@hunter-harness/workflow-harness 0.2.23 → 0.2.24

package/harness/bundles/java/codex/harness-sync/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-sync
 description: 检查并更新项目AI元数据（CodeGraph索引、harness-codebase-map分析、CLAUDE.md、AGENTS.md、.harness/完整性），确保Claude对代码库的理解与最新代码一致。当用户说'同步/更新索引/刷新元数据/检查一致性'时使用
 ---
-<!-- generated by harness_deploy.py; core=e0c5a35313913ae5; overlay=java; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=ba489b1737d25aef; overlay=java; agent=codex; do not edit -->
 # harness-sync — 元数据同步
 
 ## Purpose

package/harness/bundles/java/codex/harness-test/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-test
 description: 测试执行：读取场景表，执行单元测试+API接口测试+数据兼容验证，输出测试报告。当用户说'跑测试/验证/跑用例/接口测试/单元测试'时使用
 ---
-<!-- generated by harness_deploy.py; core=e0c5a35313913ae5; overlay=java; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=ba489b1737d25aef; overlay=java; agent=codex; do not edit -->
 # harness-test — 测试执行
 
 ## Purpose

package/harness/bundles/java/codex/scripts/harness_deploy.py

@@ -16,6 +16,7 @@ import re
 import shutil
 import subprocess
 import sys
+import time
 import uuid
 from pathlib import Path
 from typing import Any, Iterable
@@ -38,6 +39,7 @@ HEADING_RE = re.compile(r"^(#{2,6})\s+(.+?)\s*$")
 FRAGMENT_HINT_RE = re.compile(r"^>\s*片段：\[\[shared/[^\]]+\]\]\s*.*$")
 
 BUILD_MARKER = ".harness-build.json"
+_REPLACE_RETRY_DELAYS_SECONDS = (0.05, 0.1, 0.2, 0.4, 0.8)
 # Install-side managed manifests record which files a prior install owned, so a
 # later conservative install can delete removed managed files while preserving
 # user-owned files (design §3.8 要点4). Skills manifest lives in the skills
@@ -76,6 +78,23 @@ def now_iso() -> str:
     return dt.datetime.now().astimezone().isoformat(timespec="seconds")
 
 
+def replace_with_retry(source: Path, target: Path) -> None:
+    """Bounded retry for transient directory locks during atomic swaps.
+
+    Windows indexers and antivirus scanners may briefly hold a newly generated
+    bundle directory. Retrying only ``PermissionError`` keeps real path and
+    contract failures fail-fast while avoiding an expensive full bundle rerun.
+    """
+    for attempt in range(len(_REPLACE_RETRY_DELAYS_SECONDS) + 1):
+        try:
+            os.replace(source, target)
+            return
+        except PermissionError:
+            if attempt >= len(_REPLACE_RETRY_DELAYS_SECONDS):
+                raise
+            time.sleep(_REPLACE_RETRY_DELAYS_SECONDS[attempt])
+
+
 def emit_json(payload: dict[str, Any], *, ok: bool = True) -> int:
     print(json.dumps(payload, ensure_ascii=False, indent=2))
     return 0 if ok else 1
@@ -596,15 +615,15 @@ def cmd_build(
     if out_dir.exists():
         if (out_dir / BUILD_MARKER).is_file():
             old_backup = out_dir.parent / f".{out_dir.name}.old-{uuid.uuid4().hex[:8]}"
-            os.replace(out_dir, old_backup)
+            replace_with_retry(out_dir, old_backup)
         else:
             shutil.rmtree(staging, ignore_errors=True)
             raise ValueError(f"refusing to overwrite unmarked out_dir: {out_dir}")
     try:
-        os.replace(staging, out_dir)
+        replace_with_retry(staging, out_dir)
     except OSError:
         if old_backup is not None and old_backup.exists():
-            os.replace(old_backup, out_dir)
+            replace_with_retry(old_backup, out_dir)
         raise
     if old_backup is not None:
         shutil.rmtree(old_backup, ignore_errors=True)

package/harness/bundles/java/codex/scripts/harness_preflight.py

@@ -374,12 +374,14 @@ def _resolve_agents_root(skills_root: Path, agents_root: Path | None) -> tuple[P
     return (skills_root / "agents").resolve(), None
 
 
-def _read_host_capabilities(skills_root: Path) -> set[str]:
+def _read_host_capabilities(skills_root: Path) -> tuple[set[str], bool]:
     """Read agent capabilities declared by the host adapter (retro §5.3).
 
     Adapter installs may declare available agent roles in
     `meta/runtime.json` under `agentCapabilities` (list of role names).
-    Returns an empty set if the file or field is absent.
+    Returns ``(capabilities, manifest_present)``. ``manifest_present`` is true
+    only when a readable capability list exists; an unrelated runtime.json
+    must not turn an unknown host into a hard "agent missing" failure.
     """
     # runtime.json lives in the change's meta/ dir, but agent capabilities are
     # project-level. Check the adapter's runtime.json at the project root.
@@ -398,8 +400,8 @@ def _read_host_capabilities(skills_root: Path) -> set[str]:
             continue
         caps = data.get("agentCapabilities")
         if isinstance(caps, list):
-            return {str(c) for c in caps if isinstance(c, str)}
-    return set()
+            return {str(c) for c in caps if isinstance(c, str)}, True
+    return set(), False
 
 
 def cmd_check_agents(
@@ -420,7 +422,7 @@ def cmd_check_agents(
         }
 
     resolved_agents_root, _ = _resolve_agents_root(skills_root, agents_root)
-    host_capabilities = _read_host_capabilities(skills_root)
+    host_capabilities, capability_manifest_present = _read_host_capabilities(skills_root)
     host_callable = agent_name in host_capabilities
 
     # Three independent fields (retro §5.3):
@@ -437,32 +439,37 @@ def cmd_check_agents(
         agent_path = resolved_agents_root / filename
         definition_present = agent_path.is_file()
 
-    # If no local definition and host doesn't declare the role, we can't
-    # determine usability. Distinguish "host says no" from "unknown".
+    # Codex/Cursor bundles intentionally do not install fixed harness-* agent
+    # definitions. Missing host capabilities therefore select the normal
+    # inline path instead of reporting UNKNOWN/"subagent unavailable".
     if not definition_present and not host_callable:
-        # Check if this adapter is known to not support custom agents
         adapter_name = skills_root.parent.name
         if adapter_name in (".agents", ".cursor"):
-            # Codex/Cursor: may support via host manifest. If runtime.json
-            # has agentCapabilities but this role isn't listed, it's a
-            # genuine "not available". If no agentCapabilities field at all,
-            # we can't know — return UNKNOWN.
-            runtime_path = skills_root.parent / "runtime.json"
-            if not runtime_path.is_file():
-                return {
-                    "ok": True,
-                    "action": "check-agents",
-                    "agent": agent_name,
-                    "usable": False,
-                    "definitionPresent": False,
-                    "hostCallable": False,
-                    "toolContractValid": False,
-                    "reasonCode": "UNKNOWN",
-                    "reason": (
-                        "no local agent definition and no host capability manifest; "
-                        "cannot determine agent availability"
-                    ),
-                }
+            reason_code = (
+                "HOST_CAPABILITY_NOT_DECLARED"
+                if capability_manifest_present
+                else "INLINE_BY_ADAPTER"
+            )
+            return {
+                "ok": True,
+                "action": "check-agents",
+                "agent": agent_name,
+                "usable": False,
+                "executionMode": "inline",
+                "fallbackPolicy": "inline-no-retry",
+                "definitionPresent": False,
+                "hostCallable": False,
+                "toolContractValid": False,
+                "capabilityManifestPresent": capability_manifest_present,
+                "reasonCode": reason_code,
+                "reason": (
+                    "host capability manifest does not declare this fixed agent; "
+                    "use the normal inline path"
+                    if capability_manifest_present
+                    else "adapter uses inline execution unless the host explicitly "
+                    "declares a callable agent capability"
+                ),
+            }
         return {
             "ok": False,
             "action": "check-agents",
@@ -470,9 +477,12 @@ def cmd_check_agents(
             "path": str(agent_path) if agent_path else None,
             "agentsRoot": str(resolved_agents_root) if resolved_agents_root else None,
             "usable": False,
+            "executionMode": "unavailable",
+            "fallbackPolicy": "inline-no-retry",
             "definitionPresent": False,
             "hostCallable": False,
             "toolContractValid": False,
+            "capabilityManifestPresent": capability_manifest_present,
             "reasonCode": "AGENT_DEFINITION_NOT_FOUND",
             "reason": f"agent file not found and host does not declare role: {agent_name}",
         }
@@ -488,9 +498,13 @@ def cmd_check_agents(
                 "agent": agent_name,
                 "path": str(agent_path),
                 "usable": False,
+                "executionMode": "unavailable",
+                "fallbackPolicy": "inline-no-retry",
                 "definitionPresent": True,
                 "hostCallable": host_callable,
                 "toolContractValid": False,
+                "capabilityManifestPresent": capability_manifest_present,
+                "reasonCode": "AGENT_DEFINITION_UNREADABLE",
                 "reason": f"cannot read agent file: {exc}",
             }
 
