eve 0.23.0 → 0.24.1

package/dist/src/shared/atomic-write-file.js

@@ -0,0 +1 @@
+import{rename,rm,writeFile}from"node:fs/promises";const REPLACE_RETRY_DELAYS_MS=[10,20,40,80,160,320,640];async function atomicWriteFile(e,r){let i=`${e}.tmp-${process.pid}-${Date.now().toString(36)}`;await writeFile(i,r);try{await renameReplacingBusyTarget(i,e)}catch(e){throw await rm(i,{force:!0}).catch(()=>void 0),e}}async function renameReplacingBusyTarget(t,n){for(let i of REPLACE_RETRY_DELAYS_MS)try{await rename(t,n);return}catch(e){if(!isBusyTargetError(e))throw e;await new Promise(e=>setTimeout(e,i))}await rename(t,n)}function isBusyTargetError(e){return e instanceof Error&&`code`in e&&(e.code===`EPERM`||e.code===`EACCES`)}export{atomicWriteFile};

package/dist/src/shared/dynamic-tool-definition.d.ts

@@ -7,6 +7,8 @@ import type { HandleMessageStreamEvent } from "#protocol/message.js";
 type ToolContext = SessionContext & {
     /** Aborts when the active turn is cancelled. */
     readonly abortSignal: AbortSignal;
+    /** Final runtime name of the current tool. */
+    readonly toolName: string;
 };
 /**
  * Stream event types allowed for dynamic tool resolvers. Dispatch

package/dist/src/shared/guards.d.ts

@@ -35,6 +35,13 @@ export declare function isNonEmptyString(value: unknown): value is string;
  * that accidentally return a Promise instead of a plain record.
  */
 export declare function isThenable(value: unknown): value is PromiseLike<unknown>;
+/**
+ * Returns `true` when `error` is an `Error` carrying the given Node.js
+ * `errno` code (`"ENOENT"`, `"EEXIST"`, ...). Filesystem control flow
+ * routinely branches on these codes; this guard keeps the
+ * `"code" in error` duck-typing in one place.
+ */
+export declare function isErrnoCode(error: unknown, code: string): boolean;
 /**
  * Returns `true` when `value` is a plain object record — `{}`,
  * `Object.create(null)`, or an object whose prototype is

package/dist/src/shared/guards.js

@@ -1 +1 @@
-function isObject(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function isNonEmptyString(e){return typeof e==`string`&&e.length>0}function isThenable(e){return isObject(e)&&typeof e.then==`function`}function isPlainRecord(e){if(!isObject(e))return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}export{isNonEmptyString,isObject,isPlainRecord,isThenable};
+function isObject(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function isNonEmptyString(e){return typeof e==`string`&&e.length>0}function isThenable(e){return isObject(e)&&typeof e.then==`function`}function isErrnoCode(e,t){return e instanceof Error&&`code`in e&&e.code===t}function isPlainRecord(e){if(!isObject(e))return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}export{isErrnoCode,isNonEmptyString,isObject,isPlainRecord,isThenable};

package/dist/src/shared/path-exists.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Returns `true` when `path` exists, `false` when it does not, and
+ * rethrows every other filesystem error (`EACCES`, `EIO`, ...).
+ *
+ * Distinct from `#setup/path-exists.js`, which swallows all errors:
+ * callers here make crash-recovery decisions, so a permission failure
+ * must surface rather than masquerade as "does not exist".
+ */
+export declare function pathExists(path: string): Promise<boolean>;

package/dist/src/shared/path-exists.js

@@ -0,0 +1 @@
+import{stat}from"node:fs/promises";import{isErrnoCode}from"#shared/guards.js";async function pathExists(t){try{return await stat(t),!0}catch(e){if(isErrnoCode(e,`ENOENT`))return!1;throw e}}export{pathExists};

package/docs/agent-config.md

@@ -203,14 +203,14 @@ installed package must stay external in hosted output, list it in
 
 `defineAgent` takes a few more fields, all optional. For the exported types, see the [TypeScript API](./reference/typescript-api).
 
