eve-hub 0.6.7 → 0.6.9

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # eve-hub
 
+## 0.6.9
+
+### Patch Changes
+
+- A hosted deployment reaches GitHub one way for every bot: `gh` and `git` in bash through the sandbox firewall token, with eve's git extension mounted on each bot. The build no longer wires in the Vercel Kit connection (`GITHUB_PATH` in `github-path.mjs` is the one switch; `"kit"` brings it back).
+
+## 0.6.8
+
+### Patch Changes
+
+- The bots' world folds eve's session-limit requests into the hosted hub, so a session parked on its input limit shows its Approve/Stop ask to the human.
+
 ## 0.6.7
 
 ### Patch Changes

package/github-path.d.mts

@@ -0,0 +1 @@
+export const GITHUB_PATH: "gh" | "kit";

package/github-path.mjs

@@ -0,0 +1,8 @@
+// How every deployed bot reaches GitHub, decided here and nowhere else:
+//   "gh"  `gh` and `git` in bash (the firewall token and eve's git extension, both
+//         always on, prepare.mjs); no Vercel Kit connection, so no bot can pick
+//         Kit for GitHub, and onboarding sets up no Kit connector.
+//   "kit" the same, plus the Kit connection on every bot (prepare.mjs, and the
+//         peer dependencies it needs in hosted-hub/scripts/stage-workspace.mjs) and
+//         the Kit connector on each new bots project (hosted-hub/src/onboard/provision-steps.ts).
+export const GITHUB_PATH = "gh";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve-hub",
-  "version": "0.6.7",
+  "version": "0.6.9",
   "license": "Apache-2.0",
   "description": "Bot-side code shared by every hub agent: registry tools, the roster hook, the eve channel, the host sandbox and browser, and model helpers.",
   "type": "module",

package/prepare.mjs

@@ -9,7 +9,8 @@
 //   pays for model calls) with only the kit stubs that run off the hub's
 //   machine (DEPLOYED_KIT_FILES);
 // - the kit extension, host-only workers and kit stubs are dropped, the hub's
-//   workflow world and the Vercel Kit connection are wired in, and the
+//   workflow world is wired in (and the Vercel Kit connection, if GITHUB_PATH
+//   says "kit"), every bot gets eve's git extension, and the
 //   workspace's memory is embedded in the bots' memory providers (a function
 //   has no workspace cwd);
 // - /hub/manifest: the roster and the commit sha the deployment was built
@@ -17,6 +18,7 @@
 //   vercel.mjs. Bearer BOT_TOKEN, as on each bot's eve channel (bot-token.mjs).
 import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, rmdirSync, unlinkSync, writeFileSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
+import { GITHUB_PATH } from "./github-path.mjs";
 import { KIT_FILES, MAIN_KIT_FILES } from "./stubs.mjs";
 import { deploymentFacts, hostedContext } from "./execution-context.mjs";
 import { botDomains, domainFolders, readBotMemory, readMemory, validateMemory } from "./memory.mjs";
@@ -84,11 +86,14 @@ export const VERCEL_SANDBOX = vercelSandbox("");
 // The builder's sandbox also carries eve-code's tooling (agents/builder/agent/extensions/code/).
 export const CODE_SANDBOX = vercelSandbox("\n  await installCodeTooling(sandbox);");
 
+// eve's git extension, for every bot: it points the bot at `gh` and `git` in
+// bash, whose GitHub credential is the sandbox firewall's (VERCEL_SANDBOX above).
+// With no `github` option it brokers no credential. It only guides: its `pr`
+// skill (commit, push, draft PR) loads when a bot publishes.
+export const gitExtensionFiles = () => ({ "extensions/git/extension.ts": `import git from "eve/extensions/git";\n\nexport default git({});\n` });
+
 // Bots that edit code: eve-code (apply_patch, grep, the review skills and its
-// read-only worker) plus eve's git extension, both with no `github` option. The
-// git extension then points the bot at `gh` and `git` in bash, whose GitHub
-// credential is the sandbox firewall's (VERCEL_SANDBOX above), and its `pr` skill
-// is the plain commit, push and draft-PR one. The worker runs on the roster's
+// read-only worker), with no `github` option. The worker runs on the roster's
 // subagent cap like every other subagent, not on eve's built-in default.
 export const CODE_BOTS = ["builder"];
 export const codeExtensionFiles = (bot) => ({
@@ -102,7 +107,6 @@ const { model, reasoning } = resolveSubagent(agents, subagentCap, ${JSON.stringi
 
 export default code({ worker: { model, reasoning } });
 `,
-  "extensions/git/extension.ts": `import git from "eve/extensions/git";\n\nexport default git({});\n`,
 });
 
