eve 0.84.0 → 0.85.0

package/CHANGELOG.md

@@ -1,5 +1,51 @@
 # eve
 
+## 0.85.0
+
+### Minor Changes
+
+- 24c6b9f: Client requests now reject redirects by default, including session writes and event streams. Update redirecting base URLs to their final destination, use `redirect: "manual"` to stop at redirects, or explicitly opt into `"follow"` only when every redirect destination is trusted.
+- c8328f8: Protected cross-project callbacks now require reciprocal Vercel Trusted Sources and an explicit `EVE_CALLBACK_TRUSTED_ORIGINS` allowlist on the remote deployment. Callback URLs no longer include the parent's deployment-wide bypass secret; listed origins instead receive the remote's short-lived OIDC credential.
+- 5cfec0e: Slack renderers can restyle approval, question, and budget prompt cards with a new `interactionCard(card, next)` hook, while eve keeps routing, batching, action IDs, and card updates. Cards now update from the session for every request kind, so a question answered by a typed reply or withdrawn, or a settled budget prompt, no longer keeps live buttons.
+  
+  Breaking changes:
+  
+  - `SlackChannelState.pendingApprovalCards` is replaced by `interactionCards`. Cards posted before the upgrade keep their buttons.
+  - `SlackTaskCard` is renamed to `SlackCardMessage`, which both `taskCard` and `interactionCard` return.
+  - Clicking a question no longer rewrites its card from the webhook. The buttons stay until the session admits the answer, and apps that post eve's controls themselves no longer get that rewrite.
+  - An approval's buttons disappear once its answer is admitted, so a later click can't change it. A denied approval reads **Deny** instead of **Cancel**, and a direct-message request's thread note reports the same outcome as its card.
+
+### Patch Changes
+
+- f20a7a1: Bind native Teams activities to the verified Bot Connector token's service URL before dispatch. Connector requests require HTTPS and reject redirects, keeping bearer credentials on the validated destination.
+- 4f290a7: Sessions whose deployment runs eve 0.69 through 0.83 now move to a v27 deployment the next time they receive a message while idle, or earlier when a channel prepares them for the next message, instead of staying on their original deployment until they time out. eve compacts the earlier conversation as the session moves, so the model continues from a summary; the stored transcript stays intact, and new turns continue after it. Remembered tool approvals and usage limits start over.
+- 0553a67: Keep continuation capabilities out of session lookup and child-interaction failure logs, including capability values embedded in error messages and causes. Failure diagnostics retain correlation fields and non-secret error details.
+- e54f078: Render Teams mention display names and fallback IDs as literal text, preserving names that contain ampersands or angle brackets without changing mention identity.
+- ba52da4: Remove the deprecated internal setup type alias `RunPnpmOptions`. Setup tooling should use `RunPackageManagerOptions`; package-manager command behavior is unchanged.
+- 5b8a34b: `to(channel, target).send()`, Slack's `onEvent` `ctx.send()`, dynamic schedules' `to().send()`, and channel `receive` hooks now accept the same options as `from(address).send()`, including `history`, `idempotencyKey`, and `title`. Slack derives a threadless target's session from `idempotencyKey`, and a dynamic schedule's keyed send reaches the session its earlier attempt started, so a retried send no longer starts a second thread or session.
+- 6ea94da: Set `codeChannels: true` on `slackChannel()` to serve Slack code channels as one session per channel. The agent answers un-mentioned messages, replies top-level or in the thread a person wrote in, and follows Slack's session status and stop. The option also adds the code channel scopes and events to the app manifest. A code channel session has no thread: `threadTs` is empty or `null`, and `ctx.slack.codeChannel` marks it. Address its session with `{ channelId, codeChannel: true }` in `onEvent` targets, or with `slackCodeChannelContinuationToken(channelId)`.
+  
+  Two changes also reach agents that don't enable code channels: a cancelled turn now clears the Slack thread status by default, and `SlackSessionTarget` is now a union, so code that reads `target.threadTs` must handle the `{ channelId, codeChannel: true }` variant. `SlackHandle` also gains a required `codeChannel` field, which affects code that builds a handle by hand.
+- 2764e1e: Add `openCodeChannel(ctx, slack, message, { name })` to `eve/channels/slack`, which a tool calls to move the Slack conversation it was called from into a new Slack code channel and continue the work there with the conversation so far. Wrap it in your own tool with your own description and inputs, and pass your Slack channel. It finds the conversation from `ctx.channel`, so it works when message hooks return their own auth. To write your own variant, Slack receive targets accept `codeChannel`. Message hooks can open a code channel without the model through `ctx.openCodeChannel()`.
+- cb14c32: Reject framework-owned adapter attachment references in HTTP messages and restrict Linq attachment downloads to bounded public HTTPS destinations. Thanks to HackerOne researcher ryota for reporting the attachment-reference boundary issue.
+- 412b077: Tools can start or reach sessions on the agent's channels with `ctx.to(channel, target).send(message, options)`, the same call route handlers and schedules use, such as forking a conversation into a new Slack thread. Ordinary tools call it directly, and workflow tools call it in a `"use step"` helper. Pass `` idempotencyKey: `${ctx.session.id}:${ctx.callId}` `` so a retried call reaches the same session once. `ctx.to()` throws in a subagent, a root copy, or a remote agent call. Tools also get `ctx.channel`, the calling session's channel `kind`, `continuationToken`, and `metadata`, as hooks and dynamic resolvers read it.
+
+## 0.84.1
+
+### Patch Changes
+
+- 41916a5: Dynamic models, dynamic subagent configs, and `ctx.agent(name, { model })` overrides now read context windows from the AI Gateway model catalog recorded at build time instead of downloading it at runtime; a model that catalog doesn't list fails until you return `modelContextWindowTokens` or rebuild. Builds no longer carry built-in limits for `anthropic/claude-opus-4.7`, `openai/gpt-5.4`, and `openai/gpt-5.4-mini`, so a static model needs the catalog, a cached copy, or `modelContextWindowTokens` to compile offline.
+- b322096: A compaction that fails during a turn, for example on a provider 429 that outlasts its retries, now fails that turn with `MODEL_CALL_FAILED` and leaves the session waiting with its history uncompacted. Previously the error escaped the turn step, so eve replayed the step and then ended the session. Thanks @gshost1 for the report and reproduction in #5350.
+- 4276727: Messages a route forwards with `ctx.to()` now carry the deployment and request that accepted them, so an idle session reached that way hands off to the new deployment like one reached with `from()`. Thanks @haydenbleasel for reporting this in #5408.
+- bea10fd: Model calls that AI Gateway rejects with a 402 because it temporarily throttled the credit balance check now retry with backoff. They previously reported "AI Gateway credit balance exhausted", told users to add credits, and parked the session without retrying.
+- 105bf60: `eve init apps/my-agent` now creates missing parent directories such as `apps/` instead of failing with `ENOENT` from `mkdtemp`. Thanks @otakusboy for reporting this in #5422.
+- 5bb6d43: Nuxt apps that call the auto-imported `useEveAgent()` now hydrate in `nuxt dev`. The `eve/nuxt` module pre-bundles `eve/vue` with Vite, which previously served its CommonJS dependencies to the browser unbundled and failed with `does not provide an export named 'getContext'`.
+- cb1db12: Sending a message from a web client served over plain HTTP on a host other than `localhost` no longer fails with `crypto.randomUUID is not a function`. Thanks @KingAmo for reporting this in #5415.
+- 5458bc4: Reuse signed inbox routing information between client turns when the Workflow SDK and adapter support guarded resumes and `EVE_INBOX_HANDLE_SECRET` is configured. Refresh stale routing after a confirmed refusal without retrying uncertain deliveries.
+- a5328b4: `sandbox.spawn({ stdin: true })` returns a process with a writable `stdin` stream; closing it sends EOF. The Vercel and Docker sandboxes support it, and just-bash and custom providers without stdin support reject the call.
+- 66103be: `eve dev` on Windows no longer opens a console window for each Docker command, dev build process, or optional package install. Thanks @satish860 for reporting this in #5291.
+- 040519a: The browser client no longer triggers a Content Security Policy `eval` violation on pages whose `script-src` omits `'unsafe-eval'`. eve's bundled Zod now skips its `Function("")` probe and always uses its interpreted parser. Your app's own Zod and `z.config()` are not affected. Thanks @wasimxyz for reporting this in #5365.
+
 ## 0.84.0
 
 ### Minor Changes

package/dist/src/channel/channel-operations.d.ts

@@ -4,29 +4,13 @@ import type { ChannelAdapter } from "#channel/adapter.js";
 import type { ChannelDeliverySource } from "#channel/delivery-metadata.js";
 import { type ChannelCreateResult } from "#channel/channel-address.js";
 export type { ChannelCreateResult } from "#channel/channel-address.js";
-import type { Session } from "#channel/session.js";
+import type { SessionSendOptions, Session } from "#channel/session.js";
 import type { Runtime, SessionAuthContext, TurnPolicy, SessionControlOptions } from "#channel/types.js";
 import { type Answer, type StrictAnswers } from "#shared/input.js";
 import type { JsonObject } from "#shared/json.js";
 import type { SessionHistoryMessage } from "#shared/session-history.js";
-interface BaseChannelSendOptions {
-    /** Stable delivery identity, deduplicated within this session's recent-key window. */
-    readonly idempotencyKey?: string;
-    /**
-     * Prior conversation added as user and assistant turns before this
-     * message and its `context`. Seeds a session this send creates, or
-     * extends the history of the session that owns the address.
-     */
-    readonly history?: readonly SessionHistoryMessage[];
-    readonly auth: SessionAuthContext | null;
-    readonly context?: readonly string[];
-    /** JSON Schema for a structured final answer, as on `Session.send()`. */
-    readonly outputSchema?: JsonObject;
-    readonly title?: string;
-    readonly turnPolicy?: TurnPolicy;
-}
 /** Options for sending a message from a channel-local continuation address. */
-export type ChannelSendOptions<TState = undefined> = BaseChannelSendOptions & {
+export type ChannelSendOptions<TState = undefined> = SessionSendOptions & {
     readonly state?: Partial<TState>;
 };
 interface BaseChannelRespondOptions<TState = undefined> {

package/dist/src/channel/compiled-channel.d.ts

@@ -1,11 +1,11 @@
 import type { ChannelAdapter } from "#channel/adapter.js";
-import type { MessageContent } from "#shared/message-content.js";
 import type { ChannelReceiveContext } from "#channel/channel-operations.js";
 import type { NormalizedChannelCorsOptions } from "#channel/cors.js";
 import type { TypedReceiveTarget } from "#channel/receive-target.js";
 import type { RouteDefinition } from "#channel/routes.js";
 import type { Delivery } from "#shared/delivery.js";
-import type { SessionAuthContext, TurnPolicy } from "#channel/types.js";
+import type { TurnPolicy } from "#channel/types.js";
+import type { GenericReceiveInput } from "#shared/channel-definition.js";
 import type { JsonObject } from "#shared/json.js";
 export declare const CHANNEL_SENTINEL: "eve:channel";
 interface ChannelBuildMetadata {
@@ -22,11 +22,7 @@ export interface CompiledChannel<TState = undefined, TReceiveTarget = Record<str
     readonly adapter: ChannelAdapter<any>;
     readonly cors?: NormalizedChannelCorsOptions;
     readonly __metadata?: TMetadata;
-    readonly receive?: (input: {
-        readonly message: MessageContent;
-        readonly target: Readonly<TReceiveTarget>;
-        readonly auth: SessionAuthContext | null;
-    }, ctx: ChannelReceiveContext<TState>) => Promise<Delivery>;
+    readonly receive?: (input: GenericReceiveInput<TReceiveTarget>, ctx: ChannelReceiveContext<TState>) => Promise<Delivery>;
     readonly turnPolicy?: TurnPolicy;
 }
 export declare function isCompiledChannel(value: unknown): value is CompiledChannel;

package/dist/src/channel/cross-channel-receive.d.ts

@@ -1,20 +1,19 @@
 import type { MessageContent } from "#shared/message-content.js";
 import type { ChannelAdapter } from "#channel/adapter.js";
 import { type ChannelReference, type CompiledChannel } from "#channel/compiled-channel.js";
+import type { ChannelDeliverySource } from "#channel/delivery-metadata.js";
 import type { InferReceiveTarget } from "#channel/receive-target.js";
+import { type SessionSendOptions } from "#channel/session.js";
 import type { Delivery } from "#shared/delivery.js";
-import type { Runtime, SessionAuthContext, TurnPolicy } from "#channel/types.js";
+import type { Runtime } from "#channel/types.js";
 import type { ResolvedChannelDefinition } from "#runtime/types.js";
-/**
- * Options for sending a message to a channel selected with `ctx.to(...)`.
- */
-interface CrossChannelSendOptions {
-    readonly auth: SessionAuthContext | null;
-    readonly turnPolicy?: TurnPolicy;
-}
 /** Message delivery bound to one channel-specific proactive target. */
 export interface CrossChannelTargetHandle {
-    send(message: MessageContent, options: CrossChannelSendOptions): Promise<Delivery>;
+    /**
+     * Starts a session at the target, or continues the one that owns it. The
+     * channel's `receive()` hook gets `options` with the message and target.
+     */
+    send(message: MessageContent, options: SessionSendOptions): Promise<Delivery>;
 }
 /** Selects another authored channel and one of its proactive targets. */
 export type CrossChannelToFn = <TChannel extends ChannelReference<unknown>>(channel: TChannel, target: InferReceiveTarget<TChannel>) => CrossChannelTargetHandle;
@@ -30,6 +29,8 @@ export interface CrossChannelTarget {
     readonly adapter?: ChannelAdapter;
     readonly turnPolicy?: CompiledChannel["turnPolicy"];
 }
+/** What a forwarded delivery inherits from the caller; the target channel supplies its own name. */
+type CrossChannelDeliverySource = Omit<ChannelDeliverySource, "channelKind" | "channelName">;
 /**
  * Projects an agent's resolved channels into the receiver-input shape.
  *
@@ -39,7 +40,8 @@ export interface CrossChannelTarget {
  */
 export declare function toCrossChannelTargets(channels: readonly ResolvedChannelDefinition[]): readonly CrossChannelTarget[];
 /**
- * Builds the `ctx.to(channel, target)` closure used by route and schedule handlers.
+ * Builds the `ctx.to(channel, target)` closure used by route and schedule
+ * handlers and tools.
  */
-export declare function createCrossChannelToFn(runtime: Runtime, channels: readonly CrossChannelTarget[]): CrossChannelToFn;
+export declare function createCrossChannelToFn(runtime: Runtime, channels: readonly CrossChannelTarget[], source?: CrossChannelDeliverySource): CrossChannelToFn;
 export {};

