@logic-joe/fleek 0.2.2 → 0.2.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logic-joe/fleek",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "fleek - command line client for the Fleek agent hub (MCP over OAuth, OS keychain, signed role/project kits)",
   "license": "Apache-2.0",
   "type": "module",

package/service-agents/kit-setup

@@ -9,6 +9,8 @@
 # (service account: the admin's approval of the signed kit is the confirmation; needs the `claude` CLI on the host, used only for
 # `plugin install|list`); run-job copies their skill Markdown read-only into the review container. Ready only when every declared
 # plugin is installed in the approved version with a skills/ directory (VF-R2: `kit run --dry-run` names each gap with its reason).
+# KIT-PLUGIN-BIND: only a plugin bound to a commit in the signed kit is installed here, only while its source serves exactly that
+# commit, and used only when Claude Code records that commit; an unbound plugin is reported "unbound" (the admin binds it in the kit).
 # Usage: sudo /opt/fleek-agents/kit-setup review        (then: systemctl restart fleek-agent-review.service)
 set -euo pipefail
 if [ "${1:-}" != --as-broker ]; then
@@ -72,6 +74,7 @@ for gap in json.load(sys.stdin).get("vendorPluginsMissing", [])[:5]:
 if [ -n "$gaps" ]; then
   printf 'run-job is NOT ready for the vendor skills of the approved kits (the job would run without them):\n%s\n' "$gaps" >&2
   echo 'Fix: install / enable the approved version for this account (re-run this setup), or ask the admin to approve the installed version.' >&2
+  echo 'unbound / other_commit: the admin binds the plugin to the commit the source serves (new kit version); nothing unbound is installed here.' >&2
   exit 13
 fi
 # Exit 13 of `kit setup` here only means optional host entries stayed open (e.g. MCP proposals answered N); the job needs none.

package/service-agents/run-job

@@ -160,7 +160,8 @@ def host_report(fleek, provider_auth, kit=None, last_job_at=None, timeout=20):
 PLUGIN_NAME = re.compile(r"[a-z0-9][a-z0-9._-]{0,63}")
 PLUGIN_VERSION = re.compile(r"[0-9A-Za-z.+-]{1,64}")
 PLUGIN_ID = re.compile(r"[a-z0-9][a-z0-9._-]{0,63}@[a-z0-9][a-z0-9._-]{0,63}")
-VENDOR_GAP_REASONS = ("other_version", "disabled", "missing", "unchecked", "unverified", "error", "no_client", "outside_cache", "no_skills")
+# KIT-PLUGIN-BIND: "unbound" (no commit in the signed kit: never installed here) and "other_commit" (the install is not the bound commit)
+VENDOR_GAP_REASONS = ("other_version", "other_commit", "unbound", "disabled", "missing", "unchecked", "unverified", "error", "no_client", "outside_cache", "no_skills")
 VENDOR_MAX_FILES, VENDOR_MAX_BYTES, VENDOR_MAX_ENTRIES, VENDOR_MAX_FILE = 2000, 8 * 1024 * 1024, 10000, 1024 * 1024