fix(eve): subagents - restrict recursive delegation to root#669
Draft
AndrewBarba wants to merge 2 commits into
Draft
fix(eve): subagents - restrict recursive delegation to root#669AndrewBarba wants to merge 2 commits into
AndrewBarba wants to merge 2 commits into
Conversation
Signed-off-by: Andrew Barba <barba@hey.com>
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Contributor
Bundle + Package Summary:
|
| Area | Metric | Baseline | Current | Delta |
|---|---|---|---|---|
| Package | Packed tarball | 3.59 MB | 3.59 MB | +113 B |
| Package | Unpacked publish size | 13.03 MB | 13.03 MB | -1.8 kB ✅ |
| Package | Installed footprint | 52.13 MB | 52.13 MB | -1.8 kB ✅ |
| Package | Published files | 2504 | 2504 | 0 |
| Package | Installed files | 5735 | 5735 | 0 |
| Runtime | Unique function payloads | 2 | 2 | 0 |
| Runtime | Total function bytes | 8.96 MB | 8.96 MB | -2.0 kB ✅ |
| Runtime | Public routes | 9 | 9 | 0 |
Changed function payloads vs main (f00f084) (2)
| Function | Status | Baseline | Current | Delta | Route changes |
|---|---|---|---|---|---|
functions/.well-known/workflow/v1/flow.func |
changed | 5.65 MB | 5.64 MB | -1.7 kB ✅ | none |
functions/__server.func |
changed | 3.32 MB | 3.32 MB | -258 B ✅ | none |
eve init install
| Metric | Baseline | Current | Delta |
|---|---|---|---|
| Installed footprint | 90.39 MB | 90.39 MB | -1.8 kB ✅ |
| Installed packages | 122 | 122 | 0 |
| dependencies | 4 | 4 | 0 |
| devDependencies | 2 | 2 | 0 |
| Dependency package bytes | 27.21 MB | 27.21 MB | -1.8 kB ✅ |
| devDependency package bytes | 5.04 MB | 5.04 MB | 0 B ➖ |
Build Metadata
- Preset:
vercel - Nitro:
nitro@3.0.260610-beta - Output directory:
apps/fixtures/weather-agent/.vercel/output - Build metadata timestamp: 2026-07-09T21:55:00.489Z
- Route aliases: 9 public, 1 internal (10 total aliases)
- Vercel routes in config: 10
- Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small
Package Drill-Down
Package Details
- Package:
eve@0.22.3 - Package directory:
packages/eve - Tarball: 3.59 MB (
eve-0.22.3.tgz) - Unpacked payload: 13.03 MB across 2504 published files
- Installed footprint: 52.13 MB across 5735 installed files
- Installed root package: 11.76 MB
- Installed dependencies: 40.37 MB
- Runtime dependencies: 1
- Peer dependencies: 5 (4 optional)
Installed footprint is measured from an isolated temporary npm install of the packed tarball.
Heavy installed dependencies
@rolldown/binding-linux-x64-gnu: 19.13 MB (36.7%)eve: 11.76 MB (22.6%)ai: 6.36 MB (12.2%)zod: 5.04 MB (9.7%)nitro: 2.41 MB (4.6%)
Publish payload breakdown
Published file size
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [####....................] 1.51 MB 11.6%
🟡 dist/src/compiled/@vercel/sandbox/index.js [##......................] 632.2 kB 4.9%
🟡 dist/src/compiled/_chunks/workflow/undici-fb5... [#.......................] 502.4 kB 3.9%
🟡 dist/src/compiled/@chat-adapter/slack/index.js [#.......................] 433.8 kB 3.3%
🟡 dist/src/compiled/_chunks/workflow/dist-DJU_7... [#.......................] 276.2 kB 2.1%
🔴 Other published files [########################] 9.68 MB 74.3%
Installed footprint breakdown
Installed package size
🔴 @rolldown/binding-linux-x64-gnu [########################] 19.13 MB 36.7%
🔴 eve [###############.........] 11.76 MB 22.6%
🔴 ai [########................] 6.36 MB 12.2%
🔴 zod [######..................] 5.04 MB 9.7%
🟠 nitro [###.....................] 2.41 MB 4.6%
🟡 rolldown [#.......................] 785.9 kB 1.5%
🔴 Other installed packages [########................] 6.65 MB 12.8%
Runtime dependencies (1)
| Package | Range | Notes |
|---|---|---|
nitro |
3.0.260610-beta |
Peer dependencies (5)
| Package | Range | Notes |
|---|---|---|
@opentelemetry/api |
^1.0.0 |
optional peer |
ai |
catalog: |
|
braintrust |
^3.0.0 |
optional peer |
just-bash |
^3.0.0 |
optional peer |
microsandbox |
^0.5.0 |
optional peer |
eve init install drill-down
eve init install details
- Command:
eve init my-agent - Package manager:
npm - Installed footprint: 90.39 MB across 7553 installed files
- Installed packages: 122 total (116 transitive-only)
- dependencies: 4 direct packages totaling 27.21 MB
- devDependencies: 2 direct packages totaling 5.04 MB
- Other transitive package files: 58.14 MB
Installed footprint is measured from an isolated temporary eve init my-agent using the current packed eve tarball.
Heavy installed dependencies
@typescript/typescript-linux-x64: 27.95 MB (30.9%)@rolldown/binding-linux-x64-gnu: 19.13 MB (21.2%)eve: 11.76 MB (13.0%)zod: 9.00 MB (10.0%)ai: 6.36 MB (7.0%)
Installed footprint breakdown
Installed package size
🔴 @typescript/typescript-linux-x64 [########################] 27.95 MB 30.9%
🔴 @rolldown/binding-linux-x64-gnu [################........] 19.13 MB 21.2%
🔴 eve [##########..............] 11.76 MB 13.0%
🔴 zod [########................] 9.00 MB 10.0%
🔴 ai [#####...................] 6.36 MB 7.0%
🟠 @types/node [##......................] 2.54 MB 2.8%
🔴 Other installed packages [############............] 13.66 MB 15.1%
dependencies (4)
| Package | Range | Installed size | Share |
|---|---|---|---|
@vercel/connect |
0.2.2 |
98.6 kB | 0.1% |
ai |
^7.0.0 |
6.36 MB | 7.0% |
eve |
file:eve-0.22.3.tgz |
11.76 MB | 13.0% |
zod |
4.4.3 |
9.00 MB | 10.0% |
devDependencies (2)
| Package | Range | Installed size | Share |
|---|---|---|---|
@types/node |
24.x |
2.54 MB | 2.8% |
typescript |
7.0.2 |
2.50 MB | 2.8% |
Function Drill-Down
Payload Size Graph
Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func [########################] 5.64 MB 63.0%
🟠 functions/__server.func [##############..........] 3.32 MB 37.0%
Top Function Payloads
🔴 functions/.well-known/workflow/v1/flow.func • 1 public route • 5.64 MB
| Metric | Value |
|---|---|
| Public routes | /.well-known/workflow/v1/flow |
| Runtime | nodejs24.x |
| Handler | index.mjs |
| Payload | 5.64 MB |
| Function files | 5.64 MB across 31 files |
| Traced dependencies | 0 B |
| Signal | 🔴 Bundled file __eve_nitro_handler__.mjs is 2.83 MB (50.1%) |
🔴 🔎 Dependency Analysis
📦 Bundled files:
Bundled file size
🔴 __eve_nitro_handler__.mjs [########################] 2.83 MB 50.1%
🟡 _chunks/sandbox.mjs [#######.................] 766.3 kB 13.6%
🟡 _libs/@ai-sdk/gateway+[...].mjs [####....................] 413.6 kB 7.3%
🟡 _chunks/dist-DJU_7R9s.mjs [###.....................] 335.6 kB 5.9%
🟡 _libs/ai.mjs [##......................] 270.1 kB 4.8%
🟠 Other bundled files [#########...............] 1.03 MB 18.3%
🧾 Vercel Config
{
"handler": "index.mjs",
"launcherType": "Nodejs",
"shouldAddHelpers": false,
"supportsResponseStreaming": true,
"runtime": "nodejs24.x",
"environment": {
"NODE_OPTIONS": "--experimental-require-module"
},
"maxDuration": "max",
"experimentalTriggers": [
{
"type": "queue/v2beta",
"topic": "__eve776561746865722d6167656e74_wkf_workflow_*",
"consumer": "default",
"retryAfterSeconds": 5,
"initialDelaySeconds": 0
}
]
}🟠 functions/__server.func • 8 public routes, 1 internal alias • 3.32 MB
| Metric | Value |
|---|---|
| Public routes | //eve/v1/callback/[token]/eve/v1/connections/[name]/callback/[token]/eve/v1/health/eve/v1/info/eve/v1/session/eve/v1/session/[sessionId]/eve/v1/session/[sessionId]/stream |
| Internal aliases | /__server |
| Runtime | nodejs24.x |
| Handler | index.mjs |
| Payload | 3.32 MB |
| Function files | 3.32 MB across 21 files |
| Traced dependencies | 0 B |
| Signal | 🟠 Bundled file _chunks/dev-runtime-artifacts.mjs is 940.9 kB (28.4%) |
🟠 🔎 Dependency Analysis
📦 Bundled files:
Bundled file size
🟠 _chunks/dev-runtime-artifacts.mjs [########################] 940.9 kB 28.4%
🟠 index.mjs [####################....] 781.2 kB 23.6%
🟠 _chunks/sandbox.mjs [####################....] 766.3 kB 23.1%
🟡 _chunks/dist-DJU_7R9s.mjs [#########...............] 335.6 kB 10.1%
⚪ _chunks/resume-hook-DjPY9VGg.mjs [###.....................] 119.2 kB 3.6%
🟡 Other bundled files [##########..............] 373.3 kB 11.3%
🧾 Vercel Config
{
"handler": "index.mjs",
"launcherType": "Nodejs",
"shouldAddHelpers": false,
"supportsResponseStreaming": true,
"runtime": "nodejs24.x"
}Signed-off-by: Andrew Barba <barba@hey.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
agentdelegation tool only on the root runtime node and root sessionagentlimits.maxSubagentDepthauthoring API, compiled field, inherited run limit, and durable session stateWhy this change
The old implementation treated every delegated agent capability as the same kind of recursion. The framework injected the built-in
agenttool into every runtime node, so a root copy, a recursively called copy, and every explicitly declared specialist could all create another copy of themselves.maxSubagentDepthwas the only brake.That design created several footguns:
agentcalls in parallel, so a small depth limit could still produce an exponentially growing tree of durable sessions.subagentDepthandsubagentMaxDepthsurviving session creation, durable projection, hydration, and child dispatch. Missing or stale lineage state could advertise recursion again.maxSubagentDepthas a misleading dead API.Old vs new behavior
agenttoolagenttoolagenttoolagentagain until the configured depth capagenttoolagenttoolagentSUBAGENT_DEPTH_LIMIT_REACHEDRECURSIVE_AGENT_ROOT_ONLYlimits.maxSubagentDepthWorkflowmaxSubagentscall budgetNew safety boundary
Recursive delegation is now exactly one root-to-copy level and is enforced in three places:
agenttool. Declared subagent nodes never contain it.subagentDepthremains as lineage and observability state, but it no longer controls capability. The structural root-only invariant is the guardrail.Breaking change
limits.maxSubagentDepthhas been removed from the public authoring type, compiled manifest, inherited run limits, and durable session projection. Recursive delegation is always one root-to-copy level; declared subagent chains remain unrestricted by accumulated session depth.The changeset is
minorbecause this removes a public pre-1.0 API.Testing
pnpm test:unit— 4,627 passed, 1 skipped across 439 filespnpm typecheckpnpm lintpnpm docs:checkpnpm guard:invariantspnpm --filter agent-subagents typecheckCoverage includes root-only model exposure, declared subagents at deep accumulated depths, an explicit subagent named
agent, execution-time rejection of stale recursion, strict rejection of the removed authored option, and strict rejection of old compiled manifests.