package/dist/src/channel/cross-channel-receive.js

@@ -1,2 +1,2 @@
-import{createChannelOperations}from"#channel/channel-operations.js";import{isCompiledChannel}from"#channel/compiled-channel.js";function toCrossChannelTargets(e){return e.flatMap(e=>e.definition===void 0?[]:[{name:e.name,definition:e.definition,receive:e.receive,adapter:e.adapter,turnPolicy:e.turnPolicy}])}function createCrossChannelToFn(e,t){return(n,r)=>{let i=resolveTargetByReference(n,t);return{async send(t,n){return await invokeChannelReceive({runtime:e,target:i,input:{message:t,target:r,auth:n.auth},turnPolicy:n.turnPolicy,describeMissingReceive:()=>`ctx.to(): channel "${i.name}" does not implement receive(). Declare a receive hook on the channel to accept cross-channel sessions.`,describeMissingAdapter:()=>`ctx.to(): channel "${i.name}" has no adapter — cannot build ctx.from().`})}}}}async function invokeChannelReceive(e){if(!e.target.receive)throw Error(e.describeMissingReceive());if(!e.target.adapter)throw Error(e.describeMissingAdapter());let t=createChannelOperations({adapter:e.target.adapter,channelName:e.target.name,runtime:e.runtime,turnPolicy:e.turnPolicy??e.target.turnPolicy});return await e.target.receive(e.input,t)}function resolveTargetByReference(e,t){for(let n of t)if(n.definition===e)return n;let n=resolveTargetByRouteFingerprint(e,t);if(n!==null)return n;throw Error(`ctx.to(): the channel passed as the first argument is not registered in this agent's channels/. Import the channel module's default export from agent/channels/<name>.ts and pass that value.`)}function resolveTargetByRouteFingerprint(e,t){if(!isCompiledChannel(e))return null;let n=createRouteFingerprint(e);if(n===null)return null;let r=new Map;for(let e of t)createRouteFingerprint(e.definition)===n&&r.set(e.name,e);if(r.size===1)return[...r.values()][0];if(r.size>1)throw Error(`ctx.to(): the channel passed as the first argument matches multiple registered channels by route shape. Import a channel with a unique route set from agent/channels/<name>.ts before passing it to ctx.to().`);return null}function createRouteFingerprint(e){return e.routes.length===0?null:e.routes.map(e=>`${e.method.toUpperCase()} ${e.path}`).sort().join(`
+import{toSessionSendOptions}from"#channel/session.js";import{createChannelOperations}from"#channel/channel-operations.js";import{isCompiledChannel}from"#channel/compiled-channel.js";function toCrossChannelTargets(e){return e.flatMap(e=>e.definition===void 0?[]:[{name:e.name,definition:e.definition,receive:e.receive,adapter:e.adapter,turnPolicy:e.turnPolicy}])}function createCrossChannelToFn(e,t,n={}){return(r,i)=>{let a=resolveTargetByReference(r,t);return{async send(t,r){return await invokeChannelReceive({runtime:e,source:n,target:a,input:{...toSessionSendOptions(r),message:t,target:i},turnPolicy:r.turnPolicy})}}}}async function invokeChannelReceive(e){let{name:t}=e.target;if(!e.target.receive)throw Error(`ctx.to(): channel "${t}" does not implement receive(). Declare a receive hook on the channel to accept cross-channel sessions.`);if(!e.target.adapter)throw Error(`ctx.to(): channel "${t}" has no adapter — cannot build ctx.from().`);let n=createChannelOperations({adapter:e.target.adapter,channelName:t,metadata:{...e.source,channelKind:`channel:${t}`,channelName:t},runtime:e.runtime,turnPolicy:e.turnPolicy??e.target.turnPolicy});return await e.target.receive(e.input,n)}function resolveTargetByReference(e,t){for(let n of t)if(n.definition===e)return n;let n=resolveTargetByRouteFingerprint(e,t);if(n!==null)return n;throw Error(`ctx.to(): the channel passed as the first argument is not registered in this agent's channels/. Import the channel module's default export from agent/channels/<name>.ts and pass that value.`)}function resolveTargetByRouteFingerprint(e,t){if(!isCompiledChannel(e))return null;let n=createRouteFingerprint(e);if(n===null)return null;let r=new Map;for(let e of t)createRouteFingerprint(e.definition)===n&&r.set(e.name,e);if(r.size===1)return[...r.values()][0];if(r.size>1)throw Error(`ctx.to(): the channel passed as the first argument matches multiple registered channels by route shape. Import a channel with a unique route set from agent/channels/<name>.ts before passing it to ctx.to().`);return null}function createRouteFingerprint(e){return e.routes.length===0?null:e.routes.map(e=>`${e.method.toUpperCase()} ${e.path}`).sort().join(`
 `)}export{createCrossChannelToFn,toCrossChannelTargets};

package/dist/src/channel/delivery.js

@@ -1 +1 @@
-import{SessionNotActiveError}from"#channel/session-not-active-error.js";import{StreamDelivery}from"#client/delivery.js";import{deliveryEvents}from"#client/delivery-events.js";function commandDelivery(e,t,n,r={}){if(t.status!==`accepted`&&t.status!==`reset`)throw new SessionNotActiveError({retryable:`retryable`in t&&t.retryable===!0});let i=t.status===`reset`?t.previousSessionId:t.sessionId;return new StreamDelivery({sessionId:i,deliveryId:n,createStream:async function*(t){yield*deliveryEvents(await e.getEventStream(i,{...r,signal:t?.signal}),n,t?.signal)}})}export{commandDelivery};
+import{SessionNotActiveError}from"#channel/session-not-active-error.js";import{StreamDelivery}from"#client/delivery.js";import{deliveryEvents}from"#client/delivery-events.js";function commandDelivery(e,t,n,r={}){if(t.status!==`accepted`&&t.status!==`reset`)throw new SessionNotActiveError({retryable:`retryable`in t&&t.retryable===!0});let i=t.status===`reset`?t.previousSessionId:t.sessionId;return new StreamDelivery({inbox:`inbox`in t?t.inbox:void 0,sessionId:i,deliveryId:n,createStream:async function*(t){yield*deliveryEvents(await e.getEventStream(i,{...r,signal:t?.signal}),n,t?.signal)}})}export{commandDelivery};

package/dist/src/channel/schedule.js

@@ -1 +1 @@
-import{randomUUID}from"node:crypto";import{commandDelivery}from"#channel/delivery.js";import{createChannelDeliveryMetadata}from"#channel/delivery-metadata.js";import{scheduleDisplayName}from"#runtime/schedules/record.js";import{SCHEDULE_APP_AUTH,SCHEDULE_APP_AUTH as SCHEDULE_APP_AUTH$1}from"#channel/schedule-auth.js";import{createCrossChannelToFn,toCrossChannelTargets}from"#channel/cross-channel-receive.js";import{ContextContainer,contextStorage}from"#context/container.js";import{AuthKey,OccurrenceIdKey,ScheduleIdKey,ScheduleInstanceKey}from"#context/keys.js";import{expectFunction}from"#internal/authored-module.js";import{parseSchedulePayload,validateSchedulePayload}from"#runtime/schedules/payload.js";const SCHEDULE_ADAPTER_KIND=`schedule`,SCHEDULE_ADAPTER={kind:SCHEDULE_ADAPTER_KIND};var ScheduleDispatcher=class{runtime;channels;constructor(e){this.runtime=e.runtime,this.channels=e.channels}async trigger(e){let t=new ContextContainer;return t.set(ScheduleIdKey,e.scheduleId),await contextStorage.run(t,()=>this.triggerInScope(e))}async triggerCollection(e){let{envelope:t}=parseSchedulePayload(e.payload,{application:e.payload.eve.application,collection:e.collectionId}),{definition:n}=e,r={...e.occurrence,displayName:scheduleDisplayName(e.occurrence.name)},i=n.preparePayload===void 0?await validateSchedulePayload(n.inputSchema,t.payload):t.payload;await e.verifyDelivery?.();let a=await n.auth({principal:t.principal,payload:i,occurrence:r});if(a===null)throw Error(`Scheduled execution is no longer authorized.`);if(a.principalId!==t.principal.principalId||a.principalType!==t.principal.type||a.authenticator!==t.principal.authenticator||a.issuer!==t.principal.issuer||a.subject!==t.principal.subject)throw Error(`Scheduled execution auth must resolve the schedule creator.`);let o=a,s=new ContextContainer;return s.set(ScheduleIdKey,e.collectionId),s.set(AuthKey,o),s.set(OccurrenceIdKey,r.executionId),s.set(ScheduleInstanceKey,r.name),await contextStorage.run(s,async()=>{let e={...this.runtime,resolveContinuation:async()=>void 0,dispatchContinuation:async e=>{if(e.command.kind!==`send`)throw Error(`Scheduled channel receive can only start a fresh session.`);return{status:`session_not_active`}},createSession:async e=>await this.runtime.createSession({...e,auth:o,initiatorAuth:o,capabilities:{requestInput:!1},continuationToken:`eve-scheduled-send:${randomUUID()}`,continuationConflictCommand:void 0})},{args:t,sessions:a,waitUntilTasks:s}=this.createHandlerContext(e);return await n.run({payload:i,occurrence:r,auth:o,to:(e,n)=>({send:r=>t.to(e,n).send(r,{auth:o})}),waitUntil:t.waitUntil}),await Promise.all(s),{sessions:a,waitUntilTasks:s}})}async triggerInScope(e){let{args:t,sessions:n,waitUntilTasks:r}=this.createHandlerContext();if(e.run)await e.run(t);else if(e.markdown!==void 0)n.push(await this.runMarkdown(e.markdown));else throw Error(`Schedule "${e.scheduleId}" has neither "run" nor "markdown" — at least one must be set.`);return{sessions:n,waitUntilTasks:r}}createHandlerContext(e=this.runtime){let t=[],n=[],r=createCrossChannelToFn(e,toCrossChannelTargets(this.channels));return{args:{appAuth:SCHEDULE_APP_AUTH$1,to(e,n){let i=r(e,n);return{async send(e,n){let r=await i.send(e,n);return t.push(r),r}}},waitUntil(e){n.push(e)}},sessions:t,waitUntilTasks:n}}async runMarkdown(e){let t=createChannelDeliveryMetadata({channelKind:`schedule`,channelName:`schedule`}),n=await this.runtime.createSession({delivery:t,adapter:SCHEDULE_ADAPTER,auth:SCHEDULE_APP_AUTH$1,input:{message:e}});return commandDelivery(this.runtime,{status:`accepted`,sessionId:n.sessionId},t.deliveryId)}};function expectScheduleRun(e,t,n){let r=e;if(typeof r!=`object`||!r)throw Error(`Schedule export "${n??`default`}" from "${t}" must be an object.`);return expectFunction(r.run,`Expected the schedule export "${n??`default`}" from "${t}" to export a \`run\` handler function.`)}export{SCHEDULE_ADAPTER,SCHEDULE_ADAPTER_KIND,SCHEDULE_APP_AUTH,ScheduleDispatcher,expectScheduleRun};
+import{createHash,randomUUID}from"node:crypto";import{commandDelivery}from"#channel/delivery.js";import{createChannelDeliveryMetadata}from"#channel/delivery-metadata.js";import{scheduleDisplayName}from"#runtime/schedules/record.js";import{SCHEDULE_APP_AUTH,SCHEDULE_APP_AUTH as SCHEDULE_APP_AUTH$1}from"#channel/schedule-auth.js";import{createCrossChannelToFn,toCrossChannelTargets}from"#channel/cross-channel-receive.js";import{ContextContainer,contextStorage}from"#context/container.js";import{AuthKey,OccurrenceIdKey,ScheduleIdKey,ScheduleInstanceKey}from"#context/keys.js";import{expectFunction}from"#internal/authored-module.js";import{parseSchedulePayload,validateSchedulePayload}from"#runtime/schedules/payload.js";const SCHEDULE_ADAPTER_KIND=`schedule`,SCHEDULE_ADAPTER={kind:SCHEDULE_ADAPTER_KIND};var ScheduleDispatcher=class{runtime;channels;constructor(e){this.runtime=e.runtime,this.channels=e.channels}async trigger(e){let t=new ContextContainer;return t.set(ScheduleIdKey,e.scheduleId),await contextStorage.run(t,()=>this.triggerInScope(e))}async triggerCollection(e){let{envelope:t}=parseSchedulePayload(e.payload,{application:e.payload.eve.application,collection:e.collectionId}),{definition:n}=e,r={...e.occurrence,displayName:scheduleDisplayName(e.occurrence.name)},i=n.preparePayload===void 0?await validateSchedulePayload(n.inputSchema,t.payload):t.payload;await e.verifyDelivery?.();let a=await n.auth({principal:t.principal,payload:i,occurrence:r});if(a===null)throw Error(`Scheduled execution is no longer authorized.`);if(a.principalId!==t.principal.principalId||a.principalType!==t.principal.type||a.authenticator!==t.principal.authenticator||a.issuer!==t.principal.issuer||a.subject!==t.principal.subject)throw Error(`Scheduled execution auth must resolve the schedule creator.`);let o=a,s=new ContextContainer;s.set(ScheduleIdKey,e.collectionId),s.set(AuthKey,o),s.set(OccurrenceIdKey,r.executionId),s.set(ScheduleInstanceKey,r.name);let scheduledToken=(e,t)=>t===void 0?`eve-scheduled-send:${randomUUID()}`:`eve-scheduled-send:${createHash(`sha256`).update(JSON.stringify([r.scheduleId,e,t])).digest(`hex`)}`,freshRun=e=>({...e,auth:o,initiatorAuth:o,capabilities:{requestInput:!1},continuationToken:scheduledToken(e.continuationToken,e.idempotencyKey),continuationConflictCommand:e.idempotencyKey===void 0?void 0:e.continuationConflictCommand});return await contextStorage.run(s,async()=>{let e={...this.runtime,resolveContinuation:async()=>void 0,dispatchContinuation:async e=>{let{command:t}=e;if(t.kind!==`send`)throw Error(`Scheduled channel receive can only start a fresh session.`);return t.idempotencyKey===void 0?{status:`session_not_active`}:await this.runtime.dispatchContinuation({command:t,continuationToken:scheduledToken(e.continuationToken,t.idempotencyKey),successor:e.successor&&freshRun(e.successor)})},createSession:async e=>await this.runtime.createSession(freshRun(e))},{args:t,sessions:a,waitUntilTasks:s}=this.createHandlerContext(e);return await n.run({payload:i,occurrence:r,auth:o,to:(e,n)=>({send:(r,i)=>t.to(e,n).send(r,{...i,auth:o})}),waitUntil:t.waitUntil}),await Promise.all(s),{sessions:a,waitUntilTasks:s}})}async triggerInScope(e){let{args:t,sessions:n,waitUntilTasks:r}=this.createHandlerContext();if(e.run)await e.run(t);else if(e.markdown!==void 0)n.push(await this.runMarkdown(e.markdown));else throw Error(`Schedule "${e.scheduleId}" has neither "run" nor "markdown" — at least one must be set.`);return{sessions:n,waitUntilTasks:r}}createHandlerContext(e=this.runtime){let t=[],n=[],r=createCrossChannelToFn(e,toCrossChannelTargets(this.channels));return{args:{appAuth:SCHEDULE_APP_AUTH$1,to(e,n){let i=r(e,n);return{async send(e,n){let r=await i.send(e,n);return t.push(r),r}}},waitUntil(e){n.push(e)}},sessions:t,waitUntilTasks:n}}async runMarkdown(e){let t=createChannelDeliveryMetadata({channelKind:`schedule`,channelName:`schedule`}),n=await this.runtime.createSession({delivery:t,adapter:SCHEDULE_ADAPTER,auth:SCHEDULE_APP_AUTH$1,input:{message:e}});return commandDelivery(this.runtime,{status:`accepted`,sessionId:n.sessionId},t.deliveryId)}};function expectScheduleRun(e,t,n){let r=e;if(typeof r!=`object`||!r)throw Error(`Schedule export "${n??`default`}" from "${t}" must be an object.`);return expectFunction(r.run,`Expected the schedule export "${n??`default`}" from "${t}" to export a \`run\` handler function.`)}export{SCHEDULE_ADAPTER,SCHEDULE_ADAPTER_KIND,SCHEDULE_APP_AUTH,ScheduleDispatcher,expectScheduleRun};

package/dist/src/channel/session.d.ts

@@ -48,14 +48,36 @@ interface SessionDeliveryOptions {
     readonly context?: readonly string[];
     readonly outputSchema?: JsonObject;
 }
-/** Options for sending a message through a fixed session handle. */
-export type SessionSendOptions = SessionDeliveryOptions & {
+/**
+ * Options every server-side message send accepts: `Session.send()`,
+ * `from(address).send()`, `to(channel, target).send()`, and the input a
+ * channel's `receive()` hook gets.
+ */
+export interface SessionSendOptions {
+    /** Who the session runs as. */
+    readonly auth: SessionAuthContext | null;
+    /** Strings added as user messages before the message, kept in session history. */
+    readonly context?: readonly string[];
     /** Prior conversation added as user and assistant turns before this message and its `context`. */
     readonly history?: readonly SessionHistoryMessage[];
-    /** Initial workflow title for a prewarmed session. */
+    /**
+     * Stable delivery identity. Deduplicated within the receiving session's recent-key window, which
+     * every sender to that session shares, so make it unique across senders, for example by
+     * prefixing the source. A threadless Slack target also derives its session from it.
+     */
+    readonly idempotencyKey?: string;
+    /** JSON Schema for a structured final answer. */
+    readonly outputSchema?: JsonObject;
+    /** Workflow run title for a session this send starts. Defaults to one derived from the message. */
     readonly title?: string;
+    /** How the message treats a running turn. */
     readonly turnPolicy?: TurnPolicy;
-};
+}
+/**
+ * Copies only the {@link SessionSendOptions} fields and validates the key. Callers can pass wider
+ * objects, which must not carry internal send fields such as `callback` across a channel boundary.
+ */
+export declare function toSessionSendOptions(options: SessionSendOptions): SessionSendOptions;
 /** Options for answering pending input requests through a fixed session handle. */
 export type SessionRespondOptions = SessionDeliveryOptions;
 export declare function createSession(id: string, runtime: Runtime, metadata?: Partial<ChannelDeliverySource> & {

