eve 0.67.2 → 0.69.0

package/docs/guides/self-modification.md

@@ -19,6 +19,16 @@ Add a tool that converts temperatures between Celsius and Fahrenheit.
 
 The self-modification subagent changes the authored files in your project. Review the diff and test the new behavior as you would for any other source change. `eve dev` reloads changes while you work.
 
+## Change the self-modification model
+
+The subagent uses your agent's model by default. To give it a different model or reasoning level, ask for it directly:
+
+```text
+Switch the self-modification subagent to openai/gpt-6-sol with low reasoning.
+```
+
+The first time, this creates `agent/extensions/self-modification/extension.ts` with those settings. After that file exists, later changes edit it. You can also edit the file yourself: it accepts `model` and `reasoning` options.
+
 ## Run without self-modification
 
 Pass `--no-default-extensions` when you do not want `eve dev` to mount bundled development extensions:

package/docs/install-integrations.mdx

@@ -19,7 +19,7 @@ eve add memory/file
 
 If an item is not found, `eve add` searches the available catalogs and prints close matches without installing anything.
 
-Web Chat installs a shared Next.js application at `apps/web` for either a standalone agent or a selected member of an agent workspace. Choose **Vercel services** (recommended) to deploy Web Chat and agents as separate services, or **Next.js** to serve Web Chat and route agent requests through one Next.js app. Existing authored Next.js or Vercel configuration is preserved, and eve stops with manual composition guidance instead of overwriting it. See [Project Structure](./concepts/project-structure) for browser-app placement and [Next.js](./guides/frontend/nextjs) for Next.js-owned integration.
+Web Chat installs a shared Next.js application at `apps/web` for either a standalone agent or a selected member of an agent workspace. Choose **Vercel services** (recommended) to deploy Web Chat and agents as separate services, or **Next.js** to serve Web Chat and route agent requests through one Next.js app. Vercel services run locally without a linked Vercel project; link one when you are ready to deploy. Existing authored Next.js or Vercel configuration is preserved, and eve stops with manual composition guidance instead of overwriting it. See [Project Structure](./concepts/project-structure) for browser-app placement and [Next.js](./guides/frontend/nextjs) for Next.js-owned integration.
 
 If you do not know an item name yet, run `eve add` without an argument. Its help output shows how to search the registry with `eve registry search <query>`.
 

package/docs/instructions.mdx

@@ -86,7 +86,7 @@ See [Dynamic capabilities](./guides/dynamic-capabilities) for examples and failu
 
 [Compaction](./concepts/sessions-runs-and-streaming#compact-clear-and-reset) treats user-role instructions like ordinary conversation history, so a summary may replace their original text. Clear removes them with the rest of model-message history and does not rerun static or dynamic instructions. System-role instructions remain because they are outside history.
 
-Keep system-role content stable and place it before frequently changing context when practical. That gives providers the best opportunity to reuse a prompt prefix, but cache behavior and billing remain provider-specific. User-role instructions preserve the normal append-only message prefix. Framework announcements about available skills and background tasks are retained in user-role history: changed snapshots append after earlier steps instead of replacing the context sent with those steps. Unchanged announcements are skipped until history is cleared or compacted. eve does not promise a cache hit.
+Keep system-role content stable and place it before frequently changing context when practical. That gives providers the best opportunity to reuse a prompt prefix, but cache behavior and billing remain provider-specific. User-role instructions preserve the normal append-only message prefix. Framework announcements about available skills and parked agents are retained in user-role history: changed snapshots append after earlier steps instead of replacing the context sent with those steps. Unchanged announcements are skipped until history is cleared or compacted. eve does not promise a cache hit.
 
 ## Disclaimer
 

package/docs/patterns/multi-tenant-approvals.md

@@ -190,6 +190,6 @@ An approval durably pauses the session and a later request resumes it. Your HTTP
 - `POST /eve/v1/session/:sessionId`, including `inputResponses`;
 - `GET /eve/v1/session/:sessionId/stream`.
 
-Built-in approval confirms that a human with access to the session approved the call. It is not a four-eyes workflow that proves a different person or role approved it. For that requirement, create an application-owned approval request, notify eligible approvers through a channel, and have policy return allow only after that request records an authorized decision.
+Built-in approval confirms that a human with access to the session approved the call. To restrict who may respond, add an [approval response policy](/docs/human-in-the-loop#authorizing-approval-responses): it receives who responded as `response.principal` and who asked for the call as `request.principal`, and runs for both Approve and Cancel. For a four-eyes workflow, where a different person or role must approve, branch on `response.decision`: allow `cancel` so the requester can still withdraw the call, and for `approve` reject a `response.principal` that matches `request.principal` and check the responder's role.
 
 The complete eve integration is one async adapter reused by tools and both connection protocols. The tenant's rule storage and governance model remain application concerns.

package/docs/protocols/ucp.mdx

@@ -13,20 +13,20 @@ With eve, you can support UCP in three steps:
 
 ## Author the profile
 
-Your profile is a plain JSON object that follows the [UCP spec](https://ucp.dev/). This spec outlines the `version`, `services`, `payment_handlers` and `capabilities` of your business. It also includes `signing_keys`, the public keys agents use to verify your business's signed messages.
+Your profile is a plain JSON object that follows the [UCP spec](https://ucp.dev/2026-08-25/specification/overview#profile-structure). The `ucp` object declares the `version`, `services`, `capabilities`, and `payment_handlers` of your business. The top-level `keys` array lists the public keys agents use to verify your business's signed messages. It's a standard JWK Set, so the same document also works as a key source for [Web Bot Auth](https://ucp.dev/2026-08-25/specification/overview#deployment-patterns-for-wba-interop).
 
 ```ts
 // agent/ucp-profile.ts
 export const profile = {
   ucp: {
-    version: "2026-04-08",
+    version: "2026-08-25",
     services: {
       "dev.ucp.shopping": [
         {
-          version: "2026-04-08",
-          spec: "https://ucp.dev/2026-04-08/specification/overview",
+          version: "2026-08-25",
+          spec: "https://ucp.dev/2026-08-25/specification/overview",
           transport: "rest",
-          schema: "https://ucp.dev/2026-04-08/services/shopping/rest.openapi.json",
+          schema: "https://ucp.dev/2026-08-25/services/shopping/rest.openapi.json",
           endpoint: "https://your_deployment_url_here/ucp/shopping",
         },
       ],
@@ -34,9 +34,9 @@ export const profile = {
     capabilities: {
       "dev.ucp.shopping.checkout": [
         {
-          version: "2026-04-08",
-          spec: "https://ucp.dev/2026-04-08/specification/checkout",
-          schema: "https://ucp.dev/2026-04-08/schemas/shopping/checkout.json",
+          version: "2026-08-25",
+          spec: "https://ucp.dev/2026-08-25/specification/shopping/checkout",
+          schema: "https://ucp.dev/2026-08-25/schemas/shopping/checkout.json",
         },
       ],
     },
@@ -44,7 +44,7 @@ export const profile = {
       "dev.shopify.shop_pay": [
         {
           id: "shop_pay_1234",
-          version: "2026-04-08",
+          version: "2026-08-25",
           spec: "https://shopify.dev/ucp/shop-pay-handler",
           schema: "https://shopify.dev/ucp/schemas/shop-pay-config.json",
           available_instruments: [
@@ -57,14 +57,16 @@ export const profile = {
       "com.example.processor_tokenizer": [
         {
           id: "processor_tokenizer",
-          version: "2026-04-08",
+          version: "2026-08-25",
           spec: "https://example.com/specs/payments/processor_tokenizer-payment",
           schema: "https://example.com/schemas/payments/delegate-payment.json",
           available_instruments: [
             {
               type: "card",
               constraints: {
-                brands: ["visa", "mastercard"],
+                properties: {
+                  brand: { enum: ["visa", "mastercard"] },
+                },
               },
             },
           ],
@@ -72,7 +74,7 @@ export const profile = {
       ],
     },
   },
-  signing_keys: [
+  keys: [
     {
       kid: "business_2025",
       kty: "EC",
@@ -112,7 +114,7 @@ export default defineChannel({
 });
 ```
 
-- **Caching**: The spec requires `public` and a `max-age` of at least 60 seconds, and forbids `private`, `no-store`, and `no-cache`. See [Profile Requirements](https://ucp.dev/2026-04-08/specification/overview#hosting).
+- **Caching**: The spec requires `public` and a `max-age` of at least 60 seconds, and forbids `private`, `no-store`, and `no-cache`. See [Profile Requirements](https://ucp.dev/2026-08-25/specification/overview#hosting).
 - **CORS**: `cors: true` suits public discovery metadata. Pass a `cors` options object to narrow origins. See [CORS](../channels/custom#cors).
 - **HTTPS, no redirects**: The spec requires HTTPS and forbids 3xx responses on the profile endpoint.
 
@@ -130,13 +132,15 @@ export default defineChannel({
       const request = await req.json();
       // Create a checkout session per your published schema. Every UCP
       // response must carry the `ucp` envelope with the negotiated
-      // version and the capabilities active for this response.
+      // version and the capabilities active for this response. Checkout
+      // responses also require `payment_handlers`, even when empty.
       return Response.json({
         ucp: {
-          version: "2026-04-08",
+          version: "2026-08-25",
           capabilities: {
-            "dev.ucp.shopping.checkout": [{ version: "2026-04-08" }],
+            "dev.ucp.shopping.checkout": [{ version: "2026-08-25" }],
           },
+          payment_handlers: {},
         },
         id: "checkout_123",
         status: "incomplete",

package/docs/reference/cli.md

@@ -52,12 +52,12 @@ Existing packages do not need a target-selection prompt: run `eve init` from the
 
 After scaffolding in an interactive human terminal, eve opens the TUI directly. Pass `-n` or `--non-interactive` to return after scaffolding instead. It still installs dependencies and follows the normal Git setup behavior. Noninteractive and coding-agent invocations return without starting an interactive session. Fresh projects use the parent workspace's package manager when there is one; otherwise they use the manager that launched `eve init`.
 
-| Flag                    | Type   | Default                  | Description                                                                                                              |
-| ----------------------- | ------ | ------------------------ | ------------------------------------------------------------------------------------------------------------------------ |
-| `--model <model>`       | string | `openai/gpt-6-luna-fast` | Set the root agent's AI Gateway model ID.                                                                                |
-| `--reasoning <effort>`  | enum   | provider default         | Set reasoning to `none`, `minimal`, `low`, `medium`, `high`, or `xhigh`. `provider-default` leaves the field unauthored. |
-| `--channel-web-nextjs`  | flag   | off                      | Add the Web Chat app (Next.js). Not for existing projects — run `eve add channel/web` there instead.                     |
-| `-n, --non-interactive` | flag   | off                      | Scaffold and install dependencies without starting development.                                                          |
+| Flag                    | Type   | Default                                              | Description                                                                                                              |
+| ----------------------- | ------ | ---------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
+| `--model <model>`       | string | `openai/gpt-6-luna-fast`                             | Set the root agent's AI Gateway model ID.                                                                                |
+| `--reasoning <effort>`  | enum   | `high` without `--model`; otherwise provider default | Set reasoning to `none`, `minimal`, `low`, `medium`, `high`, or `xhigh`. `provider-default` leaves the field unauthored. |
+| `--channel-web-nextjs`  | flag   | off                                                  | Add the Web Chat app (Next.js). Not for existing projects — run `eve add channel/web` there instead.                     |
+| `-n, --non-interactive` | flag   | off                                                  | Scaffold and install dependencies without starting development.                                                          |
 
 ## `eve extension`
 
@@ -148,6 +148,59 @@ eve info [--json]
 
 Run this first when something behaves unexpectedly. It confirms a file was discovered, lists the active surface, and surfaces discovery diagnostics, all faster than booting the dev server. Static instructions appear in source order with their `system` or `user` role. Dynamic instruction results are runtime-only and do not appear here.
 
+### JSON output
+
+`eve info --json` prints one JSON object. Scripts and CI checks can read it instead of the files under `.eve/`:
+
+| Field              | Type             | Description                                                                               |
+| ------------------ | ---------------- | ----------------------------------------------------------------------------------------- |
+| `appRoot`          | string           | Application root                                                                          |
+| `agentRoot`        | string or `null` | Agent directory, or `null` when the project could not be compiled                         |
+| `layout`           | string or `null` | Project layout                                                                            |
+| `status`           | string           | Compile status, such as `ready` or `failed`; `unavailable` when nothing compiled          |
+| `diagnostics`      | object or `null` | Discovery diagnostic counts: `{ errors, warnings }`                                       |
+| `model`            | string or `null` | Root agent model id                                                                       |
+| `instructions`     | string or `null` | Static instruction files with their roles                                                 |
+| `skills`           | string[]         | Static skill names                                                                        |
+| `tools`            | string[]         | Root agent tool names                                                                     |
+| `toolInputSchemas` | object           | Each tool's input schema as eve sends it to the model (see below)                         |
+| `subagents`        | string[]         | Declared subagent names                                                                   |
+| `schedules`        | string[]         | Schedule names                                                                            |
+| `channels`         | object[]         | Effective channel routes: `{ name, kind, method, urlPath }`                               |
+| `messaging`        | object           | Session route patterns: `{ create, messages, stream }`                                    |
+| `artifacts`        | object or `null` | Paths to the compiled manifest, discovery manifest, diagnostics, module map, and metadata |
+
+`toolInputSchemas.root` maps each root agent tool name to its JSON Schema, including tools from mounted extensions under their namespaced names. `toolInputSchemas.subagents` has one entry for each declared subagent, including nested subagents, and each value is the same kind of map for that subagent's own tools. Each key is the subagent's path of names from the root agent: `forecaster` for a subagent the root agent declares, and `forecaster/reviewer` for a `reviewer` subagent that `forecaster` declares. Subagents that share a name under different parents get separate entries. Each schema is the form eve sends to the model: schemas from a validation library such as Zod have `additionalProperties: false` on objects that allow no other keys, plain JSON Schema is kept as written, and tools whose calls run as `serve` tasks, including agent tools, include the optional `taskId` input eve adds.
+
+```json
+{
+  "tools": ["get_weather"],
+  "toolInputSchemas": {
+    "root": {
+      "get_weather": {
+        "type": "object",
+        "properties": { "city": { "type": "string" } },
+        "required": ["city"],
+        "additionalProperties": false
+      }
+    },
+    "subagents": {
+      "forecaster": {},
+      "forecaster/reviewer": {
+        "check_source": {
+          "type": "object",
+          "properties": { "url": { "type": "string" } },
+          "required": ["url"],
+          "additionalProperties": false
+        }
+      }
+    }
+  }
+}
+```
+
+`toolInputSchemas` covers only tools compiled from tool files. It does not include provider-managed tools such as `web_search`, dynamic tools, connection tools, the tools eve generates at runtime for each subagent and remote agent, or the `task_wait` and `task_cancel` tools. Model providers can also transform a schema before the model reads it; those changes are not reflected here. To compute the same form for an input schema in your own code, such as in a test, call `serializeModelInputSchema(schema)` from `eve/tools`; it returns JSON Schema data and does not add `taskId`.
+
 ## `eve build`
 
 ```bash
@@ -208,26 +261,29 @@ eve dev [options]
 
 Starts a local development server and terminal UI. To connect the UI to an existing agent, use `eve remote connect --url <url>`.
 
-| Flag                                | Type   | Default            | Description                                 |
-| ----------------------------------- | ------ | ------------------ | ------------------------------------------- |
-| `--host <host>`                     | string | all interfaces     | Host interface to bind                      |
-| `--port <port>`                     | number | `$PORT`, then 2000 | Port to listen on                           |
-| `--no-ui`                           | flag   | UI on              | Start the server without an interactive UI  |
-| `--no-default-extensions`           | flag   | extensions on      | Do not mount bundled development extensions |
-| `--name <name>`                     | string | app folder name    | Title shown in the terminal UI              |
-| `--input <text>`                    | string | none               | Pre-fill the prompt input                   |
-| `--tools <mode>`                    | enum   | `auto-collapsed`   | Tool-call rendering                         |
-| `--reasoning <mode>`                | enum   | `full`             | Reasoning rendering                         |
-| `--subagents <mode>`                | enum   | `auto-collapsed`   | Subagent-section rendering                  |
-| `--connection-auth <mode>`          | enum   | `full`             | Connection-authorization rendering          |
-| `--assistant-response-stats <mode>` | enum   | `tokensPerSecond`  | Assistant header statistic                  |
-| `--context-size <tokens>`           | number | none               | Model context window size                   |
-| `--logs <mode>`                     | enum   | `stderr`           | Server and agent logs to show               |
+| Flag                                | Type   | Default            | Description                                                     |
+| ----------------------------------- | ------ | ------------------ | --------------------------------------------------------------- |
+| `--host <host>`                     | string | all interfaces     | Host interface to bind                                          |
+| `--port <port>`                     | number | `$PORT`, then 2000 | Port to listen on                                               |
+| `--no-ui`                           | flag   | UI on              | Start the server without an interactive UI                      |
+| `--resume`                          | flag   | off                | Attempt recovery of retained runs from previous dev invocations |
+| `--no-default-extensions`           | flag   | extensions on      | Do not mount bundled development extensions                     |
+| `--name <name>`                     | string | app folder name    | Title shown in the terminal UI                                  |
+| `--input <text>`                    | string | none               | Pre-fill the prompt input                                       |
+| `--tools <mode>`                    | enum   | `auto-collapsed`   | Tool-call rendering                                             |
+| `--reasoning <mode>`                | enum   | `full`             | Reasoning rendering                                             |
+| `--subagents <mode>`                | enum   | `collapsed`        | Subagent task rendering: `full`, `collapsed`, or `hidden`       |
+| `--connection-auth <mode>`          | enum   | `full`             | Connection-authorization rendering                              |
+| `--assistant-response-stats <mode>` | enum   | `tokensPerSecond`  | Assistant header statistic                                      |
+| `--context-size <tokens>`           | number | none               | Model context window size                                       |
+| `--logs <mode>`                     | enum   | `stderr`           | Server and agent logs to show                                   |
 
 Local development mounts bundled development extensions without adding files to your project. Pass `--no-default-extensions` to disable them. See [Self-Modification](../guides/self-modification) for details.
 
 A fresh `eve init` opens the TUI and reuses an available model connection or opens `/login`. No Vercel project, channels, integrations, or review step is required before chat. Use `/model` to change models and settings, and `/add` to install an addition. Other `--input` text stays editable in the prompt. See [Terminal UI](../guides/dev-tui) for credential precedence and login options.
 
+### Local development lifecycle
+
 Local dev records the last ready URL per resolved app root in `.eve/dev-server-state.v1.json`. A second interactive `eve dev` reconnects only when that URL is loopback and healthy; each terminal UI creates a fresh client session while sharing the server process. A stale or malformed record is replaced when eve starts a new server. Passing `--host`, `--port`, or a `PORT` environment value skips reconnection and reports a healthy recorded server instead.
 
 Local dev keeps immutable runtime generations under `.eve/dev-runtime/snapshots/` so in-flight turns hold a consistent code revision while new turns pick up rebuilds. Each generation contains the compiled authored module graph and runtime resources rather than a recursive copy of the app or workspace. The terminal REPL keeps its logical session across successful rebuilds, so the next turn continues the conversation on the latest generation; `/new` terminally retires that session before clearing the transcript, and the next prompt starts a fresh session with a new session-scoped sandbox on first sandbox use. After a generation is superseded, `eve dev` retains it for at least 30 minutes and also retains the five most recently superseded generations, regardless of the configured Workflow World. The active generation is never pruned. Old runtime snapshots and local sandbox templates are pruned in the background. For manual cleanup, stop `eve dev` before deleting `.eve/dev-runtime/snapshots/` or `.eve/sandbox-cache/local/templates/`. A turn that remains unfinished beyond the automatic retention window can no longer resume after its generation is pruned.
@@ -236,6 +292,24 @@ Local development records traces under `.eve/traces/` by default and bounds that
 
 `eve acp` reserves stdin and stdout for newline-delimited JSON-RPC and sends diagnostics to stderr. Without a URL, it supervises an isolated local development server. With a URL, it bridges ACP to that server's existing eve HTTP API. See [Agent Client Protocol (ACP)](../protocols/acp) for client configuration and capability limits.
 
+### Local workflow recovery
+
+With the built-in local Workflow World, a new `eve dev` server leaves previous invocations' runs dormant by default, including deliveries triggered by timers or hooks. A new message or control request addressed to a dormant conversation fails instead of being accepted without a response; the HTTP channel reports its usual request failure. Start a new conversation, or restart `eve dev` with `--resume` to attempt recovery. Already-open event streams are not changed by this request guard. Source-watcher rebuilds and worker restarts within the same server retain current runs' eligibility.
+
+Pass `eve dev --resume` to attempt recovery of unfinished runs from previous invocations. Recovery requires a retained snapshot with readable generation metadata. Snapshots from older eve versions with a valid `runtimeAppRoot` remain eligible. Changes to the eve framework or authored workflow sources do not prevent the attempt, but replay can fail and leave the run terminally failed after executing some work. Use `--resume` only when you want to try continuing those previous runs.
+
+Runs with malformed generation metadata remain stored and dormant for that server invocation, including later timer and hook deliveries. Startup with `--resume` reports why recovery was skipped without blocking other eligible runs. Restore malformed snapshot metadata from a backup or start a new session.
+
+Recovery eligibility is decided before startup queue delivery begins. Hot reload does not recheck admitted runs against the latest workflow sources, so follow-up turns, cancellation, and `/new` retain their existing behavior. Changing an authored workflow body while it is running can likewise cause replay failure.
+
+With the built-in local Workflow World, `eve dev` cancels unfinished runs whose runtime snapshots are missing, at startup and after snapshot pruning. This includes waiting conversations and session timeout workflows. Cancellation records the reason in the run history without a terminal warning; normal run-data retention still applies. Stopping `eve dev` does not cancel runs whose snapshots remain available, but recovering them on the next start requires `--resume`.
+
+Recovery limits:
+
+- Custom Workflow Worlds do not use this cleanup and recovery policy; `eve dev --resume` rejects them.
+- `eve dev --resume` refuses to attach to an already running local server. The flag requires starting a server.
+- `eve dev --resume` recovers workflows, not the terminal transcript or a particular TUI conversation.
+
 ## `eve remote`
 
 Use `eve remote` only with an explicit existing agent URL:
@@ -319,7 +393,7 @@ Span rows carry inline metrics when the span recorded them — `↑input`/`↓ou
 
 Every subagent activation starts its own trace. The first child's `invoke_agent` root links to the dispatching caller with `eve.link.type=agent.dispatch`; remote agents preserve that caller in W3C `tracestate` even when HTTP `traceparent` advances through platform ingress. Later turns also start fresh traces without repeating the initial caller link. All related sessions retain the same `gen_ai.conversation.id`, and `agent.subagent.name` labels the child invocation.
 
-Each `agent()` call inside an authored workflow has its own `agent.action` caller span, including sequential, parallel, and background calls. A workflow tool that coordinates one of those calls has an enclosing `invoke_workflow <tool>` span; a workflow tool without agent calls remains `agent.action`. The tool also keeps its `execute_tool <tool>` span. Only agent execution uses `invoke_agent`.
+Each workflow tool call has one `agent.action` span and keeps its `execute_tool <tool>` span. Sessions the tool opens with `ctx.agent` link to that call's `agent.action` span as their dispatching caller; individual `ctx.agent` calls get no span of their own. Only agent execution uses `invoke_agent`.
 
 Outbound MCP `tools/call` requests add MCP semantic attributes to the matching `execute_tool` span. When eve has no tool span to enrich, it creates a `CLIENT` `tools/call <tool>` span. Each `tools/list` discovery also has a `CLIENT` span. Configured OpenTelemetry propagation fields are injected into MCP `params._meta` for JSON-RPC bodies up to 1 MiB and propagation metadata up to 8 KiB; larger requests are sent unchanged. eve removes its audience and session-lineage baggage before forwarding, and keeps the input/output content-capture policy local.
 

package/docs/reference/typescript-api.md

@@ -57,7 +57,7 @@ export default defineTool({
 | `mockModel`                                           | `eve/evals`                                                             | Deterministic fixture agent models                                                     | [Evals](../evals/overview)                             |
 | `useEveAgent`                                         | `eve/react`, `eve/vue`, `eve/svelte`                                    | frontend                                                                               | [Frontend](../guides/frontend/overview)                |
 
-Tool-wide authoring helpers and types such as `defineTool`, `defineWorkflowTool`, `defineDurableCallback`, `defineDurableSchema`, `defineDynamic`, `disableTool`, and `ToolLabelDefinition` come from `eve/tools`. Capability-specific definitions and helpers use their own subpaths (see [Built-in tools](../concepts/built-in-tools)): reusable definitions such as `bash` and `glob` come from `eve/tools/<name>`, `webSearch` comes from `eve/tools/web_search`, `agentRouter` comes from `eve/tools/agent-router`, `sleep` comes from `eve/tools/sleep`, and approval policies and types come from `eve/tools/approval`. The route verbs `GET`/`HEAD`/`POST`/`PUT`/`PATCH`/`DELETE`/`OPTIONS`/`WS` plus `disableRoute` come from `eve/channels`, and the channel auth helpers `localDev`/`vercelOidc`/`placeholderAuth` come from `eve/channels/auth`.
+Tool-wide authoring helpers and types such as `defineTool`, `defineWorkflowTool`, `defineDurableCallback`, `defineDurableSchema`, `defineDynamic`, `disableTool`, and `ToolLabelDefinition` come from `eve/tools`. Capability-specific definitions and helpers use their own subpaths (see [Built-in tools](../concepts/built-in-tools)): reusable definitions such as `bash` and `glob` come from `eve/tools/<name>`, `webSearch` comes from `eve/tools/web_search`, `agentRouter` comes from `eve/tools/agent-router`, `sleep` comes from `eve/tools/sleep`, `noReply` comes from `eve/tools/no_reply`, and approval policies and types come from `eve/tools/approval`. The route verbs `GET`/`HEAD`/`POST`/`PUT`/`PATCH`/`DELETE`/`OPTIONS`/`WS` plus `disableRoute` come from `eve/channels`, and the channel auth helpers `localDev`/`vercelOidc`/`placeholderAuth` come from `eve/channels/auth`.
 
 `AgentReasoningDefinition` is exported from `eve` for the top-level `defineAgent({ reasoning })` setting. `AgentLimitsDefinition` is exported for `defineAgent({ limits })`. `AgentWorkflowDefinition`, `AgentWorkflowRetentionDefinition`, and `AgentWorkflowWorldDefinition` are exported from `eve` for the `defineAgent({ experimental: { workflow } })` config shape. `WebSearchToolInput` and `WebSearchProvider` are exported from `eve/tools/web_search`.
 
@@ -108,49 +108,51 @@ import template from "../../prompts/template.txt?raw";
 | `ctx.getToken(provider)`    | Resolve a bearer token for an inline auth provider such as `connect("...")`  |
 | `ctx.requireAuth(provider)` | Evict and re-authorize an inline provider, commonly after a downstream `401` |
 
-Tool definitions accept `availableInSubagents: false` to restrict the tool to top-level root sessions. Authored workflow bodies also receive `ctx.agents`, a replay-stable map of callable-agent metadata, and `ctx.agent(name, input)` for invocation. A `"use step"` helper that receives the context directly should type it as `WorkflowStepToolContext`, which excludes `agents`, `agent`, and `ask`. The root-copy `agent` entry has an empty description when the root omits `description`. See [Workflows as tools](../tools/workflows#delegate-work-ctxagent) for the workflow-only context.
+Tool definitions accept `availableInSubagents: false` to restrict the tool to top-level root sessions. `defineTool` definitions accept `endsTurn: true`, or a function that receives the `execute` output, to end the turn without a reply after a successful call; see [Tools](../tools#end-the-turn-after-a-tool-call). Authored workflow bodies also receive `ctx.agents`, a replay-stable map of callable-agent metadata, and `ctx.agent(name)`, which returns an `AgentSession` whose `send(message, options?)` resolves to a response with `result()`. A `"use step"` helper that receives the context directly should type it as `WorkflowStepToolContext`, which excludes `agents`, `agent`, and `ask`. The root-copy `agent` entry has an empty description when the root omits `description`. See [Workflows as tools](../tools/workflows#delegate-work-ctxagent) for the workflow-only context.
 
 ## Imports at a glance
 
-| Import                                                                 | Holds                                                                                                                          |
-| ---------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
-| `eve`                                                                  | `defineAgent`, `defineRemoteAgent`, `defineDynamic`, agent config types                                                        |
-| `eve/tools`                                                            | `defineTool`, `defineWorkflowTool`, `defineDurableCallback`, `defineDurableSchema`, `defineDynamic`, `disableTool`, tool types |
-| `eve/tools/{bash,read_file,write_file,web_fetch,load_skill,glob,grep}` | Individual reusable tool definitions                                                                                           |
-| `eve/tools/approval`                                                   | Approval types and `auto`, `always`, `once`, `never`                                                                           |
-| `eve/tools/ask_question`                                               | Opt-in `askQuestion` tool factory                                                                                              |
-| `eve/tools/web_search`                                                 | Provider-managed `webSearch` configuration                                                                                     |
-| `eve/tools/workflow`                                                   | Runtime-generated `workflow` tool factory                                                                                      |
-| `eve/tools/sleep`                                                      | Opt-in durable `sleep` tool                                                                                                    |
-| `eve/connections`                                                      | `defineMcpClientConnection`, `defineOpenAPIConnection`, `defineDynamic`                                                        |
-| `eve/channels`                                                         | `defineChannel`, `disableRoute`, route verbs                                                                                   |
-| `eve/channels/eve`                                                     | `eveChannel`                                                                                                                   |
-| `eve/channels/auth`                                                    | `localDev`, `vercelOidc`, `placeholderAuth`                                                                                    |
-| `eve/channels/{slack,discord,teams,telegram,twilio,github}`            | platform channel factories                                                                                                     |
-| `eve/hooks`                                                            | `defineHook`                                                                                                                   |
-| `eve/schedules`                                                        | `defineSchedule`                                                                                                               |
-| `eve/skills`                                                           | `defineSkill`, `defineDynamic`                                                                                                 |
-| `eve/instructions`                                                     | `defineInstructions`, `defineDynamic`                                                                                          |
-| `eve/memory`                                                           | `defineMemory`, `defineMemoryProvider`, provider and lifecycle types                                                           |
-| `eve/memory/scope`                                                     | `byPrincipal` and memory scope helpers                                                                                         |
-| `eve/memory/file`                                                      | `fileMemory`, `inMemory`, and the conditional document backend contract                                                        |
-| `eve/memory/file/vercel`                                               | `vercelBlob` and Vercel Blob backend options                                                                                   |
-| `eve/context`                                                          | `defineState`, session and state types                                                                                         |
