@hunter-harness/workflow-harness 0.2.21 → 0.2.23

package/harness/bundles/general/cursor/scripts/harness_integration.py

@@ -43,6 +43,7 @@ if hasattr(sys.stderr, "reconfigure"):
     sys.stderr.reconfigure(encoding="utf-8")
 
 STEP_ORDER = ["preflight", "prepare", "merge", "verify", "push", "cleanup"]
+DEFAULT_VERIFY_TIMEOUT_SECONDS = 1800
 HEAVY_WORKTREE_ROOTS = (
     "node_modules", ".venv", "venv", "build", "dist", "target", ".cache", "__pycache__"
 )
@@ -56,6 +57,48 @@ def now_iso() -> str:
     return dt.datetime.now().astimezone().isoformat(timespec="milliseconds")
 
 
+def _split_verify_command(raw: str, *, platform: str = sys.platform) -> list[str]:
+    # Harness profile/CLI commands use one portable quoting contract. Keep
+    # POSIX tokenization on Windows too; executable normalization happens later.
+    return shlex.split(raw, posix=True)
+
+
+def _dedupe_verify_commands(
+    commands: Sequence[Sequence[str]],
+) -> list[list[str]]:
+    """Preserve order while preventing explicit/profile duplicate execution."""
+    result: list[list[str]] = []
+    seen: set[tuple[str, ...]] = set()
+    for command in commands:
+        normalized = tuple(str(item) for item in command)
+        if normalized in seen:
+            continue
+        seen.add(normalized)
+        result.append(list(normalized))
+    return result
+
+
+def _normalize_verify_command(
+    command: Sequence[str],
+    *,
+    platform: str = sys.platform,
+    resolver: Callable[[str], str | None] = shutil.which,
+) -> list[str]:
+    """Resolve Windows package-manager wrappers without enabling shell mode."""
+    result = [str(item) for item in command]
+    if not result or not platform.lower().startswith("win"):
+        return result
+    executable = Path(result[0]).name.lower()
+    if Path(executable).suffix:
+        return result
+    if executable not in {"npm", "npx", "pnpm", "yarn", "corepack"}:
+        return result
+    resolved = resolver(executable + ".cmd") or resolver(executable)
+    if resolved:
+        result[0] = resolved
+    return result
+
+
 class IntegrationError(Exception):
     code = "INTEGRATION_ERROR"
 
@@ -224,6 +267,11 @@ def load_journal(project_root: Path, transaction_id: str) -> dict[str, Any]:
 def _pid_alive(pid: int) -> bool:
     if pid <= 0:
         return False
+    # On Windows, os.kill(pid, 0) can transiently report EINVAL for the
+    # current low-priority/background process. The current process is
+    # unambiguously alive, so avoid reclaiming its lock on that platform race.
+    if pid == os.getpid():
+        return True
     try:
         os.kill(pid, 0)
     except ProcessLookupError:
@@ -878,7 +926,7 @@ class IntegrationTransaction:
         commands: list[list[str]] = []
         for index, item in enumerate(required):
             if isinstance(item, str) and item.strip():
-                commands.append(shlex.split(item.strip()))
+                commands.append(_split_verify_command(item.strip()))
                 continue
             if not isinstance(item, dict):
                 raise ValueError(f"requiredOnMerge[{index}] must be string or object")
@@ -886,18 +934,26 @@ class IntegrationTransaction:
             if isinstance(raw, list) and raw and all(isinstance(x, str) and x for x in raw):
                 commands.append([str(x) for x in raw])
             elif isinstance(raw, str) and raw.strip():
-                commands.append(shlex.split(raw.strip()))
+                commands.append(_split_verify_command(raw.strip()))
             else:
                 raise ValueError(f"requiredOnMerge[{index}].command missing")
         return commands
 
-    def verify(self, commands: Sequence[Sequence[str]] | None = None) -> dict[str, Any]:
+    def verify(
+        self,
+        commands: Sequence[Sequence[str]] | None = None,
+        *,
+        timeout_seconds: float = DEFAULT_VERIFY_TIMEOUT_SECONDS,
+    ) -> dict[str, Any]:
         commands = list(commands or [])
         # Wave-2 H-9: append profile mergeVerification.requiredOnMerge commands.
         try:
             commands.extend(self._required_on_merge_commands())
         except Exception as exc:  # noqa: BLE001 — surface as verify plan error
             raise VerifyPlanMissingError(f"mergeVerification load failed: {exc}") from exc
+        commands = _dedupe_verify_commands(commands)
+        if timeout_seconds <= 0:
+            raise VerifyPlanMissingError("verification timeout must be greater than zero")
 
