v0.10.1

A fix release for the Claude Code plugin. If you installed the plugin at 0.10.0, update it. No version published before this one carries either fix.

Both defects were found by an external audit of the published v0.10.0 plugin, received 2026-09-13. Nothing else in the runner, the receipt or the Action changed: since the v0.10.0 tag, the three plugin command files are the only shipped files that changed, apart from the version strings this release moves and docs/sitemap.xml, whose homepage lastmod moved from 2026-09-12 to 2026-09-13. package.json reads 0.10.1, and config.js's RUNNER_VERSION is held equal to it. The Action pins in README.md and docs/index.html are @v0.10.1, and the plugin's pin in plugin/driftproof/.claude-plugin/plugin.json is 0.10.1. So is the minimum in plugin/driftproof/version-guard.json, whose resolved_by names the commit that set it. tests/fixtures/export-summary.snapshot.json's receipt_hash is re-cut, because runner_version is inside the canonical receipt that hash is taken over. The receipt spec is unchanged at v0.6.

What this release contains

• The plugin's commands now find their own script reliably. On 0.10.0 each command told Claude to run the door script at a literal <plugin-root> placeholder, and to fill in the plugin's location itself. Claude Code does not substitute that placeholder, so the path a command ran from was whatever the model wrote there. Each command now names the script through ${CLAUDE_PLUGIN_ROOT}, the path variable Claude Code substitutes into a command's text before the model reads it. The line the model runs already carries the plugin's real directory.
• Claude no longer fires a Driftproof command on its own judgement. On 0.10.0 none of the three commands set disable-model-invocation, so Claude could invoke any of them when a request looked like a match for its description. /driftproof:run spends your Claude Code subscription. All three now carry disable-model-invocation: true, and each runs only when you type it. That includes /driftproof:init, which writes a new directory, and /driftproof:badge. Both fetch and run the pinned CLI from npm, the same as run.

Spec 028's gate now holds both properties in every command file (A-028-37), with standing arms that go red against the command files as they shipped in 0.10.0.

Provenance

• Published commit: 378bac8378e2c536f17a05875d6a55a2c1b59d9f
• Tag: v0.10.1, annotated tag object 1c99e8157ced130514153165e759e77f4a93a698
• Tracked files: 725
• Clean-runner gate: node tests/gate.js --scan-root . on a depth-1 clone of the published v0.10.1 tag, run with no network: 611/611 passed, 0 failed, 1 not applicable; the one row not applicable because this checkout carries no refs/heads/main (a shallow or tag-only clone), so the merge range this rule is about does not exist here; results file sha256 91bae7c84f437a0d3d8e0393d02becf30f7b3a94e5dee81397f5c354f3712859
• Built from source commit: db6aed47698192b246ae69ce4d21638086473e85