eve 0.66.3 → 0.67.1

package/docs/reference/cli.md

@@ -1,37 +1,30 @@
 ---
 title: "CLI"
-description: "Reference for every eve CLI command: init, set, info, build, start, dev, logs, traces, link, deploy, eval, channels, extension, and telemetry."
+description: "Reference for every eve CLI command."
 ---
 
 Relevant `eve` commands can run from the application root or any directory beneath it. Running `eve` with no command runs `eve init` when the current directory is not an eve project, or `eve dev` when it is.
 
 ## Commands
 
-| Command                        | Description                                                                                                                        |
-| ------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------- |
-| `eve`                          | Initialize the current directory, or start development when it is already an eve project                                           |
-| `eve init [target]`            | Create a new agent, or add an agent to an existing project                                                                         |
-| `eve info`                     | Print the resolved application, including static instructions and discovered capabilities, routes, artifact paths, and diagnostics |
-| `eve build`                    | Compile `.eve/` artifacts and build the host output; prints the output directory                                                   |
-| `eve start`                    | Serve the built `.output/` app; prints the listening URL                                                                           |
-| `eve dev`                      | Start the local dev server and open the terminal UI                                                                                |
-| `eve dev <url>`                | Connect the UI to an existing server URL (e.g. a remote deployment) instead of booting a local server                              |
-| `eve acp [url]`                | Serve the local application or an existing eve server URL as a stable ACP v1 agent over stdio                                      |
-| `eve logs [logid]`             | Print an `eve dev` diagnostic log (the most recent when `logid` is omitted)                                                        |
-| `eve logs ls`                  | List `eve dev` diagnostic logs, most recent first                                                                                  |
-| `eve traces ls`                | List locally captured agent traces, most recent first                                                                              |
-| `eve traces [trace]`           | Show a local span tree (the most recent when omitted)                                                                              |
-| `eve telemetry <command>`      | Show, enable, or disable CLI telemetry collection                                                                                  |
-| `eve link`                     | Link the directory to a Vercel project and pull AI Gateway credentials                                                             |
-| `eve deploy`                   | Deploy the agent to Vercel production (links first if needed)                                                                      |
-| `eve eval`                     | Run evals against the local app or a remote target                                                                                 |
-| `eve channels list`            | List user-authored channels                                                                                                        |
-| `eve extension init [target]`  | Create a new extension package                                                                                                     |
-| `eve extension build`          | Build the current package as an extension                                                                                          |
-| `eve set`                      | Change the root agent's model and reasoning effort                                                                                 |
-| `eve add <item>`               | Install an item from the official or a configured shadcn registry                                                                  |
-| `eve integration setup <kind>` | Run a built-in setup flow directly after its registry files are installed                                                          |
-| `eve registry <command>`       | Add sources and list, search, or view registry catalog items                                                                       |
+| Command                                        | Description                                            |
+| ---------------------------------------------- | ------------------------------------------------------ |
+| `eve init [target]`                            | Create a new agent, or add one to an existing project  |
+| `eve dev`                                      | Start the local development server and terminal UI     |
+| `eve remote connect --url <url>`               | Open the terminal UI for an existing agent             |
+| `eve remote invoke --url <url> [prompt]`       | Invoke an existing agent without a terminal UI         |
+| `eve remote info --url <url>`                  | Inspect an existing agent                              |
+| `eve acp [url]`                                | Serve a local or existing agent through ACP over stdio |
+| `eve info`                                     | Inspect the local application                          |
+| `eve set model [model] [--reasoning <effort>]` | Change model and reasoning settings                    |
+| `eve build` / `eve start`                      | Build or serve the application                         |
+| `eve logs show [logid]` / `eve logs list`      | Inspect local diagnostic logs                          |
+| `eve traces show [trace]` / `eve traces list`  | Inspect local traces                                   |
+| `eve link` / `eve deploy`                      | Link or deploy a Vercel project                        |
+| `eve eval`                                     | Run evals against a local or remote target             |
+| `eve add [item]` / `eve registry <command>`    | Install and browse registry items                      |
+| `eve extension <command>`                      | Create and build extension packages                    |
+| `eve telemetry <command>`                      | Manage CLI telemetry collection                        |
 
 When `eve build` fails on discovery errors, it prints the full diagnostics report (severity, message, source path) and the diagnostics artifact path.
 
@@ -101,19 +94,19 @@ Builds the complete agent-shaped extension tree into its configured dist root, e
 Change the root agent's AI Gateway model and reasoning effort without opening the dev TUI:
 
 ```bash
-eve set \
-  --model openai/gpt-6-sol \
-  --reasoning high
+eve set model openai/gpt-6-sol --reasoning high
+eve set model --reasoning medium
 ```
 
-Pass either flag by itself to change one setting. When you pass both, eve writes
-them to `agent/agent.ts` in one source edit. `--reasoning` accepts
+Use `eve set model` to change the model, its reasoning effort, or both. Omit
+the optional model argument to keep the current model. When you set both, eve
+writes them to `agent/agent.ts` in one source edit. `--reasoning` accepts
 `provider-default`, `none`, `minimal`, `low`, `medium`, `high`, or `xhigh`;
 `provider-default` removes the authored `reasoning` field.
 
 The command uses the same model ID validation and source editor as `/model` in
-the local dev TUI. It does not configure model credentials. The `--model` flag
-cannot rewrite models defined with `defineDynamic`, an environment expression,
+the local dev TUI. It does not configure model credentials. The `model`
+argument cannot rewrite models defined with `defineDynamic`, an environment expression,
 or a provider-authored SDK model; change those models in `agent.ts`.
 `--reasoning` can still update an editable root config when its model comes from
 an SDK call.
@@ -211,88 +204,99 @@ For self-hosted deployments, copy the app source, `.output/`, and installed depe
 
 ```bash
 eve dev [options]
-eve dev https://your-app.vercel.app
 ```
 
-Pass a bare URL and the UI connects to that server instead of booting a local one (same as `--url`), which lets you smoke-test a preview or production deployment. The interactive UI turns off in a non-TTY terminal.
-
-| Flag                                | Type   | Default            | Description                                                                               |
-| ----------------------------------- | ------ | ------------------ | ----------------------------------------------------------------------------------------- |
-| `--host <host>`                     | string | all interfaces     | Host interface to bind                                                                    |
-| `--port <port>`                     | number | `$PORT`, then 2000 | Port to listen on                                                                         |
-| `-u, --url <url>`                   | string | none               | Connect to an existing server URL instead of starting one                                 |
-| `-H, --header <header>`             | string | none               | Request header for a URL target, in `Name: value` form; repeat for multiple headers       |
-| `--no-ui`                           | flag   | UI on              | Start the server without an interactive UI                                                |
-| `--no-default-extensions`           | flag   | extensions on      | Do not mount bundled development extensions                                               |
-| `--name <name>`                     | string | app folder name    | Title shown in the terminal UI                                                            |
-| `--input <text>`                    | string | none               | Pre-fill the prompt input                                                                 |
-| `--tools <mode>`                    | enum   | `auto-collapsed`   | Tool-call rendering: `full` \| `collapsed` \| `auto-collapsed` \| `hidden`                |
-| `--reasoning <mode>`                | enum   | `full`             | Reasoning rendering: `full` \| `collapsed` \| `auto-collapsed` \| `hidden`                |
-| `--subagents <mode>`                | enum   | `auto-collapsed`   | Subagent-section rendering: `full` \| `collapsed` \| `auto-collapsed` \| `hidden`         |
-| `--connection-auth <mode>`          | enum   | `full`             | Connection-authorization rendering: `full` \| `collapsed` \| `auto-collapsed` \| `hidden` |
-| `--assistant-response-stats <mode>` | enum   | `tokensPerSecond`  | Assistant header statistic: `tokens` \| `tokensPerSecond`                                 |
-| `--context-size <tokens>`           | number | none               | Model context window size, shown as a usage percentage                                    |
-| `--logs <mode>`                     | enum   | `stderr`           | Server/agent logs to show: `all` \| `stderr` \| `sandbox` \| `none`                       |
+Starts a local development server and terminal UI. To connect the UI to an existing agent, use `eve remote connect --url <url>`.
+
+| Flag                                | Type   | Default            | Description                                 |
+| ----------------------------------- | ------ | ------------------ | ------------------------------------------- |
+| `--host <host>`                     | string | all interfaces     | Host interface to bind                      |
+| `--port <port>`                     | number | `$PORT`, then 2000 | Port to listen on                           |
+| `--no-ui`                           | flag   | UI on              | Start the server without an interactive UI  |
+| `--no-default-extensions`           | flag   | extensions on      | Do not mount bundled development extensions |
+| `--name <name>`                     | string | app folder name    | Title shown in the terminal UI              |
+| `--input <text>`                    | string | none               | Pre-fill the prompt input                   |
+| `--tools <mode>`                    | enum   | `auto-collapsed`   | Tool-call rendering                         |
+| `--reasoning <mode>`                | enum   | `full`             | Reasoning rendering                         |
+| `--subagents <mode>`                | enum   | `auto-collapsed`   | Subagent-section rendering                  |
+| `--connection-auth <mode>`          | enum   | `full`             | Connection-authorization rendering          |
+| `--assistant-response-stats <mode>` | enum   | `tokensPerSecond`  | Assistant header statistic                  |
+| `--context-size <tokens>`           | number | none               | Model context window size                   |
+| `--logs <mode>`                     | enum   | `stderr`           | Server and agent logs to show               |
 
 Local development mounts bundled development extensions without adding files to your project. Pass `--no-default-extensions` to disable them. See [Self-Modification](../guides/self-modification) for details.
 
-`eve acp` reserves stdin and stdout for newline-delimited JSON-RPC and sends diagnostics to stderr. Without a URL, it supervises an isolated local development server. With a URL, it bridges ACP to that server's existing eve HTTP API and accepts the same URL credentials and request headers as `eve dev <url>`. Pass `--scope <team>` when the active Vercel scope does not own the deployment; `EVE_VERCEL_SCOPE` provides the same value for managed harnesses. See [Agent Client Protocol (ACP)](../protocols/acp) for client configuration and capability limits.
-
 A fresh `eve init` opens the TUI and reuses an available model connection or opens `/login`. No Vercel project, channels, integrations, or review step is required before chat. Use `/model` to change models and settings, and `/add` to install an addition. Other `--input` text stays editable in the prompt. See [Terminal UI](../guides/dev-tui) for credential precedence and login options.
 
-For a URL target protected by HTTP Basic auth, put the credentials in the URL. eve sends them as a Basic `Authorization` header and strips them from the server URL before connecting:
+Local dev records the last ready URL per resolved app root in `.eve/dev-server-state.v1.json`. A second interactive `eve dev` reconnects only when that URL is loopback and healthy; each terminal UI creates a fresh client session while sharing the server process. A stale or malformed record is replaced when eve starts a new server. Passing `--host`, `--port`, or a `PORT` environment value skips reconnection and reports a healthy recorded server instead.
+
+Local dev keeps immutable runtime generations under `.eve/dev-runtime/snapshots/` so in-flight turns hold a consistent code revision while new turns pick up rebuilds. Each generation contains the compiled authored module graph and runtime resources rather than a recursive copy of the app or workspace. The terminal REPL keeps its logical session across successful rebuilds, so the next turn continues the conversation on the latest generation; `/new` terminally retires that session before clearing the transcript, and the next prompt starts a fresh session with a new session-scoped sandbox on first sandbox use. After a generation is superseded, `eve dev` retains it for at least 30 minutes and also retains the five most recently superseded generations, regardless of the configured Workflow World. The active generation is never pruned. Old runtime snapshots and local sandbox templates are pruned in the background. For manual cleanup, stop `eve dev` before deleting `.eve/dev-runtime/snapshots/` or `.eve/sandbox-cache/local/templates/`. A turn that remains unfinished beyond the automatic retention window can no longer resume after its generation is pruned.
+
+Local development records traces under `.eve/traces/` by default and bounds that store by age, size, and a keep-newest floor. Configure it with `EVE_TRACES*` in `.env.local`, or disable the destination with `agent/instrumentation/local.ts`; see [`eve traces`](#retention) for the rules and defaults.
+
+`eve acp` reserves stdin and stdout for newline-delimited JSON-RPC and sends diagnostics to stderr. Without a URL, it supervises an isolated local development server. With a URL, it bridges ACP to that server's existing eve HTTP API. See [Agent Client Protocol (ACP)](../protocols/acp) for client configuration and capability limits.
+
+## `eve remote`
+
+Use `eve remote` only with an explicit existing agent URL:
 
 ```bash
-eve dev https://user:pass@your-app.example.com
+eve remote connect --url https://agent.example.com
+eve remote invoke --url https://agent.example.com "Summarize station telemetry"
+eve remote info --url https://agent.example.com
 ```
 
-For bearer tokens or custom schemes, pass explicit headers with `-H`.
+`connect` opens the terminal UI. `info` verifies the target and prints its inspection response. Remote commands never start a local application.
+
+### `eve remote connect`
 
-### `eve invoke`
+```bash
+eve remote connect --url <url> [-H "Name: value"]
+```
 
-| Option                  | Type   | Default | Description                                     |
-| ----------------------- | ------ | ------- | ----------------------------------------------- |
-| `[prompt]`              | string | none    | Prompt, follow-up, or answer to a pending input |
-| `-u, --url <url>`       | string | local   | Invoke an existing server                       |
-| `-H, --header <header>` | string | none    | Request header for a URL target; repeatable     |
-| `--resume`              | flag   | off     | Read a previous resumable result from stdin     |
-| `--scope <team>`        | string | current | Vercel team that owns the URL target            |
-| `--json-schema`         | flag   | off     | Print the result JSON Schema and exit           |
+Use `-H, --header <header>` for a bearer token or another custom request header; repeat it for multiple headers. For HTTP Basic authentication, put credentials in the URL. eve sends them as a Basic `Authorization` header and removes them from the target URL.
 
-Use `eve invoke` to submit a turn without opening the TUI. It emits JSON after the invocation completes or reaches a blocking input or authorization event.
+### `eve remote invoke`
 
 ```bash
-eve invoke "Summarize station telemetry"
-result=$(eve invoke "Deploy the application")
-printf '%s' "$result" | eve invoke --resume "approve"
-eve invoke --json-schema
+eve remote invoke --url <url> [prompt] [--resume] [-H "Name: value"] [--scope <team>]
 ```
 
-`--resume` reads a complete previous result from stdin. Supply text for a `ready` follow-up or pending input; the agent harness resolves input text against all pending requests. A `ready` result includes the previous turn's completed or failed `outcome`. An `authorization-required` result lists every unresolved challenge in `authorizations`; complete them, then resume without text. Pass explicit headers again for protected remote servers. If the URL belongs to another Vercel team, pass its slug with `--scope`; this does not relink the current directory. Pass the scope again when resuming. Paused invocations exit `3`; failures exit `1`.
+Invokes an existing agent without opening the terminal UI. It emits JSON after the invocation completes or reaches a blocking input or authorization event.
 
-Local callback-based connection authorization requires a persistent server. Run `eve dev`, then use `eve invoke --url <dev-url>` instead. If a waiting invocation receives `SIGINT` or `SIGTERM` after acceptance, it emits a final resumable `running` result before exiting.
+| Option                  | Type   | Default  | Description                                     |
+| ----------------------- | ------ | -------- | ----------------------------------------------- |
+| `<url>`                 | string | required | Existing eve agent URL                          |
+| `[prompt]`              | string | none     | Prompt, follow-up, or answer to a pending input |
+| `-H, --header <header>` | string | none     | Request header for the URL target; repeatable   |
+| `--resume`              | flag   | off      | Read a previous resumable result from stdin     |
+| `--scope <team>`        | string | current  | Vercel team that owns the URL target            |
 
-Local dev records the last ready URL per resolved app root in `.eve/dev-server-state.v1.json`. A second interactive `eve dev` reconnects only when that URL is loopback and healthy; each terminal UI creates a fresh client session while sharing the server process. A stale or malformed record is replaced when eve starts a new server. Passing `--host`, `--port`, or a `PORT` environment value skips reconnection and reports a healthy recorded server instead.
+`--resume` reads a complete previous result from stdin. Supply text for a `ready` follow-up or pending input. An `authorization-required` result lists every unresolved challenge; complete them, then resume without text. Pass headers and scope again when resuming. Paused invocations exit `3`; failures exit `1`. If a waiting invocation receives `SIGINT` or `SIGTERM` after acceptance, it emits a final resumable `running` result before exiting.
 
-Local dev keeps immutable runtime generations under `.eve/dev-runtime/snapshots/` so in-flight turns hold a consistent code revision while new turns pick up rebuilds. Each generation contains the compiled authored module graph and runtime resources rather than a recursive copy of the app or workspace. The terminal REPL keeps its logical session across successful rebuilds, so the next turn continues the conversation on the latest generation; `/new` terminally retires that session before clearing the transcript, and the next prompt starts a fresh session with a new session-scoped sandbox on first sandbox use. After a generation is superseded, `eve dev` retains it for at least 30 minutes and also retains the five most recently superseded generations, regardless of the configured Workflow World. The active generation is never pruned. Old runtime snapshots and local sandbox templates are pruned in the background. For manual cleanup, stop `eve dev` before deleting `.eve/dev-runtime/snapshots/` or `.eve/sandbox-cache/local/templates/`. A turn that remains unfinished beyond the automatic retention window can no longer resume after its generation is pruned.
+### `eve remote info`
 
-Local development records traces under `.eve/traces/` by default and bounds that store by age, size, and a keep-newest floor. Configure it with `EVE_TRACES*` in `.env.local`, or disable the destination with `agent/instrumentation/local.ts`; see [`eve traces`](#retention) for the rules and defaults.
+```bash
+eve remote info --url <url> [-H "Name: value"] [--json]
+```
+
+Verifies the existing agent and prints its inspection response. Use `-H, --header <header>` for protected targets; repeat it for multiple headers.
 
 ## `eve logs`
 
 ```bash
 eve logs            # print the most recent diagnostic log
-eve logs ls         # list logs, most recent first
-eve logs <logid>    # print a specific log
+eve logs list          # list logs, most recent first
+eve logs show <logid>  # print a specific log
 eve logs --dump     # prepend the log's environment dump
 eve logs --events   # interleave session events from the local workflow store
 ```
 
 Each interactive `eve dev` process writes a private diagnostic log under `.eve/logs/` capturing stderr, stdout (including sandbox and rebuild lines), tool failures, workflow errors, and eve framework log records — regardless of what the transcript shows. The file is JSON Lines — every line is one JSON record with `at` and `source` fields. `eve logs` reads those files back.
 
-A log id is the file name without `.log` (for example `dev-2026-07-15T12-00-00.000Z-123`). `eve logs <logid>` also accepts the file name, the `.eve/logs/...` path printed in the dev transcript, or any unambiguous prefix of the id with or without the `dev-` lead — so `eve logs 2026-07-15` works when a single log matches. An ambiguous prefix fails and lists the candidates.
+A log id is the file name without `.log` (for example `dev-2026-07-15T12-00-00.000Z-123`). `eve logs show <logid>` also accepts the file name, the `.eve/logs/...` path printed in the dev transcript, or any unambiguous prefix of the id with or without the `dev-` lead — so `eve logs 2026-07-15` works when a single log matches. An ambiguous prefix fails and lists the candidates.
 
-`eve logs` prints nothing but records — no path banner on either stream — so `eve logs 2>&1 | jq -c .` always parses. Discover ids and file paths with `eve logs ls`; `eve logs ls --json` emits a machine-readable array with `id`, `path`, `startedAt`, and `sizeBytes`.
+`eve logs` prints nothing but records — no path banner on either stream — so `eve logs 2>&1 | jq -c .` always parses. Discover ids and file paths with `eve logs list`; `eve logs list --json` emits a machine-readable array with `id`, `path`, `startedAt`, and `sizeBytes`.
 
 `eve logs --events` resolves session events (`session.started`, `turn.failed`, message deltas, …) from the local workflow store (`.eve/.workflow-data`) at query time and interleaves them into the output by timestamp as `source: "event"` records — the log file itself never stores them, so nothing is duplicated at capture time. Selection is by the log's time window (its start through the next log's start), so events from concurrently running `eve dev` processes may appear.
 
@@ -301,10 +305,10 @@ Each log has a same-named `.dump` sibling holding environment diagnostics and se
 ## `eve traces`
 
 ```bash
-eve traces ls              # list traces, most recent first
-eve traces ls --json       # emit machine-readable trace summaries
-eve traces                 # show the most recent span tree
-eve traces <trace>         # show one span tree
+eve traces list              # list traces, most recent first
+eve traces list --json       # emit machine-readable trace summaries
+eve traces show         # show the most recent span tree
+eve traces show <trace> # show one span tree
 eve traces --verbose       # expand every span with all attributes and events
 eve traces --json          # dump the full trace as JSON
 ```
@@ -317,6 +321,8 @@ Every subagent activation starts its own trace. The first child's `invoke_agent`
 
 Each `agent()` call inside an authored workflow has its own `agent.action` caller span, including sequential, parallel, and background calls. A workflow tool that coordinates one of those calls has an enclosing `invoke_workflow <tool>` span; a workflow tool without agent calls remains `agent.action`. The tool also keeps its `execute_tool <tool>` span. Only agent execution uses `invoke_agent`.
 
