@hunter-harness/workflow-harness 0.4.10 → 0.4.12

package/harness/bundles/general/claude-code/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "none",
   "agent": "claude-code",
-  "coreHash": "7c08c3960f78dc1a"
+  "coreHash": "dc9fe149ebf1952b"
 }

package/harness/bundles/general/claude-code/harness-archive/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-codebase-map/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-execute/SKILL.md

@@ -23,7 +23,7 @@ disallowed-tools:
   - Bash(node *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
 # harness-execute — 执行（编码 + 验证）
 
 > 2026-08 阶段合并：原 `run`（编码）与 `test`（验证）合并为单一 `execute` 阶段；
@@ -81,12 +81,14 @@ disallowed-tools:
 ## Workflow 概要
 
 0. 加载上下文：先 `harness_context.py prepare --project . --change <id> --phase execute --executor <tool> --json`（`--project` 必填），再 `harness_context.py begin --project . --change <id> --phase execute --executor <tool> --json` 校验交接，最后运行 **`harness_gate.py begin --phase execute --change <id>`**。旧名 `--phase run` / `--phase test` 仍被接受并归一为 execute。<br>Git Bash 注意：`--note` 等字符串参数**不要以 `/` 开头**（MSYS 会把它当路径改写成 `C:/Program Files/Git/...`）；以 `/` 开头时先 `MSYS_NO_PATHCONV=1`。<br>**交接凭证不必手工补**：v2 计划的 `plan finalize` 不写 context 事务，`prepare` 会在检测到 committed 的 `meta/publication-journals/*.json` 时自动补录 `plan → execute` 凭证（凭证带 `bootstrapSource=plan_publication_journal` 留痕）。仍报 `HANDOFF_REQUIRED`/`LEGACY_BOOTSTRAP_REQUIRED` 说明**没有**这份发布证据——回到 plan 阶段确认发布是否真的完成，**不得**自己拼 `classify + configure-plan + close` 造凭证。<br>**Fixback** 不得拼装底层步骤，必须只调用一次 `harness_fixback.py launch-review --project . --change <id> --change-dir <change-dir> --executor <tool> --skills-root <skills-root> --product-identity <当前产品身份> --json`；返回 `FIXBACK_NOTHING_TO_APPLY` 时直接报告并停止。禁止手写 `events.ndjson` / `phase.end`。
+
+**Fixback 步骤序列**（0.4.11 起文档化；每步失败都有 recoveryAction）：launch-review 启动批次 → 托管 RED 会话（`harness_runtime.py run-start --verification fixback-red --product-identity <批次 baseProductIdentity，缺省自动注入> -- ...`）→ `harness_fixback.py evidence-template` 生成证据 + `register-evidence` 注册 → 修复 → GREEN 会话同法 → 逐 issue `resolve-issue` → `harness_review.py write-dispositions` 处置 → affected 验证会话 + review 收据 → `harness_fixback.py close --change-dir <change-dir> --batch-id <批次> --final-product-identity <身份>`（批次关闭会同步把 fixback-session 置 CLOSED）→ `harness_gate.py close --phase execute`（fixback 回环自动派生回 submit）。Windows 上命令名写 `mvn` 会 WinError 2——0.4.11 起 launcher 自动解析 .cmd/.exe，更早版本请写全路径。
 0.5. **测试基础设施探测**与**命令执行模式 preflight** → `testing-reference.md`「命令执行模式 preflight」；测试基线已由 gate begin 内部建立，不得再次执行 guard begin
 1. **变更簇 TDD** — `protocols.md` `run-tdd-protocol`；批量 RED/GREEN；按需 `change-cluster-review-protocol`
 2. 构建验证 + **仅**通过 `harness_ledger.py record` 写 ledger（禁止 Write/Edit `verification-ledger.json`）；profile 缺失或陈旧时先 `harness_preflight.py detect --project . --json`；`record --project . --profile-input <key>` 从同一 target 推导 scope、coverage、规范命令与输入闭包
 3. **验证执行**：单元测试可复用则跳过（`harness_ledger.py can-reuse`）；接口测试**强制批量执行器**一次跑完全部场景；数据兼容验证按场景表执行 → `testing-reference.md`
 4. **场景覆盖检查**（场景表映射，禁止用用例数冒充场景数）
-5. **关门检查**（10 项）→ 只执行一次 `harness_gate.py close`；`--to-phase` 可省略——计划后继唯一（排除 fixback 自环）时自动派生并交接（输出含 `derivedToPhase`）。仅 fixback 回环时显式传 `--to-phase execute`。该命令内部关闭 test guard、写 `phase.end`、释放租约、写 handoff 并补传事件；不得再单独调用 test-guard/context close。失败时按结构化 `recoveryAction` 原样重试，已完成步骤幂等复用。
+5. **关门检查**（10 项）→ 只执行一次 `harness_gate.py close`；`--to-phase` 可省略——计划后继唯一（排除 fixback 自环）时自动派生并交接（输出含 `derivedToPhase`）。仅 fixback 回环时显式传 `--to-phase execute`；fixback 批次的 execute 关门自动派生 review 的后继（submit），不会错误地再回一轮 review（0.4.11 起）。该命令内部关闭 test guard、写 `phase.end`、释放租约、写 handoff 并补传事件；不得再单独调用 test-guard/context close。失败时按结构化 `recoveryAction` 原样重试，已完成步骤幂等复用。
 
 **阶段归属规则**：只用 `ownerPhase=execute` 的任务和场景判定本阶段结果。`ownerPhase=review`/`submit` 的场景按计划留给后续阶段属于正常移交，出现在关门返回值的 `deferred` 里，不阻断 execute。合并前 `ownerPhase=run`/`test` 的旧清单经别名表归一为 execute，在 execute 关门时一并到期。
 

package/harness/bundles/general/claude-code/harness-knowledge-ingest/SKILL.md

@@ -8,7 +8,7 @@ disallowed-tools:
   - Bash(git *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
 # harness-knowledge-ingest
 
 知识 ingest 完全由 Hunter Platform 负责。归档完成时，客户端生成一个确定性 ZIP；

package/harness/bundles/general/claude-code/harness-knowledge-query/SKILL.md

@@ -8,7 +8,7 @@ disallowed-tools:
   - Bash(git *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
 # harness-knowledge-query
 
 项目知识以 Hunter Platform 的服务端索引为唯一真源。客户端只提交查询并消费结果：

package/harness/bundles/general/claude-code/harness-plan/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-pull/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
 # harness-pull — 从 Hunter Platform 下拉与恢复
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-push/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
 # harness-push — 上传到 Hunter Platform
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-review/SKILL.md

@@ -22,7 +22,7 @@ disallowed-tools:
   - Bash(curl *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
 # harness-review — 代码审查
 
 ## Purpose
@@ -75,6 +75,17 @@ review 默认优先在独立上下文执行，避免主会话已形成的实现
 
 无隔离能力、定义损坏、spawn 失败、空返回或只有元数据时，不重试，立即由主会话按同一 6 维度检查清单完成审查。无论是否委派，都必须追加一条结构化 `decision` 事件：`--execution-mode delegated|inline` 标明执行方式；委派时写 `--executor-agent harness-reviewer --decision-reason-code REVIEW_DELEGATED`；回退时只写一个 `--fallback-reason-code REVIEW_INLINE_UNAVAILABLE|REVIEW_INLINE_SPAWN_FAILED|REVIEW_INLINE_INVALID_RESULT`。`decision` 和 `reason` 必须用中文完整说明，禁止把原因码拼进正文。正常主会话评审是可接受结果，不显示成流程故障；`fallbackPolicy=inline-no-retry`。
 
