@hunter-harness/workflow-harness 0.2.31 → 0.2.33

package/harness/bundles/java/cursor/scripts/harness_plan_finalize.py

@@ -11,9 +11,10 @@ import json
 import os
 import re
 import shutil
+import stat
 import sys
 import tempfile
-from pathlib import Path
+from pathlib import Path, PurePosixPath
 from typing import Any
 
 SCRIPTS_DIR = Path(__file__).resolve().parent
@@ -45,12 +46,19 @@ PRIORITY_EVIDENCE_KIND = {
     "P1": "ledger",
     "P2": "advisory",
 }
+_FILE_ATTRIBUTE_REPARSE_POINT = getattr(stat, "FILE_ATTRIBUTE_REPARSE_POINT", 0x400)
 
 
 def _result_error(code: str, message: str) -> dict[str, Any]:
     return {"ok": False, "code": code, "error": message}
 
 
+class PlanParseError(ValueError):
+    def __init__(self, code: str, message: str) -> None:
+        super().__init__(message)
+        self.code = code
+
+
 def _normalize_header(value: str) -> str:
     return re.sub(r"[\s_-]+", "", value).lower()
 
@@ -127,13 +135,23 @@ def parse_test_scenarios(scenarios_path: Path) -> list[dict[str, str]]:
                     break
                 cells = _table_cells(row)
                 if max(id_index, scenario_index) >= len(cells):
-                    row_index += 1
-                    continue
+                    raise PlanParseError(
+                        "PLAN_SCENARIO_ROW_INVALID",
+                        f"{scenarios_path.name}: line {row_index + 1} is missing scenario ID or description",
+                    )
                 complete_row = len(cells) == len(headers)
                 scenario_id = cells[id_index].strip()
                 if not scenario_id or set(scenario_id) <= {"-", ":"}:
-                    row_index += 1
-                    continue
+                    raise PlanParseError(
+                        "PLAN_SCENARIO_ROW_INVALID",
+                        f"{scenarios_path.name}: line {row_index + 1} has an empty scenario ID",
+                    )
+                scenario_text = cells[scenario_index].strip()
+                if not scenario_text or set(scenario_text) <= {"-", ":"}:
+                    raise PlanParseError(
+                        "PLAN_SCENARIO_ROW_INVALID",
+                        f"{scenarios_path.name}: line {row_index + 1} has an empty scenario description",
+                    )
                 priority = (
                     cells[priority_index].strip().upper()
                     if priority_index is not None
@@ -144,7 +162,7 @@ def parse_test_scenarios(scenarios_path: Path) -> list[dict[str, str]]:
                 scenario = {
                     "id": scenario_id,
                     "priority": priority,
-                    "scenario": cells[scenario_index].strip(),
+                    "scenario": scenario_text,
                     "ownerPhase": (
                         cells[owner_phase_index].strip()
                         if owner_phase_index is not None
@@ -219,19 +237,34 @@ def parse_plan_tasks(plan_path: Path) -> list[dict[str, str]]:
             if not row.startswith("|"):
                 break
             cells = _table_cells(row)
-            if len(cells) < len(headers):
-                row_index += 1
-                continue
+            if max(number_index, task_index) >= len(cells):
+                raise PlanParseError(
+                    "PLAN_TASK_ROW_INVALID",
+                    f"{plan_path.name}: line {row_index + 1} is missing task ID or description",
+                )
+            complete_row = len(cells) == len(headers)
             number = cells[number_index].strip()
             task_text = cells[task_index].strip()
-            if not number or not task_text or set(number) <= {"-", ":"}:
-                row_index += 1
-                continue
+            if (
+                not number
+                or not task_text
+                or set(number) <= {"-", ":"}
+                or set(task_text) <= {"-", ":"}
+            ):
+                raise PlanParseError(
+                    "PLAN_TASK_ROW_INVALID",
+                    f"{plan_path.name}: line {row_index + 1} has an empty task ID or description",
+                )
             task: dict[str, str] = {"num": number, "task": task_text}
             if cluster_index is not None and cells[cluster_index].strip():
                 task["cluster"] = cells[cluster_index].strip()
             for name, index in optional_indices.items():
-                if index is not None and cells[index].strip():
+                if (
+                    complete_row
+                    and index is not None
+                    and index < len(cells)
+                    and cells[index].strip()
+                ):
                     task[name] = cells[index].strip()
             tasks.append(task)
             row_index += 1
@@ -271,6 +304,28 @@ def _frontmatter(text: str) -> dict[str, str] | None:
     return None
 
