chore: Bump workflow by karthikscale3 · Pull Request #5279 · vercel/eve

karthikscale3 · 2026-10-22T22:00:38Z

Summary

eve still bundles Workflow 5.2.0, which predates fixes for redundant history reads, hook-resume reads, and deliveries racing a session handoff. Update core and the Vercel world to the latest stable 5.2.3 release, with matching world, local, error, and Postgres packages. Re-enable the handoff delivery test that was waiting for the published local-world fix.

This brings in concurrent-hook history reconciliation, metadata-only encryption-key lookup, and the forced-claim delivery fix. It also includes upstream replay-ordering fixes. No latency improvement is claimed from local correctness tests.

Package	Before	After
`@workflow/core`, `@workflow/world-vercel`	5.2.0	5.2.3
`@workflow/errors`, `@workflow/world`, `@workflow/world-postgres`	5.0.3	5.0.5
`@workflow/world-local`	5.1.0	5.1.2

@workflow/serde remains at its latest stable version, 5.0.0. The bundled runtime is rebuilt from these pins during the package build.

Related to #4719 and #4735.

Validation

On Node.js 24.22.1 and pnpm 12.7.0:

pnpm install
pnpm fmt
pnpm lint — passed with existing warnings
pnpm check:deps
pnpm guard:invariants
pnpm typecheck — all 59 workspace tasks passed, including compiled-vendor regeneration and fixture builds
pnpm --filter eve exec vitest run --config vitest.unit.config.ts src/execution/session-prewarm.test.ts src/execution/workflow-runtime.test.ts src/execution/session/handoff-steps.test.ts src/execution/session/handoff.test.ts — 108 tests passed
pnpm --filter eve exec vitest run --config vitest.integration.config.ts src/execution/session/entry-handoff.integration.test.ts src/execution/session/entry-prewarm.integration.test.ts -t 'deployment handoff|idle session prewarm handoff' — 10 selected tests passed, including the re-enabled race test; 5 tests outside the filter skipped
git diff --check

Full integration, scenario, and e2e coverage remains in CI.

Checklist

I added tests and documentation where relevant
I added a changeset if this touches the published eve package
DCO sign-off passes for every commit (git commit --signoff)

Signed-off-by: Karthik Kalyanaraman <karthik.kalyanaraman@vercel.com>

vercel · 2026-10-22T22:00:44Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
eve-docs	Ready	Preview, v0	Oct 22, 2026 11:36pm UTC
eve-pkg	Ready	Preview, v0	Oct 22, 2026 11:36pm UTC

socket-security · 2026-10-22T22:01:21Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality
npm/@workflow/errors@5.0.3 ⏵ 5.0.5	⁺¹	⁺¹
npm/@workflow/world-local@5.1.0 ⏵ 5.1.2	⁺¹	⁺²
npm/@workflow/core@5.2.0 ⏵ 5.2.3	⁺¹	⁺²
npm/@workflow/world-vercel@5.2.0 ⏵ 5.2.3	⁺¹	⁺⁴
npm/@workflow/world@5.0.3 ⏵ 5.0.5	⁺¹	⁺⁴
npm/@workflow/world-postgres@5.0.3 ⏵ 5.0.5		⁺¹

View full report

github-actions · 2026-10-22T22:11:36Z

Bundle + Package Summary: `apps/fixtures/weather-agent`

Key takeaways

No notable deltas vs main (b848a51).

Delta vs `main (b848a51)`

Area	Metric	Baseline	Current	Delta
Package	Packed tarball	7.75 MB	7.76 MB	+12.1 kB ⚠️
Package	Unpacked publish size	27.23 MB	27.26 MB	+34.3 kB ⚠️
Package	Installed footprint	75.53 MB	75.56 MB	+34.3 kB ⚠️
Package	Published files	4216	4219	+3
Package	Installed files	8210	8213	+3
Package	Installed package instances	34	34	0
Package	Distinct installed package names	32	32	0
Package	Installed dependency edges	51	51	0
Package	Installed optional peer edges	8	8	0
Runtime	Unique function payloads	2	2	0
Runtime	Total function bytes	20.88 MB	20.90 MB	+14.8 kB ⚠️
Runtime	Public routes	18	18	0

Changed function payloads vs main (b848a51) (2)

Function	Status	Baseline	Current	Delta	Route changes
`functions/__server.func`	changed	10.44 MB	10.45 MB	+7.4 kB ⚠️	none
`functions/.well-known/workflow/v1/flow.func`	changed	10.44 MB	10.45 MB	+7.4 kB ⚠️	none

`eve init` install

Metric	Baseline	Current	Delta
Installed footprint	113.91 MB	113.94 MB	+34.3 kB ⚠️
Installed packages	97	97	0
dependencies	4	4	0
devDependencies	2	2	0
Dependency package bytes	45.63 MB	45.66 MB	+34.3 kB ⚠️
devDependency package bytes	5.11 MB	5.11 MB	0 B ➖

Build Metadata

Preset: vercel
Nitro: nitro@3.0.260903-beta
Output directory: apps/fixtures/weather-agent/.vercel/output
Build metadata timestamp: 2026-10-22T23:37:02.949Z
Route aliases: 18 public, 1 internal (19 total aliases)
Vercel routes in config: 21
Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small

Package Drill-Down

Package Details

Package: eve@0.82.0
Package directory: packages/eve
Tarball: 7.76 MB (eve-0.82.0.tgz)
Unpacked payload: 27.26 MB across 4219 published files
Installed footprint: 75.56 MB across 8213 installed files
Installed root package: 27.26 MB
Installed dependencies: 48.30 MB
Installed package instances: 34
Distinct installed package names: 32
Installed dependency edges: 51
Installed optional peer edges: 8
Runtime dependencies: 2
Peer dependencies: 6 (5 optional)

Installed footprint is measured from an isolated temporary npm install of the packed tarball.
Graph metrics read only package.json files in package directories directly beneath a node_modules boundary, including nested boundaries. Each directory is one package instance; distinct names come from those manifests. Dependency edges count each unique name in dependencies or optionalDependencies per instance; optional peer edges count peerDependencies marked optional.

Heavy installed dependencies

eve: 27.26 MB (36.1%)
@rolldown/binding-linux-x64-gnu: 19.89 MB (26.3%)
ai: 8.36 MB (11.1%)
zod: 6.15 MB (8.1%)
undici: 3.58 MB (4.7%)

Publish payload breakdown

Published file size
🟠 dist/src/compiled/shadcn-registry/index.js       [#####...................] 3.85 MB 14.1%
🟠 dist/src/compiled/@photon-ai/chat-adapter-ime... [###.....................] 2.29 MB 8.4%
🟠 dist/src/compiled/run/index.js                   [#.......................] 1.00 MB 3.7%
🟡 dist/src/compiled/@vercel/blob/index.js          [#.......................] 604.9 kB 2.2%
🟡 dist/src/compiled/_chunks/workflow/undici-D-I... [#.......................] 521.9 kB 1.9%
🔴 Other published files                            [########################] 19.00 MB 69.7%

Installed footprint breakdown

Installed package size
🔴 eve                             [########################] 27.26 MB 36.1%
🔴 @rolldown/binding-linux-x64-gnu [##################......] 19.89 MB 26.3%
🔴 ai                              [#######.................] 8.36 MB 11.1%
🔴 zod                             [#####...................] 6.15 MB 8.1%
🟠 undici                          [###.....................] 3.58 MB 4.7%
🟠 nitro                           [##......................] 1.89 MB 2.5%
🔴 Other installed packages        [#######.................] 8.42 MB 11.1%

Runtime dependencies (2)

Package	Range	Notes
`nitro`	`3.0.260903-beta`
`undici`	`8.10.2`

Peer dependencies (6)

Package	Range	Notes
`@opentelemetry/api`	`^1.0.0`	optional peer
`ai`	`catalog:`
`braintrust`	`^3.0.0`	optional peer
`chat`	`^4.42.0`	optional peer
`dd-trace`	`^6.13.0`	optional peer
`just-bash`	`^3.1.0`	optional peer

eve init install drill-down

`eve init` install details

Command: eve init my-agent
Package manager: npm
Installed footprint: 113.94 MB across 10130 installed files
Installed packages: 97 total (91 transitive-only)
dependencies: 4 direct packages totaling 45.66 MB
devDependencies: 2 direct packages totaling 5.11 MB
Other transitive package files: 63.17 MB

Installed footprint is measured from an isolated temporary eve init my-agent using the current packed eve tarball.

Heavy installed dependencies

@typescript/typescript-linux-x64: 27.95 MB (24.5%)
eve: 27.26 MB (23.9%)
@rolldown/binding-linux-x64-gnu: 19.89 MB (17.5%)
zod: 9.76 MB (8.6%)
ai: 8.36 MB (7.3%)

Installed footprint breakdown

Installed package size
🔴 @typescript/typescript-linux-x64 [########################] 27.95 MB 24.5%
🔴 eve                              [#######################.] 27.26 MB 23.9%
🔴 @rolldown/binding-linux-x64-gnu  [#################.......] 19.89 MB 17.5%
🔴 zod                              [########................] 9.76 MB 8.6%
🔴 ai                               [#######.................] 8.36 MB 7.3%
🟠 undici                           [###.....................] 3.58 MB 3.1%
🔴 Other installed packages         [###############.........] 17.15 MB 15.0%

dependencies (4)

Package	Range	Installed size	Share
`@vercel/connect`	`2.5.2`	276.3 kB	0.2%
`ai`	`^7.0.137`	8.36 MB	7.3%
`eve`	`file:eve-0.82.0.tgz`	27.26 MB	23.9%
`zod`	`4.5.4`	9.76 MB	8.6%

devDependencies (2)

Package	Range	Installed size	Share
`@types/node`	`24.x`	2.61 MB	2.3%
`typescript`	`7.0.2`	2.50 MB	2.2%

Function Drill-Down

Payload Size Graph

Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func     [########################] 10.45 MB 50.0%
🔴 functions/__server.func                         [########################] 10.45 MB 50.0%

Top Function Payloads

🟠 functions/.well-known/workflow/v1/flow.func • 1 public route • 10.45 MB

Metric	Value
Public routes	`/.well-known/workflow/v1/flow`
Runtime	`nodejs24.x`
Handler	`index.mjs`
Payload	10.45 MB
Function files	10.45 MB across 122 files
Traced dependencies	0 B
Signal	🟠 Bundled file `_chunks/vercel.web.mjs` is 2.47 MB (23.6%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 _chunks/vercel.web.mjs                         [#############...........] 2.47 MB 23.6%
🟡 _libs/undici.mjs                               [#####...................] 994.5 kB 9.5%
🟡 _chunks/sandbox2.mjs                           [####....................] 815.0 kB 7.8%
🟡 _chunks/compiled-artifacts-instrumentation.mjs [####....................] 732.3 kB 7.0%
🟡 _chunks/token-util-Bla5Z0G9.mjs                [####....................] 704.5 kB 6.7%
🔴 Other bundled files                            [########################] 4.74 MB 45.3%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x",
  "maxDuration": "max",
  "experimentalTriggers": [
    {
      "type": "queue/v2beta",
      "topic": "__eve776561746865722d6167656e74_wkf_workflow_*",
      "consumer": "default",
      "retryAfterSeconds": 5,
      "initialDelaySeconds": 0
    }
  ],
  "environment": {
    "WORKFLOW_PRECONDITION_GUARD": "1"
  }
}

🟠 functions/__server.func • 17 public routes, 1 internal alias • 10.45 MB

Metric	Value
Public routes	`/` `/.well-known/workflow/v1/webhook/[token]` `/eve/v1/callback/[token]` `/eve/v1/connections/[name]/callback/[attemptId]/[token]` `/eve/v1/connections/[name]/callback/[token]` `/eve/v1/health` `/eve/v1/info` `/eve/v1/session` `/eve/v1/session/[parentSessionId]/subagents/[callId]/[childSessionId]/stream` `/eve/v1/session/[sessionId]` `/eve/v1/session/[sessionId]/cancel` `/eve/v1/session/[sessionId]/clear` `/eve/v1/session/[sessionId]/compact` `/eve/v1/session/[sessionId]/reset` `/eve/v1/session/[sessionId]/stream` `/eve/v1/session/[sessionId]/stubs` `/eve/v1/task-input/[token]`
Internal aliases	`/__server`
Runtime	`nodejs24.x`
Handler	`index.mjs`
Payload	10.45 MB
Function files	10.45 MB across 122 files
Traced dependencies	0 B
Signal	🟠 Bundled file `_chunks/vercel.web.mjs` is 2.47 MB (23.6%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 _chunks/vercel.web.mjs                         [#############...........] 2.47 MB 23.6%
🟡 _libs/undici.mjs                               [#####...................] 994.5 kB 9.5%
🟡 _chunks/sandbox2.mjs                           [####....................] 815.0 kB 7.8%
🟡 _chunks/compiled-artifacts-instrumentation.mjs [####....................] 732.3 kB 7.0%
🟡 _chunks/token-util-Bla5Z0G9.mjs                [####....................] 704.5 kB 6.7%
🔴 Other bundled files                            [########################] 4.73 MB 45.3%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x"
}

Build Timing: `e2e/fixtures/agent-tools-sandbox`

This is an informational timing measurement inside eve build, from preflight through publication. Output-size measurement and profile writing are excluded.

Build mode: deployable Vercel build with sandbox template prewarm included.

Build pipeline: 2.43 s -> 2.55 s (+116.6 ms) vs main (b848a51).
Timing is informational: shared GitHub runners are too variable for a hard timing budget.

