experimental-ash 0.26.0 → 0.28.0

package/dist/src/client/session-utils.js

@@ -1,62 +1 @@
-import { isCurrentTurnBoundaryEvent } from "#protocol/message.js";
-/**
- * Returns a fresh session state with no active run.
- */
-export function createInitialSessionState() {
-    return { streamIndex: 0 };
-}
-/**
- * Advances the session cursor after one streamed turn completes.
- *
- * When the boundary event is `session.waiting`, the session is preserved for
- * the next message. For `session.completed` and `session.failed`, the session
- * resets so the next call starts a new conversation.
- */
-export function advanceSession(input) {
-    const boundaryEvent = findBoundaryEvent(input.events);
-    const streamIndex = input.session.streamIndex + input.events.length;
-    if (boundaryEvent?.type === "session.waiting") {
-        return {
-            continuationToken: input.continuationToken ?? input.session.continuationToken,
-            sessionId: input.sessionId,
-            streamIndex,
-        };
-    }
-    return createInitialSessionState();
-}
-/**
- * Extracts the final completed assistant message text from a turn's events.
- *
- * Only considers terminal messages (finish reason is not `"tool-calls"`).
- */
-export function extractCompletedMessage(events) {
-    let lastMessage;
-    for (const event of events) {
-        if (isFinalMessageCompleted(event)) {
-            lastMessage = event.data.message ?? undefined;
-        }
-    }
-    return lastMessage;
-}
-/**
- * Derives the result status from a turn's boundary event.
- */
-export function deriveResultStatus(events) {
-    const boundary = findBoundaryEvent(events);
-    if (boundary?.type === "session.waiting")
-        return "waiting";
-    if (boundary?.type === "session.failed")
-        return "failed";
-    return "completed";
-}
-function findBoundaryEvent(events) {
-    for (let i = events.length - 1; i >= 0; i--) {
-        const event = events[i];
-        if (event !== undefined && isCurrentTurnBoundaryEvent(event))
-            return event;
-    }
-    return undefined;
-}
-function isFinalMessageCompleted(event) {
-    return event.type === "message.completed" && event.data.finishReason !== "tool-calls";
-}
+import{isCurrentTurnBoundaryEvent}from"#protocol/message.js";function createInitialSessionState(){return{streamIndex:0}}function advanceSession(e){let t=findBoundaryEvent(e.events),n=e.session.streamIndex+e.events.length;return t?.type===`session.waiting`?{continuationToken:e.continuationToken??e.session.continuationToken,sessionId:e.sessionId,streamIndex:n}:createInitialSessionState()}function extractCompletedMessage(e){let t;for(let n of e)isFinalMessageCompleted(n)&&(t=n.data.message??void 0);return t}function deriveResultStatus(e){let t=findBoundaryEvent(e);return t?.type===`session.waiting`?`waiting`:t?.type===`session.failed`?`failed`:`completed`}function findBoundaryEvent(t){for(let n=t.length-1;n>=0;n--){let r=t[n];if(r!==void 0&&isCurrentTurnBoundaryEvent(r))return r}}function isFinalMessageCompleted(e){return e.type===`message.completed`&&e.data.finishReason!==`tool-calls`}export{advanceSession,createInitialSessionState,deriveResultStatus,extractCompletedMessage};

package/dist/src/client/session.js

@@ -1,206 +1 @@
-import { ASH_SESSION_ID_HEADER, isCurrentTurnBoundaryEvent } from "#protocol/message.js";
-import { ASH_CREATE_SESSION_ROUTE_PATH, createAshContinueSessionRoutePath, createAshMessageStreamRoutePath, } from "#protocol/routes.js";
-import { ClientError } from "#client/client-error.js";
-import { MessageResponse } from "#client/message-response.js";
-import { isStreamDisconnectError, readNdjsonStream } from "#client/ndjson.js";
-import { openStreamIterable } from "#client/open-stream.js";
-import { advanceSession } from "#client/session-utils.js";
-import { createClientUrl } from "#client/url.js";
-/**
- * One conversation with an Ash agent.
- *
- * A session tracks conversation state (continuation token, session ID, stream
- * cursor) automatically across {@link sendMessage} calls. The state is
- * available via the {@link state} getter and is serializable for persistence.
- */
-export class ClientSession {
-    #context;
-    #state;
-    /** @internal */
-    constructor(context, state) {
-        this.#context = context;
-        this.#state = state;
-    }
-    /**
-     * Current session cursor. Always reflects the latest state after each
-     * completed turn. Serialize this to persist and resume later.
-     */
-    get state() {
-        return this.#state;
-    }
-    /**
-     * Sends a message to the agent.
-     *
-     * The returned {@link MessageResponse} exposes metadata (session ID,
-     * continuation token) immediately. The event stream is consumed separately
-     * via {@link MessageResponse.result} or `for await...of`.
-     *
-     * The session's state is updated automatically after the stream is
-     * consumed.
-     */
-    async sendMessage(message, options) {
-        return this.send({ message }, options);
-    }
-    /**
-     * Sends one turn payload to the agent.
-     *
-     * Use this to submit follow-up text, HITL results, or both in a single
-     * request.
-     */
-    async send(input, options) {
-        const state = this.#state;
-        const postResult = await this.#postTurn(input, state, options);
-        const { continuationToken, sessionId } = postResult;
-        return new MessageResponse({
-            continuationToken,
-            createStream: () => this.#createEventStream(sessionId, continuationToken, state, options),
-            sessionId,
-        });
-    }
-    /**
-     * Opens this session's event stream using the current session ID and stream
-     * index.
-     *
-     * @throws {Error} If the session has no session ID (no message has been sent
-     *   yet).
-     */
-    openStream(options) {
-        const sessionId = this.#state.sessionId;
-        if (!sessionId) {
-            throw new Error("Session has no session ID. Send a message first.");
-        }
-        return openStreamIterable({
-            host: this.#context.host,
-            maxReconnectAttempts: this.#context.maxReconnectAttempts,
-            resolveHeaders: () => this.#context.resolveHeaders(),
-            sessionId,
-            signal: options?.signal,
-            startIndex: options?.startIndex ?? this.#state.streamIndex,
-        });
-    }
-    // ---------------------------------------------------------------------------
-    // Internal: POST to message route
-    // ---------------------------------------------------------------------------
-    async #postTurn(input, session, options) {
-        const routePath = session.sessionId
-            ? createAshContinueSessionRoutePath(session.sessionId)
-            : ASH_CREATE_SESSION_ROUTE_PATH;
-        const url = createClientUrl(this.#context.host, routePath);
-        const headers = await this.#context.resolveHeaders(options?.headers);
-        headers.set("content-type", "application/json");
-        const body = createHandleMessageBody({
-            input,
-            session,
-        });
-        if (body === null) {
-            throw new Error("Session.send requires a non-empty message, inputResponses, or both.");
-        }
-        const response = await fetch(url, {
-            body: JSON.stringify(body),
-            headers,
-            method: "POST",
-            signal: options?.signal ?? null,
-        });
-        if (!response.ok) {
-            const responseBody = await response.text();
-            throw new ClientError(response.status, responseBody);
-        }
-        const payload = (await response.json());
-        const sessionId = (typeof payload.sessionId === "string" ? payload.sessionId : undefined) ??
-            response.headers.get(ASH_SESSION_ID_HEADER)?.trim() ??
-            session.sessionId;
-        if (!sessionId) {
-            throw new Error("Message route did not return a session id.");
-        }
-        const continuationToken = typeof payload.continuationToken === "string" ? payload.continuationToken : undefined;
-        return { continuationToken, sessionId };
-    }
-    // ---------------------------------------------------------------------------
-    // Internal: event stream with reconnection
-    // ---------------------------------------------------------------------------
-    async *#createEventStream(sessionId, continuationToken, initialState, options) {
-        const events = [];
-        try {
-            let currentStreamIndex = initialState.sessionId === sessionId ? initialState.streamIndex : 0;
-            let remainingReconnectAttempts = this.#context.maxReconnectAttempts;
-            while (true) {
-                const body = await this.#openStreamBody(sessionId, currentStreamIndex, options?.signal);
-                let foundBoundary = false;
-                try {
-                    for await (const event of readNdjsonStream(body)) {
-                        events.push(event);
-                        currentStreamIndex += 1;
-                        yield event;