 
+def _required_artifact_names(change_name: str) -> set[str]:
+    return {
+        f"spec/{change_name}-design.md",
+        f"plans/{change_name}-plan.md",
+        f"plans/{change_name}-implementation-detail.md",
+        f"plans/{change_name}-test-scenarios.md",
+        "meta/gate-policy.json",
+        "meta/worktree.json",
+    }
+
+
+def _is_link_or_reparse(path: Path) -> bool:
+    """Detect symlinks and Windows reparse points on every supported Python."""
+    try:
+        if path.is_symlink():
+            return True
+        attributes = getattr(os.lstat(path), "st_file_attributes", 0)
+    except OSError:
+        return False
+    return bool(attributes & _FILE_ATTRIBUTE_REPARSE_POINT)
+
+
 def lint_slice_plan(plan_path: Path) -> dict[str, Any]:
     """Validate the identity, reuse, and storage contract for a slice plan."""
     text = Path(plan_path).read_text(encoding="utf-8-sig")
@@ -338,7 +393,7 @@ def lint_slice_plan(plan_path: Path) -> dict[str, Any]:
 def _artifact_files(staging: Path) -> list[Path]:
     files: list[Path] = []
     for path in staging.rglob("*"):
-        if path.is_symlink():
+        if _is_link_or_reparse(path):
             raise ValueError(f"PLAN_ARTIFACT_SYMLINK: {path}")
         if path.is_file():
             files.append(path)
@@ -347,14 +402,7 @@ def _artifact_files(staging: Path) -> list[Path]:
 
 def validate_staging(staging: Path, change_name: str) -> dict[str, Any]:
     staging = staging.resolve()
-    required = {
-        Path("spec") / f"{change_name}-design.md",
-        Path("plans") / f"{change_name}-plan.md",
-        Path("plans") / f"{change_name}-implementation-detail.md",
-        Path("plans") / f"{change_name}-test-scenarios.md",
-        Path("meta") / "gate-policy.json",
-        Path("meta") / "worktree.json",
-    }
+    required = {Path(name) for name in _required_artifact_names(change_name)}
     try:
         files = _artifact_files(staging)
     except ValueError as exc:
@@ -416,7 +464,10 @@ def validate_staging(staging: Path, change_name: str) -> dict[str, Any]:
 
     # C8: validate ownerPhase values in plan.md task table.
     plan_path = staging / "plans" / f"{change_name}-plan.md"
-    tasks = parse_plan_tasks(plan_path)
+    try:
+        tasks = parse_plan_tasks(plan_path)
+    except PlanParseError as exc:
+        return _result_error(exc.code, str(exc))
     if not tasks:
         return _result_error(
             "PLAN_TASKS_EMPTY",
@@ -444,7 +495,10 @@ def validate_staging(staging: Path, change_name: str) -> dict[str, Any]:
 
     # C9: parse test-scenarios.md for scenario manifest.
     scenarios_path = staging / "plans" / f"{change_name}-test-scenarios.md"
-    scenarios = parse_test_scenarios(scenarios_path)
+    try:
+        scenarios = parse_test_scenarios(scenarios_path)
+    except PlanParseError as exc:
+        return _result_error(exc.code, str(exc))
     if not scenarios:
         return _result_error(
             "PLAN_SCENARIOS_EMPTY",
@@ -542,6 +596,64 @@ def _validate_plan_start(
     return {"ok": True, "phaseStartCount": 1}
 
