A source candidate, an older installed entry, or the mere existence of plan and run files cannot complete real-host acceptance. Each selected host must complete a first successful update. On the second run, Claude, Kimi, CodeBuddy, and WorkBuddy must report `ALREADY_CURRENT`; Codex may report `UPDATED` only when it reinstalls the same exact 0.9.9 frozen reference, payload validation passes, and `restartRequired=true` is declared. The local updater uses the Kimi Code TUI path verified for 0.40.1; it does not switch to a web or REST installation path. Confirm that the complete frozen installation URL shown by the plugin trust dialog is exact, and never approve a folder-trust dialog as part of plugin installation. This candidate does not claim that 0.9.9 has already been published or VERIFIED.
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **Current boundary:** v0.9.8 is the current source candidate. This README
+> **Current boundary:** v0.9.9 is the current source candidate. This README
 > records intended scope and verification boundaries; it is not evidence of
 > publication, consumer-installation verification, or independent acceptance.
 > Release availability must be established from the corresponding release records
@@ -64,7 +62,7 @@ Prepare and approve a new 0.9.8 production plan for these changes. After verify
 > publish global preflight.
 
 <!-- release-skill:capability:safe-first-command -->
-> **Production path verified since the v0.1.1 milestone; v0.9.8 is the current
+> **Production path verified since the v0.1.1 milestone; v0.9.9 is the current
 > source candidate. Its README does not establish publication,
 > consumer-installation verification, or independent acceptance.**
 > The npm-installed CLI is the supported user entry. Source checkout
@@ -93,7 +91,7 @@ checkpoints remain intact and use matching-version recovery. Evidence v1 stays
 read-only; v2 uses a closed top level with phase extensions in `details`.
 Summaries and recovery suggestions are diagnostic, never publication authority.
 
-The current 0.9.7 candidate includes the narrow R-05 Hook cache v2 consumer
+The current 0.9.9 candidate includes the narrow R-05 Hook cache v2 consumer
 path, the public `postverify` path, and the stable isolated install-tree record
 path (A2/A3). It still
 excludes R-02 safe full-tree inventory, R-10 historical-release verification

package/README.zh-CN.md

@@ -2,39 +2,37 @@
 
 [English](README.md) · 安装指南：[中文](INSTALL.zh-CN.md) / [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.9.8 -->
+<!-- release-skill:release-version: 0.9.9 -->
 面向 Claude Code、CodeBuddy、WorkBuddy、Codex 和 Kimi Code 的发布准备工具，完整保留人工维护的文件内容。
 
 release-skill 帮助维护者回答三个问题：准备发布什么、还有哪些检查未通过、最终发布的内容是什么。它不重新生成、也不回写项目源文件。`prepare` 把每个配置的公开文件复制到隔离快照并验证字节——先冻结并供人工审阅，再从同一份冻结产物发布。`setup` 只显示确定性的 `compactSummary` 审阅视图，完整报告保留在临时会话目录中。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.8** (2026-09-04)
+**0.9.9** (2026-09-04)
 
-0.9.8 是修正 release-finish 接收端边界和当前本机宿主安全性的本地源码候选。它从公共收尾流程移除 Hub 专属操作，在 Claude 和 Codex 重绑市场前验证冻结身份，支持 Kimi Code 0.40.1 TUI，并让只有 postVerify hook 的计划跳过空 distribute。三项 Foundation 依赖均精确消费已发布的 0.16.0。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收。
+0.9.9 是修正 Kimi Code 插件信任身份精确比较的本地源码候选。三项 Foundation 依赖均精确消费已发布的 0.16.0。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收。
 