+Outbound MCP `tools/call` requests add MCP semantic attributes to the matching `execute_tool` span. When eve has no tool span to enrich, it creates a `CLIENT` `tools/call <tool>` span. Each `tools/list` discovery also has a `CLIENT` span. Configured OpenTelemetry propagation fields are injected into MCP `params._meta` for JSON-RPC bodies up to 1 MiB and propagation metadata up to 8 KiB; larger requests are sent unchanged. eve removes its audience and session-lineage baggage before forwarding, and keeps the input/output content-capture policy local.
+
 A durable conversation produces one bounded trace per turn. Worker replacements reuse the prepared context for the same turn, while a later turn or an independently replayed attempt starts a fresh trace. Passing the conversation ID shows every trace it produced, oldest first.
 
 Every span carries a real duration. A turn's root `invoke_agent` span is written when the turn settles, so a running turn shows only its steps.
@@ -383,18 +389,6 @@ Runs all discovered evals when no eval ids are given; ids match exactly or by di
 
 See [Evals](../evals/overview) for authoring evals.
 
-## `eve channels list`
-
-```bash
-eve channels list [--json]
-```
-
-Lists the user-authored channels in the current project.
-
-| Flag     | Type | Default | Description    |
-| -------- | ---- | ------- | -------------- |
-| `--json` | flag | off     | Output as JSON |
-
 ## Recommended loop
 
 1. Edit files under `agent/`.

package/docs/schedules.mdx

@@ -14,7 +14,7 @@ Every schedule provides a `cron` and exactly one of `markdown` or `run`:
 ```ts
 interface ScheduleDefinition {
   cron: string;
-  markdown?: string; // fire-and-forget prompt (task mode)
+  markdown?: string; // fire-and-forget prompt
   run?: (args: ScheduleHandlerArgs) => Promise<void> | void; // handler
 }
 
@@ -33,7 +33,7 @@ A TypeScript schedule with `markdown` is compile-only because eve stores the pro
 
 ## Markdown form (fire-and-forget)
 
-This is the minimal schedule. eve runs the agent on the prompt and throws away the output, though the agent can still call tools, write to backends, and log along the way. We call this task mode. A task-mode session runs to completion or fails, and cannot park to wait for a person or an OAuth sign-in.
+This is the minimal schedule. eve runs the agent on the prompt and throws away the output, though the agent can still call tools, write to backends, and log along the way. The session has no channel, so it cannot ask a person for input, and nothing can send it a follow-up message. If the agent calls a tool that needs approval, the session fails instead of waiting for an answer. After its turn settles, the session parks like any other session until its [session timeout](./agent-config#runtime-limits) ends it.
 
 ```ts title="agent/schedules/heartbeat.ts"
 import { defineSchedule } from "eve/schedules";
@@ -86,7 +86,7 @@ The agent does not have to deliver a message on every run. When a prompt makes d
 
 The `auth` option controls which principal the session runs as. A handler may instead supply a user principal when scheduled work needs that user's grants; a session created by that dispatch still retains schedule provenance and conditional delivery behavior.
 
-A handler-form session runs on the same durable runtime engine as any other session, so it can park (durably suspend), for instance when the channel handoff is waiting for a Slack reply. Only markdown task mode is barred from waiting.
+A handler-form session runs on the same durable runtime engine as any other session, so it can park (durably suspend), for instance when the channel handoff is waiting for a Slack reply. Markdown-form sessions park too, but no channel is attached, so they cannot receive follow-up messages.
 
 ## Background task results
 
@@ -118,8 +118,7 @@ its policy unless the send supplies an explicit value.
 
 Under `"auto"`, a model call may finish silently while related work is pending.
 Available results remain in the next reporting context so the parent can combine
-previously withheld outputs later. A scheduled task-mode session stays alive while
-it owns pending background tasks. See
+previously withheld outputs later. See
 [Background task results](./channels/overview#background-task-results).
 
 ## Session continuity

package/docs/subagents/index.mdx

@@ -51,9 +51,8 @@ The root session receives `agent` by default. The model calls it to delegate a t
 
 ```ts
 {
-  message: string;       // everything the child needs; it does not see the parent's history
-  agentId?: string;      // continue or steer an existing child
-  outputSchema?: object; // require structured output for this turn
+  message: string;  // everything the child needs; it does not see the parent's history
+  agentId?: string; // continue or steer an existing child
 }
 ```
 
@@ -239,7 +238,7 @@ The root built-in `agent` tool is the exception. Its children reuse the root's s
 
 ## What the parent sees
 
-eve lowers every tool-enabled subagent visible to the current agent (the root built-in copy, declared, or [remote](./guides/remote-agents)) into a model-visible tool with the same `{ message, agentId?, outputSchema? }` shape. The parent packs `message` with everything the child needs, since the child never sees the parent's history. Set `outputSchema` to require structured output for that turn; the child remains available for follow-up messages afterward.
+eve lowers every tool-enabled subagent visible to the current agent (the root built-in copy, declared, or [remote](./guides/remote-agents)) into a model-visible tool with the same `{ message, agentId? }` shape. The parent packs `message` with everything the child needs, since the child never sees the parent's history. To require structured output from a child, call it from an authored workflow tool with [`ctx.agent(name, { message, outputSchema })`](./tools/workflows); the schema applies to that turn, and the child remains available for follow-up messages afterward.
 
