feat(eve): support interactive sandbox credential brokering

[blurrah]

Adds step-scoped Vercel Sandbox credential brokering with interactive per-user authorization, durable pause/resume, live policy updates, and automatic cleanup.

Especially handy when you want to support cli tools like GitHub access for your sandbox.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
eve-docs	Ready	Preview, Comment, Open in v0	Jun 18, 2026 7:24pm

[github-actions]

Bundle + Package Summary: apps/fixtures/weather-agent

Key takeaways

• Runtime delta: public routes 9 -> 11 (+2); 1 changed payload.

Delta vs main (93b06a8)

Area	Metric	Baseline	Current	Delta
Package	Packed tarball	3.23 MB	3.23 MB	+8.3 kB ⚠️
Package	Unpacked publish size	11.58 MB	11.61 MB	+30.0 kB ⚠️
Package	Installed footprint	51.78 MB	51.81 MB	+30.0 kB ⚠️
Package	Published files	2161	2172	+11
Package	Installed files	5366	5377	+11
Runtime	Unique function payloads	2	2	0
Runtime	Total function bytes	9.34 MB	9.37 MB	+35.8 kB ⚠️
Runtime	Public routes	9	11	+2

Changed function payloads vs main (93b06a8) (2)

Function	Status	Baseline	Current	Delta	Route changes
functions/__server.func	changed	3.86 MB	3.88 MB	+19.4 kB ⚠️	public +/eve/v1/sandbox/egress/[ruleId], +/eve/v1/sandbox/egress/[ruleId]/[...]
functions/.well-known/workflow/v1/flow.func	changed	5.47 MB	5.49 MB	+16.4 kB ⚠️	none

Build Metadata

• Preset: vercel
• Nitro: nitro@3.0.260610-beta
• Output directory: apps/fixtures/weather-agent/.vercel/output
• Build metadata timestamp: 2026-06-18T19:24:02.965Z
• Route aliases: 11 public, 1 internal (12 total aliases)
• Vercel routes in config: 12
• Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small

Package Drill-Down

Package Details

• Package: eve@0.11.6
• Package directory: packages/eve
• Tarball: 3.23 MB (eve-0.11.6.tgz)
• Unpacked payload: 11.61 MB across 2172 published files
• Installed footprint: 51.81 MB across 5377 installed files
• Installed root package: 10.50 MB
• Installed dependencies: 41.32 MB
• Runtime dependencies: 1
• Peer dependencies: 12 (11 optional)

Installed footprint is measured from an isolated temporary npm install of the packed tarball.

Heavy installed dependencies

• @rolldown/binding-linux-x64-gnu: 20.61 MB (39.8%)
• eve: 10.50 MB (20.3%)
• ai: 6.20 MB (12.0%)
• zod: 4.97 MB (9.6%)
• nitro: 2.41 MB (4.6%)

Publish payload breakdown

Published file size
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [#####...................] 1.51 MB 13.0%
🟡 dist/src/compiled/@workflow/core/runtime.js      [##......................] 775.4 kB 6.7%
🟡 dist/src/compiled/@vercel/sandbox/index.js       [##......................] 605.0 kB 5.2%
🟡 dist/src/compiled/@chat-adapter/slack/index.js   [#.......................] 436.9 kB 3.8%
🟡 dist/src/compiled/_chunks/workflow/attribute-... [#.......................] 370.9 kB 3.2%
🔴 Other published files                            [########################] 7.91 MB 68.2%

Installed footprint breakdown

Installed package size
🔴 @rolldown/binding-linux-x64-gnu [########################] 20.61 MB 39.8%
🔴 eve                             [############............] 10.50 MB 20.3%
🔴 ai                              [#######.................] 6.20 MB 12.0%
🟠 zod                             [######..................] 4.97 MB 9.6%
🟠 nitro                           [###.....................] 2.41 MB 4.6%
🟡 rolldown                        [#.......................] 771.0 kB 1.5%
🔴 Other installed packages        [#######.................] 6.37 MB 12.3%

Runtime dependencies (1)

Package	Range	Notes
nitro	3.0.260610-beta

Peer dependencies (12)

Package	Range	Notes
@opentelemetry/api	^1.0.0	optional peer
@sveltejs/kit	^2.0.0	optional peer
ai	catalog:
braintrust	^3.0.0	optional peer
just-bash	^3.0.0	optional peer
microsandbox	^0.5.0	optional peer
next	^16.0.0	optional peer
nuxt	^4.0.0	optional peer
react	^19.0.0	optional peer
svelte	^5.0.0	optional peer
vite	^8.0.0	optional peer
vue	^3.5.0	optional peer

Function Drill-Down

Payload Size Graph

Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func     [########################] 5.49 MB 58.6%
🔴 functions/__server.func                         [#################.......] 3.88 MB 41.4%

Top Function Payloads

🟠 functions/.well-known/workflow/v1/flow.func • 1 public route • 5.49 MB

Metric	Value
Public routes	/.well-known/workflow/v1/flow
Runtime	nodejs24.x
Handler	index.mjs
Payload	5.49 MB
Function files	5.49 MB across 27 files
Traced dependencies	0 B
Signal	🟠 Bundled file __eve_nitro_handler__.mjs is 1.52 MB (27.7%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 __eve_nitro_handler__.mjs              [########################] 1.52 MB 27.7%
🟠 _chunks/runtime.mjs                    [###############.........] 958.4 kB 17.5%
🟡 _chunks/sandbox.mjs                    [############............] 766.1 kB 14.0%
🟡 _chunks/attribute-changes-Bi5DLT8S.mjs [#######.................] 472.2 kB 8.6%
🟡 _chunks/dist-DTchiX0N.mjs              [#######.................] 460.6 kB 8.4%
🟠 Other bundled files                    [#####################...] 1.31 MB 23.9%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x",
  "environment": {
    "NODE_OPTIONS": "--experimental-require-module",
    "WORKFLOW_QUEUE_NAMESPACE": "eve"
  },
  "maxDuration": "max",
  "experimentalTriggers": [
    {
      "type": "queue/v2beta",
      "topic": "__eve_wkf_workflow_*",
      "consumer": "default",
      "retryAfterSeconds": 5,
      "initialDelaySeconds": 0
    }
  ]
}

---

🟠 functions/__server.func • 10 public routes, 1 internal alias • 3.88 MB

Metric	Value
Public routes	/ /eve/v1/callback/[token] /eve/v1/connections/[name]/callback/[token] /eve/v1/health /eve/v1/info /eve/v1/sandbox/egress/[ruleId] /eve/v1/sandbox/egress/[ruleId]/[...] /eve/v1/session /eve/v1/session/[sessionId] /eve/v1/session/[sessionId]/stream
Internal aliases	/__server
Runtime	nodejs24.x
Handler	index.mjs
Payload	3.88 MB
Function files	3.88 MB across 21 files
Traced dependencies	0 B
Signal	🟠 Bundled file index.mjs is 1.42 MB (36.6%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                              [########################] 1.42 MB 36.6%
🟠 _chunks/runtime.mjs                    [###############.........] 875.8 kB 22.5%
🟠 _chunks/sandbox.mjs                    [#############...........] 766.3 kB 19.7%
🟡 _chunks/attribute-changes-Bi5DLT8S.mjs [########................] 448.5 kB 11.5%
⚪ _libs/zod.mjs                          [##......................] 114.2 kB 2.9%
🟡 Other bundled files                    [####....................] 258.8 kB 6.7%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x"
}