@pzy560117/codex-harness 0.1.3 → 0.1.5

package/package-source/docs/codex-harness-engineering/templates/governance/feedback-evolution-loop.md

@@ -1,55 +1,55 @@
-# Feedback / Evolution Loop 模板
-
-## 1. 目标
-
-把重复出现的用户修正、审查失败和回归问题，从“聊天提醒”升级成“仓库规则”。
-
-## 2. 反馈来源
-
-- 用户直接纠正
-- Stage 1 review 失败
-- Stage 2 review 失败
-- verify 失败
-- E2E / visual regression 失败
-- 发布后回滚或线上事故
-
-## 3. 反馈记录格式
-
-| 日期 | 来源 | 触发信号 | 具体问题 | 临时修复 | 可沉淀规则 | 状态 |
-| --- | --- | --- | --- | --- | --- | --- |
-| 2026-04-22 | review | Stage 1 FAIL | 设计稿未同步更新 | 补设计稿 | UI 变更前必须更新设计稿 | open |
-
-## 4. 升级规则
-
-- 同类反馈出现 1 次: 记录到反馈表。
-- 同类反馈出现 2 次: 加入检查清单或 review 必查项。
-- 同类反馈出现 3 次及以上: 升级为模板、driver、Skill 或治理规则。
-
-## 5. 处理优先级
-
-1. 能被确定性脚本拦截的，优先脚本化。
-2. 能被 review 清单拦截的，加入 Stage 1 / Stage 2 模板。
-3. 能被真相源文档避免的，补 Product / Design / DEV-PLAN 模板。
-4. 最后才是单纯写经验说明。
-
-## 6. 常见升级方向
-
-- 需求误解 -> 更新 `prd-lite.md` / `acceptance-criteria.md`
-- 设计缺口 -> 更新 `design-brief.md` / `screen-states.md`
-- 任务切分过粗 -> 更新 `dev-plan.md`
-- 审查漏项 -> 更新 Stage 1 / Stage 2 review 模板
-- 验证不足 -> 更新 `tools/harness/verify.ps1`、`test_command`、CI
-
-## 7. Session 启动检查
-
-新 session 开始前，至少确认：
-
-- 有没有未处理的高频反馈
-- 有没有需要毕业为正式规则的事项
-- 当前模板是否已经同步这些规则
-
-## 8. 完成标准
-
-- 反馈不只被记录，而且被归类。
-- 高频问题已经迁移到模板、脚本或检查清单。
-- 同一类错误不会反复依赖人工口头提醒。
+# Feedback / Evolution Loop 模板
+
+## 1. 目标
+
+把重复出现的用户修正、审查失败和回归问题，从“聊天提醒”升级成“仓库规则”。
+
+## 2. 反馈来源
+
+- 用户直接纠正
+- Stage 1 review 失败
+- Stage 2 review 失败
+- verify 失败
+- E2E / visual regression 失败
+- 发布后回滚或线上事故
+
+## 3. 反馈记录格式
+
+| 日期 | 来源 | 触发信号 | 具体问题 | 临时修复 | 可沉淀规则 | 状态 |
+| --- | --- | --- | --- | --- | --- | --- |
+| 2026-04-22 | review | Stage 1 FAIL | 设计稿未同步更新 | 补设计稿 | UI 变更前必须更新设计稿 | open |
+
+## 4. 升级规则
+
+- 同类反馈出现 1 次: 记录到反馈表。
+- 同类反馈出现 2 次: 加入检查清单或 review 必查项。
+- 同类反馈出现 3 次及以上: 升级为模板、driver、Skill 或治理规则。
+
+## 5. 处理优先级
+
+1. 能被确定性脚本拦截的，优先脚本化。
+2. 能被 review 清单拦截的，加入 Stage 1 / Stage 2 模板。
+3. 能被真相源文档避免的，补 Product / Design / DEV-PLAN 模板。
+4. 最后才是单纯写经验说明。
+
+## 6. 常见升级方向
+
+- 需求误解 -> 更新 `prd-lite.md` / `acceptance-criteria.md`
+- 设计缺口 -> 更新 `design-brief.md` / `screen-states.md`
+- 任务切分过粗 -> 更新 `dev-plan.md`
+- 审查漏项 -> 更新 Stage 1 / Stage 2 review 模板
+- 验证不足 -> 更新 `tools/harness/verify.ps1`、`test_command`、CI
+
+## 7. Session 启动检查
+
+新 session 开始前，至少确认：
+
+- 有没有未处理的高频反馈
+- 有没有需要毕业为正式规则的事项
+- 当前模板是否已经同步这些规则
+
+## 8. 完成标准
+
+- 反馈不只被记录，而且被归类。
+- 高频问题已经迁移到模板、脚本或检查清单。
+- 同一类错误不会反复依赖人工口头提醒。

package/package-source/docs/codex-harness-engineering/templates/governance/retry-budget.yaml

