Bump the npm-minor-patch group across 1 directory with 2 updates

[dependabot]

Bumps the npm-minor-patch group with 2 updates in the / directory: eve and tsx.

Updates eve from 0.24.4 to 0.44.3

Release notes

Sourced from eve's releases.

eve@0.44.3

Patch Changes

• ebf94fa: Session stream requests that ask for a durable tail index now close after replaying that tail, preventing Web Chat restoration through framework proxies from leaving local workflow listeners attached. Generated Web Chat apps also pin Shiki 3.23 to match the current Streamdown code plugin and pass type checking.

eve@0.44.2

Patch Changes

• e79dd2f: Generated Web Chat apps now include their new-session and resumable-session routes. Abandoned browser session streams also release their local workflow listeners instead of accumulating them across navigation.

eve@0.44.1

Patch Changes

• 7c99773: Linq setup now recognizes Vercel CLI versions that lack required trigger options and offers to upgrade the CLI from the /add flow instead of reporting a generic connector failure.
• 02403b9: Dynamic tool callbacks are now identified by tool name and phase instead of byte offsets in the authored source. Editing an agent file no longer risks a parked approval replaying the wrong tool: after a redeploy or crash, parked calls run the latest deployed callback code under the same name, and a tool that no longer exists fails closed with an explicit error. Session-scoped resolvers may run once more on resume to rebind callbacks, so keep them idempotent.
• 84ddb09: Apply release-age policies during project and extension setup instead of bypassing them. New standalone pnpm projects use strict enforcement, while projects inside an existing workspace retain that workspace's policy.
• 85b2dc8: Redact model, tool, approval, and delivery content from hosted instrumentation for private and unknown channel audiences. Content-denied Workflow runs now carry a metadata marker and omit their content-derived title so dashboards can exclude them without reading the event stream. Local eve dev tracing continues to retain content for unknown TUI and HTTP sessions.
• a4fd288: Add declarative resume: true and imperative resume() support for replaying durable frontend sessions and following in-flight turns. Generated Web Chat apps now keep session IDs in /s/{sessionId} URLs, restore conversations on reload, and provide a sessionless /s route for starting a new chat.
• 923921c: Give models runtime-authored task state after background work starts so initiating turns acknowledge launch, partial task wakes stay silent, and settled cohorts produce one combined report.
• 673def2: Allow useEveAgent message sends with turnPolicy: "steer" while a turn is active, keeping the local projection attached to the durable replacement stream. Generated web chats now keep the composer enabled during responses and steer by default when a follow-up is submitted. Cancelled turns preserve their accepted user input in durable history, so replacement turns retain the interrupted request as context.

eve@0.44.0

Minor Changes

• 47e8b64: Make traces public-only by default while retaining unclassified HTTP/TUI sessions in zero-config local tracing, and add composable input/output redaction, span filtering, and attribute filtering to the export pipeline.

Patch Changes

• beba1a2: Prepare the TypeScript path alias and Next.js compiler settings before eve add channel/web installs the Web Chat registry item, so fresh agent projects build without manual tsconfig.json changes.
• 830dd40: Classify built-in messaging channel metadata by conversation audience.
• 4da95bb: Fix dynamic tool builds when callback parameters use destructuring defaults by forwarding the original arguments through the durable callback wrapper.
• 4ed62a7: Render ask_question prompts as visible, vendored AI Elements forms in generated Web Chat apps, with vertical single-choice options and freeform answers submitted through eve's structured input response API.
• e43d9cb: Add an optional audience classification to channel instrumentation metadata.

eve@0.43.0

Minor Changes

• 1390675: Background tools can now report a delegated task's terminal result in-process via task.send({ kind: "complete" | "fail" | "cancel", ... }), without minting a callback URL.

Patch Changes

• 1c2684a: Add the native Agentcard MCP connection to the registry through Vercel Connect.
• f3f4f4a: Allow in-process background tool executors to report progress and terminal results through task.send. Progress updates now use executor-neutral coordinates internally, and background task types are exported from eve/tools.
• 7de783e: Existing Linq account setup now fetches the phone numbers assigned to the partner API token, then lets you select the numbers for your agent.
• 3ec0e5b: Route model-facing session history through one prepared view so dynamic resolvers, compaction, instrumentation, and model calls receive a consistent conversation without changing durable history.
• b57c965: Forward the active caller on persistent local and remote subagent continuations so user-scoped connections resolve for the current turn without inheriting the previous caller's authority. Upgrade both remote-agent deployments before resuming existing persistent sessions; create-only receivers reject forwarded continuations rather than falling back to service authority.
• 3811d81: Update the project scripts after eve add channel/web so pnpm dev starts the generated Next.js app.
• be9be27: Make dynamic tool approval, execution, and output callbacks durable across cold starts. Non-serializable callback captures now fail with an actionable error instead of losing values during replay.
• 1390675: Add generic background defineTool execution so authored tools can return task.delegated() receipts and run through the durable task lifecycle without subagent-specific harness branches.
• 99de091: Run local and remote subagents through generic background defineTool execution when experimental.tasks is enabled, preserving durable task receipts, HITL, cancellation, and child stream events.

... (truncated)

Changelog

Sourced from eve's changelog.

0.44.3

Patch Changes

• ebf94fa: Session stream requests that ask for a durable tail index now close after replaying that tail, preventing Web Chat restoration through framework proxies from leaving local workflow listeners attached. Generated Web Chat apps also pin Shiki 3.23 to match the current Streamdown code plugin and pass type checking.

0.44.2

Patch Changes

• e79dd2f: Generated Web Chat apps now include their new-session and resumable-session routes. Abandoned browser session streams also release their local workflow listeners instead of accumulating them across navigation.

0.44.1

Patch Changes

• 7c99773: Linq setup now recognizes Vercel CLI versions that lack required trigger options and offers to upgrade the CLI from the /add flow instead of reporting a generic connector failure.
• 02403b9: Dynamic tool callbacks are now identified by tool name and phase instead of byte offsets in the authored source. Editing an agent file no longer risks a parked approval replaying the wrong tool: after a redeploy or crash, parked calls run the latest deployed callback code under the same name, and a tool that no longer exists fails closed with an explicit error. Session-scoped resolvers may run once more on resume to rebind callbacks, so keep them idempotent.
• 84ddb09: Apply release-age policies during project and extension setup instead of bypassing them. New standalone pnpm projects use strict enforcement, while projects inside an existing workspace retain that workspace's policy.
• 85b2dc8: Redact model, tool, approval, and delivery content from hosted instrumentation for private and unknown channel audiences. Content-denied Workflow runs now carry a metadata marker and omit their content-derived title so dashboards can exclude them without reading the event stream. Local eve dev tracing continues to retain content for unknown TUI and HTTP sessions.
• a4fd288: Add declarative resume: true and imperative resume() support for replaying durable frontend sessions and following in-flight turns. Generated Web Chat apps now keep session IDs in /s/{sessionId} URLs, restore conversations on reload, and provide a sessionless /s route for starting a new chat.
• 923921c: Give models runtime-authored task state after background work starts so initiating turns acknowledge launch, partial task wakes stay silent, and settled cohorts produce one combined report.
• 673def2: Allow useEveAgent message sends with turnPolicy: "steer" while a turn is active, keeping the local projection attached to the durable replacement stream. Generated web chats now keep the composer enabled during responses and steer by default when a follow-up is submitted. Cancelled turns preserve their accepted user input in durable history, so replacement turns retain the interrupted request as context.

0.44.0

Minor Changes

• 47e8b64: Make traces public-only by default while retaining unclassified HTTP/TUI sessions in zero-config local tracing, and add composable input/output redaction, span filtering, and attribute filtering to the export pipeline.

Patch Changes

• beba1a2: Prepare the TypeScript path alias and Next.js compiler settings before eve add channel/web installs the Web Chat registry item, so fresh agent projects build without manual tsconfig.json changes.
• 830dd40: Classify built-in messaging channel metadata by conversation audience.
• 4da95bb: Fix dynamic tool builds when callback parameters use destructuring defaults by forwarding the original arguments through the durable callback wrapper.
• 4ed62a7: Render ask_question prompts as visible, vendored AI Elements forms in generated Web Chat apps, with vertical single-choice options and freeform answers submitted through eve's structured input response API.
• e43d9cb: Add an optional audience classification to channel instrumentation metadata.

0.43.0

Minor Changes

• 1390675: Background tools can now report a delegated task's terminal result in-process via task.send({ kind: "complete" | "fail" | "cancel", ... }), without minting a callback URL.

Patch Changes

• 1c2684a: Add the native Agentcard MCP connection to the registry through Vercel Connect.
• f3f4f4a: Allow in-process background tool executors to report progress and terminal results through task.send. Progress updates now use executor-neutral coordinates internally, and background task types are exported from eve/tools.
• 7de783e: Existing Linq account setup now fetches the phone numbers assigned to the partner API token, then lets you select the numbers for your agent.
• 3ec0e5b: Route model-facing session history through one prepared view so dynamic resolvers, compaction, instrumentation, and model calls receive a consistent conversation without changing durable history.

... (truncated)

Commits

• 0addb55 Version Packages (#2430)
• ebf94fa fix(eve): bound durable session replays (#2429)
• 7a5f46a Version Packages (#2428)
• e79dd2f fix(eve): clean up abandoned web chat streams (#2426)
• 0fe6298 Version Packages (#2389)
• 7c99773 fix(eve): offer Vercel CLI upgrade for Linq setup (#2423)
• 923921c fix(eve): supply background task reporting state (#2406)
• 85b2dc8 fix(eve): protect non-public observability content (#2392)
• 673def2 fix(eve): steer active Web Chat turns (#2401)
• a4fd288 feat(eve): resume Web Chat sessions from URLs (#2379)
• Additional commits viewable in compare view

Updates tsx from 4.23.1 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

• shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

• preserve async ESM require fallback (55cbece)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

• support nyc coverage discovery (#710) (ec1bcd5)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

• map Node test locations (2f55884)
• support data URLs in tsImport (b94f46f)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.8

... (truncated)

Commits

• ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
• 651f5be test: cover CommonJS TypeScript import.meta paths
• bd3bc64 test: cover CommonJS loader source fallback
• 55cbece fix: preserve async ESM require fallback
• 6c5ba85 docs: document CommonJS default interop
• ec1bcd5 fix: support nyc coverage discovery (#710)
• b6e5b48 docs: clarify CommonJS default imports
• 2f55884 fix: map Node test locations
• de935d5 docs: document Node source-map stack formatting
• b94f46f fix: support data URLs in tsImport
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
evolve	Ready	Preview	Aug 27, 2026 5:25am