-                        if (isCurrentTurnBoundaryEvent(event)) {
-                            foundBoundary = true;
-                            break;
-                        }
-                    }
-                }
-                catch (error) {
-                    if (!isStreamDisconnectError(error)) {
-                        throw error;
-                    }
-                }
-                if (foundBoundary) {
-                    break;
-                }
-                if (remainingReconnectAttempts <= 0) {
-                    break;
-                }
-                remainingReconnectAttempts -= 1;
-            }
-        }
-        finally {
-            this.#state = advanceSession({
-                continuationToken,
-                events,
-                sessionId,
-                session: initialState,
-            });
-        }
-    }
-    async #openStreamBody(sessionId, startIndex, signal) {
-        const url = createClientUrl(this.#context.host, createAshMessageStreamRoutePath(sessionId), startIndex > 0 ? { startIndex: String(startIndex) } : undefined);
-        const headers = await this.#context.resolveHeaders();
-        const response = await fetch(url, {
-            headers,
-            signal: signal ?? null,
-        });
-        if (!response.ok) {
-            const responseBody = await response.text();
-            throw new ClientError(response.status, responseBody);
-        }
-        if (!response.body) {
-            throw new ClientError(response.status, "Response body is null.");
-        }
-        return response.body;
-    }
-}
-function createHandleMessageBody(input) {
-    const body = {};
-    if (input.input.message !== undefined) {
-        body.message = input.input.message;
-    }
-    if (input.input.inputResponses !== undefined && input.input.inputResponses.length > 0) {
-        body.inputResponses = input.input.inputResponses;
-    }
-    if (input.input.clientContext !== undefined) {
-        body.clientContext = input.input.clientContext;
-    }
-    if (input.session.continuationToken !== undefined) {
-        body.continuationToken = input.session.continuationToken;
-    }
-    if (Object.keys(body).length === 0) {
-        return null;
-    }
-    if (input.session.continuationToken === undefined && body.message === undefined) {
-        return null;
-    }
-    if (input.session.continuationToken !== undefined &&
-        body.message === undefined &&
-        body.inputResponses === undefined) {
-        return null;
-    }
-    return body;
-}
+import{ASH_CREATE_SESSION_ROUTE_PATH,createAshContinueSessionRoutePath,createAshMessageStreamRoutePath}from"#protocol/routes.js";import{openStreamIterable}from"#client/open-stream.js";import{ASH_SESSION_ID_HEADER,isCurrentTurnBoundaryEvent}from"#protocol/message.js";import{ClientError}from"#client/client-error.js";import{advanceSession}from"#client/session-utils.js";import{createClientUrl}from"#client/url.js";import{MessageResponse}from"#client/message-response.js";import{isStreamDisconnectError,readNdjsonStream}from"#client/ndjson.js";var ClientSession=class{#e;#t;constructor(e,t){this.#e=e,this.#t=t}get state(){return this.#t}async sendMessage(e,t){return this.send({message:e},t)}async send(e,t){let n=this.#t,{continuationToken:r,sessionId:i}=await this.#n(e,n,t);return new MessageResponse({continuationToken:r,createStream:()=>this.#r(i,r,n,t),sessionId:i})}openStream(e){let t=this.#t.sessionId;if(!t)throw Error(`Session has no session ID. Send a message first.`);return openStreamIterable({host:this.#e.host,maxReconnectAttempts:this.#e.maxReconnectAttempts,resolveHeaders:()=>this.#e.resolveHeaders(),sessionId:t,signal:e?.signal,startIndex:e?.startIndex??this.#t.streamIndex})}async#n(n,r,a){let s=r.sessionId?createAshContinueSessionRoutePath(r.sessionId):ASH_CREATE_SESSION_ROUTE_PATH,c=createClientUrl(this.#e.host,s),l=await this.#e.resolveHeaders(a?.headers);l.set(`content-type`,`application/json`);let u=createHandleMessageBody({input:n,session:r});if(u===null)throw Error(`Session.send requires a non-empty message, inputResponses, or both.`);let d=await fetch(c,{body:JSON.stringify(u),headers:l,method:`POST`,signal:a?.signal??null});if(!d.ok){let e=await d.text();throw new ClientError(d.status,e)}let f=await d.json(),p=(typeof f.sessionId==`string`?f.sessionId:void 0)??d.headers.get(ASH_SESSION_ID_HEADER)?.trim()??r.sessionId;if(!p)throw Error(`Message route did not return a session id.`);return{continuationToken:typeof f.continuationToken==`string`?f.continuationToken:void 0,sessionId:p}}async*#r(e,t,n,r){let i=[];try{let t=n.sessionId===e?n.streamIndex:0,o=this.#e.maxReconnectAttempts;for(;;){let n=await this.#i(e,t,r?.signal),s=!1;try{for await(let e of readNdjsonStream(n))if(i.push(e),t+=1,yield e,isCurrentTurnBoundaryEvent(e)){s=!0;break}}catch(e){if(!isStreamDisconnectError(e))throw e}if(s||o<=0)break;--o}}finally{this.#t=advanceSession({continuationToken:t,events:i,sessionId:e,session:n})}}async#i(e,t,r){let i=createClientUrl(this.#e.host,createAshMessageStreamRoutePath(e),t>0?{startIndex:String(t)}:void 0),a=await this.#e.resolveHeaders(),s=await fetch(i,{headers:a,signal:r??null});if(!s.ok){let e=await s.text();throw new ClientError(s.status,e)}if(!s.body)throw new ClientError(s.status,`Response body is null.`);return s.body}};function createHandleMessageBody(e){let t={};return e.input.message!==void 0&&(t.message=e.input.message),e.input.inputResponses!==void 0&&e.input.inputResponses.length>0&&(t.inputResponses=e.input.inputResponses),e.input.clientContext!==void 0&&(t.clientContext=e.input.clientContext),e.session.continuationToken!==void 0&&(t.continuationToken=e.session.continuationToken),Object.keys(t).length===0||e.session.continuationToken===void 0&&t.message===void 0||e.session.continuationToken!==void 0&&t.message===void 0&&t.inputResponses===void 0?null:t}export{ClientSession};

package/dist/src/client/types.js

@@ -1 +1 @@
-export {};
+export{};

package/dist/src/client/url.js

@@ -1,34 +1 @@
-/**
- * Builds a fetchable URL from a caller-provided host and an Ash route path.
- *
- * `host` may be an absolute origin (`https://agent.example.com`) or a
- * same-origin prefix (`/api`). Prefixes are important for browser clients that
- * talk to an app-owned proxy instead of the Ash deployment directly.
- */
-export function createClientUrl(host, routePath, searchParams) {
-    const normalizedRoute = routePath.startsWith("/") ? routePath : `/${routePath}`;
-    const search = formatSearch(searchParams);
-    if (isAbsoluteUrl(host)) {
-        const url = new URL(host);
-        const basePath = trimTrailingSlash(url.pathname);
-        url.pathname = `${basePath}${normalizedRoute}`;
-        url.search = search;
-        url.hash = "";
-        return url.toString();
-    }
-    return `${trimTrailingSlash(host)}${normalizedRoute}${search}`;
-}
-function isAbsoluteUrl(value) {
-    return /^[a-z][a-z\d+\-.]*:/i.test(value);
-}
-function trimTrailingSlash(value) {
-    if (value === "/")
-        return "";
-    return value.endsWith("/") ? value.slice(0, -1) : value;
-}
-function formatSearch(searchParams) {
-    if (!searchParams || Object.keys(searchParams).length === 0) {
-        return "";
-    }
-    return `?${new URLSearchParams(searchParams).toString()}`;
-}
+function createClientUrl(e,t,n){let r=t.startsWith(`/`)?t:`/${t}`,i=formatSearch(n);if(isAbsoluteUrl(e)){let t=new URL(e);return t.pathname=`${trimTrailingSlash(t.pathname)}${r}`,t.search=i,t.hash=``,t.toString()}return`${trimTrailingSlash(e)}${r}${i}`}function isAbsoluteUrl(e){return/^[a-z][a-z\d+\-.]*:/i.test(e)}function trimTrailingSlash(e){return e===`/`?``:e.endsWith(`/`)?e.slice(0,-1):e}function formatSearch(e){return!e||Object.keys(e).length===0?``:`?${new URLSearchParams(e).toString()}`}export{createClientUrl};

package/dist/src/compiled/.vendor-stamp.json

@@ -4,7 +4,10 @@
     "chat": "4.29.0",
     "@chat-adapter/slack": "4.29.0",
     "@chat-adapter/state-memory": "4.29.0",
+    "chokidar": "5.0.0",
+    "commander": "14.0.3",
     "@ai-sdk/google": "4.0.0-canary.69",
+    "gray-matter": "4.0.3",
     "jose": "6.2.3",
     "just-bash": "3.0.1",
     "jsonc-parser": "3.3.1",
@@ -12,14 +15,16 @@
     "@ai-sdk/openai": "4.0.0-canary.62",
     "@opentelemetry/api": "1.9.1",
     "@ai-sdk/otel": "1.0.0-canary.90",
+    "picocolors": "1.1.1",
     "@ai-sdk/provider": "4.0.0-canary.17",
     "@standard-schema/spec": "1.1.0",
     "turndown": "7.2.4",
+    "@vercel/oidc": "3.4.1",
     "@vercel/sandbox": "2.0.0",
     "@workflow/core": "5.0.0-beta.7",
     "@workflow/errors": "5.0.0-beta.4",
     "zod": "4.4.3",
     "zod-validation-error": "5.0.0"
   },
-  "scriptHash": "5c7b8cab469fbc4adca392b2abf448ea2729421fe97f353cb77c0da982d8c5f9"
+  "scriptHash": "43e00aa83086e53d108ce4bc2f07a1be40cf9a8a9c36f22b128ad2823b436816"
 }

package/dist/src/compiled/@vercel/oidc/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2017 Vercel, Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/src/compiled/@vercel/oidc/index.d.ts

@@ -0,0 +1,21 @@
+// Minimal declaration for the vendored slice of `@vercel/oidc`. The
+// upstream package fans out `index.d.ts` across four sibling files
+// (`get-vercel-oidc-token`, `get-context`, `auth-errors`, `token-util`),
+// most of which ash never references. Only `getVercelOidcToken` is used
+// from this package; other helpers can be added here if a future caller
+// reaches for them.
+
+export interface GetVercelOidcTokenOptions {
+  /** Optional team ID (`team_*`) or slug to use for token refresh. */
+  team?: string;
+  /** Optional project ID (`prj_*`) or slug to use for token refresh. */
+  project?: string;
+  /** Buffer in milliseconds before token expiry that triggers a refresh. */
+  expirationBufferMs?: number;
+}
+
+/**
+ * Returns the OIDC token from the request context or `VERCEL_OIDC_TOKEN`,
+ * refreshing it in a development environment when it is expired.
+ */
+export declare function getVercelOidcToken(options?: GetVercelOidcTokenOptions): Promise<string>;

package/dist/src/compiled/@vercel/oidc/index.js

@@ -0,0 +1,2 @@
+import{createRequire as e}from"node:module";var t=Object.create,n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnPropertyNames,a=Object.getPrototypeOf,o=Object.prototype.hasOwnProperty,s=(e,t)=>()=>(t||(e((t={exports:{}}).exports,t),e=null),t.exports),c=(e,t,a,s)=>{if(t&&typeof t==`object`||typeof t==`function`)for(var c=i(t),l=0,u=c.length,d;l<u;l++)d=c[l],!o.call(e,d)&&d!==a&&n(e,d,{get:(e=>t[e]).bind(null,d),enumerable:!(s=r(t,d))||s.enumerable});return e},l=(e,r,i)=>(i=e==null?{}:t(a(e)),c(r||!e||!e.__esModule?n(i,`default`,{value:e,enumerable:!0}):i,e)),u=e(import.meta.url),d=s(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnPropertyNames,a=Object.prototype.hasOwnProperty,o=(e,t)=>{for(var r in t)n(e,r,{get:t[r],enumerable:!0})},s=(e,t,o,s)=>{if(t&&typeof t==`object`||typeof t==`function`)for(let c of i(t))!a.call(e,c)&&c!==o&&n(e,c,{get:()=>t[c],enumerable:!(s=r(t,c))||s.enumerable});return e},c=e=>s(n({},`__esModule`,{value:!0}),e),l={};o(l,{SYMBOL_FOR_REQ_CONTEXT:()=>u,getContext:()=>d}),t.exports=c(l);let u=Symbol.for(`@vercel/request-context`);function d(){return globalThis[u]?.get?.()??{}}})),f=s(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnPropertyNames,a=Object.prototype.hasOwnProperty,o=(e,t)=>{for(var r in t)n(e,r,{get:t[r],enumerable:!0})},s=(e,t,o,s)=>{if(t&&typeof t==`object`||typeof t==`function`)for(let c of i(t))!a.call(e,c)&&c!==o&&n(e,c,{get:()=>t[c],enumerable:!(s=r(t,c))||s.enumerable});return e},c=e=>s(n({},`__esModule`,{value:!0}),e),l={};o(l,{VercelOidcTokenError:()=>u}),t.exports=c(l);var u=class extends Error{constructor(e,t){super(e),this.name=`VercelOidcTokenError`,this.cause=t}toString(){return this.cause?`${this.name}: ${this.message}: ${this.cause}`:`${this.name}: ${this.message}`}}})),p=s(((e,t)=>{var n=Object.create,r=Object.defineProperty,i=Object.getOwnPropertyDescriptor,a=Object.getOwnPropertyNames,o=Object.getPrototypeOf,s=Object.prototype.hasOwnProperty,c=(e,t)=>{for(var n in t)r(e,n,{get:t[n],enumerable:!0})},l=(e,t,n,o)=>{if(t&&typeof t==`object`||typeof t==`function`)for(let c of a(t))!s.call(e,c)&&c!==n&&r(e,c,{get:()=>t[c],enumerable:!(o=i(t,c))||o.enumerable});return e},d=(e,t,i)=>(i=e==null?{}:n(o(e)),l(t||!e||!e.__esModule?r(i,`default`,{value:e,enumerable:!0}):i,e)),p=e=>l(r({},`__esModule`,{value:!0}),e),m={};c(m,{findRootDir:()=>y,getUserDataDir:()=>b}),t.exports=p(m);var h=d(u(`path`)),g=d(u(`fs`)),_=d(u(`os`)),v=f();function y(){try{let e=process.cwd();for(;e!