 
+def _receipt_artifact_targets(
+    change_dir: Path,
+    files_list: list[Any],
+) -> tuple[list[tuple[str, Path]] | None, dict[str, Any] | None]:
+    targets: list[tuple[str, Path]] = []
+    seen: set[str] = set()
+    for index, value in enumerate(files_list):
+        if not isinstance(value, str):
+            return None, _result_error(
+                "RECEIPT_FILE_PATH_INVALID",
+                f"receipt files[{index}] must be a string",
+            )
+        raw = value
+        segments = raw.split("/")
+        rel = PurePosixPath(raw)
+        invalid = (
+            not raw
+            or raw != raw.strip()
+            or "\\" in raw
+            or ":" in raw
+            or rel.is_absolute()
+            or any(segment in {"", ".", ".."} for segment in segments)
+            or any(segment.endswith((".", " ")) for segment in segments)
+            or not rel.parts
+            or rel.parts[0] not in {"spec", "plans", "meta"}
+        )
+        if invalid:
+            return None, _result_error(
+                "RECEIPT_FILE_PATH_INVALID",
+                f"receipt files[{index}] is not a safe artifact-relative path: {raw!r}",
+            )
+        normalized = rel.as_posix()
+        if normalized in seen:
+            return None, _result_error(
+                "RECEIPT_FILE_PATH_INVALID",
+                f"receipt contains duplicate artifact path: {normalized}",
+            )
+        seen.add(normalized)
+        target = change_dir.joinpath(*rel.parts)
+        cursor = change_dir
+        for part in rel.parts:
+            cursor = cursor / part
+            if _is_link_or_reparse(cursor):
+                return None, _result_error(
+                    "RECEIPT_FILE_PATH_INVALID",
+                    f"receipt artifact path traverses a link: {normalized}",
+                )
+        try:
+            target.resolve(strict=False).relative_to(change_dir)
+        except (OSError, RuntimeError, ValueError):
+            return None, _result_error(
+                "RECEIPT_FILE_PATH_INVALID",
+                f"receipt artifact path resolves outside the change directory: {normalized}",
+            )
+        targets.append((normalized, target))
+    return targets, None
+
+
 def verify_plan(change_dir: Path) -> dict[str, Any]:
     """Read-only verification of a finalized plan (retro §5.8).
 
@@ -565,6 +677,11 @@ def verify_plan(change_dir: Path) -> dict[str, Any]:
     change_name = str(receipt.get("changeName") or "").strip()
     if not change_name:
         return _result_error("RECEIPT_INVALID", "receipt missing changeName")
+    if change_name != change_dir.name:
+        return _result_error(
+            "RECEIPT_CHANGE_NAME_INVALID",
+            f"receipt changeName {change_name!r} does not match {change_dir.name!r}",
+        )
 
     expected_hash = str(receipt.get("artifactsHash") or "").strip()
     if not expected_hash.startswith("sha256:"):
@@ -573,6 +690,19 @@ def verify_plan(change_dir: Path) -> dict[str, Any]:
     files_list = receipt.get("files")
     if not isinstance(files_list, list) or not files_list:
         return _result_error("RECEIPT_INVALID", "receipt files list missing or empty")
+    artifact_targets, path_error = _receipt_artifact_targets(change_dir, files_list)
+    if path_error is not None:
+        return path_error
+    assert artifact_targets is not None
+    artifact_name_set = {rel for rel, _ in artifact_targets}
+    missing_required = sorted(
+        _required_artifact_names(change_name) - artifact_name_set
+    )
+    if missing_required:
+        return _result_error(
+            "RECEIPT_FILES_INCOMPLETE",
+            "receipt omits required artifacts: " + ", ".join(missing_required),
+        )
     if receipt.get("status") != "finalized":
         return _result_error(
             "RECEIPT_NOT_FINALIZED",
@@ -589,9 +719,7 @@ def verify_plan(change_dir: Path) -> dict[str, Any]:
     # Recompute artifacts hash from published files.
     digest = hashlib.sha256()
     artifact_names: list[str] = []
-    for rel_text in files_list:
-        rel = rel_text.as_posix() if hasattr(rel_text, "as_posix") else str(rel_text)
-        target = change_dir / rel
+    for rel, target in artifact_targets:
         if not target.is_file():
             return _result_error(
                 "ARTIFACT_MISSING", f"published artifact missing: {rel}"
@@ -634,7 +762,10 @@ def verify_plan(change_dir: Path) -> dict[str, Any]:
         }
 