-| Field          | Type                                    | Default          | Description                                                                                                                                                                                                                                                                                                                               |
-| -------------- | --------------------------------------- | ---------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `reasoning`    | `AgentReasoningDefinition`              | provider default | Provider-agnostic reasoning effort forwarded to the agent's turn model calls.                                                                                                                                                                                                                                                             |
-| `modelOptions` | `AgentModelOptionsDefinition`           | none             | Provider option overrides forwarded to the model call.                                                                                                                                                                                                                                                                                    |
-| `limits`       | `AgentLimitsDefinition`                 | field-specific   | Framework-owned runtime limits. `maxInputTokensPerSession` defaults to `40_000_000` for root sessions, and delegated subagent sessions inherit the parent's remaining quota; `maxOutputTokensPerSession` is unset unless configured; `false` uncaps a session token limit. `maxSubagents` limits calls made by one `Workflow` invocation. |
-| `experimental` | `{ workflow?: { world?: string } }`     | unset            | Opt-in settings that can change or disappear in any release. Treat them as unstable. `workflow.world` selects the Workflow world package backing session state, queues, hooks, and streams on the root agent.                                                                                                                             |
-| `outputSchema` | Standard Schema or a JSON Schema object | none             | Structured return type for task-mode runs (a subagent, schedule, or remote job). Interactive conversation turns ignore it unless the client supplies a per-message schema.                                                                                                                                                                |
-| `build`        | `{ externalDependencies?: string[] }`   | none             | Hosted-build packaging controls. `externalDependencies` keeps listed packages external while eve compiles authored modules such as tools and channels, and traces those packages into the hosted output.                                                                                                                                  |
+| Field          | Type                                    | Default          | Description                                                                                                                                                                                                                                                                |
+| -------------- | --------------------------------------- | ---------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `reasoning`    | `AgentReasoningDefinition`              | provider default | Provider-agnostic reasoning effort forwarded to the agent's turn model calls.                                                                                                                                                                                              |
+| `modelOptions` | `AgentModelOptionsDefinition`           | none             | Provider option overrides forwarded to the model call.                                                                                                                                                                                                                     |
+| `limits`       | `AgentLimitsDefinition`                 | field-specific   | Framework-owned runtime limits. `maxInputTokensPerSession` defaults to `40_000_000` for root sessions, and delegated subagent sessions inherit the parent's remaining quota; `maxOutputTokensPerSession` is unset unless configured; `false` uncaps a session token limit. |
+| `experimental` | `{ workflow?: { world?: string } }`     | unset            | Opt-in settings that can change or disappear in any release. Treat them as unstable. `workflow.world` selects the Workflow world package backing session state, queues, hooks, and streams on the root agent.                                                              |
+| `outputSchema` | Standard Schema or a JSON Schema object | none             | Structured return type for task-mode runs (a subagent, schedule, or remote job). Interactive conversation turns ignore it unless the client supplies a per-message schema.                                                                                                 |
+| `build`        | `{ externalDependencies?: string[] }`   | none             | Hosted-build packaging controls. `externalDependencies` keeps listed packages external while eve compiles authored modules such as tools and channels, and traces those packages into the hosted output.                                                                   |
 
 `externalDependencies` is a packaging control only. It keeps selected packages as runtime dependencies in the hosted output; it does not authorize, configure, or review any third-party service those packages may call.
 

package/docs/channels/teams.mdx

@@ -45,7 +45,11 @@ Replies post as Markdown (`textFormat: "markdown"`), with oversized text split a
 
 ### Human-in-the-loop (HITL)
 
-A human-in-the-loop (HITL) `input.requested` event renders as an Adaptive Card. Buttons and options map to `Action.Submit`, selects to `Input.ChoiceSet`, and freeform to `Input.Text`. When the user submits, the activity converts to eve `inputResponses` for you. For invokes that aren't HITL, handle them in `onInvoke(ctx, activity)`.
+A human-in-the-loop (HITL) `input.requested` event renders as an Adaptive Card. Approval cards show the tool input in the card and fallback text. Buttons and options map to `Action.Submit`, selects to `Input.ChoiceSet`, and freeform to `Input.Text`. Teams may return a submission as a message or invoke; eve handles both before the normal message mention gate and resumes the thread recorded in the card.
+
+By default, submissions use the Teams identity of the user who clicked the card. If you customize `onMessage` for an allowlist, configure the same policy in `onInputResponse`; eve otherwise rejects HITL submissions rather than bypassing the message gate.
+
+For invokes that aren't HITL, handle them in `onInvoke(ctx, activity)`.
 
 ### Proactive sessions
 

package/docs/concepts/default-harness.md

@@ -91,13 +91,15 @@ Three moves shape the harness. The right one depends on whether the model should
 
 ## The opt-in `Workflow` tool
 
-An experimental `Workflow` tool ships but stays off by default. To turn it on, re-export the opt-in marker from `agent/tools/workflow.ts`:
+An experimental `Workflow` tool ships but stays off by default. To turn it on, export its definition from `agent/tools/workflow.ts`:
 
 ```ts
-export { ExperimentalWorkflow as default } from "eve/tools";
+import { experimental_workflow } from "eve/tools";
+
+export default experimental_workflow({ maxSubagents: 100 });
 ```
 
-With it on, the model can orchestrate the agent's own subagents from model-authored JavaScript, all as one durable step. The tool is root-only — delegated subagent sessions never see it — and one program may dispatch at most `limits.maxSubagents` subagent calls (default 100). See [Dynamic workflows](../guides/dynamic-workflows).
+With it on, the model can orchestrate the agent's own subagents from model-authored JavaScript, all as one durable step. The tool is root-only — delegated subagent sessions never see it — and one program may dispatch at most the configured `maxSubagents` calls (default 100). See [Dynamic workflows](../guides/dynamic-workflows).
 
 ## What to read next
 

package/docs/guides/deployment.md

@@ -99,9 +99,9 @@ For a self-deployed process, leave `defaultBackend()` in place or choose an expl
 
 ## 5. Build-time sandbox prewarm
 
-During hosted builds, eve prewarms reusable Vercel sandbox templates so the first session doesn't pay the cold-start cost:
+During Vercel-targeted builds, eve prewarms reusable Vercel sandbox templates so the first session doesn't pay the cold-start cost. This includes hosted builds and local `vercel build` runs:
 
-- Prewarm runs only when both `VERCEL` and `VERCEL_DEPLOYMENT_ID` are present.
+- Prewarm runs for hosted Vercel builds and linked local `vercel build` runs.
 - A sandbox with no `bootstrap()` and no workspace seed files gets skipped.
 - Seed-only templates are keyed by skills and workspace file contents, so unchanged seeds reuse a template across deploys.
 - Templates with a `bootstrap()` are keyed by the optional resolved `revalidationKey()` plus the authored sandbox source and seed contents, so matching inputs reuse a template across deploys.
@@ -109,7 +109,7 @@ During hosted builds, eve prewarms reusable Vercel sandbox templates so the firs
 - Prewarming only covers template construction. `onSession()` still runs at runtime, once per session.
 - **If build-time prewarm fails, the build fails.**
 
-If `VERCEL` is set but `VERCEL_DEPLOYMENT_ID` is missing, eve warns that it skipped prewarming. Do not deploy that build with `vercel deploy --prebuilt`; its output may reference sandbox templates that were never provisioned. Run `vercel deploy` instead so Vercel builds the source in its hosted build environment.
+Local builds must be linked to a Vercel project with credentials that can provision Vercel Sandbox templates. If authentication or template provisioning fails, eve fails the build rather than emitting output that would fail after deployment.
 
 ## 6. Auth
 

package/docs/guides/dynamic-workflows.md

@@ -9,10 +9,12 @@ A single turn can already call several subagents, and parallel tool calls dispat
 
 ## Enable the Workflow tool
 
-Re-export the opt-in marker as the default export of `agent/tools/workflow.ts`. The marker name carries the "experimental" warning, but the tool the model actually sees is named `Workflow`.
+Export the experimental Workflow definition from `agent/tools/workflow.ts`. The helper name carries the "experimental" warning, but the tool the model actually sees is named `Workflow`.
 
 ```ts title="agent/tools/workflow.ts"
-export { ExperimentalWorkflow as default } from "eve/tools";
+import { experimental_workflow } from "eve/tools";
+
+export default experimental_workflow();
 ```
 
 Without that file, the `Workflow` tool stays off. It earns its keep only when the agent has subagents (or the built-in `agent`) worth coordinating:
@@ -55,15 +57,12 @@ A workflow reaches only this agent's own agents: the built-in `agent` (a copy of
 
 Workflow orchestration is capped in two independent ways.
 
-**Per-program call budget.** One Workflow program may dispatch at most `limits.maxSubagents` subagent calls in total, counted across the whole program — sequential and parallel calls alike. The default is 100. Calls beyond the budget do not start a child session; they resolve inside the program with a `WORKFLOW_SUBAGENT_LIMIT_REACHED` error result, and the budget is stated in the tool's description so the model sizes its fan-out to fit.
+**Per-program call budget.** One Workflow program may dispatch at most `maxSubagents` subagent calls in total, counted across the whole program — sequential and parallel calls alike. Configure it on `experimental_workflow`; the default is 100. Calls beyond the budget do not start a child session; they resolve inside the program with a `WORKFLOW_SUBAGENT_LIMIT_REACHED` error result, and the budget is stated in the tool's description so the model sizes its fan-out to fit.
 
-```ts title="agent/agent.ts"
-export default defineAgent({
-  model: "anthropic/claude-sonnet-5",
-  limits: {
-    maxSubagents: 4,
-  },
-});
+```ts title="agent/tools/workflow.ts"
+import { experimental_workflow } from "eve/tools";
+
+export default experimental_workflow({ maxSubagents: 4 });
 ```
 
 **Root-only orchestration.** Only the root session receives `Workflow`. Children started by a workflow receive neither `Workflow` nor the built-in `agent`, so Workflow programs cannot recurse. A declared child can still call subagents defined in its own directory (see [Subagents](../subagents)).

package/docs/reference/cli.md

@@ -93,9 +93,11 @@ Run this first when something behaves unexpectedly. It confirms a file was disco
 eve build
 ```
 
-No flags. Compiles to `.eve/` and builds the host output, then prints the built output path.
+Compiles and bundles in an invocation-owned directory under `.eve/builds/`, then publishes the completed host output and prints its path. Scratch workspaces are removed after success or failure.
 
-Useful artifacts written under `.eve/` (preserved even on partial failure):
+Production builds do not write through the stable compiler, host, Nitro, or Workflow files owned by `eve dev`, so builds can run while a local dev server is active. A failed build leaves the last successful `.output/` and agent summary untouched. Concurrent completed builds serialize only the final publication window.
+
+Useful stable artifacts written by inspection and development flows under `.eve/` include:
 
 | Artifact                                       | Description                                          |
 | ---------------------------------------------- | ---------------------------------------------------- |

package/docs/reference/typescript-api.md

@@ -52,7 +52,7 @@ export default defineTool({
 | `mockModel`                                           | `eve/evals`                                   | Deterministic fixture agent models   | [Evals](../evals/overview)                             |
 | `useEveAgent`                                         | `eve/react`, `eve/vue`, `eve/svelte`          | frontend                             | [Frontend](../guides/frontend/overview)                |
 
-A few non-`define*` helpers round out the set: `disableTool` and `ExperimentalWorkflow` from `eve/tools` (see [Default harness](../concepts/default-harness)), the route verbs `GET`/`POST`/`PUT`/`PATCH`/`DELETE`/`WS` from `eve/channels`, the approval policies `always`/`once`/`never` from `eve/tools/approval`, and the channel auth helpers `localDev`/`vercelOidc`/`placeholderAuth` from `eve/channels/auth`. To wrap a built-in tool, import its default value from `eve/tools/defaults` (`bash`, `readFile`, `writeFile`, `glob`, `grep`, `webFetch`, `webSearch`, `todo`, `loadSkill`). `AgentReasoningDefinition` is exported from `eve` for the top-level `defineAgent({ reasoning })` setting. `AgentLimitsDefinition` is exported for `defineAgent({ limits })`. `AgentWorkflowDefinition` and `AgentWorkflowWorldDefinition` are exported from `eve` for the `defineAgent({ experimental: { workflow } })` config shape.
+A few non-`define*` helpers round out the set: `disableTool` and `experimental_workflow` from `eve/tools` (see [Default harness](../concepts/default-harness)), the route verbs `GET`/`POST`/`PUT`/`PATCH`/`DELETE`/`WS` from `eve/channels`, the approval policies `always`/`once`/`never` from `eve/tools/approval`, and the channel auth helpers `localDev`/`vercelOidc`/`placeholderAuth` from `eve/channels/auth`. To wrap a built-in tool, import its default value from `eve/tools/defaults` (`bash`, `readFile`, `writeFile`, `glob`, `grep`, `webFetch`, `webSearch`, `todo`, `loadSkill`). `AgentReasoningDefinition` is exported from `eve` for the top-level `defineAgent({ reasoning })` setting. `AgentLimitsDefinition` is exported for `defineAgent({ limits })`. `AgentWorkflowDefinition` and `AgentWorkflowWorldDefinition` are exported from `eve` for the `defineAgent({ experimental: { workflow } })` config shape. `ExperimentalWorkflowToolInput` is exported from `eve/tools` for the `experimental_workflow(...)` config shape.
 
 ## Runtime context (`ctx`)
 
@@ -68,32 +68,32 @@ A few non-`define*` helpers round out the set: `disableTool` and `ExperimentalWo
 
