v2.2.0: installer, uninstaller and compress-skill safety fixes
frostbyte_neo
发布于
2026-08-20 11:11:29 +00:00
- uninstall never deletes hook files while settings.json still points at them
(that is #471 on every session start); the POSIX and PowerShell uninstallers
exit non-zero on a missing node for the same reason
- install leaves another plugin's hooks/package.json alone, and uninstall
removes only the manifest we ship
- installer temp downloads move to a 0700 mkdtemp, so a pre-planted symlink
cannot capture the init script we then execute
- binary installers give each download its own .part; the fixed name made the
O_EXCL guard unreachable and let concurrent installs publish each other's
half-written files as checksum-verified
- compress: the fence strip no longer merges a document's first and last code
blocks; the validator sees indented code blocks, and lost file paths and
renamed headings are errors rather than warnings that let the overwrite stand
- cavecrew model overrides no longer rewrite tracked agents/*.md in a checkout
- benchmarks gain the terse control arm, so the next table separates what the
skill adds from what any 'be concise' instruction buys
下载附件