@harness-mix/cli 0.1.5 → 0.1.7

package/src/main/adapters/claude.js

@@ -20,7 +20,7 @@ const CLAUDE_PERMISSION_MODES = [
   { id: "acceptEdits", label: "接受编辑", description: "允许文件编辑；其他受保护操作前询问" },
   { id: "auto", label: "自动模式", description: "由 Claude 判断权限请求" },
   { id: "dontAsk", label: "免询问", description: "跳过权限询问（非绕过检查）" },
-  { id: "bypassPermissions", label: "绕过权限", description: "跳过全部权限检查，谨慎使用", dangerous: true },
+  { id: "bypassPermissions", label: "绕过权限 (YOLO)", description: "跳过全部权限检查（YOLO 模式），自动放行工具执行", dangerous: true },
 ];
 
 function summarizeInput(input) {
@@ -244,14 +244,25 @@ async function loadSdk() {
   return import("@anthropic-ai/claude-agent-sdk");
 }
 
+function normalizeClaudePermissionMode(mode) {
+  if (mode === 'yolo' || mode === 'skip' || mode === 'dangerously-skip-permissions') {
+    return 'bypassPermissions';
+  }
+  return mode;
+}
+
 /** 建立一个常驻 SDK 会话（open 与 fork 共用）：构造 query、启动事件泵 */
-function spawnSession(sdk, { cwd, resumeId, newSessionId, permissionMode, modelId, effort, emit, collaboration, managedMcp = [], onPlanLimit }) {
+function spawnSession(sdk, { cwd, resumeId, newSessionId, permissionMode, modelId, effort, emit, collaboration, managedMcp = [], onPlanLimit, isWorker = false }) {
   const input = new MessageQueue();
+  const normalizedPermissionMode = normalizeClaudePermissionMode(permissionMode) || (isWorker ? 'bypassPermissions' : undefined);
+  const isBypass = normalizedPermissionMode === 'bypassPermissions' || isWorker;
+
   const session = {
     nativeSessionId: resumeId || newSessionId,
     cwd,
     collaborationEnabled: !!collaboration,
-    permissionMode,
+    permissionMode: normalizedPermissionMode,
+    isWorker,
     model: undefined,
     input,
     query: undefined,
@@ -270,10 +281,17 @@ function spawnSession(sdk, { cwd, resumeId, newSessionId, permissionMode, modelI
       ...(resumeId ? { resume: resumeId } : {}),
       ...(!resumeId && newSessionId ? { sessionId: newSessionId } : {}),
       ...(effort ? { effort } : {}),
-      ...(permissionMode ? { permissionMode } : {}),
+      ...(normalizedPermissionMode ? { permissionMode: normalizedPermissionMode } : {}),
+      ...(isBypass ? { allowDangerouslySkipPermissions: true } : {}),
       ...(modelId ? { model: modelId } : {}),
       ...(process.env.HARNESS_MIX_CLAUDE_EXECUTABLE ? { pathToClaudeCodeExecutable: process.env.HARNESS_MIX_CLAUDE_EXECUTABLE } : {}),
       canUseTool: (toolName, toolInput, { signal, suggestions }) => {
+        if (toolName !== 'AskUserQuestion') {
+          const currentMode = normalizeClaudePermissionMode(session.permissionMode);
+          if (currentMode === 'bypassPermissions' || session.isWorker) {
+            return { behavior: 'allow', updatedInput: toolInput };
+          }
+        }
         const requestId = randomUUID();
         emit(projectApproval(requestId, toolName, toolInput, suggestions));
         return new Promise((resolve) => {
@@ -380,12 +398,16 @@ function create() {
     },
     async open({ thread, emit, collaboration, managedMcp }) {
       const sdk = await loadSdk();
+      const isWorker = Boolean(thread.parentThreadId);
+      const rawMode = thread.options?.permissionMode;
+      const permissionMode = normalizeClaudePermissionMode(rawMode) || (isWorker ? 'bypassPermissions' : undefined);
       return spawnSession(sdk, {
         cwd: thread.cwd,
         resumeId: thread.restore ? thread.nativeSessionId : undefined,
         newSessionId: thread.restore ? undefined : thread.nativeSessionId,
         effort: thread.options?.thinking,
-        permissionMode: thread.options?.permissionMode,
+        permissionMode,
+        isWorker,
         modelId: thread.options?.model?.id,
         emit,
         collaboration,
@@ -412,11 +434,19 @@ function create() {
     },
 
