eve-hub 0.14.5 → 0.14.6

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # eve-hub
 
+## 0.14.6
+
+### Patch Changes
+
+- New `fetch_upload` tool: a bot copies a file another bot shared as a `hub://upload/<id>` link into its sandbox (for example a patch to `git apply`), with the hub credential its kit tools already send. A shell can't fetch these links: the hosted hub's Deployment Protection sends it to a login page.
+
 ## 0.14.5
 
 ### Patch Changes

package/kit-modules.json

@@ -23,6 +23,7 @@
   "tools/create_thread",
   "tools/dash_update",
   "tools/disabled",
+  "tools/fetch_upload",
   "tools/list_agents",
   "tools/list_threads",
   "tools/move_path",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve-hub",
-  "version": "0.14.5",
+  "version": "0.14.6",
   "license": "Apache-2.0",
   "description": "Bot-side code shared by every hub agent: registry tools, the roster hook, the eve channel, the host sandbox and browser, and model helpers.",
   "type": "module",

package/stubs.mjs

@@ -10,6 +10,7 @@ export const KIT_FILES = {
   "tools/react.ts": ["React to a message with an emoji."],
   "tools/show.ts": ["Move the human's screen to a thread, DM, or message, or open a page or file beside the thread."],
   "tools/browser.ts": ["Its own headless browser, watched live in the Computer view."],
+  "tools/fetch_upload.ts": ["Copies a file another bot shared (hub://upload/<id>) into the sandbox."],
   "tools/view_image.ts": ["Shows the bot an image (a sandbox file or a browser screenshot) so it can see it."],
   "tools/update_thread.ts": ["Update a thread this bot is in: title, track, domain and summary."],
   "tools/list_threads.ts": ["Every workspace thread, from any session."],
@@ -57,7 +58,7 @@ export const DEPLOYED_KIT_FILES = new Set([
   "schedules/dash.ts",
   "skills/onboarding-profile.ts",
   "tools/onboarding_scripts.ts",
-  ...["react", "show", "update_thread", "list_threads", "read_thread", "post_message"].map((t) => `tools/${t}.ts`),
+  ...["react", "show", "fetch_upload", "update_thread", "list_threads", "read_thread", "post_message"].map((t) => `tools/${t}.ts`),
   "memory/team.ts",
   "skills/forms.ts",
   ...["create_thread", "set_summary", "move_path", "archive_thread", "unarchive_thread", "list_agents", "create_agent", "remove_agent", "restart_agent", "tag_threads", "dash_update", "apply_tags"].map((t) => `tools/${t}.ts`),

package/tools/fetch_upload.d.ts

@@ -0,0 +1,18 @@
+declare const _default: import("eve/tools").ToolDefinition<{
+    uri: string;
+    path?: string | undefined;
+}, {
+    path: string;
+    size: number;
+    mediaType: string | null;
+}> & {
+    execute(input: {
+        uri: string;
+        path?: string | undefined;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        path: string;
+        size: number;
+        mediaType: string | null;
+    }>;
+};
+export default _default;

package/tools/fetch_upload.js

@@ -0,0 +1,40 @@
+// The `fetch_upload` tool: copies a file another bot shared (`hub://upload/<id>`, what
+// `show(path)` returns on a hosted hub) into this bot's sandbox, e.g. a patch to `git apply`.
+// A shell can't fetch it: the hosted hub's Deployment Protection and its auth take only the bot
+// credential that registryFetch sends (registry-fetch.mjs).
+import { defineTool } from "eve/tools";
+import { z } from "zod";
+import { registryFetch } from "../registry-fetch.mjs";
+const UPLOAD = /^hub:\/\/upload\/([0-9a-f]{64}\.[a-z0-9]{1,10})$/;
+export default defineTool({
+    description: "Fetch a file another bot shared as a hub://upload/<id> link (e.g. a patch, a log, a brief) into your sandbox, then read or apply it there. Your shell can't fetch these links; this tool sends your hub credential. Returns the path it wrote, the size in bytes and the media type.",
+    inputSchema: z.object({
+        uri: z.string().describe("The hub://upload/<id> link."),
+        path: z.string().optional().describe("Where to write it in your sandbox. Default /tmp/uploads/<id>."),
+    }),
+    async execute({ uri, path }, ctx) {
+        const id = UPLOAD.exec(uri.trim())?.[1];
+        if (!id)
+            throw new Error(`not a hub://upload/<id> link: ${uri}`);
+        // A redirect is Deployment Protection sending the request to a login page: an error, not the file.
+        const res = await registryFetch(`/api/uploads/${id}`, { redirect: "manual", signal: AbortSignal.timeout(30_000) });
+        if (!res.ok) {
+            const text = await res.text();
+            // Deployment Protection answers with a whole HTML page: name the redirect, or keep the body short.
+            const error = (() => { try {
+                return JSON.parse(text).error;
+            }
+            catch {
+                return undefined;
+            } })();
+            const location = res.headers.get("location");
+            const why = error ?? (location ? `redirected to ${location}` : text.slice(0, 200));
+            throw new Error(`fetch_upload failed: ${res.status} ${why}`.trim());
+        }
+        const bytes = new Uint8Array(await res.arrayBuffer());
+        const sandbox = await ctx.getSandbox();
+        const target = path ?? `/tmp/uploads/${id}`;
+        await sandbox.writeBinaryFile({ path: target, content: bytes });
+        return { path: sandbox.resolvePath(target), size: bytes.length, mediaType: res.headers.get("content-type") };
+    },
+});