eve-hub 0.10.2 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # eve-hub
 
+## 0.11.0
+
+### Minor Changes
+
+- A bot's roster entry can name whose credential its model calls carry: `"modelAuth": "project" | "user" | "codex"` (default `project`, the workspace's bots project). `hub.workspace.json` rejects any other value, and `user` or `codex` on a bot that does not run on the Mac. Nothing acts on `user` or `codex` yet; this release only lets a workspace carry the key before the hub starts writing it.
+
 ## 0.10.2
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve-hub",
-  "version": "0.10.2",
+  "version": "0.11.0",
   "license": "Apache-2.0",
   "description": "Bot-side code shared by every hub agent: registry tools, the roster hook, the eve channel, the host sandbox and browser, and model helpers.",
   "type": "module",

package/workspace.mjs

@@ -47,9 +47,12 @@ export const DOMAIN = /^[a-z][a-z0-9-]*(\/[a-z][a-z0-9-]*)*$/;
 export const NAME = /^[a-z][a-z0-9-]{1,30}$/;
 export const HUMAN_NAME = /^[a-z][a-z0-9-]{0,30}$/;
 const COLOR = /^#[0-9a-f]{3}([0-9a-f]{3})?$/i;
-const AGENT_KEYS = new Set(["name", "model", "role", "color", "subagents", "subagentCap", "limits", "port", "runsOn", "domains", "kind"]);
+const AGENT_KEYS = new Set(["name", "model", "role", "color", "subagents", "subagentCap", "limits", "port", "runsOn", "modelAuth", "domains", "kind"]);
 
 export const RUNS_ON = ["hosted", "local"];
+// Whose credential a bot's model calls carry: the workspace's bots project (default), the human's own
+// Vercel sign-in, or the human's ChatGPT plan. Fixed at definition, like `runsOn`.
+const MODEL_AUTH = ["project", "user", "codex"];
 // The bot's place in the team (team.mjs draws the handoffs between kinds).
 export const KINDS = ["coordinator", "planner", "builder", "reviewer", "git-ops", "demo"];
 
@@ -104,6 +107,7 @@ export function parseWorkspace(data, file = WORKSPACE_FILE) {
     // Where the bot runs: on the hosted bots project (default), or on the human's Mac, started by
     // the app's local runner. Fixed at definition.
     if (agent.runsOn !== undefined && !RUNS_ON.includes(agent.runsOn)) fail(file, `${label}.runsOn must be "hosted" or "local"`);
+    if (agent.modelAuth !== undefined && !MODEL_AUTH.includes(agent.modelAuth)) fail(file, `${label}.modelAuth must be one of ${MODEL_AUTH.join(", ")}`);
     if (agent.kind !== undefined && !KINDS.includes(agent.kind)) fail(file, `${label}.kind must be one of ${KINDS.join(", ")}`);
     if (agent.domains !== undefined && (!Array.isArray(agent.domains) || agent.domains.some((d) => typeof d !== "string" || !DOMAIN.test(d)))) fail(file, `${label}.domains must be an array of memory folders like "ui" or "ui/motion"`);
     const unknown = Object.keys(agent).filter((k) => !AGENT_KEYS.has(k));
@@ -115,6 +119,10 @@ export function parseWorkspace(data, file = WORKSPACE_FILE) {
     if (!RUNS_ON.includes(data.runsOn)) fail(file, '"runsOn" must be "hosted" or "local"');
     out.runsOn = data.runsOn;
   }
+  // `user` and `codex` are credentials only the human's Mac holds; a hosted bot has the bots project's.
+  for (const a of agents) {
+    if (a.modelAuth !== undefined && a.modelAuth !== "project" && agentRunsOn(out, a.name) !== "local") fail(file, `${a.name}: modelAuth \"${a.modelAuth}\" needs runsOn \"local\"`);
+  }
   if (data.humans !== undefined) {
     if (!Array.isArray(data.humans) || !data.humans.length) fail(file, "\"humans\" must be a non-empty array");
     out.humans = data.humans.map((h, i) => {