Skip to content

fix(eve): gate localDev() on NODE_ENV - #1614

Open
dnukumamras wants to merge 2 commits into
mainfrom
loopback-auth-host-header-spoof
Open

fix(eve): gate localDev() on NODE_ENV#1614
dnukumamras wants to merge 2 commits into
mainfrom
loopback-auth-host-header-spoof

Conversation

@dnukumamras

@dnukumamras dnukumamras commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

localDev() now recognizes a local development server by NODE_ENV=development instead of EVE_DEV. eve dev defaults NODE_ENV=development and eve start defaults it to production, so the synthetic local-dev principal is never granted on a production deployment. An explicit NODE_ENV is still respected.

@vercel

vercel Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
eve-docs Ready Ready Preview Aug 4, 2026 7:52pm
eve-docs-4759 Ready Ready Preview, v0 Aug 4, 2026 7:52pm

@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bundle + Package Summary: apps/fixtures/weather-agent

Key takeaways

  • No notable deltas vs main (279b5e6).

Delta vs main (279b5e6)

Area Metric Baseline Current Delta
Package Packed tarball 7.63 MB 7.63 MB -2.0 kB ✅
Package Unpacked publish size 28.60 MB 28.61 MB +10.4 kB ⚠️
Package Installed footprint 71.91 MB 71.92 MB +10.4 kB ⚠️
Package Published files 3002 3008 +6
Package Installed files 6701 6707 +6
Runtime Unique function payloads 2 2 0
Runtime Total function bytes 16.87 MB 16.87 MB +660 B ⚠️
Runtime Public routes 13 13 0
Changed function payloads vs main (279b5e6) (2)
Function Status Baseline Current Delta Route changes
functions/__server.func changed 8.43 MB 8.43 MB +330 B ⚠️ none
functions/.well-known/workflow/v1/flow.func changed 8.43 MB 8.43 MB +330 B ⚠️ none

eve init install

Metric Baseline Current Delta
Installed footprint 110.32 MB 110.33 MB +10.4 kB ⚠️
Installed packages 121 121 0
dependencies 4 4 0
devDependencies 2 2 0
Dependency package bytes 43.01 MB 43.02 MB +10.4 kB ⚠️
devDependency package bytes 5.04 MB 5.04 MB 0 B ➖
Build Metadata
  • Preset: vercel
  • Nitro: nitro@3.0.260610-beta
  • Output directory: apps/fixtures/weather-agent/.vercel/output
  • Build metadata timestamp: 2026-08-04T19:53:28.948Z
  • Route aliases: 13 public, 1 internal (14 total aliases)
  • Vercel routes in config: 16
  • Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small
Package Drill-Down

Package Details

  • Package: eve@0.30.2
  • Package directory: packages/eve
  • Tarball: 7.63 MB (eve-0.30.2.tgz)
  • Unpacked payload: 28.61 MB across 3008 published files
  • Installed footprint: 71.92 MB across 6707 installed files
  • Installed root package: 27.25 MB
  • Installed dependencies: 44.67 MB
  • Runtime dependencies: 2
  • Peer dependencies: 5 (4 optional)

Installed footprint is measured from an isolated temporary npm install of the packed tarball.

