Skip to content

feat(eve): add MCP channel - #1828

Draft
groxaxo wants to merge 26 commits into
vercel:mainfrom
groxaxo:codex/pr-1377-polish
Draft

feat(eve): add MCP channel#1828
groxaxo wants to merge 26 commits into
vercel:mainfrom
groxaxo:codex/pr-1377-polish

Conversation

@groxaxo

@groxaxo groxaxo commented Aug 8, 2026

Copy link
Copy Markdown

Summary

Supersedes and polishes #1377. Closes #883. Adds an opt-in mcpChannel() that exposes a principal-bound, durable agent-invocation lifecycle over stateless MCP Streamable HTTP, with existing eve route auth and OAuth Protected Resource Metadata. It supports the current 2026-07-28 request shape plus documented compatibility eras while deliberately keeping authored tools, skills, connections, and subagents private. Review focus: compatibility inspection is bounded to 4 MiB, owner keys and update receipts are hashed and durable, and duplicate route registrations fail with both source paths.

Validation

  • pnpm test:unit — eve: 6,102 passed and 1 skipped; docs/catalog suites passed
  • pnpm test:integration — 605 passed
  • pnpm --filter eve exec vitest run --config vitest.scenario.config.ts src/internal/invocation/mcp-agent-channel.scenario.test.ts — modern and legacy lifecycle, durable input acknowledgement, principal isolation, and cancellation
  • pnpm build
  • NUXT_TELEMETRY_DISABLED=1 pnpm typecheck
  • pnpm fmt, pnpm lint, pnpm guard:invariants, pnpm docs:check, and git diff --check

Hosted MCP client OAuth and Deployment Protection matrices were not run locally and remain release validation.

Checklist

  • I linked an issue with prior discussion confirming this change is wanted
  • I ran the relevant checks from CONTRIBUTING.md
  • I added tests and documentation where relevant
  • I added a changeset if this touches the published eve package
  • DCO sign-off passes for every commit (git commit --signoff)

allenzhou101 and others added 18 commits July 29, 2026 14:23
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>

# Conflicts:
#	packages/eve/src/execution/workflow-runtime.ts
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Signed-off-by: Facundo V Jagodnik <facu>

# Conflicts:
#	packages/eve/src/execution/workflow-runtime.ts
#	packages/eve/src/public/channels/auth.test.ts
#	packages/eve/src/public/channels/auth.ts
@vercel

vercel Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

Someone is attempting to deploy a commit to the Vercel Team on Vercel.

A member of the Team first needs to authorize it.

@socket-security

socket-security Bot commented Aug 8, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​h3-mcp@​0.1.0781009590100

View full report

groxaxo added 8 commits August 8, 2026 15:51
Signed-off-by: Facundo V Jagodnik <76023196+groxaxo@users.noreply.github.com>
Signed-off-by: Facundo V Jagodnik <76023196+groxaxo@users.noreply.github.com>
Signed-off-by: Facundo V Jagodnik <76023196+groxaxo@users.noreply.github.com>
Signed-off-by: Facundo V Jagodnik <76023196+groxaxo@users.noreply.github.com>
Signed-off-by: Facundo V Jagodnik <76023196+groxaxo@users.noreply.github.com>
Signed-off-by: Facundo V Jagodnik <76023196+groxaxo@users.noreply.github.com>
Signed-off-by: Facundo V Jagodnik <76023196+groxaxo@users.noreply.github.com>
Signed-off-by: Facundo V Jagodnik <76023196+groxaxo@users.noreply.github.com>
@groxaxo
groxaxo force-pushed the codex/pr-1377-polish branch from 454699d to adb1669 Compare August 8, 2026 03:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add a native MCP channel for external agent harnesses

2 participants