     async cancel(session) {
+      for (const pending of session.pendingApprovals?.values() ?? []) {
+        pending.resolve({ behavior: "deny", message: "用户取消了请求", interrupt: true });
+      }
+      session.pendingApprovals?.clear();
       // 原生优雅中断；超时后由 Host 走 close 兜底
       await Promise.race([
         session.query?.interrupt().catch(() => {}),
-        new Promise((r) => setTimeout(r, 5_000)),
+        new Promise((r) => setTimeout(r, 2_000)),
       ]);
+      if (session.state.turn) {
+        session.state.turn.resolve();
+        session.state.turn = null;
+      }
     },
 
     async listCommands(session) {
@@ -452,10 +482,12 @@ function create() {
       const copied = await getSessionMessages(result.sessionId, { dir: source.cwd });
       const checkpointMap = Object.fromEntries(copied.map((entry, index) => [history[index].uuid, entry.uuid]));
       // Fork 出的新原生会话立即拉起常驻进程（resume 到新 sessionId），与 open() 同路径
+      const isWorker = Boolean(source.parentThreadId);
       const session = spawnSession(sdk, {
         cwd: source.cwd,
         resumeId: result.sessionId,
         permissionMode: source.options?.permissionMode,
+        isWorker,
         emit,
         onPlanLimit,
       });
@@ -476,8 +508,9 @@ function create() {
       return session.model;
     },
     async setPermissionMode(session, mode) {
-      session.permissionMode = mode;
-      await session.query?.setPermissionMode(mode);
+      const normalized = normalizeClaudePermissionMode(mode);
+      session.permissionMode = normalized;
+      await session.query?.setPermissionMode(normalized);
     },
     async setThinkingLevel(session, level) {
       const models = await this.listModelsFor(session);

package/src/main/adapters/codebuddy.js

@@ -1,2 +1,3 @@
 const { nativeAcp } = require('./native-acp');
 module.exports = nativeAcp({ id: 'codebuddy', name: 'CodeBuddy', aliases: ['workbuddy', 'WorkBuddy'], args: ['--acp'] });
+module.exports.manifest.integrations.skills = { global: ['.codebuddy/skills'], project: ['.codebuddy/skills'] };

package/src/main/adapters/codex.js

@@ -401,8 +401,19 @@ function create() {
     },
 
     async cancel(session) {
+      for (const pending of session.pendingApprovals?.values() ?? []) {
+        pending.resolve({ action: 'decline' });
+      }
+      session.pendingApprovals?.clear();
       if (!session.state.nativeTurnId) return;
-      await session.host.request('turn/interrupt', { threadId: session.nativeSessionId, turnId: session.state.nativeTurnId });
+      await Promise.race([
+        session.host.request('turn/interrupt', { threadId: session.nativeSessionId, turnId: session.state.nativeTurnId }).catch(() => {}),
+        new Promise((r) => setTimeout(r, 2_000)),
+      ]);
+      if (session.state.turn) {
+        session.state.turn.resolve();
+        session.state.turn = null;
+      }
     },
 
     async respond(session, requestId, response) {
@@ -557,5 +568,12 @@ function create() {
   };
 }
 
-manifest.integrations = { mcp: true, skills: { global: ['.agents/skills'], project: ['.agents/skills'] } };
+// Global discovery: ~/.agents/skills is the recommended location; $CODEX_HOME/skills
+// (~/.codex/skills) is deprecated upstream but still loaded for backwards compatibility.
+// https://developers.openai.com/codex/skills
+manifest.integrations = { mcp: true, skills: {
+  global: ['.agents/skills', '.codex/skills'],
+  project: ['.agents/skills'],
+  overrides: { '.codex/skills': { env: 'CODEX_HOME', suffix: 'skills' } },
+} };
 module.exports = { manifest, create, projectNotification, queueRequest, usageView, modelView };

package/src/main/adapters/cursor.js

@@ -1,2 +1,6 @@
 const { nativeAcp } = require('./native-acp');
-module.exports = nativeAcp({ id: 'cursor-cli', name: 'Cursor', aliases: ['cursor', 'cursor-cli', 'cursorcli'], args: ['acp'] });
+module.exports = nativeAcp({ id: 'cursor-cli', name: 'Cursor', aliases: ['cursor', 'cursor-cli', 'cursorcli'], args: ['acp'] });
+module.exports.manifest.integrations.skills = {
+  global: ['.cursor/skills', '.agents/skills', '.claude/skills', '.codex/skills'],
+  project: ['.cursor/skills', '.agents/skills', '.claude/skills', '.codex/skills'],
+};

package/src/main/adapters/dsh.js

@@ -443,5 +443,12 @@ function create() {
   return web;
 }
 
-manifest.integrations = { mcp: true };
+manifest.integrations = { mcp: true, skills: {
+  global: ['.dsh/skills', '.agents/skills'],
+  project: ['.dsh/skills', '.agents/skills'],
+  overrides: {
+    '.dsh/skills': { env: 'DSH_HOME', suffix: 'skills' },
+    '.agents/skills': { env: 'DSH_AGENTS_HOME', suffix: 'skills' },
+  },
+} };
 module.exports = { manifest, create, projectWireEvent, flattenCatalog };

package/src/main/adapters/grok.js

@@ -275,4 +275,7 @@ async function doGrokCompact(session, userContext, hooks) {
   hooks?.emit?.({ kind: 'completed', finalAnswer: outcome !== 'cancelled' });
 }
 module.exports = { ...grokAdapter(), projectUsage, parseGrokCompactionUpdate, doGrokCompact };
-module.exports.manifest.integrations = { mcp: true };
+module.exports.manifest.integrations = { mcp: true, skills: {
+  global: ['.grok/skills', '.agents/skills', '.claude/skills'],
+  project: ['.grok/skills', '.claude/skills'],
+} };

package/src/main/adapters/hermes.js

@@ -22,3 +22,11 @@ module.exports = acpAdapter({
   usage: false,
   contextUsage: false,
 });
+// ~/.hermes/skills is Hermes' single source of truth (categories become subdirectories);
+// it has no documented project-scope skills directory. HERMES_HOME relocates the home.
+// https://hermes-agent.nousresearch.com/docs/user-guide/features/skills
+module.exports.manifest.integrations.skills = {
+  global: ['.hermes/skills'],
+  project: [],
+  overrides: { '.hermes/skills': { env: 'HERMES_HOME', suffix: 'skills' } },
+};

package/src/main/adapters/kiro.js

@@ -1,2 +1,3 @@
 const { nativeAcp } = require('./native-acp');
-module.exports = nativeAcp({ id: 'kiro-cli', name: 'Kiro', aliases: ['kiro', 'kiro-cli', 'kirocli'], args: ['acp', '--agent-engine', 'v3', '--auth-method', 'cli'] });
+module.exports = nativeAcp({ id: 'kiro-cli', name: 'Kiro', aliases: ['kiro', 'kiro-cli', 'kirocli'], args: ['acp', '--agent-engine', 'v3', '--auth-method', 'cli'] });
+module.exports.manifest.integrations.skills = { global: ['.kiro/skills'], project: ['.kiro/skills'] };

package/src/main/adapters/managed-mcp.js

@@ -3,8 +3,21 @@ function nativeServers(managed = [], collaboration) {
   return [...managed, ...(collaboration ? [{ name: 'harness-mix', ...collaboration }] : [])];
 }
 function acpServers(managed, collaboration) {
-  return nativeServers(managed, collaboration).map(s => ({ name: s.name, command: s.command, args: s.args,
-    env: Object.entries(s.env || {}).map(([name, value]) => ({ name, value })) }));
+  return nativeServers(managed, collaboration).map(s => {
+    if (s.url) {
+      return {
+        name: s.name,
+        url: s.url,
+        headers: Object.entries(s.http_headers || {}).map(([name, value]) => ({ name, value })),
+      };
+    }
+    return {
+      name: s.name,
+      command: s.command,
+      args: s.args || [],
+      env: Object.entries(s.env || {}).map(([name, value]) => ({ name, value })),
+    };
+  });
 }
 function namedServers(managed, collaboration) {
   return Object.fromEntries(nativeServers(managed, collaboration).map(({ name, ...server }) => [name, server]));

package/src/main/adapters/omp.js

@@ -10,3 +10,14 @@ module.exports = piFamily({
   packageHint: 'npm i -g @oh-my-pi/pi-coding-agent 或 https://omp.sh/install',
   aliases: ['omp', 'oh-my-pi'],
 });
+module.exports.manifest.integrations = {
+  mcp: false,
+  skills: {
+    global: ['.omp/agent/skills', '.agents/skills', '.pi/agent/skills'],
+    project: ['.omp/skills', '.agents/skills', '.pi/skills'],
+    overrides: {
+      '.omp/agent/skills': { env: 'OMP_CODING_AGENT_DIR', suffix: 'skills' },
+      '.pi/agent/skills': { env: 'PI_CODING_AGENT_DIR', suffix: 'skills' },
+    },
+  },
+};

package/src/main/adapters/openclaw.js

@@ -18,6 +18,12 @@ const manifest = {
   capabilities: { streaming: true, thinking: false, tools: true, approvals: true, questions: false, models: true, thinkingLevels: true, permissionModes: false, resume: true, fork: false, forkFromMessage: false, compaction: false, usage: true, contextUsage: true, attachments: true },
 };
 
+manifest.integrations = { mcp: false, skills: {
+  global: ['.openclaw/skills', '.agents/skills'],
+  project: ['skills', '.agents/skills'],
+  overrides: { '.openclaw/skills': { env: 'OPENCLAW_STATE_DIR', suffix: 'skills' } },
+} };
+
 const textOfContent = (result) => (result?.content ?? []).map((c) => (c?.type === "text" ? c.text : "")).filter(Boolean).join("\n");
 const stringifyArgs = (args) => {
   if (args == null) return undefined;

package/src/main/adapters/opencode.js

@@ -180,5 +180,9 @@ function create() {
   };
   return adapter;
 }
-manifest.integrations = { mcp: true, skills: { global: ['.config/opencode/skills'], project: ['.opencode/skills'], overrides: { '.config/opencode/skills': { env: 'XDG_CONFIG_HOME', suffix: 'opencode/skills' } } } };
+manifest.integrations = { mcp: true, skills: {
+  global: ['.config/opencode/skills', '.claude/skills', '.agents/skills'],
+  project: ['.opencode/skills', '.claude/skills', '.agents/skills'],
+  overrides: { '.config/opencode/skills': { env: 'XDG_CONFIG_HOME', suffix: 'opencode/skills' } },
+} };
 module.exports = { manifest, create, projectEvent, projectPart, describeSession };

package/src/main/adapters/pi.js

@@ -8,4 +8,8 @@ module.exports = piFamily({
   bin: 'pi',
   packageHint: 'npm i -g @earendil-works/pi-coding-agent',
 });
-module.exports.manifest.integrations = { mcp: false, skills: { global: ['.pi/agent/skills'], project: ['.pi/skills'], overrides: { '.pi/agent/skills': { env: 'PI_CODING_AGENT_DIR', suffix: 'skills' } } } };
+module.exports.manifest.integrations = { mcp: false, skills: {
+  global: ['.pi/agent/skills', '.agents/skills'],
+  project: ['.pi/skills', '.agents/skills'],
+  overrides: { '.pi/agent/skills': { env: 'PI_CODING_AGENT_DIR', suffix: 'skills' } },
+} };

package/src/main/adapters/qoder.js

@@ -5,3 +5,4 @@ module.exports = nativeAcp({
   id: 'qoder', name: 'Qoder', args: ['--acp'],
   capabilities: { questions: false, thinkingLevels: false, usage: true, contextUsage: true, attachments: true, fork: false, compaction: false },
 });
+module.exports.manifest.integrations.skills = { global: ['.qoder/skills'], project: ['.qoder/skills'] };

package/src/main/adapters/trae.js

@@ -5,3 +5,7 @@ module.exports = nativeAcp({
   id: 'trae', name: 'Trae', args: [],
   capabilities: { questions: false, thinkingLevels: false, usage: true, contextUsage: true, attachments: false, fork: false, compaction: false },
 });
+// Trae IDE uses .trae/skills; TraeCode CLI uses .traecli/skills. Both are registered so the
+// CLI-backed (ACP) session and the IDE share one managed root set.
+// https://docs.trae.cn/cli_skills
+module.exports.manifest.integrations.skills = { global: ['.trae/skills', '.traecli/skills'], project: ['.trae/skills', '.traecli/skills', '.agents/skills'] };

package/src/main/adapters/zcode.js

@@ -5,3 +5,6 @@ module.exports = nativeAcp({
   id: 'zcode', name: 'ZCode', args: [],
   capabilities: { questions: false, thinkingLevels: false, usage: true, contextUsage: true, attachments: false, fork: false, compaction: false },
 });
+// ZCode scans, per scope: .zcode/skills then .agents/skills (deeper workspace levels win).
+// https://zcode.z.ai/en/docs/skill
+module.exports.manifest.integrations.skills = { global: ['.zcode/skills', '.agents/skills'], project: ['.zcode/skills', '.agents/skills'] };

package/src/main/host/collaboration.js

@@ -8,6 +8,22 @@ const { createWorkspace, reviewWorkspace, applyWorkspace, discardWorkspace, push
 const validators = new Map(tools.map(tool => [tool.name, z.fromJSONSchema(tool.inputSchema)]));
 const delay = ms => new Promise(resolve => setTimeout(resolve, ms));
 
+function defaultWorkerPermissionMode(agent) {
+  switch (agent) {
+    case 'claude':
+    case 'claude-code':
+      return 'bypassPermissions';
+    case 'antigravity':
+    case 'agy':
+      return 'skip';
+    case 'pi':
+    case 'omp':
+      return 'no-approve';
+    default:
+      return undefined;
+  }
+}
+
 // A session-scoped local bridge. Native models/credentials and approvals stay in adapters.
 class Collaboration {
   constructor(runtime) {
@@ -49,6 +65,7 @@ class Collaboration {
     if (job.appliedDigest) throw new Error('此任务已应用；后续修改请创建新任务');
     const parent = this.runtime.threads.find(t => t.id === job.owner);
     if (!parent || this.runtime.threads.some(t => (this.runtime.execution.isRunning(t.id) || t.reviewPending) && [parent.cwd, job.workspace?.cwd].includes(t.cwd))) throw new Error('请等待主任务和工作区任务结算后再应用');
+    if (job.childId) this.runtime.verificationGates.assertSatisfied(this.runtime.getThread(job.childId), '应用子任务改动');
     job.applying = true;
     try {
       const result = await applyWorkspace(job.workspace, digest);
@@ -73,6 +90,7 @@ class Collaboration {
     const job = this.jobs.get(id);
     if (!job) throw new Error('子任务不存在');
     if (job.status === 'running') throw new Error('请等待子任务完成后再推送分支');
+    if (job.childId) this.runtime.verificationGates.assertSatisfied(this.runtime.getThread(job.childId), '推送子任务分支');
     return pushWorkspace(job.workspace, remote, branch);
   }
 
