fix(eve): reuse pending authorization challenges by vercel-gh-bot-2[bot] · Pull Request #2422 · vercel/eve

vercel-gh-bot-2 · 2026-08-22T06:17:21Z

Resumed multi-connection turns could restart authorization that was still waiting for its callback. The restart replaced a valid device code and emitted a false authorization.completed failure for the original attempt.

Closes #2421

Hypothesis

If each step hydrates durable pending authorization state before connection tools run, then same-scope, same-principal challenges can be reused until they expire. This preserves the original callback and keeps the authorization event stream stable.

What changed

Hydrate pending authorization state through a step-local context provider.
Reuse unexpired challenges before calling startAuthorization.
Route connection_search through the shared scoped authorization path.
Suppress duplicate required events and false superseded completions for the same attempt.
Preserve principal isolation and distinguish legacy attempts by callback URL when no attempt ID exists.
Add focused regression coverage and a patch changeset.

Validation

pnpm --filter eve typecheck
236 focused authorization, harness, provider, scoped connection, and connection_search tests
pnpm guard:invariants
Targeted oxfmt, oxlint, and git diff --check
Independent correctness review approved after legacy attempt identity fixes

Environment notes

The aggregate unit run hit unrelated five-second module import timeouts. Each timed-out file passed in isolation: 9, 35, and 1 tests.
Workspace pnpm typecheck could not complete because the agent-tui-client fixture tried to fetch AI Gateway model metadata from the sandbox. The eve package typecheck passed.

Requested by: wasimxyz

Co-authored-by: wasimxyz <7220175+wasimxyz@users.noreply.github.com>

vercel · 2026-08-22T06:17:25Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
eve-docs	Ready	Preview, v0	Aug 22, 2026 6:19am
eve-docs-4759	Ready	Preview, v0	Aug 22, 2026 6:19am
eve-pkg	Ready	Preview, v0	Aug 22, 2026 6:19am

github-actions · 2026-08-22T06:21:21Z

Bundle + Package Summary: `apps/fixtures/weather-agent`

Key takeaways

No notable deltas vs main (923921c).

Delta vs `main (923921c)`

Area	Metric	Baseline	Current	Delta
Package	Packed tarball	8.19 MB	8.19 MB	+236 B ⚠️
Package	Unpacked publish size	30.82 MB	30.83 MB	+1.9 kB ⚠️
Package	Installed footprint	75.01 MB	75.02 MB	+1.9 kB ⚠️
Package	Published files	3410	3412	+2
Package	Installed files	7124	7126	+2
Package	Installed package instances	35	35	0
Package	Distinct installed package names	34	34	0
Package	Installed dependency edges	53	53	0
Package	Installed optional peer edges	47	47	0
Runtime	Unique function payloads	2	2	0
Runtime	Total function bytes	18.22 MB	18.22 MB	+1.5 kB ⚠️
Runtime	Public routes	16	16	0

Changed function payloads vs main (923921c) (2)

Function	Status	Baseline	Current	Delta	Route changes
`functions/__server.func`	changed	9.11 MB	9.11 MB	+773 B ⚠️	none
`functions/.well-known/workflow/v1/flow.func`	changed	9.11 MB	9.11 MB	+773 B ⚠️	none

`eve init` install

Metric	Baseline	Current	Delta
Installed footprint	113.43 MB	113.43 MB	+1.9 kB ⚠️
Installed packages	121	121	0
dependencies	4	4	0
devDependencies	2	2	0
Dependency package bytes	45.39 MB	45.39 MB	+1.9 kB ⚠️
devDependency package bytes	5.04 MB	5.04 MB	0 B ➖

Build Metadata

Preset: vercel
Nitro: nitro@3.0.260610-beta
Output directory: apps/fixtures/weather-agent/.vercel/output
Build metadata timestamp: 2026-08-22T06:20:24.564Z
Route aliases: 16 public, 1 internal (17 total aliases)
Vercel routes in config: 19
Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small

Package Drill-Down

Package Details

Package: eve@0.44.0
Package directory: packages/eve
Tarball: 8.19 MB (eve-0.44.0.tgz)
Unpacked payload: 30.83 MB across 3412 published files
Installed footprint: 75.02 MB across 7126 installed files
Installed root package: 29.47 MB
Installed dependencies: 45.55 MB
Installed package instances: 35
Distinct installed package names: 34
Installed dependency edges: 53
Installed optional peer edges: 47
Runtime dependencies: 2
Peer dependencies: 5 (4 optional)

Installed footprint is measured from an isolated temporary npm install of the packed tarball.
Graph metrics read only package.json files in package directories directly beneath a node_modules boundary, including nested boundaries. Each directory is one package instance; distinct names come from those manifests. Dependency edges count each unique name in dependencies or optionalDependencies per instance; optional peer edges count peerDependencies marked optional.

Heavy installed dependencies

eve: 29.47 MB (39.3%)
@rolldown/binding-linux-x64-gnu: 19.91 MB (26.5%)
ai: 6.75 MB (9.0%)
zod: 5.07 MB (6.8%)
undici: 3.50 MB (4.7%)

Publish payload breakdown

Published file size
🔴 dist/src/compiled/shadcn-registry/index.js       [###############.........] 9.76 MB 31.7%
🟠 dist/src/compiled/@photon-ai/chat-adapter-ime... [####....................] 2.44 MB 7.9%
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [##......................] 1.51 MB 4.9%
🟡 dist/src/compiled/_chunks/workflow/undici-Dzn... [#.......................] 512.7 kB 1.7%
🟡 dist/src/compiled/_chunks/node/undici-CUIybhQ... [#.......................] 508.8 kB 1.7%
🔴 Other published files                            [########################] 16.10 MB 52.2%

Installed footprint breakdown

Installed package size
🔴 eve                             [########################] 29.47 MB 39.3%
🔴 @rolldown/binding-linux-x64-gnu [################........] 19.91 MB 26.5%
🔴 ai                              [#####...................] 6.75 MB 9.0%
🔴 zod                             [####....................] 5.07 MB 6.8%
🟠 undici                          [###.....................] 3.50 MB 4.7%
🟠 nitro                           [##......................] 2.41 MB 3.2%
🔴 Other installed packages        [######..................] 7.90 MB 10.5%

Runtime dependencies (2)

Package	Range	Notes
`nitro`	`3.0.260610-beta`
`undici`	`8.9.0`

Peer dependencies (5)

Package	Range	Notes
`@opentelemetry/api`	`^1.0.0`	optional peer
`ai`	`catalog:`
`braintrust`	`^3.0.0`	optional peer
`just-bash`	`^3.0.0`	optional peer
`microsandbox`	`^0.5.0`	optional peer

eve init install drill-down

`eve init` install details

Command: eve init my-agent
Package manager: npm
Installed footprint: 113.43 MB across 9002 installed files
Installed packages: 121 total (115 transitive-only)
dependencies: 4 direct packages totaling 45.39 MB
devDependencies: 2 direct packages totaling 5.04 MB
Other transitive package files: 63.00 MB

Installed footprint is measured from an isolated temporary eve init my-agent using the current packed eve tarball.

Heavy installed dependencies

eve: 29.47 MB (26.0%)
@typescript/typescript-linux-x64: 27.95 MB (24.6%)
@rolldown/binding-linux-x64-gnu: 19.91 MB (17.6%)
zod: 9.02 MB (8.0%)
ai: 6.75 MB (6.0%)

Installed footprint breakdown

Installed package size
🔴 eve                              [########################] 29.47 MB 26.0%
🔴 @typescript/typescript-linux-x64 [#######################.] 27.95 MB 24.6%
🔴 @rolldown/binding-linux-x64-gnu  [################........] 19.91 MB 17.6%
🔴 zod                              [#######.................] 9.02 MB 8.0%
🔴 ai                               [#####...................] 6.75 MB 6.0%
🟠 undici                           [###.....................] 3.50 MB 3.1%
🔴 Other installed packages         [##############..........] 16.82 MB 14.8%

dependencies (4)

Package	Range	Installed size	Share
`@vercel/connect`	`0.4.3`	141.0 kB	0.1%
`ai`	`^7.0.58`	6.75 MB	6.0%
`eve`	`file:eve-0.44.0.tgz`	29.47 MB	26.0%
`zod`	`4.4.3`	9.02 MB	8.0%

devDependencies (2)

Package	Range	Installed size	Share
`@types/node`	`24.x`	2.54 MB	2.2%
`typescript`	`7.0.2`	2.50 MB	2.2%

Function Drill-Down

Payload Size Graph

Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func     [########################] 9.11 MB 50.0%
🔴 functions/__server.func                         [########################] 9.11 MB 50.0%

Top Function Payloads

🟠 functions/.well-known/workflow/v1/flow.func • 1 public route • 9.11 MB

Metric	Value
Public routes	`/.well-known/workflow/v1/flow`
Runtime	`nodejs24.x`
Handler	`index.mjs`
Payload	9.11 MB
Function files	9.11 MB across 50 files
Traced dependencies	0 B
Signal	🟠 Bundled file `index.mjs` is 2.07 MB (22.7%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                     [##################......] 2.07 MB 22.7%
🟠 _chunks/runtime-artifacts.mjs [###############.........] 1.80 MB 19.8%
🟡 _libs/undici.mjs              [########................] 980.5 kB 10.8%
🟡 _chunks/sandbox.mjs           [#######.................] 781.9 kB 8.6%
🟡 _chunks/frames-Dl2Hcma4.mjs   [######..................] 678.7 kB 7.5%
🟠 Other bundled files           [########################] 2.80 MB 30.7%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x",
  "maxDuration": "max",
  "experimentalTriggers": [
    {
      "type": "queue/v2beta",
      "topic": "__eve776561746865722d6167656e74_wkf_workflow_*",
      "consumer": "default",
      "retryAfterSeconds": 5,
      "initialDelaySeconds": 0
    }
  ],
  "environment": {
    "WORKFLOW_PRECONDITION_GUARD": "1"
  }
}

🟠 functions/__server.func • 15 public routes, 1 internal alias • 9.11 MB

Metric	Value
Public routes	`/` `/eve/v1/callback/[token]` `/eve/v1/connections/[name]/callback/[attemptId]/[token]` `/eve/v1/connections/[name]/callback/[token]` `/eve/v1/health` `/eve/v1/info` `/eve/v1/session` `/eve/v1/session/[parentSessionId]/subagents/[callId]/[childSessionId]/stream` `/eve/v1/session/[sessionId]` `/eve/v1/session/[sessionId]/cancel` `/eve/v1/session/[sessionId]/clear` `/eve/v1/session/[sessionId]/compact` `/eve/v1/session/[sessionId]/reset` `/eve/v1/session/[sessionId]/stream` `/eve/v1/task-input/[token]`
Internal aliases	`/__server`
Runtime	`nodejs24.x`
Handler	`index.mjs`
Payload	9.11 MB
Function files	9.11 MB across 50 files
Traced dependencies	0 B
Signal	🟠 Bundled file `index.mjs` is 2.07 MB (22.7%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                     [##################......] 2.07 MB 22.7%
🟠 _chunks/runtime-artifacts.mjs [###############.........] 1.80 MB 19.8%
🟡 _libs/undici.mjs              [########................] 980.5 kB 10.8%
🟡 _chunks/sandbox.mjs           [#######.................] 781.9 kB 8.6%
🟡 _chunks/frames-Dl2Hcma4.mjs   [######..................] 678.7 kB 7.5%
🟠 Other bundled files           [########################] 2.80 MB 30.7%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x"
}

Build Timing: `e2e/fixtures/agent-tools-sandbox`

This is an informational timing measurement inside eve build, from preflight through publication. Output-size measurement and profile writing are excluded.