     plan_path = change_dir / "plans" / f"{change_name}-plan.md"
-    expected_tasks = parse_plan_tasks(plan_path)
+    try:
+        expected_tasks = parse_plan_tasks(plan_path)
+    except PlanParseError as exc:
+        return _result_error(exc.code, str(exc))
     if not expected_tasks:
         return _result_error(
             "PLAN_TASKS_EMPTY",
@@ -652,24 +783,25 @@ def verify_plan(change_dir: Path) -> dict[str, Any]:
         )
     except (OSError, json.JSONDecodeError) as exc:
         return _result_error("IMPLEMENTATION_CHECKPOINTS_INVALID", str(exc))
-    actual_tasks = checkpoints.get("tasks") if isinstance(checkpoints, dict) else None
-    expected_task_ids = [str(item.get("num") or "") for item in expected_tasks]
-    actual_task_ids = (
-        [str(item.get("num") or "") for item in actual_tasks if isinstance(item, dict)]
-        if isinstance(actual_tasks, list)
-        else []
-    )
-    if expected_task_ids != actual_task_ids:
+    expected_checkpoints = {
+        "schemaVersion": 1,
+        "changeName": change_name,
+        "tasks": expected_tasks,
+        "foundationGate": "approved",
+    }
+    if checkpoints != expected_checkpoints:
         return _result_error(
             "IMPLEMENTATION_CHECKPOINTS_DRIFT",
-            "derived task IDs do not match the finalized plan: "
-            f"expected={expected_task_ids}, actual={actual_task_ids}",
+            "derived implementation checkpoints do not match the finalized plan",
         )
 
     scenarios_path = (
         change_dir / "plans" / f"{change_name}-test-scenarios.md"
     )
-    expected_scenarios = parse_test_scenarios(scenarios_path)
+    try:
+        expected_scenarios = parse_test_scenarios(scenarios_path)
+    except PlanParseError as exc:
+        return _result_error(exc.code, str(exc))
     if not expected_scenarios:
         return _result_error(
             "PLAN_SCENARIOS_EMPTY",
@@ -694,26 +826,15 @@ def verify_plan(change_dir: Path) -> dict[str, Any]:
             "scenario-manifest.json must contain at least one scenario",
         )
 
-    def scenario_identity(item: dict[str, Any]) -> tuple[str, str, str, str]:
-        return (
-            str(item.get("id") or ""),
-            str(item.get("priority") or ""),
-            str(item.get("ownerPhase") or ""),
-            str(item.get("requiredEvidenceKind") or ""),
-        )
-
-    expected_scenario_identities = [
-        scenario_identity(item) for item in expected_scenarios
-    ]
-    actual_scenario_identities = [
-        scenario_identity(item)
-        for item in actual_scenarios
-        if isinstance(item, dict)
-    ]
-    if expected_scenario_identities != actual_scenario_identities:
+    expected_manifest = {
+        "schemaVersion": 1,
+        "changeName": change_name,
+        "scenarios": expected_scenarios,
+    }
+    if manifest != expected_manifest:
         return _result_error(
             "SCENARIO_MANIFEST_DRIFT",
-            "derived scenario identities do not match the finalized scenario table",
+            "derived scenario manifest does not match the finalized scenario table",
         )
 
     # Validate gate-policy.json is parseable JSON.
@@ -730,7 +851,7 @@ def verify_plan(change_dir: Path) -> dict[str, Any]:
     gate_policy_consistent = True
 
