@frockbot/kernel-composition 0.3.10 → 0.3.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frockbot/kernel-composition",
-  "version": "0.3.10",
+  "version": "0.3.12",
   "private": false,
   "type": "module",
   "exports": {
@@ -20,7 +20,7 @@
   "dependencies": {
     "cordis": "4.0.0-rc.8",
     "semver": "7.8.5",
-    "@frockbot/kernel-contracts": "0.3.10"
+    "@frockbot/kernel-contracts": "0.3.12"
   },
   "devDependencies": {
     "@types/bun": "1.4.0",

package/src/generation.ts

@@ -13,11 +13,7 @@ export type PackageProvenanceV1 =
       version: string;
       catalogId: string;
       catalogGeneration: string;
-      /**
-       * Absent for a first-party Catalog entry: it names reviewed compiled-in
-       * code, publishes no bundle, and so has no artifact hash to pin.
-       */
-      contentHash?: string;
+      contentHash: string;
     }
   | {
       kind: "user";
@@ -301,16 +297,14 @@ function decodePackageProvenanceV1(
   } else if (kind === "catalog") {
     exactKeys(
       value,
-      [...common, "catalogId", "catalogGeneration"],
-      ["contentHash"],
+      [...common, "catalogId", "catalogGeneration", "contentHash"],
+      [],
       label,
     );
     identity();
     boundedString(value.catalogId, `${label}.catalogId`, 64);
     boundedString(value.catalogGeneration, `${label}.catalogGeneration`, 64);
-    if (value.contentHash !== undefined) {
-      hashString(value.contentHash, `${label}.contentHash`);
-    }
+    hashString(value.contentHash, `${label}.contentHash`);
   } else if (kind === "user") {
     exactKeys(value, [...common, "userId", "authoredAt"], [], label);
     identity();
@@ -374,12 +368,9 @@ function decodeCompositionMemberV1(
     value.artifact === undefined
       ? undefined
       : decodeArtifactRefV1(value.artifact, `${label}.artifact`);
-  // A bundle-backed Catalog member must name exactly the artifact it pins; a
-  // first-party entry pins no bundle and mounts in the kernel isolate, so it
-  // carries neither hash nor artifact — the two must still agree.
   if (
     provenance.kind === "catalog" &&
-    artifact?.contentHash !== provenance.contentHash
+    (!artifact || artifact.contentHash !== provenance.contentHash)
   ) {
     throw new Error(
       `${label}.catalog provenance must match its Bot-isolate artifact`,

package/src/index.test.ts

@@ -947,7 +947,7 @@ describe("decodeFrockBotManifest", () => {
     const decoded = decodeFrockBotManifest({
       schemaVersion: 4,
       id: "flock-ai",
-      displayName: "Flock AI",
+      displayName: "Frock AI",
       version: "1.0.0",
       compatibility: { frockbot: ">=0.0.1" },
       contributions: { runtime: { entry: "./runtime" } },
@@ -956,7 +956,7 @@ describe("decodeFrockBotManifest", () => {
         connectionTypes: [
           {
             id: "flock-ai-account",
-            displayName: "Flock AI",
+            displayName: "Frock AI",
             allowMultiple: false,
             authorization: { kind: "ambient-native" },
             capabilities: ["flock-ai-models"],

package/src/isolate-host.test.ts

@@ -595,10 +595,15 @@ describe("Bot isolate contribution host", () => {
     expect(registered[0]!.name).toBe("reverse_text");
     expect(registered[0]!.namespace).toBe("bot-authored");
     expect(registered[0]!.idempotent).toBe(true);
+    // Not external: this is the deployment's own reviewed code reached over no
+    // network, and the dispatch guard refuses an external call that carries no
+    // `mcpDetails.description` — a field nothing ever told the model to send
+    // for an isolate-hosted Package. Registering these as external meant the
+    // Applets Package could not be called by chat at all.
     expect(namespaces).toEqual([
       {
         name: "bot-authored",
-        external: true,
+        external: false,
         status: "ready",
       },
     ]);

package/src/isolate-host.ts

@@ -373,7 +373,19 @@ export class BotIsolateContributionHost implements ContributionHost {
         registered.push(
           this.options.tools.registerNamespace({
             name: packageId,
-            external: true,
+            // Not external. `external` exists to force a human-readable
+            // reason onto a call that leaves for a third-party MCP server, and
+            // the dispatch guard refuses an external call without
+            // `mcpDetails.description`. An isolate-hosted Package is this
+            // deployment's own reviewed code reached over no network, and
+            // nothing ever told the model to send `mcpDetails` for one — the
+            // discovery envelope omits it and the `call_dynamic_tool` blurb
+            // says to omit it. So the envelope offered was the envelope
+            // refused, and the Applets Package (which ships as a bundled
+            // artifact and mounts here) could not be called by chat at all:
+            // `applet_create` answered `External namespace "applets" requires
+            // mcpDetails.description` every time.
+            external: false,
             status: "ready",
           }),
         );