@ory/vercel-ai 0.13.9 → 1.0.0

package/README.md

@@ -2,8 +2,8 @@
 
 Ory Agent Security for the [Vercel AI SDK](https://ai-sdk.dev).
 
-Wraps your tools so every call is authorized against Ory Permissions, traced, and tied to
-the user → agent identity — built on [`@ory/argus`](../core).
+Wraps your tools so every call is authorized against Ory Permissions, audited, and tied to
+the user → agent identity — built on [`@ory/argus`](https://www.npmjs.com/package/@ory/argus).
 
 ```bash
 npm install @ory/vercel-ai
@@ -22,9 +22,9 @@ const result = await generateText({
 
 The Vercel AI SDK has no global before-tool hook — enforcement lives at the tool boundary, so
 `withOry` wraps each tool's `execute`. On the first call it runs the Ory session gates; on
-each call it authorizes the tool and records spans. In **enforce** mode
-(`ORY_PERMISSION_MODE=enforce`) a denied tool throws, surfacing to the model as a tool error;
-in **observe** mode (default) the tool runs and a `permission.observe_deny` span is recorded.
+each call it authorizes the tool and records activity. In **enforce** mode a denied
+tool throws, surfacing to the model as a tool error;
+in **observe** mode (default) the tool runs and a `permission.observe_deny` activity event is recorded.
 Tools without an `execute` (provider-defined) pass through untouched.
 
 Derive the permission subject from per-call context with `subjectFromOptions`. A non-empty
@@ -38,4 +38,3 @@ withOry(tools, { subjectFromOptions: (o) => o?.experimental_context?.userId });
 
 This package depends only on `@ory/argus` — not the `ai` package; tools are duck-typed so any
 `ai` version works. Credentials come from the shared `~/.config/ory-agent-plugins/config.json`.
-See [docs/sdk-integrations.md](../../docs/sdk-integrations.md).

package/dist/index.d.ts

@@ -3,9 +3,9 @@
  *
  * The Vercel AI SDK has no global before-tool hook — enforcement lives at the tool
  * boundary. {@link withOry} wraps each tool's `execute` so every call is authorized against
- * Ory Permissions, traced, and (on first call) preceded by the Ory session gates. A denied
+ * Ory Permissions, recorded as activity, and (on first call) preceded by the Ory session gates. A denied
  * tool in enforce mode throws, surfacing to the model as a tool error; in observe mode the
- * tool runs and a `permission.observe_deny` span is recorded.
+ * tool runs and a `permission.observe_deny` activity event is recorded.
  *
  * This package depends only on `@ory/argus` — the Vercel `ai` package is not a dependency;
  * tools are duck-typed so any `ai` version works.

package/dist/index.js

@@ -4,9 +4,9 @@
  *
  * The Vercel AI SDK has no global before-tool hook — enforcement lives at the tool
  * boundary. {@link withOry} wraps each tool's `execute` so every call is authorized against
- * Ory Permissions, traced, and (on first call) preceded by the Ory session gates. A denied
+ * Ory Permissions, recorded as activity, and (on first call) preceded by the Ory session gates. A denied
  * tool in enforce mode throws, surfacing to the model as a tool error; in observe mode the
- * tool runs and a `permission.observe_deny` span is recorded.
+ * tool runs and a `permission.observe_deny` activity event is recorded.
  *
  * This package depends only on `@ory/argus` — the Vercel `ai` package is not a dependency;
  * tools are duck-typed so any `ai` version works.
@@ -26,23 +26,10 @@ const HARNESS = "vercel-ai";
 function withOry(tools, options = {}) {
     const client = options.client ?? argus_1.OryAgentClient.fromEnv(HARNESS);
     const canBlock = options.canBlock ?? true;
-    let sessionPromise;
-    // Cache the in-flight promise (not a boolean) so concurrent first calls all
-    // await the same session start instead of racing past a still-running gate.
-    // Fail-open: a rejection is logged, never rethrown, and clears the cache so
-    // a later call can retry.
-    const ensureSession = () => {
-        sessionPromise ??= (0, argus_1.sessionStart)(client, {
-            harness: HARNESS,
-            projectUrl: options.projectUrl,
-        }).then(() => undefined, (err) => {
-            sessionPromise = undefined;
-            client.logger.warn("session_start.failed", {
-                message: err instanceof Error ? err.message : String(err),
-            });
-        });
-        return sessionPromise;
-    };
+    const ensureSession = (0, argus_1.createSessionStarter)(client, {
+        harness: HARNESS,
+        projectUrl: options.projectUrl,
+    });
     const wrapped = {};
     for (const [name, tool] of Object.entries(tools)) {
         if (!tool || typeof tool.execute !== "function") {
@@ -69,9 +56,15 @@ function withOry(tools, options = {}) {
                         namespace: result.namespace,
                     });
                 }
-                const output = await originalExecute(input, callOptions);
-                (0, argus_1.complete)(client, { toolName: name, output });
-                return output;
+                try {
+                    const output = await originalExecute(input, callOptions);
+                    (0, argus_1.complete)(client, { toolName: name, input, output });
+                    return output;
+                }
+                catch (error) {
+                    (0, argus_1.fail)(client, { toolName: name, input, error });
+                    throw error;
+                }
             },
         };
     }

package/package.json

@@ -1,13 +1,17 @@
 {
   "name": "@ory/vercel-ai",
-  "version": "0.13.9",
-  "description": "Ory Agent Security for the Vercel AI SDK — per-tool authorization, tracing, and identity propagation by wrapping tool execute(). Built on @ory/argus.",
+  "version": "1.0.0",
+  "description": "Ory Agent Security for the Vercel AI SDK — per-tool authorization, activity auditing, and identity propagation by wrapping tool execute(). Built on @ory/argus.",
   "license": "Apache-2.0",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/",
     "provenance": true
   },
+  "reova": {
+    "enabled": true,
+    "endpoint": "https://telemetry.reo.dev/data"
+  },
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
@@ -30,8 +34,8 @@
     "permissions"
   ],
   "dependencies": {
-    "reo-census": "^1.2.8",
-    "@ory/argus": "0.13.9"
+    "reova": "^0.7.0",
+    "@ory/argus": "1.0.0"
   },
   "devDependencies": {
     "typescript": "^6.0.2",