Build mode: deployable Vercel build with sandbox template prewarm included.

Build pipeline: 2.14 s -> 2.24 s (+94.3 ms) vs main (923921c).
Timing is informational: shared GitHub runners are too variable for a hard timing budget.

Detailed phase timings vs `main (923921c)`

Phase	Baseline	Current	Delta
`extension.check`	10.9 ms	10.2 ms	-0.7 ms
`project.resolve`	0.4 ms	0.4 ms	0.0 ms
`workspace.create`	0.9 ms	0.7 ms	-0.2 ms
`host.prepare`	241.5 ms	253.6 ms	+12.1 ms
`vercel.service-prefix.resolve`	2.3 ms	2.8 ms	+0.5 ms
`nitro.create`	260.2 ms	263.7 ms	+3.5 ms
`sandbox.prewarm`	173.3 ms	216.8 ms	+43.5 ms
`nitro.cache.prepare`	0.3 ms	0.3 ms	0.0 ms
`nitro.prepare`	0.9 ms	0.9 ms	0.0 ms
`nitro.public-assets`	0.8 ms	0.7 ms	-0.1 ms
`nitro.prerender`	0.4 ms	0.5 ms	+0.1 ms
`nitro.bundle`	1.42 s	1.45 s	+35.0 ms
`nitro.cache.write`	0.3 ms	0.4 ms	+0.1 ms
`vercel.workflow-function.materialize`	25.9 ms	26.2 ms	+0.3 ms
`agent-summary.emit`	0.5 ms	0.5 ms	0.0 ms
`nitro.close`	0.2 ms	0.1 ms	-0.1 ms
`output.publish`	3.3 ms	3.5 ms	+0.2 ms
`workspace.remove`	2.2 ms	2.3 ms	+0.1 ms

fix(eve): reuse pending authorization challenges

6d4468e

Co-authored-by: wasimxyz <7220175+wasimxyz@users.noreply.github.com>

e0-gh-vercel-connect Bot mentioned this pull request Aug 22, 2026

Users see "authorization failed" when eve is only re-asking for the same sign-in #2421

Open

vercel Bot deployed to Preview – eve-pkg August 22, 2026 06:18 View deployment

vercel Bot deployed to Preview – eve-docs-4759 August 22, 2026 06:18 View deployment

vercel Bot deployed to Preview – eve-docs August 22, 2026 06:19 View deployment

De-ASI-INTERFACE approved these changes Aug 22, 2026

View reviewed changes

Navigation Menu

Uh oh!

fix(eve): reuse pending authorization challenges - #2422

fix(eve): reuse pending authorization challenges#2422
vercel-gh-bot-2[bot] wants to merge 1 commit into
mainfrom
e0/c814c7be-7b41-4f89-b250-a3a9d203f8c1

vercel-gh-bot-2 Bot commented Aug 22, 2026

Uh oh!

vercel Bot commented Aug 22, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 22, 2026

Package Details

`eve init` install details

Payload Size Graph

Top Function Payloads

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

vercel-gh-bot-2 Bot commented Aug 22, 2026

Hypothesis

What changed

Validation

Environment notes

Uh oh!

vercel Bot commented Aug 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 22, 2026

Bundle + Package Summary: apps/fixtures/weather-agent

Delta vs main (923921c)

eve init install

Package Details

eve init install details

Payload Size Graph

Top Function Payloads

Build Timing: e2e/fixtures/agent-tools-sandbox

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

vercel Bot commented Aug 22, 2026 •

edited

Loading

Bundle + Package Summary: `apps/fixtures/weather-agent`

Delta vs `main (923921c)`

`eve init` install

`eve init` install details

Build Timing: `e2e/fixtures/agent-tools-sandbox`