@hunter-harness/workflow-harness 0.2.74 → 0.2.75

package/harness/bundles/java/cursor/scripts/harness_archive.py

@@ -8552,8 +8552,17 @@ def cmd_finalize(
     payload["knowledgeMaintenance"] = _knowledge_maintenance_from_archive_push(
         push_result
     )
-    if push_result.get("archiveStatus") == "durable":
-        payload["archiveDurability"] = "ARCHIVED_REMOTE_DURABLE"
+    remote_durability = remote_durable_archive_durability(
+        payload.get("archiveDurability"), push_result
+    )
+    if remote_durability is not None:
+        payload["archiveDurability"] = remote_durability
+        # 报告必须跟着改口：上传发生在 summary 落盘之后，不回写就会出现
+        # "回执 durable / 报告 local-only" 的自相矛盾
+        if not persist_archive_durability(summary_path, remote_durability):
+            warnings.append(
+                "远端归档已持久化，但 summary-data.json 的 archiveDurability 回写失败"
+            )
     if push_result.get("warning"):
         warnings.append(str(push_result["warning"]))
 
@@ -9121,6 +9130,50 @@ def build_archive_package(
     }
 
 
+def remote_durable_archive_durability(
+    current: Any, push_result: Mapping[str, Any]
+) -> dict[str, Any] | None:
+    """远端上传成功后的耐久性投影；未 durable 时返回 None。
+
+    summary-data.json 在归档流程早期就以 ARCHIVED_LOCAL_ONLY 写盘，而 ZIP 上传在
+    那之后才发生。此前上传成功只改内存里的 payload、还把对象覆盖成裸字符串，落盘
+    报告从没跟着改——于是同一次归档，回执说 durable、报告说 local-only，平台和用户
+    读到的是后者。这里保持对象形状并带上回执标识，供调用方同时更新 payload 与文件。
+    """
+    if str(push_result.get("archiveStatus") or "") != "durable":
+        return None
+    projected = dict(current) if isinstance(current, dict) else {}
+    projected.update({
+        "status": "ARCHIVED_REMOTE_DURABLE",
+        # 已远端持久化：不再声称"只存在于本地、可能随工作区丢失"
+        "risk": None,
+        "archiveId": push_result.get("archiveId"),
+        "uploadStatus": push_result.get("uploadStatus"),
+        "knowledgeStatus": push_result.get("knowledgeStatus"),
+    })
+    return projected
+
+
+def persist_archive_durability(summary_path: Path, durability: dict[str, Any]) -> bool:
+    """把耐久性结论回写到已落盘的 summary，其余字段原样保留。
+
+    summary-data.json 本就被排除在归档校验和覆盖之外（它在覆盖快照之后才写），
+    所以这次回写不会破坏 manifest 对账。
+    """
+    try:
+        summary = json.loads(Path(summary_path).read_text(encoding="utf-8-sig"))
+    except (OSError, json.JSONDecodeError):
+        return False
+    if not isinstance(summary, dict):
+        return False
+    summary["archiveDurability"] = durability
+    try:
+        write_json(Path(summary_path), summary)
+    except OSError:
+        return False
+    return True
+
+
 def auto_push_managed_snapshot(project_root: Path) -> dict[str, Any]:
     """Best-effort upload of rules and Codebase Map through the normal push protocol."""
     project_root = project_root.resolve()
@@ -9176,16 +9229,25 @@ def auto_push_managed_snapshot(project_root: Path) -> dict[str, Any]:
     except (json.JSONDecodeError, TypeError):
         output = None
     if completed.returncode != 0 or not isinstance(output, dict):
-        return {
+        # 失败时丢掉 stdout/stderr 等于把线索一起丢了：plan/spec 与规则、架构地图
+        # 全靠这条推送上平台，用户在平台上只会看到"东西没上去"，却无从查为什么。
+        # 保留有界的诊断片段（push 本身拒绝上传 secret，这里再截断兜底）。
+        detail = (completed.stderr or completed.stdout or "").strip()
+        failure: dict[str, Any] = {
             "ok": False,
             "skipped": False,
             "exitCode": completed.returncode,
             "reasonCode": "MANAGED_SNAPSHOT_UPLOAD_FAILED",
+            "detail": detail[-2_048:],
             "warning": (
-                "项目规则与架构地图未能同步到平台；归档不受影响，"
-                "稍后可运行 npx hunter-harness push --yes --non-interactive 重试。"
+                "项目规则与架构地图未能同步到平台（plan/spec 也随这条推送上传）；"
+                "归档不受影响，稍后可运行 npx hunter-harness push --yes --non-interactive 重试。"
             ),
         }
+        cli_code = output.get("code") or output.get("reason_code") if isinstance(output, dict) else None
+        if isinstance(cli_code, str) and cli_code:
+            failure["cliCode"] = cli_code
+        return failure
     summary = output.get("summary")
     submitted = summary.get("submitted", 0) if isinstance(summary, dict) else 0
     return {