==h.default.dirname(e);){let t=h.default.join(e,`.vercel`);if(g.default.existsSync(t))return e;e=h.default.dirname(e)}}catch{throw new v.VercelOidcTokenError(`Token refresh only supported in node server environments`)}return null}function b(){if(process.env.XDG_DATA_HOME)return process.env.XDG_DATA_HOME;switch(_.default.platform()){case`darwin`:return h.default.join(_.default.homedir(),`Library/Application Support`);case`linux`:return h.default.join(_.default.homedir(),`.local/share`);case`win32`:return process.env.LOCALAPPDATA?process.env.LOCALAPPDATA:null;default:return null}}})),m=s(((e,t)=>{var n=Object.create,r=Object.defineProperty,i=Object.getOwnPropertyDescriptor,a=Object.getOwnPropertyNames,o=Object.getPrototypeOf,s=Object.prototype.hasOwnProperty,c=(e,t)=>{for(var n in t)r(e,n,{get:t[n],enumerable:!0})},l=(e,t,n,o)=>{if(t&&typeof t==`object`||typeof t==`function`)for(let c of a(t))!s.call(e,c)&&c!==n&&r(e,c,{get:()=>t[c],enumerable:!(o=i(t,c))||o.enumerable});return e},d=(e,t,i)=>(i=e==null?{}:n(o(e)),l(t||!e||!e.__esModule?r(i,`default`,{value:e,enumerable:!0}):i,e)),f=e=>l(r({},`__esModule`,{value:!0}),e),p={};c(p,{isValidAccessToken:()=>x,readAuthConfig:()=>y,writeAuthConfig:()=>b}),t.exports=f(p);var m=d(u(`fs`)),h=d(u(`path`)),g=_();function v(){let e=(0,g.getVercelDataDir)();if(!e)throw Error(`Unable to find Vercel CLI data directory. Your platform: ${process.platform}. Supported: darwin, linux, win32.`);return h.join(e,`auth.json`)}function y(){try{let e=v();if(!m.existsSync(e))return null;let t=m.readFileSync(e,`utf8`);return t?JSON.parse(t):null}catch{return null}}function b(e){let t=v(),n=h.dirname(t);m.existsSync(n)||m.mkdirSync(n,{mode:504,recursive:!0}),m.writeFileSync(t,JSON.stringify(e,null,2),{mode:384})}function x(e,t=0){if(!e.token)return!1;if(typeof e.expiresAt!=`number`)return!0;let n=Math.floor(Date.now()/1e3),r=t/1e3;return e.expiresAt>=n+r}})),h=s(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnPropertyNames,a=Object.prototype.hasOwnProperty,o=(e,t)=>{for(var r in t)n(e,r,{get:t[r],enumerable:!0})},s=(e,t,o,s)=>{if(t&&typeof t==`object`||typeof t==`function`)for(let c of i(t))!a.call(e,c)&&c!==o&&n(e,c,{get:()=>t[c],enumerable:!(s=r(t,c))||s.enumerable});return e},c=e=>s(n({},`__esModule`,{value:!0}),e),l={};o(l,{processTokenResponse:()=>g,refreshTokenRequest:()=>h}),t.exports=c(l);var d=u(`os`);let f=`@vercel/oidc node-${process.version} ${(0,d.platform)()} (${(0,d.arch)()}) ${(0,d.hostname)()}`,p=null;async function m(){if(p)return p;let e=await fetch(`https://vercel.com/.well-known/openid-configuration`,{headers:{"user-agent":f}});if(!e.ok)throw Error(`Failed to discover OAuth endpoints`);let t=await e.json();if(!t||typeof t.token_endpoint!=`string`)throw Error(`Invalid OAuth discovery response`);let n=t.token_endpoint;return p=n,n}async function h(e){let t=await m();return await fetch(t,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,"user-agent":f},body:new URLSearchParams({client_id:`cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp`,grant_type:`refresh_token`,...e})})}async function g(e){let t=await e.json();if(!e.ok){let e=typeof t==`object`&&t&&`error`in t?String(t.error):`Token refresh failed`;return[Error(e)]}return typeof t!=`object`||!t?[Error(`Invalid token response`)]:typeof t.access_token==`string`?t.token_type===`Bearer`?typeof t.expires_in==`number`?[null,t]:[Error(`Missing expires_in in response`)]:[Error(`Invalid token_type in response`)]:[Error(`Missing access_token in response`)]}})),g=s(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnPropertyNames,a=Object.prototype.hasOwnProperty,o=(e,t)=>{for(var r in t)n(e,r,{get:t[r],enumerable:!0})},s=(e,t,o,s)=>{if(t&&typeof t==`object`||typeof t==`function`)for(let c of i(t))!a.call(e,c)&&c!==o&&n(e,c,{get:()=>t[c],enumerable:!(s=r(t,c))||s.enumerable});return e},c=e=>s(n({},`__esModule`,{value:!0}),e),l={};o(l,{AccessTokenMissingError:()=>u,RefreshAccessTokenFailedError:()=>d}),t.exports=c(l);var u=class extends Error{constructor(){super(`No authentication found. Please log in with the Vercel CLI (vercel login).`),this.name=`AccessTokenMissingError`}},d=class extends Error{constructor(e){super(`Failed to refresh authentication token.`,{cause:e}),this.name=`RefreshAccessTokenFailedError`}}})),_=s(((e,t)=>{var n=Object.create,r=Object.defineProperty,i=Object.getOwnPropertyDescriptor,a=Object.getOwnPropertyNames,o=Object.getPrototypeOf,s=Object.prototype.hasOwnProperty,c=(e,t)=>{for(var n in t)r(e,n,{get:t[n],enumerable:!0})},l=(e,t,n,o)=>{if(t&&typeof t==`object`||typeof t==`function`)for(let c of a(t))!s.call(e,c)&&c!==n&&r(e,c,{get:()=>t[c],enumerable:!(o=i(t,c))||o.enumerable});return e},d=(e,t,i)=>(i=e==null?{}:n(o(e)),l(t||!e||!e.__esModule?r(i,`default`,{value:e,enumerable:!0}):i,e)),_=e=>l(r({},`__esModule`,{value:!0}),e),v={};c(v,{assertVercelOidcTokenResponse:()=>k,findProjectInfo:()=>A,getTokenPayload:()=>N,getVercelDataDir:()=>E,getVercelOidcToken:()=>O,getVercelToken:()=>D,isExpired:()=>P,loadToken:()=>M,saveToken:()=>j}),t.exports=_(v);var y=d(u(`path`)),b=d(u(`fs`)),x=f(),S=p(),C=m(),w=h(),T=g();function E(){let e=(0,S.getUserDataDir)();return e?y.join(e,`com.vercel.cli`):null}async function D(e){let t=(0,C.readAuthConfig)();if(!t?.token)throw new T.AccessTokenMissingError;if((0,C.isValidAccessToken)(t,e?.expirationBufferMs))return t.token;if(!t.refreshToken)throw(0,C.writeAuthConfig)({}),new T.RefreshAccessTokenFailedError(`No refresh token available`);try{let e=await(0,w.refreshTokenRequest)({refresh_token:t.refreshToken}),[n,r]=await(0,w.processTokenResponse)(e);if(n||!r)throw(0,C.writeAuthConfig)({}),new T.RefreshAccessTokenFailedError(n);let i={token:r.access_token,expiresAt:Math.floor(Date.now()/1e3)+r.expires_in};return r.refresh_token&&(i.refreshToken=r.refresh_token),(0,C.writeAuthConfig)(i),i.token}catch(e){throw(0,C.writeAuthConfig)({}),e instanceof T.AccessTokenMissingError||e instanceof T.RefreshAccessTokenFailedError?e:new T.RefreshAccessTokenFailedError(e)}}async function O(e,t,n){let r=`https://api.vercel.com/v1/projects/${t}/token?source=vercel-oidc-refresh${n?`&teamId=${n}`:``}`,i=await fetch(r,{method:`POST`,headers:{Authorization:`Bearer ${e}`}});if(!i.ok)throw new x.VercelOidcTokenError(`Failed to refresh OIDC token: ${i.statusText}`);let a=await i.json();return k(a),a}function k(e){if(!e||typeof e!=`object`)throw TypeError("Vercel OIDC token is malformed. Expected an object. Please run `vc env pull` and try again");if(!(`token`in e)||typeof e.token!=`string`)throw TypeError("Vercel OIDC token is malformed. Expected a string-valued token property. Please run `vc env pull` and try again")}function A(){let e=(0,S.findRootDir)();if(!e)throw new x.VercelOidcTokenError("Unable to find project root directory. Have you linked your project with `vc link?`");let t=y.join(e,`.vercel`,`project.json`);if(!b.existsSync(t))throw new x.VercelOidcTokenError("project.json not found, have you linked your project with `vc link?`");let n=JSON.parse(b.readFileSync(t,`utf8`));if(typeof n.projectId!=`string`&&typeof n.orgId!=`string`)throw TypeError("Expected a string-valued projectId property. Try running `vc link` to re-link your project.");return{projectId:n.projectId,teamId:n.orgId}}function j(e,t){let n=(0,S.getUserDataDir)();if(!n)throw new x.VercelOidcTokenError(`Unable to find user data directory. Please reach out to Vercel support.`);let r=y.join(n,`com.vercel.token`,`${t}.json`),i=JSON.stringify(e);b.mkdirSync(y.dirname(r),{mode:504,recursive:!0}),b.writeFileSync(r,i),b.chmodSync(r,432)}function M(e){let t=(0,S.getUserDataDir)();if(!t)throw new x.VercelOidcTokenError(`Unable to find user data directory. Please reach out to Vercel support.`);let n=y.join(t,`com.vercel.token`,`${e}.json`);if(!b.existsSync(n))return null;let r=JSON.parse(b.readFileSync(n,`utf8`));return k(r),r}function N(e){let t=e.split(`.`);if(t.length!==3)throw new x.VercelOidcTokenError("Invalid token. Please run `vc env pull` and try again");let n=t[1].replace(/-/g,`+`).replace(/_/g,`/`),r=n.padEnd(n.length+(4-n.length%4)%4,`=`);return JSON.parse(Buffer.from(r,`base64`).toString(`utf8`))}function P(e,t=0){return e.exp*1e3<Date.now()+t}})),v=s(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnPropertyNames,a=Object.prototype.hasOwnProperty,o=(e,t)=>{for(var r in t)n(e,r,{get:t[r],enumerable:!0})},s=(e,t,o,s)=>{if(t&&typeof t==`object`||typeof t==`function`)for(let c of i(t))!a.call(e,c)&&c!==o&&n(e,c,{get:()=>t[c],enumerable:!(s=r(t,c))||s.enumerable});return e},c=e=>s(n({},`__esModule`,{value:!0}),e),l={};o(l,{refreshToken:()=>p}),t.exports=c(l);var u=f(),d=_();async function p(e){let t=e?.project,n=e?.team;if(!t&&!n){let e=(0,d.findProjectInfo)();t=e.projectId,n=e.teamId}else if(!t||!n){let e=(0,d.findProjectInfo)();t??=e.projectId,n??=e.teamId}if(!t)throw new u.VercelOidcTokenError("Failed to refresh OIDC token: No project specified. Try re-linking your project with `vc link`");let r=(0,d.loadToken)(t);if(!r||(0,d.isExpired)((0,d.getTokenPayload)(r.token),e?.expirationBufferMs)){let i=await(0,d.getVercelToken)({expirationBufferMs:e?.expirationBufferMs});if(r=await(0,d.getVercelOidcToken)(i,t,n),!r)throw new u.VercelOidcTokenError(`Failed to refresh OIDC token`);(0,d.saveToken)(r,t)}process.env.VERCEL_OIDC_TOKEN=r.token}})),y=s(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnPropertyNames,a=Object.prototype.hasOwnProperty,o=(e,t)=>{for(var r in t)n(e,r,{get:t[r],enumerable:!0})},s=(e,t,o,s)=>{if(t&&typeof t==`object`||typeof t==`function`)for(let c of i(t))!a.call(e,c)&&c!==o&&n(e,c,{get:()=>t[c],enumerable:!(s=r(t,c))||s.enumerable});return e},c=e=>s(n({},`__esModule`,{value:!0}),e),u={};o(u,{getVercelOidcToken:()=>h,getVercelOidcTokenSync:()=>g}),t.exports=c(u);var p=d(),m=f();async function h(e){let t=``,n;try{t=g()}catch(e){n=e}try{let[{getTokenPayload:n,isExpired:r},{refreshToken:i}]=await Promise.all([await Promise.resolve().then(()=>l(_())),await Promise.resolve().then(()=>l(v()))]);(!t||r(n(t),e?.expirationBufferMs))&&(await i(e),t=g())}catch(e){let t=n instanceof Error?n.message:``;throw e instanceof Error&&(t=`${t}
+${e.message}`),t?new m.VercelOidcTokenError(t):e}return t}function g(){let e=(0,p.getContext)().headers?.[`x-vercel-oidc-token`]??process.env.VERCEL_OIDC_TOKEN;if(!e)throw Error(`The 'x-vercel-oidc-token' header is missing from the request. Do you have the OIDC option enabled in the Vercel project settings?`);return e}})),b=s(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnPropertyNames,a=Object.prototype.hasOwnProperty,o=(e,t)=>{for(var r in t)n(e,r,{get:t[r],enumerable:!0})},s=(e,t,o,s)=>{if(t&&typeof t==`object`||typeof t==`function`)for(let c of i(t))!a.call(e,c)&&c!==o&&n(e,c,{get:()=>t[c],enumerable:!(s=r(t,c))||s.enumerable});return e},c=e=>s(n({},`__esModule`,{value:!0}),e),l={};o(l,{AccessTokenMissingError:()=>p.AccessTokenMissingError,RefreshAccessTokenFailedError:()=>p.RefreshAccessTokenFailedError,getContext:()=>f.getContext,getVercelOidcToken:()=>u.getVercelOidcToken,getVercelOidcTokenSync:()=>u.getVercelOidcTokenSync,getVercelToken:()=>m.getVercelToken}),t.exports=c(l);var u=y(),f=d(),p=g(),m=_()}))(),x=b.AccessTokenMissingError,S=b.RefreshAccessTokenFailedError,C=b.getContext,w=b.getVercelOidcToken,T=b.getVercelOidcTokenSync,E=b.getVercelToken;export{x as AccessTokenMissingError,S as RefreshAccessTokenFailedError,C as getContext,w as getVercelOidcToken,T as getVercelOidcTokenSync,E as getVercelToken};

package/dist/src/compiled/@vercel/oidc/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "experimental-ash-compiled-vercel-oidc",
+  "version": "3.4.1",
+  "private": true,
+  "type": "module",
+  "license": "Apache-2.0"
+}

package/dist/src/compiled/chokidar/LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2012 Paul Miller (https://paulmillr.com), Elan Shanker
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the “Software”), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.