+完整示例（委派路径，可直接复制改参）：
+
+```bash
+python <skills-root>/scripts/harness_events.py append --change-dir ".harness/changes/<cn>" \
+  --phase review --type decision --execution-mode delegated \
+  --executor-agent harness-reviewer --decision-reason-code REVIEW_DELEGATED \
+  --decision "已使用独立评审完成 6 维度审查" --reason "固定 reviewer 可用，避免主会话实现结论影响审查" --json
+```
+
+注意：`decision` 事件**不接受** `--name`/`--status`（那是 verification 的字段）；`issue` 事件必须带 `--severity`。
+
 项目规模小、风险低或没有 CodeGraph 都不是跳过独立评审的理由。原因码是稳定机器字段，仅用于协议与技术详情；面向用户的事件摘要必须写成「已使用独立评审」或「当前环境没有可用的隔离评审能力，已由主会话完成评审」等中文说明。
 
 3. **持久化报告与事实 sidecar（强制，主会话）** — Agent 返回后主会话 Write 到 `reports/review/review-report-*.md`，并调用 `python <skills-root>/scripts/harness_review.py scaffold --change-dir <change-dir> [--run-id <id>]` 生成 findings 写入骨架（runId 缺省从 events.ndjson 最新 review phase.start 推断），补齐每一条发现后经 `harness_review.py write-findings --change-dir <change-dir> --stdin` 落地。每条发现必须填写 `fixbackAction=code|manual|workflow`：只有确实需要修改产品代码的项使用 `code`；人工验收用 `manual`；流程、暂存或工具使用建议用 `workflow`。权威计数来自 `reports/review/review-findings.json`，不是 Markdown。任一写入缺失 → 评审未完整结束，不得关门。

package/harness/bundles/general/claude-code/harness-submit/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
 # harness-submit — 最终提交（含 worktree 合并）
 
 ## Purpose
@@ -83,7 +83,7 @@ worktree 合并前必须运行 `harness_change.py integration-lock acquire --run
 4. **提交方式** — 主目录：blocking user confirmation 三选项（commit+push / 仅本地 / 取消）；**worktree：固定仅本地 commit**
 5. **commit-message.txt** ⚠️ — 展示 staged、diff stat、完整中文 message；用户确认
 6. **commit / push** — `git commit -F`；主目录按选项 push（push 前 fetch 检查远端）；无 upstream 时允许仅本地 commit。commit 后立即重新运行 `harness_archive.py certify-local`：若验证输入未变化，脚本把候选从提交前身份安全重绑定到最终 commit，不得重跑测试或手工复制账本；**worktree：只 commit，记录 local hash**
-7. **收尾** — `harness_gate.py close --phase submit --status ... --to-phase <实际计划后继>`；通常后继为 Archive，但不得显示“等待 merge”或固定写死。主目录停止并提示真实下一阶段；worktree 才接续下方同一 Submit 内的合并流程。
+7. **收尾** — `harness_gate.py close --phase submit --status ... --to-phase <实际计划后继>`；通常后继为 Archive，但不得显示“等待 merge”或固定写死。主目录停止并提示真实下一阶段；worktree 才接续下方同一 Submit 内的合并流程。`--json` 的 stdout 只含 JSON；关门摘要横幅在 stderr——管道给 `jq` 时**不要** `2>&1` 合并（stderr 不缓冲会先写，合并后横幅会混进 JSON 流）。
 
 详细步骤见 `checklist.md`。
 

package/harness/bundles/general/claude-code/harness-sync/SKILL.md

@@ -19,7 +19,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
 # harness-sync
 
