@pzy560117/codex-harness 0.1.3 → 0.1.5

package/package-source/docs/codex-harness-engineering/templates/bootstrap-codex-harness.ps1

@@ -13,13 +13,13 @@ param(
 Set-StrictMode -Version Latest
 $ErrorActionPreference = "Stop"
 
-function Get-PackageRoot {
-  return [System.IO.Path]::GetFullPath((Join-Path $PSScriptRoot "..\.."))
-}
-
-if ([string]::IsNullOrWhiteSpace($ProjectRoot)) {
-  $ProjectRoot = Get-PackageRoot
-}
+function Get-PackageRoot {
+  return [System.IO.Path]::GetFullPath((Join-Path $PSScriptRoot "..\.."))
+}
+
+if ([string]::IsNullOrWhiteSpace($ProjectRoot)) {
+  $ProjectRoot = Get-PackageRoot
+}
 
 function Resolve-TemplateRoot {
   <#
@@ -36,9 +36,9 @@ function Resolve-TemplateRoot {
   }
 
   $candidates += @(
-    (Join-Path (Get-PackageRoot) "docs\codex-harness-engineering\templates"),
-    (Join-Path (Get-PackageRoot) ".agents\docs\codex-harness-engineering\templates"),
-    (Get-PackageRoot),
+    (Join-Path (Get-PackageRoot) "docs\codex-harness-engineering\templates"),
+    (Join-Path (Get-PackageRoot) ".agents\docs\codex-harness-engineering\templates"),
+    (Get-PackageRoot),
     (Join-Path $ProjectPath "docs\codex-harness-engineering\templates"),
     (Join-Path $ProjectPath ".agents\docs\codex-harness-engineering\templates")
   )
@@ -57,7 +57,7 @@ function Resolve-TemplateRoot {
     }
 
     $agentsTemplate = Join-Path $resolved "runtime\AGENTS.md"
-    $driverTemplate = Join-Path $resolved "runtime\tools/harness/codex-loop.ps1"
+    $driverTemplate = Join-Path $resolved "runtime\codex-loop.ps1"
     if ((Test-Path -LiteralPath $agentsTemplate) -and (Test-Path -LiteralPath $driverTemplate)) {
       return $resolved
     }
@@ -66,7 +66,7 @@ function Resolve-TemplateRoot {
   throw "找不到可用模板目录。请显式传入 -TemplateRoot。"
 }
 
-function Copy-ManagedFile {
+function Copy-ManagedFile {
   <#
     复制单个模板文件，默认只补齐缺失文件。
   #>
@@ -97,62 +97,62 @@ function Copy-ManagedFile {
   }
 
   Copy-Item -LiteralPath $sourcePath -Destination $destinationPath -Force
-  return [PSCustomObject]@{
-    Path = $destinationPath
-    Action = "copied"
-  }
-}
-
-function Copy-ManagedDirectory {
-  param(
-    [string]$SourceDirectory,
-    [string]$DestinationDirectory,
-    [bool]$Overwrite
-  )
-
-  if (-not (Test-Path -LiteralPath $SourceDirectory)) {
-    throw "模板目录不存在: $SourceDirectory"
-  }
-
-  if (Test-Path -LiteralPath $DestinationDirectory) {
-    if (-not $Overwrite) {
-      return [PSCustomObject]@{
-        Path = $DestinationDirectory
-        Action = "kept"
-      }
-    }
-
-    Remove-Item -LiteralPath $DestinationDirectory -Recurse -Force
-  }
-
-  New-Item -ItemType Directory -Force -Path $DestinationDirectory | Out-Null
-  $robocopyArgs = @(
-    $SourceDirectory,
-    $DestinationDirectory,
-    "/E",
-    "/COPY:DAT",
-    "/DCOPY:DAT",
-    "/R:2",
-    "/W:1",
-    "/NFL",
-    "/NDL",
-    "/NJH",
-    "/NJS",
-    "/NP"
-  )
-
-  & robocopy @robocopyArgs | Out-Null
-  $robocopyExitCode = $LASTEXITCODE
-  if ($robocopyExitCode -ge 8) {
-    throw "复制模板目录失败: $SourceDirectory -> $DestinationDirectory (robocopy exit $robocopyExitCode)"
-  }
-
-  $global:LASTEXITCODE = 0
-  return [PSCustomObject]@{
-    Path = $DestinationDirectory
-    Action = "copied"
-  }
-}
+  return [PSCustomObject]@{
+    Path = $destinationPath
+    Action = "copied"
+  }
+}
+
+function Copy-ManagedDirectory {
+  param(
+    [string]$SourceDirectory,
+    [string]$DestinationDirectory,
+    [bool]$Overwrite
+  )
+
+  if (-not (Test-Path -LiteralPath $SourceDirectory)) {
+    throw "模板目录不存在: $SourceDirectory"
+  }
+
+  if (Test-Path -LiteralPath $DestinationDirectory) {
+    if (-not $Overwrite) {
+      return [PSCustomObject]@{
+        Path = $DestinationDirectory
+        Action = "kept"
+      }
+    }
+
+    Remove-Item -LiteralPath $DestinationDirectory -Recurse -Force
+  }
+
+  New-Item -ItemType Directory -Force -Path $DestinationDirectory | Out-Null
+  $robocopyArgs = @(
+    $SourceDirectory,
+    $DestinationDirectory,
+    "/E",
+    "/COPY:DAT",
+    "/DCOPY:DAT",
+    "/R:2",
+    "/W:1",
+    "/NFL",
+    "/NDL",
+    "/NJH",
+    "/NJS",
+    "/NP"
+  )
+
+  & robocopy @robocopyArgs | Out-Null
+  $robocopyExitCode = $LASTEXITCODE
+  if ($robocopyExitCode -ge 8) {
+    throw "复制模板目录失败: $SourceDirectory -> $DestinationDirectory (robocopy exit $robocopyExitCode)"
+  }
+
+  $global:LASTEXITCODE = 0
+  return [PSCustomObject]@{
+    Path = $DestinationDirectory
+    Action = "copied"
+  }
+}
 
 function Sync-TemplateCodexAgents {
   param(
@@ -231,7 +231,7 @@ function Ensure-TaskFile {
   }
 
   if ([string]::IsNullOrWhiteSpace($taskDocument.runtime.driver)) {
-    $taskDocument.runtime.driver = "powershell -NoProfile -ExecutionPolicy Bypass -File .\tools\\harness/codex-loop.ps1"
+    $taskDocument.runtime.driver = "powershell -NoProfile -ExecutionPolicy Bypass -File .\tools\\harness/codex-loop.ps1"
     $taskDocument | ConvertTo-Json -Depth 8 | Set-Content -LiteralPath $taskPath -Encoding UTF8
     return [PSCustomObject]@{
       Path = $taskPath
@@ -360,7 +360,7 @@ function Get-LockManagedFiles {
       continue
     }
 
-    if ($kind -eq "generated-lock" -or $destination -eq ".codex-harness/locks/package.lock.json") {
+    if ($kind -eq "generated-lock" -or $destination -eq ".codex-harness/locks/package.lock.json") {
       continue
     }
 
@@ -453,7 +453,7 @@ function Write-PackageLock {
     }
   }
 
-  $lockDirectory = Join-Path $ProjectPath ".codex-harness\locks"
+  $lockDirectory = Join-Path $ProjectPath ".codex-harness\locks"
   if (-not (Test-Path -LiteralPath $lockDirectory -PathType Container)) {
     New-Item -ItemType Directory -Force -Path $lockDirectory | Out-Null
   }
@@ -506,7 +506,7 @@ function Write-HarnessConfig {
     }
   }
 
-  $configDirectory = Join-Path $ProjectPath ".codex-harness\state"
+  $configDirectory = Join-Path $ProjectPath ".codex-harness\state"
   if (-not (Test-Path -LiteralPath $configDirectory -PathType Container)) {
     New-Item -ItemType Directory -Force -Path $configDirectory | Out-Null
   }
@@ -537,12 +537,12 @@ function Write-InstallManifestSnapshot {
   $installManifestPath = Join-Path $packageRoot "install-manifest.json"
   if (-not (Test-Path -LiteralPath $installManifestPath -PathType Leaf)) {
     return [PSCustomObject]@{
-      Path = (Join-Path $ProjectPath ".codex-harness\manifests\install-manifest.json")
+      Path = (Join-Path $ProjectPath ".codex-harness\manifests\install-manifest.json")
       Action = "missing-source"
     }
   }
 
-  $snapshotDirectory = Join-Path $ProjectPath ".codex-harness\manifests"
+  $snapshotDirectory = Join-Path $ProjectPath ".codex-harness\manifests"
   if (-not (Test-Path -LiteralPath $snapshotDirectory -PathType Container)) {
     New-Item -ItemType Directory -Force -Path $snapshotDirectory | Out-Null
   }
@@ -560,15 +560,15 @@ $resolvedTemplateRoot = Resolve-TemplateRoot -ProjectPath $resolvedProjectRoot -
 $results = @()
 
 $rootFiles = @(
-  @{ Source = "runtime\AGENTS.md"; Destination = "AGENTS.md" },
-  @{ Source = "tools/install/bootstrap-codex-harness.ps1"; Destination = "tools\\install/bootstrap-codex-harness.ps1" },
-  @{ Source = "runtime\tools/harness/codex-loop.ps1"; Destination = "tools\\harness/codex-loop.ps1" },
-  @{ Source = "runtime\tools/harness/doctor.ps1"; Destination = "tools\\harness/doctor.ps1" },
+  @{ Source = "runtime\AGENTS.md"; Destination = "AGENTS.md" },
+  @{ Source = "tools/install/bootstrap-codex-harness.ps1"; Destination = "tools\\install/bootstrap-codex-harness.ps1" },
+  @{ Source = "runtime\codex-loop.ps1"; Destination = "tools\\harness/codex-loop.ps1" },
+  @{ Source = "runtime\doctor.ps1"; Destination = "tools\\harness/doctor.ps1" },
   @{ Source = "config\codex-config.toml"; Destination = ".codex\config.toml" },
   @{ Source = "config\codex-readme.md"; Destination = ".codex\README.md" },
   @{ Source = "hooks\hooks.json"; Destination = ".codex\hooks.json" },
-  @{ Source = "hooks\hook-stop-verify.ps1"; Destination = "tools\harness\hook-stop-verify.ps1" },
-  @{ Source = "scripts\ai-workflow\check-ai-sync-drift.ps1"; Destination = "tools\install\ai-workflow\check-ai-sync-drift.ps1" },
+  @{ Source = "hooks\hook-stop-verify.ps1"; Destination = "tools\harness\hook-stop-verify.ps1" },
+  @{ Source = "scripts\ai-workflow\check-ai-sync-drift.ps1"; Destination = "tools\install\ai-workflow\check-ai-sync-drift.ps1" },
   @{ Source = "runtime\task-run-profile.json"; Destination = ".codex\task-run-profile.json" },
   @{ Source = "prompts\implement-one-task.md"; Destination = ".codex\prompts\implement-one-task.md" },
   @{ Source = "prompts\controller-loop.md"; Destination = ".codex\prompts\controller-loop.md" },
@@ -584,34 +584,58 @@ $rootFiles = @(
   @{ Source = "prompts\worker-role\test-runner.md"; Destination = ".codex\prompts\worker-role\test-runner.md" },
   @{ Source = "prompts\worker-role\docs-worker.md"; Destination = ".codex\prompts\worker-role\docs-worker.md" },
   @{ Source = "prompts\worker-role\harness-writer.md"; Destination = ".codex\prompts\worker-role\harness-writer.md" },
-  @{ Source = "runtime\smoke-task.json"; Destination = "tools\harness\templates\smoke-task.json" },
-  @{ Source = "runtime\tools/harness/templates/project-task-template.json"; Destination = "tools\harness\templates\tools/harness/templates/project-task-template.json" },
-  @{ Source = "runtime\tools/harness/verify.ps1"; Destination = "tools\\harness/verify.ps1" },
-  @{ Source = "config\tools/install/env-check.ps1"; Destination = "tools\\install/env-check.ps1" },
-  @{ Source = "trace\docs/harness/trace.schema.json"; Destination = "docs\\harness/trace.schema.json" }
