Version Packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

eve@0.22.3

Patch Changes

• 8223498: Start remote authentication when a credentialed Vercel deployment returns an UNAUTHORIZED protection response.

• 79df338: feat(eve): scaffold projects with bundler module resolution

  eve init now writes a tsconfig.json using "moduleResolution": "bundler" (and "module": "esnext"), which matches how eve compiles authored agents and extensions. Relative imports in your agent and extension source no longer need .js extensions (e.g. import extension from "../extension").

• 173fa5d: Restore the DISCORD_BOT_TOKEN environment fallback for proactive Discord messages, typing indicators, and bot-authenticated requests when discordChannel() is configured without explicit credentials.

• 89cd2d6: Eval assertion count options now accept predicates, allowing ranges such as “at least two” while preserving exact numeric counts.

• fdf56ef: feat(eve): mounted extensions

  Package eve capabilities — tools, connections, skills, instructions, hooks — as a reusable package and mount it under agent/extensions/, as a file (crm.ts) or a directory with co-located override slots that shadow the extension's own contributions. Contributions compose into the agent under a <namespace>__ prefix. Author with defineExtension from eve/extension, taking an optional Standard-Schema config read via extension.config; defineState is auto-scoped to the package. eve build compiles the package to runnable JavaScript with type declarations and fills its exports, so a published extension installs and mounts with no second compiler. eve is a peer dependency whose declared range eve enforces at mount; an extension cannot declare a sandbox, agent config, schedules, or limits, or mount other extensions.

• 89f13e0: Hardened frontmatter parsing and OpenAPI connection loading.

  All frontmatter parsing now runs through a single safe-by-default helper with gray-matter's code-capable engines disabled, so a ---js / ---javascript fence throws instead of being eval()d. Previously only authored markdown (skills, schedules, instructions) was hardened; the eval YAML loader and the OpenAPI spec loader used gray-matter's defaults and would execute such a fence. This closes that path for OpenAPI specs, which are fetched over the network. Parsing untrusted frontmatter as code is now opt-in only, and a direct import of the bundled gray-matter outside the wrapper fails CI.

  OpenAPI spec URLs and the resolved base URL are now required to use https (plain http is still allowed for loopback hosts during local development), so neither the spec fetch nor the credentialed operation calls run over cleartext; the spec transport is also re-checked after redirects.

• aff35e2: Stop eve dev source snapshots from copying nested Git repositories and worktrees, preventing duplicate checkouts from inflating each development snapshot.

• 9087496: Prevent brokered credential values from being exposed to commands running in Microsandbox. Guest Git configuration continues to use broker-managed placeholders for authenticated requests.

• 72c58ae: Recover eve dev <url> authentication when Vercel Deployment Protection returns an SSO redirect or a structured protected-deployment response.

• 87688f9: Slack outbound messages now preserve literal bare @ tokens, including scoped package names, while explicit <@USER_ID> mention syntax continues to pass through unchanged.

• c1c4ee5: Preserve query parameters passed to eve dev and send them on every agent request, including session POSTs and streams.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
eve-docs	Ready	Preview, Comment, Open in v0	Jul 9, 2026 5:43pm
eve-docs-1644	Ready	Preview, Comment, Open in v0	Jul 9, 2026 5:43pm
eve-docs-4759	Ready	Preview, Comment, Open in v0	Jul 9, 2026 5:43pm

[github-actions]

Bundle + Package Summary: apps/fixtures/weather-agent

Key takeaways

• No notable deltas vs main (89cd2d6).

Delta vs main (89cd2d6)

Area	Metric	Baseline	Current	Delta
Package	Packed tarball	3.59 MB	3.59 MB	+1.5 kB ⚠️
Package	Unpacked publish size	13.02 MB	13.02 MB	+3.6 kB ⚠️
Package	Installed footprint	52.09 MB	52.09 MB	+3.6 kB ⚠️
Package	Published files	2502	2502	0
Package	Installed files	5730	5730	0
Runtime	Unique function payloads	2	2	0
Runtime	Total function bytes	8.96 MB	8.96 MB	-176 B ✅
Runtime	Public routes	9	9	0

Changed function payloads vs main (89cd2d6) (2)

Function	Status	Baseline	Current	Delta	Route changes
functions/__server.func	changed	3.32 MB	3.32 MB	-144 B ✅	none
functions/.well-known/workflow/v1/flow.func	changed	5.65 MB	5.65 MB	-32 B ✅	none

eve init install

Metric	Baseline	Current	Delta
Installed footprint	90.35 MB	90.36 MB	+3.6 kB ⚠️
Installed packages	122	122	0
dependencies	4	4	0
devDependencies	2	2	0
Dependency package bytes	27.18 MB	27.18 MB	+3.6 kB ⚠️
devDependency package bytes	5.04 MB	5.04 MB	0 B ➖

eve init dependency changes vs main (89cd2d6)

dependencies

• Changed: eve@file:eve-0.22.2.tgz -> eve@file:eve-0.22.3.tgz

Build Metadata

• Preset: vercel
• Nitro: nitro@3.0.260610-beta
• Output directory: apps/fixtures/weather-agent/.vercel/output
• Build metadata timestamp: 2026-07-09T17:45:03.709Z
• Route aliases: 9 public, 1 internal (10 total aliases)
• Vercel routes in config: 10
• Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small

Package Drill-Down

Package Details

• Package: eve@0.22.3
• Package directory: packages/eve
• Tarball: 3.59 MB (eve-0.22.3.tgz)
• Unpacked payload: 13.02 MB across 2502 published files
• Installed footprint: 52.09 MB across 5730 installed files
• Installed root package: 11.75 MB
• Installed dependencies: 40.34 MB
• Runtime dependencies: 1
• Peer dependencies: 5 (4 optional)

Installed footprint is measured from an isolated temporary npm install of the packed tarball.

Heavy installed dependencies

• @rolldown/binding-linux-x64-gnu: 19.13 MB (36.7%)
• eve: 11.75 MB (22.6%)
• ai: 6.34 MB (12.2%)
• zod: 5.04 MB (9.7%)
• nitro: 2.41 MB (4.6%)

Publish payload breakdown

Published file size
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [####....................] 1.51 MB 11.6%
🟡 dist/src/compiled/@vercel/sandbox/index.js       [##......................] 632.2 kB 4.9%
🟡 dist/src/compiled/_chunks/workflow/undici-fb5... [#.......................] 502.4 kB 3.9%
🟡 dist/src/compiled/@chat-adapter/slack/index.js   [#.......................] 433.8 kB 3.3%
🟡 dist/src/compiled/_chunks/workflow/dist-DJU_7... [#.......................] 276.2 kB 2.1%
🔴 Other published files                            [########################] 9.67 MB 74.3%

Installed footprint breakdown

Installed package size
🔴 @rolldown/binding-linux-x64-gnu [########################] 19.13 MB 36.7%
🔴 eve                             [###############.........] 11.75 MB 22.6%
🔴 ai                              [########................] 6.34 MB 12.2%
🔴 zod                             [######..................] 5.04 MB 9.7%
🟠 nitro                           [###.....................] 2.41 MB 4.6%
🟡 rolldown                        [#.......................] 785.9 kB 1.5%
🔴 Other installed packages        [########................] 6.64 MB 12.8%

Runtime dependencies (1)

Package	Range	Notes
nitro	3.0.260610-beta

Peer dependencies (5)

Package	Range	Notes
@opentelemetry/api	^1.0.0	optional peer
ai	catalog:
braintrust	^3.0.0	optional peer
just-bash	^3.0.0	optional peer
microsandbox	^0.5.0	optional peer

eve init install drill-down

eve init install details

• Command: eve init my-agent
• Package manager: npm
• Installed footprint: 90.36 MB across 7548 installed files
• Installed packages: 122 total (116 transitive-only)
• dependencies: 4 direct packages totaling 27.18 MB
• devDependencies: 2 direct packages totaling 5.04 MB
• Other transitive package files: 58.13 MB

Installed footprint is measured from an isolated temporary eve init my-agent using the current packed eve tarball.

Heavy installed dependencies

• @typescript/typescript-linux-x64: 27.95 MB (30.9%)
• @rolldown/binding-linux-x64-gnu: 19.13 MB (21.2%)
• eve: 11.75 MB (13.0%)
• zod: 9.00 MB (10.0%)
• ai: 6.34 MB (7.0%)

Installed footprint breakdown

Installed package size
🔴 @typescript/typescript-linux-x64 [########################] 27.95 MB 30.9%
🔴 @rolldown/binding-linux-x64-gnu  [################........] 19.13 MB 21.2%
🔴 eve                              [##########..............] 11.75 MB 13.0%
🔴 zod                              [########................] 9.00 MB 10.0%
🔴 ai                               [#####...................] 6.34 MB 7.0%
🟠 @types/node                      [##......................] 2.54 MB 2.8%
🔴 Other installed packages         [############............] 13.65 MB 15.1%

dependencies (4)

Package	Range	Installed size	Share
@vercel/connect	0.2.2	98.6 kB	0.1%
ai	^7.0.0	6.34 MB	7.0%
eve	file:eve-0.22.3.tgz	11.75 MB	13.0%
zod	4.4.3	9.00 MB	10.0%

devDependencies (2)

Package	Range	Installed size	Share
@types/node	24.x	2.54 MB	2.8%
typescript	7.0.2	2.50 MB	2.8%

Function Drill-Down

Payload Size Graph

Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func     [########################] 5.65 MB 63.0%
🟠 functions/__server.func                         [##############..........] 3.32 MB 37.0%

Top Function Payloads

🔴 functions/.well-known/workflow/v1/flow.func • 1 public route • 5.65 MB

Metric	Value
Public routes	/.well-known/workflow/v1/flow
Runtime	nodejs24.x
Handler	index.mjs
Payload	5.65 MB
Function files	5.65 MB across 31 files
Traced dependencies	0 B
Signal	🔴 Bundled file __eve_nitro_handler__.mjs is 2.83 MB (50.1%)

🔴 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🔴 __eve_nitro_handler__.mjs       [########################] 2.83 MB 50.1%
🟡 _chunks/sandbox.mjs             [#######.................] 766.3 kB 13.6%
🟡 _libs/@ai-sdk/gateway+[...].mjs [####....................] 413.6 kB 7.3%
🟡 _chunks/dist-DJU_7R9s.mjs       [###.....................] 335.6 kB 5.9%
🟡 _libs/ai.mjs                    [##......................] 270.1 kB 4.8%
🟠 Other bundled files             [#########...............] 1.03 MB 18.3%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x",
  "environment": {
    "NODE_OPTIONS": "--experimental-require-module"
  },
  "maxDuration": "max",
  "experimentalTriggers": [
    {
      "type": "queue/v2beta",
      "topic": "__eve776561746865722d6167656e74_wkf_workflow_*",
      "consumer": "default",
      "retryAfterSeconds": 5,
      "initialDelaySeconds": 0
    }
  ]
}

---

🟠 functions/__server.func • 8 public routes, 1 internal alias • 3.32 MB

Metric	Value
Public routes	/ /eve/v1/callback/[token] /eve/v1/connections/[name]/callback/[token] /eve/v1/health /eve/v1/info /eve/v1/session /eve/v1/session/[sessionId] /eve/v1/session/[sessionId]/stream
Internal aliases	/__server
Runtime	nodejs24.x
Handler	index.mjs
Payload	3.32 MB
Function files	3.32 MB across 21 files
Traced dependencies	0 B
Signal	🟠 Bundled file _chunks/dev-runtime-artifacts.mjs is 941.0 kB (28.4%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 _chunks/dev-runtime-artifacts.mjs [########################] 941.0 kB 28.4%
🟠 index.mjs                         [####################....] 781.1 kB 23.6%
🟠 _chunks/sandbox.mjs               [####################....] 766.3 kB 23.1%
🟡 _chunks/dist-DJU_7R9s.mjs         [#########...............] 335.6 kB 10.1%
⚪ _chunks/resume-hook-DjPY9VGg.mjs  [###.....................] 119.2 kB 3.6%
🟡 Other bundled files               [##########..............] 373.3 kB 11.3%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x"
}