Heavy installed dependencies

  • eve: 27.25 MB (37.9%)
  • @rolldown/binding-linux-x64-gnu: 19.34 MB (26.9%)
  • ai: 6.60 MB (9.2%)
  • zod: 5.07 MB (7.0%)
  • undici: 3.50 MB (4.9%)
Publish payload breakdown
Published file size
🔴 dist/src/compiled/shadcn-registry/index.js       [#################.......] 9.68 MB 33.8%
🟠 dist/src/compiled/@photon-ai/chat-adapter-ime... [####....................] 2.42 MB 8.5%
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [###.....................] 1.51 MB 5.3%
🟡 dist/src/compiled/_chunks/node/undici-DWL_MYm... [#.......................] 502.4 kB 1.8%
🟡 dist/src/compiled/_chunks/workflow/undici-DWL... [#.......................] 502.4 kB 1.8%
🔴 Other published files                            [########################] 13.99 MB 48.9%
Installed footprint breakdown
Installed package size
🔴 eve                             [########################] 27.25 MB 37.9%
🔴 @rolldown/binding-linux-x64-gnu [#################.......] 19.34 MB 26.9%
🔴 ai                              [######..................] 6.60 MB 9.2%
🔴 zod                             [####....................] 5.07 MB 7.0%
🟠 undici                          [###.....................] 3.50 MB 4.9%
🟠 nitro                           [##......................] 2.41 MB 3.3%
🔴 Other installed packages        [#######.................] 7.75 MB 10.8%
Runtime dependencies (2)
Package Range Notes
nitro 3.0.260610-beta
undici 8.9.0
Peer dependencies (5)
Package Range Notes
@opentelemetry/api ^1.0.0 optional peer
ai catalog:
braintrust ^3.0.0 optional peer
just-bash ^3.0.0 optional peer
microsandbox ^0.5.0 optional peer
eve init install drill-down

eve init install details

  • Command: eve init my-agent
  • Package manager: npm
  • Installed footprint: 110.33 MB across 8583 installed files
  • Installed packages: 121 total (115 transitive-only)
  • dependencies: 4 direct packages totaling 43.02 MB
  • devDependencies: 2 direct packages totaling 5.04 MB
  • Other transitive package files: 62.27 MB

Installed footprint is measured from an isolated temporary eve init my-agent using the current packed eve tarball.

Heavy installed dependencies

  • @typescript/typescript-linux-x64: 27.95 MB (25.3%)
  • eve: 27.25 MB (24.7%)
  • @rolldown/binding-linux-x64-gnu: 19.34 MB (17.5%)
  • zod: 9.02 MB (8.2%)
  • ai: 6.60 MB (6.0%)
Installed footprint breakdown
Installed package size
🔴 @typescript/typescript-linux-x64 [########################] 27.95 MB 25.3%
🔴 eve                              [#######################.] 27.25 MB 24.7%
🔴 @rolldown/binding-linux-x64-gnu  [#################.......] 19.34 MB 17.5%
🔴 zod                              [########................] 9.02 MB 8.2%
🔴 ai                               [######..................] 6.60 MB 6.0%
🟠 undici                           [###.....................] 3.50 MB 3.2%
🔴 Other installed packages         [##############..........] 16.67 MB 15.1%
dependencies (4)
Package Range Installed size Share
@vercel/connect 0.4.3 141.0 kB 0.1%
ai ^7.0.38 6.60 MB 6.0%
eve file:eve-0.30.2.tgz 27.25 MB 24.7%
zod 4.4.3 9.02 MB 8.2%
devDependencies (2)
Package Range Installed size Share
@types/node 24.x 2.54 MB 2.3%
typescript 7.0.2 2.50 MB 2.3%
Function Drill-Down

Payload Size Graph

Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func     [########################] 8.43 MB 50.0%
🔴 functions/__server.func                         [########################] 8.43 MB 50.0%

Top Function Payloads

🟠 functions/.well-known/workflow/v1/flow.func • 1 public route • 8.43 MB
Metric Value
Public routes /.well-known/workflow/v1/flow
Runtime nodejs24.x
Handler index.mjs
Payload 8.43 MB
Function files 8.43 MB across 43 files
Traced dependencies 0 B
Signal 🟠 Bundled file index.mjs is 2.26 MB (26.8%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                       [#######################.] 2.26 MB 26.8%
🟠 _chunks/runtime-artifacts.mjs   [################........] 1.61 MB 19.1%
🟡 _libs/undici.mjs                [##########..............] 980.5 kB 11.6%
🟡 _chunks/sandbox.mjs             [########................] 769.0 kB 9.1%
🟡 _libs/@ai-sdk/gateway+[...].mjs [####....................] 432.8 kB 5.1%
🟠 Other bundled files             [########################] 2.38 MB 28.2%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x",
  "maxDuration": "max",
  "experimentalTriggers": [
    {
      "type": "queue/v2beta",
      "topic": "__eve776561746865722d6167656e74_wkf_workflow_*",
      "consumer": "default",
      "retryAfterSeconds": 5,
      "initialDelaySeconds": 0
    }
  ],
  "environment": {
    "WORKFLOW_PRECONDITION_GUARD": "1"
  }
}

🟠 functions/__server.func • 12 public routes, 1 internal alias • 8.43 MB
Metric Value
Public routes /
/eve/v1/callback/[token]
/eve/v1/connections/[name]/callback/[token]
/eve/v1/health
/eve/v1/info
/eve/v1/session
/eve/v1/session/[sessionId]
/eve/v1/session/[sessionId]/cancel
/eve/v1/session/[sessionId]/stream
/eve/v1/session/clear
/eve/v1/session/compact
/eve/v1/session/reset
Internal aliases /__server
Runtime nodejs24.x
Handler index.mjs
Payload 8.43 MB
Function files 8.43 MB across 43 files
Traced dependencies 0 B
Signal 🟠 Bundled file index.mjs is 2.26 MB (26.8%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                       [#######################.] 2.26 MB 26.8%
🟠 _chunks/runtime-artifacts.mjs   [################........] 1.61 MB 19.1%
🟡 _libs/undici.mjs                [##########..............] 980.5 kB 11.6%
🟡 _chunks/sandbox.mjs             [########................] 769.0 kB 9.1%
🟡 _libs/@ai-sdk/gateway+[...].mjs [####....................] 432.8 kB 5.1%
🟠 Other bundled files             [########################] 2.38 MB 28.2%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x"
}

Build Timing: e2e/fixtures/agent-tools-sandbox

This is an informational timing measurement inside eve build, from preflight through publication. Output-size measurement and profile writing are excluded.

Build mode: deployable Vercel build with sandbox template prewarm included.

  • Build pipeline: 2.79 s -> 1.83 s (-960.9 ms) vs main (279b5e6).
  • Timing is informational: shared GitHub runners are too variable for a hard timing budget.
Detailed phase timings vs `main (279b5e6)`
Phase Baseline Current Delta
extension.check 7.4 ms 8.9 ms +1.5 ms
project.resolve 14.6 ms 4.1 ms -10.5 ms
workspace.create 3.1 ms 1.0 ms -2.1 ms
host.prepare 265.2 ms 217.9 ms -47.3 ms
vercel.service-prefix.resolve 1.7 ms 1.5 ms -0.2 ms
nitro.create 151.3 ms 152.1 ms +0.8 ms
sandbox.prewarm 237.2 ms 246.8 ms +9.6 ms
nitro.cache.prepare 0.2 ms 0.2 ms 0.0 ms
nitro.prepare 0.6 ms 0.6 ms 0.0 ms
nitro.public-assets 0.6 ms 0.7 ms +0.1 ms
nitro.prerender 1.2 ms 0.4 ms -0.8 ms
nitro.bundle 1.96 s 1.11 s -850.7 ms
nitro.cache.write 0.2 ms 0.3 ms +0.1 ms
vercel.workflow-function.materialize 139.4 ms 75.4 ms -64.0 ms
agent-summary.emit 0.4 ms 0.4 ms 0.0 ms
nitro.close 0.2 ms 0.1 ms -0.1 ms
output.publish 2.5 ms 5.4 ms +2.9 ms
workspace.remove 1.4 ms 1.5 ms +0.1 ms

Recognize a local development server by NODE_ENV=development instead of
EVE_DEV. eve dev defaults NODE_ENV=development; eve start and directly
launched built servers default it to production, so the synthetic
local-dev principal is never granted on a production deployment. The
start command sets the production default before loading env files, so a
committed .env cannot flip the mode.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: dnukumamras <mukund.sarma@vercel.com>
The dev-server scenario harness spawned `eve dev` with NODE_ENV=test to
activate the mock-model adapter. Now that localDev() keys on
NODE_ENV=development, an inherited NODE_ENV=test made every request 401.
Activate the mock adapter with EVE_MOCK_AUTHORED_MODELS=1 and keep
NODE_ENV=development so the server is a real dev server.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: dnukumamras <mukund.sarma@vercel.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant