eve-hub 0.8.1 → 0.8.2

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # eve-hub
 
+## 0.8.2
+
+### Patch Changes
+
+- The per-bot mention gate is gone: the hub decides who a bot's message wakes (wake router), so the `hooks/mention-gate` hook is removed from the kit.
+
 ## 0.8.1
 
 ### Patch Changes

package/kit-modules.json

@@ -2,7 +2,6 @@
   "channels/eve",
   "channels/eve-roster-user",
   "connections/vercel-kit",
-  "hooks/mention-gate",
   "hooks/sandbox",
   "instructions/engineering",
   "instructions/main",

package/mention-gate.d.mts

@@ -2,5 +2,4 @@ export type GateConfig = { enabled: boolean; model: string; api: 'chat' | 'decis
 export function gateConfig(env?: Record<string, string | undefined>, file?: unknown): GateConfig;
 export function opensWithHandle(text: string, agent: string): boolean;
 export function cleanReason(reason: unknown): string;
-export function screenInbound(input: { text: string; sessionId: string; agent?: string; registryUrl: string; credential: (opts?: { refresh?: boolean }) => Promise<{ token: string; teamId?: string | null } | null>; instructions?: string; fetchImpl?: typeof fetch; log?: ((line: string) => void) | null }): Promise<{ cancel: boolean; result?: unknown }>;
 export function hubCredentialLoader(fetchHub: (path: string, init: { headers?: Record<string, string> }) => Promise<Response>): (opts?: { refresh?: boolean }) => Promise<{ ok: boolean; token?: string; error?: string }>;

package/mention-gate.mjs

@@ -1,19 +1,7 @@
-// Mention gate: when a bot's turn is woken by an @-mention or a DM, the bot
-// itself (its message.received hook, hooks/mention-gate.ts) asks a cheap
-// model, through AI Gateway, whether a reply is needed, before its main model
-// runs. The model reads the bot's own instructions and the delivery the bot
-// just received. A handle inside code (codeRanges) is dropped by
-// parseMentions before it joins or wakes anyone; the gate catches the other
-// incidental ones: a quote or a recap, or an ack that asks nothing.
-//
-// The hub decides which wakes are gated (gatedWake, registry/server.mjs) and
-// owns the outcome: the hook asks it first (POST /api/mention-gate/check),
-// then reports the decision (POST /api/mention-gate/report); on a skip the
-// hub posts the system line and records the usage, and the hook cancels the
-// turn. Biased to answering: the model only classifies the message (how the
-// handle is used, what it asks of the bot); skipFor decides, and any error,
-// timeout or unreadable verdict answers. Only bots' messages are gated: the
-// human's always wake.
+// The decision-model helpers the registry's mention gate (registry/server.mjs, frozen until its removal) and the hosted hub's wake
+// router and closing check share: the gateway config (gateConfig), the Mac bot credential loader and the response parsing. The bot-side
+// hook is gone; the hosted hub decides who a message wakes (hosted-hub/src/store/wake-router.ts). A handle inside code (codeRanges)
+// is dropped by parseMentions before it joins or wakes anyone.
 //
 // Config (the hub's, sent to the hook with each check): `mentionGate` in
 // hub.workspace.json ({ enabled, model, reasoningEffort, timeoutMs }),
@@ -21,7 +9,6 @@
 // HUB_MENTION_GATE_REASONING, HUB_MENTION_GATE_TIMEOUT_MS and
 // HUB_MENTION_GATE_URL (tests).
 import { codeRanges } from "./mention-tokens.mjs";
-import { hubHeaders } from "./registry-fetch.mjs";
 import { createHash } from "node:crypto";
 
 export { codeRanges };
@@ -395,45 +382,6 @@ export function credentialCache(load, { ttlMs = 10 * 60e3, failMs = 60e3, now =
   return get;
 }
 
-// --- The bot's side (hooks/mention-gate.ts).
-
-const HUB_CALL_MS = 2000;
-
-async function hubCall(fetchImpl, url, body) {
-  const res = await fetchImpl(url, { method: "POST", headers: await hubHeaders({ "content-type": "application/json" }), body: JSON.stringify(body), signal: AbortSignal.timeout(HUB_CALL_MS) });
-  if (!res.ok) throw new Error(`hub ${res.status}`);
-  return res.json();
-}
-
-// One inbound delivery, screened. Never throws; { cancel: true } only when the
-// hub accepted a skip (it posted the system line and expects the turn to
-// end cancelled). Anything that fails on the way answers.
-//   text: the delivery (message.received's data.message)
-//   credential: ({ refresh }) → { token, teamId? } | null (credentialCache)
-// `agent` is optional: left out, the hub names the bot from its session and sends its instructions.
-export async function screenInbound({ text, sessionId, agent, registryUrl, instructions = "", credential, fetchImpl = fetch, log = console.warn }) {
-  const messageId = triggerId(text);
-  if (!registryUrl || !messageId) return { cancel: false };
-  let check;
-  try {
-    check = await hubCall(fetchImpl, `${registryUrl}/api/mention-gate/check`, { ...(agent ? { agent } : {}), messageId, sessionId });
-  } catch (error) {
-    log?.(`[mention-gate] check for ${messageId} failed, answering: ${error?.message ?? error}`);
-    return { cancel: false };
-  }
-  if (!check?.gate || !check.config) return { cancel: false };
-  agent ??= check.agent;
-  instructions ||= check.instructions ?? "";
-  const r = await decide({ config: check.config, credential, prompt: promptFor(check.config, { agent, human: check.humanName ?? "the human", instructions, envelope: text, broadcast: Boolean(check.broadcast) }), addressed: Boolean(check.addressed), fetchImpl });
-  try {
-    const ack = await hubCall(fetchImpl, `${registryUrl}/api/mention-gate/report`, { ...(agent ? { agent } : {}), messageId, sessionId, skip: r.skip, reason: r.reason, verdict: r.verdict ?? null, usage: r.usage ?? null, ms: r.ms, error: r.error ?? null });
-    return { cancel: Boolean(r.skip && ack?.skip), result: r };
-  } catch (error) {
-    log?.(`[mention-gate] report for ${messageId} failed, answering: ${error?.message ?? error}`);
-    return { cancel: false, result: r };
-  }
-}
-
 // A Mac bot's AI Gateway credential: the hub mints an OIDC token for the workspace's bots project, asked for with the bot's HUB_TOKEN.
 // `fetchHub(path, init)` is registryFetch. On a refresh it names the token AI Gateway refused, as eve's served credential does.
 export function hubCredentialLoader(fetchHub) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve-hub",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "license": "Apache-2.0",
   "description": "Bot-side code shared by every hub agent: registry tools, the roster hook, the eve channel, the host sandbox and browser, and model helpers.",
   "type": "module",

package/stubs.mjs

@@ -4,7 +4,6 @@
 export const KIT_FILES = {
   "channels/eve.ts": ["Queued eve channel that resolves the registry's human as a user.", "channels/eve-roster-user.ts"],
   "hooks/sandbox.ts": ["Migrates legacy Docker sessions to the host sandbox."],
-  "hooks/mention-gate.ts": ["Mention gate: a cheap model decides whether an inbound @-mention or DM needs a turn."],
   "tools/bash.ts": ["eve's bash with a default time limit (kills the process group) and the workspace's code location."],
   "tools/react.ts": ["React to a message with an emoji."],
   "tools/show.ts": ["Move the human's screen to a thread, DM, or message."],
@@ -52,7 +51,6 @@ export const MAIN_KIT_FILES = {
 // main's dash schedule stays: off the hub's machine it has no PR data (its lookup runs `gh`).
 export const DEPLOYED_KIT_FILES = new Set([
   "channels/eve.ts",
-  "hooks/mention-gate.ts",
   "schedules/dash.ts",
   "skills/onboarding-profile.ts",
   "tools/onboarding_scripts.ts",

package/world.mjs

@@ -21397,6 +21397,12 @@ async function afterAppend(append, routed, fetchFn, env = process.env) {
 // ../../hosted-hub/bots/world.ts
 var import_oidc = __toESM(require_oidc(), 1);
 
+// ../../hosted-hub/src/store/db.ts
+import { AsyncLocalStorage } from "node:async_hooks";
+import { createClient, LibsqlError } from "@libsql/client";
+var s = (sql, ...args) => ({ sql, args });
+var running = new AsyncLocalStorage();
+
 // mention-tokens.mjs
 function codeRanges(text) {
   const s2 = String(text ?? "");
@@ -21498,90 +21504,144 @@ function gateConfig(env = process.env, file2 = {}) {
   };
 }
 
-// ../../hosted-hub/src/store/db.ts
-import { AsyncLocalStorage } from "node:async_hooks";
-import { createClient, LibsqlError } from "@libsql/client";
-var s = (sql, ...args) => ({ sql, args });
-var running = new AsyncLocalStorage();
-
 // ../../hosted-hub/src/store/schema.ts
 var OPEN_TURN_STATUSES = "('streaming','cancelling')";
 var UNSETTLED_DELIVERIES = "unsettled AS MATERIALIZED (SELECT rowid AS rid, * FROM deliveries WHERE accepted_at IS NULL AND failed_at IS NULL AND revoked_at IS NULL)";
 
-// ../../hosted-hub/src/domain/ids.ts
-import { createHash, randomBytes } from "node:crypto";
-var alphabet = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
-function base32(value) {
-  let out = "";
-  for (let i = 0; i < 26; i++) {
-    out = alphabet[Number(value & 31n)] + out;
-    value >>= 5n;
-  }
-  return out;
+// ../../hosted-hub/src/store/wake-router.ts
+var GATE = gateConfig(process.env);
+var WAKE_AT = 0.15;
+var STEER_AT = 0.5;
+var CLIP = 700;
+var clip = (t, n = CLIP) => t.length > n ? `${t.slice(0, n)} \u2026` : t;
+var BOTS_BUSY = `SELECT b.name, b.role, EXISTS (SELECT 1 FROM turns t WHERE t.thread_id = ? AND t.bot = b.name AND t.status IN ${OPEN_TURN_STATUSES}) AS busy FROM bots b`;
+var WAKE_QUESTION = {
+  named: (bot) => `The message @-mentions ${bot}. Decide whether ${bot} has something to do after reading it. Yes if it asks ${bot} for anything, hands ${bot} work or a result to review, land or build on, or gives ${bot} a fix, correction or answer ${bot} was waiting on. No if it only thanks or acknowledges, says it reacted or changed nothing, says nothing is needed from ${bot} or that the matter is already done and nobody has to act, says to ignore it, or only names ${bot} in a quote, a recap or an example.`,
+  all: (bot) => `The message is addressed to everyone with @all. Does it need ${bot} to act, given ${bot}'s role? Yes if it asks for something ${bot} can give, or announces something ${bot} must act on. No if it is news, or for other bots' roles. A missed request stalls the thread: when unsure, yes.`,
+  reply: (bot) => `The message does not @-mention ${bot}, but replies to ${bot}'s earlier request. Does it need ${bot} to act? Yes if it hands back an answer, result or approval ${bot} asked for, or asks it something. No if it only thanks or acknowledges, says it reacted, posted nothing new or has nothing to do, says the matter is already handled or nothing is needed from ${bot}, or only points back to messages ${bot} has already seen. A missed answer stalls the thread: when unsure, yes.`
+};
+var isPick = (bots) => bots.length > 0 && bots.every((b) => b.relation === "pick");
+function pickPrompt({ author, text, tail, bots }) {
+  const input2 = [
+    `${author} wrote a message in a team chat thread with the bots below.`,
+    "",
+    "Bots in the thread (name: role):",
+    "<bots>",
+    bots.map((b, i) => `- ${b.name}: ${clip(b.role, 160)}${i === 0 ? " (the default)" : ""}`).join("\n"),
+    "</bots>",
+    "",
+    "The thread so far (latest last):",
+    "<thread>",
+    tail.map((m) => `${m.author}: ${clip(m.text)}`).join("\n") || "(none)",
+    "</thread>",
+    "",
+    `The message from ${author}:`,
+    "<message>",
+    clip(text, 6e3),
+    "</message>"
+  ].join("\n");
+  const questions = [{ type: "choice", name: "who", instructions: `Who is this message for? ${author} writes names loosely: a misspelled or shortened name ("@arc" for archer), a name without @ ("archer, wdyt"), or a reply to what the bot who spoke last just said. Pick the one bot ${author} is addressing or answering. If it is for nobody in particular (a general question, "sitrep", a request for the status), pick ${bots[0].name}, the default.`, choices: bots.map((b) => ({ value: b.name, description: clip(b.role, 160) })) }];
+  return { input: input2, questions };
 }
-function ulid(now = Date.now()) {
-  return base32(BigInt(now) << 80n | BigInt(`0x${randomBytes(10).toString("hex")}`));
+function routePrompt(request) {
+  if (isPick(request.bots)) return pickPrompt(request);
+  const { author, text, tail, bots, asked } = request;
+  const roster = bots.map((b) => `- ${b.name}: ${clip(b.role, 160)}${b.busy ? " [busy: working on another turn in this thread]" : ""}${b.relation === "named" ? " [@-mentioned in the message]" : b.relation === "all" ? " [addressed by @all]" : ""}`).join("\n");
+  const input2 = [
+    `A message was just posted in a team chat thread of bots and people by ${author}. For each bot below, decide whether the message needs that bot to act. A bot that acts wakes up and spends a full turn; one that isn't needed stays asleep.`,
+    "",
+    "Bots that could wake (name: role):",
+    "<bots>",
+    roster,
+    "</bots>",
+    "",
+    "The thread so far (latest last):",
+    "<thread>",
+    tail.map((m) => `${m.author}: ${clip(m.text)}`).join("\n") || "(none)",
+    "</thread>",
+    ...asked?.length ? ["", `${author} wrote the message below as the end of a turn that answered these messages:`, "<answered>", asked.map((m) => `${m.author}: ${clip(m.text)}`).join("\n"), "</answered>"] : [],
+    "",
+    `The message from ${author}:`,
+    "<message>",
+    clip(text, 6e3),
+    "</message>"
+  ].join("\n");
+  const questions = bots.flatMap((b) => [
+    { type: "predicate", name: `wake-${b.name}`, instructions: WAKE_QUESTION[b.relation](b.name) },
+    ...b.busy ? [{ type: "predicate", name: `steer-${b.name}`, instructions: `${b.name} is in the middle of a turn. Is this message urgent enough that ${b.name} must see it now, mid-turn: it changes or cancels what ${b.name} is doing, or ${b.name} can't finish without it? No if it can wait for the turn to end.` }] : []
+  ]);
+  return { input: input2, questions };
 }
-var eventId = () => `evt_${ulid()}`;
-function derivedMessageId(...parts) {
-  return `msg_${base32(BigInt(`0x${createHash("sha256").update(parts.join("\0")).digest("hex").slice(0, 33)}`) >> 2n)}`;
+var choice = (body, bots) => {
+  const a = body?.answers?.find((x) => x?.name === "who");
+  const bot = bots.find((b) => b.name === a?.choice)?.name, score = a?.probabilities?.find((p) => p?.value === bot)?.probability;
+  return bot && typeof score === "number" ? { bot, score } : null;
+};
+var probabilities = (body) => new Map((body?.answers ?? []).flatMap((a) => typeof a?.name === "string" && typeof a.probability === "number" ? [[a.name, a.probability]] : []));
+function decisionRouter(credential, fetchImpl, config3) {
+  const asked = /* @__PURE__ */ new Map();
+  return (request) => {
+    const key = JSON.stringify([request.messageId, request.bots.map((b) => [b.name, b.relation, b.busy])]);
+    let call = asked.get(key);
+    if (!call) {
+      call = ask(request, credential, fetchImpl, config3);
+      asked.set(key, call);
+      if (asked.size > 200) asked.delete(asked.keys().next().value);
+    }
+    return call;
+  };
 }
-var sessionId = () => `wrun_${ulid()}`;
-var deliveryId = (message, bot) => `dlv_${message}_${bot}`;
-var messageOfDelivery = (delivery, bot) => delivery.slice("dlv_".length, -`_${bot}`.length);
-var turnId = (session, chunkIndex) => `trn_${session}_${chunkIndex}`;
-
-// ../../hosted-hub/src/store/events.ts
-function eventStatements(threadId2, event, text, at, id = eventId(), only) {
-  const expr = (v) => typeof v === "string" ? { sql: "?", args: [v] } : "sql" in v && "args" in v ? v : { sql: "?", args: [JSON.stringify(v)] };
-  const [t, e] = [expr(text), expr(event)];
-  return [
-    s(
-      `INSERT OR IGNORE INTO messages (id, thread_id, author, author_kind, text, created_at, event) SELECT ?, ?, 'system', 'event', ${t.sql}, ?, ${e.sql} WHERE ${only?.sql ?? "1"}`,
-      id,
-      threadId2,
-      ...t.args,
-      at,
-      ...e.args,
-      ...only?.args ?? []
-    ),
-    s(`INSERT INTO log (thread_id,type,data,at) SELECT ?, 'message.created', ?, ? WHERE changes() > 0`, threadId2, JSON.stringify({ threadId: threadId2, messageId: id, author: "system", authorKind: "event" }), at)
-  ];
+async function ask(request, credential, fetchImpl, config3) {
+  const started = Date.now();
+  const failed = (error63) => ({ wake: (isPick(request.bots) ? request.bots.slice(0, 1) : request.bots).map((b) => ({ bot: b.name, steer: false })), ms: Date.now() - started, error: error63 });
+  if (!config3.enabled || config3.api !== "decisions") return failed("routing needs a decision model");
+  const signal = AbortSignal.timeout(config3.timeoutMs);
+  try {
+    const token = await Promise.race([credential(), new Promise((_, reject) => signal.addEventListener("abort", () => reject(signal.reason), { once: true }))]);
+    const res = await fetchImpl(config3.url, {
+      method: "POST",
+      signal,
+      headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
+      body: JSON.stringify({ model: config3.model, ...routePrompt(request) })
+    });
+    if (!res.ok) return failed(`gateway ${res.status}`);
+    const answer = await res.json();
+    if (isPick(request.bots)) {
+      const picked = choice(answer, request.bots);
+      return picked ? { wake: [{ bot: picked.bot, steer: false }], pick: picked, ms: Date.now() - started } : failed("unreadable decision");
+    }
+    const p = probabilities(answer);
+    if (request.bots.some((b) => !p.has(`wake-${b.name}`))) return failed("unreadable decision");
+    return {
+      wake: request.bots.filter((b) => p.get(`wake-${b.name}`) >= WAKE_AT).map((b) => ({ bot: b.name, steer: b.busy && (p.get(`steer-${b.name}`) ?? 0) >= STEER_AT })),
+      ms: Date.now() - started
+    };
+  } catch (e) {
+    return failed(String(e?.message ?? e));
+  }
 }
-
-// ../../lib/usage.mjs
-var emptyBucket = () => ({ steps: 0, inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0, costUsd: null, unpricedSteps: 0 });
-var TOKENS = ["inputTokens", "outputTokens", "cacheReadTokens", "cacheWriteTokens"];
-var num = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0;
-var round = (v) => Math.round(v * 1e9) / 1e9;
-function addUsage(bucket, usage = {}) {
-  bucket.steps += 1;
-  for (const key of TOKENS) bucket[key] += num(usage?.[key]);
-  const cost = usage?.costUsd;
-  if (typeof cost === "number" && Number.isFinite(cost) && cost >= 0) bucket.costUsd = round((bucket.costUsd ?? 0) + cost);
-  else bucket.unpricedSteps += 1;
-  return bucket;
+function routeRequest({ messageId: messageId2, author, text, bots, facts }) {
+  return { messageId: messageId2, author, text, tail: facts.tail, bots: bots.map((b) => ({ ...b, role: facts.roles.get(b.name)?.role ?? "", busy: facts.roles.get(b.name)?.busy ?? false })) };
 }
-var HOURS_KEPT_MS = 35 * 24 * 36e5;
-
-// ../../hosted-hub/src/store/usage.ts
-var STEP_INSERT = "INSERT OR IGNORE INTO usage_steps (session_id, sequence, step_index, at, input_tokens, output_tokens, cache_read_tokens, cache_write_tokens, cost_usd, turn_id, model)";
-function stepValues(sessionId2, step) {
-  const b = addUsage(emptyBucket(), step.usage);
-  return [sessionId2, step.sequence, step.stepIndex, Date.parse(step.at), b.inputTokens, b.outputTokens, b.cacheReadTokens, b.cacheWriteTokens, b.costUsd];
+function applyRouting({ forced, bots }, routing) {
+  const picked = new Map(routing.wake.map((w) => [w.bot, w]));
+  const wake = bots.filter((b) => forced.has(b.name) || picked.has(b.name)).map((b) => ({ bot: b.name, steer: !forced.has(b.name) && Boolean(picked.get(b.name)?.steer) }));
+  const woken = new Set(wake.map((w) => w.bot));
+  return { wake, skipped: bots.filter((b) => !woken.has(b.name)).map((b) => b.name) };
 }
-
-// ../../hosted-hub/src/store/mention-gate.ts
-var GATE = gateConfig(process.env);
+function logRouting(request, routed, routing, gatherMs) {
+  console.log(JSON.stringify({ at: "route", message: request.messageId, author: request.author, gatherMs, wake: routed.wake, skipped: routed.skipped, modelMs: routing.ms, ...routing.pick ? { pick: routing.pick } : {}, ...routing.error ? { error: routing.error } : {} }));
+}
+var ROUTE_BOTS_COLUMN = `(SELECT json_group_array(json_object('name', b.name, 'role', b.role, 'busy', EXISTS (SELECT 1 FROM turns t WHERE t.thread_id = sess.thread_id AND t.bot = b.name AND t.status IN ${OPEN_TURN_STATUSES}))) FROM bots b, sess) AS route_bots`;
 
