@alquimia-ai/tools 2.5.0 → 2.8.0

package/dist/proxy.js

@@ -48,13 +48,56 @@ function pickTraceHeader(request) {
   if (fromQuery) return { "x-trace-parent": fromQuery };
   return {};
 }
+var DECISION_HEADER_NAMES = [
+  "taskid",
+  "parenttaskid",
+  "sessionid",
+  "userid",
+  "assistantid",
+  "agentspaceid",
+  "channelid",
+  "depth",
+  // Runtime v0.5.1: `CommonAttributes.version_tag` (alias `versiontag`)
+  // pins the decision to the agentspace version that ran the turn.
+  "versiontag"
+];
 function createAlquimiaProxyHandler(config) {
   const baseUrl = config.assistantBaseUrl.replace(/\/$/, "");
   const inferRoute = config.inferRoute ?? "event/infer";
   const streamRoute = config.streamRoute ?? "event/stream";
   const blobUploadRoute = config.blobUploadRoute ?? "context/blob/upload";
   const toolCompletionRoute = config.toolCompletionRoute ?? "event/tool-completion";
+  const toolApprovalRoute = config.toolApprovalRoute ?? "event/tool-approval";
   const authHeader = { Authorization: `Bearer ${config.apiKey}` };
+  async function forwardDecision(request, route, name) {
+    try {
+      const body = await request.text();
+      const headers = {
+        "Content-Type": "application/json",
+        ...authHeader
+      };
+      for (const name2 of DECISION_HEADER_NAMES) {
+        const value = request.headers.get(name2);
+        if (value) headers[name2] = value;
+      }
+      Object.assign(headers, pickTraceHeader(request));
+      const response = await fetch(`${baseUrl}/${route}`, {
+        method: "POST",
+        headers,
+        body
+      });
+      return new Response(await response.text(), {
+        status: response.status,
+        headers: { "Content-Type": "application/json" }
+      });
+    } catch (error) {
+      console.error(`AlquimiaProxy ${name} exception:`, error);
+      return new Response(
+        JSON.stringify({ error: `Failed to forward ${name} request` }),
+        { status: 500, headers: { "Content-Type": "application/json" } }
+      );
+    }
+  }
   return {
     async handleInfer(request, pathSuffix) {
       try {
@@ -182,43 +225,10 @@ function createAlquimiaProxyHandler(config) {
       }
     },
     async handleToolCompletion(request) {
-      try {
-        const body = await request.text();
-        const headers = {
-          "Content-Type": "application/json",
-          ...authHeader
-        };
-        const CORRELATION_HEADERS = [
-          "taskid",
-          "parenttaskid",
-          "sessionid",
-          "userid",
-          "assistantid",
-          "agentspaceid",
-          "channelid",
-          "depth"
-        ];
-        for (const name of CORRELATION_HEADERS) {
-          const value = request.headers.get(name);
-          if (value) headers[name] = value;
-        }
-        Object.assign(headers, pickTraceHeader(request));
-        const response = await fetch(`${baseUrl}/${toolCompletionRoute}`, {
-          method: "POST",
-          headers,
-          body
-        });
-        return new Response(await response.text(), {
-          status: response.status,
-          headers: { "Content-Type": "application/json" }
-        });
-      } catch (error) {
-        console.error("AlquimiaProxy handleToolCompletion exception:", error);
-        return new Response(
-          JSON.stringify({ error: "Failed to forward tool-completion request" }),
-          { status: 500, headers: { "Content-Type": "application/json" } }
-        );
-      }
+      return forwardDecision(request, toolCompletionRoute, "tool-completion");
+    },
+    async handleToolApproval(request) {
+      return forwardDecision(request, toolApprovalRoute, "tool-approval");
     }
   };
 }

package/dist/proxy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/proxy.ts"],"sourcesContent":["export interface ProxyConfig {\n  assistantBaseUrl: string;\n  apiKey: string;\n  inferRoute?: string;            // default: 'event/infer'\n  streamRoute?: string;           // default: 'event/stream'\n  blobUploadRoute?: string;       // default: 'context/blob/upload'\n  toolCompletionRoute?: string;   // default: 'event/tool-completion'\n}\n\nexport interface AlquimiaProxyHandler {\n  handleInfer(_request: Request, _pathSuffix: string): Promise<Response>;\n  handleStream(_request: Request, _pathSuffix: string): Promise<Response>;\n  handleBlobUpload(_request: Request): Promise<Response>;\n  handleToolCompletion(_request: Request): Promise<Response>;\n}\n\nconst IDENTITY_HEADER_NAMES = [\n  'task-id',\n  'parent-task-id',\n  'session-id',\n  'user-id',\n  'assistant-id',\n  'agentspace-id',\n  'channel-id',\n  'depth',\n] as const;\n\nfunction pickIdentityHeaders(request: Request): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const name of IDENTITY_HEADER_NAMES) {\n    const value = request.headers.get(name);\n    if (value) out[name] = value;\n  }\n  return out;\n}\n\n/**\n * Trace-context propagation. The proxy builds a fresh request against the\n * runtime, so anything the caller set is dropped unless it is copied over\n * explicitly — which is how `x-trace-parent` stopped reaching the runtime when\n * the direct-to-runtime client was replaced by this proxy.\n *\n * The header is the transport wherever the caller can set one. `EventSource`\n * cannot, so the stream route also accepts the same value as a `trace_parent`\n * query param.\n */\nfunction pickTraceHeader(request: Request): Record<string, string> {\n  const fromHeader = request.headers.get('x-trace-parent');\n  if (fromHeader) return { 'x-trace-parent': fromHeader };\n\n  const fromQuery = new URL(request.url).searchParams.get('trace_parent');\n  if (fromQuery) return { 'x-trace-parent': fromQuery };\n\n  return {};\n}\n\nexport function createAlquimiaProxyHandler(config: ProxyConfig): AlquimiaProxyHandler {\n  const baseUrl = config.assistantBaseUrl.replace(/\\/$/, '');\n  const inferRoute = config.inferRoute ?? 'event/infer';\n  const streamRoute = config.streamRoute ?? 'event/stream';\n  const blobUploadRoute = config.blobUploadRoute ?? 'context/blob/upload';\n  const toolCompletionRoute = config.toolCompletionRoute ?? 