Skip to content

feat(eve): expose userspace sandbox drives - #1889

Merged
ruiconti merged 4 commits into
mainfrom
rui/userspace-sandbox-drives-main
Aug 13, 2026
Merged

feat(eve): expose userspace sandbox drives#1889
ruiconti merged 4 commits into
mainfrom
rui/userspace-sandbox-drives-main

Conversation

@ruiconti

@ruiconti ruiconti commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

What

  • re-export Drive from eve/sandbox/vercel
  • add sessionCreateOptions({ session }) for Drive mounts on fresh live sandboxes
  • keep mounts out of static template creation options
  • vendor the Drives-capable @vercel/sandbox@2.10.0-beta.0

Data flow

Before: vercel(opts) forwarded one static option set to template prewarm and live session creation. Author code had no session identity at sandbox creation, and the vendored SDK could not represent Drives.

After: eve first looks up the named live sandbox. On a miss, it calls sessionCreateOptions with the owning session ID, merges the returned mounts into that live Sandbox.create call, and leaves template prewarm and resumed sandboxes untouched.

Why this shape

mounts is excluded from VercelSandboxCreateOptions so a static option cannot attach a userspace Drive while prewarming a template. Re-exporting Drive keeps Drive CRUD and sandbox creation on the same vendored SDK and credential path.

Scope

This PR only adds userspace Drive support. Drive naming, seeding, deletion, and attach-conflict policy remain application-owned. Parent sandbox inheritance will be handled separately because it must compose with subagent skills and workspace mounts.

@vercel

vercel Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
eve-docs Ready Ready Preview Aug 13, 2026 5:48pm
eve-docs-4759 Ready Ready Preview, v0 Aug 13, 2026 5:48pm
1 Skipped Deployment
Project Deployment Actions Updated (UTC)
eve-pkg Skipped Skipped Aug 13, 2026 5:48pm

@socket-security

socket-security Bot commented Aug 10, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​@​vercel/​sandbox@​2.10.0-beta.07110010099100

View full report

@github-actions

github-actions Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bundle + Package Summary: apps/fixtures/weather-agent

Key takeaways

  • No notable deltas vs main (2714386).

Delta vs main (2714386)

Area Metric Baseline Current Delta
Package Packed tarball 7.96 MB 7.99 MB +36.9 kB ⚠️
Package Unpacked publish size 29.73 MB 29.95 MB +225.0 kB ⚠️
Package Installed footprint 73.24 MB 73.47 MB +225.1 kB ⚠️
Package Published files 3180 3214 +34
Package Installed files 6890 6924 +34
Runtime Unique function payloads 2 2 0
Runtime Total function bytes 17.12 MB 17.13 MB +8.9 kB ⚠️
Runtime Public routes 14 14 0
Changed function payloads vs main (2714386) (2)
Function Status Baseline Current Delta Route changes
functions/__server.func changed 8.56 MB 8.56 MB +4.5 kB ⚠️ none
functions/.well-known/workflow/v1/flow.func changed 8.56 MB 8.56 MB +4.5 kB ⚠️ none

eve init install

Metric Baseline Current Delta
Installed footprint 111.65 MB 111.88 MB +225.1 kB ⚠️
Installed packages 121 121 0
dependencies 4 4 0
devDependencies 2 2 0
Dependency package bytes 44.22 MB 44.44 MB +225.1 kB ⚠️
devDependency package bytes 5.04 MB 5.04 MB 0 B ➖
Build Metadata
  • Preset: vercel
  • Nitro: nitro@3.0.260610-beta
  • Output directory: apps/fixtures/weather-agent/.vercel/output
  • Build metadata timestamp: 2026-08-13T17:49:33.527Z
  • Route aliases: 14 public, 1 internal (15 total aliases)
  • Vercel routes in config: 17
  • Severity legend: 🔴 dominant/large, 🟠 notable, 🟡 watch, ⚪ small
Package Drill-Down

Package Details

  • Package: eve@0.35.0
  • Package directory: packages/eve
  • Tarball: 7.99 MB (eve-0.35.0.tgz)
  • Unpacked payload: 29.95 MB across 3214 published files
  • Installed footprint: 73.47 MB across 6924 installed files
  • Installed root package: 28.60 MB
  • Installed dependencies: 44.87 MB
  • Runtime dependencies: 2
  • Peer dependencies: 5 (4 optional)

Installed footprint is measured from an isolated temporary npm install of the packed tarball.

Heavy installed dependencies

  • eve: 28.60 MB (38.9%)
  • @rolldown/binding-linux-x64-gnu: 19.41 MB (26.4%)
  • ai: 6.68 MB (9.1%)
  • zod: 5.07 MB (6.9%)
  • undici: 3.50 MB (4.8%)
Publish payload breakdown
Published file size
🔴 dist/src/compiled/shadcn-registry/index.js       [#################.......] 10.19 MB 34.0%
🟠 dist/src/compiled/@photon-ai/chat-adapter-ime... [####....................] 2.42 MB 8.1%
🟠 dist/src/compiled/experimental-ai-sdk-code-mo... [##......................] 1.51 MB 5.0%
🟡 dist/src/compiled/_chunks/node/undici-CUIybhQ... [#.......................] 508.8 kB 1.7%
🟡 dist/src/compiled/_chunks/workflow/undici-CUI... [#.......................] 508.8 kB 1.7%
🔴 Other published files                            [########################] 14.81 MB 49.5%
Installed footprint breakdown
Installed package size
🔴 eve                             [########################] 28.60 MB 38.9%
🔴 @rolldown/binding-linux-x64-gnu [################........] 19.41 MB 26.4%
🔴 ai                              [######..................] 6.68 MB 9.1%
🔴 zod                             [####....................] 5.07 MB 6.9%
🟠 undici                          [###.....................] 3.50 MB 4.8%
🟠 nitro                           [##......................] 2.41 MB 3.3%
🔴 Other installed packages        [#######.................] 7.80 MB 10.6%
Runtime dependencies (2)
Package Range Notes
nitro 3.0.260610-beta
undici 8.9.0
Peer dependencies (5)
Package Range Notes
@opentelemetry/api ^1.0.0 optional peer
ai catalog:
braintrust ^3.0.0 optional peer
just-bash ^3.0.0 optional peer
microsandbox ^0.5.0 optional peer
eve init install drill-down

eve init install details

  • Command: eve init my-agent
  • Package manager: npm
  • Installed footprint: 111.88 MB across 8800 installed files
  • Installed packages: 121 total (115 transitive-only)
  • dependencies: 4 direct packages totaling 44.44 MB
  • devDependencies: 2 direct packages totaling 5.04 MB
  • Other transitive package files: 62.39 MB

Installed footprint is measured from an isolated temporary eve init my-agent using the current packed eve tarball.

Heavy installed dependencies

  • eve: 28.60 MB (25.6%)
  • @typescript/typescript-linux-x64: 27.95 MB (25.0%)
  • @rolldown/binding-linux-x64-gnu: 19.41 MB (17.4%)
  • zod: 9.02 MB (8.1%)
  • ai: 6.68 MB (6.0%)
Installed footprint breakdown
Installed package size
🔴 eve                              [########################] 28.60 MB 25.6%
🔴 @typescript/typescript-linux-x64 [#######################.] 27.95 MB 25.0%
🔴 @rolldown/binding-linux-x64-gnu  [################........] 19.41 MB 17.4%
🔴 zod                              [########................] 9.02 MB 8.1%
🔴 ai                               [######..................] 6.68 MB 6.0%
🟠 undici                           [###.....................] 3.50 MB 3.1%
🔴 Other installed packages         [##############..........] 16.71 MB 14.9%
dependencies (4)
Package Range Installed size Share
@vercel/connect 0.4.3 141.0 kB 0.1%
ai ^7.0.58 6.68 MB 6.0%
eve file:eve-0.35.0.tgz 28.60 MB 25.6%
zod 4.4.3 9.02 MB 8.1%
devDependencies (2)
Package Range Installed size Share
@types/node 24.x 2.54 MB 2.3%
typescript 7.0.2 2.50 MB 2.2%
Function Drill-Down

Payload Size Graph

Unique function payload size and share of total
🔴 functions/.well-known/workflow/v1/flow.func     [########################] 8.56 MB 50.0%
🔴 functions/__server.func                         [########################] 8.56 MB 50.0%

Top Function Payloads

🟠 functions/.well-known/workflow/v1/flow.func • 1 public route • 8.56 MB
Metric Value
Public routes /.well-known/workflow/v1/flow
Runtime nodejs24.x
Handler index.mjs
Payload 8.56 MB
Function files 8.56 MB across 49 files
Traced dependencies 0 B
Signal 🟠 Bundled file index.mjs is 1.77 MB (20.6%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                     [################........] 1.77 MB 20.6%
🟠 _chunks/runtime-artifacts.mjs [##############..........] 1.64 MB 19.2%
🟡 _libs/undici.mjs              [#########...............] 980.5 kB 11.4%
🟡 _chunks/sandbox.mjs           [#######.................] 781.9 kB 9.1%
🟡 _chunks/frames-CTpeJYEQ.mjs   [######..................] 671.5 kB 7.8%
🟠 Other bundled files           [########################] 2.72 MB 31.8%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x",
  "maxDuration": "max",
  "experimentalTriggers": [
    {
      "type": "queue/v2beta",
      "topic": "__eve776561746865722d6167656e74_wkf_workflow_*",
      "consumer": "default",
      "retryAfterSeconds": 5,
      "initialDelaySeconds": 0
    }
  ],
  "environment": {
    "WORKFLOW_PRECONDITION_GUARD": "1"
  }
}

