Skip to content

fix(eve): detect credentialed deployment protection#656

Merged
ruiconti merged 1 commit into
mainfrom
rui/fix-credentialed-dev-protection-auth
Jul 9, 2026
Merged

fix(eve): detect credentialed deployment protection#656
ruiconti merged 1 commit into
mainfrom
rui/fix-credentialed-dev-protection-auth

Conversation

@ruiconti

@ruiconti ruiconti commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

What

  • Treat HTTP 401 responses carrying x-vercel-error: UNAUTHORIZED as Vercel Deployment Protection challenges.
  • Route that monitor result into the existing auth-required state so remote eve dev starts /vc:login.

The live credentialed probe resolved the deployment and then returned:

HTTP 401
x-vercel-error: UNAUTHORIZED

You must sign in
UNAUTHORIZED
<request-id>

#654 covers the anonymous 302 SSO redirect and structured protected-deployment response. Once the monitor resolves the project and attaches an OIDC token, Vercel uses this different response instead. The monitor classified it as Remote unavailable, so startup never entered the authentication flow.

This keys on the stable Vercel response header instead of the body, which includes a changing request id. The authentication flow itself is unchanged.

Signed-off-by: Rui Conti <ruiconti@gmail.com>
@vercel

vercel Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
eve-docs Ready Ready Preview, Comment Jul 9, 2026 5:30pm
eve-docs-1644 Ready Ready Preview, Comment, Open in v0 Jul 9, 2026 5:30pm
eve-docs-4759 Ready Ready Preview, Comment, Open in v0 Jul 9, 2026 5:30pm

Request Review

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Bundle + Package Summary: apps/fixtures/weather-agent

Key takeaways

  • No notable deltas vs main (79df338).

Delta vs main (79df338)

Area Metric Baseline Current Delta
Package Packed tarball 3.59 MB 3.59 MB +31 B ⚠️
Package Unpacked publish size 13.02 MB 13.02 MB +210 B ⚠️
Package Installed footprint 52.09 MB 52.09 MB +210 B ⚠️
Package Published files 2502 2502 0
Package Installed files 5730 5730 0
Runtime Unique function payloads 2 2 0
Runtime Total function bytes 8.96 MB 8.96 MB -176 B ✅
Runtime Public routes 9 9 0
Changed function payloads vs main (79df338) (2)
Function Status Baseline Current Delta Route changes
functions/__server.func changed 3.32 MB 3.32 MB -144 B ✅ none
functions/.well-known/workflow/v1/flow.func changed 5.65 MB 5.65 MB -32 B ✅ none

eve init install

Metric Baseline Current Delta
Installed footprint 90.35 MB 90.35 MB +210 B ⚠️
Installed packages 122 122 0
dependencies 4 4 0
devDependencies 2 2 0
Dependency package bytes 27.18 MB 27.18 MB +210 B ⚠️
devDependency package bytes 5.04 MB 5.04 MB 0 B ➖
Build Metadata
  • Preset: vercel
  • Nitro: nitro@3.0.260610-beta
  • Output directory: apps/fixtures/weather-agent/.vercel/output
  • Build metadata timestamp: 2026-07-09T17:30:52.376Z
  • Route aliases: 9 public, 1 internal (10 total aliases)
  • Vercel routes in config: 10
  • Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small
Package Drill-Down

Package Details

  • Package: eve@0.22.2
  • Package directory: packages/eve
  • Tarball: 3.59 MB (eve-0.22.2.tgz)
  • Unpacked payload: 13.02 MB across 2502 published files
  • Installed footprint: 52.09 MB across 5730 installed files
  • Installed root package: 11.74 MB
  • Installed dependencies: 40.34 MB
  • Runtime dependencies: 1
  • Peer dependencies: 5 (4 optional)

Installed footprint is measured from an isolated temporary npm install of the packed tarball.

Heavy installed dependencies

  • @rolldown/binding-linux-x64-gnu: 19.13 MB (36.7%)
  • eve: 11.74 MB (22.5%)
  • ai: 6.34 MB (12.2%)
  • zod: 5.04 MB (9.7%)
  • nitro: 2.41 MB (4.6%)
Publish payload breakdown
Published file size
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [####....................] 1.51 MB 11.6%
🟡 dist/src/compiled/@vercel/sandbox/index.js       [##......................] 632.2 kB 4.9%
🟡 dist/src/compiled/_chunks/workflow/undici-fb5... [#.......................] 502.4 kB 3.9%
🟡 dist/src/compiled/@chat-adapter/slack/index.js   [#.......................] 433.8 kB 3.3%
🟡 dist/src/compiled/_chunks/workflow/dist-DJU_7... [#.......................] 276.2 kB 2.1%
🔴 Other published files                            [########################] 9.67 MB 74.3%
Installed footprint breakdown
Installed package size
🔴 @rolldown/binding-linux-x64-gnu [########################] 19.13 MB 36.7%
🔴 eve                             [###############.........] 11.74 MB 22.5%
🔴 ai                              [########................] 6.34 MB 12.2%
🔴 zod                             [######..................] 5.04 MB 9.7%
🟠 nitro                           [###.....................] 2.41 MB 4.6%
🟡 rolldown                        [#.......................] 785.9 kB 1.5%
🔴 Other installed packages        [########................] 6.64 MB 12.8%
Runtime dependencies (1)
Package Range Notes
nitro 3.0.260610-beta
Peer dependencies (5)
Package Range Notes
@opentelemetry/api ^1.0.0 optional peer
ai catalog:
braintrust ^3.0.0 optional peer
just-bash ^3.0.0 optional peer
microsandbox ^0.5.0 optional peer
eve init install drill-down

eve init install details

  • Command: eve init my-agent
  • Package manager: npm
  • Installed footprint: 90.35 MB across 7548 installed files
  • Installed packages: 122 total (116 transitive-only)
  • dependencies: 4 direct packages totaling 27.18 MB
  • devDependencies: 2 direct packages totaling 5.04 MB
  • Other transitive package files: 58.13 MB

