@hunter-harness/workflow-harness 0.4.12 → 0.4.13

package/harness/bundles/general/claude-code/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "none",
   "agent": "claude-code",
-  "coreHash": "dc9fe149ebf1952b"
+  "coreHash": "dbe8841e3e01b1c7"
 }

package/harness/bundles/general/claude-code/harness-archive/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-codebase-map/SKILL.md

@@ -20,7 +20,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-execute/SKILL.md

@@ -23,7 +23,7 @@ disallowed-tools:
   - Bash(node *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-execute — 执行（编码 + 验证）
 
 > 2026-08 阶段合并：原 `run`（编码）与 `test`（验证）合并为单一 `execute` 阶段；

package/harness/bundles/general/claude-code/harness-knowledge-ingest/SKILL.md

@@ -8,7 +8,7 @@ disallowed-tools:
   - Bash(git *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-knowledge-ingest
 
 知识 ingest 完全由 Hunter Platform 负责。归档完成时，客户端生成一个确定性 ZIP；

package/harness/bundles/general/claude-code/harness-knowledge-query/SKILL.md

@@ -8,7 +8,7 @@ disallowed-tools:
   - Bash(git *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-knowledge-query
 
 项目知识以 Hunter Platform 的服务端索引为唯一真源。客户端只提交查询并消费结果：

package/harness/bundles/general/claude-code/harness-plan/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-pull/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-pull — 从 Hunter Platform 下拉与恢复
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-push/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-push — 上传到 Hunter Platform
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-review/SKILL.md

@@ -22,7 +22,7 @@ disallowed-tools:
   - Bash(curl *)
   - Bash(codegraph *)
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-review — 代码审查
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-submit/SKILL.md

@@ -21,7 +21,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-submit — 最终提交（含 worktree 合并）
 
 ## Purpose

package/harness/bundles/general/claude-code/harness-sync/SKILL.md

@@ -19,7 +19,7 @@ disallowed-tools:
   - Bash(awk *)
   - Bash(curl *)
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=claude-code; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=claude-code; do not edit -->
 # harness-sync
 
 ## Purpose

package/harness/bundles/general/claude-code/scripts/harness_knowledge_candidates.py

@@ -30,6 +30,8 @@ from __future__ import annotations
 
 import hashlib
 import json
+import re
+import sys
 from typing import Any
 
 SCHEMA_VERSION = 1
@@ -44,6 +46,44 @@ _DISPOSITION_ENTRY_TYPES = {
     "DEFERRED": "risk",
 }
 _SEVERITY_CONFIDENCE = {"RED": 0.95, "YELLOW": 0.85}
+
+
+def _valid_source_path(path: Any) -> str | None:
+    """source_ref 的结构校验（与服务端 ARCHIVE_CANDIDATE_SOURCE_UNBOUND 同规则）。
+
+    合法形态：`relative/path/to/file.ext`（调用方再附 `#L<line>`）。
+    拒绝：目录引用（尾部斜杠）、空路径段、`.`/`..` 段、绝对路径、盘符、
+    反斜杠。返回规范化路径；不合法返回 None——调用方必须跳过该候选，
+    不得生成「目录 + 行号」的伪来源（2026-08-31 demo-datasource 实测：
+    `quality/#L1` 一条不合法 ref 挡掉整份 42 条候选的包）。
+    """
+    if not isinstance(path, str):
+        return None
+    raw = path.strip()
+    if not raw:
+        return None
+    if "\\" in raw:  # 反斜杠路径不合法（服务端拒绝，不做静默转换）
+        return None
+    if raw.startswith("/") or re.match(r"^[A-Za-z]:", raw):
+        return None
+    if raw.endswith("/"):  # 目录引用——尾部斜杠形成空路径段
+        return None
+    segments = raw.split("/")
+    if any(segment in ("", ".", "..") for segment in segments):
+        return None
+    return raw
+
+
+def _bound_source_refs(path: Any, line: Any, archive_id: str) -> list[str] | None:
+    """构造可绑定文件来源；path 缺失时回退 archive 级来源，非法时返回 None。"""
+    if not path or not isinstance(path, str) or not path.strip():
+        return [f"archive:{archive_id}"]
+    valid = _valid_source_path(path)
+    if valid is None:
+        return None
+    if isinstance(line, int) and line > 0:
+        return [f"{valid}#L{line}"]
+    return [valid]
 _KNOWN_RISK_CONFIDENCE = 0.85
 
