Release notes from eve
Articles about Release notes from eve
Release eve@0.78.0 · vercel/eve
Minor Changes 9559de8: Approved calls now always run as the requester. This closes a privilege escalation: when another person approved a call, it ran with the approver's identity and credentials, so a requester could get a tool to act with access they don't have. The call now keeps the identity and credentials of the person whose turn requested it, and approved workflow and agent calls are rechecked before dispatch.
Release eve@0.77.0 · vercel/eve
Minor Changes 0248e69: eve now downloads attachment links itself instead of handing them to the model provider. When a channel's fetchFile returns null, or the channel has none, eve fetches a public https: link with the 25 MB upload cap and a 30-second timeout, at most 10 links per message and one at a time, and any other link or failed download reaches the model as a note. A private or expired link, such as a Google Drive file shared in Slack, no longer fails every later model call, and sessions that already hold such a link recover.
Release eve@0.76.3 · vercel/eve
Patch Changes 592f773: Fix eve build failing with "Identifier has already been declared" when a tool callback's destructured parameter or local declaration shadows a variable from an enclosing scope. This also fixes building agents that mount eve/extensions/git.
Release eve@0.76.2 · vercel/eve
Patch Changes 91f4b68: Add modelOptions.promptCache for models eve calls directly. promptCache: { anthropic: { ttl: “1h” } } switches eve’s Anthropic cache breakpoints to a 1-hour lifetime. prompt
Release eve@0.76.0 · vercel/eve
Minor Changes 8c55ea7: Skills now load through eve__skill({ name }), which every agent with a skill has in place of load_skill, and a skill with deferred: true (in SKILL.md frontmatter or on defineSkill, static or dynamic) leaves the system prompt and is found with eve__search instead.
Release eve@0.75.1 · vercel/eve
Patch Changes 6189eea: Context compaction now calls its model the way a step does: it streams the summary, retries transient provider failures with the same policy, and counts the summary call's tokens and cost toward session usage limits. Automatic compaction reports that usage with the turn it ran in. Manual compaction runs between turns, so it counts toward session totals without being added to the next turn's usage.
Release @eve/buzz-acp-adapter@0.0.46 · vercel/eve
Patch Changes Updated dependencies [84793ed] Updated dependencies [a3c2f40] Updated dependencies [20c1317] Updated dependencies [04d47bc] Updated dependencies [bf82cfa] Updated dependencies [89704
Release eve@0.75.0 · vercel/eve
Minor Changes 32af96d: Rename custom sandbox provider handle hooks from onSessionStop() and onSessionDelete() to onSandboxStop() and onSandboxDelete() so handle lifecycle names describe the sandbox resource they operate on.
Eve tool-stubs preview with error recovery (724846842)
Installable development preview built from the merged tool-error stubs PR #4524, commit 724846842e6d25d3d7f0716a4dc54f89671ab44a. Includes the final authentication and declarative tool-stub APIs from #4370, plus thrown outcomes and recovery on subsequent calls.
Release eve@0.74.0 · vercel/eve
Minor Changes bc101b5: Add experimental defineDynamicSchedules with direct operation tools, optional preparePayload creation preparation, top-level per-operation approval, and creator-bound execution. Create approval receives prepared data and rejects changed results before writing; ctx.session.schedule exposes scheduled-turn provenance without auth attributes.
Release eve@0.73.0 · vercel/eve
Minor Changes 9de88f7: Split self-modification into separate eve/self-modification/local and eve/self-modification/remote mounts, so eve dev no longer loads deployed sandbox dependencies. eve/self-modification remains an alias for the local mount and now rejects the deployed option; move that configuration to its own mount, for example agent/extensions/self-modification-remote/extension.ts, with the former deployed fields at the top level.
Release eve@0.72.1 · vercel/eve
Patch Changes c230e94: MCP connections now ask the user to sign in only when the server asks for it. When a connection has auth but no token yet, eve connects without an Authorization header, so servers that allow anonymous initialize and tools/list have their tools listed by connection_search and run by connection_execute with no prompt. Sign-in starts when a call returns HTTP 401 or an error result with a _meta["mcp/www_authenticate"] challenge, and the call runs again with the token once the user signs in.