@@ -502,9 +516,13 @@ def cmd_check_agents(
                 "agent": agent_name,
                 "path": str(agent_path),
                 "usable": False,
+                "executionMode": "unavailable",
+                "fallbackPolicy": "inline-no-retry",
                 "definitionPresent": True,
                 "hostCallable": host_callable,
                 "toolContractValid": False,
+                "capabilityManifestPresent": capability_manifest_present,
+                "reasonCode": "AGENT_DEFINITION_INVALID",
                 "reason": f"frontmatter parse failed: {err or 'unknown'}",
             }
 
@@ -525,7 +543,7 @@ def cmd_check_agents(
     name_field = meta.get("name") if meta else None
     tools_field = meta.get("tools") if meta else None
 
-    reason_code = "READY" if usable else "AGENT_DEFINITION_NOT_FOUND"
+    reason_code = "READY" if usable else "TOOL_CONTRACT_INVALID"
     if not definition_present and host_callable:
         reason_code = "DEFINITION_NOT_FOUND_HOST_CAPABLE"
 
@@ -536,9 +554,12 @@ def cmd_check_agents(
         "path": str(agent_path) if agent_path else None,
         "agentsRoot": str(resolved_agents_root) if resolved_agents_root else None,
         "usable": usable,
+        "executionMode": "delegated" if usable else "unavailable",
+        "fallbackPolicy": "inline-no-retry",
         "definitionPresent": definition_present,
         "hostCallable": host_callable,
         "toolContractValid": tool_contract_valid,
+        "capabilityManifestPresent": capability_manifest_present,
         "reasonCode": reason_code,
         "reason": (
             "agent available; "

package/harness/bundles/java/cursor/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "java",
   "agent": "cursor",
-  "coreHash": "11372e65612127c2"
+  "coreHash": "d50ff0ad2421c0cb"
 }

package/harness/bundles/java/cursor/README.md

@@ -260,7 +260,7 @@ harness-skills/
 | 阶段 | 强制检查 |
 |------|---------|
 | **plan 阶段 0** | 检查工作区是否有未提交业务代码变更，已有则询问用户处理方式（继续/暂存/回滚/取消），不得假装"编码前规划" |
-| **plan 阶段 3** | 委派前 `python <skills-root>/scripts/harness_preflight.py check-agents --skills-root <skills-root> --agent harness-explorer --json`；`usable=false` 或无效返回 → 主会话只读探索，不 retry |
+| **plan 阶段 3** | 默认主会话 CodeGraph/Read inline 探索；仅高复杂度且准备委派固定 agent 时单次预检，失败或无效返回立即 inline，不 retry |
 | **plan 阶段 4/6** | 原生规划协议必须记录风险/复用/替代方案/推荐方案/关键决策，以及任务拆分摘要 |
 | **plan 阶段 5** | 设计文档自审结果必须展示给用户；测试场景表未覆盖维度必须标记为 ⚠️ 缺口，不得全部 ✅ |
 | **run 步骤 0** | 任何代码修改前必须先向 `events.ndjson` 追加 `phase.start`；执行日志由阶段结束事件自动渲染 |
@@ -401,7 +401,7 @@ powershell.exe -Command "Copy-Item -Path 'harness-skills/harness-*' -Destination
 powershell.exe -Command "Copy-Item -Path 'harness-skills/harness-test' -Destination '<目标项目>/.claude/skills/' -Recurse -Force"
 ```
 
-同时复制 agents 到目标项目的 `.claude/agents/`（共 3 个：`harness-explorer` 由 harness-plan 预检后委派；`harness-evaluator` 仅 `--adversarial` 时 opt-in；`harness-reviewer` 由 harness-review 预检后委派）：
+Claude Code/CodeBuddy 可选复制 3 个隔离角色：`harness-explorer` 仅高复杂度探索、`harness-evaluator` 仅 `--adversarial`/高风险规划、`harness-reviewer` 仅发布候选/高风险审查。Codex/Cursor 默认使用主会话或宿主临时隔离任务，不安装固定角色，也不执行固定 agent 预检：
 
 ```powershell
 powershell.exe -Command "Copy-Item -Path 'harness-skills/agents/*.md' -Destination '<目标项目>/.claude/agents/' -Recurse -Force"

package/harness/bundles/java/cursor/harness-apidoc/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-apidoc
 description: 从 Java 后端代码生成结构化前端 API 文档（Controller/VO/ErrorCode）。使用场景：接口文档、前端接口文档、API 文档生成
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-apidoc — 前端接口文档（Java overlay）
 
 ## Purpose

package/harness/bundles/java/cursor/harness-archive/SKILL.md

@@ -3,7 +3,7 @@ name: harness-archive
 description: 归档所有变更产出（计划/测试报告/审查/SQL/API文档）到
   .harness/archive/，含归档元数据和可视化最终总结。使用场景：归档、完成归档、收尾、打包产出物
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/java/cursor/harness-codebase-map/SKILL.md

@@ -3,7 +3,7 @@ name: harness-codebase-map
 description: 分析现有代码库并生成 .harness/codebase/map/
   下的结构化代码库地图。用于陌生项目理解、重大改造前梳理、harness-sync 提示 map 过期后的人工刷新。
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/java/cursor/harness-knowledge-ingest/SKILL.md

@@ -3,7 +3,7 @@ name: harness-knowledge-ingest
 description: 从 .harness/archive 归档整理、同步和维护项目知识索引。适用场景：ingest knowledge、sync
   knowledge、rebuild knowledge index、promote knowledge、确认知识条目、检查知识库是否过期。
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-knowledge-ingest
 
 从 `.harness/archive/**/reports/final/summary-data.json` 抽取项目知识，生成并维护本地 `.harness/knowledge/` 索引。

package/harness/bundles/java/cursor/harness-knowledge-query/SKILL.md

@@ -3,7 +3,7 @@ name: harness-knowledge-query
 description: 根据新需求、设计任务、代码修改请求或问题排查，在规划和编码前查询 .harness/knowledge
   历史上下文。适用场景：query knowledge、查找历史需求、根据归档理解需求、继续之前类似开发、生成需求上下文包。
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-knowledge-query
 
 并行 change 中查询必须传 `--change <change-id>`；成功后以该 change 的 `meta/knowledge-context.json` 为稳定指针。全局 `context-packs/latest.json` 仅向后兼容，不得用于判断多个 active change 的上下文归属。

package/harness/bundles/java/cursor/harness-package/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-package
 description: 增量模块打包：拉取最新→编译验证→mvn package→汇总 jar/war。使用场景：打包、package、发版准备
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-package — 增量模块打包（Java overlay）
 
 ## Purpose

package/harness/bundles/java/cursor/harness-plan/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-plan
 description: 将需求转化为设计文档+实施计划+完整测试场景表，必须在编码前完成。使用场景：需求分析、feature plan、技术方案设计、实现方案规划
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose
@@ -51,11 +51,13 @@ description: 将需求转化为设计文档+实施计划+完整测试场景表
 
 内化为 `protocols.md`：`clarification-protocol`、`decision-grilling-protocol`、`implementation-planning-protocol`。不运行时调用 Superpowers/grill-me。
 
-## Subagent 委派
-
-- **阶段 3 探索**：先运行 `python <skills-root>/scripts/harness_preflight.py check-agents --skills-root <skills-root> --agent harness-explorer --json`；可用则委派，否则主会话探索且不 retry。`reasonCode=CUSTOM_AGENTS_UNSUPPORTED` 表示当前工具本身没有自定义 agent 能力，是正常的 inline 路径，控制台不得显示“harness-explorer subagent 不可用”类告警。
-- **阶段 7.5**：仅 `--adversarial`；先运行 `python <skills-root>/scripts/harness_preflight.py check-agents --skills-root <skills-root> --agent harness-evaluator --json`；可用才委派到 `reports/plan-review/`
+<!-- @section-id plan.delegate -->
+## 执行路由（宿主原生、无固定 agent 预检）
 
+- 阶段 3 默认由主会话直接使用 CodeGraph/Read 完成探索，**不运行 `check-agents --agent harness-explorer`**。
+- 只有多个独立模块、陌生大型代码库或可并行调查等高复杂度任务，且当前宿主显式提供通用隔离任务工具时，才可临时委派一次只读探索。
+- 阶段 7.5 仅 `--adversarial` 或 auth/支付/迁移/并发等高风险规划启用；可用宿主临时隔离任务，否则主会话执行同一对抗检查。
+- spawn 失败、空返回、0 tool uses、仅 "Done" 或元数据时立即 inline，`fallbackPolicy=inline-no-retry`。正常 inline 只记 `decision`，不显示 subagent 不可用告警。
 ## Workflow 概要
 
 | 阶段 | 动作 |

package/harness/bundles/java/cursor/harness-plan/checklist.md

@@ -37,21 +37,16 @@ description: harness-plan 的阶段检查清单和覆盖检查列表。仅在执
 阶段 3 执行完成后，确认以下事项：
 
 ```
-□ 是通过 Agent 工具委派 subagent 执行的（不是主会话直接调用 codegraph）
-□ subagent 返回了结构化设计概要（涉及模块、接口变更、关键决策）
-□ 委派前已运行 `python <skills-root>/scripts/harness_preflight.py check-agents --skills-root <skills-root> --agent harness-explorer --json`
-□ `usable=false` 或未返回有效输出 → 主会话探索，**不 retry 委派**
-□ 主会话未被代码探索的中间结果污染
-□ 在执行日志中记录了 Agent 调用状态：
-  - 是否成功调用
-  - 使用的 agent 名称
-  - 是否只读
-  - 子代理实际 tool uses 计数
-  - 返回的核心结论
+□ 已按复杂度选择 `executionMode=inline|delegated`；默认 inline
+□ inline 时主会话直接使用 CodeGraph/Read，并返回结构化设计概要
+□ 仅高复杂度且准备委派固定 agent 时，才运行一次 `check-agents --agent harness-explorer`
+□ 只有预检 `executionMode=delegated` 才委派；`inline` 静默继续，不显示不可用告警
+□ spawn 失败、空返回、0 tool uses、仅 "Done"/元数据 → 主会话探索，**不 retry 委派**
+□ 执行日志记录 executionMode、委派原因（如有）、只读约束和核心结论
 ```
 
-> 如果 Agent 工具不可用，或子代理被委派但未返回有效输出（0 tool uses / 空返回 / 仅 "Done"），必须显式降级并记录：
-> - 追加 `issue` 事件并在 note 写明降级原因：Agent 不可用 / 子代理未返回有效输出，改为主会话只读探索
+> 正常 inline 只记 `decision`，不是降级或故障。如果已尝试委派但未返回有效输出（0 tool uses / 空返回 / 仅 "Done"），必须：
+> - 追加一次 `issue` 事件并在 note 写明：子代理未返回有效输出，改为主会话只读探索
 > - 主会话直接使用 codegraph MCP 工具（`mcp__codegraph__codegraph_explore`）和 Read 探索代码（只读，不执行写操作）
 > - 不得在主会话中执行任何写操作
 > - CodeGraph 如通过 MCP 调用，必须优先用 MCP 工具，不允许通过普通 Bash 调 codegraph 命令
@@ -156,10 +151,10 @@ source: harness-plan
 ```
 □ 已用 **设计审批包** 一次 blocking user confirmation（设计 + 场景表摘要 + worktree + change-name）
 □ **未**单独询问 worktree 或对抗评审（对抗评审仅 `--adversarial`）
-□ 用户同意后，已用 Agent 工具委派 harness-evaluator（haiku, context:fork, plan 模式只读, maxTurns:8）
-□ 已用 context:fork 隔离上下文（evaluator 未参与规划，破除确认偏误）
-□ 已校验子代理 tool uses > 0（0/空/Done 视为未返回有效输出，已降级为主会话自审并记录）
-□ evaluator 返回了 VERDICT(APPROVED/REVISE) + 结构化问题清单（RED/YELLOW）
+□ 已按宿主能力选择隔离 evaluator 或主会话对抗自审；正常 inline 不记故障
+□ 若委派，已使用隔离上下文且校验 tool uses > 0
+□ 若委派返回 0/空/Done/元数据，已立即 inline 自审且未 retry
+□ 已产出 VERDICT(APPROVED/REVISE) + 结构化问题清单（RED/YELLOW）
 □ 评审报告已写入 .harness/changes/<change-name>/reports/plan-review/plan-review-YYYYMMDD-HHmm.md
 □ VERDICT 和问题清单已展示给用户（不得仅记"已评审"）
 □ REVISE 时已询问用户是否修订；修订后可选再审

package/harness/bundles/java/cursor/harness-plan/reference.md

@@ -345,25 +345,13 @@ status: approved
 - 最终输出只提示产出物路径和下一步 `/harness-run`
 - `docs/superpowers/` 不得作为最终产物路径出现在输出中
 
-## C2 升级口：Codex 跨 provider 评审（可选，未实现）
+## C2 升级口：跨 provider 评审（显式、非默认）
 
-阶段 7.5 的 harness-evaluator 是同 provider（Claude）评审，基于"上下文隔离 + 档位差异"。如需真正跨 provider 对抗（高风险构建：auth/支付/数据迁移/并发），可在 evaluator 返回 REVISE 后，可选调 Codex CLI 做二次确认。
+阶段 7.5 默认只做主会话对抗自审或宿主原生隔离任务，不自动启动第二个 CLI/provider。高风险构建确需跨 provider 二次确认时，由用户显式要求并提供可用宿主能力；该升级不属于正常 harness-plan 路径，也不得因外部工具不可用而 retry。
 
-### 前置
-- Codex CLI ≥ 0.130：`npm install -g @openai/codex@latest`（现 0.142.3）
-- Codex 已登录：`codex login`（ChatGPT 账号即可）
-- Windows + bridge 环境未实测，TODO(review)
+### 安全线
 
-### 执行（示例）
-```powershell
-powershell.exe -NoProfile -Command "codex exec -s read-only '$(Get-Content .harness/changes/<cn>/spec/<cn>-design.md -Raw)'"
-```
-
-### 安全线 ⚠️
-- 首次 `codex exec -s read-only` 强制只读沙箱
-- resume 必须加 `-c sandbox_mode="read-only"`（`resume` 不接受 `-s`，漏写会继承 config 默认，可能 `danger-full-access`）——这是最关键安全线
-- Codex 全程只读，从不写文件
-- 不 pin `-m` 模型（ChatGPT 账号鉴权会拒 `gpt-5.x-codex` 变体并 400 报错）
-
-### 状态
-本节为**升级口**，当前 harness-plan 阶段 7.5 默认走 harness-evaluator（C1），不自动触发 Codex。需手动启用，且建议先验证 Codex CLI 在当前环境可用。详见 grill-me 文档的 grill-me-codex Act 2（技术知识库/02-Skills与扩展/Skills合集/grill-me.md）。
+- 外部评审必须只读，输入只包含已脱敏的设计/计划/场景表
+- 不继承未确认的生产凭证、写权限或危险沙箱设置
+- 一次失败即返回主会话，不自动安装 CLI、不自动登录、不循环 resume
+- 报告必须标注 provider、执行模式和证据边界

package/harness/bundles/java/cursor/harness-review/SKILL.md

@@ -3,7 +3,7 @@ name: harness-review
 description: 6维度代码审查（架构/安全/规范/兼容/测试/性能），对照项目规则（见
   .harness/context-index.json）和测试场景表，在隔离上下文运行。使用场景：代码审查、提交前检查、合并评审
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-review — 代码审查
 
 ## Purpose
@@ -53,7 +53,7 @@ description: 6维度代码审查（架构/安全/规范/兼容/测试/性能）
 <!-- @section-id review.delegate -->
 ### 2. 审查执行（主会话优先）
 
-若当前运行时支持隔离子任务且已安装 `harness-reviewer` 等价能力，则可委派只读子任务；否则**在主会话按同一 6 维度检查清单执行**，不得假设自定义 Agent 已安装。返回空 / 无报告正文 → 不 retry，继续主会话审查并记 `decision` 事件。
+默认在主会话按同一 6 维度检查清单执行，**不运行固定 `harness-reviewer` 预检**。仅发布候选或命中权限/安全、支付、迁移、并发幂等、公共契约、跨模块核心路径，且当前宿主显式提供通用隔离任务工具时，才可临时委派一次只读审查。spawn 失败、空返回或无报告正文 → 不 retry，继续主会话审查并记一次 `issue`；正常 inline 只记 `decision`，不显示不可用告警。
 ## Review 定位（重要）
 
 **harness-review 是参考性代码审查阶段，不是硬门禁。**

package/harness/bundles/java/cursor/harness-run/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-run
 description: 按变更簇执行 TDD 编码循环（RED→GREEN→REFACTOR→编译验证），逐变更簇实现计划中的任务。使用场景：开始编码、实现功能、写代码、TDD 编码
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-run — 需求编码
 
 ## Purpose

package/harness/bundles/java/cursor/harness-run/protocols.md

@@ -49,13 +49,13 @@ REFACTOR 只允许不改变行为的整理。若重构改变行为，必须回
 满足**全部**条件时启用：
 
 - 变更簇命中高风险（数据迁移、权限、安全、并发、幂等、核心契约变更、缺真实测试证据等，见原触发列表任一）
-- `python <skills-root>/scripts/harness_preflight.py check-agents --skills-root <skills-root> --agent harness-reviewer --json` 返回 `usable=true`
+- 当前宿主已显式提供隔离 reviewer 能力；需要固定 reviewer 时，单次 `check-agents` 返回 `executionMode=delegated`
 
-未满足时记录“跳过变更簇审查：低风险 / reviewer 不可用 / 后续 harness-review 覆盖”，不得视为降级。
+未满足时记录“跳过变更簇隔离审查：低风险 / 正常 inline / 后续 harness-review 覆盖”，不得视为降级或显示不可用告警。
 
 ### 审查方式
 
-`usable=true` 时委派只读 `harness-reviewer` 审查当前变更簇 diff。**不 retry**；无效返回 → 主会话 checklist 自审，记 `decision` 事件。
+`executionMode=delegated` 时委派只读 `harness-reviewer` 审查当前变更簇 diff。**不 retry**；spawn 失败或无效返回 → 主会话 checklist 自审，记一次 `issue` 事件。
 
 审查范围只限当前变更簇：
 

package/harness/bundles/java/cursor/harness-submit/SKILL.md

@@ -3,7 +3,7 @@ name: harness-submit
 description: 最终提交封装：验证→中文 commit→提交/推送；worktree 模式含 --no-ff
   合并回主分支。使用场景：提交代码、commit、push、合并分支、merge to main、完成开发
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-submit — 最终提交（含 worktree 合并）
 
 ## Purpose

package/harness/bundles/java/cursor/harness-submit/checklist.md

@@ -367,7 +367,13 @@ python harness/scripts/harness_integration.py verify --change <change-name> --ru
 
 任一命令非零退出 → step FAILED，不进入 push。
 
-**写 check-ok marker**（npm run check exit 0 后强制）：
+**产品候选证据门槛**：
+
+- 项目存在远端 CI：本地 push 只运行有界静态门槛，push 后必须取得当前候选 commit 的 CI 绿灯，才能归档或发布。
+- 项目没有远端 CI：在候选 commit 对应的同一棵 tree 上完整执行 resolved check；成功后写本地候选收据。收据必须同时匹配时间、命令和 tree hash，不接受口头声明或旧提交结果。
+- 不得在 pre-push 中无条件重复全量测试；失败后不自动重跑，先报告失败阶段与残留进程。
+
+**写 check-ok marker**（`npm run check` exit 0 后强制；无 CI 项目以此作为产品候选绿灯证据）：
 
 ```powershell
 node scripts/check-gate.mjs --write
@@ -375,7 +381,7 @@ node scripts/check-gate.mjs --write
 
 ### 步骤 M5：push
 
-**硬门槛（eslint × feature worktree）**：integration / 主仓 `pre-push` 跑 `npm run check` 时，eslint 不得把 sibling `.worktrees/<change>/` 当成第二工程根（双 `tsconfigRootDir`）。本仓以 `eslint.config.mjs` 的 `.worktrees/**` ignore 为准；若自定义 eslint 未 ignore，须先 `move_agent_to_root(<projectRoot>)` 再清 feature worktree，再 push。
+**硬门槛（eslint × feature worktree）**：integration / 主仓 `pre-push` 跑有界 `check:push` 时，eslint 不得把 sibling `.worktrees/<change>/` 当成第二工程根（双 `tsconfigRootDir`）。本仓以 `eslint.config.mjs` 的 `.worktrees/**` ignore 为准；若自定义 eslint 未 ignore，须先 `move_agent_to_root(<projectRoot>)` 再清 feature worktree，再 push。
 
 ```powershell
 python harness/scripts/harness_integration.py push --change <change-name> --run-id <run-id> --feature-branch harness/<change-name> --target-branch <主分支> --temp-root <task-temp>

package/harness/bundles/java/cursor/harness-sync/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-sync
 description: 检查并更新项目AI元数据（CodeGraph索引、harness-codebase-map分析、CLAUDE.md、AGENTS.md、.harness/完整性），确保Claude对代码库的理解与最新代码一致。当用户说'同步/更新索引/刷新元数据/检查一致性'时使用
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-sync — 元数据同步
 
 ## Purpose

package/harness/bundles/java/cursor/harness-test/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-test
 description: 测试执行：读取场景表，执行单元测试+API接口测试+数据兼容验证，输出测试报告。当用户说'跑测试/验证/跑用例/接口测试/单元测试'时使用
 ---
-<!-- generated by harness_deploy.py; core=11372e65612127c2; overlay=java; agent=cursor; do not edit -->
+<!-- generated by harness_deploy.py; core=d50ff0ad2421c0cb; overlay=java; agent=cursor; do not edit -->
 # harness-test — 测试执行
 
 ## Purpose

package/harness/bundles/java/cursor/scripts/harness_deploy.py

@@ -16,6 +16,7 @@ import re
 import shutil
 import subprocess
 import sys
+import time
 import uuid
 from pathlib import Path
 from typing import Any, Iterable
@@ -38,6 +39,7 @@ HEADING_RE = re.compile(r"^(#{2,6})\s+(.+?)\s*$")
 FRAGMENT_HINT_RE = re.compile(r"^>\s*片段：\[\[shared/[^\]]+\]\]\s*.*$")
 
 BUILD_MARKER = ".harness-build.json"
+_REPLACE_RETRY_DELAYS_SECONDS = (0.05, 0.1, 0.2, 0.4, 0.8)
 # Install-side managed manifests record which files a prior install owned, so a
 # later conservative install can delete removed managed files while preserving
 # user-owned files (design §3.8 要点4). Skills manifest lives in the skills
@@ -76,6 +78,23 @@ def now_iso() -> str:
     return dt.datetime.now().astimezone().isoformat(timespec="seconds")
 
 
+def replace_with_retry(source: Path, target: Path) -> None:
+    """Bounded retry for transient directory locks during atomic swaps.
+
+    Windows indexers and antivirus scanners may briefly hold a newly generated
+    bundle directory. Retrying only ``PermissionError`` keeps real path and
+    contract failures fail-fast while avoiding an expensive full bundle rerun.
+    """
+    for attempt in range(len(_REPLACE_RETRY_DELAYS_SECONDS) + 1):
+        try:
+            os.replace(source, target)
+            return
+        except PermissionError:
+            if attempt >= len(_REPLACE_RETRY_DELAYS_SECONDS):
+                raise
+            time.sleep(_REPLACE_RETRY_DELAYS_SECONDS[attempt])
+
+
 def emit_json(payload: dict[str, Any], *, ok: bool = True) -> int:
     print(json.dumps(payload, ensure_ascii=False, indent=2))
     return 0 if ok else 1
@@ -596,15 +615,15 @@ def cmd_build(
     if out_dir.exists():
         if (out_dir / BUILD_MARKER).is_file():
             old_backup = out_dir.parent / f".{out_dir.name}.old-{uuid.uuid4().hex[:8]}"
-            os.replace(out_dir, old_backup)
+            replace_with_retry(out_dir, old_backup)
         else:
             shutil.rmtree(staging, ignore_errors=True)
             raise ValueError(f"refusing to overwrite unmarked out_dir: {out_dir}")
     try:
-        os.replace(staging, out_dir)
+        replace_with_retry(staging, out_dir)
     except OSError:
         if old_backup is not None and old_backup.exists():
-            os.replace(old_backup, out_dir)
+            replace_with_retry(old_backup, out_dir)
         raise
     if old_backup is not None:
         shutil.rmtree(old_backup, ignore_errors=True)