vercel/eve eve@0.80.0

on GitHub

Minor Changes

• 4210766: git({ github }) accepts an optional authorize callback that runs once per gh tool invocation with the caller, declared repository, and repository-scoped token; returning false blocks the command. It gates caller/repository access, not individual API requests or operations, and allowed commands use the app token's permissions rather than the caller's GitHub permissions.
• 3fea287: Dropped traces and policies excluding either content direction now request Workflow data deletion when the run ends; set experimental.workflow.retention: "default" to retain completed transcripts independently of tracing. Expired session-history reads return 410 session_expired before streaming, including when the World retains purged chunk records.

Patch Changes

• a5e33ec: Root sessions now accept empty model responses with finishReason: "stop" without retrying them or reporting a model-call failure. Recovery for delegated sessions, incomplete streams, and empty non-stop responses is unchanged.

• aa3d3fc: Scheduled sessions and their locally delegated tasks can now use dynamic scheduling tools and the schedule client to manage schedules, including conditional updates or disabling future occurrences. Collection scope authorization and tool approval policies still apply.

• b1de5d3: eve now vendors chat 4.42.0 and requires the optional chat peer at ^4.42.0. chat 4.41 broke Workflow DevKit workflows in host apps (vercel/chat#969).

• 1f410e9: Dynamic schedule collections can defer their generated management tools to the catalog with tool: "deferred", keeping them out of the model's initial tool list while still making them searchable and callable.

• a475f2d: Dynamic tools now capture locals bound by an array rest element (const [first, ...rest] = ...) or a rest parameter ((...args) =>). Before, the hoisted callback threw ReferenceError and the resolver's tools were dropped.

• 6d67e9a: Add experimental MCP connection event callback definitions and preserve the Connect runtime events bridge while keeping compiler metadata serializable.

• 3aa7dc5: Add experimental Connect-managed event subscriptions and per-connection webhook receivers. Durable event handlers run independently of conversation sessions; only an explicit attachSession(...).send(...) enters a session. Each watch saves its binding before subscribing, and each delivery runs independently under that binding. Subscribe with ttlMs in milliseconds or null to watch until stopped; expiresAt is returned as the calculated deadline. Requires @vercel/connect@2.5.2 or later.

  Return immediately from the durable sleep tool when steering has already interrupted its execution.

• 6d67e9a: Keep a session's deadline stable across workflow replay and compaction handoffs.

• 5243d1d: web_fetch now converts HTML pages served without a Content-Type header instead of returning truncated raw source.