+  @{ Source = "runtime\smoke-task.json"; Destination = "tools\harness\templates\smoke-task.json" },
+  @{ Source = "runtime\project-task-template.json"; Destination = "tools\harness\templates\project-task-template.json" },
+  @{ Source = "runtime\verify.ps1"; Destination = "tools\\harness/verify.ps1" },
+  @{ Source = "tools\harness\spec-lint.ps1"; Destination = "tools\\harness/spec-lint.ps1" },
+  @{ Source = "tools\harness\docs-lint.ps1"; Destination = "tools\\harness/docs-lint.ps1" },
+  @{ Source = "tools\harness\data-lint.ps1"; Destination = "tools\\harness/data-lint.ps1" },
+  @{ Source = "tools\harness\integration-lint.ps1"; Destination = "tools\\harness/integration-lint.ps1" },
+  @{ Source = "tools\harness\mobile-lint.ps1"; Destination = "tools\\harness/mobile-lint.ps1" },
+  @{ Source = "tools\harness\acceptance-lint.ps1"; Destination = "tools\\harness/acceptance-lint.ps1" },
+  @{ Source = "tools\harness\context-lint.ps1"; Destination = "tools\\harness/context-lint.ps1" },
+  @{ Source = "tools\harness\architecture-lint.ps1"; Destination = "tools\\harness/architecture-lint.ps1" },
+  @{ Source = "tools\harness\directory-lint.ps1"; Destination = "tools\\harness/directory-lint.ps1" },
+  @{ Source = "tools\harness\component-lint.ps1"; Destination = "tools\\harness/component-lint.ps1" },
+  @{ Source = "tools\harness\business-lint.ps1"; Destination = "tools\\harness/business-lint.ps1" },
+  @{ Source = "tools\harness\contract-lint.ps1"; Destination = "tools\\harness/contract-lint.ps1" },
+  @{ Source = "tools\harness\state-lint.ps1"; Destination = "tools\\harness/state-lint.ps1" },
+  @{ Source = "tools\harness\ui-lint.ps1"; Destination = "tools\\harness/ui-lint.ps1" },
+  @{ Source = "tools\harness\backend-lint.ps1"; Destination = "tools\\harness/backend-lint.ps1" },
+  @{ Source = "tools\harness\security-lint.ps1"; Destination = "tools\\harness/security-lint.ps1" },
+  @{ Source = "tools\harness\testing-lint.ps1"; Destination = "tools\\harness/testing-lint.ps1" },
+  @{ Source = "tools\harness\impact-lint.ps1"; Destination = "tools\\harness/impact-lint.ps1" },
+  @{ Source = "tools\harness\performance-lint.ps1"; Destination = "tools\\harness/performance-lint.ps1" },
+  @{ Source = "tools\harness\config-lint.ps1"; Destination = "tools\\harness/config-lint.ps1" },
+  @{ Source = "tools\harness\observability-lint.ps1"; Destination = "tools\\harness/observability-lint.ps1" },
+  @{ Source = "tools\harness\refactor-lint.ps1"; Destination = "tools\\harness/refactor-lint.ps1" },
+  @{ Source = "tools\harness\session-lint.ps1"; Destination = "tools\\harness/session-lint.ps1" },
+  @{ Source = "tools\harness\style-lint.ps1"; Destination = "tools\\harness/style-lint.ps1" },
+  @{ Source = "config\tools/install/env-check.ps1"; Destination = "tools\\install/env-check.ps1" },
+  @{ Source = "trace\docs/harness/trace.schema.json"; Destination = "docs\\harness/trace.schema.json" }
 )
 
 foreach ($file in $rootFiles) {
   $results += Copy-ManagedFile -SourceRoot $resolvedTemplateRoot -SourceRelativePath $file.Source -DestinationRoot $resolvedProjectRoot -DestinationRelativePath $file.Destination -Overwrite:$Force.IsPresent
 }
 