@@ -1,30 +1,30 @@
-retry_policy:
-  max_attempts_per_task: 3
-  max_attempts_per_pr: 2
-  max_runtime_minutes_per_attempt: 30
-  max_changed_files_per_attempt: 20
-  cooldown_minutes_between_attempts: 10
-
-escalation_conditions:
-  - "同一验证命令连续失败 2 次"
-  - "修改文件数超过预算"
-  - "出现权限、密钥、生产环境依赖"
-  - "任务描述互相矛盾"
-  - "工作区不干净且无法归因"
-
-stop_conditions:
-  - "任务进入 BLOCKED"
-  - "风险等级升到 L3"
-  - "需要人工产品决策"
-  - "required status checks 缺失"
-
-allowed_retry_reasons:
-  - "lint/typecheck/build 失败"
-  - "测试用例缺失"
-  - "文档与代码不一致"
-
-disallowed_retry_reasons:
-  - "未知生产事故"
-  - "凭证缺失"
-  - "权限不足"
-  - "需要人工确认的数据修复"
+retry_policy:
+  max_attempts_per_task: 3
+  max_attempts_per_pr: 2
+  max_runtime_minutes_per_attempt: 30
+  max_changed_files_per_attempt: 20
+  cooldown_minutes_between_attempts: 10
+
+escalation_conditions:
+  - "同一验证命令连续失败 2 次"
+  - "修改文件数超过预算"
+  - "出现权限、密钥、生产环境依赖"
+  - "任务描述互相矛盾"
+  - "工作区不干净且无法归因"
+
+stop_conditions:
+  - "任务进入 BLOCKED"
+  - "风险等级升到 L3"
+  - "需要人工产品决策"
+  - "required status checks 缺失"
+
+allowed_retry_reasons:
+  - "lint/typecheck/build 失败"
+  - "测试用例缺失"
+  - "文档与代码不一致"
+
+disallowed_retry_reasons:
+  - "未知生产事故"
+  - "凭证缺失"
+  - "权限不足"
+  - "需要人工确认的数据修复"

package/package-source/docs/codex-harness-engineering/templates/governance/risk-levels.yaml

@@ -1,53 +1,53 @@
-levels:
-  L0:
-    description: "低风险文档或局部非运行时代码修改"
-    allowed_actions:
-      - "auto-fix"
-      - "auto-pr"
-      - "auto-merge"
-    required_checks:
-      - "git diff --check"
-    requires_human_approval: false
-    auto_merge_allowed: true
-
-  L1:
-    description: "常规功能改动，影响范围清晰，可由测试充分覆盖"
-    allowed_actions:
-      - "auto-fix"
-      - "auto-pr"
-    required_checks:
-      - "lint"
-      - "typecheck"
-      - "unit-test"
-      - "build"
-    requires_human_approval: false
-    auto_merge_allowed: false
-
-  L2:
-    description: "跨模块改动、接口变更、关键页面交互变更"
-    allowed_actions:
-      - "auto-pr"
-    required_checks:
-      - "lint"
-      - "typecheck"
-      - "unit-test"
-      - "integration-test"
-      - "contract-validate"
-      - "e2e"
-    requires_human_approval: true
-    auto_merge_allowed: false
-
-  L3:
-    description: "高风险改动，涉及权限、支付、迁移、删除、生产安全"
-    allowed_actions:
-      - "draft-pr-only"
-    required_checks:
-      - "lint"
-      - "typecheck"
-      - "unit-test"
-      - "integration-test"
-      - "security-scan"
-      - "manual-review"
-      - "rollback-check"
-    requires_human_approval: true
-    auto_merge_allowed: false
+levels:
+  L0:
+    description: "低风险文档或局部非运行时代码修改"
+    allowed_actions:
+      - "auto-fix"
+      - "auto-pr"
+      - "auto-merge"
+    required_checks:
+      - "git diff --check"
+    requires_human_approval: false
+    auto_merge_allowed: true
+
+  L1:
+    description: "常规功能改动，影响范围清晰，可由测试充分覆盖"
+    allowed_actions:
+      - "auto-fix"
+      - "auto-pr"
+    required_checks:
+      - "lint"
+      - "typecheck"
+      - "unit-test"
+      - "build"
+    requires_human_approval: false
+    auto_merge_allowed: false
+
+  L2:
+    description: "跨模块改动、接口变更、关键页面交互变更"
+    allowed_actions:
+      - "auto-pr"
+    required_checks:
+      - "lint"
+      - "typecheck"
+      - "unit-test"
+      - "integration-test"
+      - "contract-validate"
+      - "e2e"
+    requires_human_approval: true
+    auto_merge_allowed: false
+
+  L3:
+    description: "高风险改动，涉及权限、支付、迁移、删除、生产安全"
+    allowed_actions:
+      - "draft-pr-only"
+    required_checks:
+      - "lint"
+      - "typecheck"
+      - "unit-test"
+      - "integration-test"
+      - "security-scan"
+      - "manual-review"
+      - "rollback-check"
+    requires_human_approval: true
+    auto_merge_allowed: false

package/package-source/docs/codex-harness-engineering/templates/governance/sandbox-policy.md

@@ -1,13 +1,13 @@
-# 权限策略
-
-## 基本原则
-
-- driver 负责统一执行、记录和提交。
-- 人工会话可以分析和改文档，但不要伪造 driver 结果。
-- 禁止在脏工作区中自动提交。
-- 禁止未经确认回滚、覆盖或删除用户改动。
-
-## 文件边界
-
-- 只修改当前任务要求的文件。
-- 对运行产物的忽略必须通过 `non_blocking_dirty_paths` 显式声明。
+# 权限策略
+
+## 基本原则
+
+- driver 负责统一执行、记录和提交。
+- 人工会话可以分析和改文档，但不要伪造 driver 结果。
+- 禁止在脏工作区中自动提交。
+- 禁止未经确认回滚、覆盖或删除用户改动。
+
+## 文件边界
+
+- 只修改当前任务要求的文件。
+- 对运行产物的忽略必须通过 `non_blocking_dirty_paths` 显式声明。

package/package-source/docs/codex-harness-engineering/templates/hooks/AGENTS.md

@@ -0,0 +1,15 @@
+# AGENTS.md
+
+## 目录作用
+
+- 存放 hook 配置模板和 stop hook 脚本模板。
+
+## 结构索引
+
+- `hooks.json`：hook 配置。
+- `hook-stop-verify.ps1`：stop 时的校验脚本。
+
+## 修改规则
+
+- 这里的脚本影响会话生命周期和自动继续逻辑，改动前要确认不会破坏 driver 正常收口。
+- 不要把项目业务逻辑塞进通用 hook。

package/package-source/docs/codex-harness-engineering/templates/hooks/hook-stop-verify.ps1

@@ -225,13 +225,63 @@ function Get-StableProjectKey {
   }
 }
 
-function Get-StatePath {
-  param([string]$Root)
+function Get-StatePath {
+  param([string]$Root)
 
   $stateRoot = Join-Path ([System.IO.Path]::GetTempPath()) "codex-stop-hook-state"
   New-Item -ItemType Directory -Force -Path $stateRoot | Out-Null
-  return (Join-Path $stateRoot "$(Get-StableProjectKey -Root $Root).json")
-}
+  return (Join-Path $stateRoot "$(Get-StableProjectKey -Root $Root).json")
+}
+
+function Get-HarnessStateConfigPath {
+  param([string]$Root)
+
+  return (Join-Path $Root ".codex-harness\state\config.json")
+}
+
+function Get-HarnessPackageRoot {
+  param([string]$Root)
+
+  $configPath = Get-HarnessStateConfigPath -Root $Root
+  if (-not (Test-Path -LiteralPath $configPath)) {
+    return ""
+  }
+
+  try {
+    $configDocument = Read-JsonFile -Path $configPath
+    $packageRoot = [string](Get-ObjectPropertyValue -InputObject $configDocument -Name "packageRoot" -Default "")
+    if ([string]::IsNullOrWhiteSpace($packageRoot)) {
+      return ""
+    }
+
+    return [System.IO.Path]::GetFullPath($packageRoot)
+  }
+  catch {
+    return ""
+  }
+}
+
+function Resolve-HarnessDocReference {
+  param(
+    [string]$Root,
+    [string]$RelativePath
+  )
+
+  $projectPath = Join-Path $Root $RelativePath
+  if (Test-Path -LiteralPath $projectPath) {
+    return $RelativePath.Replace("/", "\")
+  }
+
+  $packageRoot = Get-HarnessPackageRoot -Root $Root
+  if (-not [string]::IsNullOrWhiteSpace($packageRoot)) {
+    $packagePath = Join-Path $packageRoot $RelativePath
+    if (Test-Path -LiteralPath $packagePath) {
+      return ([System.IO.Path]::GetFullPath($packagePath))
+    }
+  }
+
+  return $RelativePath.Replace("/", "\")
+}
 
 function Read-GateState {
   param([string]$Path)
@@ -470,9 +520,9 @@ function Get-LatestTraceInfo {
   }
 }
 
-function Block-OnTraceEvidenceIfNeeded {
-  param(
-    [string]$Root,
+function Block-OnTraceEvidenceIfNeeded {
+  param(
+    [string]$Root,
     [string]$EvidenceKey,
     [object]$TraceInfo
   )
@@ -508,59 +558,59 @@ Evidence:
 Next action:
 Inspect the latest trace and rerun the driver or repair task before stopping.
 "@
-  }
-}
-
-function ConvertTo-GovernanceFindingText {
-  param([object]$GovernanceResult)
-
-  $lines = @()
-  foreach ($finding in @($GovernanceResult.findings)) {
-    $lines += "- [$($finding.severity)] $($finding.category): $($finding.message) (repair=$($finding.repair_mode), doc=$($finding.target_doc))"
-  }
-
-  if ($lines.Count -eq 0) {
-    return "- (none)"
-  }
-
-  return ($lines -join "`n")
-}
-
-function Invoke-HarnessGovernanceCheck {
-  param([string]$Root)
-
-  $checkScript = Join-Path $Root "scripts\harness\harness-governance-check.ps1"
-  if (-not (Test-Path -LiteralPath $checkScript)) {
-    return $null
-  }
-
-  $output = & powershell -NoProfile -ExecutionPolicy Bypass -File $checkScript -ProjectRoot $Root -WriteExperience 2>$null
-  if ([string]::IsNullOrWhiteSpace(($output | Out-String))) {
-    return $null
-  }
-
-  try {
-    return ($output | ConvertFrom-Json)
-  }
-  catch {
-    return [pscustomobject]@{
-      status = "fail"
-      findings = @([pscustomobject]@{
-        severity = "block"
-        category = "governance_check_json"
-        message = "harness-governance-check.ps1 returned non-JSON output."
-        repair_mode = "agent_repair"
-        target_doc = "docs/harness/governance-auto-repair.md"
-      })
-      experience_written = $false
-      next_action = "Inspect tools/install/ai-workflow/harness-governance-check.ps1 and rerun tools/harness/verify.ps1."
-    }
-  }
-}
-
-function Block-WithState {
-  param(
-    [string]$Root,
+  }
+}
+
+function ConvertTo-GovernanceFindingText {
+  param([object]$GovernanceResult)
+
+  $lines = @()
+  foreach ($finding in @($GovernanceResult.findings)) {
+    $lines += "- [$($finding.severity)] $($finding.category): $($finding.message) (repair=$($finding.repair_mode), doc=$($finding.target_doc))"
+  }
+
+  if ($lines.Count -eq 0) {
+    return "- (none)"
+  }
+
+  return ($lines -join "`n")
+}
+
+function Invoke-HarnessGovernanceCheck {
+  param([string]$Root)
+
+  $checkScript = Join-Path $Root "scripts\harness\harness-governance-check.ps1"
+  if (-not (Test-Path -LiteralPath $checkScript)) {
+    return $null
+  }
+
+  $output = & powershell -NoProfile -ExecutionPolicy Bypass -File $checkScript -ProjectRoot $Root -WriteExperience 2>$null
+  if ([string]::IsNullOrWhiteSpace(($output | Out-String))) {
+    return $null
+  }
+
+  try {
+    return ($output | ConvertFrom-Json)
+  }
+  catch {
+    return [pscustomobject]@{
+      status = "fail"
+      findings = @([pscustomobject]@{
+        severity = "block"
+        category = "governance_check_json"
+        message = "harness-governance-check.ps1 returned non-JSON output."
+        repair_mode = "agent_repair"
+        target_doc = "docs/harness/governance-auto-repair.md"
+      })
+      experience_written = $false
+      next_action = "Inspect tools/install/ai-workflow/harness-governance-check.ps1 and rerun tools/harness/verify.ps1."
+    }
+  }
+}
+
+function Block-WithState {
+  param(
+    [string]$Root,
     [string]$EvidenceKey,
     [string]$ReasonCode,
     [string]$Reason
@@ -574,21 +624,24 @@ function Block-WithState {
     Exit-Allow
   }
 
-  Write-GateState -Path $statePath -EvidenceKey $EvidenceKey -BlockCount $blockCount -ReasonCode $ReasonCode
-
-  $subagentReminder = @'
-
-Before using any sub-agent on the next pass:
-- first read `AGENTS.md`
-- then read `docs/harness/task-session-strategy.md`
-- then read `.codex/rules/agents.md`
-- then read the current truth source and any relevant `.agents/skills/*/SKILL.md` files when they exist
-- only after that may you use a read-only auxiliary sub-agent or a matching writer sub-agent
-- if any repository file must change outside driver-owned runtime outputs, delegate it to the matching writer sub-agent instead of editing from the main/controller session
-- read-only roles must stay read-only
-'@
-
-  $suffix = @"
+  Write-GateState -Path $statePath -EvidenceKey $EvidenceKey -BlockCount $blockCount -ReasonCode $ReasonCode
+
+  $taskSessionStrategyReference = Resolve-HarnessDocReference -Root $Root -RelativePath "docs/harness/task-session-strategy.md"
+
+  $subagentReminder = @'
+
+Before using any sub-agent on the next pass:
+- first read `AGENTS.md`
+- then read `__TASK_SESSION_STRATEGY__`
+- then read `.codex/rules/agents.md`
+- then read the current truth source and any relevant `.agents/skills/*/SKILL.md` files when they exist
+- only after that may you use a read-only auxiliary sub-agent or a matching writer sub-agent
+- if any repository file must change outside driver-owned runtime outputs, delegate it to the matching writer sub-agent instead of editing from the main/controller session
+- read-only roles must stay read-only
+'@
+  $subagentReminder = $subagentReminder.Replace("__TASK_SESSION_STRATEGY__", $taskSessionStrategyReference)
+
+  $suffix = @"
 
 Forced continuation: $blockCount/$MaxBlocksWithoutProgress for the current evidence snapshot.
 If the next pass cannot make progress, report the real human blocker with the latest trace/progress evidence.
@@ -613,7 +666,7 @@ try {
   $resolvedProjectRoot = (Resolve-Path -LiteralPath $ProjectRoot).Path
   $taskPath = Join-Path $resolvedProjectRoot "task.json"
   $progressPath = Join-Path $resolvedProjectRoot "progress.txt"
-  $driverPath = Join-Path $resolvedProjectRoot "tools\\harness/codex-loop.ps1"
+  $driverPath = Join-Path $resolvedProjectRoot "tools\\harness/codex-loop.ps1"
   $harnessDocsPath = Join-Path $resolvedProjectRoot "docs\harness"
   $traceDir = Join-Path $resolvedProjectRoot "traces"
 
@@ -622,13 +675,13 @@ try {
     Exit-Allow
   }
 
-  $latestTrace = Get-LatestTrace -TraceDir $traceDir
-  $latestTraceInfo = Get-LatestTraceInfo -LatestTrace $latestTrace
-  $evidenceKey = New-EvidenceKey -TaskPath $taskPath -ProgressPath $progressPath -LatestTrace $latestTrace
-
-  if (-not (Test-Path -LiteralPath $taskPath)) {
-    Block-WithState -Root $resolvedProjectRoot -EvidenceKey $evidenceKey -ReasonCode "missing_task" -Reason @"
-Harness stop gate: task.json is missing.
+  $latestTrace = Get-LatestTrace -TraceDir $traceDir
+  $latestTraceInfo = Get-LatestTraceInfo -LatestTrace $latestTrace
+  $evidenceKey = New-EvidenceKey -TaskPath $taskPath -ProgressPath $progressPath -LatestTrace $latestTrace
+
+  if (-not (Test-Path -LiteralPath $taskPath)) {
+    Block-WithState -Root $resolvedProjectRoot -EvidenceKey $evidenceKey -ReasonCode "missing_task" -Reason @"
+Harness stop gate: task.json is missing.
 
 Next action:
 Initialize a real harness task queue before ending the session.
@@ -650,40 +703,40 @@ Restore the harness runtime files or run bootstrap before ending the session.
     if (-not [string]::IsNullOrWhiteSpace(($diffCheck | Out-String))) {
       $reason = "$reason`n`nKey output:`n$($diffCheck | Out-String)"
     }
-
-    Block-WithState -Root $resolvedProjectRoot -EvidenceKey $evidenceKey -ReasonCode "diff_check_failed" -Reason $reason
-  }
-
-  $governanceResult = Invoke-HarnessGovernanceCheck -Root $resolvedProjectRoot
-  if ($null -ne $governanceResult -and [string]$governanceResult.status -eq "fail") {
-    $findingText = ConvertTo-GovernanceFindingText -GovernanceResult $governanceResult
-    $experienceText = if ($governanceResult.experience_written -eq $true) {
-      "Stop hook wrote a new experience entry to docs/harness/governance-auto-repair.md."
-    }
-    else {
-      "No new governance experience entry was written, or it was already recorded."
-    }
-
-    Block-WithState -Root $resolvedProjectRoot -EvidenceKey $evidenceKey -ReasonCode "harness_governance_drift" -Reason @"
-Harness stop gate: governance drift or failed trace experience detected.
-
-Findings:
-$findingText
-
-Experience:
-- $experienceText
-
-Next action:
-$($governanceResult.next_action)
-
-Verification:
-- git diff --check
-- powershell -NoProfile -ExecutionPolicy Bypass -File .\tools\\harness/verify.ps1
-"@
-  }
-
-  try {
-    $taskDocument = Read-JsonFile -Path $taskPath
+
+    Block-WithState -Root $resolvedProjectRoot -EvidenceKey $evidenceKey -ReasonCode "diff_check_failed" -Reason $reason
+  }
+
+  $governanceResult = Invoke-HarnessGovernanceCheck -Root $resolvedProjectRoot
+  if ($null -ne $governanceResult -and [string]$governanceResult.status -eq "fail") {
+    $findingText = ConvertTo-GovernanceFindingText -GovernanceResult $governanceResult
+    $experienceText = if ($governanceResult.experience_written -eq $true) {
+      "Stop hook wrote a new experience entry to docs/harness/governance-auto-repair.md."
+    }
+    else {
+      "No new governance experience entry was written, or it was already recorded."
+    }
+
+    Block-WithState -Root $resolvedProjectRoot -EvidenceKey $evidenceKey -ReasonCode "harness_governance_drift" -Reason @"
+Harness stop gate: governance drift or failed trace experience detected.
+
+Findings:
+$findingText
+
+Experience:
+- $experienceText
+
+Next action:
+$($governanceResult.next_action)
+
+Verification:
+- git diff --check
+- powershell -NoProfile -ExecutionPolicy Bypass -File .\tools\\harness/verify.ps1
+"@
+  }
+
+  try {
+    $taskDocument = Read-JsonFile -Path $taskPath
   }
   catch {
     Block-WithState -Root $resolvedProjectRoot -EvidenceKey $evidenceKey -ReasonCode "task_json_invalid" -Reason @"
@@ -733,7 +786,7 @@ Initialize a real harness task queue before ending the session.
   $taskId = [string]$runnableTask.id
   $description = [string](Get-ObjectPropertyValue -InputObject $runnableTask -Name "description" -Default "")
   $traceSummary = $latestTraceInfo.Summary
-  $command = "powershell -NoProfile -ExecutionPolicy Bypass -File .\tools\\harness/codex-loop.ps1 -RunUntilDone"
+  $command = "powershell -NoProfile -ExecutionPolicy Bypass -File .\tools\\harness/codex-loop.ps1 -RunUntilDone"
 
   $workspaceGateInfo = Get-DirtyWorkspaceGateInfo -Root $resolvedProjectRoot -TaskDocument $taskDocument -Task $runnableTask
   if ($workspaceGateInfo.require_clean_workspace -and $workspaceGateInfo.disallowed_entries.Count -gt 0) {