@hunter-harness/workflow-harness 0.4.11 → 0.4.13

package/harness/bundles/general/claude-code/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "none",
   "agent": "claude-code",
-  "coreHash": "cdc01b6329bacd46"
+  "coreHash": "dbe8841e3e01b1c7"
 }

package/harness/bundles/general/claude-code/harness-archive/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-codebase-map/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-execute/SKILL.md

@@ -23,7 +23,7 @@ disallowed-tools:
   - Bash(node *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-execute — 执行（编码 + 验证）
 
 > 2026-08 阶段合并：原 `run`（编码）与 `test`（验证）合并为单一 `execute` 阶段；

package/harness/bundles/general/claude-code/harness-knowledge-ingest/SKILL.md

@@ -8,7 +8,7 @@ disallowed-tools:
   - Bash(git *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-knowledge-ingest
 
 知识 ingest 完全由 Hunter Platform 负责。归档完成时，客户端生成一个确定性 ZIP；

package/harness/bundles/general/claude-code/harness-knowledge-query/SKILL.md

@@ -8,7 +8,7 @@ disallowed-tools:
   - Bash(git *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-knowledge-query
 
 项目知识以 Hunter Platform 的服务端索引为唯一真源。客户端只提交查询并消费结果：

package/harness/bundles/general/claude-code/harness-plan/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-pull/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-pull — 从 Hunter Platform 下拉与恢复
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-push/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-push — 上传到 Hunter Platform
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-review/SKILL.md

@@ -22,7 +22,7 @@ disallowed-tools:
   - Bash(curl *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-review — 代码审查
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-submit/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-submit — 最终提交（含 worktree 合并）
 
 ## Purpose
@@ -83,7 +83,7 @@ worktree 合并前必须运行 `harness_change.py integration-lock acquire --run
 4. **提交方式** — 主目录：blocking user confirmation 三选项（commit+push / 仅本地 / 取消）；**worktree：固定仅本地 commit**
 5. **commit-message.txt** ⚠️ — 展示 staged、diff stat、完整中文 message；用户确认
 6. **commit / push** — `git commit -F`；主目录按选项 push（push 前 fetch 检查远端）；无 upstream 时允许仅本地 commit。commit 后立即重新运行 `harness_archive.py certify-local`：若验证输入未变化，脚本把候选从提交前身份安全重绑定到最终 commit，不得重跑测试或手工复制账本；**worktree：只 commit，记录 local hash**
-7. **收尾** — `harness_gate.py close --phase submit --status ... --to-phase <实际计划后继>`；通常后继为 Archive，但不得显示“等待 merge”或固定写死。主目录停止并提示真实下一阶段；worktree 才接续下方同一 Submit 内的合并流程。
+7. **收尾** — `harness_gate.py close --phase submit --status ... --to-phase <实际计划后继>`；通常后继为 Archive，但不得显示“等待 merge”或固定写死。主目录停止并提示真实下一阶段；worktree 才接续下方同一 Submit 内的合并流程。`--json` 的 stdout 只含 JSON；关门摘要横幅在 stderr——管道给 `jq` 时**不要** `2>&1` 合并（stderr 不缓冲会先写，合并后横幅会混进 JSON 流）。
 