         def action(journal: dict[str, Any]) -> None:
             if not commands or any(
@@ -910,21 +966,67 @@ class IntegrationTransaction:
             intg_root = Path(journal["integrationRoot"]).resolve()
             results: list[dict[str, Any]] = []
             for command in commands:
+                executable_command = _normalize_verify_command(command)
                 started = dt.datetime.now().astimezone()
-                proc = subprocess.run(
-                    list(command),
-                    cwd=str(intg_root),
-                    capture_output=True,
-                    text=True,
-                    encoding="utf-8",
-                    errors="replace",
-                    check=False,
-                )
+                try:
+                    proc = subprocess.run(
+                        executable_command,
+                        cwd=str(intg_root),
+                        capture_output=True,
+                        text=True,
+                        encoding="utf-8",
+                        errors="replace",
+                        check=False,
+                        timeout=timeout_seconds,
+                    )
+                except subprocess.TimeoutExpired:
+                    finished = dt.datetime.now().astimezone()
+                    results.append(
+                        {
+                            "command": list(command),
+                            "resolvedCommand": executable_command,
+                            "exitCode": None,
+                            "timedOut": True,
+                            "timeoutSeconds": timeout_seconds,
+                            "startedAt": started.isoformat(timespec="milliseconds"),
+                            "finishedAt": finished.isoformat(timespec="milliseconds"),
+                            "durationMs": int(
+                                (finished - started).total_seconds() * 1000
+                            ),
+                        }
+                    )
+                    journal["verifyResults"] = results
+                    self._save(journal)
+                    raise VerificationFailedError(
+                        f"command timed out after {timeout_seconds}s: {' '.join(command)}"
+                    )
+                except FileNotFoundError as exc:
+                    finished = dt.datetime.now().astimezone()
+                    results.append(
+                        {
+                            "command": list(command),
+                            "resolvedCommand": executable_command,
+                            "exitCode": None,
+                            "error": str(exc),
+                            "startedAt": started.isoformat(timespec="milliseconds"),
+                            "finishedAt": finished.isoformat(timespec="milliseconds"),
+                            "durationMs": int(
+                                (finished - started).total_seconds() * 1000
+                            ),
+                        }
+                    )
+                    journal["verifyResults"] = results
+                    self._save(journal)
+                    raise VerifyPlanMissingError(
+                        f"verification executable not found: {executable_command[0]}"
+                    ) from exc
                 finished = dt.datetime.now().astimezone()
                 results.append(
                     {
                         "command": list(command),
+                        "resolvedCommand": executable_command,
                         "exitCode": proc.returncode,
+                        "timedOut": False,
                         "startedAt": started.isoformat(timespec="milliseconds"),
                         "finishedAt": finished.isoformat(timespec="milliseconds"),
                         "durationMs": int(
@@ -1449,11 +1551,16 @@ def _parse_verify_commands(values: Sequence[str] | None) -> list[list[str]]:
     POSIX shlex semantics: single/double quotes group tokens, backslash
     escapes the next character (quote Windows paths).
     """
-    return [shlex.split(value) for value in (values or [])]
+    return [_split_verify_command(value) for value in (values or [])]
 
 
 def cmd_verify(args: argparse.Namespace) -> int:
-    return _emit(_txn_from_args(args).verify(commands=_parse_verify_commands(args.command)))
+    return _emit(
+        _txn_from_args(args).verify(
+            commands=_parse_verify_commands(args.command),
+            timeout_seconds=float(args.timeout_seconds),
+        )
+    )
 
 
 def cmd_push(args: argparse.Namespace) -> int:
@@ -1543,6 +1650,11 @@ def build_parser() -> argparse.ArgumentParser:
     p_verify.add_argument("--feature-branch", required=True)
     p_verify.add_argument("--temp-root", required=True)
     p_verify.add_argument("--command", action="append")
+    p_verify.add_argument(
+        "--timeout-seconds",
+        type=float,
+        default=DEFAULT_VERIFY_TIMEOUT_SECONDS,
+    )
     p_verify.set_defaults(func=cmd_verify)
 
     return parser

package/harness/bundles/general/cursor/scripts/harness_ledger.py

@@ -219,14 +219,30 @@ def sha256_file(path: Path) -> str:
     return digest.hexdigest()
 
 
-def compute_inputs_hash(file_paths: list[str]) -> tuple[str, list[str]]:
+def compute_inputs_hash(
+    file_paths: list[str], *, project_root: Path | str | None = None
+) -> tuple[str, list[str]]:
     """Per-file content sha256 → sort digests → hash again (order-independent)."""
+    root = (
+        Path(project_root).expanduser().resolve()
+        if project_root is not None
+        else None
+    )
     by_path: dict[str, str] = {}
     for raw in file_paths:
         path = resolve_path(raw)
         if not path.is_file():
             raise FileNotFoundError(f"file not found: {raw}")
-        by_path[path.as_posix()] = sha256_file(path)
+        if root is not None:
+            try:
+                logical_path = path.relative_to(root).as_posix()
+            except ValueError as exc:
+                raise ValueError(
+                    f"INPUT_OUTSIDE_PROJECT: {path} is outside {root}"
+                ) from exc
+        else:
+            logical_path = path.as_posix()
+        by_path[logical_path] = sha256_file(path)
 
     # Stable file list for callers; bind every resolved path to its digest.
     # Hashing only the content multiset let a path swap incorrectly reuse a
@@ -1056,6 +1072,7 @@ def decide_can_reuse(
     requested_profile_hash: str | None = None,
     requested_environment_hash: str | None = None,
     requested_db_schema_hash: str | None = None,
+    project_root: Path | str | None = None,
 ) -> dict[str, Any]:
     ledger, ledger_path = load_ledger(change_dir)
     if ledger is None:
@@ -1220,8 +1237,10 @@ def decide_can_reuse(
         }
 
     try:
-        current_hash, current_files = compute_inputs_hash(files)
-    except FileNotFoundError as exc:
+        current_hash, current_files = compute_inputs_hash(
+            files, project_root=project_root
+        )
+    except (FileNotFoundError, ValueError) as exc:
         return {
             "ok": True,
             "reuse": False,
@@ -1351,7 +1370,9 @@ def cmd_hash(args: argparse.Namespace) -> int:
         files, project_root = input_files_from_args(args)
         if not files:
             return emit_error("hash requires --files or --files-from", as_json=as_json)
-        inputs_hash, inputs_files = compute_inputs_hash(files)
+        inputs_hash, inputs_files = compute_inputs_hash(
+            files, project_root=project_root
+        )
     except (OSError, FileNotFoundError) as exc:
         return emit_error(str(exc), as_json=as_json)
 
@@ -1418,6 +1439,7 @@ def cmd_can_reuse(args: argparse.Namespace) -> int:
             requested_profile_hash=getattr(args, "profile_hash", None),
             requested_environment_hash=getattr(args, "environment_hash", None),
             requested_db_schema_hash=getattr(args, "db_schema_hash", None),
+            project_root=project_root,
         )
     except (OSError, ValueError, json.JSONDecodeError) as exc:
         return emit_error(f"can-reuse failed: {exc}", as_json=as_json)
@@ -1470,7 +1492,9 @@ def cmd_record(args: argparse.Namespace) -> int:
 
     try:
         status = normalize_status(args.status)
-        inputs_hash, inputs_files = compute_inputs_hash(files)
+        inputs_hash, inputs_files = compute_inputs_hash(
+            files, project_root=project_root
+        )
         ledger, _existing_path = load_ledger(change_dir)
         if ledger is None:
             ledger = {

package/harness/bundles/general/cursor/scripts/harness_profile.py

@@ -66,6 +66,16 @@ DEFAULT_EXCLUDED_ROOTS: tuple[str, ...] = (
     ".cache",
 )
 
+
+def profile_defaults_fingerprint() -> str:
+    """Fingerprint generated defaults so old profiles are refreshed safely."""
+    payload = {
+        "schemaVersion": SCHEMA_VERSION,
+        "excludedRoots": list(DEFAULT_EXCLUDED_ROOTS),
+    }
+    encoded = json.dumps(payload, ensure_ascii=False, sort_keys=True).encode("utf-8")
+    return f"sha256:{hashlib.sha256(encoded).hexdigest()}"
+
 # 覆盖层级（spec §3.2）：unitTest ⊂ unitTestFull；package 独立；submit 复用 unitTestFull。
 VERIFICATION_KEYS: tuple[str, ...] = (
     "compile",
@@ -330,6 +340,7 @@ def _node_commands(project: Path) -> dict[str, Any]:
 def empty_profile_skeleton(excluded: tuple[str, ...] | list[str]) -> dict[str, Any]:
     return {
         "schemaVersion": SCHEMA_VERSION,
+        "defaultsFingerprint": profile_defaults_fingerprint(),
         "detectedAt": "",
         "projectType": "unknown",
         "toolPaths": {"node": "", "mvn": ""},
@@ -596,6 +607,28 @@ def check(project: Path) -> dict[str, Any]:
     issues: list[str] = []
     stale = False
 