 # decisions[]（来自 change 的 evidence/decisions.json，经 summary.decisions 传入）
@@ -141,12 +181,16 @@ def _finding_candidate(
         disposition,
     )
     source_ref = f"archive:{archive_id}#{finding_id}" if finding_id else f"archive:{archive_id}"
-    if path and location != path:
-        source_refs = [f"{path}#L{line}"]
-    elif path:
-        source_refs = [path]
-    else:
-        source_refs = [f"archive:{archive_id}"]
+    source_refs = _bound_source_refs(path, line, archive_id)
+    if source_refs is None:
+        # 目录/非法路径——跳过整条候选，不生成伪来源（服务端会拒绝整包）；
+        # 跳过必须可见，否则「少了一条候选」无从追溯
+        print(
+            "[harness-knowledge-candidates] 跳过候选：source_refs 非法"
+            f"（path={path!r}，finding={finding_id or title!r}）",
+            file=sys.stderr,
+        )
+        return None
 
     return {
         "schema_version": SCHEMA_VERSION,
@@ -266,12 +310,14 @@ def _decision_candidate(
         segments[-2] if len(segments) >= 2 else "",
         entry_type,
     )
-    if path and location != path:
-        source_refs = [f"{path}#L{line}"]
-    elif path:
-        source_refs = [path]
-    else:
-        source_refs = [f"archive:{archive_id}"]
+    source_refs = _bound_source_refs(path, line, archive_id)
+    if source_refs is None:
+        print(
+            "[harness-knowledge-candidates] 跳过候选：source_refs 非法"
+            f"（path={path!r}）",
+            file=sys.stderr,
+        )
+        return None
 
     return {
         "schema_version": SCHEMA_VERSION,

package/harness/bundles/general/claude-code/scripts/harness_review.py

@@ -176,10 +176,24 @@ def write_findings(change_dir: Path, doc: dict[str, Any]) -> dict[str, Any]:
         "changeName": doc.get("changeName") or Path(change_dir).name,
         "findings": assigned,
     }
+    # 目录路径的 finding 下游产不出可绑定的知识候选（source_refs 会拒整包），
+    # 写入时提前可见——demo-datasource 的 quality/#L1 就是这么漏出去的
+    directory_paths = [
+        str(f.get("path"))
+        for f in assigned
+        if isinstance(f.get("path"), str) and f["path"].rstrip().endswith("/")
+    ]
     out = findings_path(change_dir)
     _write_json_atomic(out, payload)
-    return {"ok": True, "code": "FINDINGS_WRITTEN", "path": str(out),
-            "count": len(assigned)}
+    result = {"ok": True, "code": "FINDINGS_WRITTEN", "path": str(out),
+              "count": len(assigned)}
+    if directory_paths:
+        result["warnings"] = [
+            "以下 finding 的 path 是目录而非文件，知识候选生成时会整条跳过"
+            "（source_refs 无法绑定文件）：" + "; ".join(directory_paths) +
+            "。请改为具体文件路径后重新写入"
+        ]
+    return result
 
 
 def _load_findings(change_dir: Path) -> dict[str, Any] | None:

package/harness/bundles/general/codebuddy/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "none",
   "agent": "codebuddy",
-  "coreHash": "dc9fe149ebf1952b"
+  "coreHash": "dbe8841e3e01b1c7"
 }

package/harness/bundles/general/codebuddy/harness-archive/SKILL.md

@@ -3,7 +3,7 @@ name: harness-archive
 description: 归档所有变更产出（计划/测试报告/审查/SQL/API文档）到 .harness/archive/，含归档元数据。仅当用户显式调用
   /harness-archive 时使用；不得被其他阶段 skill 自动接续触发。
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-codebase-map/SKILL.md

@@ -3,7 +3,7 @@ name: harness-codebase-map
 description: 分析现有代码库并生成 .harness/codebase/map/
   下的结构化代码库地图。用于陌生项目理解、重大改造前梳理、harness-sync 提示 map 过期后的人工刷新。
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-execute/SKILL.md

@@ -4,7 +4,7 @@ description: 执行阶段：按变更簇执行 TDD
   编码循环（RED→GREEN→REFACTOR→编译验证），随后完成单元/接口/数据兼容验证并输出测试报告。仅当用户显式调用
   /harness-execute 时使用；不得因用户提到编码/实现/测试就自动触发，也不得被其他阶段 skill 自动接续。
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-execute — 执行（编码 + 验证）
 
 > 2026-08 阶段合并：原 `run`（编码）与 `test`（验证）合并为单一 `execute` 阶段；

package/harness/bundles/general/codebuddy/harness-knowledge-ingest/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-knowledge-ingest
 description: 确认归档 ZIP 已上传并由 Hunter Platform 在服务端解包、校验和入库。客户端不再构建或维护本地知识索引。
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-knowledge-ingest
 
 知识 ingest 完全由 Hunter Platform 负责。归档完成时，客户端生成一个确定性 ZIP；

package/harness/bundles/general/codebuddy/harness-knowledge-query/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-knowledge-query
 description: 在规划、实现或排查前，通过 hunter-harness CLI 查询远端项目知识库。远端不可用时直接报告不可用，不建立本地索引或离线回退。
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-knowledge-query
 
 项目知识以 Hunter Platform 的服务端索引为唯一真源。客户端只提交查询并消费结果：

package/harness/bundles/general/codebuddy/harness-plan/SKILL.md

@@ -3,7 +3,7 @@ name: harness-plan
 description: 将需求转化为设计文档+实施计划+完整测试场景表，必须在编码前完成。仅当用户显式调用 /harness-plan 或明确要求进入
   Harness 规划阶段时使用；不得因用户描述需求就自动触发。
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-pull/SKILL.md

@@ -3,7 +3,7 @@ name: harness-pull
 description: 从 Hunter Platform 下拉配置/规则/架构/指令（及显式来源分支的分支文件恢复）。仅当用户显式调用
   /harness-pull 或明确说'从平台拉取/恢复'时使用；不得自动触发。
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-pull — 从 Hunter Platform 下拉与恢复
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-push/SKILL.md

@@ -3,7 +3,7 @@ name: harness-push
 description: 上传本地配置/规则/架构/指令（及显式归档）到 Hunter Platform。仅当用户显式调用 /harness-push
   或明确说'上传到平台'时使用；不得因存在本地修改就自动触发。
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-push — 上传到 Hunter Platform
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-review/SKILL.md

@@ -4,7 +4,7 @@ description: 6维度代码审查（架构/安全/规范/兼容/测试/性能）
   .harness/context-index.json）和测试场景表，在隔离上下文运行。仅当用户显式调用 /harness-review 时使用；不得在
   test 结束后自动接续执行。
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-review — 代码审查
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-submit/SKILL.md

@@ -3,7 +3,7 @@ name: harness-submit
 description: 最终提交封装：验证→中文 commit→提交/推送；worktree 模式含 --no-ff 合并回主分支。仅当用户显式调用
   /harness-submit（或 /harness-merge 重入合并段）时使用；用户口头说'提交/commit/push'时必须先确认，不得自动触发。
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-submit — 最终提交（含 worktree 合并）
 
 ## Purpose

package/harness/bundles/general/codebuddy/harness-sync/SKILL.md

@@ -4,7 +4,7 @@ description: Use when the user asks to synchronize, refresh, or validate Harness
   metadata, adapters, remote knowledge ownership, instruction entrypoints,
   config origins, or CodeGraph status.
 ---
-<!-- generated by harness_deploy.py; core=dc9fe149ebf1952b; overlay=none; agent=codebuddy; do not edit -->
+<!-- generated by harness_deploy.py; core=dbe8841e3e01b1c7; overlay=none; agent=codebuddy; do not edit -->
 # harness-sync
 
 ## Purpose

package/harness/bundles/general/codebuddy/scripts/harness_knowledge_candidates.py

@@ -30,6 +30,8 @@ from __future__ import annotations
 
 import hashlib
 import json
+import re
+import sys
 from typing import Any
 
 SCHEMA_VERSION = 1
@@ -44,6 +46,44 @@ _DISPOSITION_ENTRY_TYPES = {
     "DEFERRED": "risk",
 }
 _SEVERITY_CONFIDENCE = {"RED": 0.95, "YELLOW": 0.85}
+
+
+def _valid_source_path(path: Any) -> str | None:
+    """source_ref 的结构校验（与服务端 ARCHIVE_CANDIDATE_SOURCE_UNBOUND 同规则）。
+
+    合法形态：`relative/path/to/file.ext`（调用方再附 `#L<line>`）。
+    拒绝：目录引用（尾部斜杠）、空路径段、`.`/`..` 段、绝对路径、盘符、
+    反斜杠。返回规范化路径；不合法返回 None——调用方必须跳过该候选，
+    不得生成「目录 + 行号」的伪来源（2026-08-31 demo-datasource 实测：
+    `quality/#L1` 一条不合法 ref 挡掉整份 42 条候选的包）。
+    """
+    if not isinstance(path, str):
+        return None
+    raw = path.strip()
+    if not raw:
+        return None
+    if "\\" in raw:  # 反斜杠路径不合法（服务端拒绝，不做静默转换）
+        return None
+    if raw.startswith("/") or re.match(r"^[A-Za-z]:", raw):
+        return None
+    if raw.endswith("/"):  # 目录引用——尾部斜杠形成空路径段
+        return None
+    segments = raw.split("/")
+    if any(segment in ("", ".", "..") for segment in segments):
+        return None
+    return raw
+
+
+def _bound_source_refs(path: Any, line: Any, archive_id: str) -> list[str] | None:
+    """构造可绑定文件来源；path 缺失时回退 archive 级来源，非法时返回 None。"""
+    if not path or not isinstance(path, str) or not path.strip():
+        return [f"archive:{archive_id}"]
+    valid = _valid_source_path(path)
+    if valid is None:
+        return None
+    if isinstance(line, int) and line > 0:
+        return [f"{valid}#L{line}"]
+    return [valid]
 _KNOWN_RISK_CONFIDENCE = 0.85
 
 # decisions[]（来自 change 的 evidence/decisions.json，经 summary.decisions 传入）
@@ -141,12 +181,16 @@ def _finding_candidate(
         disposition,
     )
     source_ref = f"archive:{archive_id}#{finding_id}" if finding_id else f"archive:{archive_id}"
-    if path and location != path:
-        source_refs = [f"{path}#L{line}"]
-    elif path:
-        source_refs = [path]
-    else:
-        source_refs = [f"archive:{archive_id}"]
+    source_refs = _bound_source_refs(path, line, archive_id)
+    if source_refs is None:
+        # 目录/非法路径——跳过整条候选，不生成伪来源（服务端会拒绝整包）；
+        # 跳过必须可见，否则「少了一条候选」无从追溯
+        print(
+            "[harness-knowledge-candidates] 跳过候选：source_refs 非法"
+            f"（path={path!r}，finding={finding_id or title!r}）",
+            file=sys.stderr,
+        )
+        return None
 
     return {
         "schema_version": SCHEMA_VERSION,
@@ -266,12 +310,14 @@ def _decision_candidate(
         segments[-2] if len(segments) >= 2 else "",
         entry_type,
     )
-    if path and location != path:
-        source_refs = [f"{path}#L{line}"]
-    elif path:
-        source_refs = [path]
-    else:
-        source_refs = [f"archive:{archive_id}"]
+    source_refs = _bound_source_refs(path, line, archive_id)
+    if source_refs is None:
+        print(
+            "[harness-knowledge-candidates] 跳过候选：source_refs 非法"
+            f"（path={path!r}）",
+            file=sys.stderr,
+        )
+        return None
 
