eve-hub 0.6.51 → 0.6.53

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # eve-hub
 
+## 0.6.53
+
+### Patch Changes
+
+- The Update card never offers an older release than the workspace runs, and the upgrade route answers a workspace still being set up as an error.
+
+## 0.6.52
+
+### Patch Changes
+
+- The mention gate runs on deployed bots, not only Mac bots: the hook ships in the deployed kit, the hub names the bot from its session and sends its role, and the model credential comes from the hub. It reads the message id of a hosted hub's delivery, so a mention that asks nothing of the bot is skipped.
+
 ## 0.6.51
 
 ### Patch Changes

package/hooks/mention-gate.js

@@ -1,29 +1,23 @@
 import { defineHook } from "eve/hooks";
-import { registryBase } from "../registry-fetch.mjs";
-import { hubPath } from "../hub-path.mjs";
-import { botInstructions, credentialCache, gatewayCredentialLoader, screenInbound } from "../mention-gate.mjs";
+import { registryBase, registryFetch } from "../registry-fetch.mjs";
+import { credentialCache, hubCredentialLoader, screenInbound } from "../mention-gate.mjs";
 // The mention gate, on the bot's side: before the main model runs a turn an
 // @-mention or a DM woke, a cheap model decides from this bot's instructions
 // and the delivery whether a reply is needed. On a skip the hub posts
 // "<bot> skipped: <reason>" and the turn is cancelled before any model call.
-// Any failure answers. See packages/agent-kit/mention-gate.mjs.
-const credential = credentialCache(async () => {
-    const resolver = hubPath("node_modules/eve/dist/src/internal/model-auth/gateway-credential.js", { probe: "" });
-    return gatewayCredentialLoader(resolver)();
-});
+// Any failure answers. The hub names the bot from its session and serves its
+// instructions and the model credential, so a deployed bot and a Mac bot run
+// the same code. See packages/agent-kit/mention-gate.mjs.
+const credential = credentialCache(hubCredentialLoader(registryFetch));
 export default defineHook({
     events: {
         async "message.received"(event, ctx) {
-            const agent = process.env.HUB_AGENT;
-            if (!agent || ctx.session.parent)
-                return; // subagents are never gated
+            if (ctx.session.parent || !process.env.HUB_TOKEN)
+                return; // subagents are never gated; nor is a bot with no hosted hub
             const { cancel } = await screenInbound({
                 text: event.data.message,
                 sessionId: ctx.session.id,
-                turnId: event.data.turnId,
-                agent,
                 registryUrl: registryBase(),
-                instructions: botInstructions(agent),
                 credential,
             });
             if (cancel)

package/mention-gate.d.mts

@@ -0,0 +1,6 @@
+export type GateConfig = { enabled: boolean; model: string; api: 'chat' | 'decisions'; reasoningEffort: string; timeoutMs: number; threshold: number; incidentalThreshold: number; url: string };
+export function gateConfig(env?: Record<string, string | undefined>, file?: unknown): GateConfig;
+export function opensWithHandle(text: string, agent: string): boolean;
+export function cleanReason(reason: unknown): string;
+export function screenInbound(input: { text: string; sessionId: string; agent?: string; registryUrl: string; credential: (opts?: { refresh?: boolean }) => Promise<{ token: string; teamId?: string | null } | null>; instructions?: string; fetchImpl?: typeof fetch; log?: ((line: string) => void) | null }): Promise<{ cancel: boolean; result?: unknown }>;
+export function hubCredentialLoader(fetchHub: (path: string, init: { headers?: Record<string, string> }) => Promise<Response>): (opts?: { refresh?: boolean }) => Promise<{ ok: boolean; token?: string; teamId?: string | null; error?: string }>;

package/mention-gate.mjs

@@ -22,9 +22,7 @@
 // HUB_MENTION_GATE_URL (tests).
 import { codeRanges } from "./mention-tokens.mjs";
 import { registryHeaders } from "./registry-fetch.mjs";
-import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
-import { pathToFileURL } from "node:url";
+import { createHash } from "node:crypto";
 
 export { codeRanges };
 
