abelien-harness 0.4.0 → 0.5.0

package/skills/abelien-workspace/workflows/definitions/fd8ce7074e2044985778446e93153864940bb9465471c1c71c41328cefff70bf.json

@@ -0,0 +1,175 @@
+{
+  "name": "user-journey-hardware",
+  "domain": "abelien-workspace",
+  "executionProtocol": "pinned-result-v1",
+  "description": "Library recall, suitability review, English Volc query and direct source reads (Prismer switchable, off by default) for unresolved slots, source-bound merge, then the same formal hardware.select and gate",
+  "input": {
+    "required": [
+      "requirements"
+    ]
+  },
+  "steps": [
+    {
+      "id": "record-requirements",
+      "executor": "cli",
+      "action": "resource.put",
+      "args": {
+        "kind": "draft",
+        "id": "hardware-d-{{hash}}",
+        "body": {
+          "requirements": "{{input.requirements}}"
+        }
+      }
+    },
+    {
+      "id": "classify-hardware",
+      "executor": "agent",
+      "instruction": "需求已澄清；requirements 是 clarify 的 Requirements：context 为落点与场景，reaction[] 为全部触发→反应，limits[] 每项带 strength。按全部 reaction 推导功能槽位与数量，strength=hard 的 limits 进 hard_constraints，preference 只作排序提示；缺 reaction 或只有品类标签时停止并说明。读取同级 abelien-hardware-selection/SKILL.md，并用其 scripts/load-guide.mjs 依次按需加载 entry、命中的 level1、命中的 level2、contract；仅提交功能槽位、数量、受控三级路径和需求硬约束，不提交型号或猜测数据库事实。回复 {\"slots\":[...]}；若需求不足或路径不确定，停止并说明，不能伪造槽位。",
+      "replySchema": {
+        "slots": "array"
+      }
+    },
+    {
+      "id": "search-hardware-wikis",
+      "executor": "cli",
+      "action": "capability.run",
+      "args": {
+        "capability": "hardware.search",
+        "input": {
+          "operation": "search",
+          "query": "{{input.requirements}}",
+          "requirements": "{{input.requirements}}",
+          "slots": "{{steps.classify-hardware.result.slots}}",
+          "policy": {
+            "prefer_system_candidates": true,
+            "top_k_per_slot": 8,
+            "include_content": true
+          }
+        }
+      }
+    },
+    {
+      "id": "hardware-knowledge-recalled",
+      "executor": "cli",
+      "action": "machine.send",
+      "args": {
+        "machine": "hardware-recall",
+        "event": "confirmRecall",
+        "instance": "{{steps.search-hardware-wikis.resource.id}}"
+      }
+    },
+    {
+      "id": "review-hardware-candidates",
+      "executor": "agent",
+      "instruction": "Read the complete library candidates and original requirements/slots. Review suitability against function and every hard constraint. Reply {\"unresolved_slots\":[{\"slot_id\":\"original slot\",\"reason\":\"no candidates or specific reasons all candidates are unsuitable\",\"query\":\"official model search targeting function/category/key hard constraints\",\"count\":5}]}. Every zero-candidate slot requires supplemental search. All unsuitable candidates also require search. Preserve rechargeable built-in battery, wireless charging, and all other original requirements; do not ask the user to drop a requirement because the catalog is empty. unresolved_slots contains only slots that need search. Omit suitable library slots entirely; never add placeholder rows with an empty query or count=0. Return [] when all slots are suitable. Before committing this review, the trusted host validates the full original requirements, slots and recall with validate-web-search-plan.mjs; a VALIDATION reply preserves this pause so the same run can be corrected. Write every query in English and keep model numbers and manufacturer names; a query containing Chinese, Japanese or Korean characters is rejected by that validation at this same pause. Count is optional, an integer from 1 to 5, and defaults to 5. Do not truncate requirements. The trusted host currently records Prismer as disabled for both the query and source reads: it searches Volc directly and reads source pages over public HTTPS, so PDF/image sources stay unavailable. When the host enables Prismer, Volc runs only after a saved definitive denial, successful empty query or unsent missing Key, and sources are read Prismer-first. Unknown dispatched effects never authorize fallback or a new invocation. Do not supply URLs, credentials, commands or providers. System reuse is optional: poor matches must not force complex whole systems. Concept visuals and the original requirements come first.",
+      "replySchema": {
+        "unresolved_slots": "array"
+      }
+    },
+    {
+      "id": "search-hardware-web",
+      "executor": "cli",
+      "action": "capability.run",
+      "args": {
+        "capability": "hardware.web-search",
