eve-hub 0.6.9 → 0.6.11

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # eve-hub
 
+## 0.6.11
+
+### Patch Changes
+
+- Hosted main carries the onboarding-profile skill and an `onboarding_scripts` tool: after sign-in it reads the user's Slack (inside Kit) and GitHub, posts a profile, and opens a workspace PR with suggested schedules. A refused Slack scope is reported by name instead of finishing with fewer facts.
+
+## 0.6.10
+
+### Patch Changes
+
+- The change-explainer is gone: its skill and the `artifact_publish`, `artifact_status` and `artifact_list` tools are no longer kit files (sync and the hosted deploy remove them from every bot), and the protocol no longer tells reviewers to publish an explainer.
+
 ## 0.6.9
 
 ### Patch Changes

package/onboarding/SKILL.md

@@ -0,0 +1,97 @@
+---
+name: onboarding-profile
+description: "Right after sign-in: ask for the Kit access you need, then work out who the user is and what to focus on from their recent Slack and GitHub, and draft schedules that keep them on track. Reads only; the one write is a pull request the user approves by merging."
+license: MIT
+---
+
+# Profile the user from Slack and GitHub
+
+Two scripts gather facts (GitHub in your sandbox, Slack inside Kit); you write the profile and the schedule drafts from those facts alone. Nothing is posted to Slack and nothing is committed; the only write is the pull request in step 6, which the user approves by merging. The user sees one message from you at the end (step 7), not one per step. If a step cannot finish, that message says which one and what the user must do; never write the profile as if every source had been read.
+
+## 1. Ask for Kit access, once
+
+Kit's tools are `request_access`, `request_status` and `execute`. Hosted, you reach them through the `vercel-kit` connection: `connection_execute({ connection: "vercel-kit", tool: "request_access", input: { ... } })`, and the same shape for the others. Everywhere below, "call `request_access`" means that.
+
+Slack goes through the user's Kit connection. Before any fetch, ask for everything the run reads in one request:
+
+```
+request_access({ service: "slack", reads: true, reason: "Read your recent channel messages, mentions and threads to write your onboarding profile" })
+```
+
+- `approved`: go on.
+- `pending` (or `connection_required`): tell the user, in one sentence, that Slack access is waiting, with the `approveUrl`; then `request_status({ request })` until they decide. Do not start step 3 before it is approved. If they decline, the final message says the Slack half was not read.
+
+GitHub does not use Kit: it uses `gh` in your sandbox (step 2). If `gh auth status` fails, the final message says GitHub was not read.
+
+## 2. GitHub facts
+
+Call the `onboarding_scripts` tool once: it writes the skill's scripts into your sandbox at `/tmp/onboarding-skill/` and returns that directory.
+
+```sh
+node /tmp/onboarding-skill/github-facts.mjs > /tmp/onboarding-skill/github-facts.json
+```
+
+It prints one JSON document: `counts` (merged PRs, open PRs, review requests, assigned issues, mentions never replied to, PRs reviewed), `repos` (merged, reviewed, open and lines changed per repo), item lists (`merged`, `open`, `reviewRequested`, `assignedIssues`, `unansweredMentions`; `total` is the full count, `items` the newest 150), `teams`, and `codeowners` lines naming the user or their teams. Open PRs carry `draft`, `reviewDecision`, `mergeable` and `checks`. `author:@me` includes PRs the user's bots open under their login. `unreadable` lists a source that could not be read.
+
+## 3. Slack facts
+
+Run the script in "The Slack script" below with Kit's `execute`: pass it as the script, unchanged. It runs inside Kit, so no raw message reaches you; it returns one JSON document in about 10 seconds.
+
+- A `ratelimited` error means Slack's search limit (about 20 a minute; the script makes at most 19). Wait 70 seconds (`sleep 70`) and run it again unchanged, up to five times.
+- A `suspended` result whose output says `consent_required` is a pause, not an error: tell the user in one sentence that the Slack read is waiting, with its `approveUrl`; `request_status({ request })` until they decide; then `execute({ run })` continues the same run (settled steps are not repeated).
+- An `output` with `refused` means Slack answered `missing_scope` (or another refusal) to a call, so no facts were read: `refused.needed` names the scope the user's Slack connection lacks (`refused.provided` what it has). Do not continue. Call `request_access({ service: "slack", capability: "search_messages", reason })`: if it returns an `approveUrl`, give it to the user; otherwise tell them to reconnect Slack in Kit allowing `refused.needed`. The final message says the Slack half was not read and names the scope.
+- Any other error goes to the user in the final message. Never continue with fewer facts, and never retry around a refusal.
+- Save the run's `output` as `/tmp/onboarding-skill/slack-facts.json` (the checker reads it).
+- `window`: the last 30 days. Slack search allows 15 pages of 100 here, so a very active account is covered only back to `own.oldest` (`newestOnly: true`); state that window in the profile.
+- `own`: messages per channel, thread replies, recent snippets. `mentions`: `replied` means the user posted later in the same thread; `unanswered` means they did not. A mention older than what was read with no reply among it (`notJudged`) is unknown, not unanswered. `mentions.capped` means the search found more mentions (`searchTotal`) than the three pages read: say so in "Could not tell". Reactions are not read (the Slack grant has no `reactions:read`): say so in "Could not tell". `memberships`: channels the user is in.
+- DMs and group DMs are never searched. Every list item carries a permalink (`url`); a snippet that looked like a secret is `[withheld]`.
+
+## 4. Write the profile and drafts
+
+Write the profile to `/tmp/onboarding-skill/profile.md`. It names the user's repos and colleagues, so it is posted only in this thread and never committed.
+
+Answer, in the user's terms:
+
+- What they have shipped, what they own, what they are responsible for.
+- What people tag them for, and what they write about.
+- What they have missed: unanswered mentions, requested reviews, stale or conflicted PRs.
+- Which open GitHub work-streams to close (stale, conflicted, superseded) and which to focus on.
+
+Rules:
+
+- Judge; the scripts only counted. No scoring formula and no thresholds from code: say why in a sentence.
+- Every list item cites at least one permalink that appears in the facts, and no URL appears that isn't in the facts. State counts as the facts give them, with the window.
+- Don't quote messages beyond the snippets, and don't name people beyond what a claim needs.
+- Add a "Could not tell" section: every `unreadable` source, `notJudged` mentions, that reactions were not read, the Slack window, a Kit grant the user declined.
+
+For each recurring need you found (a morning pass over unanswered mentions, a weekly stale-PR pass), write one draft to `/tmp/onboarding-skill/schedules/<bot>/<id>.md` for an existing bot of your workspace:
+
+```md
+---
+cron: "0 9 * * 1-5"
+---
+
+The prompt the bot runs.
+```
+
+`cron` is five fields in UTC on a hosted deploy. Each draft says in its prompt which facts it reads and what it reports.
+
+## 5. Check
+
+```sh
+node /tmp/onboarding-skill/check-report.mjs --profile /tmp/onboarding-skill/profile.md --facts /tmp/onboarding-skill/github-facts.json /tmp/onboarding-skill/slack-facts.json
+```
+
+Fix every line it prints and rerun until it prints nothing. Then delete the two facts files.
+
+## 6. Open the pull request, if the workspace has a repo
+
+When the workspace is backed by a GitHub repo, open one PR on it that adds only the schedule drafts, as `agents/<bot>/agent/schedules/<id>.md`, and nothing from the profile (`gh pr create`). The user merging it is their approval; the deploy that follows is what makes the schedules run. The PR's checks include the deploy's build, which rejects a bad cron or a bot that does not exist: watch them (`gh pr checks`), fix the draft and push again until they pass, and say in the message if they do not. Without a repo the drafts stay in the thread and the message says so.
+
+## 7. Post one message to the user
+
+In this thread: the profile, the three things to act on first, the schedule drafts (bot, cadence, what each does) with the PR link, and anything you could not read with what they must do about it. The sandbox setup is not part of this skill: say that it was not proposed because no Mac runner is connected to read the laptop. Only the schedule files ever leave the thread.
+
+## The Slack script
+
+<!-- script:slack-facts.callscript.js -->

package/onboarding/check-report.mjs

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+// Checks the model-written profile against the facts it came from:
+//   --profile p.md --facts a.json [b.json...]   every URL in the profile is in the facts, and every list item cites one
+// Exits 1 and prints one line per problem.
+import { readFileSync } from "node:fs";
+import { pathToFileURL } from "node:url";
+
+const URL_RE = /https?:\/\/[^\s)>\]"'`]+/g;
+const trimUrl = (u) => u.replace(/[.,;:!?]+$/, "");
+
+export function factUrls(facts) {
+  const urls = new Set();
+  const walk = (v) => {
+    if (typeof v === "string") { if (/^https?:\/\//.test(v)) urls.add(v); }
+    else if (v && typeof v === "object") Object.values(v).forEach(walk);
+  };
+  facts.forEach(walk);
+  return urls;
+}
+
+export function citationProblems(profile, facts) {
+  const known = factUrls(facts);
+  const problems = [];
+  profile.split("\n").forEach((line, i) => {
+    const urls = (line.match(URL_RE) ?? []).map(trimUrl);
+    for (const u of urls) if (!known.has(u)) problems.push(`line ${i + 1}: ${u} is not in the facts`);
+    if (/^\s*(?:[-*]|\d+\.)\s/.test(line) && !urls.length) problems.push(`line ${i + 1}: list item cites no permalink: ${line.trim().slice(0, 60)}`);
+  });
+  return problems;
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
+  const args = process.argv.slice(2);
+  const after = (flag) => { const i = args.indexOf(flag); if (i < 0) return []; const out = []; for (let j = i + 1; j < args.length && !args[j].startsWith("--"); j++) out.push(args[j]); return out; };
+  const problems = [];
+  const [profile] = after("--profile");
+  if (profile) problems.push(...citationProblems(readFileSync(profile, "utf8"), after("--facts").map((f) => JSON.parse(readFileSync(f, "utf8")))));
+  problems.forEach((p) => console.log(p));
+  process.exit(problems.length ? 1 : 0);
+}

package/onboarding/files.gen.mjs

@@ -0,0 +1,2 @@
+// Generated by scripts/build-onboarding.mjs. Do not edit.
+export default {"github-facts.mjs":"#!/usr/bin/env node\n// Facts about the signed-in `gh` user's last 90 days on GitHub, as one JSON document on stdout.\n// Counts, titles (<=200 chars), URLs and CODEOWNERS lines only; no judgment: the model reads this and profiles.\nimport { execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { pathToFileURL } from \"node:url\";\nimport { snippet } from \"./redact.mjs\";\n\nconst exec = promisify(execFile);\nconst DAYS = 90;\nconst LIST_CAP = 150;\nconst CODEOWNERS_REPOS = 10;\nconst STATEFUL = new Set([\"open\", \"reviewRequested\"]);\nconst CODEOWNERS_PATHS = [\".github/CODEOWNERS\", \"CODEOWNERS\", \"docs/CODEOWNERS\"];\n\nconst BASE = `\n  __typename\n  ... on PullRequest { number title url createdAt updatedAt mergedAt isDraft additions deletions changedFiles repository { nameWithOwner } author { login } @STATE@ }\n  ... on Issue { number title url createdAt updatedAt repository { nameWithOwner } author { login } }`;\nconst STATE = \"reviewDecision mergeable reviewRequests { totalCount } commits(last: 1) { nodes { commit { statusCheckRollup { state } } } }\";\nconst searchQuery = (withState) => `query($q: String!, $endCursor: String) {\n  search(query: $q, type: ISSUE, first: 50, after: $endCursor) {\n    issueCount\n    pageInfo { hasNextPage endCursor }\n    nodes {${BASE.replace(\"@STATE@\", withState ? STATE : \"\")}}\n  }\n}`;\n\nexport const realRun = async (args) => (await exec(\"gh\", args, { maxBuffer: 1 << 28 })).stdout;\n\nconst ATTEMPTS = 3;\n\nasync function search(run, q, withState = false) {\n  const args = [\"api\", \"graphql\", \"--paginate\", \"--slurp\", \"-f\", `query=${searchQuery(withState)}`, \"-f\", `q=${q}`];\n  let out;\n  for (let attempt = 1; ; attempt++) {\n    try {\n      out = await run(args);\n      break;\n    } catch (e) {\n      if (attempt === ATTEMPTS || !/HTTP 50\\d/.test(e.stderr ?? \"\")) throw e;\n      await new Promise((r) => setTimeout(r, 1000 * attempt + Math.random() * 1000));\n    }\n  }\n  const pages = JSON.parse(out);\n  const nodes = pages.flatMap((p) => p.data.search.nodes).filter((n) => n?.url);\n  return { total: pages[0].data.search.issueCount, nodes };\n}\n\nconst item = (n) => ({\n  repo: n.repository.nameWithOwner,\n  number: n.number,\n  type: n.__typename,\n  title: snippet(n.title),\n  url: n.url,\n  author: n.author?.login ?? null,\n  createdAt: n.createdAt,\n  updatedAt: n.updatedAt,\n  ...(n.__typename === \"PullRequest\"\n    ? {\n        mergedAt: n.mergedAt,\n        draft: n.isDraft,\n        additions: n.additions,\n        deletions: n.deletions,\n        changedFiles: n.changedFiles,\n        reviewDecision: n.reviewDecision ?? null,\n        mergeable: n.mergeable ?? null,\n        checks: n.commits?.nodes?.[0]?.commit?.statusCheckRollup?.state ?? null,\n        reviewRequests: n.reviewRequests?.totalCount ?? null,\n      }\n    : {}),\n});\n\nconst byRecent = (a, b) => (b.mergedAt ?? b.updatedAt).localeCompare(a.mergedAt ?? a.updatedAt);\nconst listed = ({ total, nodes }) => ({ total, listed: Math.min(nodes.length, LIST_CAP), items: nodes.map(item).sort(byRecent).slice(0, LIST_CAP) });\n\nfunction perRepo(sets) {\n  const repos = {};\n  for (const [key, nodes] of Object.entries(sets)) {\n    for (const n of nodes) {\n      const r = (repos[n.repository.nameWithOwner] ??= { repo: n.repository.nameWithOwner, merged: 0, reviewed: 0, open: 0, additions: 0, deletions: 0 });\n      r[key] += 1;\n      if (key === \"merged\") { r.additions += n.additions ?? 0; r.deletions += n.deletions ?? 0; }\n    }\n  }\n  return Object.values(repos).sort((a, b) => b.merged + b.reviewed + b.open - (a.merged + a.reviewed + a.open));\n}\n\nasync function codeownersLines(run, repo, login, teams) {\n  const owners = [`@${login}`, ...teams.map((t) => `@${t}`)].map((o) => o.toLowerCase());\n  for (const path of CODEOWNERS_PATHS) {\n    let text;\n    try {\n      text = await run([\"api\", `repos/${repo}/contents/${path}`, \"-H\", \"Accept: application/vnd.github.raw+json\"]);\n    } catch (e) {\n      if (/HTTP 404/.test(e.stderr ?? e.message)) continue;\n      throw e;\n    }\n    return text.split(\"\\n\")\n      .map((l) => l.trim())\n      .filter((l) => l && !l.startsWith(\"#\") && l.toLowerCase().split(/\\s+/).some((tok) => owners.includes(tok)))\n      .map((line) => ({ repo, path, line: snippet(line) }));\n  }\n  return [];\n}\n\nexport async function collect({ run = realRun, now = new Date() } = {}) {\n  const since = new Date(now.getTime() - DAYS * 86400_000).toISOString().slice(0, 10);\n  const unreadable = [];\n  const attempt = async (what, fn, fallback) => {\n    try {\n      return await fn();\n    } catch (e) {\n      unreadable.push({ what, error: snippet(e.stderr || e.message) });\n      return fallback;\n    }\n  };\n  const empty = { total: 0, nodes: [] };\n  const login = JSON.parse(await run([\"api\", \"user\"])).login;\n  const teams = await attempt(\"user teams\", async () => (await run([\"api\", \"user/teams\", \"--paginate\", \"--jq\", '.[] | .organization.login + \"/\" + .slug'])).split(\"\\n\").filter(Boolean), []);\n  const q = {\n    merged: `is:pr author:@me is:merged merged:>=${since} archived:false`,\n    open: \"is:pr author:@me is:open archived:false\",\n    reviewRequested: \"is:pr is:open review-requested:@me archived:false\",\n    assignedIssues: \"is:issue is:open assignee:@me archived:false\",\n    unansweredMentions: `is:open mentions:@me -commenter:@me -author:@me updated:>=${since} archived:false`,\n    reviewed: `is:pr reviewed-by:@me -author:@me merged:>=${since} archived:false`,\n  };\n  const got = Object.fromEntries(await Promise.all(Object.entries(q).map(async ([k, v]) => [k, await attempt(`search ${k}`, () => search(run, v, STATEFUL.has(k)), empty)])));\n  const repos = perRepo({ merged: got.merged.nodes, reviewed: got.reviewed.nodes, open: got.open.nodes });\n  const owned = (await Promise.all(repos.slice(0, CODEOWNERS_REPOS).map((r) => attempt(`CODEOWNERS ${r.repo}`, () => codeownersLines(run, r.repo, login, teams), [])))).flat();\n  return {\n    login,\n    window: { since, until: now.toISOString().slice(0, 10), days: DAYS },\n    counts: Object.fromEntries(Object.entries(got).map(([k, v]) => [k, v.total])),\n    repos: repos.slice(0, 30),\n    merged: listed(got.merged),\n    open: listed(got.open),\n    reviewRequested: listed(got.reviewRequested),\n    assignedIssues: listed(got.assignedIssues),\n    unansweredMentions: listed(got.unansweredMentions),\n    teams,\n    codeowners: owned,\n    unreadable,\n  };\n}\n\nif (import.meta.url === pathToFileURL(process.argv[1] ?? \"\").href) {\n  process.stdout.write(JSON.stringify(await collect(), null, 1) + \"\\n\");\n}\n","redact.mjs":"const TOKEN = /\\b(?:xox[a-z]-[A-Za-z0-9-]{8,}|sk-[A-Za-z0-9_-]{16,}|gh[pousr]_[A-Za-z0-9]{16,}|github_pat_[A-Za-z0-9_]{16,}|vck_[A-Za-z0-9]{16,}|AKIA[A-Z0-9]{16}|eyJ[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]*)/g;\n\nexport const MAX_TEXT = 200;\n\nexport function snippet(text) {\n  const flat = String(text ?? \"\").replace(/\\s+/g, \" \").trim().replace(TOKEN, \"[redacted]\");\n  return flat.length > MAX_TEXT ? flat.slice(0, MAX_TEXT - 1) + \"…\" : flat;\n}\n","check-report.mjs":"#!/usr/bin/env node\n// Checks the model-written profile against the facts it came from:\n//   --profile p.md --facts a.json [b.json...]   every URL in the profile is in the facts, and every list item cites one\n// Exits 1 and prints one line per problem.\nimport { readFileSync } from \"node:fs\";\nimport { pathToFileURL } from \"node:url\";\n\nconst URL_RE = /https?:\\/\\/[^\\s)>\\]\"'`]+/g;\nconst trimUrl = (u) => u.replace(/[.,;:!?]+$/, \"\");\n\nexport function factUrls(facts) {\n  const urls = new Set();\n  const walk = (v) => {\n    if (typeof v === \"string\") { if (/^https?:\\/\\//.test(v)) urls.add(v); }\n    else if (v && typeof v === \"object\") Object.values(v).forEach(walk);\n  };\n  facts.forEach(walk);\n  return urls;\n}\n\nexport function citationProblems(profile, facts) {\n  const known = factUrls(facts);\n  const problems = [];\n  profile.split(\"\\n\").forEach((line, i) => {\n    const urls = (line.match(URL_RE) ?? []).map(trimUrl);\n    for (const u of urls) if (!known.has(u)) problems.push(`line ${i + 1}: ${u} is not in the facts`);\n    if (/^\\s*(?:[-*]|\\d+\\.)\\s/.test(line) && !urls.length) problems.push(`line ${i + 1}: list item cites no permalink: ${line.trim().slice(0, 60)}`);\n  });\n  return problems;\n}\n\nif (import.meta.url === pathToFileURL(process.argv[1] ?? \"\").href) {\n  const args = process.argv.slice(2);\n  const after = (flag) => { const i = args.indexOf(flag); if (i < 0) return []; const out = []; for (let j = i + 1; j < args.length && !args[j].startsWith(\"--\"); j++) out.push(args[j]); return out; };\n  const problems = [];\n  const [profile] = after(\"--profile\");\n  if (profile) problems.push(...citationProblems(readFileSync(profile, \"utf8\"), after(\"--facts\").map((f) => JSON.parse(readFileSync(f, \"utf8\")))));\n  problems.forEach((p) => console.log(p));\n  process.exit(problems.length ? 1 : 0);\n}\n"};

