@frockbot/kernel-contracts 0.1.2 → 0.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frockbot/kernel-contracts",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "private": false,
   "type": "module",
   "exports": {

package/src/isolate.test.ts

@@ -368,38 +368,34 @@ describe("isolate capability failure v1", () => {
 });
 
 describe("isolate loader identity", () => {
-  test("is the Bot, the User, and the content address — nothing else", () => {
+  test("is the User and the content address — nothing else", () => {
     expect(
       isolateLoaderIdV1({
         userId: "user-1",
-        botId: "bot-1",
         artifactSetHash: "a".repeat(64),
       }),
-    ).toBe(`bot-package:user-1:bot-1:${"a".repeat(64)}`);
+    ).toBe(`bot-package:user-1:${"a".repeat(64)}`);
   });
 
-  test("two Bots of one User never share an id", () => {
+  test("two Users never share an id", () => {
     const hash = "b".repeat(64);
     expect(
       isolateLoaderIdV1({
         userId: "user-1",
-        botId: "bot-1",
         artifactSetHash: hash,
       }),
     ).not.toBe(
       isolateLoaderIdV1({
-        userId: "user-1",
-        botId: "bot-2",
+        userId: "user-2",
         artifactSetHash: hash,
       }),
     );
   });
 
-  test("rejects a component that could forge another Bot's id", () => {
+  test("rejects a component that could forge another User's id", () => {
     expect(() =>
       isolateLoaderIdV1({
-        userId: "user-1:bot-2",
-        botId: "bot-1",
+        userId: "user-1:other",
         artifactSetHash: "c".repeat(64),
       }),
     ).toThrow(/components are invalid/);
@@ -409,7 +405,6 @@ describe("isolate loader identity", () => {
     expect(() =>
       isolateLoaderIdV1({
         userId: "user-1",
-        botId: "bot-1",
         artifactSetHash: "not-a-hash",
       }),
     ).toThrow(/components are invalid/);

package/src/isolate.ts

@@ -125,7 +125,7 @@ export type IsolateCapabilityListOutcomeV1 =
   IsolateCapabilityDescriptorV1[] | IsolateCapabilityFailureV1;
 
 /**
- * D6: model invocation as an Assignment-derived binding. Events cross the RPC
+ * D6: model invocation as an enabled-capability binding. Events cross the RPC
  * boundary as an NDJSON byte stream — see `decodeIsolateModelEventV1`. A
  * `ReadableStream` of JavaScript objects is not transferable over workerd RPC;
  * a byte stream is, so the kernel encodes and the isolate decodes.
@@ -152,7 +152,7 @@ export interface BotIsolateEntrypoint {
 
 /**
  * The loopback service binding the Bot's Durable Object mints for one isolate.
- * Every method is Assignment-derived: nothing here can hand out authority the
+ * Every method derives from enabled capabilities: nothing here can hand out authority the
  * Bot does not already hold.
  */
 export interface BotCapabilitiesStub {
@@ -160,7 +160,7 @@ export interface BotCapabilitiesStub {
   /**
    * D6 addendum. The kernel records the normalized request and acquires the
    * credential lease through the existing provider path *before* forwarding.
-   * Without a matching enabled model Assignment the answer is a pending
+   * Without a matching enabled model capability the answer is a pending
    * decision, never a grant.
    */
   invokeModel(request: NormalizedModelRequest): Promise<IsolateModelOutcomeV1>;
@@ -198,30 +198,27 @@ export interface IsolateHost {
 
 /**
  * D2. The loader identity, and nothing else — a reused id silently serves the
- * first code, so every component here is content- or owner-derived. The hash
- * covers the *mounted module set* (kernel wrapper text plus the Package
- * artifact), so a wrapper change is a new isolate.
+ * first code and `env`, so every component here is content- or owner-derived.
+ * The hash covers the mounted wrapper and Package artifact plus the digest of
+ * every baked-in binding: User, Bot, Composition generation, and enabled set.
+ * Identical artifacts reuse an isolate only under identical authority; the
+ * User prefix independently prevents cross-User reuse (AGENTS.md Package
+ * composition; ADR 0019).
  */
 export function isolateLoaderIdV1(input: {
   userId: string;
-  botId: string;
   artifactSetHash: string;
 }): string {
   const userId = boundedString(input.userId, "isolate loader userId", 256);
-  const botId = boundedString(input.botId, "isolate loader botId", 256);
   const hash = boundedString(
     input.artifactSetHash,
     "isolate loader artifactSetHash",
     128,
   );
-  if (
-    /[:\s]/.test(userId) ||
-    /[:\s]/.test(botId) ||
-    !/^[0-9a-f]+$/.test(hash)
-  ) {
+  if (/[:\s]/.test(userId) || !/^[0-9a-f]+$/.test(hash)) {
     throw new Error("isolate loader id components are invalid");
   }
-  return `bot-package:${userId}:${botId}:${hash}`;
+  return `bot-package:${userId}:${hash}`;
 }
 
 function record(value: unknown, label: string): Record<string, unknown> {