Installed footprint is measured from an isolated temporary eve init my-agent using the current packed eve tarball.

Heavy installed dependencies

  • @typescript/typescript-linux-x64: 27.95 MB (30.9%)
  • @rolldown/binding-linux-x64-gnu: 19.13 MB (21.2%)
  • eve: 11.74 MB (13.0%)
  • zod: 9.00 MB (10.0%)
  • ai: 6.34 MB (7.0%)
Installed footprint breakdown
Installed package size
🔴 @typescript/typescript-linux-x64 [########################] 27.95 MB 30.9%
🔴 @rolldown/binding-linux-x64-gnu  [################........] 19.13 MB 21.2%
🔴 eve                              [##########..............] 11.74 MB 13.0%
🔴 zod                              [########................] 9.00 MB 10.0%
🔴 ai                               [#####...................] 6.34 MB 7.0%
🟠 @types/node                      [##......................] 2.54 MB 2.8%
🔴 Other installed packages         [############............] 13.65 MB 15.1%
dependencies (4)
Package Range Installed size Share
@vercel/connect 0.2.2 98.6 kB 0.1%
ai ^7.0.0 6.34 MB 7.0%
eve file:eve-0.22.2.tgz 11.74 MB 13.0%
zod 4.4.3 9.00 MB 10.0%
devDependencies (2)
Package Range Installed size Share
@types/node 24.x 2.54 MB 2.8%
typescript 7.0.2 2.50 MB 2.8%
Function Drill-Down

Payload Size Graph

Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func     [########################] 5.65 MB 63.0%
🟠 functions/__server.func                         [##############..........] 3.32 MB 37.0%

Top Function Payloads

🔴 functions/.well-known/workflow/v1/flow.func • 1 public route • 5.65 MB
Metric Value
Public routes /.well-known/workflow/v1/flow
Runtime nodejs24.x
Handler index.mjs
Payload 5.65 MB
Function files 5.65 MB across 31 files
Traced dependencies 0 B
Signal 🔴 Bundled file __eve_nitro_handler__.mjs is 2.83 MB (50.1%)

🔴 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🔴 __eve_nitro_handler__.mjs       [########################] 2.83 MB 50.1%
🟡 _chunks/sandbox.mjs             [#######.................] 766.3 kB 13.6%
🟡 _libs/@ai-sdk/gateway+[...].mjs [####....................] 413.6 kB 7.3%
🟡 _chunks/dist-DJU_7R9s.mjs       [###.....................] 335.6 kB 5.9%
🟡 _libs/ai.mjs                    [##......................] 270.1 kB 4.8%
🟠 Other bundled files             [#########...............] 1.03 MB 18.3%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x",
  "environment": {
    "NODE_OPTIONS": "--experimental-require-module"
  },
  "maxDuration": "max",
  "experimentalTriggers": [
    {
      "type": "queue/v2beta",
      "topic": "__eve776561746865722d6167656e74_wkf_workflow_*",
      "consumer": "default",
      "retryAfterSeconds": 5,
      "initialDelaySeconds": 0
    }
  ]
}

🟠 functions/__server.func • 8 public routes, 1 internal alias • 3.32 MB
Metric Value
Public routes /
/eve/v1/callback/[token]
/eve/v1/connections/[name]/callback/[token]
/eve/v1/health
/eve/v1/info
/eve/v1/session
/eve/v1/session/[sessionId]
/eve/v1/session/[sessionId]/stream
Internal aliases /__server
Runtime nodejs24.x
Handler index.mjs
Payload 3.32 MB
Function files 3.32 MB across 21 files
Traced dependencies 0 B
Signal 🟠 Bundled file _chunks/dev-runtime-artifacts.mjs is 941.0 kB (28.4%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 _chunks/dev-runtime-artifacts.mjs [########################] 941.0 kB 28.4%
🟠 index.mjs                         [####################....] 781.1 kB 23.6%
🟠 _chunks/sandbox.mjs               [####################....] 766.3 kB 23.1%
🟡 _chunks/dist-DJU_7R9s.mjs         [#########...............] 335.6 kB 10.1%
⚪ _chunks/resume-hook-DjPY9VGg.mjs  [###.....................] 119.2 kB 3.6%
🟡 Other bundled files               [##########..............] 373.3 kB 11.3%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x"
}

@ruiconti ruiconti enabled auto-merge (squash) July 9, 2026 17:33
@ruiconti ruiconti merged commit 8223498 into main Jul 9, 2026
51 checks passed
@ruiconti ruiconti deleted the rui/fix-credentialed-dev-protection-auth branch July 9, 2026 17:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants