chore(eve): workflow - update beta dependencies by VaguelySerious · Pull Request #2311 · vercel/eve

VaguelySerious · 2026-08-19T23:34:10Z

Summary

Moves eve's bundled Workflow SDK to @workflow/core@5.0.0-beta.43 and pins the worlds to exactly what that core depends on (world@beta.28, world-local@beta.37, world-vercel@beta.39, catalog world-postgres@beta.35), so the lockfile keeps one copy of each and the vendored bundle cannot mix versions. Follows the same maintenance as #2023.

The reason to take this release is vercel/workflow#3554: branch wake order, and therefore step correlation ids, could depend on how much of the event log an invocation had loaded, which corrupts runs under concurrent replays. vercel/workflow#3497 also drops ignored-duplicate-event logging from info/error to debug, so a straggler no longer prints on every replay.

Worth a reviewer's attention: core beta.43 adds optional batched suspension transitions (vercel/workflow#3025). It engages only when the World implements events.createBatch, so eve's development World stays on the single-event path, but agents deployed to Vercel use world-vercel, which does implement it. That path is newly active for them, and WORKFLOW_BATCH_TRANSITIONS=0 is the escape hatch if it misbehaves.

Validation

Typecheck (39 tasks), build, 6897 unit tests and 659 integration tests all pass. pnpm test:scenario is 407 passed / 15 skipped / 2 failed; both failures are an npm install peer resolution for ai inside the scenario harness, and both reproduce identically on unmodified origin/main built at beta.42 in a separate worktree, so they are pre-existing and local. Confirmed the vendor stamp records the new versions, meaning .generated/compiled was rebuilt rather than reused, and the vendored @workflow/core carries the beta.43 batching code that consumers of the published package will get.

Checklist

I linked an issue with prior discussion confirming this change is wanted
I ran the relevant checks from CONTRIBUTING.md
I added tests and documentation where relevant
I added a changeset if this touches the published eve package
DCO sign-off passes for every commit (git commit --signoff)

No tracking issue exists for routine SDK bumps; #2023 is the prior one. No new tests: the existing development-world-spec-version.drift.test.ts already guards the one hardcoded value that a world bump can invalidate.

Diff size

Docs — 1 file · +5 / -0

The changeset for the published eve package.

Implementation — 3 files · +83 / -68

Four version pins, one catalog pin, and the lockfile they imply. The lockfile is the bulk of it and is generated; the churn is larger than four pins suggest because moving core also moves the worlds it depends on, which rewrites their integrity hashes and peer entries.

Tests — 0 files · +0 / -0

Not applicable. Existing drift coverage is described above.

Move @workflow/core to 5.0.0-beta.43 and the worlds with it: @workflow/world to 5.0.0-beta.28, @workflow/world-local to 5.0.0-beta.37, @workflow/world-vercel to 5.0.0-beta.39, matching exactly what core@5.0.0-beta.43 depends on so the lockfile carries one copy of each and the vendored bundle cannot mix versions. The catalog pin for @workflow/world-postgres moves to 5.0.0-beta.35 for the same reason. errors (beta.17), serde (beta.2) and utils (beta.8) are already at the versions core requires. The reason to take this release is vercel/workflow#3554: branch wake order, and therefore step correlation ids, could depend on how much of the event log an invocation had loaded, corrupting runs under concurrent replays. Also vercel/workflow#3497, which drops ignored-duplicate-event logging from info/error to debug so a straggler stops printing on every replay. core beta.43 adds optional batched suspension transitions (vercel/workflow#3025). eve's development World does not implement events.createBatch, so it stays on the single-event path; agents deployed to Vercel use world-vercel, which does implement it, and the operator escape hatch there is WORKFLOW_BATCH_TRANSITIONS=0. Verified: typecheck green (39 tasks), 6897 unit tests pass, 659 integration tests pass, build green. The vendor stamp records the new versions, so .generated/compiled was rebuilt rather than reused, and the vendored @workflow/core carries the beta.43 batching code. Signed-off-by: Peter Wielander <mittgfu@gmail.com>

vercel · 2026-08-19T23:34:16Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
eve-docs	Ready	Preview	Aug 19, 2026 11:34pm
eve-pkg	Ready	Preview	Aug 19, 2026 11:34pm

socket-security · 2026-08-19T23:35:30Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/@workflow/world@5.0.0-beta.28
	npm/@workflow/core@5.0.0-beta.43
	npm/@workflow/world-local@5.0.0-beta.37
	npm/@workflow/world-vercel@5.0.0-beta.39
	npm/@workflow/world-postgres@5.0.0-beta.35

View full report

github-actions · 2026-08-19T23:38:08Z

Bundle + Package Summary: `apps/fixtures/weather-agent`

Key takeaways

No notable deltas vs main (0a00357).

Delta vs `main (0a00357)`

Area	Metric	Baseline	Current	Delta
Package	Packed tarball	8.24 MB	8.26 MB	+12.9 kB ⚠️
Package	Unpacked publish size	30.96 MB	31.00 MB	+39.5 kB ⚠️
Package	Installed footprint	75.01 MB	75.05 MB	+39.5 kB ⚠️
Package	Published files	3350	3352	+2
Package	Installed files	7059	7061	+2
Package	Installed package instances	35	35	0
Package	Distinct installed package names	34	34	0
Package	Installed dependency edges	53	53	0
Package	Installed optional peer edges	47	47	0
Runtime	Unique function payloads	2	2	0
Runtime	Total function bytes	18.05 MB	18.09 MB	+39.6 kB ⚠️
Runtime	Public routes	16	16	0

Changed function payloads vs main (0a00357) (2)

Function	Status	Baseline	Current	Delta	Route changes
`functions/__server.func`	changed	9.02 MB	9.04 MB	+19.8 kB ⚠️	none
`functions/.well-known/workflow/v1/flow.func`	changed	9.02 MB	9.04 MB	+19.8 kB ⚠️	none

`eve init` install

Metric	Baseline	Current	Delta
Installed footprint	113.42 MB	113.46 MB	+39.5 kB ⚠️
Installed packages	121	121	0
dependencies	4	4	0
devDependencies	2	2	0
Dependency package bytes	45.48 MB	45.52 MB	+39.5 kB ⚠️
devDependency package bytes	5.04 MB	5.04 MB	0 B ➖

Build Metadata

Preset: vercel
Nitro: nitro@3.0.260610-beta
Output directory: apps/fixtures/weather-agent/.vercel/output
Build metadata timestamp: 2026-08-19T23:37:13.095Z
Route aliases: 16 public, 1 internal (17 total aliases)
Vercel routes in config: 19
Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small

Package Drill-Down

Package Details

Package: eve@0.39.3
Package directory: packages/eve
Tarball: 8.26 MB (eve-0.39.3.tgz)
Unpacked payload: 31.00 MB across 3352 published files
Installed footprint: 75.05 MB across 7061 installed files
Installed root package: 29.65 MB
Installed dependencies: 45.41 MB
Installed package instances: 35
Distinct installed package names: 34
Installed dependency edges: 53
Installed optional peer edges: 47
Runtime dependencies: 2
Peer dependencies: 5 (4 optional)

Installed footprint is measured from an isolated temporary npm install of the packed tarball.
Graph metrics read only package.json files in package directories directly beneath a node_modules boundary, including nested boundaries. Each directory is one package instance; distinct names come from those manifests. Dependency edges count each unique name in dependencies or optionalDependencies per instance; optional peer edges count peerDependencies marked optional.