+        "input": {
+          "requirements": "{{input.requirements}}",
+          "slots": "{{steps.classify-hardware.result.slots}}",
+          "recall_id": "{{steps.search-hardware-wikis.resource.id}}",
+          "unresolved_slots": "{{steps.review-hardware-candidates.result.unresolved_slots}}"
+        }
+      }
+    },
+    {
+      "id": "extract-web-hardware",
+      "executor": "agent",
+      "instruction": "When pages contain blob_ref, use resource get <evidenceResourceId> --page <pageId> to read each required full original page; never copy page bodies into replies. Read the persisted hardware-web-evidence pages from search-hardware-web in full. Search Content/snippets/provider official labels are not complete official pages or proof of authority. Extract only manufacturer pages; uncertain source authority remains unknown and third-party mirrors are not official merely because their URL contains a manufacturer domain. Reply {\"candidates\":[{\"slot_id\":\"original slot\",\"page_id\":\"persisted page ID\",\"manufacturer\":\"exact manufacturer\",\"manufacturer_quote\":\"at least 8 source characters\",\"model\":\"exact model\",\"model_quote\":\"at least 8 source characters\",\"parts\":[{\"name\":\"physical part name\",\"name_quote\":\"exact source quote\",\"shape\":\"box|cylinder|sphere|unknown\",\"shape_quote\":\"exact source quote\",\"dimensions_mm\":{\"length\":20,\"width\":12,\"height\":3},\"dimension_quotes\":{\"length\":\"exact quote identifying this part, axis, numeric value and unit\",\"width\":\"exact quote\",\"height\":\"exact quote\"}}]}]}. Quotes must include the exact part/name/shape they support. Each physical part has separate dimensions; cylinders use diameter/height, spheres use diameter. Unknown dimensions are omitted, never invented or defaulted. Conflicting versions and unknown multi-part overall dimensions remain unknown; do not combine contradictory versions. Do not submit page bodies, official/verified/CAD_available/source/geometry claims. Missing reliable pages or no network means candidates empty. This is envelope_only, not true component CAD or engineering verification. For an attributed tuple such as Back Panel: 48mm x 32mm x 0.5mm, add dimensions_quote with the entire exact source string and dimension_axes:[\"length\",\"width\",\"height\"] in original order; dimensions_mm must map each original value/unit to that explicitly declared axis. Preserve alternate imperial tuples in the quote; never use their values as mm or borrow another part's measurements. A 2-value tuple leaves height unknown. A box inferred from dimensions is only an envelope expression: actual part shape and orientation remain unknown. dimension_quotes may be empty for this tuple mode. Never invent coil thickness or total assembly dimensions.",
+      "replySchema": {
+        "candidates": "array"
+      }
+    },
+    {
+      "id": "merge-hardware-web",
+      "executor": "cli",
+      "action": "capability.run",
+      "args": {
+        "capability": "hardware.web-merge",
+        "input": {
+          "requirements": "{{input.requirements}}",
+          "slots": "{{steps.classify-hardware.result.slots}}",
+          "recall_id": "{{steps.search-hardware-wikis.resource.id}}",
+          "evidence_id": "{{steps.search-hardware-web.resource.id}}",
+          "candidates": "{{steps.extract-web-hardware.result.candidates}}"
+        }
+      }
+    },
+    {
+      "id": "select-hardware-from-wikis",
+      "executor": "agent",
+      "instruction": "先读 abelien-hardware-selection/references/selection-service-contract.md 与真实候选的完整 Wiki。每槽位选择一个真实 component_id，显式 quantity 等于槽位 quantity；manufacturer/model 取候选，selection_reason 非空，wiki_evidence 为至少 8 字符的 Wiki 原文引用数组。selected_models 每项需 constraint_checks，覆盖 function、slot:<hard_constraints 的键>、limit:<每项 hard limit.id>；每项包含 constraint_id、status=verified|unknown|incompatible、reason、evidence:[{component_id,quote}]。多型号另给 compatibility_checks：power、interfaces 两维须包含 status、reason、每个型号的原文 evidence，可信电气数据确定性通过时以 compatibility_report 为准；mechanical、thermal、software 只作提示，可选填写，但填 incompatible 仍阻塞。证据不足填 unknown，不可编造。status=verified|needs_confirmation，plan_mode=assemble_new|adapt_system，其余数组 selected_models/coverage_ledger/remaining_slots/unknowns/replacement_plan 必填。先比较整机，但整机继承缺 manifest 必须待确认，不凭文案抵扣数量。verified 只表示 Wiki 证据判断通过，不是独立工程兼容求解或实测，不代表采用。 