     # Validate events.ndjson: require one matching start/end lifecycle.
-    events_path = change_dir / "events.ndjson"
+    events_path = harness_events.events_path(change_dir)
     phase_start_count = 0
     phase_end_count = 0
     phase_end_status: str | None = None

package/harness/manifests/general/claude-code.json

@@ -2,9 +2,9 @@
   "schema_version": 2,
   "profile": "general",
   "adapter": "claude-code",
-  "bundle_version": "0.2.23",
+  "bundle_version": "0.2.25",
   "requires": {
-    "minimumCliVersion": "0.2.33",
+    "minimumCliVersion": "0.2.35",
     "capabilities": [
       "sync@1",
       "rules-sync@1",
@@ -148,7 +148,7 @@
     },
     {
       "path": "harness-plan/checklist.md",
-      "sha256": "005f6af01b829771cbec4135c65391964873b022cd2120c80e91a6554ec29cfd"
+      "sha256": "e99853043c543ad4ae3bcd4d5f773f5e518177034444b86cac3348c62a003f7a"
     },
     {
       "path": "harness-plan/protocols.md",
@@ -156,11 +156,11 @@
     },
     {
       "path": "harness-plan/reference.md",
-      "sha256": "8bfb369c958b4cb61021dc8604773a87e52a7dc5da62a059c0338aa3db252d4b"
+      "sha256": "a763a7a92ffaf35a0b0ea5a866ac84447245b02bfc53406f24e9470897ca2d61"
     },
     {
       "path": "harness-plan/SKILL.md",
-      "sha256": "990b0ee13acd0f7151ddd85acd9db70864b91a60a05482368f7466133f74cc33"
+      "sha256": "f53144c983ee228ad30c8020d738c0a7ddfdad67d93002a61083c8758b09de67"
     },
     {
       "path": "harness-review/checklist.md",
@@ -308,7 +308,7 @@
     },
     {
       "path": "scripts/harness_gate.py",
-      "sha256": "be5bc122703efb1c4f37ca21c2eadfe78a8325d3420fee4d050a5662024faa76"
+      "sha256": "bd2a7e9025be45f53d0ca9e91028e6451728a34e528a881422437a5f5100c77a"
     },
     {
       "path": "scripts/harness_integration.py",
@@ -332,7 +332,7 @@
     },
     {
       "path": "scripts/harness_plan_finalize.py",
-      "sha256": "4144e186c618bdb7576bdc2a5ade1f0bfb776b14b338022bd9bee4b413b05878"
+      "sha256": "1e9b81af4ed3166c3847b6668899e9b7bf32a27f9b879657fe92ee402bf9da4c"
     },
     {
       "path": "scripts/harness_preflight.py",

package/harness/manifests/general/codebuddy.json

@@ -2,9 +2,9 @@
   "schema_version": 2,
   "profile": "general",
   "adapter": "codebuddy",
-  "bundle_version": "0.2.23",
+  "bundle_version": "0.2.25",
   "requires": {
-    "minimumCliVersion": "0.2.33",
+    "minimumCliVersion": "0.2.35",
     "capabilities": [
       "sync@1",
       "rules-sync@1",
@@ -148,7 +148,7 @@
     },
     {
       "path": "harness-plan/checklist.md",
-      "sha256": "005f6af01b829771cbec4135c65391964873b022cd2120c80e91a6554ec29cfd"
+      "sha256": "e99853043c543ad4ae3bcd4d5f773f5e518177034444b86cac3348c62a003f7a"
     },
     {
       "path": "harness-plan/protocols.md",
@@ -156,11 +156,11 @@
     },
     {
       "path": "harness-plan/reference.md",
-      "sha256": "8bfb369c958b4cb61021dc8604773a87e52a7dc5da62a059c0338aa3db252d4b"
+      "sha256": "a763a7a92ffaf35a0b0ea5a866ac84447245b02bfc53406f24e9470897ca2d61"
     },
     {
       "path": "harness-plan/SKILL.md",
-      "sha256": "8fa4f34d26aa1e841d13054dd26bbdc163f98fb70ed41c3c829286708fa7bc9b"
+      "sha256": "0cb82bef71217827d40750ee132eb9f3592bc54bcf61550a833d3de09075c40c"
     },
     {
       "path": "harness-review/checklist.md",
@@ -308,7 +308,7 @@
     },
     {
       "path": "scripts/harness_gate.py",
-      "sha256": "be5bc122703efb1c4f37ca21c2eadfe78a8325d3420fee4d050a5662024faa76"
+      "sha256": "bd2a7e9025be45f53d0ca9e91028e6451728a34e528a881422437a5f5100c77a"
     },
     {
       "path": "scripts/harness_integration.py",
@@ -332,7 +332,7 @@
     },
     {
       "path": "scripts/harness_plan_finalize.py",
-      "sha256": "4144e186c618bdb7576bdc2a5ade1f0bfb776b14b338022bd9bee4b413b05878"
+      "sha256": "1e9b81af4ed3166c3847b6668899e9b7bf32a27f9b879657fe92ee402bf9da4c"
     },
     {
       "path": "scripts/harness_preflight.py",