Heavy installed dependencies

eve: 29.65 MB (39.5%)
@rolldown/binding-linux-x64-gnu: 19.91 MB (26.5%)
ai: 6.71 MB (8.9%)
zod: 5.07 MB (6.8%)
undici: 3.50 MB (4.7%)

Publish payload breakdown

Published file size
🔴 dist/src/compiled/shadcn-registry/index.js       [###############.........] 10.20 MB 32.9%
🟠 dist/src/compiled/@photon-ai/chat-adapter-ime... [####....................] 2.44 MB 7.9%
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [##......................] 1.51 MB 4.9%
🟡 dist/src/compiled/_chunks/workflow/undici-Dzn... [#.......................] 512.7 kB 1.7%
🟡 dist/src/compiled/_chunks/node/undici-CUIybhQ... [#.......................] 508.8 kB 1.6%
🔴 Other published files                            [########################] 15.83 MB 51.1%

Installed footprint breakdown

Installed package size
🔴 eve                             [########################] 29.65 MB 39.5%
🔴 @rolldown/binding-linux-x64-gnu [################........] 19.91 MB 26.5%
🔴 ai                              [#####...................] 6.71 MB 8.9%
🔴 zod                             [####....................] 5.07 MB 6.8%
🟠 undici                          [###.....................] 3.50 MB 4.7%
🟠 nitro                           [##......................] 2.41 MB 3.2%
🔴 Other installed packages        [######..................] 7.81 MB 10.4%

Runtime dependencies (2)

Package	Range	Notes
`nitro`	`3.0.260610-beta`
`undici`	`8.9.0`

Peer dependencies (5)

Package	Range	Notes
`@opentelemetry/api`	`^1.0.0`	optional peer
`ai`	`catalog:`
`braintrust`	`^3.0.0`	optional peer
`just-bash`	`^3.0.0`	optional peer
`microsandbox`	`^0.5.0`	optional peer

eve init install drill-down

`eve init` install details

Command: eve init my-agent
Package manager: npm
Installed footprint: 113.46 MB across 8937 installed files
Installed packages: 121 total (115 transitive-only)
dependencies: 4 direct packages totaling 45.52 MB
devDependencies: 2 direct packages totaling 5.04 MB
Other transitive package files: 62.90 MB

Installed footprint is measured from an isolated temporary eve init my-agent using the current packed eve tarball.

Heavy installed dependencies

eve: 29.65 MB (26.1%)
@typescript/typescript-linux-x64: 27.95 MB (24.6%)
@rolldown/binding-linux-x64-gnu: 19.91 MB (17.5%)
zod: 9.02 MB (8.0%)
ai: 6.71 MB (5.9%)

Installed footprint breakdown

Installed package size
🔴 eve                              [########################] 29.65 MB 26.1%
🔴 @typescript/typescript-linux-x64 [#######################.] 27.95 MB 24.6%
🔴 @rolldown/binding-linux-x64-gnu  [################........] 19.91 MB 17.5%
🔴 zod                              [#######.................] 9.02 MB 8.0%
🔴 ai                               [#####...................] 6.71 MB 5.9%
🟠 undici                           [###.....................] 3.50 MB 3.1%
🔴 Other installed packages         [##############..........] 16.72 MB 14.7%

dependencies (4)

Package	Range	Installed size	Share
`@vercel/connect`	`0.4.3`	141.0 kB	0.1%
`ai`	`^7.0.58`	6.71 MB	5.9%
`eve`	`file:eve-0.39.3.tgz`	29.65 MB	26.1%
`zod`	`4.4.3`	9.02 MB	8.0%

devDependencies (2)

Package	Range	Installed size	Share
`@types/node`	`24.x`	2.54 MB	2.2%
`typescript`	`7.0.2`	2.50 MB	2.2%

Function Drill-Down

Payload Size Graph

Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func     [########################] 9.04 MB 50.0%
🔴 functions/__server.func                         [########################] 9.04 MB 50.0%