@@ -122,8 +120,10 @@ const clip = (text, n) => {
 };
 
 // The id of the message marked → in a delivery (registry envelope()).
+// A hosted hub's delivery is one message: `[thread <id> "<title>"] [<message id>] <author>: …`.
 export function triggerId(envelope) {
-  return String(envelope ?? "").match(/^→ \[([^\]\s]+)\]/m)?.[1] ?? null;
+  const text = String(envelope ?? "");
+  return text.match(/^→ \[([^\]\s]+)\]/m)?.[1] ?? text.match(/^\[thread \S+ "(?:[^"\\]|\\.)*"\] \[([^\]\s]+)\] /m)?.[1] ?? null;
 }
 
 // The delivery's closing address line ("[you were addressed by @x. … @x
@@ -380,7 +380,7 @@ export function credentialCache(load, { ttlMs = 10 * 60e3, failMs = 60e3, now =
   const get = async ({ refresh = false } = {}) => {
     if (cached && !refresh && now() < cached.until) return cached.value;
     inflight ??= Promise.resolve()
-      .then(load)
+      .then(() => load({ refresh }))
       .catch((error) => ({ ok: false, error: String(error?.message ?? error) }))
       .then((r) => {
         const value = r?.ok && r.token ? { token: r.token, teamId: r.teamId ?? null } : null;
@@ -410,20 +410,23 @@ async function hubCall(fetchImpl, url, body) {
 // end cancelled). Anything that fails on the way answers.
 //   text: the delivery (message.received's data.message)
 //   credential: ({ refresh }) → { token, teamId? } | null (credentialCache)
-export async function screenInbound({ text, sessionId, turnId, agent, registryUrl, instructions = "", credential, fetchImpl = fetch, log = console.warn }) {
+// `agent` is optional: left out, the hub names the bot from its session and sends its instructions.
+export async function screenInbound({ text, sessionId, agent, registryUrl, instructions = "", credential, fetchImpl = fetch, log = console.warn }) {
   const messageId = triggerId(text);
-  if (!agent || !registryUrl || !messageId) return { cancel: false };
+  if (!registryUrl || !messageId) return { cancel: false };
   let check;
   try {
-    check = await hubCall(fetchImpl, `${registryUrl}/api/mention-gate/check`, { agent, messageId, sessionId });
+    check = await hubCall(fetchImpl, `${registryUrl}/api/mention-gate/check`, { ...(agent ? { agent } : {}), messageId, sessionId });
   } catch (error) {
     log?.(`[mention-gate] check for ${messageId} failed, answering: ${error?.message ?? error}`);
     return { cancel: false };
   }
   if (!check?.gate || !check.config) return { cancel: false };
+  agent ??= check.agent;
+  instructions ||= check.instructions ?? "";
   const r = await decide({ config: check.config, credential, prompt: promptFor(check.config, { agent, human: check.humanName ?? "the human", instructions, envelope: text, broadcast: Boolean(check.broadcast) }), addressed: Boolean(check.addressed), fetchImpl });
   try {
-    const ack = await hubCall(fetchImpl, `${registryUrl}/api/mention-gate/report`, { agent, messageId, sessionId, turnId, skip: r.skip, reason: r.reason, verdict: r.verdict ?? null, usage: r.usage ?? null, ms: r.ms, error: r.error ?? null });
+    const ack = await hubCall(fetchImpl, `${registryUrl}/api/mention-gate/report`, { ...(agent ? { agent } : {}), messageId, sessionId, skip: r.skip, reason: r.reason, verdict: r.verdict ?? null, usage: r.usage ?? null, ms: r.ms, error: r.error ?? null });
     return { cancel: Boolean(r.skip && ack?.skip), result: r };
   } catch (error) {
     log?.(`[mention-gate] report for ${messageId} failed, answering: ${error?.message ?? error}`);
@@ -431,31 +434,15 @@ export async function screenInbound({ text, sessionId, turnId, agent, registryUr
   }
 }
 
-// The bot's own instructions: agents/<name>/agent/instructions.md in the
-// workspace (role and what it owns), else its role line. Read once.
-const instructionsCache = new Map();
-export function botInstructions(agent, { workspace = process.env.HUB_WORKSPACE } = {}) {
-  if (instructionsCache.has(agent)) return instructionsCache.get(agent);
-  let text = "";
-  try {
-    const file = join(workspace, "agents", agent, "agent", "instructions.md");
-    if (existsSync(file)) text = readFileSync(file, "utf8");
-    if (!text.trim()) {
-      const data = JSON.parse(readFileSync(join(workspace, "hub.workspace.json"), "utf8"));
-      const role = data?.agents?.find?.((a) => a.name === agent)?.role;
-      if (role) text = `You are **${agent}**. ${role}`;
-    }
-  } catch {}
-  instructionsCache.set(agent, text);
-  return text;
-}
-
-// The AI Gateway credential the bot's own model calls use: eve's resolver
-// (the bot process already loaded the workspace's env files), cached.
-export function gatewayCredentialLoader(resolverFile) {
-  return async () => {
-    const mod = await import(pathToFileURL(resolverFile).href);
-    const c = await mod.resolveGatewayModelCredential();
-    return { ok: true, token: c.token, teamId: c.teamId ?? null };
+// A deployed bot's AI Gateway credential: the hub's own (the workspace owner's sign-in, kept fresh there), asked for with the bot's HUB_TOKEN.
+// `fetchHub(path, init)` is registryFetch. On a refresh it names the token AI Gateway refused, as eve's served credential does.
+export function hubCredentialLoader(fetchHub) {
+  let last = null;
+  return async ({ refresh = false } = {}) => {
+    const res = await fetchHub("/api/model-credential", { headers: refresh && last ? { "x-eve-model-rejected-token-sha256": createHash("sha256").update(last).digest("hex") } : {} });
+    if (!res.ok) return { ok: false, error: `model credential ${res.status}` };
+    const c = await res.json();
+    last = c.token ?? null;
+    return { ok: Boolean(c.token), token: c.token, teamId: c.teamId ?? null };
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve-hub",
-  "version": "0.6.51",
+  "version": "0.6.53",
   "license": "Apache-2.0",
   "description": "Bot-side code shared by every hub agent: registry tools, the roster hook, the eve channel, the host sandbox and browser, and model helpers.",
   "type": "module",

package/stubs.mjs

@@ -50,12 +50,12 @@ export const MAIN_KIT_FILES = {
 // sandbox that resolves /workspace as itself, which a Vercel Sandbox does),
 // the kit's bash (HostSandbox's root, the daemon's env; eve's own bash runs
 // instead), the browser and the screenshot paths of attach_image/view_image,
-// the mention gate (the
-// daemon's per-process HUB_AGENT and patched model credential), restart_hub (the hub's own code), memory (the workspace's files), and main's prune schedule (it cleans the hub machine's disk).
+// restart_hub (the hub's own code), memory (the workspace's files), and main's prune schedule (it cleans the hub machine's disk).
 // main's compact and dash schedules stay: off the hub's machine compact finds no session to compact
 // (hosted sessions carry no last-model-call time), and dash has no PR data (its lookup runs `gh`).
 export const DEPLOYED_KIT_FILES = new Set([
   "channels/eve.ts",
+  "hooks/mention-gate.ts",
   "schedules/compact.ts",
   "schedules/dash.ts",
   "skills/onboarding-profile.ts",

package/world.mjs

@@ -20242,42 +20242,6 @@ var LEASE_LEFT = `SELECT l.setup_failed_until - ${NOW_MS} AS ms FROM local_runne
 // ../../hosted-hub/src/store/schema.ts
 var OPEN_TURN_STATUSES = "('streaming','cancelling')";
 