-| `eve/sandbox`                                                          | `defineSandbox`, provider environments, and sandbox session types                                                              |
-| `eve/instrumentation`                                                  | `defineInstrumentation`, `disableInstrumentation`, `isChannel`, lifecycle provider types                                       |
-| `eve/instrumentation/otel`                                             | `otel`, `otelIntegration`, `localTraces`, `agentRuns`, OpenTelemetry policy types                                              |
-| `eve/local-dev`                                                        | `getLocalDevCapability`, `LocalDevCapability`                                                                                  |
-| [`eve/models`](../guides/evaluate)                                     | Automatic model selection with `auto`                                                                                          |
-| `eve/models/openai`                                                    | `openai`, `chatgpt`, deprecated `experimental_chatgpt`                                                                         |
-| `eve/models/anthropic`                                                 | `anthropic`                                                                                                                    |
-| [`eve/ai`](../guides/evaluate#evaluate-inside-a-tool)                  | Standalone `evaluate`                                                                                                          |
-| `eve/evals`                                                            | `defineEval`, `defineEvalConfig`, `mockModel`, eval types                                                                      |
-| `eve/evals/expect`                                                     | `includes`, `equals`, `matches`, `similarity`                                                                                  |
-| `eve/evals/reporters`                                                  | `Braintrust`, `JUnit`, `EvalReporter`                                                                                          |
-| `eve/evals/loaders`                                                    | `loadJson`, `loadYaml`                                                                                                         |
-| `eve/react`, `eve/vue`, `eve/svelte`                                   | `useEveAgent`                                                                                                                  |
-| `eve/next`, `eve/nuxt`, `eve/sveltekit`                                | framework bundler plugins                                                                                                      |
-| [`eve/client`](../guides/client/overview)                              | `Client`, `ClientSession`, health and agent-info schemas, response errors                                                      |
+| Import                                                                            | Holds                                                                                                                          |
+| --------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
+| `eve`                                                                             | `defineAgent`, `defineRemoteAgent`, `defineDynamic`, agent config types                                                        |
+| `eve/tools`                                                                       | `defineTool`, `defineWorkflowTool`, `defineDurableCallback`, `defineDurableSchema`, `defineDynamic`, `disableTool`, tool types |
+| `eve/tools/{bash,read_file,write_file,web_fetch,load_skill,glob,grep}`            | Individual reusable tool definitions                                                                                           |
+| `eve/tools/approval`                                                              | Approval types and `auto`, `always`, `once`, `never`                                                                           |
+| `eve/tools/ask_question`                                                          | Opt-in `askQuestion` tool factory                                                                                              |
+| `eve/tools/web_search`                                                            | Provider-managed `webSearch` configuration                                                                                     |
+| `eve/tools/workflow`                                                              | Runtime-generated `workflow` tool factory                                                                                      |
+| `eve/tools/sleep`                                                                 | Opt-in durable `sleep` tool                                                                                                    |
+| `eve/tools/no_reply`                                                              | Opt-in `noReply` tool factory                                                                                                  |
+| `eve/connections`                                                                 | `defineMcpClientConnection`, `defineOpenAPIConnection`, `defineDynamic`                                                        |
+| `eve/channels`                                                                    | `defineChannel`, `disableRoute`, route verbs                                                                                   |
+| `eve/channels/eve`                                                                | `eveChannel`                                                                                                                   |
+| `eve/channels/auth`                                                               | `localDev`, `vercelOidc`, `placeholderAuth`                                                                                    |
+| `eve/channels/{slack,discord,teams,telegram,twilio,github}`                       | platform channel factories                                                                                                     |
+| `eve/hooks`                                                                       | `defineHook`                                                                                                                   |
+| `eve/schedules`                                                                   | `defineSchedule`                                                                                                               |
+| `eve/skills`                                                                      | `defineSkill`, `defineDynamic`                                                                                                 |
+| `eve/instructions`                                                                | `defineInstructions`, `defineDynamic`                                                                                          |
+| `eve/memory`                                                                      | `defineMemory`, `defineMemoryProvider`, provider and lifecycle types                                                           |
+| `eve/memory/scope`                                                                | `byPrincipal` and memory scope helpers                                                                                         |
+| `eve/memory/file`                                                                 | `fileMemory`, `inMemory`, and the conditional document backend contract                                                        |
+| `eve/memory/file/vercel`                                                          | `vercelBlob` and Vercel Blob backend options                                                                                   |
+| `eve/context`                                                                     | `defineState`, session and state types                                                                                         |
+| `eve/sandbox`                                                                     | `defineSandbox`, provider environments, and sandbox session types                                                              |
+| `eve/instrumentation`                                                             | `defineInstrumentation`, `disableInstrumentation`, `isChannel`, lifecycle provider types                                       |
+| `eve/instrumentation/otel`                                                        | `otel`, `otelIntegration`, `localTraces`, `agentRuns`, OpenTelemetry policy types                                              |
+| `eve/local-dev`                                                                   | `getLocalDevCapability`, `LocalDevCapability`                                                                                  |
+| [`eve/models`](../guides/evaluate)                                                | Automatic model selection with `auto`                                                                                          |
+| `eve/models/openai`                                                               | `openai`, `chatgpt`, deprecated `experimental_chatgpt`                                                                         |
+| `eve/models/anthropic`                                                            | `anthropic`                                                                                                                    |
+| [`eve/ai`](../guides/evaluate#evaluate-inside-a-tool)                             | Standalone `evaluate`                                                                                                          |
+| `eve/evals`                                                                       | `defineEval`, `defineEvalConfig`, `mockModel`, eval types                                                                      |
+| `eve/evals/expect`                                                                | `includes`, `equals`, `matches`, `similarity`                                                                                  |
+| `eve/evals/reporters`                                                             | `Braintrust`, `JUnit`, `EvalReporter`                                                                                          |
+| `eve/evals/loaders`                                                               | `loadJson`, `loadYaml`                                                                                                         |
+| `eve/react`, `eve/vue`, `eve/svelte`                                              | `useEveAgent`                                                                                                                  |
+| `eve/next`, `eve/nuxt`, `eve/sveltekit`                                           | framework bundler plugins                                                                                                      |
+| [`eve/client`](../guides/client/overview)                                         | `Client`, `ClientSession`, health and agent-info schemas, response errors                                                      |
+| [`eve/server`](../concepts/sessions-runs-and-streaming#read-a-session-in-process) | `sessions`, for reading session streams in process                                                                             |
 
 Exported types ship from the same entrypoint as the helper they describe (for example `ToolDefinition` and `ToolContext` from `eve/tools`). The `exports` field in `packages/eve/package.json` lists every public entrypoint.
 

package/docs/schedules.mdx

@@ -69,57 +69,37 @@ export default defineSchedule({
   cron: "* * * * *",
   async run({ to, waitUntil, appAuth }) {
     waitUntil(
-      to(slack, { channelId: "C0123ABC" }).send(
-        "Check for new critical alerts. Report only when there are any.",
-        { auth: appAuth },
-      ),
+      to(slack, { channelId: "C0123ABC" }).send("Summarize the new critical alerts.", {
+        auth: appAuth,
+      }),
     );
   },
 });
 ```
 
