@hunter-harness/workflow-harness 0.2.67 → 0.2.69

package/harness/bundles/general/codex/contracts/workflow-policy.json

@@ -8,7 +8,10 @@
     "processTreeCleanup": true,
     "detachedProcessPreflight": true,
     "confirmationFlag": "--confirm-resource-intensive",
-    "confirmationRequiredProfiles": ["system", "full"],
+    "confirmationRequiredProfiles": [
+      "system",
+      "full"
+    ],
     "resourceIntensiveModules": [
       "test_harness_integration.py",
       "test_harness_service.py"
@@ -34,140 +37,392 @@
   "riskTiers": {
     "fast": {
       "description": "Low-risk docs/comments/non-behavioral config; no API/DB/security/concurrency. Policy notes: checkpointRules apply only when meta/implementation-checkpoints.json defines the entry for this change; missing file/entry = disabled (gate must not require --task).",
-      "defaultPhases": ["plan", "run", "archive"],
-      "requiredValidations": ["unitTest"],
-      "conditionalStages": ["review", "package", "apidoc"],
-      "upgradeTriggers": ["api-change", "security", "migration", "concurrency", "breaking-contract"]
+      "defaultPhases": [
+        "plan",
+        "run",
+        "archive"
+      ],
+      "requiredValidations": [
+        "unitTest"
+      ],
+      "conditionalStages": [
+        "review",
+        "package",
+        "apidoc"
+      ],
+      "upgradeTriggers": [
+        "api-change",
+        "security",
+        "migration",
+        "concurrency",
+        "breaking-contract"
+      ]
     },
     "standard": {
       "description": "Ordinary production code and non-breaking API/features. Policy notes: requiredValidations may close DEGRADED when ledger status=NOT_RUN and evidence starts with 'DEGRADED: <reason>' (close code CLOSED_DEGRADED, phase status <= WARN); do not fake OK with unrelated tests.",
-      "defaultPhases": ["plan", "run", "test", "submit", "archive"],
-      "requiredValidations": ["compile", "unitTest", "unitTestFull"],
-      "conditionalStages": ["review", "package", "apidoc"],
-      "upgradeTriggers": ["auth", "security", "delete", "migration", "concurrency", "artifact-protocol", "shared-state", "breaking-api"]
+      "defaultPhases": [
+        "plan",
+        "run",
+        "test",
+        "submit",
+        "archive"
+      ],
+      "requiredValidations": [
+        "compile",
+        "unitTest",
+        "unitTestFull"
+      ],
+      "conditionalStages": [
+        "review",
+        "package",
+        "apidoc"
+      ],
+      "upgradeTriggers": [
+        "auth",
+        "security",
+        "delete",
+        "migration",
+        "concurrency",
+        "artifact-protocol",
+        "shared-state",
+        "breaking-api"
+      ]
     },
     "full": {
       "description": "Auth/security/delete/migration/concurrency/service protocol/shared state/breaking contracts. Policy notes: (1) DEGRADED close — ledger status=NOT_RUN and evidence 'DEGRADED: <reason>' → CLOSED_DEGRADED with phase <= WARN; never fake OK with unrelated tests. (2) checkpointRules — only when plan created meta/implementation-checkpoints.json entry; missing file/entry = not enabled, gate must not require --task.",
-      "defaultPhases": ["plan", "run", "test", "review", "submit", "archive"],
-      "requiredValidations": ["compile", "unitTest", "unitTestFull", "apiTest"],
-      "conditionalStages": ["package", "apidoc"],
+      "defaultPhases": [
+        "plan",
+        "run",
+        "test",
+        "review",
+        "submit",
+        "archive"
+      ],
+      "requiredValidations": [
+        "compile",
+        "unitTest",
+        "unitTestFull",
+        "apiTest"
+      ],
+      "conditionalStages": [
+        "package",
+        "apidoc"
+      ],
       "upgradeTriggers": []
     }
   },
   "skills": {
     "harness-plan": {
       "phase": "plan",
-      "inputs": ["requirements", "change-context"],
-      "artifacts": ["plans", "spec", "test-scenarios", "implementation-detail"],
-      "events": ["phase.start", "phase.end", "decision"],
+      "inputs": [
+        "requirements",
+        "change-context"
+      ],
+      "artifacts": [
+        "plans",
+        "spec",
+        "test-scenarios",
+        "implementation-detail"
+      ],
+      "events": [
+        "phase.start",
+        "phase.end",
+        "decision"
+      ],
       "allowedInteractions": [],
-      "capabilities": ["risk-classify-plan"]
+      "capabilities": [
+        "risk-classify-plan"
+      ]
     },
     "harness-run": {
       "phase": "run",
-      "inputs": ["implementation-detail", "state-snapshot"],
-      "artifacts": ["code", "verification-ledger"],
-      "events": ["phase.start", "phase.end", "command", "verification"],
+      "inputs": [
+        "implementation-detail",
+        "state-snapshot"
+      ],
+      "artifacts": [
+        "code",
+        "verification-ledger"
+      ],
+      "events": [
+        "phase.start",
+        "phase.end",
+        "command",
+        "verification"
+      ],
       "allowedInteractions": [],
-      "capabilities": ["gate-begin", "gate-close", "ledger-record"]
+      "capabilities": [
+        "gate-begin",
+        "gate-close",
+        "ledger-record"
+      ]
     },
     "harness-test": {
       "phase": "test",
-      "inputs": ["test-scenarios", "verification-ledger"],
-      "artifacts": ["test-reports", "verification-ledger"],
-      "events": ["phase.start", "phase.end", "command", "verification"],
-      "allowedInteractions": ["resource-intensive-test-confirmation"],
-      "capabilities": ["gate-begin", "gate-close", "test-guard", "ledger-record", "resource-safe-test-runner"]
+      "inputs": [
+        "test-scenarios",
+        "verification-ledger"
+      ],
+      "artifacts": [
+        "test-reports",
+        "verification-ledger"
+      ],
+      "events": [
+        "phase.start",
+        "phase.end",
+        "command",
+        "verification"
+      ],
+      "allowedInteractions": [
+        "resource-intensive-test-confirmation"
+      ],
+      "capabilities": [
+        "gate-begin",
+        "gate-close",
+        "test-guard",
+        "ledger-record",
+        "resource-safe-test-runner"
+      ]
     },
     "harness-review": {
       "phase": "review",
-      "inputs": ["diff", "verification-ledger", "test-reports"],
-      "artifacts": ["review-report"],
-      "events": ["phase.start", "phase.end", "issue", "artifact"],
+      "inputs": [
+        "diff",
+        "verification-ledger",
+        "test-reports"
+      ],
+      "artifacts": [
+        "review-report"
+      ],
+      "events": [
+        "phase.start",
+        "phase.end",
+        "issue",
+        "artifact"
+      ],
       "allowedInteractions": [],
-      "capabilities": ["gate-begin", "gate-close"]
+      "capabilities": [
+        "gate-begin",
+        "gate-close"
+      ]
     },
     "harness-submit": {
       "phase": "submit",
-      "inputs": ["verification-ledger", "test-tracking"],
-      "artifacts": ["git-integration"],
-      "events": ["phase.start", "phase.end", "command", "artifact"],
-      "allowedInteractions": ["merge-conflict-resolution"],
-      "capabilities": ["gate-begin", "gate-close", "integration-lock", "test-guard-stage"]
+      "inputs": [
+        "verification-ledger",
+        "test-tracking"
+      ],
+      "artifacts": [
+        "git-integration"
+      ],
+      "events": [
+        "phase.start",
+        "phase.end",
+        "command",
+        "artifact"
+      ],
+      "allowedInteractions": [
+        "merge-conflict-resolution"
+      ],
+      "capabilities": [
+        "gate-begin",
+        "gate-close",
+        "integration-lock",
+        "test-guard-stage"
+      ]
     },
     "harness-package": {
-      "profiles": ["java"],
+      "profiles": [
+        "java"
+      ],
       "phase": "package",
-      "inputs": ["verification-ledger", "final-commit"],
-      "artifacts": ["deploy-artifact"],
-      "events": ["phase.start", "phase.end", "command", "verification"],
+      "inputs": [
+        "verification-ledger",
+        "final-commit"
+      ],
+      "artifacts": [
+        "deploy-artifact"
+      ],
+      "events": [
+        "phase.start",
+        "phase.end",
+        "command",
+        "verification"
+      ],
       "allowedInteractions": [],
-      "capabilities": ["gate-begin", "gate-close", "ledger-can-reuse"]
+      "capabilities": [
+        "gate-begin",
+        "gate-close",
+        "ledger-can-reuse"
+      ]
     },
     "harness-archive": {
       "phase": "archive",
-      "inputs": ["events", "verification-ledger", "reports"],
-      "artifacts": ["summary-data", "archive-manifest"],
-      "events": ["phase.start", "phase.end", "artifact"],
+      "inputs": [
+        "events",
+        "verification-ledger",
+        "reports"
+      ],
+      "artifacts": [
+        "summary-data",
+        "archive-manifest"
+      ],
+      "events": [
+        "phase.start",
+        "phase.end",
+        "artifact"
+      ],
       "allowedInteractions": [],
       "capabilities": []
     },
     "harness-sync": {
       "phase": "sync",
-      "inputs": ["canonical-harness"],
-      "artifacts": ["bundle-projection"],
-      "events": ["phase.start", "phase.end", "command"],
+      "inputs": [
+        "canonical-harness"
+      ],
+      "artifacts": [
+        "bundle-projection"
+      ],
+      "events": [
+        "phase.start",
+        "phase.end",
+        "command"
+      ],
       "allowedInteractions": [],
       "capabilities": []
     },
     "harness-codebase-map": {
       "phase": "codebase-map",
-      "inputs": ["project-root"],
-      "artifacts": ["codebase-map"],
-      "events": ["phase.start", "phase.end"],
+      "inputs": [
+        "project-root"
+      ],
+      "artifacts": [
+        "codebase-map"
+      ],
+      "events": [
+        "phase.start",
+        "phase.end"
+      ],
       "allowedInteractions": [],
       "capabilities": []
     },
     "harness-knowledge-query": {
       "phase": "knowledge-query",
-      "inputs": ["knowledge-index"],
+      "inputs": [
+        "knowledge-index"
+      ],
       "artifacts": [],
-      "events": ["phase.start", "phase.end"],
+      "events": [
+        "phase.start",
+        "phase.end"
+      ],
       "allowedInteractions": [],
-      "capabilities": ["read-only"]
+      "capabilities": [
+        "read-only"
+      ]
     },
     "harness-knowledge-ingest": {
       "phase": "knowledge-ingest",
-      "inputs": ["archive-evidence"],
-      "artifacts": ["knowledge-index"],
-      "events": ["phase.start", "phase.end", "command"],
+      "inputs": [
+        "archive-evidence"
+      ],
+      "artifacts": [
+        "knowledge-index"
+      ],
+      "events": [
+        "phase.start",
+        "phase.end",
+        "command"
+      ],
       "allowedInteractions": [],
       "capabilities": []
     },
     "harness-apidoc": {
-      "profiles": ["java"],
+      "profiles": [
+        "java"
+      ],
       "phase": "apidoc",
-      "inputs": ["api-diff"],
-      "artifacts": ["api-contract-summary"],
-      "events": ["phase.start", "phase.end", "artifact"],
+      "inputs": [
+        "api-diff"
+      ],
+      "artifacts": [
+        "api-contract-summary"
+      ],
+      "events": [
+        "phase.start",
+        "phase.end",
+        "artifact"
+      ],
       "allowedInteractions": [],
-      "capabilities": ["gate-begin", "gate-close"]
+      "capabilities": [
+        "gate-begin",
+        "gate-close"
+      ]
+    },
+    "harness-push": {
+      "phase": "sync",
+      "inputs": [
+        "remote-baseline",
+        "local-content"
+      ],
+      "artifacts": [
+        "push-receipt"
+      ],
+      "events": [],
+      "allowedInteractions": [
+        "upload-confirmation"
+      ],
+      "capabilities": [
+        "remote-sync-push@1"
+      ]
+    },
+    "harness-pull": {
+      "phase": "sync",
+      "inputs": [
+        "remote-snapshot"
+      ],
+      "artifacts": [
+        "pull-receipt"
+      ],
+      "events": [],
+      "allowedInteractions": [
+        "conflict-decision"
+      ],
+      "capabilities": [
+        "remote-sync-pull@1"
+      ]
     }
   },
   "requiredArtifacts": {
-    "plan": ["plans", "spec"],
+    "plan": [
+      "plans",
+      "spec"
+    ],
     "run": [],
-    "test": ["tests/test-report-*.md"],
-    "review": ["reports/review/review-report-*.md"],
+    "test": [
+      "tests/test-report-*.md"
+    ],
+    "review": [
+      "reports/review/review-report-*.md"
+    ],
     "submit": [],
     "package": [],
-    "archive": ["reports/final/summary-data.json"]
+    "archive": [
+      "reports/final/summary-data.json"
+    ]
   },
   "requiredValidations": {
-    "run": ["compile", "unitTest"],
-    "test": ["unitTestFull"],
+    "run": [
+      "compile",
+      "unitTest"
+    ],
+    "test": [
+      "unitTestFull"
+    ],
     "submit": [],
-    "package": ["package"]
+    "package": [
+      "package"
+    ]
   },
   "validationPhases": {
     "compile": "run",
@@ -180,50 +435,108 @@
   },
   "capabilityGates": {
     "deployment": {
-      "signals": ["deploy-required"],
-      "requiredStages": ["package"],
-      "requiredValidations": ["package"]
+      "signals": [
+        "deploy-required"
+      ],
+      "requiredStages": [
+        "package"
+      ],
+      "requiredValidations": [
+        "package"
+      ]
     },
     "container": {
-      "signals": ["install-verification"],
-      "requiredStages": ["package"],
-      "requiredValidations": ["package"]
+      "signals": [
+        "install-verification"
+      ],
+      "requiredStages": [
+        "package"
+      ],
+      "requiredValidations": [
+        "package"
+      ]
     },
     "api": {
-      "signals": ["api-diff-present"],
-      "requiredStages": ["apidoc"],
-      "requiredValidations": ["apiTest"]
+      "signals": [
+        "api-diff-present"
+      ],
+      "requiredStages": [
+        "apidoc"
+      ],
+      "requiredValidations": [
+        "apiTest"
+      ]
     },
     "database": {
-      "signals": ["migration"],
+      "signals": [
+        "migration"
+      ],
       "requiredStages": [],
-      "requiredValidations": ["dbCompatibility"]
+      "requiredValidations": [
+        "dbCompatibility"
+      ]
     }
   },
   "conditionalStages": {
     "review": {
-      "tiers": ["standard", "full"],
-      "signals": ["security", "auth", "breaking-api", "shared-state"]
+      "tiers": [
+        "standard",
+        "full"
+      ],
+      "signals": [
+        "security",
+        "auth",
+        "breaking-api",
+        "shared-state"
+      ]
     },
     "package": {
-      "tiers": ["standard", "full"],
-      "signals": ["deploy-required", "install-verification"]
+      "tiers": [
+        "standard",
+        "full"
+      ],
+      "signals": [
+        "deploy-required",
+        "install-verification"
+      ]
     },
     "apidoc": {
-      "tiers": ["standard", "full"],
-      "signals": ["api-diff-present"]
+      "tiers": [
+        "standard",
+        "full"
+      ],
+      "signals": [
+        "api-diff-present"
+      ]
     }
   },
   "interactionWhitelist": {
     "global": [],
-    "harness-test": ["resource-intensive-test-confirmation"],
-    "harness-submit": ["merge-conflict-resolution"],
-    "harness-plan": ["risk-confirmation"]
+    "harness-test": [
+      "resource-intensive-test-confirmation"
+    ],
+    "harness-submit": [
+      "merge-conflict-resolution"
+    ],
+    "harness-plan": [
+      "risk-confirmation"
+    ]
   },
   "checkpointRules": {
     "foundation-gate": {
-      "afterTasks": [1, 2, 3, 4],
-      "beforeTasks": [6, 7, 8, 9, 10],
+      "afterTasks": [
+        1,
+        2,
+        3,
+        4
+      ],
+      "beforeTasks": [
+        6,
+        7,
+        8,
+        9,
+        10
+      ],
       "blocking": true,
       "requiredReport": "reports/review/foundation-gate-review.md",
       "reviewerTool": "codex"

package/harness/bundles/general/codex/harness-archive/SKILL.md

@@ -3,7 +3,7 @@ name: harness-archive
 description: 归档所有变更产出（计划/测试报告/审查/SQL/API文档）到 .harness/archive/，含归档元数据。仅当用户显式调用
   /harness-archive 时使用；不得被其他阶段 skill 自动接续触发。
 ---
-<!-- generated by harness_deploy.py; core=45223df609c53354; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=afd4467d2eb5fe62; overlay=none; agent=codex; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/general/codex/harness-codebase-map/SKILL.md

@@ -3,7 +3,7 @@ name: harness-codebase-map
 description: 分析现有代码库并生成 .harness/codebase/map/
   下的结构化代码库地图。用于陌生项目理解、重大改造前梳理、harness-sync 提示 map 过期后的人工刷新。
 ---
-<!-- generated by harness_deploy.py; core=45223df609c53354; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=afd4467d2eb5fe62; overlay=none; agent=codex; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/general/codex/harness-knowledge-ingest/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-knowledge-ingest
 description: 确认归档 ZIP 已上传并由 Hunter Platform 在服务端解包、校验和入库。客户端不再构建或维护本地知识索引。
 ---
-<!-- generated by harness_deploy.py; core=45223df609c53354; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=afd4467d2eb5fe62; overlay=none; agent=codex; do not edit -->
 # harness-knowledge-ingest
 
 知识 ingest 完全由 Hunter Platform 负责。归档完成时，客户端生成一个确定性 ZIP；

package/harness/bundles/general/codex/harness-knowledge-query/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-knowledge-query
 description: 在规划、实现或排查前，通过 hunter-harness CLI 查询远端项目知识库。远端不可用时直接报告不可用，不建立本地索引或离线回退。
 ---
-<!-- generated by harness_deploy.py; core=45223df609c53354; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=afd4467d2eb5fe62; overlay=none; agent=codex; do not edit -->
 # harness-knowledge-query
 
 项目知识以 Hunter Platform 的服务端索引为唯一真源。客户端只提交查询并消费结果：

package/harness/bundles/general/codex/harness-plan/SKILL.md

@@ -3,7 +3,7 @@ name: harness-plan
 description: 将需求转化为设计文档+实施计划+完整测试场景表，必须在编码前完成。仅当用户显式调用 /harness-plan 或明确要求进入
   Harness 规划阶段时使用；不得因用户描述需求就自动触发。
 ---
-<!-- generated by harness_deploy.py; core=45223df609c53354; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=afd4467d2eb5fe62; overlay=none; agent=codex; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose
@@ -66,7 +66,7 @@ description: 将需求转化为设计文档+实施计划+完整测试场景表
 | 阶段 | 动作 |
 |------|------|
 | 0 | 用当前解释器运行 `harness_runtime.py doctor`，后续消费绝对 argv；git status；脏工作区 → baseline 隔离 + `decision`，不询问 |
-| 0.5 | 确定英文 `change-name` 后，根据需求生成一次简洁的中文展示标题（建议 6～24 个可见字符，保留必要产品名），执行 `harness_context.py prepare --phase plan --executor <tool> [--change <id>] --title "<中文标题>" --json`；英文名继续作为目录与稳定标识。立即运行一次 `harness_state.py capture --project . --change-dir "<executionRoot>" --json`，把此时 HEAD 固定为不可变 `changeBase`。以其唯一 change/executionRoot 初始化 plan-run-id 与 attempt（首次为 1），用同一身份追加 `phase.start`；从第一条知识查询起保留事件证据，并在 finalizer 中复用该身份 |
+| 0.5 | 确定英文 `change-name` 后，根据需求生成一次简洁的中文展示标题（建议 6～24 个可见字符，保留必要产品名），执行 `harness_context.py prepare --phase plan --executor <tool> [--change <id>] --title "<中文标题>" --json`；英文名继续作为目录与稳定标识。立即运行一次 `harness_state.py capture --project . --change-dir "<executionRoot>" --json`，把此时 HEAD 固定为不可变 `changeBase`。以其唯一 change/executionRoot 初始化 plan-run-id 与 attempt（首次为 1）；run-id 必须小写字母开头（v2 identity 规则，裸 UUID 有 10/16 概率数字开头被拒）——统一用 `plan_<uuid>` 形状（contracts `createPlanRunId()`），用同一身份追加 `phase.start`；从第一条知识查询起保留事件证据，并在 finalizer 中复用该身份 |
 | 0.6 | 使用 `classify` 返回的默认阶段和项目能力生成 `plannedPhases`，向用户用中文说明可选阶段；确认后运行 `harness_context.py configure-plan --project . --change <id> --phases "plan,run,...,archive" --operator <tool> --reason "<中文原因>" --json`。无 Git 或不需要提交时不得加入 `submit`；快速迭代默认 `plan,run,archive`。省略项由脚本写入 `skippedPhases`，不得伪造阶段事件 |
 | 1 | 直接执行一次 `npx hunter-harness knowledge query "<用户需求原文>" --limit 10 --json`。这是唯一执行入口，不扫描技能目录、不查找其他脚本；失败记 `issue` 并继续，不建立本地索引或离线回退 |
 | 2 | 歧义优先检查 + 复杂度分级；先确认会改变实现方向的语义歧义 |

package/harness/bundles/general/codex/harness-plan/reference.md

@@ -299,7 +299,7 @@ status: approved
 
    > 如果 frontmatter 缺失，后续 run/test/review/submit/archive 不得依赖模型猜测 change-name。
 
-4. **初始化结构化事件**：确定 change-name 后，立即生成稳定的 `<plan-run-id>`（同一次 plan 尝试内不得改变；首次 `<attempt>` 为 `1`），运行 `harness_events.py append --change-dir ... --phase plan --type phase.start --run-id <plan-run-id> --attempt <attempt>`。finalizer 必须复用完全相同的 `--run-id` / `--attempt`，否则 verify 会按生命周期身份 fail-closed。脚本负责建立父目录和 `events.ndjson`；执行日志在 `phase.end` 时由完整事件流渲染，任何阶段都不得直接用 Write/Edit 维护该投影。
+4. **初始化结构化事件**：确定 change-name 后，立即生成稳定的 `<plan-run-id>`（必须小写字母开头：v2 identity 规则，裸 UUID 有 10/16 概率数字开头被拒——统一用 `plan_<uuid>` 形状，contracts `createPlanRunId()`；同一次 plan 尝试内不得改变；首次 `<attempt>` 为 `1`），运行 `harness_events.py append --change-dir ... --phase plan --type phase.start --run-id <plan-run-id> --attempt <attempt>`。finalizer 必须复用完全相同的 `--run-id` / `--attempt`，否则 verify 会按生命周期身份 fail-closed。脚本负责建立父目录和 `events.ndjson`；执行日志在 `phase.end` 时由完整事件流渲染，任何阶段都不得直接用 Write/Edit 维护该投影。
 
 5. **保存计划文件**：计划文件包含 YAML frontmatter（含 change-name），保存到：
    - `.harness/changes/<change-name>/plans/<change-name>-plan.md`（简洁任务表）