-// ../../hosted-hub/src/domain/wake.ts
-var escape = (s2) => s2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-var mentioned = (roster, text) => roster.filter((bot) => new RegExp(`(^|[^\\w@])@${escape(bot)}(?![\\w-])`, "i").test(text));
-var hasAll = (text) => /(^|[^\w@])@all(?![\w-])/i.test(text);
-function recipients(roster, text, from, threadId2 = "", participants = []) {
-  if (threadId2.startsWith("dm-")) {
-    const bot = threadId2.slice(3);
-    return bot !== from.name && roster.includes(bot) ? [bot] : [];
-  }
-  const named = [.../* @__PURE__ */ new Set([...mentioned(roster, text), ...hasAll(text) ? participants.filter((b) => roster.includes(b)) : []])].filter((bot) => bot !== from.name);
-  if (from.kind === "agent") return named;
-  return named.length ? named : roster.slice(0, 1);
-}
-
-// ../../lib/usage.mjs
-var emptyBucket = () => ({ steps: 0, inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0, costUsd: null, unpricedSteps: 0 });
-var TOKENS = ["inputTokens", "outputTokens", "cacheReadTokens", "cacheWriteTokens"];
-var num = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0;
-var round = (v) => Math.round(v * 1e9) / 1e9;
-function addUsage(bucket, usage = {}) {
-  bucket.steps += 1;
-  for (const key of TOKENS) bucket[key] += num(usage?.[key]);
-  const cost = usage?.costUsd;
-  if (typeof cost === "number" && Number.isFinite(cost) && cost >= 0) bucket.costUsd = round((bucket.costUsd ?? 0) + cost);
-  else bucket.unpricedSteps += 1;
-  return bucket;
-}
-var HOURS_KEPT_MS = 35 * 24 * 36e5;
-
-// ../../hosted-hub/src/store/usage.ts
-var STEP_INSERT = "INSERT OR IGNORE INTO usage_steps (session_id, sequence, step_index, at, input_tokens, output_tokens, cache_read_tokens, cache_write_tokens, cost_usd, turn_id, model)";
-function stepValues(sessionId2, step) {
-  const b = addUsage(emptyBucket(), step.usage);
-  return [sessionId2, step.sequence, step.stepIndex, Date.parse(step.at), b.inputTokens, b.outputTokens, b.cacheReadTokens, b.cacheWriteTokens, b.costUsd];
-}
-
 // mention-tokens.mjs
 function codeRanges(text) {
   const s2 = String(text ?? "");
@@ -20339,6 +20303,44 @@ function mentionTokens(text) {
   return out;
 }
 
+// ../../hosted-hub/src/domain/wake.ts
+var mentioned = (roster, text) => {
+  const tokens = new Set(mentionTokens(text));
+  return roster.filter((bot) => tokens.has(bot.toLowerCase()));
+};
+var hasAll = (text) => mentionTokens(text).includes("all");
+function recipients(roster, text, from, threadId2 = "", participants = []) {
+  if (threadId2.startsWith("dm-")) {
+    const bot = threadId2.slice(3);
+    return bot !== from.name && roster.includes(bot) ? [bot] : [];
+  }
+  const named = [.../* @__PURE__ */ new Set([...mentioned(roster, text), ...hasAll(text) ? participants.filter((b) => roster.includes(b)) : []])].filter((bot) => bot !== from.name);
+  if (from.kind === "agent") return named;
+  return named.length ? named : roster.slice(0, 1);
+}
+
+// ../../lib/usage.mjs
+var emptyBucket = () => ({ steps: 0, inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0, costUsd: null, unpricedSteps: 0 });
+var TOKENS = ["inputTokens", "outputTokens", "cacheReadTokens", "cacheWriteTokens"];
+var num = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0;
+var round = (v) => Math.round(v * 1e9) / 1e9;
+function addUsage(bucket, usage = {}) {
+  bucket.steps += 1;
+  for (const key of TOKENS) bucket[key] += num(usage?.[key]);
+  const cost = usage?.costUsd;
+  if (typeof cost === "number" && Number.isFinite(cost) && cost >= 0) bucket.costUsd = round((bucket.costUsd ?? 0) + cost);
+  else bucket.unpricedSteps += 1;
+  return bucket;
+}
+var HOURS_KEPT_MS = 35 * 24 * 36e5;
+
+// ../../hosted-hub/src/store/usage.ts
+var STEP_INSERT = "INSERT OR IGNORE INTO usage_steps (session_id, sequence, step_index, at, input_tokens, output_tokens, cache_read_tokens, cache_write_tokens, cost_usd, turn_id, model)";
+function stepValues(sessionId2, step) {
+  const b = addUsage(emptyBucket(), step.usage);
+  return [sessionId2, step.sequence, step.stepIndex, Date.parse(step.at), b.inputTokens, b.outputTokens, b.cacheReadTokens, b.cacheWriteTokens, b.costUsd];
+}
+
 // ../../hosted-hub/src/store/notifications.ts
 var NOTIFICATION_READS = s("SELECT person, notification_id FROM notification_reads");
 var NOTIFICATIONS = s("SELECT message_id, person FROM notifications");
@@ -27040,6 +27042,8 @@ var HostedUpdate = object2({
   commit: maybe(string5()),
   /** `updated`: the Vercel page of the deployment that made the move; absent for a move recorded before it was kept. */
   deployment: maybe(string5()),
+  /** `updated`: the move was a commit that is not an update to the hub's release (a memory or instructions edit); `commit` is it. */
+  plain: boolean5().optional(),
   /**
    * `kind`: sign-in (the owner signs in again) | build (`url` is the failed build) | other. A failed build also carries
    * what Vercel says of it once the hub has read it: the `step` that failed, the `sha` it built, and the `log`'s last lines.
@@ -27205,7 +27209,7 @@ var StoredHosted = HostedWorkspace.omit({ eveHub: true, commits: true, update: t
   workspace: DeployedWorkspace.nullable().default(null),
   attempt: Attempt.nullable().default(null),
   upgrade: Upgrade.nullable().default(null),
-  updated: external_exports.object({ to: external_exports.string(), at: external_exports.string(), commit: external_exports.string().nullable().default(null), deployment: external_exports.string().nullable().default(null) }).nullable().default(null)
+  updated: external_exports.object({ to: external_exports.string(), at: external_exports.string(), commit: external_exports.string().nullable().default(null), deployment: external_exports.string().nullable().default(null), plain: external_exports.boolean().default(false) }).nullable().default(null)
 });
 var REPO_READ = s("SELECT metadata FROM workspace_repo WHERE id = 1");
 
@@ -27226,7 +27230,8 @@ var TASK_CARD = `(SELECT CASE WHEN json_array_length(json_extract(t.activity, '$
     AND m.rowid = (SELECT MAX(x.rowid) FROM messages x WHERE x.turn_id = m.turn_id))`;
 var FACT_COLUMNS = `status, status_from, metadata, verdict, decisions, tested, ${TASK_CARD} AS task_card, event`;
 var LINKED = "EXISTS (SELECT 1 FROM turn_deliveries td WHERE td.delivery_id = d.id)";
-var DELIVERY_STATUS = `CASE WHEN d.accepted_at IS NOT NULL OR ${LINKED} THEN COALESCE((SELECT 'waiting: on your answer to its ' || r.kind || ' request'
+var DELIVERY_STATUS = `CASE WHEN json_extract(d.gate, '$.decision') = 'skip' THEN 'skipped: ' || json_extract(d.gate, '$.reason')
+  WHEN d.accepted_at IS NOT NULL OR ${LINKED} THEN COALESCE((SELECT 'waiting: on your answer to its ' || r.kind || ' request'
     FROM input_requests r JOIN sessions rs ON rs.id = r.session_id
     WHERE r.session_id = d.session_id AND r.status = 'pending' AND rs.ended_at IS NULL
       AND r.created_at <= COALESCE((SELECT t.started_at FROM turn_deliveries td JOIN turns t ON t.id = td.turn_id WHERE td.delivery_id = d.id), d.accepted_at) LIMIT 1),
@@ -27245,9 +27250,22 @@ var RESTARTED_TURNS_READ = s(`SELECT t.thread_id, t.bot, r.claimed_at FROM turns
     AND NOT EXISTS (SELECT 1 FROM session_folds f WHERE f.session_id = t.session_id AND f.folded_at >= r.claimed_at)`);
 