package/harness/bundles/java/cursor/scripts/harness_change.py

@@ -1081,6 +1081,90 @@ def cmd_resolve(args: argparse.Namespace) -> int:
     )
 
 
+def declare_product_ownership(
+    project_root: Path, change_id: str, *, product_paths: list[str]
+) -> dict[str, Any]:
+    """把 `ownership.productPaths` 写进 change 契约。
+
+    这个字段此前没有任何写入方：plan 的 validate_product_ownership 只校验、缺失时
+    软放行，而归档的 compute_ownership_diff 会把全部改动判成 foreignPaths，
+    filesChanged=0 直接触发 DIFF_ZERO_WITH_NONEMPTY_COMMIT。两端口径不一致，中间
+    没工具能补——只能手改契约。这里给出正规入口。
+
+    规则与 plan 校验一致：只收精确文件或目录前缀，不接受通配。
+    """
+    resolved = resolve_change(project_root, change_id)
+    if not resolved.get("ok"):
+        return resolved
+    change_dir = Path(resolved["changeDir"])
+    normalized = sorted({
+        str(item).strip().replace("\\", "/").removeprefix("./")
+        for item in product_paths
+        if isinstance(item, str) and item.strip()
+    })
+    if not normalized:
+        return {
+            "ok": False,
+            "code": "PLAN_PRODUCT_PATHS_REQUIRED",
+            "message": "至少声明一条 productPaths（精确文件或目录前缀）",
+        }
+    unsupported = sorted(p for p in normalized if any(ch in p for ch in "*?[]"))
+    if unsupported:
+        return {
+            "ok": False,
+            "code": "PLAN_PRODUCT_PATHS_GLOB_UNSUPPORTED",
+            "message": "productPaths 只接受精确文件或目录前缀，不支持通配：" + ", ".join(unsupported),
+            "unsupportedPaths": unsupported,
+        }
+
+    context_path = change_dir / CHANGE_CONTEXT_REL
+    try:
+        context = _read_json(context_path)
+    except (OSError, json.JSONDecodeError) as exc:
+        return {"ok": False, "code": "CHANGE_CONTEXT_INVALID", "message": str(exc)}
+    if not isinstance(context, dict):
+        return {"ok": False, "code": "CHANGE_CONTEXT_INVALID", "message": "change-context.json 不是对象"}
+
+    ownership = context.get("ownership")
+    ownership = dict(ownership) if isinstance(ownership, dict) else {}
+    if ownership.get("productPaths") == normalized:
+        return {
+            "ok": True,
+            "code": "PRODUCT_OWNERSHIP_DECLARED",
+            "idempotent": True,
+            "changeId": change_id,
+            "productPaths": normalized,
+            "path": str(context_path),
+        }
+    ownership["productPaths"] = normalized
+    context["ownership"] = ownership
+    _write_json(context_path, context)
+    return {
+        "ok": True,
+        "code": "PRODUCT_OWNERSHIP_DECLARED",
+        "idempotent": False,
+        "changeId": change_id,
+        "productPaths": normalized,
+        "path": str(context_path),
+    }
+
+
+def cmd_declare_ownership(args: argparse.Namespace) -> int:
+    project = resolve_main_project_root()
+    payload = declare_product_ownership(
+        project, args.change, product_paths=list(args.product_path)
+    )
+    if payload.get("ok"):
+        emit(payload, as_json=bool(args.json))
+        return 0
+    return emit_error(
+        str(payload.get("code", "PRODUCT_OWNERSHIP_FAILED")),
+        str(payload.get("message", "declare ownership failed")),
+        as_json=bool(args.json),
+        extra={k: v for k, v in payload.items() if k not in {"ok", "message"}},
+    )
+
+
 def cmd_migrate(args: argparse.Namespace) -> int:
     project = resolve_main_project_root()
     if not args.change:
@@ -1451,6 +1535,17 @@ def build_parser() -> argparse.ArgumentParser:
     p_migrate.add_argument("--change", required=True)
     p_migrate.set_defaults(func=cmd_migrate)
 
+    p_ownership = sub.add_parser(
+        "declare-ownership", parents=[shared],
+        help="declare ownership.productPaths so archive can project the real diff",
+    )
+    p_ownership.add_argument("--change", required=True)
+    p_ownership.add_argument(
+        "--product-path", required=True, action="append",
+        help="exact file or directory prefix (no globs); repeatable",
+    )
+    p_ownership.set_defaults(func=cmd_declare_ownership)
+
     p_claim = sub.add_parser("claim", parents=[shared])
     p_claim.add_argument("--change", required=True)
     p_claim.add_argument("--phase", required=True)

package/harness/bundles/java/cursor/scripts/harness_runtime.py

@@ -157,6 +157,35 @@ def _private_evidence_root(explicit: Path | None = None) -> Path:
             Path.home() / ".harness" / "private-evidence").expanduser().resolve()
 
 
+def private_evidence_root_for(source: Path, explicit: Path | None = None) -> Path:
+    """私有隔离根：必须与源同一驱动器。
+
+    `os.replace` 跨驱动器会直接失败（Windows 上是 WinError 17）。默认根
+    `~/.harness/private-evidence` 在 Windows 落 C 盘，项目在别的盘时隔离必然失败
+    ——而隔离是归档的硬前置，等于整条归档路被堵死。同盘时沿用配置/默认值；不同盘
+    时退到源所在驱动器根下的 `.harness-private-evidence`（天然在任何项目根之外）。
+    POSIX 上 drive 恒为空串，行为不变。
+    """
+    source = source.expanduser().resolve()
+    preferred = _private_evidence_root(explicit)
+    if preferred.drive.lower() == source.drive.lower():
+        return preferred
+    return (Path(source.anchor) / ".harness-private-evidence").resolve()
+
+
+def _infer_project_root(change_root: Path) -> Path | None:
+    """change 目录形如 `<project>/.harness/changes/<name>`：取路径里 `.harness` 段的父目录。
+
+    不做"向上找存在 .harness 的目录"式搜索——用户 HOME 下通常也有 `.harness`，
+    那样会把 HOME 误判成项目根，把合法的临时隔离位置一并拒掉。
+    """
+    parts = change_root.parts
+    for index in range(len(parts) - 1, 0, -1):
+        if parts[index] == ".harness":
+            return Path(*parts[:index])
+    return None
+
+
 def _secure_private_path(path: Path, *, directory: bool) -> str:
     """Best-effort owner-only permissions, with an explicit ACL result on Windows."""
     mode = 0o700 if directory else 0o600
@@ -288,11 +317,12 @@ def quarantine_sensitive_evidence(
     change_root: Path,
     reason: str = "sensitive evidence",
     private_root: Path | None = None,
+    project_root: Path | None = None,
 ) -> dict[str, Any]:
     """Atomically move legacy plaintext evidence outside any publishable tree."""
     source = source.expanduser().resolve()
     change_root = change_root.expanduser().resolve()
-    private = _private_evidence_root(private_root)
+    private = private_evidence_root_for(source, private_root)
     if not source.is_file():
         return {"ok": False, "reasonCode": "SENSITIVE_EVIDENCE_SOURCE_MISSING", "sourcePath": str(source)}
     if private == change_root or private.is_relative_to(change_root):
@@ -301,6 +331,25 @@ def quarantine_sensitive_evidence(
             "reasonCode": "SENSITIVE_EVIDENCE_QUARANTINE_FAILED",
             "error": "private quarantine root must be outside the publishable change root",
         }
+    # 归档的密钥扫描门禁按**项目根**判定（SECRET_SCAN_PRIVATE_PATH_IN_COPY_ROOT）。
+    # 这里此前只看 change_root，比门禁宽——于是隔离"成功"了，门禁再拒一次，调用方
+    # 得多试一轮才找到合法位置。对齐到同一条边界，错就错在当场。
+    resolved_project = (
+        project_root.expanduser().resolve()
+        if project_root is not None
+        else _infer_project_root(change_root)
+    )
+    if resolved_project is not None and (
+        private == resolved_project or private.is_relative_to(resolved_project)
+    ):
+        return {
+            "ok": False,
+            "reasonCode": "SENSITIVE_EVIDENCE_QUARANTINE_FAILED",
+            "error": (
+                "private quarantine root must be outside the project root "
+                f"({resolved_project}); archive's secret scan rejects paths inside it"
+            ),
+        }
     try:
         raw_digest = "sha256:" + hashlib.sha256(source.read_bytes()).hexdigest()
         quarantine_dir = private / uuid.uuid4().hex
@@ -1850,6 +1899,37 @@ def doctor(project: Path, change_dir: Path, *, agent: str) -> dict[str, Any]:
     return {"ok": True, "action": "doctor", **payload}
 
