eve 0.72.1 → 0.74.0

package/dist/src/runtime/schedules/load-collection.d.ts

@@ -0,0 +1,14 @@
+import type { CompiledAgentManifest } from "#compiler/manifest.js";
+import type { DynamicSchedulesDefinition } from "#public/schedules/subscription.js";
+import type { CompiledRuntimeAgentBundle } from "#runtime/sessions/compiled-agent-cache.js";
+/** The agent does not deploy the named collection, or not with the expected provider. */
+export declare class ScheduleCollectionNotDeployedError extends Error {
+}
+/**
+ * Reloads a collection's authored definition inside a durable step or queue
+ * callback, where the closure that created the occurrence no longer exists.
+ */
+export declare function loadScheduleCollectionDefinition(bundle: Pick<CompiledRuntimeAgentBundle, "compiledArtifactsSource" | "moduleMap" | "nodeId">, collection: string, options?: {
+    readonly manifest?: CompiledAgentManifest;
+    readonly providerKind?: string;
+}): Promise<DynamicSchedulesDefinition<unknown>>;

package/dist/src/runtime/schedules/load-collection.js

@@ -0,0 +1 @@
+import{loadCompiledManifest}from"#runtime/loaders/manifest.js";import{normalizeScheduleCollectionDefinition}from"#internal/authored-definition/schedule-collection.js";import{loadResolvedModuleExport}from"#runtime/resolve-helpers.js";var ScheduleCollectionNotDeployedError=class extends Error{};async function loadScheduleCollectionDefinition(e,t,n={}){let r=(n.manifest??await loadCompiledManifest({compiledArtifactsSource:e.compiledArtifactsSource})).scheduleCollections.find(e=>e.name===t&&(n.providerKind===void 0||e.providerKind===n.providerKind));if(r===void 0)throw new ScheduleCollectionNotDeployedError(`Schedule collection "${t}" is not deployed by this agent.`);let i=await loadResolvedModuleExport({definition:r,kindLabel:`schedule collection`,moduleMap:e.moduleMap,nodeId:e.nodeId});return normalizeScheduleCollectionDefinition(i,`Invalid schedule collection ${t}.`)}export{ScheduleCollectionNotDeployedError,loadScheduleCollectionDefinition};

package/dist/src/runtime/schedules/payload.d.ts

@@ -0,0 +1,24 @@
+import type { ScheduleEnvelope } from "#public/schedules/subscription.js";
+export interface ScheduleCollectionPayload<TPayload = unknown> {
+    readonly eve: {
+        readonly application: string;
+        readonly collection: string;
+        readonly version: 3;
+    };
+    readonly envelope: ScheduleEnvelope<TPayload>;
+}
+export declare function createScheduleCollectionPayload<TPayload>(input: {
+    readonly application: string;
+    readonly collection: string;
+    readonly envelope: ScheduleEnvelope<TPayload>;
+}): ScheduleCollectionPayload<TPayload>;
+export declare function parseSchedulePayload<TPayload = unknown>(value: unknown, expected?: {
+    readonly application: string;
+    readonly collection: string;
+}): ScheduleCollectionPayload<TPayload>;
+/** Shared validation for client writes and delivered occurrences. */
+export declare function validateSchedulePayload<T>(schema: {
+    readonly "~standard": {
+        validate(value: unknown): unknown;
+    };
+}, value: unknown): Promise<T>;

package/dist/src/runtime/schedules/payload.js

@@ -0,0 +1 @@
+import{z}from"#compiled/zod/index.js";const referenceSchema=z.string().min(1).max(2048),principalReferenceSchema=z.object({type:referenceSchema,authenticator:referenceSchema,issuer:referenceSchema.optional(),principalId:referenceSchema,subject:referenceSchema.optional()}).strict(),payloadSchema=z.object({eve:z.object({application:referenceSchema,collection:referenceSchema,version:z.literal(3)}).strict(),envelope:z.object({version:z.literal(3),payload:z.json(),scope:z.union([z.string().min(1),z.array(z.string().min(1)).min(1)]),principal:principalReferenceSchema}).strict()}).strict();function createScheduleCollectionPayload(e){return parseSchedulePayload({eve:{application:e.application,collection:e.collection,version:3},envelope:e.envelope})}function parseSchedulePayload(e,t){let n;try{let t=JSON.stringify(e);if(t===void 0||Buffer.byteLength(t)>65536)throw Error();n=JSON.parse(t)}catch{throw Error(`Invalid scheduled collection payload; recreate the schedule.`)}let r=payloadSchema.safeParse(n);if(!r.success)throw Error(`Invalid scheduled collection payload; recreate the schedule.`);if(t!==void 0&&(r.data.eve.application!==t.application||r.data.eve.collection!==t.collection))throw Error(`Schedule identity changed; recreate the schedule.`);return r.data}async function validateSchedulePayload(e,t){let n=await e[`~standard`].validate(t);if(n.issues!==void 0||!(`value`in n))throw Error(`Invalid schedule payload: ${n.issues?.map(e=>e.message).join(`; `)??`schema validation failed`}.`);return n.value}export{createScheduleCollectionPayload,parseSchedulePayload,validateSchedulePayload};

package/dist/src/runtime/schedules/provider-types.d.ts

@@ -0,0 +1 @@
+export type { ScheduleDelivery, ScheduleDeliveryTarget, ScheduleProviderContext, } from "#public/schedules/provider-types.js";

package/dist/src/runtime/schedules/provider-types.js

@@ -0,0 +1 @@
+export{};

package/dist/src/runtime/schedules/queue-namespace.d.ts

@@ -0,0 +1,2 @@
+/** Derives the private Vercel Queues topic used by one eve agent's schedule collections. */
+export declare function deriveEveScheduleQueueTopic(application: string): string;

package/dist/src/runtime/schedules/queue-namespace.js

@@ -0,0 +1 @@
+import{createHash}from"node:crypto";function deriveEveScheduleQueueTopic(e){let t=e.trim();if(t.length===0)throw Error(`Schedule application must not be empty.`);return`__eve_schedule_${createHash(`sha256`).update(t).digest(`hex`).slice(0,32)}`}export{deriveEveScheduleQueueTopic};

package/dist/src/runtime/schedules/record.d.ts

@@ -0,0 +1,4 @@
+import type { ScheduleRecord } from "#public/schedules/subscription.js";
+/** Provider names retain the readable label so get/list need no payload read-back. */
+export declare function scheduleDisplayName(name: string): string;
+export declare function projectScheduleRecord(record: ScheduleRecord): ScheduleRecord;

package/dist/src/runtime/schedules/record.js

@@ -0,0 +1 @@
+function scheduleDisplayName(e){return e.replace(/--[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u,``)}function projectScheduleRecord(e){return{...e,displayName:scheduleDisplayName(e.name)}}export{projectScheduleRecord,scheduleDisplayName};

package/dist/src/runtime/schedules/validation.d.ts

@@ -0,0 +1,6 @@
+import type { ScheduleExpression, ScheduleTiming } from "#public/schedules/subscription.js";
+export declare function validateScheduleName(name: string): string;
+export declare const MAX_SCHEDULE_DELAY_MINUTES = 525600;
+export declare function resolveScheduleTiming(timing: ScheduleTiming, now?: number): ScheduleExpression;
+export declare function validateScheduleExpression(expression: ScheduleExpression): ScheduleExpression;
+export declare function validateScheduleListLimit(limit: number | undefined): number | undefined;

package/dist/src/runtime/schedules/validation.js

@@ -0,0 +1 @@
+const SCHEDULE_IDENTIFIER=/^[0-9A-Za-z][0-9A-Za-z._-]{0,255}$/u,LOCAL_DATE_TIME=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(?::00)?$/u;function validateScheduleName(e){let t=e.trim();if(!SCHEDULE_IDENTIFIER.test(t))throw Error(`Schedule name must be 1–256 characters, start with an ASCII letter or digit, and contain only letters, digits, '.', '_', and '-'.`);return t}const MAX_SCHEDULE_DELAY_MINUTES=525600;function resolveScheduleTiming(e,t=Date.now()){if(e.type!==`delay`)return validateScheduleExpression(e);if(!Number.isSafeInteger(e.minutes)||e.minutes<1||e.minutes>525600)throw Error(`Schedule delay must be a whole number from 1 through ${MAX_SCHEDULE_DELAY_MINUTES} minutes.`);if(Object.keys(e).some(e=>e!==`type`&&e!==`minutes`))throw Error(`Relative schedule delays accept only type and minutes; no timezone is needed.`);return{type:`single`,at:new Date(Math.ceil((t+e.minutes*6e4)/6e4)*6e4).toISOString().slice(0,16),timezone:`UTC`}}function validateScheduleExpression(e){if(e.type===`cron`){let t=e.cron.trim().replace(/\s+/gu,` `);if(t.split(` `).length!==5)throw Error(`Schedule cron expressions must contain exactly five fields.`);let n={type:`cron`,cron:t};if(e.timezone!==void 0&&(n.timezone=validateTimezone(e.timezone)),e.jitter!==void 0){if(!Number.isSafeInteger(e.jitter)||e.jitter<1||e.jitter>15)throw Error(`Schedule jitter must be an integer from 1 through 15 minutes.`);n.jitter=e.jitter}return n}if(!LOCAL_DATE_TIME.test(e.at))throw Error(`One-time schedules require a minute-precision local datetime in "YYYY-MM-DDTHH:mm" or "YYYY-MM-DDTHH:mm:00" format without an offset or fractional seconds.`);let t={type:`single`,at:e.at};return e.timezone!==void 0&&(t.timezone=validateTimezone(e.timezone)),t}function validateScheduleListLimit(e){if(e!==void 0){if(!Number.isSafeInteger(e)||e<1||e>100)throw Error(`Schedule list limit must be an integer from 1 through 100.`);return e}}function validateTimezone(e){let t=e.trim();if(t.length===0||t.length>50)throw Error(`Schedule timezone must be a valid IANA timezone.`);try{new Intl.DateTimeFormat(`en-US`,{timeZone:t}).format(0)}catch{throw Error(`Invalid IANA timezone: ${t}`)}return t}export{MAX_SCHEDULE_DELAY_MINUTES,resolveScheduleTiming,validateScheduleExpression,validateScheduleListLimit,validateScheduleName};

