experimental-ash 0.37.0 → 0.38.1

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # experimental-ash
 
+## 0.38.1
+
+### Patch Changes
+
+- 0a88b75: Prevent `toolResultFrom` from matching the wrong definition when tools share a description or MCP connections share a URL. Runtime resolution now prefers source-derived identity keys and treats colliding fallback keys as non-matching.
+- 8b0a7d8: Upgrade `@workflow/core` to `5.0.0-beta.10`, `@workflow/world-local` to
+  `5.0.0-beta.11`, and `@workflow/errors` to `5.0.0-beta.6`. Picks up
+  step-side `experimental_setAttributes` ([vercel/workflow#2157][1]) and
+  escapes the abandoned November 2025 `@workflow/world-local` slots that
+  broke `@workflow/core@5.0.0-beta.9`'s pin chain
+  ([vercel/workflow#2168][2], [vercel/workflow#2162][3]). No runtime or
+  public API changes — this is the dependency-bump prerequisite for the
+  `$ash.*` workflow attribute emission work (see
+  `research/active/workflow-run-attributes.md`).
+
+  [1]: https://github.com/vercel/workflow/pull/2157
+  [2]: https://github.com/vercel/workflow/pull/2168
+  [3]: https://github.com/vercel/workflow/pull/2162
+
+## 0.38.0
+
+### Minor Changes
+
+- e157d85: Tool approval callbacks now receive schema-typed `toolInput`, and raw
+  `defineChannel` calls can advertise typed cross-channel receive args.
+
+### Patch Changes
+
+- 6563a08: Fix flaky `HookConflictError` in the driver loop by using SDK-generated hook tokens for turn completion instead of explicit deterministic tokens that could collide during handler re-entry.
+- 1a962b8: Rename `AshCallbackContext` to `SessionContext` and export a new `ChannelContext<TCtx>` type from `defineChannel`. `ToolContext` and `HookContext` are unchanged aliases that now extend `SessionContext`.
+- f243a3e: Vendor the code-mode runtime and only include its inline worker assets in hosted function bundles when `CODE_MODE=1`.
+
 ## 0.37.0
 
 ### Minor Changes

package/dist/docs/internals/README.md

@@ -6,7 +6,7 @@ The architecture is a three-layer split:
 - **The harness** does one unit of AI work and returns `{ session, next }`.
 - **The runtime** persists state, follows `next`, streams events, and owns workflow primitives.
 
-All runtime state flows through a single `AshContext` bound by one `AsyncLocalStorage`. Authored code should not know anything about workflow orchestration.
+All runtime state flows through a single `AlsContext` bound by one `AsyncLocalStorage`. Authored code should not know anything about workflow orchestration.
 
 ## Start Here
 

package/dist/docs/internals/context.md

@@ -1,13 +1,13 @@
 # Unified Context
 
-Ash uses a single `AshContext` container bound by one `AsyncLocalStorage` instance. No secondary storage, no custom dehydration, no out-of-band parameter passing.
+Ash uses a single `AlsContext` container bound by one `AsyncLocalStorage` instance. No secondary storage, no custom dehydration, no out-of-band parameter passing.
 
 ## Core Model
 
 `ContextContainer` holds a durable map and a virtual overlay. Reads check the virtual overlay first, then the durable map. Writes always target the durable map.
 
 ```ts
-interface AshContext {
+interface AlsContext {
   get<T>(key: ContextKey<T>): T | undefined;
   require<T>(key: ContextKey<T>): T;
   has<T>(key: ContextKey<T>): boolean;
@@ -26,7 +26,7 @@ ContextReader    { get, require, has }
     ↑ extends
 ContextAccessor  { set, ensure }
     ↑ extends
-AshContext        { entries() }
+AlsContext        { entries() }
 ```
 
 ## Seed Keys

package/dist/docs/internals/core-beliefs.md

@@ -14,7 +14,7 @@ That is why authored identifiers are derived from paths. A file path is a single
 source of truth; a repeated `name` field is a second source that can drift.
 
 The hooks surface (`agent/hooks/`) deliberately reuses the unified
-`AshContext` rather than introducing a parallel state-patch channel:
+`AlsContext` rather than introducing a parallel state-patch channel:
 hooks read and write through `ctx` like every other authored function.
 One context, one set of keys, one place to look when debugging.
 
@@ -36,7 +36,7 @@ and easier to fork accidentally.
 
 ## Context Is A Single Ambient Contract
 
-Ash uses one `AshContext` container for runtime state. Seed keys carry
+Ash uses one `AlsContext` container for runtime state. Seed keys carry
 serializable values across step boundaries; providers derive values for the
 current step. Additional `AsyncLocalStorage` instances or hidden dehydration
 protocols create parallel contracts that agents and humans must rediscover.

package/dist/docs/internals/hooks.md

@@ -17,10 +17,10 @@ inside the agent" and "extension contributed by a plugin": both flow
 through one runtime registry, one `HookContext`, one set of ordering
 rules.
 
-The hooks surface deliberately reuses the unified `AshContext`:
-`HookContext` extends `AshCallbackContext`, giving hooks the same
+The hooks surface deliberately reuses the unified `AlsContext`:
+`HookContext` extends `SessionContext`, giving hooks the same
 context surface tools, providers, and channels get. There is no
-parallel state-patch channel — one `AshContext`, one set of keys, one
+parallel state-patch channel — one `AlsContext`, one set of keys, one
 place to look when debugging.
 
 `HookContext` carries `agent`, `channel`, and `session` (which includes
@@ -200,5 +200,5 @@ documented expectations:
 
 - [Hooks](../public/hooks.md) — author-facing reference
 - [Discovery](./discovery.md) — discovery layout and the unified slot walker
-- [Unified Context](./context.md) — `AshContext` surface shared by hooks
+- [Unified Context](./context.md) — `AlsContext` surface shared by hooks
 - [Message Runtime](./message-runtime.md) — runtime stream events

package/dist/docs/internals/mechanical-invariants.md

@@ -88,7 +88,7 @@ invariant is enforced structurally by the `runStep` ALS-scope split
 ### One Ambient Context Contract
 
 Do not introduce additional `new AsyncLocalStorage()` instances for Ash runtime
-state. Ambient state should flow through the single `AshContext` container and
+state. Ambient state should flow through the single `AlsContext` container and
 its provider/seed model.
 
 Enforcement target: a source-shape test that allowlists the context storage

package/dist/docs/public/advanced/session-context.md

@@ -165,10 +165,10 @@ export default defineHook({
 
 ### API
 
-| Method       | Description                                                                      |
-| ------------ | -------------------------------------------------------------------------------- |
-| `get()`      | Read the current value. Returns `initial()` on first access. Throws outside ALS. |
-| `update(fn)` | Apply a function to the current value. Throws outside ALS.                       |
+| Method       | Description                                                                                |
+| ------------ | ------------------------------------------------------------------------------------------ |
+| `get()`      | Read the current value. Returns `initial()` on first access. Throws outside managed scope. |
+| `update(fn)` | Apply a function to the current value. Throws outside managed scope.                       |
 
 ## Where These APIs Work
 
@@ -189,20 +189,18 @@ explaining the required scope.
 
 ## How It Works
 
-All runtime accessors read from the same `AshContext` container bound by a single `AsyncLocalStorage`.
-The framework sets up this context before invoking authored code:
+The framework sets up a context container before invoking authored code:
 
-1. The runtime entry point creates an `AshContext` and populates durable seed keys (auth, session
-   ID, compiled bundle).
-2. Before each step, providers create virtual step-local values (session metadata, sandbox access,
-   skill access) from the current context.
-3. The step callback runs inside the `AsyncLocalStorage` scope, making the context available to
-   all authored code in the call chain.
-4. After the step, framework providers with provider-owned mutable state (for example the sandbox)
-   commit those changes back onto the harness session.
+1. The runtime populates durable seed values (auth, session ID, compiled bundle).
+2. Before each step, the framework derives step-local values (session metadata, sandbox access,
+   skill access) from the durable state.
+3. Authored code runs inside the managed scope, so `ctx` and `defineState` accessors resolve
+   automatically.
+4. After the step, the framework commits mutable state (for example sandbox changes) back to
+   the durable session.
 
-This lifecycle is fully managed by the framework. Authored code only needs to call the public
-accessors.
+This lifecycle is fully managed by the framework. Authored code only needs to use `ctx` and
+the public accessors.
 
 ## What To Read Next
 

package/dist/src/channel/compiled-channel.d.ts

@@ -3,7 +3,7 @@ import type { RouteHandler, SendFn } from "#channel/routes.js";
 import type { Session } from "#channel/session.js";
 import type { SessionAuthContext } from "#channel/types.js";
 export declare const CHANNEL_SENTINEL: "ash:channel";
-export interface CompiledChannel<TState = undefined> {
+export interface CompiledChannel<TState = undefined, TReceiveArgs = Record<string, unknown>> {
     readonly __kind: typeof CHANNEL_SENTINEL;
     readonly routes: readonly {
         method: string;
@@ -13,7 +13,7 @@ export interface CompiledChannel<TState = undefined> {
     readonly adapter: ChannelAdapter<any>;
     readonly receive?: (input: {
         readonly message: string;
-        readonly args: Readonly<Record<string, unknown>>;
+        readonly args: Readonly<TReceiveArgs>;
         readonly auth: SessionAuthContext | null;
     }, args: {
         send: SendFn<TState>;

package/dist/src/channel/types.d.ts

@@ -248,7 +248,7 @@ export interface Runtime {
      * Starts a new run from a flat platform-shape input.
      *
      * The runtime loads the compiled bundle (using the node id
-     * baked in at construction time), builds the seeded {@link AshContext},
+     * baked in at construction time), builds the seeded {@link AlsContext},
      * and drives the step loop to completion.
      */
     run(input: RunInput): Promise<RunHandle>;

package/dist/src/compiled/.vendor-stamp.json

@@ -6,6 +6,7 @@
     "@chat-adapter/state-memory": "4.29.0",
     "chokidar": "5.0.0",
     "commander": "14.0.3",
+    "experimental-ai-sdk-code-mode": "1.0.10",
     "@ai-sdk/google": "4.0.0-canary.73",
     "gray-matter": "4.0.3",
     "jose": "6.2.3",
@@ -21,10 +22,10 @@
     "turndown": "7.2.4",
     "@vercel/oidc": "3.4.1",
     "@vercel/sandbox": "2.0.1",
-    "@workflow/core": "5.0.0-beta.7",
-    "@workflow/errors": "5.0.0-beta.4",
+    "@workflow/core": "5.0.0-beta.10",
+    "@workflow/errors": "5.0.0-beta.6",
     "zod": "4.4.3",
     "zod-validation-error": "5.0.0"
   },
-  "scriptHash": "de60e990328c8664beec98bc5e81625ecdc0cdace1ba8bd8aa267bf9bea29af4"
+  "scriptHash": "6a2fa642d99a77617cbfb4e0dc7bbbd774c22d880ea5726a09069c812896bfdd"
 }

package/dist/src/compiled/@workflow/core/_workflow-world.d.ts

@@ -4,6 +4,7 @@
 type JsonishRecord = Record<string, any>;
 type PaginatedResponse<T> = { cursor?: string | null; data: T[]; hasMore?: boolean };
 
+export type AttributeChange = JsonishRecord;
 export interface Event extends JsonishRecord {
   correlationId?: string | null;
   eventType?: string;

package/dist/src/compiled/@workflow/core/attribute-changes.d.ts

@@ -0,0 +1,7 @@
+import { type AttributeChange } from './_workflow-world.js';
+interface AttributeChangeOptions {
+    allowReservedAttributes?: boolean;
+}
+export declare function normalizeAttributeChanges(attrs: Record<string, string | undefined>, options?: AttributeChangeOptions): AttributeChange[];
+export {};
+//# sourceMappingURL=attribute-changes.d.ts.map

package/dist/src/compiled/@workflow/core/encryption.d.ts

@@ -43,6 +43,21 @@ export declare function encrypt(key: CryptoKey, data: Uint8Array): Promise<Uint8
 /**
  * Decrypt data using AES-256-GCM.
  *
+ * Any failure inside the Web Crypto layer — most commonly an
+ * `OperationError: The operation failed for an operation-specific reason`
+ * raised by `AESCipherJob.onDone` when the GCM authentication tag does
+ * not verify — is rewrapped as {@link RuntimeDecryptionError}. The
+ * wrapped error carries the original DOMException as `cause`, plus a
+ * small diagnostic context (`operation`, input `byteLength`) to help
+ * disambiguate ciphertext corruption from key mismatch from truncated
+ * transport reads.
+ *
+ * Note: `data` is the raw AES payload (`[nonce][ciphertext + tag]`), not a
+ * format-prefixed envelope — callers strip the `encr` marker via
+ * `decodeFormatPrefix()` before reaching this function. The outer
+ * envelope's format prefix is therefore attached by the serialization
+ * layer (`serialization/encryption.ts`), which is the layer that has it.
+ *
  * @param key - CryptoKey from `importKey()`
  * @param data - `[nonce (12 bytes)][ciphertext + GCM auth tag]`
  * @returns Decrypted plaintext

package/dist/src/compiled/@workflow/core/index.d.ts

@@ -12,6 +12,7 @@
 export { FatalError, RetryableError, type RetryableErrorOptions, } from '#compiled/@workflow/errors/index.js';
 export { createHook, createWebhook, type Hook, type HookOptions, type RequestWithResponse, type Webhook, type WebhookOptions, } from './create-hook.js';
 export { defineHook, type TypedHook } from './define-hook.js';
+export { experimental_setAttributes } from './set-attributes.js';
 export { sleep } from './sleep.js';
 export { getStepMetadata, type StepMetadata, } from './step/get-step-metadata.js';
 export { getWorkflowMetadata, type WorkflowMetadata, } from './step/get-workflow-metadata.js';

package/dist/src/compiled/@workflow/core/index.js

@@ -1,2 +1,2 @@
-import{i as e,s as t}from"../../_chunks/workflow/dist-DO14ZaQj.js";import{_ as n,c as r,s as i,v as a,y as o}from"../../_chunks/workflow/symbols-D8paKc8P.js";import{Bt as s,C as c,I as l,R as u,Vt as d,m as f,n as p,x as m,zt as h}from"../../_chunks/workflow/resume-hook-DOMbNs-S.js";import{t as g}from"../../_chunks/workflow/sleep-CRjce49s.js";function _(e){a(`createHook()`,`https://workflow-sdk.dev/docs/api-reference/workflow/create-hook`,_)}function v(e){a(`createWebhook()`,`https://workflow-sdk.dev/docs/api-reference/workflow/create-webhook`,v)}function y({schema:e}={}){function t(e){a(`defineHook().create()`,`https://workflow-sdk.dev/docs/api-reference/workflow/define-hook`,t)}return{create:t,async resume(t,n){if(!e?.[`~standard`])return await p(t,n);let r=e[`~standard`].validate(n);if(r instanceof Promise&&(r=await r),r.issues){let e=r.issues.map(e=>{let t=e.path?.map(e=>String(typeof e==`object`&&e?e.key:e)).join(`.`);return t?`  at "${t}": ${e.message}`:`  ${e.message}`});throw Error(`Hook payload did not match the defined schema:\n${e.join(`
-`)}`)}return await p(t,r.value)}}}function b(){let e=u.getStore();return e||n(`getStepMetadata()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-step-metadata`,b),e.stepMetadata}function x(){let e=u.getStore();return e||o(`getWorkflowMetadata()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-workflow-metadata`,x),e.workflowMetadata}function S(e={}){let t=u.getStore();t||o(`getWritable()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-writable`,S);let{namespace:n}=e,a=t.workflowMetadata.workflowRunId,p=l(a,n),g=c(m(globalThis,t.ops,a,t.encryptionKey),t.encryptionKey),_=new f(a,p),v=h();return t.ops.push(v.promise),s(g.readable,_,v).catch(()=>{}),d(g.writable,v),Object.defineProperty(g.writable,i,{value:p,writable:!1}),Object.defineProperty(g.writable,r,{value:a,writable:!1}),g.writable}export{e as FatalError,t as RetryableError,_ as createHook,v as createWebhook,y as defineHook,b as getStepMetadata,x as getWorkflowMetadata,S as getWritable,g as sleep};
+import{i as e,s as t}from"../../_chunks/workflow/dist-C4EHshZE.js";import{c as n,et as r,nt as i,s as a,tt as o}from"../../_chunks/workflow/symbols-DygIC1sj.js";import{Bt as s,C as c,I as l,R as u,Rt as d,Vt as f,m as p,n as m,x as h,zt as g}from"../../_chunks/workflow/resume-hook-D6dFbxMV.js";import{n as _,t as v}from"../../_chunks/workflow/sleep-kQ0UwHn0.js";function y(e){o(`createHook()`,`https://workflow-sdk.dev/docs/api-reference/workflow/create-hook`,y)}function b(e){o(`createWebhook()`,`https://workflow-sdk.dev/docs/api-reference/workflow/create-webhook`,b)}function x({schema:e}={}){function t(e){o(`defineHook().create()`,`https://workflow-sdk.dev/docs/api-reference/workflow/define-hook`,t)}return{create:t,async resume(t,n){if(!e?.[`~standard`])return await m(t,n);let r=e[`~standard`].validate(n);if(r instanceof Promise&&(r=await r),r.issues){let e=r.issues.map(e=>{let t=e.path?.map(e=>String(typeof e==`object`&&e?e.key:e)).join(`.`);return t?`  at "${t}": ${e.message}`:`  ${e.message}`});throw Error(`Hook payload did not match the defined schema:\n${e.join(`
+`)}`)}return await m(t,r.value)}}}const S=Symbol.for(`@workflow/setAttributes//unsupportedWorldWarned`);async function C(t,n={}){let r=u.getStore()?.workflowMetadata?.workflowRunId;if(!r)throw new e(`experimental_setAttributes() must be called from a 'use workflow' or 'use step' function. Calling it from plain host code is not supported.`);let i=_(t,n);if(i.length===0)return;let a=await d();if(typeof a.runs.experimentalSetAttributes!=`function`){let e=globalThis;if(!e[S]){e[S]=!0;let t=`name`in a&&typeof a.name==`string`?a.name:``,n=t?` (${t})`:``;console.warn(`[workflow] setAttributes: the current world implementation${n} does not implement experimentalSetAttributes; this call (and any subsequent setAttributes calls in this process) is a no-op. Attributes will become available once the world adapter adds support.`)}return}await a.runs.experimentalSetAttributes(r,i,n.allowReservedAttributes===!0?{allowReservedAttributes:!0}:{})}function w(){let e=u.getStore();return e||r(`getStepMetadata()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-step-metadata`,w),e.stepMetadata}function T(){let e=u.getStore();return e||i(`getWorkflowMetadata()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-workflow-metadata`,T),e.workflowMetadata}function E(e={}){let t=u.getStore();t||i(`getWritable()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-writable`,E);let{namespace:r}=e,o=t.workflowMetadata.workflowRunId,d=l(o,r),m=t.writables??=new Map,_=m.get(d);if(_)return _.writable;let v=c(h(globalThis,t.ops,o,t.encryptionKey),t.encryptionKey),y=new p(o,d),b=g();return t.ops.push(b.promise),s(v.readable,y,b).catch(()=>{}),f(v.writable,b),Object.defineProperty(v.writable,a,{value:d,writable:!1}),Object.defineProperty(v.writable,n,{value:o,writable:!1}),m.set(d,{writable:v.writable,state:b}),v.writable}export{e as FatalError,t as RetryableError,y as createHook,b as createWebhook,x as defineHook,C as experimental_setAttributes,w as getStepMetadata,T as getWorkflowMetadata,E as getWritable,v as sleep};

package/dist/src/compiled/@workflow/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "experimental-ash-compiled-workflow-core",
-  "version": "5.0.0-beta.7",
+  "version": "5.0.0-beta.10",
   "private": true,
   "type": "module",
   "license": "Apache-2.0"