ai-ax 0.1.0

package/README.md

@@ -0,0 +1,221 @@
+# aiax
+
+AI Agent Experience (AI/AX) library for Hono + Cloudflare.
+
+人間のための UI/UX と、LLM のための AI/AX を、1 つの操作面として実装するための library。
+AI を特別扱いして専用画面を作るのではなく、AI を読者の一人として扱う。
+画面を見る人間と、木構造を観測する LLM は、同じ状態を読み、同じ操作 (act) で書く。
+aiax はそのために必要な server 側の接続部 — 認証、認可、realtime 同期、MCP、LLM 中継 — を Hono middleware として提供する。
+
+## 0. 思想
+
+web は人間が操作する前提で UI/UX を積み上げてきた。
+そこへ LLM の操作経路を後付けすると、認証認可と操作面が人間用と AI 用の二重になり、どちらかが必ず壊れる。
+aiax は操作の最小単位 action を 1 度だけ宣言させ、UI の click と MCP tool 呼び出しを同じ action に合流させる。
+状態は yjs の単一の木であり、人間には画面として、LLM には get_tree の観測結果として、同じ木が見える。
+
+```mermaid
+flowchart TB
+    UI[UI/UX<br>人間の click] -->|同じ act| ACT[action 宣言<br>1 機能 1 file]
+    AX[AI/AX<br>LLM の tool 呼び出し] -->|同じ act| ACT
+    ACT <-->|読み書き| TREE[yjs Y.Map 'tree'<br>全状態 = 単一の木]
+    TREE -->|画面として| UI
+    TREE -->|get_tree として| AX
+```
+
+## 1. 全体構成
+
+前提は Hono + Cloudflare Workers。realtime 同期は partyserver (Durable Objects)、認証は Auth.js、LLM は Claude API の MCP connector。
+
+```mermaid
+flowchart TB
+    B[Browser<br>React UI] -->|session<br>cookie| W[Hono Worker<br>aiax middleware]
+    C[Claude API] -->|grant<br>jwt| W
+    W -->|/api/llm| C
+    B <-->|websocket<br />sync| DO[Durable Object<br>y-partyserver]
+    W --> D1[(D1<br>Auth.js tables)]
+    W -->|認可済み room 名<br>x-user-sub header| DO
+```
+
+worker には 4 つの middleware を並べるだけでよい。
+
+```ts
+const ax = createAiax({ name: 'demo', own: ownSelf(), database: (e) => e.my_d1_demo, system: PROMPT })
+const app = new Hono().use('*', ax.auth()).use('/parties/*', ax.party()).all('/api/mcp', ax.mcp()).post('/api/llm', ax.llm())
+```
+
+## 2. 認証と認可
+
+credential は 2 種類だけ。どちらも AUTH_SECRET で署名された jwt であり、平文の user id が network を渡ることはない。
+
+| 経路                       | credential                     | 発行                              | 検証                            |
+| -------------------------- | ------------------------------ | --------------------------------- | ------------------------------- |
+| Browser → Worker           | session cookie (Auth.js jwt)   | /api/auth (Google OAuth)          | userSub()                       |
+| Claude → Worker (/api/mcp) | grant jwt ({ sub, path }, 12h) | llm middleware が認可後に mint    | readGrant()                     |
+| Worker → Durable Object    | DO 名 + x-user-sub header      | worker が認可済みの値で必ず上書き | DO へは worker binding 経由のみ |
+
+認可は own resolver という 1 つの関数に集約される。
+
+```ts
+type Own = (env: any, sub: string, path: string) => Promise<string> | string
+```
+
+「誰 (sub) が、何 (path) に対して、どの部屋 (room) を得るか」を返す。空文字は拒否。
+所有の定義は service ごとに異なるため、resolver の実装は自由に差し替えられる。
+
+```ts
+ownSite((env) => env.my_r2_xxx)
+// R2 head(`${sub}/${path}`) の customMetadata.site が room。file を所有していれば editor の部屋が開く
+
+ownSelf()
+// room = sub。認証した本人の部屋だけが開く。start page や個人 app 向け
+
+const ownGroup: Own = async (env, sub, path) => {
+        const [row] = await drizzle(env.my_d1).select().from(members).where(...)
+        return row ? row.roomId : ''
+}
+// D1 の所属 table を引く resolver も同じ型で書ける
+```
+
+## 3. 認可の流れ
+
+```mermaid
+sequenceDiagram
+    autonumber
+    participant Browser
+    participant Worker
+    participant Resolver as own resolver
+    participant ClaudeAPI
+    participant MCP as Worker /api/mcp
+    participant DO as Durable Object
+
+    Browser->>Worker: POST /api/llm { path, prompt } (session cookie)
+    Worker->>Resolver: own(env, sub, path)
+    alt room = '' (所有なし)
+        Worker-->>Browser: 401 / 403
+    else room あり
+        Worker->>ClaudeAPI: messages + mcp_servers<br>(authorization_token = grant jwt { sub, path })
+        ClaudeAPI->>MCP: MCP request (Authorization: Bearer grant)
+        MCP->>MCP: readGrant (復号失敗 / 期限切れ → 401)
+        MCP->>Resolver: own(env, sub, path)
+        alt room = ''
+            MCP-->>ClaudeAPI: 403
+        else room あり
+            MCP->>DO: getServerByName(binding, room) へ action 転送
