feat(eve): sandbox - use Vercel fork API by AndrewBarba · Pull Request #1285 · vercel/eve

AndrewBarba · 2026-07-28T17:46:19Z

Description

Use the server-side Vercel Sandbox fork API introduced in @vercel/sandbox 2.9.0 for template-backed sessions.

This removes the need for eve to carry template snapshot IDs into Sandbox.create calls. Template prewarming still saves a framework-owned snapshot because Vercel forks from the latest saved snapshot rather than live filesystem state.

The session path now:

forks the named prepared template with Sandbox.fork
preserves author-supplied fork overrides while keeping the framework-owned image and source
rejects templates without a framework snapshot, avoiding the API fallback that would fork an unprovisioned base image
retains Sandbox.create for templates and template-less sessions

Upstream announcement: https://vercel.com/changelog/vercel-sandbox-supports-forking

How did you test your changes?

pnpm --filter eve build:compiled
pnpm --filter eve exec vitest run --config vitest.unit.config.ts src/execution/sandbox/bindings/vercel.test.ts
pnpm fmt
pnpm lint
NUXT_TELEMETRY_DISABLED=1 pnpm typecheck
pnpm test:unit
git diff --check

The Vercel binding suite passes 45 tests. The full eve unit suite passes 5,498 tests with one skipped, along with the eve-catalog and eve-docs unit suites.

PR Checklist

I linked an issue with prior discussion confirming this change is wanted
I ran the relevant checks from CONTRIBUTING.md
I added tests and documentation where relevant
I added a changeset if this touches the published eve package
DCO sign-off passes for every commit (git commit --signoff)

Signed-off-by: Andrew Barba <barba@hey.com>

vercel · 2026-07-28T17:46:24Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
eve-docs	Ready	Preview, Comment, Open in v0	Jul 28, 2026 5:48pm
eve-docs-1644	Ready	Preview, Comment, Open in v0	Jul 28, 2026 5:48pm
eve-docs-4759	Ready	Preview, Comment, Open in v0	Jul 28, 2026 5:48pm

socket-security · 2026-07-28T17:47:36Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/@vercel/sandbox@2.9.0

View full report

github-actions · 2026-07-28T17:49:28Z

Bundle + Package Summary: `apps/fixtures/weather-agent`

Key takeaways

No notable deltas vs main (e68667b).

Delta vs `main (e68667b)`

Area	Metric	Baseline	Current	Delta
Package	Packed tarball	7.43 MB	7.43 MB	+354 B ⚠️
Package	Unpacked publish size	27.97 MB	27.98 MB	+8.9 kB ⚠️
Package	Installed footprint	68.85 MB	68.86 MB	+8.9 kB ⚠️
Package	Published files	2800	2800	0
Package	Installed files	6269	6269	0
Runtime	Unique function payloads	2	2	0
Runtime	Total function bytes	16.52 MB	16.52 MB	+940 B ⚠️
Runtime	Public routes	11	11	0

Changed function payloads vs main (e68667b) (2)

Function	Status	Baseline	Current	Delta	Route changes
`functions/__server.func`	changed	8.26 MB	8.26 MB	+470 B ⚠️	none
`functions/.well-known/workflow/v1/flow.func`	changed	8.26 MB	8.26 MB	+470 B ⚠️	none

`eve init` install

Metric	Baseline	Current	Delta
Installed footprint	107.26 MB	107.27 MB	+8.9 kB ⚠️
Installed packages	123	123	0
dependencies	4	4	0
devDependencies	2	2	0
Dependency package bytes	42.33 MB	42.34 MB	+8.9 kB ⚠️
devDependency package bytes	5.04 MB	5.04 MB	0 B ➖

Build Metadata

Preset: vercel
Nitro: nitro@3.0.260610-beta
Output directory: apps/fixtures/weather-agent/.vercel/output
Build metadata timestamp: 2026-07-28T17:48:42.008Z
Route aliases: 11 public, 1 internal (12 total aliases)
Vercel routes in config: 14
Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small

Package Drill-Down

Package Details

Package: eve@0.27.8
Package directory: packages/eve
Tarball: 7.43 MB (eve-0.27.8.tgz)
Unpacked payload: 27.98 MB across 2800 published files
Installed footprint: 68.86 MB across 6269 installed files
Installed root package: 26.70 MB
Installed dependencies: 42.17 MB
Runtime dependencies: 2
Peer dependencies: 5 (4 optional)

Installed footprint is measured from an isolated temporary npm install of the packed tarball.

Heavy installed dependencies

eve: 26.70 MB (38.8%)
@rolldown/binding-linux-x64-gnu: 18.96 MB (27.5%)
ai: 6.52 MB (9.5%)
zod: 5.04 MB (7.3%)
nitro: 2.41 MB (3.5%)

Publish payload breakdown

Published file size
🔴 dist/src/compiled/shadcn-registry/index.js       [########################] 13.15 MB 47.0%
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [###.....................] 1.51 MB 5.4%
🟡 dist/src/compiled/@vercel/sandbox/index.js       [#.......................] 632.6 kB 2.3%
🟡 dist/src/compiled/_chunks/workflow/undici-C2Z... [#.......................] 502.4 kB 1.8%
🟡 dist/src/compiled/@chat-adapter/slack/index.js   [#.......................] 440.5 kB 1.6%
🔴 Other published files                            [#####################...] 11.74 MB 42.0%

Installed footprint breakdown

Installed package size
🔴 eve                             [########################] 26.70 MB 38.8%
🔴 @rolldown/binding-linux-x64-gnu [#################.......] 18.96 MB 27.5%
🔴 ai                              [######..................] 6.52 MB 9.5%
🔴 zod                             [#####...................] 5.04 MB 7.3%
🟠 nitro                           [##......................] 2.41 MB 3.5%
🟠 undici                          [#.......................] 1.62 MB 2.4%
🔴 Other installed packages        [#######.................] 7.63 MB 11.1%

Runtime dependencies (2)

Package	Range	Notes
`nitro`	`3.0.260610-beta`
`undici`	`7.28.0`

Peer dependencies (5)

Package	Range	Notes
`@opentelemetry/api`	`^1.0.0`	optional peer
`ai`	`catalog:`
`braintrust`	`^3.0.0`	optional peer
`just-bash`	`^3.0.0`	optional peer
`microsandbox`	`^0.5.0`	optional peer

eve init install drill-down

`eve init` install details

Command: eve init my-agent
Package manager: npm
Installed footprint: 107.27 MB across 8137 installed files
Installed packages: 123 total (117 transitive-only)
dependencies: 4 direct packages totaling 42.34 MB
devDependencies: 2 direct packages totaling 5.04 MB
Other transitive package files: 59.88 MB

Installed footprint is measured from an isolated temporary eve init my-agent using the current packed eve tarball.

Heavy installed dependencies

@typescript/typescript-linux-x64: 27.95 MB (26.1%)
eve: 26.70 MB (24.9%)
@rolldown/binding-linux-x64-gnu: 18.96 MB (17.7%)
zod: 9.00 MB (8.4%)
ai: 6.52 MB (6.1%)

Installed footprint breakdown

Installed package size
🔴 @typescript/typescript-linux-x64 [########################] 27.95 MB 26.1%
🔴 eve                              [#######################.] 26.70 MB 24.9%
🔴 @rolldown/binding-linux-x64-gnu  [################........] 18.96 MB 17.7%
🔴 zod                              [########................] 9.00 MB 8.4%
🔴 ai                               [######..................] 6.52 MB 6.1%
🟠 @types/node                      [##......................] 2.54 MB 2.4%
🔴 Other installed packages         [#############...........] 15.61 MB 14.6%

dependencies (4)

Package	Range	Installed size	Share
`@vercel/connect`	`0.4.2`	135.8 kB	0.1%
`ai`	`^7.0.38`	6.52 MB	6.1%
`eve`	`file:eve-0.27.8.tgz`	26.70 MB	24.9%
`zod`	`4.4.3`	9.00 MB	8.4%

devDependencies (2)

Package	Range	Installed size	Share
`@types/node`	`24.x`	2.54 MB	2.4%
`typescript`	`7.0.2`	2.50 MB	2.3%

Function Drill-Down

Payload Size Graph

Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func     [########################] 8.26 MB 50.0%
🔴 functions/__server.func                         [########################] 8.26 MB 50.0%

Top Function Payloads

🟠 functions/.well-known/workflow/v1/flow.func • 1 public route • 8.26 MB

Metric	Value
Public routes	`/.well-known/workflow/v1/flow`
Runtime	`nodejs24.x`
Handler	`index.mjs`
Payload	8.26 MB
Function files	8.26 MB across 44 files
Traced dependencies	0 B
Signal	🟠 Bundled file `_chunks/runtime-artifacts.mjs` is 1.58 MB (19.1%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 _chunks/runtime-artifacts.mjs [#############...........] 1.58 MB 19.1%
🟠 index.mjs                     [##########..............] 1.18 MB 14.3%
🟡 _libs/undici.mjs              [########................] 925.6 kB 11.2%
🟡 _chunks/world-vercel.mjs      [#######.................] 900.3 kB 10.9%
🟡 _chunks/sandbox.mjs           [######..................] 767.8 kB 9.3%
🟠 Other bundled files           [########################] 2.91 MB 35.2%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x",
  "maxDuration": "max",
  "experimentalTriggers": [
    {
      "type": "queue/v2beta",
      "topic": "__eve776561746865722d6167656e74_wkf_workflow_*",
      "consumer": "default",
      "retryAfterSeconds": 5,
      "initialDelaySeconds": 0
    }
  ],
  "environment": {
    "WORKFLOW_PRECONDITION_GUARD": "1"
  }
}

