@kybernesis/create 0.17.2 → 0.18.0

package/README.md

@@ -10,6 +10,10 @@ npm create @kybernesis acme-atlas
 npx @kybernesis/create init acme-atlas
 ```
 
+## Core on exe hosts
+
+`kyb init --host=exe` always installs the agent's computer (`@kybernesis/computer`: a persistent desktop with Chrome a person can watch and take over) and its vault (`@kybernesis/vault`: per-agent, per-person logins and cards it fills on that computer without seeing them). They are not options. A Vercel host gets neither, because a function cannot keep a desktop alive, and init says so.
+
 ## `kyb init [name]`
 
 Scaffolds the full Kybernesis stack:

package/dist/cli.js

@@ -105,7 +105,6 @@ function usage(command) {
       --model-reach=<reach> ${dim("claude-sub (exe only; default: host route)")}
       --subagents=a,b       ${dim("department subagents")}
       --engineer            ${dim("add the engineer layer")}
-      --no-computer         ${dim("skip the agent's own desktop + Chrome (on by default on exe)")}
       --studio              ${dim("wire KYBER Studio local/manage routes")}
       --yes, -y             ${dim("no prompts")}
 
@@ -230,7 +229,6 @@ ${dim("  npm i -g @kybernesis/create@latest")}
       --model=<id>      ${dim("provider/model-id; bare claude-opus-5 for claude-sub")}
       --model-reach=<r> ${dim("claude-sub (exe only); env: KYB_MODEL_REACH")}
       --engineer        ${dim("add the engineer layer: workshop sandbox + vision dev loop")}
-      --no-computer     ${dim("skip the agent's own computer (desktop + Chrome you can watch; on by default on exe hosts)")}
       --studio          ${dim("wire for KYBER Studio: local execution + management routes")}
       --yes             ${dim("no prompts; take flags and defaults")}
   ${bold("kyb add channel <kind>")}

package/dist/eval-cli.js

@@ -20,7 +20,10 @@ const CONDEMNED = /CORRUPTED_EVENT_LOG|REPLAY_DIVERGENCE/;
 const JUDGE_FAILURE = /judge[^\n]*(unreachable|ECONNREFUSED|fetch failed|HTTP \d{3}|Unauthenticated|no credentials|not valid)/i;
 function main() {
     const args = process.argv.slice(2);
-    const child = spawn("npx", ["eve", "eval", ...args], { stdio: ["inherit", "pipe", "pipe"], env: process.env });
+    // An eval's routine deliveries land in throwaway sessions; they must never
+    // become the agent's canonical conversation (see @kybernesis/manage).
+    const env = { ...process.env, KYB_CANONICAL_SESSION: "off" };
+    const child = spawn("npx", ["eve", "eval", ...args], { stdio: ["inherit", "pipe", "pipe"], env });
     let condemned = 0;
     let judgeFailures = 0;
     const scan = (chunk, out) => {

package/dist/init.d.ts

@@ -7,9 +7,8 @@ export declare function finalizeGithubToolsRegistryMount(cwd: string, registryAd
 export interface InitOptions {
     engineer?: boolean;
     /**
-     * The agent's own computer: a persistent Docker desktop with Chrome a person
-     * can watch and take over. Part of the core install on exe hosts (a Vercel
-     * function cannot keep a desktop alive); `false` opts out.
+     * @deprecated The agent's computer is core on exe hosts and cannot be opted
+     * out of; the flag is accepted and ignored so old scripts keep working.
      */
     computer?: boolean;
     /**

package/dist/init.js

@@ -16,6 +16,11 @@ import { MODEL_REACH_ENV, resolveModelScaffold } from "./model-reach.js";
 // `identity` gives the agent its .agent name surface: the owner connects it
 // from the ARP console with one click and never touches this repo again.
 const CORE_ITEMS = ["enterprise", "arcana", "evals", "identity"];
+// Core on every exe host, not elective (Ian, 2026-10-07): the agent's own
+// computer, and its own per-person vault that fills logins and cards on it. A
+// Vercel function cannot keep a desktop alive, so there — and only there —
+// both are skipped, and init says so out loud.
+const CORE_EXE_ITEMS = ["vault"];
 // Official eve-registry limbs installed with the engineer subagent.
 // connection/vercel is Vercel-Connect-backed, so it is VERCEL-HOST ONLY: on a
 // self-hosted agent it cannot get an OIDC token and the agent fails to boot.
@@ -36,7 +41,9 @@ export function finalizeGithubToolsRegistryMount(cwd, registryAddSucceeded) {
 }
 export async function init(rawName, options = {}) {
     const engineer = options.engineer === true;
-    const computer = options.computer !== false;
+    if (options.computer === false) {
+        console.log(yellow("  ! --no-computer is ignored: the agent's computer and vault are core on exe hosts."));
+    }
     const studio = options.studio === true;
     const nonInteractive = options.yes === true;
     const name = slug(rawName ?? (await ask("Agent name (kebab-case)?", "acme-agent")));
@@ -188,13 +195,18 @@ export async function init(rawName, options = {}) {
                 console.log(yellow(`  ! ${item} did not install cleanly — re-run: npx eve add ${item}`));
         }
     }
-    const compPlan = computer && host === "exe" ? computerPlan(name) : null;
-    if (options.computer === true && host !== "exe") {
-        console.log(yellow("\n  ! --computer needs a Docker host (exe.dev); a Vercel function cannot keep a desktop alive. Skipped."));
+    const compPlan = host === "exe" ? computerPlan(name) : null;
+    if (host !== "exe") {
+        console.log(yellow("\n  ! No computer and no vault on a Vercel host: a function cannot keep a desktop alive, and the vault fills on the computer. Use --host=exe for the full agent."));
     }
     if (compPlan) {
-        console.log(bold("\n2e   The agent's computer: persistent desktop + Chrome, sighted computer tool, browser guard …"));
+        console.log(bold("\n2e   Core on exe: the agent's computer (desktop + Chrome, sighted tool, browser guard) and its vault …"));
         run("npm", ["install", ...compPlan.deps, "--no-audit", "--no-fund"], { cwd: dir, allowFail: true });
+        for (const item of CORE_EXE_ITEMS) {
+            const ok = run("npx", ["eve", "add", `@kybernesis/${item}`, "--overwrite"], { cwd: dir, allowFail: true });
+            if (!ok)
+                console.log(yellow(`  ! @kybernesis/${item} did not install cleanly — re-run: npx eve add @kybernesis/${item}`));
+        }
     }
     console.log(bold("\n2d   Seeding the FDE Claude Code skill suite (.claude/skills) …"));
     try {
@@ -413,6 +425,7 @@ export async function init(rawName, options = {}) {
         studio ? "KYBER Studio (local execution + management routes)" : null,
         engineer ? "engineer subagent (workshop + vision loop)" : null,
         compPlan ? "its own computer (desktop + Chrome, watch and take over)" : null,
+        compPlan ? "its own vault (logins and cards it fills without seeing)" : null,
         depts.length ? `${depts.length} dept subagent(s)` : null,
     ].filter(Boolean);
     const steps = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kybernesis/create",
-  "version": "0.17.2",
+  "version": "0.18.0",
   "description": "The Kybernesis agent scaffolder and FDE toolkit: one command to a governed, remembering, multiplayer, self-testing eve agent \u2014 plus doctor and upgrade.",
   "license": "Apache-2.0",
   "type": "module",