fix(eve): gate localDev() on NODE_ENV - #1614
Open
dnukumamras wants to merge 2 commits into
Open
Conversation
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Contributor
Bundle + Package Summary:
|
| Area | Metric | Baseline | Current | Delta |
|---|---|---|---|---|
| Package | Packed tarball | 7.63 MB | 7.63 MB | -2.0 kB ✅ |
| Package | Unpacked publish size | 28.60 MB | 28.61 MB | +10.4 kB |
| Package | Installed footprint | 71.91 MB | 71.92 MB | +10.4 kB |
| Package | Published files | 3002 | 3008 | +6 |
| Package | Installed files | 6701 | 6707 | +6 |
| Runtime | Unique function payloads | 2 | 2 | 0 |
| Runtime | Total function bytes | 16.87 MB | 16.87 MB | +660 B |
| Runtime | Public routes | 13 | 13 | 0 |
Changed function payloads vs main (279b5e6) (2)
| Function | Status | Baseline | Current | Delta | Route changes |
|---|---|---|---|---|---|
functions/__server.func |
changed | 8.43 MB | 8.43 MB | +330 B |
none |
functions/.well-known/workflow/v1/flow.func |
changed | 8.43 MB | 8.43 MB | +330 B |
none |
eve init install
| Metric | Baseline | Current | Delta |
|---|---|---|---|
| Installed footprint | 110.32 MB | 110.33 MB | +10.4 kB |
| Installed packages | 121 | 121 | 0 |
| dependencies | 4 | 4 | 0 |
| devDependencies | 2 | 2 | 0 |
| Dependency package bytes | 43.01 MB | 43.02 MB | +10.4 kB |
| devDependency package bytes | 5.04 MB | 5.04 MB | 0 B ➖ |
Build Metadata
- Preset:
vercel - Nitro:
nitro@3.0.260610-beta - Output directory:
apps/fixtures/weather-agent/.vercel/output - Build metadata timestamp: 2026-08-04T19:53:28.948Z
- Route aliases: 13 public, 1 internal (14 total aliases)
- Vercel routes in config: 16
- Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small
Package Drill-Down
Package Details
- Package:
eve@0.30.2 - Package directory:
packages/eve - Tarball: 7.63 MB (
eve-0.30.2.tgz) - Unpacked payload: 28.61 MB across 3008 published files
- Installed footprint: 71.92 MB across 6707 installed files
- Installed root package: 27.25 MB
- Installed dependencies: 44.67 MB
- Runtime dependencies: 2
- Peer dependencies: 5 (4 optional)
Installed footprint is measured from an isolated temporary npm install of the packed tarball.
Heavy installed dependencies
eve: 27.25 MB (37.9%)@rolldown/binding-linux-x64-gnu: 19.34 MB (26.9%)ai: 6.60 MB (9.2%)zod: 5.07 MB (7.0%)undici: 3.50 MB (4.9%)
Publish payload breakdown
Published file size
🔴 dist/src/compiled/shadcn-registry/index.js [#################.......] 9.68 MB 33.8%
🟠 dist/src/compiled/@photon-ai/chat-adapter-ime... [####....................] 2.42 MB 8.5%
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [###.....................] 1.51 MB 5.3%
🟡 dist/src/compiled/_chunks/node/undici-DWL_MYm... [#.......................] 502.4 kB 1.8%
🟡 dist/src/compiled/_chunks/workflow/undici-DWL... [#.......................] 502.4 kB 1.8%
🔴 Other published files [########################] 13.99 MB 48.9%
Installed footprint breakdown
Installed package size
🔴 eve [########################] 27.25 MB 37.9%
🔴 @rolldown/binding-linux-x64-gnu [#################.......] 19.34 MB 26.9%
🔴 ai [######..................] 6.60 MB 9.2%
🔴 zod [####....................] 5.07 MB 7.0%
🟠 undici [###.....................] 3.50 MB 4.9%
🟠 nitro [##......................] 2.41 MB 3.3%
🔴 Other installed packages [#######.................] 7.75 MB 10.8%
Runtime dependencies (2)
| Package | Range | Notes |
|---|---|---|
nitro |
3.0.260610-beta |
|
undici |
8.9.0 |
Peer dependencies (5)
| Package | Range | Notes |
|---|---|---|
@opentelemetry/api |
^1.0.0 |
optional peer |
ai |
catalog: |
|
braintrust |
^3.0.0 |
optional peer |
just-bash |
^3.0.0 |
optional peer |
microsandbox |
^0.5.0 |
optional peer |
eve init install drill-down
eve init install details
- Command:
eve init my-agent - Package manager:
npm - Installed footprint: 110.33 MB across 8583 installed files
- Installed packages: 121 total (115 transitive-only)
- dependencies: 4 direct packages totaling 43.02 MB
- devDependencies: 2 direct packages totaling 5.04 MB
- Other transitive package files: 62.27 MB
Installed footprint is measured from an isolated temporary eve init my-agent using the current packed eve tarball.
Heavy installed dependencies
@typescript/typescript-linux-x64: 27.95 MB (25.3%)eve: 27.25 MB (24.7%)@rolldown/binding-linux-x64-gnu: 19.34 MB (17.5%)zod: 9.02 MB (8.2%)ai: 6.60 MB (6.0%)
Installed footprint breakdown
Installed package size
🔴 @typescript/typescript-linux-x64 [########################] 27.95 MB 25.3%
🔴 eve [#######################.] 27.25 MB 24.7%
🔴 @rolldown/binding-linux-x64-gnu [#################.......] 19.34 MB 17.5%
🔴 zod [########................] 9.02 MB 8.2%
🔴 ai [######..................] 6.60 MB 6.0%
🟠 undici [###.....................] 3.50 MB 3.2%
🔴 Other installed packages [##############..........] 16.67 MB 15.1%
dependencies (4)
| Package | Range | Installed size | Share |
|---|---|---|---|
@vercel/connect |
0.4.3 |
141.0 kB | 0.1% |
ai |
^7.0.38 |
6.60 MB | 6.0% |
eve |
file:eve-0.30.2.tgz |
27.25 MB | 24.7% |
zod |
4.4.3 |
9.02 MB | 8.2% |
devDependencies (2)
| Package | Range | Installed size | Share |
|---|---|---|---|
@types/node |
24.x |
2.54 MB | 2.3% |
typescript |
7.0.2 |
2.50 MB | 2.3% |
Function Drill-Down
Payload Size Graph
Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func [########################] 8.43 MB 50.0%
🔴 functions/__server.func [########################] 8.43 MB 50.0%
Top Function Payloads
🟠 functions/.well-known/workflow/v1/flow.func • 1 public route • 8.43 MB
| Metric | Value |
|---|---|
| Public routes | /.well-known/workflow/v1/flow |
| Runtime | nodejs24.x |
| Handler | index.mjs |
| Payload | 8.43 MB |
| Function files | 8.43 MB across 43 files |
| Traced dependencies | 0 B |
| Signal | 🟠 Bundled file index.mjs is 2.26 MB (26.8%) |
🟠 🔎 Dependency Analysis
📦 Bundled files:
Bundled file size
🟠 index.mjs [#######################.] 2.26 MB 26.8%
🟠 _chunks/runtime-artifacts.mjs [################........] 1.61 MB 19.1%
🟡 _libs/undici.mjs [##########..............] 980.5 kB 11.6%
🟡 _chunks/sandbox.mjs [########................] 769.0 kB 9.1%
🟡 _libs/@ai-sdk/gateway+[...].mjs [####....................] 432.8 kB 5.1%
🟠 Other bundled files [########################] 2.38 MB 28.2%
🧾 Vercel Config
{
"handler": "index.mjs",
"launcherType": "Nodejs",
"shouldAddHelpers": false,
"supportsResponseStreaming": true,
"runtime": "nodejs24.x",
"maxDuration": "max",
"experimentalTriggers": [
{
"type": "queue/v2beta",
"topic": "__eve776561746865722d6167656e74_wkf_workflow_*",
"consumer": "default",
"retryAfterSeconds": 5,
"initialDelaySeconds": 0
}
],
"environment": {
"WORKFLOW_PRECONDITION_GUARD": "1"
}
}🟠 functions/__server.func • 12 public routes, 1 internal alias • 8.43 MB
| Metric | Value |
|---|---|
| Public routes | //eve/v1/callback/[token]/eve/v1/connections/[name]/callback/[token]/eve/v1/health/eve/v1/info/eve/v1/session/eve/v1/session/[sessionId]/eve/v1/session/[sessionId]/cancel/eve/v1/session/[sessionId]/stream/eve/v1/session/clear/eve/v1/session/compact/eve/v1/session/reset |
| Internal aliases | /__server |
| Runtime | nodejs24.x |
| Handler | index.mjs |
| Payload | 8.43 MB |
| Function files | 8.43 MB across 43 files |
| Traced dependencies | 0 B |
| Signal | 🟠 Bundled file index.mjs is 2.26 MB (26.8%) |
🟠 🔎 Dependency Analysis
📦 Bundled files:
Bundled file size
🟠 index.mjs [#######################.] 2.26 MB 26.8%
🟠 _chunks/runtime-artifacts.mjs [################........] 1.61 MB 19.1%
🟡 _libs/undici.mjs [##########..............] 980.5 kB 11.6%
🟡 _chunks/sandbox.mjs [########................] 769.0 kB 9.1%
🟡 _libs/@ai-sdk/gateway+[...].mjs [####....................] 432.8 kB 5.1%
🟠 Other bundled files [########################] 2.38 MB 28.2%
🧾 Vercel Config
{
"handler": "index.mjs",
"launcherType": "Nodejs",
"shouldAddHelpers": false,
"supportsResponseStreaming": true,
"runtime": "nodejs24.x"
}Build Timing: e2e/fixtures/agent-tools-sandbox
This is an informational timing measurement inside eve build, from preflight through publication. Output-size measurement and profile writing are excluded.
Build mode: deployable Vercel build with sandbox template prewarm included.
- Build pipeline: 2.79 s -> 1.83 s (-960.9 ms) vs
main (279b5e6). - Timing is informational: shared GitHub runners are too variable for a hard timing budget.
Detailed phase timings vs `main (279b5e6)`
| Phase | Baseline | Current | Delta |
|---|---|---|---|
extension.check |
7.4 ms | 8.9 ms | +1.5 ms |
project.resolve |
14.6 ms | 4.1 ms | -10.5 ms |
workspace.create |
3.1 ms | 1.0 ms | -2.1 ms |
host.prepare |
265.2 ms | 217.9 ms | -47.3 ms |
vercel.service-prefix.resolve |
1.7 ms | 1.5 ms | -0.2 ms |
nitro.create |
151.3 ms | 152.1 ms | +0.8 ms |
sandbox.prewarm |
237.2 ms | 246.8 ms | +9.6 ms |
nitro.cache.prepare |
0.2 ms | 0.2 ms | 0.0 ms |
nitro.prepare |
0.6 ms | 0.6 ms | 0.0 ms |
nitro.public-assets |
0.6 ms | 0.7 ms | +0.1 ms |
nitro.prerender |
1.2 ms | 0.4 ms | -0.8 ms |
nitro.bundle |
1.96 s | 1.11 s | -850.7 ms |
nitro.cache.write |
0.2 ms | 0.3 ms | +0.1 ms |
vercel.workflow-function.materialize |
139.4 ms | 75.4 ms | -64.0 ms |
agent-summary.emit |
0.4 ms | 0.4 ms | 0.0 ms |
nitro.close |
0.2 ms | 0.1 ms | -0.1 ms |
output.publish |
2.5 ms | 5.4 ms | +2.9 ms |
workspace.remove |
1.4 ms | 1.5 ms | +0.1 ms |
dnukumamras
force-pushed
the
loopback-auth-host-header-spoof
branch
from
August 4, 2026 18:39
9f440a5 to
40cc771
Compare
dnukumamras
force-pushed
the
loopback-auth-host-header-spoof
branch
from
August 4, 2026 18:59
40cc771 to
f43c74c
Compare
dnukumamras
force-pushed
the
loopback-auth-host-header-spoof
branch
from
August 4, 2026 19:06
f43c74c to
e7fc268
Compare
dnukumamras
force-pushed
the
loopback-auth-host-header-spoof
branch
from
August 4, 2026 19:26
e7fc268 to
dac328d
Compare
Recognize a local development server by NODE_ENV=development instead of EVE_DEV. eve dev defaults NODE_ENV=development; eve start and directly launched built servers default it to production, so the synthetic local-dev principal is never granted on a production deployment. The start command sets the production default before loading env files, so a committed .env cannot flip the mode. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Signed-off-by: dnukumamras <mukund.sarma@vercel.com>
dnukumamras
force-pushed
the
loopback-auth-host-header-spoof
branch
from
August 4, 2026 19:36
dac328d to
725bc01
Compare
The dev-server scenario harness spawned `eve dev` with NODE_ENV=test to activate the mock-model adapter. Now that localDev() keys on NODE_ENV=development, an inherited NODE_ENV=test made every request 401. Activate the mock adapter with EVE_MOCK_AUTHORED_MODELS=1 and keep NODE_ENV=development so the server is a real dev server. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Signed-off-by: dnukumamras <mukund.sarma@vercel.com>
dnukumamras
marked this pull request as ready for review
August 4, 2026 20:08
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
localDev()now recognizes a local development server byNODE_ENV=developmentinstead ofEVE_DEV.eve devdefaultsNODE_ENV=developmentandeve startdefaults it toproduction, so the synthetic local-dev principal is never granted on a production deployment. An explicitNODE_ENVis still respected.