🟠 functions/__server.func • 13 public routes, 1 internal alias • 8.56 MB
Metric Value
Public routes /
/eve/v1/callback/[token]
/eve/v1/connections/[name]/callback/[attemptId]/[token]
/eve/v1/connections/[name]/callback/[token]
/eve/v1/health
/eve/v1/info
/eve/v1/session
/eve/v1/session/[sessionId]
/eve/v1/session/[sessionId]/cancel
/eve/v1/session/[sessionId]/clear
/eve/v1/session/[sessionId]/compact
/eve/v1/session/[sessionId]/reset
/eve/v1/session/[sessionId]/stream
Internal aliases /__server
Runtime nodejs24.x
Handler index.mjs
Payload 8.56 MB
Function files 8.56 MB across 49 files
Traced dependencies 0 B
Signal 🟠 Bundled file index.mjs is 1.77 MB (20.6%)

🟠 🔎 Dependency Analysis

📦 Bundled files:

Bundled file size
🟠 index.mjs                     [################........] 1.77 MB 20.6%
🟠 _chunks/runtime-artifacts.mjs [##############..........] 1.64 MB 19.2%
🟡 _libs/undici.mjs              [#########...............] 980.5 kB 11.4%
🟡 _chunks/sandbox.mjs           [#######.................] 781.9 kB 9.1%
🟡 _chunks/frames-CTpeJYEQ.mjs   [######..................] 671.5 kB 7.8%
🟠 Other bundled files           [########################] 2.72 MB 31.8%

🧾 Vercel Config

{
  "handler": "index.mjs",
  "launcherType": "Nodejs",
  "shouldAddHelpers": false,
  "supportsResponseStreaming": true,
  "runtime": "nodejs24.x"
}

Build Timing: e2e/fixtures/agent-tools-sandbox

This is an informational timing measurement inside eve build, from preflight through publication. Output-size measurement and profile writing are excluded.

Build mode: deployable Vercel build with sandbox template prewarm included.

  • Build pipeline: 2.04 s -> 2.32 s (+277.0 ms) vs main (2714386).
  • Timing is informational: shared GitHub runners are too variable for a hard timing budget.
Detailed phase timings vs `main (2714386)`
Phase Baseline Current Delta
extension.check 1.1 ms 1.1 ms 0.0 ms
project.resolve 0.6 ms 0.6 ms 0.0 ms
workspace.create 0.7 ms 0.7 ms 0.0 ms
host.prepare 215.8 ms 593.0 ms +377.2 ms
vercel.service-prefix.resolve 2.4 ms 2.2 ms -0.2 ms
nitro.create 239.7 ms 219.0 ms -20.7 ms
sandbox.prewarm 255.2 ms 228.3 ms -26.9 ms
nitro.cache.prepare 0.2 ms 0.3 ms +0.1 ms
nitro.prepare 0.8 ms 0.8 ms 0.0 ms
nitro.public-assets 0.8 ms 0.7 ms -0.1 ms
nitro.prerender 0.5 ms 0.5 ms 0.0 ms
nitro.bundle 1.30 s 1.24 s -53.6 ms
nitro.cache.write 0.3 ms 0.3 ms 0.0 ms
vercel.workflow-function.materialize 24.0 ms 24.8 ms +0.8 ms
agent-summary.emit 0.5 ms 0.5 ms 0.0 ms
nitro.close 0.1 ms 0.1 ms 0.0 ms
output.publish 3.2 ms 3.5 ms +0.3 ms
workspace.remove 2.0 ms 2.1 ms +0.1 ms

@ruiconti
ruiconti requested a review from ctgowrie August 12, 2026 20:52
Comment thread packages/eve/src/context/providers/sandbox.ts Outdated
@ruiconti ruiconti changed the title feat(eve): expose userspace drives and parent sandbox sharing feat(eve): expose userspace sandbox drives Aug 13, 2026
@ruiconti
ruiconti force-pushed the rui/userspace-sandbox-drives-main branch from 0e59f05 to bf9a55f Compare August 13, 2026 15:04
Signed-off-by: Rui Conti <ruiconti@gmail.com>
Signed-off-by: Rui Conti <ruiconti@gmail.com>
…-drives-fix

Signed-off-by: Rui Conti <ruiconti@gmail.com>
Signed-off-by: Rui Conti <ruiconti@gmail.com>
@vercel
vercel Bot temporarily deployed to Preview – eve-pkg August 13, 2026 17:47 Inactive
@ruiconti
ruiconti merged commit fe691aa into main Aug 13, 2026
92 checks passed
@ruiconti
ruiconti deleted the rui/userspace-sandbox-drives-main branch August 13, 2026 19:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants