experimental-ash 0.61.0 → 0.63.0

package/dist/src/runtime/connections/openapi-security.d.ts

@@ -0,0 +1,41 @@
+import type { ResolvedConnectionDefinition } from "#runtime/types.js";
+/**
+ * How the connection's resolved credential is placed on a request,
+ * derived from the operation's effective `security` requirement and the
+ * document's `securitySchemes`.
+ *
+ * - `bearer` — `Authorization: Bearer <token>` (the default; also covers
+ *   `oauth2` / `openIdConnect`, whose access tokens are bearer tokens).
+ * - `basic` — `Authorization: Basic <token>` (the author supplies the
+ *   base64-encoded `user:pass` as the token).
+ * - `apiKey` — the token is placed in the named header, query param, or
+ *   cookie instead of `Authorization`.
+ */
+export type SecurityPlacement = {
+    readonly kind: "bearer";
+} | {
+    readonly kind: "basic";
+} | {
+    readonly kind: "apiKey";
+    readonly in: "header" | "query" | "cookie";
+    readonly name: string;
+};
+/**
+ * Resolves how an operation's credential should be placed, from its
+ * effective `security` requirement (operation-level overrides the
+ * document-level default) and the document's `securitySchemes`.
+ *
+ * Returns `undefined` when no requirement applies, in which case the
+ * default `Authorization: Bearer` behavior is used. The first recognized
+ * scheme in the first requirement object wins.
+ */
+export declare function resolveSecurity(document: Record<string, unknown>, operation: Record<string, unknown>): SecurityPlacement | undefined;
+/**
+ * Reshapes the resolved credential according to the operation's
+ * {@link SecurityPlacement}. The credential is resolved once by
+ * `resolveHeaders` as `Authorization: Bearer <token>`; this moves
+ * it where the scheme says (api-key header/query/cookie) or rewrites the
+ * `Authorization` scheme (basic). A `bearer` placement, a missing
+ * placement, or a connection without `authorization` is a no-op.
+ */
+export declare function applySecurity(placement: SecurityPlacement | undefined, connection: ResolvedConnectionDefinition, headers: Record<string, string>, query: URLSearchParams, cookies: string[]): void;

package/dist/src/runtime/connections/openapi-security.js

@@ -0,0 +1 @@
+import{isObject}from"#shared/guards.js";import{deref,isArray}from"#runtime/connections/openapi-schema.js";function resolveSecurity(r,i){let a=isArray(i.security)?i.security:isArray(r.security)?r.security:void 0;if(a===void 0||a.length===0)return;let o=isObject(r.components)?r.components:void 0,s=o!==void 0&&isObject(o.securitySchemes)?o.securitySchemes:void 0;if(s!==void 0)for(let n of a){if(!isObject(n))continue;let i=Object.keys(n)[0];if(i===void 0)continue;let a=s[i],o=isObject(a)?deref(r,a):void 0;if(!isObject(o))continue;let c=mapSecurityScheme(o);if(c!==void 0)return c}}function mapSecurityScheme(e){if(e.type===`apiKey`){let t=e.in;return(t===`header`||t===`query`||t===`cookie`)&&typeof e.name==`string`&&e.name.length>0?{kind:`apiKey`,in:t,name:e.name}:void 0}if(e.type===`http`)return(typeof e.scheme==`string`?e.scheme.toLowerCase():``)===`basic`?{kind:`basic`}:{kind:`bearer`};if(e.type===`oauth2`||e.type===`openIdConnect`)return{kind:`bearer`}}function applySecurity(e,t,n,r,i){if(e===void 0||t.authorization===void 0)return;let a=extractBearerToken(n);if(a!==void 0&&e.kind!==`bearer`){if(e.kind===`basic`){n.Authorization=`Basic ${a}`;return}delete n.Authorization,e.in===`header`?n[e.name]=a:e.in===`query`?r.set(e.name,a):i.push(`${e.name}=${a}`)}}function extractBearerToken(e){let t=e.Authorization??e.authorization;return typeof t==`string`?/^Bearer\s+(.+)$/i.exec(t)?.[1]:void 0}export{applySecurity,resolveSecurity};

package/dist/src/runtime/connections/openapi-spec.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Parses a fetched spec body as either JSON or YAML.
+ *
+ * JSON is tried first (the common case and fastest path); on a parse
+ * failure the body is treated as YAML. YAML is parsed by wrapping the
+ * document in front-matter delimiters so the bundled `gray-matter`
+ * engine reads the whole file — the same approach the eval YAML loader
+ * uses, avoiding a second YAML dependency.
+ */
+export declare function parseSpecDocument(text: string): unknown;
+/**
+ * Picks a base URL from an OpenAPI document's `servers` array.
+ *
+ * Returns the first server whose URL resolves to an absolute `http(s)`
+ * origin: `{var}` placeholders are substituted with each variable's
+ * `default`, and a relative URL (e.g. `/api/v3`) is resolved against
+ * `specSource` when the spec was supplied as a URL. Returns `undefined`
+ * when no entry yields an absolute URL.
+ */
+export declare function extractServerUrl(document: Record<string, unknown>, specSource: string | Record<string, unknown> | undefined): string | undefined;

package/dist/src/runtime/connections/openapi-spec.js

@@ -0,0 +1 @@
+import{isObject}from"#shared/guards.js";import matter from"#compiled/gray-matter/index.js";import{isArray}from"#runtime/connections/openapi-schema.js";function parseSpecDocument(e){try{return JSON.parse(e)}catch{}let n=e.replace(/^\uFEFF/,``);return matter(n.trimStart().startsWith(`---`)?n:`---\n${n}\n---`).data??{}}function extractServerUrl(t,r){let i=t.servers;if(isArray(i))for(let t of i){if(!isObject(t)||typeof t.url!=`string`||t.url.length===0)continue;let n=isObject(t.variables)?substituteServerVariables(t.url,t.variables):t.url;if(n.startsWith(`http://`)||n.startsWith(`https://`))return n;if(typeof r==`string`&&URL.canParse(r))try{return new URL(n,r).toString()}catch{}}}function substituteServerVariables(t,n){return t.replace(/\{([^}]+)\}/g,(t,r)=>{let i=n[r];return isObject(i)&&typeof i.default==`string`?i.default:t})}export{extractServerUrl,parseSpecDocument};

