[KirbyInGitHub]

Delivery

• Add explicit scoped <source-code|epd> invocation boundaries for independently installable source plugins.
• Reject conflicting source parameters, contaminated output, opaque-key and unknown-tool paths without a source-scoped contract.
• Reuse the current public source directory and EPD search API. Preserve publisher, unit, method/module, restrictions and pagination; do not substitute the audit expert.
• Retain existing aggregate identity, credentials and server entitlements. Version 0.6.0 uses the existing CDN-native distribution.
• Run business/loopback integration gates locally; workflows retain typechecking, static checks and required build/publication integrity.

Consumers and acceptance

Product target: HiQ-AI/environmental-data#1 . The source-specific plugin catalog will consume this shared release. No Desktop release or production catalog switch.

Evidence

• Supported Node 24: existing local CLI suite passed; final source-scope tests passed after provenance validation tightened.
• Five native archives built and checked, including native macOS arm64 execution.
• Live development CLI: scoped HiQLCD source versions/models and published concrete EPD query succeeded without credentials on the documented public APIs.
• Authenticated background dataset queries remain unverified; public metadata is not claimed as that acceptance gate.

Independent review: repository review requirements apply; no separate reviewer result is claimed. Release only from the reviewed main revision through the existing immutable CDN workflow.

🤖 Generated with Claude Code