eve 0.83.2 → 0.84.0

package/dist/src/runtime/types.d.ts

@@ -1,16 +1,16 @@
-import type { Experimental_ConnectionEvents } from "#public/definitions/connections/events.js";
+import type { ConnectionEvents } from "#public/definitions/connections/events.js";
 import type { ConnectionEventsBackend } from "#shared/connection-events.js";
+import type { SessionEvent } from "#protocol/session-event.js";
 import type { ChannelAdapter } from "#channel/adapter.js";
 import type { CompiledChannel } from "#channel/compiled-channel.js";
 import type { NormalizedChannelCorsOptions } from "#channel/cors.js";
 import type { HeadersValue } from "#client/types.js";
 import type { DiscoverDiagnosticsSummary } from "#discover/diagnostics.js";
-import type { MessageStreamEvent } from "#protocol/message.js";
 import type { ChannelRouteMethod, RouteContext } from "#public/definitions/channel.js";
 import type { RouteHandler, WebSocketRouteHandler } from "#channel/routes.js";
 import type { OutboundAuthFn } from "#public/agents/auth.js";
 import type { StreamEventHook } from "#public/definitions/hook.js";
-import type { Approval, ToolApproval } from "#approval/definition.js";
+import type { Approval } from "#approval/definition.js";
 import type { ToolModelOutput } from "#tools/definition.js";
 import type { ConnectionToolCallDefinition } from "#public/definitions/connections/tool-call.js";
 import type { AuthorizationDefinition, ConnectionAuthResolver, ConnectionProtocol, HeadersDefinition, ToolFilterDefinition } from "#shared/connection-types.js";
@@ -80,7 +80,7 @@ export type ResolvedScheduleDefinition = Readonly<SourceRef & {
  */
 /** A connection's event watching, checked once when the connection resolves. */
 export interface ResolvedConnectionEvents {
-    readonly callbacks: Experimental_ConnectionEvents;
+    readonly callbacks: ConnectionEvents;
     /** The static Connect authorization every watch subscribes and runs under. */
     readonly authorization: Readonly<AuthorizationDefinition>;
     readonly connector: string;
@@ -155,18 +155,7 @@ export type ResolvedToolDefinition = Readonly<Omit<Optional<InternalToolDefiniti
      * approval is required before executing this tool. See
      * {@link Approval} for the shared callback contract.
      */
-    readonly approval?: ToolApproval;
-    /**
-     * Optional function that derives a compound approval key from the tool
-     * input. When present, the runtime records this key (instead of just
-     * the tool name) in the session's approved-tools set after the user
-     * approves the tool call.
-     *
-     * This enables input-aware approval scoping. For example, a tool
-     * can record `"tool:<scope>"` so approval is per-scope rather
-     * than blanket.
-     */
-    readonly approvalKey?: (toolInput: Readonly<Record<string, unknown>>) => string;
+    readonly approval?: Approval;
     /**
      * Optional projection that controls what the model sees as the tool
      * result. The full `execute` return is still visible to channel event
@@ -194,7 +183,15 @@ export interface ResolvedHookDefinition extends ResolvedModuleSourceRef {
      * wildcard if declared. Unknown keys are accepted at resolve time
      * and ignored at dispatch time.
      */
-    readonly events: Readonly<Record<string, StreamEventHook<MessageStreamEvent>>>;
+    readonly events: Readonly<Record<string, StreamEventHook<SessionEvent>>>;
+}
+/** A `defineDynamic()` function, loaded from its module. eve's own receive its context. */
+export type DynamicEvaluateFn = (ctx: never) => unknown;
+/** A `defineDynamic()` export reattached from its compiled module. */
+export interface ResolvedReactionSource extends Readonly<ModuleSourceRef> {
+    /** eve generated it: its function receives eve's own evaluation context. */
+    readonly framework?: true;
+    readonly evaluate: DynamicEvaluateFn;
 }
 /**
  * Runtime-owned authored channel definition resolved from the compiled
@@ -278,10 +275,7 @@ export type ResolvedRuntimeRemoteAgentNode = Readonly<ModuleSourceRef & Node & {
  * Runtime-owned delegation entry exposed to the model as a subagent-shaped tool.
  */
 export type ResolvedRuntimeDelegationNode = ResolvedRuntimeRemoteAgentNode | ResolvedRuntimeSubagentNode;
-export interface ResolvedDynamicSubagentDefinition extends Readonly<ModuleSourceRef> {
-    readonly eventNames: readonly string[];
-    readonly events: Readonly<Record<string, (event: unknown, ctx: unknown) => unknown | Promise<unknown>>>;
-}
+export type ResolvedDynamicSubagentDefinition = ResolvedReactionSource;
 /**
  * Runtime-owned additive agent configuration resolved from `agent.ts`.
  */
@@ -305,14 +299,10 @@ interface ResolvedAgentMetadata {
     readonly diagnosticsSummary: DiscoverDiagnosticsSummary;
 }
 /**
- * Runtime resolver for dynamic tools declared via `defineDynamic({ events })`.
- * Carries the live event handler functions loaded from the compiled module.
+ * Runtime resolver for dynamic tools declared via `defineDynamic(fn)`.
  */
-export interface ResolvedDynamicToolResolver extends Readonly<ModuleSourceRef> {
+export interface ResolvedDynamicToolResolver extends ResolvedReactionSource {
     readonly slug: string;
-    readonly eventNames: readonly string[];
-    readonly events: Readonly<Record<string, (event: unknown, ctx: unknown) => unknown | Promise<unknown>>>;
-    readonly rebindMissingCallbacks?: boolean;
     /**
      * Mount namespace when this resolver comes from an extension. Names of tools
      * the resolver produces are prefixed with `${extensionNamespace}__`.
@@ -320,26 +310,21 @@ export interface ResolvedDynamicToolResolver extends Readonly<ModuleSourceRef> {
     readonly extensionNamespace?: string;
 }
 /** Runtime resolver for dynamic connections declared in `agent/connections/`. */
-export interface ResolvedDynamicConnectionResolver extends Readonly<ModuleSourceRef> {
+export interface ResolvedDynamicConnectionResolver extends ResolvedReactionSource {
     readonly slug: string;
-    readonly eventNames: readonly string[];
-    readonly events: Readonly<Record<string, (event: unknown, ctx: unknown) => unknown | Promise<unknown>>>;
     /** Map results from extensions receive this mount namespace. */
     readonly extensionNamespace?: string;
 }
 export type ResolvedMemoryDefinition = Readonly<MemoryDefinition & ModuleSourceRef & {
     readonly slot: string;
-    readonly visibility: "scope" | "session";
 }>;
 /**
- * Runtime resolver for dynamic skills declared via `defineDynamic({ events })`
+ * Runtime resolver for dynamic skills declared via `defineDynamic()`
  * in `agent/skills/`. Carries the live event handler functions loaded from the
  * compiled module.
  */
-export interface ResolvedDynamicSkillResolver extends Readonly<ModuleSourceRef> {
+export interface ResolvedDynamicSkillResolver extends ResolvedReactionSource {
     readonly slug: string;
-    readonly eventNames: readonly string[];
-    readonly events: Readonly<Record<string, (event: unknown, ctx: unknown) => unknown | Promise<unknown>>>;
     /**
      * Mount namespace when this resolver comes from an extension. Names of skills
      * a map resolver produces are prefixed with `${extensionNamespace}__`.
@@ -348,13 +333,11 @@ export interface ResolvedDynamicSkillResolver extends Readonly<ModuleSourceRef>
 }
 /**
  * Runtime resolver for dynamic instructions declared via
- * `defineDynamic({ events })` in `agent/instructions/`. Carries the live
+ * `defineDynamic()` in `agent/instructions/`. Carries the live
  * event handler functions loaded from the compiled module.
  */
-export interface ResolvedDynamicInstructionsResolver extends Readonly<ModuleSourceRef> {
+export interface ResolvedDynamicInstructionsResolver extends ResolvedReactionSource {
     readonly slug: string;
-    readonly eventNames: readonly string[];
-    readonly events: Readonly<Record<string, (event: unknown, ctx: unknown) => unknown | Promise<unknown>>>;
 }
 /**
  * Runtime-owned authored agent model resolved from compiler artifacts.

package/dist/src/sandbox/provider.d.ts

@@ -25,7 +25,7 @@ export interface SandboxConnection<Extensions extends object = {}> {
      * holds only the per-call variables. Aborting kills the process tree.
      */
     spawn(options: {
-        readonly abortSignal?: AbortSignal;
+        readonly signal?: AbortSignal;
         readonly command: string;
         readonly env: Readonly<Record<string, string>>;
         readonly workingDirectory: string;
@@ -35,7 +35,7 @@ export interface SandboxConnection<Extensions extends object = {}> {
      * unreadable path rejects. Return bytes or a stream, whichever the backend has.
      */
     readFile(options: {
-        readonly abortSignal?: AbortSignal;
+        readonly signal?: AbortSignal;
         readonly path: string;
     }): Promise<Uint8Array | ReadableStream<Uint8Array> | null>;
     /** Creates missing parent directories and overwrites existing files. The only write primitive. */
@@ -112,7 +112,7 @@ export interface SandboxPrepareContext {
     templateKey(identity: SandboxIdentity): string;
 }
 export interface SandboxSessionEndOptions {
-    readonly abortSignal?: AbortSignal;
+    readonly signal?: AbortSignal;
     readonly reason: "completed" | "expired" | "failed" | "deleted";
 }
 /** The lifecycle one sandbox environment implements. */

package/dist/src/sandbox/providers/default.d.ts

@@ -2,11 +2,13 @@ import type { DockerSandboxEnvironmentOptions } from "#public/sandbox/docker-san
 import type { SandboxSession } from "#public/sandbox/index.js";
 import { type SandboxProvider } from "#public/sandbox/provider.js";
 import type { VercelSandboxCreateOptions } from "#public/sandbox/vercel-sandbox.js";
-import { type JustBashEnvironmentOptions } from "#sandbox/providers/just-bash.js";
 import type { SandboxNetworkOptions, SandboxNetworkPolicy } from "#shared/sandbox-network-policy.js";
 export interface DefaultSandboxEnvironmentOptions {
     readonly docker?: DockerSandboxEnvironmentOptions;
-    readonly justBash?: JustBashEnvironmentOptions;
+    readonly justBash?: {
+        readonly autoInstall?: boolean;
+        readonly prepare?: (sandbox: SandboxSession) => Promise<void> | void;
+    };
     readonly prepare?: (sandbox: SandboxSession) => Promise<void> | void;
     readonly vercel?: VercelSandboxCreateOptions;
 }