package/dist/src/runtime/sessions/compiled-agent-cache.js

@@ -1 +1 @@
-import{loadCompiledManifest}from"#runtime/loaders/manifest.js";import{resolvePackageSourceFilePath}from"#internal/application/package.js";import{pathToFileURL}from"node:url";import{getResolvedRuntimeAgentNode}from"#runtime/graph.js";import{getRuntimeCompiledArtifactsCacheKey}from"#runtime/compiled-artifacts-source.js";import{resolveRuntimeAgentGraph}from"#runtime/resolve-agent-graph.js";import{resolveRuntimeCompiledArtifactsVersionedCacheKey}from"#runtime/cache-key.js";import{getActiveRuntimeSession}from"#runtime/sessions/runtime-session.js";import{createRuntimeAdapterRegistry}from"#runtime/channels/registry.js";import{loadCompiledModuleMap}from"#runtime/loaders/module-map.js";const isCacheDisabled=process.env.EVE_DISABLE_AGENT_CACHE===`1`;function isDevelopmentRuntimeSnapshotRoot(e){return e.replaceAll(`\\`,`/`).includes(`/.eve/dev-runtime/snapshots/`)}function normalizeCompiledArtifactsSource(e){return e.kind!==`disk`||e.moduleMapLoaderPath!==void 0||!isDevelopmentRuntimeSnapshotRoot(e.appRoot)?e:{...e,moduleMapLoaderPath:resolvePackageSourceFilePath(`src/internal/authored-module-map-loader.ts`)}}async function loadFullBundle(e){let t=normalizeCompiledArtifactsSource(e),[n,r]=await Promise.all([loadCompiledManifest({compiledArtifactsSource:t}),loadRuntimeCompiledModuleMap(t)]),i=await resolveRuntimeAgentGraph({manifest:n,moduleMap:r}),a=i.root;return{adapterRegistry:createRuntimeAdapterRegistry({channels:collectResolvedChannels(i)}),compiledArtifactsSource:t,graph:i,hookRegistry:a.hookRegistry,moduleMap:r,resolvedAgent:a.agent,subagentRegistry:a.subagentRegistry,toolRegistry:a.toolRegistry,turnAgent:a.turnAgent}}async function loadRuntimeCompiledModuleMap(e){return e.kind===`disk`&&e.moduleMapLoaderPath!==void 0?await loadAuthoredSourceCompiledModuleMap(e):await loadCompiledModuleMap({compiledArtifactsSource:e})}async function loadAuthoredSourceCompiledModuleMap(e){if(e.moduleMapLoaderPath===void 0)throw Error(`Authored-source module map loading requires "moduleMapLoaderPath" in the compiled artifacts source.`);return await(await import(pathToFileURL(e.moduleMapLoaderPath).href)).loadCompiledModuleMapFromAuthoredSource({compiledArtifactsSource:e})}async function getOrLoadFullBundle(e){let t=normalizeCompiledArtifactsSource(e);if(isCacheDisabled)return loadFullBundle(t);let n=getActiveRuntimeSession(),r=getRuntimeCompiledArtifactsCacheKey(t),i=await resolveRuntimeCompiledArtifactsVersionedCacheKey(t),a=n.bundleCacheKeyBySourceKey.get(r);a!==void 0&&a!==i&&n.bundleCache.delete(a),n.bundleCacheKeyBySourceKey.set(r,i);let o=n.bundleCache.get(i);if(o!==void 0)return o;let s=loadFullBundle(t).catch(e=>{throw n.bundleCache.delete(i),n.bundleCacheKeyBySourceKey.get(r)===i&&n.bundleCacheKeyBySourceKey.delete(r),e});return n.bundleCache.set(i,s),s}async function getCompiledRuntimeAgentBundle(e){let t=await getOrLoadFullBundle(e.compiledArtifactsSource);if(e.nodeId===void 0)return t;let n=getResolvedRuntimeAgentNode(t.graph,e.nodeId);return{adapterRegistry:t.adapterRegistry,compiledArtifactsSource:t.compiledArtifactsSource,graph:{nodesByNodeId:t.graph.nodesByNodeId,root:n},hookRegistry:n.hookRegistry,moduleMap:t.moduleMap,nodeId:e.nodeId,resolvedAgent:n.agent,subagentRegistry:n.subagentRegistry,toolRegistry:n.toolRegistry,turnAgent:n.turnAgent}}function clearCompiledRuntimeAgentBundleCache(){let e=getActiveRuntimeSession();e.bundleCache.clear(),e.bundleCacheKeyBySourceKey.clear()}function collectResolvedChannels(e){let t=new Map;for(let n of e.nodesByNodeId.values())for(let e of n.channels)t.set(`${e.sourceId}:${e.name}`,e);return[...t.values()]}export{clearCompiledRuntimeAgentBundleCache,getCompiledRuntimeAgentBundle};
+import{resolveRuntimeCompiledArtifactsVersionedCacheKey}from"#runtime/cache-key.js";import{getRuntimeCompiledArtifactsCacheKey}from"#runtime/compiled-artifacts-source.js";import{loadCompiledManifest}from"#runtime/loaders/manifest.js";import{getActiveRuntimeSession}from"#runtime/sessions/runtime-session.js";import{resolvePackageSourceFilePath}from"#internal/application/package.js";import{pathToFileURL}from"node:url";import{getResolvedRuntimeAgentNode}from"#runtime/graph.js";import{resolveRuntimeAgentGraph}from"#runtime/resolve-agent-graph.js";import{createRuntimeAdapterRegistry}from"#runtime/channels/registry.js";import{loadCompiledModuleMap}from"#runtime/loaders/module-map.js";const isCacheDisabled=process.env.EVE_DISABLE_AGENT_CACHE===`1`;function isDevelopmentRuntimeSnapshotRoot(e){return e.replaceAll(`\\`,`/`).includes(`/.eve/dev-runtime/snapshots/`)}function normalizeCompiledArtifactsSource(e){return e.kind!==`disk`||e.moduleMapLoaderPath!==void 0||!isDevelopmentRuntimeSnapshotRoot(e.appRoot)?e:{...e,moduleMapLoaderPath:resolvePackageSourceFilePath(`src/internal/authored-module-map-loader.ts`)}}async function loadFullBundle(e){let t=normalizeCompiledArtifactsSource(e),[n,r]=await Promise.all([loadCompiledManifest({compiledArtifactsSource:t}),loadRuntimeCompiledModuleMap(t)]),i=await resolveRuntimeAgentGraph({manifest:n,moduleMap:r}),a=i.root;return{adapterRegistry:createRuntimeAdapterRegistry({channels:collectResolvedChannels(i)}),compiledArtifactsSource:t,graph:i,hookRegistry:a.hookRegistry,moduleMap:r,resolvedAgent:a.agent,subagentRegistry:a.subagentRegistry,toolRegistry:a.toolRegistry,turnAgent:a.turnAgent}}async function loadRuntimeCompiledModuleMap(e){return e.kind===`disk`&&e.moduleMapLoaderPath!==void 0?await loadAuthoredSourceCompiledModuleMap(e):await loadCompiledModuleMap({compiledArtifactsSource:e})}async function loadAuthoredSourceCompiledModuleMap(e){if(e.moduleMapLoaderPath===void 0)throw Error(`Authored-source module map loading requires "moduleMapLoaderPath" in the compiled artifacts source.`);return await(await import(pathToFileURL(e.moduleMapLoaderPath).href)).loadCompiledModuleMapFromAuthoredSource({compiledArtifactsSource:e})}async function getOrLoadFullBundle(e){let t=normalizeCompiledArtifactsSource(e);if(isCacheDisabled)return loadFullBundle(t);let n=getActiveRuntimeSession(),r=getRuntimeCompiledArtifactsCacheKey(t),i=await resolveRuntimeCompiledArtifactsVersionedCacheKey(t),a=n.bundleCacheKeyBySourceKey.get(r);a!==void 0&&a!==i&&n.bundleCache.delete(a),n.bundleCacheKeyBySourceKey.set(r,i);let o=n.bundleCache.get(i);if(o!==void 0)return o;let s=loadFullBundle(t).catch(e=>{throw n.bundleCache.delete(i),n.bundleCacheKeyBySourceKey.get(r)===i&&n.bundleCacheKeyBySourceKey.delete(r),e});return n.bundleCache.set(i,s),s}async function getCompiledRuntimeAgentBundle(e){let t=await getOrLoadFullBundle(e.compiledArtifactsSource);if(e.nodeId===void 0)return t;let n=getResolvedRuntimeAgentNode(t.graph,e.nodeId);return{adapterRegistry:t.adapterRegistry,compiledArtifactsSource:t.compiledArtifactsSource,graph:{nodesByNodeId:t.graph.nodesByNodeId,root:n},hookRegistry:n.hookRegistry,moduleMap:t.moduleMap,nodeId:e.nodeId,resolvedAgent:n.agent,subagentRegistry:n.subagentRegistry,toolRegistry:n.toolRegistry,turnAgent:n.turnAgent}}function clearCompiledRuntimeAgentBundleCache(){let e=getActiveRuntimeSession();e.bundleCache.clear(),e.bundleCacheKeyBySourceKey.clear()}function collectResolvedChannels(e){let t=new Map;for(let n of e.nodesByNodeId.values())for(let e of n.channels)t.set(`${e.sourceId}:${e.name}`,e);return[...t.values()]}export{clearCompiledRuntimeAgentBundleCache,getCompiledRuntimeAgentBundle};