Release eve@0.72.0 · vercel/eve
Minor Changes 198d6f5: Breaking: follows the AI SDK rename from evaluation to decisions and updates to ai@7.0.128. evaluate from eve/ai is now decide, and auto and t.judge(...) accept Experimental_DecisionModel instances such as provider.decisionModel(...). Replace evaluate imports with decide and evaluationModel(...) calls with decisionModel(...). Extensions built against the previous tool or dynamicTool capability must be rebuilt against this release.
Eve tool-stubs preview (a94c7c789)
Installable preview of declarative tool stubs, PR #4370, built from signed commit a94c7c78937b20edf21776e1e5d1ce1ee590ddf7 (all 142 CI checks passed). pnpm add eve@https://github.com/vercel/eve/rel
Release eve@0.71.3 · vercel/eve
Patch Changes a8262be: When someone other than the person who asked approves a tool call, only that call now runs as the approver. Before, the approver became the caller for the rest of the turn, so later tool calls and approvals in that turn also ran with the approver's identity and credentials.
Eve tool stubs preview (PR #4370, sandbox compatible)
Installable preview of declarative tool stubs, PR #4370, built from commit 4127e5654f7ccfa9104da47dc3ff53c66aac3731. pnpm add eve@https://github.com/vercel/eve/releases/download/eve-preview-pr-4370
Superseded: initial tool stubs preview
Superseded by the sandbox-compatible preview. Use that preview: this initial version selects an unpublished sandbox image. Initial preview of declarative tool stubs, PR #4370, built from commit 412
Release eve@0.71.2 · vercel/eve
Patch Changes 76e9079: Return a not-found or transient error before opening an unavailable session stream, and close streams after terminal failures. 52ebf7d: Discord now posts session budget prom
Release eve@0.71.1 · vercel/eve
Patch Changes 28f4063: Telegram, Discord, Teams, and chatSdkChannel now remove a question's or approval's buttons once it's answered and show the outcome, such as Approved or Answered: Saturday. This covers pressed buttons, typed replies, and requests withdrawn when a turn is cancelled. Adapters that can't edit messages keep the original prompt.
Release eve@0.71.0 · vercel/eve
Minor Changes 8582a36: The bash tool no longer blocks on slow commands: a command still running after 30 seconds keeps running in the sandbox and returns status: "running" with its process group pid, its output so far, and an outputDirectory whose stdout, stderr, and exit files the model reads with later commands. Cancelling a turn now stops a command that has not yet returned. BashToolOutput now carries status, and exitCode is present only on completed results, so authored wrappers that read the output should check status first.
Release eve@0.70.3 · vercel/eve
Patch Changes 8136e50: Retry session stream opens and reconnects when Safari, iOS browsers, or Firefox reject fetch() with TypeError: Load failed or TypeError: NetworkError when attempting to fetch resource., matching the existing Chrome and Node behavior.
Release eve@0.70.2 · vercel/eve
Patch Changes 43f585c: A model step that ends early, for example at the output token limit, no longer leaves its tool calls unanswered. The AI SDK does not run tools from such a step, so the next model call failed with "Tool results are missing". eve now answers each skipped call with an error, and the model can call the tool again.
Release eve@0.70.1 · vercel/eve
Patch Changes dc50f62: Hosted builds bundle faster: eve no longer re-parses its largest output chunk while adding the Node ESM compatibility banner, and Nitro no longer gzips every output file just to annotate the build log. The repeated MISSING_CODE_SPLITTING_GROUP_DEBUG_NAME warning also no longer appears in build logs.
Release eve@0.70.0 · vercel/eve
Minor Changes ddc8e12: A connection sign-in or tool approval now holds the turn open, like a question or task: the stream emits turn.waiting instead of turn.completed and session.waiting, and the same turn resumes once the person acts. Every turn.waiting now carries on: "input" when a person must act, "tasks" when the turn waits on its own work.
Release eve@0.69.0 · vercel/eve
Minor Changes efa0869: ctx.agent(name) in a workflow tool now returns a session with that agent: send(message, { outputSchema, signal }) returns a response whose result() resolves the turn's { data, message, status }, and the parent stream announces each session with agent.started, carrying the opening call's callId and turnId, which session.agent(started).stream() follows.
Release eve@0.68.0 · vercel/eve
Minor Changes 52a18ac: Computer use moves out of eve/extensions/code into its own built-in extension, eve/computer-use. Mounting the code extension no longer adds computer_use, so agents without a desktop stop sending its schema on every request. Agents that use computer use should mount eve/computer-use next to the code extension; mounted as agent/extensions/computer-use.ts, the tool is named computer-use__computer_use.
Release eve@0.67.2 · vercel/eve
Patch Changes 03d1f42: Internal cleanup: helpers that only tests used are moved out of the published runtime or removed, and internal modules no longer export symbols used only in their own file. There is no user-visible change.
Release eve@0.67.1 · vercel/eve
Patch Changes aaea9b6: Send the Agent Runs conversation ID as the AI Gateway session ID for model and compaction calls, so Gateway generations from one conversation can be grouped together. Preserve an explicitly configured Gateway session ID.
Release eve@0.67.0 · vercel/eve
Minor Changes 04b6464: Simplify the CLI around explicit local and remote agent workflows. Use eve remote to connect to, invoke, or inspect an existing agent; eve dev now starts only local development.
Release eve@0.66.3 · vercel/eve
Patch Changes 15ad358: Allow empty-response recovery to request fresh reads when earlier tool results are stale, while continuing to warn against repeating completed writes and other side effects.
Release eve@0.66.2 · vercel/eve
Patch Changes 306f2ce: Configure 100% Vercel trace sampling across all environments when eve deploy creates a new project, with --no-trace-sampling to opt out. fdf1364: Ignore JavaScript and TypeScript *.test.*/*.spec.* modules and __tests__/ directories during agent discovery. 8565550: Fix auto() model selection when a turn resumes after a question or tool approval.
Release eve@0.66.1 · vercel/eve
Patch Changes 055f1d1: eve build and withEve during next build now build mounted, source-backed workspace extensions before compiling the agent, as eve dev already does. Production builds no longer fail when a package manager skips the extension's prepare script, such as on a no-op install with a restored node_modules cache. An extension whose distribution is already current is not rebuilt, and a failed extension build names the package and the command to run.
Release eve@0.66.0 · vercel/eve
Minor Changes da906b6: Breaking: ctx.getSkill() and the SkillHandle and SkillFile types from eve/skills are removed. The model still reads skill supporting files with its sandbox tools; if your own tool or hook code needs that data, import it from a module in lib/ instead. Existing extension builds keep loading unless they call ctx.getSkill().
Release eve@0.65.0 · vercel/eve
Minor Changes 60998d6: Remove the todo tool, its eve/tools/todo export, and the dev TUI todo panel; delete any agent/tools/todo.ts, including one that exports disableTool(), which now fails the build because there is no default todo tool to disable. Compaction no longer resets write_file read tracking, so a file read before compaction can be overwritten without re-reading it; stale-read detection still rejects the write if the file changed since that read.
Release eve@0.64.1 · vercel/eve
Patch Changes b49a598: Restore the active eve context while session-scoped dynamic tools are recovered, so resolvers that read durable state keep their callbacks after a resumed session. 867a6ad:
Release @eve/buzz-acp-adapter@0.0.35 · vercel/eve
Patch Changes Updated dependencies [3be0b74] Updated dependencies [fa92e5e] Updated dependencies [3be0b74] Updated dependencies [3e5ff9f] Updated dependencies [aceb298] Updated dependencies [f2b87
Release eve@0.64.0 · vercel/eve
Minor Changes 3be0b74: Add taskDeliveryPolicy: "auto" | "cohort" to message sends. New channel sessions default to "auto", allowing independently useful reports or silence until related work settles; schedules default to "cohort", and explicit sends can select or update the session's policy.
Release eve@0.63.0 · vercel/eve
Minor Changes d2c92df: Require durable background tools to use defineWorkflowTool. Remove background execution from defineTool and dynamic tools, including the TaskExec and postMessage authoring APIs, and deliver each background cohort's completed, failed, and cancelled outcomes in one automatic report.
Release eve@0.62.0 · vercel/eve
Minor Changes 9d394fa: Package self-modification as an extension-owned subagent and retire the legacy scaffolded self-modification capability. Registry installation uses local-only setup, while deployed-aware setup remains available separately.
Release eve@0.61.1 · vercel/eve
Patch Changes 8a21c0c: agentRouter() now advertises model-supplied output schemas as permissive objects, avoiding unsupported JSON Schema propertyNames warnings on OpenAI models while preserving downstream object validation.