+    expected_defaults_fingerprint = profile_defaults_fingerprint()
+    if profile.get("defaultsFingerprint") != expected_defaults_fingerprint:
+        stale = True
+        issues.append(
+            "defaultsFingerprint is missing or outdated; run detect to refresh generated defaults"
+        )
+
+    excluded_roots = {
+        str(item).replace("\\", "/").strip("/")
+        for item in (profile.get("excludedRoots") or [])
+        if isinstance(item, str) and item.strip("/")
+    }
+    missing_excluded_roots = [
+        item for item in DEFAULT_EXCLUDED_ROOTS if item not in excluded_roots
+    ]
+    if missing_excluded_roots:
+        stale = True
+        issues.append(
+            "excludedRoots missing generated defaults: "
+            + ", ".join(missing_excluded_roots)
+        )
+
     fp = profile.get("fingerprint") or {}
     stored_pom = fp.get("pomHash") or "" if isinstance(fp, dict) else ""
     current_pom = sha256_file(project / "pom.xml") if (project / "pom.xml").is_file() else ""

package/harness/bundles/general/cursor/scripts/harness_test_guard.py

@@ -32,6 +32,24 @@ MODE = "force-track-touched"
 MANIFEST_REL = Path("evidence") / "test-tracking.json"
 SNAPSHOT_REL = Path("evidence") / "test-guard-snapshot.json"
 PROFILE_REL = Path(".harness") / "config" / "build-profile.json"
+MANDATORY_EXCLUDED_ROOTS = (
+    ".git",
+    ".harness",
+    ".worktrees",
+    ".claude/worktrees",
+    ".codex/worktrees",
+    ".cursor/worktrees",
+    ".codebuddy/worktrees",
+    ".codeium/worktrees",
+    "target",
+    "build",
+    "dist",
+    "node_modules",
+    ".gradle",
+    "__pycache__",
+    ".pytest_cache",
+    ".cache",
+)
 REASONS = ("tdd-created", "stale-test-repair", "test-updated")
 
 
@@ -213,11 +231,14 @@ def _profile_config(project: Path) -> tuple[list[str], list[str]] | None:
     if not isinstance(paths, list):
         return [], []
     excluded = profile.get("excludedRoots") if isinstance(profile, dict) else None
-    excluded_roots = (
+    configured_roots = (
         [item.replace("\\", "/").strip("/") for item in excluded if isinstance(item, str) and item]
         if isinstance(excluded, list)
         else []
     )
+    excluded_roots = list(
+        dict.fromkeys([*configured_roots, *MANDATORY_EXCLUDED_ROOTS])
+    )
     patterns = [
         item.replace("\\", "/") for item in paths if isinstance(item, str) and item
     ]
@@ -254,11 +275,8 @@ def _allowed_test_path(project: Path, rel: str) -> bool:
     if config is None:
         return _standard_test_path(rel)
     patterns, excluded_roots = config
-    rel_parts = tuple(os.path.normcase(part) for part in rel.split("/"))
-    for excluded in excluded_roots:
-        excluded_parts = tuple(os.path.normcase(part) for part in excluded.split("/"))
-        if rel_parts[: len(excluded_parts)] == excluded_parts:
-            return False
+    if _path_is_excluded(rel, excluded_roots):
+        return False
     return any(_matches_pattern(rel, pattern) for pattern in patterns)
 
 
@@ -820,8 +838,12 @@ def _path_is_excluded(rel: str, excluded_roots: list[str]) -> bool:
         excluded_parts = tuple(
             os.path.normcase(part) for part in excluded.split("/") if part
         )
-        if excluded_parts and rel_parts[: len(excluded_parts)] == excluded_parts:
-            return True
+        if not excluded_parts:
+            continue
+        width = len(excluded_parts)
+        for index in range(len(rel_parts) - width + 1):
+            if rel_parts[index : index + width] == excluded_parts:
+                return True
     return False
 
 

package/harness/bundles/java/claude-code/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "java",
   "agent": "claude-code",
-  "coreHash": "a9c096220b88ca56"
+  "coreHash": "506c7d9df54c0f80"
 }

package/harness/bundles/java/claude-code/harness-apidoc/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a9c096220b88ca56; overlay=java; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=506c7d9df54c0f80; overlay=java; agent=claude-code; do not edit -->
 # harness-apidoc — 前端接口文档（Java overlay）
 
 ## Purpose

package/harness/bundles/java/claude-code/harness-archive/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a9c096220b88ca56; overlay=java; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=506c7d9df54c0f80; overlay=java; agent=claude-code; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose
@@ -56,6 +56,11 @@ disallowed-tools:
   - `evidence/verification-ledger.json`
   - 至少一个 test 或 review 报告/证据
   - 缺失任一项 → `archivable=false`；可从 `.harness/cache/change-snapshots/<change>/` 恢复正式层后再重试
+- **产品候选验证**：
+  - 有远端 CI：保留 `product-candidate-ci.json` 兼容证据；归档会把有效的 legacy schema v1 证据迁移为 `remote-claimed` 的 schema v2 `product-candidate-verification.json`，不会冒充 `remote-attested`。
+  - `remote-attested` 必须同时带远端运行 URL 与 `verification.attestationDigest`；只有 URL、旧 JSON 哈希或 ledger 哈希只能达到 `remote-claimed`。
+  - 无 CI：先运行 `harness_archive.py certify-local --change-dir ... --project . --json`，只复用身份一致且完整的 `unitTestFull` ledger 证据，不重复执行测试。
+  - `release-candidate` 默认要求候选验证通过；仅封存未完成事实时显式使用 `--intent record-only`，归档结果必须为 `releaseEligible=false`，不得用于发布。
 
 ## Inputs
 
@@ -109,9 +114,9 @@ blocking user confirmation 让用户确认归档操作。**用户拒绝 → 终
 
 ### Phase 3：执行归档
 
-1. 运行 `python <skills-root>/scripts/harness_archive.py status --change-dir ".harness/changes/<change-name>" --json` 前置检查。
+1. 运行 `python <skills-root>/scripts/harness_archive.py status --change-dir ".harness/changes/<change-name>" --intent release-candidate --json` 前置检查。无 CI 项目若已有完整全量 ledger，先运行 `certify-local`；若用户明确只封存事实，则 status/finalize 均使用 `--intent record-only`。
 2. `meta/archive-meta.md` **由 `harness_archive.py finalize` 自动生成**（与 summary-data `finalStatus` 同源）；**禁止 agent 手写**该文件，手写视为数据丢失。维护者结论写入 events（decision/issue）即可，finalize 会汇总到 summary / archive-meta。
-3. 运行 `python <skills-root>/scripts/harness_archive.py finalize --change-dir ".harness/changes/<change-name>" --archive-root ".harness/archive" --json`；读 JSON（cleanup、事件、移动、collect、render、validate、manifest 比对、archive-meta）。finalize 内部负责且仅负责一次 `phase.start` / `phase.end`，调用者不得重复追加。**finalize 不再同步执行知识维护**（§8.2）：它写一个 `pending` maintenance-outbox 项即返回，`knowledgeMaintenance=QUEUED`；写 outbox 失败时 `NOT_QUEUED`（warning，不回滚 archive，总状态 CONDITIONAL）。后续由 `harness-sync` / `harness_knowledge.py maintain` 异步推进 outbox。**finalize 失败或 validate 报错时不删除原目录**。
+3. 运行 `python <skills-root>/scripts/harness_archive.py finalize --change-dir ".harness/changes/<change-name>" --archive-root ".harness/archive" --intent <release-candidate|record-only> --json`；读 JSON（cleanup、事件、移动、collect、render、validate、manifest 比对、archive-meta）。finalize 内部负责且仅负责一次 `phase.start` / `phase.end`，调用者不得重复追加。**finalize 不再同步执行知识维护**（§8.2）：它写一个 `pending` maintenance-outbox 项即返回，`knowledgeMaintenance=QUEUED`；写 outbox 失败时 `NOT_QUEUED`（warning，不回滚 archive，总状态 CONDITIONAL）。后续由 `harness-sync` / `harness_knowledge.py maintain` 异步推进 outbox。**finalize 失败或 validate 报错时不删除原目录**。
 
 - **Read `reference.md`** — finalize 输出字段、archive-meta 格式、CONDITIONAL_OK 规则
 - **Read `templates/summary-data-template.json`** — summary-data 数据结构
@@ -187,6 +192,10 @@ finalize 内部负责且仅负责一次 `phase.start` / `phase.end`，并在移
 
 git 命令通过 `powershell.exe -Command "..."` 执行；archive-meta.md 和 final-summary.html 不得含明文 token/密码/密钥；归档报告必须区分 ✅真实成功 / 🟡跳过·静态验证 / ❌失败。
 
+### 十三、归档完整性与发布资格分离
+
+`archiveIntegrity` 表示归档内容是否完整；`candidateVerification` 表示候选验证证据及保证级别；`releaseEligible` 只有两者均满足发布策略时才为 true。`record-only` 允许保留证据不足的历史事实，但绝不等价于 CI 绿灯或可发布。
+
 ## Output Format
 
 > 归档元数据格式见 `reference.md` 的 archive-meta 模板；最终报告由 `templates/summary-data-template.json` 数据结构 + `templates/render-summary.mjs` 固定脚本渲染。

package/harness/bundles/java/claude-code/harness-archive/checklist.md

@@ -14,6 +14,20 @@ description: harness-archive 的归档前检查项和归档后验证项。仅在
 - before/after checksum 不一致时，不得删除原目录。
 - 默认渲染器 `templates/render-summary.mjs`（finalize 内嵌调用）。
 
+### Wave-A 状态机与身份（IA-1 / IA-4）
+
+硬顺序：feature frozen → local gates → product candidate CI → **CI green** → merge → authoritative CI → archive product candidate → archive-only governance → release。
+
+- [ ] `evidence/product-candidate-ci.json`（或等价 ledger 字段）`conclusion=success`，含 `runUrl` + `commit`；否则 `PRODUCT_CI_NOT_GREEN` 阻断
+- [ ] summary/identity 含 `productCommit` / `productTreeHash` / `archiveCommit`；`productTreeHash` 排除 `.harness/**`
+- [ ] 产品输入在 archive 后变化 → `ARCHIVE_EVIDENCE_REOPEN_REQUIRED`，旧 archive 不可作发布证据
+- [ ] Manifest：coverage 字节在最终 snapshot 后不得静默漂移；后写报告必须 `exclusionReasons`，禁止假绿 `checksumStatus=OK`
+
+### Environment 合同（IA-3）
+
+- [ ] 使用可写环境栈前：`harness_environment.py fingerprint` → `acquire` lease → run → `release`
+- [ ] 租约落在主仓 `.harness/runtime/env-leases/`；跨 change 默认不得共享可写 volume
+
 ## 归档前检查（Phase 1）
 
 > ⚠️ **单一所有权**：finalize 内部负责且仅负责一次 `phase.start` / `phase.end`。归档前检查不得自行追加 archive 阶段边界。

package/harness/bundles/java/claude-code/harness-archive/templates/render-summary.mjs

@@ -42,6 +42,16 @@ const duration = (minutes) => {
   if (value < 60) return `${Math.round(value * 10) / 10} 分钟`;
   return `${Math.floor(value / 60)} 小时 ${Math.round(value % 60)} 分钟`;
 };
+const durationMs = (ms) => {
+  const value = number(ms);
+  if (value <= 0) return "0 秒";
+  if (value < 1000) return `${value}ms`;
+  const seconds = value / 1000;
+  if (seconds < 60) return `${Math.round(seconds * 10) / 10} 秒`;
+  const minutes = seconds / 60;
+  if (minutes < 60) return `${Math.round(minutes * 10) / 10} 分钟`;
+  return `${Math.floor(minutes / 60)} 小时 ${Math.round(minutes % 60)} 分钟`;
+};
 
 const stages = Object.entries(record(data.stageStatus));
 const verification = record(data.verification);
@@ -49,6 +59,17 @@ const unit = record(verification.unitTests);
 const api = record(verification.apiTests);
 const durations = record(data.durations);
 const durationStages = list(durations.stages);
+const timing = record(data.timing);
+const wallLabel = timing.workflowWallClockMs != null
+  ? durationMs(timing.workflowWallClockMs)
+  : (durations.totalLabel || duration(durations.totalMinutes));
+const timingColumnsHtml = `
+<article class="card" id="timingColumns"><h2>时长（三列）</h2>
+<div class="row"><div><strong>活动执行</strong><small>stageActiveExecution</small></div><span>${esc(durationMs(timing.stageActiveExecutionMs))}</span></div>
+<div class="row"><div><strong>阶段墙钟</strong><small>stageWallClockSpan</small></div><span>${esc(durationMs(timing.stageWallClockSpanMs))}</span></div>
+<div class="row"><div><strong>全流程墙钟</strong><small>workflowWallClock</small></div><span>${esc(durationMs(timing.workflowWallClockMs))}</span></div>
+<p><small>reportCutoffAt=<code id="reportCutoffAt">${esc(timing.reportCutoffAt || "N/A")}</code> · durations.totalMinutes 仅为活动执行，不冒充墙钟</small></p>
+</article>`;
 const maxMinutes = Math.max(1, ...durationStages.map((item) => number(item.minutes)));
 const diff = record(data.diffStat);
 const risks = list(data.knownRisks);
@@ -86,12 +107,12 @@ const html = `<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><met
 @media(max-width:800px){.metrics{grid-template-columns:1fr 1fr}.grid,.risk{grid-template-columns:1fr}}@media(max-width:480px){main{width:calc(100% - 18px);margin-top:9px}.metrics{grid-template-columns:1fr}.hero{padding:19px}h1{font-size:23px}dl{grid-template-columns:1fr}}
 </style></head><body><main>
 <section class="hero"><div class="eyebrow">HARNESS EXECUTION REPORT</div><h1>${esc(data.changeName || "未命名变更")}</h1><p class="goal">${esc(data.businessGoal || "未记录业务目标")}</p><div class="status">${pill(data.finalStatus)}<span>基于事件、验证账本与 Git 证据生成${data.riskTier ? ` · riskTier=${esc(data.riskTier)}` : ""}</span></div>${reasonHtml ? `<div class="status">${reasonHtml}</div>` : ""}</section>
-<section class="metrics"><article class="metric"><small>任务提交</small><strong><code title="${esc(data.finalCommit)}">${esc(shortHash(data.finalCommit))}</code></strong><small>${esc(data.finalCommitBranch || "未记录分支")}</small></article><article class="metric"><small>代码范围</small><strong>${number(diff.filesChanged)} 个文件</strong><small><span class="plus">+${number(diff.insertions)}</span> · <span class="minus">-${number(diff.deletions)}</span></small></article><article class="metric"><small>总耗时</small><strong>${esc(durations.totalLabel || duration(durations.totalMinutes))}</strong><small>${durationStages.length} 个阶段</small></article><article class="metric"><small>归档完整性</small><strong>${esc(record(data.archiveManifest).checksumStatus || "UNKNOWN")}</strong><small>${number(record(data.archiveManifest).totalArchiveFiles)} 个归档文件</small></article></section>
-<section class="grid"><div><article class="card"><h2>验证结论</h2>${verificationHtml}</article><article class="card"><h2>阶段耗时</h2>${durationHtml}</article></div><div><article class="card"><h2>阶段状态</h2>${stageHtml}</article><article class="card"><h2>风险与后续</h2><div class="risk"><div><h3>已知风险</h3><ul>${riskHtml}</ul></div><div><h3>人工动作</h3><ul>${actionHtml}</ul></div></div></article></div></section>
+<section class="metrics"><article class="metric"><small>产品提交</small><strong><code title="${esc(data.productCommit || data.finalCommit)}">${esc(shortHash(data.productCommit || data.finalCommit))}</code></strong><small>archive=${esc(shortHash(data.archiveCommit || data.finalCommit))}</small></article><article class="metric"><small>代码范围</small><strong>${number(diff.filesChanged)} 个文件</strong><small><span class="plus">+${number(diff.insertions)}</span> · <span class="minus">-${number(diff.deletions)}</span></small></article><article class="metric"><small>全流程墙钟</small><strong>${esc(wallLabel)}</strong><small>活动=${esc(durationMs(timing.stageActiveExecutionMs))} · ${durationStages.length} 阶段</small></article><article class="metric"><small>归档完整性</small><strong>${esc(record(data.archiveManifest).checksumStatus || "UNKNOWN")}</strong><small>${number(record(data.archiveManifest).totalArchiveFiles)} 个归档文件</small></article></section>
+<section class="grid"><div><article class="card"><h2>验证结论</h2>${verificationHtml}</article><article class="card"><h2>阶段耗时（活动）</h2>${durationHtml}</article>${timingColumnsHtml}</div><div><article class="card"><h2>阶段状态</h2>${stageHtml}</article><article class="card"><h2>风险与后续</h2><div class="risk"><div><h3>已知风险</h3><ul>${riskHtml}</ul></div><div><h3>人工动作</h3><ul>${actionHtml}</ul></div></div></article></div></section>
 <details><summary>变更文件（${files.length}）</summary><div><table><thead><tr><th>文件</th><th>新增</th><th>删除</th></tr></thead><tbody>${fileRows}</tbody></table></div></details>
 <details><summary>执行时间线与工具交接（${timeline.length}）</summary><div><table><thead><tr><th>阶段</th><th>尝试</th><th>状态</th><th>来源 / 摘要</th></tr></thead><tbody>${timelineRows}</tbody></table></div></details>
 <details><summary>命令证据（${commands.length}）</summary><div><table><thead><tr><th>阶段</th><th>命令</th><th>结果</th></tr></thead><tbody>${commandRows}</tbody></table></div></details>
-<details><summary>技术元数据</summary><div><dl><dt>完整提交</dt><dd><code>${esc(data.finalCommit || "N/A")}</code></dd><dt>基线提交</dt><dd><code>${esc(data.baseCommit || "N/A")}</code></dd><dt>Git 范围</dt><dd><code>${esc(diff.range || "N/A")}</code></dd><dt>报告数据版本</dt><dd>${esc(data.schemaVersion || "N/A")}</dd><dt>事实来源</dt><dd>${esc(list(record(data.reportPipeline).sources).join(" · ") || "N/A")}</dd></dl></div></details>
+<details><summary>技术元数据</summary><div><dl><dt>产品提交</dt><dd><code>${esc(data.productCommit || data.finalCommit || "N/A")}</code></dd><dt>产品树哈希</dt><dd><code>${esc(data.productTreeHash || "N/A")}</code></dd><dt>归档提交</dt><dd><code>${esc(data.archiveCommit || data.finalCommit || "N/A")}</code></dd><dt>基线提交</dt><dd><code>${esc(data.baseCommit || "N/A")}</code></dd><dt>Git 范围</dt><dd><code>${esc(diff.range || "N/A")}</code></dd><dt>报告数据版本</dt><dd>${esc(data.schemaVersion || "N/A")}</dd><dt>事实来源</dt><dd>${esc(list(record(data.reportPipeline).sources).join(" · ") || "N/A")}</dd></dl></div></details>
 </main></body></html>`;
 
 fs.mkdirSync(path.dirname(outPath), { recursive: true });

package/harness/bundles/java/claude-code/harness-archive/templates/summary-data-template.json

@@ -3,6 +3,17 @@
   "changeName": "<change-name>",
   "businessGoal": "本次变更为了做什么",
   "finalStatus": "OK | WARN | CONDITIONAL_OK | FAIL",
+  "archiveIntent": "release-candidate | record-only",
+  "archiveIntegrity": {
+    "ok": true
+  },
+  "candidateVerification": {
+    "ok": false,
+    "code": "PRODUCT_CANDIDATE_VERIFIED | PRODUCT_CANDIDATE_NOT_VERIFIED | PRODUCT_CI_GREEN | PRODUCT_CI_NOT_GREEN",
+    "assurance": "local-reproducible | remote-claimed | remote-attested",
+    "message": ""
+  },
+  "releaseEligible": false,
   "finalCommit": "<commit-hash>",
   "finalCommitBranch": "<origin/branch>",
   "baseCommit": "<base-commit-hash>",

package/harness/bundles/java/claude-code/harness-codebase-map/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a9c096220b88ca56; overlay=java; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=506c7d9df54c0f80; overlay=java; agent=claude-code; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/java/claude-code/harness-knowledge-ingest/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a9c096220b88ca56; overlay=java; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=506c7d9df54c0f80; overlay=java; agent=claude-code; do not edit -->
 # harness-knowledge-ingest
 
 从 `.harness/archive/**/reports/final/summary-data.json` 抽取项目知识，生成并维护本地 `.harness/knowledge/` 索引。

package/harness/bundles/java/claude-code/harness-knowledge-query/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a9c096220b88ca56; overlay=java; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=506c7d9df54c0f80; overlay=java; agent=claude-code; do not edit -->
 # harness-knowledge-query
 
 并行 change 中查询必须传 `--change <change-id>`；成功后以该 change 的 `meta/knowledge-context.json` 为稳定指针。全局 `context-packs/latest.json` 仅向后兼容，不得用于判断多个 active change 的上下文归属。

package/harness/bundles/java/claude-code/harness-package/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a9c096220b88ca56; overlay=java; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=506c7d9df54c0f80; overlay=java; agent=claude-code; do not edit -->
 # harness-package — 增量模块打包（Java overlay）
 
 ## Purpose

package/harness/bundles/java/claude-code/harness-plan/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=a9c096220b88ca56; overlay=java; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=506c7d9df54c0f80; overlay=java; agent=claude-code; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose
@@ -109,6 +109,7 @@ change-name 范围变更 → 提示重命名或记 🟡WARN（→ `reference.md`
 | 歧义优先检查 | 否定、对比、动作对象或范围存在多种合理解释时，最小取证后先给推荐理解并一次一问；确认前不深挖错误方向 |
 | 简单修复探索预算 | 预计不超过 2 个代码文件、且不涉及认证/安全/迁移/并发/API 契约重设时，最多 1 次合并 CodeGraph 查询 + 1 次定向补查、1 个用户澄清问题；无关发现只记非阻断说明 |
 | 精简产物 | 简单修复只保留实现所需的设计、任务、边界和测试；禁止在 spec/plan/detail/scenarios 中重复同一背景和结论 |
+| 测试执行成本 | 场景表必须设计快速反馈层级、预计时长、资源预算、超时和可复用证据；默认先跑受影响测试，再跑模块门禁，候选验证只复用身份一致的全量证据 |
 | state snapshot | 读取 `state-snapshot.json`（`harness_state.py` / state-layout-protocol §state-snapshot.json）了解 project/worktree root、HEAD/base、profile/rules/map/knowledge 指纹；失效由脚本刷新，**不得仅凭缓存跳过代码探索或验证门禁**（design §3.6） |
 | 协议 | sensitive-info / evidence-based-reporting / state-layout |