@hunter-harness/workflow-harness 0.2.28 → 0.2.30

package/harness/bundles/general/cursor/scripts/harness_workflow_policy.py

@@ -15,6 +15,7 @@ POLICY_REL = Path("harness") / "contracts" / "workflow-policy.json"
 TOP_LEVEL_KEYS = frozenset(
     {
         "schemaVersion",
+        "testExecution",
         "riskTiers",
         "skills",
         "requiredArtifacts",
@@ -62,6 +63,27 @@ CHECKPOINT_RULE_KEYS = frozenset(
         "reviewerTool",
     }
 )
+TEST_EXECUTION_KEYS = frozenset(
+    {
+        "runner",
+        "defaultProfile",
+        "maxWorkers",
+        "singleInstance",
+        "processTreeCleanup",
+        "detachedProcessPreflight",
+        "confirmationFlag",
+        "confirmationRequiredProfiles",
+        "resourceIntensiveModules",
+        "profiles",
+    }
+)
+TEST_EXECUTION_PROFILE_KEYS = frozenset(
+    {
+        "description",
+        "includesResourceIntensive",
+        "moduleTimeoutSeconds",
+    }
+)
 
 
 class PolicyValidationError(ValueError):
@@ -94,6 +116,71 @@ def validate_policy(data: Any) -> dict[str, Any]:
     if data["schemaVersion"] != 1:
         raise PolicyValidationError("unsupported schemaVersion")
 
+    test_execution = data["testExecution"]
+    _require_type(test_execution, dict, "testExecution")
+    _reject_unknown(test_execution, TEST_EXECUTION_KEYS, "testExecution")
+    for key in ("runner", "defaultProfile", "confirmationFlag"):
+        _require_type(test_execution[key], str, f"testExecution.{key}")
+    max_workers = test_execution["maxWorkers"]
+    _require_type(max_workers, int, "testExecution.maxWorkers")
+    if isinstance(max_workers, bool) or max_workers < 1 or max_workers > 2:
+        raise PolicyValidationError("testExecution.maxWorkers must be 1 or 2")
+    for key in (
+        "singleInstance",
+        "processTreeCleanup",
+        "detachedProcessPreflight",
+    ):
+        _require_type(test_execution[key], bool, f"testExecution.{key}")
+        if not test_execution[key]:
+            raise PolicyValidationError(f"testExecution.{key} must be true")
+    for key in ("confirmationRequiredProfiles", "resourceIntensiveModules"):
+        values = test_execution[key]
+        _require_type(values, list, f"testExecution.{key}")
+        if any(not isinstance(item, str) or not item for item in values):
+            raise PolicyValidationError(
+                f"testExecution.{key} must contain non-empty strings"
+            )
+
+    execution_profiles = test_execution["profiles"]
+    _require_type(execution_profiles, dict, "testExecution.profiles")
+    required_profile_names = {"safe", "system", "full"}
+    if set(execution_profiles) != required_profile_names:
+        raise PolicyValidationError(
+            "testExecution.profiles must define exactly safe, system, and full"
+        )
+    if test_execution["defaultProfile"] != "safe":
+        raise PolicyValidationError("testExecution.defaultProfile must be safe")
+    confirmation_profiles = set(test_execution["confirmationRequiredProfiles"])
+    if not {"system", "full"}.issubset(confirmation_profiles):
+        raise PolicyValidationError(
+            "testExecution confirmation must cover system and full"
+        )
+    for profile_name, profile in execution_profiles.items():
+        path = f"testExecution.profiles.{profile_name}"
+        _require_type(profile, dict, path)
+        _reject_unknown(profile, TEST_EXECUTION_PROFILE_KEYS, path)
+        _require_type(profile["description"], str, f"{path}.description")
+        _require_type(
+            profile["includesResourceIntensive"],
+            bool,
+            f"{path}.includesResourceIntensive",
+        )
+        timeout = profile["moduleTimeoutSeconds"]
+        _require_type(timeout, int, f"{path}.moduleTimeoutSeconds")
+        if isinstance(timeout, bool) or timeout <= 0:
+            raise PolicyValidationError(
+                f"{path}.moduleTimeoutSeconds must be a positive integer"
+            )
+    if execution_profiles["safe"]["includesResourceIntensive"]:
+        raise PolicyValidationError(
+            "testExecution.profiles.safe must exclude resource-intensive tests"
+        )
+    for profile_name in ("system", "full"):
+        if not execution_profiles[profile_name]["includesResourceIntensive"]:
+            raise PolicyValidationError(
+                f"testExecution.profiles.{profile_name} must include resource-intensive tests"
+            )
+
     risk_tiers = data["riskTiers"]
     _require_type(risk_tiers, dict, "riskTiers")
     for tier_name, tier in risk_tiers.items():

package/harness/bundles/java/claude-code/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "java",
   "agent": "claude-code",
-  "coreHash": "305f32827cd4de18"
+  "coreHash": "1627e6c5efeb0f1d"
 }

package/harness/bundles/java/claude-code/contracts/workflow-policy.json

@@ -1,5 +1,36 @@
 {
   "schemaVersion": 1,
+  "testExecution": {
+    "runner": "harness/scripts/harness_test_runner.py",
+    "defaultProfile": "safe",
+    "maxWorkers": 2,
+    "singleInstance": true,
+    "processTreeCleanup": true,
+    "detachedProcessPreflight": true,
+    "confirmationFlag": "--confirm-resource-intensive",
+    "confirmationRequiredProfiles": ["system", "full"],
+    "resourceIntensiveModules": [
+      "test_harness_integration.py",
+      "test_harness_service.py"
+    ],
+    "profiles": {
+      "safe": {
+        "description": "Default low-load profile; runs regular test modules sequentially in isolated processes.",
+        "includesResourceIntensive": false,
+        "moduleTimeoutSeconds": 300
+      },
+      "system": {
+        "description": "Runs integration and service-lifecycle modules only after explicit confirmation.",
+        "includesResourceIntensive": true,
+        "moduleTimeoutSeconds": 600
+      },
+      "full": {
+        "description": "Runs regular modules followed by resource-intensive modules after explicit confirmation.",
+        "includesResourceIntensive": true,
+        "moduleTimeoutSeconds": 600
+      }
+    }
+  },
   "riskTiers": {
     "fast": {
       "description": "Low-risk docs/comments/non-behavioral config; no API/DB/security/concurrency. Policy notes: checkpointRules apply only when meta/implementation-checkpoints.json defines the entry for this change; missing file/entry = disabled (gate must not require --task).",
@@ -45,8 +76,8 @@
       "inputs": ["test-scenarios", "verification-ledger"],
       "artifacts": ["test-reports", "verification-ledger"],
       "events": ["phase.start", "phase.end", "command", "verification"],
-      "allowedInteractions": [],
-      "capabilities": ["gate-begin", "gate-close", "test-guard", "ledger-record"]
+      "allowedInteractions": ["resource-intensive-test-confirmation"],
+      "capabilities": ["gate-begin", "gate-close", "test-guard", "ledger-record", "resource-safe-test-runner"]
     },
     "harness-review": {
       "phase": "review",
@@ -184,6 +215,7 @@
   },
   "interactionWhitelist": {
     "global": [],
+    "harness-test": ["resource-intensive-test-confirmation"],
     "harness-submit": ["merge-conflict-resolution"],
     "harness-plan": ["risk-confirmation"]
   },

package/harness/bundles/java/claude-code/harness-apidoc/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=305f32827cd4de18; overlay=java; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=1627e6c5efeb0f1d; overlay=java; agent=claude-code; do not edit -->
 # harness-apidoc — 前端接口文档（Java overlay）
 
 ## Purpose

package/harness/bundles/java/claude-code/harness-archive/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=305f32827cd4de18; overlay=java; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=1627e6c5efeb0f1d; overlay=java; agent=claude-code; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/java/claude-code/harness-codebase-map/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=305f32827cd4de18; overlay=java; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=1627e6c5efeb0f1d; overlay=java; agent=claude-code; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/java/claude-code/harness-knowledge-ingest/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=305f32827cd4de18; overlay=java; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=1627e6c5efeb0f1d; overlay=java; agent=claude-code; do not edit -->
 # harness-knowledge-ingest
 
 从 `.harness/archive/**/reports/final/summary-data.json` 抽取项目知识，生成并维护本地 `.harness/knowledge/` 索引。