eve-hub 0.6.8 → 0.6.10

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # eve-hub
 
+## 0.6.10
+
+### Patch Changes
+
+- The change-explainer is gone: its skill and the `artifact_publish`, `artifact_status` and `artifact_list` tools are no longer kit files (sync and the hosted deploy remove them from every bot), and the protocol no longer tells reviewers to publish an explainer.
+
+## 0.6.9
+
+### Patch Changes
+
+- A hosted deployment reaches GitHub one way for every bot: `gh` and `git` in bash through the sandbox firewall token, with eve's git extension mounted on each bot. The build no longer wires in the Vercel Kit connection (`GITHUB_PATH` in `github-path.mjs` is the one switch; `"kit"` brings it back).
+
 ## 0.6.8
 
 ### Patch Changes

package/github-path.d.mts

@@ -0,0 +1 @@
+export const GITHUB_PATH: "gh" | "kit";

package/github-path.mjs

@@ -0,0 +1,8 @@
+// How every deployed bot reaches GitHub, decided here and nowhere else:
+//   "gh"  `gh` and `git` in bash (the firewall token and eve's git extension, both
+//         always on, prepare.mjs); no Vercel Kit connection, so no bot can pick
+//         Kit for GitHub, and onboarding sets up no Kit connector.
+//   "kit" the same, plus the Kit connection on every bot (prepare.mjs, and the
+//         peer dependencies it needs in hosted-hub/scripts/stage-workspace.mjs) and
+//         the Kit connector on each new bots project (hosted-hub/src/onboard/provision-steps.ts).
+export const GITHUB_PATH = "gh";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve-hub",
-  "version": "0.6.8",
+  "version": "0.6.10",
   "license": "Apache-2.0",
   "description": "Bot-side code shared by every hub agent: registry tools, the roster hook, the eve channel, the host sandbox and browser, and model helpers.",
   "type": "module",
@@ -12,7 +12,6 @@
     "./channels/*": "./channels/*.js",
     "./instructions/*": "./instructions/*.js",
     "./memory/*": "./memory/*.js",
-    "./skills/*": "./skills/*.js",
     "./host-sandbox": "./host-sandbox.js",
     "./host-browser": "./host-browser.js",
     "./roster-model": "./roster-model.mjs",

package/prepare.mjs

@@ -9,7 +9,8 @@
 //   pays for model calls) with only the kit stubs that run off the hub's
 //   machine (DEPLOYED_KIT_FILES);
 // - the kit extension, host-only workers and kit stubs are dropped, the hub's
-//   workflow world and the Vercel Kit connection are wired in, and the
+//   workflow world is wired in (and the Vercel Kit connection, if GITHUB_PATH
+//   says "kit"), every bot gets eve's git extension, and the
 //   workspace's memory is embedded in the bots' memory providers (a function
 //   has no workspace cwd);
 // - /hub/manifest: the roster and the commit sha the deployment was built
@@ -17,7 +18,8 @@
 //   vercel.mjs. Bearer BOT_TOKEN, as on each bot's eve channel (bot-token.mjs).
 import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, rmdirSync, unlinkSync, writeFileSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
-import { KIT_FILES, MAIN_KIT_FILES } from "./stubs.mjs";
+import { GITHUB_PATH } from "./github-path.mjs";
+import { KIT_FILES, MAIN_KIT_FILES, REMOVED_KIT_FILES } from "./stubs.mjs";
 import { deploymentFacts, hostedContext } from "./execution-context.mjs";
 import { botDomains, domainFolders, readBotMemory, readMemory, validateMemory } from "./memory.mjs";
 import { agentRunsOn, readWorkspaceFile, removeWorkspaceAgent } from "./workspace.mjs";
@@ -35,9 +37,8 @@ import { agentRunsOn, readWorkspaceFile, removeWorkspaceAgent } from "./workspac
 // roster by commit), memory (the workspace's files), and main's schedules.
 export const DEPLOYED_KIT_FILES = new Set([
   "channels/eve.ts",
-  "skills/change-explainer.ts",
   ...["react", "show", "update_thread", "list_threads", "read_thread", "post_message"].map((t) => `tools/${t}.ts`),
-  ...["create_thread", "set_summary", "move_path", "archive_thread", "unarchive_thread", "list_agents", "agent_send", "tag_threads", "dash_update", "apply_tags", "artifact_publish", "artifact_status", "artifact_list"].map((t) => `tools/${t}.ts`),
+  ...["create_thread", "set_summary", "move_path", "archive_thread", "unarchive_thread", "list_agents", "agent_send", "tag_threads", "dash_update", "apply_tags"].map((t) => `tools/${t}.ts`),
 ]);
 
 
@@ -84,11 +85,14 @@ export const VERCEL_SANDBOX = vercelSandbox("");
 // The builder's sandbox also carries eve-code's tooling (agents/builder/agent/extensions/code/).
 export const CODE_SANDBOX = vercelSandbox("\n  await installCodeTooling(sandbox);");
 
+// eve's git extension, for every bot: it points the bot at `gh` and `git` in
+// bash, whose GitHub credential is the sandbox firewall's (VERCEL_SANDBOX above).
+// With no `github` option it brokers no credential. It only guides: its `pr`
+// skill (commit, push, draft PR) loads when a bot publishes.
+export const gitExtensionFiles = () => ({ "extensions/git/extension.ts": `import git from "eve/extensions/git";\n\nexport default git({});\n` });
+
 // Bots that edit code: eve-code (apply_patch, grep, the review skills and its
-// read-only worker) plus eve's git extension, both with no `github` option. The
-// git extension then points the bot at `gh` and `git` in bash, whose GitHub
-// credential is the sandbox firewall's (VERCEL_SANDBOX above), and its `pr` skill
-// is the plain commit, push and draft-PR one. The worker runs on the roster's
+// read-only worker), with no `github` option. The worker runs on the roster's
 // subagent cap like every other subagent, not on eve's built-in default.
 export const CODE_BOTS = ["builder"];
 export const codeExtensionFiles = (bot) => ({
@@ -102,7 +106,6 @@ const { model, reasoning } = resolveSubagent(agents, subagentCap, ${JSON.stringi
 
 export default code({ worker: { model, reasoning } });
 `,
-  "extensions/git/extension.ts": `import git from "eve/extensions/git";\n\nexport default git({});\n`,
 });
 
 const KIT_VERSION = JSON.parse(readFileSync(new URL("./package.json", import.meta.url), "utf8")).version;
@@ -183,16 +186,15 @@ export function prepareDeployment(dir) {
     if (!file.endsWith("/agent.ts")) continue;
     const bot = dirname(join(dir, "agents", file));
     for (const stub of Object.keys({ ...MAIN_KIT_FILES, "memory/workspace.ts": 0, "memory/bot.ts": 0 })) if (!DEPLOYED_KIT_FILES.has(stub) && existsSync(join(bot, stub))) removeStub(bot, stub);
+    for (const stub of REMOVED_KIT_FILES) if (existsSync(join(bot, stub))) removeStub(bot, stub);
     // learning-review is not in MAIN_KIT_FILES, but also requires the host.
     if (existsSync(join(bot, "schedules/learning-review.ts"))) removeStub(bot, "schedules/learning-review.ts");
     const name = basename(dirname(bot));
     const code = CODE_BOTS.includes(name);
     writeFileSync(join(bot, "sandbox.ts"), code ? CODE_SANDBOX : VERCEL_SANDBOX);
-    if (code) {
-      for (const [stub, content] of Object.entries(codeExtensionFiles(name))) {
-        mkdirSync(dirname(join(bot, stub)), { recursive: true });
-        writeFileSync(join(bot, stub), content);
-      }
+    for (const [stub, content] of Object.entries({ ...gitExtensionFiles(), ...(code ? codeExtensionFiles(name) : {}) })) {
+      mkdirSync(dirname(join(bot, stub)), { recursive: true });
+      writeFileSync(join(bot, stub), content);
     }
   }
   const roster = resolved.agents;
@@ -207,10 +209,12 @@ export function prepareDeployment(dir) {
     }
     const agentFile = join(bot, "agent.ts");
     writeFileSync(agentFile, injectWorkflowWorld(readFileSync(agentFile, "utf8"), agentFile));
-    // Hosted bots reach the human's connected services (GitHub) through Vercel Kit,
-    // with the project's KIT_CONNECTOR; there is no host credential to fall back on.
-    mkdirSync(join(bot, "connections"), { recursive: true });
-    writeFileSync(join(bot, "connections", "vercel-kit.ts"), 'export { default } from "eve-hub/connections/vercel-kit";\n');
+    // GITHUB_PATH "kit": the human's connected services (GitHub) come through Vercel Kit,
+    // with the project's KIT_CONNECTOR. "gh" deploys no Kit connection.
+    if (GITHUB_PATH === "kit") {
+      mkdirSync(join(bot, "connections"), { recursive: true });
+      writeFileSync(join(bot, "connections", "vercel-kit.ts"), 'export { default } from "eve-hub/connections/vercel-kit";\n');
+    }
     mkdirSync(join(bot, "memory"), { recursive: true });
     const botDir = join(dir, "agents", name);
     writeFileSync(join(bot, "memory", "workspace.ts"), memoryProvider("workspace", readMemory(dir, { folders: domainFolders(botDomains(dir, botDir)) }).entries, "Standing decision", "workspace"));