package/dist/src/sandbox/providers/default.js

@@ -1 +1 @@
-import{isObject}from"#shared/guards.js";import{isLinuxDockerDaemonAvailableSync}from"#execution/sandbox/bindings/local.js";import{getSandboxEnvironmentRuntime}from"#shared/sandbox-environment.js";import{isEveDevEnvironment}from"#internal/application/dev-environment.js";import{ToolSessionSandboxUnsupportedError}from"#shared/sandbox-tool-session-error.js";import{SandboxSessionGoneError,defineSandboxProvider}from"#public/sandbox/provider.js";import{withAdoptedSandboxSessionStates,withSessionEndArtifact}from"#sandbox/state.js";import{DockerSandbox}from"#sandbox/providers/docker.js";import{JustBashSandbox}from"#sandbox/providers/just-bash.js";import{VercelSandbox}from"#sandbox/providers/vercel.js";const SELECTED_PROVIDERS=[`docker`,`just-bash`,`vercel`],NO_PROVIDER_MESSAGE=`DefaultSandbox has no sandbox provider for this build: it did not run on Vercel, no Docker daemon was reachable, and production builds do not fall back to just-bash. Start Docker and rebuild, deploy to Vercel, or select a provider explicitly in your sandbox module, such as agent/sandbox/sandbox.ts.`,JUST_BASH_NETWORK_POLICY_MESSAGE=`DefaultSandbox selected just-bash, which always allows network access and accepts only the "allow-all" network policy. Start Docker so DefaultSandbox selects it, or select VercelSandbox or DockerSandbox explicitly.`,DefaultSandbox=defineSandboxProvider({name:`default`,environment(e){let t=new Map,provider=n=>{let r=t.get(n);return r===void 0&&(r=getSandboxEnvironmentRuntime(createEnvironment(n,e)),t.set(n,r)),r};function requireProvider(e,t){let n=provider(e);if(t===`tool-session`&&n.implementation.toolSessions!==!0)throw new ToolSessionSandboxUnsupportedError(e);return n}async function endSession(e,t,n,r){let i=t?.provider??n?.provider??null;if(i===null)return;let a=provider(i),o=t?.stateProtocolVersion===a.stateProtocolVersion?t.state:null;await a.implementation.onSessionEnd(e,o,r)}let n={onSessionEnd:(e,t,n)=>endSession(e,t,void 0,n),async prepare(e){let t=selectProvider();return t===null?(e.log(NO_PROVIDER_MESSAGE),{provider:null}):{artifact:await provider(t).implementation.prepare(e),provider:t}},async start(e,t,n){if(n.provider===null)throw Error(NO_PROVIDER_MESSAGE);let r=requireProvider(n.provider,e.kind),i=await r.implementation.start(e,innerOpenOptions(n.provider,t),n.artifact);return{connection:withNetworkPolicy(i.connection),state:{provider:n.provider,state:i.state,stateProtocolVersion:r.stateProtocolVersion}}},async resume(e,t,n){if(t.provider===null||t.provider!==n.provider)throw new SandboxSessionGoneError(`The session's ${n.provider} sandbox cannot resume because this build selected ${t.provider??`no provider`}.`);let r=requireProvider(n.provider,e.kind);if(n.stateProtocolVersion!==r.stateProtocolVersion)throw new SandboxSessionGoneError(`The session's ${n.provider} sandbox state uses protocol ${n.stateProtocolVersion}, not ${r.stateProtocolVersion}.`);return withNetworkPolicy(await r.implementation.resume(e,t.artifact,n.state))},toolSessions:!0};return withSessionEndArtifact(n,async(e,t,{artifact:n,reason:r})=>{await endSession(e,isDefaultSandboxSessionState(t)?t:null,isDefaultSandboxPreparedArtifact(n)?n:void 0,{reason:r})}),withAdoptedSandboxSessionStates(n,e=>{let t=e.providerName;if(isSelectedProvider(t))return{provider:t,state:e.state,stateProtocolVersion:e.stateProtocolVersion}})}});function selectProvider(){return process.env.VERCEL?.trim()?`vercel`:isLinuxDockerDaemonAvailableSync()?`docker`:isEveDevEnvironment()?`just-bash`:null}function createEnvironment(e,t){switch(e){case`docker`:return DockerSandbox.environment(t.docker??{});case`just-bash`:return JustBashSandbox.environment(t.justBash??{});case`vercel`:return VercelSandbox.environment(t.vercel??{})}}function innerOpenOptions(e,t){if(e!==`just-bash`)return t;if(t?.networkPolicy!==void 0&&t.networkPolicy!==`allow-all`)throw Error(JUST_BASH_NETWORK_POLICY_MESSAGE)}function withNetworkPolicy(e){let t=e.extensions??{};return typeof Reflect.get(t,`setNetworkPolicy`)==`function`?e:{...e,extensions:{...t,setNetworkPolicy:rejectJustBashNetworkPolicy}}}async function rejectJustBashNetworkPolicy(e){if(e!==`allow-all`)throw Error(JUST_BASH_NETWORK_POLICY_MESSAGE)}function isSelectedProvider(e){return SELECTED_PROVIDERS.some(t=>t===e)}function isDefaultSandboxSessionState(e){return isObject(e)&&isSelectedProvider(e.provider)&&typeof e.stateProtocolVersion==`number`&&`state`in e}function isDefaultSandboxPreparedArtifact(e){return isObject(e)&&(e.provider===null||isSelectedProvider(e.provider)&&`artifact`in e)}export{DefaultSandbox};
+import{isObject}from"#shared/guards.js";import{isEveDevEnvironment}from"#internal/application/dev-environment.js";import{isLinuxDockerDaemonAvailableSync}from"#execution/sandbox/bindings/local.js";import{getSandboxEnvironmentRuntime}from"#shared/sandbox-environment.js";import{ToolSessionSandboxUnsupportedError}from"#shared/sandbox-tool-session-error.js";import{SandboxSessionGoneError,defineSandboxProvider}from"#public/sandbox/provider.js";import{withAdoptedSandboxSessionStates,withSessionEndArtifact}from"#sandbox/state.js";import{DockerSandbox}from"#sandbox/providers/docker.js";import{JustBashSandbox}from"#sandbox/providers/just-bash.js";import{VercelSandbox}from"#sandbox/providers/vercel.js";const SELECTED_PROVIDERS=[`docker`,`just-bash`,`vercel`],NO_PROVIDER_MESSAGE=`DefaultSandbox has no sandbox provider for this build: it did not run on Vercel, no Docker daemon was reachable, and production builds do not fall back to just-bash. Start Docker and rebuild, deploy to Vercel, or select a provider explicitly in your sandbox module, such as agent/sandbox/sandbox.ts.`,JUST_BASH_NETWORK_POLICY_MESSAGE=`DefaultSandbox selected just-bash, which always allows network access and accepts only the "allow-all" network policy. Start Docker so DefaultSandbox selects it, or select VercelSandbox or DockerSandbox explicitly.`,DefaultSandbox=defineSandboxProvider({name:`default`,environment(e){if(e.justBash&&Object.keys(e.justBash).some(e=>e!==`autoInstall`&&e!==`prepare`))throw Error(`DefaultSandbox justBash settings support autoInstall and prepare only. Use JustBashSandbox.environment() for customCommands or filesystem.`);let t=new Map,provider=n=>{let r=t.get(n);return r===void 0&&(r=getSandboxEnvironmentRuntime(createEnvironment(n,e)),t.set(n,r)),r};function requireProvider(e,t){let n=provider(e);if(t===`tool-session`&&n.implementation.toolSessions!==!0)throw new ToolSessionSandboxUnsupportedError(e);return n}async function endSession(e,t,n,r){let i=t?.provider??n?.provider??null;if(i===null)return;let a=provider(i),o=t?.stateProtocolVersion===a.stateProtocolVersion?t.state:null;await a.implementation.onSessionEnd(e,o,r)}let n={onSessionEnd:(e,t,n)=>endSession(e,t,void 0,n),async prepare(e){let t=selectProvider();return t===null?(e.log(NO_PROVIDER_MESSAGE),{provider:null}):{artifact:await provider(t).implementation.prepare(e),provider:t}},async start(e,t,n){if(n.provider===null)throw Error(NO_PROVIDER_MESSAGE);let r=requireProvider(n.provider,e.kind),i=await r.implementation.start(e,innerOpenOptions(n.provider,t),n.artifact);return{connection:withNetworkPolicy(i.connection),state:{provider:n.provider,state:i.state,stateProtocolVersion:r.stateProtocolVersion}}},async resume(e,t,n){if(t.provider===null||t.provider!==n.provider)throw new SandboxSessionGoneError(`The session's ${n.provider} sandbox cannot resume because this build selected ${t.provider??`no provider`}.`);let r=requireProvider(n.provider,e.kind);if(n.stateProtocolVersion!==r.stateProtocolVersion)throw new SandboxSessionGoneError(`The session's ${n.provider} sandbox state uses protocol ${n.stateProtocolVersion}, not ${r.stateProtocolVersion}.`);return withNetworkPolicy(await r.implementation.resume(e,t.artifact,n.state))},toolSessions:!0};return withSessionEndArtifact(n,async(e,t,{artifact:n,reason:r})=>{await endSession(e,isDefaultSandboxSessionState(t)?t:null,isDefaultSandboxPreparedArtifact(n)?n:void 0,{reason:r})}),withAdoptedSandboxSessionStates(n,e=>{let t=e.providerName;if(isSelectedProvider(t))return{provider:t,state:e.state,stateProtocolVersion:e.stateProtocolVersion}})}});function selectProvider(){return process.env.VERCEL?.trim()?`vercel`:isLinuxDockerDaemonAvailableSync()?`docker`:isEveDevEnvironment()?`just-bash`:null}function createEnvironment(e,t){switch(e){case`docker`:return DockerSandbox.environment(t.docker??{});case`just-bash`:return JustBashSandbox.environment(t.justBash??{});case`vercel`:return VercelSandbox.environment(t.vercel??{})}}function innerOpenOptions(e,t){if(e!==`just-bash`)return t;if(t?.networkPolicy!==void 0&&t.networkPolicy!==`allow-all`)throw Error(JUST_BASH_NETWORK_POLICY_MESSAGE)}function withNetworkPolicy(e){let t=e.extensions??{};return typeof Reflect.get(t,`setNetworkPolicy`)==`function`?e:{...e,extensions:{...t,setNetworkPolicy:rejectJustBashNetworkPolicy}}}async function rejectJustBashNetworkPolicy(e){if(e!==`allow-all`)throw Error(JUST_BASH_NETWORK_POLICY_MESSAGE)}function isSelectedProvider(e){return SELECTED_PROVIDERS.some(t=>t===e)}function isDefaultSandboxSessionState(e){return isObject(e)&&isSelectedProvider(e.provider)&&typeof e.stateProtocolVersion==`number`&&`state`in e}function isDefaultSandboxPreparedArtifact(e){return isObject(e)&&(e.provider===null||isSelectedProvider(e.provider)&&`artifact`in e)}export{DefaultSandbox};

package/dist/src/self-modification/agent.d.ts

@@ -1,4 +1,4 @@
-import { type AgentReasoningDefinition, type AgentStaticModelDefinition, type DynamicSentinel, type DynamicSubagentDefinition } from "#public/index.js";
+import { type AgentReasoningDefinition, type AgentStaticModelDefinition } from "#public/index.js";
 /** Options retained for source compatibility with the retired scaffold. */
 export interface SelfModificationAgentOptions {
     readonly config?: unknown;
@@ -6,7 +6,7 @@ export interface SelfModificationAgentOptions {
     readonly reasoning?: AgentReasoningDefinition;
 }
 /** @deprecated Use the packaged `eve/self-modification` extension. */
-export declare function defineSelfModificationAgent(_options?: SelfModificationAgentOptions): DynamicSentinel<DynamicSubagentDefinition | null>;
+export declare function defineSelfModificationAgent(_options?: SelfModificationAgentOptions): import("#public/index.js").DynamicSentinel<null, import("#public/index.js").DynamicContext>;
 /** @deprecated Use the packaged `eve/self-modification` extension. */
-declare const _default: DynamicSentinel<DynamicSubagentDefinition | null>;
+declare const _default: import("#public/index.js").DynamicSentinel<null, import("#public/index.js").DynamicContext>;
 export default _default;

package/dist/src/self-modification/agent.js

@@ -1 +1 @@
-import{defineDynamic}from"#public/index.js";let warned=!1;function warnRetiredScaffold(){warned||process.env.EVE_DEV!==`1`||(warned=!0,console.warn("[self-modification/retired-scaffold] The scaffolded self-modification subagent is disabled. Migrate to the new self-modification extension by running `/add eve/self-modification`."))}function defineSelfModificationAgent(e={}){let resolve=async(e,t)=>(warnRetiredScaffold(),null);return defineDynamic({events:{"session.started":resolve,"turn.started":resolve}})}var agent_default=defineSelfModificationAgent();export{agent_default as default,defineSelfModificationAgent};
+import{defineDynamic}from"#public/index.js";let warned=!1;function warnRetiredScaffold(){warned||process.env.EVE_DEV!==`1`||(warned=!0,console.warn("[self-modification/retired-scaffold] The scaffolded self-modification subagent is disabled. Migrate to the new self-modification extension by running `/add eve/self-modification`."))}function defineSelfModificationAgent(e={}){return defineDynamic(()=>(warnRetiredScaffold(),null))}var agent_default=defineSelfModificationAgent();export{agent_default as default,defineSelfModificationAgent};

package/dist/src/self-modification/config.d.ts

@@ -1,5 +1,5 @@
 import type { AgentReasoningDefinition, AgentStaticModelDefinition } from "#public/index.js";
-export declare const DEPLOYED_OPTION_MOVED_MESSAGE = "The `deployed` option moved to the separate `eve/self-modification/remote` mount. Remove it from this local self-modification mount and mount `eve/self-modification/remote` instead.";
+export declare const DEPLOYED_OPTION_MOVED_MESSAGE = "The `deployed` option moved to the separate `eve/extensions/self-modification/remote` mount. Remove it from this local self-modification mount and mount `eve/extensions/self-modification/remote` instead.";
 /** Local self-modification settings shared by its bundled child and sandbox. */
 export interface SelfModificationConfig {
     readonly local?: {

package/dist/src/self-modification/config.js

@@ -1 +1 @@
-const DEPLOYED_OPTION_MOVED_MESSAGE="The `deployed` option moved to the separate `eve/self-modification/remote` mount. Remove it from this local self-modification mount and mount `eve/self-modification/remote` instead.";function defineSelfModificationConfig(e={}){return resolveSelfModificationConfig(e),e}function resolveSelfModificationConfig(e={}){if(!isRecord(e))throw Error(`Self-modification configuration must be an object.`);if(`deployed`in e)throw Error(DEPLOYED_OPTION_MOVED_MESSAGE);let t=e.local;if(t!==void 0&&!isRecord(t))throw Error(`Self-modification local must be an object.`);let n=t?.enabled??!0;if(typeof n!=`boolean`)throw Error(`Self-modification local.enabled must be a boolean.`);return{localEnabled:n}}function isRecord(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}export{DEPLOYED_OPTION_MOVED_MESSAGE,defineSelfModificationConfig,resolveSelfModificationConfig};
+const DEPLOYED_OPTION_MOVED_MESSAGE="The `deployed` option moved to the separate `eve/extensions/self-modification/remote` mount. Remove it from this local self-modification mount and mount `eve/extensions/self-modification/remote` instead.";function defineSelfModificationConfig(e={}){return resolveSelfModificationConfig(e),e}function resolveSelfModificationConfig(e={}){if(!isRecord(e))throw Error(`Self-modification configuration must be an object.`);if(`deployed`in e)throw Error(DEPLOYED_OPTION_MOVED_MESSAGE);let t=e.local;if(t!==void 0&&!isRecord(t))throw Error(`Self-modification local must be an object.`);let n=t?.enabled??!0;if(typeof n!=`boolean`)throw Error(`Self-modification local.enabled must be a boolean.`);return{localEnabled:n}}function isRecord(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}export{DEPLOYED_OPTION_MOVED_MESSAGE,defineSelfModificationConfig,resolveSelfModificationConfig};

package/dist/src/self-modification/deployed-sandbox.js

@@ -1 +1 @@
-import{createGitHubCredentialProvider}from"./credentials.js";import{SELF_MODIFICATION_BASELINE_NETWORK_POLICY}from"./network-policy.js";import{REPOSITORY_PATH,prepareSelfModificationWorkspace}from"./git-workspace.js";import{isDeployedRuntime}from"./mode.js";import{resolveDeployedSelfModificationConfig}from"./remote/config.js";import{bindSandboxEnvironment}from"#shared/sandbox-environment.js";import{shellQuote}from"#shared/shell-quote.js";import{defineSandbox}from"#public/definitions/sandbox.js";import{JustBashSandbox}from"#sandbox/providers/just-bash.js";import{VercelSandbox}from"#sandbox/providers/vercel.js";function defineDeployedSelfModificationSandbox(e,t=()=>!!process.env.VERCEL){if(!isDeployedRuntime()){let e=JustBashSandbox.environment();return bindSandboxEnvironment(defineSandbox(()=>e.open()),e)}let n=resolveDeployedSelfModificationConfig(e),r=VercelSandbox.environment();return bindSandboxEnvironment(defineSandbox(async({session:e})=>{if(!t())throw Error(`Deployed self-modification requires deploying on Vercel, where Vercel Sandbox provides the runtime credential transforms that keep the GitHub token out of the sandbox. Deploy this agent to Vercel, or remove the eve/self-modification/remote extension mount from self-hosted deployments.`);let i=await r.open({networkPolicy:SELF_MODIFICATION_BASELINE_NETWORK_POLICY});if(e.parent===void 0)throw Error(`Production self-modification requires a child session.`);if(i.setNetworkPolicy===void 0)throw Error(`Production self-modification requires mutable sandbox network policy.`);let a={...i,setNetworkPolicy:i.setNetworkPolicy},o=await createGitHubCredentialProvider(n.credentials).resolve({capability:`checkout`,repository:n.repository});await prepareSelfModificationWorkspace({directory:n.directory,repository:n.repository,sandbox:a,targetBranch:n.targetBranch,token:o});let s=n.directory===`.`?REPOSITORY_PATH:`${REPOSITORY_PATH}/${n.directory}`;if((await i.run({command:`rm -rf /source && ln -s ${shellQuote(`${s}/agent`)} /source`})).exitCode!==0)throw Error(`Self-modification could not mount the agent source.`);return i}),r)}export{defineDeployedSelfModificationSandbox};
+import{createGitHubCredentialProvider}from"./credentials.js";import{SELF_MODIFICATION_BASELINE_NETWORK_POLICY}from"./network-policy.js";import{REPOSITORY_PATH,prepareSelfModificationWorkspace}from"./git-workspace.js";import{isDeployedRuntime}from"./mode.js";import{resolveDeployedSelfModificationConfig}from"./remote/config.js";import{bindSandboxEnvironment}from"#shared/sandbox-environment.js";import{shellQuote}from"#shared/shell-quote.js";import{defineSandbox}from"#public/definitions/sandbox.js";import{JustBashSandbox}from"#sandbox/providers/just-bash.js";import{VercelSandbox}from"#sandbox/providers/vercel.js";function defineDeployedSelfModificationSandbox(e,t=()=>!!process.env.VERCEL){if(!isDeployedRuntime()){let e=JustBashSandbox.environment();return bindSandboxEnvironment(defineSandbox(()=>e.open()),e)}let n=resolveDeployedSelfModificationConfig(e),r=VercelSandbox.environment();return bindSandboxEnvironment(defineSandbox(async({session:e})=>{if(!t())throw Error(`Deployed self-modification requires deploying on Vercel, where Vercel Sandbox provides the runtime credential transforms that keep the GitHub token out of the sandbox. Deploy this agent to Vercel, or remove the eve/extensions/self-modification/remote extension mount from self-hosted deployments.`);let i=await r.open({networkPolicy:SELF_MODIFICATION_BASELINE_NETWORK_POLICY});if(e.parent===void 0)throw Error(`Production self-modification requires a child session.`);if(i.setNetworkPolicy===void 0)throw Error(`Production self-modification requires mutable sandbox network policy.`);let a={...i,setNetworkPolicy:i.setNetworkPolicy},o=await createGitHubCredentialProvider(n.credentials).resolve({capability:`checkout`,repository:n.repository});await prepareSelfModificationWorkspace({directory:n.directory,repository:n.repository,sandbox:a,targetBranch:n.targetBranch,token:o});let s=n.directory===`.`?REPOSITORY_PATH:`${REPOSITORY_PATH}/${n.directory}`;if((await i.run({command:`rm -rf /source && ln -s ${shellQuote(`${s}/agent`)} /source`})).exitCode!==0)throw Error(`Self-modification could not mount the agent source.`);return i}),r)}export{defineDeployedSelfModificationSandbox};

package/dist/src/self-modification/extension/extension.d.ts

@@ -3,3 +3,4 @@ import type { SelfModificationExtensionConfig } from "../config.js";
 /** Extension mount configured with the same policy as the agent and sandbox. */
 declare const _default: import("eve/extension").ExtensionHandle<StandardSchemaV1<SelfModificationExtensionConfig, SelfModificationExtensionConfig>>;
 export default _default;
+export type { SelfModificationExtensionConfig } from "../config.js";

package/dist/src/self-modification/extension/local-only.d.ts

@@ -2,4 +2,4 @@ import { type ResolvedSelfModificationConfig } from "../config.js";
 /** Returns a definition only when self-modification is running locally. */
 export declare function resolveLocalOnly<T>(config: ResolvedSelfModificationConfig, definition: T): T | null;
 /** Creates a dynamic definition that is present only during local development. */
-export declare function defineLocalOnlyDynamic<T>(definition: T): import("#dynamic/definition.js").DynamicSentinel<Awaited<T> | null>;
+export declare function defineLocalOnlyDynamic<T>(definition: T): import("#dynamic/definition.js").DynamicSentinel<T | null, import("#dynamic/definition.js").DynamicContext>;

package/dist/src/self-modification/extension/local-only.js

@@ -1 +1 @@
-import{resolveSelfModificationConfig}from"../config.js";import{isLocalSelfModificationEnabled}from"../mode.js";import extension_default from"./extension.js";import{defineDynamic}from"#dynamic/definition.js";function resolveLocalOnly(e,t){return isLocalSelfModificationEnabled(e)?t:null}function defineLocalOnlyDynamic(e){return defineDynamic({events:{"session.started":()=>resolveLocalOnly(resolveSelfModificationConfig(extension_default.config),e)}})}export{defineLocalOnlyDynamic,resolveLocalOnly};
+import{resolveSelfModificationConfig}from"../config.js";import{isLocalSelfModificationEnabled}from"../mode.js";import extension_default from"./extension.js";import{defineDynamic}from"#dynamic/definition.js";function resolveLocalOnly(e,t){return isLocalSelfModificationEnabled(e)?t:null}function defineLocalOnlyDynamic(e){return defineDynamic(()=>resolveLocalOnly(resolveSelfModificationConfig(extension_default.config),e))}export{defineLocalOnlyDynamic,resolveLocalOnly};

package/dist/src/self-modification/extension/subagents/agent/agent.d.ts

@@ -1,4 +1,4 @@
-import { type AgentReasoningDefinition, type AgentStaticModelDefinition, type DynamicSentinel, type DynamicSubagentDefinition } from "eve";
+import { type AgentReasoningDefinition, type AgentStaticModelDefinition } from "eve";
 import { type SelfModificationConfig } from "../../../config.js";
 /** Fallback model when neither the self-modification agent nor its parent configures one. */
 export declare const FALLBACK_SELF_MODIFICATION_MODEL = "openai/gpt-6-luna-fast";
@@ -13,7 +13,18 @@ export interface SelfModificationAgentOptions {
      */
     readonly reasoning?: AgentReasoningDefinition;
 }
-/** Defines the local development self-modification dynamic subagent. */
-export declare function defineSelfModificationAgent(options?: SelfModificationAgentOptions): DynamicSentinel<DynamicSubagentDefinition | null>;
-declare const _default: DynamicSentinel<DynamicSubagentDefinition | null>;
+/**
+ * Defines the local development self-modification dynamic subagent, offered
+ * only to the developer running `eve dev` (see {@link isLocalDeveloper}).
+ */
+export declare function defineSelfModificationAgent(options?: SelfModificationAgentOptions): import("eve").DynamicSentinel<import("eve").DefinedAgent<{
+    description: string;
+    model: string | import("@ai-sdk/provider").LanguageModelV2 | import("@ai-sdk/provider").LanguageModelV3 | import("@ai-sdk/provider").LanguageModelV4;
+    reasoning: AgentReasoningDefinition | undefined;
+}> | null, import("eve").DynamicContext>;
+declare const _default: import("eve").DynamicSentinel<import("eve").DefinedAgent<{
+    description: string;
+    model: string | import("@ai-sdk/provider").LanguageModelV2 | import("@ai-sdk/provider").LanguageModelV3 | import("@ai-sdk/provider").LanguageModelV4;
+    reasoning: AgentReasoningDefinition | undefined;
+}> | null, import("eve").DynamicContext>;
 export default _default;

package/dist/src/self-modification/extension/subagents/agent/agent.js

@@ -1 +1 @@
-import{resolveSelfModificationConfig}from"../../../config.js";import{isLocalSelfModificationEnabled}from"../../../mode.js";import extension_default from"../../extension.js";import{followUpDelegation,namedInstallationDelegation,persistenceDelegation,renderDescription,repairDelegation,sourceDelegation}from"../../../subagent-guidance.js";import{DEFAULT_AGENT_MODEL_ID,DEFAULT_AGENT_REASONING}from"#shared/default-agent-model.js";import{defineAgent,defineDynamic}from"eve";import{getLocalDevCapability}from"eve/local-dev";const FALLBACK_SELF_MODIFICATION_MODEL=DEFAULT_AGENT_MODEL_ID;function defineSelfModificationAgent(e={}){let resolve=async(t,n)=>{let r=extension_default.config,i=resolveSelfModificationConfig(e.config??r);if(!isLocalSelfModificationEnabled(i)||getLocalDevCapability()===void 0)return null;let a=e.model??r.model??n.model?.id,o=e.reasoning??r.reasoning??(a===void 0?DEFAULT_AGENT_REASONING:void 0),s=a??FALLBACK_SELF_MODIFICATION_MODEL,c=renderDescription([`Delegate here immediately when the user asks to change the self-modification subagent's model, reasoning, or configuration. Also delegate when the user asks to change this eve agent or its authored source.`,sourceDelegation,persistenceDelegation,namedInstallationDelegation,`Delegate questions about which integrations, channels, connections, or capabilities are available to add: the subagent searches the eve registry and reports exact item addresses instead of guessing them.`,`Delegate requests to investigate, diagnose, or optimize the agent's behavior from local traces to this subagent: it can inspect the invoking session's trace and make persistent source changes when warranted.`,followUpDelegation,repairDelegation,`Source edits do not affect the caller’s current turn. After this subagent reports changes, do not invoke edited tools or attempt runtime verification until a new user turn.`]);return defineAgent({description:c,model:s,reasoning:o})};return defineDynamic({events:{"session.started":resolve,"turn.started":resolve}})}var agent_default=defineSelfModificationAgent();export{FALLBACK_SELF_MODIFICATION_MODEL,agent_default as default,defineSelfModificationAgent};
+import{resolveSelfModificationConfig}from"../../../config.js";import{isLocalDeveloper,isLocalSelfModificationEnabled}from"../../../mode.js";import extension_default from"../../extension.js";import{followUpDelegation,namedInstallationDelegation,persistenceDelegation,renderDescription,repairDelegation,sourceDelegation}from"../../../subagent-guidance.js";import{DEFAULT_AGENT_MODEL_ID,DEFAULT_AGENT_REASONING}from"#shared/default-agent-model.js";import{defineAgent,defineDynamic}from"eve";import{getLocalDevCapability}from"eve/local-dev";const FALLBACK_SELF_MODIFICATION_MODEL=DEFAULT_AGENT_MODEL_ID;function defineSelfModificationAgent(e={}){return defineDynamic(t=>{let n=extension_default.config,r=resolveSelfModificationConfig(e.config??n);if(!isLocalSelfModificationEnabled(r)||getLocalDevCapability()===void 0||!isLocalDeveloper(t.session.auth.current))return null;let i=e.model??n.model??t.model.id??void 0,a=e.reasoning??n.reasoning??(i===void 0?DEFAULT_AGENT_REASONING:void 0),o=i??FALLBACK_SELF_MODIFICATION_MODEL,s=renderDescription([`Delegate here immediately when the user asks to change the self-modification subagent's model, reasoning, or configuration. Also delegate when the user asks to change this eve agent or its authored source.`,sourceDelegation,persistenceDelegation,namedInstallationDelegation,`Delegate questions about which integrations, channels, connections, or capabilities are available to add: the subagent searches the eve registry and reports exact item addresses instead of guessing them.`,`Delegate requests to investigate, diagnose, or optimize the agent's behavior from local traces to this subagent: it can inspect the invoking session's trace and make persistent source changes when warranted.`,followUpDelegation,repairDelegation,`Source edits do not affect the caller’s current turn. After this subagent reports changes, do not invoke edited tools or attempt runtime verification until a new user turn.`]);return defineAgent({description:s,model:o,reasoning:a})})}var agent_default=defineSelfModificationAgent();export{FALLBACK_SELF_MODIFICATION_MODEL,agent_default as default,defineSelfModificationAgent};

package/dist/src/self-modification/extension/subagents/agent/instructions.d.ts

@@ -1,2 +1,2 @@
-declare const _default: import("eve/instructions").DynamicSentinel<import("eve/instructions").DynamicInstructionsResult>;
+declare const _default: import("eve/instructions").DynamicSentinel<import("eve/instructions").DynamicInstructionsResult, import("eve/instructions").DynamicContext>;
 export default _default;

package/dist/src/self-modification/extension/subagents/agent/instructions.js

@@ -2,8 +2,8 @@ import{resolveSelfModificationConfig}from"../../../config.js";import{isLocalSelf
 
 Only when the requester explicitly names the self-modification subagent, edit whichever of /source/extensions/self-modification.ts or /source/extensions/self-modification/extension.ts exists. If neither exists, create /source/extensions/self-modification/extension.ts with write_file using this content, then make the requested model or reasoning change:
 \`\`\`ts
-${renderLocalSelfModificationExtension()}\`\`\``;var instructions_default=defineDynamic({events:{"session.started":()=>isLocalSelfModificationEnabled(resolveSelfModificationConfig(extension_default.config))?defineInstructions({markdown:renderInstructions([roleInstructions,sourceWorkspaceInstructions,sourceEditingInstructions,toolAuthoringInstructions,registryWorkflowInstructions,documentationInstructions,"## Local environment\n\nThe registry_add tool will complete installation for items that need no setup. In the local dev TUI, a `needs-terminal` result queues the existing setup panel, which opens after your reply and reports the setup outcome itself. Until then nothing is installed: say that setup continues in the panel and never describe the item as added, connected, or set up. In headless development, if a `needs-terminal` result includes `nextCommand`, present that exact value as the only shell command in your response. Never infer, construct, or rewrite a command: installing an item uses `eve add <item>`; `eve registry add` configures registry namespace mappings and does not install items.\n\nLocal eve dev logs are mounted read-only at /logs. Local trace segments are mounted read-only at /traces when available. For latency, failure, token, or behavior analysis, load and follow the `trace_analysis` skill. Trace searches are scoped to the invoking conversation and exclude the current investigation by default.\n\nThe application package.json is not mounted. Do not search outside /source for application files. You cannot run host binaries such as git, node, pnpm, or tsc. Use existing imports and registry_add for supported registry installations.",workingInstructions,selfModificationSubagentGuidance,`## Report results
+${renderLocalSelfModificationExtension()}\`\`\``;var instructions_default=defineDynamic(()=>isLocalSelfModificationEnabled(resolveSelfModificationConfig(extension_default.config))?defineInstructions({content:renderInstructions([roleInstructions,sourceWorkspaceInstructions,sourceEditingInstructions,toolAuthoringInstructions,registryWorkflowInstructions,documentationInstructions,"## Local environment\n\nThe registry_add tool will complete installation for items that need no setup. In the local dev TUI, a `needs-terminal` result queues the existing setup panel, which opens after your reply and reports the setup outcome itself. Until then nothing is installed: say that setup continues in the panel and never describe the item as added, connected, or set up. In headless development, if a `needs-terminal` result includes `nextCommand`, present that exact value as the only shell command in your response. Never infer, construct, or rewrite a command: installing an item uses `eve add <item>`; `eve registry add` configures registry namespace mappings and does not install items.\n\nLocal eve dev logs are mounted read-only at /logs. Local trace segments are mounted read-only at /traces when available. For latency, failure, token, or behavior analysis, load and follow the `trace_analysis` skill. Trace searches are scoped to the invoking conversation and exclude the current investigation by default.\n\nThe application package.json is not mounted. Do not search outside /source for application files. You cannot run host binaries such as git, node, pnpm, or tsc. Use existing imports and registry_add for supported registry installations.",workingInstructions,selfModificationSubagentGuidance,`## Report results
 
 For source-modification tasks, return a concise handoff to the caller. Use at most four short bullets covering changed paths and behavior, and any required setup or unresolved issues.
 
-For investigation tasks, report the findings and supporting evidence requested by the caller.`])}):null}});export{instructions_default as default};
+For investigation tasks, report the findings and supporting evidence requested by the caller.`])}):null);export{instructions_default as default};

package/dist/src/self-modification/extension/subagents/agent/sandbox.d.ts

@@ -1,3 +1,3 @@
-export { defineSelfModificationSandbox } from "eve/self-modification/sandbox";
-declare const _default: import("eve/self-modification/sandbox").SelfModificationSandbox;
+export { defineSelfModificationSandbox } from "eve/internal/self-modification/sandbox";
+declare const _default: import("eve/internal/self-modification/sandbox").SelfModificationSandbox;
 export default _default;

package/dist/src/self-modification/extension/subagents/agent/sandbox.js

@@ -1 +1 @@
-import extension_default from"../../extension.js";import{defineSelfModificationSandbox,defineSelfModificationSandbox as defineSelfModificationSandbox$1}from"eve/self-modification/sandbox";var sandbox_default=defineSelfModificationSandbox$1({config:extension_default.config});export{sandbox_default as default,defineSelfModificationSandbox};
+import extension_default from"../../extension.js";import{defineSelfModificationSandbox,defineSelfModificationSandbox as defineSelfModificationSandbox$1}from"eve/internal/self-modification/sandbox";var sandbox_default=defineSelfModificationSandbox$1({config:extension_default.config});export{sandbox_default as default,defineSelfModificationSandbox};

package/dist/src/self-modification/extension/subagents/agent/skills/trace_analysis.d.ts

@@ -1,10 +1,10 @@
 import type { ResolvedSelfModificationConfig } from "../../../../config.js";
 export declare function resolveTraceAnalysisSkill(config: ResolvedSelfModificationConfig): {
     description: string;
-    markdown: string;
+    content: string;
 } | null;
 declare const _default: import("eve/skills").DynamicSentinel<{
     description: string;
-    markdown: string;
-} | null>;
+    content: string;
+} | null, import("eve/skills").DynamicContext>;
 export default _default;

package/dist/src/self-modification/extension/subagents/agent/skills/trace_analysis.js

@@ -1,4 +1,4 @@
-import{defineLocalOnlyDynamic,resolveLocalOnly}from"../../../local-only.js";import{defineSkill}from"eve/skills";const traceAnalysisSkill=defineSkill({description:`Analyze local eve traces for latency, token usage, failures, repeated tool calls, and discovery inefficiency with a bounded, conversation-scoped investigation.`,markdown:`# Trace analysis
+import{defineLocalOnlyDynamic,resolveLocalOnly}from"../../../local-only.js";import{defineSkill}from"eve/skills";const traceAnalysisSkill=defineSkill({description:`Analyze local eve traces for latency, token usage, failures, repeated tool calls, and discovery inefficiency with a bounded, conversation-scoped investigation.`,content:`# Trace analysis
 
 Use this workflow when the user asks to review, diagnose, or optimize behavior from local traces.
 

package/dist/src/self-modification/extension/subagents/agent/tools/inspect_trace.d.ts

@@ -124,5 +124,5 @@ declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools")
         hasMore: boolean;
         truncated: boolean;
     }>;
-}) | null>;
+}) | null, import("eve/tools").DynamicContext>;
 export default _default;

package/dist/src/self-modification/extension/subagents/agent/tools/inspect_trace_spans.d.ts

@@ -76,5 +76,5 @@ declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools")
         })[];
         truncated: boolean;
     }>;
-}) | null>;
+}) | null, import("eve/tools").DynamicContext>;
 export default _default;

package/dist/src/self-modification/extension/subagents/agent/tools/registry_add.d.ts

@@ -52,5 +52,5 @@ export declare function resolveRegistryAddTool(config: ResolvedSelfModificationC
 }) | null;
 declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools").ToolDefinition<Record<string, unknown>, LocalRegistryAddResult> & {
     execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<LocalRegistryAddResult>;
-}) | null>;
+}) | null, import("eve/tools").DynamicContext>;
 export default _default;

package/dist/src/self-modification/extension/subagents/agent/tools/search_traces.d.ts

@@ -49,5 +49,5 @@ declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools")
         matches: readonly LocalTraceSummary[];
         truncated: boolean;
     }>;
-}) | null>;
+}) | null, import("eve/tools").DynamicContext>;
 export default _default;

package/dist/src/self-modification/mode.d.ts

@@ -1,5 +1,13 @@
+import type { SessionAuthContext } from "#context/keys.js";
 import type { ResolvedSelfModificationConfig } from "./config.js";
 /** Local self-modification runs only inside the development runtime. */
 export declare function isLocalSelfModificationEnabled(config: ResolvedSelfModificationConfig): boolean;
+/**
+ * Whether the caller is the developer running `eve dev`: the `localDev()`
+ * principal, or the Vercel user whose development token the dev TUI sends for
+ * a linked project. Other authenticated callers, such as chat users reaching
+ * the server through a tunnel, must not edit the developer's authored source.
+ */
+export declare function isLocalDeveloper(principal: SessionAuthContext | null): boolean;
 /** Deployed self-modification is offered only outside the development runtime. */
 export declare function isDeployedRuntime(): boolean;

package/dist/src/self-modification/mode.js

@@ -1 +1 @@
-function isLocalSelfModificationEnabled(e){return process.env.EVE_DEV===`1`&&e.localEnabled}function isDeployedRuntime(){return process.env.EVE_DEV!==`1`}export{isDeployedRuntime,isLocalSelfModificationEnabled};
+import{isVercelDevelopmentUser}from"#runtime/connections/principal.js";function isLocalSelfModificationEnabled(e){return process.env.EVE_DEV===`1`&&e.localEnabled}function isLocalDeveloper(e){return e===null?!1:e.authenticator===`local-dev`||isVercelDevelopmentUser(e)}function isDeployedRuntime(){return process.env.EVE_DEV!==`1`}export{isDeployedRuntime,isLocalDeveloper,isLocalSelfModificationEnabled};

package/dist/src/self-modification/remote/config.d.ts

@@ -1,12 +1,9 @@
+import type { InstrumentationChannel } from "#shared/instrumentation-channel.js";
 import type { SessionAuthContext } from "#channel/types.js";
 import type { AgentReasoningDefinition, AgentStaticModelDefinition } from "#public/index.js";
 /** Principal and channel that requested a deployed source modification. */
 export interface SelfModificationAuthorizationContext {
-    readonly channel: {
-        /** Channel adapter family, such as `"slack"` or `"http"`. */
-        readonly kind?: string;
-        readonly metadata?: Readonly<Record<string, unknown>>;
-    };
+    readonly channel: InstrumentationChannel;
     readonly principal: SessionAuthContext | null;
 }
 /** Decides whether a principal may use deployed self-modification. */
@@ -24,7 +21,7 @@ export interface GitHubCredentialRequest {
 export interface GitHubCredentialProvider {
     resolve(request: GitHubCredentialRequest): Promise<string>;
 }
-/** Values accepted by the `eve/self-modification/remote` extension mount. */
+/** Values accepted by the `eve/extensions/self-modification/remote` extension mount. */
 export interface DeployedSelfModificationConfig {
     readonly source: {
         readonly git: {

package/dist/src/self-modification/remote/extension.d.ts

@@ -3,3 +3,4 @@ import type { DeployedSelfModificationConfig } from "./config.js";
 /** Deployed self-modification mount; independent of the local development extension. */
 declare const _default: import("eve/extension").ExtensionHandle<StandardSchemaV1<DeployedSelfModificationConfig, DeployedSelfModificationConfig>>;
 export default _default;
+export type { DeployedSelfModificationConfig, SelfModificationAuthorization, SelfModificationAuthorizationContext, GitHubCredentialProvider, GitHubCredentialRequest, GitHubCredentialCapability, GitHubRepository, } from "./config.js";

package/dist/src/self-modification/remote/production-registry-add.js

@@ -1 +1 @@
-import{gitOutput,runGitCommand}from"../git.js";import{assertFullSha}from"../identifiers.js";import{readTerminalHeadlessEvent}from"../extension/eve-add.js";import{shellQuote}from"#shared/shell-quote.js";const OFFICIAL_ADDRESS=/^(?:(?:channel|connection|extension|instrumentation)\/)?[a-z0-9][a-z0-9._-]*$/u;function assertOfficialRegistryAddress(e){if(!OFFICIAL_ADDRESS.test(e))throw Error(`Production registry installation requires an exact official eve registry address.`)}async function installProductionRegistryItem(e){assertOfficialRegistryAddress(e.address);let t=e.workspace.directory===`.`?e.workspace.repositoryPath:`${e.workspace.repositoryPath}/${e.workspace.directory}`,n=await locatePackageManagerRoot(e.sandbox,t,e.workspace.repositoryPath,e.signal);if(n===void 0)return{kind:`failed`,message:`The proposal checkout has no supported lockfile.`};if(!await runChecked(e.sandbox,`mkdir -p ${quote(`${e.workspace.repositoryPath}/.git/info`)} && printf '\\nnode_modules/\\n**/node_modules/\\n' >> ${quote(`${e.workspace.repositoryPath}/.git/info/exclude`)}`,e.signal)||!await runChecked(e.sandbox,bootstrapCommand(n),e.signal))return{kind:`failed`,message:`Could not prepare the proposal checkout's locked dependencies.`};let r=await locateEveExecutable(e.sandbox,t,n.root,e.signal);if(r===void 0)return{kind:`failed`,message:`The proposal checkout's locked dependencies do not provide the eve CLI.`};let i=await captureTree(e.sandbox,e.workspace.repositoryPath);if(e.answers!==void 0){if(e.installed!==!0)return{kind:`failed`,message:`Setup answers require a prior installed input-required result.`};let n;try{n=await e.sandbox.run({abortSignal:e.signal,command:isolatedCommand(t,`${quote(r)} add ${quote(e.address)} --non-interactive --skip-install`)})}finally{await restoreTree(e.sandbox,e.workspace.repositoryPath,i)}let a=readTerminalHeadlessEvent(`${String(n.stdout??``)}\n${String(n.stderr??``)}`);if(a?.type!==`blocked`||a.item!==e.address)return{kind:`failed`,message:`Setup continuation is no longer waiting for a validated question.`};let o=setupQuestion(a.question);if(o===void 0)return{kind:`failed`,message:`Registry setup returned an invalid continuation question.`};if(o.kind===`environment`)return{kind:`input-required`,installed:!0,question:a.question};if(!acceptsNonSecretSetupAnswers(o,e.answers))return{kind:`failed`,message:`Setup answers must contain only the current non-secret question.`}}let a=Object.entries(e.answers??{}).flatMap(([e,t])=>[`--answer`,`${e}=${JSON.stringify(t)}`]);try{let n=`${quote(r)} add ${quote(e.address)} --non-interactive ${e.installed===!0?`--skip-install `:``}${a.map(quote).join(` `)}`,o=await e.sandbox.run({abortSignal:e.signal,command:isolatedCommand(t,n)}),s=readTerminalHeadlessEvent(`${String(o.stdout??``)}\n${String(o.stderr??``)}`);if(s?.type===`completed`&&s.item===e.address&&o.exitCode===0){let t=await captureTree(e.sandbox,e.workspace.repositoryPath);return{kind:`completed`,changedPaths:await changedPaths(e.sandbox,e.workspace.repositoryPath,i,t),completedItems:s.completedItems?.filter(e=>OFFICIAL_ADDRESS.test(e))??[],deploymentRequired:s.deploymentRequired===!0}}if(s?.type===`blocked`&&s.item===e.address)return{kind:`input-required`,installed:s.installed===!0,question:s.question??s};if(s?.type===`external_action`&&typeof s.url==`string`&&typeof s.message==`string`){let t={kind:`external-action-required`,installed:e.installed===!0,message:s.message,url:s.url};return typeof s.userCode==`string`&&(t.userCode=s.userCode),t}return await restoreTree(e.sandbox,e.workspace.repositoryPath,i),s?.type===`cancelled`||e.signal?.aborted===!0?{kind:`cancelled`,message:`Installing ${e.address} was cancelled.`}:{kind:`failed`,message:`Installing ${e.address} failed.`}}catch(t){throw await restoreTree(e.sandbox,e.workspace.repositoryPath,i),t}}function acceptsNonSecretSetupAnswers(e,t){return e.kind!==`environment`&&Object.keys(t).length===1&&t[e.key]!==void 0}function setupQuestion(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t=e;if(typeof t.key==`string`&&t.key.length!==0&&typeof t.kind==`string`)return{key:t.key,kind:t.sensitive===!0?`environment`:t.kind}}async function locatePackageManagerRoot(e,t,n,r){let i=await e.run({abortSignal:r,command:`root=${quote(t)}; repository=${quote(n)}; while :; do if test -f "$root/pnpm-lock.yaml"; then printf 'pnpm\\t%s' "$root"; exit 0; fi; if test -f "$root/package-lock.json"; then printf 'npm\\t%s' "$root"; exit 0; fi; test "$root" = "$repository" && exit 0; root=\${root%/*}; done`});if(i.exitCode!==0)throw Error(`Could not inspect the proposal package workspace.`);let a=/^(pnpm|npm)\t([^\n]+)$/u.exec(String(i.stdout??``));if(a===null)return;let o=a[2];if(o!==n&&!o.startsWith(`${n}/`))throw Error(`Package manager root escaped the proposal repository.`);return{kind:a[1],root:o}}function bootstrapCommand(e){return isolatedCommand(e.root,e.kind===`pnpm`?`corepack pnpm --dir ${quote(e.root)} install --frozen-lockfile --ignore-scripts`:`npm ci --prefix ${quote(e.root)} --ignore-scripts`)}async function locateEveExecutable(e,t,n,r){let i=[`${t}/node_modules/.bin/eve`,`${n}/node_modules/.bin/eve`],a=await e.run({abortSignal:r,command:`for executable in ${i.map(quote).join(` `)}; do if test -x "$executable"; then printf '%s' "$executable"; exit 0; fi; done`});if(a.exitCode!==0)throw Error(`Could not inspect the checkout's eve executable.`);return i.includes(String(a.stdout??``))?String(a.stdout):void 0}async function captureTree(e,t){await runGitCommand(e,`git -C ${quote(t)} add -A -- .`);let n=await gitOutput(e,`git -C ${quote(t)} write-tree`);return assertFullSha(n,`registry tree`),n}async function restoreTree(e,t,n){await runGitCommand(e,`git -C ${quote(t)} read-tree --reset -u ${quote(n)}`),await runGitCommand(e,`git -C ${quote(t)} clean -fd -- .`)}async function changedPaths(e,t,n,r){return(await gitOutput(e,`git -C ${quote(t)} diff-tree -r --no-commit-id --name-only -z ${quote(n)} ${quote(r)}`,!1)).split(`\0`).filter(e=>e.length>0)}async function runChecked(e,t,n){return(await e.run({abortSignal:n,command:t})).exitCode===0}function isolatedCommand(e,t){return`env -i HOME=/tmp/eve-selfmod-home PATH=/usr/local/bin:/usr/bin:/bin CI=1 npm_config_ignore_scripts=true sh -c ${quote(`cd ${quote(e)} && ${t}`)}`}function quote(e){return shellQuote(e)}export{acceptsNonSecretSetupAnswers,assertOfficialRegistryAddress,bootstrapCommand,installProductionRegistryItem,locatePackageManagerRoot};
+import{gitOutput,runGitCommand}from"../git.js";import{assertFullSha}from"../identifiers.js";import{readTerminalHeadlessEvent}from"../extension/eve-add.js";import{shellQuote}from"#shared/shell-quote.js";const OFFICIAL_ADDRESS=/^(?:(?:channel|connection|extension|instrumentation)\/)?[a-z0-9][a-z0-9._-]*$/u;function assertOfficialRegistryAddress(e){if(!OFFICIAL_ADDRESS.test(e))throw Error(`Production registry installation requires an exact official eve registry address.`)}async function installProductionRegistryItem(e){assertOfficialRegistryAddress(e.address);let t=e.workspace.directory===`.`?e.workspace.repositoryPath:`${e.workspace.repositoryPath}/${e.workspace.directory}`,n=await locatePackageManagerRoot(e.sandbox,t,e.workspace.repositoryPath,e.signal);if(n===void 0)return{kind:`failed`,message:`The proposal checkout has no supported lockfile.`};if(!await runChecked(e.sandbox,`mkdir -p ${quote(`${e.workspace.repositoryPath}/.git/info`)} && printf '\\nnode_modules/\\n**/node_modules/\\n' >> ${quote(`${e.workspace.repositoryPath}/.git/info/exclude`)}`,e.signal)||!await runChecked(e.sandbox,bootstrapCommand(n),e.signal))return{kind:`failed`,message:`Could not prepare the proposal checkout's locked dependencies.`};let r=await locateEveExecutable(e.sandbox,t,n.root,e.signal);if(r===void 0)return{kind:`failed`,message:`The proposal checkout's locked dependencies do not provide the eve CLI.`};let i=await captureTree(e.sandbox,e.workspace.repositoryPath);if(e.answers!==void 0){if(e.installed!==!0)return{kind:`failed`,message:`Setup answers require a prior installed input-required result.`};let n;try{n=await e.sandbox.run({signal:e.signal,command:isolatedCommand(t,`${quote(r)} add ${quote(e.address)} --non-interactive --skip-install`)})}finally{await restoreTree(e.sandbox,e.workspace.repositoryPath,i)}let a=readTerminalHeadlessEvent(`${String(n.stdout??``)}\n${String(n.stderr??``)}`);if(a?.type!==`blocked`||a.item!==e.address)return{kind:`failed`,message:`Setup continuation is no longer waiting for a validated question.`};let o=setupQuestion(a.question);if(o===void 0)return{kind:`failed`,message:`Registry setup returned an invalid continuation question.`};if(o.kind===`environment`)return{kind:`input-required`,installed:!0,question:a.question};if(!acceptsNonSecretSetupAnswers(o,e.answers))return{kind:`failed`,message:`Setup answers must contain only the current non-secret question.`}}let a=Object.entries(e.answers??{}).flatMap(([e,t])=>[`--answer`,`${e}=${JSON.stringify(t)}`]);try{let n=`${quote(r)} add ${quote(e.address)} --non-interactive ${e.installed===!0?`--skip-install `:``}${a.map(quote).join(` `)}`,o=await e.sandbox.run({signal:e.signal,command:isolatedCommand(t,n)}),s=readTerminalHeadlessEvent(`${String(o.stdout??``)}\n${String(o.stderr??``)}`);if(s?.type===`completed`&&s.item===e.address&&o.exitCode===0){let t=await captureTree(e.sandbox,e.workspace.repositoryPath);return{kind:`completed`,changedPaths:await changedPaths(e.sandbox,e.workspace.repositoryPath,i,t),completedItems:s.completedItems?.filter(e=>OFFICIAL_ADDRESS.test(e))??[],deploymentRequired:s.deploymentRequired===!0}}if(s?.type===`blocked`&&s.item===e.address)return{kind:`input-required`,installed:s.installed===!0,question:s.question??s};if(s?.type===`external_action`&&typeof s.url==`string`&&typeof s.message==`string`){let t={kind:`external-action-required`,installed:e.installed===!0,message:s.message,url:s.url};return typeof s.userCode==`string`&&(t.userCode=s.userCode),t}return await restoreTree(e.sandbox,e.workspace.repositoryPath,i),s?.type===`cancelled`||e.signal?.aborted===!0?{kind:`cancelled`,message:`Installing ${e.address} was cancelled.`}:{kind:`failed`,message:`Installing ${e.address} failed.`}}catch(t){throw await restoreTree(e.sandbox,e.workspace.repositoryPath,i),t}}function acceptsNonSecretSetupAnswers(e,t){return e.kind!==`environment`&&Object.keys(t).length===1&&t[e.key]!==void 0}function setupQuestion(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t=e;if(typeof t.key==`string`&&t.key.length!==0&&typeof t.kind==`string`)return{key:t.key,kind:t.sensitive===!0?`environment`:t.kind}}async function locatePackageManagerRoot(e,t,n,r){let i=await e.run({signal:r,command:`root=${quote(t)}; repository=${quote(n)}; while :; do if test -f "$root/pnpm-lock.yaml"; then printf 'pnpm\\t%s' "$root"; exit 0; fi; if test -f "$root/package-lock.json"; then printf 'npm\\t%s' "$root"; exit 0; fi; test "$root" = "$repository" && exit 0; root=\${root%/*}; done`});if(i.exitCode!==0)throw Error(`Could not inspect the proposal package workspace.`);let a=/^(pnpm|npm)\t([^\n]+)$/u.exec(String(i.stdout??``));if(a===null)return;let o=a[2];if(o!==n&&!o.startsWith(`${n}/`))throw Error(`Package manager root escaped the proposal repository.`);return{kind:a[1],root:o}}function bootstrapCommand(e){return isolatedCommand(e.root,e.kind===`pnpm`?`corepack pnpm --dir ${quote(e.root)} install --frozen-lockfile --ignore-scripts`:`npm ci --prefix ${quote(e.root)} --ignore-scripts`)}async function locateEveExecutable(e,t,n,r){let i=[`${t}/node_modules/.bin/eve`,`${n}/node_modules/.bin/eve`],a=await e.run({signal:r,command:`for executable in ${i.map(quote).join(` `)}; do if test -x "$executable"; then printf '%s' "$executable"; exit 0; fi; done`});if(a.exitCode!==0)throw Error(`Could not inspect the checkout's eve executable.`);return i.includes(String(a.stdout??``))?String(a.stdout):void 0}async function captureTree(e,t){await runGitCommand(e,`git -C ${quote(t)} add -A -- .`);let n=await gitOutput(e,`git -C ${quote(t)} write-tree`);return assertFullSha(n,`registry tree`),n}async function restoreTree(e,t,n){await runGitCommand(e,`git -C ${quote(t)} read-tree --reset -u ${quote(n)}`),await runGitCommand(e,`git -C ${quote(t)} clean -fd -- .`)}async function changedPaths(e,t,n,r){return(await gitOutput(e,`git -C ${quote(t)} diff-tree -r --no-commit-id --name-only -z ${quote(n)} ${quote(r)}`,!1)).split(`\0`).filter(e=>e.length>0)}async function runChecked(e,t,n){return(await e.run({signal:n,command:t})).exitCode===0}function isolatedCommand(e,t){return`env -i HOME=/tmp/eve-selfmod-home PATH=/usr/local/bin:/usr/bin:/bin CI=1 npm_config_ignore_scripts=true sh -c ${quote(`cd ${quote(e)} && ${t}`)}`}function quote(e){return shellQuote(e)}export{acceptsNonSecretSetupAnswers,assertOfficialRegistryAddress,bootstrapCommand,installProductionRegistryItem,locatePackageManagerRoot};