🟠 functions/__server.func • 10 public routes, 1 internal alias • 8.26 MB

Metric	Value
Public routes	`/` `/eve/v1/callback/[token]` `/eve/v1/connections/[name]/callback/[token]` `/eve/v1/health` `/eve/v1/info` `/eve/v1/session` `/eve/v1/session/[sessionId]` `/eve/v1/session/[sessionId]/cancel` `/eve/v1/session/[sessionId]/stream` `/eve/v1/session/reset`
Internal aliases	`/__server`
Runtime	`nodejs24.x`
Handler	`index.mjs`
Payload	8.26 MB
Function files	8.26 MB across 44 files
Traced dependencies	0 B
Signal	🟠 Bundled file `_chunks/runtime-artifacts.mjs` is 1.58 MB (19.1%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 _chunks/runtime-artifacts.mjs [#############...........] 1.58 MB 19.1%
🟠 index.mjs                     [##########..............] 1.18 MB 14.3%
🟡 _libs/undici.mjs              [########................] 925.6 kB 11.2%
🟡 _chunks/world-vercel.mjs      [#######.................] 900.3 kB 10.9%
🟡 _chunks/sandbox.mjs           [######..................] 767.8 kB 9.3%
🟠 Other bundled files           [########################] 2.91 MB 35.2%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x"
}

Build Timing: `e2e/fixtures/agent-tools-sandbox`

This is an informational timing measurement inside eve build, from preflight through publication. Output-size measurement and profile writing are excluded.

Build mode: deployable Vercel build with sandbox template prewarm included.

Build pipeline: 1.97 s -> 1.85 s (-125.4 ms) vs main (e68667b).
Timing is informational: shared GitHub runners are too variable for a hard timing budget.

Detailed phase timings vs `main (e68667b)`

Phase	Baseline	Current	Delta
`extension.check`	1.1 ms	1.1 ms	0.0 ms
`project.resolve`	0.6 ms	0.6 ms	0.0 ms
`workspace.create`	0.7 ms	0.8 ms	+0.1 ms
`host.prepare`	340.0 ms	204.0 ms	-136.0 ms
`vercel.service-prefix.resolve`	1.6 ms	1.7 ms	+0.1 ms
`nitro.create`	207.2 ms	203.3 ms	-3.9 ms
`sandbox.prewarm`	182.4 ms	179.6 ms	-2.8 ms
`nitro.cache.prepare`	0.2 ms	0.2 ms	0.0 ms
`nitro.prepare`	0.8 ms	0.7 ms	-0.1 ms
`nitro.public-assets`	0.8 ms	0.8 ms	0.0 ms
`nitro.prerender`	0.4 ms	0.4 ms	0.0 ms
`nitro.bundle`	1.23 s	1.25 s	+17.1 ms
`nitro.cache.write`	0.4 ms	0.3 ms	-0.1 ms
`agent-summary.emit`	0.5 ms	0.5 ms	0.0 ms
`nitro.close`	0.1 ms	0.1 ms	0.0 ms
`output.publish`	3.4 ms	3.3 ms	-0.1 ms
`workspace.remove`	1.9 ms	1.9 ms	0.0 ms

feat(eve): fork Vercel sandbox sessions

a2b4885

Signed-off-by: Andrew Barba <barba@hey.com>

vercel Bot deployed to Preview – eve-docs-4759 July 28, 2026 17:47 View deployment

vercel Bot deployed to Preview – eve-docs-1644 July 28, 2026 17:47 View deployment

vercel Bot deployed to Preview – eve-docs July 28, 2026 17:48 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(eve): sandbox - use Vercel fork API - #1285

feat(eve): sandbox - use Vercel fork API#1285
AndrewBarba wants to merge 1 commit into
mainfrom
barba/vercel-sandbox-forking

AndrewBarba commented Jul 28, 2026

Uh oh!

vercel Bot commented Jul 28, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 28, 2026

Uh oh!

github-actions Bot commented Jul 28, 2026

Package Details

`eve init` install details

Payload Size Graph

Top Function Payloads

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

AndrewBarba commented Jul 28, 2026

Description

How did you test your changes?

PR Checklist

Uh oh!

vercel Bot commented Jul 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jul 28, 2026

Uh oh!

github-actions Bot commented Jul 28, 2026

Bundle + Package Summary: apps/fixtures/weather-agent

Delta vs main (e68667b)

eve init install

Package Details

eve init install details

Payload Size Graph

Top Function Payloads

Build Timing: e2e/fixtures/agent-tools-sandbox

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

vercel Bot commented Jul 28, 2026 •

edited

Loading

Bundle + Package Summary: `apps/fixtures/weather-agent`

Delta vs `main (e68667b)`

`eve init` install

`eve init` install details

Build Timing: `e2e/fixtures/agent-tools-sandbox`