 
+def cmd_quarantine_evidence(args: argparse.Namespace) -> dict[str, Any]:
+    """隔离命令：把明文敏感证据原子移出可发布树，逐条返回结果。
+
+    单条失败不吞掉其余条目——归档阻断项常常一次报多个文件，逐条报告才能一轮修完。
+    """
+    project = Path(args.project).expanduser().resolve()
+    change_root = Path(args.change_dir).expanduser().resolve()
+    private_root = Path(args.private_root) if args.private_root else None
+    entries: list[dict[str, Any]] = []
+    for raw in args.file:
+        candidate = Path(raw)
+        source = candidate if candidate.is_absolute() else change_root / candidate
+        outcome = quarantine_sensitive_evidence(
+            source,
+            change_root=change_root,
+            reason=args.reason,
+            private_root=private_root,
+            project_root=project,
+        )
+        entries.append({"file": raw, **outcome})
+    failed = [item for item in entries if not item.get("ok")]
+    return {
+        "ok": not failed,
+        "action": "quarantine-evidence",
+        "code": "SENSITIVE_EVIDENCE_QUARANTINED" if not failed else "SENSITIVE_EVIDENCE_QUARANTINE_FAILED",
+        "quarantined": len(entries) - len(failed),
+        "failed": len(failed),
+        "entries": entries,
+    }
+
+
 def build_parser() -> argparse.ArgumentParser:
     parser = argparse.ArgumentParser(prog="harness_runtime.py")
     sub = parser.add_subparsers(dest="command", required=True)
@@ -1858,6 +1938,24 @@ def build_parser() -> argparse.ArgumentParser:
     p_doctor.add_argument("--change-dir", required=True)
     p_doctor.add_argument("--agent", choices=sorted(_ADAPTERS), required=True)
     p_doctor.add_argument("--json", action="store_true")
+    # 归档的 SENSITIVE_EVIDENCE_UNQUARANTINED 是硬阻断，此前却没有任何命令行入口
+    # ——调用方只能写 python -c + sys.path hack 去调内部函数。
+    p_quarantine = sub.add_parser(
+        "quarantine-evidence",
+        help="move plaintext sensitive evidence outside the publishable tree",
+    )
+    p_quarantine.add_argument("--project", required=True)
+    p_quarantine.add_argument("--change-dir", required=True)
+    p_quarantine.add_argument(
+        "--file", required=True, action="append",
+        help="path to quarantine, relative to --change-dir or absolute; repeatable",
+    )
+    p_quarantine.add_argument("--reason", default="sensitive evidence")
+    p_quarantine.add_argument(
+        "--private-root", default=None,
+        help="override the private root; must be outside the project root and on its drive",
+    )
+    p_quarantine.add_argument("--json", action="store_true")
     p_adapter = sub.add_parser("adapter")
     p_adapter.add_argument("--agent", choices=sorted(_ADAPTERS), required=True)
     p_adapter.add_argument("--change", required=True)
@@ -1899,6 +1997,8 @@ def main(argv: list[str] | None = None) -> int:
     try:
         if args.command == "doctor":
             result = doctor(Path(args.project), Path(args.change_dir), agent=args.agent)
+        elif args.command == "quarantine-evidence":
+            result = cmd_quarantine_evidence(args)
         elif args.command == "adapter":
             result = {"ok": True, "action": "adapter", **adapter_worktree(args.agent, args.change)}
         elif args.command == "_worker":