 Declared subagents can call nested subagents defined under their own directories. eve does not apply a separate depth limit; nesting ends where the authored directory tree ends. The built-in `agent` follows the stricter root-only rule above, so `limits.maxSubagentDepth` no longer exists.
 
@@ -249,9 +248,8 @@ A directly declared subagent's tool name is the bare path-derived name, with no
 
 ```ts
 {
-  message: string;       // all context the child needs; it never sees the parent's history
-  agentId?: string;      // continue or steer an existing child
-  outputSchema?: object; // require structured output for this turn
+  message: string;  // all context the child needs; it never sees the parent's history
+  agentId?: string; // continue or steer an existing child
 }
 ```
 

package/docs/tools/human-in-the-loop.md

@@ -121,6 +121,8 @@ The `response` policy receives:
 
 Return `{ status: "allowed" }` to accept the approval. Return `{ status: "rejected", reason }` to leave the shared request pending so another eligible responder can approve it.
 
+When a response is refused without starting a turn, the session returns to `session.waiting`. The client finishes the submission and keeps the approval prompt answerable. Submitting an answer does not confirm approval: `approval.settled` or `input.resolved` records the server's decision. You can inspect `approval.candidate` events for the response policy's refusal reason.
+
 ### Skipping approval for schedule-dispatched turns
 
 `session.auth.current` identifies the caller of this turn. Markdown schedules use the app principal (`authenticator: "app"`, `principalId: "eve:app"`, `principalType: "runtime"`) automatically. A `run` schedule must pass its `appAuth` to `send(...)` for the child session to use that principal. Match all three fields to skip approval for automated turns while still prompting when a person calls the same tool:
@@ -197,6 +199,8 @@ Channels turn requests into native UI: the Slack adapter renders approvals as bu
 
 From your own frontend, scan all messages for pending requests and answer through the same session — see [Building a frontend](/docs/guides/frontend/overview#human-in-the-loop-prompts) for the client-side reducer and `inputResponses` shape.
 
+The default message reducer waits for server confirmation before marking any input request answered. Use the store's `submitted` or `streaming` status to show that a response is being processed; submitting a response alone does not resolve an approval, question, or session-limit prompt. The `client.input.responded` event remains a submission notification for custom reducers, not confirmation that the server accepted the answer.
+
 ## What to read next
 
 - [Tools](/docs/tools): define the typed actions an approval gates

package/docs/tools/overview.mdx

@@ -39,6 +39,8 @@ eve validates the model's input against `inputSchema` before `execute` runs:
 - eve treats `format` as an annotation and does not reject input for it.
 - When eve cannot evaluate a JSON Schema locally, for example because of an unknown `type` name or a `$ref` it cannot resolve, the model still receives the schema and eve passes the input to `execute` unvalidated.
 
+Optional input fields remain optional for authored tools and connection tools. eve explicitly disables provider strict mode for function tools so providers such as OpenAI Responses do not implicitly require every property. Local input validation still follows the tool's schema.
+
 ### Hide a tool from delegated agents
 
 Set `availableInSubagents: false` when a tool should be callable only in a top-level root session:

package/docs/tools/workflows.mdx

@@ -441,7 +441,7 @@ import { agentRouter } from "eve/tools/agent-router";
 export default agentRouter();
 ```
 
-Its input is `{ message: string, outputSchema?: object }`. `agentRouter()` ignores entries without a non-empty description. With two or more described targets, it sends the message and effective descriptions to Jev, then invokes the selected name through `ctx.agent()`. It invokes a sole target without evaluation and forwards an optional `outputSchema` unchanged. In a top-level root session, the candidates include the root-copy `agent`; delegated root copies and declared subagent contexts include only their declared targets.
+Its input is `{ message: string }`. `agentRouter()` ignores entries without a non-empty description. With two or more described targets, it sends the message and effective descriptions to Jev, then invokes the selected name through `ctx.agent()`. It invokes a sole target without evaluation. In a top-level root session, the candidates include the root-copy `agent`; delegated root copies and declared subagent contexts include only their declared targets.
 
 When an authored tool accepts a JSON Schema supplied by the model, represent that input with a permissive object such as `z.looseObject({})`. Avoid `z.record(z.string(), z.json())`: its generated JSON Schema uses `propertyNames`, which OpenAI does not support. Validate the supplied value at the point where your tool consumes it.
 

package/docs/tutorial/remember-definitions.mdx

@@ -65,7 +65,7 @@ export default defineTool({
 
 The sample data has two high-value customers: Acme ($57) and Globex ($99). This definition works with the same fixed dataset whenever you run the tutorial. The second turn is a separate turn in the same session, yet the definition is still there. State checkpoints at step boundaries, so it's the same durability from [Step 2](./how-it-runs), now applied to your own data.
 
-State is scoped to a session and isolated per agent, so a subagent starts with fresh state and never sees the parent's. Need to reset something each turn? Call `update(() => fresh)` in a lifecycle hook. More in [State](../concepts/state).
+State is scoped to a session and isolated per agent, so a subagent starts with fresh state and never sees the parent's. Need to clear the glossary each turn? Call `glossary.update(() => ({ terms: {} }))` in a lifecycle hook. More in [State](../concepts/state).
 
 → Next: [Team playbooks](./team-playbooks)
 

package/docs/tutorial/ship-it.mdx

@@ -116,7 +116,7 @@ Open the HTTPS preview URL and enter the configured username and password. Creat
 The authenticated web app and eve runtime share the same origin, and the sandbox runs on Vercel Sandbox. You can also smoke-test the deployment through the authenticated CLI:
 
