@frockbot/plugin-shell 0.3.26 → 0.3.28

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frockbot/plugin-shell",
-  "version": "0.3.26",
+  "version": "0.3.28",
   "private": false,
   "type": "module",
   "exports": {
@@ -52,42 +52,42 @@
   },
   "dependencies": {
     "@cordisjs/plugin-webui": "0.8.2",
-    "@frockbot/agent-runtime": "0.3.26",
-    "@frockbot/application-foundation": "0.3.26",
-    "@frockbot/catalog-core": "0.3.26",
-    "@frockbot/client-core": "0.3.26",
-    "@frockbot/client-ui": "0.3.26",
-    "@frockbot/computer-core": "0.3.26",
-    "@frockbot/computer-host-protocol": "0.3.26",
-    "@frockbot/configuration-core": "0.3.26",
-    "@frockbot/connection-core": "0.3.26",
-    "@frockbot/kernel-agent-loop": "0.3.26",
-    "@frockbot/kernel-composition": "0.3.26",
-    "@frockbot/kernel-contracts": "0.3.26",
-    "@frockbot/kernel-do": "0.3.26",
-    "@frockbot/machine-protocol": "0.3.26",
-    "@frockbot/plugin-applets": "0.3.26",
-    "@frockbot/plugin-authoring": "0.3.26",
-    "@frockbot/plugin-bot-template": "0.3.26",
-    "@frockbot/plugin-computer": "0.3.26",
-    "@frockbot/plugin-flock": "0.3.26",
-    "@frockbot/plugin-image": "0.3.26",
-    "@frockbot/plugin-machine-messages": "0.3.26",
-    "@frockbot/plugin-mcp": "0.3.26",
-    "@frockbot/plugin-memory": "0.3.26",
-    "@frockbot/plugin-package-catalog": "0.3.26",
-    "@frockbot/plugin-routines": "0.3.26",
-    "@frockbot/plugin-skills": "0.3.26",
-    "@frockbot/plugin-subagents": "0.3.26",
-    "@frockbot/plugin-user-machine": "0.3.26",
-    "@frockbot/protocol": "0.3.26",
+    "@frockbot/agent-runtime": "0.3.28",
+    "@frockbot/application-foundation": "0.3.28",
+    "@frockbot/catalog-core": "0.3.28",
+    "@frockbot/client-core": "0.3.28",
+    "@frockbot/client-ui": "0.3.28",
+    "@frockbot/computer-core": "0.3.28",
+    "@frockbot/computer-host-protocol": "0.3.28",
+    "@frockbot/configuration-core": "0.3.28",
+    "@frockbot/connection-core": "0.3.28",
+    "@frockbot/kernel-agent-loop": "0.3.28",
+    "@frockbot/kernel-composition": "0.3.28",
+    "@frockbot/kernel-contracts": "0.3.28",
+    "@frockbot/kernel-do": "0.3.28",
+    "@frockbot/machine-protocol": "0.3.28",
+    "@frockbot/plugin-applets": "0.3.28",
+    "@frockbot/plugin-authoring": "0.3.28",
+    "@frockbot/plugin-bot-template": "0.3.28",
+    "@frockbot/plugin-computer": "0.3.28",
+    "@frockbot/plugin-flock": "0.3.28",
+    "@frockbot/plugin-image": "0.3.28",
+    "@frockbot/plugin-machine-messages": "0.3.28",
+    "@frockbot/plugin-mcp": "0.3.28",
+    "@frockbot/plugin-memory": "0.3.28",
+    "@frockbot/plugin-package-catalog": "0.3.28",
+    "@frockbot/plugin-routines": "0.3.28",
+    "@frockbot/plugin-skills": "0.3.28",
+    "@frockbot/plugin-subagents": "0.3.28",
+    "@frockbot/plugin-user-machine": "0.3.28",
+    "@frockbot/protocol": "0.3.28",
     "cordis": "4.0.0-rc.8",
     "vue": "3.5.41"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "latest",
-    "@frockbot/plugin-prompt": "0.3.26",
-    "@frockbot/plugin-tools": "0.3.26",
+    "@frockbot/plugin-prompt": "0.3.28",
+    "@frockbot/plugin-tools": "0.3.28",
     "@types/bun": "1.3.6",
     "@types/node": "26.2.0",
     "@vitejs/plugin-vue": "6.0.8",

package/src/backend-applets.test.ts

@@ -526,6 +526,65 @@ describe("ctx.applets", () => {
     );
   });
 
+  // Production, 2026-09-04, run 76b4f8d9: `applet build` printed
+  // `dist/manifest.json 2 tool(s)`, the publish sync reported `ok` and moved
+  // nothing, and the publish then said "run `applet build` … first" about a
+  // file that was sitting on the Computer. A sync that reported `ok` is not a
+  // reason to blame the build when the sync itself says it saw the file.
+  test("publish names the hash the Computer held when the Workspace answers not-found", async () => {
+    const { host: capability } = host({
+      files: {
+        [`${APPLET}/dist/server.js`]: "export class Applet {}",
+        [`${APPLET}/dist/ui.html`]: "<h1>hi</h1>",
+      },
+      synced: {
+        status: "ok",
+        detail: "",
+        required: [
+          {
+            path: `${APPLET}/dist/server.js`,
+            contentHash: "a".repeat(64),
+            durable: true,
+          },
+          {
+            path: `${APPLET}/dist/ui.html`,
+            contentHash: "b".repeat(64),
+            durable: true,
+          },
+          {
+            path: `${APPLET}/dist/manifest.json`,
+            contentHash: "e0e3ce78fabf".padEnd(64, "0"),
+            durable: false,
+          },
+        ],
+      },
+    });
+
+    const outcome = await capability.publish({ appletId: APPLET }, scope);
+
+    expect(outcome.status).toBe("failed");
+    const reason = outcome.status === "failed" ? outcome.reason : "";
+    expect(reason).toBe(
+      '"dist/manifest.json" is on the Computer (sha256 e0e3ce78fabf) but the Workspace answered not-found: the publish sync reported ok and did not carry it',
+    );
+    expect(reason).not.toMatch(/applet build/);
+  });
+
+  test("publish still blames the build when the sync saw no such file", async () => {
+    const { host: capability } = host({
+      files: {},
+      synced: {
+        status: "ok",
+        detail: "",
+        required: [{ path: `${APPLET}/dist/server.js`, durable: false }],
+      },
+    });
+    const outcome = await capability.publish({ appletId: APPLET }, scope);
+    expect(outcome.status === "failed" && outcome.reason).toMatch(
+      /applet build/,
+    );
+  });
+
   test("publish refuses a manifest whose hashes do not match the bytes", async () => {
     const { host: capability } = host({
       files: {

package/src/backend-applets.ts

@@ -70,6 +70,19 @@ export interface AppletSourceSyncOutcomeV1 {
   status: "ok" | "degraded" | "unavailable" | "refused" | "skipped";
   /** What the sync said went wrong, empty when it had nothing to say. */
   detail: string;
+  /**
+   * What the sync saw for each `dist/` file the publish named required: the
+   * hash of the bytes on the Computer, and whether the store ended up holding
+   * them. It is the evidence behind the publish's own failure sentence — a
+   * build output that demonstrably exists is never answered with "run `applet
+   * build` first" (production, 2026-09-04).
+   */
+  required?: readonly {
+    /** The source-root-relative path, `<appletId>/dist/…`. */
+    path: string;
+    contentHash?: string;
+    durable: boolean;
+  }[];
 }
 
 /** The three files `applet build` writes, read from the durable root. */
@@ -627,6 +640,18 @@ export function createAppletCapabilityHostV1(
       appletDistPathV1(options.userId, appletId, file),
     );
     if (outcome.status !== "ok") {
+      // Verify before reporting. The sync was asked for these exact paths, so
+      // it can say whether the Computer held the file and whether the store
+      // took it. A build output that is on disk is never answered with "run
+      // `applet build` first": that sends a Bot round a loop that cannot end.
+      const seen = synced?.required?.find(
+        (entry) => entry.path === `${appletId}/${file}`,
+      );
+      if (seen?.contentHash !== undefined) {
+        return {
+          failure: `"${file}" is on the Computer (sha256 ${seen.contentHash.slice(0, 12)}) but the Workspace answered ${outcome.status}: the publish sync reported ${synced?.status ?? "nothing"} and did not carry it${synced?.detail ? ` — ${synced.detail}` : ""}`,
+        };
+      }
       // A pull that did not finish is the likelier explanation than an
       // unbuilt Applet, and telling the Bot to build again would send it
       // round a loop that cannot end.

package/src/backend.ts

@@ -2521,7 +2521,11 @@ export class ShellBotBackendContribution {
               ),
               signal: active.signal,
             });
-            return { status: summary.status, detail: summary.detail };
+            return {
+              status: summary.status,
+              detail: summary.detail,
+              ...(summary.required ? { required: summary.required } : {}),
+            };
           }
         : undefined,
       composition: {