 // ../../hosted-hub/src/store/fold.ts
+function handedBack({ session, roster, asked = [], posted = [], notify }, text, named) {
+  if (session.thread.startsWith("dm-")) return [];
+  const known = new Set([...roster, ...notify ? [notify.person, ...notify.names] : [], "all"].map((n) => n.toLowerCase())), me = session.bot.toLowerCase();
+  if ([text, ...posted].some((t) => mentionTokens(t).some((name) => name !== me && known.has(name)))) return [];
+  return [...new Set(asked.filter((a) => (a.linked || named.has(a.id)) && a.author !== session.bot && roster.includes(a.author) && mentionTokens(a.text).includes(me)).map((a) => a.author))];
+}
 var FOLD_STATE_SQL = `SELECT s.id, s.thread_id, s.bot, COALESCE(f.folded_index, -1) AS folded_index, (SELECT json_group_array(name) FROM (SELECT name FROM bots WHERE ${inRoster} ORDER BY position)) AS roster,
     (SELECT json_group_array(bot) FROM (${PARTICIPANTS("s.thread_id")})) AS participants,
     (SELECT d.message_id FROM deliveries d WHERE d.bot = s.bot AND d.held_at IS NOT NULL AND d.held_paused IS NOT 1 AND d.accepted_at IS NULL AND d.failed_at IS NULL AND d.revoked_at IS NULL ORDER BY d.rowid LIMIT 1) AS held,
+    (SELECT json_group_array(json_object('id', dd.id, 'author', m.author, 'text', m.text, 'linked', EXISTS (SELECT 1 FROM turn_deliveries td JOIN turns t ON t.id = td.turn_id WHERE td.delivery_id = dd.id AND t.status IN ${OPEN_TURN_STATUSES})))
+      FROM deliveries dd JOIN messages m ON m.id = dd.message_id WHERE dd.session_id = s.id AND m.author_kind = 'agent'
+        AND (EXISTS (SELECT 1 FROM turn_deliveries td JOIN turns t ON t.id = td.turn_id WHERE td.delivery_id = dd.id AND t.status IN ${OPEN_TURN_STATUSES}) OR NOT EXISTS (SELECT 1 FROM turn_deliveries td WHERE td.delivery_id = dd.id))) AS asked,
+    (SELECT json_group_array(p.text) FROM messages p WHERE p.turn_id = (SELECT t.id FROM turns t WHERE t.session_id = s.id AND t.status IN ${OPEN_TURN_STATUSES} ORDER BY t.started_at DESC LIMIT 1)
+      AND p.author = s.bot AND p.author_kind = 'agent' AND p.status IS NULL) AS posted,
+    (SELECT p.id FROM messages p WHERE p.turn_id = (SELECT t.id FROM turns t WHERE t.session_id = s.id AND t.status IN ${OPEN_TURN_STATUSES} ORDER BY t.started_at DESC LIMIT 1)
+      AND p.author = s.bot AND p.author_kind = 'agent' AND p.status IS NULL ORDER BY p.created_at DESC, p.rowid DESC LIMIT 1) AS last_post,
     (SELECT json_object('person', person, 'names', json(names)) FROM human_notify) AS notify,
     (SELECT json_object('status', t.status, 'id', t.id, 'text', t.reply_text, 'lastStep', json(t.last_step), 'activity', json(t.activity),
       'trigger', ${triggerOf("t")}) FROM turns t WHERE t.session_id = s.id AND t.status IN ${OPEN_TURN_STATUSES}
@@ -27262,6 +27280,9 @@ function foldState(row) {
     roster: JSON.parse(String(row.roster)),
     participants: JSON.parse(String(row.participants)),
     held: row.held == null ? null : String(row.held),
+    asked: JSON.parse(String(row.asked ?? "[]")),
+    posted: JSON.parse(String(row.posted ?? "[]")),
+    lastPost: row.last_post == null ? null : String(row.last_post),
     notify: row.notify ? JSON.parse(String(row.notify)) : null,
     foldedIndex: Number(row.folded_index),
     open: row.open_turn ? JSON.parse(String(row.open_turn)) : null,
@@ -27275,7 +27296,7 @@ var IF_INSERTED = "WHERE changes() > 0";
 var lastActWasOwnPost = (ls) => !!ls && Object.keys(ls.calls).length > 0 && Object.values(ls.calls).every((own3) => own3 === true);
 function fold(state, chunks, now = Date.now()) {
   const { session } = state;
-  const stmts = [], touched = /* @__PURE__ */ new Map();
+  const stmts = [], touched = /* @__PURE__ */ new Map(), named = /* @__PURE__ */ new Set();
   const log = (type, data, when = "") => stmts.push(s(`INSERT INTO log (thread_id, type, data, at) SELECT ?, ?, ?, ? ${when}`, session.thread, type, JSON.stringify({ threadId: session.thread, agent: session.bot, ...data }), at));
   let open3 = state.open && { ...state.open, trigger: state.open.trigger ?? null, lastStep: state.open.lastStep ?? null, status: state.open.status, endedAt: null, error: null };
   const deliver = [];
@@ -27363,7 +27384,9 @@ function fold(state, chunks, now = Date.now()) {
           data.message.length - state2
         ));
       }
+      if (event.type === "turn.started") named.clear();
       for (const deliveryId2 of event.meta?.deliveryIds ?? []) {
+        named.add(deliveryId2);
         open3.trigger ??= messageOfDelivery(deliveryId2, session.bot);
         stmts.push(s("INSERT OR IGNORE INTO turn_deliveries (delivery_id, turn_id) SELECT id, ? FROM deliveries WHERE id = ? AND session_id = ?", open3.id, deliveryId2, session.id));
       }
@@ -27441,9 +27464,14 @@ function fold(state, chunks, now = Date.now()) {
             stmts.push(...notificationFor(messageId2, "agent", text, state.notify ?? void 0));
             stmts.push(s(`INSERT OR IGNORE INTO message_attachments (message_id, position, upload_id, name, size)
               SELECT ?, position, upload_id, name, size FROM turn_attachments WHERE turn_id = ? AND EXISTS (SELECT 1 FROM messages WHERE id = ?) ORDER BY position`, messageId2, open3.id, messageId2));
-            const to = recipients(state.roster, text, { name: session.bot, kind: "agent" }, session.thread, state.participants);
+            const onPost = text === "" ? state.lastPost : null;
+            const to = [.../* @__PURE__ */ new Set([...recipients(state.roster, text, { name: session.bot, kind: "agent" }, session.thread, state.participants), ...onPost ? [] : handedBack(state, text, named)])];
             stmts.push(...routingStatements(messageId2, session.thread, to, at, { by: session.bot, joins: true }));
             deliver.push(messageId2);
+            if (onPost) {
+              stmts.push(...routingStatements(onPost, session.thread, handedBack(state, "", named), at, { by: session.bot, joins: true }));
+              deliver.push(onPost);
+            }
           }
           end("done");
           break;