@panaversity/ksor 0.0.24 → 0.0.25

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # @panaversity/ksor
 
+## 0.0.25
+
+### Patch Changes
+
+- ed2dce0: Fix the container serving the DEFAULT tool surface while the repository said
+  otherwise.
+
+  `.dockerignore` excluded all of `system/` — correct when that directory held only
+  the website, and wrong the moment the door's own registration moved into
+  `system/gateways/`. The file never reached the image, so a record that had
+  renamed its tools, dropped one, or written what it covers was deployed serving
+  none of it. Nothing went red: the door booted, `/health` was green, searches
+  returned cited hits, and only `tools/list` betrayed it.
+
+  It now excludes `system/site/`, and the Dockerfile copies the project rather than
+  naming files one at a time — which is how the door came to ship without the very
+  file that shapes its tool surface.
+
+  The container acceptance job now writes a customized registration before building
+  the image and asserts the served tool is the one that file names. Found by
+  deploying and looking at `tools/list`, which is the only thing that would have.
+
 ## 0.0.24
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@panaversity/ksor",
-  "version": "0.0.24",
+  "version": "0.0.25",
   "description": "Knowledge System of Record — compile governed markdown into a static site for people and an MCP server for AI agents, with citations and measured abstention.",
   "keywords": [
     "abstention",

package/templates/scaffold/Dockerfile

@@ -22,10 +22,12 @@ WORKDIR /app
 COPY package.json ./
 RUN npm install --omit=dev --no-audit --no-fund
 
-# The record's identity and configuration. The CORPUS is deliberately absent:
-# the door serves from Postgres, and knowledge/ belongs to the build that
-# published it — see .dockerignore.
-COPY instance.md ./
+# The record's identity, configuration, and its MCP registration
+# (system/gateways/). What is deliberately ABSENT is decided in .dockerignore —
+# the corpus, the website and every secret — rather than by listing files here:
+# naming them one at a time is how the door came to ship without the very file
+# that shapes its tool surface (found live).
+COPY . ./
 
 # Most container hosts inject PORT; 80 is a sane default when nothing does.
 ENV PORT=80

package/templates/scaffold/dockerignore

@@ -11,8 +11,11 @@
 # suggest the container reads it. It does not.
 knowledge/
 
-# The website. It is the OTHER surface, built and hosted separately.
-system/
+# The website — the OTHER surface, built and hosted separately. NOT all of
+# system/: system/gateways/ holds this door's own registration, and excluding
+# it made the container silently serve the default tool surface while the
+# repository said otherwise (found live).
+system/site/
 
 # Build and tooling noise.
 node_modules/