 ```bash
-npx eve dev https://your-analytics-app.vercel.app
+npx eve remote connect --url https://your-analytics-app.vercel.app
 ```
 
 For a production deployment, add the username, password, and model credential to the Production environment too, then run `npx vercel@latest deploy --prod`. Missing Basic credentials keep browser access closed.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eve",
-  "version": "0.66.3",
+  "version": "0.67.1",
   "private": false,
   "description": "Filesystem-first framework for durable backend AI agents that run anywhere.",
   "keywords": [
@@ -510,13 +510,14 @@
     "@opentelemetry/otlp-transformer": "0.214.0",
     "@opentelemetry/sdk-trace-base": "2.6.1",
     "@photon-ai/chat-adapter-imessage": "3.2.0",
+    "@slack/web-api": "7.19.0",
     "@standard-schema/spec": "1.1.0",
     "@sveltejs/kit": "^2.0.0",
     "@types/json-schema": "7.0.15",
     "@types/react": "19.2.15",
     "@types/react-test-renderer": "19.1.0",
     "@vercel/blob": "2.8.0",
-    "@vercel/connect": "2.2.0",
+    "@vercel/connect": "2.3.3",
     "@vercel/detect-agent": "1.2.3",
     "@vercel/oidc": "3.8.0",
     "@vercel/otel": "2.1.3",

package/dist/src/cli/commands/channels.d.ts

@@ -1,9 +0,0 @@
-import type { ResolvedDiscoveryProject } from "#discover/project.js";
-export interface CliLogger {
-    error(message: string): void;
-    log(message: string): void;
-}
-export interface ListChannelsCommandOptions {
-    json?: boolean;
-}
-export declare function runChannelsListCommand(logger: CliLogger, project: ResolvedDiscoveryProject, options: ListChannelsCommandOptions): Promise<void>;

package/dist/src/cli/commands/channels.js

@@ -1 +0,0 @@
-import{listAuthoredChannels}from"#setup/scaffold/index.js";async function runChannelsListCommand(e,t,n){let r=await listAuthoredChannels(t.agentRoot);if(n.json){e.log(JSON.stringify({channels:r},null,2));return}if(r.length===0){e.log("No channels defined. Run `eve add <channel>` to add one.");return}for(let t of r)e.log(t)}export{runChannelsListCommand};

package/dist/src/cli/commands/init-confirm.d.ts

@@ -1,12 +0,0 @@
-import { type Prompter } from "#setup/prompter.js";
-export interface InitConfirmDependencies {
-    createPrompter(): Prompter;
-    hasInteractiveTerminal(): boolean;
-}
-export type InitNonEmptyDirectoryTarget = {
-    kind: "current-directory";
-} | {
-    kind: "subdirectory";
-    name: string;
-};
-export declare function confirmInitInNonEmptyDirectory(entries: readonly string[], dependencies?: InitConfirmDependencies): Promise<InitNonEmptyDirectoryTarget>;

package/dist/src/cli/commands/init-confirm.js

@@ -1 +0,0 @@
-import{hasInteractiveTerminal}from"./preconditions.js";import{createPrompter}from"#setup/prompter.js";import{parseProjectName,validateProjectName}from"#setup/project-name.js";const defaultDependencies={createPrompter,hasInteractiveTerminal};function formatEntries(e){return`${e.slice(0,5).join(`, `)}${e.length>5?`, and ${e.length-5} more`:``}`}async function confirmInitInNonEmptyDirectory(e,t=defaultDependencies){let n=formatEntries(e);if(!t.hasInteractiveTerminal())throw Error(`Cannot choose where to initialize the non-empty current directory without an interactive terminal. Found: ${n}. Pass a new directory name, for example: eve init my-agent.`);let r=t.createPrompter();if(await r.select({message:`Where should eve initialize the project?`,description:`The current directory isn't empty. Found: ${n}.`,options:[{value:`subdirectory`,label:`Create a new subdirectory`,hint:`Keep the current directory unchanged`},{value:`current-directory`,label:`Use the current directory`,hint:`Overwrite files at generated paths`,accent:`warning`}],initialValue:`subdirectory`})===`current-directory`)return{kind:`current-directory`};let i=await r.text({message:`Subdirectory name`,defaultValue:`my-agent`,validate:validateProjectName});return{kind:`subdirectory`,name:parseProjectName(i)}}export{confirmInitInNonEmptyDirectory};

package/dist/src/execution/effective-output-schema.d.ts

@@ -1,22 +0,0 @@
-import type { HarnessSession, StepInput } from "#harness/types.js";
-import type { JsonObject } from "#shared/json.js";
-import type { RunMode } from "#shared/run-mode.js";
-/**
- * Resolves the single output schema in effect for this turn, decoupling schema
- * enforcement from {@link RunMode}: downstream the harness reads
- * `session.outputSchema` unconditionally and never re-derives it from mode.
- *
- * A run-scoped (client-supplied) schema on the turn's {@link StepInput} always
- * wins. With no run-scoped schema, a task run adopts the agent's declared
- * return schema — its function-output contract, which only applies when the
- * agent is invoked directly as a task-mode schedule or job. Subagent