 ## Purpose

package/harness/bundles/general/claude-code/scripts/harness_archive.py

@@ -3010,8 +3010,12 @@ def check_status(
                 if archive_intent == "record-only"
                 else str(ci_gate.get("code") or "PRODUCT_CANDIDATE_NOT_VERIFIED")
             ),
-            "message": str(
-                ci_gate.get("message") or "product candidate not verified"
+            "message": (
+                # A-2：record-only 豁免阻断，但原文透传授权要求会误读成阻断指引
+                "record-only 归档不要求发布授权，本项仅记录："
+                + str(ci_gate.get("message") or "product candidate not verified")
+                if archive_intent == "record-only"
+                else str(ci_gate.get("message") or "product candidate not verified")
             ),
         }
         if archive_intent == "record-only":
@@ -3104,15 +3108,18 @@ def check_status(
         code = str(issue.get("code") or "REPORT_ADEQUACY_FAILED")
         if any(item.get("code") == code for item in blockers):
             continue
-        blockers.append(
-            {
-                "code": code,
-                "message": adequacy_messages_zh.get(
-                    code,
-                    str(issue.get("message") or "归档报告不完整"),
-                ),
-            }
-        )
+        blocker: dict[str, Any] = {
+            "code": code,
+            "message": adequacy_messages_zh.get(
+                code,
+                str(issue.get("message") or "归档报告不完整"),
+            ),
+        }
+        # A-3：出路必须随阻断项下发（对齐 SKILL 二·A 表），不再让使用者翻文档
+        next_action = issue.get("nextAction")
+        if isinstance(next_action, str) and next_action.strip():
+            blocker["recoveryAction"] = next_action.strip()
+        blockers.append(blocker)
     for issue in report_adequacy.get("issues") or []:
         if not isinstance(issue, dict) or issue.get("severity") != "warning":
             continue

package/harness/bundles/general/claude-code/scripts/harness_events.py

@@ -898,14 +898,18 @@ def validate_append_event(args: argparse.Namespace) -> tuple[str, str] | None:
             f"EVENT_REQUIRED_FIELD: {event_type} requires " + ", ".join(missing),
         )
     allowed = _EVENT_ALLOWED_FIELDS[event_type]
-    for field in OPTIONAL_FIELDS:
-        value = getattr(args, field, None)
-        if value is not None and field not in allowed:
-            return (
-                "EVENT_FIELD_NOT_ALLOWED",
-                "EVENT_FIELD_NOT_ALLOWED: "
-                f"{event_type} does not accept --{field.replace('_', '-')}",
-            )
+    disallowed = [
+        f"--{field.replace('_', '-')}"
+        for field in OPTIONAL_FIELDS
+        if getattr(args, field, None) is not None and field not in allowed
+    ]
+    if disallowed:
+        # 一次列出全部不被接受的字段——逐个报错会让调用方每字段往返一轮（R-4）
+        return (
+            "EVENT_FIELD_NOT_ALLOWED",
+            f"EVENT_FIELD_NOT_ALLOWED: {event_type} does not accept "
+            + ", ".join(disallowed),
+        )
     for field, length in (("trace_id", 32), ("span_id", 16), ("parent_span_id", 16)):
         value = getattr(args, field, None)
         if value is not None and not re.fullmatch(rf"[0-9a-f]{{{length}}}", str(value)):

package/harness/bundles/general/claude-code/scripts/harness_fixback.py

@@ -75,6 +75,14 @@ def _write_json(path: Path, value: dict[str, Any]) -> None:
         temporary.unlink(missing_ok=True)
 
