@harness-mix/cli 0.1.6 → 0.1.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@harness-mix/cli",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "license": "Apache-2.0",
   "description": "Harness Mix native Codex UI bridge for Codex, Pi, Claude Code, DeepSeek Harness, Antigravity, CodeBuddy, Kiro CLI, Cursor CLI and other native coding harnesses.",
   "keywords": [
@@ -83,6 +83,7 @@
     "typecheck:native-ui": "tsc -b src/native-ui/shared-contracts/tsconfig.json src/native-ui/desktop-control/tsconfig.json src/native-ui/renderer-extension/tsconfig.json --pretty false",
     "test:native-ui": "vitest run --config vitest.config.mjs",
     "test:ci": "npm run test:docs && npm run check && npm run typecheck:native-ui && npm run test:native-ui && npm run test:core-all && npm run test:native-protocol && npm run test:native-compatibility && npm run test:platform",
+    "test:storage-verification": "node scripts/storage-verification-test.cjs",
     "test:collaboration": "node scripts/collaboration-test.cjs",
     "test:switch-harness": "node scripts/switch-harness-test.cjs",
     "smoke:collaboration-ui": "electron scripts/collaboration-ui-smoke.cjs",
@@ -121,7 +122,7 @@
     "test:core-concurrency": "node scripts/core-concurrency-test.cjs",
     "test:thread-title": "node scripts/thread-title-test.cjs",
     "test:handoff": "node scripts/handoff-checkpoint-test.cjs && node scripts/switch-harness-test.cjs",
-    "test:core-all": "node scripts/contracts-test.cjs && node scripts/projector-test.cjs && node scripts/turn-manager-test.cjs && node scripts/sequence-test.cjs && node scripts/shadow-test.cjs && node scripts/architecture-test.cjs && node scripts/adapters-test.cjs && node scripts/dsh-adapter-test.cjs && node scripts/codex-adapter-test.cjs && node scripts/codex-accounts-test.cjs && node scripts/antigravity-adapter-test.cjs && node scripts/openclaw-adapter-test.cjs && node scripts/core-replay-test.cjs && node scripts/determinism-test.cjs && node scripts/core-runtime-test.cjs && node scripts/core-services-test.cjs && node scripts/native-file-change-test.cjs && node scripts/native-updater-test.cjs && node scripts/native-update-apply-test.cjs && node scripts/native-vendor-adapters-test.cjs && node scripts/core-concurrency-test.cjs && node scripts/concurrency-layers-test.cjs && node scripts/tool-concurrency-regression-test.cjs && node scripts/handoff-checkpoint-test.cjs && node scripts/switch-harness-test.cjs && node scripts/native-acp-depth-test.cjs && node scripts/thread-title-test.cjs && node scripts/native-job-object-test.cjs && node scripts/integrations-test.cjs",
+    "test:core-all": "node scripts/contracts-test.cjs && node scripts/projector-test.cjs && node scripts/turn-manager-test.cjs && node scripts/sequence-test.cjs && node scripts/shadow-test.cjs && node scripts/architecture-test.cjs && node scripts/adapters-test.cjs && node scripts/dsh-adapter-test.cjs && node scripts/codex-adapter-test.cjs && node scripts/codex-accounts-test.cjs && node scripts/antigravity-adapter-test.cjs && node scripts/openclaw-adapter-test.cjs && node scripts/core-replay-test.cjs && node scripts/determinism-test.cjs && node scripts/core-runtime-test.cjs && node scripts/core-services-test.cjs && node scripts/native-file-change-test.cjs && node scripts/native-updater-test.cjs && node scripts/native-update-apply-test.cjs && node scripts/native-vendor-adapters-test.cjs && node scripts/core-concurrency-test.cjs && node scripts/concurrency-layers-test.cjs && node scripts/tool-concurrency-regression-test.cjs && node scripts/handoff-checkpoint-test.cjs && node scripts/switch-harness-test.cjs && node scripts/native-acp-depth-test.cjs && node scripts/thread-title-test.cjs && node scripts/native-job-object-test.cjs && node scripts/integrations-test.cjs && node scripts/storage-verification-test.cjs",
     "test:codex-accounts": "node scripts/codex-accounts-test.cjs",
     "smoke:codex-accounts-ui": "electron scripts/codex-accounts-ui-smoke.cjs",
     "test:transcript": "node scripts/transcript-test.cjs",

package/scripts/codebuddy-migration-test.cjs

@@ -26,7 +26,7 @@ registry.buildAdapters = savedBuilder;
   assert.equal(restored.harnessChain[0].nativeSessionId, 'previous-native');
   assert.equal(restored.pendingHandoff.fromHarnessId, 'codebuddy');
   assert.equal(runtime.resolveHarnessId('Workbuddy'), 'codebuddy');
-  assert.equal(JSON.parse(await fs.readFile(path.join(directory, 'threads.json'), 'utf8'))[0].harnessId, 'codebuddy');
+  assert.equal((await runtime.store.load())[0].harnessId, 'codebuddy');
   const history = require('../src/main/adapters/codebuddy-history');
   const savedRoot = process.env.CODEBUDDY_CONFIG_DIR;
   process.env.CODEBUDDY_CONFIG_DIR = path.join(directory, 'native-config');

package/scripts/core-runtime-test.cjs

@@ -91,7 +91,7 @@ async function until(fn) {
     assert.deepEqual(rt.shadowReport().errors, []);
     await rt.close();
     const saved = await rt.store.load();
-    assert.equal(saved[0].messages.find(m => m.coreTurnId === first).coreTurn.status, 'completed');
+    assert.equal(saved[0].coreState.turns.find(turn => turn.id === first).status, 'completed');
     const restored = new HostRuntime({ dataDirectory: directory });
     restored.threads = await restored.store.load();
     for (const record of restored.threads) restored.execution.threadCreated(record);
@@ -99,6 +99,14 @@ async function until(fn) {
     assert.ok(restored.core.getItemsForTurn(first).some(i => i.type === 'file_change' && i.undone));
     assert.equal(restored.shadowReport().enabled, false);
     await restored.close();
+    const lazy = new HostRuntime({ dataDirectory: directory });
+    lazy.threads = await lazy.store.loadIndex();
+    assert.equal(lazy.threads[0]._storageStub, true, 'cold start reads only the thread index');
+    assert.equal(lazy.core.getThread(lazy.threads[0].id), null, 'unopened transcript is absent from Core memory');
+    const hydrated = lazy.getThread(lazy.threads[0].id);
+    assert.equal(hydrated._storageStub, undefined);
+    assert.equal(lazy.core.getTurn(first).status, 'completed', 'opening one task restores only its Core checkpoint');
+    await lazy.close();
     console.log('core-runtime: independent turns, waiting/responses, failure, cancel races, persistence passed');
   } finally { await rt.close(); }
 })().catch(error => { console.error(error); process.exitCode = 1; });