package/harness/manifests/general/codex.json

@@ -2,9 +2,9 @@
   "schema_version": 2,
   "profile": "general",
   "adapter": "codex",
-  "bundle_version": "0.2.23",
+  "bundle_version": "0.2.25",
   "requires": {
-    "minimumCliVersion": "0.2.33",
+    "minimumCliVersion": "0.2.35",
     "capabilities": [
       "sync@1",
       "rules-sync@1",
@@ -136,7 +136,7 @@
     },
     {
       "path": "harness-plan/checklist.md",
-      "sha256": "005f6af01b829771cbec4135c65391964873b022cd2120c80e91a6554ec29cfd"
+      "sha256": "e99853043c543ad4ae3bcd4d5f773f5e518177034444b86cac3348c62a003f7a"
     },
     {
       "path": "harness-plan/protocols.md",
@@ -144,11 +144,11 @@
     },
     {
       "path": "harness-plan/reference.md",
-      "sha256": "8bfb369c958b4cb61021dc8604773a87e52a7dc5da62a059c0338aa3db252d4b"
+      "sha256": "a763a7a92ffaf35a0b0ea5a866ac84447245b02bfc53406f24e9470897ca2d61"
     },
     {
       "path": "harness-plan/SKILL.md",
-      "sha256": "7856d3fe5ff457e5256ca86924e8b17a2343bcfe9ff5bf260f374682919ac478"
+      "sha256": "5459bb03b0a1099b47b672b736a81f742a7b73f7a027bc18314f7526b7ad1e34"
     },
     {
       "path": "harness-review/checklist.md",
@@ -296,7 +296,7 @@
     },
     {
       "path": "scripts/harness_gate.py",
-      "sha256": "be5bc122703efb1c4f37ca21c2eadfe78a8325d3420fee4d050a5662024faa76"
+      "sha256": "bd2a7e9025be45f53d0ca9e91028e6451728a34e528a881422437a5f5100c77a"
     },
     {
       "path": "scripts/harness_integration.py",
@@ -320,7 +320,7 @@
     },
     {
       "path": "scripts/harness_plan_finalize.py",
-      "sha256": "4144e186c618bdb7576bdc2a5ade1f0bfb776b14b338022bd9bee4b413b05878"
+      "sha256": "1e9b81af4ed3166c3847b6668899e9b7bf32a27f9b879657fe92ee402bf9da4c"
     },
     {
       "path": "scripts/harness_preflight.py",