- * dispatch carries its declared schema as a run-scoped schema instead.
- * A conversation run with no run-scoped schema enforces nothing. Continuation
- * steps (no new `StepInput`) preserve whatever is already in effect.
- */
-export declare function resolveEffectiveOutputSchema(input: {
-    readonly agentOutputSchema: JsonObject | undefined;
-    readonly input: StepInput | undefined;
-    readonly mode: RunMode;
-    readonly session: HarnessSession;
-}): HarnessSession;

package/dist/src/execution/effective-output-schema.js

@@ -1 +0,0 @@
-function resolveEffectiveOutputSchema(e){let{agentOutputSchema:t,input:n,mode:r,session:i}=e;return n?.outputSchema===void 0?r===`task`&&i.outputSchema===void 0&&t!==void 0?{...i,outputSchema:t}:i:{...i,outputSchema:n.outputSchema}}export{resolveEffectiveOutputSchema};

package/dist/src/node_modules/.pnpm/@vercel_connect@2.2.0_@ai-sdk_mcp@2.0.52_zod@4.5.4__@auth_core@0.41.2_@chat-adapter_sla_3fe44d656b2dcd93a04011e80966afff/node_modules/@vercel/connect/dist/connector.js

@@ -1 +0,0 @@
-import{require_dist}from"../../../../../@vercel_oidc@3.8.8/node_modules/@vercel/oidc/dist/index.js";import"./internal/base-url.js";import"./token.js";require_dist();export{};

package/dist/src/setup/gateway-models.d.ts

@@ -1,10 +0,0 @@
-/**
- * Fetches the set of AI Gateway model ids, for validating a `--model` before
- * scaffolding. Routed through the (required) Vercel CLI — equivalent to:
- *
- *   vercel curl https://ai-gateway.vercel.sh/v1/models -- --silent | jq -r '.data[].id'
- *
- * Returns `null` when the catalog is unreachable (no `vercel`, not logged in, or
- * a malformed response) — callers must not block creation on it.
- */
-export declare function fetchGatewayModelIds(cwd: string): Promise<Set<string> | null>;

package/dist/src/setup/gateway-models.js

@@ -1 +0,0 @@
-import{captureVercel}from"#setup/primitives/index.js";import{buildPackageUserAgent}from"#internal/user-agent.js";import{AI_GATEWAY_MODELS_URL}from"#internal/gateway.js";async function fetchGatewayModelIds(e){let t=await captureVercel([`curl`,AI_GATEWAY_MODELS_URL,`--`,`--silent`,`--header`,`User-Agent: ${buildPackageUserAgent()}`],{cwd:e});if(!t.ok)return null;try{let e=JSON.parse(t.stdout);if(!Array.isArray(e.data))return null;let n=e.data.map(e=>e.id).filter(e=>typeof e==`string`);return new Set(n)}catch{return null}}export{fetchGatewayModelIds};

package/dist/src/shared/run-mode.d.ts

@@ -1,7 +0,0 @@
-/**
- * Execution mode for one runtime-owned run.
- *
- * Conversation runs may park and resume on follow-up input. Task runs must
- * finish within the current invocation and cannot wait for another message.
- */
-export type RunMode = "conversation" | "task";

package/dist/src/shared/run-mode.js

@@ -1 +0,0 @@
-export{};

package/dist/src/subagents/parent-result.d.ts

@@ -1,14 +0,0 @@
-/**
- * Pure helpers that project a delegated subagent's terminal output
- * into the runtime-action result shape its parent owner expects.
- * Lives in its own (non-directive) file to escape the workflow
- * step-proxy transform.
- */
-import type { RuntimeSubagentChildResult } from "#shared/action-types.js";
-/**
- * Builds the success-shaped {@link RuntimeSubagentChildResult}.
- * Returns `undefined` for root sessions (no parent to notify).
- */
-export declare function createDelegatedSubagentSuccessResult(serializedContext: Record<string, unknown>, output: unknown): RuntimeSubagentChildResult | undefined;
-/** Failure-path mirror of {@link createDelegatedSubagentSuccessResult}. */
-export declare function createDelegatedSubagentErrorResult(serializedContext: Record<string, unknown>, error: unknown): RuntimeSubagentChildResult | undefined;

package/dist/src/subagents/parent-result.js

@@ -1 +0,0 @@
-import{toErrorMessage}from"#shared/errors.js";import{CHANNEL_CONTEXT_KEY_NAME}from"#context/key-names.js";import{SUBAGENT_EXECUTION_FAILED}from"#subagents/agent-handle-errors.js";import{SUBAGENT_ADAPTER_KIND}from"#subagents/adapter-state.js";const ZERO_TOKEN_USAGE={cacheReadTokens:0,cacheWriteTokens:0,inputTokens:0,outputTokens:0};function createDelegatedSubagentSuccessResult(e,t){let n=e[CHANNEL_CONTEXT_KEY_NAME];if(n?.kind===SUBAGENT_ADAPTER_KIND)return{callId:String(n.state?.callId??``),kind:`subagent-result`,origin:`child`,outcome:{kind:`terminal`,result:{kind:`succeeded`,output:t},usageDelta:ZERO_TOKEN_USAGE},output:t,subagentName:String(n.state?.subagentName??``)}}function createDelegatedSubagentErrorResult(e,t){let n=createDelegatedSubagentSuccessResult(e,``);if(n===void 0)return;let r={code:SUBAGENT_EXECUTION_FAILED,message:toErrorMessage(t)};return{...n,isError:!0,outcome:{kind:`terminal`,result:{error:r,kind:`failed`},usageDelta:ZERO_TOKEN_USAGE},output:r}}export{createDelegatedSubagentErrorResult,createDelegatedSubagentSuccessResult};