 **安全**
 
-- Claude 和 Codex 仅在确实需要重绑时，于第一条市场或插件写命令前验证冻结的 marketplace 仓库、ref 和 commit。远端不可达、ref 缺失或 commit 不一致时，该宿主以零写入返回 `MANUAL_REQUIRED`，其他已选宿主继续。
-- Kimi Code 只有在插件信任对话框包含冻结 repo 和 tag，且选中项确认为 `Trust and install` 时才继续。出现 `Trust this folder?`、未知界面、超时、EOF 或身份不一致时，在意外确认前失败关闭。
-- Kimi Code 只有在 TUI 显示安装完成，而且安装登记、package version、tag、revision、受管根和载荷都与冻结计划一致后才报告成功。
+- Kimi Code 会从插件信任对话框提取完整安装身份，清除 ANSI/OSC 控制序列并归一软换行，再与冻结安装 URL 精确比较。相似仓库名、tag 前缀或 tag 后缀均失败关闭。
+- Claude 和 Codex 继续在确实需要重绑时，于第一条市场或插件写命令前验证冻结的 marketplace 仓库、ref 和 commit。远端不可达、ref 缺失或 commit 不一致时，该宿主以零写入返回 `MANUAL_REQUIRED`，其他已选宿主继续。
+- Kimi Code 只有在选中项确认为 `Trust and install` 时才继续。出现 `Trust this folder?`、未知界面、超时、EOF 或身份不一致时，在意外确认前失败关闭。
 - 任何宿主计划都必须是合格冻结计划，并要求同一发布谱系的 VERIFIED run 才能开始宿主验收；本源码候选不提供该验收。
 
 **变更**
 
-- 公共 release-finish 只把 `proposal-inbox` postVerify hook 定义为提案送达和送达证据。接收端按自身 runbook 和治理应用、渲染与同步提案；公共 Skill 不再内置 Hub 仓库或推送顺序。
-- 本机宿主顺序按各宿主在冻结计划中的真实安装来源决定。接收端完成不是更新无关宿主的统一前置条件。
-- Kimi Code 有效配置根依次取显式 `kimiHome`、`KIMI_CODE_HOME` 和 `~/.kimi-code`；TUI 进程与安装后观察使用同一根目录。
-- Kimi Code 0.40.1 TUI 路径会归一 ANSI/OSC 控制序列和 URL 软换行，使用宽伪终端，以 bracketed paste 加 CSI Enter 提交命令，并显式等待提示符、插件信任、安装结果、重载与退出状态。
-- 统一的 phase-aware postPublish 判定只在存在 target、显式 distribute hook，或 hook 缺省 phase 按既有规则属于 distribute 时要求 distribute。只有 postVerify hook 的计划从 PUBLISHED 直接进入 verify，并在 VERIFIED 后独立执行 postVerify。
-- 当前 0.9.8 候选包含窄范围的 R-05 Hook cache v2 消费路径，保留 CodeBuddy 插件显式的 `marketplace: release-skill` 条目，并在 release-finish 本机收尾示例中保留 `--root <project-root>`。Foundation 三包精确依赖已发布的 0.16.0。
+- 中英文 README 的范围说明统一把 0.9.9 标为当前源码候选。
+- 公共 release-finish 继续只把 `proposal-inbox` postVerify hook 定义为提案送达和送达证据。接收端按自身 runbook 和治理应用、渲染与同步提案；公共 Skill 不内置 Hub 仓库或推送顺序。
+- Kimi Code 有效配置根继续依次取显式 `kimiHome`、`KIMI_CODE_HOME` 和 `~/.kimi-code`；TUI 进程与安装后观察使用同一根目录。
+- 当前 0.9.9 候选保留窄范围的 R-05 Hook cache v2 消费路径，保留 CodeBuddy 插件显式的 `marketplace: release-skill` 条目，并在 release-finish 本机收尾示例中保留 `--root <project-root>`。Foundation 三包继续精确依赖已发布的 0.16.0。
 
 **升级说明**
 
-采用这些修复时，应准备并批准新的 0.9.8 production plan。verify 达到 `VERIFIED` 后，先用各 hook 独立的不可变 checkpoint approval 完成所有已声明 postVerify，再运行 release-finish。真实宿主验收只有在 0.9.8 正式发布并达到 VERIFIED 后才能开始；必须先安装或重载正式的 0.9.8 入口。源码候选、旧的已安装入口，或仅存在计划和运行文件，都不能完成真实宿主验收。每个已选宿主都必须完成首次成功更新。第二次运行时，Claude、Kimi、CodeBuddy 和 WorkBuddy 必须返回 `ALREADY_CURRENT`；Codex 可以返回 `UPDATED`，但只有在重新安装同一精确 0.9.8 冻结引用、载荷验证通过并声明 `restartRequired=true` 时才允许这样返回。本机 updater 采用已针对 Kimi Code 0.40.1 验证的 TUI 路径，不切换到 Web 或 REST 安装路径。插件信任界面显示的仓库与 tag 必须和冻结目标一致；插件安装过程中不得批准目录信任界面。本候选不宣称 0.9.8 已经发布或达到 VERIFIED。
+采用这些修复时，应准备并批准新的 0.9.9 production plan。verify 达到 `VERIFIED` 后，先用各 hook 独立的不可变 checkpoint approval 完成所有已声明 postVerify，再运行 release-finish。真实宿主验收只有在 0.9.9 正式发布并达到 VERIFIED 后才能开始；必须先安装或重载正式的 0.9.9 入口。源码候选、旧的已安装入口，或仅存在计划和运行文件，都不能完成真实宿主验收。每个已选宿主都必须完成首次成功更新。第二次运行时，Claude、Kimi、CodeBuddy 和 WorkBuddy 必须返回 `ALREADY_CURRENT`；Codex 可以返回 `UPDATED`，但只有在重新安装同一精确 0.9.9 冻结引用、载荷验证通过并声明 `restartRequired=true` 时才允许这样返回。本机 updater 采用已针对 Kimi Code 0.40.1 验证的 TUI 路径，不切换到 Web 或 REST 安装路径。插件信任界面显示的完整冻结安装 URL 必须精确一致；插件安装过程中不得批准目录信任界面。本候选不宣称 0.9.9 已经发布或达到 VERIFIED。
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **当前边界：** v0.9.8 只是当前源码候选。本 README 记录预期范围与验证边界，
+> **当前边界：** v0.9.9 只是当前源码候选。本 README 记录预期范围与验证边界，
 > 不代表已经发布、完成消费者安装验证或通过独立验收。
 > 版本可用性以对应发布记录及发布后验证结果为准。
 > v0.4.1 是更早的已发布里程碑（v0.2.2 曾处于已发布状态，后因平台验证收敛修复而更新）。
@@ -50,7 +48,7 @@ release-skill 帮助维护者回答三个问题：准备发布什么、还有哪
 > 远端唯一性检查在 `publish` 全局预检执行。
 
 <!-- release-skill:capability:safe-first-command -->
-> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.8 是当前源码候选，本 README 不证明该候选已经发布、完成消费者安装验证或通过独立验收。**
+> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.9 是当前源码候选，本 README 不证明该候选已经发布、完成消费者安装验证或通过独立验收。**
 > npm 安装的 CLI 是受支持的用户入口；源码 checkout 保留为开发/贡献者路径。
 >
 > **第一条命令：**
@@ -68,7 +66,7 @@ marketplace 委托目标工作区发布的边界不变。
 
 旧 production 计划缺少 `sourceAuthority` 时，在外部写入前拒绝。未发生外部写入的计划必须重新 prepare 并批准新摘要，不能补写旧计划或迁移批准。已有 `PARTIAL` 保留检查点，走匹配版本的恢复路径。evidence v1 只读；v2 顶层封闭，阶段扩展放在 `details`。摘要和恢复建议只作诊断，不构成发布权威。
 
-当前 0.9.7 候选包含窄范围的 R-05 Hook cache v2 消费路径、公开 `postverify` 路径和稳定隔离安装树记录路径（A2/A3）。当前仍不包含 R-02 安全整树盘点、R-10 历史发布验证的产品实现、真实 Kimi/WorkBuddy 公开市场安装与调用门禁或 Audit 公开离线发布记录验证器。本范围说明不构成远端发布记录或消费者升级指引。
+当前 0.9.9 候选包含窄范围的 R-05 Hook cache v2 消费路径、公开 `postverify` 路径和稳定隔离安装树记录路径（A2/A3）。当前仍不包含 R-02 安全整树盘点、R-10 历史发布验证的产品实现、真实 Kimi/WorkBuddy 公开市场安装与调用门禁或 Audit 公开离线发布记录验证器。本范围说明不构成远端发布记录或消费者升级指引。
 