package/onboarding/github-facts.mjs

@@ -0,0 +1,150 @@
+#!/usr/bin/env node
+// Facts about the signed-in `gh` user's last 90 days on GitHub, as one JSON document on stdout.
+// Counts, titles (<=200 chars), URLs and CODEOWNERS lines only; no judgment: the model reads this and profiles.
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { pathToFileURL } from "node:url";
+import { snippet } from "./redact.mjs";
+
+const exec = promisify(execFile);
+const DAYS = 90;
+const LIST_CAP = 150;
+const CODEOWNERS_REPOS = 10;
+const STATEFUL = new Set(["open", "reviewRequested"]);
+const CODEOWNERS_PATHS = [".github/CODEOWNERS", "CODEOWNERS", "docs/CODEOWNERS"];
+
+const BASE = `
+  __typename
+  ... on PullRequest { number title url createdAt updatedAt mergedAt isDraft additions deletions changedFiles repository { nameWithOwner } author { login } @STATE@ }
+  ... on Issue { number title url createdAt updatedAt repository { nameWithOwner } author { login } }`;
+const STATE = "reviewDecision mergeable reviewRequests { totalCount } commits(last: 1) { nodes { commit { statusCheckRollup { state } } } }";
+const searchQuery = (withState) => `query($q: String!, $endCursor: String) {
+  search(query: $q, type: ISSUE, first: 50, after: $endCursor) {
+    issueCount
+    pageInfo { hasNextPage endCursor }
+    nodes {${BASE.replace("@STATE@", withState ? STATE : "")}}
+  }
+}`;
+
+export const realRun = async (args) => (await exec("gh", args, { maxBuffer: 1 << 28 })).stdout;
+
+const ATTEMPTS = 3;
+
+async function search(run, q, withState = false) {
+  const args = ["api", "graphql", "--paginate", "--slurp", "-f", `query=${searchQuery(withState)}`, "-f", `q=${q}`];
+  let out;
+  for (let attempt = 1; ; attempt++) {
+    try {
+      out = await run(args);
+      break;
+    } catch (e) {
+      if (attempt === ATTEMPTS || !/HTTP 50\d/.test(e.stderr ?? "")) throw e;
+      await new Promise((r) => setTimeout(r, 1000 * attempt + Math.random() * 1000));
+    }
+  }
+  const pages = JSON.parse(out);
+  const nodes = pages.flatMap((p) => p.data.search.nodes).filter((n) => n?.url);
+  return { total: pages[0].data.search.issueCount, nodes };
+}
+
+const item = (n) => ({
+  repo: n.repository.nameWithOwner,
+  number: n.number,
+  type: n.__typename,
+  title: snippet(n.title),
+  url: n.url,
+  author: n.author?.login ?? null,
+  createdAt: n.createdAt,
+  updatedAt: n.updatedAt,
+  ...(n.__typename === "PullRequest"
+    ? {
+        mergedAt: n.mergedAt,
+        draft: n.isDraft,
+        additions: n.additions,
+        deletions: n.deletions,
+        changedFiles: n.changedFiles,
+        reviewDecision: n.reviewDecision ?? null,
+        mergeable: n.mergeable ?? null,
+        checks: n.commits?.nodes?.[0]?.commit?.statusCheckRollup?.state ?? null,
+        reviewRequests: n.reviewRequests?.totalCount ?? null,
+      }
+    : {}),
+});
+
+const byRecent = (a, b) => (b.mergedAt ?? b.updatedAt).localeCompare(a.mergedAt ?? a.updatedAt);
+const listed = ({ total, nodes }) => ({ total, listed: Math.min(nodes.length, LIST_CAP), items: nodes.map(item).sort(byRecent).slice(0, LIST_CAP) });
+
+function perRepo(sets) {
+  const repos = {};
+  for (const [key, nodes] of Object.entries(sets)) {
+    for (const n of nodes) {
+      const r = (repos[n.repository.nameWithOwner] ??= { repo: n.repository.nameWithOwner, merged: 0, reviewed: 0, open: 0, additions: 0, deletions: 0 });
+      r[key] += 1;
+      if (key === "merged") { r.additions += n.additions ?? 0; r.deletions += n.deletions ?? 0; }
+    }
+  }
+  return Object.values(repos).sort((a, b) => b.merged + b.reviewed + b.open - (a.merged + a.reviewed + a.open));
+}
+
+async function codeownersLines(run, repo, login, teams) {
+  const owners = [`@${login}`, ...teams.map((t) => `@${t}`)].map((o) => o.toLowerCase());
+  for (const path of CODEOWNERS_PATHS) {
+    let text;
+    try {
+      text = await run(["api", `repos/${repo}/contents/${path}`, "-H", "Accept: application/vnd.github.raw+json"]);
+    } catch (e) {
+      if (/HTTP 404/.test(e.stderr ?? e.message)) continue;
+      throw e;
+    }
+    return text.split("\n")
+      .map((l) => l.trim())
+      .filter((l) => l && !l.startsWith("#") && l.toLowerCase().split(/\s+/).some((tok) => owners.includes(tok)))
+      .map((line) => ({ repo, path, line: snippet(line) }));
+  }
+  return [];
+}
+
+export async function collect({ run = realRun, now = new Date() } = {}) {
+  const since = new Date(now.getTime() - DAYS * 86400_000).toISOString().slice(0, 10);
+  const unreadable = [];
+  const attempt = async (what, fn, fallback) => {
+    try {
+      return await fn();
+    } catch (e) {
+      unreadable.push({ what, error: snippet(e.stderr || e.message) });
+      return fallback;
+    }
+  };
+  const empty = { total: 0, nodes: [] };
+  const login = JSON.parse(await run(["api", "user"])).login;
+  const teams = await attempt("user teams", async () => (await run(["api", "user/teams", "--paginate", "--jq", '.[] | .organization.login + "/" + .slug'])).split("\n").filter(Boolean), []);
+  const q = {
+    merged: `is:pr author:@me is:merged merged:>=${since} archived:false`,
+    open: "is:pr author:@me is:open archived:false",
+    reviewRequested: "is:pr is:open review-requested:@me archived:false",
+    assignedIssues: "is:issue is:open assignee:@me archived:false",
+    unansweredMentions: `is:open mentions:@me -commenter:@me -author:@me updated:>=${since} archived:false`,
+    reviewed: `is:pr reviewed-by:@me -author:@me merged:>=${since} archived:false`,
+  };
+  const got = Object.fromEntries(await Promise.all(Object.entries(q).map(async ([k, v]) => [k, await attempt(`search ${k}`, () => search(run, v, STATEFUL.has(k)), empty)])));
+  const repos = perRepo({ merged: got.merged.nodes, reviewed: got.reviewed.nodes, open: got.open.nodes });
+  const owned = (await Promise.all(repos.slice(0, CODEOWNERS_REPOS).map((r) => attempt(`CODEOWNERS ${r.repo}`, () => codeownersLines(run, r.repo, login, teams), [])))).flat();
+  return {
+    login,
+    window: { since, until: now.toISOString().slice(0, 10), days: DAYS },
+    counts: Object.fromEntries(Object.entries(got).map(([k, v]) => [k, v.total])),
+    repos: repos.slice(0, 30),
+    merged: listed(got.merged),
+    open: listed(got.open),
+    reviewRequested: listed(got.reviewRequested),
+    assignedIssues: listed(got.assignedIssues),
+    unansweredMentions: listed(got.unansweredMentions),
+    teams,
+    codeowners: owned,
+    unreadable,
+  };
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
+  process.stdout.write(JSON.stringify(await collect(), null, 1) + "\n");
+}

package/onboarding/redact.mjs

@@ -0,0 +1,8 @@
+const TOKEN = /\b(?:xox[a-z]-[A-Za-z0-9-]{8,}|sk-[A-Za-z0-9_-]{16,}|gh[pousr]_[A-Za-z0-9]{16,}|github_pat_[A-Za-z0-9_]{16,}|vck_[A-Za-z0-9]{16,}|AKIA[A-Z0-9]{16}|eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]*)/g;
+
+export const MAX_TEXT = 200;
+
+export function snippet(text) {
+  const flat = String(text ?? "").replace(/\s+/g, " ").trim().replace(TOKEN, "[redacted]");
+  return flat.length > MAX_TEXT ? flat.slice(0, MAX_TEXT - 1) + "…" : flat;
+}

package/onboarding/slack-facts.callscript.js

@@ -0,0 +1,53 @@
+// Facts about the signed-in user's recent Slack channel activity. Counts, permalinks and short snippets only.
+// Searches exclude DMs and group DMs (-is:dm) so none is ever read. Slack allows about 20 searches a minute: this
+// script makes at most 19, so on a ratelimited error wait a minute and run it again unchanged.
+// The .slice(0, n) before each .map is not redundant: callscript counts worst-case calls from it (200 max).
+const DAYS = 30;
+const after = new Date(Date.now() - (DAYS + 1) * 86400000).slice(0, 10);
+const auth = await slack.auth_test();
+const me = auth.user_id;
+const ownPages = await Promise.all([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15].slice(0, 15).map(page => slack.search_messages({ query: `from:<@${me}> after:${after} -is:dm`, count: 100, page, sort: "timestamp", sort_dir: "desc" })));
+const mentionPages = await Promise.all([1, 2, 3].slice(0, 3).map(page => slack.search_messages({ query: `<@${me}> after:${after} -is:dm`, count: 100, page, sort: "timestamp", sort_dir: "desc" })));
+const member = await slack.users_conversations({ types: "public_channel,private_channel", limit: 200, exclude_archived: true });
+const refused = [auth, ...ownPages, ...mentionPages, member].filter(r => r.ok === false);
+if (refused.length > 0) {
+  return { refused: { error: refused[0].error, needed: refused[0].needed ?? null, provided: refused[0].provided ?? null, calls: refused.length } };
+}
+const channels = Object.entries(Object.groupBy(ownPages.flatMap(r => r.messages.matches).filter(m => m.user === me && !m.channel.is_im && !m.channel.is_mpim), m => m.channel.id)).map(e => ({ id: e[0], channel: e[1][0].channel.name, count: e[1].length, threadReplies: e[1].filter(m => m.permalink.includes("thread_ts=") && !m.permalink.includes(`thread_ts=${m.ts}`)).length, oldest: e[1][e[1].length - 1].ts, recent: e[1].slice(0, 2).map(m => ({ url: m.permalink, ts: m.ts, text: m.text.split("\n").join(" ").split(" ").some(t => t.length >= 20 && ["xoxb-", "xoxp-", "xoxa-", "xoxs-", "xoxe", "sk-", "ghp_", "gho_", "ghu_", "ghs_", "ghr_", "github_pat_", "vck_", "AKIA", "eyJ"].some(p => t.includes(p))) ? "[withheld]" : m.text.split("\n").join(" ").slice(0, 160) })) })).sort((a, b) => b.count - a.count);
+const total = channels.reduce((n, c) => n + c.count, 0);
+const threadReplies = channels.reduce((n, c) => n + c.threadReplies, 0);
+const mentioned = mentionPages.flatMap(r => r.messages.matches).filter(m => m.user !== me && !m.channel.is_im && !m.channel.is_mpim).map(m => ({ url: m.permalink, ts: m.ts, author: m.username, channel: m.channel.id, name: m.channel.name, thread: m.permalink.includes("thread_ts=") ? m.permalink.split("thread_ts=")[1].split("&")[0] : m.ts, text: m.text.split("\n").join(" ").split(" ").some(t => t.length >= 20 && ["xoxb-", "xoxp-", "xoxa-", "xoxs-", "xoxe", "sk-", "ghp_", "gho_", "ghu_", "ghs_", "ghr_", "github_pat_", "vck_", "AKIA", "eyJ"].some(p => t.includes(p))) ? "[withheld]" : m.text.split("\n").join(" ").slice(0, 160) }));
+const ownMessages = ownPages.flatMap(r => r.messages.matches).filter(m => m.user === me && !m.channel.is_im && !m.channel.is_mpim);
+const lastOwn = Object.fromEntries(Object.entries(Object.groupBy(ownMessages, m => `${m.channel.id}:${m.permalink.includes("thread_ts=") ? m.permalink.split("thread_ts=")[1].split("&")[0] : m.ts}`)).map(e => [e[0], e[1].reduce((t, m) => Math.max(t, Number(m.ts)), 0)]));
+const oldestOwn = channels.length ? channels.reduce((t, c) => Math.min(t, Number(c.oldest)), Number(channels[0].oldest)) : 0;
+const newestOnly = ownPages[0].messages.paging.pages > ownPages.length;
+const known = mentioned.map(m => ({ ...m, replied: (lastOwn[`${m.channel}:${m.thread}`] ?? 0) > Number(m.ts) }));
+const judged = known.filter(m => m.replied || !newestOnly || Number(m.ts) >= oldestOwn);
+const open = judged.filter(m => !m.replied);
+return {
+  me: { id: me, name: auth.user },
+  window: { days: DAYS, after, searchTotal: ownPages[0].messages.paging.total, pagesTotal: ownPages[0].messages.paging.pages, pagesRead: ownPages.length, newestOnly },
+  scope: "public and private channels; DMs and group DMs are dropped before counting",
+  own: {
+    total,
+    threadReplies,
+    topLevel: total - threadReplies,
+    oldest: channels.length ? oldestOwn : null,
+    channelCount: channels.length,
+    channels: channels.slice(0, 25).map(c => ({ id: c.id, channel: c.channel, count: c.count, threadReplies: c.threadReplies, recent: c.recent }))
+  },
+  mentions: {
+    searchTotal: mentionPages[0].messages.paging.total,
+    pagesTotal: mentionPages[0].messages.paging.pages,
+    pagesRead: mentionPages.length,
+    capped: mentionPages[0].messages.paging.pages > mentionPages.length,
+    found: mentioned.length,
+    judged: judged.length,
+    notJudged: mentioned.length - judged.length,
+    replied: judged.length - open.length,
+    unanswered: open.length,
+    unansweredItems: open.slice(0, 20).map(m => ({ url: m.url, channel: m.name, author: m.author, ts: m.ts, text: m.text })),
+    basis: "replied = the user posted later in the same thread; reactions are not read (the token lacks reactions:read); a mention not yet answered in a thread may have been answered elsewhere"
+  },
+  memberships: { count: member.channels.length, names: member.channels.map(c => c.name).sort(), more: Boolean(member.response_metadata?.next_cursor) }
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve-hub",
-  "version": "0.6.9",
+  "version": "0.6.11",
   "license": "Apache-2.0",
   "description": "Bot-side code shared by every hub agent: registry tools, the roster hook, the eve channel, the host sandbox and browser, and model helpers.",
   "type": "module",

package/prepare.mjs

@@ -19,7 +19,7 @@
 import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, rmdirSync, unlinkSync, writeFileSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
 import { GITHUB_PATH } from "./github-path.mjs";
-import { KIT_FILES, MAIN_KIT_FILES } from "./stubs.mjs";
+import { KIT_FILES, MAIN_KIT_FILES, REMOVED_KIT_FILES } from "./stubs.mjs";
 import { deploymentFacts, hostedContext } from "./execution-context.mjs";
 import { botDomains, domainFolders, readBotMemory, readMemory, validateMemory } from "./memory.mjs";
 import { agentRunsOn, readWorkspaceFile, removeWorkspaceAgent } from "./workspace.mjs";
@@ -37,9 +37,10 @@ import { agentRunsOn, readWorkspaceFile, removeWorkspaceAgent } from "./workspac
 // roster by commit), memory (the workspace's files), and main's schedules.
 export const DEPLOYED_KIT_FILES = new Set([
   "channels/eve.ts",
-  "skills/change-explainer.ts",
+  "skills/onboarding-profile.ts",
+  "tools/onboarding_scripts.ts",
   ...["react", "show", "update_thread", "list_threads", "read_thread", "post_message"].map((t) => `tools/${t}.ts`),
-  ...["create_thread", "set_summary", "move_path", "archive_thread", "unarchive_thread", "list_agents", "agent_send", "tag_threads", "dash_update", "apply_tags", "artifact_publish", "artifact_status", "artifact_list"].map((t) => `tools/${t}.ts`),
+  ...["create_thread", "set_summary", "move_path", "archive_thread", "unarchive_thread", "list_agents", "agent_send", "tag_threads", "dash_update", "apply_tags"].map((t) => `tools/${t}.ts`),
 ]);
 
 
@@ -187,6 +188,7 @@ export function prepareDeployment(dir) {
     if (!file.endsWith("/agent.ts")) continue;
     const bot = dirname(join(dir, "agents", file));
     for (const stub of Object.keys({ ...MAIN_KIT_FILES, "memory/workspace.ts": 0, "memory/bot.ts": 0 })) if (!DEPLOYED_KIT_FILES.has(stub) && existsSync(join(bot, stub))) removeStub(bot, stub);
+    for (const stub of REMOVED_KIT_FILES) if (existsSync(join(bot, stub))) removeStub(bot, stub);
     // learning-review is not in MAIN_KIT_FILES, but also requires the host.
     if (existsSync(join(bot, "schedules/learning-review.ts"))) removeStub(bot, "schedules/learning-review.ts");
     const name = basename(dirname(bot));

package/skills/onboarding-profile.gen.mjs

@@ -0,0 +1,2 @@
+// Generated by scripts/build-onboarding.mjs from onboarding/SKILL.md. Do not edit.
+export default {"description":"Right after sign-in: ask for the Kit access you need, then work out who the user is and what to focus on from their recent Slack and GitHub, and draft schedules that keep them on track. Reads only; the one write is a pull request the user approves by merging.","markdown":"# Profile the user from Slack and GitHub\n\nTwo scripts gather facts (GitHub in your sandbox, Slack inside Kit); you write the profile and the schedule drafts from those facts alone. Nothing is posted to Slack and nothing is committed; the only write is the pull request in step 6, which the user approves by merging. The user sees one message from you at the end (step 7), not one per step. If a step cannot finish, that message says which one and what the user must do; never write the profile as if every source had been read.\n\n## 1. Ask for Kit access, once\n\nKit's tools are `request_access`, `request_status` and `execute`. Hosted, you reach them through the `vercel-kit` connection: `connection_execute({ connection: \"vercel-kit\", tool: \"request_access\", input: { ... } })`, and the same shape for the others. Everywhere below, \"call `request_access`\" means that.\n\nSlack goes through the user's Kit connection. Before any fetch, ask for everything the run reads in one request:\n\n```\nrequest_access({ service: \"slack\", reads: true, reason: \"Read your recent channel messages, mentions and threads to write your onboarding profile\" })\n```\n\n- `approved`: go on.\n- `pending` (or `connection_required`): tell the user, in one sentence, that Slack access is waiting, with the `approveUrl`; then `request_status({ request })` until they decide. Do not start step 3 before it is approved. If they decline, the final message says the Slack half was not read.\n\nGitHub does not use Kit: it uses `gh` in your sandbox (step 2). If `gh auth status` fails, the final message says GitHub was not read.\n\n## 2. GitHub facts\n\nCall the `onboarding_scripts` tool once: it writes the skill's scripts into your sandbox at `/tmp/onboarding-skill/` and returns that directory.\n\n```sh\nnode /tmp/onboarding-skill/github-facts.mjs > /tmp/onboarding-skill/github-facts.json\n```\n\nIt prints one JSON document: `counts` (merged PRs, open PRs, review requests, assigned issues, mentions never replied to, PRs reviewed), `repos` (merged, reviewed, open and lines changed per repo), item lists (`merged`, `open`, `reviewRequested`, `assignedIssues`, `unansweredMentions`; `total` is the full count, `items` the newest 150), `teams`, and `codeowners` lines naming the user or their teams. Open PRs carry `draft`, `reviewDecision`, `mergeable` and `checks`. `author:@me` includes PRs the user's bots open under their login. `unreadable` lists a source that could not be read.\n\n## 3. Slack facts\n\nRun the script in \"The Slack script\" below with Kit's `execute`: pass it as the script, unchanged. It runs inside Kit, so no raw message reaches you; it returns one JSON document in about 10 seconds.\n\n- A `ratelimited` error means Slack's search limit (about 20 a minute; the script makes at most 19). Wait 70 seconds (`sleep 70`) and run it again unchanged, up to five times.\n- A `suspended` result whose output says `consent_required` is a pause, not an error: tell the user in one sentence that the Slack read is waiting, with its `approveUrl`; `request_status({ request })` until they decide; then `execute({ run })` continues the same run (settled steps are not repeated).\n- An `output` with `refused` means Slack answered `missing_scope` (or another refusal) to a call, so no facts were read: `refused.needed` names the scope the user's Slack connection lacks (`refused.provided` what it has). Do not continue. Call `request_access({ service: \"slack\", capability: \"search_messages\", reason })`: if it returns an `approveUrl`, give it to the user; otherwise tell them to reconnect Slack in Kit allowing `refused.needed`. The final message says the Slack half was not read and names the scope.\n- Any other error goes to the user in the final message. Never continue with fewer facts, and never retry around a refusal.\n- Save the run's `output` as `/tmp/onboarding-skill/slack-facts.json` (the checker reads it).\n- `window`: the last 30 days. Slack search allows 15 pages of 100 here, so a very active account is covered only back to `own.oldest` (`newestOnly: true`); state that window in the profile.\n- `own`: messages per channel, thread replies, recent snippets. `mentions`: `replied` means the user posted later in the same thread; `unanswered` means they did not. A mention older than what was read with no reply among it (`notJudged`) is unknown, not unanswered. `mentions.capped` means the search found more mentions (`searchTotal`) than the three pages read: say so in \"Could not tell\". Reactions are not read (the Slack grant has no `reactions:read`): say so in \"Could not tell\". `memberships`: channels the user is in.\n- DMs and group DMs are never searched. Every list item carries a permalink (`url`); a snippet that looked like a secret is `[withheld]`.\n\n## 4. Write the profile and drafts\n\nWrite the profile to `/tmp/onboarding-skill/profile.md`. It names the user's repos and colleagues, so it is posted only in this thread and never committed.\n\nAnswer, in the user's terms:\n\n- What they have shipped, what they own, what they are responsible for.\n- What people tag them for, and what they write about.\n- What they have missed: unanswered mentions, requested reviews, stale or conflicted PRs.\n- Which open GitHub work-streams to close (stale, conflicted, superseded) and which to focus on.\n\nRules:\n\n- Judge; the scripts only counted. No scoring formula and no thresholds from code: say why in a sentence.\n- Every list item cites at least one permalink that appears in the facts, and no URL appears that isn't in the facts. State counts as the facts give them, with the window.\n- Don't quote messages beyond the snippets, and don't name people beyond what a claim needs.\n- Add a \"Could not tell\" section: every `unreadable` source, `notJudged` mentions, that reactions were not read, the Slack window, a Kit grant the user declined.\n\nFor each recurring need you found (a morning pass over unanswered mentions, a weekly stale-PR pass), write one draft to `/tmp/onboarding-skill/schedules/<bot>/<id>.md` for an existing bot of your workspace:\n\n```md\n---\ncron: \"0 9 * * 1-5\"\n---\n\nThe prompt the bot runs.\n```\n\n`cron` is five fields in UTC on a hosted deploy. Each draft says in its prompt which facts it reads and what it reports.\n\n## 5. Check\n\n```sh\nnode /tmp/onboarding-skill/check-report.mjs --profile /tmp/onboarding-skill/profile.md --facts /tmp/onboarding-skill/github-facts.json /tmp/onboarding-skill/slack-facts.json\n```\n\nFix every line it prints and rerun until it prints nothing. Then delete the two facts files.\n\n## 6. Open the pull request, if the workspace has a repo\n\nWhen the workspace is backed by a GitHub repo, open one PR on it that adds only the schedule drafts, as `agents/<bot>/agent/schedules/<id>.md`, and nothing from the profile (`gh pr create`). The user merging it is their approval; the deploy that follows is what makes the schedules run. The PR's checks include the deploy's build, which rejects a bad cron or a bot that does not exist: watch them (`gh pr checks`), fix the draft and push again until they pass, and say in the message if they do not. Without a repo the drafts stay in the thread and the message says so.\n\n## 7. Post one message to the user\n\nIn this thread: the profile, the three things to act on first, the schedule drafts (bot, cadence, what each does) with the PR link, and anything you could not read with what they must do about it. The sandbox setup is not part of this skill: say that it was not proposed because no Mac runner is connected to read the laptop. Only the schedule files ever leave the thread.\n\n## The Slack script\n\n```js\n// Facts about the signed-in user's recent Slack channel activity. Counts, permalinks and short snippets only.\n// Searches exclude DMs and group DMs (-is:dm) so none is ever read. Slack allows about 20 searches a minute: this\n// script makes at most 19, so on a ratelimited error wait a minute and run it again unchanged.\n// The .slice(0, n) before each .map is not redundant: callscript counts worst-case calls from it (200 max).\nconst DAYS = 30;\nconst after = new Date(Date.now() - (DAYS + 1) * 86400000).slice(0, 10);\nconst auth = await slack.auth_test();\nconst me = auth.user_id;\nconst ownPages = await Promise.all([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15].slice(0, 15).map(page => slack.search_messages({ query: `from:<@${me}> after:${after} -is:dm`, count: 100, page, sort: \"timestamp\", sort_dir: \"desc\" })));\nconst mentionPages = await Promise.all([1, 2, 3].slice(0, 3).map(page => slack.search_messages({ query: `<@${me}> after:${after} -is:dm`, count: 100, page, sort: \"timestamp\", sort_dir: \"desc\" })));\nconst member = await slack.users_conversations({ types: \"public_channel,private_channel\", limit: 200, exclude_archived: true });\nconst refused = [auth, ...ownPages, ...mentionPages, member].filter(r => r.ok === false);\nif (refused.length > 0) {\n  return { refused: { error: refused[0].error, needed: refused[0].needed ?? null, provided: refused[0].provided ?? null, calls: refused.length } };\n}\nconst channels = Object.entries(Object.groupBy(ownPages.flatMap(r => r.messages.matches).filter(m => m.user === me && !m.channel.is_im && !m.channel.is_mpim), m => m.channel.id)).map(e => ({ id: e[0], channel: e[1][0].channel.name, count: e[1].length, threadReplies: e[1].filter(m => m.permalink.includes(\"thread_ts=\") && !m.permalink.includes(`thread_ts=${m.ts}`)).length, oldest: e[1][e[1].length - 1].ts, recent: e[1].slice(0, 2).map(m => ({ url: m.permalink, ts: m.ts, text: m.text.split(\"\\n\").join(\" \").split(\" \").some(t => t.length >= 20 && [\"xoxb-\", \"xoxp-\", \"xoxa-\", \"xoxs-\", \"xoxe\", \"sk-\", \"ghp_\", \"gho_\", \"ghu_\", \"ghs_\", \"ghr_\", \"github_pat_\", \"vck_\", \"AKIA\", \"eyJ\"].some(p => t.includes(p))) ? \"[withheld]\" : m.text.split(\"\\n\").join(\" \").slice(0, 160) })) })).sort((a, b) => b.count - a.count);\nconst total = channels.reduce((n, c) => n + c.count, 0);\nconst threadReplies = channels.reduce((n, c) => n + c.threadReplies, 0);\nconst mentioned = mentionPages.flatMap(r => r.messages.matches).filter(m => m.user !== me && !m.channel.is_im && !m.channel.is_mpim).map(m => ({ url: m.permalink, ts: m.ts, author: m.username, channel: m.channel.id, name: m.channel.name, thread: m.permalink.includes(\"thread_ts=\") ? m.permalink.split(\"thread_ts=\")[1].split(\"&\")[0] : m.ts, text: m.text.split(\"\\n\").join(\" \").split(\" \").some(t => t.length >= 20 && [\"xoxb-\", \"xoxp-\", \"xoxa-\", \"xoxs-\", \"xoxe\", \"sk-\", \"ghp_\", \"gho_\", \"ghu_\", \"ghs_\", \"ghr_\", \"github_pat_\", \"vck_\", \"AKIA\", \"eyJ\"].some(p => t.includes(p))) ? \"[withheld]\" : m.text.split(\"\\n\").join(\" \").slice(0, 160) }));\nconst ownMessages = ownPages.flatMap(r => r.messages.matches).filter(m => m.user === me && !m.channel.is_im && !m.channel.is_mpim);\nconst lastOwn = Object.fromEntries(Object.entries(Object.groupBy(ownMessages, m => `${m.channel.id}:${m.permalink.includes(\"thread_ts=\") ? m.permalink.split(\"thread_ts=\")[1].split(\"&\")[0] : m.ts}`)).map(e => [e[0], e[1].reduce((t, m) => Math.max(t, Number(m.ts)), 0)]));\nconst oldestOwn = channels.length ? channels.reduce((t, c) => Math.min(t, Number(c.oldest)), Number(channels[0].oldest)) : 0;\nconst newestOnly = ownPages[0].messages.paging.pages > ownPages.length;\nconst known = mentioned.map(m => ({ ...m, replied: (lastOwn[`${m.channel}:${m.thread}`] ?? 0) > Number(m.ts) }));\nconst judged = known.filter(m => m.replied || !newestOnly || Number(m.ts) >= oldestOwn);\nconst open = judged.filter(m => !m.replied);\nreturn {\n  me: { id: me, name: auth.user },\n  window: { days: DAYS, after, searchTotal: ownPages[0].messages.paging.total, pagesTotal: ownPages[0].messages.paging.pages, pagesRead: ownPages.length, newestOnly },\n  scope: \"public and private channels; DMs and group DMs are dropped before counting\",\n  own: {\n    total,\n    threadReplies,\n    topLevel: total - threadReplies,\n    oldest: channels.length ? oldestOwn : null,\n    channelCount: channels.length,\n    channels: channels.slice(0, 25).map(c => ({ id: c.id, channel: c.channel, count: c.count, threadReplies: c.threadReplies, recent: c.recent }))\n  },\n  mentions: {\n    searchTotal: mentionPages[0].messages.paging.total,\n    pagesTotal: mentionPages[0].messages.paging.pages,\n    pagesRead: mentionPages.length,\n    capped: mentionPages[0].messages.paging.pages > mentionPages.length,\n    found: mentioned.length,\n    judged: judged.length,\n    notJudged: mentioned.length - judged.length,\n    replied: judged.length - open.length,\n    unanswered: open.length,\n    unansweredItems: open.slice(0, 20).map(m => ({ url: m.url, channel: m.name, author: m.author, ts: m.ts, text: m.text })),\n    basis: \"replied = the user posted later in the same thread; reactions are not read (the token lacks reactions:read); a mention not yet answered in a thread may have been answered elsewhere\"\n  },\n  memberships: { count: member.channels.length, names: member.channels.map(c => c.name).sort(), more: Boolean(member.response_metadata?.next_cursor) }\n};\n```\n"};

package/skills/onboarding-profile.js

@@ -0,0 +1,6 @@
+import { defineSkill } from "eve/skills";
+import skill from "./onboarding-profile.gen.mjs";
+// The onboarding-profile skill: onboarding/SKILL.md with its Slack script
+// inlined, embedded at build time (scripts/build-onboarding.mjs) so it
+// loads the same on the hub's machine and in a deployed bot.
+export default defineSkill(skill);

package/stubs.mjs

@@ -1,6 +1,10 @@
 // eve finds tools, hooks, and channels by file (the tool name is the file
 // name), so each bot keeps a one-line stub per kit module. Bot file -> what it
 // is, and which kit module it re-exports (default: the same path).
+// Kit files whose module is gone. Sync retires them from every bot, and the
+// hosted deploy prunes them (the change-explainer: its skill and artifact tools).
+export const REMOVED_KIT_FILES = Object.freeze(["tools/artifact_publish.ts", "tools/artifact_status.ts", "tools/artifact_list.ts", "skills/change-explainer.ts"]);
+
 export const KIT_FILES = {
   "channels/eve.ts": ["Queued eve channel that resolves the registry's human as a user.", "channels/eve-roster-user.ts"],
   "hooks/sandbox.ts": ["Migrates legacy Docker sessions to the host sandbox."],
@@ -14,10 +18,6 @@ export const KIT_FILES = {
   "tools/update_thread.ts": ["Update a thread this bot is in: title, track, domain and summary."],
   "tools/list_threads.ts": ["Every workspace thread, from any session."],
   "tools/read_thread.ts": ["Read any workspace thread."],
-  "tools/artifact_publish.ts": ["Publish the next version of an artifact (a change explainer, ...) and show its card in the thread."],
-  "tools/artifact_status.ts": ["Whether an artifact this bot published still describes its source."],
-  "tools/artifact_list.ts": ["The artifacts this bot owns, or every artifact in the workspace."],
-  "skills/change-explainer.ts": ["The change-explainer skill (packages/explainer/skills/change-explainer/SKILL.md), which artifact_publish's change explainers follow."],
   "tools/post_message.ts": ["Post into an existing thread or a bot's DM; with `status`, report the thread's phase."],
 };
 
@@ -25,6 +25,8 @@ export const KIT_FILES = {
 // plus the tools that shape the workspace.
 export const MAIN_KIT_FILES = {
   ...KIT_FILES,
+  "skills/onboarding-profile.ts": ["The onboarding-profile skill (packages/agent-kit/onboarding/SKILL.md): after sign-in, reads the user's Slack and GitHub and posts a profile with suggested schedules."],
+  "tools/onboarding_scripts.ts": ["Writes the onboarding-profile skill's sandbox scripts into the sandbox."],
   "tools/create_thread.ts": ["Open a workspace thread for one piece of work."],
   "tools/set_summary.ts": ["Write the summary of a path (project/track) or a thread."],
   "tools/move_path.ts": ["Rename or merge a path (project/track): every thread under it moves."],

package/templates/workspace-protocol.md

@@ -30,7 +30,7 @@ When several bots work on one piece of work, coordinate through posts; don't rou
 2. When you push, tell the bots your change affects: the owner of a branch stacked on yours, and the reviewer. Use `@all` if you can't tell who. To reach a bot in another thread, use `post_message`. A branch has one owner; anyone else works on a branch stacked on top, or the owner hands it over.
 3. When the thread's phase changes (planning → working → reviewing → done; a review can send it back to working or planning), post a status: `post_message` into this thread with `status` set to the new phase, as the text at most 8 plain words on what is happening now ("Building the input-count fix", not "Plan approved by Rui; builder starting PR 1 (count only new input)": no names, no restating the phase, no parentheticals), and `metadata: { pr, sha }` when there are any (the PR URL and sha go there, never in the text). A status is a phase marker, not a report: test results, branch names and caveats go in a separate message. It wakes nobody unless you @-mention someone, so it doesn't replace your message. The workspace state shows the thread's current phase.
 
-   A reviewer records its verdict on the same kind of post: `verdict` (`ship`, `fix-first` or `rethink`) with `metadata: { pr, sha }`, the PR as its full GitHub URL (like every status post) and the sha you reviewed; the text is the one-line what-changed. Add `decisions`, a list of `{ question, options: [{ label, pickedBy? }] }` for what the human has to pick (`[]` if nothing; a `ship` without the list is refused). Publish the change explainer with `artifact_publish` at the first ship and reuse it on later passes; the Dash row says "no explainer" without one. CI and the PR's head come from GitHub, not from your post; don't state them as facts there.
+   A reviewer records its verdict on the same kind of post: `verdict` (`ship`, `fix-first` or `rethink`) with `metadata: { pr, sha }`, the PR as its full GitHub URL (like every status post) and the sha you reviewed; the text is the one-line what-changed. Add `decisions`, a list of `{ question, options: [{ label, pickedBy? }] }` for what the human has to pick (`[]` if nothing; a `ship` without the list is refused). CI and the PR's head come from GitHub, not from your post; don't state them as facts there.
 4. When you need another specialty or more help, ask main, or the bot whose role fits.
 
 On a conflict, read the push posts and ask the bot that pushed.

package/tools/onboarding_scripts.d.ts

@@ -0,0 +1,10 @@
+declare const _default: import("eve/tools").ToolDefinition<Record<string, never>, {
+    dir: string;
+    files: string[];
+}> & {
+    execute(input: Record<string, never>, ctx: import("eve/tools").ToolContext): Promise<{
+        dir: string;
+        files: string[];
+    }>;
+};
+export default _default;

package/tools/onboarding_scripts.js

@@ -0,0 +1,19 @@
+// The `onboarding_scripts` tool: writes the onboarding-profile skill's sandbox
+// scripts (GitHub facts, the report checker) into this session's sandbox.
+import { defineTool } from "eve/tools";
+import { z } from "zod";
+import files from "../onboarding/files.gen.mjs";
+const DIR = "/tmp/onboarding-skill";
+export default defineTool({
+    description: `Starts a fresh ${DIR} in your sandbox, writes the onboarding-profile skill's scripts into it and returns the directory. Call it once, before the skill's GitHub step.`,
+    inputSchema: z.object({}),
+    async execute(_input, ctx) {
+        const sandbox = await ctx.getSandbox();
+        const made = await sandbox.run({ command: `rm -rf ${DIR} && mkdir -p ${DIR}` });
+        if (made.exitCode !== 0)
+            throw new Error(`mkdir failed: ${made.stderr || made.stdout}`);
+        for (const [name, content] of Object.entries(files))
+            await sandbox.writeTextFile({ path: `${DIR}/${name}`, content });
+        return { dir: DIR, files: Object.keys(files) };
+    },
+});

package/tools/post_message.js

@@ -3,7 +3,7 @@ import { z } from "zod";
 import { registryFetch } from "../registry-fetch.mjs";
 // Posts as you into a thread or DM, from whichever session you're in. With no
 // target it posts into the thread you're in, as part of the running turn: it
-// carries the turn's id and the images and artifact cards collected so far,
+// carries the turn's id and the images collected so far,
 // and if it's your turn's last act, your end-of-turn text isn't posted. Into
 // another thread, mentions wake bots exactly as your replies do; posting into
 // a bot's DM wakes that bot; archived threads refuse it. Your session in the