'event/tool-completion';\n  const authHeader = { Authorization: `Bearer ${config.apiKey}` };\n\n  return {\n    async handleInfer(request: Request, pathSuffix: string): Promise<Response> {\n      try {\n        const body = await request.json();\n        const url = new URL(request.url);\n        const querySuffix = url.searchParams.toString()\n          ? `?${url.searchParams.toString()}`\n          : '';\n        const slug = pathSuffix.replace(/^\\/+|\\/+$/g, '');\n        const targetUrl = `${baseUrl}/${inferRoute}/${slug}${querySuffix}`;\n\n\n        const response = await fetch(targetUrl, {\n          method: 'POST',\n          headers: {\n            'Content-Type': 'application/json',\n            ...authHeader,\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n          body: JSON.stringify(body),\n        });\n\n        if (!response.ok) {\n          const errorJson = await response.json().catch(() => ({}));\n          console.error('AlquimiaProxy handleInfer error:', {\n            status: response.status,\n            statusText: response.statusText,\n            body: errorJson,\n          });\n          return new Response(\n            JSON.stringify({\n              status: response.status,\n              statusText: response.statusText,\n              ...errorJson,\n            }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        return new Response(response.body, {\n          status: 200,\n          headers: {\n            'Access-Control-Allow-Origin': '*',\n            'Access-Control-Allow-Methods': 'POST, OPTIONS',\n            'Access-Control-Allow-Headers': 'Content-Type, Content-Encoding',\n          },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleInfer exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward infer request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleStream(request: Request, pathSuffix: string): Promise<Response> {\n      try {\n        const targetUrl = `${baseUrl}/${streamRoute}/${pathSuffix}`;\n\n        const response = await fetch(targetUrl, {\n          headers: {\n            'Content-Type': 'application/json',\n            ...authHeader,\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n        });\n\n        if (!response.ok) {\n          const errorJson = await response.json().catch(() => ({}));\n          console.error('AlquimiaProxy handleStream error:', {\n            status: response.status,\n            statusText: response.statusText,\n            body: errorJson,\n          });\n          return new Response(\n            JSON.stringify({\n              error: errorJson.message || response.statusText || 'Failed to forward stream',\n              ...errorJson,\n            }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        return new Response(response.body, {\n          status: 200,\n          headers: {\n            'Content-Type': 'text/event-stream',\n            'Cache-Control': 'no-cache',\n            Connection: 'keep-alive',\n          },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleStream exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward stream request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleBlobUpload(request: Request): Promise<Response> {\n      try {\n        const targetUrl = `${baseUrl}/${blobUploadRoute}`;\n        const contentType = request.headers.get('Content-Type') ?? '';\n\n        const response = await fetch(targetUrl, {\n          method: 'POST',\n          headers: {\n            ...authHeader,\n            ...(contentType && { 'Content-Type': contentType }),\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n          body: request.body,\n          duplex: 'half',\n        } as RequestInit);\n\n        if (!response.ok) {\n          return new Response(\n            JSON.stringify({ error: 'Failed to upload blob', status: response.status }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        const responseText = await response.text();\n        return new Response(responseText, {\n          status: 200,\n          headers: { 'Content-Type': 'application/json' },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleBlobUpload exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward blob upload request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleToolCompletion(request: Request): Promise<Response> {\n      try {\n        const body = await request.text();\n        const headers: Record<string, string> = {\n          'Content-Type': 'application/json',\n          ...authHeader,\n        };\n        // Forward the runtime's tool-completion correlation headers verbatim\n        // (non-hyphenated names, per the runtime OpenAPI). These route the\n        // completion to the parked task so the SSE stream resumes.\n        const CORRELATION_HEADERS = [\n          'taskid',\n          'parenttaskid',\n          'sessionid',\n          'userid',\n          'assistantid',\n          'agentspaceid',\n          'channelid',\n          'depth',\n        ];\n        for (const name of CORRELATION_HEADERS) {\n          const value = request.headers.get(name);\n          if (value) headers[name] = value;\n        }\n        Object.assign(headers, pickTraceHeader(request));\n\n        const response = await fetch(`${baseUrl}/${toolCompletionRoute}`, {\n          method: 'POST',\n          headers,\n          body,\n        });\n\n        return new Response(await response.text(), {\n          status: response.status,\n          headers: { 'Content-Type': 'application/json' },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleToolCompletion exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward tool-completion request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBA,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,oBAAoB,SAA0C;AACrE,QAAM,MAA8B,CAAC;AACrC,aAAW,QAAQ,uBAAuB;AACxC,UAAM,QAAQ,QAAQ,QAAQ,IAAI,IAAI;AACtC,QAAI,MAAO,KAAI,IAAI,IAAI;AAAA,EACzB;AACA,SAAO;AACT;AAYA,SAAS,gBAAgB,SAA0C;AACjE,QAAM,aAAa,QAAQ,QAAQ,IAAI,gBAAgB;AACvD,MAAI,WAAY,QAAO,EAAE,kBAAkB,WAAW;AAEtD,QAAM,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,cAAc;AACtE,MAAI,UAAW,QAAO,EAAE,kBAAkB,UAAU;AAEpD,SAAO,CAAC;AACV;AAEO,SAAS,2BAA2B,QAA2C;AACpF,QAAM,UAAU,OAAO,iBAAiB,QAAQ,OAAO,EAAE;AACzD,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,cAAc,OAAO,eAAe;AAC1C,QAAM,kBAAkB,OAAO,mBAAmB;AAClD,QAAM,sBAAsB,OAAO,uBAAuB;AAC1D,QAAM,aAAa,EAAE,eAAe,UAAU,OAAO,MAAM,GAAG;AAE9D,SAAO;AAAA,IACL,MAAM,YAAY,SAAkB,YAAuC;AACzE,UAAI;AACF,cAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,cAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,cAAM,cAAc,IAAI,aAAa,SAAS,IAC1C,IAAI,IAAI,aAAa,SAAS,CAAC,KAC/B;AACJ,cAAM,OAAO,WAAW,QAAQ,cAAc,EAAE;AAChD,cAAM,YAAY,GAAG,OAAO,IAAI,UAAU,IAAI,IAAI,GAAG,WAAW;AAGhE,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,GAAG;AAAA,YACH,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,UACA,MAAM,KAAK,UAAU,IAAI;AAAA,QAC3B,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AAChB,gBAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,kBAAQ,MAAM,oCAAoC;AAAA,YAChD,QAAQ,SAAS;AAAA,YACjB,YAAY,SAAS;AAAA,YACrB,MAAM;AAAA,UACR,CAAC;AACD,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU;AAAA,cACb,QAAQ,SAAS;AAAA,cACjB,YAAY,SAAS;AAAA,cACrB,GAAG;AAAA,YACL,CAAC;AAAA,YACD,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,eAAO,IAAI,SAAS,SAAS,MAAM;AAAA,UACjC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,+BAA+B;AAAA,YAC/B,gCAAgC;AAAA,YAChC,gCAAgC;AAAA,UAClC;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,wCAAwC,KAAK;AAC3D,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,kCAAkC,CAAC;AAAA,UAC3D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,aAAa,SAAkB,YAAuC;AAC1E,UAAI;AACF,cAAM,YAAY,GAAG,OAAO,IAAI,WAAW,IAAI,UAAU;AAEzD,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,GAAG;AAAA,YACH,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,QACF,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AAChB,gBAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,kBAAQ,MAAM,qCAAqC;AAAA,YACjD,QAAQ,SAAS;AAAA,YACjB,YAAY,SAAS;AAAA,YACrB,MAAM;AAAA,UACR,CAAC;AACD,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU;AAAA,cACb,OAAO,UAAU,WAAW,SAAS,cAAc;AAAA,cACnD,GAAG;AAAA,YACL,CAAC;AAAA,YACD,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,eAAO,IAAI,SAAS,SAAS,MAAM;AAAA,UACjC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,iBAAiB;AAAA,YACjB,YAAY;AAAA,UACd;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,yCAAyC,KAAK;AAC5D,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,mCAAmC,CAAC;AAAA,UAC5D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,iBAAiB,SAAqC;AAC1D,UAAI;AACF,cAAM,YAAY,GAAG,OAAO,IAAI,eAAe;AAC/C,cAAM,cAAc,QAAQ,QAAQ,IAAI,cAAc,KAAK;AAE3D,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,GAAG;AAAA,YACH,GAAI,eAAe,EAAE,gBAAgB,YAAY;AAAA,YACjD,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,UACA,MAAM,QAAQ;AAAA,UACd,QAAQ;AAAA,QACV,CAAgB;AAEhB,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU,EAAE,OAAO,yBAAyB,QAAQ,SAAS,OAAO,CAAC;AAAA,YAC1E,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,cAAM,eAAe,MAAM,SAAS,KAAK;AACzC,eAAO,IAAI,SAAS,cAAc;AAAA,UAChC,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAChD,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,6CAA6C,KAAK;AAChE,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,wCAAwC,CAAC;AAAA,UACjE,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,qBAAqB,SAAqC;AAC9D,UAAI;AACF,cAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,cAAM,UAAkC;AAAA,UACtC,gBAAgB;AAAA,UAChB,GAAG;AAAA,QACL;AAIA,cAAM,sBAAsB;AAAA,UAC1B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,mBAAW,QAAQ,qBAAqB;AACtC,gBAAM,QAAQ,QAAQ,QAAQ,IAAI,IAAI;AACtC,cAAI,MAAO,SAAQ,IAAI,IAAI;AAAA,QAC7B;AACA,eAAO,OAAO,SAAS,gBAAgB,OAAO,CAAC;AAE/C,cAAM,WAAW,MAAM,MAAM,GAAG,OAAO,IAAI,mBAAmB,IAAI;AAAA,UAChE,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,QACF,CAAC;AAED,eAAO,IAAI,SAAS,MAAM,SAAS,KAAK,GAAG;AAAA,UACzC,QAAQ,SAAS;AAAA,UACjB,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAChD,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,iDAAiD,KAAK;AACpE,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,4CAA4C,CAAC;AAAA,UACrE,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/proxy.ts"],"sourcesContent":["export interface ProxyConfig {\n  assistantBaseUrl: string;\n  apiKey: string;\n  inferRoute?: string;            // default: 'event/infer'\n  streamRoute?: string;           // default: 'event/stream'\n  blobUploadRoute?: string;       // default: 'context/blob/upload'\n  toolCompletionRoute?: string;   // default: 'event/tool-completion'\n  toolApprovalRoute?: string;     // default: 'event/tool-approval'\n}\n\nexport interface AlquimiaProxyHandler {\n  handleInfer(_request: Request, _pathSuffix: string): Promise<Response>;\n  handleStream(_request: Request, _pathSuffix: string): Promise<Response>;\n  handleBlobUpload(_request: Request): Promise<Response>;\n  handleToolCompletion(_request: Request): Promise<Response>;\n  handleToolApproval(_request: Request): Promise<Response>;\n}\n\nconst IDENTITY_HEADER_NAMES = [\n  'task-id',\n  'parent-task-id',\n  'session-id',\n  'user-id',\n  'assistant-id',\n  'agentspace-id',\n  'channel-id',\n  'depth',\n] as const;\n\nfunction pickIdentityHeaders(request: Request): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const name of IDENTITY_HEADER_NAMES) {\n    const value = request.headers.get(name);\n    if (value) out[name] = value;\n  }\n  return out;\n}\n\n/**\n * Trace-context propagation. The proxy builds a fresh request against the\n * runtime, so anything the caller set is dropped unless it is copied over\n * explicitly — which is how `x-trace-parent` stopped reaching the runtime when\n * the direct-to-runtime client was replaced by this proxy.\n *\n * The header is the transport wherever the caller can set one. `EventSource`\n * cannot, so the stream route also accepts the same value as a `trace_parent`\n * query param.\n */\nfunction pickTraceHeader(request: Request): Record<string, string> {\n  const fromHeader = request.headers.get('x-trace-parent');\n  if (fromHeader) return { 'x-trace-parent': fromHeader };\n\n  const fromQuery = new URL(request.url).searchParams.get('trace_parent');\n  if (fromQuery) return { 'x-trace-parent': fromQuery };\n\n  return {};\n}\n\n/**\n * Correlation headers for tool-completion and tool-approval. Both routes bind\n * them through the runtime's `CommonAttributes` header model, whose aliases\n * have no separator — not the kebab-case identity set infer/stream use. They\n * route the decision to the parked task so the SSE stream resumes, and\n * `agentspaceid` is what the runtime authorizes a non-admin caller against.\n */\nconst DECISION_HEADER_NAMES = [\n  'taskid',\n  'parenttaskid',\n  'sessionid',\n  'userid',\n  'assistantid',\n  'agentspaceid',\n  'channelid',\n  'depth',\n  // Runtime v0.5.1: `CommonAttributes.version_tag` (alias `versiontag`)\n  // pins the decision to the agentspace version that ran the turn.\n  'versiontag',\n] as const;\n\nexport function createAlquimiaProxyHandler(config: ProxyConfig): AlquimiaProxyHandler {\n  const baseUrl = config.assistantBaseUrl.replace(/\\/$/, '');\n  const inferRoute = config.inferRoute ?? 'event/infer';\n  const streamRoute = config.streamRoute ?? 'event/stream';\n  const blobUploadRoute = config.blobUploadRoute ?? 'context/blob/upload';\n  const toolCompletionRoute = config.toolCompletionRoute ?? 'event/tool-completion';\n  const toolApprovalRoute = config.toolApprovalRoute ?? 'event/tool-approval';\n  const authHeader = { Authorization: `Bearer ${config.apiKey}` };\n\n  /**\n   * Forward a one-shot decision (tool completion or approval). The runtime's\n   * status and body pass through untouched: the 409s on these routes differ\n   * only in their `detail` text, and the caller needs that to tell \"already\n   * decided\" from \"answer it on the original channel\".\n   */\n  async function forwardDecision(request: Request, route: string, name: string): Promise<Response> {\n    try {\n      const body = await request.text();\n      const headers: Record<string, string> = {\n        'Content-Type': 'application/json',\n        ...authHeader,\n      };\n      for (const name of DECISION_HEADER_NAMES) {\n        const value = request.headers.get(name);\n        if (value) headers[name] = value;\n      }\n      Object.assign(headers, pickTraceHeader(request));\n\n      const response = await fetch(`${baseUrl}/${route}`, {\n        method: 'POST',\n        headers,\n        body,\n      });\n\n      return new Response(await response.text(), {\n        status: response.status,\n        headers: { 'Content-Type': 'application/json' },\n      });\n    } catch (error) {\n      console.error(`AlquimiaProxy ${name} exception:`, error);\n      return new Response(\n        JSON.stringify({ error: `Failed to forward ${name} request` }),\n        { status: 500, headers: { 'Content-Type': 'application/json' } }\n      );\n    }\n  }\n\n  return {\n    async handleInfer(request: Request, pathSuffix: string): Promise<Response> {\n      try {\n        const body = await request.json();\n        const url = new URL(request.url);\n        const querySuffix = url.searchParams.toString()\n          ? `?${url.searchParams.toString()}`\n          : '';\n        const slug = pathSuffix.replace(/^\\/+|\\/+$/g, '');\n        const targetUrl = `${baseUrl}/${inferRoute}/${slug}${querySuffix}`;\n\n\n        const response = await fetch(targetUrl, {\n          method: 'POST',\n          headers: {\n            'Content-Type': 'application/json',\n            ...authHeader,\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n          body: JSON.stringify(body),\n        });\n\n        if (!response.ok) {\n          const errorJson = await response.json().catch(() => ({}));\n          console.error('AlquimiaProxy handleInfer error:', {\n            status: response.status,\n            statusText: response.statusText,\n            body: errorJson,\n          });\n          return new Response(\n            JSON.stringify({\n              status: response.status,\n              statusText: response.statusText,\n              ...errorJson,\n            }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        return new Response(response.body, {\n          status: 200,\n          headers: {\n            'Access-Control-Allow-Origin': '*',\n            'Access-Control-Allow-Methods': 'POST, OPTIONS',\n            'Access-Control-Allow-Headers': 'Content-Type, Content-Encoding',\n          },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleInfer exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward infer request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleStream(request: Request, pathSuffix: string): Promise<Response> {\n      try {\n        const targetUrl = `${baseUrl}/${streamRoute}/${pathSuffix}`;\n\n        const response = await fetch(targetUrl, {\n          headers: {\n            'Content-Type': 'application/json',\n            ...authHeader,\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n        });\n\n        if (!response.ok) {\n          const errorJson = await response.json().catch(() => ({}));\n          console.error('AlquimiaProxy handleStream error:', {\n            status: response.status,\n            statusText: response.statusText,\n            body: errorJson,\n          });\n          return new Response(\n            JSON.stringify({\n              error: errorJson.message || response.statusText || 'Failed to forward stream',\n              ...errorJson,\n            }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        return new Response(response.body, {\n          status: 200,\n          headers: {\n            'Content-Type': 'text/event-stream',\n            'Cache-Control': 'no-cache',\n            Connection: 'keep-alive',\n          },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleStream exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward stream request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleBlobUpload(request: Request): Promise<Response> {\n      try {\n        const targetUrl = `${baseUrl}/${blobUploadRoute}`;\n        const contentType = request.headers.get('Content-Type') ?? '';\n\n        const response = await fetch(targetUrl, {\n          method: 'POST',\n          headers: {\n            ...authHeader,\n            ...(contentType && { 'Content-Type': contentType }),\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n          body: request.body,\n          duplex: 'half',\n        } as RequestInit);\n\n        if (!response.ok) {\n          return new Response(\n            JSON.stringify({ error: 'Failed to upload blob', status: response.status }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        const responseText = await response.text();\n        return new Response(responseText, {\n          status: 200,\n          headers: { 'Content-Type': 'application/json' },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleBlobUpload exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward blob upload request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleToolCompletion(request: Request): Promise<Response> {\n      return forwardDecision(request, toolCompletionRoute, 'tool-completion');\n    },\n\n    async handleToolApproval(request: Request): Promise<Response> {\n      return forwardDecision(request, toolApprovalRoute, 'tool-approval');\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAkBA,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,oBAAoB,SAA0C;AACrE,QAAM,MAA8B,CAAC;AACrC,aAAW,QAAQ,uBAAuB;AACxC,UAAM,QAAQ,QAAQ,QAAQ,IAAI,IAAI;AACtC,QAAI,MAAO,KAAI,IAAI,IAAI;AAAA,EACzB;AACA,SAAO;AACT;AAYA,SAAS,gBAAgB,SAA0C;AACjE,QAAM,aAAa,QAAQ,QAAQ,IAAI,gBAAgB;AACvD,MAAI,WAAY,QAAO,EAAE,kBAAkB,WAAW;AAEtD,QAAM,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,cAAc;AACtE,MAAI,UAAW,QAAO,EAAE,kBAAkB,UAAU;AAEpD,SAAO,CAAC;AACV;AASA,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA,EAGA;AACF;AAEO,SAAS,2BAA2B,QAA2C;AACpF,QAAM,UAAU,OAAO,iBAAiB,QAAQ,OAAO,EAAE;AACzD,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,cAAc,OAAO,eAAe;AAC1C,QAAM,kBAAkB,OAAO,mBAAmB;AAClD,QAAM,sBAAsB,OAAO,uBAAuB;AAC1D,QAAM,oBAAoB,OAAO,qBAAqB;AACtD,QAAM,aAAa,EAAE,eAAe,UAAU,OAAO,MAAM,GAAG;AAQ9D,iBAAe,gBAAgB,SAAkB,OAAe,MAAiC;AAC/F,QAAI;AACF,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,UAAkC;AAAA,QACtC,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AACA,iBAAWA,SAAQ,uBAAuB;AACxC,cAAM,QAAQ,QAAQ,QAAQ,IAAIA,KAAI;AACtC,YAAI,MAAO,SAAQA,KAAI,IAAI;AAAA,MAC7B;AACA,aAAO,OAAO,SAAS,gBAAgB,OAAO,CAAC;AAE/C,YAAM,WAAW,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,IAAI;AAAA,QAClD,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAED,aAAO,IAAI,SAAS,MAAM,SAAS,KAAK,GAAG;AAAA,QACzC,QAAQ,SAAS;AAAA,QACjB,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,OAAO;AACd,cAAQ,MAAM,iBAAiB,IAAI,eAAe,KAAK;AACvD,aAAO,IAAI;AAAA,QACT,KAAK,UAAU,EAAE,OAAO,qBAAqB,IAAI,WAAW,CAAC;AAAA,QAC7D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,YAAY,SAAkB,YAAuC;AACzE,UAAI;AACF,cAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,cAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,cAAM,cAAc,IAAI,aAAa,SAAS,IAC1C,IAAI,IAAI,aAAa,SAAS,CAAC,KAC/B;AACJ,cAAM,OAAO,WAAW,QAAQ,cAAc,EAAE;AAChD,cAAM,YAAY,GAAG,OAAO,IAAI,UAAU,IAAI,IAAI,GAAG,WAAW;AAGhE,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,GAAG;AAAA,YACH,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,UACA,MAAM,KAAK,UAAU,IAAI;AAAA,QAC3B,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AAChB,gBAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,kBAAQ,MAAM,oCAAoC;AAAA,YAChD,QAAQ,SAAS;AAAA,YACjB,YAAY,SAAS;AAAA,YACrB,MAAM;AAAA,UACR,CAAC;AACD,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU;AAAA,cACb,QAAQ,SAAS;AAAA,cACjB,YAAY,SAAS;AAAA,cACrB,GAAG;AAAA,YACL,CAAC;AAAA,YACD,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,eAAO,IAAI,SAAS,SAAS,MAAM;AAAA,UACjC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,+BAA+B;AAAA,YAC/B,gCAAgC;AAAA,YAChC,gCAAgC;AAAA,UAClC;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,wCAAwC,KAAK;AAC3D,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,kCAAkC,CAAC;AAAA,UAC3D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,aAAa,SAAkB,YAAuC;AAC1E,UAAI;AACF,cAAM,YAAY,GAAG,OAAO,IAAI,WAAW,IAAI,UAAU;AAEzD,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,GAAG;AAAA,YACH,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,QACF,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AAChB,gBAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,kBAAQ,MAAM,qCAAqC;AAAA,YACjD,QAAQ,SAAS;AAAA,YACjB,YAAY,SAAS;AAAA,YACrB,MAAM;AAAA,UACR,CAAC;AACD,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU;AAAA,cACb,OAAO,UAAU,WAAW,SAAS,cAAc;AAAA,cACnD,GAAG;AAAA,YACL,CAAC;AAAA,YACD,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,eAAO,IAAI,SAAS,SAAS,MAAM;AAAA,UACjC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,iBAAiB;AAAA,YACjB,YAAY;AAAA,UACd;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,yCAAyC,KAAK;AAC5D,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,mCAAmC,CAAC;AAAA,UAC5D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,iBAAiB,SAAqC;AAC1D,UAAI;AACF,cAAM,YAAY,GAAG,OAAO,IAAI,eAAe;AAC/C,cAAM,cAAc,QAAQ,QAAQ,IAAI,cAAc,KAAK;AAE3D,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,GAAG;AAAA,YACH,GAAI,eAAe,EAAE,gBAAgB,YAAY;AAAA,YACjD,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,UACA,MAAM,QAAQ;AAAA,UACd,QAAQ;AAAA,QACV,CAAgB;AAEhB,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU,EAAE,OAAO,yBAAyB,QAAQ,SAAS,OAAO,CAAC;AAAA,YAC1E,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,cAAM,eAAe,MAAM,SAAS,KAAK;AACzC,eAAO,IAAI,SAAS,cAAc;AAAA,UAChC,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAChD,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,6CAA6C,KAAK;AAChE,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,wCAAwC,CAAC;AAAA,UACjE,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,qBAAqB,SAAqC;AAC9D,aAAO,gBAAgB,SAAS,qBAAqB,iBAAiB;AAAA,IACxE;AAAA,IAEA,MAAM,mBAAmB,SAAqC;AAC5D,aAAO,gBAAgB,SAAS,mBAAmB,eAAe;AAAA,IACpE;AAAA,EACF;AACF;","names":["name"]}

package/dist/proxy.mjs

@@ -24,13 +24,56 @@ function pickTraceHeader(request) {
   if (fromQuery) return { "x-trace-parent": fromQuery };
   return {};
 }
+var DECISION_HEADER_NAMES = [
+  "taskid",
+  "parenttaskid",
+  "sessionid",
+  "userid",
+  "assistantid",
+  "agentspaceid",
+  "channelid",
+  "depth",
+  // Runtime v0.5.1: `CommonAttributes.version_tag` (alias `versiontag`)
+  // pins the decision to the agentspace version that ran the turn.
