[Kaap10]

Summary

• Implements the tool.call middleware hook for Bash in plugins/magpie-release-management/hooks/verify-rc-pane.ts to passively observe release-config and release-verify commands, updating the live verification checklist pane in real time.
• Supports both individual step execution and batch release-verify all, with skip heuristics for non-JVM artefacts (Steps 6b, 6c) and --skip-repro (Step 9).
• Documents the companion Claude Code mod in verify-rc/SKILL.md (vendor-neutral; Codex, Antigravity, Cursor, and headless CI continue using standard CLI output) while synchronizing frontmatter surface_hash and measured_tokens.

Type of change

• Skill change (plugins/magpie-release-management/skills/verify-rc/SKILL.md)
• Tool / bridge contract (tools/<system>/*.md)
• Python package (tools/*/ with pyproject.toml)
• Groovy reference impl
• Cross-cutting (RFC, AGENTS.md, sandbox, privacy-LLM)
• Documentation (docs/, README.md, CONTRIBUTING.md)
• Project template (projects/_template/)
• CI / dev loop (prek, workflows, validators)
• Other: Claude Code mod tool-call feed (plugins/magpie-release-management)

Test plan

• claude plugin test plugins/magpie-release-management passes with 34 passed, 0 failed
• claude plugin validate --strict plugins/magpie-release-management passes with 0 errors and 0 warnings
• python tools/dev/add-license-headers.py --check passes with 0 errors
• tools/dev/check-family-plugins.py check_codex_hook_files() passes cleanly with []
• Frontmatter surface_hash verified matching sha256:594e276d2b0a7906 (tools/dev/skill-surface-hash.py)
• Frontmatter measured_tokens verified matching exact count 6686 (tools/skill-token-count)
• Strict LF line endings (crlf=0), zero emojis, and zero double-hyphens in markdown prose verified

RFC-AI-0004 compliance

• HITL — read-only passive tool-call observation; all mutation steps remain gated on explicit maintainer confirmation
• Sandbox — executes inside the plugin mod sandbox; fails open gracefully and never obstructs underlying tool execution
• Vendor neutrality — empty Codex hooks and manifests maintained; alternative harnesses continue standard sequential CLI output
• Conversational + correctable — provides clear terminal status feedback and allows manual verification runs
• Write-access discipline — purely observational and presentational; does not write to tracker or publish comments
• Privacy LLM — processes only public release candidate tags, checksums, and verification tool output

Linked issues

Closes #2006. Part of umbrella roadmap #1497. Follows merged #2007.

Notes for reviewers (optional)

• This is the final PR completing feat(release-management): add verify-rc live checklist pane Claude Code mod (part of #1497) #2006.
• Incorporates maintainer feedback from PR feat(release-management): add verify-rc live checklist pane mod scaffolding and UI component #2007 by supporting all 13 canonical steps (including Steps 6b and 6c), applying skip heuristics when non-JVM files or --skip-repro are detected, and folding multiline strings in details to prevent line injection.