 ## Imports at a glance
 
-| Import                                                      | Holds                                                                |
-| ----------------------------------------------------------- | -------------------------------------------------------------------- |
-| `eve`                                                       | `defineAgent`, `defineRemoteAgent`, agent config types               |
-| `eve/tools`                                                 | `defineTool`, `defineDynamic`, `disableTool`, `ExperimentalWorkflow` |
-| `eve/tools/defaults`                                        | the built-in tools as plain values                                   |
-| `eve/tools/approval`                                        | `always`, `once`, `never`                                            |
-| `eve/connections`                                           | `defineMcpClientConnection`, `defineOpenAPIConnection`               |
-| `eve/channels`                                              | `defineChannel`, route verbs                                         |
-| `eve/channels/eve`                                          | `eveChannel`                                                         |
-| `eve/channels/auth`                                         | `localDev`, `vercelOidc`, `placeholderAuth`                          |
-| `eve/channels/{slack,discord,teams,telegram,twilio,github}` | platform channel factories                                           |
-| `eve/hooks`                                                 | `defineHook`                                                         |
-| `eve/schedules`                                             | `defineSchedule`                                                     |
-| `eve/skills`                                                | `defineSkill`, `defineDynamic`                                       |
-| `eve/instructions`                                          | `defineInstructions`, `defineDynamic`                                |
-| `eve/context`                                               | `defineState`, session and state types                               |
-| `eve/sandbox`                                               | `defineSandbox`, backends                                            |
-| `eve/instrumentation`                                       | `defineInstrumentation`, `isChannel`                                 |
-| `eve/models/openai`                                         | `experimental_chatgpt`                                               |
-| `eve/evals`                                                 | `defineEval`, `defineEvalConfig`, `mockModel`, eval types            |
-| `eve/evals/expect`                                          | `includes`, `equals`, `matches`, `similarity`                        |
-| `eve/evals/reporters`                                       | `Braintrust`, `JUnit`, `EvalReporter`                                |
-| `eve/evals/loaders`                                         | `loadJson`, `loadYaml`                                               |
-| `eve/react`, `eve/vue`, `eve/svelte`                        | `useEveAgent`                                                        |
-| `eve/next`, `eve/nuxt`, `eve/sveltekit`                     | framework bundler plugins                                            |
-| [`eve/client`](../guides/client/overview)                   | `Client`, `ClientSession`                                            |
+| Import                                                      | Holds                                                                 |
+| ----------------------------------------------------------- | --------------------------------------------------------------------- |
+| `eve`                                                       | `defineAgent`, `defineRemoteAgent`, agent config types                |
+| `eve/tools`                                                 | `defineTool`, `defineDynamic`, `disableTool`, `experimental_workflow` |
+| `eve/tools/defaults`                                        | the built-in tools as plain values                                    |
+| `eve/tools/approval`                                        | `always`, `once`, `never`                                             |
+| `eve/connections`                                           | `defineMcpClientConnection`, `defineOpenAPIConnection`                |
+| `eve/channels`                                              | `defineChannel`, route verbs                                          |
+| `eve/channels/eve`                                          | `eveChannel`                                                          |
+| `eve/channels/auth`                                         | `localDev`, `vercelOidc`, `placeholderAuth`                           |
+| `eve/channels/{slack,discord,teams,telegram,twilio,github}` | platform channel factories                                            |
+| `eve/hooks`                                                 | `defineHook`                                                          |
+| `eve/schedules`                                             | `defineSchedule`                                                      |
+| `eve/skills`                                                | `defineSkill`, `defineDynamic`                                        |
+| `eve/instructions`                                          | `defineInstructions`, `defineDynamic`                                 |
+| `eve/context`                                               | `defineState`, session and state types                                |
+| `eve/sandbox`                                               | `defineSandbox`, backends                                             |
+| `eve/instrumentation`                                       | `defineInstrumentation`, `isChannel`                                  |
+| `eve/models/openai`                                         | `experimental_chatgpt`                                                |
+| `eve/evals`                                                 | `defineEval`, `defineEvalConfig`, `mockModel`, eval types             |
+| `eve/evals/expect`                                          | `includes`, `equals`, `matches`, `similarity`                         |
+| `eve/evals/reporters`                                       | `Braintrust`, `JUnit`, `EvalReporter`                                 |
+| `eve/evals/loaders`                                         | `loadJson`, `loadYaml`                                                |
+| `eve/react`, `eve/vue`, `eve/svelte`                        | `useEveAgent`                                                         |
+| `eve/next`, `eve/nuxt`, `eve/sveltekit`                     | framework bundler plugins                                             |
+| [`eve/client`](../guides/client/overview)                   | `Client`, `ClientSession`                                             |
 
 Exported types ship from the same entrypoint as the helper they describe (for example `ToolDefinition` and `ToolContext` from `eve/tools`). For the exhaustive list, read `packages/eve/src/public/index.ts`.
 

package/docs/subagents.mdx

@@ -81,7 +81,7 @@ eve lowers every subagent visible to the current agent (the root built-in copy,
 
 Declared subagents can call nested subagents defined under their own directories. eve does not apply a separate depth limit; nesting ends where the authored directory tree ends. The built-in `agent` follows the stricter root-only rule above, so `limits.maxSubagentDepth` no longer exists.
 
-`Workflow` is also root-only. Child sessions can still call their own declared or remote subagents, but they receive neither `Workflow` nor the built-in `agent`. `limits.maxSubagents` separately caps the number of calls made by one Workflow program (default 100); see [Dynamic workflows](./guides/dynamic-workflows).
+`Workflow` is also root-only. Child sessions can still call their own declared or remote subagents, but they receive neither `Workflow` nor the built-in `agent`. The Workflow tool's `maxSubagents` option caps the number of calls made by one program (default 100); see [Dynamic workflows](./guides/dynamic-workflows).
 