     return {
         "schema_version": SCHEMA_VERSION,

package/harness/bundles/general/codebuddy/scripts/harness_review.py

@@ -176,10 +176,24 @@ def write_findings(change_dir: Path, doc: dict[str, Any]) -> dict[str, Any]:
         "changeName": doc.get("changeName") or Path(change_dir).name,
         "findings": assigned,
     }
+    # 目录路径的 finding 下游产不出可绑定的知识候选（source_refs 会拒整包），
+    # 写入时提前可见——demo-datasource 的 quality/#L1 就是这么漏出去的
+    directory_paths = [
+        str(f.get("path"))
+        for f in assigned
+        if isinstance(f.get("path"), str) and f["path"].rstrip().endswith("/")
+    ]
     out = findings_path(change_dir)
     _write_json_atomic(out, payload)
-    return {"ok": True, "code": "FINDINGS_WRITTEN", "path": str(out),
-            "count": len(assigned)}
+    result = {"ok": True, "code": "FINDINGS_WRITTEN", "path": str(out),
+              "count": len(assigned)}
+    if directory_paths:
+        result["warnings"] = [
+            "以下 finding 的 path 是目录而非文件，知识候选生成时会整条跳过"
+            "（source_refs 无法绑定文件）：" + "; ".join(directory_paths) +
+            "。请改为具体文件路径后重新写入"
+        ]
+    return result
 
 
 def _load_findings(change_dir: Path) -> dict[str, Any] | None:

package/harness/bundles/general/codex/.harness-build.json

@@ -2,5 +2,5 @@
   "schemaVersion": 1,
   "overlay": "none",
   "agent": "codex",
-  "coreHash": "74178a104a953fef"
+  "coreHash": "b2c7fb2239c7aa77"
 }

package/harness/bundles/general/codex/harness-archive/SKILL.md

@@ -3,7 +3,7 @@ name: harness-archive
 description: 归档所有变更产出（计划/测试报告/审查/SQL/API文档）到 .harness/archive/，含归档元数据。仅当用户显式调用
   /harness-archive 时使用；不得被其他阶段 skill 自动接续触发。
 ---
-<!-- generated by harness_deploy.py; core=74178a104a953fef; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=b2c7fb2239c7aa77; overlay=none; agent=codex; do not edit -->
 # harness-archive — 变更归档
 
 ## Purpose

package/harness/bundles/general/codex/harness-codebase-map/SKILL.md

@@ -3,7 +3,7 @@ name: harness-codebase-map
 description: 分析现有代码库并生成 .harness/codebase/map/
   下的结构化代码库地图。用于陌生项目理解、重大改造前梳理、harness-sync 提示 map 过期后的人工刷新。
 ---
-<!-- generated by harness_deploy.py; core=74178a104a953fef; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=b2c7fb2239c7aa77; overlay=none; agent=codex; do not edit -->
 # harness-codebase-map — 代码库地图
 
 ## Purpose

package/harness/bundles/general/codex/harness-execute/SKILL.md

@@ -4,7 +4,7 @@ description: 执行阶段：按变更簇执行 TDD
   编码循环（RED→GREEN→REFACTOR→编译验证），随后完成单元/接口/数据兼容验证并输出测试报告。仅当用户显式调用
   /harness-execute 时使用；不得因用户提到编码/实现/测试就自动触发，也不得被其他阶段 skill 自动接续。
 ---
-<!-- generated by harness_deploy.py; core=74178a104a953fef; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=b2c7fb2239c7aa77; overlay=none; agent=codex; do not edit -->
 # harness-execute — 执行（编码 + 验证）
 
 > 2026-08 阶段合并：原 `run`（编码）与 `test`（验证）合并为单一 `execute` 阶段；

package/harness/bundles/general/codex/harness-knowledge-ingest/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-knowledge-ingest
 description: 确认归档 ZIP 已上传并由 Hunter Platform 在服务端解包、校验和入库。客户端不再构建或维护本地知识索引。
 ---
-<!-- generated by harness_deploy.py; core=74178a104a953fef; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=b2c7fb2239c7aa77; overlay=none; agent=codex; do not edit -->
 # harness-knowledge-ingest
 
 知识 ingest 完全由 Hunter Platform 负责。归档完成时，客户端生成一个确定性 ZIP；

package/harness/bundles/general/codex/harness-knowledge-query/SKILL.md

@@ -2,7 +2,7 @@
 name: harness-knowledge-query
 description: 在规划、实现或排查前，通过 hunter-harness CLI 查询远端项目知识库。远端不可用时直接报告不可用，不建立本地索引或离线回退。
 ---
-<!-- generated by harness_deploy.py; core=74178a104a953fef; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=b2c7fb2239c7aa77; overlay=none; agent=codex; do not edit -->
 # harness-knowledge-query
 
 项目知识以 Hunter Platform 的服务端索引为唯一真源。客户端只提交查询并消费结果：

package/harness/bundles/general/codex/harness-plan/SKILL.md

@@ -3,7 +3,7 @@ name: harness-plan
 description: 将需求转化为设计文档+实施计划+完整测试场景表，必须在编码前完成。仅当用户显式调用 /harness-plan 或明确要求进入
   Harness 规划阶段时使用；不得因用户描述需求就自动触发。
 ---
-<!-- generated by harness_deploy.py; core=74178a104a953fef; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=b2c7fb2239c7aa77; overlay=none; agent=codex; do not edit -->
 # harness-plan — 需求规划
 
 ## Purpose

package/harness/bundles/general/codex/harness-pull/SKILL.md

@@ -3,7 +3,7 @@ name: harness-pull
 description: 从 Hunter Platform 下拉配置/规则/架构/指令（及显式来源分支的分支文件恢复）。仅当用户显式调用
   /harness-pull 或明确说'从平台拉取/恢复'时使用；不得自动触发。
 ---
-<!-- generated by harness_deploy.py; core=74178a104a953fef; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=b2c7fb2239c7aa77; overlay=none; agent=codex; do not edit -->
 # harness-pull — 从 Hunter Platform 下拉与恢复
 
 ## Purpose

package/harness/bundles/general/codex/harness-push/SKILL.md

@@ -3,7 +3,7 @@ name: harness-push
 description: 上传本地配置/规则/架构/指令（及显式归档）到 Hunter Platform。仅当用户显式调用 /harness-push
   或明确说'上传到平台'时使用；不得因存在本地修改就自动触发。
 ---
-<!-- generated by harness_deploy.py; core=74178a104a953fef; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=b2c7fb2239c7aa77; overlay=none; agent=codex; do not edit -->
 # harness-push — 上传到 Hunter Platform
 
 ## Purpose

package/harness/bundles/general/codex/harness-review/SKILL.md

@@ -4,7 +4,7 @@ description: 6维度代码审查（架构/安全/规范/兼容/测试/性能）
   .harness/context-index.json）和测试场景表，在隔离上下文运行。仅当用户显式调用 /harness-review 时使用；不得在
   test 结束后自动接续执行。
 ---
-<!-- generated by harness_deploy.py; core=74178a104a953fef; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=b2c7fb2239c7aa77; overlay=none; agent=codex; do not edit -->
 # harness-review — 代码审查
 
 ## Purpose

package/harness/bundles/general/codex/harness-submit/SKILL.md

@@ -3,7 +3,7 @@ name: harness-submit
 description: 最终提交封装：验证→中文 commit→提交/推送；worktree 模式含 --no-ff 合并回主分支。仅当用户显式调用
   /harness-submit（或 /harness-merge 重入合并段）时使用；用户口头说'提交/commit/push'时必须先确认，不得自动触发。
 ---
-<!-- generated by harness_deploy.py; core=74178a104a953fef; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=b2c7fb2239c7aa77; overlay=none; agent=codex; do not edit -->
 # harness-submit — 最终提交（含 worktree 合并）
 
 ## Purpose

package/harness/bundles/general/codex/harness-sync/SKILL.md

@@ -4,7 +4,7 @@ description: Use when the user asks to synchronize, refresh, or validate Harness
   metadata, adapters, remote knowledge ownership, instruction entrypoints,
   config origins, or CodeGraph status.
 ---
-<!-- generated by harness_deploy.py; core=74178a104a953fef; overlay=none; agent=codex; do not edit -->
+<!-- generated by harness_deploy.py; core=b2c7fb2239c7aa77; overlay=none; agent=codex; do not edit -->
 # harness-sync
 
 ## Purpose