@open-everywhere/create 0.2.1 → 0.4.0

package/template/claude/skills/quickstart-open-everywhere/SKILL.md

@@ -22,9 +22,13 @@ that repository ships no `env:pipe` script. Everything else is the same.
 - The ops MCP tools check and scaffold. **You** run install, build and deploy commands in the
   user's shell: show the command, get a yes, then run it. Never run a deploy, create a cloud
   resource, or write a secret without explicit confirmation.
-- **Never ask the user to paste a secret into the chat, and never echo or commit one.** They paste
-  it where a tool reads it; you write it to the gitignored `.env.local` with `scaffold_env`, then
-  forget it. Mint the credential-store key with `scaffold_credential_key`, which never prints it.
+- **Never ask the user to paste a secret into the chat, never pass one to a tool, and never echo or
+  commit one.** A tool call is part of your transcript. The user types each secret into their OWN
+  terminal with `npx oe env set <NAME>`: it reads the value from a hidden prompt and writes it to the
+  gitignored `.env.local`. You only ever handle the NAME: `scaffold_env { secretNames: [...] }`
+  returns the command per name and whether the file holds a value yet. `scaffold_env { values }`
+  takes non-secret config only, and its schema refuses a secret name. Mint the credential-store key
+  with `scaffold_credential_key`, which never prints it.
 - **Never propose a local run as a setup step.** `npm run dev` is the development loop AFTER the
   deploy. A local run has no public HTTPS URL for Slack to reach and keeps its state in a different
   store, so it proves little about the deployment. See "Develop locally" below.
@@ -32,9 +36,17 @@ that repository ships no `env:pipe` script. Everything else is the same.
   `OE_CREDENTIAL_ENCRYPTION_KEY`, `SLACK_BOT_TOKEN`, `SLACK_SIGNING_SECRET` and
   `GITHUB_WEBHOOK_SECRET` from its **environment**: the Slack bundle and the GitHub webhook check
   never read the credential store. So these go in `.env.local`, and then into the deployment's own
-  environment. `secret_set` is for a credential whose `broker` is `"db"` (and
-  `NOTION_WEBHOOK_SECRET`). It needs `DATABASE_URL` and the key in `.env.local` first. Nothing
-  reads a stored secret back out (`secret_list` returns names only).
+  environment. `secret_set { names: [...] }` is for a credential whose `broker` is `"db"` (and
+  `NOTION_WEBHOOK_SECRET`): it moves each named value from `.env.local` into the store, so the user
+  runs `npx oe env set <NAME>` first. It needs `DATABASE_URL` and the key in `.env.local` too.
+  Nothing reads a stored secret back out (`secret_list` returns names only).
+- **If an ops tool answers "the app now runs @open-everywhere/core X; this ops server runs Y"**, the
+  server predates an upgrade. Ask the user to restart it (`/mcp`, then reconnect
+  `open-everywhere-ops`) and call again. Never work around it: a stale server serves old code. A
+  server whose core predates this check cannot refuse: after an upgrade, an input-validation error
+  that names `values` or `secrets`, a `scaffold_env` reply with no `secrets` list for the
+  `secretNames` you sent, or "Tool … not found", means the same thing. Restart it. Never fall back
+  to passing a value.
 - Every command runs from the app root.
 
 ## Step 1 — ask which route
@@ -53,11 +65,26 @@ that repository ships no `env:pipe` script. Everything else is the same.
 Nothing beyond these two is supported. For any other host, read the contract and follow the Docker
 route; do not invent a recipe.
 
+## Tell the user about telemetry, before the first deploy
+
+**The deployed app sends anonymous usage telemetry, and it is ON by default.** Tell the user that
+before the first deploy, and ask whether they want it. Do not decide for them. It sends event names,
+enums, coarse buckets, public model ids and the app version, with a random per-install id
+(`service.instance.id`). It never sends message or memory content, org names, workspace, channel,
+user or session ids, or env values. The full list
+of events is `https://github.com/open-everywhere/open-everywhere/blob/main/docs/deploy/telemetry.md`.
+
+To turn it off, `OE_TELEMETRY=off` (or `DO_NOT_TRACK=1`) must be set on the DEPLOYMENT: a value in
+`.env.local` reaches only a local run. On the Vercel route, at step 9:
+`printf off | npx vercel env add OE_TELEMETRY production`. On the Docker route, put it in the
+container's environment. Every boot prints a line that says whether telemetry is on.
+
 ## Status, at every step
 
 - `npx @open-everywhere/create --check --json` — the step list as data: `satisfied`, `detail`, and a
   `next` command per unsatisfied step. It changes nothing. Pass `--route docker` on the Docker
-  route, and `--host https://<host>` once a deployment exists. In a clone of the repository, run
+  route, and `--host https://<host>` once a deployment exists: the env step then also reads the
+  deployment's own verdicts from its public status route. In a clone of the repository, run
   `node packages/create/bin/create-open-everywhere.js --check --json` instead.
 - The `preflight` tool — the env verdict per name. Pass `target: "vercel"` or `target: "docker"`.
 
@@ -74,29 +101,43 @@ tool. The same step list, written for a human, is
 3. **Database.** `npx vercel install neon` provisions a Neon database and connects it to the linked
    project, which sets `DATABASE_URL` there. (`vercel install` is an alias of
    `vercel integration add`; the Marketplace slug is `neon`.) The dashboard path — project →
-   **Storage → Neon → Connect** — does the same thing. Then get the same value into `.env.local`
+   **Storage → Neon → Connect** — does the same thing. The integration can also enable **Neon
+   Auth** (`NEON_AUTH_BASE_URL`, `VITE_NEON_AUTH_URL`). Open Everywhere does not use it: leave it
+   off, or ignore those two variables. Then get the same value into `.env.local`
    for the operator tools, either with `npx vercel env pull` (it writes the project's environment
    into `.env.local`, overwriting it, so pull before you add anything local) or by asking the user
-   for the connection string and writing it with `scaffold_env`. **That one value is the whole
+   to run `npx oe env set DATABASE_URL` and paste the connection string at its prompt. **That one value is the whole
    step:** it resolves both the operational store and the memory backing to postgres on its own, so
    set no provider selector. A selector pointing AWAY from postgres is the only thing that breaks
    it.
 4. **Key.** `scaffold_credential_key`.
 5. **Slack app.** Call `surface_manifest { surface: "slack" }` and hand the user the manifest and
    the steps it returns. Before the first deploy the manifest keeps `YOUR-DEPLOY-URL`. The user
-   creates and installs the app, then pastes `SLACK_BOT_TOKEN` and `SLACK_SIGNING_SECRET`: write
-   both with `scaffold_env`.
+   creates and installs the app, then runs `npx oe env set SLACK_BOT_TOKEN` and
+   `npx oe env set SLACK_SIGNING_SECRET` in their own terminal. Confirm with
+   `scaffold_env { secretNames: ["SLACK_BOT_TOKEN", "SLACK_SIGNING_SECRET"] }`: both read `present: true`.
+   **App icon.** With no `identity.name` set, the agent presents as the project, so its default
+   avatar is the project mark. Unless the user set `identity.name` and chose their own icon, tell
+   them to upload
+   `https://raw.githubusercontent.com/open-everywhere/open-everywhere/main/brand/png/mark-square-1024.png`
+   under **Basic Information → Display Information → App icon**. The manifest has no icon field.
+   The same file is the icon for a Discord application, a GitHub App, and a Notion or Linear
+   integration. For Teams, the package icons are the mark:
+   `https://raw.githubusercontent.com/open-everywhere/open-everywhere/main/teams-app/color.png` and
+   `https://raw.githubusercontent.com/open-everywhere/open-everywhere/main/teams-app/outline.png`.
 6. **Vouch the workspace.** Ask for the team id (`T…`: the segment after `/client/` in the
    workspace URL at app.slack.com). In `agent/identity/surfaces.ts` add
    `defineSurface({ key: "slack/<team-id>", trust: "internal" })`.
 7. **Admin.** Ask for the user's member id (`U…`: Slack profile → ⋮ More → Copy member ID). In
    `agent/memory/config/domains/org.ts` set `admins: ["slack/<team-id>/<member-id>"]`. Offer to
    commit both edits. They take effect on the next deploy, so make them before it.
+   Then OFFER the optional window step below. Do not make it for the user unasked.
 8. **Build.** `npm run build`. It must pass.
 9. **Deployment env.** `.env.local` never ships, so the deployment reads only what you set ON it.
    The names are `OE_CREDENTIAL_ENCRYPTION_KEY`, `SLACK_BOT_TOKEN` and `SLACK_SIGNING_SECRET`. The
    Neon integration already set `DATABASE_URL` there, and that one value resolves both stores — so
-   there is no `OE_OPERATIONAL_PROVIDER` or `OE_MEMORY_PROVIDER` to push.
+   there is no `OE_OPERATIONAL_PROVIDER` or `OE_MEMORY_PROVIDER` to push. Add `OE_TELEMETRY` (value
+   `off`) only when the user chose to turn telemetry off (see the telemetry section above).
    Confirm each command first, and **never let a value reach your own output.**
    - **In a scaffolded app:** `npm run -s env:pipe -- <NAME> | npx vercel env add <NAME> production`.
      Always pipe `env:pipe` straight into `vercel env add`, as written. Never run it bare: your
@@ -127,11 +168,12 @@ public HTTPS URL, Postgres, a sandbox backend, egress control, a model route, an
 Then:
 
 1. **Install and build.** `npm install`, then `npm run build`.
-2. **Postgres.** Provision one the container can reach, and `scaffold_env` its `DATABASE_URL`. That
-   one value resolves both stores to postgres; set no provider selector.
+2. **Postgres.** Provision one the container can reach. The user runs `npx oe env set DATABASE_URL`
+   and pastes its connection string at the prompt. That one value resolves both stores to postgres;
+   set no provider selector.
 3. **Key.** `scaffold_credential_key`.
 4. **Model route.** There is no OIDC off Vercel, so the user supplies `AI_GATEWAY_API_KEY` (Vercel
-   → AI Gateway → API Keys issues one for any host). Running a different model backend instead is
+   → AI Gateway → API Keys issues one for any host) with `npx oe env set AI_GATEWAY_API_KEY`. Running a different model backend instead is
    an **adapter swap in app code**
    (`https://github.com/open-everywhere/open-everywhere/blob/main/docs/extending/adapter-model.md`),
    which `--check` cannot see: that step stays `missing` on the Docker route either way, so read it
@@ -145,11 +187,57 @@ Then:
 7. **Prove it, then the Slack URLs and the hello.** As steps 11–13 of the Vercel route, with
    `--route docker --host https://<host>`.
 
+## Optional: one cross-surface window
+
+Offer this step once, after the admin step. Skip it when the user declines. Every channel the bot
+is in already has its own standing seat, because `window.topology` ships on. The `org` catch-all
+always stays solo: the boot refuses `mode` on it, because the whole org is never one window.
+
+A cross-surface window lets a few rooms share ONE conversation and one brain. To make one:
+
+1. Ask for the window's **name** (for example `team`) and its **reach**: the exact surface keys of
+   the rooms that share it, such as `slack/<team-id>/<channel-id>` or `github/<owner>/<repo>`.
+2. Say the cost plainly: each room's seat sees what the other rooms said, so the window is a wider
+   data blast radius than a solo seat.
+3. Write `agent/memory/config/domains/<name>.ts`:
+   `export const domain = defineDomain({ name: "<name>", reach: [ … ], memory: "org-brain", mode: "unified" });`
+   Then add `import * as <name> from "./<name>.js";` and `<name>` to `MODULES` in
+   `agent/memory/config/domains/index.ts`. Declare ONE such domain, not one per room.
+4. Every member outside Slack must be declared internal in `agent/identity/surfaces.ts`, or the
+   boot refuses the window at config load.
+
+## Optional: add an MCP server
+
+Offer this step when the user names a tool their team uses that has a hosted MCP server (for
+example FullStory). An admin declares the server, and the declaration lands by pull request: a
+person in chat cannot add one.
+
+1. Ask for the server's **name** (lowercase, for example `fullstory`), its **URL** from the
+   vendor's own MCP documentation, and one line that says what it is for.
+2. Add one entry to `MCP_SERVERS` in `agent/access/mcp-servers.ts`:
+   `{ name: "fullstory", url: "https://<the vendor's MCP endpoint>", description: "…" }`.
+   The default sign-in is MCP OAuth discovery with dynamic client registration, so the entry
+   needs no client id and no secret. Only a vendor WITHOUT dynamic registration takes a
+   `signIn: { mode: "static-confidential", … }` block, and that block names the secret's
+   credential-store REF (`clientSecretRef`), never the value.
+3. Run `npx oe build`. Commit `agent/access/mcp-servers.ts` and the updated
+   `scripts/goldens/roster-plan.txt`, then open the pull request.
+4. Say what the user gets. In a DM, each person uses the server as THEMSELVES: their first call
+   posts a "Connect my account" card, and they sign in with their own account once. A channel
+   gets nothing until an admin grants the server's `workspace-oauth` credential (the org's own
+   account) on a bundle in `agent/access/bundles.ts`.
+5. Say who "each person" is: every account that can DM the agent, an external one included (a
+   Slack Connect user, a Discord user who shares a server with the bot). If external people can
+   DM the agent, offer to narrow the entry with `people: { groups: ["<group>"] }`.
+
+With no server declared, nothing changes: the build writes no connection for one, and only the
+shipped connections (Notion) stay mounted.
+
 ## Develop locally
 
-Only when the user asks to change or debug the agent — never as a setup step. Write
-`AI_GATEWAY_API_KEY` with `scaffold_env` (the user creates it: Vercel → AI Gateway → API Keys),
-then `npm run dev`. A local run keeps its state in an embedded database under
+Only when the user asks to change or debug the agent — never as a setup step. The user creates
+`AI_GATEWAY_API_KEY` (Vercel → AI Gateway → API Keys) and writes it with
+`npx oe env set AI_GATEWAY_API_KEY`, then `npm run dev`. A local run keeps its state in an embedded database under
 `.open-everywhere-data/`, and Slack cannot reach it without a public tunnel.
 
 ## Notes
@@ -161,7 +249,12 @@ then `npm run dev`. A local run keeps its state in an embedded database under
 - The deployment's own identity (`deploymentIdentity`) is code in `agent/identity/surfaces.ts`, not
   env.
 - `@open-everywhere/create` has no interactive wizard and sends no telemetry. It scaffolds
-  (`npx @open-everywhere/create <dir>`) and reports status (`--check`). Nothing else.
-- 🔴 **`--check` reads `.env.local` and your shell, never the deployment's own environment.** A
-  "9/9 satisfied" is not proof that the deployment holds the credential key or the Slack secrets:
-  step 9 is the only thing that puts them there, and nothing can observe it from here.
+  (`npx @open-everywhere/create <dir>`) and reports status (`--check`). Nothing else. The deployed
+  app is a different matter: its telemetry is on by default (see the telemetry section above).
+- 🔴 **Without `--host`, `--check` reads `.env.local` and your shell, never the deployment's own
+  environment.** With `--host`, the env step also reads the deployment's status route, which reports
+  `DATABASE_URL` and the credential key (its `secrets` row), the store selection and the model route.
+  The env step does not judge the Slack secrets, so even a "9/9 satisfied" is not proof that the
+  deployment holds `SLACK_BOT_TOKEN` and `SLACK_SIGNING_SECRET`. The same status document's
+  `surfaces.slack.credentials` reports whether both are present: read it with
+  `curl -s https://<host>/eve/v1/oe/status`. Slack's **Verified** is what proves the signing secret.

package/template/claude/skills/upgrade-open-everywhere/SKILL.md

@@ -66,7 +66,8 @@ Those are decisions, not steps.
 
 `--plan` also prints a **template drift** report. It compares every file the scaffold copied into
 this app with the TARGET release's `@open-everywhere/create` template, and lists each one that
-differs, with a one-line size of its diff. An upgrade changes only `package.json`, so a scaffolded
+differs, with a one-line size of its diff. An upgrade changes only `package.json` and
+`package-lock.json`, so a scaffolded
 file stays as the old template wrote it. A stale copy can typecheck and build and still break the
 deployment: the 0.1.2 `agent/lib/register-adapters.ts` registers no Postgres client on a bare
 `DATABASE_URL`, so a Vercel+Neon deployment of 0.1.4 fails at its first write.
@@ -82,6 +83,14 @@ the adapters by hand to the one-call copy: move any adapter the user registered
 | --- | --- |
 | SYNC | a template-owned file — wiring, a script, `AGENTS.md`, `README.md`, `.env.example`, a skill. Plan to copy the target's file over this one, after you read the diff. |
 | config | the app's own config-as-code. A difference is normal once the app is configured. Merge the template's change by hand only if the user wants it. |
+| DELETE | a release up to the target removed this file from the template, and the app still has it. Plan to delete it. eve 0.69 and later refuse `agent/instrumentation.ts` at build. |
+| app-owned | `.oe-template-ignore` names the file, so the app owns it. Nothing to do. |
+
+`.oe-template-ignore` at the app root lists the template files the app removed or owns on purpose:
+one app-relative path per line, a trailing `/` for a directory, `#` for a comment. The report prints
+nothing for an ignored file the app does not have, and one `app-owned` line for one it has. Add a
+path only when the user says the app owns that file. Never add one to silence a SYNC line you have
+not read.
 