Read only merge-hardware-web candidates for the final choice. Preserve structured limits.envelope and source strength; dimension metadata/name/selection-line identity are supplied by the trusted finalizer, never invented. Incompatible dimension candidates require replacement; only decision_required (user hard limit, measured/datasheet size, no axis-aligned fit) returns needs_confirmation, other risk/unknown stays advisory and risk candidates rank last. Electrically incompatible candidates (trusted data: missing bus type or count) require replacing one side; ELECTRICAL_SUPPLY_GAP means add a power or regulator part. all_indexed_candidates_rejected is scoped to this indexed category; occupancy is advisory and clear is only coarse single-part screening. Whole-system reuse is optional; a poor match never forces a complex baseline. External IDs are external:<hash>, with source authority and engineering unknowns; envelopes are not component CAD and cannot grant adoption or delivery.",
+      "replySchema": {
+        "status": "verified|needs_confirmation",
+        "plan_mode": "adapt_system|assemble_new",
+        "selected_models": "array",
+        "coverage_ledger": "array",
+        "remaining_slots": "array",
+        "unknowns": "array",
+        "replacement_plan": "array",
+        "compatibility_checks": "array"
+      }
+    },
+    {
+      "id": "select-hardware",
+      "executor": "cli",
+      "action": "capability.run",
+      "args": {
+        "capability": "hardware.select",
+        "input": {
+          "requirements": "{{input.requirements}}",
+          "slots": "{{steps.classify-hardware.result.slots}}",
+          "recall_id": "{{steps.merge-hardware-web.resource.id}}",
+          "selection_proposal": "{{steps.select-hardware-from-wikis.result}}"
+        }
+      }
+    },
+    {
+      "id": "record-hardware-selection",
+      "executor": "cli",
+      "action": "resource.update",
+      "args": {
+        "id": "{{steps.record-requirements.resource.id}}",
+        "bodyPatch": {
+          "hardwareSelectionId": "{{steps.select-hardware.resource.id}}",
+          "hardwareSelectionStatus": "{{steps.select-hardware.result.status}}",
+          "hardwareSelectionRevision": "{{steps.select-hardware.result.revision}}",
+          "hardwarePlanMode": "{{steps.select-hardware.result.plan_mode}}"
+        }
+      }
+    },
+    {
+      "id": "hardware-selected",
+      "executor": "cli",
+      "action": "machine.send",
+      "args": {
+        "machine": "hardware-selection",
+        "event": "confirmSelection",
+        "instance": "{{steps.record-requirements.resource.id}}"
+      },
+      "completeWhen": {
+        "path": "steps.hardware-selected.result.to",
+        "equals": "selected_pending_confirmation"
+      },
+      "completionResult": {
+        "selectionId": "{{steps.select-hardware.resource.id}}",
+        "selectionStatus": "{{steps.select-hardware.result.status}}",
+        "selectionRevision": "{{steps.select-hardware.result.revision}}"
+      }
+    }
+  ],
+  "result": {
+    "selectionId": "{{steps.select-hardware.resource.id}}",
+    "selectionStatus": "{{steps.select-hardware.result.status}}",
+    "selectionRevision": "{{steps.select-hardware.result.revision}}"
+  },
+  "legacyResume": "read_only"
+}

package/skills/abelien-workspace/workflows/user-journey-hardware-algorithm.json

@@ -2,7 +2,7 @@
   "name": "user-journey-hardware-algorithm",
   "domain": "abelien-workspace",
   "executionProtocol": "pinned-result-v1",
-  "description": "Library recall, suitability review, fixed Prismer-first/Volc evidence for unresolved slots, source-bound merge, then the same formal hardware.select and gate",
+  "description": "Library recall, suitability review, English Volc query and direct source reads (Prismer switchable, off by default) for unresolved slots, source-bound merge, then the same formal hardware.select and gate",
   "input": {
     "required": [
       "requirements",
@@ -63,7 +63,7 @@
     {
       "id": "review-hardware-candidates",
       "executor": "agent",
-      "instruction": "Read the complete library candidates and original requirements/slots. Review suitability against function and every hard constraint. Reply {\"unresolved_slots\":[{\"slot_id\":\"original slot\",\"reason\":\"no candidates or specific reasons all candidates are unsuitable\",\"query\":\"official model search targeting function/category/key hard constraints\",\"count\":10}]}. Every zero-candidate slot requires supplemental search. All unsuitable candidates also require search. Preserve rechargeable built-in battery, wireless charging, and all other original requirements; do not ask the user to drop a requirement because the catalog is empty. unresolved_slots contains