eve-hub 0.6.58 → 0.6.60

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # eve-hub
 
+## 0.6.60
+
+### Patch Changes
+
+- A deployed bot's mention gate uses its own deployment's OIDC token for AI Gateway; a Mac bot's gate gets a project token from the hub, never the owner's OAuth token.
+
+## 0.6.59
+
+### Patch Changes
+
+- Hosted onboarding: each teammate approves GitHub once, and the hub's commits (a workspace's first files, version bumps, added bots) are made as them; the update card gets an Approve GitHub button.
+
 ## 0.6.58
 
 ### Patch Changes

package/hooks/mention-gate.js

@@ -1,3 +1,4 @@
+import { getVercelOidcToken } from "@vercel/oidc";
 import { defineHook } from "eve/hooks";
 import { registryBase, registryFetch } from "../registry-fetch.mjs";
 import { credentialCache, hubCredentialLoader, screenInbound } from "../mention-gate.mjs";
@@ -6,9 +7,12 @@ import { credentialCache, hubCredentialLoader, screenInbound } from "../mention-
 // and the delivery whether a reply is needed. On a skip the hub posts
 // "<bot> skipped: <reason>" and the turn is cancelled before any model call.
 // Any failure answers. The hub names the bot from its session and serves its
-// instructions and the model credential, so a deployed bot and a Mac bot run
-// the same code. See packages/agent-kit/mention-gate.mjs.
-const credential = credentialCache(hubCredentialLoader(registryFetch));
+// instructions, so a deployed bot and a Mac bot run the same code. Its AI Gateway
+// credential is an OIDC token for the workspace's bots project: a deployed bot
+// carries its own, and a Mac bot has none, so it asks the hub for one.
+// See packages/agent-kit/mention-gate.mjs.
+const deploymentToken = async () => ({ ok: true, token: await getVercelOidcToken() });
+const credential = credentialCache(process.env.VERCEL ? deploymentToken : hubCredentialLoader(registryFetch));
 export default defineHook({
     events: {
         async "message.received"(event, ctx) {

package/mention-gate.d.mts

@@ -3,4 +3,4 @@ export function gateConfig(env?: Record<string, string | undefined>, file?: unkn
 export function opensWithHandle(text: string, agent: string): boolean;
 export function cleanReason(reason: unknown): string;
 export function screenInbound(input: { text: string; sessionId: string; agent?: string; registryUrl: string; credential: (opts?: { refresh?: boolean }) => Promise<{ token: string; teamId?: string | null } | null>; instructions?: string; fetchImpl?: typeof fetch; log?: ((line: string) => void) | null }): Promise<{ cancel: boolean; result?: unknown }>;
-export function hubCredentialLoader(fetchHub: (path: string, init: { headers?: Record<string, string> }) => Promise<Response>): (opts?: { refresh?: boolean }) => Promise<{ ok: boolean; token?: string; teamId?: string | null; error?: string }>;
+export function hubCredentialLoader(fetchHub: (path: string, init: { headers?: Record<string, string> }) => Promise<Response>): (opts?: { refresh?: boolean }) => Promise<{ ok: boolean; token?: string; error?: string }>;

package/mention-gate.mjs

@@ -434,7 +434,7 @@ export async function screenInbound({ text, sessionId, agent, registryUrl, instr
   }
 }
 
-// A deployed bot's AI Gateway credential: the hub's own (the workspace owner's sign-in, kept fresh there), asked for with the bot's HUB_TOKEN.
+// A Mac bot's AI Gateway credential: the hub mints an OIDC token for the workspace's bots project, asked for with the bot's HUB_TOKEN.
 // `fetchHub(path, init)` is registryFetch. On a refresh it names the token AI Gateway refused, as eve's served credential does.
 export function hubCredentialLoader(fetchHub) {
   let last = null;
@@ -443,6 +443,6 @@ export function hubCredentialLoader(fetchHub) {
     if (!res.ok) return { ok: false, error: `model credential ${res.status}` };
     const c = await res.json();
     last = c.token ?? null;
-    return { ok: Boolean(c.token), token: c.token, teamId: c.teamId ?? null };
+    return { ok: Boolean(c.token), token: c.token };
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve-hub",
-  "version": "0.6.58",
+  "version": "0.6.60",
   "license": "Apache-2.0",
   "description": "Bot-side code shared by every hub agent: registry tools, the roster hook, the eve channel, the host sandbox and browser, and model helpers.",
   "type": "module",

package/world.mjs

@@ -27045,7 +27045,7 @@ var HostedUpdate = object2({
   /** `updated`: the move was a commit that is not an update to the hub's release (a memory or instructions edit); `commit` is it. */
   plain: boolean5().optional(),
   /**
-   * `kind`: sign-in (the owner signs in again) | build (`url` is the failed build) | other. A failed build also carries
+   * `kind`: sign-in (the owner signs in again) | github (the owner approves GitHub: the app asks `githubConsent` for a fresh link) | build (`url` is the failed build) | other. A failed build also carries
    * what Vercel says of it once the hub has read it: the `step` that failed, the `sha` it built, and the `log`'s last lines.
    */
   error: maybe(object2({
@@ -27198,7 +27198,7 @@ var Upgrade = external_exports.object({
   ref: external_exports.string().nullable().default(null),
   deployment: external_exports.string().nullable().default(null),
   at: external_exports.string(),
-  error: external_exports.object({ kind: external_exports.enum(["sign-in", "other"]), message: external_exports.string() }).nullable().default(null)
+  error: external_exports.object({ kind: external_exports.enum(["sign-in", "github", "other"]), message: external_exports.string() }).nullable().default(null)
 });
 var Failure = external_exports.object({ step: external_exports.string().nullable(), message: external_exports.string().nullable(), log: external_exports.array(external_exports.string()) });
 var Attempt = external_exports.object({ id: external_exports.string().nullable(), key: external_exports.string().nullable(), state: external_exports.string(), url: external_exports.string(), failure: Failure.nullable().default(null) });