 Foundation 三包精确依赖已发布的 0.16.0。新生成的 Kimi/CodeBuddy 同仓计划在 verify 阶段调用正式 `runPluginVerification`，把完整冻结载荷交给 Foundation，并记录最小的 `install-only` 观察收据。Kimi 映射为 `kimi-code`，CodeBuddy 映射为兼容的 `workbuddy`。`observed` 与 `payloadMatches` 只表示机制观察结果，不代表远端已发布或 release-skill 已完成领域验证。独立市场来源、真实市场安装和宿主调用仍是人工后续任务。
 

package/adapters/claude/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "release-skill",
       "source": "./",
-      "version": "0.9.8",
+      "version": "0.9.9",
       "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
       "author": {
         "name": "广州市风荷科技有限公司"

package/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/claude/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.8"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.9"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "7fa9e4b55133e888e3f3ace288f0194eb1ac063c0616252d2dda8e58be7eee21";
+const __bundleSourceDigest = "ef2ec274a982afcf48acdbccdf32439d199dd1d79b4a39b1aeaef23195fadbfb";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -132339,7 +132339,7 @@ proc cleanScreen {value} {
 proc compactScreen {value} {
   set value [cleanScreen $value]
   regsub -all {[[:space:]]+} $value {} value
-  return [string tolower $value]
+  return $value
 }
 
 proc extractPluginTrustDialog {value} {
@@ -132354,6 +132354,22 @@ proc extractPluginTrustDialog {value} {
   return [string range $cleaned $dialogStart end]
 }
 
+proc extractPluginTrustIdentity {value} {
+  set cleaned [cleanScreen $value]
+  set lowered [string tolower $cleaned]
+  set identityStart -1
+  foreach marker {"install third-party plugin " "trust and install from "} {
+    set markerStart [string last $marker $lowered]
+    if {$markerStart >= 0 && $markerStart + [string length $marker] > $identityStart} {
+      set identityStart [expr {$markerStart + [string length $marker]}]
+    }
+  }
+  if {$identityStart < 0} { return "" }
+  set identityEnd [string first "?" $cleaned $identityStart]
+  if {$identityEnd < 0} { return "" }
+  return [string range $cleaned $identityStart [expr {$identityEnd - 1}]]
+}
+
 proc failTimeout {state timeoutCode unknownCode} {
   global expect_out
   set buffer ""
@@ -132425,12 +132441,14 @@ if {$dialog eq ""} {
   puts stderr "KIMI_TUI_STATE:plugin-trust:dialog-unknown"
   exit 113
 }
-set compactDialog [compactScreen $dialog]
-if {[string first [string tolower [compactScreen $expectedRepo]] $compactDialog] < 0} {
-  puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
-  exit 111
-}
-if {[string first [string tolower [compactScreen $expectedTag]] $compactDialog] < 0} {
+set identity [extractPluginTrustIdentity $dialog]
+set compactIdentity [compactScreen $identity]
+if {$identity eq "" || $compactIdentity ne [compactScreen $installUrl]} {
+  set expectedRepoPrefix "[compactScreen $expectedRepo]/releases/tag/"
+  if {[string first $expectedRepoPrefix $compactIdentity] != 0} {
+    puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
+    exit 111
+  }
   puts stderr "KIMI_TUI_STATE:plugin-trust:tag-mismatch"
   exit 112
 }

package/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.9.8.",
+      "Prepare a release plan for version 0.9.9.",
       "Help me understand the release workflow."
     ]
   }

package/adapters/codex/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.8"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.9"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "7fa9e4b55133e888e3f3ace288f0194eb1ac063c0616252d2dda8e58be7eee21";
+const __bundleSourceDigest = "ef2ec274a982afcf48acdbccdf32439d199dd1d79b4a39b1aeaef23195fadbfb";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -132339,7 +132339,7 @@ proc cleanScreen {value} {
 proc compactScreen {value} {
   set value [cleanScreen $value]
   regsub -all {[[:space:]]+} $value {} value
-  return [string tolower $value]
+  return $value
 }
 
 proc extractPluginTrustDialog {value} {
@@ -132354,6 +132354,22 @@ proc extractPluginTrustDialog {value} {
   return [string range $cleaned $dialogStart end]
 }
 
+proc extractPluginTrustIdentity {value} {
+  set cleaned [cleanScreen $value]
+  set lowered [string tolower $cleaned]
+  set identityStart -1
+  foreach marker {"install third-party plugin " "trust and install from "} {
+    set markerStart [string last $marker $lowered]
+    if {$markerStart >= 0 && $markerStart + [string length $marker] > $identityStart} {
+      set identityStart [expr {$markerStart + [string length $marker]}]
+    }
+  }
+  if {$identityStart < 0} { return "" }
+  set identityEnd [string first "?" $cleaned $identityStart]
+  if {$identityEnd < 0} { return "" }
+  return [string range $cleaned $identityStart [expr {$identityEnd - 1}]]
+}
+
 proc failTimeout {state timeoutCode unknownCode} {
   global expect_out
   set buffer ""
@@ -132425,12 +132441,14 @@ if {$dialog eq ""} {
   puts stderr "KIMI_TUI_STATE:plugin-trust:dialog-unknown"
   exit 113
 }
-set compactDialog [compactScreen $dialog]
-if {[string first [string tolower [compactScreen $expectedRepo]] $compactDialog] < 0} {
-  puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
-  exit 111
-}
-if {[string first [string tolower [compactScreen $expectedTag]] $compactDialog] < 0} {
+set identity [extractPluginTrustIdentity $dialog]
+set compactIdentity [compactScreen $identity]
+if {$identity eq "" || $compactIdentity ne [compactScreen $installUrl]} {
+  set expectedRepoPrefix "[compactScreen $expectedRepo]/releases/tag/"
+  if {[string first $expectedRepoPrefix $compactIdentity] != 0} {
+    puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
+    exit 111
+  }
   puts stderr "KIMI_TUI_STATE:plugin-trust:tag-mismatch"
   exit 112
 }

package/adapters/kimi/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/kimi/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.8"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.9"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "7fa9e4b55133e888e3f3ace288f0194eb1ac063c0616252d2dda8e58be7eee21";
+const __bundleSourceDigest = "ef2ec274a982afcf48acdbccdf32439d199dd1d79b4a39b1aeaef23195fadbfb";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -132339,7 +132339,7 @@ proc cleanScreen {value} {
 proc compactScreen {value} {
   set value [cleanScreen $value]
   regsub -all {[[:space:]]+} $value {} value
-  return [string tolower $value]
+  return $value
 }
 
 proc extractPluginTrustDialog {value} {
@@ -132354,6 +132354,22 @@ proc extractPluginTrustDialog {value} {
   return [string range $cleaned $dialogStart end]
 }
 
+proc extractPluginTrustIdentity {value} {
+  set cleaned [cleanScreen $value]
+  set lowered [string tolower $cleaned]
+  set identityStart -1
+  foreach marker {"install third-party plugin " "trust and install from "} {
+    set markerStart [string last $marker $lowered]
+    if {$markerStart >= 0 && $markerStart + [string length $marker] > $identityStart} {
+      set identityStart [expr {$markerStart + [string length $marker]}]
+    }
+  }
+  if {$identityStart < 0} { return "" }
+  set identityEnd [string first "?" $cleaned $identityStart]
+  if {$identityEnd < 0} { return "" }
+  return [string range $cleaned $identityStart [expr {$identityEnd - 1}]]
+}
+
 proc failTimeout {state timeoutCode unknownCode} {
   global expect_out
   set buffer ""
@@ -132425,12 +132441,14 @@ if {$dialog eq ""} {
   puts stderr "KIMI_TUI_STATE:plugin-trust:dialog-unknown"
   exit 113
 }
-set compactDialog [compactScreen $dialog]
-if {[string first [string tolower [compactScreen $expectedRepo]] $compactDialog] < 0} {
-  puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
-  exit 111
-}
-if {[string first [string tolower [compactScreen $expectedTag]] $compactDialog] < 0} {
+set identity [extractPluginTrustIdentity $dialog]
+set compactIdentity [compactScreen $identity]
+if {$identity eq "" || $compactIdentity ne [compactScreen $installUrl]} {
+  set expectedRepoPrefix "[compactScreen $expectedRepo]/releases/tag/"
+  if {[string first $expectedRepoPrefix $compactIdentity] != 0} {
+    puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
+    exit 111
+  }
   puts stderr "KIMI_TUI_STATE:plugin-trust:tag-mismatch"
   exit 112
 }

package/adapters/workbuddy/.codebuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/workbuddy/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.8"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.9"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "7fa9e4b55133e888e3f3ace288f0194eb1ac063c0616252d2dda8e58be7eee21";
+const __bundleSourceDigest = "ef2ec274a982afcf48acdbccdf32439d199dd1d79b4a39b1aeaef23195fadbfb";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -132339,7 +132339,7 @@ proc cleanScreen {value} {
 proc compactScreen {value} {
   set value [cleanScreen $value]
   regsub -all {[[:space:]]+} $value {} value
-  return [string tolower $value]
+  return $value
 }
 
 proc extractPluginTrustDialog {value} {
@@ -132354,6 +132354,22 @@ proc extractPluginTrustDialog {value} {
   return [string range $cleaned $dialogStart end]
 }
 
+proc extractPluginTrustIdentity {value} {
+  set cleaned [cleanScreen $value]
+  set lowered [string tolower $cleaned]
+  set identityStart -1
+  foreach marker {"install third-party plugin " "trust and install from "} {
+    set markerStart [string last $marker $lowered]
+    if {$markerStart >= 0 && $markerStart + [string length $marker] > $identityStart} {
+      set identityStart [expr {$markerStart + [string length $marker]}]
+    }
+  }
+  if {$identityStart < 0} { return "" }
+  set identityEnd [string first "?" $cleaned $identityStart]
+  if {$identityEnd < 0} { return "" }
+  return [string range $cleaned $identityStart [expr {$identityEnd - 1}]]
+}
+
 proc failTimeout {state timeoutCode unknownCode} {
   global expect_out
   set buffer ""
@@ -132425,12 +132441,14 @@ if {$dialog eq ""} {
   puts stderr "KIMI_TUI_STATE:plugin-trust:dialog-unknown"
   exit 113
 }
-set compactDialog [compactScreen $dialog]
-if {[string first [string tolower [compactScreen $expectedRepo]] $compactDialog] < 0} {
-  puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
-  exit 111
-}
-if {[string first [string tolower [compactScreen $expectedTag]] $compactDialog] < 0} {
+set identity [extractPluginTrustIdentity $dialog]
+set compactIdentity [compactScreen $identity]
+if {$identity eq "" || $compactIdentity ne [compactScreen $installUrl]} {
+  set expectedRepoPrefix "[compactScreen $expectedRepo]/releases/tag/"
+  if {[string first $expectedRepoPrefix $compactIdentity] != 0} {
+    puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
+    exit 111
+  }
   puts stderr "KIMI_TUI_STATE:plugin-trust:tag-mismatch"
   exit 112
 }

package/bin/release-skill.bundle.mjs

@@ -9,9 +9,9 @@ const __bundlePkgRoot = __bundleResolve(__bundleDirname(__bundleFileURLToPath(im
 // Provide a real require() for CJS packages bundled into ESM (e.g. yaml, ajv).
 const __bundleRealRequire = __bundleCreateRequire(import.meta.url);
 // Package identity injected at build time — closure-independent --version probe.
-const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.8"});
+const __bundlePkg = Object.freeze({"name":"release-skill","version":"0.9.9"});
 // Build-time source digest for the BUNDLE_STALE freshness gate (see above).
-const __bundleSourceDigest = "7fa9e4b55133e888e3f3ace288f0194eb1ac063c0616252d2dda8e58be7eee21";
+const __bundleSourceDigest = "ef2ec274a982afcf48acdbccdf32439d199dd1d79b4a39b1aeaef23195fadbfb";
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -132339,7 +132339,7 @@ proc cleanScreen {value} {
 proc compactScreen {value} {
   set value [cleanScreen $value]
   regsub -all {[[:space:]]+} $value {} value
-  return [string tolower $value]
+  return $value
 }
 
 proc extractPluginTrustDialog {value} {
@@ -132354,6 +132354,22 @@ proc extractPluginTrustDialog {value} {
   return [string range $cleaned $dialogStart end]
 }
 
