@kybernesis/create 0.13.0 → 0.13.2

package/dist/cli.js

@@ -57,6 +57,7 @@ function initOptions(rest) {
         studio: rest.includes('--studio'),
         channel: flag(rest, "channel"),
         host: flag(rest, "host"),
+        model: flag(rest, "model"),
         subagents: subs === undefined ? undefined : subs.split(',').map((s) => s.trim()).filter(Boolean),
         yes: rest.includes('--yes') || rest.includes('-y'),
     };
@@ -182,6 +183,7 @@ ${dim("  npm i -g @kybernesis/create@latest")}
       --channel=<kind>  ${dim("none|slack|imessage|telegram|discord|web  (default: none)")}
       --host=<kind>     ${dim("vercel|exe                                (default: vercel)")}
       --subagents=a,b   ${dim("department subagents                      (default: none)")}
+      --model=<id>      ${dim("provider/model-id                         (default: sonnet 5)")}
       --engineer        ${dim("add the engineer layer: workshop sandbox + vision dev loop")}
       --studio          ${dim("wire for KYBER Studio: local execution + management routes")}
       --yes             ${dim("no prompts; take flags and defaults")}

package/dist/doctor.js

@@ -275,6 +275,27 @@ export async function doctor() {
         else {
             add("fail", `self-hosted: ${shortQueueTimeouts.join(" and ")} left at the 30s default`, "one queue delivery holds a connection open for the entire turn, so any turn slower than the timeout is redelivered and its steps re-run — the agent answers the same question twice, with two different answers, and nothing reports an error. Set both to 900000 in .env.local and restart the server");
         }
+        /**
+         * Disk, on a host whose runtime does not clean up after itself.
+         *
+         * eve builds a sandbox template per session configuration and keeps every
+         * one, and leaves session containers running long after their turn ended.
+         * The result is gigabytes a day on a working agent, and the failure it
+         * eventually produces looks like anything except a full disk.
+         */
+        if (capture("sh", ["-c", "command -v docker >/dev/null && echo yes"])?.trim() === "yes") {
+            const job = capture("sh", ["-c", "test -x /etc/cron.daily/kyb-docker-prune && echo yes"])?.trim();
+            const percent = Number(capture("sh", ["-c", "df / | awk 'NR==2{print $5}' | tr -d '%'"])?.trim() ?? 0);
+            if (job !== "yes") {
+                add("warn", "no daily docker reclaim on this host", "sandbox images and abandoned session containers accumulate by the gigabyte; `kyb upgrade` installs /etc/cron.daily/kyb-docker-prune");
+            }
+            else if (percent >= 80) {
+                add("fail", `disk ${percent}% full despite the reclaim job`, "run it now: sudo /etc/cron.daily/kyb-docker-prune, and check what else is on this host");
+            }
+            else {
+                add("pass", `daily docker reclaim installed (disk ${percent}% used)`);
+            }
+        }
         /**
          * Instructions that name a tool the agent does not have.
          *

package/dist/init.d.ts

@@ -14,6 +14,18 @@ export interface InitOptions {
     channel?: ChannelKind;
     /** Where the agent runs. Default "vercel". */
     host?: HostKind;
+    /**
+     * The model, as provider/model-id.
+     *
+     * @remarks
+     * Passed straight through to `eve init`, and that is why it exists: without
+     * it eve ends its scaffold by opening its interactive model picker, which
+     * needs a terminal UI. On a laptop that is a prompt; on a headless machine
+     * it is `--input requires the interactive UI` and a scaffold that stops
+     * after step one having already written the project — so `--yes` was never
+     * actually non-interactive.
+     */
+    model?: string;
     /** Department subagents. Default NONE. */
     subagents?: string[];
     /** Skip prompts and take the flags/defaults as given. */

