eve-hub 0.6.43 → 0.6.44

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # eve-hub
 
+## 0.6.44
+
+### Patch Changes
+
+- The mention rule (mentionTokens and codeRanges) lives in mention-tokens.mjs with no imports, so the composer's fuzz harness loads the server's own source; mention-gate re-exports codeRanges.
+
 ## 0.6.43
 
 ### Patch Changes

package/mention-gate.mjs

@@ -20,11 +20,14 @@
 // overridden by HUB_MENTION_GATE (on|off), HUB_MENTION_GATE_MODEL,
 // HUB_MENTION_GATE_REASONING, HUB_MENTION_GATE_TIMEOUT_MS and
 // HUB_MENTION_GATE_URL (tests).
+import { codeRanges } from "./mention-tokens.mjs";
 import { registryHeaders } from "./registry-fetch.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { pathToFileURL } from "node:url";
 
+export { codeRanges };
+
 export const GATE_DEFAULTS = {
   enabled: true,
   model: "openai/gpt-6-luna-decisions",
@@ -194,69 +197,6 @@ export function triggerText(envelope) {
   return next < 0 ? rest : rest.slice(0, next);
 }
 
-// The character ranges of a message that are code, by CommonMark's rules:
-// fenced blocks (``` or ~~~, closed by the same character, at least as
-// long), and code spans (a run of n backticks closed by the next run of
-// exactly n on the same line; an opener can't be backslash-escaped).
-// Anything ambiguous stays text: an unclosed fence or an unmatched run is
-// literal, so a handle next to it counts as live.
-export function codeRanges(text) {
-  const s = String(text ?? "");
-  const ranges = [];
-  const lines = [];
-  for (let at = 0; at <= s.length; ) {
-    const nl = s.indexOf("\n", at);
-    const end = nl < 0 ? s.length : nl;
-    lines.push({ start: at, end, text: s.slice(at, end) });
-    if (nl < 0) break;
-    at = nl + 1;
-  }
-  // Fences first: only closed ones are code.
-  const fenced = new Set();
-  for (let i = 0; i < lines.length; i++) {
-    const open = lines[i].text.match(/^ {0,3}(`{3,}|~{3,})(.*)$/);
-    if (!open || (open[1][0] === "`" && open[2].includes("`"))) continue;
-    const close = new RegExp(`^ {0,3}${open[1][0] === "`" ? "`" : "~"}{${open[1].length},}\\s*$`);
-    const j = lines.findIndex((l, k) => k > i && close.test(l.text));
-    if (j < 0) continue;
-    ranges.push([lines[i].start, lines[j].end]);
-    for (let k = i; k <= j; k++) fenced.add(k);
-    i = j;
-  }
-  // Code spans.
-  let para = [];
-  const flush = () => {
-    if (!para.length) return;
-    const from = para[0].start;
-    const t = s.slice(from, para.at(-1).end);
-    const runs = [...t.matchAll(/`+/g)].map((m) => ({ at: m.index, n: m[0].length }));
-    for (let i = 0; i < runs.length; i++) {
-      let { at, n } = runs[i];
-      let slash = 0;
-      for (let b = at - 1; b >= 0 && t[b] === "\\"; b--) slash++;
-      if (slash % 2 === 1) {
-        // An escaped backtick is literal; the rest of the run can still open.
-        at++;
-        n--;
-        if (!n) continue;
-      }
-      const j = runs.findIndex((r, k) => k > i && r.n === n);
-      if (j < 0) continue;
-      ranges.push([from + at, from + runs[j].at + n]);
-      i = j;
-    }
-    para = [];
-  };
-  // One line at a time: a span that would cross lines might cross a block
-  // boundary (a heading or a list item interrupts a paragraph without a
-  // blank line), so it stays text.
-  lines.forEach((l, i) => {
-    if (!fenced.has(i) && l.text.trim()) para.push(l);
-    flush();
-  });
-  return ranges;
-}
-
 // Where the bot's @handle sits in a message, by parsing its markdown: in
 // code (codeRanges), on a > quote line, or live (anywhere else).
 export function mentionSites(text, agent) {

package/mention-tokens.mjs

@@ -1,4 +1,67 @@
-import { codeRanges } from "./mention-gate.mjs";
+// The mention rule: what counts as `@handle` in a message. No imports, so the
+// native editor checks load this one file as is.
+// The character ranges of a message that are code, by CommonMark's rules:
+// fenced blocks (``` or ~~~, closed by the same character, at least as
+// long), and code spans (a run of n backticks closed by the next run of
+// exactly n on the same line; an opener can't be backslash-escaped).
+// Anything ambiguous stays text: an unclosed fence or an unmatched run is
+// literal, so a handle next to it counts as live.
+export function codeRanges(text) {
+  const s = String(text ?? "");
+  const ranges = [];
+  const lines = [];
+  for (let at = 0; at <= s.length; ) {
+    const nl = s.indexOf("\n", at);
+    const end = nl < 0 ? s.length : nl;
+    lines.push({ start: at, end, text: s.slice(at, end) });
+    if (nl < 0) break;
+    at = nl + 1;
+  }
+  // Fences first: only closed ones are code.
+  const fenced = new Set();
+  for (let i = 0; i < lines.length; i++) {
+    const open = lines[i].text.match(/^ {0,3}(`{3,}|~{3,})(.*)$/);
+    if (!open || (open[1][0] === "`" && open[2].includes("`"))) continue;
+    const close = new RegExp(`^ {0,3}${open[1][0] === "`" ? "`" : "~"}{${open[1].length},}\\s*$`);
+    const j = lines.findIndex((l, k) => k > i && close.test(l.text));
+    if (j < 0) continue;
+    ranges.push([lines[i].start, lines[j].end]);
+    for (let k = i; k <= j; k++) fenced.add(k);
+    i = j;
+  }
+  // Code spans.
+  let para = [];
+  const flush = () => {
+    if (!para.length) return;
+    const from = para[0].start;
+    const t = s.slice(from, para.at(-1).end);
+    const runs = [...t.matchAll(/`+/g)].map((m) => ({ at: m.index, n: m[0].length }));
+    for (let i = 0; i < runs.length; i++) {
+      let { at, n } = runs[i];
+      let slash = 0;
+      for (let b = at - 1; b >= 0 && t[b] === "\\"; b--) slash++;
+      if (slash % 2 === 1) {
+        // An escaped backtick is literal; the rest of the run can still open.
+        at++;
+        n--;
+        if (!n) continue;
+      }
+      const j = runs.findIndex((r, k) => k > i && r.n === n);
+      if (j < 0) continue;
+      ranges.push([from + at, from + runs[j].at + n]);
+      i = j;
+    }
+    para = [];
+  };
+  // One line at a time: a span that would cross lines might cross a block
+  // boundary (a heading or a list item interrupts a paragraph without a
+  // blank line), so it stays text.
+  lines.forEach((l, i) => {
+    if (!fenced.has(i) && l.text.trim()) para.push(l);
+    flush();
+  });
+  return ranges;
+}
 
 // The one definition of an actual mention: `@handle` at a word boundary (not
 // foo@bar, @@x, \@x or a URL's /@x) and outside code (codeRanges). Every reader of

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve-hub",
-  "version": "0.6.43",
+  "version": "0.6.44",
   "license": "Apache-2.0",
   "description": "Bot-side code shared by every hub agent: registry tools, the roster hook, the eve channel, the host sandbox and browser, and model helpers.",
   "type": "module",

package/world.mjs

@@ -20271,7 +20271,7 @@ function stepValues(sessionId2, step) {
   return [sessionId2, step.sequence, step.stepIndex, Date.parse(step.at), b.inputTokens, b.outputTokens, b.cacheReadTokens, b.cacheWriteTokens, b.costUsd];
 }
 
-// mention-gate.mjs
+// mention-tokens.mjs
 function codeRanges(text) {
   const s2 = String(text ?? "");
   const ranges = [];
@@ -20322,8 +20322,6 @@ function codeRanges(text) {
   });
   return ranges;
 }
-
-// mention-tokens.mjs
 function mentionTokens(text) {
   const s2 = String(text ?? "");
   const code = codeRanges(s2);