 
+def _read_json(path: Path) -> Any:
+    try:
+        value = json.loads(path.read_text(encoding="utf-8-sig"))
+    except (OSError, json.JSONDecodeError):
+        return None
+    return value
+
+
 def _load(change_dir: Path, batch_id: str) -> dict[str, Any]:
     path = _batch_path(change_dir, batch_id)
     try:
@@ -1186,7 +1194,21 @@ def evidence_template(
         "provenance": provenance,
     }
     target = Path(out) if out else Path("runtime") / f"fixback-{resolved_id}.json"
-    path = target if target.is_absolute() else (change_dir / target)
+    if target.is_absolute():
+        path = target
+    else:
+        # F-3：与 ledger --out 同一类坑——相对路径已含 change-dir 前缀时直接拼
+        # change_dir 会产生嵌套幽灵目录（2026-08-31 实测）。前缀命中按 cwd 解析。
+        cwd = Path.cwd().resolve()
+        change_resolved = change_dir.resolve()
+        if _is_within(change_resolved, [cwd]):
+            change_rel = change_resolved.relative_to(cwd)
+            if target.parts[: len(change_rel.parts)] == change_rel.parts:
+                path = cwd / target
+            else:
+                path = change_dir / target
+        else:
+            path = change_dir / target
     path = path.resolve()
     if not _is_within(path, [change_dir.resolve(), state_root, _project_root(change_dir)]):
         return {
@@ -1708,6 +1730,20 @@ def close_batch(
         }
     )
     _write_json(_batch_path(change_dir, batch_id), batch)
+    # F-5：批次关闭会同步把托管会话置为 CLOSED——否则 session 永远 ACTIVE，
+    # 后续 launch-review 被 CONTEXT_PREPARATION_ACTIVE 幂等保护误拦（2026-08-31
+    # demo-datasource 实测）。
+    session_file = _session_path(change_dir)
+    session = _read_json(session_file)
+    if (
+        isinstance(session, dict)
+        and session.get("batchId") == batch_id
+        and session.get("status") == "ACTIVE"
+    ):
+        session["status"] = "CLOSED"
+        session["nextStep"] = "done"
+        session["updatedAt"] = closed_at
+        _write_json(session_file, session)
     return batch
 
 

package/harness/bundles/general/claude-code/scripts/harness_gate.py

@@ -2085,6 +2085,52 @@ def _terminal_matches_context_session(
     )
 