package/stubs.mjs

@@ -1,6 +1,10 @@
 // eve finds tools, hooks, and channels by file (the tool name is the file
 // name), so each bot keeps a one-line stub per kit module. Bot file -> what it
 // is, and which kit module it re-exports (default: the same path).
+// Kit files whose module is gone. Sync retires them from every bot, and the
+// hosted deploy prunes them (the change-explainer: its skill and artifact tools).
+export const REMOVED_KIT_FILES = Object.freeze(["tools/artifact_publish.ts", "tools/artifact_status.ts", "tools/artifact_list.ts", "skills/change-explainer.ts"]);
+
 export const KIT_FILES = {
   "channels/eve.ts": ["Queued eve channel that resolves the registry's human as a user.", "channels/eve-roster-user.ts"],
   "hooks/sandbox.ts": ["Migrates legacy Docker sessions to the host sandbox."],
@@ -14,10 +18,6 @@ export const KIT_FILES = {
   "tools/update_thread.ts": ["Update a thread this bot is in: title, track, domain and summary."],
   "tools/list_threads.ts": ["Every workspace thread, from any session."],
   "tools/read_thread.ts": ["Read any workspace thread."],
-  "tools/artifact_publish.ts": ["Publish the next version of an artifact (a change explainer, ...) and show its card in the thread."],
-  "tools/artifact_status.ts": ["Whether an artifact this bot published still describes its source."],
-  "tools/artifact_list.ts": ["The artifacts this bot owns, or every artifact in the workspace."],
-  "skills/change-explainer.ts": ["The change-explainer skill (packages/explainer/skills/change-explainer/SKILL.md), which artifact_publish's change explainers follow."],
   "tools/post_message.ts": ["Post into an existing thread or a bot's DM; with `status`, report the thread's phase."],
 };
 

package/templates/workspace-protocol.md

@@ -30,7 +30,7 @@ When several bots work on one piece of work, coordinate through posts; don't rou
 2. When you push, tell the bots your change affects: the owner of a branch stacked on yours, and the reviewer. Use `@all` if you can't tell who. To reach a bot in another thread, use `post_message`. A branch has one owner; anyone else works on a branch stacked on top, or the owner hands it over.
 3. When the thread's phase changes (planning → working → reviewing → done; a review can send it back to working or planning), post a status: `post_message` into this thread with `status` set to the new phase, as the text at most 8 plain words on what is happening now ("Building the input-count fix", not "Plan approved by Rui; builder starting PR 1 (count only new input)": no names, no restating the phase, no parentheticals), and `metadata: { pr, sha }` when there are any (the PR URL and sha go there, never in the text). A status is a phase marker, not a report: test results, branch names and caveats go in a separate message. It wakes nobody unless you @-mention someone, so it doesn't replace your message. The workspace state shows the thread's current phase.
 