only slots that need search. Omit suitable library slots entirely; never add placeholder rows with an empty query or count=0. Return [] when all slots are suitable. Before committing this review, the trusted host validates the full original requirements, slots and recall with validate-web-search-plan.mjs; a VALIDATION reply preserves this pause so the same run can be corrected. Count is optional and a positive integer; Prismer search.topK and return.topK are explicit. Do not apply undocumented Prismer query/result limits or truncate requirements. The trusted fixed Prismer-first policy permits Volc only after a saved definitive denial, successful empty query or unsent missing Key; Volc alone checks its official 1-100 character Query and Count 1-50 at dispatch. Unknown dispatched effects never authorize fallback or a new invocation. Do not supply URLs, credentials, commands or providers. System reuse is optional: poor matches must not force complex whole systems. Concept visuals and the original requirements come first.",
+      "instruction": "Read the complete library candidates and original requirements/slots. Review suitability against function and every hard constraint. Reply {\"unresolved_slots\":[{\"slot_id\":\"original slot\",\"reason\":\"no candidates or specific reasons all candidates are unsuitable\",\"query\":\"official model search targeting function/category/key hard constraints\",\"count\":5}]}. Every zero-candidate slot requires supplemental search. All unsuitable candidates also require search. Preserve rechargeable built-in battery, wireless charging, and all other original requirements; do not ask the user to drop a requirement because the catalog is empty. unresolved_slots contains only slots that need search. Omit suitable library slots entirely; never add placeholder rows with an empty query or count=0. Return [] when all slots are suitable. Before committing this review, the trusted host validates the full original requirements, slots and recall with validate-web-search-plan.mjs; a VALIDATION reply preserves this pause so the same run can be corrected. Write every query in English and keep model numbers and manufacturer names; a query containing Chinese, Japanese or Korean characters is rejected by that validation at this same pause. Count is optional, an integer from 1 to 5, and defaults to 5. Do not truncate requirements. The trusted host currently records Prismer as disabled for both the query and source reads: it searches Volc directly and reads source pages over public HTTPS, so PDF/image sources stay unavailable. When the host enables Prismer, Volc runs only after a saved definitive denial, successful empty query or unsent missing Key, and sources are read Prismer-first. Unknown dispatched effects never authorize fallback or a new invocation. Do not supply URLs, credentials, commands or providers. System reuse is optional: poor matches must not force complex whole systems. Concept visuals and the original requirements come first.",
       "replySchema": {
         "unresolved_slots": "array"
       }
@@ -108,7 +108,7 @@
     {
       "id": "select-hardware-from-wikis",
       "executor": "agent",
-      "instruction": "先读 abelien-hardware-selection/references/selection-service-contract.md 与真实候选的完整 Wiki。每槽位选择一个真实 component_id，显式 quantity 等于槽位 quantity；manufacturer/model 取候选，selection_reason 非空，wiki_evidence 为至少 8 字符的 Wiki 原文引用数组。selected_models 每项需 constraint_checks，覆盖 function、slot:<hard_constraints 的键>、limit:<每项 hard limit.id>；每项包含 constraint_id、status=verified|unknown|incompatible、reason、evidence:[{component_id,quote}]。多型号另给 compatibility_checks，逐 power/interfaces/mechanical/thermal/software 维度包含 status、reason、每个型号的原文 evidence。证据不足填 unknown，不可编造。status=verified|needs_confirmation，plan_mode=assemble_new|adapt_system，其余数组 selected_models/coverage_ledger/remaining_slots/unknowns/replacement_plan 必填。先比较整机，但整机继承缺 manifest 必须待确认，不凭文案抵扣数量。verified 只表示 Wiki 证据判断通过，不是独立工程兼容求解或实测，不代表采用。 Read only merge-hardware-web candidates for the final choice. Preserve structured limits.envelope and source strength; dimension metadata/name/selection-line identity are supplied by the trusted finalizer, never invented. Incompatible dimension candidates require replacement; unknown/risk stays needs_confirmation when an envelope is active. all_indexed_candidates_rejected is scoped to this indexed category; occupancy is advisory and clear is only coarse single-part screening. Whole-system reuse is optional; a poor match never forces a complex baseline. External IDs are external:<hash>, with source authority and engineering unknowns; envelopes are not component CAD and cannot grant adoption or delivery.",
+      "instruction": "先读 abelien-hardware-selection/references/selection-service-contract.md 与真实候选的完整 Wiki。每槽位选择一个真实 component_id，显式 quantity 等于槽位 quantity；manufacturer/model 取候选，selection_reason 非空，wiki_evidence 为至少 8 字符的 Wiki 原文引用数组。selected_models 每项需 constraint_checks，覆盖 function、slot:<hard_constraints 的键>、limit:<每项 hard limit.id>；每项包含 constraint_id、status=verified|unknown|incompatible、reason、evidence:[{component_id,quote}]。多型号另给 compatibility_checks：power、interfaces 两维须包含 status、reason、每个型号的原文 evidence，可信电气数据确定性通过时以 compatibility_report 为准；mechanical、thermal、software 只作提示，可选填写，但填 incompatible 仍阻塞。证据不足填 unknown，不可编造。status=verified|needs_confirmation，plan_mode=assemble_new|adapt_system，其余数组 selected_models/coverage_ledger/remaining_slots/unknowns/replacement_plan 必填。先比较整机，但整机继承缺 manifest 必须待确认，不凭文案抵扣数量。verified 只表示 Wiki 证据判断通过，不是独立工程兼容求解或实测，不代表采用。 Read only merge-hardware-web candidates for the final choice. Preserve structured limits.envelope and source strength; dimension metadata/name/selection-line identity are supplied by the trusted finalizer, never invented. Incompatible dimension candidates require replacement; only decision_required (user hard limit, measured/datasheet size, no axis-aligned fit) returns needs_confirmation, other risk/unknown stays advisory and risk candidates rank last. Electrically incompatible candidates (trusted data: missing bus type or count) require replacing one side; ELECTRICAL_SUPPLY_GAP means add a power or regulator part. all_indexed_candidates_rejected is scoped to this indexed category; occupancy is advisory and clear is only coarse single-part screening. Whole-system reuse is optional; a poor match never forces a complex baseline. External IDs are external:<hash>, with source authority and engineering unknowns; envelopes are not component CAD and cannot grant adoption or delivery.",
       "replySchema": {
         "status": "verified|needs_confirmation",
         "plan_mode": "adapt_system|assemble_new",

package/skills/abelien-workspace/workflows/user-journey-hardware-candidates.json

@@ -1,7 +1,7 @@
 {
   "name": "user-journey-hardware-candidates",
   "domain": "abelien-workspace",
-  "description": "Library recall, suitability review, fixed Prismer-first/Volc evidence for unresolved slots, source-bound merge, then candidate proposal",
+  "description": "Library recall, suitability review, English Volc query and direct source reads (Prismer switchable, off by default) for unresolved slots, source-bound merge, then candidate proposal",
   "input": {
     "required": [
       "requirements"
@@ -60,7 +60,7 @@
     {
       "id": "review-hardware-candidates",
       "executor": "agent",
-      "instruction": "Read the complete library candidates and original requirements/slots. Review suitability against function and every hard constraint. Reply {\"unresolved_slots\":[{\"slot_id\":\"original slot\",\"reason\":\"no candidates or specific reasons all candidates are unsuitable\",\"query\":\"official model search targeting function/category/key hard constraints\",\"count\":10}]}. Every zero-candidate slot requires supplemental search. All unsuitable candidates also require search. Preserve rechargeable built-in battery, wireless charging, and all other original requirements; do not ask the user to drop a requirement because the catalog is empty. unresolved_slots contains only slots that need search. Omit suitable library slots entirely; never add placeholder rows with an empty query or count=0. Return [] when all slots are suitable. Before committing this review, the trusted host validates the full original requirements, slots and recall with validate-web-search-plan.mjs; a VALIDATION reply preserves this pause so the same run can be corrected. Count is optional and a positive integer; Prismer search.topK and return.topK are explicit. Do not apply undocumented Prismer query/result limits or truncate requirements. The trusted fixed Prismer-first policy permits Volc only after a saved definitive denial, successful empty query or unsent missing Key; Volc alone checks its official 1-100 character Query and Count 1-50 at dispatch. Unknown dispatched effects never authorize fallback or a new invocation. Do not supply URLs, credentials, commands or providers. System reuse is optional: poor matches must not force complex whole systems. Concept visuals and the original requirements come first.",