package/dist/src/self-modification/remote/subagents/agent/agent.d.ts

@@ -1,4 +1,7 @@
-import { type DynamicSentinel, type DynamicSubagentDefinition } from "eve";
 /** Offers the deployed self-modification child only to authorized principals outside `eve dev`. */
-declare const deployedSelfModificationAgent: DynamicSentinel<DynamicSubagentDefinition | null>;
-export default deployedSelfModificationAgent;
+declare const _default: import("eve").DynamicSentinel<import("eve").DefinedAgent<{
+    description: string;
+    model: import("eve").AgentStaticModelDefinition;
+    reasoning: import("eve").AgentReasoningDefinition | undefined;
+}> | null, import("eve").DynamicContext>;
+export default _default;

package/dist/src/self-modification/remote/subagents/agent/agent.js

@@ -1 +1 @@
-import{hasGitHubCredential}from"../../../credentials.js";import{isDeployedRuntime}from"../../../mode.js";import{resolveDeployedSelfModificationConfig}from"../../config.js";import{followUpDelegation,namedInstallationDelegation,persistenceDelegation,renderDescription,repairDelegation,sourceDelegation}from"../../../subagent-guidance.js";import extension_default from"../../extension.js";import{DEFAULT_AGENT_MODEL_ID,DEFAULT_AGENT_REASONING}from"#shared/default-agent-model.js";import{defineAgent,defineDynamic}from"eve";const description=renderDescription([`Delegate here immediately when the user asks to change this eve agent or its authored source.`,sourceDelegation,persistenceDelegation,namedInstallationDelegation,`Delegate requests to add integrations, channels, connections, or capabilities: the subagent searches the official eve registry and can install source changes into the draft proposal. Setup may require non-secret answers or an external action, and secret binding remains separate.`,followUpDelegation,repairDelegation,`Source edits do not affect the caller’s current turn. The subagent can publish only a draft pull request, and changes become effective only after review, merge, and redeployment.`]),resolve=async(e,t)=>{if(!isDeployedRuntime())return null;let n=extension_default.config,r=resolveDeployedSelfModificationConfig(n);if(r.credentials.kind===`pat`&&!hasGitHubCredential())return null;try{if(!await r.authorize({channel:t.channel,principal:t.session.auth.current}))return null}catch{return null}let i=n.model??t.model?.id;return defineAgent({description,model:i??DEFAULT_AGENT_MODEL_ID,reasoning:n.reasoning??(i===void 0?DEFAULT_AGENT_REASONING:void 0)})},deployedSelfModificationAgent=defineDynamic({events:{"session.started":resolve,"turn.started":resolve}});export{deployedSelfModificationAgent as default};
+import{hasGitHubCredential}from"../../../credentials.js";import{isDeployedRuntime}from"../../../mode.js";import{resolveDeployedSelfModificationConfig}from"../../config.js";import{followUpDelegation,namedInstallationDelegation,persistenceDelegation,renderDescription,repairDelegation,sourceDelegation}from"../../../subagent-guidance.js";import extension_default from"../../extension.js";import{DEFAULT_AGENT_MODEL_ID,DEFAULT_AGENT_REASONING}from"#shared/default-agent-model.js";import{defineAgent,defineDynamic}from"eve";const description=renderDescription([`Delegate here immediately when the user asks to change this eve agent or its authored source.`,sourceDelegation,persistenceDelegation,namedInstallationDelegation,`Delegate requests to add integrations, channels, connections, or capabilities: the subagent searches the official eve registry and can install source changes into the draft proposal. Setup may require non-secret answers or an external action, and secret binding remains separate.`,followUpDelegation,repairDelegation,`Source edits do not affect the caller’s current turn. The subagent can publish only a draft pull request, and changes become effective only after review, merge, and redeployment.`]);var agent_default=defineDynamic(async e=>{if(!isDeployedRuntime())return null;let t=extension_default.config,n=resolveDeployedSelfModificationConfig(t);if(n.credentials.kind===`pat`&&!hasGitHubCredential())return null;let r=e.session.auth.current;if(!await e.memo([`authorize`,r,e.turn?.id??null],async()=>{try{return await n.authorize({channel:e.channel,principal:r})===!0}catch{return!1}}))return null;let i=t.model??e.model.id;return defineAgent({description,model:i??DEFAULT_AGENT_MODEL_ID,reasoning:t.reasoning??(i===void 0?DEFAULT_AGENT_REASONING:void 0)})});export{agent_default as default};

package/dist/src/self-modification/remote/subagents/agent/instructions.d.ts

@@ -1,2 +1,2 @@
-declare const _default: import("eve/instructions").DynamicSentinel<import("eve/instructions").DynamicInstructionsResult>;
+declare const _default: import("eve/instructions").DynamicSentinel<import("eve/instructions").DynamicInstructionsResult, import("eve/instructions").DynamicContext>;
 export default _default;

package/dist/src/self-modification/remote/subagents/agent/instructions.js

@@ -1,5 +1,5 @@
-import{isDeployedRuntime}from"../../../mode.js";import{documentationInstructions,registryWorkflowInstructions,renderInstructions,roleInstructions,sourceEditingInstructions,sourceWorkspaceInstructions,toolAuthoringInstructions,workingInstructions}from"../../../subagent-guidance.js";import{defineDynamic,defineInstructions}from"eve/instructions";var instructions_default=defineDynamic({events:{"session.started":()=>isDeployedRuntime()?defineInstructions({markdown:renderInstructions([roleInstructions,sourceWorkspaceInstructions,sourceEditingInstructions,toolAuthoringInstructions,registryWorkflowInstructions,documentationInstructions,"## Deployed environment\n\nThe registry_add tool may return `completed`, `input-required`, `external-action-required`, `cancelled`, or `failed`. Supply only non-secret structured answers when continuing an `input-required` setup; set `installed: true` so the continuation does not reinstall source. Never request, accept, or repeat secret values. External authorization and secret binding are incomplete follow-up boundaries, not evidence that an integration is active.\n\nThe configured target branch is checked out as a disposable workspace under /workspace/repository. Make ordinary changes through /source, which is the writable view of the configured application's agent/ directory. Publication validates the final repository snapshot, including registry, manifest, and lockfile changes. Never modify Git refs, access GitHub directly, or use shell commands to write files. The sandbox has no reusable GitHub credential after checkout.\n\nComplete all edits and registry installations before publication, and call publish by itself. Before publication, review and summarize the complete intended scope. Call publish once with a concise title and summary. A successful result is only a draft pull request. Return its URL and changed paths, and state that merge and deployment have not occurred.",workingInstructions,`## Report results
+import{isDeployedRuntime}from"../../../mode.js";import{documentationInstructions,registryWorkflowInstructions,renderInstructions,roleInstructions,sourceEditingInstructions,sourceWorkspaceInstructions,toolAuthoringInstructions,workingInstructions}from"../../../subagent-guidance.js";import{defineDynamic,defineInstructions}from"eve/instructions";var instructions_default=defineDynamic(()=>isDeployedRuntime()?defineInstructions({content:renderInstructions([roleInstructions,sourceWorkspaceInstructions,sourceEditingInstructions,toolAuthoringInstructions,registryWorkflowInstructions,documentationInstructions,"## Deployed environment\n\nThe registry_add tool may return `completed`, `input-required`, `external-action-required`, `cancelled`, or `failed`. Supply only non-secret structured answers when continuing an `input-required` setup; set `installed: true` so the continuation does not reinstall source. Never request, accept, or repeat secret values. External authorization and secret binding are incomplete follow-up boundaries, not evidence that an integration is active.\n\nThe configured target branch is checked out as a disposable workspace under /workspace/repository. Make ordinary changes through /source, which is the writable view of the configured application's agent/ directory. Publication validates the final repository snapshot, including registry, manifest, and lockfile changes. Never modify Git refs, access GitHub directly, or use shell commands to write files. The sandbox has no reusable GitHub credential after checkout.\n\nComplete all edits and registry installations before publication, and call publish by itself. Before publication, review and summarize the complete intended scope. Call publish once with a concise title and summary. A successful result is only a draft pull request. Return its URL and changed paths, and state that merge and deployment have not occurred.",workingInstructions,`## Report results
 
 For source-modification tasks, return a concise handoff to the caller. Use at most four short bullets covering changed paths and behavior, and any required setup or unresolved issues. Include the draft pull request URL if one was published.
 
-For investigation tasks, report the findings and supporting evidence requested by the caller.`])}):null}});export{instructions_default as default};
+For investigation tasks, report the findings and supporting evidence requested by the caller.`])}):null);export{instructions_default as default};

package/dist/src/self-modification/remote/subagents/agent/tools/publish.d.ts

@@ -1,7 +1,5 @@
 import { type ToolContext } from "eve/tools";
 /** Derives replay identity only from eve's verified delegation lineage. */
 export declare function publicationOperationId(ctx: Pick<ToolContext, "session">): string;
-declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools").ToolDefinition<Record<string, unknown>, import("../../../../github-publisher.js").PublishedSelfModificationProposal> & {
-    execute(input: Record<string, unknown>, ctx: ToolContext): Promise<import("../../../../github-publisher.js").PublishedSelfModificationProposal>;
-}) | null>;
+declare const _default: import("eve/tools").DynamicSentinel<import("eve/tools").DynamicToolResult, import("eve/tools").DynamicContext>;
 export default _default;

package/dist/src/self-modification/remote/subagents/agent/tools/publish.js

@@ -1 +1 @@
-import{createGitHubCredentialProvider}from"../../../../credentials.js";import{readPreparedSelfModificationWorkspace}from"../../../../git-workspace.js";import{isDeployedRuntime}from"../../../../mode.js";import{resolveDeployedSelfModificationConfig}from"../../../config.js";import{withSelfModificationWorkspaceLock}from"../../../../workspace-lock.js";import{publishGitHubDraftPullRequest}from"../../../../github-publisher.js";import extension_default from"../../../extension.js";import{defineDynamic,defineTool}from"eve/tools";const inputSchema={type:`object`,additionalProperties:!1,properties:{summary:{type:`string`,minLength:1,maxLength:1e4,description:`Concise description of the proposed agent source change.`},title:{type:`string`,minLength:1,maxLength:256,description:`Concise draft pull request title.`}},required:[`summary`,`title`]},outputSchema={type:`object`,additionalProperties:!1,properties:{branch:{type:`string`},changedPaths:{type:`array`,items:{type:`string`}},commitSha:{type:`string`},deployed:{type:`boolean`,const:!1},draft:{type:`boolean`,const:!0},merged:{type:`boolean`,const:!1},pullRequestUrl:{type:`string`},repository:{type:`string`},targetBranch:{type:`string`}},required:[`branch`,`changedPaths`,`commitSha`,`deployed`,`draft`,`merged`,`pullRequestUrl`,`repository`,`targetBranch`]};function resolveTool(){return isDeployedRuntime()?defineTool({description:`Publish the complete validated agent source change as one draft pull request. Merge and deployment do not occur.`,inputSchema,outputSchema,execute:publish}):null}async function publish(e,t){if(typeof e!=`object`||!e||!(`summary`in e)||typeof e.summary!=`string`||e.summary.trim().length===0||!(`title`in e)||typeof e.title!=`string`||e.title.trim().length===0)throw Error(`Production publication requires a valid title and summary.`);if(!isDeployedRuntime())throw Error(`Production publication is unavailable during eve dev.`);let n=resolveDeployedSelfModificationConfig(extension_default.config),r=e.summary,i=e.title,a=publicationOperationId(t),o=await t.getSandbox();return await withSelfModificationWorkspaceLock(`sandbox:${t.session.id}`,async()=>{let e=await readPreparedSelfModificationWorkspace({...n,sandbox:o});return await publishGitHubDraftPullRequest({credentialProvider:createGitHubCredentialProvider(n.credentials),description:r,operationId:a,sandbox:o,title:i,workspace:e})})}function publicationOperationId(e){let t=e.session.parent;if(t===void 0)throw Error(`Production publication requires a delegated child session.`);return`${t.rootSessionId}:${t.sessionId}:${t.turn.id}:${t.callId}:${e.session.id}`}var publish_default=defineDynamic({events:{"session.started":resolveTool}});export{publish_default as default,publicationOperationId};
+import{createGitHubCredentialProvider}from"../../../../credentials.js";import{readPreparedSelfModificationWorkspace}from"../../../../git-workspace.js";import{isDeployedRuntime}from"../../../../mode.js";import{resolveDeployedSelfModificationConfig}from"../../../config.js";import{withSelfModificationWorkspaceLock}from"../../../../workspace-lock.js";import{publishGitHubDraftPullRequest}from"../../../../github-publisher.js";import extension_default from"../../../extension.js";import{defineDynamic,defineTool}from"eve/tools";const inputSchema={type:`object`,additionalProperties:!1,properties:{summary:{type:`string`,minLength:1,maxLength:1e4,description:`Concise description of the proposed agent source change.`},title:{type:`string`,minLength:1,maxLength:256,description:`Concise draft pull request title.`}},required:[`summary`,`title`]},outputSchema={type:`object`,additionalProperties:!1,properties:{branch:{type:`string`},changedPaths:{type:`array`,items:{type:`string`}},commitSha:{type:`string`},deployed:{type:`boolean`,const:!1},draft:{type:`boolean`,const:!0},merged:{type:`boolean`,const:!1},pullRequestUrl:{type:`string`},repository:{type:`string`},targetBranch:{type:`string`}},required:[`branch`,`changedPaths`,`commitSha`,`deployed`,`draft`,`merged`,`pullRequestUrl`,`repository`,`targetBranch`]};function resolveTool(){return isDeployedRuntime()?defineTool({description:`Publish the complete validated agent source change as one draft pull request. Merge and deployment do not occur.`,inputSchema,outputSchema,execute:publish}):null}async function publish(e,t){if(typeof e!=`object`||!e||!(`summary`in e)||typeof e.summary!=`string`||e.summary.trim().length===0||!(`title`in e)||typeof e.title!=`string`||e.title.trim().length===0)throw Error(`Production publication requires a valid title and summary.`);if(!isDeployedRuntime())throw Error(`Production publication is unavailable during eve dev.`);let n=resolveDeployedSelfModificationConfig(extension_default.config),r=e.summary,i=e.title,a=publicationOperationId(t),o=await t.getSandbox();return await withSelfModificationWorkspaceLock(`sandbox:${t.session.id}`,async()=>{let e=await readPreparedSelfModificationWorkspace({...n,sandbox:o});return await publishGitHubDraftPullRequest({credentialProvider:createGitHubCredentialProvider(n.credentials),description:r,operationId:a,sandbox:o,title:i,workspace:e})})}function publicationOperationId(e){let t=e.session.parent;if(t===void 0)throw Error(`Production publication requires a delegated child session.`);return`${t.rootSessionId}:${t.sessionId}:${t.turn.id}:${t.callId}:${e.session.id}`}var publish_default=defineDynamic(resolveTool);export{publish_default as default,publicationOperationId};

package/dist/src/self-modification/remote/subagents/agent/tools/registry_add.d.ts

@@ -26,7 +26,5 @@ type ProductionRegistryAddResult = {
 export declare function productionRegistryAddTool(deployed: ResolvedDeployedSelfModificationConfig): import("eve/tools").ToolDefinition<Record<string, unknown>, ProductionRegistryAddResult> & {
     execute(input: Record<string, unknown>, ctx: ToolContext): Promise<ProductionRegistryAddResult>;
 };
-declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools").ToolDefinition<Record<string, unknown>, ProductionRegistryAddResult> & {
-    execute(input: Record<string, unknown>, ctx: ToolContext): Promise<ProductionRegistryAddResult>;
-}) | null>;
+declare const _default: import("eve/tools").DynamicSentinel<import("eve/tools").DynamicToolResult, import("eve/tools").DynamicContext>;
 export default _default;