abelien-harness 0.16.0 → 0.16.1

package/README.md

@@ -73,6 +73,8 @@ ab generate 3d <providers|submit|status|fetch> …
 ab doctor
 ```
 
+`studio probe` 只登记 `state.probe` bootstrap 凭据的安装消费，不是通用健康检查。主回合凭据会在网络前被拒绝；不要据此判定全部 Studio 工具不可用，也不要自动刷新或重试 probe。具体工具仍由其权限与宿主授权判定。
+
 输出契约：stdout 恒为单行 JSON——成功 `{ok:true,data}`（exit 0）；
 运行错误 `{ok:false,error:{code,message,details?}}`（exit 1）；
 用法错误同结构写 stderr（exit 2）。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "abelien-harness",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "npx-installable multi-agent skill harness: generic kernel + pluggable domain packs",
   "type": "module",
   "engines": {

package/skills/abelien-harness/contract/workflow-spec.md

@@ -120,6 +120,13 @@ ab studio invocation get <invocationId>
 以同 workflow identity 和根预算创建后继 attempt。已有点选必须与原 designContext 一致；纯文字目标
 仍须由 Web 在当前 F2 editableTargets 唯一验证。CLI 不接受自由文字直接扩大 target 或 impact。
 
+`studio probe` 是安装消费登记，只接受 `state.probe` actionScope 及 `state:read`、
+`requests:write`，不是通用健康检查。其它 actionScope 在网络前返回
+`STUDIO_PROBE_CONTEXT_REQUIRED`；不自动更新凭据或重试。每次命令调用重新读取当前文件。
+合法上下文收到 broker HTTP 403 时，两种现有错误 envelope 的错误码、status、retry、requestId
+保持原义，并增加 `details.context = {attemptId, expiresAt, actionScope}`；仅发送一次请求。
+该严格白名单不包含 token、secret、origin、owner，也不证明签名或服务端当前 attempt 有效。
+
 CLI 默认只读固定 `/home/agent/workspace/abelien-runtime-delegation/current.json`，与 Web EaaS driver
 的 file-API 挂载根一致；不搜索旧 `/tmp` 路径，也不提供 CLI／环境变量／模型 context、origin 或 token override。
 受信本地宿主仍可通过模块级 `studioCmd(...,{contextFile})` 注入隔离上下文；它不构成容器默认路径验收。

package/skills/abelien-harness/scripts/ab.mjs

@@ -26,7 +26,7 @@ export { interpolate, findWorkflow, loadWorkflow, resolveWorkflowDefinition, wor
 // doctor must report the shipped package version, never a frozen constant (0.2.3 drifted across
 // six releases). The npm tree always ships package.json at the skill root; standalone skill copies
 // fall back to FALLBACK_VERSION, which scripts/release-check.mjs pins to package.json.
-const FALLBACK_VERSION = "0.16.0";
+const FALLBACK_VERSION = "0.16.1";
 export let VERSION = FALLBACK_VERSION;
 try {
   VERSION = String(JSON.parse(fs.readFileSync(new URL("../../../package.json", import.meta.url), "utf8")).version || FALLBACK_VERSION);
@@ -53,7 +53,7 @@ const COMMAND_HELP = [
     example: `workflow run user-journey --input '{"prompt":"…"}'` },
   { name: "studio",
     usage: "studio probe\n  studio replacement request --input '<json>'\n  studio creation create --input '<json>' | active | get <id>\n  studio modification create --input '<json>' | active | get <id>\n  studio tool register --input '<json>'\n  studio invocation submit --input '<json>' | get <id>",
-    about: "宿主可信集成面（创建/修改/工具/调用登记），宿主进程专用，模型不直接调用",
+    about: "宿主可信集成面（创建/修改/工具/调用登记），宿主进程专用，模型不直接调用；probe 只登记 state.probe bootstrap 安装消费，不是通用健康检查",
     example: `studio probe` },
   { name: "receipt",
     usage: "receipt consume --file <path> | get --wait <waitId> [--digest <sha256>]",

package/skills/abelien-harness/scripts/studio.mjs

@@ -303,14 +303,19 @@ async function responseJson(response) {
   if (Buffer.byteLength(body) > MAX_RESPONSE_BYTES) throw fail("STUDIO_RESPONSE_INVALID", "Studio response is too large");
   try { return JSON.parse(body); } catch { throw fail("STUDIO_RESPONSE_INVALID", "Studio response is invalid JSON"); }
 }
-function serverError(value, status) {
+function serverError(value, status, context) {
+  // Never spread the context: only these validated, non-credential fields may
+  // explain a forbidden attempt. The broker remains the authority on freshness.
+  const diagnostic = status === 403 ? {context: {
+    attemptId: context.attemptId, expiresAt: context.expiresAt, actionScope: context.actionScope,
+  }} : {};
   if (value && typeof value === "object" && !Array.isArray(value)
     && Object.keys(value).length === 1 && value.error && typeof value.error === "object" && !Array.isArray(value.error)) {
     const error = exact(value.error, ["code", "requestId"], [], "Agent runtime error");
     if (typeof error.code === "string" && typeof error.requestId === "string") {
       const retry = status >= 500 ? "backoff" : status === 409 ? "resync" : "never";
       throw fail(`STUDIO_${error.code.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}`,
-        "Studio runtime rejected the request", { status, retry, requestId: error.requestId });
+        "Studio runtime rejected the request", { status, retry, requestId: error.requestId, ...diagnostic });
     }
   }
   const body = exact(value, ["schemaVersion", "requestId", "error"], [], "Studio error");
@@ -320,7 +325,7 @@ function serverError(value, status) {
     throw fail("STUDIO_RESPONSE_INVALID", "Studio error response is invalid");
   }
   throw fail(`STUDIO_${error.code.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}`,
-    "Studio broker rejected the request", { status, retry: error.retry, requestId: body.requestId });
+    "Studio broker rejected the request", { status, retry: error.retry, requestId: body.requestId, ...diagnostic });
 }
 function safeInvocation(value) {
   const row = exact(value, ["invocationId", "operationId", "tool", "policyId", "policyVersion", "status", "accounting", "output", "error"], ["execution"], "invocation");
@@ -454,7 +459,7 @@ async function request(context, method, suffix, body, kind, fetchImpl) {
     }
     if (response.ok) return safeSuccess(kind, value);
     if (response.status >= 500 && attempt + 1 < attempts) continue;
-    serverError(value, response.status);
+    serverError(value, response.status, context);
   }
   throw fail("STUDIO_READ_UNAVAILABLE", "Studio broker is unavailable", {retry: "backoff"});
 }
@@ -466,6 +471,11 @@ export async function studioCmd(pos, flags, deps = {}) {
   const context = readStudioContext(deps.contextFile ?? STUDIO_CONTEXT_FILE, deps.now?.() ?? Date.now());
   if (resource === "probe" && action === undefined) {
     argsExactly(pos, 1, "studio probe"); flagsOnly(flags);
+    if (context.actionScope !== "state.probe") {
+      throw fail("STUDIO_PROBE_CONTEXT_REQUIRED",
+        "Studio installation probe requires a state.probe bootstrap context; it is not a health check");
+    }
+    // parseStudioContext already requires state:read for every delegation.
     requireScope(context, "requests:write");
     return request(context, "POST", "probe", {schemaVersion: 1}, "probe", fetchImpl);
   }