-$results += Sync-TemplateCodexAgents -TemplateRoot $resolvedTemplateRoot -ProjectPath $resolvedProjectRoot -Overwrite:$Force.IsPresent
-$results += Sync-TemplateCodexRules -TemplateRoot $resolvedTemplateRoot -ProjectPath $resolvedProjectRoot -Overwrite:$Force.IsPresent
-
-$packageAssetsRoot = Join-Path $resolvedTemplateRoot "package-assets"
-if (Test-Path -LiteralPath $packageAssetsRoot) {
-  $results += Copy-ManagedDirectory `
-    -SourceDirectory (Join-Path $packageAssetsRoot "skills") `
-    -DestinationDirectory (Join-Path $resolvedProjectRoot ".agents\skills") `
-    -Overwrite:$Force.IsPresent
-
-  $results += Copy-ManagedDirectory `
-    -SourceDirectory (Join-Path $packageAssetsRoot "workflows") `
-    -DestinationDirectory (Join-Path $resolvedProjectRoot ".agents\workflows") `
-    -Overwrite:$Force.IsPresent
-}
-
-$results += Ensure-TaskFile -SourceRoot $resolvedTemplateRoot -DestinationRoot $resolvedProjectRoot
+$results += Sync-TemplateCodexAgents -TemplateRoot $resolvedTemplateRoot -ProjectPath $resolvedProjectRoot -Overwrite:$Force.IsPresent
+$results += Sync-TemplateCodexRules -TemplateRoot $resolvedTemplateRoot -ProjectPath $resolvedProjectRoot -Overwrite:$Force.IsPresent
+
+$packageAssetsRoot = Join-Path $resolvedTemplateRoot "package-assets"
+if (Test-Path -LiteralPath $packageAssetsRoot) {
+  $results += Copy-ManagedDirectory `
+    -SourceDirectory (Join-Path $packageAssetsRoot "skills") `
+    -DestinationDirectory (Join-Path $resolvedProjectRoot ".agents\skills") `
+    -Overwrite:$Force.IsPresent
+
+  $results += Copy-ManagedDirectory `
+    -SourceDirectory (Join-Path $packageAssetsRoot "workflows") `
+    -DestinationDirectory (Join-Path $resolvedProjectRoot ".agents\workflows") `
+    -Overwrite:$Force.IsPresent
+}
+
+$results += Ensure-TaskFile -SourceRoot $resolvedTemplateRoot -DestinationRoot $resolvedProjectRoot
 
 $progressPath = Join-Path $resolvedProjectRoot "progress.txt"
 if (-not (Test-Path -LiteralPath $progressPath)) {
@@ -624,10 +648,17 @@ else {
   }
 }
 
-$contextFiles = @(
-  @{ Source = "context\repo-map.md"; Destination = "docs\ai\repo-map.md" },
-  @{ Source = "context\architecture-brief.md"; Destination = "docs\ai\architecture-brief.md" }
-)
+$contextFiles = @(
+  @{ Source = "context\repo-map.md"; Destination = "docs\ai\repo-map.md" },
+  @{ Source = "context\architecture-brief.md"; Destination = "docs\ai\architecture-brief.md" },
+  @{ Source = "context\CURRENT_TASK.md"; Destination = "docs\ai\CURRENT_TASK.md" },
+  @{ Source = "context\PROJECT_CONTEXT.md"; Destination = "docs\ai\PROJECT_CONTEXT.md" },
+  @{ Source = "context\DECISIONS.md"; Destination = "docs\ai\DECISIONS.md" },
+  @{ Source = "context\API_MAP.md"; Destination = "docs\ai\API_MAP.md" },
+  @{ Source = "context\DB_SCHEMA.md"; Destination = "docs\ai\DB_SCHEMA.md" },
+  @{ Source = "context\KNOWN_ISSUES.md"; Destination = "docs\ai\KNOWN_ISSUES.md" },
+  @{ Source = "context\CHANGELOG_AI.md"; Destination = "docs\ai\CHANGELOG_AI.md" }
+)
 