package/dist/src/runtime/sessions/runtime-context-keys.js

@@ -1 +1 @@
-import{getAdapterKind}from"#channel/adapter.js";import{ContextKey}from"#context/key.js";import{CHANNEL_CONTEXT_KEY_NAME}from"#context/key-names.js";import{resolveDurableCompiledArtifactsSource,serializeDurableCompiledArtifactsSource}from"#runtime/durable-compiled-artifacts-source.js";import{getCompiledRuntimeAgentBundle}from"#runtime/sessions/compiled-agent-cache.js";import{deserializeRuntimeAdapter}from"#runtime/channels/registry.js";const ChannelKey=new ContextKey(CHANNEL_CONTEXT_KEY_NAME,{codec:{serialize(e){return{kind:getAdapterKind(e),state:e.state?{...e.state}:{}}},deserialize(e,t){let n=t.get(BundleKey);if(n===void 0)throw Error(`Cannot deserialize "eve.channel" before "eve.bundle". The runtime bundle must be present in context.`);return deserializeRuntimeAdapter(n.adapterRegistry,e)}}}),BundleKey=new ContextKey(`eve.bundle`,{codec:{serialize:e=>({nodeId:e.nodeId,source:serializeDurableCompiledArtifactsSource(e.compiledArtifactsSource)}),deserialize:e=>{let{source:t,nodeId:n}=e;return getCompiledRuntimeAgentBundle({compiledArtifactsSource:resolveDurableCompiledArtifactsSource(t),nodeId:n})}}});export{BundleKey,ChannelKey};
+import{getAdapterKind}from"#channel/adapter.js";import{ContextKey}from"#context/key.js";import{BUNDLE_CONTEXT_KEY_NAME,CHANNEL_CONTEXT_KEY_NAME}from"#context/key-names.js";import{resolveDurableCompiledArtifactsSource,serializeDurableCompiledArtifactsSource}from"#runtime/durable-compiled-artifacts-source.js";import{getCompiledRuntimeAgentBundle}from"#runtime/sessions/compiled-agent-cache.js";import{deserializeRuntimeAdapter}from"#runtime/channels/registry.js";const ChannelKey=new ContextKey(CHANNEL_CONTEXT_KEY_NAME,{codec:{serialize(e){return{kind:getAdapterKind(e),state:e.state?{...e.state}:{}}},deserialize(e,t){let n=t.get(BundleKey);if(n===void 0)throw Error(`Cannot deserialize "eve.channel" before "eve.bundle". The runtime bundle must be present in context.`);return deserializeRuntimeAdapter(n.adapterRegistry,e)}}}),BundleKey=new ContextKey(BUNDLE_CONTEXT_KEY_NAME,{codec:{serialize:e=>({nodeId:e.nodeId,source:serializeDurableCompiledArtifactsSource(e.compiledArtifactsSource)}),deserialize:e=>{let{source:t,nodeId:n}=e;return getCompiledRuntimeAgentBundle({compiledArtifactsSource:resolveDurableCompiledArtifactsSource(t),nodeId:n})}}});export{BundleKey,ChannelKey};

package/dist/src/runtime/sessions/runtime-session.d.ts

@@ -1,3 +1,4 @@
+import type { DescribedAgent } from "#channel/agent-description.js";
 import type { BundledCompiledArtifacts } from "#runtime/loaders/bundled-artifacts.js";
 import type { CompiledRuntimeAgentBundle } from "#runtime/sessions/compiled-agent-cache.js";
 /**
@@ -30,6 +31,15 @@ export interface RuntimeSession {
      * changes.
      */
     readonly bundleCacheKeyBySourceKey: Map<string, string>;
+    /**
+     * Agents as channel routes describe them, keyed by the stable source key
+     * and tagged with the versioned cache key they were loaded under, so a
+     * recompile under the same app root replaces the entry.
+     */
+    readonly describedAgents: Map<string, {
+        readonly agent: Promise<DescribedAgent>;
+        readonly version: string;
+    }>;
 }
 /**
  * Creates a fresh, empty runtime session.

package/dist/src/runtime/sessions/runtime-session.js

@@ -1 +1 @@
-import{AsyncLocalStorage}from"node:async_hooks";function createRuntimeSession(e=`test-session`){return{bundleCache:new Map,bundleCacheKeyBySourceKey:new Map,compiledArtifacts:null,id:e}}function setRuntimeSessionCompiledArtifacts(e,t){let n=e.compiledArtifacts;(n===null||!isSameCompiledArtifactSnapshot(n,t))&&(e.bundleCache.clear(),e.bundleCacheKeyBySourceKey.clear()),e.compiledArtifacts=t}function isSameCompiledArtifactSnapshot(e,t){let n=e.metadata?.discovery.sourceGraphHash,r=t.metadata?.discovery.sourceGraphHash;return n&&r?n===r&&JSON.stringify(e.sandboxPreparedArtifacts)===JSON.stringify(t.sandboxPreparedArtifacts):e.manifest===t.manifest&&e.moduleMap===t.moduleMap&&e.metadata===t.metadata}const RUNTIME_SESSION_STORAGE_GLOBAL_KEY=Symbol.for(`eve.runtime-session-storage`),RUNTIME_SESSION_DEFAULT_GLOBAL_KEY=Symbol.for(`eve.runtime-session-default`),globalContainer=globalThis;globalContainer[RUNTIME_SESSION_STORAGE_GLOBAL_KEY]===void 0&&(globalContainer[RUNTIME_SESSION_STORAGE_GLOBAL_KEY]=new AsyncLocalStorage);const runtimeSessionStorage=globalContainer[RUNTIME_SESSION_STORAGE_GLOBAL_KEY];function resolveProcessDefaultSession(){return globalContainer[RUNTIME_SESSION_DEFAULT_GLOBAL_KEY]===void 0&&(globalContainer[RUNTIME_SESSION_DEFAULT_GLOBAL_KEY]=createRuntimeSession(`process-default`)),globalContainer[RUNTIME_SESSION_DEFAULT_GLOBAL_KEY]}function getActiveRuntimeSession(){return runtimeSessionStorage.getStore()??resolveProcessDefaultSession()}async function withRuntimeSession(e,t){return await runtimeSessionStorage.run(e,async()=>await t())}export{createRuntimeSession,getActiveRuntimeSession,setRuntimeSessionCompiledArtifacts,withRuntimeSession};
+import{AsyncLocalStorage}from"node:async_hooks";function createRuntimeSession(e=`test-session`){return{bundleCache:new Map,bundleCacheKeyBySourceKey:new Map,compiledArtifacts:null,describedAgents:new Map,id:e}}function setRuntimeSessionCompiledArtifacts(e,t){let n=e.compiledArtifacts;(n===null||!isSameCompiledArtifactSnapshot(n,t))&&(e.bundleCache.clear(),e.bundleCacheKeyBySourceKey.clear(),e.describedAgents.clear()),e.compiledArtifacts=t}function isSameCompiledArtifactSnapshot(e,t){let n=e.metadata?.discovery.sourceGraphHash,r=t.metadata?.discovery.sourceGraphHash;return n&&r?n===r&&JSON.stringify(e.sandboxPreparedArtifacts)===JSON.stringify(t.sandboxPreparedArtifacts):e.manifest===t.manifest&&e.moduleMap===t.moduleMap&&e.metadata===t.metadata}const RUNTIME_SESSION_STORAGE_GLOBAL_KEY=Symbol.for(`eve.runtime-session-storage`),RUNTIME_SESSION_DEFAULT_GLOBAL_KEY=Symbol.for(`eve.runtime-session-default`),globalContainer=globalThis;globalContainer[RUNTIME_SESSION_STORAGE_GLOBAL_KEY]===void 0&&(globalContainer[RUNTIME_SESSION_STORAGE_GLOBAL_KEY]=new AsyncLocalStorage);const runtimeSessionStorage=globalContainer[RUNTIME_SESSION_STORAGE_GLOBAL_KEY];function resolveProcessDefaultSession(){return globalContainer[RUNTIME_SESSION_DEFAULT_GLOBAL_KEY]===void 0&&(globalContainer[RUNTIME_SESSION_DEFAULT_GLOBAL_KEY]=createRuntimeSession(`process-default`)),globalContainer[RUNTIME_SESSION_DEFAULT_GLOBAL_KEY]}function getActiveRuntimeSession(){return runtimeSessionStorage.getStore()??resolveProcessDefaultSession()}async function withRuntimeSession(e,t){return await runtimeSessionStorage.run(e,async()=>await t())}export{createRuntimeSession,getActiveRuntimeSession,setRuntimeSessionCompiledArtifacts,withRuntimeSession};

package/dist/src/runtime/types.d.ts

@@ -78,6 +78,8 @@ export type ResolvedScheduleDefinition = Readonly<SourceRef & {
  */
 export interface ResolvedConnectionDefinition extends ResolvedModuleSourceRef {
     readonly protocolVersionDiscovery?: boolean;
+    /** MCP only: send the turn's principals in `eve-forwarded-principal`. */
+    readonly forwardPrincipal?: boolean;
     readonly approval?: Approval;
     readonly authorization?: Readonly<AuthorizationDefinition> | ConnectionAuthResolver;
     readonly connectionName: string;

package/dist/src/self-modification/config.d.ts

@@ -1,78 +1,19 @@
-import type { SessionAuthContext } from "#channel/types.js";
 import type { AgentReasoningDefinition, AgentStaticModelDefinition } from "#public/index.js";
-/** Principal and channel that requested a deployed source modification. */
-export interface SelfModificationAuthorizationContext {
-    readonly channel: {
-        /** Channel adapter family, such as `"slack"` or `"http"`. */
-        readonly kind?: string;
-        readonly metadata?: Readonly<Record<string, unknown>>;
-    };
-    readonly principal: SessionAuthContext | null;
-}
-/** Decides whether a principal may use deployed self-modification. */
-export type SelfModificationAuthorization = (context: SelfModificationAuthorizationContext) => boolean | Promise<boolean>;
-export interface GitHubRepository {
-    readonly owner: string;
-    readonly repo: string;
-}
-export type GitHubCredentialCapability = "checkout" | "publish";
-export interface GitHubCredentialRequest {
-    readonly capability: GitHubCredentialCapability;
-    readonly repository: GitHubRepository;
-}
-/** Application-supplied GitHub credentials for deployed self-modification. */
-export interface GitHubCredentialProvider {
-    resolve(request: GitHubCredentialRequest): Promise<string>;
-}
+export declare const DEPLOYED_OPTION_MOVED_MESSAGE = "The `deployed` option moved to the separate `eve/self-modification/remote` mount. Remove it from this local self-modification mount and mount `eve/self-modification/remote` instead.";
+/** Local self-modification settings shared by its bundled child and sandbox. */
 export interface SelfModificationConfig {
     readonly local?: {
         readonly enabled?: boolean;
     };
-    readonly deployed?: {
-        readonly source: {
-            readonly git: {
-                /** GitHub repository in github.com/owner/repository form. */
-                readonly repository: string;
-                /** Application directory relative to the repository root. */
-                readonly directory: string;
-            };
-        };
-        readonly target: {
-            readonly branch: string;
-        };
-        /** Fail-closed policy for principals that may create draft proposals. */
-        readonly authorize: SelfModificationAuthorization;
-        readonly credentials?: GitHubCredentialProvider | {
-            /**
-             * Self-hosted exception. Reads `EVE_SELF_MODIFICATION_GITHUB_TOKEN` from
-             * the trusted deployment environment; never injects it into the sandbox.
-             */
-            readonly pat: true;
-        };
-    };
 }
-/** Values accepted by the self-modification extension mount. */
+/** Values accepted by the local self-modification extension mount. */
 export interface SelfModificationExtensionConfig extends SelfModificationConfig {
     readonly model?: AgentStaticModelDefinition;
     readonly reasoning?: AgentReasoningDefinition;
 }
 export interface ResolvedSelfModificationConfig {
     readonly localEnabled: boolean;
-    readonly deployed?: ResolvedDeployedSelfModificationConfig;
-}
-export interface ResolvedDeployedSelfModificationConfig {
-    readonly authorize: SelfModificationAuthorization;
-    readonly credentials: ResolvedGitHubCredentials;
-    readonly directory: string;
-    readonly repository: GitHubRepository;
-    readonly targetBranch: string;
 }
-export type ResolvedGitHubCredentials = {
-    readonly kind: "pat";
-} | {
-    readonly kind: "provider";
-    readonly provider: GitHubCredentialProvider;
-};
-/** Defines the policy shared by the self-modification agent, sandbox, and extension. */
+/** Defines the local self-modification policy. */
 export declare function defineSelfModificationConfig(config?: SelfModificationConfig): SelfModificationConfig;
 export declare function resolveSelfModificationConfig(config?: SelfModificationConfig): ResolvedSelfModificationConfig;