 // ../../hosted-hub/src/store/closing-check.ts
 var TAIL_COLUMN = `(SELECT json_group_array(json_object('author', author, 'text', text)) FROM (SELECT author, text FROM messages
     WHERE thread_id = (SELECT thread_id FROM sess) AND author_kind IN ('human', 'agent') AND status IS NULL ORDER BY created_at DESC LIMIT 6)) AS tail`;
 var DROP_BELOW = 0.05;
-var CLIP = 600;
-var clip = (t, n = CLIP) => t.length > n ? `${t.slice(0, n)} \u2026` : t;
+var CLIP2 = 600;
+var clip2 = (t, n = CLIP2) => t.length > n ? `${t.slice(0, n)} \u2026` : t;
 function closingPrompt({ bot, text, tail, posted, asked }) {
-  const lines = (items) => items.map((m) => `${m.author ? `${m.author}: ` : "- "}${clip(m.text)}`).join("\n") || "(none)";
+  const lines = (items) => items.map((m) => `${m.author ? `${m.author}: ` : "- "}${clip2(m.text)}`).join("\n") || "(none)";
   const input2 = [
     `${bot} is a bot in a team chat thread of bots and people. Its turn just ended with the closing text below, which will post to the thread as a message unless it adds nothing.`,
     "",
@@ -21622,14 +21682,14 @@ function decisionJudge(credential, fetchImpl = fetch, config3) {
     const key = `${request.turnId}:${request.text.length}`;
     let call = asked.get(key);
     if (!call) {
-      call = ask(request, credential, fetchImpl, config3);
+      call = ask2(request, credential, fetchImpl, config3);
       asked.set(key, call);
       if (asked.size > 200) asked.delete(asked.keys().next().value);
     }
     return call;
   };
 }
-async function ask(request, credential, fetchImpl, config3) {
+async function ask2(request, credential, fetchImpl, config3) {
   const started = Date.now();
   const done = (c) => {
     const closing = { ...c, ms: Date.now() - started };
@@ -22274,7 +22334,7 @@ __export(external_exports, {
   tuple: () => tuple,
   uint32: () => uint32,
   uint64: () => uint64,
-  ulid: () => ulid3,
+  ulid: () => ulid2,
   undefined: () => _undefined3,
   union: () => union,
   unknown: () => unknown,
@@ -23998,7 +24058,7 @@ __export(regexes_exports, {
   sha512_hex: () => sha512_hex,
   string: () => string,
   time: () => time,
-  ulid: () => ulid2,
+  ulid: () => ulid,
   undefined: () => _undefined,
   unicodeEmail: () => unicodeEmail,
   uppercase: () => uppercase,
@@ -24010,7 +24070,7 @@ __export(regexes_exports, {
 });
 var cuid = /^[cC][0-9a-z]{6,}$/;
 var cuid2 = /^[0-9a-z]+$/;
-var ulid2 = /^[0-7][0-9A-HJKMNP-TV-Za-hjkmnp-tv-z]{25}$/;
+var ulid = /^[0-7][0-9A-HJKMNP-TV-Za-hjkmnp-tv-z]{25}$/;
 var xid = /^[0-9a-vA-V]{20}$/;
 var ksuid = /^[A-Za-z0-9]{27}$/;
 var nanoid = /^[a-zA-Z0-9_-]{21}$/;
@@ -24949,7 +25009,7 @@ var $ZodCUID2 = /* @__PURE__ */ $constructor("$ZodCUID2", (inst, def) => {
   $ZodStringFormat.init(inst, def);
 });
 var $ZodULID = /* @__PURE__ */ $constructor("$ZodULID", (inst, def) => {
-  def.pattern ?? (def.pattern = ulid2);
+  def.pattern ?? (def.pattern = ulid);
   $ZodStringFormat.init(inst, def);
 });
 var $ZodXID = /* @__PURE__ */ $constructor("$ZodXID", (inst, def) => {
@@ -39167,7 +39227,7 @@ __export(schemas_exports2, {
   tuple: () => tuple,
   uint32: () => uint32,
   uint64: () => uint64,
-  ulid: () => ulid3,
+  ulid: () => ulid2,
   undefined: () => _undefined3,
   union: () => union,
   unknown: () => unknown,
@@ -39701,7 +39761,7 @@ var ZodULID = /* @__PURE__ */ $constructor("ZodULID", (inst, def) => {
   $ZodULID.init(inst, def);
   ZodStringFormat.init(inst, def);
 });
-function ulid3(params) {
+function ulid2(params) {
   return _ulid(ZodULID, params);
 }
 var ZodXID = /* @__PURE__ */ $constructor("ZodXID", (inst, def) => {
@@ -41747,6 +41807,47 @@ function date4(params) {
   return _coercedDate(ZodDate, params);
 }
 
+// ../../hosted-hub/src/domain/ids.ts
+import { createHash, randomBytes } from "node:crypto";
+var alphabet = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+function base32(value) {
+  let out = "";
+  for (let i = 0; i < 26; i++) {
+    out = alphabet[Number(value & 31n)] + out;
+    value >>= 5n;
+  }
+  return out;
+}
+function ulid3(now = Date.now()) {
+  return base32(BigInt(now) << 80n | BigInt(`0x${randomBytes(10).toString("hex")}`));
+}
+var eventId = () => `evt_${ulid3()}`;
+function derivedMessageId(...parts) {
+  return `msg_${base32(BigInt(`0x${createHash("sha256").update(parts.join("\0")).digest("hex").slice(0, 33)}`) >> 2n)}`;
+}
+var sessionId = () => `wrun_${ulid3()}`;
+var deliveryId = (message, bot) => `dlv_${message}_${bot}`;
+var messageOfDelivery = (delivery, bot) => delivery.slice("dlv_".length, -`_${bot}`.length);
+var turnId = (session, chunkIndex) => `trn_${session}_${chunkIndex}`;
+
+// ../../hosted-hub/src/store/events.ts
+function eventStatements(threadId2, event, text, at, id = eventId(), only) {
+  const expr = (v) => typeof v === "string" ? { sql: "?", args: [v] } : "sql" in v && "args" in v ? v : { sql: "?", args: [JSON.stringify(v)] };
+  const [t, e] = [expr(text), expr(event)];
+  return [
+    s(
+      `INSERT OR IGNORE INTO messages (id, thread_id, author, author_kind, text, created_at, event) SELECT ?, ?, 'system', 'event', ${t.sql}, ?, ${e.sql} WHERE ${only?.sql ?? "1"}`,
+      id,
+      threadId2,
+      ...t.args,
+      at,
+      ...e.args,
+      ...only?.args ?? []
+    ),
+    s(`INSERT INTO log (thread_id,type,data,at) SELECT ?, 'message.created', ?, ? WHERE changes() > 0`, threadId2, JSON.stringify({ threadId: threadId2, messageId: id, author: "system", authorKind: "event" }), at)
+  ];
+}
+
 // ../../hosted-hub/src/store/routing.ts
 var PARTICIPANTS = (thread, except = "''") => `SELECT b.name AS bot FROM bots b, (SELECT ${thread} AS t, ${except} AS x) p WHERE MAX(
     COALESCE((SELECT created_at FROM sessions WHERE thread_id = p.t AND bot = b.name ORDER BY created_at DESC LIMIT 1), -2),
@@ -41782,7 +41883,7 @@ function routingStatements(messageId2, threadId2, bots, now, { by, joins }, held
         bot,
         messageId2
       ),
-      ...steer ? [s("UPDATE deliveries SET steer = 1 WHERE id = ? AND accepted_at IS NULL", deliveryId(messageId2, bot))] : [],
+      ...steer === true || steer && steer.has(bot) ? [s("UPDATE deliveries SET steer = 1 WHERE id = ? AND accepted_at IS NULL", deliveryId(messageId2, bot))] : [],
       ...held[bot] ? [s("UPDATE deliveries SET held_at = ?, held_scope = ? WHERE id = ? AND accepted_at IS NULL", now, held[bot], deliveryId(messageId2, bot))] : []
     ])
   ];
@@ -41804,13 +41905,6 @@ var HOP_LIMIT = "(SELECT json_extract(metadata, '$.workspace.hopLimit') FROM wor
 var heldByHopLimit = (m) => `(${m}.author_kind = 'agent' AND ${HOP_LIMIT} IS NOT NULL AND ${m}.hop >= ${HOP_LIMIT})`;
 var ToolInfo = external_exports.object({ tools: external_exports.object({ static: external_exports.array(external_exports.object({ name: external_exports.string().min(1) })) }) });
 
-// ../../hosted-hub/src/store/mentionable.ts
-var NOW_MS = `(CAST(strftime('%s', 'now') AS INTEGER) * 1000)`;
-var inRoster = `NOT (runs_on = 'local' AND EXISTS (SELECT 1 FROM local_runner l, workspace_repo w
-  WHERE l.id = 1 AND w.id = 1 AND l.setup_failed_commit = json_extract(w.metadata, '$.commit') AND l.setup_failed_until > ${NOW_MS}))`;
-var LEASE_LEFT = `SELECT l.setup_failed_until - ${NOW_MS} AS ms FROM local_runner l, workspace_repo w
-  WHERE l.id = 1 AND w.id = 1 AND l.setup_failed_commit = json_extract(w.metadata, '$.commit') AND l.setup_failed_until > ${NOW_MS}`;
-
 // ../../hosted-hub/src/domain/wake.ts
 var mentioned = (roster, text) => {
   const tokens = new Set(mentionTokens(text));
@@ -41827,6 +41921,58 @@ function recipients(roster, text, from, threadId2 = "", participants = []) {
   return named.length ? named : roster.slice(0, 1);
 }
 
+// ../../hosted-hub/src/store/fold-route.ts
+var relationsOf = (roster, text, me, bots, replyTo) => {
+  const named = new Set(mentioned(roster, text).filter((b) => b !== me));
+  return bots.map((name) => ({ name, relation: named.has(name) ? "named" : hasAll(text) && !replyTo.has(name) ? "all" : "reply" }));
+};
+function routedWake(t, messageId2, text, bots, answers, asks) {
+  const all = bots.map((b) => b.name), none = { to: all, steer: /* @__PURE__ */ new Set(), stmts: [] };
+  if (!t.facts || !bots.length || t.thread.startsWith("dm-")) return none;
+  const answer = answers?.get(messageId2);
+  if (!answer) {
+    asks.push({ messageId: messageId2, request: { ...routeRequest({ messageId: messageId2, author: t.me, text, bots, facts: { ...t.facts, tail: t.tail } }), asked: t.asked.map(({ author, text: text2 }) => ({ author, text: text2 })) } });
+    return none;
+  }
+  const routed = applyRouting({ forced: /* @__PURE__ */ new Set(), bots }, answer);
+  logRouting({ messageId: messageId2, author: t.me }, routed, answer, t.facts.gatherMs);
+  return {
+    to: routed.wake.map((w) => w.bot),
+    steer: new Set(routed.wake.filter((w) => w.steer).map((w) => w.bot)),
+    stmts: routed.skipped.flatMap((bot) => eventStatements(t.thread, { kind: "mention_skip", agent: bot, by: t.me, message: messageId2 }, `${bot} skipped: needs nothing from it`, t.at, derivedMessageId(messageId2, "skip", bot), s("EXISTS (SELECT 1 FROM messages WHERE id = ?)", messageId2)))
+  };
+}
+var wakeStatements = (t, messageId2, to, steer) => routingStatements(messageId2, t.thread, [...to], t.at, { by: t.me, joins: true }, {}, steer);
+
+// ../../hosted-hub/src/store/mentionable.ts
+var NOW_MS = `(CAST(strftime('%s', 'now') AS INTEGER) * 1000)`;
+var inRoster = `NOT (runs_on = 'local' AND EXISTS (SELECT 1 FROM local_runner l, workspace_repo w
+  WHERE l.id = 1 AND w.id = 1 AND l.setup_failed_commit = json_extract(w.metadata, '$.commit') AND l.setup_failed_until > ${NOW_MS}))`;
+var LEASE_LEFT = `SELECT l.setup_failed_until - ${NOW_MS} AS ms FROM local_runner l, workspace_repo w
+  WHERE l.id = 1 AND w.id = 1 AND l.setup_failed_commit = json_extract(w.metadata, '$.commit') AND l.setup_failed_until > ${NOW_MS}`;
+
+// ../../lib/usage.mjs
+var emptyBucket = () => ({ steps: 0, inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0, costUsd: null, unpricedSteps: 0 });
+var TOKENS = ["inputTokens", "outputTokens", "cacheReadTokens", "cacheWriteTokens"];
+var num = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0;
+var round = (v) => Math.round(v * 1e9) / 1e9;
+function addUsage(bucket, usage = {}) {
+  bucket.steps += 1;
+  for (const key of TOKENS) bucket[key] += num(usage?.[key]);
+  const cost = usage?.costUsd;
+  if (typeof cost === "number" && Number.isFinite(cost) && cost >= 0) bucket.costUsd = round((bucket.costUsd ?? 0) + cost);
+  else bucket.unpricedSteps += 1;
+  return bucket;
+}
+var HOURS_KEPT_MS = 35 * 24 * 36e5;
+
+// ../../hosted-hub/src/store/usage.ts
+var STEP_INSERT = "INSERT OR IGNORE INTO usage_steps (session_id, sequence, step_index, at, input_tokens, output_tokens, cache_read_tokens, cache_write_tokens, cost_usd, turn_id, model)";
+function stepValues(sessionId2, step) {
+  const b = addUsage(emptyBucket(), step.usage);
+  return [sessionId2, step.sequence, step.stepIndex, Date.parse(step.at), b.inputTokens, b.outputTokens, b.cacheReadTokens, b.cacheWriteTokens, b.costUsd];
+}
+
 // ../../hosted-hub/src/store/notifications.ts
 var NOTIFICATION_READS = s("SELECT person, notification_id FROM notification_reads");
 var NOTIFICATIONS = s("SELECT message_id, person FROM notifications");
@@ -48729,9 +48875,9 @@ var TURN_END_SQL = `SELECT * FROM (WITH sess AS (SELECT * FROM sessions WHERE id
         AND (EXISTS (SELECT 1 FROM turn_deliveries td WHERE td.delivery_id = dd.id AND td.turn_id = (SELECT id FROM open_turn)) OR NOT EXISTS (SELECT 1 FROM turn_deliveries td WHERE td.delivery_id = dd.id))) AS asked,
     (SELECT json_group_array(p.text) FROM messages p WHERE p.turn_id = (SELECT id FROM open_turn)
       AND p.author = (SELECT bot FROM sess) AND p.author_kind = 'agent' AND p.status IS NULL) AS posted,
-    (SELECT p.id FROM messages p WHERE p.turn_id = (SELECT id FROM open_turn)
+    (SELECT json_object('id', p.id, 'text', p.text) FROM messages p WHERE p.turn_id = (SELECT id FROM open_turn)
       AND p.author = (SELECT bot FROM sess) AND p.author_kind = 'agent' AND p.status IS NULL ORDER BY p.created_at DESC, p.rowid DESC LIMIT 1) AS last_post,
-    ${TAIL_COLUMN})`;
+    ${TAIL_COLUMN}, ${ROUTE_BOTS_COLUMN})`;
 var namedDeliveries = (chunks) => [...new Set(chunks.flatMap((c) => c.events.flatMap((e) => e.meta?.deliveryIds ?? [])))];
 var completes = (chunks) => chunks.some((c) => c.events.some((e) => e.type === "turn.completed"));
 async function readFoldState(get, sessionId2, chunks) {
@@ -48749,7 +48895,8 @@ function foldState(row) {
     asked: JSON.parse(String(row.asked ?? "[]")),
     posted: JSON.parse(String(row.posted ?? "[]")),
     tail: row.tail == null ? [] : JSON.parse(String(row.tail)).reverse(),
-    lastPost: row.last_post == null ? null : String(row.last_post),
+    ...row.route_bots == null ? {} : { facts: { roles: new Map(JSON.parse(String(row.route_bots)).map((b) => [b.name, { role: b.role, busy: Number(b.busy) === 1 }])), tail: [] } },
+    lastPost: row.last_post == null ? null : JSON.parse(String(row.last_post)),
     notify: row.notify ? JSON.parse(String(row.notify)) : null,
     foldedIndex: Number(row.folded_index),
     open: row.open_turn ? JSON.parse(String(row.open_turn)) : null
@@ -48760,13 +48907,13 @@ var REVOKED_TURN = `EXISTS (SELECT 1 FROM turn_deliveries td JOIN deliveries d O
   AND turns.id IS NOT (SELECT archived_turn FROM thread_meta WHERE thread_id = turns.thread_id)`;
 var IF_INSERTED = "WHERE changes() > 0";
 var lastActWasComms = (ls) => !!ls && Object.keys(ls.calls).length > 0 && Object.values(ls.calls).every((own3) => own3 === true);
-function fold(state, chunks, now = Date.now(), verdicts = /* @__PURE__ */ new Map()) {
+function fold(state, chunks, now = Date.now(), answers = {}) {
   const { session } = state;
   const stmts = [], touched = /* @__PURE__ */ new Map(), named = /* @__PURE__ */ new Set();
   const log = (type, data, when = "") => stmts.push(s(`INSERT INTO log (thread_id, type, data, at) SELECT ?, ?, ?, ? ${when}`, session.thread, type, JSON.stringify({ threadId: session.thread, agent: session.bot, ...data }), at));
   let open3 = state.open && { ...state.open, trigger: state.open.trigger ?? null, lastStep: state.open.lastStep ?? null, status: state.open.status, endedAt: null, error: null };
   const deliver = [];
-  const closings = [];
+  const closings = [], routeAsks = [];
   let last = state.foldedIndex;
   let at = now;
   for (const { index, events } of chunks) {
@@ -48922,7 +49069,7 @@ function fold(state, chunks, now = Date.now(), verdicts = /* @__PURE__ */ new Ma
           flush();
           let text = lastActWasComms(open3.lastStep) ? "" : open3.text.trim();
           if (text && open3.status !== "cancelling") {
-            const drop = verdicts.get(open3.id);
+            const drop = answers.closing?.get(open3.id);
             if (drop === void 0) closings.push({ turnId: open3.id, bot: session.bot, text, tail: state.tail ?? [], posted: state.posted ?? [], asked: (state.asked ?? []).map(({ author, text: text2 }) => ({ author, text: text2 })) });
             else if (drop) {
               stmts.push(...eventStatements(session.thread, { kind: "closing_skip", agent: session.bot, by: session.bot }, `${session.bot} skipped its closing text: nothing new`, at, derivedMessageId(open3.id, "closing-skip"), s("EXISTS (SELECT 1 FROM turns WHERE id = ? AND status NOT IN ('cancelling','cancelled'))", open3.id)));
@@ -48939,13 +49086,16 @@ function fold(state, chunks, now = Date.now(), verdicts = /* @__PURE__ */ new Ma
             stmts.push(...notificationFor(messageId2, "agent", text, state.notify ?? void 0));
             stmts.push(s(`INSERT OR IGNORE INTO message_attachments (message_id, position, upload_id, name, size)
               SELECT ?, position, upload_id, name, size FROM turn_attachments WHERE turn_id = ? AND EXISTS (SELECT 1 FROM messages WHERE id = ?) ORDER BY position`, messageId2, open3.id, messageId2));
-            const onPost = text === "" ? state.lastPost : null;
-            const to = [.../* @__PURE__ */ new Set([...recipients(state.roster, text, { name: session.bot, kind: "agent" }, session.thread, state.participants), ...onPost ? [] : handedBack(state, text, named)])];
-            stmts.push(...routingStatements(messageId2, session.thread, to, at, { by: session.bot, joins: true }));
+            const me = session.bot, turn = { me, thread: session.thread, roster: state.roster, facts: state.facts && { ...state.facts, tail: state.tail ?? [] }, tail: state.tail ?? [], asked: state.asked ?? [], at };
+            const onPost = text === "" ? state.lastPost : null, replyTo = new Set((state.asked ?? []).map((a) => a.author));
+            const base = [.../* @__PURE__ */ new Set([...recipients(state.roster, text, { name: me, kind: "agent" }, session.thread, state.participants), ...onPost ? [] : handedBack(state, text, named)])];
+            const first = text ? routedWake(turn, messageId2, text, relationsOf(state.roster, text, me, base, replyTo), answers.routes, routeAsks) : { to: base, steer: /* @__PURE__ */ new Set(), stmts: [] };
+            stmts.push(...first.stmts, ...wakeStatements(turn, messageId2, first.to, first.steer));
             deliver.push(messageId2);
             if (onPost) {
-              stmts.push(...routingStatements(onPost, session.thread, handedBack(state, "", named), at, { by: session.bot, joins: true }));
-              deliver.push(onPost);
+              const back = routedWake(turn, onPost.id, onPost.text, handedBack(state, "", named).map((name) => ({ name, relation: "reply" })), answers.routes, routeAsks);
+              stmts.push(...back.stmts, ...wakeStatements(turn, onPost.id, back.to, back.steer));
+              deliver.push(onPost.id);
             }
           }
           end("done");
@@ -49000,17 +49150,20 @@ function fold(state, chunks, now = Date.now(), verdicts = /* @__PURE__ */ new Ma
     stmts.push(s(`INSERT INTO session_folds (session_id, folded_index, folded_at) VALUES (?, ?, ?)
       ON CONFLICT (session_id) DO UPDATE SET folded_index = excluded.folded_index, folded_at = excluded.folded_at`, session.id, last, now));
   }
-  return { statements: stmts, deliver, ...closings.length ? { closings } : {} };
+  return { statements: stmts, deliver, ...closings.length ? { closings } : {}, ...routeAsks.length ? { routes: routeAsks } : {} };
 }
-async function foldJudged(state, chunks, now, judge2) {
+async function foldJudged(state, chunks, now, judges2 = {}) {
   const first = fold(structuredClone(state), chunks, now);
-  if (!judge2 || !first.closings) return first;
-  const verdicts = await Promise.all(first.closings.map(async (c) => [c.turnId, (await judge2(c)).drop]));
-  return fold(state, chunks, now, new Map(verdicts));
-}
-async function foldInTx(tx, sessionId2, chunks, judge2) {
+  const [closing, routes] = await Promise.all([
+    Promise.all((judges2.closing ? first.closings ?? [] : []).map(async (c) => [c.turnId, (await judges2.closing(c)).drop])),
+    Promise.all((judges2.router ? first.routes ?? [] : []).map(async (r) => [r.messageId, await judges2.router(r.request)]))
+  ]);
+  if (!closing.length && !routes.length) return first;
+  return fold(state, chunks, now, { closing: new Map(closing), routes: new Map(routes) });
+}
+async function foldInTx(tx, sessionId2, chunks, judges2) {
   const state = await readFoldState((sql, ...args) => tx.get(sql, ...args), sessionId2, chunks);
-  const result = state ? await foldJudged(state, chunks, Date.now(), judge2) : foldSubagent(subagentState(sessionId2, await tx.get(SUBAGENT_STATE_SQL, sessionId2)), chunks);
+  const result = state ? await foldJudged(state, chunks, Date.now(), judges2) : foldSubagent(subagentState(sessionId2, await tx.get(SUBAGENT_STATE_SQL, sessionId2)), chunks);
   for (const stmt of result.statements) await tx.write(stmt.sql, ...stmt.args);
   return result.deliver;
 }
@@ -49048,11 +49201,11 @@ function foldSubagent(state, chunks, now = Date.now()) {
 }
 