package/scripts/native-protocol-test.cjs

@@ -118,6 +118,16 @@ async function main() {
     assert.equal(started.thread.model, 'codexhost/pi-native');
     const { includesThread } = require('../src/main/native/thread-list');
     const storedThread = runtime.threads.find(t => t.id === threadId);
+    const hostCommands = await bridge.request('codexhost/thread/commands/inspect', { threadId });
+    assert.ok(hostCommands.commands.some(command => command.id === 'verify'));
+    assert.ok(hostCommands.commands.some(command => command.id === 'gate'));
+    const gate = await bridge.request('codexhost/thread/verification/configure', { threadId, policy: { mode: 'required', checks: { cleanWorkingTree: false } } });
+    assert.equal(gate.policy.mode, 'required');
+    assert.equal(gate.satisfied, false);
+    assert.equal((await bridge.request('codexhost/thread/verification/get', { threadId })).policy.mode, 'required');
+    const storage = await bridge.request('codexhost/storage/inspect');
+    assert.equal(storage.schemaVersion, 2);
+    assert.ok(storage.threadCount >= 1);
     assert.equal(includesThread(storedThread, { sectionId: section.id }), false);
     await bridge.request('thread/section/move', { threadId, sectionId: section.id });
     assert.deepEqual((await bridge.request('thread/read', { threadId })).thread.section, section);
@@ -169,7 +179,7 @@ async function main() {
     assert.equal(events.filter(e => e.method === 'turn/completed' && e.params.threadId === threadId).length, 1);
     const history = await bridge.request('thread/read', { threadId });
     assert.equal(history.thread.turns[0].status, 'completed');
-    const projectedChange = history.thread.turns[0].items.find(i => i.type === 'fileChange')?.changes?.[0];
+    const projectedChange = history.thread.turns[0].items.flatMap(i => i.type === 'fileChange' ? i.changes : []).find(change => change.path === 'a.txt');
     assert.equal(projectedChange?.kind.type, 'add', 'fileChange item projects the added kind');
     assert.ok(projectedChange?.diff.includes('diff --git a/a.txt b/a.txt') && projectedChange.diff.includes('@@ -0,0 +1,1 @@'), 'fileChange item carries a full unified diff');
     await bridge.request('thread/name/set', { threadId, name: 'Local Core' });

package/scripts/native-ui-smoke.cjs

@@ -12,13 +12,20 @@ app.whenReady().then(async () => {
   const icons = getAllIconsDictionary();
   icons.harnesses['claude-code'] = icons.harnesses.claude;
   icons.harnesses['deepseek-harness'] = icons.harnesses.dsh;
-  const bundle = await esbuild.build({ stdin: { contents: `export { createRendererAgentIcon } from './src/native-ui/renderer-extension/src/renderer-agent-icon.ts'; export { mountRendererAgentPicker, renderRendererAgentPicker } from './src/native-ui/renderer-extension/src/renderer-agent-picker.ts'; export { mountRendererModelPicker, renderRendererModelPicker } from './src/native-ui/renderer-extension/src/renderer-model-picker.ts'; export { mountRendererHarnessHandoff } from './src/native-ui/renderer-extension/src/renderer-harness-handoff.ts'; export { restoredThreadOwnership } from './src/native-ui/renderer-extension/src/renderer-binding-probe.ts'; export { installRendererSidebarAgentIcons } from './src/native-ui/renderer-extension/src/renderer-sidebar-agent-icons.ts'; export { createAccountsSettingsPage } from './src/native-ui/renderer-extension/src/settings/accounts-page.ts'; export { aboutPage } from './src/native-ui/renderer-extension/src/settings/pages.ts'; export { rendererSettingsMessages } from './src/native-ui/renderer-extension/src/settings/localization.ts'; export { installRendererSettingsShell } from './src/native-ui/renderer-extension/src/settings/shell.ts';`, resolveDir: process.cwd() }, bundle: true, alias: { '@codexhost/shared-contracts': path.resolve('src/native-ui/shared-contracts/src/index.ts') }, platform: 'browser', format: 'iife', globalName: 'NativeUI', write: false, loader: { '.svg': 'dataurl', '.png': 'dataurl', '.css': 'text' }, logLevel: 'silent' });
+  const bundle = await esbuild.build({ stdin: { contents: `export { createRendererAgentIcon } from './src/native-ui/renderer-extension/src/renderer-agent-icon.ts'; export { mountRendererAgentPicker, renderRendererAgentPicker } from './src/native-ui/renderer-extension/src/renderer-agent-picker.ts'; export { mountRendererModelPicker, renderRendererModelPicker } from './src/native-ui/renderer-extension/src/renderer-model-picker.ts'; export { mountRendererHarnessHandoff } from './src/native-ui/renderer-extension/src/renderer-harness-handoff.ts'; export { restoredThreadOwnership } from './src/native-ui/renderer-extension/src/renderer-binding-probe.ts'; export { installRendererSidebarAgentIcons } from './src/native-ui/renderer-extension/src/renderer-sidebar-agent-icons.ts'; export { installRendererSettingsLifecycle } from './src/native-ui/renderer-extension/src/harness-mix-settings.ts'; export { createAccountsSettingsPage } from './src/native-ui/renderer-extension/src/settings/accounts-page.ts'; export { createStorageSettingsPage } from './src/native-ui/renderer-extension/src/settings/storage-page.ts'; export { aboutPage } from './src/native-ui/renderer-extension/src/settings/pages.ts'; export { rendererSettingsMessages } from './src/native-ui/renderer-extension/src/settings/localization.ts'; export { installRendererSettingsShell } from './src/native-ui/renderer-extension/src/settings/shell.ts';`, resolveDir: process.cwd() }, bundle: true, alias: { '@codexhost/shared-contracts': path.resolve('src/native-ui/shared-contracts/src/index.ts') }, platform: 'browser', format: 'iife', globalName: 'NativeUI', write: false, loader: { '.svg': 'dataurl', '.png': 'dataurl', '.css': 'text' }, logLevel: 'silent' });
   const win = new BrowserWindow({ show: false, width: 900, height: 650, webPreferences: { contextIsolation: true, sandbox: true, offscreen: true, backgroundThrottling: false } });
   await win.loadURL('data:text/html,<html><head><style>body{background:%2317191d;color:white;font:16px Arial;padding:40px}button{background:%23272a30;color:white;border:0;padding:12px}img{vertical-align:middle}main{display:flex;gap:25px;margin-bottom:40px}</style></head><body><h2>Harness Mix native components</h2><main></main></body></html>');
   await win.webContents.executeJavaScript(`globalThis.__HARNESS_MIX_ICONS__=${JSON.stringify(icons)};globalThis.__HARNESS_MIX_MODEL_FAMILIES__=${JSON.stringify(MODEL_FAMILIES.map(f => ({ id: f.id, pattern: f.regex.source })))};${bundle.outputFiles[0].text}`);