Top Function Payloads

🟠 functions/.well-known/workflow/v1/flow.func • 1 public route • 9.04 MB

Metric	Value
Public routes	`/.well-known/workflow/v1/flow`
Runtime	`nodejs24.x`
Handler	`index.mjs`
Payload	9.04 MB
Function files	9.04 MB across 50 files
Traced dependencies	0 B
Signal	🟠 Bundled file `index.mjs` is 2.01 MB (22.2%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                     [#################.......] 2.01 MB 22.2%
🟠 _chunks/runtime-artifacts.mjs [###############.........] 1.80 MB 19.9%
🟡 _libs/undici.mjs              [########................] 980.5 kB 10.8%
🟡 _chunks/sandbox.mjs           [#######.................] 781.9 kB 8.6%
🟡 _chunks/frames-Dl2Hcma4.mjs   [######..................] 678.7 kB 7.5%
🟠 Other bundled files           [########################] 2.80 MB 31.0%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x",
  "maxDuration": "max",
  "experimentalTriggers": [
    {
      "type": "queue/v2beta",
      "topic": "__eve776561746865722d6167656e74_wkf_workflow_*",
      "consumer": "default",
      "retryAfterSeconds": 5,
      "initialDelaySeconds": 0
    }
  ],
  "environment": {
    "WORKFLOW_PRECONDITION_GUARD": "1"
  }
}

🟠 functions/__server.func • 15 public routes, 1 internal alias • 9.04 MB

Metric	Value
Public routes	`/` `/eve/v1/callback/[token]` `/eve/v1/connections/[name]/callback/[attemptId]/[token]` `/eve/v1/connections/[name]/callback/[token]` `/eve/v1/health` `/eve/v1/info` `/eve/v1/session` `/eve/v1/session/[parentSessionId]/subagents/[callId]/[childSessionId]/stream` `/eve/v1/session/[sessionId]` `/eve/v1/session/[sessionId]/cancel` `/eve/v1/session/[sessionId]/clear` `/eve/v1/session/[sessionId]/compact` `/eve/v1/session/[sessionId]/reset` `/eve/v1/session/[sessionId]/stream` `/eve/v1/task-input/[token]`
Internal aliases	`/__server`
Runtime	`nodejs24.x`
Handler	`index.mjs`
Payload	9.04 MB
Function files	9.04 MB across 50 files
Traced dependencies	0 B
Signal	🟠 Bundled file `index.mjs` is 2.01 MB (22.2%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                     [#################.......] 2.01 MB 22.2%
🟠 _chunks/runtime-artifacts.mjs [###############.........] 1.80 MB 19.9%
🟡 _libs/undici.mjs              [########................] 980.5 kB 10.8%
🟡 _chunks/sandbox.mjs           [#######.................] 781.9 kB 8.6%
🟡 _chunks/frames-Dl2Hcma4.mjs   [######..................] 678.7 kB 7.5%
🟠 Other bundled files           [########################] 2.80 MB 31.0%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x"
}

Build Timing: `e2e/fixtures/agent-tools-sandbox`

This is an informational timing measurement inside eve build, from preflight through publication. Output-size measurement and profile writing are excluded.

Build mode: deployable Vercel build with sandbox template prewarm included.

Build pipeline: 2.08 s -> 2.14 s (+61.6 ms) vs main (0a00357).
Timing is informational: shared GitHub runners are too variable for a hard timing budget.

Detailed phase timings vs `main (0a00357)`

Phase	Baseline	Current	Delta
`extension.check`	1.2 ms	1.1 ms	-0.1 ms
`project.resolve`	0.3 ms	0.4 ms	+0.1 ms
`workspace.create`	0.8 ms	0.8 ms	0.0 ms
`host.prepare`	231.9 ms	296.9 ms	+65.0 ms
`vercel.service-prefix.resolve`	2.5 ms	2.6 ms	+0.1 ms
`nitro.create`	257.5 ms	256.4 ms	-1.1 ms
`sandbox.prewarm`	168.0 ms	173.6 ms	+5.6 ms
`nitro.cache.prepare`	0.3 ms	0.3 ms	0.0 ms
`nitro.prepare`	0.7 ms	0.7 ms	0.0 ms
`nitro.public-assets`	0.8 ms	0.7 ms	-0.1 ms
`nitro.prerender`	0.5 ms	0.6 ms	+0.1 ms
`nitro.bundle`	1.38 s	1.37 s	-9.8 ms
`nitro.cache.write`	0.3 ms	0.4 ms	+0.1 ms
`vercel.workflow-function.materialize`	25.0 ms	26.6 ms	+1.6 ms
`agent-summary.emit`	0.5 ms	0.5 ms	0.0 ms
`nitro.close`	0.1 ms	0.1 ms	0.0 ms
`output.publish`	3.4 ms	3.4 ms	0.0 ms
`workspace.remove`	2.1 ms	2.2 ms	+0.1 ms

VaguelySerious · 2026-08-19T23:48:19Z

(AI) Note on the one red check.

e2e-local (agent-tools, zai-glm) failed the static-tools/throw-recover fixture at gates 3/5. It is not related to this change. The identical failure, same fixture and same gate, is on codex/e0-redundant-task-wake-e2e (run 32312085482), which does not touch the SDK:

✗  static-tools/throw-recover  gates 3/5
  ✗ messageIncludes(/\byes\b/iu) (0% < 100%): assistant messages did not include
    /\byes\b/iu; got: The `always-throws` tool failed as expected.

agent-tools, zai-glm failed on 6 of the 9 most recent e2e-local runs across four unrelated branches, rotating which fixture it kills (to-model-output-content-parts, dynamic-tools/conditional, throw-recover) and landing at 26 passed / 1 failed each time. The gate is a literal /\byes\b/ match on model prose, so it turns on zai-glm's phrasing.

The behavior under test passed: the tool threw, the agent recovered, and it reported the throw accurately. Only the wording missed the assertion's literal. agent-workflow-stress, the lane most likely to surface a replay or batching regression from this bump, passed on every model. Re-ran the failed jobs.

VaguelySerious requested review from AndrewBarba, cmpadden, ctgowrie, ijjk and ruiconti as code owners August 19, 2026 23:34

AndrewBarba approved these changes Aug 19, 2026

View reviewed changes

VaguelySerious merged commit 87c61a1 into main Aug 19, 2026
140 of 142 checks passed

VaguelySerious deleted the peter/workflow-beta43 branch August 19, 2026 23:58

Navigation Menu

Repository navigation

chore(eve): workflow - update beta dependencies - #2311

chore(eve): workflow - update beta dependencies#2311
VaguelySerious merged 1 commit into
mainfrom
peter/workflow-beta43

VaguelySerious commented Aug 19, 2026

Uh oh!

vercel Bot commented Aug 19, 2026

Uh oh!

socket-security Bot commented Aug 19, 2026

Uh oh!

github-actions Bot commented Aug 19, 2026

Package Details

`eve init` install details

Payload Size Graph

Top Function Payloads

Uh oh!

VaguelySerious commented Aug 19, 2026

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

VaguelySerious commented Aug 19, 2026

Summary

Validation

Checklist

Diff size

Uh oh!

vercel Bot commented Aug 19, 2026

Uh oh!

socket-security Bot commented Aug 19, 2026

Uh oh!

github-actions Bot commented Aug 19, 2026

Bundle + Package Summary: apps/fixtures/weather-agent

Delta vs main (0a00357)

eve init install

Package Details

eve init install details

Payload Size Graph

Top Function Payloads

Build Timing: e2e/fixtures/agent-tools-sandbox

Uh oh!

VaguelySerious commented Aug 19, 2026

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bundle + Package Summary: `apps/fixtures/weather-agent`

Delta vs `main (0a00357)`

`eve init` install

`eve init` install details

Build Timing: `e2e/fixtures/agent-tools-sandbox`