Release eve@0.61.0 · vercel/eve
Minor Changes cbfc425: Root workflow tools now receive the built-in root-copy target at ctx.agents.agent, with its authored description or an empty string, and agent is reserved from use as a declared subagent name. Tool definitions can set availableInSubagents: false; agentRouter() sets it automatically, routes only to entries with non-empty descriptions, and can replace the model-facing tool at agent/tools/agent.ts without being inherited by the root copy.
Release eve@0.60.1 · vercel/eve
Patch Changes 76d4dd8: Workflow tools can read effective declared-subagent descriptions from ctx.agents, including subagents hidden from the parent model. Export agentRouter() from eve/tools/agent-router to route each task across that complete map with JEV and invoke the selected agent.
Release eve@0.60.0 · vercel/eve
Minor Changes da82a95: Make managed destination exportPolicy accept one policy or an ordered policy array, with explicit span emit and redaction decisions. Attribute policies now return emit or replace decisions; and the deprecated redactSpanInputs(), redactSpanOutputs(), destination recordInputs, destination recordOutputs, content, and composeSpanExportPolicies() APIs are removed.
Release eve@0.59.1 · vercel/eve
Patch Changes 7ef42fd: Add auto({ model?, instructions?, criteria? }) for evaluation-model tool approvals, defaulting to TypeSafe Jev and failing closed to user approval. Approval policies now receive the active turn's cancellation signal. 1e872e3: Set tool: false on an agent or export a same-named disableTool() to hide its derived agent tool. Hidden subagents remain callable from authored workflow tools through ctx.agent().
Release eve@0.59.0 · vercel/eve
Minor Changes 6ddfa9b: Eval session ownership is now explicit: t.session() creates an empty session, and every t.send() creates a fresh session and returns a turn with .session for follow-ups. Replace t.newSession() with await t.session(), move conversation state and operations from t to the session handle, and read replies from turn.message.
Release eve@0.58.1 · vercel/eve
Patch Changes 40f0c45: Fix autoModel to use typesafe-ai/jev and the /login Gateway connection during eve dev, while preserving custom AI SDK default providers. Show dynamic model in the TUI footer instead of a missing-connection warning for dynamic selectors.
Release eve@0.58.0 · vercel/eve
Minor Changes 9f301b6: Named workspace agent routes now use /eve//v1/* across eve/next, eve/vercel, and agent-only workspace builds. Update existing named-agent URLs to the new route; root single-agent routes remain at /eve/v1/*, and eve/vercel can now compose them.
Release eve@0.57.0 · vercel/eve
Minor Changes 61d4097: Run every conversational turn directly inside the session's owning workflow instead of dispatching a child turn run per message. An idle session hands its settled state to the exact deployment that accepted a new delivery, whether the delivery arrives through the session ID or any channel continuation address, keeping the original session ID and event stream and renewing the session's configured timeout. Deliveries that land while a handoff is in progress wait for the successor instead of starting a replacement session.
Release @eve/buzz-acp-adapter@0.0.27 · vercel/eve
Patch Changes Updated dependencies [8bc931f] Updated dependencies [57d6be5] Updated dependencies [a63fb18] Updated dependencies [51998ab] Updated dependencies [56cde32] Updated dependencies [7ea3b
Release eve@0.56.0 · vercel/eve
Minor Changes 8bc931f: Add the workflow factory from eve/tools/workflow for running model-supplied JavaScript through durable ctx.agent calls. Remove the experimental uppercase Workflow tool and experimental_workflow; migrate its tool file to the new lowercase factory.
Release eve@0.55.0 · vercel/eve
Minor Changes 0e0f3cc: - Adds audience(input) to defineChannel and a durable conversation context for trace policies. eveChannel now defaults anonymous callers to public and authenticated callers to private. Trace content is public-or-development by default.
Release eve@0.54.5 · vercel/eve
Patch Changes c112e13: Self-modifying agents now relay the exact eve add command required to finish an interactive registry installation instead of substituting a registry configuration command. 4
Release eve@0.54.4 · vercel/eve
Patch Changes da8f4fd: Use an installed Codex CLI's app-server for ChatGPT subscription credentials, while retaining eve's direct sign-in and owned credential store as a fallback only when the codex binary is not found. Codex login output remains inside the model setup panel instead of writing directly over the TUI.