0.1.0-alpha.44

cfKanban 0.1.0-alpha.44

English

Testing prerelease; not a stable deployment target.

• Fix local Skill installation/update switching the active pointer before checking whether the new entrypoints work (CFK-355). All three staged help commands must return valid catalogs for their own surfaces before activation.
• Reject missing files, failed or malformed help, timeouts, excessive output and staged-file modification. Preserve the current release on failure and record successful discovery checks in the new receipt. Child output is not exposed; the probe does not inherit secrets or Node hooks.
• Add real-entrypoint regression coverage and a separate test-repository scenario using a released ZIP plus a deliberately broken copy. The check validates trusted-release health; it is not a sandbox for untrusted publisher code.
• No API, permission, schema or migration changes. Publishing does not update local Skills, host plugin projections or deployed Instances implicitly.
• Installers through alpha.43 lack this built-in guard. When upgrading from them, verify and smoke all three new entrypoints before switching; then use alpha.44's installer for subsequent updates. Do not patch an older immutable bundle in place.

简体中文

测试预发行版，不是稳定部署目标。

• 修复本地 Skill 安装/更新在验证新入口之前就切换 active 的缺口（CFK-355）；暂存目录中的三个 help 必须分别返回正确 surface 的有效 catalog，才能启用新版本。
• 文件缺失、help 失败或格式错误、超时、输出超限、暂存文件被改写均拒绝切换。失败保留当前版本，成功 receipt 记录 discovery 检查。子进程输出不外泄，探测不继承 secret 或 Node hooks。
• 增加真实入口回归，以及测试仓库对实际发行 ZIP 和故意损坏副本的独立验证。这是可信发行版的可用性检查，不是不可信发布者代码的安全沙箱。
• 不修改 API、权限、schema 或 migration。发布不隐含本地 Skill 更新、宿主 plugin 投影更新或 Instance upgrade。
• alpha.43 及此前安装器尚无内置门槛。从旧版升级时，应先验证并 smoke 新版本三个入口，再切换；后续更新使用 alpha.44 安装器，不现场修改旧 immutable bundle。