Give every user an agent, right inside your app.

import { Vestra, tool } from '@vestra/sdk';

// get_booking is your API. It only reads, so Bash calls it freely.
const get_booking = tool({
  name: 'get_booking',
  description: 'A booking, and the flights it can move to.',
  input: { ref: 'string' },
  read_only: true,
  run: ({ ref }) => api.booking(ref),
});
// book_flight pays, so it waits. Its card shows each input.
const book_flight = tool({
  name: 'book_flight',
  description: 'Books the new flight and charges its fare.',
  input: { flight: 'string', fare: 'string', refund: 'string' },
  run: (agreed, call) => api.rebook(call.user, agreed),
});

const vestra = new Vestra({ tools: [get_booking, book_flight] });
const run = vestra.user('traveller-42')
  .ask('My 6am flight got cancelled. Get me on the next one.');

for await (const event of run) {
  if (event.type !== 'interaction.created') continue;
  if (event.interaction?.type !== 'approval') continue;
  // Bash stops here for your user's yes
  const yes = await app.confirm(event.user, event.interaction);
  await event.answer({ approve: yes, present_user: true });
}
console.log(await run.text());

from vestra import Vestra, tool



# get_booking is your API. It only reads, so Bash calls it freely.
@tool(
    description="A booking, and the flights it can move to.",
    input={"ref": "string"},
    read_only=True,
)
def get_booking(ref):
    return api.booking(ref)


# book_flight pays, so it waits. Its card shows each input.
@tool(
    description="Books the new flight and charges its fare.",
    input={"flight": "string", "fare": "string", "refund": "string"},
)
def book_flight(flight, fare, refund, call):
    return api.rebook(call.user, flight=flight, fare=fare, refund=refund)


vestra = Vestra(tools=[get_booking, book_flight])
run = vestra.user("traveller-42").ask(
    "My 6am flight got cancelled. Get me on the next one."
)

for event in run:
    if event.type != "interaction.created" or not event.interaction:
        continue
    if event.interaction.type == "approval":
        # Bash stops here for your user's yes
        yes = app.confirm(event.user, event.interaction)
        event.answer(approve=yes, present_user=True)
print(run.text())

# Paste your test key once; vestra keeps it on this computer.
vestra login

# tools.mjs answers the two tools your vestra.yaml declares.
# get_booking is your API. It only reads, so Bash calls it freely.
vestra ask "My 6am flight got cancelled. Get me on the next one." \
  --user traveller-42 --tools ./tools.mjs

# Bash stops here for your user's yes. vestra asks right here,
# or answer from your server by the id it names.
vestra answer int_3j9 --approve --present-user

# Your tools ride on the ask.
# get_booking is your API. It only reads, so Bash calls it freely.
curl -N "$VESTRA_BASE_URL/v1/conversations" \
  -H "Authorization: Bearer $VESTRA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "user_id": "traveller-42",
    "message": "My 6am flight got cancelled. Get me on the next one.",
    "tools": [{
      "name": "get_booking",
      "description": "A booking, and the flights it can move to.",
      "input_schema": { "type": "object", "properties": {
        "ref": { "type": "string" } } },
      "read_only": true
    }, {
      "name": "book_flight",
      "description": "Books the new flight and charges its fare.",
      "input_schema": { "type": "object", "properties": {
        "flight": { "type": "string" }, "fare": { "type": "string" },
        "refund": { "type": "string" } } }
    }],
    "stream": true
  }'

# Each call to your tools arrives as interaction.created, type tool_call.
# Answer it with what your API returns.
curl "$VESTRA_BASE_URL/v1/interactions/call_4mz/answer" \
  -H "Authorization: Bearer $VESTRA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "output": { "ref": "TN-48213", "next": "6E 2171, 09:15, Rs 5,420" } }'

# Bash stops here for your user's yes.
# Show the card, then answer with what they chose.
curl "$VESTRA_BASE_URL/v1/interactions/int_3j9/answer" \
  -H "Authorization: Bearer $VESTRA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "approve": true, "present_user": true }'

The ask, as a tool call. Your tools are your setup's; your server answers their calls.

{
  "method": "tools/call",
  "params": {
    "name": "ask",
    "arguments": {
      "user": "traveller-42",
      "message": "My 6am flight got cancelled. Get me on the next one."
    }
  }
}

Your user's yes, once they saw the card.

{
  "method": "tools/call",
  "params": {
    "name": "answer",
    "arguments": { "interaction": "int_3j9", "approve": true, "present_user": true }
  }
}