 详细步骤见 `checklist.md`。
 

package/harness/bundles/general/claude-code/harness-sync/SKILL.md

@@ -19,7 +19,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-sync
 
 ## Purpose

package/harness/bundles/general/claude-code/scripts/harness_archive.py

@@ -3010,8 +3010,12 @@ def check_status(
                 if archive_intent == "record-only"
                 else str(ci_gate.get("code") or "PRODUCT_CANDIDATE_NOT_VERIFIED")
             ),
-            "message": str(
-                ci_gate.get("message") or "product candidate not verified"
+            "message": (
+                # A-2：record-only 豁免阻断，但原文透传授权要求会误读成阻断指引
+                "record-only 归档不要求发布授权，本项仅记录："
+                + str(ci_gate.get("message") or "product candidate not verified")
+                if archive_intent == "record-only"
+                else str(ci_gate.get("message") or "product candidate not verified")
             ),
         }
         if archive_intent == "record-only":
@@ -3104,15 +3108,18 @@ def check_status(
         code = str(issue.get("code") or "REPORT_ADEQUACY_FAILED")
         if any(item.get("code") == code for item in blockers):
             continue
-        blockers.append(
-            {
-                "code": code,
-                "message": adequacy_messages_zh.get(
-                    code,
-                    str(issue.get("message") or "归档报告不完整"),
-                ),
-            }
-        )
+        blocker: dict[str, Any] = {
+            "code": code,
+            "message": adequacy_messages_zh.get(
+                code,
+                str(issue.get("message") or "归档报告不完整"),
+            ),
+        }
+        # A-3：出路必须随阻断项下发（对齐 SKILL 二·A 表），不再让使用者翻文档
+        next_action = issue.get("nextAction")
+        if isinstance(next_action, str) and next_action.strip():
+            blocker["recoveryAction"] = next_action.strip()
+        blockers.append(blocker)
     for issue in report_adequacy.get("issues") or []:
         if not isinstance(issue, dict) or issue.get("severity") != "warning":
             continue

package/harness/bundles/general/claude-code/scripts/harness_gate.py

@@ -2085,6 +2085,52 @@ def _terminal_matches_context_session(
     )
 
 
+def _repair_handoff_missing_lease(
+    project: Path,
+    change_id: str,
+    args: argparse.Namespace,
+    *,
+    status: str,
+    handoff: dict[str, Any],
+) -> dict[str, Any] | None:
+    """S-1：交接因 context 租约缺失失败时自愈一次。
+
+    阶段租约仍持有但 context 租约已被消费/缺失时，close_transition 只能报
+    CONTEXT_LEASE_REQUIRED——原样重跑永远撞同一错误（2026-08-31 submit 实测，
+    recoveryAction 声称“会重试”但重试无自愈能力）。这里补齐缺口：
+    prepare_context 幂等重建本阶段 context 租约后重试一次交接，与
+    `harness_context.py handoff` 命令同源（同 prepare→close 顺序）。
+    """
+    if handoff.get("code") != "CONTEXT_LEASE_REQUIRED":
+        return None
+    executor = getattr(args, "executor", None)
+    if not executor:
+        view = hctx.context_view(project, change_id)
+        current = view.get("current") if isinstance(view, dict) else None
+        executor = (
+            str(current.get("executor"))
+            if isinstance(current, dict) and current.get("executor")
+            else None
+        )
+    if not executor:
+        return None
+    try:
+        prepared = hctx.prepare_context(
+            project,
+            change=change_id,
+            phase=args.phase,
+            executor=executor,
+        )
+    except Exception:
+        return None
+    if not prepared.get("ok"):
+        return None
+    repaired = _close_context_handoff(project, change_id, args, status=status)
+    if isinstance(repaired, dict):
+        repaired = {**repaired, "leaseRepaired": True}
+    return repaired
+
+
 def _close_context_handoff(
     project: Path,
     change_id: str,
@@ -3154,6 +3200,14 @@ def _resume_closed_phase(
                 status=close_status,
             )
     monitor = _sync_after_phase_close(project, change_dir)
+    if isinstance(handoff, dict) and not handoff.get("ok"):
+        # S-1：续跑路径同样的自愈
+        repaired = _repair_handoff_missing_lease(
+            project, change_id, args,
+            status=close_status, handoff=handoff,
+        )
+        if repaired is not None:
+            handoff = repaired
     if isinstance(handoff, dict) and not handoff.get("ok"):
         return emit_error(
             "PHASE_HANDOFF_PENDING",
@@ -3737,6 +3791,15 @@ def cmd_close(args: argparse.Namespace) -> int:
         status=close_status,
     )
     platform_monitor = _sync_after_phase_close(project, change_dir)
+    if isinstance(context_handoff, dict) and not context_handoff.get("ok"):
+        # S-1：context 租约缺失时自愈一次（prepare 幂等重建 + 重试交接），
+        # 修复前“原样重跑”永远撞同一个 CONTEXT_LEASE_REQUIRED
+        repaired = _repair_handoff_missing_lease(
+            project, str(resolved["changeId"]), args,
+            status=close_status, handoff=context_handoff,
+        )
+        if repaired is not None:
+            context_handoff = repaired
     if isinstance(context_handoff, dict) and not context_handoff.get("ok"):
         record_gate_blocked(
             change_dir,
@@ -3759,7 +3822,12 @@ def cmd_close(args: argparse.Namespace) -> int:
                 "platformMonitor": platform_monitor,
                 "recoveryAction": (
                     "租约仍持有，无需重新 claim——原样重跑同一 close 命令即可幂等续跑"
-                    "（phase.end 已落会跳过，handoff 会重试）"
+                    "（phase.end 已落会跳过，handoff 会重试；context 租约缺失时会自动"
+                    "补建）。仍失败时用一条命令补齐交接："
+                    "harness_context.py handoff --project . "
+                    f"--change {resolved['changeId']} --to-phase "
+                    f"{getattr(args, 'to_phase', None) or '<后继阶段>'} "
+                    "--executor <tool> --json"
                 ),
             },
         )