Detailed phase timings vs `main (b848a51)`

Phase	Baseline	Current	Delta
`extension.check`	0.4 ms	13.0 ms	+12.6 ms
`project.resolve`	0.2 ms	0.3 ms	+0.1 ms
`workspace.create`	0.4 ms	0.4 ms	0.0 ms
`host.prepare`	383.9 ms	365.0 ms	-18.9 ms
`vercel.service-prefix.resolve`	1.0 ms	0.9 ms	-0.1 ms
`nitro.create`	410.6 ms	431.9 ms	+21.3 ms
`sandbox.prewarm`	317.3 ms	378.0 ms	+60.7 ms
`nitro.cache.prepare`	0.2 ms	0.2 ms	0.0 ms
`nitro.prepare`	0.4 ms	0.5 ms	+0.1 ms
`nitro.public-assets`	0.6 ms	0.6 ms	0.0 ms
`nitro.prerender`	0.4 ms	0.4 ms	0.0 ms
`nitro.bundle`	1.20 s	1.24 s	+39.1 ms
`nitro.cache.write`	0.2 ms	0.2 ms	0.0 ms
`vercel.workflow-function.materialize`	57.0 ms	67.0 ms	+10.0 ms
`agent-summary.emit`	0.5 ms	0.5 ms	0.0 ms
`connect-manifest.emit`	0.2 ms	0.2 ms	0.0 ms
`nitro.close`	0.1 ms	0.1 ms	0.0 ms
`output.publish`	3.7 ms	2.5 ms	-1.2 ms
`workspace.remove`	1.5 ms	1.9 ms	+0.4 ms

Update Workflow runtime for faster, safer session handoffs

6200387

Signed-off-by: Karthik Kalyanaraman <karthik.kalyanaraman@vercel.com>

karthikscale3 requested a review from a team as a code owner October 22, 2026 22:00

vercel Bot deployed to Preview – eve-pkg October 22, 2026 22:02

View deployment

karthikscale3 changed the title ~~Update Workflow for faster, safer session handoffs~~ chore: Workflow bump Oct 22, 2026

vercel Bot deployed to Preview – eve-docs October 22, 2026 22:03

View deployment

Merge branch 'main' into codex/update-workflow-dependencies

fce5c44

karthikscale3 changed the title ~~chore: Workflow bump~~ chore: Bump workflow Oct 22, 2026

vercel Bot deployed to Preview – eve-pkg October 22, 2026 22:05

View deployment

vercel Bot deployed to Preview – eve-docs October 22, 2026 22:06

View deployment

AndrewBarba approved these changes Oct 22, 2026

View reviewed changes

Merge branch 'main' into codex/update-workflow-dependencies

2c4de52

karthikscale3 enabled auto-merge (squash) October 22, 2026 22:16

vercel Bot deployed to Preview – eve-pkg October 22, 2026 22:18

View deployment

vercel Bot deployed to Preview – eve-docs October 22, 2026 22:18

View deployment

Merge branch 'main' into codex/update-workflow-dependencies

1a12000

vercel Bot deployed to Preview – eve-pkg October 22, 2026 22:45

View deployment

vercel Bot deployed to Preview – eve-docs October 22, 2026 22:45

View deployment

Merge branch 'main' into codex/update-workflow-dependencies

cd34628

vercel Bot deployed to Preview – eve-docs October 22, 2026 23:36

View deployment

vercel Bot deployed to Preview – eve-pkg October 22, 2026 23:36

View deployment

AndrewBarba disabled auto-merge October 22, 2026 23:49

AndrewBarba merged commit b9f984c into main Oct 23, 2026
278 of 286 checks passed

AndrewBarba deleted the codex/update-workflow-dependencies branch October 23, 2026 00:02

Navigation Menu

Repository navigation

chore: Bump workflow - #5279

chore: Bump workflow#5279
AndrewBarba merged 5 commits into
mainfrom
codex/update-workflow-dependencies

karthikscale3 commented Oct 22, 2026

Uh oh!

vercel Bot commented Oct 22, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Oct 22, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 22, 2026 •

edited

Loading

Package Details

`eve init` install details

Payload Size Graph

Top Function Payloads

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

karthikscale3 commented Oct 22, 2026

Summary

Validation

Checklist

Uh oh!

vercel Bot commented Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Bundle + Package Summary: apps/fixtures/weather-agent

Delta vs main (b848a51)

eve init install

Package Details

eve init install details

Payload Size Graph

Top Function Payloads

Build Timing: e2e/fixtures/agent-tools-sandbox

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vercel Bot commented Oct 22, 2026 •

edited

Loading

socket-security Bot commented Oct 22, 2026 •

edited

Loading

github-actions Bot commented Oct 22, 2026 •

edited

Loading

Bundle + Package Summary: `apps/fixtures/weather-agent`

Delta vs `main (b848a51)`

`eve init` install

`eve init` install details

Build Timing: `e2e/fixtures/agent-tools-sandbox`