+            DO-->>Browser: 実行結果を websocket で realtime 同期
+            DO-->>MCP: action の戻り値
+            MCP-->>ClaudeAPI: MCP response
+            ClaudeAPI-->>Worker: stream 応答
+            Worker-->>Browser: text stream 中継
+        end
+    end
+```
+
+grant jwt は llm middleware が turn ごとに mint し、Claude API がそのまま /api/mcp へ運ぶ。
+LLM は token の中身を選べず、書き換えれば署名が壊れる。
+つまり LLM が操作できる部屋は「その瞬間に認可された 1 部屋」だけに封じられる。
+
+## 4. room の決定規則
+
+room 名は client にも LLM にも決めさせない。必ず own resolver の結果を使う。
+
+- browser は 'my-room' という alias で接続してよい。party middleware が own の結果へ書き換えて DO へ渡す
+- room 名を URL に持つ設計 (editor 型) では、URL の room と own の結果の一致を検査し、不一致は 403
+- websocket・MCP どちらの経路でも x-user-sub / x-user-path header は worker が認可済みの値で上書きするため、外部から偽装できない
+- lobby は唯一の例外。匿名で触れる demo 部屋を 1 つだけ開けられる。設定しなければ全経路で認証必須
+
+## 5. action
+
+action は「UI handler が呼ぶ関数」と「MCP tool」の両方になる操作の最小単位。
+
+```ts
+export const placeMark = action<{ cell: number }, string>(() => import('./actions/place-mark'), 'both', {
+        name: 'place_mark',
+        description: '空いているマスに現在の手番の印を置く',
+        input: { cell: z.number().describe('マス番号 0-8') },
+})
+```
+
+- 宣言から MCP tool (name / description / zod inputSchema) が自動生成される
+- 第 1 引数は `() => import('./actions/xxx')` の dynamic import でも、実装関数そのものでもよい (bundle を分けたい service は前者、1 file で書きたい app は後者)
+- side は 3 値。both = yjs を書くだけ (どちら側でも実行可)、client = browser API が要る (server から呼ばれると yjs 上の act-req / act-res で接続中 browser へ委譲)、server = DO 専用
+- 人間の click も LLM の tool 呼び出しも同じ action 関数に到達するため、実装した全機能を LLM が操作・観測できる
+
+## 6. LLM 中継
+
+/api/llm は「認可 → grant mint → Claude API 呼び出し → text stream 中継」を行う。
+
+- mcp_servers に自 host の /api/mcp と grant jwt を設定して Claude API を呼ぶ
+- stop_reason が pause_turn の間は messages を積み直して継続する (MCP tool 呼び出しを跨ぐ)
+- tool 呼び出しは `[tool] name`、終端に `[usage] input/output tokens` を stream へ流す
+
+## 7. API
+
+### createAiax(config)
+
+| key       | 型                  | 既定値                                  | 説明                                                           |
+| --------- | ------------------- | --------------------------------------- | -------------------------------------------------------------- |
+| name      | string              | 必須                                    | service id。MCP server 名になる                                |
+| own       | Own                 | 必須                                    | 認可 resolver。(env, sub, path) → room。'' で拒否              |
+| database  | (env) => D1Database | なし                                    | Auth.js の DrizzleAdapter に渡す D1。省略時は adapter なし jwt |
+| lobby     | string              | なし                                    | 匿名で開放する demo room。省略時は全経路で認証必須             |
+| alias     | string              | 'my-room'                               | 「自分の部屋」を指す接続 room 名。own の結果へ書き換えられる   |
+| system    | string              | ''                                      | LLM の system prompt                                           |
+| model     | string              | 'claude-sonnet-5'                       | Claude API の model id                                         |
+| claude    | string              | 'https://api.anthropic.com/v1/messages' | Claude API の URL (AI Gateway 経由に差し替え可)                |
+| maxTokens | number              | 32000                                   | 1 応答の max_tokens                                            |
+| maxTurns  | number              | 10                                      | pause_turn 継続の上限回数                                      |
+| binding   | string              | 'v1'                                    | Durable Object binding 名                                      |
+| endpoint  | string              | '/api/mcp'                              | MCP endpoint の path                                           |
