docs(eve): document authorized approvals, update extension contracts

[benpankow]

Summary

Documents responder-authorized approvals for tool authors and client implementers, updates client reducer coverage, and publishes the extension capability metadata required by the new public types/events.

Tool author documentation

The HITL guide now covers the relationship between request-time approval and response-time authorization:

approval: {
  request: always(),
  async response({ request, response, responder, session, auth }) {
    const identity = await auth.getToken(approverAuth);

    return await canApprove({ identity, request, response, responder, session })
      ? { status: "allowed" }
      : {
          status: "rejected",
          safeReason: "You are not permitted to approve this action.",
        };
  },
},

It documents:

• the stable request and verified responder inputs;
• the submitted response and narrow getToken / requireAuth capability;
• private OAuth and safeReason behavior;
• Approve/Cancel semantics;
• concurrent candidates, fail-closed errors, and first-winner settlement;
• candidate and settlement stream events.

Client documentation

The client messages guide now explains that submitting approve creates a candidate rather than immediately closing the shared request:

input.requested
  → submit approve
  → approval.candidate / authorization.required
  → approval.settled

Clients keep shared controls open until approval.settled, while candidate progress and OAuth UI remain private to the responder.

Client reducer coverage

Adds coverage that the default reducer changes a shared approval part only after terminal settlement, not on candidate progress.

Extension capability contracts

The new approval callback types, token subject field, and lifecycle events are reachable from several extension authoring surfaces. This PR:

• bumps the affected tool, dynamic tool, connection, hook, dynamic skill, and dynamic instruction epochs;
• retains every previous epoch;
• adds representative compatibility fixtures for the retained contracts;
• generates the new immutable API reports.

No previous extension epoch is dropped.

Depends on #1373.

Validation

• pnpm --filter eve typecheck
• pnpm --filter eve test:unit (5,627 passed locally on the consolidated stack)
• pnpm docs:check
• pnpm guard:invariants

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
eve-docs	Ready	Preview	Aug 5, 2026 9:10pm
eve-docs-4759	Ready	Preview, v0	Aug 5, 2026 9:10pm

[github-actions]

Bundle + Package Summary: apps/fixtures/weather-agent

Key takeaways

• No notable deltas vs ben/hitl-v2-subagents (9cb3308).

Delta vs ben/hitl-v2-subagents (9cb3308)

Area	Metric	Baseline	Current	Delta
Package	Packed tarball	7.63 MB	7.63 MB	+561 B ⚠️
Package	Unpacked publish size	28.60 MB	28.61 MB	+3.0 kB ⚠️
Package	Installed footprint	71.88 MB	71.88 MB	+3.0 kB ⚠️
Package	Published files	2986	2986	0
Package	Installed files	6682	6682	0
Runtime	Unique function payloads	2	2	0
Runtime	Total function bytes	17.08 MB	17.08 MB	+8 B ⚠️
Runtime	Public routes	13	13	0

Changed function payloads vs ben/hitl-v2-subagents (9cb3308) (2)

Function	Status	Baseline	Current	Delta	Route changes
functions/__server.func	changed	8.54 MB	8.54 MB	+4 B ⚠️	none
functions/.well-known/workflow/v1/flow.func	changed	8.54 MB	8.54 MB	+4 B ⚠️	none

eve init install

Metric	Baseline	Current	Delta
Installed footprint	110.29 MB	110.29 MB	+3.0 kB ⚠️
Installed packages	121	121	0
dependencies	4	4	0
devDependencies	2	2	0
Dependency package bytes	42.99 MB	42.99 MB	+3.0 kB ⚠️
devDependency package bytes	5.04 MB	5.04 MB	0 B ➖

Build Metadata

• Preset: vercel
• Nitro: nitro@3.0.260610-beta
• Output directory: apps/fixtures/weather-agent/.vercel/output
• Build metadata timestamp: 2026-08-03T22:31:56.183Z
• Route aliases: 13 public, 1 internal (14 total aliases)
• Vercel routes in config: 16
• Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small

Package Drill-Down

Package Details

• Package: eve@0.29.5
• Package directory: packages/eve
• Tarball: 7.63 MB (eve-0.29.5.tgz)
• Unpacked payload: 28.61 MB across 2986 published files
• Installed footprint: 71.88 MB across 6682 installed files
• Installed root package: 27.25 MB
• Installed dependencies: 44.63 MB
• Runtime dependencies: 2
• Peer dependencies: 5 (4 optional)

Installed footprint is measured from an isolated temporary npm install of the packed tarball.

Heavy installed dependencies

• eve: 27.25 MB (37.9%)
• @rolldown/binding-linux-x64-gnu: 19.34 MB (26.9%)
• ai: 6.57 MB (9.1%)
• zod: 5.07 MB (7.0%)
• undici: 3.50 MB (4.9%)

Publish payload breakdown

Published file size
🔴 dist/src/compiled/shadcn-registry/index.js       [#################.......] 9.68 MB 33.9%
🟠 dist/src/compiled/@photon-ai/chat-adapter-ime... [####....................] 2.42 MB 8.5%
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [###.....................] 1.51 MB 5.3%
🟡 dist/src/compiled/_chunks/node/undici-DWL_MYm... [#.......................] 502.4 kB 1.8%
🟡 dist/src/compiled/_chunks/workflow/undici-DWL... [#.......................] 502.4 kB 1.8%
🔴 Other published files                            [########################] 13.99 MB 48.9%

Installed footprint breakdown

Installed package size
🔴 eve                             [########################] 27.25 MB 37.9%
🔴 @rolldown/binding-linux-x64-gnu [#################.......] 19.34 MB 26.9%
🔴 ai                              [######..................] 6.57 MB 9.1%
🔴 zod                             [####....................] 5.07 MB 7.0%
🟠 undici                          [###.....................] 3.50 MB 4.9%
🟠 nitro                           [##......................] 2.41 MB 3.3%
🔴 Other installed packages        [#######.................] 7.74 MB 10.8%

Runtime dependencies (2)

Package	Range	Notes
nitro	3.0.260610-beta
undici	8.9.0

Peer dependencies (5)

Package	Range	Notes
@opentelemetry/api	^1.0.0	optional peer
ai	catalog:
braintrust	^3.0.0	optional peer
just-bash	^3.0.0	optional peer
microsandbox	^0.5.0	optional peer

eve init install drill-down

eve init install details

• Command: eve init my-agent
• Package manager: npm
• Installed footprint: 110.29 MB across 8558 installed files
• Installed packages: 121 total (115 transitive-only)
• dependencies: 4 direct packages totaling 42.99 MB
• devDependencies: 2 direct packages totaling 5.04 MB
• Other transitive package files: 62.26 MB

Installed footprint is measured from an isolated temporary eve init my-agent using the current packed eve tarball.

Heavy installed dependencies

• @typescript/typescript-linux-x64: 27.95 MB (25.3%)
• eve: 27.25 MB (24.7%)
• @rolldown/binding-linux-x64-gnu: 19.34 MB (17.5%)
• zod: 9.02 MB (8.2%)
• ai: 6.57 MB (6.0%)

Installed footprint breakdown

Installed package size
🔴 @typescript/typescript-linux-x64 [########################] 27.95 MB 25.3%
🔴 eve                              [#######################.] 27.25 MB 24.7%
🔴 @rolldown/binding-linux-x64-gnu  [#################.......] 19.34 MB 17.5%
🔴 zod                              [########................] 9.02 MB 8.2%
🔴 ai                               [######..................] 6.57 MB 6.0%
🟠 undici                           [###.....................] 3.50 MB 3.2%
🔴 Other installed packages         [##############..........] 16.66 MB 15.1%

dependencies (4)

Package	Range	Installed size	Share
@vercel/connect	0.4.3	141.0 kB	0.1%
ai	^7.0.38	6.57 MB	6.0%
eve	file:eve-0.29.5.tgz	27.25 MB	24.7%
zod	4.4.3	9.02 MB	8.2%

devDependencies (2)

Package	Range	Installed size	Share
@types/node	24.x	2.54 MB	2.3%
typescript	7.0.2	2.50 MB	2.3%

Function Drill-Down

Payload Size Graph

Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func     [########################] 8.54 MB 50.0%
🔴 functions/__server.func                         [########################] 8.54 MB 50.0%

Top Function Payloads

🟠 functions/.well-known/workflow/v1/flow.func • 1 public route • 8.54 MB

Metric	Value
Public routes	/.well-known/workflow/v1/flow
Runtime	nodejs24.x
Handler	index.mjs
Payload	8.54 MB
Function files	8.54 MB across 43 files
Traced dependencies	0 B
Signal	🟠 Bundled file index.mjs is 2.37 MB (27.7%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                       [########################] 2.37 MB 27.7%
🟠 _chunks/runtime-artifacts.mjs   [################........] 1.61 MB 18.8%
🟡 _libs/undici.mjs                [##########..............] 980.5 kB 11.5%
🟡 _chunks/sandbox.mjs             [########................] 769.0 kB 9.0%
🟡 _libs/@ai-sdk/gateway+[...].mjs [####....................] 432.8 kB 5.1%
🟠 Other bundled files             [########################] 2.38 MB 27.9%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x",
  "maxDuration": "max",
  "experimentalTriggers": [
    {
      "type": "queue/v2beta",
      "topic": "__eve776561746865722d6167656e74_wkf_workflow_*",
      "consumer": "default",
      "retryAfterSeconds": 5,
      "initialDelaySeconds": 0
    }
  ],
  "environment": {
    "WORKFLOW_PRECONDITION_GUARD": "1"
  }
}

---

🟠 functions/__server.func • 12 public routes, 1 internal alias • 8.54 MB

Metric	Value
Public routes	/ /eve/v1/callback/[token] /eve/v1/connections/[name]/callback/[token] /eve/v1/health /eve/v1/info /eve/v1/session /eve/v1/session/[sessionId] /eve/v1/session/[sessionId]/cancel /eve/v1/session/[sessionId]/stream /eve/v1/session/clear /eve/v1/session/compact /eve/v1/session/reset
Internal aliases	/__server
Runtime	nodejs24.x
Handler	index.mjs
Payload	8.54 MB
Function files	8.54 MB across 43 files
Traced dependencies	0 B
Signal	🟠 Bundled file index.mjs is 2.37 MB (27.7%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                       [########################] 2.37 MB 27.7%
🟠 _chunks/runtime-artifacts.mjs   [################........] 1.61 MB 18.8%
🟡 _libs/undici.mjs                [##########..............] 980.5 kB 11.5%
🟡 _chunks/sandbox.mjs             [########................] 769.0 kB 9.0%
🟡 _libs/@ai-sdk/gateway+[...].mjs [####....................] 432.8 kB 5.1%
🟠 Other bundled files             [########################] 2.38 MB 27.9%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x"
}

Build Timing: e2e/fixtures/agent-tools-sandbox

This is an informational timing measurement inside eve build, from preflight through publication. Output-size measurement and profile writing are excluded.

Build mode: deployable Vercel build with sandbox template prewarm included.

• Build pipeline: 2.13 s -> 1.88 s (-242.5 ms) vs ben/hitl-v2-subagents (9cb3308).
• Timing is informational: shared GitHub runners are too variable for a hard timing budget.

Detailed phase timings vs `ben/hitl-v2-subagents (9cb3308)`

Phase	Baseline	Current	Delta
extension.check	1.0 ms	1.1 ms	+0.1 ms
project.resolve	0.6 ms	0.6 ms	0.0 ms
workspace.create	0.6 ms	0.7 ms	+0.1 ms
host.prepare	154.1 ms	146.0 ms	-8.1 ms
vercel.service-prefix.resolve	1.9 ms	2.0 ms	+0.1 ms
nitro.create	220.3 ms	215.6 ms	-4.7 ms
sandbox.prewarm	470.2 ms	259.2 ms	-211.0 ms
nitro.cache.prepare	0.3 ms	0.2 ms	-0.1 ms
nitro.prepare	0.8 ms	0.8 ms	0.0 ms
nitro.public-assets	0.7 ms	0.7 ms	0.0 ms
nitro.prerender	0.5 ms	0.5 ms	0.0 ms
nitro.bundle	1.25 s	1.23 s	-18.5 ms
nitro.cache.write	0.3 ms	0.3 ms	0.0 ms
vercel.workflow-function.materialize	20.9 ms	20.6 ms	-0.3 ms
agent-summary.emit	0.5 ms	0.5 ms	0.0 ms
nitro.close	0.1 ms	0.1 ms	0.0 ms
output.publish	3.2 ms	3.2 ms	0.0 ms
workspace.remove	1.8 ms	1.8 ms	0.0 ms