@frockbot/plugin-web 0.1.3 → 0.2.0

package/README.md

@@ -22,8 +22,8 @@ from first principles. No schema parity is claimed.
 | Turn types     | all four (manifest v4 `admission`)                                     |
 
 `web_fetch` needs no Connection: reading a public page needs no credential. The
-Assignment is still the fence — the Contribution mounts nothing without an
-enabled Assignment of `web-fetch`.
+Account-wide Package enablement is the fence — the Contribution mounts nothing
+unless `web-fetch` is in the User's enabled capability set.
 
 It is a plain outbound request, so it works while the User's Computer is
 hibernated and never wakes it. A page that needs a real browser is the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frockbot/plugin-web",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "private": false,
   "type": "module",
   "exports": {
@@ -20,11 +20,11 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
-    "@frockbot/kernel-contracts": "0.1.3",
+    "@frockbot/kernel-contracts": "0.2.0",
     "cordis": "4.0.0-rc.8"
   },
   "devDependencies": {
-    "@frockbot/plugin-tools": "0.1.3",
+    "@frockbot/plugin-tools": "0.2.0",
     "@types/bun": "1.4.0",
     "typescript": "^7.0.2"
   },

package/src/agent.test.ts

@@ -12,10 +12,9 @@ import {
   type WebFetchResultV1,
 } from "./agent.ts";
 
-const ENABLED_ASSIGNMENT = {
+const ENABLED_CAPABILITY = {
   packageId: "web",
   capabilityId: "web-fetch",
-  state: "enabled",
 } as const;
 
 function toolContext(): ToolExecutionContext {
@@ -226,21 +225,16 @@ describe("web_fetch", () => {
   });
 });
 
-describe("the web-fetch Capability Assignment", () => {
-  test("mounts nothing without an enabled Assignment naming it", () => {
+describe("the web-fetch Capability enablement", () => {
+  test("mounts only for the enabled Capability", () => {
     expect(
       createConfiguredWebFetchRuntimeContribution({
-        assignment: { ...ENABLED_ASSIGNMENT, state: "disabled" },
+        capability: { ...ENABLED_CAPABILITY, capabilityId: "something-else" },
       }),
     ).toBeUndefined();
     expect(
       createConfiguredWebFetchRuntimeContribution({
-        assignment: { ...ENABLED_ASSIGNMENT, capabilityId: "something-else" },
-      }),
-    ).toBeUndefined();
-    expect(
-      createConfiguredWebFetchRuntimeContribution({
-        assignment: ENABLED_ASSIGNMENT,
+        capability: ENABLED_CAPABILITY,
       }),
     ).toBeDefined();
   });
@@ -249,7 +243,7 @@ describe("the web-fetch Capability Assignment", () => {
     const root = new Context();
     await root.plugin(ToolRegistry);
     const plugin = createConfiguredWebFetchRuntimeContribution({
-      assignment: ENABLED_ASSIGNMENT,
+      capability: ENABLED_CAPABILITY,
     });
     expect(plugin).toBeDefined();
     await root.plugin(plugin!);

package/src/agent.ts

@@ -1,10 +1,10 @@
 // The Web Package's runtime Contribution: `web_fetch`.
 //
 // AUTHORITY. `web-fetch` is a Capability with no Connection: fetching a public
-// page needs no credential, so a Bot holds the tool the moment its User grants
-// an Assignment of it, and holds nothing when they have not. The Capability is
-// still the fence — {@link createConfiguredWebFetchRuntimeContribution} mounts
-// nothing without an enabled Assignment naming it.
+// page needs no credential, so a Bot holds the tool while its User keeps the
+// Package enabled. The Capability is still the fence —
+// {@link createConfiguredWebFetchRuntimeContribution} mounts nothing without
+// the enabled Capability naming it.
 //
 // TRUST BOUNDARY. The Bot's Durable Object is the only thing between a model's
 // URL and the platform's network, so every hop is classified by `./ssrf.ts`
@@ -478,23 +478,21 @@ export function createWebRuntimePlugin(
 }
 
 /**
- * The Assignment fence. A Bot holds `web_fetch` only through an enabled
- * Assignment of this Package's `web-fetch` Capability; without one this
+ * The enablement fence. A Bot holds `web_fetch` only through this Package's
+ * enabled `web-fetch` Capability; without one this
  * returns `undefined` and nothing is mounted.
  */
 export function createConfiguredWebFetchRuntimeContribution(config: {
-  assignment: {
+  capability: {
     packageId: string;
     capabilityId: string;
     connectionId?: string;
-    state: string;
   };
   fetch?: WebFetchFn;
 }): Plugin.Function | undefined {
   if (
-    config.assignment.packageId !== "web" ||
-    config.assignment.capabilityId !== "web-fetch" ||
-    config.assignment.state !== "enabled"
+    config.capability.packageId !== "web" ||
+    config.capability.capabilityId !== "web-fetch"
   ) {
     return undefined;
   }