coding-agent-harness 1.0.8 → 1.1.0

package/dist/lib/task-tombstone-commands.mjs

@@ -1,22 +1,27 @@
-// @ts-nocheck
 import fs from "node:fs";
 import path from "node:path";
 import { normalizeTarget, nowTimestamp, readFileSafe, toPosix, datePrefix, } from "./core-shared.mjs";
+import { removeHeadingSectionOutsideFences } from "./markdown-utils.mjs";
 import { collectTasks } from "./task-scanner.mjs";
+import { resolveTaskDirectory } from "./task-lifecycle.mjs";
+import { taskIdFromDirectory } from "./harness-paths.mjs";
+import { assessArchiveEligibility, normalizeArchiveActor } from "./task-archive-eligibility.mjs";
+import { normalizeReviewBoolean } from "./task-review-model.mjs";
 import { beginGovernanceSync, commitGovernanceSync, releaseGovernanceSync, } from "./governance-sync.mjs";
-export function supersedeTask(targetInput, oldRef, { by = "", reason = "" } = {}) {
+export function supersedeTask(targetInput, oldRef, { by = "", reason = "", deletedBy = "", confirm = "", allowOpenFindings = false } = {}) {
     if (!by)
         throw new Error("task-supersede requires --by <new-task-id>");
     const target = normalizeTarget(targetInput);
     const oldTask = resolveTask(target, oldRef);
     const newTask = resolveTask(target, by);
+    assertSoftDeleteEligible(oldTask, { reason, deletedBy, confirm, allowOpenFindings, action: "task-supersede" });
     const governanceContext = beginGovernanceSync(target, { operation: `task-supersede ${oldTask.id}` });
     try {
         writeTombstone(target, oldTask, {
             State: "superseded",
             "Superseded By": newTask.id,
             Reason: reason || "superseded",
-            Operator: "coordinator",
+            Operator: normalizeTombstoneActor(deletedBy) || "coordinator",
             Timestamp: nowTimestamp(),
             "Reopen Eligible": "yes",
             "Archive Eligible": "no",
@@ -32,16 +37,43 @@ export function supersedeTask(targetInput, oldRef, { by = "", reason = "" } = {}
         releaseGovernanceSync(governanceContext);
     }
 }
-export function softDeleteTask(targetInput, taskRef, { reason = "" } = {}) {
+export function softDeleteTask(targetInput, taskRef, options = {}) {
+    return deleteTask(targetInput, taskRef, { ...options, hard: false });
+}
+export function deleteTask(targetInput, taskRef, { hard = false, reason = "", deletedBy = "", confirm = "", allowOpenFindings = false } = {}) {
     const target = normalizeTarget(targetInput);
     const task = resolveTask(target, taskRef);
-    return writeDeletionState(target, task, "soft-deleted", reason || "soft-delete", "task-delete --soft");
+    if (!hard) {
+        assertSoftDeleteEligible(task, { reason, deletedBy, confirm, allowOpenFindings, action: "task-delete" });
+        return writeDeletionState(target, task, "soft-deleted", reason || "soft-delete", "task-delete --soft", {
+            Operator: normalizeTombstoneActor(deletedBy) || "coordinator",
+        });
+    }
+    assertHardDeleteEligible(target, task, { reason, deletedBy, confirm });
+    const taskDir = path.join(target.projectRoot, task.path.replace(/^TARGET:/, ""));
+    const allowedPaths = collectTaskDirectoryFiles(taskDir).map((file) => toPosix(path.relative(target.projectRoot, file)));
+    const governanceContext = beginGovernanceSync(target, { operation: `task-delete --hard ${task.id}` });
+    try {
+        fs.rmSync(taskDir, { recursive: true, force: true });
+        const commit = commitGovernanceSync(governanceContext, allowedPaths, {
+            message: `chore(harness): hard delete task ${task.id}`,
+        });
+        return { taskId: task.id, deletionState: "hard-deleted", reason, governance: { commit } };
+    }
+    finally {
+        releaseGovernanceSync(governanceContext);
+    }
 }
-export function archiveTask(targetInput, taskRef, { reason = "" } = {}) {
+export function archiveTask(targetInput, taskRef, { reason = "", archivedBy = "", archiveFields = {} } = {}) {
     const target = normalizeTarget(targetInput);
     const task = resolveTask(target, taskRef);
-    assertArchiveEligible(task);
-    return writeDeletionState(target, task, "archived", reason || "archive", "task-archive");
+    const archiveAudit = assertArchiveEligible(task, { archivedBy });
+    const normalizedArchiveFields = normalizeArchiveFields(archiveFields);
+    assertNoReservedArchiveFields(normalizedArchiveFields);
+    return writeDeletionState(target, task, "archived", reason || "archive", "task-archive", {
+        ...normalizedArchiveFields,
+        ...archiveAudit,
+    });
 }
 export function reopenTask(targetInput, taskRef, { reason = "" } = {}) {
     const target = normalizeTarget(targetInput);
@@ -50,7 +82,7 @@ export function reopenTask(targetInput, taskRef, { reason = "" } = {}) {
     try {
         const taskPlanPath = path.join(target.projectRoot, task.taskPlanPath.replace(/^TARGET:/, ""));
         const content = readFileSafe(taskPlanPath);
-        const next = content.replace(/\n##\s*(?:Task Tombstone|任务墓碑)\s*$[\s\S]*?(?=^##\s+|(?![\s\S]))/im, "");