package/dist/src/runtime/connections/registry.d.ts

@@ -1,23 +1,21 @@
 import type { NeedsApprovalContext } from "#public/definitions/tool.js";
 import type { ResolvedConnectionDefinition } from "#runtime/types.js";
-import { McpConnectionClient } from "#runtime/connections/mcp-client.js";
-import type { ConnectionRegistry } from "#runtime/connections/types.js";
+import type { ConnectionClient, ConnectionRegistry } from "#runtime/connections/types.js";
 /**
  * Per-session container mapping connection names to lazily-initialized
  * client wrappers.
  *
- * Currently all connections use MCP, but the registry is protocol-agnostic
- * and will dispatch to the appropriate client type when additional
- * protocols (e.g. OpenAPI) are supported.
+ * The registry is protocol-agnostic: it dispatches to the client
+ * implementation matching each connection's `protocol` (MCP or OpenAPI).
  */
 export declare class ConnectionRegistryImpl implements ConnectionRegistry {
     #private;
     constructor(connections: readonly ResolvedConnectionDefinition[]);
     /**
      * Returns the client for the named connection, creating it on first
-     * access.
+     * access. The connection's `protocol` selects the client type.
      */
-    getClient(connectionName: string): McpConnectionClient;
+    getClient(connectionName: string): ConnectionClient;
     /**
      * Returns the authored approval function for the named connection,
      * or `undefined` if the connection did not specify one.

package/dist/src/runtime/connections/registry.js

@@ -1 +1 @@
-import{McpConnectionClient}from"#runtime/connections/mcp-client.js";var ConnectionRegistryImpl=class{#e=new Map;#t;constructor(e){this.#t=e}getClient(t){let n=this.#e.get(t);if(n!==void 0)return n;let r=this.#t.find(e=>e.connectionName===t);if(r===void 0)throw Error(`Connection "${t}" is not registered.`);let i=new McpConnectionClient(r);return this.#e.set(t,i),i}getConnectionApproval(e){return this.#t.find(t=>t.connectionName===e)?.approval}getConnectionNames(){return this.#t.map(e=>e.connectionName)}getConnections(){return this.#t}async dispose(){let e=[...this.#e.values()].map(e=>e.close());await Promise.allSettled(e),this.#e.clear()}};export{ConnectionRegistryImpl};
+import{McpConnectionClient}from"#runtime/connections/mcp-client.js";import{OpenApiConnectionClient}from"#runtime/connections/openapi-client.js";var ConnectionRegistryImpl=class{#e=new Map;#t;constructor(e){this.#t=e}getClient(n){let r=this.#e.get(n);if(r!==void 0)return r;let i=this.#t.find(e=>e.connectionName===n);if(i===void 0)throw Error(`Connection "${n}" is not registered.`);let a=i.protocol===`openapi`?new OpenApiConnectionClient(i):new McpConnectionClient(i);return this.#e.set(n,a),a}getConnectionApproval(e){return this.#t.find(t=>t.connectionName===e)?.approval}getConnectionNames(){return this.#t.map(e=>e.connectionName)}getConnections(){return this.#t}async dispose(){let e=[...this.#e.values()].map(e=>e.close());await Promise.allSettled(e),this.#e.clear()}};export{ConnectionRegistryImpl};

package/dist/src/runtime/connections/types.d.ts

@@ -25,6 +25,16 @@ export interface TokenResult {
     readonly token: string;
     readonly expiresAt?: number;
 }
+/**
+ * Wire protocol a connection speaks.
+ *
+ * Stamped onto a connection definition by the `define*` factory that
+ * produced it (`defineMcpClientConnection` → `"mcp"`,
+ * `defineOpenAPIConnection` → `"openapi"`) and carried through the
+ * compiled manifest so the runtime registry can pick the matching
+ * client implementation. Never authored directly.
+ */
+export type ConnectionProtocol = "mcp" | "openapi";
 /** A single header value, supporting static strings and dynamic resolution. */
 export type HeaderValue = string | Promise<string> | (() => string | Promise<string>);
 /**
@@ -123,6 +133,19 @@ export interface ConnectionAuthorizationContext {
  * JSON-serializable.
  */
 export type AuthorizationDefinition<State extends JsonValue = JsonValue> = NonInteractiveAuthorizationDefinition | InteractiveAuthorizationDefinition<State>;
+/**
+ * Protocol-agnostic `auth` shape accepted by every connection
+ * `define*` factory (`defineMcpClientConnection`,
+ * `defineOpenAPIConnection`, …).
+ *
+ * Identical to {@link AuthorizationDefinition} except the
+ * non-interactive form may omit `principalType`; normalization
+ * defaults it to `"app"`. The resolved token is sent as
+ * `Authorization: Bearer <token>`.
+ */
+export type ConnectionAuthDefinition = (Omit<NonInteractiveAuthorizationDefinition, "principalType"> & {
+    readonly principalType?: NonInteractiveAuthorizationDefinition["principalType"];
+}) | AuthorizationDefinition;
 /**
  * Fields shared by every {@link AuthorizationDefinition} shape.
  */

package/dist/src/runtime/resolve-connection.js

@@ -1 +1 @@
-import{expectObjectRecord}from"#internal/authored-module.js";import{toErrorMessage}from"#shared/errors.js";import{normalizeAuthorizationSpec}from"#runtime/connections/validate-authorization.js";import{ResolveAgentError,loadResolvedModuleExport}from"#runtime/resolve-helpers.js";import{registerDefinitionSource,stampDefinitionKey}from"#public/tool-result-narrowing.js";async function resolveConnectionDefinition(t,n,r){try{let i=expectObjectRecord(await loadResolvedModuleExport({definition:t,kindLabel:`connection`,moduleMap:n,nodeId:r}),`Expected the connection export "${t.exportName??`default`}" from "${t.logicalPath}" to return an object.`),a={kind:`connection`,logicalPath:t.logicalPath,name:t.connectionName},o=`connection-source:${t.sourceId}`;stampDefinitionKey(i,o),registerDefinitionSource(o,a),registerDefinitionSource(`connection:${i.url}`,a);let s=i.auth!==void 0,c=i.headers!==void 0,l={connectionName:t.connectionName,description:t.description,exportName:t.exportName,logicalPath:t.logicalPath,sourceId:t.sourceId,sourceKind:`module`,url:t.url};if(s)try{l.authorization=normalizeAuthorizationSpec(i.auth,`Connection "${t.connectionName}" at "${t.logicalPath}":`)}catch(e){throw new ResolveAgentError(toErrorMessage(e),{logicalPath:t.logicalPath,sourceId:t.sourceId})}return c&&(l.headers=i.headers),i.tools!==void 0&&(l.tools=i.tools),typeof i.approval==`function`&&(l.approval=i.approval),l}catch(e){throw e instanceof ResolveAgentError?e:new ResolveAgentError(`Failed to resolve connection "${t.connectionName}" from "${t.logicalPath}": ${toErrorMessage(e)}`,{logicalPath:t.logicalPath,sourceId:t.sourceId})}}export{resolveConnectionDefinition};
+import{expectObjectRecord}from"#internal/authored-module.js";import{toErrorMessage}from"#shared/errors.js";import{normalizeAuthorizationSpec}from"#runtime/connections/validate-authorization.js";import{ResolveAgentError,loadResolvedModuleExport}from"#runtime/resolve-helpers.js";import{registerDefinitionSource,stampDefinitionKey}from"#public/tool-result-narrowing.js";async function resolveConnectionDefinition(t,n,r){try{let i=expectObjectRecord(await loadResolvedModuleExport({definition:t,kindLabel:`connection`,moduleMap:n,nodeId:r}),`Expected the connection export "${t.exportName??`default`}" from "${t.logicalPath}" to return an object.`),a={kind:`connection`,logicalPath:t.logicalPath,name:t.connectionName},o=`connection-source:${t.sourceId}`;stampDefinitionKey(i,o),registerDefinitionSource(o,a),registerDefinitionSource(`connection:${t.url}`,a);let s=i.auth!==void 0,c=i.headers!==void 0,l=t.protocol===`openapi`?i.operations:i.tools,u={connectionName:t.connectionName,description:t.description,exportName:t.exportName,logicalPath:t.logicalPath,protocol:t.protocol,sourceId:t.sourceId,sourceKind:`module`,url:t.url};if(s)try{u.authorization=normalizeAuthorizationSpec(i.auth,`Connection "${t.connectionName}" at "${t.logicalPath}":`)}catch(e){throw new ResolveAgentError(toErrorMessage(e),{logicalPath:t.logicalPath,sourceId:t.sourceId})}return c&&(u.headers=i.headers),l!==void 0&&(u.tools=l),t.protocol===`openapi`&&i.spec!==void 0&&(u.spec=i.spec),typeof i.approval==`function`&&(u.approval=i.approval),u}catch(e){throw e instanceof ResolveAgentError?e:new ResolveAgentError(`Failed to resolve connection "${t.connectionName}" from "${t.logicalPath}": ${toErrorMessage(e)}`,{logicalPath:t.logicalPath,sourceId:t.sourceId})}}export{resolveConnectionDefinition};

package/dist/src/runtime/types.d.ts

@@ -8,7 +8,8 @@ import type { RouteHandler, WebSocketRouteHandler } from "#channel/routes.js";
 import type { OutboundAuthFn } from "#public/agents/auth.js";
 import type { StreamEventHook } from "#public/definitions/hook.js";
 import type { CompactionInput, CompactionHookResult, NeedsApprovalContext, ToolModelOutput } from "#public/definitions/tool.js";
-import type { AuthorizationDefinition, HeadersDefinition, ToolFilterDefinition } from "#runtime/connections/types.js";
+import type { AuthorizationDefinition, ConnectionProtocol, HeadersDefinition, ToolFilterDefinition } from "#runtime/connections/types.js";
+import type { OpenAPISpecSource } from "#public/definitions/connections/openapi.js";
 import type { CompiledWorkspaceResourceRoot } from "#compiler/manifest.js";
 import type { WorkspaceRuntimeSpec } from "#runtime/workspace/types.js";
 import type { JsonObject } from "#shared/json.js";
@@ -72,6 +73,19 @@ export interface ResolvedConnectionDefinition extends ResolvedModuleSourceRef {
     readonly connectionName: string;
     readonly description: string;
     readonly headers?: Readonly<HeadersDefinition>;
+    /**
+     * Wire protocol. Selects the runtime client implementation. `tools`
+     * carries the connection's operation/tool filter regardless of
+     * protocol (sourced from `tools` on MCP connections, `operations` on
+     * OpenAPI connections).
+     */
+    readonly protocol: ConnectionProtocol;
+    /**
+     * OpenAPI document source (URL or inline object). Present only for
+     * `protocol: "openapi"` connections; the OpenAPI client fetches and
+     * parses it on first use.
+     */
+    readonly spec?: OpenAPISpecSource;
     readonly tools?: Readonly<ToolFilterDefinition>;
     readonly url: string;
 }

package/dist/src/shared/sandbox-session.d.ts

@@ -1,4 +1,4 @@
-import type { Experimental_Sandbox as AiSdkSandbox } from "ai";
+import type { Experimental_SandboxSession as AiSdkSandbox } from "ai";
 import type { SandboxNetworkPolicy } from "#shared/sandbox-network-policy.js";
 /**
  * Options for running one command in a sandbox. Shape mirrors the AI

package/dist/src/shared/vercel-output-directory.d.ts

@@ -0,0 +1,2 @@
+export declare function findClosestLinkedVercelDirectory(start: string): Promise<string | undefined>;
+export declare function findClosestVercelOutputDirectory(start: string): Promise<string | undefined>;

package/dist/src/shared/vercel-output-directory.js

@@ -0,0 +1 @@
+import{dirname,join}from"node:path";import{stat}from"node:fs/promises";async function fileExists(e){try{return(await stat(e)).isFile()}catch(e){if(e instanceof Error&&`code`in e&&e.code===`ENOENT`)return!1;throw e}}async function findClosestDirectoryWithFile(t){let n=t.start;for(;;){let r=join(n,t.directoryName);if(await fileExists(join(r,t.fileName)))return r;let i=dirname(n);if(i===n)return;n=i}}async function findClosestLinkedVercelDirectory(e){return findClosestDirectoryWithFile({start:e,directoryName:`.vercel`,fileName:`project.json`})}async function findClosestVercelOutputDirectory(e){return findClosestDirectoryWithFile({start:e,directoryName:`output`,fileName:`builds.json`})}export{findClosestLinkedVercelDirectory,findClosestVercelOutputDirectory};

package/dist/src/svelte/index.d.ts

@@ -0,0 +1,3 @@
+export { useAshAgent, type PrepareSend, type UseAshAgentOptions, type UseAshAgentReturn, type UseAshAgentSnapshot, type UseAshAgentStatus, } from "#svelte/use-ash-agent.js";
+export { type AshAgentReducer, type AshAgentReducerEvent, type ClientInputRespondedEvent, type ClientMessageFailedEvent, type ClientMessageSubmittedEvent, } from "#client/reducer.js";
+export { defaultMessageReducer, type AshMessageData, type AshDynamicToolPart, type AshMessageInputRequest, type AshMessage, type AshMessageMetadata, type AshMessagePart, type AshMessageToolMetadata, } from "#client/message-reducer.js";

package/dist/src/svelte/index.js

@@ -0,0 +1,3 @@
+import { n as defaultMessageReducer, t as useAshAgent } from "../chunks/use-ash-agent-BQJLh7KU.js";
+
+export { defaultMessageReducer, useAshAgent };

package/dist/src/svelte/use-ash-agent.d.ts

@@ -0,0 +1,80 @@
+import { type AshAgentStoreCallbacks, type AshAgentStoreSnapshot, type AshAgentStoreStatus, type PrepareSend } from "#client/ash-agent-store.js";
+import { type AshMessageData } from "#client/message-reducer.js";
+import type { AshAgentReducer } from "#client/reducer.js";
+import type { ClientSession } from "#client/session.js";
+import type { ClientAuth, HeadersValue, SendMessageOptions, SendTurnInput, SessionState } from "#client/types.js";
+import type { HandleMessageStreamEvent } from "#protocol/message.js";
+export type { PrepareSend };
+export type UseAshAgentStatus = AshAgentStoreStatus;
+export type UseAshAgentSnapshot<TData> = AshAgentStoreSnapshot<TData>;
+/**
+ * Reactive return value from `useAshAgent`.
+ *
+ * The state properties are Svelte 5 rune-friendly getters. Read them from a
+ * template, `$derived`, or `$effect` and Svelte will update when Ash streams
+ * new events.
+ */
+export interface UseAshAgentReturn<TData> {
+    /** Projected state built by reducing every stream event through the reducer. */
+    readonly data: TData;
+    /** Last transport-level error, or `undefined` when healthy. */
+    readonly error: Error | undefined;
+    /** Raw server events received during this session (authoritative stream). */
+    readonly events: readonly HandleMessageStreamEvent[];
+    /** Clear all state and start a new session. */
+    readonly reset: () => void;
+    /** Send a turn with full structured input (message, attachments, input responses). */
+    readonly send: (input: SendTurnInput, options?: SendMessageOptions) => Promise<void>;
+    /** Shorthand: send a plain text message. */
+    readonly sendMessage: (message: string, options?: SendMessageOptions) => Promise<void>;
+    /** Current session identity and stream cursor. */
+    readonly session: SessionState;
+    /** Lifecycle phase: `"ready"` (idle), `"submitted"` (request sent, awaiting first event), `"streaming"` (events arriving), or `"error"`. */
+    readonly status: UseAshAgentStatus;
+    /** Abort the in-flight request. */
+    readonly stop: () => void;
+}
+/**
+ * Configuration for creating or binding a Svelte Ash agent session.
+ *
+ * Session configuration is read once when `useAshAgent` creates its internal
+ * store. To point the binding at a different host, reducer, or session, create
+ * a new binding instance. Lifecycle callbacks are installed on creation.
+ *
+ * For credentials or headers that must change without recreating the binding,
+ * pass function values to `auth` or `headers`; the underlying client resolves
+ * those before each HTTP request.
+ */
+export interface UseAshAgentOptions<TData> extends AshAgentStoreCallbacks<TData> {
+    readonly auth?: ClientAuth;
+    readonly headers?: HeadersValue;
+    /**
+     * Base URL used for Ash client requests.
+     *
+     * By default, requests target same-origin Ash routes such as `/ash/v1/...`.
+     * Pass a same-origin prefix such as `/api` to use an app-owned proxy, or an
+     * absolute origin to talk to an Ash server directly.
+     *
+     * @default ""
+     */
+    readonly host?: string;
+    readonly initialEvents?: readonly HandleMessageStreamEvent[];
+    readonly initialSession?: SessionState;
+    readonly maxReconnectAttempts?: number;
+    /**
+     * Project submitted user messages before Ash confirms them with a
+     * `message.received` stream event.
+     *
+     * Optimistic events are reducer-facing projection events only. They are not
+     * exposed through `events`, which remains the authoritative Ash stream.
+     *
+     * @default true
+     */
+    readonly optimistic?: boolean;
+    readonly reducer?: AshAgentReducer<TData>;
+    readonly session?: ClientSession;
+}
+export declare function useAshAgent(options?: UseAshAgentOptions<AshMessageData>): UseAshAgentReturn<AshMessageData>;
+export declare function useAshAgent<TData>(options: UseAshAgentOptions<TData> & {
+    readonly reducer: AshAgentReducer<TData>;
+}): UseAshAgentReturn<TData>;

package/dist/src/svelte/use-ash-agent.js

@@ -0,0 +1,3 @@
+import { t as useAshAgent } from "../chunks/use-ash-agent-BQJLh7KU.js";
+
+export { useAshAgent };

package/dist/src/vue/index.d.ts

@@ -0,0 +1,3 @@
+export { useAshAgent, type PrepareSend, type UseAshAgentOptions, type UseAshAgentReturn, type UseAshAgentSnapshot, type UseAshAgentStatus, } from "#vue/use-ash-agent.js";
+export { type AshAgentReducer, type AshAgentReducerEvent, type ClientInputRespondedEvent, type ClientMessageFailedEvent, type ClientMessageSubmittedEvent, } from "#client/reducer.js";
+export { defaultMessageReducer, type AshMessageData, type AshDynamicToolPart, type AshMessageInputRequest, type AshMessage, type AshMessageMetadata, type AshMessagePart, type AshMessageToolMetadata, } from "#client/message-reducer.js";

package/dist/src/vue/index.js

@@ -0,0 +1,3 @@
+import { n as defaultMessageReducer, t as useAshAgent } from "../chunks/use-ash-agent-CRWVA4i-.js";
+
+export { defaultMessageReducer, useAshAgent };

package/dist/src/vue/use-ash-agent.d.ts

@@ -0,0 +1,78 @@
+import { type ComputedRef } from "vue";
+import { type AshAgentStoreCallbacks, type AshAgentStoreSnapshot, type AshAgentStoreStatus, type PrepareSend } from "#client/ash-agent-store.js";
+import type { AshAgentReducer } from "#client/reducer.js";
+import type { ClientSession } from "#client/session.js";
+import { type AshMessageData } from "#client/message-reducer.js";
+import type { HandleMessageStreamEvent } from "#protocol/message.js";
+import type { ClientAuth, HeadersValue, SendMessageOptions, SendTurnInput, SessionState } from "#client/types.js";
+export type { PrepareSend };
+export type UseAshAgentStatus = AshAgentStoreStatus;
+export type UseAshAgentSnapshot<TData> = AshAgentStoreSnapshot<TData>;
+/**
+ * Reactive return value from `useAshAgent`.
+ */
+export interface UseAshAgentReturn<TData> {
+    /** Projected state built by reducing every stream event through the reducer. */
+    readonly data: ComputedRef<TData>;
+    /** Last transport-level error, or `undefined` when healthy. */
+    readonly error: ComputedRef<Error | undefined>;
+    /** Raw server events received during this session (authoritative stream). */
+    readonly events: ComputedRef<readonly HandleMessageStreamEvent[]>;
+    /** Clear all state and start a new session. */
+    readonly reset: () => void;
+    /** Send a turn with full structured input (message, attachments, input responses). */
+    readonly send: (input: SendTurnInput, options?: SendMessageOptions) => Promise<void>;
+    /** Shorthand: send a plain text message. */
+    readonly sendMessage: (message: string, options?: SendMessageOptions) => Promise<void>;
+    /** Current session identity and stream cursor. */
+    readonly session: ComputedRef<SessionState>;
+    /** Lifecycle phase: `"ready"` (idle), `"submitted"` (request sent, awaiting first event), `"streaming"` (events arriving), or `"error"`. */
+    readonly status: ComputedRef<UseAshAgentStatus>;
+    /** Abort the in-flight request. */
+    readonly stop: () => void;
+}
+/**
+ * Configuration for creating or binding a Vue Ash agent session.
+ *
+ * Session configuration is read once when the composable creates its internal
+ * store. To point the composable at a different host, reducer, or session,
+ * unmount and remount the component that calls it. Lifecycle callbacks are
+ * synced on every call to `setCallbacks`.
+ *
+ * For credentials or headers that must change without remounting, pass function
+ * values to `auth` or `headers`; the underlying client resolves those before
+ * each HTTP request.
+ */
+export interface UseAshAgentOptions<TData> extends AshAgentStoreCallbacks<TData> {
+    readonly auth?: ClientAuth;
+    readonly headers?: HeadersValue;
+    /**
+     * Base URL used for Ash client requests.
+     *
+     * By default, requests target same-origin Ash routes such as `/ash/v1/...`.
+     * Pass a same-origin prefix such as `/api` to use an app-owned proxy, or an
+     * absolute origin to talk to an Ash server directly.
+     *
+     * @default ""
+     */
+    readonly host?: string;
+    readonly initialEvents?: readonly HandleMessageStreamEvent[];
+    readonly initialSession?: SessionState;
+    readonly maxReconnectAttempts?: number;
+    /**
+     * Project submitted user messages before Ash confirms them with a
+     * `message.received` stream event.
+     *
+     * Optimistic events are reducer-facing projection events only. They are not
+     * exposed through `events`, which remains the authoritative Ash stream.
+     *
+     * @default true
+     */
+    readonly optimistic?: boolean;
+    readonly reducer?: AshAgentReducer<TData>;
+    readonly session?: ClientSession;
+}
+export declare function useAshAgent(options?: UseAshAgentOptions<AshMessageData>): UseAshAgentReturn<AshMessageData>;
+export declare function useAshAgent<TData>(options: UseAshAgentOptions<TData> & {
+    readonly reducer: AshAgentReducer<TData>;
+}): UseAshAgentReturn<TData>;

package/dist/src/vue/use-ash-agent.js

@@ -0,0 +1,3 @@
+import { t as useAshAgent } from "../chunks/use-ash-agent-CRWVA4i-.js";
+
+export { useAshAgent };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "experimental-ash",
-  "version": "0.61.0",
+  "version": "0.63.0",
   "description": "Filesystem-first framework for durable backend AI agents that run anywhere.",
   "keywords": [
     "agent-framework",
@@ -60,11 +60,31 @@
       "import": "./dist/src/react/index.js",
       "default": "./dist/src/react/index.js"
     },
+    "./vue": {
+      "types": "./dist/src/vue/index.d.ts",
+      "import": "./dist/src/vue/index.js",
+      "default": "./dist/src/vue/index.js"
+    },
+    "./svelte": {
+      "types": "./dist/src/svelte/index.d.ts",
+      "import": "./dist/src/svelte/index.js",
+      "default": "./dist/src/svelte/index.js"
+    },
     "./next": {
       "types": "./dist/src/public/next/index.d.ts",
       "import": "./dist/src/public/next/index.js",
       "default": "./dist/src/public/next/index.js"
     },
+    "./nuxt": {
+      "types": "./dist/src/public/nuxt/index.d.ts",
+      "import": "./dist/src/public/nuxt/index.js",
+      "default": "./dist/src/public/nuxt/index.js"
+    },
+    "./sveltekit": {
+      "types": "./dist/src/public/sveltekit/index.d.ts",
+      "import": "./dist/src/public/sveltekit/index.js",
+      "default": "./dist/src/public/sveltekit/index.js"
+    },
     "./tools/approval": {
       "types": "./dist/src/public/tools/approval/index.d.ts",
       "import": "./dist/src/public/tools/approval/index.js",
@@ -204,25 +224,27 @@
     "nitro": "3.0.260522-beta"
   },
   "devDependencies": {
-    "@ai-sdk/anthropic": "4.0.0-canary.61",
-    "@ai-sdk/google": "4.0.0-canary.75",
-    "@ai-sdk/mcp": "2.0.0-canary.56",
-    "@ai-sdk/openai": "4.0.0-canary.66",
-    "@ai-sdk/otel": "1.0.0-canary.105",
-    "@ai-sdk/provider": "4.0.0-canary.17",
+    "@ai-sdk/anthropic": "4.0.0-canary.63",
+    "@ai-sdk/google": "4.0.0-canary.79",
+    "@ai-sdk/mcp": "2.0.0-canary.59",
+    "@ai-sdk/openai": "4.0.0-canary.69",
+    "@ai-sdk/otel": "1.0.0-canary.111",
+    "@ai-sdk/provider": "4.0.0-canary.18",
     "@chat-adapter/slack": "4.29.0",
     "@chat-adapter/state-memory": "4.29.0",
+    "@nuxt/kit": "^4.0.0",
     "@standard-schema/spec": "1.1.0",
+    "@sveltejs/kit": "^2.0.0",
     "@types/json-schema": "7.0.15",
     "@types/react": "19.2.15",
     "@types/react-test-renderer": "19.1.0",
     "@vercel/oidc": "3.5.0",
     "@vercel/sandbox": "2.1.0",
-    "@workflow/core": "5.0.0-beta.11",
-    "@workflow/errors": "5.0.0-beta.6",
-    "@workflow/world": "5.0.0-beta.6",
-    "@workflow/world-local": "5.0.0-beta.12",
-    "ai": "7.0.0-canary.159",
+    "@workflow/core": "5.0.0-beta.12",
+    "@workflow/errors": "5.0.0-beta.7",
+    "@workflow/world": "5.0.0-beta.7",
+    "@workflow/world-local": "5.0.0-beta.13",
+    "ai": "7.0.0-canary.165",
     "autoevals": "0.0.132",
     "chat": "4.29.0",
     "chokidar": "5.0.0",
@@ -236,30 +258,53 @@
     "picocolors": "1.1.1",
     "react": "19.2.6",
     "react-test-renderer": "19.2.6",
+    "svelte": "^5.0.0",
     "turndown": "7.2.4",
+    "vite": "^8.0.0",
+    "vue": "^3.5.0",
     "zod": "4.4.3",
     "zod-validation-error": "5.0.0",
     "@vercel/ash-scaffold": "0.0.0"
   },
   "peerDependencies": {
     "@opentelemetry/api": "^1.0.0",
-    "ai": "7.0.0-canary.159",
+    "@sveltejs/kit": "^2.0.0",
+    "ai": "7.0.0-canary.165",
     "braintrust": "^3.0.0",
     "next": "^16.0.0",
-    "react": "^19.0.0"
+    "nuxt": "^4.0.0",
+    "react": "^19.0.0",
+    "svelte": "^5.0.0",
+    "vite": "^8.0.0",
+    "vue": "^3.5.0"
   },
   "peerDependenciesMeta": {
     "@opentelemetry/api": {
       "optional": true
     },
+    "@sveltejs/kit": {
+      "optional": true
+    },
     "braintrust": {
       "optional": true
     },
     "next": {
       "optional": true
     },
+    "nuxt": {
+      "optional": true
+    },
     "react": {
       "optional": true
+    },
+    "svelte": {
+      "optional": true
+    },
+    "vite": {
+      "optional": true
+    },
+    "vue": {
+      "optional": true
     }
   },
   "engines": {

package/dist/src/compiled/_chunks/workflow/dist-C4EHshZE.js

@@ -1,3 +0,0 @@
-import{i as e,t}from"./chunk-DSjMdhoD.js";function n(e,t,n){return n===1?e:t}function r(e,t){if(typeof t!=`string`)return null;let[n,r,...i]=t.split(`//`);if(n!==e||!r||i.length===0)return null;let a=i.join(`//`),o=a.split(`/`).at(-1)??``,s=``;return s=r.startsWith(`./`)?r.split(`/`).at(-1)??``:(r.split(`@`).slice(0,-1).join(`@`)||r.split(`@`)[0])?.split(`/`).at(-1)??``,[`default`,`__default`].includes(o)&&s&&(o=s),{shortName:o,moduleSpecifier:r,functionName:a}}function i(e){return r(`workflow`,e)}function a(e){return r(`step`,e)}function o(e){return c(a(e),e)}function s(e){return c(i(e),e)}function c(e,t){return e?`${e.shortName} (${e.moduleSpecifier})`:t}function l(){let e,t;return{promise:new Promise((n,r)=>{e=n,t=r}),resolve:e,reject:t}}function u(e){let t={get value(){let n=e();return Object.defineProperty(t,"value",{value:n}),n}};return t}var d=e(t(((e,t)=>{var n=1e3,r=n*60,i=r*60,a=i*24,o=a*7,s=a*365.25;t.exports=function(e,t){t||={};var n=typeof e;if(n===`string`&&e.length>0)return c(e);if(n===`number`&&isFinite(e))return t.long?u(e):l(e);throw Error(`val is not a non-empty string or a valid number. val=`+JSON.stringify(e))};function c(e){if(e=String(e),!(e.length>100)){var t=/^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(e);if(t){var c=parseFloat(t[1]);switch((t[2]||`ms`).toLowerCase()){case`years`:case`year`:case`yrs`:case`yr`:case`y`:return c*s;case`weeks`:case`week`:case`w`:return c*o;case`days`:case`day`:case`d`:return c*a;case`hours`:case`hour`:case`hrs`:case`hr`:case`h`:return c*i;case`minutes`:case`minute`:case`mins`:case`min`:case`m`:return c*r;case`seconds`:case`second`:case`secs`:case`sec`:case`s`:return c*n;case`milliseconds`:case`millisecond`:case`msecs`:case`msec`:case`ms`:return c;default:return}}}}function l(e){var t=Math.abs(e);return t>=a?Math.round(e/a)+`d`:t>=i?Math.round(e/i)+`h`:t>=r?Math.round(e/r)+`m`:t>=n?Math.round(e/n)+`s`:e+`ms`}function u(e){var t=Math.abs(e);return t>=a?d(e,t,a,`day`):t>=i?d(e,t,i,`hour`):t>=r?d(e,t,r,`minute`):t>=n?d(e,t,n,`second`):e+` ms`}function d(e,t,n,r){var i=t>=n*1.5;return Math.round(e/n)+` `+r+(i?`s`:``)}}))(),1);function f(e){if(typeof e==`string`){let t=(0,d.default)(e);if(typeof t!=`number`||t<0)throw Error(`Invalid duration: "${e}". Expected a valid duration string like "1s", "1m", "1h", etc.`);return new Date(Date.now()+t)}else if(typeof e==`number`){if(e<0||!Number.isFinite(e))throw Error(`Invalid duration: ${e}. Expected a non-negative finite number of milliseconds.`);return new Date(Date.now()+e)}else if(e instanceof Date||e&&typeof e==`object`&&typeof e.getTime==`function`)return e instanceof Date?e:new Date(e.getTime());else throw Error(`Invalid duration parameter. Expected a duration string, number (milliseconds), or Date object.`)}function p(e=process.env){return e.WORKFLOW_TARGET_WORLD||(e.VERCEL_DEPLOYMENT_ID?`vercel`:`local`)}function m(e){return e===`vercel`||e===`@workflow/world-vercel`}const h={USER_ERROR:`USER_ERROR`,RUNTIME_ERROR:`RUNTIME_ERROR`,CORRUPTED_EVENT_LOG:`CORRUPTED_EVENT_LOG`,MAX_DELIVERIES_EXCEEDED:`MAX_DELIVERIES_EXCEEDED`,REPLAY_TIMEOUT:`REPLAY_TIMEOUT`,WORLD_CONTRACT_ERROR:`WORLD_CONTRACT_ERROR`};function g(e){return typeof e==`object`&&!!e&&`name`in e&&`message`in e}function _(e,t){if(t.length===0)return e;let n=[e];return t.forEach((e,r)=>{let i=r===t.length-1,a=i?`╰▶ `:`├▶ `,o=i?`   `:`│  `;`${e.label}: ${e.value}`.split(`
-`).forEach((e,t)=>n.push(`${t===0?a:o}${e}`))}),n.join(`
-`)}function v(e,t){let n=[];return e&&n.push({label:`hint`,value:e}),t&&n.push({label:`docs`,value:`https://workflow-sdk.dev/err/${t}`}),n}const y={NODE_JS_MODULE_IN_WORKFLOW:`node-js-module-in-workflow`,START_INVALID_WORKFLOW_FUNCTION:`start-invalid-workflow-function`,SERIALIZATION_FAILED:`serialization-failed`,WEBHOOK_INVALID_RESPOND_WITH_VALUE:`webhook-invalid-respond-with-value`,WEBHOOK_RESPONSE_NOT_SENT:`webhook-response-not-sent`,FETCH_IN_WORKFLOW_FUNCTION:`fetch-in-workflow`,TIMEOUT_FUNCTIONS_IN_WORKFLOW:`timeout-in-workflow`,HOOK_CONFLICT:`hook-conflict`,CORRUPTED_EVENT_LOG:`corrupted-event-log`,STEP_NOT_REGISTERED:`step-not-registered`,WORKFLOW_NOT_REGISTERED:`workflow-not-registered`,RUNTIME_DECRYPTION_FAILED:`runtime-decryption-failed`};var b=class extends Error{cause;constructor(e,t){let n=_(e,v(void 0,t?.slug));super(n,{cause:t?.cause}),t?.cause!==void 0&&(this.cause=t.cause),t?.cause instanceof Error&&(this.stack=`${this.stack}\nCaused by: ${t.cause.stack}`)}static is(e){return g(e)&&e.name===`WorkflowError`}},x=class extends b{status;code;url;retryAfter;constructor(e,t){super(e,{cause:t?.cause}),this.name=`WorkflowWorldError`,this.status=t?.status,this.code=t?.code,this.url=t?.url,this.retryAfter=t?.retryAfter}static is(e){return g(e)&&e.name===`WorkflowWorldError`}},S=class extends b{runId;errorCode;constructor(e,t,n={}){let r=t instanceof Error?t.message:typeof t==`string`?t:t&&typeof t==`object`&&`message`in t?String(t.message):`Unknown error`;super(`Workflow run "${e}" failed: ${r}`,{cause:t}),this.name=`WorkflowRunFailedError`,this.runId=e,n.errorCode!==void 0&&(this.errorCode=n.errorCode)}static is(e){return g(e)&&e.name===`WorkflowRunFailedError`}},C=class extends b{runId;status;constructor(e,t){super(`Workflow run "${e}" has not completed`,{}),this.name=`WorkflowRunNotCompletedError`,this.runId=e,this.status=t}static is(e){return g(e)&&e.name===`WorkflowRunNotCompletedError`}},w=class extends b{constructor(e,t){super(e,{...t}),this.name=`WorkflowRuntimeError`}static is(e){return g(e)&&e.name===`WorkflowRuntimeError`}},T=class extends w{constructor(e,t){super(e,{...t,slug:y.CORRUPTED_EVENT_LOG}),this.name=`CorruptedEventLogError`}static is(e){return g(e)&&e.name===`CorruptedEventLogError`}},E=class extends w{context;constructor(e,t){super(e,{cause:t?.cause,slug:y.RUNTIME_DECRYPTION_FAILED}),this.name=`RuntimeDecryptionError`,t?.context!==void 0&&(this.context=t.context)}static is(e){return g(e)&&e.name===`RuntimeDecryptionError`}},D=class extends b{hint;constructor(e,t){let n=_(e,v(t?.hint,void 0));super(n,{cause:t?.cause}),this.name=`WorkflowBuildError`,this.hint=t?.hint}static is(e){return g(e)&&e.name===`WorkflowBuildError`}},O=class extends b{hint;fatal=!0;constructor(e,t){let n=_(e,v(t?.hint,void 0));super(n,{cause:t?.cause}),this.name=`SerializationError`,this.hint=t?.hint}static is(e){return g(e)&&e.name===`SerializationError`}},k=class extends w{stepName;constructor(e){super(`Step "${e}" is not registered in the current deployment. This usually indicates a build or bundling issue that caused the step to not be included in the deployment.`,{slug:y.STEP_NOT_REGISTERED}),this.name=`StepNotRegisteredError`,this.stepName=e}static is(e){return g(e)&&e.name===`StepNotRegisteredError`}},A=class extends w{workflowName;constructor(e){super(`Workflow "${e}" is not registered in the current deployment. This usually means a run was started against a deployment that does not have this workflow, or there was a build/bundling issue.`,{slug:y.WORKFLOW_NOT_REGISTERED}),this.name=`WorkflowNotRegisteredError`,this.workflowName=e}static is(e){return g(e)&&e.name===`WorkflowNotRegisteredError`}},j=class extends b{runId;constructor(e){super(`Workflow run "${e}" not found`,{}),this.name=`WorkflowRunNotFoundError`,this.runId=e}static is(e){return g(e)&&e.name===`WorkflowRunNotFoundError`}},M=class extends b{token;conflictingRunId;constructor(e,t){super(`Hook token "${e}" is already in use by another workflow${t?` (run "${t}")`:``}`,{slug:y.HOOK_CONFLICT}),this.name=`HookConflictError`,this.token=e,t!==void 0&&(this.conflictingRunId=t)}static is(e){return g(e)&&e.name===`HookConflictError`}},N=class extends b{token;constructor(e){super(`Hook not found`,{}),this.name=`HookNotFoundError`,this.token=e}static is(e){return g(e)&&e.name===`HookNotFoundError`}},P=class extends x{constructor(e){super(e),this.name=`EntityConflictError`}static is(e){return g(e)&&e.name===`EntityConflictError`}},F=class extends x{constructor(e){super(e),this.name=`RunExpiredError`}static is(e){return g(e)&&e.name===`RunExpiredError`}},I=class extends x{constructor(e,t){super(e,{retryAfter:t?.retryAfter}),this.name=`TooEarlyError`}static is(e){return g(e)&&e.name===`TooEarlyError`}},L=class extends x{retryAfter;constructor(e,t){super(e),this.name=`ThrottleError`,this.retryAfter=t?.retryAfter}static is(e){return g(e)&&e.name===`ThrottleError`}},R=class extends b{runId;constructor(e){super(`Workflow run "${e}" cancelled`,{}),this.name=`WorkflowRunCancelledError`,this.runId=e}static is(e){return g(e)&&e.name===`WorkflowRunCancelledError`}},z=class extends b{runSpecVersion;worldSpecVersion;constructor(e,t){super(`Run requires spec version ${e}, but world supports version ${t}. Please upgrade 'workflow' package.`),this.name=`RunNotSupportedError`,this.runSpecVersion=e,this.worldSpecVersion=t}static is(e){return g(e)&&e.name===`RunNotSupportedError`}},B=class extends Error{fatal=!0;constructor(e){super(e),this.name=`FatalError`}static is(e){return g(e)?e.name===`FatalError`?!0:e.fatal===!0:!1}},V=class extends Error{retryAfter;constructor(e,t={}){super(e),this.name=`RetryableError`,t.retryAfter===void 0?this.retryAfter=new Date(Date.now()+1e3):this.retryAfter=f(t.retryAfter)}static is(e){return g(e)&&e.name===`RetryableError`}};const H="Your current vercel account does not have access to this resource. Use `vercel login` or `vercel switch` to ensure you are linked to the right account.",U=Symbol.for(`@workflow/errors//FatalError`),W=Symbol.for(`@workflow/errors//RetryableError`),G=Symbol.for(`@workflow/errors//HookConflictError`),K=Symbol.for(`@workflow/errors//RuntimeDecryptionError`);typeof globalThis<`u`&&(Object.hasOwn(globalThis,U)||Object.defineProperty(globalThis,U,{value:B,writable:!1,enumerable:!1,configurable:!1}),Object.hasOwn(globalThis,W)||Object.defineProperty(globalThis,W,{value:V,writable:!1,enumerable:!1,configurable:!1}),Object.hasOwn(globalThis,G)||Object.defineProperty(globalThis,G,{value:M,writable:!1,enumerable:!1,configurable:!1}),Object.hasOwn(globalThis,K)||Object.defineProperty(globalThis,K,{value:E,writable:!1,enumerable:!1,configurable:!1}));export{l as A,w as C,p as D,m as E,n as F,s as M,a as N,f as O,i as P,j as S,h as T,b as _,M as a,S as b,F as c,O as d,k as f,D as g,H as h,B as i,o as j,u as k,z as l,I as m,y as n,N as o,L as p,P as r,V as s,T as t,E as u,A as v,x as w,C as x,R as y};