package/dist/src/channel/session.js

@@ -1 +1 @@
-import{attachClientContext,readClientContext}from"#internal/client-context.js";import{commandDelivery}from"#channel/delivery.js";import{validateDeliveryIdempotencyKey}from"#channel/delivery-idempotency.js";import{createChannelDeliveryMetadata}from"#channel/delivery-metadata.js";import{serializeFilePartsInMessage}from"#channel/send-input.js";import{DEFAULT_TURN_POLICY,controlCommand}from"#channel/types.js";import{validateSessionHistory}from"#shared/session-history.js";import{parseAnswers}from"#shared/input.js";import{AuthKey,ContinuationHookTokensKey,ContinuationTokenKey,InitiatorAuthKey,SessionIdKey}from"#context/keys.js";import{toChannelLocalContinuationToken}from"#shared/continuation-token.js";function internalSession(e){return e}function createSession(e,t,n={}){return{id:e,async send(r,i){validateDeliveryIdempotencyKey(i.idempotencyKey);let a=createDelivery(n,i.deliveryId),o=sessionCallbackToTurnCaller(i.callback),s=validateSessionHistory(i.history),c=attachClientContext({message:serializeFilePartsInMessage(r)},readClientContext(i));i.context!==void 0&&(c.context=i.context),s!==void 0&&(c.history=s),i.outputSchema!==void 0&&(c.outputSchema=i.outputSchema);let l={idempotencyKey:i.idempotencyKey,auth:i.auth,delivery:a,kind:`send`,payload:c,requestId:n.requestId,turnPolicy:i.turnPolicy??n.turnPolicy??DEFAULT_TURN_POLICY,title:i.title},u=await t.dispatchSession({command:o===void 0?l:{...l,caller:o},sessionId:e});return commandDelivery(t,u,a.deliveryId)},async respond(r,i){if(validateDeliveryIdempotencyKey(i.idempotencyKey),r.length===0)throw Error(`respond() requires at least one answer.`);let a=parseAnswers(r),o=sessionCallbackToTurnCaller(i.callback),s=createDelivery(n,i.deliveryId),c=attachClientContext({answers:a},readClientContext(i));i.context!==void 0&&(c.context=i.context),i.outputSchema!==void 0&&(c.outputSchema=i.outputSchema);let l={idempotencyKey:i.idempotencyKey,auth:i.auth,delivery:s,kind:`send`,payload:c,requestId:n.requestId},u=await t.dispatchSession({command:o===void 0?l:{...l,caller:o},sessionId:e});return commandDelivery(t,u,s.deliveryId)},async cancel(n){let r=controlCommand({kind:`cancel`,turnId:n?.turnId},n),i=await t.dispatchSession({command:r,sessionId:e});return commandDelivery(t,i,r.deliveryId)},async prewarm(){return await t.dispatchSession({command:{kind:`prewarm`,targetDeploymentId:n.acceptedDeploymentId},sessionId:e})},async compact(n){let r=controlCommand({kind:`compact`},n),i=await t.dispatchSession({command:r,sessionId:e});return commandDelivery(t,i,r.deliveryId)},async clear(n){let r=controlCommand({kind:`clear`},n),i=await t.dispatchSession({command:r,sessionId:e});return commandDelivery(t,i,r.deliveryId)},async reset(n){let r=controlCommand({kind:`reset`,reason:n?.reason},n),i=await t.dispatchSession({command:r,sessionId:e});return commandDelivery(t,i,r.deliveryId,{follow:!1})},async*stream(n){yield*await t.getEventStream(e,n)},async getLineStream(n){return t.getLineStream(e,n)},async getStreamTailIndex(){return t.getStreamTailIndex(e)},async hasRunnableOwner(){return await t.hasRunnableOwner?.(e)??!0},async getChildBinding(n){return await t.readChildBinding?.(e,n)}}}function createAttachSessionFn(e,t={}){return n=>createSession(n,e,t)}function createDelivery(e,t){let n=createChannelDeliveryMetadata({channelKind:`http`,channelName:`http`,...e});return t===void 0?n:{...n,deliveryId:t}}function buildChannelContext(e){return{session:{get id(){return e.get(SessionIdKey)??``},get auth(){return{current:e.get(AuthKey)??null,initiator:e.get(InitiatorAuthKey)??null}}},get continuation(){let t=e.get(ContinuationTokenKey);if(t!==void 0&&t.length!==0)return{token:toChannelLocalContinuationToken(t),alias(n){if(n.length===0)throw Error(`A session alias requires a nonempty token.`);let r=namespaceContinuationToken(t,n);t!==r&&(e.set(ContinuationHookTokensKey,e=>{let n=e??[t];return n.includes(r)?n:[...n,r]}),e.set(ContinuationTokenKey,r))}}}}}function namespaceContinuationToken(e,t){let n=e.indexOf(`:`);if(n<=0)throw Error(`Cannot set session continuation token without an existing namespaced continuation token. Start the session with a placeholder continuationToken.`);return`${e.slice(0,n+1)}${t}`}function sessionCallbackToTurnCaller(e){return e===void 0?void 0:{callId:e.callId,replyTo:{kind:`callback`,token:e.token,url:e.url},subagentName:e.subagentName}}export{buildChannelContext,createAttachSessionFn,createSession,internalSession,sessionCallbackToTurnCaller};
+import{attachClientContext,readClientContext}from"#internal/client-context.js";import{commandDelivery}from"#channel/delivery.js";import{validateDeliveryIdempotencyKey}from"#channel/delivery-idempotency.js";import{createChannelDeliveryMetadata}from"#channel/delivery-metadata.js";import{serializeFilePartsInMessage}from"#channel/send-input.js";import{DEFAULT_TURN_POLICY,controlCommand}from"#channel/types.js";import{validateSessionHistory}from"#shared/session-history.js";import{parseAnswers}from"#shared/input.js";import{AuthKey,ContinuationHookTokensKey,ContinuationTokenKey,InitiatorAuthKey,SessionIdKey}from"#context/keys.js";import{toChannelLocalContinuationToken}from"#shared/continuation-token.js";function internalSession(e){return e}const SESSION_SEND_OPTION_KEYS=Object.keys({auth:!0,context:!0,history:!0,idempotencyKey:!0,outputSchema:!0,title:!0,turnPolicy:!0});function toSessionSendOptions(e){validateDeliveryIdempotencyKey(e.idempotencyKey);let t={};for(let n of SESSION_SEND_OPTION_KEYS)e[n]!==void 0&&(t[n]=e[n]);return t}function createSession(e,t,n={}){return{id:e,async send(r,i){validateDeliveryIdempotencyKey(i.idempotencyKey);let a=createDelivery(n,i.deliveryId),o=sessionCallbackToTurnCaller(i.callback),s=validateSessionHistory(i.history),c=attachClientContext({message:serializeFilePartsInMessage(r)},readClientContext(i));i.context!==void 0&&(c.context=i.context),s!==void 0&&(c.history=s),i.outputSchema!==void 0&&(c.outputSchema=i.outputSchema);let l={idempotencyKey:i.idempotencyKey,auth:i.auth,delivery:a,kind:`send`,payload:c,requestId:n.requestId,turnPolicy:i.turnPolicy??n.turnPolicy??DEFAULT_TURN_POLICY,title:i.title},u=await t.dispatchSession({command:o===void 0?l:{...l,caller:o},sessionId:e,inbox:i.inbox});return commandDelivery(t,u,a.deliveryId)},async respond(r,i){if(validateDeliveryIdempotencyKey(i.idempotencyKey),r.length===0)throw Error(`respond() requires at least one answer.`);let a=parseAnswers(r),o=sessionCallbackToTurnCaller(i.callback),s=createDelivery(n,i.deliveryId),c=attachClientContext({answers:a},readClientContext(i));i.context!==void 0&&(c.context=i.context),i.outputSchema!==void 0&&(c.outputSchema=i.outputSchema);let l={idempotencyKey:i.idempotencyKey,auth:i.auth,delivery:s,kind:`send`,payload:c,requestId:n.requestId},u=await t.dispatchSession({command:o===void 0?l:{...l,caller:o},sessionId:e,inbox:i.inbox});return commandDelivery(t,u,s.deliveryId)},async cancel(n){let r=controlCommand({kind:`cancel`,turnId:n?.turnId},n),i=await t.dispatchSession({command:r,sessionId:e});return commandDelivery(t,i,r.deliveryId)},async prewarm(){return await t.dispatchSession({command:{kind:`prewarm`,targetDeploymentId:n.acceptedDeploymentId},sessionId:e})},async compact(n){let r=controlCommand({kind:`compact`},n),i=await t.dispatchSession({command:r,sessionId:e});return commandDelivery(t,i,r.deliveryId)},async clear(n){let r=controlCommand({kind:`clear`},n),i=await t.dispatchSession({command:r,sessionId:e});return commandDelivery(t,i,r.deliveryId)},async reset(n){let r=controlCommand({kind:`reset`,reason:n?.reason},n),i=await t.dispatchSession({command:r,sessionId:e});return commandDelivery(t,i,r.deliveryId,{follow:!1})},async*stream(n){yield*await t.getEventStream(e,n)},async getLineStream(n){return t.getLineStream(e,n)},async getStreamTailIndex(){return t.getStreamTailIndex(e)},async hasRunnableOwner(){return await t.hasRunnableOwner?.(e)??!0},async getChildBinding(n){return await t.readChildBinding?.(e,n)}}}function createAttachSessionFn(e,t={}){return n=>createSession(n,e,t)}function createDelivery(e,t){let n=createChannelDeliveryMetadata({channelKind:`http`,channelName:`http`,...e});return t===void 0?n:{...n,deliveryId:t}}function buildChannelContext(e){return{session:{get id(){return e.get(SessionIdKey)??``},get auth(){return{current:e.get(AuthKey)??null,initiator:e.get(InitiatorAuthKey)??null}}},get continuation(){let t=e.get(ContinuationTokenKey);if(t!==void 0&&t.length!==0)return{token:toChannelLocalContinuationToken(t),alias(n){if(n.length===0)throw Error(`A session alias requires a nonempty token.`);let r=namespaceContinuationToken(t,n);t!==r&&(e.set(ContinuationHookTokensKey,e=>{let n=e??[t];return n.includes(r)?n:[...n,r]}),e.set(ContinuationTokenKey,r))}}}}}function namespaceContinuationToken(e,t){let n=e.indexOf(`:`);if(n<=0)throw Error(`Cannot set session continuation token without an existing namespaced continuation token. Start the session with a placeholder continuationToken.`);return`${e.slice(0,n+1)}${t}`}function sessionCallbackToTurnCaller(e){return e===void 0?void 0:{callId:e.callId,replyTo:{kind:`callback`,token:e.token,url:e.url},subagentName:e.subagentName}}export{buildChannelContext,createAttachSessionFn,createSession,internalSession,sessionCallbackToTurnCaller,toSessionSendOptions};

package/dist/src/channel/types.d.ts

@@ -199,6 +199,7 @@ export type SessionSendCommandResult = {
     readonly status: "accepted";
     readonly sessionId: string;
     readonly deliveryId?: string;
+    readonly inbox?: string;
 } | {
     readonly status: "session_not_active";
     /** The workflow exists but its inbox is not yet available; no delivery was accepted. */
@@ -232,6 +233,7 @@ export interface DispatchContinuationInput<TCommand extends SessionCommand = Ses
     readonly successor?: RunInput;
 }
 export interface DispatchSessionInput<TCommand extends SessionCommand = SessionCommand> {
+    readonly inbox?: string;
     readonly command: TCommand;
     readonly sessionId: string;
 }

package/dist/src/chunks/{use-eve-agent-BbbguIdB.js → use-eve-agent-B2jCfcnG.js}

@@ -2299,6 +2299,7 @@ async function openStreamBody(input) {
 				signal
 			});
 		} catch (error) {
+			if (input.redirect === "error" && error instanceof Error && error.cause instanceof Error && error.cause.message === "unexpected redirect") throw new Error("The session stream refused a redirect. Use the final agent URL instead.", { cause: error });
 			if (input.signal?.aborted || !isStreamDisconnectError(error) || attempt === openRetryPolicy.maxAttempts - 1) throw error;
 			await sleep(retryDelayMs, input.signal);
 			retryDelayMs = Math.min(retryDelayMs * 2, openRetryPolicy.maxDelayMs);
@@ -2447,10 +2448,12 @@ const sendReceipts = /* @__PURE__ */ new WeakMap();
 var StreamDelivery = class {
 	sessionId;
 	deliveryId;
+	inbox;
 	#createStream;
 	#result;
 	constructor(input) {
 		this.sessionId = input.sessionId;
+		this.inbox = input.inbox;
 		this.deliveryId = input.deliveryId;
 		if (input.receipt !== void 0) sendReceipts.set(this, input.receipt);
 		this.#createStream = input.createStream;
@@ -3010,9 +3013,13 @@ var ClientSession = class ClientSession {
 	async #send(input, retrySessionNotReady) {
 		const initialStreamIndex = this.#state.streamIndex;
 		const path = createEveSessionRoutePath(this.#state.sessionId);
-		const { response, timing } = await postSessionSend(this.#context, path, input, retrySessionNotReady);
-		const { sessionId: responseSessionId, deliveryId } = await readAcceptedMessage(response, this.#state.sessionId);
+		const { response, timing } = await postSessionSend(this.#context, path, input, retrySessionNotReady, this.#state.inbox);
+		const { sessionId: responseSessionId, deliveryId, inbox } = await readAcceptedMessage(response, this.#state.sessionId);
 		if (responseSessionId !== this.#state.sessionId) throw new Error("Message route returned a different session id.");
+		this.#state = {
+			...this.#state,
+			inbox
+		};
 		if (deliveryId === void 0) throw new Error("Message route did not return a delivery id. Update the server before sending with this client.");
 		return this.#messageResponse(response, input, initialStreamIndex, deliveryId, {
 			...timing,
@@ -3100,7 +3107,7 @@ var ClientSession = class ClientSession {
 	}
 	#advanceStreamIndex(streamIndex) {
 		this.#state = {
-			sessionId: this.#state.sessionId,
+			...this.#state,
 			streamIndex: Math.max(this.#state.streamIndex, streamIndex)
 		};
 	}
@@ -3122,7 +3129,7 @@ var ClientSession = class ClientSession {
 function followClientSession(session, options) {
 	return session[followSession](options);
 }
-async function postSessionSend(context, path, input, retrySessionNotReady) {
+async function postSessionSend(context, path, input, retrySessionNotReady, inbox) {
 	const startedAt = Date.now();
 	const readyDeadline = startedAt + SESSION_SEND_READY_TIMEOUT_MS;
 	let retryDelayMs = SESSION_SEND_RETRY_BASE_DELAY_MS;
@@ -3130,7 +3137,7 @@ async function postSessionSend(context, path, input, retrySessionNotReady) {
 		const attemptAt = Date.now();
 		try {
 			return {
-				response: await postTurn(context, path, input, false),
+				response: await postTurn(context, path, input, false, void 0, inbox),
 				timing: {
 					startedAt,
 					notReadyMs: attemptAt - startedAt,
@@ -3167,10 +3174,11 @@ async function postCreateSession(context, options) {
 function isSessionNotReady(error) {
 	return SessionNotActiveError.is(error) && error.retryable;
 }
-async function postTurn(context, path, input, requireMessage, stubs) {
+async function postTurn(context, path, input, requireMessage, stubs, inbox) {
 	const body = createMessageBody(input, requireMessage);
 	if (body === null) throw new Error(requireMessage ? "Creating a session requires a non-empty message." : "A session turn requires a non-empty message or answers.");
 	if (stubs !== void 0) body.stubs = stubs;
+	if (inbox !== void 0) body.inbox = inbox;
 	const headers = await context.resolveHeaders(input.headers);
 	headers.set("content-type", "application/json");
 	const response = await fetch(createClientUrl(context.baseUrl, path), {
@@ -3192,6 +3200,7 @@ async function readAcceptedMessage(response, expected) {
 	if (!sessionId) throw new Error("Message route did not return a session id.");
 	return {
 		sessionId,
+		inbox: typeof payload.inbox === "string" ? payload.inbox : void 0,
 		deliveryId: typeof payload.deliveryId === "string" && payload.deliveryId.length > 0 ? payload.deliveryId : void 0
 	};
 }
@@ -3223,6 +3232,7 @@ var ClientSessions = class {
 		if (sessionId.length === 0) throw new Error("sessionId must be a non-empty string.");
 		return new ClientSession(this.#context, {
 			sessionId,
+			inbox: options?.inbox,
 			streamIndex: options?.streamIndex ?? 0
 		});
 	}
@@ -3244,7 +3254,7 @@ var Client = class {
 		this.#baseUrl = options.baseUrl;
 		this.#auth = options.auth;
 		this.#headers = options.headers;
-		this.#redirect = options.redirect;
+		this.#redirect = options.redirect ?? "error";
 		this.sessions = new ClientSessions({
 			baseUrl: this.#baseUrl,
 			redirect: this.#redirect,
@@ -3341,7 +3351,7 @@ function headersInitToRecord(headers) {
 	return Object.fromEntries(new Headers(headers).entries());
 }
 function withRedirectPolicy(init, redirect) {
-	return redirect === void 0 ? init : {
+	return {
 		...init,
 		redirect
 	};
@@ -3443,6 +3453,7 @@ function isAbortError(error) {
 
 //#endregion
 //#region src/client/optimistic-message-submissions.ts
+let submissionSequence = 0;
 var OptimisticMessageSubmissions = class {
 	#optimistic;
 	#show;
@@ -3457,7 +3468,7 @@ var OptimisticMessageSubmissions = class {
 	}
 	submit(input, turnId) {
 		if (input.message === void 0) return void 0;
-		const id = crypto.randomUUID();
+		const id = crypto.randomUUID?.() ?? `submission_${(submissionSequence += 1).toString()}`;
 		this.#submissions.set(id, {
 			id,
 			message: summarizeMessage(input.message),
@@ -4494,7 +4505,10 @@ var SessionStore = class {
 		this.#conversationClient = new ConversationClient(() => this.#publish());
 		this.#events = (init.initialEvents ?? []).filter((event) => this.#conversationClient.hydrate(event));
 		this.#messageSubmissions = new OptimisticMessageSubmissions((submissions) => this.#conversationClient.showSubmissions(submissions), init.optimistic ?? true);
-		this.#session = init.session ?? (init.initialSession === void 0 ? void 0 : this.#client?.sessions.attach(init.initialSession.sessionId, { streamIndex: init.initialSession.streamIndex }));
+		this.#session = init.session ?? (init.initialSession === void 0 ? void 0 : this.#client?.sessions.attach(init.initialSession.sessionId, {
+			streamIndex: init.initialSession.streamIndex,
+			inbox: init.initialSession.inbox
+		}));
 		this.#error = this.#recordedFailure();
 		this.#snapshot = this.#createSnapshot();
 	}
@@ -4569,6 +4583,7 @@ var SessionStore = class {
 					this.#messageSubmissions.correlate(submissionId, deliveryId);
 				}
 				this.#acceptReceipt(deliveryId);
+				this.#callbacks.onSessionChange?.(this.#sessionState);
 			}
 			accepted.resolve(deliveryId);
 			return new StreamDelivery({
@@ -4901,9 +4916,11 @@ var SessionStore = class {
 		if (this.#session === void 0) return this.#observedSession = void 0;
 		const sessionId = this.#session.id;
 		const streamIndex = this.#conversationClient.view.position;
-		if (this.#observedSession?.sessionId !== sessionId || this.#observedSession.streamIndex !== streamIndex) this.#observedSession = {
+		const { inbox } = this.#session.state;
+		if (this.#observedSession?.sessionId !== sessionId || this.#observedSession.streamIndex !== streamIndex || this.#observedSession.inbox !== inbox) this.#observedSession = {
 			sessionId,
-			streamIndex
+			streamIndex,
+			inbox
 		};
 		return this.#observedSession;
 	}

package/dist/src/chunks/{use-eve-agent-DWjyzplb.js → use-eve-agent-DCLFi26P.js}

@@ -2300,6 +2300,7 @@ async function openStreamBody(input) {
 				signal
 			});
 		} catch (error) {
+			if (input.redirect === "error" && error instanceof Error && error.cause instanceof Error && error.cause.message === "unexpected redirect") throw new Error("The session stream refused a redirect. Use the final agent URL instead.", { cause: error });
 			if (input.signal?.aborted || !isStreamDisconnectError(error) || attempt === openRetryPolicy.maxAttempts - 1) throw error;
 			await sleep(retryDelayMs, input.signal);
 			retryDelayMs = Math.min(retryDelayMs * 2, openRetryPolicy.maxDelayMs);
@@ -2448,10 +2449,12 @@ const sendReceipts = /* @__PURE__ */ new WeakMap();
 var StreamDelivery = class {
 	sessionId;
 	deliveryId;
+	inbox;
 	#createStream;
 	#result;
 	constructor(input) {
 		this.sessionId = input.sessionId;
+		this.inbox = input.inbox;
 		this.deliveryId = input.deliveryId;
 		if (input.receipt !== void 0) sendReceipts.set(this, input.receipt);
 		this.#createStream = input.createStream;
@@ -3011,9 +3014,13 @@ var ClientSession = class ClientSession {
 	async #send(input, retrySessionNotReady) {
 		const initialStreamIndex = this.#state.streamIndex;
 		const path = createEveSessionRoutePath(this.#state.sessionId);
-		const { response, timing } = await postSessionSend(this.#context, path, input, retrySessionNotReady);
-		const { sessionId: responseSessionId, deliveryId } = await readAcceptedMessage(response, this.#state.sessionId);
+		const { response, timing } = await postSessionSend(this.#context, path, input, retrySessionNotReady, this.#state.inbox);
+		const { sessionId: responseSessionId, deliveryId, inbox } = await readAcceptedMessage(response, this.#state.sessionId);
 		if (responseSessionId !== this.#state.sessionId) throw new Error("Message route returned a different session id.");
+		this.#state = {
+			...this.#state,
+			inbox
+		};
 		if (deliveryId === void 0) throw new Error("Message route did not return a delivery id. Update the server before sending with this client.");
 		return this.#messageResponse(response, input, initialStreamIndex, deliveryId, {
 			...timing,
@@ -3101,7 +3108,7 @@ var ClientSession = class ClientSession {
 	}
 	#advanceStreamIndex(streamIndex) {
 		this.#state = {
-			sessionId: this.#state.sessionId,
+			...this.#state,
 			streamIndex: Math.max(this.#state.streamIndex, streamIndex)
 		};
 	}
@@ -3123,7 +3130,7 @@ var ClientSession = class ClientSession {
 function followClientSession(session, options) {
 	return session[followSession](options);
 }
-async function postSessionSend(context, path, input, retrySessionNotReady) {
+async function postSessionSend(context, path, input, retrySessionNotReady, inbox) {
 	const startedAt = Date.now();
 	const readyDeadline = startedAt + SESSION_SEND_READY_TIMEOUT_MS;
 	let retryDelayMs = SESSION_SEND_RETRY_BASE_DELAY_MS;
@@ -3131,7 +3138,7 @@ async function postSessionSend(context, path, input, retrySessionNotReady) {
 		const attemptAt = Date.now();
 		try {
 			return {
-				response: await postTurn(context, path, input, false),
+				response: await postTurn(context, path, input, false, void 0, inbox),
 				timing: {
 					startedAt,
 					notReadyMs: attemptAt - startedAt,
@@ -3168,10 +3175,11 @@ async function postCreateSession(context, options) {
 function isSessionNotReady(error) {
 	return SessionNotActiveError.is(error) && error.retryable;
 }
-async function postTurn(context, path, input, requireMessage, stubs) {
+async function postTurn(context, path, input, requireMessage, stubs, inbox) {
 	const body = createMessageBody(input, requireMessage);
 	if (body === null) throw new Error(requireMessage ? "Creating a session requires a non-empty message." : "A session turn requires a non-empty message or answers.");
 	if (stubs !== void 0) body.stubs = stubs;
+	if (inbox !== void 0) body.inbox = inbox;
 	const headers = await context.resolveHeaders(input.headers);
 	headers.set("content-type", "application/json");
 	const response = await fetch(createClientUrl(context.baseUrl, path), {
@@ -3193,6 +3201,7 @@ async function readAcceptedMessage(response, expected) {
 	if (!sessionId) throw new Error("Message route did not return a session id.");
 	return {
 		sessionId,
+		inbox: typeof payload.inbox === "string" ? payload.inbox : void 0,
 		deliveryId: typeof payload.deliveryId === "string" && payload.deliveryId.length > 0 ? payload.deliveryId : void 0
 	};
 }
@@ -3224,6 +3233,7 @@ var ClientSessions = class {
 		if (sessionId.length === 0) throw new Error("sessionId must be a non-empty string.");
 		return new ClientSession(this.#context, {
 			sessionId,
+			inbox: options?.inbox,
 			streamIndex: options?.streamIndex ?? 0
 		});
 	}
@@ -3245,7 +3255,7 @@ var Client = class {
 		this.#baseUrl = options.baseUrl;
 		this.#auth = options.auth;
 		this.#headers = options.headers;
-		this.#redirect = options.redirect;
+		this.#redirect = options.redirect ?? "error";
 		this.sessions = new ClientSessions({
 			baseUrl: this.#baseUrl,
 			redirect: this.#redirect,
@@ -3342,7 +3352,7 @@ function headersInitToRecord(headers) {
 	return Object.fromEntries(new Headers(headers).entries());
 }
 function withRedirectPolicy(init, redirect) {
-	return redirect === void 0 ? init : {
+	return {
 		...init,
 		redirect
 	};
@@ -3444,6 +3454,7 @@ function isAbortError(error) {
 
 //#endregion
 //#region src/client/optimistic-message-submissions.ts
+let submissionSequence = 0;
 var OptimisticMessageSubmissions = class {
 	#optimistic;
 	#show;
@@ -3458,7 +3469,7 @@ var OptimisticMessageSubmissions = class {
 	}
 	submit(input, turnId) {
 		if (input.message === void 0) return void 0;
-		const id = crypto.randomUUID();
+		const id = crypto.randomUUID?.() ?? `submission_${(submissionSequence += 1).toString()}`;
 		this.#submissions.set(id, {
 			id,
 			message: summarizeMessage(input.message),
@@ -4495,7 +4506,10 @@ var SessionStore = class {
 		this.#conversationClient = new ConversationClient(() => this.#publish());
 		this.#events = (init.initialEvents ?? []).filter((event) => this.#conversationClient.hydrate(event));
 		this.#messageSubmissions = new OptimisticMessageSubmissions((submissions) => this.#conversationClient.showSubmissions(submissions), init.optimistic ?? true);
-		this.#session = init.session ?? (init.initialSession === void 0 ? void 0 : this.#client?.sessions.attach(init.initialSession.sessionId, { streamIndex: init.initialSession.streamIndex }));
+		this.#session = init.session ?? (init.initialSession === void 0 ? void 0 : this.#client?.sessions.attach(init.initialSession.sessionId, {
+			streamIndex: init.initialSession.streamIndex,
+			inbox: init.initialSession.inbox
+		}));
 		this.#error = this.#recordedFailure();
 		this.#snapshot = this.#createSnapshot();
 	}
@@ -4570,6 +4584,7 @@ var SessionStore = class {
 					this.#messageSubmissions.correlate(submissionId, deliveryId);
 				}
 				this.#acceptReceipt(deliveryId);
+				this.#callbacks.onSessionChange?.(this.#sessionState);
 			}
 			accepted.resolve(deliveryId);
 			return new StreamDelivery({
@@ -4902,9 +4917,11 @@ var SessionStore = class {
 		if (this.#session === void 0) return this.#observedSession = void 0;
 		const sessionId = this.#session.id;
 		const streamIndex = this.#conversationClient.view.position;
-		if (this.#observedSession?.sessionId !== sessionId || this.#observedSession.streamIndex !== streamIndex) this.#observedSession = {
+		const { inbox } = this.#session.state;
+		if (this.#observedSession?.sessionId !== sessionId || this.#observedSession.streamIndex !== streamIndex || this.#observedSession.inbox !== inbox) this.#observedSession = {
 			sessionId,
-			streamIndex
+			streamIndex,
+			inbox
 		};
 		return this.#observedSession;
 	}