@orchestraworks/worker-darwin-x64 0.0.139 → 0.0.141

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orchestraworks/worker-darwin-x64",
-  "version": "0.0.139",
+  "version": "0.0.141",
   "description": "Orchestra worker for darwin x64.",
   "license": "Apache-2.0",
   "author": "Living Computers",

package/script-harness/index.js

@@ -3,10 +3,10 @@
 // line-delimited stdio JSON-RPC. One process per bridge multiplexes every session over one stdio pipe,
 // so the read loop must never block on an in-flight command.
 //
-// Each turn ends by setting the session's outcome claim from the command's exit code. A machine the
-// customer enrolled, which the worker declares by setting `SFDK_MACHINE_ENROLLED`, has no edge of ours in
-// front of it, so every claim there would be refused: the harness makes no call at all and ends the turn
-// on the script's own answer.
+// Each turn ends by setting the session's outcome claim from the command's exit code, sent with the agent's
+// own token when the harness has one. A machine with no edge of ours in front of it, which the worker
+// declares by setting `SFDK_MACHINE_ENROLLED`, refuses a bare claim: with no token there the harness makes
+// no call at all and ends the turn on the script's own answer.
 
 import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
@@ -18,7 +18,7 @@ import { createInterface } from "node:readline";
 import { describeFetchFailure } from "./fetch-failure.js";
 
 const HARNESS_NAME = "software-factory-script-harness";
-const HARNESS_VERSION = "0.0.139";
+const HARNESS_VERSION = "0.0.141";
 
 const IS_WINDOWS = process.platform === "win32";
 
@@ -257,8 +257,6 @@ try {
   programReadError = `cannot read instructions file: ${error.message}`;
 }
 
-// NO Authorization header is ever attached — the egress broker mints and injects the short-lived agent
-// bearer for the agent-API destination (the agent runtime must never hold credentials).
 function agentApiBaseUrl() {
   const configured = (process.env.PLATFORM_BASE_URL || "").trim().replace(/\/+$/, "");
   if (!configured) {
@@ -276,15 +274,49 @@ function machineIsEnrolled() {
   return (process.env[MACHINE_ENROLLED] || "").trim() !== "";
 }
 
-async function platformRequest(method, path, organizationId, body) {
+// The worker renews the file in place, so it is read on every call. Behind our edge the edge replaces
+// this bearer with one for the same agent.
+function agentToken() {
+  const variable = (process.env.ORCHESTRA_API_TOKEN || "").trim();
+  if (variable) return variable;
+  const file = (process.env.ORCHESTRA_API_TOKEN_FILE || "").trim();
+  if (!file) return undefined;
+  try {
+    return readFileSync(file, "utf8").trim() || undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+// The CLI's transport rule: a bearer goes over https, or over plain http only to this machine itself.
+const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1"]);
+
+function carriesBearer(baseUrl) {
+  let url;
+  try {
+    url = new URL(baseUrl);
+  } catch {
+    return false;
+  }
+  if (url.protocol === "https:") return true;
+  return url.protocol === "http:" && LOOPBACK_HOSTS.has(url.hostname.replace(/^\[|\]$/g, ""));
+}
+
+async function platformRequest(method, path, organizationId, body, token = agentToken()) {
   let response;
   try {
-    response = await fetch(`${agentApiBaseUrl()}${path}`, {
+    const baseUrl = agentApiBaseUrl();
+    if (token && !carriesBearer(baseUrl)) {
+      logDiagnostic("PLATFORM_BASE_URL is neither https nor this machine, so the agent token is not sent to it");
+      token = undefined;
+    }
+    response = await fetch(`${baseUrl}${path}`, {
       method,
       headers: {
         "Content-Type": "application/json",
         Accept: "application/json",
         "X-Organization-Id": organizationId,
+        ...(token ? { Authorization: `Bearer ${token}` } : {}),
       },
       body: body === undefined ? undefined : JSON.stringify(body),
       signal: AbortSignal.timeout(PLATFORM_REQUEST_TIMEOUT_MS),
@@ -660,16 +692,17 @@ async function claimPlatformState({
 }) {
   const { succeed, fail } = turnResponder(id, errorData, settlement);
 
-  // On a machine the customer enrolled there is no edge of ours, so nothing authorizes a call to the
-  // platform's API and every claim here would come back refused — failing a turn whose script succeeded
-  // and whose answer is already on the session. The answer is then the whole of what the turn reports.
-  // Read off the worker's declaration and not off a missing edge stamp: a machine the platform launched
-  // can be missing that stamp too, and there the refusal is a deployment fault to surface rather than a
-  // turn to settle quietly.
-  if (machineIsEnrolled()) {
+  // On a machine with no edge of ours and no agent token, nothing authorizes a call to the platform's
+  // API and every claim would come back refused — failing a turn whose script succeeded and whose answer
+  // is already on the session. The answer is then the whole of what the turn reports. Read off the
+  // worker's declaration and not off a missing edge stamp: a machine the platform launched can be missing
+  // that stamp too, and there the refusal is a deployment fault to surface rather than a turn to settle
+  // quietly.
+  const token = agentToken();
+  if (machineIsEnrolled() && !token) {
     logDiagnostic(
-      `${MACHINE_ENROLLED} is set, so this machine is one the platform did not launch and nothing ` +
-        `authorizes its calls to the platform: this turn claims no session state and settles on its answer`,
+      `${MACHINE_ENROLLED} is set and no agent token is readable, so nothing authorizes this machine's ` +
+        `calls to the platform: this turn claims no session state and settles on its answer`,
     );
     succeed(answerText);
     return;
@@ -680,7 +713,7 @@ async function claimPlatformState({
       ? { outcome: "ACHIEVED", summary: "exit 0" }
       : { outcome: "FAILED", summary: `exit ${exitCode}: ${tail(stderrTail, STDERR_TAIL_SUMMARY)}` };
   const sessionPath = `/sessions/${encodeURIComponent(platformSessionId)}`;
-  const response = await platformRequest("PATCH", sessionPath, organizationId, body);
+  const response = await platformRequest("PATCH", sessionPath, organizationId, body, token);
   if (!response.ok && response.status !== 409) {
     fail(`claim rejected: ${response.status}`);
     return;

package/script-harness/package.json

@@ -1,7 +1,7 @@
 {
   "name": "software-factory-script-harness",
   "type": "module",
-  "version": "0.0.139",
+  "version": "0.0.141",
   "scripts": {
     "test": "node --test test/*.test.js"
   }

package/worker

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/worker
-size: 48197136 bytes
-sha256: fab9cbc9f943fe1c72e89745e86d47f8a7edf638b3bf730165f9ce1cb29e7162
+size: 48748624 bytes
+sha256: 2028cacd0695f667c5586019b486663a2801bae65acb9d9186e04d6c4c7359a7