
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
Framework adapters for mosadd. Subpath exports: @mosadd/ai/vercel, @mosadd/ai/langchain, @mosadd/ai/openai, @mosadd/ai/anthropic. Single package, atomic releases (Stripe Agent Toolkit pattern).
Framework adapters for mosADD — use the 64 mosADD toolkit tools directly from your favorite agent framework without spinning up the MCP server.
One package, four entrypoints, atomic releases — pattern stolen from Stripe Agent Toolkit.
| Subpath | Framework | What you get |
|---|---|---|
@mosadd/ai/vercel | Vercel AI SDK (ai package, v4+) | Record<string, VercelTool> for streamText / generateText |
@mosadd/ai/langchain | LangChain | Plain descriptors you wrap in DynamicStructuredTool |
@mosadd/ai/openai | OpenAI Agents SDK | FunctionTool[] for the tools: array on Agent |
@mosadd/ai/anthropic | Anthropic SDK | [{ name, description, input_schema }] for Messages API |
import { mosadd } from "@mosadd/ai/vercel";
import { streamText } from "ai";
const tools = mosadd({
modules: ["mDM", "mIRC"],
supabase: {
url: process.env.MOSADD_SUPABASE_URL!,
anonKey: process.env.MOSADD_SUPABASE_ANON_KEY!,
userJwt: process.env.MOSADD_USER_JWT!,
},
});
await streamText({ model: openai("gpt-5"), tools, messages });
import { mosadd } from "@mosadd/ai/langchain";
import { DynamicStructuredTool } from "@langchain/core/tools";
import { createReactAgent } from "@langchain/langgraph/prebuilt";
const tools = mosadd({ modules: ["mDM"] }).map(
(t) => new DynamicStructuredTool(t),
);
const agent = createReactAgent({ llm, tools });
import { mosadd } from "@mosadd/ai/openai";
import { Agent, run } from "@openai/agents";
const agent = new Agent({
name: "mosadd-helper",
instructions: "Manage the user's mosADD communications when asked.",
tools: mosadd({ modules: ["mDM", "mIRC", "mp0st"] }),
});
await run(agent, "Send Alice a message saying I'll be late.");
import Anthropic from "@anthropic-ai/sdk";
import { mosaddTools, executeMosaddToolCall } from "@mosadd/ai/anthropic";
const client = new Anthropic();
const tools = mosaddTools({ modules: ["mDM", "mIRC"] });
let response = await client.messages.create({
model: "claude-opus-4-7",
max_tokens: 1024,
tools,
messages: [{ role: "user", content: "Post 'standup in 5' to the #team channel." }],
});
while (response.stop_reason === "tool_use") {
// … find tool_use blocks, run executeMosaddToolCall, append tool_result, loop …
}
interface MosaddOptions {
/** Filter to specific m* modules. Defaults to ALL shipped tools. */
modules?: string[];
/** BYOK Supabase creds. Falls back to env vars if omitted. */
supabase?: {
url: string;
anonKey: string;
userJwt?: string;
};
/** Log level. */
logLevel?: "debug" | "info" | "warn" | "error";
}
If supabase is omitted, the adapters read from env:
MOSADD_SUPABASE_URLMOSADD_SUPABASE_ANON_KEYMOSADD_USER_JWTThis adapter pack stays minimal on purpose:
ai, @langchain/*, @openai/agents, or @anthropic-ai/sdk. We return shapes those packages happen to accept. The consumer brings the framework.packages/mcp.strict: false). v3.0.0-alpha.1 brings exact mode via zod-to-json-schema.Apache-2.0. See LICENSE.
FAQs
Framework adapters for mosadd. Subpath exports: @mosadd/ai/vercel, @mosadd/ai/langchain, @mosadd/ai/openai, @mosadd/ai/anthropic. Single package, atomic releases (Stripe Agent Toolkit pattern).
We found that @mosadd/ai demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.