@@ -134,6 +152,13 @@ class Collaboration {
     if (name === 'delegate_to_agent') {
       const agent = rt.resolveHarnessId(args.agent_type);
       if (!agent || !rt.status[agent]?.available) throw new Error('Target Harness unavailable');
+      // Server-side enforcement: multi-agent collaboration can ONLY start when the user explicitly selected/mentioned agents.
+      if (!parent.activeMentions || !parent.activeMentions.length) {
+        throw new Error('跨 Harness 协作仅在用户显式使用 #agent 或 @agent（如 #pi、#claude）指定时允许启动。用户本轮未显式委派，不能由大模型自行决定启动跨 Harness 协作。请直接使用当前 Harness 的原生工具完成任务。');
+      }
+      if (!parent.activeMentions.includes(agent)) {
+        throw new Error(`用户仅显式指定了 [${parent.activeMentions.join(', ')}]，不能委派给未指定的 "${agent}"。请向用户确认是否需要委派给其他 Harness。`);
+      }
       const jobs = [...this.jobs.values()].filter(j => j.owner === owner);
       if (jobs.filter(j => j.status === 'running').length >= 4) throw new Error('At most four concurrent subtasks; collect existing results first');
       if (jobs.filter(j => j.turnId === rt.execution.lastTurn(owner)?.id).length >= 16) throw new Error('At most sixteen subtasks per lead turn');
@@ -146,7 +171,7 @@ class Collaboration {
     if (name === 'get_delegation_status') {
       const jobs = args.task_ids.map(id => this.owned(owner, id));
       const until = Date.now() + (args.wait_ms ?? 0);
-      while (jobs.every(j => j.status === 'running') && Date.now() < until && !this.closing) await delay(Math.min(100, until - Date.now()));
+      while (jobs.every(j => j.status === 'running') && Date.now() < until && !this.closing && !this.cancelling.has(owner) && rt.execution.isRunning(owner)) await delay(Math.min(100, until - Date.now()));
       return jobs.map(j => this.view(j));
     }
     const job = this.owned(owner, args.task_id);
@@ -184,9 +209,12 @@ class Collaboration {
         job.workspace = await createWorkspace(parent.cwd, job.id, job.isolation);
         await this.save();
       }
-      if (job.status !== 'running' || this.closing) return;
-      const child = job.childId ? rt.threads.find(t => t.id === job.childId) : await rt.createThread({ harnessId: job.agent, cwd: job.workspace.cwd, title: `${parent.title} › ${task.slice(0, 40)}`, parentThreadId: parent.id,
-        onCreated: async thread => { job.childId = thread.id; await this.save(); } });
+      const workerPermMode = defaultWorkerPermissionMode(job.agent);
+      const child = job.childId ? rt.threads.find(t => t.id === job.childId) : await rt.createThread({
+        harnessId: job.agent, cwd: job.workspace.cwd, title: `${parent.title} › ${task.slice(0, 40)}`, parentThreadId: parent.id,
+        options: { ...(workerPermMode ? { permissionMode: workerPermMode } : {}) },
+        onCreated: async thread => { job.childId = thread.id; await this.save(); }
+      });
       if (!child) throw new Error('Native child history is missing; no replacement session was created');
       job.childId = child.id;
       await this.save();
@@ -198,7 +226,15 @@ class Collaboration {
       void sending.then(() => { sendDone = true; }, error => { sendDone = true; sendError = error; });
       const until = Date.now() + 30 * 60 * 1000;
       let displayedStatus = 'running';
-      while (job.status === 'running' && (!sendDone || rt.execution.isRunning(child.id) || child.reviewPending)) {
+      let turnInactiveSince = null;
+      while (job.status === 'running' && !this.closing && !this.cancelling.has(parent.id) && rt.execution.isRunning(parent.id)) {
+        const childRunning = rt.execution.isRunning(child.id) || child.reviewPending;
+        if (!childRunning) {
+          if (!turnInactiveSince) turnInactiveSince = Date.now();
+          if (sendDone || Date.now() - turnInactiveSince > 2000) break;
+        } else {
+          turnInactiveSince = null;
+        }
         const current = this.view(job).display_status;
         if (current !== displayedStatus) { displayedStatus = current; emit({ kind: 'tool', toolCallId, state: 'running', output: JSON.stringify(this.view(job)) }); }
         if (Date.now() > until) { await rt.cancel(child.id); throw new Error('Subtask timed out after 30 minutes'); }
@@ -227,16 +263,26 @@ class Collaboration {
     if (job.status !== 'running') return;
     job.status = this.closing ? 'interrupted' : 'cancelled';
     job.cancelling = true;
-    try { if (job.childId) await this.runtime.cancel(job.childId); }
-    finally { job.cancelling = false; await this.save(); }
+    try {
+      if (job.childId) {
+        await Promise.race([
+          this.runtime.cancel(job.childId),
+          new Promise(r => setTimeout(r, 3_000)),
+        ]).catch(() => {});
+      }
+    } finally { job.cancelling = false; await this.save(); }
   }
 