 const KIT_VERSION = JSON.parse(readFileSync(new URL("./package.json", import.meta.url), "utf8")).version;
@@ -188,11 +192,9 @@ export function prepareDeployment(dir) {
     const name = basename(dirname(bot));
     const code = CODE_BOTS.includes(name);
     writeFileSync(join(bot, "sandbox.ts"), code ? CODE_SANDBOX : VERCEL_SANDBOX);
-    if (code) {
-      for (const [stub, content] of Object.entries(codeExtensionFiles(name))) {
-        mkdirSync(dirname(join(bot, stub)), { recursive: true });
-        writeFileSync(join(bot, stub), content);
-      }
+    for (const [stub, content] of Object.entries({ ...gitExtensionFiles(), ...(code ? codeExtensionFiles(name) : {}) })) {
+      mkdirSync(dirname(join(bot, stub)), { recursive: true });
+      writeFileSync(join(bot, stub), content);
     }
   }
   const roster = resolved.agents;
@@ -207,10 +209,12 @@ export function prepareDeployment(dir) {
     }
     const agentFile = join(bot, "agent.ts");
     writeFileSync(agentFile, injectWorkflowWorld(readFileSync(agentFile, "utf8"), agentFile));
-    // Hosted bots reach the human's connected services (GitHub) through Vercel Kit,
-    // with the project's KIT_CONNECTOR; there is no host credential to fall back on.
-    mkdirSync(join(bot, "connections"), { recursive: true });
-    writeFileSync(join(bot, "connections", "vercel-kit.ts"), 'export { default } from "eve-hub/connections/vercel-kit";\n');
+    // GITHUB_PATH "kit": the human's connected services (GitHub) come through Vercel Kit,
+    // with the project's KIT_CONNECTOR. "gh" deploys no Kit connection.
+    if (GITHUB_PATH === "kit") {
+      mkdirSync(join(bot, "connections"), { recursive: true });
+      writeFileSync(join(bot, "connections", "vercel-kit.ts"), 'export { default } from "eve-hub/connections/vercel-kit";\n');
+    }
     mkdirSync(join(bot, "memory"), { recursive: true });
     const botDir = join(dir, "agents", name);
     writeFileSync(join(bot, "memory", "workspace.ts"), memoryProvider("workspace", readMemory(dir, { folders: domainFolders(botDomains(dir, botDir)) }).entries, "Standing decision", "workspace"));

package/world.mjs

@@ -564,6 +564,12 @@ var APP_READS = [
   ...DASH_READS
 ];
 
+// ../../hosted-hub/src/store/requests.ts
+var PENDING_REQUESTS_READ = s(`SELECT r.id, r.session_id, r.thread_id, r.bot, r.kind, r.prompt, r.options, r.allow_freeform, r.tool_name, r.submitted_at, r.created_at,
+    (SELECT d.message_id FROM turn_deliveries td JOIN deliveries d ON d.id = td.delivery_id WHERE td.turn_id = r.turn_id ORDER BY d.rowid DESC LIMIT 1) AS message_id
+  FROM input_requests r JOIN sessions s ON s.id = r.session_id
+  WHERE r.status = 'pending' AND s.ended_at IS NULL ORDER BY r.created_at`);
+
 // ../../hosted-hub/src/store/workspace-state.ts
 var LIVE_TURNS_READ = s(`SELECT thread_id,bot,started_at,reply_text,activity FROM turns WHERE status IN ${OPEN_TURN_STATUSES} ORDER BY started_at`);
 
@@ -27031,6 +27037,20 @@ function fold(state, chunks, now = Date.now()) {
     for (const [eventIndex, event] of events.entries()) {
       const data = event.data ?? {};
       at = Date.parse(event.meta?.at ?? "") || now;
+      if (event.type === "input.requested") {
+        const limits = (data.requests ?? []).filter((r) => r.kind === "session-limit");
+        for (const r of limits)
+          stmts.push(s(`INSERT OR IGNORE INTO input_requests (id, session_id, thread_id, bot, turn_id, kind, prompt, options, allow_freeform, tool_name, created_at)
+            VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, r.requestId, session.id, session.thread, session.bot, open3?.id ?? null, r.kind, r.prompt, JSON.stringify(r.options ?? []), r.allowFreeform ? 1 : 0, r.action?.toolName ?? null, at));
+        if (limits.length) log("request.updated", { requestIds: limits.map((r) => r.requestId) });
+      }
+      if (event.type === "input.resolved") {
+        for (const r of data.resolutions ?? [])
+          stmts.push(s(`UPDATE input_requests SET status = 'resolved', outcome = ?, resolved_at = ?,
+            answer = COALESCE(?, (SELECT json_extract(o.value, '$.label') FROM json_each(input_requests.options) o WHERE json_extract(o.value, '$.id') = ?), ?)
+            WHERE id = ? AND session_id = ? AND status = 'pending'`, r.outcome ?? "answered", at, r.response?.text ?? null, r.response?.optionId ?? null, r.response?.optionId ?? null, r.requestId, session.id));
+        log("request.updated", { requestIds: (data.resolutions ?? []).map((r) => r.requestId) });
+      }
       if (event.type === "turn.started") {
         if (!data.turnId) throw new Error("turn.started must name eve turnId");
         flush();