@cyning/harness 0.3.0

package/wizard/README.md

@@ -0,0 +1,213 @@
+# wizard · 安装与同步
+
+> **v0.3.0+**：**npx 优先** · `npx @cyning/harness init|upgrade|check` · manifest.json  
+> **v0.2.0+**：脚本化接入 · `--ide cursor,claude,agents` · OSS fork worktree · 上游 issue 扫描
+
+---
+
+## 0. npx CLI（v0.3+ · 推荐）
+
+```bash
+# 首次（业务仓根）
+npx @cyning/harness@latest init --preset harness-only --ide cursor,agents
+
+# 升级（等价 ./wizard/upgrade.sh --yes）
+npx @cyning/harness upgrade
+npx @cyning/harness upgrade --target /path/to/project --yes --force
+
+# 仅检查版本
+npx @cyning/harness check
+```
+
+- 内部单源：`wizard/install.sh` → `harness-sync.sh apply`（S2 写路径不变）
+- manifest schema：[`schema/manifest.v1.schema.json`](../schema/manifest.v1.schema.json)
+- 本地开发：`node bin/harness.js init --target /path/to/project --preset harness-only --ide cursor,agents --yes`
+
+---
+
+## 1. 首次接入
+
+```bash
+cd /path/to/your-project
+/path/to/cyning-harness/wizard/install.sh --preset ios-cursor
+
+# D3 IDE 勾选（v0.2+）
+/path/to/cyning-harness/wizard/install.sh --preset harness-only --ide cursor,claude,agents
+```
+
+| preset | 用途 |
+|--------|------|
+| `harness-only` | **交互默认 1** · 仅过程轨 + IDE（kimi-code-meta 等） |
+| `fullstack-node-py` | **交互 2** · Ink 类全栈五轨 + quality + pytest |
+| `ios-cursor` | 遗留 · ios_buy；**不在 install 交互菜单** |
+| `oss-fork-meta` | OSS fork `cyning/meta`；用 `bootstrap-oss-fork-meta.sh` 或 `--preset` |
+
+### 1.1 OSS 个人 fork 一键初始化（阶段 A+B 骨架）
+
+```bash
+git clone git@github.com:YOU/some-oss-fork.git
+cd some-oss-fork
+git remote add upstream git@github.com:ORG/original.git  # 若无
+
+CYNING_HARNESS=/path/to/cyning-harness \
+  "$CYNING_HARNESS/wizard/bootstrap-oss-fork-meta.sh"
+
+# 可选：复用某次试点快照（见 examples/oss-fork/README.md）
+# --stub-dir "$CYNING_HARNESS/examples/oss-fork/kimi-code"
+
+git add -A && git commit -m "chore(harness): cyning/meta bootstrap"
+git push -u origin cyning/meta
+
+# 推荐：过程轨只读 worktree（与 feature 产品分支并行）
+git worktree add ../some-oss-fork-meta cyning/meta
+```
+
+**默认**：仅通用 `graph/templates` + 删 `10_flow_MAIN*`；**不**内置任何上游项目图谱。  
+**脚本不做**：`01_struct` 核对、`HG-GRAPH-MODULES` 人签、向上游 PR harness 文件。
+
+**双分支纪律**：见 [`examples/oss-fork/README.md`](../examples/oss-fork/README.md)（勿 merge `cyning/meta` → `main`）。
+
+生成：
+
+- `.cyning-harness/profile.json` — 同步轨道配置
+- `.cyning-harness/local.json` — 产品包路径
+- `docs/tasks/active/` + `docs/tasks/done/`（**v0.2.1+** 含 `done/<domain>/` · Hub · `_views` 薄指针，见 `install.sh`）
+- `docs/harness/FRAGMENT_rethink_backfill_task_v1_zh.md`
+
+---
+
+## 2. 拉取产品包后 · 升级到已用项目（常用）
+