 // ../../hosted-hub/bots/world.ts
-var judge = decisionJudge(import_oidc.getVercelOidcToken, fetch, GATE);
+var judges = { closing: decisionJudge(import_oidc.getVercelOidcToken, fetch, GATE), router: decisionRouter(import_oidc.getVercelOidcToken, fetch, GATE) };
 async function foldAppend(tx, { runId, name, chunks, firstIndex }) {
   if (name !== sessionCodec.streamName(runId)) return;
   const decoded = await Promise.all(chunks.map(async (c, k2) => ({ index: firstIndex + k2, events: await sessionCodec.decode(c) })));
-  return foldInTx(tx, runId, decoded, judge);
+  return foldInTx(tx, runId, decoded, judges);
 }
 async function createWorld() {
   const url2 = process.env.TURSO_DATABASE_URL;

package/hooks/mention-gate.d.ts

@@ -1,2 +0,0 @@
-declare const _default: import("eve/hooks").HookDefinition<"message.received">;
-export default _default;

package/hooks/mention-gate.js

@@ -1,31 +0,0 @@
-import { getVercelOidcToken } from "@vercel/oidc";
-import { defineHook } from "eve/hooks";
-import { registryBase, registryFetch } from "../registry-fetch.mjs";
-import { credentialCache, hubCredentialLoader, screenInbound } from "../mention-gate.mjs";
-// The mention gate, on the bot's side: before the main model runs a turn an
-// @-mention or a DM woke, a cheap model decides from this bot's instructions
-// and the delivery whether a reply is needed. On a skip the hub posts
-// "<bot> skipped: <reason>" and the turn is cancelled before any model call.
-// Any failure answers. The hub names the bot from its session and serves its
-// instructions, so a deployed bot and a Mac bot run the same code. Its AI Gateway
-// credential is an OIDC token for the workspace's bots project: a deployed bot
-// carries its own, and a Mac bot has none, so it asks the hub for one.
-// See packages/agent-kit/mention-gate.mjs.
-const deploymentToken = async () => ({ ok: true, token: await getVercelOidcToken() });
-const credential = credentialCache(process.env.VERCEL ? deploymentToken : hubCredentialLoader(registryFetch));
-export default defineHook({
-    events: {
-        async "message.received"(event, ctx) {
-            if (ctx.session.parent || !(process.env.VERCEL || process.env.HUB_TOKEN))
-                return; // subagents are never gated; nor is a bot with no hosted hub
-            const { cancel } = await screenInbound({
-                text: event.data.message,
-                sessionId: ctx.session.id,
-                registryUrl: registryBase(),
-                credential,
-            });
-            if (cancel)
-                ctx.cancel();
-        },
-    },
-});