+proc extractPluginTrustIdentity {value} {
+  set cleaned [cleanScreen $value]
+  set lowered [string tolower $cleaned]
+  set identityStart -1
+  foreach marker {"install third-party plugin " "trust and install from "} {
+    set markerStart [string last $marker $lowered]
+    if {$markerStart >= 0 && $markerStart + [string length $marker] > $identityStart} {
+      set identityStart [expr {$markerStart + [string length $marker]}]
+    }
+  }
+  if {$identityStart < 0} { return "" }
+  set identityEnd [string first "?" $cleaned $identityStart]
+  if {$identityEnd < 0} { return "" }
+  return [string range $cleaned $identityStart [expr {$identityEnd - 1}]]
+}
+
 proc failTimeout {state timeoutCode unknownCode} {
   global expect_out
   set buffer ""
@@ -132425,12 +132441,14 @@ if {$dialog eq ""} {
   puts stderr "KIMI_TUI_STATE:plugin-trust:dialog-unknown"
   exit 113
 }
-set compactDialog [compactScreen $dialog]
-if {[string first [string tolower [compactScreen $expectedRepo]] $compactDialog] < 0} {
-  puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
-  exit 111
-}
-if {[string first [string tolower [compactScreen $expectedTag]] $compactDialog] < 0} {
+set identity [extractPluginTrustIdentity $dialog]
+set compactIdentity [compactScreen $identity]
+if {$identity eq "" || $compactIdentity ne [compactScreen $installUrl]} {
+  set expectedRepoPrefix "[compactScreen $expectedRepo]/releases/tag/"
+  if {[string first $expectedRepoPrefix $compactIdentity] != 0} {
+    puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
+    exit 111
+  }
   puts stderr "KIMI_TUI_STATE:plugin-trust:tag-mismatch"
   exit 112
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/platform-manifest.json

@@ -2,11 +2,11 @@
   "schemaVersion": "1.0.0",
   "platformId": "release-skill",
   "platformName": "release-skill Plugin Platform",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "logicalRoot": "skills-src/",
   "logicalRootDigest": "aec96745b30289ed48d576fbfc98ecd3aacb834f83394be76d4734d7d0fc0ad4",
   "projectionDigest": "e5117d89c9f965e15a1464cc84f542cb1e75a685f842183d0cfc7a105ace5ceb",
-  "projectionId": "release-skill:platform:0.9.8",
+  "projectionId": "release-skill:platform:0.9.9",
   "manifestRequired": true,
   "projectionSources": {
     "skills-src-root": {

package/src/commands/post-release-local.mjs

@@ -1010,7 +1010,7 @@ proc cleanScreen {value} {
 proc compactScreen {value} {
   set value [cleanScreen $value]
   regsub -all {[[:space:]]+} $value {} value
-  return [string tolower $value]
+  return $value
 }
 
 proc extractPluginTrustDialog {value} {
@@ -1025,6 +1025,22 @@ proc extractPluginTrustDialog {value} {
   return [string range $cleaned $dialogStart end]
 }
 
+proc extractPluginTrustIdentity {value} {
+  set cleaned [cleanScreen $value]
+  set lowered [string tolower $cleaned]
+  set identityStart -1
+  foreach marker {"install third-party plugin " "trust and install from "} {
+    set markerStart [string last $marker $lowered]
+    if {$markerStart >= 0 && $markerStart + [string length $marker] > $identityStart} {
+      set identityStart [expr {$markerStart + [string length $marker]}]
+    }
+  }
+  if {$identityStart < 0} { return "" }
+  set identityEnd [string first "?" $cleaned $identityStart]
+  if {$identityEnd < 0} { return "" }
+  return [string range $cleaned $identityStart [expr {$identityEnd - 1}]]
+}
+
 proc failTimeout {state timeoutCode unknownCode} {
   global expect_out
   set buffer ""
@@ -1096,12 +1112,14 @@ if {$dialog eq ""} {
   puts stderr "KIMI_TUI_STATE:plugin-trust:dialog-unknown"
   exit 113
 }
-set compactDialog [compactScreen $dialog]
-if {[string first [string tolower [compactScreen $expectedRepo]] $compactDialog] < 0} {
-  puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
-  exit 111
-}
-if {[string first [string tolower [compactScreen $expectedTag]] $compactDialog] < 0} {
+set identity [extractPluginTrustIdentity $dialog]
+set compactIdentity [compactScreen $identity]
+if {$identity eq "" || $compactIdentity ne [compactScreen $installUrl]} {
+  set expectedRepoPrefix "[compactScreen $expectedRepo]/releases/tag/"
+  if {[string first $expectedRepoPrefix $compactIdentity] != 0} {
+    puts stderr "KIMI_TUI_STATE:plugin-trust:repo-mismatch"
+    exit 111
+  }
   puts stderr "KIMI_TUI_STATE:plugin-trust:tag-mismatch"
   exit 112
 }