+**推荐 · 交互向导**（在产品包目录运行，按提示输入业务仓路径）：
+
+```bash
+cd /path/to/cyning-harness && git pull
+./wizard/upgrade.sh
+```
+
+非交互：
+
+```bash
+./wizard/upgrade.sh --target /path/to/kimi-code-meta --yes
+./wizard/upgrade.sh --target /path/to/ios_buy --ide cursor,claude,agents --yes --gate-check
+```
+
+**禁止**对产品包自身 `apply`（误操作会被 `refuse_if_product_root` 拦截）。
+
+### 2.1 清空纪律层 · 重新安装
+
+交互清空（保留业务 `docs/tasks` · `reviews` · `invokes/by-task`）：
+
+```bash
+cd /path/to/cyning-harness
+./wizard/uninstall.sh
+```
+
+非交互：
+
+```bash
+./wizard/uninstall.sh --target /path/to/kimi-code-meta --yes
+./wizard/uninstall.sh --target /path/to/project --yes --with-ci --with-install-artifacts
+./wizard/uninstall.sh --target /path/to/project --dry-run   # 仅预览
+```
+
+清空后：
+
+```bash
+./wizard/install.sh --target /path/to/project --preset harness-only --ide cursor,claude,agents
+```
+
+手动分步（与向导等价）：
+
+```bash
+cd /path/to/cyning-harness && git pull
+
+cd /path/to/ios_buy   # 业务仓
+CYNING_HARNESS=/path/to/cyning-harness \
+  "$CYNING_HARNESS/wizard/harness-sync.sh" plan
+
+CYNING_HARNESS=/path/to/cyning-harness \
+  "$CYNING_HARNESS/wizard/harness-sync.sh" apply
+```
+
+**默认同步**（不洗业务数据）：
+
+- `docs/harness/prompts/*.md`
+- `docs/harness/invokes/TEMPLATE_invoke.md`
+- `.cursor/rules/06-harness-pointer.mdc`（路径见 profile）
+- `CLAUDE.md` / `AGENTS.md`（`ide_claude` / `ide_agents` 启用时 · marker merge）
+
+**不覆盖**：`docs/tasks/`、`docs/harness/reviews/`、`invokes/by-task/*`、已填 `01_struct.md`。
+
+强制重拷图谱/wiki（慎用）：
+
+```bash
+FORCE_TRACKS=1 "$CYNING_HARNESS/wizard/harness-sync.sh" apply --target /path/to/project
+```
+
+---
+
+## 3. 人工闸检查（30 前）
+
+```bash
+"$CYNING_HARNESS/wizard/gate-check.sh" --target /path/to/project
+# OSS fork meta worktree 时：--target /path/to/fork-meta
+```
+
+- `HG-AUDIT-R1` 非 `approved` → 退出码 2 · **30 不可开工**
+- 辅助维护者，**不替代** Agent 闸扫描表
+
+---
+
+## 4. 上游 Issue 扫描（无 Agent · v0.1.2+）
+
+依赖：`gh`（已登录）· `jq` · **任意** `OWNER/REPO`
+
+```bash
+"$CYNING_HARNESS/wizard/scan-upstream-issues.sh" --help
+
+# C2 候选（排除已占坑 #565/#566）
+"$CYNING_HARNESS/wizard/scan-upstream-issues.sh" --preset kimi-c2-candidate
+
+# C3 候选（再排除 #583 · v0.1.3）
+"$CYNING_HARNESS/wizard/scan-upstream-issues.sh" --preset kimi-c3-candidate
+
+# 任意上游仓
+"$CYNING_HARNESS/wizard/scan-upstream-issues.sh" \
+  --repo OWNER/REPO --state open --label bug --check-pr --limit 20
+
+# 落盘 Markdown
+"$CYNING_HARNESS/wizard/scan-upstream-issues.sh" --preset kimi-c3-candidate \
+  --format markdown --output /tmp/issue-scan.md
+```
+
+| 参数 | 说明 |
+|------|------|