package/dist/src/self-modification/config.js

@@ -1 +1 @@
-import{assertGitRef,assertRepositoryPart}from"./identifiers.js";function defineSelfModificationConfig(e={}){return resolveSelfModificationConfig(e),e}function resolveSelfModificationConfig(e={}){if(!isRecord(e))throw Error(`Self-modification configuration must be an object.`);let t=e.local;if(t!==void 0&&!isRecord(t))throw Error(`Self-modification local must be an object.`);let n=t?.enabled??!0;if(typeof n!=`boolean`)throw Error(`Self-modification local.enabled must be a boolean.`);let r=e.deployed;if(r===void 0)return{localEnabled:n};if(!isRecord(r))throw Error(`Self-modification deployed must be an object.`);let{source:i,target:a,authorize:o,credentials:s}=r;if(i===void 0||a===void 0||o===void 0)throw Error(`Self-modification deployed requires source, target, and authorization configuration.`);if(!isRecord(i))throw Error(`Self-modification deployed.source must be an object.`);if(!isRecord(i.git))throw Error(`Self-modification deployed.source.git must be an object.`);if(!isRecord(a))throw Error(`Self-modification deployed.target must be an object.`);if(typeof o!=`function`)throw Error(`Self-modification deployed.authorize must be a function.`);let{git:c}=i;if(typeof c.repository!=`string`||typeof c.directory!=`string`)throw Error(`Self-modification deployed.source.git.repository and deployed.source.git.directory must be strings.`);if(typeof a.branch!=`string`)throw Error(`Self-modification deployed.target.branch must be a string.`);return{deployed:{authorize:o,credentials:parseCredentials(s),directory:parseDirectory(c.directory),repository:parseGitHubRepository(c.repository),targetBranch:parseBranch(a.branch)},localEnabled:n}}function parseCredentials(e){if(!isRecord(e))throw Error(`Self-modification deployed.credentials must explicitly configure a credential provider or the self-hosted PAT exception.`);let t=e.resolve!==void 0,n=e.pat!==void 0;if(t&&n)throw Error(`Self-modification deployed.credentials must configure either a credential provider or pat, not both.`);if(n){if(e.pat!==!0)throw Error(`Self-modification deployed.credentials.pat must be true.`);return{kind:`pat`}}if(!isGitHubCredentialProvider(e))throw Error(`Self-modification deployed.credentials must be an object with a resolve function.`);return{kind:`provider`,provider:e}}function isGitHubCredentialProvider(e){return isRecord(e)&&typeof e.resolve==`function`}function parseGitHubRepository(e){let t=/^github\.com\/([^/]+)\/([^/]+)$/u.exec(e);if(t?.[1]===void 0||t[2]===void 0)throw Error(`Self-modification deployed.source.git.repository must use github.com/owner/repo form.`);return assertRepositoryPart(t[1],`repository owner`),assertRepositoryPart(t[2],`repository name`),{owner:t[1],repo:t[2]}}function parseDirectory(e){if(e!==`.`&&(e.length===0||e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).some(e=>e===``||e===`.`||e===`..`)))throw Error(`Self-modification deployed.source.git.directory must be a safe repository-relative path.`);return e}function parseBranch(e){if(assertGitRef(e,`target branch`),e.startsWith(`refs/`))throw Error(`Self-modification deployed.target.branch must be a branch name, not a full Git ref.`);return e}function isRecord(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}export{defineSelfModificationConfig,resolveSelfModificationConfig};
+const DEPLOYED_OPTION_MOVED_MESSAGE="The `deployed` option moved to the separate `eve/self-modification/remote` mount. Remove it from this local self-modification mount and mount `eve/self-modification/remote` instead.";function defineSelfModificationConfig(e={}){return resolveSelfModificationConfig(e),e}function resolveSelfModificationConfig(e={}){if(!isRecord(e))throw Error(`Self-modification configuration must be an object.`);if(`deployed`in e)throw Error(DEPLOYED_OPTION_MOVED_MESSAGE);let t=e.local;if(t!==void 0&&!isRecord(t))throw Error(`Self-modification local must be an object.`);let n=t?.enabled??!0;if(typeof n!=`boolean`)throw Error(`Self-modification local.enabled must be a boolean.`);return{localEnabled:n}}function isRecord(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}export{DEPLOYED_OPTION_MOVED_MESSAGE,defineSelfModificationConfig,resolveSelfModificationConfig};

package/dist/src/self-modification/credentials.d.ts

@@ -1,4 +1,4 @@
-import type { GitHubCredentialProvider, ResolvedGitHubCredentials } from "./config.js";
+import type { GitHubCredentialProvider, ResolvedGitHubCredentials } from "./remote/config.js";
 export declare const SELF_MODIFICATION_GITHUB_TOKEN_ENV = "EVE_SELF_MODIFICATION_GITHUB_TOKEN";
 /** Checks PAT availability without returning the credential. */
 export declare function hasGitHubCredential(): boolean;

package/dist/src/self-modification/deployed-sandbox.d.ts

@@ -0,0 +1,14 @@
+import { MicrosandboxSandbox } from "#sandbox/providers/microsandbox.js";
+import { type DefaultSandboxProbes } from "#sandbox/providers/default.js";
+import { VercelSandbox } from "#sandbox/providers/vercel.js";
+import { type SandboxSelector } from "#shared/sandbox-environment.js";
+import { type DeployedSelfModificationConfig } from "./remote/config.js";
+type Probes = Pick<DefaultSandboxProbes, "isDeployedOnVercel" | "isMicrosandboxSupported">;
+type DeployedSelfModificationEnvironment = ReturnType<typeof MicrosandboxSandbox.environment> | ReturnType<typeof VercelSandbox.environment>;
+/**
+ * Defines the deployed child's sandbox. During `eve dev` the deployed child is never
+ * offered, so its sandbox binds an inert environment instead of probing providers.
+ */
+export declare function defineDeployedSelfModificationSandbox(config: DeployedSelfModificationConfig, probes?: Probes): SandboxSelector;
+export declare function selectDeployedSelfModificationEnvironment(probes: Probes): DeployedSelfModificationEnvironment;
+export {};

package/dist/src/self-modification/deployed-sandbox.js

@@ -0,0 +1 @@
+import{createGitHubCredentialProvider}from"./credentials.js";import{SELF_MODIFICATION_BASELINE_NETWORK_POLICY}from"./network-policy.js";import{REPOSITORY_PATH,prepareSelfModificationWorkspace}from"./git-workspace.js";import{isDeployedRuntime}from"./mode.js";import{resolveDeployedSelfModificationConfig}from"./remote/config.js";import{bindSandboxEnvironment}from"#shared/sandbox-environment.js";import{shellQuote}from"#shared/shell-quote.js";import{defineSandbox}from"#public/definitions/sandbox.js";import{SANDBOX_PROVIDER_PROBES}from"#sandbox/providers/default.js";import{JustBashSandbox}from"#sandbox/providers/just-bash.js";import{MicrosandboxSandbox}from"#sandbox/providers/microsandbox.js";import{VercelSandbox}from"#sandbox/providers/vercel.js";function defineDeployedSelfModificationSandbox(e,t=SANDBOX_PROVIDER_PROBES){if(!isDeployedRuntime()){let e=JustBashSandbox.environment();return bindSandboxEnvironment(defineSandbox(()=>e.open()),e)}let n=resolveDeployedSelfModificationConfig(e),r=selectDeployedSelfModificationEnvironment(t);return bindSandboxEnvironment(defineSandbox(async({session:e})=>{let t=await r.open({networkPolicy:SELF_MODIFICATION_BASELINE_NETWORK_POLICY});if(e.parent===void 0)throw Error(`Production self-modification requires a child session.`);if(t.setNetworkPolicy===void 0)throw Error(`Production self-modification requires mutable sandbox network policy.`);let i={...t,setNetworkPolicy:t.setNetworkPolicy},a=await createGitHubCredentialProvider(n.credentials).resolve({capability:`checkout`,repository:n.repository});await prepareSelfModificationWorkspace({directory:n.directory,repository:n.repository,sandbox:i,targetBranch:n.targetBranch,token:a});let o=n.directory===`.`?REPOSITORY_PATH:`${REPOSITORY_PATH}/${n.directory}`;if((await t.run({command:`rm -rf /source && ln -s ${shellQuote(`${o}/agent`)} /source`})).exitCode!==0)throw Error(`Self-modification could not mount the agent source.`);return t}),r)}function selectDeployedSelfModificationEnvironment(e){if(e.isDeployedOnVercel())return VercelSandbox.environment();if(e.isMicrosandboxSupported())return MicrosandboxSandbox.environment();throw Error(`Deployed self-modification requires runtime credential transforms. No supported provider is available. Use Vercel Sandbox or microsandbox on a supported self-hosted system.`)}export{defineDeployedSelfModificationSandbox,selectDeployedSelfModificationEnvironment};

package/dist/src/self-modification/extension/config-schema.d.ts

@@ -1,25 +1,10 @@
 import { z } from "#compiled/zod/index.js";
 import type { AgentReasoningDefinition, AgentStaticModelDefinition } from "#public/index.js";
-import type { GitHubCredentialProvider, SelfModificationAuthorization } from "../config.js";
 export declare const selfModificationConfigSchema: z.ZodObject<{
     model: z.ZodOptional<z.ZodCustom<AgentStaticModelDefinition, AgentStaticModelDefinition>>;
     reasoning: z.ZodOptional<z.ZodCustom<AgentReasoningDefinition, AgentReasoningDefinition>>;
     local: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
-    deployed: z.ZodOptional<z.ZodObject<{
-        credentials: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
-            pat: z.ZodLiteral<true>;
-        }, z.core.$strip>, z.ZodCustom<GitHubCredentialProvider, GitHubCredentialProvider>]>>;
-        source: z.ZodObject<{
-            git: z.ZodObject<{
-                directory: z.ZodString;
-                repository: z.ZodString;
-            }, z.core.$strip>;
-        }, z.core.$strip>;
-        target: z.ZodObject<{
-            branch: z.ZodString;
-        }, z.core.$strip>;
-        authorize: z.ZodCustom<SelfModificationAuthorization, SelfModificationAuthorization>;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
+    deployed: z.ZodOptional<z.ZodCustom<never, never>>;
+}, z.core.$strict>;

package/dist/src/self-modification/extension/config-schema.js

@@ -1 +1 @@
-import{z}from"#compiled/zod/index.js";import{isAgentReasoningDefinition,isRuntimeLanguageModel}from"#internal/runtime-model.js";const selfModificationConfigSchema=z.object({model:z.custom(e=>typeof e==`string`||isRuntimeLanguageModel(e)).optional(),reasoning:z.custom(isAgentReasoningDefinition).optional(),local:z.object({enabled:z.boolean().optional()}).optional(),deployed:z.object({credentials:z.union([z.object({pat:z.literal(!0)}),z.custom(e=>typeof e==`object`&&!!e&&`resolve`in e&&typeof e.resolve==`function`)]).optional(),source:z.object({git:z.object({directory:z.string(),repository:z.string()})}),target:z.object({branch:z.string()}),authorize:z.custom(e=>typeof e==`function`)}).optional()});export{selfModificationConfigSchema};
+import{DEPLOYED_OPTION_MOVED_MESSAGE}from"../config.js";import{z}from"#compiled/zod/index.js";import{isAgentReasoningDefinition,isRuntimeLanguageModel}from"#internal/runtime-model.js";const selfModificationConfigSchema=z.object({model:z.custom(e=>typeof e==`string`||isRuntimeLanguageModel(e)).optional(),reasoning:z.custom(isAgentReasoningDefinition).optional(),local:z.object({enabled:z.boolean().optional()}).optional(),deployed:z.custom(e=>e===void 0,DEPLOYED_OPTION_MOVED_MESSAGE).optional()}).strict();export{selfModificationConfigSchema};

package/dist/src/self-modification/extension/local-only.d.ts

@@ -1,5 +1,5 @@
 import { type ResolvedSelfModificationConfig } from "../config.js";
 /** Returns a definition only when self-modification is running locally. */
 export declare function resolveLocalOnly<T>(config: ResolvedSelfModificationConfig, definition: T): T | null;
-/** Creates a dynamic definition that is absent from deployed self-modification. */
+/** Creates a dynamic definition that is present only during local development. */
 export declare function defineLocalOnlyDynamic<T>(definition: T): import("#dynamic/definition.js").DynamicSentinel<Awaited<T> | null>;

package/dist/src/self-modification/extension/local-only.js

@@ -1 +1 @@
-import{resolveSelfModificationConfig}from"../config.js";import extension_default from"./extension.js";import{resolveSelfModificationMode}from"../mode.js";import{defineDynamic}from"#dynamic/definition.js";function resolveLocalOnly(e,t){return resolveSelfModificationMode(e)===`local`?t:null}function defineLocalOnlyDynamic(e){return defineDynamic({events:{"session.started":()=>resolveLocalOnly(resolveSelfModificationConfig(extension_default.config),e)}})}export{defineLocalOnlyDynamic,resolveLocalOnly};
+import{resolveSelfModificationConfig}from"../config.js";import{isLocalSelfModificationEnabled}from"../mode.js";import extension_default from"./extension.js";import{defineDynamic}from"#dynamic/definition.js";function resolveLocalOnly(e,t){return isLocalSelfModificationEnabled(e)?t:null}function defineLocalOnlyDynamic(e){return defineDynamic({events:{"session.started":()=>resolveLocalOnly(resolveSelfModificationConfig(extension_default.config),e)}})}export{defineLocalOnlyDynamic,resolveLocalOnly};

package/dist/src/self-modification/extension/subagents/agent/agent.d.ts

@@ -13,7 +13,7 @@ export interface SelfModificationAgentOptions {
      */
     readonly reasoning?: AgentReasoningDefinition;
 }
-/** Defines the environment-aware self-modification dynamic subagent. */
+/** Defines the local development self-modification dynamic subagent. */
 export declare function defineSelfModificationAgent(options?: SelfModificationAgentOptions): DynamicSentinel<DynamicSubagentDefinition | null>;
 declare const _default: DynamicSentinel<DynamicSubagentDefinition | null>;
 export default _default;

package/dist/src/self-modification/extension/subagents/agent/agent.js

@@ -1 +1 @@
-import{resolveSelfModificationConfig}from"../../../config.js";import{hasGitHubCredential}from"../../../credentials.js";import extension_default from"../../extension.js";import{resolveSelfModificationMode}from"../../../mode.js";import{DEFAULT_AGENT_MODEL_ID,DEFAULT_AGENT_REASONING}from"#shared/default-agent-model.js";import{defineAgent,defineDynamic}from"eve";import{getLocalDevCapability}from"eve/local-dev";const FALLBACK_SELF_MODIFICATION_MODEL=DEFAULT_AGENT_MODEL_ID;function renderDescription(e){return e.filter(e=>e.length>0).join(` `)}function defineSelfModificationAgent(e={}){let resolve=async(t,n)=>{let r=extension_default.config,i=e.model??r.model??n.model?.id,a=e.reasoning??r.reasoning??(i===void 0?DEFAULT_AGENT_REASONING:void 0),o=resolveSelfModificationConfig(e.config??r),s=resolveSelfModificationMode(o),c=i??FALLBACK_SELF_MODIFICATION_MODEL,l=renderDescription([`Delegate here immediately when the user asks to change the self-modification subagent's model, reasoning, or configuration. Also delegate when the user asks to change this eve agent or its authored source.`,`If the requested change references a tool or skill, include the exact identifier. Do not infer source paths; let the child resolve the appropriate file under /source. Delegate the requested change and existing constraints without adding unrequested features, implementation steps, or reporting requirements.`,`Treat requests for persistent changes to future behavior or capabilities as source-modification requests, even when the requester does not mention files or source code. Infer persistence from the request and conversation rather than waiting for phrases such as “modify your source.” For example, asking the agent to stop always doing something, add a capability, or change future responses calls for inspecting and editing the authored source instead of providing a one-turn workaround.`,`Treat questions phrased as whether you can install, add, enable, or connect to a named product or service as requests to extend this eve agent and delegate immediately. Do not assume they refer to device software, ask what kind of installation they mean, or deny them because you lack access to the user's device. The subagent determines whether the request maps to an integration, channel, connection, or other capability, then checks registry availability and any required setup.`,s===`local`?`Delegate questions about which integrations, channels, connections, or capabilities are available to add: the subagent searches the eve registry and reports exact item addresses instead of guessing them.`:`Delegate requests to add integrations, channels, connections, or capabilities: the subagent searches the official eve registry and can install source changes into the draft proposal. Setup may require non-secret answers or an external action, and secret binding remains separate.`,s===`local`?`Delegate requests to investigate, diagnose, or optimize the agent's behavior from local traces to this subagent: it can inspect the invoking session's trace and make persistent source changes when warranted.`:``,`Resolve short follow-ups such as “yes” or “do it” against the preceding conversation. If whether the requested change should persist is genuinely ambiguous, ask one concise clarifying question.`,`If a tool or capability created or changed by this subagent later fails or behaves incorrectly, explain the observed problem and offer to delegate a repair. Do not start the repair until the user confirms. Treat that confirmation as a source-modification request and delegate it immediately, including the exact identifier, failing behavior, expected behavior, and existing constraints.`,s===`local`?`Source edits do not affect the caller’s current turn. After this subagent reports changes, do not invoke edited tools or attempt runtime verification until a new user turn.`:`Source edits do not affect the caller’s current turn. The subagent can publish only a draft pull request, and changes become effective only after review, merge, and redeployment.`]);if(s===`local`)return getLocalDevCapability()===void 0?null:defineAgent({description:l,model:c,reasoning:a});if(s!==`deployed`||o.deployed===void 0||o.deployed.credentials.kind===`pat`&&!hasGitHubCredential())return null;try{if(!await o.deployed.authorize({channel:n.channel,principal:n.session.auth.current}))return null}catch{return null}return defineAgent({description:l,model:c,reasoning:a})};return defineDynamic({events:{"session.started":resolve,"turn.started":resolve}})}var agent_default=defineSelfModificationAgent();export{FALLBACK_SELF_MODIFICATION_MODEL,agent_default as default,defineSelfModificationAgent};
+import{resolveSelfModificationConfig}from"../../../config.js";import{isLocalSelfModificationEnabled}from"../../../mode.js";import extension_default from"../../extension.js";import{followUpDelegation,namedInstallationDelegation,persistenceDelegation,renderDescription,repairDelegation,sourceDelegation}from"../../../subagent-guidance.js";import{DEFAULT_AGENT_MODEL_ID,DEFAULT_AGENT_REASONING}from"#shared/default-agent-model.js";import{defineAgent,defineDynamic}from"eve";import{getLocalDevCapability}from"eve/local-dev";const FALLBACK_SELF_MODIFICATION_MODEL=DEFAULT_AGENT_MODEL_ID;function defineSelfModificationAgent(e={}){let resolve=async(t,n)=>{let r=extension_default.config,i=resolveSelfModificationConfig(e.config??r);if(!isLocalSelfModificationEnabled(i)||getLocalDevCapability()===void 0)return null;let a=e.model??r.model??n.model?.id,o=e.reasoning??r.reasoning??(a===void 0?DEFAULT_AGENT_REASONING:void 0),s=a??FALLBACK_SELF_MODIFICATION_MODEL,c=renderDescription([`Delegate here immediately when the user asks to change the self-modification subagent's model, reasoning, or configuration. Also delegate when the user asks to change this eve agent or its authored source.`,sourceDelegation,persistenceDelegation,namedInstallationDelegation,`Delegate questions about which integrations, channels, connections, or capabilities are available to add: the subagent searches the eve registry and reports exact item addresses instead of guessing them.`,`Delegate requests to investigate, diagnose, or optimize the agent's behavior from local traces to this subagent: it can inspect the invoking session's trace and make persistent source changes when warranted.`,followUpDelegation,repairDelegation,`Source edits do not affect the caller’s current turn. After this subagent reports changes, do not invoke edited tools or attempt runtime verification until a new user turn.`]);return defineAgent({description:c,model:s,reasoning:o})};return defineDynamic({events:{"session.started":resolve,"turn.started":resolve}})}var agent_default=defineSelfModificationAgent();export{FALLBACK_SELF_MODIFICATION_MODEL,agent_default as default,defineSelfModificationAgent};

package/dist/src/self-modification/extension/subagents/agent/instructions.js

@@ -1,41 +1,9 @@
-import{resolveSelfModificationConfig}from"../../../config.js";import extension_default from"../../extension.js";import{resolveSelfModificationMode}from"../../../mode.js";import{renderLocalSelfModificationExtension}from"../../../scaffold.js";import{defineDynamic,defineInstructions}from"eve/instructions";const selfModificationSubagentGuidance=`## Changing the self-modification subagent
+import{resolveSelfModificationConfig}from"../../../config.js";import{isLocalSelfModificationEnabled}from"../../../mode.js";import extension_default from"../../extension.js";import{documentationInstructions,registryWorkflowInstructions,renderInstructions,roleInstructions,sourceEditingInstructions,sourceWorkspaceInstructions,toolAuthoringInstructions,workingInstructions}from"../../../subagent-guidance.js";import{renderLocalSelfModificationExtension}from"../../../scaffold.js";import{defineDynamic,defineInstructions}from"eve/instructions";const selfModificationSubagentGuidance=`## Changing the self-modification subagent
 
