Treat repository discovery as read-only until the user explicitly activates the package and approves the disclosed first-side-effect plan. Preserve deterministic execution after approval, keep client-global configuration opt-in, align the English and Chinese entry contracts, and guard all four top-level agent entry files in CI.
fix: make MCP bootstrap client-neutral by default
Owner integration: preserve all prior CI contracts, document explicit host selection on Windows, and make the Bash manifest regression UTF-8 deterministic.