+        const next = removeHeadingSectionOutsideFences(content, /^##\s*(?:Task Tombstone|任务墓碑)\s*$/i);
         fs.writeFileSync(taskPlanPath, next.endsWith("\n") ? next : `${next}\n`);
         appendProgress(target, task, "task-reopen", reason || "reopened");
         const commit = commitGovernanceSync(governanceContext, taskPaths(target, task), {
@@ -62,7 +94,8 @@ export function reopenTask(targetInput, taskRef, { reason = "" } = {}) {
         releaseGovernanceSync(governanceContext);
     }
 }
-function writeDeletionState(target, task, deletionState, reason, action) {
+function writeDeletionState(target, task, deletionState, reason, action, archiveFields = {}) {
+    const normalizedArchiveFields = normalizeArchiveFields(archiveFields);
     const governanceContext = beginGovernanceSync(target, { operation: `${action} ${task.id}` });
     try {
         writeTombstone(target, task, {
@@ -72,6 +105,7 @@ function writeDeletionState(target, task, deletionState, reason, action) {
             Timestamp: nowTimestamp(),
             "Reopen Eligible": "yes",
             "Archive Eligible": deletionState === "archived" ? "yes" : "no",
+            ...normalizedArchiveFields,
         });
         appendProgress(target, task, action, reason);
         const commit = commitGovernanceSync(governanceContext, taskPaths(target, task), {
@@ -91,33 +125,121 @@ function contextFor(_target, context) {
 }
 function resolveTask(target, ref) {
     const normalized = String(ref || "").trim();
-    const matches = collectTasks(target).filter((task) => {
-        const bare = datePrefix.test(task.shortId) ? task.shortId.replace(datePrefix, "") : task.shortId;
-        return task.id === normalized || task.shortId === normalized || task.id.endsWith(`/${normalized}`) || bare === normalized;
-    });
-    if (matches.length === 1)
-        return matches[0];
-    if (matches.length > 1)
-        throw new Error(`Ambiguous task reference: ${ref}`);
+    const resolvedTarget = target;
+    const taskDir = resolveTaskDirectory(resolvedTarget, normalized);
+    const taskId = taskIdFromDirectory(resolvedTarget.harness, taskDir);
+    const task = collectTasks(target).find((candidate) => candidate.id === taskId);
+    if (task)
+        return task;
     throw new Error(`Task not found: ${ref}`);
 }
-function assertArchiveEligible(task) {
-    if (task.state === "blocked" || (task.taskQueues || []).includes("blocked")) {
-        throw new Error("blocked tasks cannot be archived without an explicit human waiver");
-    }
-    const blockingRisks = (task.risks || []).filter((risk) => risk.open !== "no" && (risk.blocksRelease === "yes" || ["P0", "P1", "P2"].includes(risk.severity)));
-    if (blockingRisks.length)
-        throw new Error("tasks with open blocking review findings cannot be archived without an explicit human waiver");
-    if (task.materialsReady === false && task.reviewStatus !== "confirmed") {
-        throw new Error("tasks with incomplete closeout materials cannot be archived without an explicit human waiver");
-    }
+function assertArchiveEligible(task, { archivedBy = "" } = {}) {
+    const result = assessArchiveEligibility(task, { archivedBy, now: nowTimestamp() });
+    if (!result.eligible)
+        throw new Error(result.reason);
+    return result.auditFields;
 }
 function writeTombstone(target, task, fields) {
     const taskPlanPath = path.join(target.projectRoot, task.taskPlanPath.replace(/^TARGET:/, ""));
-    const content = readFileSafe(taskPlanPath).replace(/\n##\s*(?:Task Tombstone|任务墓碑)\s*$[\s\S]*?(?=^##\s+|(?![\s\S]))/im, "");
+    const content = removeHeadingSectionOutsideFences(readFileSafe(taskPlanPath), /^##\s*(?:Task Tombstone|任务墓碑)\s*$/i);
     const block = ["", "## Task Tombstone", "", "| Field | Value |", "| --- | --- |", ...Object.entries(fields).map(([key, value]) => `| ${key} | ${escapeCell(value)} |`), ""].join("\n");
     fs.writeFileSync(taskPlanPath, `${content.trimEnd()}\n${block}`);
 }
+function assertSoftDeleteEligible(task, { reason = "", deletedBy = "", confirm = "", allowOpenFindings = false, action = "task-delete" } = {}) {
+    const risky = isRiskyMutationTask(task);
+    const hasOpenFindings = !isDraftState(task.state) && hasOpenBlockingFindings(task);
+    if (!risky && !hasOpenFindings)
+        return;
+    const missing = [];
+    if (!String(reason || "").trim())
+        missing.push("--reason");
+    if (!normalizeTombstoneActor(deletedBy))
+        missing.push("--deleted-by");
+    if (String(confirm || "").trim() !== task.id)
+        missing.push(`--confirm ${task.id}`);
+    if (hasOpenFindings && !allowOpenFindings)
+        missing.push("--allow-open-findings");
+    if (missing.length) {
+        throw new Error(`${action} would hide a risky task; required: ${missing.join(", ")}`);
+    }
+}
+export function assertHardDeleteEligible(target, task, { reason = "", deletedBy = "", confirm = "" } = {}) {
+    const missing = [];
+    if (!String(reason || "").trim())
+        missing.push("--reason");
+    if (!normalizeTombstoneActor(deletedBy))
+        missing.push("--deleted-by");
+    if (String(confirm || "").trim() !== task.id)
+        missing.push(`--confirm ${task.id}`);
+    if (missing.length)
+        throw new Error(`task-delete --hard requires accountable safe draft confirmation: ${missing.join(", ")}`);
+    const blockers = [];
+    if (!isDraftState(task.state))
+        blockers.push(`state:${task.state}`);
+    if (task.deletionState !== "active")
+        blockers.push(`deletionState:${task.deletionState}`);
+    if (isRiskyMutationTask(task))
+        blockers.push("task has lifecycle, review, evidence, or closeout history");
+    if (!isDraftState(task.state) && hasOpenBlockingFindings(task))
+        blockers.push("task has open blocking findings");
+    const taskDir = path.join(target.projectRoot, task.path.replace(/^TARGET:/, ""));
+    const disallowedFiles = collectTaskDirectoryFiles(taskDir).filter((file) => !isSafeDraftFile(taskDir, file));
+    if (disallowedFiles.length)
+        blockers.push(`non-scaffold files: ${disallowedFiles.map((file) => toPosix(path.relative(taskDir, file))).join(", ")}`);
+    if (blockers.length)
+        throw new Error(`task-delete --hard only supports safe draft tasks; ${blockers.join("; ")}`);
+}
+function isRiskyMutationTask(task) {
+    return !isDraftState(task.state) ||
+        Boolean(task.reviewSubmitted) ||
+        task.reviewStatus === "confirmed" ||
+        Boolean(task.reviewConfirmation?.confirmed) ||
+        task.materialsReady === true && !isDraftState(task.state) ||
+        (task.evidence || []).length > 0 ||
+        (task.taskQueues || []).some((queue) => ["blocked", "review", "confirmed", "finalized", "lessons"].includes(queue));
+}
+function isDraftState(state) {
+    const normalized = String(state || "").trim().toLowerCase().replaceAll("-", "_").replace(/\s+/g, "_");
+    return ["planned", "not_started"].includes(normalized);
+}
+function hasOpenBlockingFindings(task) {
+    return (task.risks || []).some((risk) => normalizeReviewBoolean(risk.open) !== "no" && (normalizeReviewBoolean(risk.blocksRelease) === "yes" || ["P0", "P1", "P2"].includes(String(risk.severity))));
+}
+function normalizeTombstoneActor(value) {
+    return normalizeArchiveActor(value);
+}
+function collectTaskDirectoryFiles(taskDir) {
+    if (!fs.existsSync(taskDir))
+        return [];
+    const files = [];
+    const visit = (dir) => {
+        for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+            const full = path.join(dir, entry.name);
+            if (entry.isDirectory())
+                visit(full);
+            else if (entry.isFile())
+                files.push(full);
+        }
+    };
+    visit(taskDir);
+    return files.sort();
+}
+function isSafeDraftFile(taskDir, file) {
+    const relative = toPosix(path.relative(taskDir, file));
+    return [
+        "INDEX.md",
+        "brief.md",
+        "execution_strategy.md",
+        "findings.md",
+        "lesson_candidates.md",
+        "progress.md",
+        "review.md",
+        "task_plan.md",
+        "visual_map.md",
+        "walkthrough.md",
+        "long-running-task-contract.md",
+    ].includes(relative) || /^artifacts\/INDEX\.md$/.test(relative) || /^references\/INDEX\.md$/.test(relative);
+}
 function appendSupersedes(target, task, oldId) {
     const taskPlanPath = path.join(target.projectRoot, task.taskPlanPath.replace(/^TARGET:/, ""));
     const content = readFileSafe(taskPlanPath);
@@ -135,3 +257,38 @@ function appendProgress(target, task, action, reason) {
 function escapeCell(value) {
     return String(value || "").replace(/\r?\n/g, " ").replaceAll("|", "\\|").trim();
 }
+function normalizeArchiveFields(fields) {
+    const entries = Object.entries(fields || {});
+    const normalized = {};
+    const seen = new Set();
+    for (const [rawKey, rawValue] of entries) {
+        const key = String(rawKey || "").trim();
+        if (!key || /[\r\n|]/.test(key))
+            throw new Error(`Invalid archive field key: ${key || "<empty>"}`);
+        const normalizedKey = key.toLowerCase();
+        if (seen.has(normalizedKey))
+            throw new Error(`Duplicate archive field key: ${key}`);
+        seen.add(normalizedKey);
+        normalized[key] = String(rawValue || "").replace(/\r?\n/g, " ").trim();
+    }
+    return normalized;
+}
+function assertNoReservedArchiveFields(fields) {
+    const reserved = new Set([
+        "state",
+        "reason",
+        "operator",
+        "timestamp",
+        "reopen eligible",
+        "archive eligible",
+        "archived by",
+        "archived at",
+        "review confirmed by",
+        "review confirmed at",
+        "review confirmation id",
+        "review commit sha",
+    ]);
+    const blocked = Object.keys(fields).filter((key) => reserved.has(key.toLowerCase()));
+    if (blocked.length)
+        throw new Error(`Reserved archive field cannot be overridden: ${blocked.join(", ")}`);
+}