+  "versiontag"
+];
 function createAlquimiaProxyHandler(config) {
   const baseUrl = config.assistantBaseUrl.replace(/\/$/, "");
   const inferRoute = config.inferRoute ?? "event/infer";
   const streamRoute = config.streamRoute ?? "event/stream";
   const blobUploadRoute = config.blobUploadRoute ?? "context/blob/upload";
   const toolCompletionRoute = config.toolCompletionRoute ?? "event/tool-completion";
+  const toolApprovalRoute = config.toolApprovalRoute ?? "event/tool-approval";
   const authHeader = { Authorization: `Bearer ${config.apiKey}` };
+  async function forwardDecision(request, route, name) {
+    try {
+      const body = await request.text();
+      const headers = {
+        "Content-Type": "application/json",
+        ...authHeader
+      };
+      for (const name2 of DECISION_HEADER_NAMES) {
+        const value = request.headers.get(name2);
+        if (value) headers[name2] = value;
+      }
+      Object.assign(headers, pickTraceHeader(request));
+      const response = await fetch(`${baseUrl}/${route}`, {
+        method: "POST",
+        headers,
+        body
+      });
+      return new Response(await response.text(), {
+        status: response.status,
+        headers: { "Content-Type": "application/json" }
+      });
+    } catch (error) {
+      console.error(`AlquimiaProxy ${name} exception:`, error);
+      return new Response(
+        JSON.stringify({ error: `Failed to forward ${name} request` }),
+        { status: 500, headers: { "Content-Type": "application/json" } }
+      );
+    }
+  }
   return {
     async handleInfer(request, pathSuffix) {
       try {
@@ -158,43 +201,10 @@ function createAlquimiaProxyHandler(config) {
       }
     },
     async handleToolCompletion(request) {
-      try {
-        const body = await request.text();
-        const headers = {
-          "Content-Type": "application/json",
-          ...authHeader
-        };
-        const CORRELATION_HEADERS = [
-          "taskid",
-          "parenttaskid",
-          "sessionid",
-          "userid",
-          "assistantid",
-          "agentspaceid",
-          "channelid",
-          "depth"
-        ];
-        for (const name of CORRELATION_HEADERS) {
-          const value = request.headers.get(name);
-          if (value) headers[name] = value;
-        }
-        Object.assign(headers, pickTraceHeader(request));
-        const response = await fetch(`${baseUrl}/${toolCompletionRoute}`, {
-          method: "POST",
-          headers,
-          body
-        });
-        return new Response(await response.text(), {
-          status: response.status,
-          headers: { "Content-Type": "application/json" }
-        });
-      } catch (error) {
-        console.error("AlquimiaProxy handleToolCompletion exception:", error);
-        return new Response(
-          JSON.stringify({ error: "Failed to forward tool-completion request" }),
-          { status: 500, headers: { "Content-Type": "application/json" } }
-        );
-      }
+      return forwardDecision(request, toolCompletionRoute, "tool-completion");
+    },
+    async handleToolApproval(request) {
+      return forwardDecision(request, toolApprovalRoute, "tool-approval");
     }
   };
 }

package/dist/proxy.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/proxy.ts"],"sourcesContent":["export interface ProxyConfig {\n  assistantBaseUrl: string;\n  apiKey: string;\n  inferRoute?: string;            // default: 'event/infer'\n  streamRoute?: string;           // default: 'event/stream'\n  blobUploadRoute?: string;       // default: 'context/blob/upload'\n  toolCompletionRoute?: string;   // default: 'event/tool-completion'\n}\n\nexport interface AlquimiaProxyHandler {\n  handleInfer(_request: Request, _pathSuffix: string): Promise<Response>;\n  handleStream(_request: Request, _pathSuffix: string): Promise<Response>;\n  handleBlobUpload(_request: Request): Promise<Response>;\n  handleToolCompletion(_request: Request): Promise<Response>;\n}\n\nconst IDENTITY_HEADER_NAMES = [\n  'task-id',\n  'parent-task-id',\n  'session-id',\n  'user-id',\n  'assistant-id',\n  'agentspace-id',\n  'channel-id',\n  'depth',\n] as const;\n\nfunction pickIdentityHeaders(request: Request): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const name of IDENTITY_HEADER_NAMES) {\n    const value = request.headers.get(name);\n    if (value) out[name] = value;\n  }\n  return out;\n}\n\n/**\n * Trace-context propagation. The proxy builds a fresh request against the\n * runtime, so anything the caller set is dropped unless it is copied over\n * explicitly — which is how `x-trace-parent` stopped reaching the runtime when\n * the direct-to-runtime client was replaced by this proxy.\n *\n * The header is the transport wherever the caller can set one. `EventSource`\n * cannot, so the stream route also accepts the same value as a `trace_parent`\n * query param.\n */\nfunction pickTraceHeader(request: Request): Record<string, string> {\n  const fromHeader = request.headers.get('x-trace-parent');\n  if (fromHeader) return { 'x-trace-parent': fromHeader };\n\n  const fromQuery = new URL(request.url).searchParams.get('trace_parent');\n  if (fromQuery) return { 'x-trace-parent': fromQuery };\n\n  return {};\n}\n\nexport function createAlquimiaProxyHandler(config: ProxyConfig): AlquimiaProxyHandler {\n  const baseUrl = config.assistantBaseUrl.replace(/\\/$/, '');\n  const inferRoute = config.inferRoute ?? 'event/infer';\n  const streamRoute = config.streamRoute ?? 'event/stream';\n  const blobUploadRoute = config.blobUploadRoute ?? 'context/blob/upload';\n  const toolCompletionRoute = config.toolCompletionRoute ?? 'event/tool-completion';\n  const authHeader = { Authorization: `Bearer ${config.apiKey}` };\n\n  return {\n    async handleInfer(request: Request, pathSuffix: string): Promise<Response> {\n      try {\n        const body = await request.json();\n        const url = new URL(request.url);\n        const querySuffix = url.searchParams.toString()\n          ? `?