@hunter-harness/workflow-harness 0.2.65 → 0.2.67

package/harness/bundles/general/claude-code/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "none",
   "agent": "claude-code",
-  "coreHash": "7f28abc4c54931cd"
+  "coreHash": "a8db42e4cbc5c56c"
 }

package/harness/bundles/general/claude-code/harness-archive/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=claude-code; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-codebase-map/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=claude-code; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-knowledge-ingest/SKILL.md

@@ -8,7 +8,7 @@ disallowed-tools:
   - Bash(git *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=claude-code; do not edit -->
 # harness-knowledge-ingest
 
 知识 ingest 完全由 Hunter Platform 负责。归档完成时，客户端生成一个确定性 ZIP；

package/harness/bundles/general/claude-code/harness-knowledge-query/SKILL.md

@@ -8,7 +8,7 @@ disallowed-tools:
   - Bash(git *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=claude-code; do not edit -->
 # harness-knowledge-query
 
 项目知识以 Hunter Platform 的服务端索引为唯一真源。客户端只提交查询并消费结果：

package/harness/bundles/general/claude-code/harness-plan/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=claude-code; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose
@@ -91,9 +91,9 @@ disallowed-tools:
 | 2 | 歧义优先检查 + 复杂度分级；先确认会改变实现方向的语义歧义 |
 | 3 | 按复杂度执行有预算的代码探索；简单修复不得扩散到无关模块 |
 | 4 | **设计审批包** blocking user confirmation；确认事件早于 approved 设计文档和 `meta/worktree.json` |
-| 5–6 | plan + implementation-detail + test-scenarios → `plans/` |
+| 5–6 | plan + implementation-detail + test-scenarios → `plans/`；v2 路径时同步沉淀 `meta/plan-evidence-input.json`（自然输入，字段定稿时点见 `reference.md` 阶段 8 v2 表） |
 | 7.5 | 仅 `--adversarial` 对抗评审 |
-| 8 | 在临时产物集上运行 `harness_plan_finalize.py finalize`，随后立即运行 `verify`；成功后把 finalizer 返回的绝对 `receiptPath` 原样传给 `harness_context.py close`，`--to-phase` 必须取 `plannedPhases` 中 plan 的真实后继，不得写死。写 append-only handoff receipt；不得手写占位路径；原子发布、派生清单计数对账、完整生命周期、render → `checklist.md` |
+| 8 | **v2 路径（新 change 优先）**：`npx hunter-harness plan evidence-pack --input <meta/plan-evidence-input.json> --output <meta/plan-evidence.json>`，再 `npx hunter-harness plan finalize --input <meta/plan-evidence.json>`；exit 0 且 `code:"PLAN_FINALIZED"` 即发布完成（契约见 `reference.md` 阶段 8 v2 路径）。**legacy 路径**：自然输入不完整（如缺真实审批记录）时才在临时产物集上运行 `harness_plan_finalize.py finalize`，随后立即运行 `verify`；成功后把 finalizer 返回的绝对 `receiptPath` 原样传给 `harness_context.py close`，`--to-phase` 必须取 `plannedPhases` 中 plan 的真实后继，不得写死。写 append-only handoff receipt；不得手写占位路径；原子发布、派生清单计数对账、完整生命周期、render → `checklist.md` |
 
 change-name 范围变更 → 提示重命名或记 🟡WARN（→ `reference.md`）
 
@@ -119,7 +119,7 @@ change-name 范围变更 → 提示重命名或记 🟡WARN（→ `reference.md`
 | 产品边界 | `ownership.productPaths` 必须覆盖计划会修改的源文件、测试文件和构建入口；只写目录前缀或精确文件，禁止 `**` 通配。finalize 前对照任务表补齐，避免归档阶段才发现边界缺口 |
 | 空目录 | 不得为“预留目录”生成 `.gitkeep`；只有产品明确需要跟踪空目录时才能创建，并在计划中说明业务原因 |
 | 设计审批包 | 一次 blocking user confirmation 含 worktree（读 `harness.json` `defaultWorktree`） |
-| 阶段 8 | spec/plan/detail/scenarios/gate-policy/worktree 六项标准产物先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据完整覆盖六项标准产物、哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
+| 阶段 8 | 二选一且不得混用：**v2** = `hunter-harness plan finalize`（证据包 → 八 target + journal committed + plan-events.ndjson）；**legacy** = 六项标准产物先进入 staging，仅 finalizer 校验成功后发布并写唯一 `phase.end`/log，随后 `verify` 确认 start/end、收据完整覆盖六项标准产物、哈希、全部任务表和非空场景清单一致。失败均不得手工补终态 |
 | Plan 结束 | **禁止**询问执行模式；只提示 `/harness-run` |
 | 知识查询 | 阶段 1 失败不得假装已读历史，也不得改用本地索引或其他执行入口 |
 | 歧义优先检查 | 否定、对比、动作对象或范围存在多种合理解释时，最小取证后先给推荐理解并一次一问；确认前不深挖错误方向 |

package/harness/bundles/general/claude-code/harness-plan/reference.md

@@ -345,6 +345,40 @@ status: approved
 
 `plan-finalization.json.files` 必须完整列出 design、plan、implementation-detail、test-scenarios、gate-policy、worktree 六项标准输入。`verify` 对缺项、重复项、越界路径以及 symlink/junction/reparse point 一律 fail-closed；不得通过删减收据文件集后重算哈希来绕过完整性检查。
 
+### 阶段 8 v2 路径（结构化证据包流程，新 change 优先）
+
+阶段 8 v2 标准三步流（证据包自举，阶段 14 起可用）：
+
+```bash
+# 1) 规划自然产出 → 证据包（结构化身份/哈希全由冻结模块推导）
+npx hunter-harness plan evidence-pack --input .harness/changes/<cn>/meta/plan-evidence-input.json \
+  --output .harness/changes/<cn>/meta/plan-evidence.json
+# 2) 证据包 → 质量门 + 原子发布 + 事件 outbox
+npx hunter-harness plan finalize --input .harness/changes/<cn>/meta/plan-evidence.json
+```
+
+**自然输入文件**（`meta/plan-evidence-input.json`，权威定义 `packages/cli/src/commands/plan-evidence-pack.ts` 的 `EvidencePackInputFile`）由规划阶段逐步沉淀，各字段定稿时点不得倒置：
+
+| 字段 | 内容 | 定稿阶段 |
+|------|------|:---:|
+| `change_key` / `risk_signals` | change 标识 + classify 风险信号（与 `harness_gate.py classify` 一致） | 0.5/0.6 |
+| `intent` | source_input/goal/user_visible_outcome/in_scope/out_of_scope/constraints/acceptance_examples(2~5 条) | 2 |
+| `evidence_sources` | 代码图/文件证据源（source_kind/source_id/version/content_hash + refs 列表） | 3 |
+| `approval.content` | 审批包内容（recommended_design/invariants/failure_behaviors/risks/acceptance_examples(≥3) 等） | 4 |
+| `approval.approver_id` / `decided_at` | **阶段 4 真实 blocking confirmation 的确认者与时间，不得伪造** | 4 |
+| `structured_input.tasks` | task_id/objective/affected_paths/depends_on/owner_phase（refs 由命令接线，不写） | 5 |
+| `structured_input.scenarios` | scenario_id/title/acceptance/coverage_dimension/execution_level/risk_level（八维度全覆盖，缺维度由命令记 not_applicable） | 7 |
+| `structured_input.approved_scopes` | 批准边界文本列表（scope_ref 由命令按文本哈希派生） | 4 |
+| `machine` | capabilities/worktree_policy | 6 |
+| `context` | project_id/run_id/branch_name/attempt（复用 plan-run-id 与 attempt） | 0.5 |
+| `expected_baseline` | 首次发布 `{state:"absent", manifest_hash:null, generation:0}` | 8 |
+
+- **证据包**（`plan-evidence.json`）是命令推导的产物（trusted/publication/context/baseline），不得手改；任何字段变化必须改自然输入后重跑 evidence-pack。
+- **成功语义**：finalize exit 0 且 `code:"PLAN_FINALIZED"`。落盘事实 = 八 target（plans/*.md ×4 + meta/*.json ×4）+ `meta/publication-journals/<op>.json`（状态 committed）+ `meta/plan-events.ndjson`（artifact_published/phase_ended）。确定性门失败 exit 1 且 `code:"PLAN_FINALIZE_DETERMINISTIC_FAILED"` 附 findings——此时必须回到对应阶段修正规划内容，**不得**手改证据包或 staged 内容绕过。
+- **验证**：journal `state==="committed"` + 八 target 存在 + plan-events.ndjson 含两类终态事件；不得手工补写任何一项。
+- **legacy 收据**：过渡期（阶段 14 前）v2 路径不写 `plan-finalization.json`；消费方若仍读 legacy receipt，由兼容投影单独提供，不得反向要求 v2 双写。
+- **回退**：v2 自然输入不完整（如缺真实审批记录）时才允许走 Python finalizer（legacy 路径）；同一次发布不得两条路径混用。
+
 ### Plan 结束行为规则
 
 - **禁止询问执行模式**：Subagent-Driven / Inline Execution 属于 /harness-run 阶段

package/harness/bundles/general/claude-code/harness-review/SKILL.md

@@ -22,7 +22,7 @@ disallowed-tools:
   - Bash(curl *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=claude-code; do not edit -->
 # harness-review — 代码审查
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-run/SKILL.md

@@ -22,7 +22,7 @@ disallowed-tools:
   - Bash(curl *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=claude-code; do not edit -->
 # harness-run — 需求编码
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-submit/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=claude-code; do not edit -->
 # harness-submit — 最终提交（含 worktree 合并）
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-sync/SKILL.md

@@ -19,7 +19,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=claude-code; do not edit -->
 # harness-sync
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-test/SKILL.md

@@ -23,7 +23,7 @@ disallowed-tools:
   - Bash(node *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=claude-code; do not edit -->
 # harness-test — 测试执行
 
 ## Purpose

package/harness/bundles/general/claude-code/scripts/harness_events_sync.py

@@ -533,6 +533,187 @@ def run_id_for(change_dir: Path) -> str:
     return "run_" + digest
 
 
+PLAN_EVENTS_STREAM_NAME = "plan-events.ndjson"
+PLAN_EVENTS_CURSOR_NAME = "plan-events-sync-cursor.json"
+
+
+def _plan_events_path(change_dir: Path) -> Path:
+    return _state_dir(change_dir) / "meta" / PLAN_EVENTS_STREAM_NAME
+
+
+def _plan_events_cursor_path(change_dir: Path) -> Path:
+    return _state_dir(change_dir) / "meta" / PLAN_EVENTS_CURSOR_NAME
+
+
+def _load_plan_cursor(change_dir: Path, *, initial_base: int) -> tuple[int, int]:
+    path = _plan_events_cursor_path(change_dir)
+    if not path.is_file():
+        return 0, initial_base
+    try:
+        data = json.loads(path.read_text(encoding="utf-8"))
+    except (OSError, json.JSONDecodeError):
+        return 0, initial_base
+    acked = data.get("acked_lines") if isinstance(data, dict) else None
+    base = data.get("producer_seq_base") if isinstance(data, dict) else None
+    if not isinstance(acked, int) or isinstance(acked, bool) or acked < 0:
+        acked = 0
+    if not isinstance(base, int) or isinstance(base, bool) or base < 0:
+        base = initial_base
+    return acked, base
+
+
+def _save_plan_cursor(change_dir: Path, *, acked: int, base: int) -> None:
+    path = _plan_events_cursor_path(change_dir)
+    path.parent.mkdir(parents=True, exist_ok=True)
+    payload = {
+        "schema_version": 1,
+        "acked_lines": acked,
+        "producer_seq_base": base,
+        "updated_at": datetime.now(timezone.utc).isoformat(),
+    }
+    tmp = path.with_suffix(path.suffix + ".tmp")
+    tmp.write_text(json.dumps(payload, ensure_ascii=False, indent=2), encoding="utf-8")
+    os.replace(tmp, path)
+
+
+def _sync_plan_events_stream(
+    change_dir: Path,
+    *,
+    endpoint: dict[str, str],
+    rid: str,
+    resolved_key: str,
+    display_title: str,
+    main_stream_total_lines: int,
+) -> dict[str, Any]:
+    """Upload the TS PlanEvent stream (meta/plan-events.ndjson) with its own ACK cursor.
+
+    producer_seq base starts after the Python stream's total line count, so the two
+    streams never collide in (run_id, producer_seq) space. 事件语义与转换边界见
+    12-M3 文档：TS 事件按 hunter-progress-sync/v1 线上格式投影，event_type 保留
+    TS 原值（artifact_published 等）。
+    """
+    project_id = endpoint["project_id"]
+    plan_file = _plan_events_path(change_dir)
+    if not plan_file.is_file():
+        return {"ok": True, "uploaded": 0, "quarantined": 0, "reason": "no plan-events.ndjson"}
+    lines = _event_lines_snapshot(plan_file)
+    acked, base = _load_plan_cursor(change_dir, initial_base=main_stream_total_lines)
+    if acked > len(lines):
+        # 文件被截断重建：从头重放（event_id 服务端幂等去重）
+        acked = 0
+    pending = lines[acked:]
+    uploaded = 0
+    quarantined = 0
+    client_time = datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
+    for chunk_start in range(0, len(pending), MAX_BATCH_SIZE):
+        raw_chunk = pending[chunk_start:chunk_start + MAX_BATCH_SIZE]
+        batch: list[dict[str, Any]] = []
+        line_by_event_id: dict[str, int] = {}
+        local_invalid: list[tuple[str, int, str]] = []
+        for offset, raw_line in enumerate(raw_chunk, start=1):
+            line_number = acked + chunk_start + offset
+            line = raw_line.strip()
+            if not line:
+                local_invalid.append((f"{resolved_key}:plan:{line_number}", line_number, "EMPTY_LINE"))
+                continue
+            try:
+                event = json.loads(line)
+            except json.JSONDecodeError:
+                local_invalid.append((f"{resolved_key}:plan:{line_number}", line_number, "INVALID_JSON"))
+                continue
+            if not isinstance(event, dict):
+                local_invalid.append((f"{resolved_key}:plan:{line_number}", line_number, "INVALID_EVENT"))