 Only when the requester explicitly names the self-modification subagent, edit whichever of /source/extensions/self-modification.ts or /source/extensions/self-modification/extension.ts exists. If neither exists, create /source/extensions/self-modification/extension.ts with write_file using this content, then make the requested model or reasoning change:
 \`\`\`ts
-${renderLocalSelfModificationExtension()}\`\`\``;function renderInstructions(e){return e.filter(e=>e.length>0).join(`
-
-`)}var instructions_default=defineDynamic({events:{"session.started":()=>{let e=resolveSelfModificationMode(resolveSelfModificationConfig(extension_default.config));return e!==`local`&&e!==`deployed`?null:defineInstructions({markdown:renderInstructions([`## Role
-
-You are an expert coding assistant operating inside of an eve agent. You help users by reading files, editing code, and writing new files that shape the behavior of the agent itself.`,`## Source workspace
-
-The source code of the eve agent is mounted read-write at /source. /source is the authored agent directory. Locate source files with bash. Read source contents with read_file, not shell commands. Before generating an overwrite, ensure read_file has succeeded for that path. Shell reads do not satisfy write_file's read-before-write requirement. edit_file instead validates exact matches against current contents. Never modify source files with bash, sed, awk, redirection, or scripting.
-
-Resolve named tools by filename under /source/tools before searching contents. Tool identifiers derive from filenames and may not occur in the implementation.`,`## Implement changes
-
-Use edit_file for localized changes; include only the unique matching text. For a complete rewrite, use read_file then write_file; do not encode the whole old file as one replacement. If tool arguments fail argument parsing, retry the same tool with corrected encoding.
-
-Once paths are known, batch independent file reads and edits to different files. Never edit the same file concurrently.`,`## Add model-callable actions
-
-When the requester wants this agent to gain a reusable action or capability that it can invoke in future turns, implement it as an authored eve tool under /source/tools. This applies even when the request describes the action without using the word “tool.” Follow the path-derived naming and defineTool conventions in the mounted eve tools documentation and existing source.
-
-Do not substitute a loose Python, shell, or JavaScript file for a model-callable tool. A support script is acceptable only when an authored eve tool invokes it as an implementation detail, or when the requester explicitly asks for a standalone script instead of an agent capability.`,`## Add integrations
-
-Before adding a new eve-managed channel, connection, extension, instrumentation, or memory integration, call search_registry alongside source discovery. If an item fulfills the requirement, install it with registry_add using its exact address. If no matching item fulfills the requirement, or if the developer asks for a custom implementation, write the integration yourself.
-
-Modifying the behavior of an existing skill or tool does not require a registry search. Registry search blocks implementation, not source inspection. Serialize registry installation and dependent edits. Run registry_add separately from file edits and other registry installations.
-
-Registry installation is outside the source sandbox.`,`## Consult documentation
-
-The eve framework documentation is mounted read-only at /eve-docs. Prefer source and existing local patterns. Before reading docs, identify the specific unresolved API question. Search the relevant file for its heading or term, then read only the bounded surrounding section. Do not concatenate wildcard files or read a full page when a section answers the question. Stop when the question is resolved.`,e===`local`?"## Local environment\n\nThe registry_add tool will complete installation for items that need no setup. In the local dev TUI, a `needs-terminal` result from the tool call automatically opens the existing setup panel for the user to complete setup there. In headless development, if a `needs-terminal` result includes `nextCommand`, present that exact value as the only shell command in your response. Never infer, construct, or rewrite a command: installing an item uses `eve add <item>`; `eve registry add` configures registry namespace mappings and does not install items.\n\nLocal eve dev logs are mounted read-only at /logs. Local trace segments are mounted read-only at /traces when available. For latency, failure, token, or behavior analysis, load and follow the `trace_analysis` skill. Trace searches are scoped to the invoking conversation and exclude the current investigation by default.\n\nThe application package.json is not mounted. Do not search outside /source for application files. You cannot run host binaries such as git, node, pnpm, or tsc. Use existing imports and registry_add for supported registry installations.":"## Deployed environment\n\nThe registry_add tool may return `completed`, `input-required`, `external-action-required`, `cancelled`, or `failed`. Supply only non-secret structured answers when continuing an `input-required` setup; set `installed: true` so the continuation does not reinstall source. Never request, accept, or repeat secret values. External authorization and secret binding are incomplete follow-up boundaries, not evidence that an integration is active.\n\nThe configured target branch is checked out as a disposable workspace under /workspace/repository. Make ordinary changes through /source, which is the writable view of the configured application's agent/ directory. Publication validates the final repository snapshot, including registry, manifest, and lockfile changes. Never modify Git refs, access GitHub directly, or use shell commands to write files. The sandbox has no reusable GitHub credential after checkout.\n\nComplete all edits and registry installations before publication, and call publish by itself. Before publication, review and summarize the complete intended scope. Call publish once with a concise title and summary. A successful result is only a draft pull request. Return its URL and changed paths, and state that merge and deployment have not occurred.",`## Work efficiently
-
-Skip task lists for simple work - only use them for complex actions. Never spend a turn only reporting status or updating the task list - batch them with other calls.
-
-Treat a successful file-edit tool result as confirmation; do not reread a file solely to verify that the edit succeeded. Do not approximate unavailable build or test commands with broad source searches.`,selfModificationSubagentGuidance,e===`local`?`## Report results
+${renderLocalSelfModificationExtension()}\`\`\``;var instructions_default=defineDynamic({events:{"session.started":()=>isLocalSelfModificationEnabled(resolveSelfModificationConfig(extension_default.config))?defineInstructions({markdown:renderInstructions([roleInstructions,sourceWorkspaceInstructions,sourceEditingInstructions,toolAuthoringInstructions,registryWorkflowInstructions,documentationInstructions,"## Local environment\n\nThe registry_add tool will complete installation for items that need no setup. In the local dev TUI, a `needs-terminal` result from the tool call automatically opens the existing setup panel for the user to complete setup there. In headless development, if a `needs-terminal` result includes `nextCommand`, present that exact value as the only shell command in your response. Never infer, construct, or rewrite a command: installing an item uses `eve add <item>`; `eve registry add` configures registry namespace mappings and does not install items.\n\nLocal eve dev logs are mounted read-only at /logs. Local trace segments are mounted read-only at /traces when available. For latency, failure, token, or behavior analysis, load and follow the `trace_analysis` skill. Trace searches are scoped to the invoking conversation and exclude the current investigation by default.\n\nThe application package.json is not mounted. Do not search outside /source for application files. You cannot run host binaries such as git, node, pnpm, or tsc. Use existing imports and registry_add for supported registry installations.",workingInstructions,selfModificationSubagentGuidance,`## Report results
 
 For source-modification tasks, return a concise handoff to the caller. Use at most four short bullets covering changed paths and behavior, and any required setup or unresolved issues.
 
-For investigation tasks, report the findings and supporting evidence requested by the caller.`:`## Report results
-
-For source-modification tasks, return a concise handoff to the caller. Use at most four short bullets covering changed paths and behavior, and any required setup or unresolved issues. Include the draft pull request URL if one was published.
-
-For investigation tasks, report the findings and supporting evidence requested by the caller.`])})}}});export{instructions_default as default};
+For investigation tasks, report the findings and supporting evidence requested by the caller.`])}):null}});export{instructions_default as default};

package/dist/src/self-modification/extension/subagents/agent/tools/registry_add.d.ts

@@ -1,6 +1,5 @@
 import { type LocalDevCapability } from "eve/local-dev";
-import { type ToolContext } from "eve/tools";
-import { type ResolvedSelfModificationConfig } from "../../../../config.js";
+import type { ResolvedSelfModificationConfig } from "../../../../config.js";
 import { type SpawnLike } from "../../../eve-add.js";
 import { type CatalogEntry } from "./search_registry.js";
 interface RegistryAddDependencies {
@@ -19,29 +18,6 @@ export interface LocalRegistryAddResult {
     readonly nextCommand?: string;
     readonly changed?: readonly string[];
 }
-type ProductionRegistryAddResult = {
-    readonly address: string;
-    readonly status: "completed";
-    readonly completedItems: readonly string[];
-    readonly changedPaths: readonly string[];
-    readonly deploymentRequired: boolean;
-} | {
-    readonly address: string;
-    readonly status: "input-required";
-    readonly installed: boolean;
-    readonly question: unknown;
-} | {
-    readonly address: string;
-    readonly status: "external-action-required";
-    readonly installed: boolean;
-    readonly message: string;
-    readonly url: string;
-    readonly userCode?: string;
-} | {
-    readonly address: string;
-    readonly status: "failed" | "cancelled";
-    readonly message: string;
-};
 /**
  * Names the item's declared environment variables that are not set.
  *
@@ -72,13 +48,9 @@ export declare function addLocalRegistryItem(address: string, options?: Registry
     readonly signal?: AbortSignal;
 }): Promise<LocalRegistryAddResult>;
 export declare function resolveRegistryAddTool(config: ResolvedSelfModificationConfig): (import("eve/tools").ToolDefinition<Record<string, unknown>, LocalRegistryAddResult> & {
-    execute(input: Record<string, unknown>, ctx: ToolContext): Promise<LocalRegistryAddResult>;
-}) | (import("eve/tools").ToolDefinition<Record<string, unknown>, ProductionRegistryAddResult> & {
-    execute(input: Record<string, unknown>, ctx: ToolContext): Promise<ProductionRegistryAddResult>;
+    execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<LocalRegistryAddResult>;
 }) | null;
 declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools").ToolDefinition<Record<string, unknown>, LocalRegistryAddResult> & {
-    execute(input: Record<string, unknown>, ctx: ToolContext): Promise<LocalRegistryAddResult>;
-}) | (import("eve/tools").ToolDefinition<Record<string, unknown>, ProductionRegistryAddResult> & {
-    execute(input: Record<string, unknown>, ctx: ToolContext): Promise<ProductionRegistryAddResult>;
+    execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<LocalRegistryAddResult>;
 }) | null>;
 export default _default;

package/dist/src/self-modification/extension/subagents/agent/tools/registry_add.js

@@ -1 +1 @@
-import{resolveSelfModificationConfig}from"../../../../config.js";import{classifyCatalogEntry}from"../../../classify-registry-item.js";import{runEveAdd}from"../../../eve-add.js";import extension_default from"../../../extension.js";import{resolveSelfModificationMode}from"../../../../mode.js";import{assertOfficialRegistryAddress,installProductionRegistryItem}from"../../../production-registry-add.js";import{readPreparedSelfModificationWorkspace}from"../../../../git-workspace.js";import{withSelfModificationWorkspaceLock}from"../../../../workspace-lock.js";import{loadRegistryIndex,officialRegistryIndexUrl,resolveRegistryIndexUrl}from"./search_registry.js";import{defineDynamic,defineTool}from"eve/tools";import{getLocalDevCapability}from"eve/local-dev";const localInputSchema={type:`object`,additionalProperties:!1,properties:{address:{type:`string`,minLength:1,maxLength:200,description:"Exact address of an item in the configured eve registry, for example `channel/slack` or `extension/browserbase`."}},required:[`address`]},localOutputSchema={type:`object`,additionalProperties:!1,properties:{status:{type:`string`,enum:[`installed`,`needs-terminal`,`failed`]},address:{type:`string`},title:{type:`string`},envVars:{type:`array`,items:{type:`string`},description:`Environment variables the item needs that are not set. The item is installed but will not work until the developer sets them. Never ask for or repeat their values.`},reason:{type:`string`,description:`Why the item was not installed here.`},changed:{type:`array`,items:{type:`string`},description:`Project-relative paths a failed install could not restore.`},nextCommand:{type:`string`,description:"The command that completes a `needs-terminal` item."},message:{type:`string`,description:`One-line summary to relay to the developer.`}},required:[`status`,`address`,`message`]},productionInputSchema={type:`object`,additionalProperties:!1,properties:{address:{type:`string`,minLength:1,maxLength:200,description:"Exact official eve registry address, for example `channel/slack` or `extension/browserbase`."},answers:{type:`object`,additionalProperties:!0,description:`Non-secret answers to the setup question returned by the previous call.`},installed:{type:`boolean`,description:`Set to true with answers when the previous input-required result installed the source.`}},required:[`address`]},productionOutputSchema={type:`object`,additionalProperties:!1,properties:{status:{type:`string`,enum:[`completed`,`input-required`,`external-action-required`,`failed`,`cancelled`]},address:{type:`string`},changedPaths:{type:`array`,items:{type:`string`},description:`Repository-relative paths installed into the proposal.`},completedItems:{type:`array`,items:{type:`string`}},deploymentRequired:{type:`boolean`},installed:{type:`boolean`,description:`Whether source installation completed before setup paused.`},question:{type:`object`,additionalProperties:!0,description:`The current setup question. Supply only its non-secret answer on the next call.`},message:{type:`string`},url:{type:`string`,description:`External authorization URL the developer must open.`},userCode:{type:`string`}},required:[`status`,`address`]};function unsetEnvVars(e,t=process.env){return(e.envVars??[]).filter(e=>{let n=t[e];return n===void 0||n===``})}function handoffMessage(e){if(e.interactiveClient)return{message:`${e.title} was not installed by this tool. ${e.reason} Continue in the setup panel that opens here; do not ask the developer to run another command.`};let t=`eve add ${e.address}`;return{message:`${e.title} was not installed. ${e.reason} Run \`${t}\` in a terminal to finish it.`,nextCommand:t}}async function addLocalRegistryItem(e,t={}){let n=(t.getCapability??getLocalDevCapability)();if(n===void 0)throw Error("Registry items can only be installed while `eve dev` is running. Report the item address to the developer instead of installing it.");let r=(await loadRegistryIndex({nowMs:Date.now(),signal:t.signal,url:resolveRegistryIndexUrl()})).find(t=>t.address===e);if(r===void 0)throw Error(`No item in the configured eve registry is published at "${e}". Check the address before trying again.`);let i=classifyCatalogEntry(r);if(i.kind===`self-modification-mount`)throw Error(i.reason);if(i.kind===`needs-terminal`){let t=handoffMessage({address:e,interactiveClient:n.interactiveClient,reason:i.reason,title:r.title});return{address:e,reason:i.reason,status:`needs-terminal`,title:r.title,...t}}let a=await withSelfModificationWorkspaceLock(`local:${n.appRoot}`,async()=>n.withSuspendedSource(()=>runEveAdd({address:e,appRoot:n.appRoot,signal:t.signal,spawn:t.spawn})));if(a.kind===`blocked`){let t=handoffMessage({address:e,interactiveClient:n.interactiveClient,reason:a.message,title:r.title});return{address:e,reason:a.message,status:`needs-terminal`,title:r.title,...t}}if(a.kind===`failed`)return a.changed===void 0?{address:e,status:`failed`,title:r.title,reason:a.message,message:a.message}:{address:e,status:`failed`,title:r.title,reason:a.message,message:a.message,changed:a.changed};let o=unsetEnvVars(r);return{address:e,envVars:[...o],message:o.length===0?`Installed ${r.title}.`:`Installed ${r.title}. It will not work until ${o.join(`, `)} ${o.length===1?`is`:`are`} set.`,status:`installed`,title:r.title}}async function addProductionRegistryItem(e,t,n,r){assertOfficialRegistryAddress(e);let i=(await loadRegistryIndex({nowMs:Date.now(),signal:t.abortSignal,url:officialRegistryIndexUrl()})).find(t=>t.address===e);if(i===void 0)throw Error(`No official eve registry item is published at "${e}".`);let a=classifyCatalogEntry(i);if(a.kind===`self-modification-mount`)throw Error(a.reason);let o=await t.getSandbox(),s=await withSelfModificationWorkspaceLock(`sandbox:${t.session.id}`,async()=>{let i=await readPreparedSelfModificationWorkspace({...n,sandbox:o});return await installProductionRegistryItem({address:e,answers:r.answers,installed:r.installed,sandbox:o,signal:t.abortSignal,workspace:i})});return s.kind===`completed`?{address:e,...s,status:`completed`}:s.kind===`input-required`?{address:e,...s,status:`input-required`}:s.kind===`external-action-required`?{address:e,...s,status:`external-action-required`}:{address:e,...s,status:s.kind}}function localRegistryAddTool(){return defineTool({description:`Install an item from the configured eve registry into this project. Items that need setup are handed to the local setup flow instead. Search first, then call this with the exact item address.`,inputSchema:localInputSchema,outputSchema:localOutputSchema,async execute(e,t){let{address:n}=e;if(typeof n!=`string`||n.length===0)throw Error(`address must be an exact item address from the configured eve registry.`);return await addLocalRegistryItem(n,{signal:t.abortSignal})}})}function productionRegistryAddTool(e){return defineTool({description:`Install an exact item from the official eve registry into the current production change proposal. If setup pauses, call this tool again with the non-secret answers and the installed state from its result. External authorization and secret binding must be completed by the developer.`,inputSchema:productionInputSchema,outputSchema:productionOutputSchema,async execute(t,n){let{address:r}=t;if(typeof r!=`string`||r.length===0)throw Error(`address must be an exact item address from the official eve registry.`);return await addProductionRegistryItem(r,n,e,{answers:`answers`in t&&typeof t.answers==`object`&&t.answers!==null&&!Array.isArray(t.answers)?t.answers:void 0,installed:`installed`in t&&t.installed===!0})}})}function resolveRegistryAddTool(e){let t=resolveSelfModificationMode(e);return t===`local`?localRegistryAddTool():t===`deployed`&&e.deployed!==void 0?productionRegistryAddTool(e.deployed):null}var registry_add_default=defineDynamic({events:{"session.started":()=>resolveRegistryAddTool(resolveSelfModificationConfig(extension_default.config))}});export{addLocalRegistryItem,registry_add_default as default,handoffMessage,resolveRegistryAddTool,unsetEnvVars};
+import{classifyCatalogEntry}from"../../../classify-registry-item.js";import{runEveAdd}from"../../../eve-add.js";import{defineLocalOnlyDynamic,resolveLocalOnly}from"../../../local-only.js";import{withSelfModificationWorkspaceLock}from"../../../../workspace-lock.js";import{loadRegistryIndex,resolveRegistryIndexUrl}from"./search_registry.js";import{defineTool}from"eve/tools";import{getLocalDevCapability}from"eve/local-dev";const localInputSchema={type:`object`,additionalProperties:!1,properties:{address:{type:`string`,minLength:1,maxLength:200,description:"Exact address of an item in the configured eve registry, for example `channel/slack` or `extension/browserbase`."}},required:[`address`]},localOutputSchema={type:`object`,additionalProperties:!1,properties:{status:{type:`string`,enum:[`installed`,`needs-terminal`,`failed`]},address:{type:`string`},title:{type:`string`},envVars:{type:`array`,items:{type:`string`},description:`Environment variables the item needs that are not set. The item is installed but will not work until the developer sets them. Never ask for or repeat their values.`},reason:{type:`string`,description:`Why the item was not installed here.`},changed:{type:`array`,items:{type:`string`},description:`Project-relative paths a failed install could not restore.`},nextCommand:{type:`string`,description:"The command that completes a `needs-terminal` item."},message:{type:`string`,description:`One-line summary to relay to the developer.`}},required:[`status`,`address`,`message`]};function unsetEnvVars(e,t=process.env){return(e.envVars??[]).filter(e=>{let n=t[e];return n===void 0||n===``})}function handoffMessage(e){if(e.interactiveClient)return{message:`${e.title} was not installed by this tool. ${e.reason} Continue in the setup panel that opens here; do not ask the developer to run another command.`};let t=`eve add ${e.address}`;return{message:`${e.title} was not installed. ${e.reason} Run \`${t}\` in a terminal to finish it.`,nextCommand:t}}async function addLocalRegistryItem(e,t={}){let n=(t.getCapability??getLocalDevCapability)();if(n===void 0)throw Error("Registry items can only be installed while `eve dev` is running. Report the item address to the developer instead of installing it.");let r=(await loadRegistryIndex({nowMs:Date.now(),signal:t.signal,url:resolveRegistryIndexUrl()})).find(t=>t.address===e);if(r===void 0)throw Error(`No item in the configured eve registry is published at "${e}". Check the address before trying again.`);let i=classifyCatalogEntry(r);if(i.kind===`self-modification-mount`)throw Error(i.reason);if(i.kind===`needs-terminal`){let t=handoffMessage({address:e,interactiveClient:n.interactiveClient,reason:i.reason,title:r.title});return{address:e,reason:i.reason,status:`needs-terminal`,title:r.title,...t}}let a=await withSelfModificationWorkspaceLock(`local:${n.appRoot}`,async()=>n.withSuspendedSource(()=>runEveAdd({address:e,appRoot:n.appRoot,signal:t.signal,spawn:t.spawn})));if(a.kind===`blocked`){let t=handoffMessage({address:e,interactiveClient:n.interactiveClient,reason:a.message,title:r.title});return{address:e,reason:a.message,status:`needs-terminal`,title:r.title,...t}}if(a.kind===`failed`)return a.changed===void 0?{address:e,status:`failed`,title:r.title,reason:a.message,message:a.message}:{address:e,status:`failed`,title:r.title,reason:a.message,message:a.message,changed:a.changed};let o=unsetEnvVars(r);return{address:e,envVars:[...o],message:o.length===0?`Installed ${r.title}.`:`Installed ${r.title}. It will not work until ${o.join(`, `)} ${o.length===1?`is`:`are`} set.`,status:`installed`,title:r.title}}function localRegistryAddTool(){return defineTool({description:`Install an item from the configured eve registry into this project. Items that need setup are handed to the local setup flow instead. Search first, then call this with the exact item address.`,inputSchema:localInputSchema,outputSchema:localOutputSchema,async execute(e,t){let{address:n}=e;if(typeof n!=`string`||n.length===0)throw Error(`address must be an exact item address from the configured eve registry.`);return await addLocalRegistryItem(n,{signal:t.abortSignal})}})}function resolveRegistryAddTool(e){return resolveLocalOnly(e,localRegistryAddTool())}var registry_add_default=defineLocalOnlyDynamic(localRegistryAddTool());export{addLocalRegistryItem,registry_add_default as default,handoffMessage,resolveRegistryAddTool,unsetEnvVars};

package/dist/src/self-modification/git-workspace.d.ts

@@ -3,8 +3,7 @@ import type { SandboxNetworkPolicy } from "#shared/sandbox-network-policy.js";
 type NetworkPolicySandboxSession = SandboxSession & {
     setNetworkPolicy(policy: SandboxNetworkPolicy): Promise<void>;
 };
-import type { GitHubRepository } from "./config.js";
-export declare const SELF_MODIFICATION_CONFIG_PATH = "agent/extensions/self-modification/extension.ts";
+import type { GitHubRepository } from "./remote/config.js";
 export declare const REPOSITORY_PATH = "/workspace/repository";
 export interface PreparedSelfModificationWorkspace {
     readonly baseSha: string;

package/dist/src/self-modification/git-workspace.js

@@ -1 +1 @@
-import{assertFullSha,assertGitRef}from"./identifiers.js";import{gitOutput,runGitCommand,withBrokeredGitHubCredential}from"./git.js";import{shellQuote}from"#shared/shell-quote.js";import{gitHubRemoteUrl}from"#shared/git.js";const SELF_MODIFICATION_CONFIG_PATH=`agent/extensions/self-modification/extension.ts`,REPOSITORY_PATH=`/workspace/repository`,BASE_REF=`refs/eve-self-modification/base`;async function prepareSelfModificationWorkspace(e){assertGitRef(e.targetBranch,`target branch`);let t=gitHubRemoteUrl(e.repository);await withBrokeredGitHubCredential(e.sandbox,e.token,async()=>{await run(e.sandbox,`rm -rf ${quote(REPOSITORY_PATH)} && mkdir -p ${quote(REPOSITORY_PATH)}`),await run(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} init`),await run(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} remote add origin ${quote(t)}`),await run(e.sandbox,`GIT_CONFIG_NOSYSTEM=1 GIT_CONFIG_GLOBAL=/dev/null GIT_LFS_SKIP_SMUDGE=1 GIT_TERMINAL_PROMPT=0 git -C ${quote(REPOSITORY_PATH)} fetch --no-tags origin ${quote(`refs/heads/${e.targetBranch}`)}`),await run(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} update-ref ${BASE_REF} FETCH_HEAD`),await run(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} checkout --detach ${BASE_REF}`)});let n=await gitOutput(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} rev-parse ${BASE_REF}`);return assertFullSha(n,`target branch revision`),await verifyApplicationRoot(e.sandbox,e.directory),{baseSha:n,directory:e.directory,repository:e.repository,repositoryPath:REPOSITORY_PATH,targetBranch:e.targetBranch}}async function readPreparedSelfModificationWorkspace(e){let t=await gitOutput(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} rev-parse ${BASE_REF}`);return assertFullSha(t,`target branch revision`),await verifyApplicationRoot(e.sandbox,e.directory),{baseSha:t,directory:e.directory,repository:e.repository,repositoryPath:REPOSITORY_PATH,targetBranch:e.targetBranch}}async function verifyApplicationRoot(e,t){let n=t===`.`?REPOSITORY_PATH:`${REPOSITORY_PATH}/${t}`;if((await e.run({command:`test -d ${quote(`${n}/agent`)}`})).exitCode!==0)throw Error(`Self-modification source directory does not contain agent/: ${t}`)}function quote(e){return shellQuote(e)}async function run(e,t){await runGitCommand(e,t)}export{REPOSITORY_PATH,SELF_MODIFICATION_CONFIG_PATH,prepareSelfModificationWorkspace,readPreparedSelfModificationWorkspace};
+import{gitOutput,runGitCommand,withBrokeredGitHubCredential}from"./git.js";import{assertFullSha,assertGitRef}from"./identifiers.js";import{shellQuote}from"#shared/shell-quote.js";import{gitHubRemoteUrl}from"#shared/git.js";const REPOSITORY_PATH=`/workspace/repository`,BASE_REF=`refs/eve-self-modification/base`;async function prepareSelfModificationWorkspace(e){assertGitRef(e.targetBranch,`target branch`);let t=gitHubRemoteUrl(e.repository);await withBrokeredGitHubCredential(e.sandbox,e.token,async()=>{await run(e.sandbox,`rm -rf ${quote(REPOSITORY_PATH)} && mkdir -p ${quote(REPOSITORY_PATH)}`),await run(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} init`),await run(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} remote add origin ${quote(t)}`),await run(e.sandbox,`GIT_CONFIG_NOSYSTEM=1 GIT_CONFIG_GLOBAL=/dev/null GIT_LFS_SKIP_SMUDGE=1 GIT_TERMINAL_PROMPT=0 git -C ${quote(REPOSITORY_PATH)} fetch --no-tags origin ${quote(`refs/heads/${e.targetBranch}`)}`),await run(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} update-ref ${BASE_REF} FETCH_HEAD`),await run(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} checkout --detach ${BASE_REF}`)});let n=await gitOutput(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} rev-parse ${BASE_REF}`);return assertFullSha(n,`target branch revision`),await verifyApplicationRoot(e.sandbox,e.directory),{baseSha:n,directory:e.directory,repository:e.repository,repositoryPath:REPOSITORY_PATH,targetBranch:e.targetBranch}}async function readPreparedSelfModificationWorkspace(e){let t=await gitOutput(e.sandbox,`git -C ${quote(REPOSITORY_PATH)} rev-parse ${BASE_REF}`);return assertFullSha(t,`target branch revision`),await verifyApplicationRoot(e.sandbox,e.directory),{baseSha:t,directory:e.directory,repository:e.repository,repositoryPath:REPOSITORY_PATH,targetBranch:e.targetBranch}}async function verifyApplicationRoot(e,t){let n=t===`.`?REPOSITORY_PATH:`${REPOSITORY_PATH}/${t}`;if((await e.run({command:`test -d ${quote(`${n}/agent`)}`})).exitCode!==0)throw Error(`Self-modification source directory does not contain agent/: ${t}`)}function quote(e){return shellQuote(e)}async function run(e,t){await runGitCommand(e,t)}export{REPOSITORY_PATH,prepareSelfModificationWorkspace,readPreparedSelfModificationWorkspace};

package/dist/src/self-modification/github-publisher.d.ts

@@ -1,4 +1,4 @@
-import type { GitHubCredentialProvider } from "./config.js";
+import type { GitHubCredentialProvider } from "./remote/config.js";
 import type { PreparedSelfModificationWorkspace } from "./git-workspace.js";
 import { captureSelfModificationProposal } from "./proposal.js";
 export interface PublishedSelfModificationProposal {

package/dist/src/self-modification/mode.d.ts

@@ -1,5 +1,5 @@
 import type { ResolvedSelfModificationConfig } from "./config.js";
-type SelfModificationMode = "local" | "disabled" | "deployed";
-/** Resolves the mutually exclusive local or deployed editing mode. */
-export declare function resolveSelfModificationMode(config: ResolvedSelfModificationConfig): SelfModificationMode;
-export {};
+/** Local self-modification runs only inside the development runtime. */
+export declare function isLocalSelfModificationEnabled(config: ResolvedSelfModificationConfig): boolean;
+/** Deployed self-modification is offered only outside the development runtime. */
+export declare function isDeployedRuntime(): boolean;

package/dist/src/self-modification/mode.js

@@ -1 +1 @@
-function resolveSelfModificationMode(e){return process.env.EVE_DEV===`1`?e.localEnabled?`local`:`disabled`:e.deployed===void 0?`disabled`:`deployed`}export{resolveSelfModificationMode};
+function isLocalSelfModificationEnabled(e){return process.env.EVE_DEV===`1`&&e.localEnabled}function isDeployedRuntime(){return process.env.EVE_DEV!==`1`}export{isDeployedRuntime,isLocalSelfModificationEnabled};