package/harness/manifests/general/cursor.json

@@ -2,9 +2,9 @@
   "schema_version": 2,
   "profile": "general",
   "adapter": "cursor",
-  "bundle_version": "0.2.23",
+  "bundle_version": "0.2.25",
   "requires": {
-    "minimumCliVersion": "0.2.33",
+    "minimumCliVersion": "0.2.35",
     "capabilities": [
       "sync@1",
       "rules-sync@1",
@@ -136,7 +136,7 @@
     },
     {
       "path": "harness-plan/checklist.md",
-      "sha256": "005f6af01b829771cbec4135c65391964873b022cd2120c80e91a6554ec29cfd"
+      "sha256": "e99853043c543ad4ae3bcd4d5f773f5e518177034444b86cac3348c62a003f7a"
     },
     {
       "path": "harness-plan/protocols.md",
@@ -144,11 +144,11 @@
     },
     {
       "path": "harness-plan/reference.md",
-      "sha256": "8bfb369c958b4cb61021dc8604773a87e52a7dc5da62a059c0338aa3db252d4b"
+      "sha256": "a763a7a92ffaf35a0b0ea5a866ac84447245b02bfc53406f24e9470897ca2d61"
     },
     {
       "path": "harness-plan/SKILL.md",
-      "sha256": "1ade01ac8eb0afc8a40d0eff90bd4a8f9d6dc93646ca9b3cd73e0fb90b1d36b0"
+      "sha256": "d722638a7c1143c8831ba64ca90caf68590273d2feccaf7a8a2407ae15c5cf51"
     },
     {
       "path": "harness-review/checklist.md",
@@ -296,7 +296,7 @@
     },
     {
       "path": "scripts/harness_gate.py",
-      "sha256": "be5bc122703efb1c4f37ca21c2eadfe78a8325d3420fee4d050a5662024faa76"
+      "sha256": "bd2a7e9025be45f53d0ca9e91028e6451728a34e528a881422437a5f5100c77a"
     },
     {
       "path": "scripts/harness_integration.py",
@@ -320,7 +320,7 @@
     },
     {
       "path": "scripts/harness_plan_finalize.py",
-      "sha256": "4144e186c618bdb7576bdc2a5ade1f0bfb776b14b338022bd9bee4b413b05878"
+      "sha256": "1e9b81af4ed3166c3847b6668899e9b7bf32a27f9b879657fe92ee402bf9da4c"
     },
     {
       "path": "scripts/harness_preflight.py",

package/harness/manifests/java/claude-code.json

@@ -2,9 +2,9 @@
   "schema_version": 2,
   "profile": "java",
   "adapter": "claude-code",
-  "bundle_version": "0.2.23",
+  "bundle_version": "0.2.25",
   "requires": {
-    "minimumCliVersion": "0.2.33",
+    "minimumCliVersion": "0.2.35",
     "capabilities": [
       "sync@1",
       "rules-sync@1",
@@ -172,7 +172,7 @@
     },
     {
       "path": "harness-plan/checklist.md",
-      "sha256": "005f6af01b829771cbec4135c65391964873b022cd2120c80e91a6554ec29cfd"
+      "sha256": "e99853043c543ad4ae3bcd4d5f773f5e518177034444b86cac3348c62a003f7a"
     },
     {
       "path": "harness-plan/protocols.md",
@@ -180,11 +180,11 @@
     },
     {
       "path": "harness-plan/reference.md",
-      "sha256": "8bfb369c958b4cb61021dc8604773a87e52a7dc5da62a059c0338aa3db252d4b"
+      "sha256": "a763a7a92ffaf35a0b0ea5a866ac84447245b02bfc53406f24e9470897ca2d61"
     },
     {
       "path": "harness-plan/SKILL.md",
-      "sha256": "57101fbad56bb5b58c81a116dae408726d13510c7074fe1003010047bc3e9a43"
+      "sha256": "091ef17813ed1e92415c849d655054f7cf483bb37dc728a1871af26c225f2ea4"
     },
     {
       "path": "harness-review/checklist.md",
@@ -332,7 +332,7 @@
     },
     {
       "path": "scripts/harness_gate.py",
-      "sha256": "be5bc122703efb1c4f37ca21c2eadfe78a8325d3420fee4d050a5662024faa76"
+      "sha256": "bd2a7e9025be45f53d0ca9e91028e6451728a34e528a881422437a5f5100c77a"
     },
     {
       "path": "scripts/harness_integration.py",
@@ -356,7 +356,7 @@
     },
     {
       "path": "scripts/harness_plan_finalize.py",
-      "sha256": "4144e186c618bdb7576bdc2a5ade1f0bfb776b14b338022bd9bee4b413b05878"
+      "sha256": "1e9b81af4ed3166c3847b6668899e9b7bf32a27f9b879657fe92ee402bf9da4c"
     },
     {
       "path": "scripts/harness_preflight.py",