-   A reviewer records its verdict on the same kind of post: `verdict` (`ship`, `fix-first` or `rethink`) with `metadata: { pr, sha }`, the PR as its full GitHub URL (like every status post) and the sha you reviewed; the text is the one-line what-changed. Add `decisions`, a list of `{ question, options: [{ label, pickedBy? }] }` for what the human has to pick (`[]` if nothing; a `ship` without the list is refused). Publish the change explainer with `artifact_publish` at the first ship and reuse it on later passes; the Dash row says "no explainer" without one. CI and the PR's head come from GitHub, not from your post; don't state them as facts there.
+   A reviewer records its verdict on the same kind of post: `verdict` (`ship`, `fix-first` or `rethink`) with `metadata: { pr, sha }`, the PR as its full GitHub URL (like every status post) and the sha you reviewed; the text is the one-line what-changed. Add `decisions`, a list of `{ question, options: [{ label, pickedBy? }] }` for what the human has to pick (`[]` if nothing; a `ship` without the list is refused). CI and the PR's head come from GitHub, not from your post; don't state them as facts there.
 4. When you need another specialty or more help, ask main, or the bot whose role fits.
 
 On a conflict, read the push posts and ask the bot that pushed.

package/tools/post_message.js

@@ -3,7 +3,7 @@ import { z } from "zod";
 import { registryFetch } from "../registry-fetch.mjs";
 // Posts as you into a thread or DM, from whichever session you're in. With no
 // target it posts into the thread you're in, as part of the running turn: it
-// carries the turn's id and the images and artifact cards collected so far,
+// carries the turn's id and the images collected so far,
 // and if it's your turn's last act, your end-of-turn text isn't posted. Into
 // another thread, mentions wake bots exactly as your replies do; posting into
 // a bot's DM wakes that bot; archived threads refuse it. Your session in the

package/world.mjs

@@ -413,29 +413,10 @@ function reduceChild(member, { type, data = {}, meta: meta4 }, at = Date.parse(m
   return cardChanged || ["reasoning.appended", "message.appended", "message.completed", "actions.requested", "agent.started", "task.started", "task.settled", "action.result", "turn.completed", "session.waiting", "task.progress", "task.blocked", "task.updated"].includes(type);
 }
 
-// ../../registry/artifacts.mjs
-var ID = /^[a-z0-9][a-z0-9-]{0,39}:[\w.-]{1,40}$/;
-var STATUSES = /* @__PURE__ */ new Set(["fresh", "stale", "updating", "failed", "merged", "closed"]);
-var isStatus = (status) => STATUSES.has(status);
-var PROJECT = process.env.HUB_ARTIFACTS_PROJECT ?? "hub-artifacts";
-var DOMAIN = process.env.HUB_ARTIFACTS_DOMAIN ?? "playground-vercel.tools";
-var MAX_FILE_BYTES = 4 * 1024 * 1024;
-var validId = (id) => typeof id === "string" && ID.test(id);
-var SITE_CONFIG = new TextEncoder().encode(JSON.stringify({ headers: [{ source: "/(.*)", headers: [{ key: "x-robots-tag", value: "noindex" }, { key: "referrer-policy", value: "no-referrer" }] }] }));
-
 // ../../hosted-hub/src/store/db.ts
 import { createClient } from "@libsql/client";
 var s = (sql, ...args) => ({ sql, args });
 
-// ../../hosted-hub/src/store/artifacts.ts
-var ARTIFACT_READ = s("SELECT id, record FROM artifacts WHERE record IS NOT NULL");
-var ARTIFACT_LEASE_MS = 15 * 6e4;
-function statusStatement(checked) {
-  return s(`UPDATE artifacts SET record = json_patch(record, ?)
-    WHERE id = ? AND json_extract(record, '$.version') = ?`, JSON.stringify({ status: checked.status, ...checked.checkedAt ? { checkedAt: checked.checkedAt.slice(0, 40) } : {} }), checked.id, checked.version);
-}
-var cardsTo = (turnId2, messageId2) => s("UPDATE artifact_links SET message_id = ? WHERE turn_id = ? AND message_id IS NULL AND EXISTS (SELECT 1 FROM messages WHERE id = ?)", messageId2, turnId2, messageId2);
-
 // subagent-cap.mjs
 var DEFAULT_SUBAGENT_CAP = Object.freeze({
   model: "anthropic/claude-fable-5.1",
@@ -545,7 +526,7 @@ var TAG_FIELDS = ["project", "issueType"];
 var LABEL_FIELDS = [...TAG_FIELDS, "path"];
 
 // ../../lib/subscriptions.mjs
-var STATUSES2 = Object.freeze(["idle", "working", "waiting"]);
+var STATUSES = Object.freeze(["idle", "working", "waiting"]);
 
 // ../../hosted-hub/src/store/dash.ts
 var COLUMNS = { importance: "importance", importanceBy: "importance_by", lane: "lane", delay: "delay", reason: "reason", basis: "basis", deferred: "deferred", updatedAt: "classified_at", by: "classified_by" };
@@ -26609,8 +26590,6 @@ var Message = object2({
   event: maybe(MessageEvent),
   attachments: maybe(array2(Attachment)),
   taskCard: maybe(TaskCard),
-  /** Artifact ids its turn published; the cards read Snapshot.artifacts. */
-  artifacts: maybe(array2(string5())),
   hop: maybe(int2()),
   /** Handles (lowercase) that resolved to a person when this was posted, so an old @handle still links after a rename. */
   mentionAliases: maybe(map2("MentionAliases", string5())),
@@ -26850,7 +26829,6 @@ var DecisionPackage = object2({
   ci: string5(),
   /** The thread's latest verdict on this PR; `current`: it was given at the head (null: head unknown). `rounds`: non-ship verdicts so far. */
   review: maybe(object2({ verdict: string5(), sha: string5(), at: string5(), by: string5(), messageId: string5(), current: boolean5().nullable(), rounds: int2() })),
-  explainer: maybe(object2({ id: string5(), sha: string5().nullable(), at: string5(), url: maybe(string5()), behind: boolean5().nullable() })),
   /** The latest verdict is a ship at the current head: the input of the Ready lane. */
   ready: boolean5(),
   /** The agent that posted last before the verdict, the reviewer aside: who the human's approval is addressed to. */
@@ -26893,23 +26871,6 @@ var HubTrack = object2({
   closed: maybe(boolean5()),
   locked: maybe(boolean5())
 }).meta({ id: "HubTrack" });
-var ArtifactCard = object2({
-  title: string5(),
-  gist: maybe(string5()),
-  /** Change explainer: "repo #PR". */
-  subtitle: maybe(string5()),
-  /** Change explainer: "base..head". */
-  ref: maybe(string5())
-}).meta({ id: "ArtifactCard" });
-var Artifact = object2({
-  id: string5(),
-  version: int2(),
-  /** fresh | stale | updating | failed | merged | closed */
-  status: string5(),
-  card: ArtifactCard,
-  /** The stable link, moved to each new version; what a click opens. */
-  alias: maybe(string5())
-}).meta({ id: "Artifact" });
 var Snapshot = object2({
   type: literal2("state"),
   proto: maybe(int2()),
@@ -26947,9 +26908,7 @@ var Snapshot = object2({
   usageHoursSince: maybe(string5()),
   server: maybe(ServerID),
   /** Track summaries by path; the web client reads them (the app doesn't), the hosted hub sends them. */
-  pathSummaries: maybe(map2("PathSummaries", object2({ text: string5(), by: string5(), at: string5() }).meta({ id: "PathSummary" }))),
-  /** Published artifacts by id, each at its latest version. */
-  artifacts: maybe(map2("Artifacts", Artifact))
+  pathSummaries: maybe(map2("PathSummaries", object2({ text: string5(), by: string5(), at: string5() }).meta({ id: "PathSummary" })))
 }).meta({ id: "Snapshot" });
 
