eve-hub 0.4.2 → 0.4.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve-hub",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "license": "Apache-2.0",
   "description": "Bot-side code shared by every hub agent: registry tools, the roster hook, the eve channel, the host sandbox and browser, and model helpers.",
   "type": "module",
@@ -28,8 +28,6 @@
   },
   "peerDependencies": {
     "eve": "*",
-    "ai": "^7.0.105",
-    "@ai-sdk/gateway": "^4.0.100",
     "zod": "4.5.4",
     "@vercel/connect": "^2.4.1",
     "@vercel/oidc": "4.0.0"

package/roster-model.mjs

@@ -17,15 +17,6 @@ import { CONTEXT_WINDOW, selectModel } from "./bot-model.mjs";
 import { DEFAULT_SUBAGENT_CAP } from "./subagent-cap.mjs";
 import { sessionLimits } from "./session-limits.mjs";
 import { findWorkspaceRoot, loadWorkspace, parseWorkspace } from "./workspace.mjs";
-import { createGateway } from "ai";
-import { hubGatewayFetch } from "./model-credential.mjs";
-import { registryBase } from "./registry-fetch.mjs";
-
-// Hosted, a bot's model ids resolve through the owner's sign-in from the hub
-// (model-credential.mjs); elsewhere through the default gateway.
-if (process.env.HUB_TOKEN)
-  globalThis.AI_SDK_DEFAULT_PROVIDER = createGateway({ apiKey: "hub-owner-sign-in", fetch: hubGatewayFetch(`${registryBase().replace(/\/$/, "")}/api/model-credential`) });
-
 const real = process.env.ROSTER_MODELS !== "mock";
 
 export function createRosterModel({ agents, subagentCap }) {

package/model-credential.mjs

@@ -1,44 +0,0 @@
-// Hosted bots resolve model ids through the owner's refreshable Vercel sign-in.
-// HUB_TOKEN identifies a hosted bot; the credential endpoint is on its registry.
-// The hub owns expiration and refresh; Gateway rejection invalidates our cache.
-import { createHash } from "node:crypto";
-import { GatewayAuthenticationError } from "@ai-sdk/gateway";
-import { registryHeaders } from "./registry-fetch.mjs";
-
-/**
- * The fetch the gateway sends through: the hub's current token and team on
- * each request, and on a 401, one more try with the token the hub hands out
- * after it is told (by sha256) which token Gateway refused.
- */
-export function hubGatewayFetch(credentialUrl, fetchFn = (...a) => globalThis.fetch(...a), now = Date.now) {
-  let current;
-  const credential = async (rejected) => {
-    if (!rejected && current && now() < current.expiresAt) return current;
-    const headers = registryHeaders();
-    if (rejected) headers["x-rejected-token-sha256"] = createHash("sha256").update(rejected).digest("hex");
-    const response = await fetchFn(credentialUrl, { headers });
-    if (response.status === 401) {
-      const { error } = await response.json();
-      throw new GatewayAuthenticationError({ message: error });
-    }
-    if (!response.ok) throw new Error(`model credential from the hub: HTTP ${response.status} ${await response.text()}`);
-    return (current = await response.json());
-  };
-  return async (input, init) => {
-    const headers = new Headers(init?.headers);
-    const send = async (c) => {
-      headers.set("authorization", `Bearer ${c.token}`);
-      headers.set("x-vercel-ai-gateway-team", c.teamId);
-      const response = await fetchFn(input, { ...init, headers });
-      if (response.status === 401) current = undefined;
-      return response;
-    };
-    const first = await credential();
-    const response = await send(first);
-    if (response.status !== 401) return response;
-    // A streamed body can't be sent twice, but its rejected token is dropped.
-    if (init?.body != null && typeof init.body !== "string") return response;
-    await response.body?.cancel();
-    return send(await credential(first.token));
-  };
-}