-The agent does not have to deliver a message on every run. When a prompt makes delivery conditional, as in the alert check above, eve tells the agent how to finish successfully without sending anything to the channel. Frequent polling schedules do not need a separate filter or delivery setting.
+Every run delivers the agent's reply to the channel. To skip a run when there is nothing to report, check that condition in the handler before calling `send`. When only the agent can tell, add the opt-in [`no_reply`](/docs/concepts/built-in-tools#no_reply) tool and ask the agent to call it when there is nothing to report; the run then posts nothing.
 
 - `to(channel, target).send(message, { auth })`: starts a session on another channel. It has the same contract as a route handler's `ctx.to(...)` handle.
 - `waitUntil(promise)`: extends the cron task's lifetime so the parked session and any in-flight fetches settle before the task ends. Wrap the `send` call in it.
 - `appAuth`: the app principal (`{ authenticator: "app", principalId: "eve:app", principalType: "runtime" }`). Pass it as `to(...).send(..., { auth: appAuth })` for work the agent does on its own behalf.
 
-The `auth` option controls which principal the session runs as. A handler may instead supply a user principal when scheduled work needs that user's grants; a session created by that dispatch still retains schedule provenance and conditional delivery behavior.
-
-A handler-form session runs on the same durable runtime engine as any other session, so it can park (durably suspend), for instance when the channel handoff is waiting for a Slack reply. Markdown-form sessions park too, but no channel is attached, so they cannot receive follow-up messages.
+The `auth` option controls which principal the session runs as. A handler may instead supply a user principal when scheduled work needs that user's grants; a session created by that dispatch still retains schedule provenance.
 