+| `--preset` | `profiles/issue-scan-presets.json` |
+| `--repo` | `OWNER/NAME` |
+| `--label` | 可重复 |
+| `--check-pr` / `--no-check-pr` | PR 占坑（逐条 gh，较慢） |
+| `--only-no-pr` | 仅无 **open** PR 的 issue |
+| `--exclude-issues` | `565,566` |
+| `--format` | `table` · **`text`**（同 table）· `markdown` · `json` |
+
+自定义 preset：编辑 `wizard/profiles/issue-scan-presets.json`。
+
+---
+
+## 5. 与 ECC install-manifest（B2）的关系
+
+| ECC | cyning-harness |
+|-----|----------------|
+| `install-plan.js` | `harness-sync.sh plan` |
+| `install-apply.js` | `harness-sync.sh apply` |
+| npm 全局包 | 本地 clone + profile.json |
+| 261 skills 选择性装 | **五轨勾选** + 默认只升 harness 纪律层 |
+
+脚本解决 **「产品包更新 → 已接入仓同步」**；**不解决**人签 `HG-AUDIT-R1`（须维护者改 task 表）。
+
+---
+
+## 6. 文档问卷
+
+交互问卷仍见 [`ONBOARDING_wizard_v1_zh.md`](./ONBOARDING_wizard_v1_zh.md)；**推荐以本目录脚本为准**。

package/wizard/adopt-existing.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+# 已为手工接入的五轨仓 · 仅写入 profile 并 sync（不重复 bootstrap task）
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=lib/common.sh
+source "$SCRIPT_DIR/lib/common.sh"
+HARNESS_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+TARGET="$(pwd)"
+PRESET="ios-cursor"
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --target) TARGET="$2"; shift 2 ;;
+    --preset) PRESET="$2"; shift 2 ;;
+    -h|--help)
+      echo "用法: adopt-existing.sh --target /path/to/project --preset ios-cursor|harness-only"
+      exit 0
+    ;;
+    *) echo "未知: $1" >&2; exit 1 ;;
+  esac
+done
+
+CYNING_HARNESS="${CYNING_HARNESS:-$HARNESS_ROOT}"
+PRESET_FILE="$SCRIPT_DIR/profiles/${PRESET}.json"
+[[ -f "$PRESET_FILE" ]] || { echo "未知 preset: $PRESET" >&2; exit 1; }
+refuse_if_product_root "$TARGET" "$HARNESS_ROOT"
+
+mkdir -p "$TARGET/.cyning-harness"
+cp "$PRESET_FILE" "$TARGET/.cyning-harness/profile.json"
+printf '%s\n' "{\"cyning_harness_root\":\"$CYNING_HARNESS\"}" > "$TARGET/.cyning-harness/local.json"
+
+export CYNING_HARNESS TARGET
+"$SCRIPT_DIR/harness-sync.sh" apply --target "$TARGET"
+
+echo "已为存量仓写入 profile 并同步 harness 纪律层。"
+echo "检查闸: $CYNING_HARNESS/wizard/gate-check.sh --target $TARGET"

package/wizard/bootstrap-oss-fork-meta.sh

@@ -0,0 +1,177 @@
+#!/usr/bin/env bash
+# OSS 个人 fork · cyning/meta 一键初始化（阶段 A+B 骨架）
+# 不替代：01_struct 核对、HG-GRAPH-MODULES 人签、上游 PR 纪律
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HARNESS_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+TARGET="$(pwd)"
+BRANCH="cyning/meta"
+STUB_DIR=""
+DRY_RUN=0
+SKIP_BRANCH=0
+
+usage() {
+  cat <<'EOF'
+用法:
+
+  cd /path/to/your-fork
+  CYNING_HARNESS=/path/to/cyning-harness \
+    "$CYNING_HARNESS/wizard/bootstrap-oss-fork-meta.sh"
+
+  "$CYNING_HARNESS/wizard/bootstrap-oss-fork-meta.sh" \
+    --target /path/to/fork \
+    --branch cyning/meta \
+    --stub-dir /path/to/custom/graph-stubs \
+    --skip-branch \
+    --dry-run
+
+默认（无 --stub-dir）:
+  - harness 通用 graph/templates（01_struct 等待填）
+  - 删除无用 10_flow_MAIN* HTTP 模板
+  - 不加载任何上游项目专用图谱
+
+可选 --stub-dir:
+  - 覆盖 docs/_tech_graph/ 下同名文件（试点快照或自建目录）
+  - 示例（非默认）: $CYNING_HARNESS/examples/oss-fork/kimi-code
+
+仍需人工:
+  - 核对并签 HG-GRAPH-MODULES
+  - cyning/meta 仅 push 到你的 fork；上游 PR 仅 feature/* 产品 diff
+EOF
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --target) TARGET="$2"; shift 2 ;;
+    --branch) BRANCH="$2"; shift 2 ;;
+    --stub-dir) STUB_DIR="$2"; shift 2 ;;
+    --skip-branch) SKIP_BRANCH=1; shift ;;
+    --dry-run) DRY_RUN=1; shift ;;
+    -h|--help) usage; exit 0 ;;
+    *) echo "未知参数: $1" >&2; usage; exit 1 ;;
+  esac
+done
+
+CYNING_HARNESS="${CYNING_HARNESS:-$HARNESS_ROOT}"
+PRESET_FILE="$SCRIPT_DIR/profiles/oss-fork-meta.json"
+
+[[ -d "$TARGET/.git" ]] || { echo "错误: $TARGET 不是 git 仓根" >&2; exit 1; }
+[[ -f "$PRESET_FILE" ]] || { echo "错误: 缺少 preset $PRESET_FILE" >&2; exit 1; }
+
+run() {
+  if [[ "$DRY_RUN" == "1" ]]; then echo "[dry-run] $*"; else eval "$@"; fi
+}
+
+slug_from_path() {
+  basename "$TARGET" | tr '[:upper:]' '[:lower:]' | tr '-' '_'
+}
+
+echo "=== bootstrap-oss-fork-meta ==="
+echo "目标: $TARGET"
+echo "分支: $BRANCH (skip=$SKIP_BRANCH)"
+echo "stub-dir: ${STUB_DIR:-（无 · 通用模板）}"
+echo ""
+
+if [[ "$SKIP_BRANCH" == "0" ]]; then
+  if [[ "$DRY_RUN" == "1" ]]; then
+    echo "[dry-run] git checkout $BRANCH || git checkout -b $BRANCH"
+  else
+    cd "$TARGET"
+    git checkout "$BRANCH" 2>/dev/null || git checkout -b "$BRANCH"
+  fi
+fi
+
+run mkdir -p "$TARGET/.cyning-harness"
+run mkdir -p "$TARGET/docs/tasks/active" "$TARGET/docs/tasks/done"
+run mkdir -p "$TARGET/docs/harness/reviews" "$TARGET/docs/harness/invokes/by-task"
+run mkdir -p "$TARGET/docs/_tech_graph"
+
+if [[ "$DRY_RUN" == "1" ]]; then
+  echo "[dry-run] cp preset + local.json"
+else
+  cp "$PRESET_FILE" "$TARGET/.cyning-harness/profile.json"
+  printf '%s\n' "{\"cyning_harness_root\":\"$CYNING_HARNESS\"}" > "$TARGET/.cyning-harness/local.json"
+fi
+
+export CYNING_HARNESS TARGET FORCE_TRACKS=1
+if [[ "$DRY_RUN" == "1" ]]; then
+  "$SCRIPT_DIR/harness-sync.sh" plan --target "$TARGET"
+else
+  "$SCRIPT_DIR/harness-sync.sh" apply --target "$TARGET"
+fi
+
+# POINTER
+if [[ "$DRY_RUN" == "1" ]]; then