package/harness/manifests/general/claude-code.json

@@ -2,7 +2,7 @@
   "schema_version": 2,
   "profile": "general",
   "adapter": "claude-code",
-  "bundle_version": "0.2.63",
+  "bundle_version": "0.2.64",
   "requires": {
     "minimumCliVersion": "0.2.83",
     "capabilities": [
@@ -25,7 +25,7 @@
   "files": [
     {
       "path": ".harness-build.json",
-      "sha256": "508071a88969f33e65aeaacb12b44b31549e7ad10961e526f7837adaddf4a680"
+      "sha256": "a42e749fe13076d44bd1c0a391cc03bf54715366e97bf78c73bdaac2a97fdcfe"
     },
     {
       "path": "agents/harness-evaluator.md",
@@ -97,7 +97,7 @@
     },
     {
       "path": "harness-archive/SKILL.md",
-      "sha256": "9f8787c11e0f438a5c99b48b43d2d34c1c9b8a0f06b5aae224a79a6d3fa296b2"
+      "sha256": "d691be87ddb1c580f2ead657ae995e138a7243102d4b79abfe85bbe79fb52aa5"
     },
     {
       "path": "harness-archive/templates/summary-data-template.json",
@@ -113,7 +113,7 @@
     },
     {
       "path": "harness-codebase-map/SKILL.md",
-      "sha256": "99f0391decb569498e33828c4641b8b92ccde2ac73b99b8514ab5178b7ed30f4"
+      "sha256": "b3ee77bc1fbb62144e3c110b7221ebebb795d9767f9fc95b7abb6a607b7360cb"
     },
     {
       "path": "harness-codebase-map/templates/ARCHITECTURE.md",
@@ -153,11 +153,11 @@
     },
     {
       "path": "harness-knowledge-ingest/SKILL.md",
-      "sha256": "6399b98f5a67131e4e00c9545f68bedee451f87c4a636cfbeea4b9acfd47417b"
+      "sha256": "14bbad41df10fa45ac834f033cd4e253ecec1df14f4d9f104c587d4f2b77120f"
     },
     {
       "path": "harness-knowledge-query/SKILL.md",
-      "sha256": "17f53253cc1af6792c93ab9fe3f119a5713e32e33e43d33073567ca61875f2a3"
+      "sha256": "9884b71b86f896e20992550f414edec296745aa5f31604ab6207cd6d38b6c958"
     },
     {
       "path": "harness-plan/checklist.md",
@@ -173,15 +173,15 @@
     },
     {
       "path": "harness-plan/SKILL.md",
-      "sha256": "cea38c85d519d47e836f67ed2baf878c1e9330c3e592df3af48a136f9303eb0a"
+      "sha256": "dcfe3c1dda5db8a941d98f22dce8e463768a47867322b43bc5ffbc0579dbcca4"
     },
     {
       "path": "harness-pull/SKILL.md",
-      "sha256": "039ce1febbe454a4c6d5a31178bfa9ce6833f2f6cf622a76dcad94af694475e0"
+      "sha256": "0ae038c5c759f59fa3a56d737fed2d237b9faf18966e3c7be09a5fc22e44115e"
     },
     {
       "path": "harness-push/SKILL.md",
-      "sha256": "48ea504e400c5836807f6031d46cb0d2d87d3e10e66753d4b0bcb919581d3958"
+      "sha256": "8fd58884bf40a2c951ab16770cfc4e36ee2cebde23aefecc963340d5e8d55949"
     },
     {
       "path": "harness-review/checklist.md",
@@ -197,7 +197,7 @@
     },
     {
       "path": "harness-review/SKILL.md",
-      "sha256": "544d6b2bd611501887479409be632e6bde8cb4a308dcd87e19ff492d92282b7c"
+      "sha256": "8ea253a47d213f68c21f1b73fc71b9f274c48c9c7de6872a9a90899e6c621328"
     },
     {
       "path": "harness-run/checklist.md",
@@ -213,7 +213,7 @@
     },
     {
       "path": "harness-run/SKILL.md",
-      "sha256": "13f883dbc20d001e677c58e091437a2a7994eba7360fe77461b4935c227ae35d"
+      "sha256": "d22f809e9b67ec73f48c94ed487221b4d5187e902eb0fd6c5cf398d2415faf56"
     },
     {
       "path": "harness-submit/checklist.md",
@@ -225,7 +225,7 @@
     },
     {
       "path": "harness-submit/SKILL.md",
-      "sha256": "8e20be97b57cc9d65b170d5de648e6ccc8052bce72a7f35b6a2ea794fdbf3e22"
+      "sha256": "9d2503fce0e76040884c2a7ff8c26300b543677d1f51a318fcd6f5f51507e0f6"
     },
     {
       "path": "harness-sync/reference.md",
@@ -233,7 +233,7 @@
     },
     {
       "path": "harness-sync/SKILL.md",
-      "sha256": "d0ef3c9780b716fec23a80e8a60fc8727d1a7bed72819fbd02ee6bc963233cab"
+      "sha256": "a9545ec049fadad0d66a1fd556b5727a2e45865a32a48db1e51e876ce8032d34"
     },
     {
       "path": "harness-test/checklist.md",
@@ -257,7 +257,7 @@
     },
     {
       "path": "harness-test/SKILL.md",
-      "sha256": "8782c417c4abc5f39079555e880f0717b71ff7ab4a9df486f24dc787b1bf4c06"
+      "sha256": "530d4dba0ba0ddfec8a43bd76ba09bcf0916476fb4e3404712776860348665ae"
     },
     {
       "path": "protocols/archive-report-protocol.md",
@@ -329,11 +329,11 @@
     },
     {
       "path": "scripts/harness_archive.py",
-      "sha256": "c3d565456f7bc441dbd7d58541e49b698381c594b874ff186e8ff62ac1efc67e"
+      "sha256": "c6b93114f962573707ec2167157cc669132746023d536f3fabb732f7572e2e0e"
     },
     {
       "path": "scripts/harness_change.py",
-      "sha256": "74899226cc85704c1f556e2036fc586385b5896cbaa1bd9cf7efed05a19b89d6"
+      "sha256": "f4e2d4ab9ee13e93cf200555b6b116342ad044dcdd5dfa25fa7e7ca435dd1882"
     },
     {
       "path": "scripts/harness_check_gate.py",
@@ -437,7 +437,7 @@
     },
     {
       "path": "scripts/harness_runtime.py",
-      "sha256": "3866980763961f178f44fc04330854b4a3e05867900418316f876bf7f4fca1b7"
+      "sha256": "493edc124eda6b79be6242c7d94ec8d619cb14ff134afbfa154795749374091c"
     },
     {
       "path": "scripts/harness_service.py",