+  const liveSettingsPages = await win.webContents.executeJavaScript(`(() => {
+    const lifecycle = NativeUI.installRendererSettingsLifecycle(window, {});
+    const pageIds = globalThis.__codexhostSettingsShellV1.registry.pages.map(page => page.id);
+    lifecycle.dispose();
+    return pageIds;
+  })()`);
+  assert.deepEqual(liveSettingsPages, ['connections', 'accounts', 'mcp', 'skills', 'session-import', 'storage', 'updates', 'about']);
   const { NativeProtocol } = require('../src/main/native/protocol');
   const nativeThreads = ['pi', 'claude', 'dsh', 'antigravity'].map((harnessId, index) => ({ id: 'sidebar-' + index, harnessId, model: { id: 'model-' + index, provider: 'native' }, options: {} }));
-  const protocol = new NativeProtocol({ threads: nativeThreads, subscribe: () => () => {}, core: { subscribe: () => () => {} }, describe: async () => ({}), getCapabilities: () => ({}) }, () => {});
+  const protocol = new NativeProtocol({ threads: nativeThreads, getThread: id => nativeThreads.find(thread => thread.id === id), subscribe: () => () => {}, core: { subscribe: () => () => {} }, describe: async () => ({}), getCapabilities: () => ({}) }, () => {});
   const inspections = await Promise.all(nativeThreads.map(thread => protocol.request('codexhost/thread/inspect', { threadId: thread.id })));
   await win.webContents.executeJavaScript(`globalThis.testInspections=${JSON.stringify(inspections)}`);
   const result = await win.webContents.executeJavaScript(`(async () => {
@@ -126,6 +133,10 @@ app.whenReady().then(async () => {
     };
     const shell = NativeUI.installRendererSettingsShell([
       NativeUI.createAccountsSettingsPage(messages, () => client),
+      NativeUI.createStorageSettingsPage(messages, () => ({
+        inspectStorage:async () => ({storageSchemaVersion:3,threadCount:12,loadedThreadCount:2,indexBytes:2048,recordBytes:5242880,recordCount:12,legacyBytes:0}),
+        optimizeStorage:async () => ({before:{storageSchemaVersion:3,threadCount:12,loadedThreadCount:2,indexBytes:2048,recordBytes:5242880,recordCount:12,legacyBytes:0},after:{storageSchemaVersion:3,threadCount:12,loadedThreadCount:2,indexBytes:2048,recordBytes:4194304,recordCount:12,legacyBytes:0}}),
+      })),
       NativeUI.aboutPage(messages, () => ({ readCurrentVersion:async () => ({version:'0.1.4'}), checkUpdate:async () => { throw new Error('not expected'); } })),
     ], messages, document);
     shell.openSettings(undefined, 'accounts');
@@ -135,8 +146,16 @@ app.whenReady().then(async () => {
   })()`);
   assert.match(settingsResult.text, /native.*example\.com/s);
   assert.match(settingsResult.text, /Plus/);
-  assert.equal(settingsResult.addHidden, true);
+  assert.equal(settingsResult.addHidden, false, 'multi-account Add Account action remains visible');
   fs.writeFileSync(path.join(out, 'settings-account.png'), (await win.webContents.capturePage()).toPNG());
+  const storageText = await win.webContents.executeJavaScript(`(async () => {
+    globalThis.__codexhostSettingsShellV1.openSettings(undefined, 'storage');
+    await new Promise(resolve => setTimeout(resolve, 100));
+    return globalThis.__codexhostSettingsShellV1.root.shadowRoot.textContent;
+  })()`);
+  assert.match(storageText, /Schema v3/);
+  assert.match(storageText, /12 个任务/);
+  fs.writeFileSync(path.join(out, 'settings-storage.png'), (await win.webContents.capturePage()).toPNG());
   const aboutText = await win.webContents.executeJavaScript(`(async () => {
     globalThis.__codexhostSettingsShellV1.openSettings(undefined, 'about');
     await new Promise(resolve => setTimeout(resolve, 100));
@@ -145,6 +164,6 @@ app.whenReady().then(async () => {
   assert.match(aboutText, /v0\.1\.4/);
   fs.writeFileSync(path.join(out, 'settings-about.png'), (await win.webContents.capturePage()).toPNG());
   win.destroy();
-  console.log('PASS: real Electron native picker, graphical Harness handoff, official Account/Usage, live About version and all project Harness/model SVGs load');
+  console.log('PASS: real Electron native picker, graphical Harness handoff, official Account/Usage, sharded Storage metrics, live About version and all project Harness/model SVGs load');
   app.quit();
 }).catch(error => { console.error(error); app.exit(1); });

package/scripts/projector-test.cjs

@@ -129,6 +129,19 @@ test('usage.updated：upsert usage item + thread.usage 合并', () => {
   assert.deepStrictEqual(thread.usage, { inputTokens: 10, outputTokens: 5 });
 });
 
+test('verification.updated：终态 Turn 可追加并更新可审计验证报告', () => {
+  const { core } = coreWithThread();
+  const turn = core.createTurn({ threadId: 'thread_1' });
+  core.dispatch({ threadId: 'thread_1', turnId: turn.id, type: 'turn.started' });
+  core.dispatch({ threadId: 'thread_1', turnId: turn.id, type: 'turn.completed' });
+  core.dispatch({ threadId: 'thread_1', turnId: turn.id, type: 'verification.updated', payload: { report: { reportId: 'r1', status: 'failed' } } });
+  const item = core.getItemsForTurn(turn.id).find(candidate => candidate.type === 'verification_report');
+  assert.strictEqual(item.report.status, 'failed');
+  core.dispatch({ threadId: 'thread_1', turnId: turn.id, type: 'verification.updated', payload: { report: { reportId: 'r2', status: 'passed' } } });
+  assert.strictEqual(core.getItemsForTurn(turn.id).filter(candidate => candidate.type === 'verification_report').length, 1);
+  assert.strictEqual(item.report.status, 'passed');
+});
+
 test('snapshot / reset', () => {
   const { core } = coreWithThread();
   const turn = core.createTurn({ threadId: 'thread_1' });

package/scripts/storage-verification-test.cjs

@@ -0,0 +1,78 @@
+const assert = require('node:assert/strict');
+const os = require('node:os');
+const path = require('node:path');
+const { promises: fs } = require('node:fs');
+const { Store } = require('../src/main/host/store');
+const { compactThread, hydrateThread, storageProjection } = require('../src/main/host/thread-storage');
+const { VerificationGates, normalizePolicy } = require('../src/main/host/verification-gates');
+const { ThreadStore } = require('../src/main/host/thread-store');
+
+(async () => {
+  const root = await fs.mkdtemp(path.join(os.tmpdir(), 'harness-mix-storage-'));
+  try {
+    const turn = { id: 'turn-1', threadId: 'thread-1', status: 'completed', itemIds: ['answer-1'], createdAt: 1, updatedAt: 2, startedAt: 1, completedAt: 2, lastSequence: 2, nativeTurnRef: {} };
+    const item = { id: 'answer-1', threadId: 'thread-1', turnId: 'turn-1', type: 'agent_message', status: 'completed', content: 'large answer '.repeat(1000), createdAt: 1, updatedAt: 2, nativeRef: {} };
+    const coreThread = { id: 'thread-1', workspaceId: root, harnessId: 'fixture', status: 'idle', activeTurnId: null, nativeSessionRef: {}, metadata: {}, usage: {}, createdAt: 1, updatedAt: 2 };
+    const thread = { id: 'thread-1', title: 'fixture', cwd: root, harnessId: 'fixture', nativeSessionId: 'native-1', status: 'ready', connectionStatus: 'ready', createdAt: 1,
+      messages: [{ id: 'user-1', role: 'user', text: 'hello', at: 1 }, { id: 'turn-1', role: 'assistant', coreTurnId: 'turn-1', coreTurn: turn, coreItems: [item], text: item.content, thinking: '', at: 1, endedAt: 2, stopReason: 'completed' }],
+      tools: [], pendingApprovals: [], coreThread, currentTurn: turn, coreState: { version: 1, thread: coreThread, turns: [turn], items: [item] } };
+    await fs.writeFile(path.join(root, 'threads.json'), JSON.stringify([thread]));
+    const store = new Store(root, 'threads.json', { schemaVersion: 2, serialize: compactThread, deserialize: hydrateThread, backup: true });
+    const loaded = await store.load();
+    assert.equal(loaded[0].messages[1].text, item.content, 'legacy array remains readable');
+    await store.save(loaded);
+    const persisted = JSON.parse(await fs.readFile(path.join(root, 'threads.json'), 'utf8'));
+    assert.equal(persisted.schemaVersion, 2);
+    assert.equal(persisted.threads[0].messages[1].text, undefined, 'derived assistant text is not duplicated');
+    assert.equal(persisted.threads[0].coreState.items[0].content, item.content, 'authoritative Core content is preserved');
+    assert.ok((await fs.stat(path.join(root, 'threads.json.bak'))).size > 0, 'legacy store is backed up during migration');
+    const projection = storageProjection(loaded);
+    assert.ok(projection.savedBytes > 0);
+    const shardedRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'harness-mix-sharded-'));
+    await fs.writeFile(path.join(shardedRoot, 'threads.json'), JSON.stringify({ schemaVersion: 2, threads: [compactThread(thread)] }));
+    const sharded = new ThreadStore(shardedRoot);
+    const migration = await sharded.loadIndex();
+    assert.equal(migration[0]._storageStub, undefined, 'legacy records load fully for one-time migration');
+    migration[0].status = 'working';
+    migration[0].connectionStatus = 'busy';
+    await sharded.save(migration);
+    const stubs = await sharded.loadIndex();
+    assert.equal(stubs[0]._storageStub, true);
+    assert.equal(stubs[0].status, 'interrupted', 'cold startup never presents a stale running task');
+    assert.equal(stubs[0].connectionStatus, 'ready');
+    assert.equal(stubs[0].messages.length, 0, 'cold index does not load transcript bodies');
+    sharded.hydrateInto(stubs[0]);
+    assert.equal(stubs[0].coreState.items[0].content, item.content);
+    assert.equal((await sharded.inspectFiles()).recordCount, 1);
+    assert.ok((await fs.stat(path.join(shardedRoot, 'threads.json.bak'))).size > 0, 'monolithic source remains recoverable');
+    await fs.rm(shardedRoot, { recursive: true, force: true });
+    const unsupportedRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'harness-mix-storage-schema-'));
+    await fs.writeFile(path.join(unsupportedRoot, 'threads.json'), JSON.stringify({ schemaVersion: 99, threads: [] }));
+    await assert.rejects(new Store(unsupportedRoot, 'threads.json', { schemaVersion: 2 }).load(), /Unsupported thread store schema/);
+    await fs.rm(unsupportedRoot, { recursive: true, force: true });
+
+    const fakeRuntime = {
+      core: { getTurn: () => turn, getItemsForTurn: () => [item], dispatch: () => {} },
+      execution: { lastTurn: () => turn, sync: () => {} },
+    };
+    const gates = new VerificationGates(fakeRuntime);
+    gates.configure(thread, { mode: 'required', checks: { cleanWorkingTree: false }, commands: [{ id: 'node', command: `"${process.execPath}" -e "process.exit(0)"`, timeoutMs: 10_000 }] });
+    assert.throws(() => gates.assertSatisfied(thread, '交付'), /未通过/);
+    const passed = await gates.run(thread);
+    assert.equal(passed.status, 'passed');
+    assert.match(passed.contentDigest, /^[a-f0-9]{64}$/);
+    assert.equal(gates.inspect(thread).satisfied, true);
+    const stale = gates.invalidate(thread, 'test state changed');
+    assert.equal(stale.status, 'stale');
+    assert.equal(gates.inspect(thread).satisfied, false, 'required reports become stale after task state changes');
+    gates.configure(thread, { mode: 'advisory', commands: [`"${process.execPath}" -e "process.exit(3)"`] });
+    const failed = await gates.run(thread);
+    assert.equal(failed.status, 'failed');
+    assert.equal(gates.inspect(thread).satisfied, true, 'advisory failures do not block delivery');
+    assert.throws(() => normalizePolicy({ commands: [{ command: '' }] }), /Invalid verification command/);
+    assert.throws(() => normalizePolicy({ commands: [{ command: 'tool --token sk-1234567890abcdef' }] }), /credential-like data/);
+    console.log('PASS: schema v2 compact migration, backup, storage metrics and configurable verification gates');
+  } finally {
+    await fs.rm(root, { recursive: true, force: true });
+  }
+})().catch(error => { console.error(error); process.exitCode = 1; });

package/scripts/switch-harness-test.cjs

@@ -154,7 +154,7 @@ async function main() {
 
     // 8) 持久化：threads.json 里切换链完整（含原生会话引用，供重启后惰性恢复）
     await rt.store.save(rt.threads);
-    const persisted = JSON.parse(await fs.readFile(path.join(root, 'data', 'threads.json'), 'utf8')).find(t => t.id === thread.id);
+    const persisted = (await rt.store.load()).find(t => t.id === thread.id);
     assert.equal(persisted.harnessId, 'a');
     assert.deepEqual(persisted.harnessChain.map(e => e.harnessId), ['a', 'b']);
     assert.equal(persisted.harnessChain[0].nativeSessionId, aNativeId);

package/src/main/host/collaboration.js

@@ -65,6 +65,7 @@ class Collaboration {
     if (job.appliedDigest) throw new Error('此任务已应用；后续修改请创建新任务');
     const parent = this.runtime.threads.find(t => t.id === job.owner);
     if (!parent || this.runtime.threads.some(t => (this.runtime.execution.isRunning(t.id) || t.reviewPending) && [parent.cwd, job.workspace?.cwd].includes(t.cwd))) throw new Error('请等待主任务和工作区任务结算后再应用');
+    if (job.childId) this.runtime.verificationGates.assertSatisfied(this.runtime.getThread(job.childId), '应用子任务改动');
     job.applying = true;
     try {
       const result = await applyWorkspace(job.workspace, digest);
@@ -89,6 +90,7 @@ class Collaboration {
     const job = this.jobs.get(id);
     if (!job) throw new Error('子任务不存在');
     if (job.status === 'running') throw new Error('请等待子任务完成后再推送分支');
+    if (job.childId) this.runtime.verificationGates.assertSatisfied(this.runtime.getThread(job.childId), '推送子任务分支');
     return pushWorkspace(job.workspace, remote, branch);
   }
 

package/src/main/host/core-session.js

@@ -17,6 +17,9 @@ class CoreSession {
     const turns = this.core.turns.turnsForThread(thread.id);
     if (turns.length) this.lastTurns.set(thread.id, turns.at(-1).id);
     this.sync(thread);
+    // The authoritative state now lives in ProtocolCore. Retaining the loaded
+    // checkpoint would keep a second complete copy of every item in memory.
+    delete thread.coreState;
   }
   lastTurn(id) { return this.core.getTurn(this.lastTurns.get(id)); }
   isRunning(id) { return Boolean(active(this.lastTurn(id))); }
@@ -73,7 +76,10 @@ class CoreSession {
       delete message.items;
       thread.tools.push(...items.filter(i => i.type === 'tool_call').map(i => ({ ...i, id: i.nativeRef?.toolCallId ?? i.id, messageId: message.id, at: i.createdAt, endedAt: i.updatedAt })));
     }
-    thread.coreState = { version: 1, thread: structuredClone(coreThread), turns: structuredClone(this.core.turns.turnsForThread(thread.id)), items: structuredClone([...this.core.projector.items.values()].filter(i => i.threadId === thread.id)) };
+  }
+  checkpoint(thread) {
+    const coreThread = this.core.getThread(thread.id);
+    return coreThread ? { version: 1, thread: structuredClone(coreThread), turns: structuredClone(this.core.turns.turnsForThread(thread.id)), items: structuredClone([...this.core.projector.items.values()].filter(i => i.threadId === thread.id)) } : null;
   }
   snapshot() { return this.core.snapshot(); }
 }

package/src/main/host/handoff-checkpoints.js

@@ -42,6 +42,7 @@ function conversationSnapshot(thread) {
 }
 
 function evidenceKind(item) {
+  if (item.type === 'verification_report') return 'verification';
   const title = String(item.title || '').toLowerCase();
   if (/test|vitest|jest|pytest|测试/.test(title)) return 'test';
   if (/build|compile|tsc|构建|编译/.test(title)) return 'build';
@@ -51,7 +52,13 @@ function evidenceKind(item) {
 
 function evidenceSnapshot(thread) {
   const items = (thread.messages || []).flatMap(message => message.coreItems || []);
-  return items.filter(item => item.type === 'tool_call' && item.state !== 'running').slice(-LIMITS.evidence).map(item => {
+  return items.filter(item => (item.type === 'tool_call' && item.state !== 'running') || item.type === 'verification_report').slice(-LIMITS.evidence).map(item => {
+    if (item.type === 'verification_report') {
+      const report = redact(item.report ?? {});
+      const content = { kind: 'verification', title: 'Verification gate', state: report.status ?? 'unknown', inputExcerpt: report.mode ?? '', outputExcerpt: JSON.stringify(report).slice(0, LIMITS.excerpt), createdAt: item.updatedAt };
+      const contentDigest = digest(content);
+      return { evidenceId: `evidence_${contentDigest.slice(0, 24)}`, ...content, contentDigest };
+    }
     const content = {
       kind: evidenceKind(item),
       sourceHarnessId: thread.harnessId,