package/dist/init.js

@@ -1,6 +1,6 @@
 import { chmodSync, copyFileSync, cpSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import { join, resolve } from "node:path";
-import { DEFAULT_ISSUER, EVE_VERSION, REGISTRY_URL, ask, bold, closePrompts, dim, green, run, slug, yellow, } from "./util.js";
+import { DEFAULT_ISSUER, EVE_VERSION, REGISTRY_URL, ask, bold, closePrompts, dim, green, run, slug, red, yellow, } from "./util.js";
 import { CHANNEL_KINDS, channelPlan, engineerPlan, envExample, evalFileTs, exeEvalConfigTs, evalScript, hostAgentTs, hostSteps, identityMd, rootArcanaTs, subagentAgentTs, subagentArcanaTs, subagentInstructionsMd, } from "./templates.js";
 import { suiteDir } from "./skills.js";
 import { configureArcana } from "./arcana.js";
@@ -58,8 +58,26 @@ export async function init(rawName, options = {}) {
         process.exit(1);
     }
     const plan = channelPlan(channel, name, host);
+    const model = options.model ?? DEFAULT_MODEL;
     console.log(bold(`\n1/6  Scaffolding eve agent (eve@${EVE_VERSION}) …`));
-    run("npx", [`eve@${EVE_VERSION}`, "init", name]);
+    // eve's scaffold ends by opening its interactive model picker
+    // (`eve dev --input /model`), which exits non-zero wherever there is no
+    // terminal UI — AFTER the project is fully created and its dependencies
+    // installed. Treating that as a failure makes headless scaffolding
+    // impossible, which is what a machine building itself has to do.
+    //
+    // Nothing is lost by ignoring it: agent.ts is overwritten below with our own
+    // template carrying the chosen model, so eve's pick would not have survived
+    // this function either. `--model` is deliberately NOT passed through — eve
+    // refuses an id it cannot find in the AI Gateway catalog and then creates
+    // nothing at all, and an exe-hosted agent takes its model from EXE_MODEL,
+    // not from the gateway.
+    run("npx", [`eve@${EVE_VERSION}`, "init", name], { allowFail: true });
+    // The real test of that step, since its exit code cannot be trusted.
+    if (!existsSync(join(dir, "package.json"))) {
+        console.error(red(`\n  eve did not create a project in ${dir}. Nothing else can run.`));
+        process.exit(1);
+    }
     console.log(bold("\n2/6  Adding the Kybernesis registry + core packages …"));
     run("npx", ["eve", "registry", "add", `@kybernesis=${REGISTRY_URL}`], { cwd: dir });
     for (const item of CORE_ITEMS) {
@@ -108,7 +126,7 @@ export async function init(rawName, options = {}) {
                 `    This agent cannot be connected to a desktop until they install.`));
         }
     }
-    const engPlan = engineer ? engineerPlan(host, DEFAULT_MODEL) : null;
+    const engPlan = engineer ? engineerPlan(host, model) : null;
     if (engPlan) {
         console.log(bold("\n2c   Engineer subagent: workshop sandbox + vision dev loop …"));
         run("npm", ["install", ...engPlan.deps, "--no-audit", "--no-fund"], { cwd: dir, allowFail: true });
@@ -133,7 +151,7 @@ export async function init(rawName, options = {}) {
         unlinkSync(join(dir, "agent/instructions.md"));
     }
     catch { }
-    writeFileSync(join(dir, "agent/agent.ts"), hostAgentTs(host, DEFAULT_MODEL));
+    writeFileSync(join(dir, "agent/agent.ts"), hostAgentTs(host, model));
     writeFileSync(join(dir, "agent/extensions/arcana.ts"), rootArcanaTs());
     writeFileSync(join(dir, "evals/kybernesis.eval.ts"), evalFileTs(displayName, depts));
     // A self-hosted agent judges through its own integration; the default
@@ -287,7 +305,7 @@ export async function init(rawName, options = {}) {
         }
     }
     console.log(bold("\n5/6  Env template + hermetic eval script …"));
-    writeFileSync(join(dir, ".env.example"), envExample(name, depts, issuer, plan.env, host, DEFAULT_MODEL));
+    writeFileSync(join(dir, ".env.example"), envExample(name, depts, issuer, plan.env, host, model));
     const pkgPath = join(dir, "package.json");
     const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
     pkg.scripts = { ...pkg.scripts, eval: evalScript(name, depts) };