+                continue
+            event_id = str(event.get("event_id") or f"{resolved_key}:plan:{line_number}")
+            item: dict[str, Any] = {
+                "event_id": event_id,
+                "producer_seq": base + line_number,
+                "event_type": str(event.get("type") or "unknown"),
+                "occurred_at": str(event.get("occurred_at") or client_time),
+                "payload": sanitize(event),
+            }
+            if event.get("phase") is not None:
+                item["phase"] = event.get("phase")
+            batch.append(item)
+            line_by_event_id[event_id] = line_number
+
+        if batch:
+            try:
+                result = post_json(
+                    endpoint,
+                    f"/api/v1/projects/{project_id}/runs/events:batch",
+                    {
+                        "protocol_version": "hunter-progress-sync/v1",
+                        "run_id": rid,
+                        "change_key": resolved_key,
+                        "title": display_title,
+                        "events": batch,
+                    },
+                )
+            except (urllib.error.HTTPError, urllib.error.URLError, TimeoutError, OSError, json.JSONDecodeError) as exc:
+                return {
+                    "ok": False,
+                    "error": f"plan-events batch failed: {exc}",
+                    "uploaded": uploaded,
+                    "quarantined": quarantined,
+                }
+            items = result.get("items") if isinstance(result, dict) else None
+            if not isinstance(items, list) or len(items) != len(batch):
+                return {
+                    "ok": False,
+                    "error": "plan-events batch response did not acknowledge every event",
+                    "uploaded": uploaded,
+                    "quarantined": quarantined,
+                }
+            response_by_id = {
+                str(item.get("id") or item.get("event_id") or ""): item
+                for item in items if isinstance(item, dict)
+            }
+            for event in batch:
+                event_id = str(event["event_id"])
+                item = response_by_id.get(event_id)
+                status = str((item or {}).get("status") or "")
+                if status in ACCEPTED_STATUSES:
+                    uploaded += 1
+                    continue
+                if status in QUARANTINE_STATUSES:
+                    append_quarantine(
+                        change_dir,
+                        event_id=event_id,
+                        line_number=line_by_event_id[event_id],
+                        error_code=str((item or {}).get("error_code") or status.upper()),
+                        status=status,
+                    )
+                    quarantined += 1
+                    continue
+                return {
+                    "ok": False,
+                    "error": f"plan event {event_id} was not durably acknowledged",
+                    "uploaded": uploaded,
+                    "quarantined": quarantined,
+                    "server": result,
+                }
+
+        for event_id, line_number, error_code in local_invalid:
+            append_quarantine(
+                change_dir,
+                event_id=event_id,
+                line_number=line_number,
+                error_code=error_code,
+                status="local_invalid",
+            )
+            quarantined += 1
+        _save_plan_cursor(change_dir, acked=acked + chunk_start + len(raw_chunk), base=base)
+
+    return {
+        "ok": True,
+        "uploaded": uploaded,
+        "quarantined": quarantined,
+        "acked_lines": len(lines),
+        "producer_seq_base": base,
+    }
+
+
 def post_json(endpoint: dict[str, str], path: str, body: dict[str, Any]) -> dict[str, Any]:
     url = endpoint["server_url"] + path
     data = json.dumps(body, ensure_ascii=False, separators=(",", ":")).encode("utf-8")
@@ -685,13 +866,26 @@ def sync_change(
     _migrate_pending_legacy_stream(change_dir)
     events_file = _state_dir(change_dir) / "events.ndjson"
     if not events_file.is_file():
-        return {
-            "ok": True,
+        plan_result = _sync_plan_events_stream(
+            change_dir,
+            endpoint=endpoint,
+            rid=rid,
+            resolved_key=resolved_key,
+            display_title=display_title,
+            main_stream_total_lines=0,
+        )
+        result: dict[str, Any] = {
+            "ok": bool(plan_result.get("ok")),
             "run_id": rid,
             "change_key": resolved_key,
-            "uploaded": 0,
+            "uploaded": int(plan_result.get("uploaded") or 0),
+            "quarantined": int(plan_result.get("quarantined") or 0),
             "reason": "no events.ndjson",
+            "plan_events": {key: value for key, value in plan_result.items() if key != "ok"},
         }
+        if not plan_result.get("ok"):
+            result["error"] = plan_result.get("error")
+        return result
 
     lines = _event_lines_snapshot(events_file)
     cursor = load_cursor_state(
@@ -830,7 +1024,7 @@ def sync_change(
             producer_seq_base=producer_seq_base,
         )
 
-    return {
+    main_result: dict[str, Any] = {
         "ok": True,
         "run_id": rid,
         "change_key": resolved_key,
@@ -841,6 +1035,21 @@ def sync_change(
         "producer_seq_base": producer_seq_base,
         "server": last_result,
     }
+    plan_result = _sync_plan_events_stream(
+        change_dir,
+        endpoint=endpoint,
+        rid=rid,
+        resolved_key=resolved_key,
+        display_title=display_title,
+        main_stream_total_lines=len(lines),
+    )
+    main_result["uploaded"] += int(plan_result.get("uploaded") or 0)
+    main_result["quarantined"] += int(plan_result.get("quarantined") or 0)
+    main_result["plan_events"] = {key: value for key, value in plan_result.items() if key != "ok"}
+    if not plan_result.get("ok"):
+        main_result["ok"] = False
+        main_result["error"] = plan_result.get("error")
+    return main_result
 
 
 def auto_events_sync(

package/harness/bundles/general/codebuddy/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "none",
   "agent": "codebuddy",
-  "coreHash": "7f28abc4c54931cd"
+  "coreHash": "a8db42e4cbc5c56c"
 }

package/harness/bundles/general/codebuddy/harness-archive/SKILL.md

@@ -3,7 +3,7 @@ name: harness-archive
 description: 归档所有变更产出（计划/测试报告/审查/SQL/API文档）到 .harness/archive/，含归档元数据。仅当用户显式调用
   /harness-archive 时使用；不得被其他阶段 skill 自动接续触发。
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=codebuddy; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-codebase-map/SKILL.md