 The report never writes a file. If it says the drift check did not run, compare the files with the
 target's template by hand. An installed core without the report prints none: `oe upgrade` runs the
@@ -99,7 +108,11 @@ In order, and it stops at the first step that fails:
 1. bump every `@open-everywhere/*` package to the target, renaming a dependency on the retired
    unscoped `create-open-everywhere` to `@open-everywhere/create` as it goes;
 2. pin `eve` to the version the target core declares as its peer;
-3. `npm install` — its `postinstall` runs `oe-eve-patch`, which the app refuses to boot without;
+3. `npm install` — its `postinstall` runs `oe-eve-patch`, which the app refuses to boot without.
+   Before it, the run drops the `package-lock.json` entries of `eve`, of every
+   `@open-everywhere/*` package and of every package that peers on one of them, so npm resolves
+   that set again. If the install still stops with ERESOLVE (a core at 0.2.1 or earlier does not
+   drop them), run `rm package-lock.json && npm install`, then run `oe upgrade` again;
 4. run the config codemods the target's notes name, and print the migrations that are yours;
 5. `oe build --accept` — this rewrites `roster.lock.json`;
 6. `npm run typecheck`;
@@ -136,7 +149,7 @@ codemod. Do not delete the marker to get past this refusal.
 
 ```
 git diff roster.lock.json
-git diff package.json
+git diff package.json package-lock.json
 git status
 ```
 
@@ -149,7 +162,8 @@ Then run the app's own checks once more if anything above was fixed by hand:
 
 Then act on the template drift report. A core that carries it prints it again after the install;
 if this run printed no "Template drift" heading, run `npx oe upgrade --to <target> --plan` now to get it. For
-each SYNC line, read the diff against the installed template, for example
+each DELETE line, delete the file. If the user says the app owns it, keep it and name it in
+`.oe-template-ignore`. For each SYNC line, read the diff against the installed template, for example
 `diff node_modules/@open-everywhere/create/template/agent/lib/register-adapters.ts agent/lib/register-adapters.ts`.
 Keep any edit the user made on purpose, and copy the template's file otherwise. For
 `agent/lib/register-adapters.ts`, the user's edits belong in the `customAdapters` hook of the
@@ -171,7 +185,7 @@ Commit on a branch, never on the default branch. The body carries:
 - what changed in `roster.lock.json`, in your own words;
 - **the env names the deployment needs before this merges**, names only;
 - the manual steps, and who does each one.
-- the template files you synced, and each SYNC line you left as it is, with the reason.
+- the template files you synced or deleted, and each SYNC or DELETE line you left as it is, with the reason.
 
 Then stop. The admin reviews the lock diff and merges. The merge deploys.
 
@@ -179,21 +193,23 @@ Then stop. The admin reviews the lock diff and merges. The merge deploys.
 
 A green build is not a working deployment.
 
-**The status endpoint is not built yet.** OPE-2230 adds one: an unauthenticated, non-sensitive
-JSON route that reports the deployment's version, whether the database is reachable and which
-provider it uses, the sandbox backend, whether egress is enforced, whether the model route
-answers, and the Slack posture. That ticket proposes `GET /eve/v1/oe/status`. Do not assume the
-route exists, and never read some other route as if it were this one. Check the deployment's own
-routes first; when the endpoint is there, read it and report each field, in this order:
+**Read the status route, `GET /eve/v1/oe/status`.** It ships from core 0.1.4. It is an
+unauthenticated, non-sensitive JSON route that reports the deployment's version, whether the
+database is reachable, the sandbox backend, whether egress is enforced, whether the model route
+answers, and the Slack posture. A deployment can hide it on purpose, with a roster exclusion or an
+edge rule (`docs/deploy/contract.md` § Hiding the status route). A 404 or a 403 there can be that
+choice, not a fault: ask the operator before you call it broken. Never read some other route as if
+it were this one. When the route answers, report each field, in this order:
 
 1. **version** — it reads the target. If it still reads the old version, the deploy has not
    finished, or it failed. Nothing below is meaningful until this matches.
-2. **database reachable**, and the provider it names.
+2. **database reachable** (the `postgres` verdict).
 3. **sandbox backend**, and **egress enforced**.
 4. **model route answers.**
 5. **Slack** — credentials present, workspace installed, events verified.
 
-**Until that endpoint ships**, confirm what you can and say plainly what you could not:
+**When the route does not answer**, on a core older than 0.1.4 or on a deployment that hides it,
+confirm what you can and say plainly what you could not:
 
 - the deploy finished, from the host's own deployment log;
 - `npx @open-everywhere/create --check --json --host https://<host>` — its `build-deploy` step

package/template/scripts/goldens/roster-plan.txt

@@ -0,0 +1,156 @@
+agent/channels/aws-sso-callback.ts	mounted @open-everywhere/core
+agent/channels/control-mcp.ts	mounted @open-everywhere/core
+agent/channels/control-read.ts	mounted @open-everywhere/core
+agent/channels/credential-intake-page.ts	mounted @open-everywhere/core
+agent/channels/github.ts	mounted @open-everywhere/provider-github
+agent/channels/notion.ts	mounted @open-everywhere/provider-notion
+agent/channels/oe-oauth-callback.ts	mounted @open-everywhere/core
+agent/channels/oe-status.ts	mounted @open-everywhere/core
+agent/channels/policy-pages.ts	mounted @open-everywhere/core
+agent/channels/slack-commands.ts	mounted @open-everywhere/provider-slack
+agent/channels/slack-setup-page.ts	mounted @open-everywhere/provider-slack
+agent/channels/slack.ts	mounted @open-everywhere/provider-slack
+agent/channels/test-wake.ts	mounted @open-everywhere/core
+agent/channels/transcript-relay.ts	mounted @open-everywhere/core
+agent/channels/unified.ts	mounted @open-everywhere/core
+agent/channels/webhook-reveal-page.ts	mounted @open-everywhere/core
+agent/channels/webhooks.ts	mounted @open-everywhere/core
+agent/connections/notion.ts	mounted @open-everywhere/core
+agent/hooks/approval-raised.ts	mounted @open-everywhere/core
+agent/hooks/approval-settlement.ts	mounted @open-everywhere/core
+agent/hooks/binding-bridge.ts	mounted @open-everywhere/core
+agent/hooks/connector-audit.ts	mounted @open-everywhere/core
+agent/hooks/egress.ts	mounted @open-everywhere/core
+agent/hooks/eve-patch-gate.ts	mounted @open-everywhere/core
+agent/hooks/fire-carriage.ts	mounted @open-everywhere/core
+agent/hooks/fire-toolset.ts	mounted @open-everywhere/core
+agent/hooks/held-question.ts	mounted @open-everywhere/core
+agent/hooks/job-posture.ts	mounted @open-everywhere/core
+agent/hooks/lean-seat.ts	mounted @open-everywhere/core
+agent/hooks/learn.ts	mounted @open-everywhere/core
+agent/hooks/link-claim.ts	mounted @open-everywhere/core
+agent/hooks/log-flush.ts	mounted @open-everywhere/core
+agent/hooks/loop-breaker.ts	mounted @open-everywhere/core
+agent/hooks/memory.ts	mounted @open-everywhere/core
+agent/hooks/native-input-audit.ts	mounted @open-everywhere/core
+agent/hooks/own-account-ask.ts	mounted @open-everywhere/core
+agent/hooks/requester-identity.ts	mounted @open-everywhere/core
+agent/hooks/requester-messages.ts	mounted @open-everywhere/core
+agent/hooks/routine-outcome.ts	mounted @open-everywhere/core
+agent/hooks/routine-silence.ts	mounted @open-everywhere/core
+agent/hooks/sandbox-lifecycle.ts	mounted @open-everywhere/adapters
+agent/hooks/session-park.ts	mounted @open-everywhere/core
+agent/hooks/spawn-taint.ts	mounted @open-everywhere/core
+agent/hooks/spend.ts	mounted @open-everywhere/core
+agent/hooks/stall-guard.ts	mounted @open-everywhere/core
+agent/hooks/telemetry.ts	mounted @open-everywhere/core
+agent/hooks/turn-anchor.ts	mounted @open-everywhere/core
+agent/hooks/wake-accounting-turn.ts	mounted @open-everywhere/core
+agent/hooks/wake-turn-start.ts	mounted @open-everywhere/core
+agent/hooks/window-routing.ts	mounted @open-everywhere/core
+agent/lib/providers.generated.ts	providers slack,notion,github
+agent/schedules/directory-sync.ts	mounted @open-everywhere/core
+agent/schedules/dispatch.ts	mounted @open-everywhere/core
+agent/schedules/dream-mode3.ts	mounted @open-everywhere/core
+agent/schedules/notion-ingress.ts	mounted @open-everywhere/provider-notion
+agent/schedules/tidy.ts	mounted @open-everywhere/core
+agent/skills/scoped.ts	mounted @open-everywhere/core
+agent/tools/add_label.ts	mounted @open-everywhere/core
+agent/tools/add_routine_rule.ts	mounted @open-everywhere/core
+agent/tools/agent_version.ts	mounted @open-everywhere/core
+agent/tools/ask_question.ts	mounted @open-everywhere/core
+agent/tools/ask_room.ts	mounted @open-everywhere/core
+agent/tools/assign.ts	mounted @open-everywhere/core
+agent/tools/aws.ts	mounted @open-everywhere/core
+agent/tools/bash.ts	framework-disabled
+agent/tools/browser_tools.ts	mounted @open-everywhere/core
+agent/tools/cancel_routine.ts	mounted @open-everywhere/core
+agent/tools/cancel_work.ts	mounted @open-everywhere/core
+agent/tools/capture_events.ts	mounted @open-everywhere/core
+agent/tools/check_pr_status.ts	mounted @open-everywhere/core
+agent/tools/checkout_repo.ts	mounted @open-everywhere/core
+agent/tools/clear_connector_override.ts	mounted @open-everywhere/core
+agent/tools/clear_spend_limit.ts	mounted @open-everywhere/core
+agent/tools/complete_job.ts	mounted @open-everywhere/core
+agent/tools/complete_thread.ts	mounted @open-everywhere/core
+agent/tools/confirm_link.ts	mounted @open-everywhere/core
+agent/tools/connector.ts	mounted @open-everywhere/core
+agent/tools/create_agent.ts	mounted @open-everywhere/core
+agent/tools/create_routine.ts	mounted @open-everywhere/core
+agent/tools/create_skill.ts	mounted @open-everywhere/core
+agent/tools/create_ticket.ts	mounted @open-everywhere/core
+agent/tools/declare_webhook.ts	mounted @open-everywhere/core
+agent/tools/delete_skill.ts	mounted @open-everywhere/core
+agent/tools/describe_image.ts	mounted @open-everywhere/core
+agent/tools/dm_person.ts	mounted @open-everywhere/core
+agent/tools/edit_reply.ts	mounted @open-everywhere/core
+agent/tools/edit_routine.ts	mounted @open-everywhere/core
+agent/tools/enable_routine.ts	mounted @open-everywhere/core
+agent/tools/explain_permission.ts	mounted @open-everywhere/core
+agent/tools/extend_workspace_time.ts	mounted @open-everywhere/adapters
+agent/tools/get_pr_feedback.ts	mounted @open-everywhere/core
+agent/tools/grant_tools.ts	mounted @open-everywhere/core
+agent/tools/halt.ts	mounted @open-everywhere/core
+agent/tools/link_identity.ts	mounted @open-everywhere/core
+agent/tools/list_recent_events.ts	mounted @open-everywhere/core
+agent/tools/list_repos.ts	mounted @open-everywhere/core
+agent/tools/list_routines.ts	mounted @open-everywhere/core
+agent/tools/list_skills.ts	mounted @open-everywhere/core
+agent/tools/list_webhooks.ts	mounted @open-everywhere/core
+agent/tools/memory_admin_list.ts	mounted @open-everywhere/core
+agent/tools/memory_admin_read.ts	mounted @open-everywhere/core
+agent/tools/message_thread_seat.ts	mounted @open-everywhere/core
+agent/tools/no_reply.ts	mounted @open-everywhere/core
+agent/tools/notion_search.ts	mounted @open-everywhere/provider-notion
+agent/tools/open_pull_request.ts	mounted @open-everywhere/core
+agent/tools/permission_fit_report.ts	mounted @open-everywhere/core
+agent/tools/post_file.ts	mounted @open-everywhere/core
+agent/tools/post_message.ts	mounted @open-everywhere/core
+agent/tools/post_pr_walkthrough.ts	mounted @open-everywhere/core
+agent/tools/purge_memory.ts	mounted @open-everywhere/core
+agent/tools/query_analytics.ts	mounted @open-everywhere/core
+agent/tools/react.ts	mounted @open-everywhere/core
+agent/tools/read_channel.ts	mounted @open-everywhere/core
+agent/tools/read_docs.ts	mounted @open-everywhere/core
+agent/tools/read_file_upload.ts	mounted @open-everywhere/core
+agent/tools/read_file.ts	framework-disabled
+agent/tools/read_github_issue.ts	mounted @open-everywhere/core
+agent/tools/read_notion_comments.ts	mounted @open-everywhere/provider-notion
+agent/tools/read_notion_page.ts	mounted @open-everywhere/provider-notion
+agent/tools/read_routine_transcript.ts	mounted @open-everywhere/core
+agent/tools/read_thread_seat.ts	mounted @open-everywhere/core
+agent/tools/read_thread.ts	mounted @open-everywhere/core
+agent/tools/read_webhook_history.ts	mounted @open-everywhere/core
+agent/tools/read_work_channel.ts	mounted @open-everywhere/core
+agent/tools/read_work_thread.ts	mounted @open-everywhere/core
+agent/tools/record_follow_up.ts	mounted @open-everywhere/core
+agent/tools/record_job_state.ts	mounted @open-everywhere/core
+agent/tools/record_watch_state.ts	mounted @open-everywhere/core
+agent/tools/remove_routine_rule.ts	mounted @open-everywhere/core
+agent/tools/reply.ts	mounted @open-everywhere/core
+agent/tools/report_run_failed.ts	mounted @open-everywhere/core
+agent/tools/request_access.ts	mounted @open-everywhere/core
+agent/tools/request_credential_grant.ts	mounted @open-everywhere/core
+agent/tools/resume.ts	mounted @open-everywhere/core
+agent/tools/revoke_connector.ts	mounted @open-everywhere/core
+agent/tools/revoke_credential_grant.ts	mounted @open-everywhere/core
+agent/tools/revoke_routine_permissions.ts	mounted @open-everywhere/core
+agent/tools/rotate_webhook.ts	mounted @open-everywhere/core
+agent/tools/run_routine_now.ts	mounted @open-everywhere/core
+agent/tools/sandbox_tools.ts	mounted @open-everywhere/core
+agent/tools/search.ts	mounted @open-everywhere/core
+agent/tools/session_cost.ts	mounted @open-everywhere/core
+agent/tools/set_dm_delivery.ts	mounted @open-everywhere/core
+agent/tools/set_spend_limit.ts	mounted @open-everywhere/core
+agent/tools/set_state.ts	mounted @open-everywhere/core
+agent/tools/spawn_thread_session.ts	mounted @open-everywhere/core
+agent/tools/spend_report.ts	mounted @open-everywhere/core
+agent/tools/stand_down.ts	mounted @open-everywhere/core
+agent/tools/subscribe_pr.ts	mounted @open-everywhere/core
+agent/tools/unlink_identity.ts	mounted @open-everywhere/core
+agent/tools/update_status.ts	mounted @open-everywhere/core
+agent/tools/usage_report.ts	mounted @open-everywhere/core
+agent/tools/walk_pr.ts	mounted @open-everywhere/core
+agent/tools/web_fetch.ts	framework-disabled
+agent/tools/work.ts	mounted @open-everywhere/core
+agent/tools/write_file.ts	framework-disabled