+      "instruction": "Read the complete library candidates and original requirements/slots. Review suitability against function and every hard constraint. Reply {\"unresolved_slots\":[{\"slot_id\":\"original slot\",\"reason\":\"no candidates or specific reasons all candidates are unsuitable\",\"query\":\"official model search targeting function/category/key hard constraints\",\"count\":5}]}. Every zero-candidate slot requires supplemental search. All unsuitable candidates also require search. Preserve rechargeable built-in battery, wireless charging, and all other original requirements; do not ask the user to drop a requirement because the catalog is empty. unresolved_slots contains only slots that need search. Omit suitable library slots entirely; never add placeholder rows with an empty query or count=0. Return [] when all slots are suitable. Before committing this review, the trusted host validates the full original requirements, slots and recall with validate-web-search-plan.mjs; a VALIDATION reply preserves this pause so the same run can be corrected. Write every query in English and keep model numbers and manufacturer names; a query containing Chinese, Japanese or Korean characters is rejected by that validation at this same pause. Count is optional, an integer from 1 to 5, and defaults to 5. Do not truncate requirements. The trusted host currently records Prismer as disabled for both the query and source reads: it searches Volc directly and reads source pages over public HTTPS, so PDF/image sources stay unavailable. When the host enables Prismer, Volc runs only after a saved definitive denial, successful empty query or unsent missing Key, and sources are read Prismer-first. Unknown dispatched effects never authorize fallback or a new invocation. Do not supply URLs, credentials, commands or providers. System reuse is optional: poor matches must not force complex whole systems. Concept visuals and the original requirements come first.",
       "replySchema": {
         "unresolved_slots": "array"
       }
@@ -105,7 +105,7 @@
     {
       "id": "select-hardware-from-wikis",
       "executor": "agent",
-      "instruction": "读取 context-json 中 merge-hardware-web 的候选和完整 Wiki；按用户硬约束、功能覆盖与整机覆盖先提出可复用整机候选，再为剩余槽位选择零部件，并检查接口、供电、机械、热和软件依赖。只选择候选中的 component_id，不按 draft、selection_gate 或 CAD 状态过滤。召回结果里 unmatched_slots 列出的槽位一个候选都没有：这些槽位必须逐条写进 remaining_slots，status 只能是 needs_confirmation——finalize 会拒绝把无候选槽位静默丢掉的「完整」提案。回复 {\"status\":\"proposed|needs_confirmation\",\"plan_mode\":\"adapt_system|assemble_new\",\"selected_models\":[...],\"coverage_ledger\":[...],\"remaining_slots\":[...],\"unknowns\":[...],\"replacement_plan\":[...]}，每个型号带 slot_id、component_id（候选中的真实值）、manufacturer、model、quantity（1–128 的整数，本槽位实际要用几个，缺失或非整数会被 finalize 拒绝）、selection_reason（字符串）和 wiki_evidence（非空字符串数组，逐条引用该候选完整 Wiki 中支持此选择的原文要点）；coverage_ledger、remaining_slots、unknowns、replacement_plan 均为数组，没有内容时给空数组。 提案不具有正式选型权限；不能提交 hardware-selected 或据此开始算法选型，须另走 hardware.select。 Read only merge-hardware-web candidates for the final choice. Preserve structured limits.envelope and source strength; dimension metadata/name/selection-line identity are supplied by the trusted finalizer, never invented. Incompatible dimension candidates require replacement; unknown/risk stays needs_confirmation when an envelope is active. all_indexed_candidates_rejected is scoped to this indexed category; occupancy is advisory and clear is only coarse single-part screening. Whole-system reuse is optional; a poor match never forces a complex baseline. External IDs are external:<hash>, with source authority and engineering unknowns; envelopes are not component CAD and cannot grant adoption or delivery.",
+      "instruction": "读取 context-json 中 merge-hardware-web 的候选和完整 Wiki；按用户硬约束、功能覆盖与整机覆盖先提出可复用整机候选，再为剩余槽位选择零部件，并检查接口、供电、机械、热和软件依赖。只选择候选中的 component_id，不按 draft、selection_gate 或 CAD 状态过滤。召回结果里 unmatched_slots 列出的槽位一个候选都没有：这些槽位必须逐条写进 remaining_slots，status 只能是 needs_confirmation——finalize 会拒绝把无候选槽位静默丢掉的「完整」提案。回复 {\"status\":\"proposed|needs_confirmation\",\"plan_mode\":\"adapt_system|assemble_new\",\"selected_models\":[...],\"coverage_ledger\":[...],\"remaining_slots\":[...],\"unknowns\":[...],\"replacement_plan\":[...]}，每个型号带 slot_id、component_id（候选中的真实值）、manufacturer、model、quantity（1–128 的整数，本槽位实际要用几个，缺失或非整数会被 finalize 拒绝）、selection_reason（字符串）和 wiki_evidence（非空字符串数组，逐条引用该候选完整 Wiki 中支持此选择的原文要点）；coverage_ledger、remaining_slots、unknowns、replacement_plan 均为数组，没有内容时给空数组。 提案不具有正式选型权限；不能提交 hardware-selected 或据此开始算法选型，须另走 hardware.select。 Read only merge-hardware-web candidates for the final choice. Preserve structured limits.envelope and source strength; dimension metadata/name/selection-line identity are supplied by the trusted finalizer, never invented. Incompatible dimension candidates require replacement; only decision_required (user hard limit, measured/datasheet size, no axis-aligned fit) returns needs_confirmation, other risk/unknown stays advisory and risk candidates rank last. Electrically incompatible candidates (trusted data: missing bus type or count) require replacing one side; ELECTRICAL_SUPPLY_GAP means add a power or regulator part. all_indexed_candidates_rejected is scoped to this indexed category; occupancy is advisory and clear is only coarse single-part screening. Whole-system reuse is optional; a poor match never forces a complex baseline. External IDs are external:<hash>, with source authority and engineering unknowns; envelopes are not component CAD and cannot grant adoption or delivery.",
       "replySchema": {
         "status": "proposed|needs_confirmation",
         "plan_mode": "adapt_system|assemble_new",

package/skills/abelien-workspace/workflows/user-journey-hardware.json

@@ -2,7 +2,7 @@
   "name": "user-journey-hardware",
   "domain": "abelien-workspace",
   "executionProtocol": "pinned-result-v1",
-  "description": "Library recall, suitability review, fixed Prismer-first/Volc evidence for unresolved slots, source-bound merge, then the same formal hardware.select and gate",
+  "description": "Library recall, suitability review, English Volc query and direct source reads (Prismer switchable, off by default) for unresolved slots, source-bound merge, then the same formal hardware.select and gate",
   "input": {
     "required": [
       "requirements"
@@ -61,7 +61,7 @@
     {
       "id": "review-hardware-candidates",
       "executor": "agent",
-      "instruction": "Read the complete library candidates and original requirements/slots. Review suitability against function and every hard constraint. Reply {\"unresolved_slots\":[{\"slot_id\":\"original slot\",\"reason\":\"no candidates or specific reasons all candidates are unsuitable\",\"query\":\"official model search targeting function/category/key hard constraints\",\"count\":10}]}. Every zero-candidate slot requires supplemental search. All unsuitable candidates also require search. Preserve rechargeable built-in battery, wireless charging, and all other original requirements; do not ask the user to drop a requirement because the catalog is empty. unresolved_slots contains only slots that need search. Omit suitable library slots entirely; never add placeholder rows with an empty query or count=0. Return [] when all slots are suitable. Before committing this review, the trusted host validates the full original requirements, slots and recall with validate-web-search-plan.mjs; a VALIDATION reply preserves this pause so the same run can be corrected. Count is optional and a positive integer; Prismer search.topK and return.topK are explicit. Do not apply undocumented Prismer query/result limits or truncate requirements. The trusted fixed Prismer-first policy permits Volc only after a saved definitive denial, successful empty query or unsent missing Key; Volc alone checks its official 1-100 character Query and Count 1-50 at dispatch. Unknown dispatched effects never authorize fallback or a new invocation. Do not supply URLs, credentials, commands or providers. System reuse is optional: poor matches must not force complex whole systems. Concept visuals and the original requirements come first.",
+      "instruction": "Read the complete library candidates and original requirements/slots. Review suitability against function and every hard constraint. Reply {\"unresolved_slots\":[{\"slot_id\":\"original slot\",\"reason\":\"no candidates or specific reasons all candidates are unsuitable\",\"query\":\"official model search targeting function/category/key hard constraints\",\"count\":5}]}. Every zero-candidate slot requires supplemental search. All unsuitable candidates also require search. Preserve rechargeable built-in battery, wireless charging, and all other original requirements; do not ask the user to drop a requirement because the catalog is empty. unresolved_slots contains only slots that need search. Omit suitable library slots entirely; never add placeholder rows with an empty query or count=0. Return [] when all slots are suitable. Before committing this review, the trusted host validates the full original requirements, slots and recall with validate-web-search-plan.mjs; a VALIDATION reply preserves this pause so the same run can