This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated. # Releases ## @chat-adapter/shared@4.39.0 ### Minor Changes -153bd96: guard Messenger attachment downloads against SSRF and oversized responses `downloadAttachment` in `@chat-adapter/shared` accepts an optional `hosts` allowlist that restricts downloads, including redirect targets, to the given hosts and their subdomains. The Messenger adapter uses it to download attachment media only from Meta's `fbsbx.com` and `fbcdn.net` hosts, with the shared SSRF guard, 25 MB size cap, and 30 second timeout. External fallback and link-share URLs are rejected before any network request. -bb92688: secure anonymous attachment downloads against SSRF and oversized responses `@chat-adapter/shared` gains `downloadAttachment`, a guarded downloader that refuses private and internal addresses (as URL literals, through DNS resolution, and after redirects), decodes compressed responses, caps the body size at 25 MB, and bounds the whole download with a 30 second timeout. All of these are configurable, including the transport for proxied deployments. The Teams adapter uses it for anonymous attachment downloads. HTTPS attachments on any public host keep working, plain-HTTP URLs are refused, and the Bot Framework Emulator's loopback connector now uses bot authentication so local development keeps working. -e71bfea: Add `normalizeCodeFences` to `@chat-adapter/shared`: a code-fence normalizer for platforms whose triple-backtick fences treat the text after the opening fence as code rather than a CommonMark info string. Only paired fences become code blocks (unpaired fences, fences inside inline code, and fences on quoted lines stay literal text), text following a closing fence cannot be promoted to a block construct, and per-segment callbacks keep text-level rewrites out of code content. The WhatsApp adapter now uses it when parsing incoming messages: the first line of a code block is preserved in message text and formatted content, and bold/strikethrough rewriting no longer corrupts fenced code. -b6fa24c: guard attachment downloads across the remaining adapters Slack, Discord, and WhatsApp attachment downloads now go through the shared guarded downloader: private and internal addresses are refused (as URL literals, through DNS resolution, and after redirects), responses are capped at 25 MB, and downloads time out after 30 seconds. Slack sends the bot token only on hops to trusted Slack origins, and WhatsApp keeps its access token on Meta's media hosts and the configured Graph origin. Telegram enforces the same size cap and timeout with the Web Fetch API so downloads keep working in runtimes like Cloudflare Workers. `downloadAttachment` in `@chat-adapter/shared` now resolves `headers` per hop (pass a function to control what each redirect target receives), forwards the resolved headers to custom transports, and accepts an `onResponse` hook to reject unexpected final responses before the body is read. ### Patch Changes - Updated dependencies [2ce2be0] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [5b538f6] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - chat@4.39.0 ## @chat-adapter/slack@4.39.0 ### Minor Changes -2ce2be0: Add Slack Agent Sessions lifecycle support, native stop cancellation through `thread.signal`, automatic session titles, and session stop/title-change events while preserving the legacy `assistant_view` compatibility path. ### Patch Changes -864d922: Keep alert attachment content on normalized Slack messages. Attachments that aren't link unfurls now contribute their pretext, title (linked to `title_link` when present, with the URL also surfaced in `message.links`), text, and fields instead of being dropped; `fallback` fills in when nothing else on the attachment carries content. Matching how Slack renders these fields, they are treated as plain text unless listed in the attachment's `mrkdwn_in` array, so literal `*`, `_`, and backticks in alert text survive normalization. Tables inside attachment blocks now stay adjacent to their attachment's text. Because attachment content is part of `message.text`, mention detection and `onMessage` pattern handlers see it too: an attachment that quotes the bot's mention routes to `onNewMention`, and patterns match alert text. Handlers that should ignore other integrations' alerts can check `message.author.isBot`. -7c26965: prevent attachment downloads from sending credentials to untrusted hosts -e71bfea: Preserve the first line of incoming Slack code blocks when extracting message text and formatted content. Only paired triple-backtick fences become code blocks: an unpaired fence, a fence inside inline code or a `<…>` token, and a fence on a quoted line all stay literal text, matching how Slack renders them. Bold and strikethrough rewriting no longer touches fenced code content, and text following a closing fence can no longer turn into a blockquote, heading, or list. -b6fa24c: guard attachment downloads across the remaining adapters Slack, Discord, and WhatsApp attachment downloads now go through the shared guarded downloader: private and internal addresses are refused (as URL literals, through DNS resolution, and after redirects), responses are capped at 25 MB, and downloads time out after 30 seconds. Slack sends the bot token only on hops