fix: package complete Windows bridge runtime

test/distribution.test.ts

@@ -122,9 +122,14 @@ test("customer distribution prefers remote MCP OAuth and keeps a generic compati
   assert.match(builder, /utf8Bom: true/);
   assert.match(builder, /validateNodeRuntime/);
   assert.match(builder, /cpSync\(resolve\("skills\/dingtalk-approval"\).*recursive: true/s);
+  assert.match(builder, /"approval-contract\.js", "version\.js"/);
   assert.doesNotMatch(builder, /codexPlugin|codex-plugin|\.codex-plugin|openai\.yaml/);
   assert.doesNotMatch(builder, /dingtalk-workspace-cli|DWS_URL|DWS_SHA256/);
 
+  const releaseVerifier = readFileSync("scripts/verify-release.mjs", "utf8");
+  assert.match(releaseVerifier, /assertRelativeModuleClosure\(join\(root, "client", "package", "dist", "src"\)\)/);
+  assert.match(releaseVerifier, /客户端模块依赖缺失/);
+
   const deploy = readFileSync("deploy/install.sh", "utf8");
   assert.match(deploy, /--download-base-url "\$\{gitea_release_base_url\}"[\s\S]*--download-mirror-base-url "\$\{public_download_base_url\}"/s);
   assert.match(deploy, /refs\/tags\/\$\{release_tag\}[\s\S]*release_created_at_commit="\$\{release_tag_commit:-\$\{release_commit\}\}"/s);