package/dist/upgrade.js

@@ -179,14 +179,63 @@ function repairBuzzSetup(cwd, deps) {
         console.log(`    ${dim("Takes effect after the next build and restart.")}\n`);
     }
 }
+/**
+ * Keep the agent host from filling up with what the runtime leaves behind.
+ *
+ * @remarks
+ * eve builds a sandbox template image per session configuration and never
+ * collects the old ones, and it leaves session CONTAINERS running — a turn that
+ * took four minutes can still own a container, and its writable layer, eight
+ * days later. Forty stale images accumulated on one agent in a week; another
+ * reached 94% full and began failing in ways that looked like anything but a
+ * disk problem. Every self-hosted agent hits this; it is a property of the
+ * runtime, not of any one deployment.
+ *
+ * Installed rather than documented, and DAILY rather than weekly, because the
+ * accumulation is measured in gigabytes per day on an agent doing real work.
+ * The first version of this ran weekly and was already too slow.
+ */
+function repairDockerPrune(cwd, deps) {
+    if (!deps["@kybernesis/exe"])
+        return;
+    if (capture("sh", ["-c", "command -v docker >/dev/null && echo yes"])?.trim() !== "yes")
+        return;
+    const installed = capture("sh", ["-c", "test -x /etc/cron.daily/kyb-docker-prune && echo yes"]);
+    if (installed?.trim() === "yes")
+        return;
+    const source = join(cwd, "node_modules/@kybernesis/exe/scripts/docker-prune.sh");
+    if (!existsSync(source))
+        return;
+    // `sudo -n`: this runs inside an upgrade, and an upgrade that stops to ask
+    // for a password in the middle of an unattended run is worse than one that
+    // says what it could not do.
+    const ok = run("sh", [
+        "-c",
+        // The weekly predecessor is removed in the same breath: two jobs pruning
+        // the same host is not twice as safe, it is one more thing to reason
+        // about when something unexpected disappears.
+        `sudo -n cp ${JSON.stringify(source)} /etc/cron.daily/kyb-docker-prune && ` +
+            `sudo -n chmod 755 /etc/cron.daily/kyb-docker-prune && ` +
+            `sudo -n rm -f /etc/cron.weekly/docker-prune`,
+    ], { cwd, allowFail: true, quiet: true });
+    if (ok) {
+        console.log(`  ${green("+")} installed the daily docker reclaim (/etc/cron.daily/kyb-docker-prune)`);
+        console.log(`    ${dim("eve leaves sandbox images and running session containers behind; this collects them.")}\n`);
+    }
+    else {
+        console.log(`  ${yellow("!")} could not install the docker reclaim job (needs sudo). Without it this host ` +
+            `fills with stale sandbox images. Run:\n` +
+            `    ${dim("sudo cp node_modules/@kybernesis/exe/scripts/docker-prune.sh /etc/cron.daily/kyb-docker-prune && sudo chmod 755 /etc/cron.daily/kyb-docker-prune")}`);
+    }
+}
 export async function upgrade(skipEval) {
     const cwd = process.cwd();
     const pkg = JSON.parse(readFileSync(join(cwd, "package.json"), "utf8"));
     const deps = { ...pkg.dependencies, ...pkg.devDependencies };
     console.log(bold("\nkyb upgrade — checking @kybernesis/* and eve against npm\n"));
     warnIfStale();
+    // Env-only, so it is safe before anything is installed.
     repairLocalQueueTimeouts(cwd, deps);
-    repairBuzzSetup(cwd, deps);
     const toUpgrade = [];
     const unresolved = [];
     for (const name of kybernesisPackages(deps)) {
@@ -241,10 +290,25 @@ export async function upgrade(skipEval) {
     }
     if (toUpgrade.length === 0) {
         console.log(`\n${green("Everything is at latest certified versions.")}\n`);
+        // Still repair: being on the right versions is not the same as being set
+        // up. An agent can sit at latest for weeks with a capability switched off.
+        repairBuzzSetup(cwd, deps);
+        repairDockerPrune(cwd, deps);
         return;
     }
     console.log(bold(`\nInstalling: ${toUpgrade.join(", ")}\n`));
     run("npm", ["install", ...toUpgrade], { cwd });
+    /**
+     * Repairs run AFTER the install, not before.
+     *
+     * Both of these copy files out of packages that the install has just put
+     * there — a proxy script, a cron job, a CLI. Running them first meant looking
+     * for a file the older installed version did not ship: the repair found
+     * nothing, said nothing, and only worked on the NEXT upgrade. Which is a
+     * bug that hides itself, because by then it looks like it always worked.
+     */
+    repairBuzzSetup(cwd, deps);
+    repairDockerPrune(cwd, deps);
     run("npm", ["run", "typecheck"], { cwd });
     if (eveChanged) {
         // A framework bump must also pass discovery/compile, not just types.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kybernesis/create",
-  "version": "0.13.0",
+  "version": "0.13.2",
   "description": "The Kybernesis agent scaffolder and FDE toolkit: one command to a governed, remembering, multiplayer, self-testing eve agent — plus doctor and upgrade.",
   "license": "Apache-2.0",
   "type": "module",