to trusted Slack origins, and WhatsApp keeps its access token on Meta's media hosts and the configured Graph origin. Telegram enforces the same size cap and timeout with the Web Fetch API so downloads keep working in runtimes like Cloudflare Workers. `downloadAttachment` in `@chat-adapter/shared` now resolves `headers` per hop (pass a function to control what each redirect target receives), forwards the resolved headers to custom transports, and accepts an `onResponse` hook to reject unexpected final responses before the body is read. - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/telegram@4.39.0 ### Minor Changes -c4a359e: require webhook verification by default with an explicit unverified opt-in -26a06ca: Add `mentionOnReply`: when enabled, a reply to one of the bot's own messages reports `isMention`, so a bot in a group keeps the conversation going without the handle being repeated. Off by default, so existing mention-only bots are unaffected, and readable from `TELEGRAM_MENTION_ON_REPLY`. Implicit forum-topic replies and the bot's own echoed messages never count, and polling mode now retries the startup `getMe` lazily so a transient outage cannot leave mention detection disabled. -d5ebec1: Implement `reply` in the Telegram adapter so `Thread.reply()` threads the answer to its target instead of throwing `NotImplementedError`. The reference travels as Bot API `reply_parameters` and covers text, rich messages, documents, attachments and media groups; `allow_sending_without_reply` keeps delivery working when the target has been deleted. Malformed reply target ids are rejected before anything is sent, and a rich-message gateway that rejects `reply_parameters` falls back to a regular threaded send. -a18e792: Describe the message kinds Telegram sends with no text and no file. A shared location, venue, contact, poll, dice, game, invoice or story used to arrive as an empty message: the payload carried the content, but a handler reading `text` saw nothing. Each now gets a short literal description (`📍 55.75, 37.61`, `👤 Ada Lovelace +1555…`, `📊 Lunch or dinner?`), and the structured payload stays on the raw message for anyone who needs the numbers. -a0ba986: Parse stickers and animations. A sticker used to arrive as an empty message, since it carries no text, and an animation (Telegram GIF) was dropped entirely. A sticker now reports the emoji it stands for as its text (falling back to the sticker set name, then to "sticker") plus an attachment matching its real format: an image for a still WebP sticker, a video for a WebM one, a file for a Lottie (TGS) one. An animation arrives as a single video attachment; the redundant `document` field Telegram sets alongside it for backward compatibility is no longer reported as a second attachment. ### Patch Changes -eddcd7e: Return Telegram file downloads as portable ArrayBuffer data while preserving Buffer support in the shared attachment contract. -b6fa24c: guard attachment downloads across the remaining adapters Slack, Discord, and WhatsApp attachment downloads now go through the shared guarded downloader: private and internal addresses are refused (as URL literals, through DNS resolution, and after redirects), responses are capped at 25 MB, and downloads time out after 30 seconds. Slack sends the bot token only on hops to trusted Slack origins, and WhatsApp keeps its access token on Meta's media hosts and the configured Graph origin. Telegram enforces the same size cap and timeout with the Web Fetch API so downloads keep working in runtimes like Cloudflare Workers. `downloadAttachment` in `@chat-adapter/shared` now resolves `headers` per hop (pass a function to control what each redirect target receives), forwards the resolved headers to custom transports, and accepts an `onResponse` hook to reject unexpected final responses before the body is read. - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/twilio@4.39.0 ### Minor Changes -75cadbf: feat(twilio): add RCS support with rich cards, button actions, and location sharing Extends the Twilio adapter with full RCS support: inbound button tap routing via `processAction`, location share parsing, Content API integration for rich outbound cards with SMS fallback, and channel metadata detection. Cards sent to RCS-capable senders (Messaging Service or `rcs:` address) are automatically rendered as Twilio Content templates with embedded SMS fallback variants. Existing deployments keep their thread ids: plain SMS threads stay keyed by phone number even when the number belongs to a Messaging Service, and `openDM` still prefers `phoneNumber` over `messagingServiceSid`. Only taps of buttons rendered by Chat SDK become actions; foreign button taps that carry a body keep arriving as messages. ### Patch Changes -28bc776: isolate Twilio message processing locks by conversation - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## chat@4.39.0 ### Minor Changes -2ce2be0: Add Slack Agent Sessions lifecycle support, native stop cancellation through `thread.signal`, automatic session titles, and session stop/title-change events while preserving the legacy `assistant_view` compatibility path. -169788b: Introduce the unified History API (`bot.history`) with user, thread, and channel scopes. `bot.history.user` replaces `bot.transcripts` for cross-platform per-user message persistence. The API surface is identical — migrate by changing the `transcripts` config key to `history.user` and updating call sites from `bot.transcripts.*` to `bot.history.user.*`. `bot.transcripts` remains available as a deprecated alias. `bot.history.thread` and `bot.history.channel` expose promise-based helpers for per-thread and per-channel message access, aligned with the existing `thread.messages` and `channel.threads()` iterators. Reads delegate to the adapter; adapters that persist history in the SDK-side store (`persistThreadHistory: true`) are served from that cache. An unregistered adapter prefix or an unsupported capability throws instead of returning an empty result. The new `toPromptEntries` helper converts `history.user.list()` entries into `{ role, content }` messages ready for LLM prompts. The `TranscriptEntry` type is deprecated in favour of `HistoryEntry`. Both are exported from `chat`. -5b538f6: Keep thread locks alive while message handlers run so queue, burst, and debounce strategies remain serialized beyond the lock TTL. Renewal is capped by the new `concurrency.maxLockLifetimeMs` option (default 10 minutes) so a hung handler cannot block a thread forever. When the heartbeat detects that lock ownership was lost, the queue drain and debounce loops stop instead of competing with the new lock holder, and the debounce loop now keeps draining messages that arrive while a handler is running instead of stranding them until the next webhook. ### Patch Changes -16ea171: preserve adapter-returned thread ids when editing channel messages -eddcd7e: Return Telegram file downloads as portable ArrayBuffer data while preserving Buffer support in the shared attachment contract. -929878b: Allow JSX link buttons to include an explicit action ID. -500b7e6: enforce the conversation scope on write tools and stop trusting client-supplied message history in the web adapter `createChatTools` now runs the same scope guard on write tools that read tools already used, so a thread or channel id the model supplies that resolves outside the scoped conversation is rejected before the write executes. `sendDirectMessage` targets a user id rather than a conversation and stays gated by approval alone. The web adapter no longer treats the request body's `messages` array as a source of conversation state. Only the latest user message is consumed, and tool parts are stripped from it so a browser cannot inject forged tool-call or approval state. Text, file, and custom data parts pass through unchanged; a message left with no parts after stripping is rejected with HTTP 400. Prior turns come from the state adapter when `persistMessageHistory` is enabled. ## @chat-adapter/discord@4.39.0 ### Patch Changes -c4f709f: fix edits, deletes, and reactions on Discord thread starter messages Operations on a thread's starter message now try the thread first and fall back to the parent channel when Discord reports the message as unknown. Threads on a text channel keep their starter message in the parent channel, so those operations used to fail; forum and media posts keep theirs in the thread and are unaffected. Note that deleting a text-channel thread's starter message now deletes the message, which Discord cascades into deleting the thread. -b6fa24c: guard attachment downloads across the remaining adapters Slack, Discord, and WhatsApp attachment downloads now go through the shared guarded downloader: private and internal addresses are refused (as URL literals, through DNS resolution, and after redirects), responses are capped at 25 MB, and downloads time out after 30 seconds. Slack sends the bot token only on hops to trusted Slack origins, and WhatsApp keeps its access token on Meta's media hosts and the configured Graph origin. Telegram enforces the same size cap and timeout with the Web Fetch API so downloads keep working in runtimes like Cloudflare Workers. `downloadAttachment` in `@chat-adapter/shared` now resolves `headers` per hop (pass a function to control what each redirect target receives), forwards the resolved headers to custom transports, and accepts an `onResponse` hook to reject unexpected final responses before the body is read. - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/gchat@4.39.0 ### Patch Changes - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/github@4.39.0 ### Patch Changes - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/instagram@4.39.0 ### Patch Changes - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/linear@4.39.0 ### Patch Changes - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/messenger@4.39.0 ### Patch Changes -153bd96: guard Messenger attachment downloads against SSRF and oversized responses `downloadAttachment` in `@chat-adapter/shared` accepts an optional `hosts` allowlist that restricts downloads, including redirect targets, to the given hosts and their subdomains. The Messenger adapter uses it to download attachment media only from Meta's `fbsbx.com` and `fbcdn.net` hosts, with the shared SSRF guard, 25 MB size cap, and 30 second timeout. External fallback and link-share URLs are rejected before any network request. - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/notion@4.39.0 ### Patch Changes - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/teams@4.39.0 ### Patch Changes -63997ac: hydrate live Teams sender email without requiring Microsoft Graph permissions -bb92688: secure anonymous attachment downloads against SSRF and oversized responses `@chat-adapter/shared` gains `downloadAttachment`, a guarded downloader that refuses private and internal addresses (as URL literals, through DNS resolution, and after redirects), decodes compressed responses, caps the body size at 25 MB, and bounds the whole download with a 30 second timeout. All of these are configurable, including the transport for proxied deployments. The Teams adapter uses it for anonymous attachment downloads. HTTPS attachments on any public host keep working, plain-HTTP URLs are refused, and the Bot Framework Emulator's loopback connector now uses bot authentication so local development keeps working. - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/web@4.39.0 ### Patch Changes -500b7e6: enforce the conversation scope on write tools and stop trusting client-supplied message history in the web adapter `createChatTools` now runs the same scope guard on write tools that read tools already used, so a thread or channel id the model supplies that resolves outside the scoped conversation is rejected before the write executes. `sendDirectMessage` targets a user id rather than a conversation and stays gated by approval alone. The web adapter no longer treats the request body's `messages` array as a source of conversation state. Only the latest user message is consumed, and tool parts are stripped from it so a browser cannot inject forged tool-call or approval state. Text, file, and custom data parts pass through unchanged; a message left with no parts after stripping is rejected with HTTP 400. Prior turns come from the state adapter when `persistMessageHistory` is enabled. - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/whatsapp@4.39.0 ### Patch Changes -3e6e866: support business-scoped user IDs for inbound and outbound WhatsApp messages -e71bfea: Add `normalizeCodeFences` to `@chat-adapter/shared`: a code-fence normalizer for platforms whose triple-backtick fences treat the text after the opening fence as code rather than a CommonMark info string. Only paired fences become code blocks (unpaired fences, fences inside inline code, and fences on quoted lines stay literal text), text following a closing fence cannot be promoted to a block construct, and per-segment callbacks keep text-level rewrites out of code content. The WhatsApp adapter now uses it when parsing incoming messages: the first line of a code block is preserved in message text and formatted content, and bold/strikethrough rewriting no longer corrupts fenced code. -7c26965: prevent attachment downloads from sending credentials to untrusted hosts -b6fa24c: guard attachment downloads across the remaining adapters Slack, Discord, and WhatsApp attachment downloads now go through the shared guarded downloader: private and internal addresses are refused (as URL literals, through DNS resolution, and after redirects), responses are capped at 25 MB, and downloads time out after 30 seconds. Slack sends the bot token only on hops to trusted Slack origins, and WhatsApp keeps its access token on Meta's media hosts and the configured Graph origin. Telegram enforces the same size cap and timeout with the Web Fetch API so downloads keep working in runtimes like Cloudflare Workers. `downloadAttachment` in `@chat-adapter/shared` now resolves `headers` per hop (pass a function to control what each redirect target receives), forwards the resolved headers to custom transports, and accepts an `onResponse` hook to reject unexpected final responses before the body is read. - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/x@4.39.0 ### Patch Changes - Updated dependencies [2ce2be0] - Updated dependencies [153bd96] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [bb92688] - Updated dependencies [5b538f6] - Updated dependencies [e71bfea] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - Updated dependencies [b6fa24c] - chat@4.39.0 - @chat-adapter/shared@4.39.0 ## @chat-adapter/state-ioredis@4.39.0 ### Patch Changes - Updated dependencies [2ce2be0] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [5b538f6] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - chat@4.39.0 ## @chat-adapter/state-memory@4.39.0 ### Patch Changes - Updated dependencies [2ce2be0] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [5b538f6] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - chat@4.39.0 ## @chat-adapter/state-pg@4.39.0 ### Patch Changes - Updated dependencies [2ce2be0] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [5b538f6] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - chat@4.39.0 ## @chat-adapter/state-redis@4.39.0 ### Patch Changes - Updated dependencies [2ce2be0] - Updated dependencies [16ea171] - Updated dependencies [169788b] - Updated dependencies [eddcd7e] - Updated dependencies [5b538f6] - Updated dependencies [929878b] - Updated dependencies [500b7e6] - chat@4.39.0 ## @chat-adapter/tests@4.39.0 Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@chat-adapter/web
npm package:
@chat-adapter/web
Web adapter for Chat SDK. Lets a chat-sdk bot serve a browser chat UI alongside Slack, Teams, Discord, etc. — the same bot.onDirectMessage(...) handler fires for every platform.
The adapter speaks the AI SDK UI message stream protocol, so React, Vue, and Svelte AI SDK clients work against the same server endpoint.
Documentation: chat-sdk.dev/adapters/official/web · Guides: vercel.com/kb/chat-sdk
Installation
pnpm add @chat-adapter/web ai
Then install the framework package that matches your UI:
| Framework | Package | Import from |
|---|---|---|
| React / Next.js | @ai-sdk/react |
@chat-adapter/web/react |
| Vue / Nuxt | @ai-sdk/vue |
@chat-adapter/web/vue |
| Svelte / SvelteKit | @ai-sdk/svelte |
@chat-adapter/web/svelte |
Scaffold with the CLI
To scaffold a new browser chat bot with the Web adapter preselected:
npx create-chat-sdk@latest my-bot --adapter web memory
Visit the adapters directory to see other available official and vendor-official adapters.
Quick start
Server
// lib/bot.ts
import { Chat } from "chat";
import { createWebAdapter } from "@chat-adapter/web";
import { createMemoryState } from "@chat-adapter/state-memory";
export const bot = new Chat({
userName: "mybot",
adapters: {
web: createWebAdapter({
userName: "mybot",
getUser: (req) => ({ id: getUserIdFromCookie(req) }),
}),
},
state: createMemoryState(),
});
bot.onDirectMessage(async (thread, message) => {
await thread.post(`You said: ${message.text}`);
});
// app/api/chat/route.ts
import { after } from "next/server";
import { bot } from "@/lib/bot";
export async function POST(request: Request): Promise<Response> {
return bot.webhooks.web(request, {
waitUntil: (task) => after(() => task),
});
}
Client
React
// app/chat/page.tsx
"use client";
import { useChat } from "@chat-adapter/web/react";
export default function ChatPage() {
const { messages, sendMessage, status, stop } = useChat();
// Render with `ai-elements` (<Conversation>, <Message>, <PromptInput>)
// or your own components — `messages`, `sendMessage`, `status` are the
// standard `@ai-sdk/react` API.
}
Vue
<!-- components/Chat.vue -->
<script setup lang="ts">
import { useChat } from "@chat-adapter/web/vue";
const chat = useChat({ api: "/api/chat" });
</script>
<template>
<div v-for="msg in chat.messages" :key="msg.id">
<template
v-for="(part, index) in msg.parts"
:key="`${msg.id}-${part.type}-${index}`"
>
<p v-if="part.type === 'text'">{{ part.text }}</p>
</template>
</div>
</template>
Svelte
<!-- Chat.svelte -->
<script lang="ts">
import { useChat } from "@chat-adapter/web/svelte";
const chat = useChat({ api: "/api/chat" });
</script>
{#each chat.messages as msg (msg.id)}
{#each msg.parts as part, index (`${msg.id}-${part.type}-${index}`)}
{#if part.type === "text"}<p>{part.text}</p>{/if}
{/each}
{/each}
Authentication
getUser is the security boundary for the Web adapter. Unlike Slack/Teams where the platform signs every webhook, web requests come straight from a browser — you must identify the caller yourself. Returning null causes the adapter to respond with HTTP 401 and no handler runs.
Plug in whatever your app already uses:
// NextAuth
createWebAdapter({
userName: "mybot",
getUser: async (req) => {
const session = await getServerSession(authOptions);
if (!session?.user) return null;
return { id: session.user.id, name: session.user.name };
},
});
// Clerk
createWebAdapter({
userName: "mybot",
getUser: async (req) => {
const { userId, sessionClaims } = await auth();
if (!userId) return null;
return { id: userId, name: sessionClaims?.name as string | undefined };
},
});
// Custom session cookie
createWebAdapter({
userName: "mybot",
getUser: async (req) => {
const sessionId = req.headers.get("cookie")?.match(/session=([^;]+)/)?.[1];
if (!sessionId) return null;
const user = await db.users.findBySession(sessionId);
return user ? { id: user.id, name: user.name } : null;
},
});
If getUser throws, the adapter returns 401 and logs the error. Don't include sensitive data in the error message — it's not surfaced to the client, but it is logged.
The resolved
user.idis embedded in the chat-sdk thread id (see Threading below). User ids containing:are rejected with HTTP 400 because they would corrupt the round-trip throughdecodeThreadId. If your auth provider emits ids with colons (e.g.provider:subclaims), normalize them insidegetUser— for example by base64-encoding.
Threading
By default, each useChat conversation maps to one chat-sdk thread:
web:{user.id}:{conversationId}
conversationId is the id field useChat sends in its request body. If your client supplies one (useChat({ id: "support-chat" })), it's reused across reloads; otherwise a fresh id is generated per request.
channel.messages and thread.messages are equivalent on web — the channel id is the thread id. This avoids cross-conversation bleed when persistMessageHistory is enabled and the same user has multiple useChat conversations open.
To override (for example, one thread per user regardless of conversation):
createWebAdapter({
userName: "mybot",
getUser: (req) => /* ... */,
threadIdFor: ({ user }) => `web:${user.id}:default`,
});
The encode/decode helpers are exposed on the adapter:
adapter.encodeThreadId({ userId: "u1", conversationId: "abc" });
// → "web:u1:abc"
adapter.decodeThreadId("web:u1:abc");
// → { userId: "u1", conversationId: "abc" }
Streaming
thread.post accepts an AsyncIterable<string | StreamChunk> and pumps deltas straight onto the SSE response body — no edit loop, no rate limiting. Plays nicely with the AI SDK's streamText:
import { streamText } from "ai";
// Bring your own model from any AI SDK provider
// (@ai-sdk/openai, @ai-sdk/anthropic, @ai-sdk/google, ...).
bot.onDirectMessage(async (thread, message) => {
const result = streamText({
model: myModel,
prompt: message.text,
});
await thread.post(result.textStream);
});
The adapter honors request.signal, so calling stop() from useChat short-circuits the iterator on the server. task_update and plan_update StreamChunks have no native v1 representation in the UI message stream and are dropped silently.
Message persistence
persistMessageHistory defaults to true. Web has no platform-side history API, so the only way for chat-sdk handlers to see prior turns via thread.messages / channel.messages is through the configured state adapter's message history cache. Set it to false only if your handler re-derives history from the request body's messages[] itself:
createWebAdapter({
userName: "mybot",
getUser: (req) => /* ... */,
persistMessageHistory: false,
});
The AI SDK client retains the conversation in its UI state and resends it on every request, so opting out is a valid choice for stateless handlers — but anything that calls await thread.messages won't see prior turns.
Framework helpers
@chat-adapter/web/react exports a thin wrapper around @ai-sdk/react's useChat preconfigured with DefaultChatTransport:
import { useChat } from "@chat-adapter/web/react";
const { messages, sendMessage, status, stop, regenerate } = useChat({
api: "/api/chat", // default
threadId: "support-1", // becomes useChat's `id` and the request body's `id`
});
| Option | Description |
|---|---|
api |
API endpoint for the Web adapter route. Defaults to /api/chat. |
threadId |
chat-sdk thread id — surfaces in the request body's id so the server can derive the chat-sdk thread id. Strongly recommended. Falls back to id from ChatInit. |
experimental_throttle |
Throttle wait in ms for chat messages and data updates. |
resume |
Whether to resume an ongoing chat generation stream. |
| ...rest | All other options pass through to @ai-sdk/react's useChat. |
For advanced configuration (custom transport, response interceptors, etc.) use @ai-sdk/react's useChat directly — there's nothing magical in the wrapper.
@chat-adapter/web/vue exports a useChat factory that returns a Vue-reactive Chat instance from @ai-sdk/vue:
<script setup lang="ts">
import { useChat } from "@chat-adapter/web/vue";
const chat = useChat({ api: "/api/chat", threadId: "support-1" });
</script>
<template>
<div v-for="msg in chat.messages" :key="msg.id">
<template
v-for="(part, index) in msg.parts"
:key="`${msg.id}-${part.type}-${index}`"
>
<p v-if="part.type === 'text'">{{ part.text }}</p>
</template>
</div>
</template>
@chat-adapter/web/svelte exports a useChat factory that returns a Svelte-reactive Chat instance from @ai-sdk/svelte:
<script lang="ts">
import { useChat } from "@chat-adapter/web/svelte";
const chat = useChat({ api: "/api/chat", threadId: "support-1" });
</script>
{#each chat.messages as msg (msg.id)}
{#each msg.parts as part, index (`${msg.id}-${part.type}-${index}`)}
{#if part.type === "text"}<p>{part.text}</p>{/if}
{/each}
{/each}
Unlike the React helper, Vue and Svelte return the Chat instance directly. Access chat.messages, chat.sendMessage(), chat.status, and chat.stop() on that object instead of destructuring.
Configuration
| Option | Required | Description |
|---|---|---|
userName |
Yes | Bot username. Required by chat-sdk for mention detection (@username) and seeds the bot identity for assistant messages. |
getUser |
Yes | (request: Request) => WebUser | null | Promise<WebUser | null>. Resolves the user from the inbound HTTP request. Returning null produces HTTP 401. |
persistMessageHistory |
No | Persist incoming message history in the configured state adapter. Default: true. |
threadIdFor |
No | Derive a chat-sdk thread id from the resolved user and the useChat conversation id. Default: web:{user.id}:{conversationId}. |
logger |
No | Logger instance (defaults to ConsoleLogger("info")). |
Features
Messaging
| Feature | Supported |
|---|---|
| Post message | Yes |
| Edit message | No (every assistant turn is a fresh streamed response) |
| Delete message | No |
| File uploads | No (deferred to v2) |
| Streaming | Native (SSE / UI message stream) |
| Scheduled messages | No |
Rich content
| Feature | Supported |
|---|---|
| Card format | Markdown only in v1 (cards/JSX deferred to v2) |
| Buttons | No |
| Tables | Yes (GFM markdown) |
| Modals | No |
Conversations
| Feature | Supported |
|---|---|
| Mentions | N/A (every web message routes as a DM) |
| Add reactions | No |
| Remove reactions | No |
| Typing indicator | N/A (useChat derives a status from the SSE response itself) |
| DMs | Yes — isDM: true for every thread |
Message history
| Feature | Supported |
|---|---|
| Fetch messages | Via state adapter cache (no platform API) |
| Fetch single message | No |
| Fetch thread info | Yes (synthesized) |
| Fetch channel messages | Via state adapter cache |
| List threads | No |
| Post channel message | No |
v1 scope
In: text + markdown, native streaming, DM-style routing, persisted message history, abort propagation via request.signal.
Out (deferred to v2): cards/JSX rendering, reactions, modals, file uploads, edit/delete, multi-tab proactive push.
Troubleshooting
Every request returns 401
getUseris returningnullor throwing. Add a log inside it to confirm the request actually carries the session you expect.- Cookies aren't being forwarded — check that
useChatis mounted on the same origin as/api/chat(or that your transport passes credentials).
Every request returns 400 "Invalid user id"
- The id returned by
getUsercontains a:character, which would corrupt the thread-id round-trip. Normalize the id insidegetUser(for example,id.replace(/:/g, "_")or base64-encode it).
useChat recreates state on every render
- Don't pass
id: undefinedtouseChat. The wrapper guards against this internally — but if you're calling@ai-sdk/react'suseChatdirectly, omitidrather than passingundefined.
thread.messages is empty
persistMessageHistoryisfalseand there is no platform-side history to fall back on. Either set it totrue(the default) or read history from the request body'smessages[]directly inside your handler.
AI Coding Agents
If you use an AI coding agent such as OpenAI Codex, Claude Code, or Cursor, install the Chat SDK skill so it knows the SDK APIs, adapter patterns, and project conventions before writing code.
npx skills add vercel/chat
The skill references bundled documentation in node_modules/chat/docs, plus adapter guides and starter templates in the published package.
You can also install the Vercel Plugin for a broader agent toolkit — it includes the Chat SDK skill alongside specialist agents, agent slash commands, and more:
npx plugins add vercel/vercel-plugin
The plugin is optional; the skill alone is enough to build with Chat SDK.
For agent-readable documentation, see chat-sdk.dev/llms.txt (page index) or chat-sdk.dev/llms-full.txt (full text).
License
MIT