package/harness/bundles/general/claude-code/scripts/harness_knowledge_candidates.py

@@ -30,6 +30,8 @@ from __future__ import annotations
 
 import hashlib
 import json
+import re
+import sys
 from typing import Any
 
 SCHEMA_VERSION = 1
@@ -44,6 +46,44 @@ _DISPOSITION_ENTRY_TYPES = {
     "DEFERRED": "risk",
 }
 _SEVERITY_CONFIDENCE = {"RED": 0.95, "YELLOW": 0.85}
+
+
+def _valid_source_path(path: Any) -> str | None:
+    """source_ref 的结构校验（与服务端 ARCHIVE_CANDIDATE_SOURCE_UNBOUND 同规则）。
+
+    合法形态：`relative/path/to/file.ext`（调用方再附 `#L<line>`）。
+    拒绝：目录引用（尾部斜杠）、空路径段、`.`/`..` 段、绝对路径、盘符、
+    反斜杠。返回规范化路径；不合法返回 None——调用方必须跳过该候选，
+    不得生成「目录 + 行号」的伪来源（2026-08-31 demo-datasource 实测：
+    `quality/#L1` 一条不合法 ref 挡掉整份 42 条候选的包）。
+    """
+    if not isinstance(path, str):
+        return None
+    raw = path.strip()
+    if not raw:
+        return None
+    if "\\" in raw:  # 反斜杠路径不合法（服务端拒绝，不做静默转换）
+        return None
+    if raw.startswith("/") or re.match(r"^[A-Za-z]:", raw):
+        return None
+    if raw.endswith("/"):  # 目录引用——尾部斜杠形成空路径段
+        return None
+    segments = raw.split("/")
+    if any(segment in ("", ".", "..") for segment in segments):
+        return None
+    return raw
+
+
+def _bound_source_refs(path: Any, line: Any, archive_id: str) -> list[str] | None:
+    """构造可绑定文件来源；path 缺失时回退 archive 级来源，非法时返回 None。"""
+    if not path or not isinstance(path, str) or not path.strip():
+        return [f"archive:{archive_id}"]
+    valid = _valid_source_path(path)
+    if valid is None:
+        return None
+    if isinstance(line, int) and line > 0:
+        return [f"{valid}#L{line}"]
+    return [valid]
 _KNOWN_RISK_CONFIDENCE = 0.85
 
 # decisions[]（来自 change 的 evidence/decisions.json，经 summary.decisions 传入）
@@ -141,12 +181,16 @@ def _finding_candidate(
         disposition,
     )
     source_ref = f"archive:{archive_id}#{finding_id}" if finding_id else f"archive:{archive_id}"
-    if path and location != path:
-        source_refs = [f"{path}#L{line}"]
-    elif path:
-        source_refs = [path]
-    else:
-        source_refs = [f"archive:{archive_id}"]
+    source_refs = _bound_source_refs(path, line, archive_id)
+    if source_refs is None:
+        # 目录/非法路径——跳过整条候选，不生成伪来源（服务端会拒绝整包）；
+        # 跳过必须可见，否则「少了一条候选」无从追溯
+        print(
+            "[harness-knowledge-candidates] 跳过候选：source_refs 非法"
+            f"（path={path!r}，finding={finding_id or title!r}）",
+            file=sys.stderr,
+        )
+        return None
 
     return {
         "schema_version": SCHEMA_VERSION,
@@ -266,12 +310,14 @@ def _decision_candidate(
         segments[-2] if len(segments) >= 2 else "",
         entry_type,
     )
-    if path and location != path:
-        source_refs = [f"{path}#L{line}"]
-    elif path:
-        source_refs = [path]
-    else:
-        source_refs = [f"archive:{archive_id}"]
+    source_refs = _bound_source_refs(path, line, archive_id)
+    if source_refs is None:
+        print(
+            "[harness-knowledge-candidates] 跳过候选：source_refs 非法"
+            f"（path={path!r}）",
+            file=sys.stderr,
+        )
+        return None
 
     return {
         "schema_version": SCHEMA_VERSION,

package/harness/bundles/general/claude-code/scripts/harness_ledger.py

@@ -2565,6 +2565,20 @@ def cmd_can_reuse(args: argparse.Namespace) -> int:
     return 0
 
 
+def _profile_input_missing_warning(
+    verification: str, target: Any, profile_input: str | None
+) -> str | None:
+    """S-4：profile 声明了 target 却没带 --profile-input 时提前预警。"""
+    if profile_input or not isinstance(target, dict):
+        return None
+    return (
+        "PROFILE_INPUT_MISSING: 未传 --profile-input，本条记录缺少 profile 推导的"
+        " scope/coverage/inputsHash 身份字段，can-reuse 将无法复用。建议重跑："
+        f"record --verification {verification} --profile-input <key> --project . "
+        "（key 见 build-profile.json verificationInputs）"
+    )
+
+
 def cmd_record(args: argparse.Namespace) -> int:
     as_json = bool(args.json)
     verbose = bool(getattr(args, "verbose", False))
@@ -2612,6 +2626,11 @@ def cmd_record(args: argparse.Namespace) -> int:
             "verificationGraph.targets",
             as_json=as_json,
         )
+    # S-4：profile 声明了 target 却没带 --profile-input，条目缺身份字段，
+    # can-reuse 事后才报 MISSING_FIELDS——只能重跑一遍（2026-08-31 实测）。
+    profile_input_missing_warn = _profile_input_missing_warning(
+        verification, target, profile_input
+    )
     if profile_input:
         resolved_files, err = expand_profile_input_files(project_root, profile_input)
         if err:
@@ -3068,9 +3087,14 @@ def cmd_record(args: argparse.Namespace) -> int:
     zero_warn = _zero_tests_with_selector_warning(
         str(args.command), args.evidence, project_root
     )
-    if zero_warn is not None:
-        payload["warnings"] = [zero_warn]
-        print(f"[harness-ledger] WARNING {zero_warn}", file=sys.stderr)
+    record_warnings = [
+        warning for warning in (zero_warn, profile_input_missing_warn)
+        if warning is not None
+    ]
+    if record_warnings:
+        payload["warnings"] = record_warnings
+        for warning in record_warnings:
+            print(f"[harness-ledger] WARNING {warning}", file=sys.stderr)
     emit_compact_or_verbose(
         payload, as_json=as_json, verbose=verbose,
         compact_fn=_compact_record_payload,

package/harness/bundles/general/claude-code/scripts/harness_review.py

@@ -176,10 +176,24 @@ def write_findings(change_dir: Path, doc: dict[str, Any]) -> dict[str, Any]:
         "changeName": doc.get("changeName") or Path(change_dir).name,
         "findings": assigned,
     }
+    # 目录路径的 finding 下游产不出可绑定的知识候选（source_refs 会拒整包），
+    # 写入时提前可见——demo-datasource 的 quality/#L1 就是这么漏出去的
+    directory_paths = [
+        str(f.get("path"))
+        for f in assigned
+        if isinstance(f.get("path"), str) and f["path"].rstrip().endswith("/")
+    ]
     out = findings_path(change_dir)
     _write_json_atomic(out, payload)
-    return {"ok": True, "code": "FINDINGS_WRITTEN", "path": str(out),
-            "count": len(assigned)}
+    result = {"ok": True, "code": "FINDINGS_WRITTEN", "path": str(out),
+              "count": len(assigned)}
+    if directory_paths:
+        result["warnings"] = [
+            "以下 finding 的 path 是目录而非文件，知识候选生成时会整条跳过"
+            "（source_refs 无法绑定文件）：" + "; ".join(directory_paths) +
+            "。请改为具体文件路径后重新写入"
+        ]
+    return result
 
