experimental-ash 0.38.0 → 0.38.1

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # experimental-ash
 
+## 0.38.1
+
+### Patch Changes
+
+- 0a88b75: Prevent `toolResultFrom` from matching the wrong definition when tools share a description or MCP connections share a URL. Runtime resolution now prefers source-derived identity keys and treats colliding fallback keys as non-matching.
+- 8b0a7d8: Upgrade `@workflow/core` to `5.0.0-beta.10`, `@workflow/world-local` to
+  `5.0.0-beta.11`, and `@workflow/errors` to `5.0.0-beta.6`. Picks up
+  step-side `experimental_setAttributes` ([vercel/workflow#2157][1]) and
+  escapes the abandoned November 2025 `@workflow/world-local` slots that
+  broke `@workflow/core@5.0.0-beta.9`'s pin chain
+  ([vercel/workflow#2168][2], [vercel/workflow#2162][3]). No runtime or
+  public API changes — this is the dependency-bump prerequisite for the
+  `$ash.*` workflow attribute emission work (see
+  `research/active/workflow-run-attributes.md`).
+
+  [1]: https://github.com/vercel/workflow/pull/2157
+  [2]: https://github.com/vercel/workflow/pull/2168
+  [3]: https://github.com/vercel/workflow/pull/2162
+
 ## 0.38.0
 
 ### Minor Changes

package/dist/src/compiled/.vendor-stamp.json

@@ -22,8 +22,8 @@
     "turndown": "7.2.4",
     "@vercel/oidc": "3.4.1",
     "@vercel/sandbox": "2.0.1",
-    "@workflow/core": "5.0.0-beta.7",
-    "@workflow/errors": "5.0.0-beta.4",
+    "@workflow/core": "5.0.0-beta.10",
+    "@workflow/errors": "5.0.0-beta.6",
     "zod": "4.4.3",
     "zod-validation-error": "5.0.0"
   },

package/dist/src/compiled/@workflow/core/_workflow-world.d.ts

@@ -4,6 +4,7 @@
 type JsonishRecord = Record<string, any>;
 type PaginatedResponse<T> = { cursor?: string | null; data: T[]; hasMore?: boolean };
 
+export type AttributeChange = JsonishRecord;
 export interface Event extends JsonishRecord {
   correlationId?: string | null;
   eventType?: string;

package/dist/src/compiled/@workflow/core/attribute-changes.d.ts

@@ -0,0 +1,7 @@
+import { type AttributeChange } from './_workflow-world.js';
+interface AttributeChangeOptions {
+    allowReservedAttributes?: boolean;
+}
+export declare function normalizeAttributeChanges(attrs: Record<string, string | undefined>, options?: AttributeChangeOptions): AttributeChange[];
+export {};
+//# sourceMappingURL=attribute-changes.d.ts.map

package/dist/src/compiled/@workflow/core/encryption.d.ts

@@ -43,6 +43,21 @@ export declare function encrypt(key: CryptoKey, data: Uint8Array): Promise<Uint8
 /**
  * Decrypt data using AES-256-GCM.
  *
+ * Any failure inside the Web Crypto layer — most commonly an
+ * `OperationError: The operation failed for an operation-specific reason`
+ * raised by `AESCipherJob.onDone` when the GCM authentication tag does
+ * not verify — is rewrapped as {@link RuntimeDecryptionError}. The
+ * wrapped error carries the original DOMException as `cause`, plus a
+ * small diagnostic context (`operation`, input `byteLength`) to help
+ * disambiguate ciphertext corruption from key mismatch from truncated
+ * transport reads.
+ *
+ * Note: `data` is the raw AES payload (`[nonce][ciphertext + tag]`), not a
+ * format-prefixed envelope — callers strip the `encr` marker via
+ * `decodeFormatPrefix()` before reaching this function. The outer
+ * envelope's format prefix is therefore attached by the serialization
+ * layer (`serialization/encryption.ts`), which is the layer that has it.
+ *
  * @param key - CryptoKey from `importKey()`
  * @param data - `[nonce (12 bytes)][ciphertext + GCM auth tag]`
  * @returns Decrypted plaintext

package/dist/src/compiled/@workflow/core/index.d.ts

@@ -12,6 +12,7 @@
 export { FatalError, RetryableError, type RetryableErrorOptions, } from '#compiled/@workflow/errors/index.js';
 export { createHook, createWebhook, type Hook, type HookOptions, type RequestWithResponse, type Webhook, type WebhookOptions, } from './create-hook.js';
 export { defineHook, type TypedHook } from './define-hook.js';
+export { experimental_setAttributes } from './set-attributes.js';
 export { sleep } from './sleep.js';
 export { getStepMetadata, type StepMetadata, } from './step/get-step-metadata.js';
 export { getWorkflowMetadata, type WorkflowMetadata, } from './step/get-workflow-metadata.js';

package/dist/src/compiled/@workflow/core/index.js

@@ -1,2 +1,2 @@
-import{i as e,s as t}from"../../_chunks/workflow/dist-DO14ZaQj.js";import{_ as n,c as r,s as i,v as a,y as o}from"../../_chunks/workflow/symbols-D8paKc8P.js";import{Bt as s,C as c,I as l,R as u,Vt as d,m as f,n as p,x as m,zt as h}from"../../_chunks/workflow/resume-hook-DOMbNs-S.js";import{t as g}from"../../_chunks/workflow/sleep-CRjce49s.js";function _(e){a(`createHook()`,`https://workflow-sdk.dev/docs/api-reference/workflow/create-hook`,_)}function v(e){a(`createWebhook()`,`https://workflow-sdk.dev/docs/api-reference/workflow/create-webhook`,v)}function y({schema:e}={}){function t(e){a(`defineHook().create()`,`https://workflow-sdk.dev/docs/api-reference/workflow/define-hook`,t)}return{create:t,async resume(t,n){if(!e?.[`~standard`])return await p(t,n);let r=e[`~standard`].validate(n);if(r instanceof Promise&&(r=await r),r.issues){let e=r.issues.map(e=>{let t=e.path?.map(e=>String(typeof e==`object`&&e?e.key:e)).join(`.`);return t?`  at "${t}": ${e.message}`:`  ${e.message}`});throw Error(`Hook payload did not match the defined schema:\n${e.join(`
-`)}`)}return await p(t,r.value)}}}function b(){let e=u.getStore();return e||n(`getStepMetadata()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-step-metadata`,b),e.stepMetadata}function x(){let e=u.getStore();return e||o(`getWorkflowMetadata()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-workflow-metadata`,x),e.workflowMetadata}function S(e={}){let t=u.getStore();t||o(`getWritable()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-writable`,S);let{namespace:n}=e,a=t.workflowMetadata.workflowRunId,p=l(a,n),g=c(m(globalThis,t.ops,a,t.encryptionKey),t.encryptionKey),_=new f(a,p),v=h();return t.ops.push(v.promise),s(g.readable,_,v).catch(()=>{}),d(g.writable,v),Object.defineProperty(g.writable,i,{value:p,writable:!1}),Object.defineProperty(g.writable,r,{value:a,writable:!1}),g.writable}export{e as FatalError,t as RetryableError,_ as createHook,v as createWebhook,y as defineHook,b as getStepMetadata,x as getWorkflowMetadata,S as getWritable,g as sleep};
+import{i as e,s as t}from"../../_chunks/workflow/dist-C4EHshZE.js";import{c as n,et as r,nt as i,s as a,tt as o}from"../../_chunks/workflow/symbols-DygIC1sj.js";import{Bt as s,C as c,I as l,R as u,Rt as d,Vt as f,m as p,n as m,x as h,zt as g}from"../../_chunks/workflow/resume-hook-D6dFbxMV.js";import{n as _,t as v}from"../../_chunks/workflow/sleep-kQ0UwHn0.js";function y(e){o(`createHook()`,`https://workflow-sdk.dev/docs/api-reference/workflow/create-hook`,y)}function b(e){o(`createWebhook()`,`https://workflow-sdk.dev/docs/api-reference/workflow/create-webhook`,b)}function x({schema:e}={}){function t(e){o(`defineHook().create()`,`https://workflow-sdk.dev/docs/api-reference/workflow/define-hook`,t)}return{create:t,async resume(t,n){if(!e?.[`~standard`])return await m(t,n);let r=e[`~standard`].validate(n);if(r instanceof Promise&&(r=await r),r.issues){let e=r.issues.map(e=>{let t=e.path?.map(e=>String(typeof e==`object`&&e?e.key:e)).join(`.`);return t?`  at "${t}": ${e.message}`:`  ${e.message}`});throw Error(`Hook payload did not match the defined schema:\n${e.join(`
+`)}`)}return await m(t,r.value)}}}const S=Symbol.for(`@workflow/setAttributes//unsupportedWorldWarned`);async function C(t,n={}){let r=u.getStore()?.workflowMetadata?.workflowRunId;if(!r)throw new e(`experimental_setAttributes() must be called from a 'use workflow' or 'use step' function. Calling it from plain host code is not supported.`);let i=_(t,n);if(i.length===0)return;let a=await d();if(typeof a.runs.experimentalSetAttributes!=`function`){let e=globalThis;if(!e[S]){e[S]=!0;let t=`name`in a&&typeof a.name==`string`?a.name:``,n=t?` (${t})`:``;console.warn(`[workflow] setAttributes: the current world implementation${n} does not implement experimentalSetAttributes; this call (and any subsequent setAttributes calls in this process) is a no-op. Attributes will become available once the world adapter adds support.`)}return}await a.runs.experimentalSetAttributes(r,i,n.allowReservedAttributes===!0?{allowReservedAttributes:!0}:{})}function w(){let e=u.getStore();return e||r(`getStepMetadata()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-step-metadata`,w),e.stepMetadata}function T(){let e=u.getStore();return e||i(`getWorkflowMetadata()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-workflow-metadata`,T),e.workflowMetadata}function E(e={}){let t=u.getStore();t||i(`getWritable()`,`https://workflow-sdk.dev/docs/api-reference/workflow/get-writable`,E);let{namespace:r}=e,o=t.workflowMetadata.workflowRunId,d=l(o,r),m=t.writables??=new Map,_=m.get(d);if(_)return _.writable;let v=c(h(globalThis,t.ops,o,t.encryptionKey),t.encryptionKey),y=new p(o,d),b=g();return t.ops.push(b.promise),s(v.readable,y,b).catch(()=>{}),f(v.writable,b),Object.defineProperty(v.writable,a,{value:d,writable:!1}),Object.defineProperty(v.writable,n,{value:o,writable:!1}),m.set(d,{writable:v.writable,state:b}),v.writable}export{e as FatalError,t as RetryableError,y as createHook,b as createWebhook,x as defineHook,C as experimental_setAttributes,w as getStepMetadata,T as getWorkflowMetadata,E as getWritable,v as sleep};

package/dist/src/compiled/@workflow/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "experimental-ash-compiled-workflow-core",
-  "version": "5.0.0-beta.7",
+  "version": "5.0.0-beta.10",
   "private": true,
   "type": "module",
   "license": "Apache-2.0"