@@ -3,7 +3,7 @@ name: harness-codebase-map
 description: 分析现有代码库并生成 .harness/codebase/map/
   下的结构化代码库地图。用于陌生项目理解、重大改造前梳理、harness-sync 提示 map 过期后的人工刷新。
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=codebuddy; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-knowledge-ingest/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-knowledge-ingest
 description: 确认归档 ZIP 已上传并由 Hunter Platform 在服务端解包、校验和入库。客户端不再构建或维护本地知识索引。
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=codebuddy; do not edit -->
 # harness-knowledge-ingest
 
 知识 ingest 完全由 Hunter Platform 负责。归档完成时，客户端生成一个确定性 ZIP；

package/harness/bundles/general/codebuddy/harness-knowledge-query/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-knowledge-query
 description: 在规划、实现或排查前，通过 hunter-harness CLI 查询远端项目知识库。远端不可用时直接报告不可用，不建立本地索引或离线回退。
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=codebuddy; do not edit -->
 # harness-knowledge-query
 
 项目知识以 Hunter Platform 的服务端索引为唯一真源。客户端只提交查询并消费结果：

package/harness/bundles/general/codebuddy/harness-plan/SKILL.md

@@ -3,7 +3,7 @@ name: harness-plan
 description: 将需求转化为设计文档+实施计划+完整测试场景表，必须在编码前完成。仅当用户显式调用 /harness-plan 或明确要求进入
   Harness 规划阶段时使用；不得因用户描述需求就自动触发。
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=codebuddy; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose
@@ -73,9 +73,9 @@ description: 将需求转化为设计文档+实施计划+完整测试场景表
 | 2 | 歧义优先检查 + 复杂度分级；先确认会改变实现方向的语义歧义 |
 | 3 | 按复杂度执行有预算的代码探索；简单修复不得扩散到无关模块 |
 | 4 | **设计审批包** blocking user confirmation；确认事件早于 approved 设计文档和 `meta/worktree.json` |
-| 5–6 | plan + implementation-detail + test-scenarios → `plans/` |
+| 5–6 | plan + implementation-detail + test-scenarios → `plans/`；v2 路径时同步沉淀 `meta/plan-evidence-input.json`（自然输入，字段定稿时点见 `reference.md` 阶段 8 v2 表） |
 | 7.5 | 仅 `--adversarial` 对抗评审 |
-| 8 | 在临时产物集上运行 `harness_plan_finalize.py finalize`，随后立即运行 `verify`；成功后把 finalizer 返回的绝对 `receiptPath` 原样传给 `harness_context.py close`，`--to-phase` 必须取 `plannedPhases` 中 plan 的真实后继，不得写死。写 append-only handoff receipt；不得手写占位路径；原子发布、派生清单计数对账、完整生命周期、render → `checklist.md` |
+| 8 | **v2 路径（新 change 优先）**：`npx hunter-harness plan evidence-pack --input <meta/plan-evidence-input.json> --output <meta/plan-evidence.json>`，再 `npx hunter-harness plan finalize --input <meta/plan-evidence.json>`；exit 0 且 `code:"PLAN_FINALIZED"` 即发布完成（契约见 `reference.md` 阶段 8 v2 路径）。**legacy 路径**：自然输入不完整（如缺真实审批记录）时才在临时产物集上运行 `harness_plan_finalize.py finalize`，随后立即运行 `verify`；成功后把 finalizer 返回的绝对 `receiptPath` 原样传给 `harness_context.py close`，`--to-phase` 必须取 `plannedPhases` 中 plan 的真实后继，不得写死。写 append-only handoff receipt；不得手写占位路径；原子发布、派生清单计数对账、完整生命周期、render → `checklist.md` |
 
 change-name 范围变更 → 提示重命名或记 🟡WARN（→ `reference.md`）
 
@@ -101,7 +101,7 @@ change-name 范围变更 → 提示重命名或记 🟡WARN（→ `reference.md`
 | 产品边界 | `ownership.productPaths` 必须覆盖计划会修改的源文件、测试文件和构建入口；只写目录前缀或精确文件，禁止 `**` 通配。finalize 前对照任务表补齐，避免归档阶段才发现边界缺口 |
 | 空目录 | 不得为“预留目录”生成 `.gitkeep`；只有产品明确需要跟踪空目录时才能创建，并在计划中说明业务原因 |
 | 设计审批包 | 一次 blocking user confirmation 含 worktree（读 `harness.json` `defaultWorktree`） |
-| 阶段 8 | spec/plan/detail/scenarios/gate-policy/worktree 六项标准产物先进入 staging；仅 finalizer 校验成功后发布并写唯一 `phase.end`/log；随后 `verify` 必须确认 start/end、收据完整覆盖六项标准产物、哈希、全部任务表和非空场景清单一致，失败不得手工补终态 |
+| 阶段 8 | 二选一且不得混用：**v2** = `hunter-harness plan finalize`（证据包 → 八 target + journal committed + plan-events.ndjson）；**legacy** = 六项标准产物先进入 staging，仅 finalizer 校验成功后发布并写唯一 `phase.end`/log，随后 `verify` 确认 start/end、收据完整覆盖六项标准产物、哈希、全部任务表和非空场景清单一致。失败均不得手工补终态 |
 | Plan 结束 | **禁止**询问执行模式；只提示 `/harness-run` |
 | 知识查询 | 阶段 1 失败不得假装已读历史，也不得改用本地索引或其他执行入口 |
 | 歧义优先检查 | 否定、对比、动作对象或范围存在多种合理解释时，最小取证后先给推荐理解并一次一问；确认前不深挖错误方向 |

package/harness/bundles/general/codebuddy/harness-plan/reference.md

@@ -345,6 +345,40 @@ status: approved
 
 `plan-finalization.json.files` 必须完整列出 design、plan、implementation-detail、test-scenarios、gate-policy、worktree 六项标准输入。`verify` 对缺项、重复项、越界路径以及 symlink/junction/reparse point 一律 fail-closed；不得通过删减收据文件集后重算哈希来绕过完整性检查。
 
+### 阶段 8 v2 路径（结构化证据包流程，新 change 优先）
+
+阶段 8 v2 标准三步流（证据包自举，阶段 14 起可用）：
+
+```bash
+# 1) 规划自然产出 → 证据包（结构化身份/哈希全由冻结模块推导）
+npx hunter-harness plan evidence-pack --input .harness/changes/<cn>/meta/plan-evidence-input.json \
+  --output .harness/changes/<cn>/meta/plan-evidence.json
+# 2) 证据包 → 质量门 + 原子发布 + 事件 outbox
+npx hunter-harness plan finalize --input .harness/changes/<cn>/meta/plan-evidence.json
+```
+
+**自然输入文件**（`meta/plan-evidence-input.json`，权威定义 `packages/cli/src/commands/plan-evidence-pack.ts` 的 `EvidencePackInputFile`）由规划阶段逐步沉淀，各字段定稿时点不得倒置：
+
+| 字段 | 内容 | 定稿阶段 |
+|------|------|:---:|
+| `change_key` / `risk_signals` | change 标识 + classify 风险信号（与 `harness_gate.py classify` 一致） | 0.5/0.6 |
+| `intent` | source_input/goal/user_visible_outcome/in_scope/out_of_scope/constraints/acceptance_examples(2~5 条) | 2 |
+| `evidence_sources` | 代码图/文件证据源（source_kind/source_id/version/content_hash + refs 列表） | 3 |
+| `approval.content` | 审批包内容（recommended_design/invariants/failure_behaviors/risks/acceptance_examples(≥3) 等） | 4 |
+| `approval.approver_id` / `decided_at` | **阶段 4 真实 blocking confirmation 的确认者与时间，不得伪造** | 4 |
+| `structured_input.tasks` | task_id/objective/affected_paths/depends_on/owner_phase（refs 由命令接线，不写） | 5 |
+| `structured_input.scenarios` | scenario_id/title/acceptance/coverage_dimension/execution_level/risk_level（八维度全覆盖，缺维度由命令记 not_applicable） | 7 |
+| `structured_input.approved_scopes` | 批准边界文本列表（scope_ref 由命令按文本哈希派生） | 4 |
+| `machine` | capabilities/worktree_policy | 6 |
+| `context` | project_id/run_id/branch_name/attempt（复用 plan-run-id 与 attempt） | 0.5 |
+| `expected_baseline` | 首次发布 `{state:"absent", manifest_hash:null, generation:0}` | 8 |
+
+- **证据包**（`plan-evidence.json`）是命令推导的产物（trusted/publication/context/baseline），不得手改；任何字段变化必须改自然输入后重跑 evidence-pack。
+- **成功语义**：finalize exit 0 且 `code:"PLAN_FINALIZED"`。落盘事实 = 八 target（plans/*.md ×4 + meta/*.json ×4）+ `meta/publication-journals/<op>.json`（状态 committed）+ `meta/plan-events.ndjson`（artifact_published/phase_ended）。确定性门失败 exit 1 且 `code:"PLAN_FINALIZE_DETERMINISTIC_FAILED"` 附 findings——此时必须回到对应阶段修正规划内容，**不得**手改证据包或 staged 内容绕过。
+- **验证**：journal `state==="committed"` + 八 target 存在 + plan-events.ndjson 含两类终态事件；不得手工补写任何一项。
+- **legacy 收据**：过渡期（阶段 14 前）v2 路径不写 `plan-finalization.json`；消费方若仍读 legacy receipt，由兼容投影单独提供，不得反向要求 v2 双写。
+- **回退**：v2 自然输入不完整（如缺真实审批记录）时才允许走 Python finalizer（legacy 路径）；同一次发布不得两条路径混用。
+
 ### Plan 结束行为规则
 
 - **禁止询问执行模式**：Subagent-Driven / Inline Execution 属于 /harness-run 阶段

package/harness/bundles/general/codebuddy/harness-review/SKILL.md

@@ -4,7 +4,7 @@ description: 6维度代码审查（架构/安全/规范/兼容/测试/性能）
   .harness/context-index.json）和测试场景表，在隔离上下文运行。仅当用户显式调用 /harness-review 时使用；不得在
   test 结束后自动接续执行。
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=codebuddy; do not edit -->
 # harness-review — 代码审查
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-run/SKILL.md

@@ -3,7 +3,7 @@ name: harness-run
 description: 按变更簇执行 TDD 编码循环（RED→GREEN→REFACTOR→编译验证），逐变更簇实现计划中的任务。仅当用户显式调用
   /harness-run 时使用；不得因用户提到编码/实现就自动触发，也不得被其他阶段 skill 自动接续。
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=codebuddy; do not edit -->
 # harness-run — 需求编码
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-submit/SKILL.md

@@ -3,7 +3,7 @@ name: harness-submit
 description: 最终提交封装：验证→中文 commit→提交/推送；worktree 模式含 --no-ff 合并回主分支。仅当用户显式调用
   /harness-submit（或 /harness-merge 重入合并段）时使用；用户口头说'提交/commit/push'时必须先确认，不得自动触发。
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=codebuddy; do not edit -->
 # harness-submit — 最终提交（含 worktree 合并）
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-sync/SKILL.md

@@ -4,7 +4,7 @@ description: Use when the user asks to synchronize, refresh, or validate Harness
   metadata, adapters, remote knowledge ownership, instruction entrypoints,
   config origins, or CodeGraph status.
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=codebuddy; do not edit -->
 # harness-sync
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-test/SKILL.md

@@ -3,7 +3,7 @@ name: harness-test
 description: 测试执行：读取场景表，执行单元测试+API接口测试+数据兼容验证，输出测试报告。仅当用户显式调用 /harness-test
   时使用；不得在 run 结束后自动接续执行。
 ---
-<!-- generated by harness_deploy.py; core=7f28abc4c54931cd; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=a8db42e4cbc5c56c; overlay=none; agent=codebuddy; do not edit -->
 # harness-test — 测试执行
 
 ## Purpose