 A declared subagent's tool name is the bare path-derived name, with no prefix. `agent/subagents/researcher/` registers as the tool `researcher`. Unlike connection tools (`<connection>__<tool>`), it carries no namespace, so the model, approvals, logs, and evals all reference it by that name. Its input schema is:
 

package/docs/tools/overview.mdx

@@ -38,6 +38,7 @@ When a tool returns structured data, add an optional `outputSchema`. With Zod or
 
 - `ctx.session`: session metadata, turn, auth, parent lineage.
 - `ctx.callId`: the id of the current tool call, carried by the call's [stream events](/docs/concepts/sessions-runs-and-streaming) and approval context.
+- `ctx.toolName`: the final runtime name the model called, including any namespace qualification.
 - `ctx.abortSignal`: aborts when the active turn is cancelled. Pass it to cancellation-aware work; sandbox sessions from `ctx.getSandbox()` are already bound to it.
 - `ctx.getSandbox()`: the live [sandbox](/docs/sandbox) handle.
 - `ctx.getSkill(id)`: read a packaged [skill](/docs/skills)'s metadata and files.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve",
-  "version": "0.23.0",
+  "version": "0.24.1",
   "private": false,
   "description": "Filesystem-first framework for durable backend AI agents that run anywhere.",
   "keywords": [
@@ -282,13 +282,13 @@
     "nitro": "3.0.260610-beta"
   },
   "devDependencies": {
-    "@ai-sdk/anthropic": "^4.0.0",
-    "@ai-sdk/google": "^4.0.0",
-    "@ai-sdk/mcp": "^2.0.1",
-    "@ai-sdk/openai": "^4.0.0",
-    "@ai-sdk/otel": "^1.0.0",
-    "@ai-sdk/provider": "^4.0.0",
-    "@ai-sdk/provider-utils": "^5.0.0",
+    "@ai-sdk/anthropic": "^4.0.14",
+    "@ai-sdk/google": "^4.0.14",
+    "@ai-sdk/mcp": "^2.0.12",
+    "@ai-sdk/openai": "^4.0.13",
+    "@ai-sdk/otel": "^1.0.26",
+    "@ai-sdk/provider": "^4.0.3",
+    "@ai-sdk/provider-utils": "^5.0.9",
     "@chat-adapter/slack": "4.31.0",
     "@chat-adapter/state-memory": "4.31.0",
     "@chat-adapter/twilio": "4.31.0",
@@ -303,14 +303,14 @@
     "@vercel/oidc": "3.5.0",
     "@vercel/sandbox": "2.3.0",
     "@vercel/sdk": "1.28.1",
-    "@workflow/core": "5.0.0-beta.31",
+    "@workflow/core": "5.0.0-beta.34",
     "@workflow/errors": "5.0.0-beta.10",
     "@workflow/serde": "5.0.0-beta.2",
     "@workflow/utils": "5.0.0-beta.6",
-    "@workflow/world": "5.0.0-beta.19",
-    "@workflow/world-local": "5.0.0-beta.27",
-    "@workflow/world-vercel": "5.0.0-beta.27",
-    "ai": "^7.0.0",
+    "@workflow/world": "5.0.0-beta.20",
+    "@workflow/world-local": "5.0.0-beta.28",
+    "@workflow/world-vercel": "5.0.0-beta.30",
+    "ai": "^7.0.26",
     "autoevals": "0.0.132",
     "chat": "4.31.0",
     "chokidar": "5.0.0",
@@ -339,7 +339,7 @@
   },
   "peerDependencies": {
     "@opentelemetry/api": "^1.0.0",
-    "ai": "^7.0.0",
+    "ai": "^7.0.26",
     "braintrust": "^3.0.0",
     "just-bash": "^3.0.0",
     "microsandbox": "^0.5.0"