package/harness/manifests/general/codebuddy.json

@@ -2,7 +2,7 @@
   "schema_version": 2,
   "profile": "general",
   "adapter": "codebuddy",
-  "bundle_version": "0.2.63",
+  "bundle_version": "0.2.64",
   "requires": {
     "minimumCliVersion": "0.2.83",
     "capabilities": [
@@ -25,7 +25,7 @@
   "files": [
     {
       "path": ".harness-build.json",
-      "sha256": "b43d7cca40bde8b1d064df982fa6c6c61c557e4235089f9254d2e48ae3abd9a0"
+      "sha256": "7058b4264221310318eab1081ecd4c10d2b17b83b94ca8d311feb1450fb60c9a"
     },
     {
       "path": "agents/harness-evaluator.md",
@@ -97,7 +97,7 @@
     },
     {
       "path": "harness-archive/SKILL.md",
-      "sha256": "5c8b4d0406f1c3d7be792905b46eef071ea0e3585125020893afe21cbc9dca22"
+      "sha256": "56d5271ebd5a576ead88e4d8a92c913b7ee4450ae46b3ac32ac755a9bfa76242"
     },
     {
       "path": "harness-archive/templates/summary-data-template.json",
@@ -113,7 +113,7 @@
     },
     {
       "path": "harness-codebase-map/SKILL.md",
-      "sha256": "0fb71a136ea578b317c5b1705751c27277ef93b5a5cdb9d3dbf7c9afab82595d"
+      "sha256": "ad79910c150ccaf9706fff7fcf537992106b160397f47f9af1fe40394c1a93d5"
     },
     {
       "path": "harness-codebase-map/templates/ARCHITECTURE.md",
@@ -153,11 +153,11 @@
     },
     {
       "path": "harness-knowledge-ingest/SKILL.md",
-      "sha256": "33a3c0c41724b73061ef56bed9d151f497b165bac87d2da606863c47b10198a2"
+      "sha256": "47ff08d39ee839db6764e0320dd0ba2698d9ee4d6bf5d46497db48e72f555a00"
     },
     {
       "path": "harness-knowledge-query/SKILL.md",
-      "sha256": "88c80cd1f8eba31ffbd95d08a47e1f94995cf881b6103b79354473526a9e934a"
+      "sha256": "a86cef4d702df050f5ea091bf018d84314e137874517d56253adf0eac50d815f"
     },
     {
       "path": "harness-plan/checklist.md",
@@ -173,15 +173,15 @@
     },
     {
       "path": "harness-plan/SKILL.md",
-      "sha256": "1bc47a6b3981893b4082c2466f136211ba84bbf89ce211868d82f1dd6ae69b60"
+      "sha256": "499763d1efec58657c310240dc70edacc9d13df79035e04791bc156cc3405dc9"
     },
     {
       "path": "harness-pull/SKILL.md",
-      "sha256": "7ae616fbdbb520cfc6b36b9fac6ce66e2fa1deec71f94afbbaba7444ef86c7dd"
+      "sha256": "798508be5872846a13e16ca6cb089aca62cf867b514449a747042e07927a766b"
     },
     {
       "path": "harness-push/SKILL.md",
-      "sha256": "aba016e3fa4380ce02fad6bc4ae2be23467e5f2f5903102360f666e67eea80d6"
+      "sha256": "3eaacc2913a98ab447f0ca899c4a529a0e379bdaaab811eb07b17ea5ad5b5528"
     },
     {
       "path": "harness-review/checklist.md",
@@ -197,7 +197,7 @@
     },
     {
       "path": "harness-review/SKILL.md",
-      "sha256": "ce8af843e30d03729fbca5b4758190647a30dd0b622c0e5a37749782b8e29c92"
+      "sha256": "0e1206da0fd1dc77a6c7bdb93342bf2d3653c8b338508a5c7960246eb2c0b31d"
     },
     {
       "path": "harness-run/checklist.md",
@@ -213,7 +213,7 @@
     },
     {
       "path": "harness-run/SKILL.md",
-      "sha256": "bc714ae34ed2a063cf98f636aa69174fad72865b8db7f8597818667867409c94"
+      "sha256": "a87b8d2903d3a6276ccddaf6b8c8e6daf6911518cdf58abc39a4c77d487f7100"
     },
     {
       "path": "harness-submit/checklist.md",
@@ -225,7 +225,7 @@
     },
     {
       "path": "harness-submit/SKILL.md",
-      "sha256": "99759111a3a2dd8727610bf773b83824c788462d46fa92dbf3541583f680a6cc"
+      "sha256": "5155ac9bed73219c8325838f09e9f4320039d744ed05836dd1d35756396b799c"
     },
     {
       "path": "harness-sync/reference.md",
@@ -233,7 +233,7 @@
     },
     {
       "path": "harness-sync/SKILL.md",
-      "sha256": "2af992431dffd1b0139523c7489e8c6a709436787f6039607c2876ef219a1012"
+      "sha256": "a0114e0bed4bf952ba2e1db550d593b08d679d80836d73ccb9e5b5407ee466b9"
     },
     {
       "path": "harness-test/checklist.md",
@@ -257,7 +257,7 @@
     },
     {
       "path": "harness-test/SKILL.md",
-      "sha256": "f38520b1f0bd2ec78d291ee3f5c923e926916fe5807e8a724e6b75c1a2221fa4"
+      "sha256": "c7ceb20972e8b94ffc93a364d14223b976324d3e417b53114d3dfc2b3c94902e"
     },
     {
       "path": "protocols/archive-report-protocol.md",
@@ -329,11 +329,11 @@
     },
     {
       "path": "scripts/harness_archive.py",
-      "sha256": "c3d565456f7bc441dbd7d58541e49b698381c594b874ff186e8ff62ac1efc67e"
+      "sha256": "c6b93114f962573707ec2167157cc669132746023d536f3fabb732f7572e2e0e"
     },
     {
       "path": "scripts/harness_change.py",
-      "sha256": "74899226cc85704c1f556e2036fc586385b5896cbaa1bd9cf7efed05a19b89d6"
+      "sha256": "f4e2d4ab9ee13e93cf200555b6b116342ad044dcdd5dfa25fa7e7ca435dd1882"
     },
     {
       "path": "scripts/harness_check_gate.py",
@@ -437,7 +437,7 @@
     },
     {
       "path": "scripts/harness_runtime.py",
-      "sha256": "3866980763961f178f44fc04330854b4a3e05867900418316f876bf7f4fca1b7"
+      "sha256": "493edc124eda6b79be6242c7d94ec8d619cb14ff134afbfa154795749374091c"
     },
     {
       "path": "scripts/harness_service.py",