+| version   | string              | '1.0.0'                                 | MCP server の version 表記                                     |
+| salt      | string              | 'authjs.mcp-token'                      | grant jwt の salt (service ごとの分離)                         |
+| maxAge    | number              | 43200 (12h)                             | grant jwt の有効秒数                                           |
+| cookie    | { apex, services }  | なし                                    | subdomain 間で session cookie を共有する service 群            |
+| providers | any[]               | Google                                  | Auth.js providers の差し替え                                   |
+
+戻り値は `{ auth, party, mcp, llm }` の 4 middleware factory。
+x-user-sub / x-user-path の header 名と anthropic-version は library 内部の protocol 定数であり、config では変えられない (両端が同時に変わる必要があるため)。
+
+### 個別 export
+
+| export                                                     | file      | 説明                                                               |
+| ---------------------------------------------------------- | --------- | ------------------------------------------------------------------ |
+| action / actions / init / serve / grantOf / side           | act.ts    | action system。宣言と登録簿、act-req/act-res の配線、DO 側の受け口 |
+| auth / userSub / signGrant / readGrant / ownSite / ownSelf | auth.ts   | 認証と認可の素材。Auth.js 設定、grant jwt、own preset              |
+| party                                                      | party.ts  | websocket 経路の認可と room 書き換え・DO 転送                      |
+| mcp                                                        | mcp.ts    | grant 検証・認可・action の MCP tool 化・DO への action 転送       |
+| llm                                                        | llm.ts    | Claude API 中継 stream (認可 → mint → converse)                    |
+| callClaude / relay / converse                              | claude.ts | Claude API 呼び出しと stream の逐次処理・turn 継続                 |
+
+## 8. 適用パターン
+
+[Hono and React realtime app](https://zenn.dev/jp/articles) の template がそのまま前提環境になる。
+記事の authMiddleware / myMiddleware を ax.auth() / ax.party() に差し替え、/api/mcp と /api/llm の 2 行を足すと、realtime app が AI/AX 対応になる。
+
+| 型          | own             | lobby | room              | 例                   |
+| ----------- | --------------- | ----- | ----------------- | -------------------- |
+| 個人 app 型 | ownSelf()       | なし  | sub (本人の部屋)  | projects/demo        |
+| editor 型   | ownSite(bucket) | 任意  | file の site id   | editor services      |
+| group 型    | 自作 (D1 join)  | 任意  | 所属 group の部屋 | 将来の collaboration |
+
+## 9. これから — 初期化動線の吸収
+
+Y.Doc の初期化は「browser で作る (公開閲覧の hydrate)」「DO で作る (draft の復元・demo の投入)」「空から作る (seed)」の 3 経路が排他で並び、ここが service 実装の最も複雑な場所になっている。
+aiax は現時点で境界の契約 (認証認可・room 決定・action 転送) だけを持ち、初期化は service 側に残している。
+次の段階で、実行場所 (client / worker / DO) と経路 (view / edit / lobby) の場合分けを宣言で表現する boot / persist API をこの library へ吸収する。
+
+## 10. 攻撃面と防御
+
+| 攻撃                                           | 防御                                                                     |
+| ---------------------------------------------- | ------------------------------------------------------------------------ |
+| MCP client が room 名を引数で自由指定する      | tool 引数に room を持たせない。room は grant の sub/path から own が決定 |
+| 他人の path で grant を得る                    | mint 前に own で所有を検査。mcp 側でも同じ own で再検査する二重化        |
+| 期限切れ / 改竄された grant                    | AUTH_SECRET + salt 付き jwt。復号できなければ sub が空になり 401         |
+| x-user-sub header の偽装                       | worker が認可済みの値で必ず上書きしてから DO へ渡す                      |
+| DO への直接アクセス                            | DO は worker binding 経由でのみ到達可能。公開 URL を持たない             |
+| 破壊的 action (公開データの書き換え)           | action 実行の直前に own で再認可する実装を service 側で足せる            |
+| 認可の掏り替え (client が接続後に path を変更) | grant は { sub, path } 固定。別 path は別 grant の再発行が要る           |
+
+## License
+
+MIT

package/dist/action-DItZAgdx.d.ts

@@ -0,0 +1,53 @@
+import * as Y from "yjs";
+import { ZodRawShape } from "zod";
+//#region src/types.d.ts
+type Side = 'server' | 'client' | 'both';
+interface ActMeta {
+  name: string;
+  description: string;
+  input?: ZodRawShape;
+}
+interface ActionDef extends ActMeta {
+  side: Side;
+  run: (input: any) => Promise<any>;
+}
+interface Grant {
+  sub: string;
+  path: string;
+}
+type Own = (env: any, sub: string, path: string) => Promise<string> | string;
+interface Cookie {
+  apex: string;
+  services: string[];
+}
+interface Config {
+  name: string;
+  own: Own;
+  database?: (env: any) => any;
+  lobby?: string;
+  alias?: string;
+  system?: string;
+  model?: string;
+  claude?: string;
+  maxTokens?: number;
+  maxTurns?: number;
+  binding?: string;
+  endpoint?: string;
+  version?: string;
+  salt?: string;
+  maxAge?: number;
+  cookie?: Cookie;
+  providers?: any[];
+}
+//#endregion
+//#region src/action.d.ts
+type Action<I, R> = (input: I) => R | Promise<R>;
+type Call = (name: string, input: any) => Promise<any>;
+declare const actions: Map<string, ActionDef>;
+declare const side: Side;
+declare const bind: (doc: Y.Doc) => Y.Doc;
+declare const data: <T = any>(name?: string) => Y.Map<T>;
+declare function action<I extends object, R>(load: Action<I, R> | ((input?: I) => any), at: Side, meta: ActMeta): (input: I) => Promise<R>;
+declare const init: (doc: Y.Doc, wrap?: (run: () => Promise<any>) => Promise<any>) => Call;
+//#endregion
+export { data as a, ActMeta as c, Cookie as d, Grant as f, bind as i, ActionDef as l, Side as m, action as n, init as o, Own as p, actions as r, side as s, Call as t, Config as u };

package/dist/action.d.ts

@@ -0,0 +1,2 @@
+import { a as data, i as bind, n as action, o as init, r as actions, s as side, t as Call } from "./action-DItZAgdx.js";
+export { Call, action, actions, bind, data, init, side };

package/dist/action.js

@@ -0,0 +1 @@
+const e=new Map,t=typeof window>`u`?`server`:`client`;let n,r;const i=e=>r=e,a=(e=`tree`)=>r.getMap(e);function o(t,r,i){let a=async e=>{let n=await t(e);return typeof n==`function`?n(e):n?.default?n.default(e):n};return e.set(i.name,{...i,side:r,run:a}),e=>n(i.name,e)}const s=(r,a=e=>e())=>{i(r);let o=r.getMap(`act-req`),s=r.getMap(`act-res`),c=new Map,l=async n=>{let c=o.get(n),l=e.get(c?.name);!l||l.side!==t||(o.delete(n),s.set(n,{value:await a(()=>(i(r),l.run(c.input)))}))},u=e=>{let t=c.get(e);!t||!s.has(e)||(c.delete(e),t(s.get(e).value),s.delete(e))};return o.observe(e=>e.keysChanged.forEach(l)),s.observe(e=>e.keysChanged.forEach(u)),n=(n,a)=>{let s=e.get(n);return s.side===t||s.side===`both`?(i(r),s.run(a)):new Promise(e=>{let t=crypto.randomUUID();c.set(t,e),o.set(t,{name:n,input:a})})},n};export{o as action,e as actions,i as bind,a as data,s as init,t as side};

package/dist/client.d.ts

@@ -0,0 +1,21 @@
+import { a as data, c as ActMeta, i as bind, l as ActionDef, m as Side, n as action, o as init, r as actions, s as side, t as Call } from "./action-DItZAgdx.js";
+import { n as BINDING, t as ALIAS } from "./const-Hb5KgSHO.js";
+import * as Y from "yjs";
+//#region src/client.d.ts
+interface Route {
+  room?: string;
+  path?: string;
+  host?: string;
+  party?: string;
+  doc?: Y.Doc;
+}
+interface Link {
+  doc: Y.Doc;
+  call: Call;
+  synced: (fn: () => void) => void;
+  leave: () => void;
+}
+declare const onLeave: (fn: () => void) => undefined;
+declare const connect: (route?: Route) => Link;
+//#endregion
+export { ALIAS, type ActMeta, type ActionDef, BINDING, Link, Route, type Side, action, actions, bind, connect, data, init, onLeave, side };

package/dist/client.js

@@ -0,0 +1 @@
+import{action as e,actions as t,bind as n,data as r,init as i,side as a}from"./action.js";import{n as o,t as s}from"./const-DMb65zjR.js";import c from"y-partyserver/provider";import*as l from"yjs";let u=null,d=new Set;const f=e=>void d.add(e),p=(e={})=>{u?.leave();let{room:t=``,path:n=``,host:r=location.host,party:a=`v1`,doc:o}=e,s=t?new c(r,t,o,{party:a,params:{path:n}}):null,f=s?.doc??o??new l.Doc;return u={doc:f,call:i(f),synced:e=>{if(!s||s.synced)return void e();s.once(`synced`,()=>e())},leave:()=>{d.forEach(e=>e()),d=new Set,s?.destroy()}}};export{s as ALIAS,o as BINDING,e as action,t as actions,n as bind,p as connect,r as data,i as init,f as onLeave,a as side};

package/dist/const-DMb65zjR.js

@@ -0,0 +1 @@
+const e=`my-room`,t=`x-user-sub`,n=`x-user-path`,r=`authjs.mcp-token`,i=43200,a=`v1`,o=`/api/mcp`,s=`/api/llm`,c=`1.0.0`,l=`https://api.anthropic.com/v1/messages`,u=`claude-sonnet-5`,d=`2023-06-01`,f=`mcp-client-2025-11-20`,p=32e3;export{l as a,i as c,c as d,n as f,u as i,p as l,t as m,a as n,d as o,r as p,f as r,s,e as t,o as u};

package/dist/const-Hb5KgSHO.d.ts

@@ -0,0 +1,5 @@
+//#region src/const.d.ts
+declare const ALIAS = "my-room";
+declare const BINDING = "v1";
+//#endregion
+export { BINDING as n, ALIAS as t };

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+import { a as data, c as ActMeta, d as Cookie, f as Grant, i as bind, l as ActionDef, m as Side, n as action, o as init, p as Own, r as actions, s as side, t as Call, u as Config } from "./action-DItZAgdx.js";
+import { n as BINDING, t as ALIAS } from "./const-Hb5KgSHO.js";
+import { AiaxServer } from "./server.js";
+//#region src/auth.d.ts
+declare const ownSite: (bucket: (env: any) => any, meta?: string) => Own;
+declare const ownSelf: () => Own;
+//#endregion
+//#region src/mcp.d.ts
+declare const grantOf: (request: Request) => Grant;
+//#endregion
+//#region src/index.d.ts
+declare const createAiax: (config: Config) => {
+  config: Config;
+  Server: typeof AiaxServer;
+  use: () => import("hono").MiddlewareHandler<any, string, {}, Response>;
+  auth: () => import("hono").MiddlewareHandler;
+  party: () => import("hono").MiddlewareHandler<any, string, {}, any>;
+  mcp: () => import("hono").MiddlewareHandler<any, string, {}, Response>;
+  llm: () => import("hono").MiddlewareHandler<any, string, {}, Response>;
+};
+//#endregion
+export { ALIAS, type ActMeta, type ActionDef, AiaxServer, BINDING, type Call, type Config, type Cookie, type Grant, type Own, type Side, action, actions, bind, createAiax, data, grantOf, init, ownSelf, ownSite, side };

package/dist/index.js

@@ -0,0 +1,2 @@
+import{action as e,actions as t,bind as n,data as r,init as i,side as a}from"./action.js";import{f as o,m as s,n as c,o as l,r as u,t as d}from"./const-DMb65zjR.js";import{AiaxServer as f}from"./server.js";import{createMiddleware as p}from"hono/factory";import m from"@auth/core/providers/google";import{decode as h,encode as g}from"@auth/core/jwt";import{DrizzleAdapter as _}from"@auth/drizzle-adapter";import{getAuthUser as v,initAuthConfig as y}from"@hono/auth-js";import{drizzle as b}from"drizzle-orm/d1";import{env as x}from"hono/adapter";import{streamText as S}from"hono/streaming";import{StreamableHTTPTransport as C}from"@hono/mcp";import{McpServer as w}from"@modelcontextprotocol/sdk/server/mcp.js";import{getServerByName as T,routePartykitRequest as E}from"partyserver";const D=e=>y(t=>{let n=new URL(t.req.url).host,r=!!e.cookie&&e.cookie.services.some(t=>n===`${t}.${e.cookie.apex}`),i={sessionToken:{options:{domain:`.${e.cookie?.apex}`}}},a=e.providers??[m({clientId:t.env.GOOGLE_CLIENT_ID,clientSecret:t.env.GOOGLE_CLIENT_SECRET})];return{...e.database?{adapter:_(b(e.database(t.env)))}:{},providers:a,secret:t.env.AUTH_SECRET,session:{strategy:`jwt`},...r?{cookies:i}:{}}}),O=async e=>(await v(e))?.token?.sub??``,k=(e,t,n,r)=>g({token:{sub:t,path:n},secret:x(e).AUTH_SECRET,salt:r?.salt??`authjs.mcp-token`,maxAge:r?.maxAge??43200}),A=async(e,t)=>{let n=(e.req.header(`Authorization`)??``).replace(/^Bearer\s+/i,``);if(!n)return null;let r=await h({token:n,secret:x(e).AUTH_SECRET,salt:t?.salt??`authjs.mcp-token`}).catch(()=>null);return{sub:r?.sub??``,path:r?.path??``}},j=(e,t=`site`)=>async(n,r,i)=>!r||!i?``:(await e(n).head(`${r}/${i}`))?.customMetadata?.[t]??``,M=()=>(e,t)=>t,N=e=>e.startsWith(`data:`)?JSON.parse(e.slice(5)):null,P=(e,t,n)=>fetch(e.api,{method:`POST`,headers:{"x-api-key":e.key,"anthropic-version":l,"anthropic-beta":u,"content-type":`application/json`},body:JSON.stringify({model:e.model,max_tokens:e.maxTokens,stream:!0,cache_control:{type:`ephemeral`},system:e.system,mcp_servers:[{type:`url`,url:e.url,name:e.name,...t?{authorization_token:t}:{}}],tools:[{type:`mcp_toolset`,mcp_server_name:e.name}],messages:n})}),F=async(e,t)=>{let n=[],r=null,i=0,a=0,o=0,s=``,c=e.body.getReader(),l=new TextDecoder,u=``;for(;;){let{done:e,value:d}=await c.read();if(e)break;u+=l.decode(d,{stream:!0});let f=u.split(`
+`);u=f.pop()??``;for(let e of f){let c=N(e);if(c){if(c.type===`message_start`){let e=c.message?.usage??{};i+=(e.input_tokens??0)+(e.cache_creation_input_tokens??0)+(e.cache_read_input_tokens??0),a+=e.cache_read_input_tokens??0}c.type===`message_delta`&&(o=c.usage?.output_tokens??o,s=c.delta?.stop_reason??s),c.type===`content_block_start`&&(r={...c.content_block},n.push(r),r.type===`mcp_tool_use`&&await t(`\n[tool] ${r.name}\n`)),c.type===`content_block_delta`&&c.delta?.type===`text_delta`&&(r.text=(r.text??``)+c.delta.text,await t(c.delta.text)),c.type===`content_block_delta`&&c.delta?.type===`input_json_delta`&&(r.partial=(r.partial??``)+c.delta.partial_json),c.type===`content_block_delta`&&c.delta?.type===`thinking_delta`&&(r.thinking=(r.thinking??``)+c.delta.thinking),c.type===`content_block_delta`&&c.delta?.type===`signature_delta`&&(r.signature=(r.signature??``)+c.delta.signature),c.type===`content_block_stop`&&r?.partial!==void 0&&(r.input=r.partial?JSON.parse(r.partial):{},delete r.partial)}}}return{blocks:n,input:i,cached:a,output:o,stop:s}},I=async(e,t,n,r,i,a=10)=>{let o=r,s=0,c=0,l=0,u=``;for(let r=0;r<a;r++){let r=await F(o,i);if(s+=r.input,c+=r.cached,l+=r.output,u=r.stop||u,u!==`pause_turn`)break;if(n.push({role:`assistant`,content:r.blocks.filter(e=>e.type!==`thinking`||e.thinking||e.signature)}),o=await P(e,await t(),n),!o.ok){await i(await o.text());break}}await i(`\n[usage] input ${s} (cache ${c}) / output ${l} tokens (${u})\n`)},L=e=>p(async t=>{let n=await O(t),{path:r=``,prompt:i}=await t.req.json(),a=!!e.lobby&&!r;if(!a&&!n)return t.text(`Unauthorized`,401);if(!a&&!await e.own(x(t),n,r))return t.text(`Forbidden`,403);let o=t.req.header(`x-original-host`)??t.req.header(`x-forwarded-host`)??new URL(t.req.url).host,s={key:x(t).ANTHROPIC_API_KEY,api:e.claude??`https://api.anthropic.com/v1/messages`,name:e.name,url:`https://${o}${e.endpoint??`/api/mcp`}`,model:e.model??`claude-sonnet-5`,system:e.system??``,maxTokens:e.maxTokens??32e3},c=()=>a?Promise.resolve(``):k(t,n,r,e),l=[{role:`user`,content:i}],u=await P(s,await c(),l);return u.ok?S(t,t=>I(s,c,l,u,e=>t.write(e),e.maxTurns??10)):t.text(await u.text(),500)}),R=e=>({sub:e.headers.get(`x-user-sub`)??``,path:decodeURIComponent(e.headers.get(`x-user-path`)??``)}),z=async(e,t,n,r,i)=>{let a=await T(e,t),c={[s]:n.sub,[o]:encodeURIComponent(n.path)};return(await a.fetch(`https://internal/act`,{method:`POST`,headers:c,body:JSON.stringify({name:r,input:i})})).json()},B=(e,t)=>p(async n=>{let r=await A(n,e),i=r?.sub??``,a=r?.path??``,o=e.lobby??``;if(r||!o){if(!i)return n.text(`Unauthorized`,401);if(o=await e.own(x(n),i,a),!o)return n.text(`Forbidden`,403)}let s=new w({name:e.name,version:e.version??`1.0.0`}),c=new C;return t.forEach((t,r)=>s.registerTool(r,{description:t.description,inputSchema:{...t.input}},async t=>{let s=await z(x(n)[e.binding??`v1`],o,{sub:i,path:a},r,t);return{content:[{type:`text`,text:JSON.stringify(s)}]}})),await s.connect(c),c.handleRequest(n)}),V=async(e,t,n,r)=>{let i=new Headers(e.req.raw.headers);i.set(s,n),i.set(o,encodeURIComponent(r));let a=new URL(e.req.url),c=a.pathname.split(`/`);c[3]=encodeURIComponent(t),a.pathname=c.join(`/`);let l=new Request(a,new Request(e.req.raw,{headers:i}));return await E(l,x(e))??e.text(`Not Found`,404)},H=e=>p(async t=>{let n=decodeURIComponent(t.req.path.split(`/`)[3]??``),r=t.req.query(`path`)??``,i=await O(t);if(e.lobby&&n===e.lobby)return V(t,n,i,r);if(!i)return t.text(`Unauthorized`,401);let a=await e.own(x(t),i,r);return!a||n!==a&&n!==(e.alias??`my-room`)?t.text(`Forbidden`,403):V(t,a,i,r)}),U=e=>{let n={auth:D(e),party:H(e),mcp:B(e,t),llm:L(e)},r=p(async(t,r)=>{let i=()=>t.req.path.startsWith(`/parties/`)?n.party(t,r):t.req.path===(e.endpoint??`/api/mcp`)?n.mcp(t,r):t.req.path===`/api/llm`&&t.req.method===`POST`?n.llm(t,r):r(),a;if(await n.auth(t,async()=>void(a=await i())),a)return a});return{config:e,Server:f,use:()=>r,auth:()=>n.auth,party:()=>n.party,mcp:()=>n.mcp,llm:()=>n.llm}};export{d as ALIAS,f as AiaxServer,c as BINDING,e as action,t as actions,n as bind,U as createAiax,r as data,R as grantOf,i as init,M as ownSelf,j as ownSite,a as side};

package/dist/server.d.ts

@@ -0,0 +1,11 @@
+import { t as Call } from "./action-DItZAgdx.js";
+import { YServer } from "y-partyserver";
+//#region src/server.d.ts
+declare class AiaxServer extends YServer {
+  wrap: (run: () => Promise<any>) => Promise<any>;
+  call: Call;
+  onAct(_request: Request): Promise<void>;
+  onRequest(request: Request): Promise<Response>;
+}
+//#endregion
+export { AiaxServer };

package/dist/server.js

@@ -0,0 +1 @@
+import{actions as e,bind as t,init as n}from"./action.js";import{YServer as r}from"y-partyserver";var i=class extends r{wrap=e=>e();call=n(this.document,e=>this.wrap(e));async onAct(e){}async onRequest(n){if(t(this.document),n.method!==`POST`)return new Response(`Not Found`,{status:404});let{name:r,input:i}=await n.json();return e.get(r)?.side===`client`?Response.json({ok:!0,result:await this.call(r,i)}):(await this.onAct(n),Response.json({ok:!0,result:await this.wrap(()=>this.call(r,i))}))}};export{i as AiaxServer};

package/package.json

@@ -0,0 +1,99 @@
+{
+        "name": "ai-ax",
+        "author": "tseijp",
+        "version": "0.1.0",
+        "license": "MIT",
+        "description": "AI Agent Experience (AI/AX) library for Hono + Cloudflare. One act surface for both human UI/UX and LLM MCP tools, with authentication, authorization, realtime sync and Claude API relay.",
+        "keywords": [
+                "hono",
+                "cloudflare",
+                "mcp",
+                "llm",
+                "claude",
+                "yjs",
+                "durable-objects",
+                "auth"
+        ],
+        "repository": {
+                "type": "git",
+                "url": "https://github.com/tseijp/ai-ax.git",
+                "directory": "packages/core"
+        },
+        "type": "module",
+        "sideEffects": false,
+        "main": "./dist/index.js",
+        "module": "./dist/index.js",
+        "types": "./dist/index.d.ts",
+        "exports": {
+                "./package.json": "./package.json",
+                ".": {
+                        "types": "./dist/index.d.ts",
+                        "default": "./dist/index.js"
+                },
+                "./action": {
+                        "types": "./dist/action.d.ts",
+                        "default": "./dist/action.js"
+                },
+                "./server": {
+                        "types": "./dist/server.d.ts",
+                        "default": "./dist/server.js"
+                },
+                "./client": {
+                        "types": "./dist/client.d.ts",
+                        "default": "./dist/client.js"
+                },
+                "./src": {
+                        "types": "./src/index.ts",
+                        "default": "./src/index.ts"
+                },
+                "./src/*": {
+                        "types": "./src/*.ts",
+                        "default": "./src/*.ts"
+                },
+                "./*": {
+                        "types": "./dist/index.d.ts",
+                        "default": "./dist/index.js"
+                }
+        },
+        "files": [
+                "dist",
+                "README.md"
+        ],
+        "scripts": {
+                "build": "tsdown --config ../../tsdown.config.ts"
+        },
+        "devDependencies": {
+                "@auth/core": "0.34.3",
+                "@auth/drizzle-adapter": "1.11.2",
+                "@hono/auth-js": "1.1.1",
+                "@hono/mcp": "0.3.1",
+                "@modelcontextprotocol/sdk": "1.29.0",
+                "drizzle-orm": "0.45.2",
+                "hono": "4.12.30",
+                "partyserver": "0.5.8",
+                "y-partyserver": "2.2.0",
+                "yjs": "13.6.31",
+                "zod": "4.4.3"
+        },
+        "peerDependencies": {
+                "@auth/core": ">=0.34.0",
+                "@auth/drizzle-adapter": ">=1.0.0",
+                "@hono/auth-js": ">=1.0.0",
+                "@hono/mcp": ">=0.3.0",
+                "@modelcontextprotocol/sdk": ">=1.0.0",
+                "drizzle-orm": ">=0.40.0",
+                "hono": ">=4.0.0",
+                "partyserver": ">=0.5.0",
+                "y-partyserver": ">=2.0.0",
+                "yjs": ">=13.0.0",
+                "zod": ">=3.25.0"
+        },
+        "peerDependenciesMeta": {
+                "@auth/drizzle-adapter": {
+                        "optional": true
+                },
+                "drizzle-orm": {
+                        "optional": true
+                }
+        }
+}