   async cancelOwner(owner) {
     const jobs = [...this.jobs.values()].filter(j => j.owner === owner && j.status === 'running');
     if (!jobs.length) return;
     this.cancelling.add(owner);
-    try { await Promise.all(jobs.map(j => this.cancel(j))); }
-    finally { this.cancelling.delete(owner); }
+    try {
+      await Promise.race([
+        Promise.all(jobs.map(j => this.cancel(j))),
+        new Promise(r => setTimeout(r, 5_000)),
+      ]).catch(() => {});
+    } finally { this.cancelling.delete(owner); }
   }
   isParticipant(thread, owner) { return thread.id === owner || [...this.jobs.values()].some(j => j.owner === owner && j.childId === thread.id); }
   async close() {
@@ -254,11 +300,13 @@ function mentionedAgents(text, runtime) {
   // Ignore code and email/package addresses; explicit links survive draft copy/paste.
   const prose = text.replace(/```[\s\S]*?```|`[^`\n]*`/g, '');
   const ids = new Set();
-  for (const match of prose.matchAll(/\[[^\]\n]+\]\(harness-mix:\/\/agent\/([\w-]+)\)|(?:^|[\s，。；：])@([\w-]+)(?=$|[\s，。；：])/g)) {
+  // CJK ideographs (\u4e00-\u9fff) and fullwidth/halfwidth forms are valid word boundaries,
+  // so #agent works in Chinese prose (for example 帮我#pi做这个). @ remains native Codex syntax.
+  for (const match of prose.matchAll(/\[[^\]\n]+\]\(harness-mix:\/\/agent\/([\w-]+)\)|(?:^|[\s\u4e00-\u9fff\u3400-\u4dbf\uf900-\ufaff，。；：、！？""''（）【】])#([\w-]+)(?=$|[\s\u4e00-\u9fff\u3400-\u4dbf\uf900-\ufaff，。；：、！？""''（）【】])/g)) {
     const id = runtime.resolveHarnessId(match[1] || match[2]);
     if (id) ids.add(id);
   }
   return [...ids];
 }
 
-module.exports = { Collaboration, mentionedAgents };
+module.exports = { Collaboration, mentionedAgents, defaultWorkerPermissionMode };

package/src/main/host/core-session.js

@@ -17,6 +17,9 @@ class CoreSession {
     const turns = this.core.turns.turnsForThread(thread.id);
     if (turns.length) this.lastTurns.set(thread.id, turns.at(-1).id);
     this.sync(thread);
+    // The authoritative state now lives in ProtocolCore. Retaining the loaded
+    // checkpoint would keep a second complete copy of every item in memory.
+    delete thread.coreState;
   }
   lastTurn(id) { return this.core.getTurn(this.lastTurns.get(id)); }
   isRunning(id) { return Boolean(active(this.lastTurn(id))); }
@@ -73,7 +76,10 @@ class CoreSession {
       delete message.items;
       thread.tools.push(...items.filter(i => i.type === 'tool_call').map(i => ({ ...i, id: i.nativeRef?.toolCallId ?? i.id, messageId: message.id, at: i.createdAt, endedAt: i.updatedAt })));
     }
-    thread.coreState = { version: 1, thread: structuredClone(coreThread), turns: structuredClone(this.core.turns.turnsForThread(thread.id)), items: structuredClone([...this.core.projector.items.values()].filter(i => i.threadId === thread.id)) };
+  }
+  checkpoint(thread) {
+    const coreThread = this.core.getThread(thread.id);
+    return coreThread ? { version: 1, thread: structuredClone(coreThread), turns: structuredClone(this.core.turns.turnsForThread(thread.id)), items: structuredClone([...this.core.projector.items.values()].filter(i => i.threadId === thread.id)) } : null;
   }
   snapshot() { return this.core.snapshot(); }
 }

package/src/main/host/handoff-checkpoints.js

@@ -42,6 +42,7 @@ function conversationSnapshot(thread) {
 }
 
 function evidenceKind(item) {
+  if (item.type === 'verification_report') return 'verification';
   const title = String(item.title || '').toLowerCase();
   if (/test|vitest|jest|pytest|测试/.test(title)) return 'test';
   if (/build|compile|tsc|构建|编译/.test(title)) return 'build';
@@ -51,7 +52,13 @@ function evidenceKind(item) {
 
 function evidenceSnapshot(thread) {
   const items = (thread.messages || []).flatMap(message => message.coreItems || []);
-  return items.filter(item => item.type === 'tool_call' && item.state !== 'running').slice(-LIMITS.evidence).map(item => {
+  return items.filter(item => (item.type === 'tool_call' && item.state !== 'running') || item.type === 'verification_report').slice(-LIMITS.evidence).map(item => {
+    if (item.type === 'verification_report') {
+      const report = redact(item.report ?? {});
+      const content = { kind: 'verification', title: 'Verification gate', state: report.status ?? 'unknown', inputExcerpt: report.mode ?? '', outputExcerpt: JSON.stringify(report).slice(0, LIMITS.excerpt), createdAt: item.updatedAt };
+      const contentDigest = digest(content);
+      return { evidenceId: `evidence_${contentDigest.slice(0, 24)}`, ...content, contentDigest };
+    }
     const content = {
       kind: evidenceKind(item),
       sourceHarnessId: thread.harnessId,