+  echo "[dry-run] cp POINTER -> docs/harness/"
+else
+  cp "$SCRIPT_DIR/templates/POINTER_PILOT_adoption_workspace.md" \
+    "$TARGET/docs/harness/POINTER_PILOT_adoption_workspace_v1_zh.md"
+fi
+
+# harness README
+if [[ "$DRY_RUN" != "1" ]]; then
+  cat >"$TARGET/docs/harness/README.md" <<'EOF'
+# docs/harness（个人 fork · 过程轨）
+
+勿 PR 上游。由 `bootstrap-oss-fork-meta.sh` 初始化。
+
+- `FRAGMENT_rethink_backfill_task_v1_zh.md` — 思考轮结论须写回 task §4
+- `invokes/by-task/<slug>/` — 按 task 落盘 invoke
+EOF
+  cat >"$TARGET/docs/tasks/README.md" <<'EOF'
+# docs/tasks
+
+Harness task · `active/` 进行中 · `done/` 关账。
+
+上游 PR 选题后复制：`TASK_TEMPLATE_upstream_pr_v1.md`（产品包 `wizard/templates/`）→ `active/task_<slug>_v1.md`。
+EOF
+  cp "$SCRIPT_DIR/templates/FRAGMENT_rethink_backfill_task_v1_zh.md" \
+    "$TARGET/docs/harness/FRAGMENT_rethink_backfill_task_v1_zh.md"
+  cp "$SCRIPT_DIR/templates/TASK_TEMPLATE_upstream_pr_v1.md" \
+    "$TARGET/docs/tasks/TASK_TEMPLATE_upstream_pr_v1.md"
+fi
+
+# bootstrap task
+SLUG="$(slug_from_path)"
+TASK_FILE="$TARGET/docs/tasks/active/task_graph_bootstrap_${SLUG}_v1.md"
+if [[ "$DRY_RUN" == "1" ]]; then
+  echo "[dry-run] task -> $TASK_FILE"
+else
+  sed "s/__REPO_SLUG__/${SLUG}/g" "$SCRIPT_DIR/templates/task_graph_bootstrap_v1.md" >"$TASK_FILE"
+fi
+
+# 可选：项目专用 stub 目录（非产品默认）
+if [[ -n "$STUB_DIR" ]]; then
+  [[ -d "$STUB_DIR" ]] || { echo "错误: --stub-dir 不存在: $STUB_DIR" >&2; exit 1; }
+  echo "应用 stub-dir: $STUB_DIR"
+  for f in "$STUB_DIR"/*; do
+    [[ -f "$f" ]] || continue
+    base="$(basename "$f")"
+    [[ "$base" == "README.md" ]] && continue
+    dst="$TARGET/docs/_tech_graph/$base"
+    if [[ "$DRY_RUN" == "1" ]]; then
+      echo "[dry-run] cp $f -> $dst"
+    else
+      cp "$f" "$dst"
+    fi
+  done
+fi
+
+# harness 通用 HTTP 示例 flow · 非 OSS fork 主路径
+if [[ "$DRY_RUN" == "1" ]]; then
+  echo "[dry-run] rm -f docs/_tech_graph/10_flow_MAIN.md docs/_tech_graph/10_flow_MAIN.ai.md"
+else
+  rm -f "$TARGET/docs/_tech_graph/10_flow_MAIN.md" "$TARGET/docs/_tech_graph/10_flow_MAIN.ai.md"
+fi
+
+echo ""
+echo "=== 完成（骨架）==="
+echo "1. 编辑 docs/_tech_graph/01_struct.md（对照仓内 AGENTS.md / README）"
+echo "2. 签 task: docs/tasks/active/task_graph_bootstrap_${SLUG}_v1.md → HG-GRAPH-MODULES approved"
+echo "3. 检查: $CYNING_HARNESS/wizard/gate-check.sh --target $TARGET"
+echo "4. git add + commit + git push -u origin $BRANCH  # 仅你的 fork"
+echo "5. 推荐 worktree: git worktree add ../$(basename "$TARGET")-meta $BRANCH"
+echo "6. 选题: $CYNING_HARNESS/wizard/scan-upstream-issues.sh --repo <upstream> ..."
+echo "   复制 docs/tasks/TASK_TEMPLATE_upstream_pr_v1.md → active/task_<slug>_v1.md"
+echo "7. 上游 PR：仅从 main 拉 feature/*，不含 docs/harness（见 examples/oss-fork/README.md）"

package/wizard/gate-check.sh

@@ -0,0 +1,118 @@
+#!/usr/bin/env bash
+# 读取 task 人工闸 · 判断 30 是否可开工（机械辅助，真值仍在 task 表）
+set -euo pipefail
+
+TARGET="${TARGET:-$(pwd)}"
+TASK_FILE=""
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --target) TARGET="$2"; shift 2 ;;
+    --task)
+      TASK_FILE="$2"
+      shift 2
+      ;;
+    -h|--help)
+      echo "用法: gate-check.sh [--target /path/to/repo] [--task docs/tasks/active/task_*.md]"
+      exit 0
+    ;;
+    *) echo "未知参数: $1" >&2; exit 1 ;;
+  esac
+done
+
+gate_status() {
+  local file="$1" gate="$2"
+  awk -F'|' -v g="$gate" '
+    index($0, g) > 0 {
+      gsub(/^[[:space:]]+|[[:space:]]+$/, "", $3)
+      gsub(/\*/, "", $3)
+      print $3
+      exit
+    }
+  ' "$file"
+}
+
+gate_blocks() {
+  local file="$1" gate="$2"
+  awk -F'|' -v g="$gate" '
+    index($0, g) > 0 {
+      gsub(/^[[:space:]]+|[[:space:]]+$/, "", $4)
+      gsub(/\*/, "", $4)
+      print $4
+      exit
+    }
+  ' "$file"
+}
+
+check_one_task() {
+  local tf="$1"
+  echo "task: $(basename "$tf")"
+  draft="$(gate_status "$tf" HG-TASK-DRAFT)"
+  audit="$(gate_status "$tf" HG-AUDIT-R1)"
+  graph="$(gate_status "$tf" HG-GRAPH-MODULES)"
+  draft_blocks="$(gate_blocks "$tf" HG-TASK-DRAFT)"
+
+  printf "| gate | status | blocks_30 | 30 影响 |\n"
+  printf "|------|--------|-----------|--------|\n"
+  printf "| HG-TASK-DRAFT | %s | %s | %s |\n" "${draft:-?}" "${draft_blocks:-?}" \
+    "$( [[ "$draft" == "approved" ]] && echo "—" || { [[ "$draft_blocks" == *30* ]] && echo "❌ 拒 30" || echo "—"; } )"
+  printf "| HG-AUDIT-R1 | %s | 30 | %s |\n" "${audit:-?}" \
+    "$( [[ "$audit" == "approved" ]] && echo "✅ 可 30" || echo "❌ 拒 30" )"
+  if [[ -n "$graph" && "$graph" != "—" && "$graph" != "?" ]]; then
+    printf "| HG-GRAPH-MODULES | %s | — | %s |\n" "$graph" \
+      "$( [[ "$graph" == "approved" ]] && echo "✅" || echo "❌ 若 pending 拒 30" )"
+  fi
+  echo ""
+
+  local blocked=0
+  if [[ "$audit" != "approved" ]]; then
+    blocked=1
+    echo "→ 30 不可开工: HG-AUDIT-R1 非 approved（须维护者签 task 表）"
+  fi
+  if [[ "$draft" != "approved" && "$draft_blocks" == *30* ]]; then
+    blocked=1
+    echo "→ 30 不可开工: HG-TASK-DRAFT pending 且 blocks 30"
+  fi
+  if [[ -n "$graph" && "$graph" == "pending" ]]; then
+    blocked=1
+    echo "→ 30 不可开工: HG-GRAPH-MODULES pending"
+  fi
+  echo ""
+  return "$blocked"
+}
+
+echo "=== Harness gate-check ==="
+echo "目标: $TARGET"
+echo ""
+
+BLOCKED=0
+
+if [[ -n "$TASK_FILE" ]]; then
+  if [[ "$TASK_FILE" != /* ]]; then
+    TASK_FILE="$TARGET/$TASK_FILE"
+  fi
+  if [[ ! -f "$TASK_FILE" ]]; then
+    echo "错误: 未找到 --task 文件 $TASK_FILE" >&2
+    exit 1
+  fi
+  check_one_task "$TASK_FILE" || BLOCKED=1
+else
+  ACTIVE_DIR="$TARGET/docs/tasks/active"
+  [[ -d "$ACTIVE_DIR" ]] || { echo "无 $ACTIVE_DIR" >&2; exit 1; }
+  TASK_FILES=("$ACTIVE_DIR"/task_*.md)
+  if [[ ! -e "${TASK_FILES[0]}" ]]; then
+    echo "无 active task_*.md"
+    exit 0
+  fi
+  for tf in "$ACTIVE_DIR"/task_*.md; do
+    [[ -f "$tf" ]] || continue
+    check_one_task "$tf" || BLOCKED=1
+  done
+fi
+
+if [[ "$BLOCKED" == "1" ]]; then
+  exit 2
+fi
+echo "闸检查: 未发现阻塞（仍须 Agent 首输出 GATE_VERIFY · 不得采信 invoke 字面 approved）"
+exit 0