package/template/agent/blob/hosting.ts

@@ -1,42 +0,0 @@
-// Blob hosting — config-as-code, the org-level opt-in for PUBLISHING HTML artifacts to a
-// world-readable Vercel Blob URL from the post_file tool (@open-everywhere/core/agent/tools/post_file.js).
-//
-// OFF BY DEFAULT. With `enabled:
-// false` — the shipped default — post_file NEVER hosts: an HTML artifact is attached to the
-// message as a downloadable `.html` file (workspace-scoped, no world-readable URL). Flip
-// `enabled: true` to opt this org IN; then post_file publishes HTML pages to a public Blob URL,
-// and that public write is APPROVAL-GATED at the tool (an admin approves each publish).
-//
-// TO TURN IT ON, an operator:
-//   1. Connects a Vercel Blob store to this project (Vercel populates VERCEL_OIDC_TOKEN +
-//      BLOB_STORE_ID automatically — the SDK authenticates via OIDC, NO BLOB_READ_WRITE_TOKEN).
-//   2. Sets `enabled: true` here and merges it (reviewed git config, same PR-to-widen posture
-//      as model/policy.ts and spend/budgets.ts).
-// If `enabled: true` ships without the Blob store connected, the first publish FAILS LOUD
-// (missing OIDC env) rather than silently degrading — an opted-in-but-unconfigured deployment
-// is a misconfig we surface, not hide.
-//
-// This file is the seam a DB/dashboard would swap behind. After editing:
-// `npm run typecheck` plus a boot (assertBlobHostingValid runs at import and throws on a malformed
-// `publicPrefix`).
-
-import { defineBlobHosting, type BlobHostingConfig } from "@open-everywhere/core/agent/blob/hosting.js";
-
-const config: BlobHostingConfig = defineBlobHosting({
-  // OFF by default — HTML artifacts are attached as downloadable files, nothing is published.
-  enabled: false,
-
-  // --- EXAMPLE: opt this org in to hosting HTML artifacts on Vercel Blob ---
-  // Requires a connected Blob store (VERCEL_OIDC_TOKEN + BLOB_STORE_ID). Each publish is
-  // approval-gated at the post_file tool.
-  // enabled: true,
-
-  // --- OPTIONAL: override the reserved public-output prefix (namespace isolation) ---
-  // Defaults to "public-artifacts". A plain prefix segment: no leading/trailing slash, no "..".
-  // publicPrefix: "public-artifacts",
-});
-
-/** The seam a DB/dashboard would swap behind. Static config for now. */
-export function loadBlobHosting(): BlobHostingConfig {
-  return config;
-}