 
+def _repair_handoff_missing_lease(
+    project: Path,
+    change_id: str,
+    args: argparse.Namespace,
+    *,
+    status: str,
+    handoff: dict[str, Any],
+) -> dict[str, Any] | None:
+    """S-1：交接因 context 租约缺失失败时自愈一次。
+
+    阶段租约仍持有但 context 租约已被消费/缺失时，close_transition 只能报
+    CONTEXT_LEASE_REQUIRED——原样重跑永远撞同一错误（2026-08-31 submit 实测，
+    recoveryAction 声称“会重试”但重试无自愈能力）。这里补齐缺口：
+    prepare_context 幂等重建本阶段 context 租约后重试一次交接，与
+    `harness_context.py handoff` 命令同源（同 prepare→close 顺序）。
+    """
+    if handoff.get("code") != "CONTEXT_LEASE_REQUIRED":
+        return None
+    executor = getattr(args, "executor", None)
+    if not executor:
+        view = hctx.context_view(project, change_id)
+        current = view.get("current") if isinstance(view, dict) else None
+        executor = (
+            str(current.get("executor"))
+            if isinstance(current, dict) and current.get("executor")
+            else None
+        )
+    if not executor:
+        return None
+    try:
+        prepared = hctx.prepare_context(
+            project,
+            change=change_id,
+            phase=args.phase,
+            executor=executor,
+        )
+    except Exception:
+        return None
+    if not prepared.get("ok"):
+        return None
+    repaired = _close_context_handoff(project, change_id, args, status=status)
+    if isinstance(repaired, dict):
+        repaired = {**repaired, "leaseRepaired": True}
+    return repaired
+
+
 def _close_context_handoff(
     project: Path,
     change_id: str,
@@ -3105,6 +3151,20 @@ def _resume_closed_phase(
             for candidate in hctx.allowed_next_phases(project, change_id, args.phase)
             if hp.resolve_phase_name(candidate) != args.phase
         ]
+        # F-4：续跑路径同样——fixback 回环的 execute 关门应回 review 的后继
+        if args.phase == "execute" and isinstance(transitions, list) and transitions:
+            latest_t = transitions[-1]
+            if (
+                isinstance(latest_t, dict)
+                and hp.resolve_phase_name(latest_t.get("fromPhase")) == "review"
+                and hp.resolve_phase_name(latest_t.get("toPhase")) == "execute"
+                and latest_t.get("trigger") == "review-fixback"
+            ):
+                candidates = [
+                    candidate
+                    for candidate in hctx.allowed_next_phases(project, change_id, "review")
+                    if hp.resolve_phase_name(candidate) != args.phase
+                ]
         if to_phase is None and len(candidates) == 1:
             # 计划后继唯一（排除 fixback 自环）：close 的意图没有歧义，直接补跑 handoff
             to_phase = candidates[0]
@@ -3140,6 +3200,14 @@ def _resume_closed_phase(
                 status=close_status,
             )
     monitor = _sync_after_phase_close(project, change_dir)
+    if isinstance(handoff, dict) and not handoff.get("ok"):
+        # S-1：续跑路径同样的自愈
+        repaired = _repair_handoff_missing_lease(
+            project, change_id, args,
+            status=close_status, handoff=handoff,
+        )
+        if repaired is not None:
+            handoff = repaired
     if isinstance(handoff, dict) and not handoff.get("ok"):
         return emit_error(
             "PHASE_HANDOFF_PENDING",
@@ -3691,10 +3759,25 @@ def cmd_close(args: argparse.Namespace) -> int:
             and context_view.get("ok")
             and isinstance(context_view.get("current"), dict)
         ):
+            # F-4：fixback 回环（最新交接是 review→execute 且 trigger=
+            # review-fixback）关门时，后继不是再来一轮 review，而是 review
+            # 当时的计划后继（submit）。不按此处理会把 transitions 链写成
+            # …→review→execute→review 的语义错乱（2026-08-31 实测）。
+            source_phase = args.phase
+            transitions = context_view.get("transitions") or []
+            if args.phase == "execute" and transitions:
+                latest = transitions[-1]
+                if (
+                    isinstance(latest, dict)
+                    and hp.resolve_phase_name(latest.get("fromPhase")) == "review"
+                    and hp.resolve_phase_name(latest.get("toPhase")) == "execute"
+                    and latest.get("trigger") == "review-fixback"
+                ):
+                    source_phase = "review"
             forward = [
                 candidate
                 for candidate in hctx.allowed_next_phases(
-                    project, str(resolved["changeId"]), args.phase
+                    project, str(resolved["changeId"]), source_phase
                 )
                 if hp.resolve_phase_name(candidate) != args.phase
             ]
@@ -3708,6 +3791,15 @@ def cmd_close(args: argparse.Namespace) -> int:
         status=close_status,
     )
     platform_monitor = _sync_after_phase_close(project, change_dir)
+    if isinstance(context_handoff, dict) and not context_handoff.get("ok"):
+        # S-1：context 租约缺失时自愈一次（prepare 幂等重建 + 重试交接），
+        # 修复前“原样重跑”永远撞同一个 CONTEXT_LEASE_REQUIRED
+        repaired = _repair_handoff_missing_lease(
+            project, str(resolved["changeId"]), args,
+            status=close_status, handoff=context_handoff,
+        )
+        if repaired is not None:
+            context_handoff = repaired
     if isinstance(context_handoff, dict) and not context_handoff.get("ok"):
         record_gate_blocked(
             change_dir,
@@ -3730,7 +3822,12 @@ def cmd_close(args: argparse.Namespace) -> int:
                 "platformMonitor": platform_monitor,
                 "recoveryAction": (
                     "租约仍持有，无需重新 claim——原样重跑同一 close 命令即可幂等续跑"
-                    "（phase.end 已落会跳过，handoff 会重试）"
+                    "（phase.end 已落会跳过，handoff 会重试；context 租约缺失时会自动"
+                    "补建）。仍失败时用一条命令补齐交接："
+                    "harness_context.py handoff --project . "
+                    f"--change {resolved['changeId']} --to-phase "
+                    f"{getattr(args, 'to_phase', None) or '<后继阶段>'} "
+                    "--executor <tool> --json"
                 ),
             },
         )

package/harness/bundles/general/claude-code/scripts/harness_ledger.py

@@ -2565,6 +2565,20 @@ def cmd_can_reuse(args: argparse.Namespace) -> int:
     return 0
 
