test(eve): cover schedule approval policies

[ruiconti]

What

• Add an approval policy to the heartbeat schedule fixture. It skips only the app principal used by the scheduler.
• Cover the two caller states in the harness test. A schedule turn returns "not-applicable". A person who resumes the same session returns "user-approval".
• Document the app-auth handoff for run schedules, when a policy should inspect current rather than initiator, and the replay risk when a schedule skips approval.

Why this shape

A schedule has no person who can answer an approval prompt. The policy checks the full app identity, not its eve:app ID alone. That prevents a later human turn from inheriting the scheduler bypass.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
eve-docs	Ready	Preview, Comment, Open in v0	Jun 25, 2026 6:38pm

[github-actions]

Bundle + Package Summary: apps/fixtures/weather-agent

Key takeaways

• No notable deltas vs main (f77aad3).

Delta vs main (f77aad3)

Area	Metric	Baseline	Current	Delta
Package	Packed tarball	3.42 MB	3.42 MB	+146 B ⚠️
Package	Unpacked publish size	12.43 MB	12.43 MB	+1.6 kB ⚠️
Package	Installed footprint	52.41 MB	52.41 MB	+1.6 kB ⚠️
Package	Published files	2312	2312	0
Package	Installed files	5520	5520	0
Runtime	Unique function payloads	2	2	0
Runtime	Total function bytes	9.61 MB	9.61 MB	-176 B ✅
Runtime	Public routes	9	9	0

Changed function payloads vs main (f77aad3) (2)

Function	Status	Baseline	Current	Delta	Route changes
functions/__server.func	changed	3.98 MB	3.98 MB	-144 B ✅	none
functions/.well-known/workflow/v1/flow.func	changed	5.63 MB	5.63 MB	-32 B ✅	none

Build Metadata

• Preset: vercel
• Nitro: nitro@3.0.260610-beta
• Output directory: apps/fixtures/weather-agent/.vercel/output
• Build metadata timestamp: 2026-06-25T18:39:03.493Z
• Route aliases: 9 public, 1 internal (10 total aliases)
• Vercel routes in config: 10
• Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small

Package Drill-Down

Package Details

• Package: eve@0.13.8
• Package directory: packages/eve
• Tarball: 3.42 MB (eve-0.13.8.tgz)
• Unpacked payload: 12.43 MB across 2312 published files
• Installed footprint: 52.41 MB across 5520 installed files
• Installed root package: 11.16 MB
• Installed dependencies: 41.26 MB
• Runtime dependencies: 1
• Peer dependencies: 12 (11 optional)

Installed footprint is measured from an isolated temporary npm install of the packed tarball.

Heavy installed dependencies

• @rolldown/binding-linux-x64-gnu: 20.26 MB (38.6%)
• eve: 11.16 MB (21.3%)
• ai: 6.26 MB (11.9%)
• zod: 5.04 MB (9.6%)
• nitro: 2.41 MB (4.6%)

Publish payload breakdown

Published file size
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [####....................] 1.51 MB 12.1%
🟡 dist/src/compiled/@workflow/core/runtime.js      [##......................] 788.4 kB 6.3%
🟡 dist/src/compiled/@vercel/sandbox/index.js       [##......................] 632.0 kB 5.1%
🟡 dist/src/compiled/@chat-adapter/slack/index.js   [#.......................] 438.4 kB 3.5%
🟡 dist/src/compiled/_chunks/workflow/attribute-... [#.......................] 371.6 kB 3.0%
🔴 Other published files                            [########################] 8.70 MB 69.9%

Installed footprint breakdown

Installed package size
🔴 @rolldown/binding-linux-x64-gnu [########################] 20.26 MB 38.6%
🔴 eve                             [#############...........] 11.16 MB 21.3%
🔴 ai                              [#######.................] 6.26 MB 11.9%
🔴 zod                             [######..................] 5.04 MB 9.6%
🟠 nitro                           [###.....................] 2.41 MB 4.6%
🟡 rolldown                        [#.......................] 771.7 kB 1.5%
🔴 Other installed packages        [########................] 6.52 MB 12.4%

Runtime dependencies (1)

Package	Range	Notes
nitro	3.0.260610-beta

Peer dependencies (12)

Package	Range	Notes
@opentelemetry/api	^1.0.0	optional peer
@sveltejs/kit	^2.0.0	optional peer
ai	catalog:
braintrust	^3.0.0	optional peer
just-bash	^3.0.0	optional peer
microsandbox	^0.5.0	optional peer
next	^16.0.0	optional peer
nuxt	^4.0.0	optional peer
react	^19.0.0	optional peer
svelte	^5.0.0	optional peer
vite	^8.0.0	optional peer
vue	^3.5.0	optional peer

Function Drill-Down

Payload Size Graph

Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func     [########################] 5.63 MB 58.6%
🔴 functions/__server.func                         [#################.......] 3.98 MB 41.4%

Top Function Payloads

🟠 functions/.well-known/workflow/v1/flow.func • 1 public route • 5.63 MB

Metric	Value
Public routes	/.well-known/workflow/v1/flow
Runtime	nodejs24.x
Handler	index.mjs
Payload	5.63 MB
Function files	5.63 MB across 26 files
Traced dependencies	0 B
Signal	🟠 Bundled file __eve_nitro_handler__.mjs is 1.87 MB (33.2%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 __eve_nitro_handler__.mjs              [########################] 1.87 MB 33.2%
🟠 _chunks/runtime.mjs                    [#############...........] 975.4 kB 17.3%
🟡 _chunks/sandbox.mjs                    [##########..............] 766.0 kB 13.6%
🟡 _chunks/attribute-changes-DUxG-Gic.mjs [######..................] 473.2 kB 8.4%
🟡 _libs/@ai-sdk/gateway+[...].mjs        [#####...................] 413.5 kB 7.3%
🟠 Other bundled files                    [###############.........] 1.14 MB 20.2%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x",
  "environment": {
    "NODE_OPTIONS": "--experimental-require-module"
  },
  "maxDuration": "max",
  "experimentalTriggers": [
    {
      "type": "queue/v2beta",
      "topic": "__eve_wkf_workflow_*",
      "consumer": "default",
      "retryAfterSeconds": 5,
      "initialDelaySeconds": 0
    }
  ]
}

---

🟠 functions/__server.func • 8 public routes, 1 internal alias • 3.98 MB

Metric	Value
Public routes	/ /eve/v1/callback/[token] /eve/v1/connections/[name]/callback/[token] /eve/v1/health /eve/v1/info /eve/v1/session /eve/v1/session/[sessionId] /eve/v1/session/[sessionId]/stream
Internal aliases	/__server
Runtime	nodejs24.x
Handler	index.mjs
Payload	3.98 MB
Function files	3.98 MB across 21 files
Traced dependencies	0 B
Signal	🟠 Bundled file index.mjs is 1.51 MB (37.9%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                              [########################] 1.51 MB 37.9%
🟠 _chunks/runtime.mjs                    [##############..........] 883.8 kB 22.2%
🟠 _chunks/sandbox.mjs                    [############............] 766.0 kB 19.2%
🟡 _chunks/attribute-changes-DUxG-Gic.mjs [#######.................] 448.9 kB 11.3%
⚪ _libs/zod.mjs                          [##......................] 114.2 kB 2.9%
🟡 Other bundled files                    [####....................] 258.8 kB 6.5%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x"
}