@baize-ai/core 0.3.13 → 0.3.14

package/.dockerignore

@@ -6,5 +6,3 @@
 !templates/pm2/ecosystem.config.cjs
 !.claude-local/claude
 !.claude-local/claude.version
-!skills/
-!.docker-local-skills/

package/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to baize-core will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.14] - 2026-08-30
+
+### Fixed
+- A2A 容器重启自愈（D48）：entrypoint 检查 A2A config.enabled → 自动启动 baize-a2a daemon——容器重启后 A2A 零手动恢复
+- Web A2A 状态卡证书徽章（D48）：显示证书链状态（certValid）——daemon 在线时"自动处理中"、离线时提示"待续签"
+
 ## [0.3.13] - 2026-08-28
 
 ### Fixed

package/Dockerfile

@@ -82,11 +82,6 @@ ENV WEB_CONSOLE_BIND=0.0.0.0
 # build context) — source stays private, the image matches the npm version
 # exactly. Build with: docker build --build-arg BAZE_CORE_VERSION=0.2.0 .
 ARG BAZE_CORE_VERSION=latest
-# Local-development override: when building from source with
-# --build-arg BAIZE_LOCAL_SKILLS=1, copy the LOCAL skills over the npm-package
-# skills so un-released fixes (e.g. D44) land in the image without publishing.
-# Official builds leave this off — the published npm package is authoritative.
-ARG BAIZE_LOCAL_SKILLS=0
 WORKDIR /home/baize
 RUN npm install -g @baize-ai/core@${BAZE_CORE_VERSION} \
     && baize --version \
@@ -129,14 +124,6 @@ RUN npm install -g @baize-ai/core@${BAZE_CORE_VERSION} \
     && node -e "const D=require('/home/baize/baize/.claude/skills/web-console/node_modules/better-sqlite3'); new D(':memory:')" \
     && echo "native modules OK (locally compiled, baked into runtime skills)"
 
-# ── Local-source skills override (BAIZE_LOCAL_SKILLS=1) ─────────────────────
-# docker-publish.sh stages the repo's skills/ into .docker-local-skills/ when
-# BAIZE_LOCAL_SKILLS=1 (empty directory otherwise). They land in
-# /home/baize/.local-skills and are applied by entrypoint AFTER init, because
-# init's postinstall syncSkills uses the npm-package skills as source and
-# would otherwise overwrite them. Official images carry an empty dir — no-op.
-COPY --chown=baize:baize .docker-local-skills/ /home/baize/.local-skills/
-
 # ── Workspace directories ─────────────────────────────────────────────────────
 # ~/baize is mounted as a single volume in docker-compose.yml.
 # Creating subdirectories here ensures correct ownership in the image.

package/docker/entrypoint.sh

@@ -94,18 +94,10 @@ if ! baize init ${INIT_ARGS}; then
 fi
 ok "Workspace ready"
 mkdir -p "${BAIZE_DIR}/.baize"
-# ── Local-source skills override (BAIZE_LOCAL_SKILLS=1 images) ──────────────
-# Images built with BAIZE_LOCAL_SKILLS=1 bake the repo's skills into
-# /home/baize/.local-skills. syncSkills (npm postinstall) runs during init
-# with the npm-package skills as source, so apply the local override AFTER
-# init to keep un-released fixes (e.g. D44) authoritative.
-# Official images ship an empty .local-skills — this is a no-op there.
-if [ -d /home/baize/.local-skills ]; then
-  cp -rf /home/baize/.local-skills/. "${BAIZE_DIR}/.claude/skills/" 2>/dev/null \
-    && ok "Local-source skills applied (BAIZE_LOCAL_SKILLS=1)"
-fi
+printf '{"status":"ok","at":"%s"}\n' "$(date -Iseconds)" > "${BAIZE_DIR}/.baize/init-state.json"
 
-# ── Pass through channel env vars to .env ─────────────────────────────────────
+
+ok "Workspace ready"
 
 # ── Pass through channel env vars to .env ─────────────────────────────────────
 # baize init doesn't write channel tokens — those come from component installs.
@@ -161,6 +153,27 @@ PM2_PID=$!
 sleep 3
 ok "Services started"
 
+# ── Step 3b: A2A self-heal (D48) ─────────────────────────────────────────────
+# After a container restart, a previously-enabled A2A component must come back
+# up by itself (zero manual ops). If the A2A config says enabled, start the
+# baize-a2a daemon — it registers/renews its certificate with the admin and
+# serves the advertise port. Idempotent: pm2 start restarts an existing entry.
+if [ -f "${BAIZE_DIR}/components/a2a/config.json" ]; then
+  A2A_ENABLED=$(node -e "
+    try {
+      const c = JSON.parse(require('fs').readFileSync('${BAIZE_DIR}/components/a2a/config.json','utf8'));
+      process.stdout.write(c.enabled ? '1' : '0');
+    } catch { process.stdout.write('0'); }
+  " 2>/dev/null || echo "0")
+  if [ "$A2A_ENABLED" = "1" ]; then
+    ok "A2A enabled — starting baize-a2a daemon"
+    ( cd "${BAIZE_DIR}/.claude/skills/a2a" && pm2 start ecosystem.config.cjs >/dev/null 2>&1 ) || \
+      warn "A2A daemon start failed — check 'docker exec <c> pm2 logs baize-a2a'"
+  fi
+fi
+
+# ── Step 4: Start the configured agent runtime in tmux ───────────────────────
+
 # ── Step 4: Start the configured agent runtime in tmux ───────────────────────
 # Determine runtime: BAIZE_RUNTIME env var always wins; fall back to config.json.
 if [ -z "${BAIZE_RUNTIME:-}" ]; then

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@baize-ai/core",
-  "version": "0.3.13",
+  "version": "0.3.14",
   "type": "module",
   "description": "Baize (\u767d\u6cfd) \u2014 autonomous AI agent infrastructure",
   "main": "cli/baize.js",

package/scripts/build-push-acr.sh

@@ -1,11 +1,13 @@
 #!/usr/bin/env bash
 # Multi-platform build + push to Aliyun ACR for the mainland distribution.
-# Usage:  bash build-push-acr.sh [VERSION]   (default 0.3.11)
+# Usage:  bash build-push-acr.sh [VERSION]   (default = latest published)
+# IMPORTANT: bump this default when a new version is published — it must
+# track @baize-ai/core latest (never point at an un-released version).
 # Requires: docker login already done, qemu-arm64 registered
 #           (apt install qemu-user-binfmt), registry mirror configured.
 set -euo pipefail
 
-VERSION="${1:-0.3.11}"
+VERSION="${1:-0.3.13}"
 ACR="crpi-8bg62qbrjs3cr3as.cn-hangzhou.personal.cr.aliyuncs.com/baize01/baize-core"
 
 echo "== Configure buildkit registry mirror (mainland Docker Hub access) =="

package/scripts/docker-publish.sh

@@ -30,22 +30,15 @@ ACR_NAMESPACE="${ACR_NAMESPACE:-baize01}"
 
 # ── Build ────────────────────────────────────────────────────────────────────
 echo "==> Building baize-core:${VERSION} (from npm @baize-ai/core@${VERSION})"
-BUILD_ARGS=(--build-arg "BAZE_CORE_VERSION=${VERSION}")
-rm -rf .docker-local-skills && mkdir -p .docker-local-skills
-if [ "${BAIZE_LOCAL_SKILLS:-0}" = "1" ]; then
-  BUILD_ARGS+=(--build-arg BAIZE_LOCAL_SKILLS=1)
-  echo "==> Overriding skills with LOCAL repo source (BAIZE_LOCAL_SKILLS=1) — un-released fixes baked in"
-  cp -r skills/. .docker-local-skills/
-  # Never ship host-compiled node_modules (mac binaries break linux runtime) —
-  # dependency binaries come from the image's own npm install.
-  find .docker-local-skills -type d -name node_modules -prune -exec rm -rf {} +
-fi
 docker build \
+  --build-arg BAZE_CORE_VERSION="${VERSION}" \
+  -t "${GHCR_IMAGE}:${VERSION}" \
+  -t "${GHCR_IMAGE}:latest" \
+  .
   "${BUILD_ARGS[@]}" \
   -t "${GHCR_IMAGE}:${VERSION}" \
   -t "${GHCR_IMAGE}:latest" \
   .
-rm -rf .docker-local-skills
 
 if [ -n "${ACR_REGISTRY}" ] && [ -n "${ACR_NAMESPACE}" ]; then
   ACR_IMAGE="${ACR_REGISTRY}/${ACR_NAMESPACE}/baize-core"

package/skills/web-console/public/app.js

@@ -1655,6 +1655,19 @@ async function loadA2aStatus(basePath) {
     state.textContent = enabled ? '已启用' : '未启用';
     state.className = `channel-state ${enabled ? 'ok' : 'warn'}`;
   }
+  // D48: certificate health — the daemon self-heals (re-registers) when the
+  // admin rotated its CA. Only claim "auto-healing" when the daemon is
+  // actually alive to run the 5-min renewal check; otherwise the user must
+  // act (daemon down / renewals exhausted).
+  const certValid = body.certValid === true;
+  const daemonUp = body.daemonHealthy === true;
+  let certLabel = '正常';
+  if (!certValid) {
+    certLabel = daemonUp ? '需续签（自动处理中）' : '证书待续签（daemon 未运行）';
+  }
+  const certRow = body.enabled === true
+    ? `<div class="conn-summary-row"><span class="conn-summary-name">证书状态</span><span class="conn-summary-detail"><span class="channel-state ${certValid ? 'ok' : 'warn'}">${certLabel}</span></span></div>`
+    : '';
   const rows = [
     ['启用', enabled ? '是' : '否'],
     ['Agent ID', body.agentId],
@@ -1664,7 +1677,7 @@ async function loadA2aStatus(basePath) {
     ['Endpoint', body.endpoint],
     ['版本', body.version],
   ].filter(([, v]) => v !== undefined && v !== null && v !== '');
-  el.innerHTML = rows.map(([k, v]) => `<div class="conn-summary-row"><span class="conn-summary-name">${escapeHtml(k)}</span><span class="conn-summary-detail">${escapeHtml(String(v))}</span></div>`).join('');
+  el.innerHTML = rows.map(([k, v]) => `<div class="conn-summary-row"><span class="conn-summary-name">${escapeHtml(k)}</span><span class="conn-summary-detail">${escapeHtml(String(v))}</span></div>`).join('') + certRow;
   updateA2aInstallArea(body);
   updateA2aModeCard(body);
   updateA2aConfigArea(body);