package/dist/lib/types/check-profiles.js

@@ -0,0 +1 @@
+export {};

package/dist/lib/types/impact.js

@@ -0,0 +1 @@
+export {};

package/dist/lib/types/preset.js

@@ -0,0 +1 @@
+export {};

package/dist/lib/types/task-lifecycle.js

@@ -0,0 +1 @@
+export {};

package/dist/lib/types/task-scanner.js

@@ -0,0 +1 @@
+export {};

package/dist/postinstall.mjs

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import { seedBundledPresets } from "./lib/harness-core.mjs";
 if (process.env.CODING_AGENT_HARNESS_SKIP_POSTINSTALL === "1")
     process.exit(0);
@@ -10,5 +9,6 @@ try {
     console.log(`coding-agent-harness postinstall: ${summary} at ${result.target}`);
 }
 catch (error) {
-    console.warn(`coding-agent-harness postinstall: preset seed skipped (${error.message})`);
+    const message = error instanceof Error ? error.message : String(error);
+    console.warn(`coding-agent-harness postinstall: preset seed skipped (${message})`);
 }

package/dist/run-built-tests.mjs

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from "node:fs";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
@@ -9,7 +8,9 @@ const outDir = path.join(repoRoot, "tmp", `test-runner-emit-${process.pid}`);
 const typescriptVersion = "5.9.3";
 const options = parseArgs(process.argv.slice(2));
 fs.rmSync(outDir, { recursive: true, force: true });
-const emit = spawnSync("npm", ["exec", "--yes", "--package", `typescript@${typescriptVersion}`, "--", "tsc", "-p", "tsconfig.tests.json", "--outDir", outDir, "--noCheck"], {
+const npmArgs = ["exec", "--yes", "--package", `typescript@${typescriptVersion}`, "--", "tsc", "-p", "tsconfig.tests.json", "--outDir", outDir, "--noCheck"];
+const npmCommand = resolveNpmCommand(npmArgs);
+const emit = spawnSync(npmCommand.command, npmCommand.args, {
     cwd: repoRoot,
     encoding: "utf8",
     stdio: "inherit",
@@ -36,7 +37,7 @@ const result = spawnSync(process.execPath, [runner], {
 if (result.status !== 0)
     process.exit(result.status || 1);
 function parseArgs(argv) {
-    const parsed = { test: undefined };
+    const parsed = {};
     for (let index = 0; index < argv.length; index += 1) {
         const arg = argv[index];
         if (arg === "--test") {
@@ -55,6 +56,12 @@ function requireValue(argv, index, option) {
         throw new Error(`${option} requires a value`);
     return value;
 }
+function resolveNpmCommand(npmArgs) {
+    const npmExecPath = process.env.npm_execpath;
+    if (npmExecPath)
+        return { command: process.execPath, args: [npmExecPath, ...npmArgs] };
+    return { command: process.platform === "win32" ? "npm.cmd" : "npm", args: npmArgs };
+}
 function linkPackageResources() {
     for (const entry of [
         "package.json",

package/docs-release/README.md

@@ -56,6 +56,7 @@ Not every document is written for the same reader.
 ### Architecture / 架构
 
 - `architecture/overview.md` / `architecture/overview.zh-CN.md` — public architecture overview, including the CLI, dashboard, task lifecycle, migration rails, review gate, and release package surface. 公开架构总览，覆盖 CLI、Dashboard、任务生命周期、迁移轨道、审查门禁和发布包表面。
+- `architecture/document-contract-kernel/README.md` — shared Document Contract Kernel for Full/Lite Skill semantics, compatibility matrix, change classification, Lite forbidden surfaces, and Lite to Full upgrade mapping.
 
 ### Methodology / 方法论
 

package/docs-release/architecture/document-contract-kernel/README.md

@@ -0,0 +1,150 @@
+# Document Contract Kernel
+
+The Document Contract Kernel is the product and Skill contract shared by the
+Full Coding Agent Harness Skill and the future Lite Skill. It defines the stable
+document semantics that both product surfaces must preserve without turning Lite
+into a runtime mode or forcing Full to lower its automation and audit bar.
+
+This contract is public source material. Full and Lite Skill text should be
+generated from this shared source plus product overlays. Until a generator is
+introduced, changes to the concepts or compatibility matrix must update this
+file and the product overlays in the same change.
+
+## Kernel Naming Boundary
+
+| Name | Layer | Responsibility | Must not do |
+| --- | --- | --- | --- |
+| Document Contract Kernel | Product / Skill contract | Shared document semantics, Lite/Full compatibility matrix, change classification, and upgrade mapping | Implement runtime behavior, read or write files, or define git, markdown, or path utilities |
+| Domain Kernel | Runtime domain | Task identity, policy, state transitions, module ownership, and preset model | Describe Skill installation copy, package manager commands, UI text, or git transport |
+| Infrastructure Kernel | Runtime infrastructure | Filesystem, path, template, markdown, git, date, id, and locale helpers | Own business semantics or product distribution semantics |
+
+Always write the full name "Document Contract Kernel" in source and docs. Do not
+shorten it to a generic `kernel/` label; that collides with later runtime
+refactoring work.
+
+## Shared Concepts
+
+| Concept | Kernel semantic | Lite expression | Full expression |
+| --- | --- | --- | --- |
+| Agent entry | The first project protocol an agent reads before acting | `AGENTS.md` | `AGENTS.md` plus optional `CLAUDE.md` shim |
+| Project context | Durable project facts, separate from chat memory | `context/architecture`, `context/development`, `context/integrations` | Same directories, with optional source packs and generated indexes |
+| Task package | The smallest reviewable unit of work for one objective | `tasks/<id>/brief.md`, `task_plan.md`, `progress.md`, `walkthrough.md` | `planning/tasks/<id>/` or module task package |
+| Brief | Purpose, scope, and first-read entry for the task | Required | Required |
+| Task plan | Goal, scope, steps, acceptance criteria, and verification intent | Required | Required |
+| Progress evidence | Execution log with evidence references | Required, hand-maintained | Required, may be updated by lifecycle command |
+| Review | Independent review or human confirmation material | Optional | Required for standard and complex work |
+| Visual map | Phase, state, and structure aid | Optional for simple work | Required in CLI-created task packages |
+| Walkthrough | Closeout summary, validation, residual risks, and lesson decision | Required | Required |
+| Regression | The project's important validation surfaces | Simple checklist | Regression SSoT, cadence, and checks |
+| Lessons | Reusable learning from the work | Optional `lessons.md` | Lesson candidates plus promoted lesson details |
+
+## Compatibility Matrix
+
+Compatibility matrix version: `document-contract-kernel-v0.5`.
+
+| Surface | Lite | Full | Kernel classification |
+| --- | --- | --- | --- |
+| `AGENTS.md` | Required | Required | Shared |
+| `CLAUDE.md` | Optional shim | Optional shim | Shared optional |
+| `context/` | Required | Required | Shared |
+| `brief.md` | Required | Required | Shared |
+| `task_plan.md` | Required | Required | Shared |
+| `progress.md` | Required | Required | Shared |
+| `walkthrough.md` | Required | Required | Shared |
+| `review.md` | Optional | Required for standard and complex work | Shared with profile differences |
+| `visual_map.md` | Optional for simple work | Required in CLI-created task packages | Shared with profile differences |
+| `regression.md` | Simple checklist | Regression SSoT and cadence | Shared with profile differences |
+| `lessons.md` | Optional simple table | Lesson candidates and promoted details | Shared with profile differences |
+| `harness.yaml` | Forbidden | Required | Full-only |
+| Generated ledger | Forbidden | Supported | Full-only |
+| Dashboard / Workbench | Forbidden | Supported | Full-only |
+| Preset | Forbidden | Supported | Full-only |
+| Module Registry | Forbidden | Supported | Full-only |
+| Lifecycle CLI commands | Forbidden | Supported | Full-only |
+| `npm install` / `npx coding-agent-harness` | Forbidden | Allowed with user consent | Full-only |
+| Node.js version requirement | Forbidden | Required by the source package and runtime | Full-only |
+
+## Change Classification
+
+Every PR or task that edits Skill, template, or public product docs must be
+classified before implementation.
+
+| Change type | Definition | Must sync | Must not do |
+| --- | --- | --- | --- |
+| Kernel change | Changes the base semantics of AGENTS, context, task package, progress, walkthrough, review, regression, or lessons | Lite overlay, Full overlay, and this compatibility matrix | Update only the Full Skill |
+| Full-only change | CLI, Dashboard, Preset, module registry, generated ledger, transaction, migration, or runtime automation | Full Skill, runtime docs, and Full overlay | Leak into Lite source |
+| Lite-only change | Document-only scaffold, lower cognitive load wording, and hand-maintained task material | Lite overlay | Weaken Full audit or automation requirements |
+| Migration bridge | Maps Lite project material into a Full Harness project | Full migration docs and Lite upgrade note | Promise that Lite supports Full surfaces in place |
+
+PR checklist:
+
+- [ ] Does this change alter the Document Contract Kernel?
+- [ ] If yes, did Lite and Full overlays both change?
+- [ ] If yes, did the compatibility matrix version or content change?
+- [ ] If Full-only, does the Lite forbidden-surface check still pass?
+- [ ] If Lite-only, did Full retain its review, regression, and automation requirements?
+
+## Lite Forbidden Surfaces
+
+Lite is a document-only Skill surface. It must not contain product or runtime
+surfaces that imply package installation, CLI operation, dashboard operation,
+preset execution, generated governance, module registry ownership, lifecycle
+commands, or a Node.js runtime requirement.
+
+The canonical blocked pattern list is
+`docs-release/architecture/document-contract-kernel/products/lite-forbidden-surfaces.txt`.
+Run the guard with:
+
+```bash
+node scripts/check-lite-forbidden-surfaces.mts
+```
+
+The guard scans Lite product source files only. It intentionally does not scan
+this contract document or the forbidden pattern list, because those files must
+name Full-only surfaces to define the boundary.
+
+## Lite to Full Upgrade Path
+
+A Lite project can be used as migration input for Full Harness adoption. Lite
+does not promise that Full runtime adapters can read or update its files in
+place.
+
+1. Read Lite `AGENTS.md`, `context/`, `tasks/`, `regression.md`, and `lessons.md`.
+2. Create the Full harness manifest and v2 directory structure.
+3. Map `tasks/<id>/` into Full `planning/tasks/<id>/`.
+4. If `review.md` or `visual_map.md` is missing, create adoption-needed follow-up
+   work or fill it within an approved migration budget.
+5. Project Lite `regression.md` into Regression SSoT.
+6. Project Lite `lessons.md` into lesson candidates, not promoted lesson details.
+7. Run Full migration and check evidence before claiming Full adoption.
+
+## Source, Overlay, Generator Path
+
+The maintainable target is shared source plus product overlays:
+
+```text
+docs-release/architecture/document-contract-kernel/
+  README.md
+  products/
+    lite-skill-overlay.md
+    full-skill-overlay.md
+    lite-forbidden-surfaces.txt
+```
+
+Future generator shape:
+
+1. Render this shared Document Contract Kernel source.
+2. Apply the Full or Lite product overlay.
+3. Stamp the compatibility matrix version into the generated Skill.
+4. Run Lite forbidden-surface checks after Lite render.
+5. Run Full concept coverage checks after Full render.
+
+Generated targets should be:
+
+```text
+SKILL.md
+skills/coding-agent-harness-lite/SKILL.md
+```
+
+The Lite target is not created in Phase 0.5. This phase establishes the public
+contract and drift guard that a later Lite implementation must use.

package/docs-release/architecture/document-contract-kernel/products/full-skill-overlay.md

@@ -0,0 +1,29 @@
+# Full Skill Overlay Source
+
+Compatibility matrix version: `document-contract-kernel-v0.5`.
+
+The Full Skill keeps all Document Contract Kernel concepts and adds Full-only
+automation, governance, migration, and runtime surfaces. Full must not copy or
+fork the shared task semantics by hand.
+
+## Shared Kernel Dependency
+
+Full task packages, context documents, progress evidence, reviews,
+walkthroughs, regression records, and lessons must stay compatible with the
+Document Contract Kernel compatibility matrix.
+
+## Full-only Surfaces
+
+Full-only sections may describe package installation, CLI commands, Dashboard,
+Workbench, Preset behavior, generated ledger files, Module Registry, lifecycle
+commands, runtime checks, and source package requirements.
+
+These sections must remain explicitly Full-only so later Lite generation can
+exclude them without weakening Full's audit requirements.
+
+## Coverage Rule
+
+When a Full Skill edit changes the semantics of AGENTS, context, task package,
+progress evidence, review, walkthrough, regression, or lessons, classify it as a
+Kernel change and update the shared contract plus the Lite overlay in the same
+task.

package/docs-release/architecture/document-contract-kernel/products/lite-forbidden-surfaces.txt

@@ -0,0 +1,26 @@
+# Lines are regex patterns matched case-insensitively against Lite product source.
+# The guard scans Lite source and generated Lite Skill files, not this list.
+literal:npm install
+regex:\bnpx\s+(?:--yes\s+)?coding-agent-harness\b
+regex:\bharness\s+init\b
+regex:\bharness\s+dev\b
+regex:\bharness\s+check\b
+regex:\bharness\s+(?:new-task|task-start|task-log|task-block|task-review|review-confirm|task-complete|lesson-promote|task-list)\b
+literal:harness.yaml
+literal:Dashboard
+literal:Workbench
+literal:Preset
+literal:preset-creator
+regex:generated\s+ledger
+regex:generated\s+governance
+regex:generated\s+indexes?
+literal:Closeout-Index
+literal:Module-Registry
+literal:Module Registry
+regex:lifecycle\s+CLI\s+commands?
+regex:CLI\s+(?:checks?|commands?|operation|automation)
+literal:Node.js version requirement
+regex:node\s+version\s+requirement
+regex:\bTaskRepository\b
+regex:\bTaskOperations\b
+regex:\bHarnessTransaction\b

package/docs-release/architecture/document-contract-kernel/products/lite-skill-overlay.md

@@ -0,0 +1,37 @@
+# Lite Skill Overlay Source
+
+Compatibility matrix version: `document-contract-kernel-v0.5`.
+
+This source is for a future document-only Lite Skill. Lite keeps the shared
+Document Contract Kernel concepts and removes runtime product surfaces.
+
+## Positioning
+
+Lite helps an agent set up and maintain a small project work protocol through
+plain repository documents. It is document-only: the agent reads, writes, and
+reviews project files directly.
+
+## Required Lite Surfaces
+
+- `AGENTS.md` as the agent entry protocol.
+- `context/` for stable project facts.
+- `tasks/` for reviewable task packages.
+- `brief.md`, `task_plan.md`, `progress.md`, and `walkthrough.md` in each task.
+- Optional `review.md`, `visual_map.md`, `regression.md`, and `lessons.md` when
+  the project needs them.
+
+## Lite Operating Rules
+
+- Keep all state human-readable and hand-maintainable.
+- Do not require a project manifest.
+- Do not require machine-produced project state.
+- Treat missing review or visual material as adoption-needed if the project
+  later moves to the larger product.
+- Keep upgrade notes short and link back to the compatibility matrix version.
+
+## Upgrade Note
+
+If the project later needs the larger Full Coding Agent Harness product, keep the
+Lite documents as migration input. The shared document semantics are preserved so
+an agent can map Lite task packages and context into the Full structure during an
+explicit migration task.

package/docs-release/architecture/overview.md

@@ -118,7 +118,7 @@ flowchart LR
   CLI --> Status["status / check<br/>derive health and failures"]
   CLI --> Dashboard["dashboard / dev<br/>render human-readable state"]
   CLI --> Migration["migrate-plan / migrate-run / migrate-verify<br/>legacy project adoption"]
-  CLI --> Task["new-task / task-* / review-confirm<br/>task lifecycle operations"]
+  CLI --> Task["new-task / task-*<br/>task lifecycle operations"]
   CLI --> UserSkill["install-user / doctor-user<br/>local skill setup"]
 
   Status --> Scanner["task scanner + check profiles"]
@@ -168,7 +168,7 @@ stateDiagram-v2
   active --> in_review: task-review
   in_review --> review_blocked: open P0-P2 finding
   review_blocked --> in_review: finding closed or routed
-  in_review --> closing: review-confirm + task-complete
+  in_review --> closing: Workbench confirmation + task-complete
   closing --> closed: closeout evidence linked
   closed --> [*]
 ```

package/docs-release/architecture/overview.zh-CN.md

@@ -105,7 +105,7 @@ flowchart LR
   CLI --> Status["status / check<br/>推导健康状态与失败项"]
   CLI --> Dashboard["dashboard / dev<br/>渲染可读状态"]
   CLI --> Migration["migrate-plan / migrate-run / migrate-verify<br/>旧项目迁移"]
-  CLI --> Task["new-task / task-* / review-confirm<br/>任务生命周期操作"]
+  CLI --> Task["new-task / task-*<br/>任务生命周期操作"]
   CLI --> UserSkill["install-user / doctor-user<br/>本机 Skill 设置"]
 
   Status --> Scanner["任务扫描器 + check profiles"]
@@ -153,7 +153,7 @@ stateDiagram-v2
   active --> in_review: task-review
   in_review --> review_blocked: 存在 P0-P2 finding
   review_blocked --> in_review: finding 关闭或路由
-  in_review --> closing: review-confirm + task-complete
+  in_review --> closing: Workbench 人工确认 + task-complete
   closing --> closed: 收口证据已链接
   closed --> [*]
 ```