79:T1128,Bumps every dependency to latest and migrates the breaking changes, most of them from eve 0.39 → 0.83 and `@vercel/connect` 0.8 → 2.5. ## Versions | Package | From | To | | --- | --- | --- | | `eve` | 0.39.3 | 0.83.0 | | `@vercel/connect` | 0.8.0 | 2.5.5 | | `ai` | 7.0.70 | 7.0.150 | | `chat`, `@chat-adapter/state-redis` | 4.38.1 | 4.43.0 | | `@resend/chat-sdk-adapter` | 0.3.0 | 0.5.0 | | `zod` | 4.4.3 | 4.6.7 | | `@vercel/blob` | 2.8.0 | 2.8.2 | | `ultracite` | 7.10.5 | 8.0.2 | | `@biomejs/biome` | 2.5.9 | 2.5.15 (pinned `~2.5`) | | `@types/node` | 24.13.3 | 24.19.2 (kept on 24.x to match `engines`) | | `@github-tools/sdk` → `@github-tools/eve-extension` | 1.11.1 | 0.9.0 | The lockfile is regenerated, so transitive dependencies are current too. TypeScript was already on the latest version. ## Breaking changes - **GitHub tools were silently dropped at runtime.** eve 0.83 skips every tool from the deprecated `@github-tools/sdk/connect/eve` one-liner (`callback "execute" does not have a durable descriptor`). Type checks don't catch this. The tools are now mounted from `@github-tools/eve-extension` at `agent/extensions/github.ts`, with the same `maintainer` preset and `requireApproval: "never"` list. They are now named `github__`. - **Session limits.** `limits.maxOutputTokensPerSession` was removed. It's replaced with `limits.sessionUsage`, keeping the 20k output cap per window and restating eve's 40M new-input default, which a custom check otherwise drops. - **Sandbox.** `vercel()` and `backend` were removed. `agent/sandbox.ts` now exports `VercelSandbox.environment()` and opens it in `defineSandbox`. - **Researcher structured output.** `defineAgent` no longer accepts `outputSchema`. - The `researcher` subagent sets `tool: false`. - A new `research` workflow tool (`agent/tools/research.ts`) opens a session with it via `ctx.agent()` and requests the same cited-findings schema per turn. - eve's docs say a tool may share a `tool: false` subagent's name, but its build still rejects it, so the tool is named `research`. `instructions.ts` is updated to match. - **Biome.** ultracite 8's core config references a rule Biome 2.6 renamed, so Biome is pinned to `~2.5.15` until ultracite catches up. ## Smaller changes - **Resend channel:** forwards emails with `idempotencyKey: resend:`, as eve now recommends, so webhook redeliveries don't reach the agent twice. - **Weekly digest:** the prompt now tells the agent to page through issue lists. GitHub list tools return `{ items, hasMore, nextPage }` since github-tools 1.14. - **Dependencies:** `@chat-adapter/shared` is now a direct dependency, so only one copy of `chat` is installed (the Resend adapter's peer was pulling in a second). - **Docs:** README, ARCHITECTURE and AGENTS are updated. This also fixes the dev schedule URL, which pointed at port 3000 instead of 2000. ## Testing - `pnpm validate`: lint, typecheck and `eve info` all report 0 errors and 0 warnings. - `eve build --skip-sandbox-prewarm` succeeds. The production server boots, and the GitHub, Linear and Resend webhook routes reject unsigned requests. - An end-to-end `eve dev` run with a scripted mock model confirmed: - `github__*` tools load; - `addIssueComment` runs without approval, while `mergePullRequest` prompts; - `research` returns a schema-validated result, and failures return `{ error }`; - the user-preference tools resolve a user principal; - skills load; - the Linear and Resend connections are discovered; - the weekly-digest dev dispatch runs. - Throwaway tests covered the GitHub `onComment`/`onPullRequest` gates, the Linear `onAgentSession` context, `sessionUsage` thresholds and the preference-key helpers. ## Notes for reviewers - `pnpm build` now prepares the Vercel Sandbox snapshot at build time. Local builds therefore need the linked project's credentials; Vercel deploys have them automatically. - `@vercel/connect` 2.x no longer creates connectors automatically at runtime. This doesn't affect the template, because the README already creates and attaches them with `vercel connect`. - The `externalDependencies: ["@vercel/connect"]` workaround in `agent.ts` no longer appears necessary: the build and server work without it. I left it in to keep this change focused. --- _Generated by [Claude Code](https://claude.ai/code/session_01AYQVSZgcJiNW1yaQ5khj4q)_7a:Ta927,**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh).

Package	Supply Chain Security	Quality	Maintenance
eve@0.39.3 ⏵ 0.83.0		⁺¹	⁺¹
@types/node@24.13.3 ⏵ 24.19.2	⁺¹	⁺¹
@vercel/blob@2.8.0 ⏵ 2.8.2		⁺¹
zod@4.4.3 ⏵ 4.6.7
@github-tools/eve-extension@0.9.0
@resend/chat-sdk-adapter@0.3.0 ⏵ 0.5.0	⁺⁴	⁺¹	⁺³
@chat-adapter/shared@4.34.0 ⏵ 4.43.0	⁺²⁵	⁺¹	⁺¹
ultracite@7.10.5 ⏵ 8.0.2		⁺²
@biomejs/biome@2.5.9 ⏵ 2.5.15	⁺¹	⁺¹	^-2
@chat-adapter/state-redis@4.38.1 ⏵ 4.43.0
chat@4.38.1 ⏵ 4.43.0			⁺¹
ai@7.0.70 ⏵ 7.0.150
@vercel/connect@0.8.0 ⏵ 2.5.5		⁺¹	⁺¹

[View full report](https://socket.dev/dashboard/org/vercel/diff-scan/c2c88c7b-1921-490a-8fdc-a8aac004476c?tab=dependencies) 63:["$","$L76",null,{"entries":[{"key":["platform",{"userId":"anon"},"pulls","page",{"owner":"vercel-labs","repo":"kody-eve-template","pullNumber":2}],"data":{"repositoryId":"4825","detail":{"author":{"avatarUrl":"https://cdn.trylle.com/media/images/f7c45e6c980e7eca546c04bea5d1330b?key=AV68XlVgz115T2ei0pmdXl%2F1b%2F%2BXYyXX1gqb8enXxeYqupwlMgnS73rC0cqa3OMNKFSAGFDt3d190yA87AXMos5FAIaJoL%2B9KVZNf5%2BhKXzRqhdJRHryqMxXl7wzFqxkilzLS8kaOlg5juBJuzrx6aMF52YkfwrAGDmNUux5e0xeYenq2%2BY02ruLVQ%3D%3D","externalProvider":"github","login":"bensabic","type":"User","url":"https://github.com/bensabic"},"authorId":"27636870","baseRefName":"main","closedAt":"2026-10-23T11:37:32Z","comments":2,"createdAt":"2026-10-23T01:59:48Z","headRefName":"chore/bump-dependencies","id":"4944345","isDraft":false,"labels":[],"mergedAt":"2026-10-23T11:37:32Z","number":2,"repository":{"name":"kody-eve-template","owner":"vercel-labs","provider":"forgejo"},"state":"merged","title":"chore: bump dependencies (eve 0.83, @vercel/connect 2.5) and migrate breaking changes","updatedAt":"2026-10-23T11:37:34Z","url":"https://trylle.com/vercel-labs/kody-eve-template/pulls/2","body":"$79","additions":1146,"deletions":1075,"changedFiles":14,"commits":2,"reviewComments":1,"headSha":"77f5ab55913760e63bf5ec9c33e3cd0a1fbc3358","baseSha":"0c5b823dbd5e162f12d0a160032a0f6ffbb78a88","headRepoOwner":"vercel-labs","headRepoName":"kody-eve-template","isMerged":true,"mergeCommitSha":"0c5b823dbd5e162f12d0a160032a0f6ffbb78a88","mergedBy":{"id":715,"avatarUrl":"https://cdn.trylle.com/avatars/4d7b4e63f620de4faab59d2b43d10c99e7ec5eb57bedeeb4f136caddfabb7a82","login":"vercel-labs","name":"Vercel Labs","type":"User","url":"https://trylle.com/vercel-labs"},"mergeable":false,"conflictingFiles":null,"requestedTeams":[],"requestedReviewers":[],"graphqlId":"issue:2"},"comments":[{"id":26934306,"graphqlId":"26934306","body":"$7a","createdAt":"2026-10-23T02:00:05Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/cf91076218762251b0718dd0217bff7f?key=Aemm%2Fkuxf%2BbNdx34RcucjcwMyS7fZJdw%2Fh0DQmYTKPq6iVUJRFaNwaCFsDoe55qjgL1TmBWgQO%2BL1vVy%2BcjSIbBdRw3YaKe6n7ItSIktuk3fjR4u71v71XUfD6IFrDgzhXfugcd%2BNSZzWj%2B3aWNYeXkxoHsXUwWUbrNdRNXSXp6CVgYnuPs4R%2FwVGw%3D%3D","externalProvider":"github","login":"socket-security[bot]","type":"Bot","url":"https://github.com/apps/socket-security"}}],"commits":[{"sha":"77f5ab55913760e63bf5ec9c33e3cd0a1fbc3358","message":"chore: retrigger CI\n\nCo-Authored-By: Claude Opus 5.5 \nClaude-Session: https://claude.ai/code/session_01AYQVSZgcJiNW1yaQ5khj4q\n","createdAt":"2026-10-23T16:43:18+11:00","author":{"avatarUrl":"","login":"","name":"Ben Sabic","type":"User","url":""},"verification":{"verified":false,"reason":"gpg.error.no_gpg_keys_found"}},{"sha":"a5e69786ea472f8e166ad85c1d7be1691a71c8c4","message":"chore: bump dependencies (eve 0.83, @vercel/connect 2.5) and migrate breaking changes\n\n- limits.maxOutputTokensPerSession -> limits.sessionUsage\n- sandbox: VercelSandbox.environment() with exported environment\n- researcher: outputSchema moved to a research workflow tool (ctx.agent)\n- GitHub tools: @github-tools/sdk/connect/eve -> @github-tools/eve-extension\n- resend channel: idempotencyKey on forwarded emails\n- weekly digest: page through issue lists\n- pin Biome 2.5.x for ultracite 8; dedupe chat via @chat-adapter/shared\n\nCo-Authored-By: Claude Opus 5.5 \nClaude-Session: https://claude.ai/code/session_01AYQVSZgcJiNW1yaQ5khj4q\n","createdAt":"2026-10-23T12:58:44+11:00","author":{"avatarUrl":"","login":"","name":"Ben Sabic","type":"User","url":""},"verification":{"verified":false,"reason":"gpg.error.no_gpg_keys_found"}}],"events":[{"id":26934307,"event":"reviewed","createdAt":"2026-10-23T05:14:56Z","actor":{"avatarUrl":"https://cdn.trylle.com/media/images/ef17669df6131c12cf47925cdd4b144c?key=AbmgnoaW%2FE%2FWbDJ9dol4jBV7rbS%2BU5oaKua6aPPgWfJUNpBYEehxqMieLd4FczE1%2B8TM2ZaVODSL%2F4%2BBfZyBsjU84ugmCVztAWC%2FFrjOnNyKxd8zgtY%2BV%2F%2F8cdL9%2BXf8Go%2Fp%2FVy%2Bpx92Xqo9jSYvNGPyyYYW7Tsi6KvPuy%2Bl7x559j7RW7bRBFKw3g%3D%3D","externalProvider":"github","login":"Anshuman71","type":"User","url":"https://github.com/Anshuman71"},"reviewId":3623920,"reviewState":"APPROVED","body":"Looks good to me!"}],"reviews":[{"id":3623920,"state":"APPROVED","author":{"avatarUrl":"https://cdn.trylle.com/media/images/ef17669df6131c12cf47925cdd4b144c?key=AbmgnoaW%2FE%2FWbDJ9dol4jBV7rbS%2BU5oaKua6aPPgWfJUNpBYEehxqMieLd4FczE1%2B8TM2ZaVODSL%2F4%2BBfZyBsjU84ugmCVztAWC%2FFrjOnNyKxd8zgtY%2BV%2F%2F8cdL9%2BXf8Go%2Fp%2FVy%2Bpx92Xqo9jSYvNGPyyYYW7Tsi6KvPuy%2Bl7x559j7RW7bRBFKw3g%3D%3D","externalProvider":"github","login":"Anshuman71","type":"User","url":"https://github.com/Anshuman71"},"body":"Looks good to me!","submittedAt":"2026-10-23T05:14:56Z","official":false}],"stackEvents":[],"commentPagination":{"totalCount":2,"perPage":30,"loadedPages":[1]},"eventPagination":{"loadedPages":[1],"hasMore":false},"headRefDeleted":false},"fetchedAt":1794629115556}],"children":"$L7b"}] 65:null 6c:[["$","title","0",{"children":"Commits · chore: bump dependencies (eve 0.83, @vercel/connect 2.5) and migrate breaking changes · vercel-labs/kody-eve-template | Trylle"}],["$","meta","1",{"name":"description","content":"Commits on chore: bump dependencies (eve 0.83, @vercel/connect 2.5) and migrate breaking changes (#2) in vercel-labs/kody-eve-template."}],["$","meta","2",{"name":"application-name","content":"Trylle"}],["$","link","3",{"rel":"manifest","href":"/manifest.json","crossOrigin":"$undefined"}],["$","meta","4",{"name":"keywords","content":"Commits · chore: bump dependencies (eve 0.83, @vercel/connect 2.5) and migrate breaking changes · vercel-labs/kody-eve-template, vercel-labs/kody-eve-template, vercel-labs/kody-eve-template repository, kody-eve-template, TypeScript repository, source code, trylle, agent-native git platform, git platform for agents and humans, git platform for ai agents, coding agent pull requests, ai code review, repository automation, stacked pull requests, two-way github sync, github-compatible actions, try cli"}],["$","meta","5",{"name":"robots","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","6",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","7",{"name":"googlebot","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","8",{"name":"twitter:domain","content":"trylle.com"}],["$","meta","9",{"name":"twitter:url","content":"https://trylle.com/vercel-labs/kody-eve-template/pulls/2/commits"}],["$","link","10",{"rel":"canonical","href":"https://trylle.com/vercel-labs/kody-eve-template/pulls/2/commits"}],["$","meta","11",{"name":"format-detection","content":"telephone=no"}],["$","meta","12",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","13",{"name":"apple-mobile-web-app-title","content":"Trylle"}],["$","meta","14",{"name":"apple-mobile-web-app-status-bar-style","content":"black-translucent"}],["$","meta","15",{"property":"og:title","content":"Commits · chore: bump dependencies (eve 0.83, @vercel/connect 2.5) and migrate breaking changes · vercel-labs/kody-eve-template | Trylle"}],["$","meta","16",{"property":"og:description","content":"Commits on chore: bump dependencies (eve 0.83, @vercel/connect 2.5) and migrate breaking changes (#2) in vercel-labs/kody-eve-template."}],["$","meta","17",{"property":"og:url","content":"https://trylle.com/vercel-labs/kody-eve-template/pulls/2/commits"}],["$","meta","18",{"property":"og:site_name","content":"Trylle"}],["$","meta","19",{"property":"og:locale","content":"en_US"}],["$","meta","20",{"property":"og:image","content":"https://trylle.com/api/og.png?kind=repo&owner=vercel-labs&repo=kody-eve-template"}],["$","meta","21",{"property":"og:image:secure_url","content":"https://trylle.com/api/og.png?kind=repo&owner=vercel-labs&repo=kody-eve-template"}],["$","meta","22",{"property":"og:image:type","content":"image/png"}],["$","meta","23",{"property":"og:image:width","content":"1200"}],["$","meta","24",{"property":"og:image:height","content":"630"}],["$","meta","25",{"property":"og:image:alt","content":"vercel-labs/kody-eve-template repository preview on Trylle"}],["$","meta","26",{"property":"og:type","content":"website"}],["$","meta","27",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","28",{"name":"twitter:site","content":"@trylle"}],["$","meta","29",{"name":"twitter:title","content":"Commits · chore: bump dependencies (eve 0.83, @vercel/connect 2.5) and migrate breaking changes · vercel-labs/kody-eve-template | Trylle"}],["$","meta","30",{"name":"twitter:description","content":"Commits on chore: bump dependencies (eve 0.83, @vercel/connect 2.5) and migrate breaking changes (#2) in vercel-labs/kody-eve-template."}],["$","meta","31",{"name":"twitter:image","content":"https://trylle.com/api/og.png?kind=repo&owner=vercel-labs&repo=kody-eve-template"}],"$L7c","$L7d","$L7e","$L7f","$L80"]

Commits on Fri, Oct 23, 2026