 // ../../hosted-hub/src/store/workspace-repo.ts
@@ -27104,28 +27063,10 @@ function fold(state, chunks, now = Date.now()) {
           break;
         }
         case "action.result": {
-          const tool = open3.activity.tools.find((t) => t.callId === data.result?.callId);
-          const toolName = data.result?.toolName ?? tool?.name;
-          const output2 = data.result?.output;
-          const artifact = output2 && typeof output2 === "object" && "artifact" in output2 ? output2.artifact : void 0;
-          if (data.status === "completed" && artifact && typeof artifact === "object" && "id" in artifact && typeof artifact.id === "string" && validId(artifact.id)) {
-            if (toolName === "artifact_publish")
-              stmts.push(s("INSERT OR IGNORE INTO artifact_links (turn_id,id) VALUES (?,?)", open3.id, artifact.id));
-            if (toolName === "artifact_status" && "version" in artifact && typeof artifact.version === "number" && "status" in artifact && typeof artifact.status === "string" && isStatus(artifact.status)) {
-              stmts.push(statusStatement({
-                id: artifact.id,
-                version: artifact.version,
-                status: artifact.status,
-                ..."checkedAt" in artifact && typeof artifact.checkedAt === "string" ? { checkedAt: artifact.checkedAt } : {}
-              }));
-              log("artifact.updated", { id: artifact.id });
-            }
-          }
           const ls = open3.lastStep, callId = data.result?.callId;
           if (!ls || !callId || ls.calls[callId] !== null) break;
           const postOutput = data.result?.output;
           ls.calls[callId] = data.status === "completed" && postOutput?.own === true;
-          if (ls.calls[callId] && typeof postOutput?.messageId === "string") stmts.push(cardsTo(open3.id, postOutput.messageId));
           touched.set(open3.id, open3);
           break;
         }
@@ -27139,10 +27080,9 @@ function fold(state, chunks, now = Date.now()) {
           if (open3.status !== "cancelling" && !lastActWasOwnPost(open3.lastStep)) {
             const messageId2 = derivedMessageId(open3.id);
             stmts.push(s(`INSERT OR IGNORE INTO messages (id, thread_id, author, author_kind, text, turn_id, created_at)
-              SELECT ?, ?, ?, 'agent', ?, ?, ? WHERE (? <> '' OR EXISTS (SELECT 1 FROM artifact_links WHERE turn_id = ? AND message_id IS NULL))
-              AND EXISTS (SELECT 1 FROM turns WHERE id = ? AND status NOT IN ('cancelling','cancelled') AND NOT (${REVOKED_TURN}))`, messageId2, session.thread, session.bot, text, open3.id, at, text, open3.id, open3.id));
+              SELECT ?, ?, ?, 'agent', ?, ?, ? WHERE ? <> ''
+              AND EXISTS (SELECT 1 FROM turns WHERE id = ? AND status NOT IN ('cancelling','cancelled') AND NOT (${REVOKED_TURN}))`, messageId2, session.thread, session.bot, text, open3.id, at, text, open3.id));
             log("message.created", { messageId: messageId2, author: session.bot, authorKind: "agent" }, IF_INSERTED);
-            stmts.push(cardsTo(open3.id, messageId2));
             const to = recipients(state.roster, text, { name: session.bot, kind: "agent" }, session.thread);
             stmts.push(...routingStatements(messageId2, session.thread, to, at));
             deliver.push(messageId2);

package/artifacts/core.mjs

@@ -1,73 +0,0 @@
-// Artifacts: a versioned static site a bot publishes and keeps current, such
-// as a change explainer. The core is type-agnostic. A type (artifacts/types/)
-// builds the site's files and its card from a source, in the bot's sandbox
-// (where the repo is), and says whether a published version is still current.
-//
-// The hub owns the record and the deploy (registry/artifacts.mjs). Publishing
-// a version:
-//   1. the type builds the site: { files: [{ file, data }], card, meta }
-//   2. each file goes to the hub: PUT /api/artifacts/:id/files/:sha
-//   3. POST /api/artifacts/:id/v/:n creates version n (the hub refuses with
-//      409 when another session got there first), deploys it and moves the
-//      stable link; its answer is the record.
-import { createHash } from "node:crypto";
-import changeExplainer from "./types/change-explainer.mjs";
-import { registryFetch } from "../registry-fetch.mjs";
-
-export const TYPES = { "change-explainer": changeExplainer };
-export const artifactId = (type, key) => `${type}:${key}`;
-const UPLOADS_AT_ONCE = 8;
-
-export function typeOf(name) {
-  const type = TYPES[name];
-  if (!type) throw new Error(`unknown artifact type ${JSON.stringify(name)} (known: ${Object.keys(TYPES).join(", ")})`);
-  return type;
-}
-
-async function hub(path, init, fetchImpl) {
-  const res = await registryFetch(path, init, { fetchImpl });
-  const body = await res.json().catch(() => ({}));
-  if (!res.ok) throw new Error(`${init?.method ?? "GET"} ${path.split("?")[0]}: ${body.error ?? res.status}`);
-  return body;
-}
-
-// The hub's record of an artifact, or null when it has none.
-export async function registryRecord(id, fetchImpl = fetch) {
-  const res = await registryFetch(`/api/artifacts/${encodeURIComponent(id)}`, {}, { fetchImpl });
-  if (res.status === 404) return null;
-  if (!res.ok) throw new Error(`GET /api/artifacts/${id}: ${(await res.json().catch(() => ({}))).error ?? res.status}`);
-  return res.json();
-}
-
-/**
- * Publishes the next version of `type:key` from `source` and returns the
- * hub's record. `sandbox` is the session's (ctx.getSandbox()).
- */
-export async function publish({ type: typeName, key, source }, { sandbox, sessionId, fetch: fetchImpl = fetch }) {
-  const type = typeOf(typeName);
-  const id = artifactId(typeName, key);
-  const at = `/api/artifacts/${encodeURIComponent(id)}`;
-  const prior = await registryRecord(id, fetchImpl);
-  const version = (prior?.version ?? 0) + 1;
-  const built = await type.build(source, { sandbox, id, version });
-  const files = built.files.map(({ file, data }) => ({ file, data, sha: createHash("sha1").update(data).digest("hex"), size: data.length }));
-  const unique = [...new Map(files.map((f) => [f.sha, f])).values()];
-  for (let i = 0; i < unique.length; i += UPLOADS_AT_ONCE) {
-    await Promise.all(unique.slice(i, i + UPLOADS_AT_ONCE).map((f) =>
-      // A file body is the bytes alone, so the session rides in the header.
-      hub(`${at}/files/${f.sha}`, { method: "PUT", headers: { "x-hub-session": sessionId, "content-type": "application/octet-stream" }, body: f.data, signal: AbortSignal.timeout(120_000) }, fetchImpl),
-    ));
-  }
-  return hub(`${at}/v/${version}`, {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    body: JSON.stringify({ sessionId, type: typeName, key, source, card: built.card, meta: built.meta ?? {}, files: files.map(({ file, sha, size }) => ({ file, sha, size })) }),
-    signal: AbortSignal.timeout(600_000),
-  }, fetchImpl);
-}
-
-/** What the type says about a published record: { status, reasons[] }. */
-export async function status(record, { sandbox }) {
-  const type = typeOf(record.type);
-  return type.status ? type.status(record, { sandbox }) : { status: record.status ?? "fresh", reasons: [] };
-}

package/artifacts/types/change-explainer.mjs

@@ -1,83 +0,0 @@
-// The change-explainer artifact type: a narrated walkthrough of a PR or a
-// stack (packages/explainer), built from a fixture (fixture.json,
-// overview.json, sequence.json) and a read-only checkout of the repo.
-//
-// source: { fixture: <fixture dir>, repo: <git checkout>, scip?: <index.scip>, branch?: <ref the change lives on> }
-import { randomUUID } from "node:crypto";
-import { posix as path } from "node:path";
-import { appFiles, scripts } from "./explainer-assets.gen.mjs";
-
-const quote = (value) => "'" + String(value).replaceAll("'", "'\\''") + "'";
-async function run(sandbox, args) {
-  const result = await sandbox.run({ command: args.map(quote).join(" ") });
-  if (result.exitCode !== 0) throw new Error(`${args[0]} failed: ${result.stderr || result.stdout}`);
-  return result.stdout.trim();
-}
-const git = (sandbox, repo, ...args) => run(sandbox, ["git", "-C", repo, ...args]);
-const readJson = async (sandbox, file) => JSON.parse(await sandbox.readTextFile({ path: file }));
-
-export function firstSentence(text = "") {
-  const sentence = String(text).trim().split(/(?<=[.!?])\s+(?=[A-Z"'`(])/, 1)[0] ?? "";
-  return sentence.length > 220 ? `${sentence.slice(0, 219).replace(/\s+\S*$/, "")}…` : sentence;
-}
-
-// Card fields from the fixture: what the change is, and which commits. A
-// change with no PRs (a local repo) names its branch instead.
-export function cardOf(fixture, overview, branch) {
-  const short = (sha) => String(sha ?? "").slice(0, 9);
-  const prs = (fixture.prs ?? []).filter((p) => p.number !== undefined).map((p) => `#${p.number}`);
-  return {
-    title: fixture.title ?? fixture.id,
-    gist: firstSentence(overview?.thesis),
-    subtitle: [fixture.repo, ...(prs.length ? prs : [branch])].filter(Boolean).join(" "),
-    ref: `${short(fixture.base)}..${short(fixture.head)}`,
-  };
-}
-
-async function build(source, { sandbox }) {
-  const work = `/tmp/hub-explainer/${randomUUID()}`;
-  try {
-    await run(sandbox, ["mkdir", "-p", work]);
-    for (const [name, text] of Object.entries(scripts)) await sandbox.writeTextFile({ path: `${work}/${name}.mjs`, content: text });
-    const fixture = await readJson(sandbox, path.join(source.fixture, "fixture.json"));
-    await run(sandbox, ["node", `${work}/lint-fixture.mjs`, source.fixture]);
-    const data = `${work}/data`;
-    await run(sandbox, ["node", `${work}/build-data.mjs`, "--fixture", source.fixture, "--repo", source.repo, ...(source.scip ? ["--scip", source.scip] : []), "--out", data]);
-    const overview = await readJson(sandbox, path.join(source.fixture, "overview.json"));
-    const [base, head] = await Promise.all([git(sandbox, source.repo, "rev-parse", `${fixture.base}^{commit}`), git(sandbox, source.repo, "rev-parse", `${fixture.head}^{commit}`)]);
-    const files = appFiles.map(({ file, base64 }) => {
-      let bytes = Buffer.from(base64, "base64");
-      if (file === "index.html") bytes = Buffer.from(bytes.toString("utf8").replace("</title>", `</title>\n    <meta name="explainer-fixture" content="${fixture.id.replace(/[^\w.-]/g, "")}" />`));
-      return { file, data: bytes };
-    });
-    const listing = await run(sandbox, ["find", data, "-type", "f", "-print0"]);
-    for (const file of listing.split("\0").filter(Boolean)) files.push({ file: `data/${file.slice(data.length + 1)}`, data: await sandbox.readBinaryFile({ path: file }) });
-    return { files, card: cardOf(fixture, overview, source.branch), meta: { repo: fixture.repo, base, head, prs: (fixture.prs ?? []).flatMap((p) => p.number ?? []) } };
-  } finally {
-    await sandbox.removePath({ path: work, recursive: true, force: true });
-  }
-}
-
-// Whether the published version still describes the change. This checks the
-// pinned range against the fixture and, with source.branch, the branch head;
-// which parts went stale (snippet hashes, re-anchoring) is the next step.
-async function status(record, { sandbox }) {
-  const { source = {}, meta = {} } = record;
-  const reasons = [];
-  if (record.status === "merged" || record.status === "closed") return { status: record.status, reasons };
-  try {
-    const fixture = await readJson(sandbox, path.join(source.fixture, "fixture.json"));
-    const [base, head] = await Promise.all([git(sandbox, source.repo, "rev-parse", `${fixture.base}^{commit}`), git(sandbox, source.repo, "rev-parse", `${fixture.head}^{commit}`)]);
-    if (base !== meta.base) reasons.push(`the fixture's base is now ${base.slice(0, 9)} (published at ${String(meta.base).slice(0, 9)})`);
-    if (head !== meta.head) reasons.push(`the fixture's head is now ${head.slice(0, 9)} (published at ${String(meta.head).slice(0, 9)})`);
-    if (source.branch) {
-      const tip = await git(sandbox, source.repo, "rev-parse", `${source.branch}^{commit}`);
-      if (tip !== meta.head) reasons.push(`${source.branch} is at ${tip.slice(0, 9)}, ahead of the published head ${String(meta.head).slice(0, 9)}`);
-    }
-  } catch (error) {
-    reasons.push(`couldn't read the source: ${error.message}`);
-  }
-  return { status: reasons.length ? "stale" : "fresh", reasons };
-}
-
-export default { name: "change-explainer", build, status };