@kybernesis/create 0.21.0 → 0.22.0

package/dist/doctor.js

@@ -61,6 +61,8 @@ function modelReachCheck(reach) {
             return { verdict: "pass", label: "Model reach: exe (host LLM integration)" };
         case "grok-sub":
             return { verdict: "pass", label: "Model reach: grok-sub (direct xAI subscription credential)" };
+        case "chatgpt-sub":
+            return { verdict: "pass", label: "Model reach: chatgpt-sub (ChatGPT subscription through Codex)" };
         case "gateway":
             return { verdict: "pass", label: "Model reach: gateway" };
         case "direct-provider":

package/dist/model-reach.d.ts

@@ -21,6 +21,8 @@ export type DoctorModelReach = {
     kind: "exe";
 } | {
     kind: "grok-sub";
+} | {
+    kind: "chatgpt-sub";
 } | {
     kind: "gateway";
 } | {

package/dist/model-reach.js

@@ -1,3 +1,6 @@
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
 export const MODEL_REACH_ENV = "KYB_MODEL_REACH";
 export const CLAUDE_SUBSCRIPTION_MODEL = "claude-opus-5";
 /** Resolve the one-shot scaffold selector. An explicit CLI value wins over Factory env. */
@@ -36,7 +39,7 @@ export function resolveModelScaffold(options) {
 export function switchedModelReach(source, env) {
     if (!/\bexeModelReach\s*\(/.test(source))
         return null;
-    const authored = /\breach\s*:\s*["'](gateway|byok|claude-sub)["']/.exec(source)?.[1];
+    const authored = /\breach\s*:\s*["'](gateway|byok|claude-sub|grok-sub|chatgpt-sub)["']/.exec(source)?.[1];
     if (!authored)
         return { kind: "unresolved", reason: "exeModelReach has no literal default reach to read" };
     const model = env.EXE_MODEL ?? /\bmodel\s*:\s*["']([^"']+)["']/.exec(source)?.[1] ?? "";
@@ -45,6 +48,18 @@ export function switchedModelReach(source, env) {
             return { kind: "exe" };
         if (reach === "claude-sub")
             return { kind: "claude-sub" };
+        // Runs only once `grok login` has left a credential; the agent falls back otherwise.
+        if (reach === "grok-sub") {
+            const auth = env.GROK_AUTH_PATH?.trim() || join(homedir(), ".grok", "auth.json");
+            return existsSync(auth) ? { kind: "grok-sub" } : null;
+        }
+        // Needs eve's chatgpt passed in, and a Codex sign-in on the host.
+        if (reach === "chatgpt-sub") {
+            if (!/\bchatgpt\s*[,}]/.test(source))
+                return null;
+            const auth = join(env.CODEX_HOME?.trim() || join(homedir(), ".codex"), "auth.json");
+            return existsSync(auth) ? { kind: "chatgpt-sub" } : null;
+        }
         if (reach !== "byok")
             return null;
         const provider = /^(anthropic|openai)\//.exec(model)?.[1];

package/dist/templates.js

@@ -425,9 +425,10 @@ function agentModelTemplate(host, config) {
         throw new Error("claude-sub model templates require an exe host");
     if (host === "exe") {
         /**
-         * Every exe agent takes the runtime switch: KYB_MODEL_REACH (gateway, byok
-         * or claude-sub) picks the route at boot, so the setup route can change it
-         * by writing env. `reach` here is what runs while it is unset, which is
+         * Every exe agent takes the runtime switch: KYB_MODEL_REACH (gateway, byok,
+         * claude-sub, grok-sub or chatgpt-sub) picks the route at boot, so the
+         * setup route can change it by writing env. `chatgpt` is passed so the
+         * ChatGPT subscription is one of those routes; nothing calls it until then. `reach` here is what runs while it is unset, which is
          * exactly what this scaffold used to hard-code.
          *
          * The subscription scaffold still names a gateway id, used only if the
@@ -439,8 +440,9 @@ function agentModelTemplate(host, config) {
         return {
             imports: `import { createAnthropic } from "@ai-sdk/anthropic";\n` +
                 `import { createOpenAI } from "@ai-sdk/openai";\n` +
+                `import { chatgpt } from "eve/models/openai";\n` +
                 `import { exeModelReach } from "@kybernesis/exe";\n\n`,
-            fields: `  ...exeModelReach({ ${defaults}, createOpenAI, createAnthropic }),\n`,
+            fields: `  ...exeModelReach({ ${defaults}, createOpenAI, createAnthropic, chatgpt }),\n`,
         };
     }
     return { imports: "", fields: `  model: ${JSON.stringify(config.model)},\n` };
@@ -452,7 +454,7 @@ export function hostAgentTs(host, model) {
         : (model.reach === "claude-sub"
             ? `// By default a Claude subscription through the loopback OAuth proxy — no API key or exe gateway.\n`
             : `// By default the exe.dev LLM integration — no provider key on the host; exe\n// injects the credential (managed gateway, your API key, or a connected\n// ChatGPT subscription) server-side.\n`) +
-            `// KYB_MODEL_REACH (gateway | byok | claude-sub) switches the route at boot\n// without editing this file; EXE_MODEL names the gateway or BYOK model.\n`;
+            `// KYB_MODEL_REACH (gateway | byok | claude-sub | grok-sub | chatgpt-sub) switches the route at boot\n// without editing this file; EXE_MODEL names the gateway or BYOK model.\n`;
     return `import { defineAgent } from "eve";
 ${rendered.imports}${comment}export default defineAgent({
 ${rendered.fields}${host === "exe" ? `  // This long-lived self-hosted process has no metered platform session ceiling.\n  limits: { maxInputTokensPerSession: false },\n` : ""}});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kybernesis/create",
-  "version": "0.21.0",
+  "version": "0.22.0",
   "description": "The Kybernesis agent scaffolder and FDE toolkit: one command to a governed, remembering, multiplayer, self-testing eve agent \u2014 plus doctor and upgrade.",
   "license": "Apache-2.0",
   "type": "module",

package/skills/kybernesis-packages/SKILL.md

@@ -90,8 +90,8 @@ then `eve add @kybernesis/<item>`). Each covers one axis:
   `POST .../setup/env`, `POST .../setup/action`): a `manage` grant only;
   allowlisted env (`EXE_MODEL`, `EXE_LLM_URL`, `ANTHROPIC_API_KEY`,
   `OPENAI_API_KEY`, `SLACK_BOT_TOKEN`, `SLACK_SIGNING_SECRET`) and the actions
-  `claude.login` (link, then the code on stdin), `linq.signup`/`linq.verify`,
-  `link.login` and `vnc.password`. Every change applies at one restart that
+  `claude.login` (link, then the code on stdin), `linq.signup`/`linq.verify`, `linq.contacts`/`linq.contact.add`/`linq.contact.remove` (who can text a shared line, 0.15),
+  `link.login`/`link.logout`, `wallet.add` (0.16: adds the payments item to an agent with a computer, rebuilds, rolls back on a failed build, restarts only after a good one) and `vnc.password`. Every change applies at one restart that
   waits until no conversation is in flight (deploy.sh's count). A BYOK key only
   takes effect when `agent/agent.ts` uses that provider; status says so.
   Since 0.12 it also takes `KYB_MODEL_REACH` (`gateway`, `byok`,