docs(release): clarify plugin selector repair

RomneyDa · RomneyDa · commit 795427e99828 · 2026-07-09T11:50:37.000-07:00
diff --git a/.agents/skills/release-openclaw-maintainer/SKILL.md b/.agents/skills/release-openclaw-maintainer/SKILL.md
@@ -183,8 +183,12 @@ on pinned current `main` as the exact command and validation contract.
    run IDs. The workflow must publish the exact prepared core tarball and prove
    the referenced runs match the canonical branch and release SHA.
 7. Independently verify the exact core package, every official plugin package,
-   and all `extended-stable` selectors. If only selector readback fails, use the
-   workflow-generated repair command; never republish an immutable version.
+   and all `extended-stable` selectors. If only the core selector readback
+   fails, use the `openclaw` repair command generated by the core workflow. If
+   an official-plugin selector is missing or stale for an already-published
+   version, use the approved credential-isolated release tooling for manual
+   plugin tag repair; the OIDC source workflow cannot mutate that tag. Never
+   republish an immutable version.
 8. Do not create a GitHub Release or publish macOS, Windows, Docker, mobile,
    website, ClawHub, or private dist-tag artifacts from this path.
 
diff --git a/.agents/skills/release-openclaw-maintainer/references/extended-stable-backports.md b/.agents/skills/release-openclaw-maintainer/references/extended-stable-backports.md
@@ -263,5 +263,8 @@ and Full Release Validation from the canonical branch; publish every
 npm-publishable official plugin from the exact release SHA; publish the
 prepared core tarball with the referenced successful run IDs; verify every
 exact package and `extended-stable` selector; and preserve the generated
-selector-repair command. Never republish an immutable version when only a
-selector needs repair.
+core `openclaw` selector-repair command. Repair missing or stale official-
+plugin selectors on already-published versions with the approved credential-
+isolated release tooling for manual tag repair; the OIDC source workflow cannot
+mutate those tags. Never republish an immutable version when only a selector
+needs repair.
