feat(ag-ui): execute native client tools with owned continuations

[blove]

Native AG-UI sessions can receive function calls but cannot execute browser handlers or carry their results into a follow-up request. Add an optional typed catalog, command-owned sequential execution, and fresh physical continuations with the complete native history. Final root observations govern admission; cancellation, unknown calls, conflicting history, and ambiguous delivery block further execution.

Extend the private packed candidate with the native tool types and a declaration-only core tools dependency. Verify one submission through the actual canonical Python graph and locked adapter in nonstream and streaming modes, including exact result echoes and owned resource cleanup. CI now prepares the frozen Python 3.12 environment before these checks. The five-tool React example follows separately.

Validation:

• 646 runtime tests and runtime type checks; cancellation/getter and HTTP regressions.
• Installed NodeNext and Bundler declarations; full packed candidate browser and provider fixtures.
• Five genuine canonical scenarios, including automatic continuation and cancellation negatives, in independently bootstrapped clean environments.
• 28 fixture/package checks and 324 CI workflow/scope checks; independent spec and quality reviews.
• 375 migration-governance checks; updated facts and private dispositions for the two native modules.

The canonical proofs use an offline scripted model. Hosted provider behavior and durable exactly-once execution remain outside this change.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
threadplane	Ready	Preview	Oct 13, 2026 3:15am UTC