 foreach ($file in $contextFiles) {
   $results += Copy-ManagedFile -SourceRoot $resolvedTemplateRoot -SourceRelativePath $file.Source -DestinationRoot $resolvedProjectRoot -DestinationRelativePath $file.Destination -Overwrite:$Force.IsPresent
@@ -699,10 +730,13 @@ if ($Profile -eq "legacy" -and $IncludeDocs) {
   $docFiles = @(
     @{ Source = "docs\harness-architecture.md"; Destination = "docs/harness/architecture.md" },
     @{ Source = "docs\knowledge-architecture.md"; Destination = "docs/harness/knowledge-architecture.md" },
-    @{ Source = "docs\knowledge-import.md"; Destination = "docs/harness/knowledge-import.md" },
-    @{ Source = "docs\knowledge-lint.md"; Destination = "docs/harness/knowledge-lint.md" },
-    @{ Source = "docs\prompt-knowledge-integration.md"; Destination = "docs/harness/prompt-knowledge-integration.md" },
-    @{ Source = "docs\rule-governance.md"; Destination = "docs/harness/rule-governance.md" },
+    @{ Source = "docs\knowledge-import.md"; Destination = "docs/harness/knowledge-import.md" },
+    @{ Source = "docs\knowledge-lint.md"; Destination = "docs/harness/knowledge-lint.md" },
+    @{ Source = "docs\prompt-knowledge-integration.md"; Destination = "docs/harness/prompt-knowledge-integration.md" },
+    @{ Source = "docs\mcp-knowledge-governance.md"; Destination = "docs/harness/mcp-knowledge-governance.md" },
+    @{ Source = "docs\code-semantics-and-navigation.md"; Destination = "docs/harness/code-semantics-and-navigation.md" },
+    @{ Source = "docs\code-style-and-naming.md"; Destination = "docs/harness/code-style-and-naming.md" },
+    @{ Source = "docs\rule-governance.md"; Destination = "docs/harness/rule-governance.md" },
     @{ Source = "docs\regression-rules.md"; Destination = "docs/harness/regression-rules.md" },
     @{ Source = "docs\team-knowledge-sync.md"; Destination = "docs/harness/team-knowledge-sync.md" },
     @{ Source = "docs\trace-format.md"; Destination = "docs/harness/trace-format.md" },

package/package-source/docs/codex-harness-engineering/templates/ci/AGENTS.md

@@ -0,0 +1,15 @@
+# AGENTS.md
+
+## 目录作用
+
+- 存放 CI 工作流模板，主要是 GitHub Action 侧的 Codex task / review 流程。
+
+## 结构索引
+
+- `github-action-codex-task.yml`：任务执行工作流模板。
+- `github-action-codex-review.yml`：评审工作流模板。
+
+## 修改规则
+
+- 改这里要同时考虑本地 driver 行为、输入输出文件路径和 CI 环境变量是否一致。
+- 不要把本地临时命令硬编码进 CI 模板。

package/package-source/docs/codex-harness-engineering/templates/ci/github-action-codex-review.yml

@@ -1,110 +1,110 @@
-name: Codex PR Review
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened]
-
-jobs:
-  codex-stage1-review:
-    name: codex-stage1-review
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: write
-    outputs:
-      final_message: ${{ steps.stage1_review.outputs.final-message }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          ref: refs/pull/${{ github.event.pull_request.number }}/merge
-
-      - name: Run Stage 1 review
-        id: stage1_review
-        uses: openai/codex-action@v1
-        with:
-          openai-api-key: ${{ secrets.OPENAI_API_KEY }}
-          prompt: |
-            Review this pull request as Stage 1 review.
-            Focus on whether the implementation matches the product intent, design intent, major UI states, and any spec/design docs if they exist in the repository.
-            Do not modify files.
-            Do not focus on code style yet.
-            Start with findings ordered by severity.
-            End with `Verdict: PASS` or `Verdict: FAIL`.
-          output-file: codex-stage1-output.md
-          safety-strategy: drop-sudo
-          sandbox: workspace-write
-          codex-args: '["--json"]'
-
-      - name: Upload Stage 1 output
-        uses: actions/upload-artifact@v4
-        with:
-          name: codex-stage1-review-output
-          path: codex-stage1-output.md
-
-  codex-stage2-review:
-    name: codex-stage2-review
-    runs-on: ubuntu-latest
-    needs: codex-stage1-review
-    if: ${{ always() }}
-    permissions:
-      contents: read
-      pull-requests: write
-    outputs:
-      final_message: ${{ steps.stage2_review.outputs.final-message }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          ref: refs/pull/${{ github.event.pull_request.number }}/merge
-
-      - name: Run Stage 2 review
-        id: stage2_review
-        uses: openai/codex-action@v1
-        with:
-          openai-api-key: ${{ secrets.OPENAI_API_KEY }}
-          prompt: |
-            Review this pull request as Stage 2 review.
-            Assume Stage 1 has already checked feature/spec alignment.
-            Focus on correctness, security, code quality, missing tests, regressions, and residual risk.
-            Do not modify files.
-            Start with findings ordered by severity.
-            End with `Verdict: PASS` or `Verdict: FAIL`.
-          output-file: codex-stage2-output.md
-          safety-strategy: drop-sudo
-          sandbox: workspace-write
-          codex-args: '["--json"]'
-
-      - name: Upload Stage 2 output
-        uses: actions/upload-artifact@v4
-        with:
-          name: codex-stage2-review-output
-          path: codex-stage2-output.md
-
-  post-feedback:
-    runs-on: ubuntu-latest
-    needs:
-      - codex-stage1-review
-      - codex-stage2-review
-    if: needs.codex-stage1-review.outputs.final_message != '' || needs.codex-stage2-review.outputs.final_message != ''
-    permissions:
-      pull-requests: write
-    steps:
-      - name: Post Codex feedback
-        uses: actions/github-script@v7
-        env:
-          CODEX_STAGE1_MESSAGE: ${{ needs.codex-stage1-review.outputs.final_message }}
-          CODEX_STAGE2_MESSAGE: ${{ needs.codex-stage2-review.outputs.final_message }}
-        with:
-          github-token: ${{ github.token }}
-          script: |
-            await github.rest.issues.createComment({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              issue_number: context.payload.pull_request.number,
-              body: [
-                "## Codex Stage 1 Review",
-                process.env.CODEX_STAGE1_MESSAGE || "_No output_",
-                "",
-                "## Codex Stage 2 Review",
-                process.env.CODEX_STAGE2_MESSAGE || "_No output_",
-              ].join("\n"),
-            });
+name: Codex PR Review
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  codex-stage1-review:
+    name: codex-stage1-review
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    outputs:
+      final_message: ${{ steps.stage1_review.outputs.final-message }}
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          ref: refs/pull/${{ github.event.pull_request.number }}/merge
+
+      - name: Run Stage 1 review
+        id: stage1_review
+        uses: openai/codex-action@v1
+        with:
+          openai-api-key: ${{ secrets.OPENAI_API_KEY }}
+          prompt: |
+            Review this pull request as Stage 1 review.
+            Focus on whether the implementation matches the product intent, design intent, major UI states, and any spec/design docs if they exist in the repository.
+            Do not modify files.
+            Do not focus on code style yet.
+            Start with findings ordered by severity.
+            End with `Verdict: PASS` or `Verdict: FAIL`.
+          output-file: codex-stage1-output.md
+          safety-strategy: drop-sudo
+          sandbox: workspace-write
+          codex-args: '["--json"]'
+
+      - name: Upload Stage 1 output
+        uses: actions/upload-artifact@v4
+        with:
+          name: codex-stage1-review-output
+          path: codex-stage1-output.md
+
+  codex-stage2-review:
+    name: codex-stage2-review
+    runs-on: ubuntu-latest
+    needs: codex-stage1-review
+    if: ${{ always() }}
+    permissions:
+      contents: read
+      pull-requests: write
+    outputs:
+      final_message: ${{ steps.stage2_review.outputs.final-message }}
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          ref: refs/pull/${{ github.event.pull_request.number }}/merge
+
+      - name: Run Stage 2 review
+        id: stage2_review
+        uses: openai/codex-action@v1
+        with:
+          openai-api-key: ${{ secrets.OPENAI_API_KEY }}
+          prompt: |
+            Review this pull request as Stage 2 review.
+            Assume Stage 1 has already checked feature/spec alignment.
+            Focus on correctness, security, code quality, missing tests, regressions, and residual risk.
+            Do not modify files.
+            Start with findings ordered by severity.
+            End with `Verdict: PASS` or `Verdict: FAIL`.
+          output-file: codex-stage2-output.md
+          safety-strategy: drop-sudo
+          sandbox: workspace-write
+          codex-args: '["--json"]'
+
+      - name: Upload Stage 2 output
+        uses: actions/upload-artifact@v4
+        with:
+          name: codex-stage2-review-output
+          path: codex-stage2-output.md
+
+  post-feedback:
+    runs-on: ubuntu-latest
+    needs:
+      - codex-stage1-review
+      - codex-stage2-review
+    if: needs.codex-stage1-review.outputs.final_message != '' || needs.codex-stage2-review.outputs.final_message != ''
+    permissions:
+      pull-requests: write
+    steps:
+      - name: Post Codex feedback
+        uses: actions/github-script@v7
+        env:
+          CODEX_STAGE1_MESSAGE: ${{ needs.codex-stage1-review.outputs.final_message }}
+          CODEX_STAGE2_MESSAGE: ${{ needs.codex-stage2-review.outputs.final_message }}
+        with:
+          github-token: ${{ github.token }}
+          script: |
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.payload.pull_request.number,
+              body: [
+                "## Codex Stage 1 Review",
+                process.env.CODEX_STAGE1_MESSAGE || "_No output_",
+                "",
+                "## Codex Stage 2 Review",
+                process.env.CODEX_STAGE2_MESSAGE || "_No output_",
+              ].join("\n"),
+            });

package/package-source/docs/codex-harness-engineering/templates/config/AGENTS.md

@@ -0,0 +1,19 @@
+# AGENTS.md
+
+## 目录作用
+
+- 存放全局 / 项目级配置、rules、agent 角色定义和环境示例。
+
+## 结构索引
+
+- `codex-config.toml` / `codex-readme.md`：项目级 Codex 配置样板。
+- `global-config.toml` / `global-AGENTS.md`：用户级全局配置示例。
+- `env.example` / `env-check.ps1`：环境变量样板与检查脚本。
+- `agents/`：子代理定义。
+- `rules/`：always-on 规则、`.rules` 文件和规则文档。
+
+## 修改规则
+
+- `global-AGENTS.md` 是给用户主目录的示例，不是本目录的本地导航入口。
+- 规则分层要和 `docs/rule-governance.md` 保持一致。
+- 不要把项目特有细节误放进全局配置示例。

package/package-source/docs/codex-harness-engineering/templates/config/agents/architect.toml

@@ -1,17 +1,18 @@
-name = "architect"
-description = "Architecture analysis subagent for boundaries, data flow, and integration risks."
-model = "gpt-5.5"
-model_reasoning_effort = "high"
-sandbox_mode = "read-only"
-
-developer_instructions = """
-You are the architecture auxiliary subagent.
-Before concluding, read `AGENTS.md`, `docs/harness/task-session-strategy.md`, `docs/harness/architecture.md`, `.codex/rules/agents.md`, and the relevant truth-source docs.
-Read the matching package skills before proposing conclusions:
-- `skills/architect/SKILL.md`
-- `skills/api-design/SKILL.md`
-- `skills/data-flow-spec/SKILL.md`
-Stay read-only.
-Return structured output only: architecture summary, risks, affected paths, decisions, alternatives, and next docs/skills to inspect.
-Do not write code or edit files.
-"""
+name = "architect"
+description = "Architecture analysis subagent for boundaries, data flow, and integration risks."
+model = "gpt-5.5"
+model_reasoning_effort = "high"
+sandbox_mode = "read-only"
+
+developer_instructions = """
+You are the architecture auxiliary subagent.
+Before concluding, read `AGENTS.md`, `docs/harness/task-session-strategy.md`, `docs/harness/architecture.md`, `.codex/rules/agents.md`, and the relevant truth-source docs.
+Read the matching package skills before proposing conclusions:
+- `.agents/skills/architect/SKILL.md`
+- `.agents/skills/api-design/SKILL.md`
+- `.agents/skills/data-flow-spec/SKILL.md`
+Stay read-only.
+Return structured output only: architecture summary, risks, affected paths, decisions, alternatives, and next docs/skills to inspect.
+When a referenced `docs/harness/*`, `docs/testing/*`, or `docs/knowledge/*` file is absent in the project root under a thin install, resolve the same relative path under `packageRoot` from `.codex-harness/state/config.json`.
+Do not write code or edit files.
+"""