-## Background task results
+### Detect the app principal
 
-New sessions started by schedules default to `"cohort"`: background
-outcomes wait for overlapping tasks to settle before waking the parent. To report
-independently useful results as they arrive, pass `taskDeliveryPolicy: "auto"` to
-`send(...)` inside a schedule handler:
+`isScheduleAuth(auth)` returns `true` when `auth` is the app principal that schedules pass as `appAuth` and that markdown-form sessions run as. Use it in tools, hooks, or channel handlers to treat the agent's own work differently from a user's:
 
-```ts title="agent/schedules/digest.ts"
-import { defineSchedule } from "eve/schedules";
-import slack from "../channels/slack";
+```ts
+import { isScheduleAuth } from "eve/schedules";
 
-export default defineSchedule({
-  cron: "0 9 * * *",
-  run({ to, waitUntil, appAuth }) {
-    waitUntil(
-      to(slack, { channelId: "C0123ABC" }).send("Prepare the daily reports.", {
-        auth: appAuth,
-        taskDeliveryPolicy: "auto",
-      }),
-    );
-  },
-});
+if (isScheduleAuth(ctx.session.auth.current)) {
+  // The turn runs as the app principal, not as a user.
+}
 ```
 
-The option belongs to `send(...)`. Markdown schedules use the `"cohort"` default;
-use a handler when you need to override it. Sending to an existing session preserves
-its policy unless the send supplies an explicit value.
+`isScheduleAuth` identifies the principal, not how the turn started. A turn from a schedule handler that sends with a user principal returns `false`, and any code that passes `appAuth` along returns `true`.
 
-Under `"auto"`, a model call may finish silently while related work is pending.
-Available results remain in the next reporting context so the parent can combine
-previously withheld outputs later. See
-[Background task results](./channels/overview#background-task-results).
+A handler-form session runs on the same durable runtime engine as any other session, so it can park (durably suspend), for instance when the channel handoff is waiting for a Slack reply. Markdown-form sessions park too, but no channel is attached, so they cannot receive follow-up messages.
 
 ## Session continuity