vercel/eve eve@0.88.0 on GitHub

git({ github }) now requires an authorize callback as its only repository access control, drops org, and adds principalType: "user" to run gh commands with the caller's own GitHub permissions. #5562
To migrate, remove github.org and move the restriction into authorize, for example authorize: ({ repository }) => repository.toLowerCase().startsWith("acme/"). Each command still declares one owner/name repository; app tokens are scoped to that repository in its owner's installation.
With principalType: "user", the gh tool resolves the caller's token through ctx.getToken, so eve signs the caller in once for every repository and again when GitHub rejects the token.
Slack channels can add each sender's display name, real name, and email to model-visible message metadata with the new messageContext.users option. #5536
users: true adds names, users: { email: true } adds emails too, and users: { name: false, email: true } adds emails only. The triggering author's profile is also written to message.author and the default Slack auth attributes. Pass resolve(user, next) to own caching around eve's users.info lookup.
Slack message metadata is now grouped into <sender>, <bot>, and <thread> blocks. sender_type and sender_id become type and id inside <sender>, bot_user_id and is_mentioned become id and mentioned inside <bot>, and the team, channel, and timestamp fields move into <thread>.