 
+def _profile_input_missing_warning(
+    verification: str, target: Any, profile_input: str | None
+) -> str | None:
+    """S-4：profile 声明了 target 却没带 --profile-input 时提前预警。"""
+    if profile_input or not isinstance(target, dict):
+        return None
+    return (
+        "PROFILE_INPUT_MISSING: 未传 --profile-input，本条记录缺少 profile 推导的"
+        " scope/coverage/inputsHash 身份字段，can-reuse 将无法复用。建议重跑："
+        f"record --verification {verification} --profile-input <key> --project . "
+        "（key 见 build-profile.json verificationInputs）"
+    )
+
+
 def cmd_record(args: argparse.Namespace) -> int:
     as_json = bool(args.json)
     verbose = bool(getattr(args, "verbose", False))
@@ -2612,6 +2626,11 @@ def cmd_record(args: argparse.Namespace) -> int:
             "verificationGraph.targets",
             as_json=as_json,
         )
+    # S-4：profile 声明了 target 却没带 --profile-input，条目缺身份字段，
+    # can-reuse 事后才报 MISSING_FIELDS——只能重跑一遍（2026-08-31 实测）。
+    profile_input_missing_warn = _profile_input_missing_warning(
+        verification, target, profile_input
+    )
     if profile_input:
         resolved_files, err = expand_profile_input_files(project_root, profile_input)
         if err:
@@ -3068,9 +3087,14 @@ def cmd_record(args: argparse.Namespace) -> int:
     zero_warn = _zero_tests_with_selector_warning(
         str(args.command), args.evidence, project_root
     )
-    if zero_warn is not None:
-        payload["warnings"] = [zero_warn]
-        print(f"[harness-ledger] WARNING {zero_warn}", file=sys.stderr)
+    record_warnings = [
+        warning for warning in (zero_warn, profile_input_missing_warn)
+        if warning is not None
+    ]
+    if record_warnings:
+        payload["warnings"] = record_warnings
+        for warning in record_warnings:
+            print(f"[harness-ledger] WARNING {warning}", file=sys.stderr)
     emit_compact_or_verbose(
         payload, as_json=as_json, verbose=verbose,
         compact_fn=_compact_record_payload,

package/harness/bundles/general/claude-code/scripts/harness_process.py

@@ -15,6 +15,7 @@ import json
 import os
 from pathlib import Path
 import signal
+import shutil
 import subprocess
 import sys
 import time
@@ -946,6 +947,23 @@ def capture_owned_members(spawned: SpawnedProcess) -> dict[str, Any] | None:
     return proof
 
 
+def resolve_windows_executable(argv: Sequence[str]) -> list[str]:
+    """Windows 无扩展名命令解析为实际可执行文件（F-1）。
+
+    CreateProcess 不走 shell，`mvn`/`npm` 这类 .cmd 包装会报 WinError 2；
+    shutil.which 遵循 PATHEXT 能找到 mvn.cmd。POSIX 或未命中时原样返回。
+    """
+    if os.name != "nt" or not argv:
+        return list(argv)
+    head = argv[0]
+    if not isinstance(head, str) or not head or os.path.splitext(head)[1]:
+        return list(argv)
+    resolved = shutil.which(head)
+    if resolved is None:
+        return list(argv)
+    return [resolved, *argv[1:]]
+
+
 def spawn_structured_argv(
     argv: Sequence[str],
     *,

package/harness/bundles/general/claude-code/scripts/harness_runtime.py

@@ -1099,6 +1099,9 @@ def _spawn_detached_worker(
     env: dict[str, str],
     output: Any = subprocess.DEVNULL,
 ) -> subprocess.Popen[bytes]:
+    from harness_process import resolve_windows_executable
+
+    argv = resolve_windows_executable(argv)
     kwargs: dict[str, Any] = {
         "cwd": str(cwd),
         "env": env,
@@ -1171,6 +1174,40 @@ def start_run_session(
     working_directory = working_directory.expanduser().resolve()
     if not working_directory.is_dir():
         raise ValueError(f"RUN_SESSION_WORKDIR_MISSING: {working_directory}")
+    # F-2：fixback 会话缺 product-identity 时白跑一轮、register 才拒。批次开着
+    # 就从 baseProductIdentity 自动注入；没有 OPEN 批次则当场拒绝（2026-08-31
+    # demo-datasource 实测）。
+    if verification.startswith("fixback") and not (
+        product_identity and product_identity.strip()
+    ):
+        batches_dir = state_root / "fixback" / "batches"
+        open_identity: str | None = None
+        open_batch_id: str | None = None
+        if batches_dir.is_dir():
+            for batch_file in sorted(batches_dir.glob("*.json")):
+                try:
+                    batch = json.loads(batch_file.read_text(encoding="utf-8-sig"))
+                except (OSError, json.JSONDecodeError):
+                    continue
+                if (
+                    isinstance(batch, dict)
+                    and batch.get("status") == "OPEN"
+                    and isinstance(batch.get("baseProductIdentity"), str)
+                    and batch["baseProductIdentity"].strip()
+                ):
+                    open_identity = str(batch["baseProductIdentity"]).strip()
+                    open_batch_id = str(batch.get("batchId") or "")
+                    break
+        if open_identity is None:
+            raise ValueError(
+                "FIXBACK_PRODUCT_IDENTITY_REQUIRED: fixback 会话必须有产品身份——"
+                "传 --product-identity，或先启动 fixback 批次（其 baseProductIdentity "
+                "会被自动注入）"
+            )
+        product_identity = open_identity
+        product_identity_source = f"fixback-batch:{open_batch_id}"
+    else:
+        product_identity_source = None
     session_id = session_id or f"run-{uuid.uuid4().hex}"
     run_id = run_id or session_id
     session_root = _run_session_root(state_root, session_id)
@@ -1215,6 +1252,11 @@ def start_run_session(
         "heartbeatSeconds": heartbeat_seconds,
         "expectedDurationSeconds": expected_duration_seconds,
         "productIdentity": product_identity,
+        **(
+            {"productIdentitySource": product_identity_source}
+            if product_identity_source is not None
+            else {}
+        ),
         "resourceLocks": normalized_resource_locks,
         "resourceLockTokens": {},
         "resourceWaitMs": 0,
@@ -1427,8 +1469,12 @@ def _run_session_worker(state_root: Path, session_id: str) -> int:
             "wb", buffering=0
         ) as stderr:
             try:
-                from harness_process import spawn_structured_argv
+                from harness_process import (
+                    resolve_windows_executable,
+                    spawn_structured_argv,
+                )
 
+                argv = resolve_windows_executable(argv)
                 spawned = spawn_structured_argv(
                     argv,
                     cwd=Path(str(receipt["workingDirectory"])),

package/harness/bundles/general/codebuddy/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "none",
   "agent": "codebuddy",
-  "coreHash": "7c08c3960f78dc1a"
+  "coreHash": "dc9fe149ebf1952b"
 }

package/harness/bundles/general/codebuddy/harness-archive/SKILL.md

@@ -3,7 +3,7 @@ name: harness-archive
 description: 归档所有变更产出（计划/测试报告/审查/SQL/API文档）到 .harness/archive/，含归档元数据。仅当用户显式调用
   /harness-archive 时使用；不得被其他阶段 skill 自动接续触发。
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-codebase-map/SKILL.md

@@ -3,7 +3,7 @@ name: harness-codebase-map
 description: 分析现有代码库并生成 .harness/codebase/map/
   下的结构化代码库地图。用于陌生项目理解、重大改造前梳理、harness-sync 提示 map 过期后的人工刷新。
 ---
-<!-- generated by harness_deploy.py; core=7c08c3960f78dc1a; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose