@kybernesis/create 0.23.0 → 0.23.2

package/dist/capabilities.d.ts

@@ -1,5 +1,13 @@
 import { type HostKind } from "./templates.js";
 import type { ModelScaffoldConfig } from "./model-reach.js";
+/**
+ * The registry items install the newest release of each third-party
+ * extension, and those are built on a later eve than the certified one, which
+ * eve then refuses at discovery ("has no compile or runtime usage") and the
+ * agent never boots. These are the releases proven on the certified eve.
+ * Move them with the eve certification, never on their own.
+ */
+export declare const ENGINEER_EXTENSION_PINS: readonly ["@agent-browser/eve@0.34.0", "@github-tools/eve-extension@0.8.0"];
 /**
  * Agent-to-agent: the eve channel becomes the governed dispatch door (people
  * still come in through kybernesisAuth in the same walk) and granted peers

package/dist/capabilities.js

@@ -13,6 +13,14 @@ import { run, yellow } from "./util.js";
 // self-hosted agent it cannot get an OIDC token and the agent fails to boot.
 const ENGINEER_ITEMS_ALL = ["extension/agent-browser", "extension/github-tools"];
 const ENGINEER_ITEMS_VERCEL = ["connection/vercel"];
+/**
+ * The registry items install the newest release of each third-party
+ * extension, and those are built on a later eve than the certified one, which
+ * eve then refuses at discovery ("has no compile or runtime usage") and the
+ * agent never boots. These are the releases proven on the certified eve.
+ * Move them with the eve certification, never on their own.
+ */
+export const ENGINEER_EXTENSION_PINS = ["@agent-browser/eve@0.34.0", "@github-tools/eve-extension@0.8.0"];
 function write(dir, path, content) {
     const full = join(dir, path);
     mkdirSync(join(full, ".."), { recursive: true });
@@ -48,6 +56,13 @@ export function applyEngineer(dir, host, model) {
         if (!ok)
             console.log(yellow(`  ! ${item} did not install cleanly — re-run: npx eve add ${item}`));
     }
+    // --legacy-peer-deps: both declare peer ranges that trail the certified eve.
+    const pinned = run("npm", ["install", "--save-exact", "--legacy-peer-deps", ...ENGINEER_EXTENSION_PINS, "--no-audit", "--no-fund"], {
+        cwd: dir,
+        allowFail: true,
+    });
+    if (!pinned)
+        console.log(yellow(`  ! could not pin ${ENGINEER_EXTENSION_PINS.join(" ")} — install them by hand or discovery refuses the newer ones`));
     for (const file of plan.files)
         write(dir, file.path, file.content);
     // A declared subagent sees none of the root's skills, so the memory skills

package/dist/doctor.js

@@ -637,8 +637,11 @@ export async function doctor() {
         else if (env.DELIVER_DIR && env.DELIVER_BASE_URL) {
             add("pass", `file delivery via host directory (${env.DELIVER_DIR})`);
         }
+        else if (!env.DELIVER_DIR && (env.EVE_PUBLIC_URL || env.EXE_VM_NAME)) {
+            add("pass", "file delivery served by the agent itself (@kybernesis/manage /eve/v1/kyb/files)");
+        }
         else {
-            add("warn", "file delivery not configured — the agent cannot hand over artifacts", "set BLOB_READ_WRITE_TOKEN (the CLIENT's blob store) or DELIVER_DIR + DELIVER_BASE_URL");
+            add("warn", "file delivery not configured — the agent cannot hand over artifacts", "set EXE_VM_NAME or EVE_PUBLIC_URL (the agent serves files itself), BLOB_READ_WRITE_TOKEN, or DELIVER_DIR + DELIVER_BASE_URL");
         }
     }
     // ── eve discovery + local port ─────────────────────────────────────────

package/dist/templates.js

@@ -825,7 +825,7 @@ export { default } from "@kybernesis/engineer";
             ? [
                 "Enable Docker on the host (some images ship it disabled): sudo systemctl enable --now docker",
                 "Preview server (so the agent can show you what it built):\n       mkdir -p ~/preview && setsid python3 -m http.server 3456 --directory ~/preview &\n       then open https://<vm>.exe.xyz:3456/<file> (account-gated, not public)",
-                "File delivery needs object storage: set BLOB_READ_WRITE_TOKEN (Vercel Blob) or DELIVER_DIR + DELIVER_BASE_URL to serve from this host",
+                "File delivery: the agent serves delivered files itself at https://<vm>.exe.xyz/eve/v1/kyb/files (needs @kybernesis/manage 0.21+); set BLOB_READ_WRITE_TOKEN to use Vercel Blob instead",
                 "Public deploys need the client's own Vercel token — Vercel Connect does NOT work off-Vercel",
             ]
             : [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kybernesis/create",
-  "version": "0.23.0",
+  "version": "0.23.2",
   "description": "The Kybernesis agent scaffolder and FDE toolkit: one command to a governed, remembering, multiplayer, self-testing eve agent \u2014 plus doctor and upgrade.",
   "license": "Apache-2.0",
   "type": "module",

package/skills/kybernesis-packages/SKILL.md

@@ -34,9 +34,11 @@ then `eve add @kybernesis/<item>`). Each covers one axis:
   `surface: "channel"|"dm"` attribute + helpers from package root), `/new` DM
   reset. Slack-only today.
 - **engineer** — build + ship. Extension: `screenshot` (renders in in-sandbox
-  Chromium, returns pixels the model SEES) + `deliver` (sandbox file → public
-  Blob URL; needs BLOB_READ_WRITE_TOKEN — one-liner:
-  `vercel blob create-store <name>-deliverables --access public --yes`) +
+  Chromium, returns pixels the model SEES) + `deliver` (sandbox file → a link
+  with a 128-bit random id; on exe the agent serves it itself at
+  `https://<vm>.exe.xyz/eve/v1/kyb/files/<id>/<name>` via manage 0.21+, so a
+  customer's files stay on the customer's agent; BLOB_READ_WRITE_TOKEN switches
+  it to Vercel Blob, DELIVER_DIR + DELIVER_BASE_URL to an operator-served dir) +
   six skills (dev-loop, scaffold, visual-qa, git-discipline, ship,
   architecture-notes). The registry item ALSO writes
   `agent/sandbox/sandbox.ts` — the workshop: Playwright baked into the