 
 def _load_findings(change_dir: Path) -> dict[str, Any] | None:

package/harness/bundles/general/codebuddy/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "none",
   "agent": "codebuddy",
-  "coreHash": "cdc01b6329bacd46"
+  "coreHash": "dbe8841e3e01b1c7"
 }

package/harness/bundles/general/codebuddy/harness-archive/SKILL.md

@@ -3,7 +3,7 @@ name: harness-archive
 description: 归档所有变更产出（计划/测试报告/审查/SQL/API文档）到 .harness/archive/，含归档元数据。仅当用户显式调用
   /harness-archive 时使用；不得被其他阶段 skill 自动接续触发。
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-codebase-map/SKILL.md

@@ -3,7 +3,7 @@ name: harness-codebase-map
 description: 分析现有代码库并生成 .harness/codebase/map/
   下的结构化代码库地图。用于陌生项目理解、重大改造前梳理、harness-sync 提示 map 过期后的人工刷新。
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-execute/SKILL.md

@@ -4,7 +4,7 @@ description: 执行阶段：按变更簇执行 TDD
   编码循环（RED→GREEN→REFACTOR→编译验证），随后完成单元/接口/数据兼容验证并输出测试报告。仅当用户显式调用
   /harness-execute 时使用；不得因用户提到编码/实现/测试就自动触发，也不得被其他阶段 skill 自动接续。
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-execute — 执行（编码 + 验证）
 
 > 2026-08 阶段合并：原 `run`（编码）与 `test`（验证）合并为单一 `execute` 阶段；

package/harness/bundles/general/codebuddy/harness-knowledge-ingest/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-knowledge-ingest
 description: 确认归档 ZIP 已上传并由 Hunter Platform 在服务端解包、校验和入库。客户端不再构建或维护本地知识索引。
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-knowledge-ingest
 
 知识 ingest 完全由 Hunter Platform 负责。归档完成时，客户端生成一个确定性 ZIP；

package/harness/bundles/general/codebuddy/harness-knowledge-query/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-knowledge-query
 description: 在规划、实现或排查前，通过 hunter-harness CLI 查询远端项目知识库。远端不可用时直接报告不可用，不建立本地索引或离线回退。
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-knowledge-query
 
 项目知识以 Hunter Platform 的服务端索引为唯一真源。客户端只提交查询并消费结果：

package/harness/bundles/general/codebuddy/harness-plan/SKILL.md

@@ -3,7 +3,7 @@ name: harness-plan
 description: 将需求转化为设计文档+实施计划+完整测试场景表，必须在编码前完成。仅当用户显式调用 /harness-plan 或明确要求进入
   Harness 规划阶段时使用；不得因用户描述需求就自动触发。
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-pull/SKILL.md

@@ -3,7 +3,7 @@ name: harness-pull
 description: 从 Hunter Platform 下拉配置/规则/架构/指令（及显式来源分支的分支文件恢复）。仅当用户显式调用
   /harness-pull 或明确说'从平台拉取/恢复'时使用；不得自动触发。
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-pull — 从 Hunter Platform 下拉与恢复
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-push/SKILL.md

@@ -3,7 +3,7 @@ name: harness-push
 description: 上传本地配置/规则/架构/指令（及显式归档）到 Hunter Platform。仅当用户显式调用 /harness-push
   或明确说'上传到平台'时使用；不得因存在本地修改就自动触发。
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-push — 上传到 Hunter Platform
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-review/SKILL.md

@@ -4,7 +4,7 @@ description: 6维度代码审查（架构/安全/规范/兼容/测试/性能）
   .harness/context-index.json）和测试场景表，在隔离上下文运行。仅当用户显式调用 /harness-review 时使用；不得在
   test 结束后自动接续执行。
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-review — 代码审查
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-submit/SKILL.md

@@ -3,7 +3,7 @@ name: harness-submit
 description: 最终提交封装：验证→中文 commit→提交/推送；worktree 模式含 --no-ff 合并回主分支。仅当用户显式调用
   /harness-submit（或 /harness-merge 重入合并段）时使用；用户口头说'提交/commit/push'时必须先确认，不得自动触发。
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-submit — 最终提交（含 worktree 合并）
 
 ## Purpose
@@ -65,7 +65,7 @@ worktree 合并前必须运行 `harness_change.py integration-lock acquire --run
 4. **提交方式** — 主目录：blocking user confirmation 三选项（commit+push / 仅本地 / 取消）；**worktree：固定仅本地 commit**
 5. **commit-message.txt** ⚠️ — 展示 staged、diff stat、完整中文 message；用户确认
 6. **commit / push** — `git commit -F`；主目录按选项 push（push 前 fetch 检查远端）；无 upstream 时允许仅本地 commit。commit 后立即重新运行 `harness_archive.py certify-local`：若验证输入未变化，脚本把候选从提交前身份安全重绑定到最终 commit，不得重跑测试或手工复制账本；**worktree：只 commit，记录 local hash**
-7. **收尾** — `harness_gate.py close --phase submit --status ... --to-phase <实际计划后继>`；通常后继为 Archive，但不得显示“等待 merge”或固定写死。主目录停止并提示真实下一阶段；worktree 才接续下方同一 Submit 内的合并流程。
+7. **收尾** — `harness_gate.py close --phase submit --status ... --to-phase <实际计划后继>`；通常后继为 Archive，但不得显示“等待 merge”或固定写死。主目录停止并提示真实下一阶段；worktree 才接续下方同一 Submit 内的合并流程。`--json` 的 stdout 只含 JSON；关门摘要横幅在 stderr——管道给 `jq` 时**不要** `2>&1` 合并（stderr 不缓冲会先写，合并后横幅会混进 JSON 流）。
 
 详细步骤见 `checklist.md`。
 

package/harness/bundles/general/codebuddy/harness-sync/SKILL.md

@@ -4,7 +4,7 @@ description: Use when the user asks to synchronize, refresh, or validate Harness
   metadata, adapters, remote knowledge ownership, instruction entrypoints,
   config origins, or CodeGraph status.
 ---
-<!-- generated by harness_deploy.py; core=cdc01b6329bacd46; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-sync
 
 ## Purpose

package/harness/bundles/general/codebuddy/scripts/harness_archive.py

@@ -3010,8 +3010,12 @@ def check_status(
                 if archive_intent == "record-only"
                 else str(ci_gate.get("code") or "PRODUCT_CANDIDATE_NOT_VERIFIED")
             ),
-            "message": str(
-                ci_gate.get("message") or "product candidate not verified"
+            "message": (
+                # A-2：record-only 豁免阻断，但原文透传授权要求会误读成阻断指引
+                "record-only 归档不要求发布授权，本项仅记录："
+                + str(ci_gate.get("message") or "product candidate not verified")
+                if archive_intent == "record-only"
+                else str(ci_gate.get("message") or "product candidate not verified")
             ),
         }
         if archive_intent == "record-only":
@@ -3104,15 +3108,18 @@ def check_status(
         code = str(issue.get("code") or "REPORT_ADEQUACY_FAILED")
         if any(item.get("code") == code for item in blockers):
             continue
-        blockers.append(
-            {
-                "code": code,
-                "message": adequacy_messages_zh.get(
-                    code,
-                    str(issue.get("message") or "归档报告不完整"),
-                ),
-            }
-        )
+        blocker: dict[str, Any] = {
+            "code": code,
+            "message": adequacy_messages_zh.get(
+                code,
+                str(issue.get("message") or "归档报告不完整"),
+            ),
+        }
+        # A-3：出路必须随阻断项下发（对齐 SKILL 二·A 表），不再让使用者翻文档
+        next_action = issue.get("nextAction")
+        if isinstance(next_action, str) and next_action.strip():
+            blocker["recoveryAction"] = next_action.strip()
+        blockers.append(blocker)
     for issue in report_adequacy.get("issues") or []:
         if not isinstance(issue, dict) or issue.get("severity") != "warning":
             continue