be corrected. Write every query in English and keep model numbers and manufacturer names; a query containing Chinese, Japanese or Korean characters is rejected by that validation at this same pause. Count is optional, an integer from 1 to 5, and defaults to 5. Do not truncate requirements. The trusted host currently records Prismer as disabled for both the query and source reads: it searches Volc directly and reads source pages over public HTTPS, so PDF/image sources stay unavailable. When the host enables Prismer, Volc runs only after a saved definitive denial, successful empty query or unsent missing Key, and sources are read Prismer-first. Unknown dispatched effects never authorize fallback or a new invocation. Do not supply URLs, credentials, commands or providers. System reuse is optional: poor matches must not force complex whole systems. Concept visuals and the original requirements come first.",
       "replySchema": {
         "unresolved_slots": "array"
       }
@@ -106,7 +106,7 @@
     {
       "id": "select-hardware-from-wikis",
       "executor": "agent",
-      "instruction": "先读 abelien-hardware-selection/references/selection-service-contract.md 与真实候选的完整 Wiki。每槽位选择一个真实 component_id，显式 quantity 等于槽位 quantity；manufacturer/model 取候选，selection_reason 非空，wiki_evidence 为至少 8 字符的 Wiki 原文引用数组。selected_models 每项需 constraint_checks，覆盖 function、slot:<hard_constraints 的键>、limit:<每项 hard limit.id>；每项包含 constraint_id、status=verified|unknown|incompatible、reason、evidence:[{component_id,quote}]。多型号另给 compatibility_checks，逐 power/interfaces/mechanical/thermal/software 维度包含 status、reason、每个型号的原文 evidence。证据不足填 unknown，不可编造。status=verified|needs_confirmation，plan_mode=assemble_new|adapt_system，其余数组 selected_models/coverage_ledger/remaining_slots/unknowns/replacement_plan 必填。先比较整机，但整机继承缺 manifest 必须待确认，不凭文案抵扣数量。verified 只表示 Wiki 证据判断通过，不是独立工程兼容求解或实测，不代表采用。 Read only merge-hardware-web candidates for the final choice. Preserve structured limits.envelope and source strength; dimension metadata/name/selection-line identity are supplied by the trusted finalizer, never invented. Incompatible dimension candidates require replacement; unknown/risk stays needs_confirmation when an envelope is active. all_indexed_candidates_rejected is scoped to this indexed category; occupancy is advisory and clear is only coarse single-part screening. Whole-system reuse is optional; a poor match never forces a complex baseline. External IDs are external:<hash>, with source authority and engineering unknowns; envelopes are not component CAD and cannot grant adoption or delivery.",
+      "instruction": "先读 abelien-hardware-selection/references/selection-service-contract.md 与真实候选的完整 Wiki。每槽位选择一个真实 component_id，显式 quantity 等于槽位 quantity；manufacturer/model 取候选，selection_reason 非空，wiki_evidence 为至少 8 字符的 Wiki 原文引用数组。selected_models 每项需 constraint_checks，覆盖 function、slot:<hard_constraints 的键>、limit:<每项 hard limit.id>；每项包含 constraint_id、status=verified|unknown|incompatible、reason、evidence:[{component_id,quote}]。多型号另给 compatibility_checks：power、interfaces 两维须包含 status、reason、每个型号的原文 evidence，可信电气数据确定性通过时以 compatibility_report 为准；mechanical、thermal、software 只作提示，可选填写，但填 incompatible 仍阻塞。证据不足填 unknown，不可编造。status=verified|needs_confirmation，plan_mode=assemble_new|adapt_system，其余数组 selected_models/coverage_ledger/remaining_slots/unknowns/replacement_plan 必填。先比较整机，但整机继承缺 manifest 必须待确认，不凭文案抵扣数量。verified 只表示 Wiki 证据判断通过，不是独立工程兼容求解或实测，不代表采用。 Read only merge-hardware-web candidates for the final choice. Preserve structured limits.envelope and source strength; dimension metadata/name/selection-line identity are supplied by the trusted finalizer, never invented. Incompatible dimension candidates require replacement; only decision_required (user hard limit, measured/datasheet size, no axis-aligned fit) returns needs_confirmation, other risk/unknown stays advisory and risk candidates rank last. Electrically incompatible candidates (trusted data: missing bus type or count) require replacing one side; ELECTRICAL_SUPPLY_GAP means add a power or regulator part. all_indexed_candidates_rejected is scoped to this indexed category; occupancy is advisory and clear is only coarse single-part screening. Whole-system reuse is optional; a poor match never forces a complex baseline. External IDs are external:<hash>, with source authority and engineering unknowns; envelopes are not component CAD and cannot grant adoption or delivery.",
       "replySchema": {
         "status": "verified|needs_confirmation",
         "plan_mode": "adapt_system|assemble_new",