${url.searchParams.toString()}`\n          : '';\n        const slug = pathSuffix.replace(/^\\/+|\\/+$/g, '');\n        const targetUrl = `${baseUrl}/${inferRoute}/${slug}${querySuffix}`;\n\n\n        const response = await fetch(targetUrl, {\n          method: 'POST',\n          headers: {\n            'Content-Type': 'application/json',\n            ...authHeader,\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n          body: JSON.stringify(body),\n        });\n\n        if (!response.ok) {\n          const errorJson = await response.json().catch(() => ({}));\n          console.error('AlquimiaProxy handleInfer error:', {\n            status: response.status,\n            statusText: response.statusText,\n            body: errorJson,\n          });\n          return new Response(\n            JSON.stringify({\n              status: response.status,\n              statusText: response.statusText,\n              ...errorJson,\n            }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        return new Response(response.body, {\n          status: 200,\n          headers: {\n            'Access-Control-Allow-Origin': '*',\n            'Access-Control-Allow-Methods': 'POST, OPTIONS',\n            'Access-Control-Allow-Headers': 'Content-Type, Content-Encoding',\n          },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleInfer exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward infer request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleStream(request: Request, pathSuffix: string): Promise<Response> {\n      try {\n        const targetUrl = `${baseUrl}/${streamRoute}/${pathSuffix}`;\n\n        const response = await fetch(targetUrl, {\n          headers: {\n            'Content-Type': 'application/json',\n            ...authHeader,\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n        });\n\n        if (!response.ok) {\n          const errorJson = await response.json().catch(() => ({}));\n          console.error('AlquimiaProxy handleStream error:', {\n            status: response.status,\n            statusText: response.statusText,\n            body: errorJson,\n          });\n          return new Response(\n            JSON.stringify({\n              error: errorJson.message || response.statusText || 'Failed to forward stream',\n              ...errorJson,\n            }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        return new Response(response.body, {\n          status: 200,\n          headers: {\n            'Content-Type': 'text/event-stream',\n            'Cache-Control': 'no-cache',\n            Connection: 'keep-alive',\n          },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleStream exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward stream request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleBlobUpload(request: Request): Promise<Response> {\n      try {\n        const targetUrl = `${baseUrl}/${blobUploadRoute}`;\n        const contentType = request.headers.get('Content-Type') ?? '';\n\n        const response = await fetch(targetUrl, {\n          method: 'POST',\n          headers: {\n            ...authHeader,\n            ...(contentType && { 'Content-Type': contentType }),\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n          body: request.body,\n          duplex: 'half',\n        } as RequestInit);\n\n        if (!response.ok) {\n          return new Response(\n            JSON.stringify({ error: 'Failed to upload blob', status: response.status }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        const responseText = await response.text();\n        return new Response(responseText, {\n          status: 200,\n          headers: { 'Content-Type': 'application/json' },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleBlobUpload exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward blob upload request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleToolCompletion(request: Request): Promise<Response> {\n      try {\n        const body = await request.text();\n        const headers: Record<string, string> = {\n          'Content-Type': 'application/json',\n          ...authHeader,\n        };\n        // Forward the runtime's tool-completion correlation headers verbatim\n        // (non-hyphenated names, per the runtime OpenAPI). These route the\n        // completion to the parked task so the SSE stream resumes.\n        const CORRELATION_HEADERS = [\n          'taskid',\n          'parenttaskid',\n          'sessionid',\n          'userid',\n          'assistantid',\n          'agentspaceid',\n          'channelid',\n          'depth',\n        ];\n        for (const name of CORRELATION_HEADERS) {\n          const value = request.headers.get(name);\n          if (value) headers[name] = value;\n        }\n        Object.assign(headers, pickTraceHeader(request));\n\n        const response = await fetch(`${baseUrl}/${toolCompletionRoute}`, {\n          method: 'POST',\n          headers,\n          body,\n        });\n\n        return new Response(await response.text(), {\n          status: response.status,\n          headers: { 'Content-Type': 'application/json' },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleToolCompletion exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward tool-completion request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n  };\n}\n"],"mappings":";AAgBA,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,oBAAoB,SAA0C;AACrE,QAAM,MAA8B,CAAC;AACrC,aAAW,QAAQ,uBAAuB;AACxC,UAAM,QAAQ,QAAQ,QAAQ,IAAI,IAAI;AACtC,QAAI,MAAO,KAAI,IAAI,IAAI;AAAA,EACzB;AACA,SAAO;AACT;AAYA,SAAS,gBAAgB,SAA0C;AACjE,QAAM,aAAa,QAAQ,QAAQ,IAAI,gBAAgB;AACvD,MAAI,WAAY,QAAO,EAAE,kBAAkB,WAAW;AAEtD,QAAM,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,cAAc;AACtE,MAAI,UAAW,QAAO,EAAE,kBAAkB,UAAU;AAEpD,SAAO,CAAC;AACV;AAEO,SAAS,2BAA2B,QAA2C;AACpF,QAAM,UAAU,OAAO,iBAAiB,QAAQ,OAAO,EAAE;AACzD,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,cAAc,OAAO,eAAe;AAC1C,QAAM,kBAAkB,OAAO,mBAAmB;AAClD,QAAM,sBAAsB,OAAO,uBAAuB;AAC1D,QAAM,aAAa,EAAE,eAAe,UAAU,OAAO,MAAM,GAAG;AAE9D,SAAO;AAAA,IACL,MAAM,YAAY,SAAkB,YAAuC;AACzE,UAAI;AACF,cAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,cAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,cAAM,cAAc,IAAI,aAAa,SAAS,IAC1C,IAAI,IAAI,aAAa,SAAS,CAAC,KAC/B;AACJ,cAAM,OAAO,WAAW,QAAQ,cAAc,EAAE;AAChD,cAAM,YAAY,GAAG,OAAO,IAAI,UAAU,IAAI,IAAI,GAAG,WAAW;AAGhE,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,GAAG;AAAA,YACH,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,UACA,MAAM,KAAK,UAAU,IAAI;AAAA,QAC3B,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AAChB,gBAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,kBAAQ,MAAM,oCAAoC;AAAA,YAChD,QAAQ,SAAS;AAAA,YACjB,YAAY,SAAS;AAAA,YACrB,MAAM;AAAA,UACR,CAAC;AACD,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU;AAAA,cACb,QAAQ,SAAS;AAAA,cACjB,YAAY,SAAS;AAAA,cACrB,GAAG;AAAA,YACL,CAAC;AAAA,YACD,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,eAAO,IAAI,SAAS,SAAS,MAAM;AAAA,UACjC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,+BAA+B;AAAA,YAC/B,gCAAgC;AAAA,YAChC,gCAAgC;AAAA,UAClC;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,wCAAwC,KAAK;AAC3D,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,kCAAkC,CAAC;AAAA,UAC3D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,aAAa,SAAkB,YAAuC;AAC1E,UAAI;AACF,cAAM,YAAY,GAAG,OAAO,IAAI,WAAW,IAAI,UAAU;AAEzD,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,GAAG;AAAA,YACH,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,QACF,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AAChB,gBAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,kBAAQ,MAAM,qCAAqC;AAAA,YACjD,QAAQ,SAAS;AAAA,YACjB,YAAY,SAAS;AAAA,YACrB,MAAM;AAAA,UACR,CAAC;AACD,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU;AAAA,cACb,OAAO,UAAU,WAAW,SAAS,cAAc;AAAA,cACnD,GAAG;AAAA,YACL,CAAC;AAAA,YACD,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,eAAO,IAAI,SAAS,SAAS,MAAM;AAAA,UACjC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,iBAAiB;AAAA,YACjB,YAAY;AAAA,UACd;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,yCAAyC,KAAK;AAC5D,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,mCAAmC,CAAC;AAAA,UAC5D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,iBAAiB,SAAqC;AAC1D,UAAI;AACF,cAAM,YAAY,GAAG,OAAO,IAAI,eAAe;AAC/C,cAAM,cAAc,QAAQ,QAAQ,IAAI,cAAc,KAAK;AAE3D,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,GAAG;AAAA,YACH,GAAI,eAAe,EAAE,gBAAgB,YAAY;AAAA,YACjD,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,UACA,MAAM,QAAQ;AAAA,UACd,QAAQ;AAAA,QACV,CAAgB;AAEhB,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU,EAAE,OAAO,yBAAyB,QAAQ,SAAS,OAAO,CAAC;AAAA,YAC1E,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,cAAM,eAAe,MAAM,SAAS,KAAK;AACzC,eAAO,IAAI,SAAS,cAAc;AAAA,UAChC,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAChD,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,6CAA6C,KAAK;AAChE,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,wCAAwC,CAAC;AAAA,UACjE,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,qBAAqB,SAAqC;AAC9D,UAAI;AACF,cAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,cAAM,UAAkC;AAAA,UACtC,gBAAgB;AAAA,UAChB,GAAG;AAAA,QACL;AAIA,cAAM,sBAAsB;AAAA,UAC1B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,mBAAW,QAAQ,qBAAqB;AACtC,gBAAM,QAAQ,QAAQ,QAAQ,IAAI,IAAI;AACtC,cAAI,MAAO,SAAQ,IAAI,IAAI;AAAA,QAC7B;AACA,eAAO,OAAO,SAAS,gBAAgB,OAAO,CAAC;AAE/C,cAAM,WAAW,MAAM,MAAM,GAAG,OAAO,IAAI,mBAAmB,IAAI;AAAA,UAChE,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,QACF,CAAC;AAED,eAAO,IAAI,SAAS,MAAM,SAAS,KAAK,GAAG;AAAA,UACzC,QAAQ,SAAS;AAAA,UACjB,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAChD,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,iDAAiD,KAAK;AACpE,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,4CAA4C,CAAC;AAAA,UACrE,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/proxy.ts"],"sourcesContent":["export interface ProxyConfig {\n  assistantBaseUrl: string;\n  apiKey: string;\n  inferRoute?: string;            // default: 'event/infer'\n  streamRoute?: string;           // default: 'event/stream'\n  blobUploadRoute?: string;       // default: 'context/blob/upload'\n  toolCompletionRoute?: string;   // default: 'event/tool-completion'\n  toolApprovalRoute?: string;     // default: 'event/tool-approval'\n}\n\nexport interface AlquimiaProxyHandler {\n  handleInfer(_request: Request, _pathSuffix: string): Promise<Response>;\n  handleStream(_request: Request, _pathSuffix: string): Promise<Response>;\n  handleBlobUpload(_request: Request): Promise<Response>;\n  handleToolCompletion(_request: Request): Promise<Response>;\n  handleToolApproval(_request: Request): Promise<Response>;\n}\n\nconst IDENTITY_HEADER_NAMES = [\n  'task-id',\n  'parent-task-id',\n  'session-id',\n  'user-id',\n  'assistant-id',\n  'agentspace-id',\n  'channel-id',\n  'depth',\n] as const;\n\nfunction pickIdentityHeaders(request: Request): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const name of IDENTITY_HEADER_NAMES) {\n    const value = request.headers.get(name);\n    if (value) out[name] = value;\n  }\n  return out;\n}\n\n/**\n * Trace-context propagation. The proxy builds a fresh request against the\n * runtime, so anything the caller set is dropped unless it is copied over\n * explicitly — which is how `x-trace-parent` stopped reaching the runtime when\n * the direct-to-runtime client was replaced by this proxy.\n *\n * The header is the transport wherever the caller can set one. `EventSource`\n * cannot, so the stream route also accepts the same value as a `trace_parent`\n * query param.\n */\nfunction pickTraceHeader(request: Request): Record<string, string> {\n  const fromHeader = request.headers.get('x-trace-parent');\n  if (fromHeader) return { 'x-trace-parent': fromHeader };\n\n  const fromQuery = new URL(request.url).searchParams.get('trace_parent');\n  if (fromQuery) return { 'x-trace-parent': fromQuery };\n\n  return {};\n}\n\n/**\n * Correlation headers for tool-completion and tool-approval. Both routes bind\n * them through the runtime's `CommonAttributes` header model, whose aliases\n * have no separator — not the kebab-case identity set infer/stream use. They\n * route the decision to the parked task so the SSE stream resumes, and\n * `agentspaceid` is what the runtime authorizes a non-admin caller against.\n */\nconst DECISION_HEADER_NAMES = [\n  'taskid',\n  'parenttaskid',\n  'sessionid',\n  'userid',\n  'assistantid',\n  'agentspaceid',\n  'channelid',\n  'depth',\n  // Runtime v0.5.1: `CommonAttributes.version_tag` (alias `versiontag`)\n  // pins the decision to the agentspace version that ran the turn.\n  'versiontag',\n] as const;\n\nexport function createAlquimiaProxyHandler(config: ProxyConfig): AlquimiaProxyHandler {\n  const baseUrl = config.assistantBaseUrl.replace(/\\/$/, '');\n  const inferRoute = config.inferRoute ?? 'event/infer';\n  const streamRoute = config.streamRoute ?? 'event/stream';\n  const blobUploadRoute = config.blobUploadRoute ?? 'context/blob/upload';\n  const toolCompletionRoute = config.toolCompletionRoute ?? 'event/tool-completion';\n  const toolApprovalRoute = config.toolApprovalRoute ?? 'event/tool-approval';\n  const authHeader = { Authorization: `Bearer ${config.apiKey}` };\n\n  /**\n   * Forward a one-shot decision (tool completion or approval). The runtime's\n   * status and body pass through untouched: the 409s on these routes differ\n   * only in their `detail` text, and the caller needs that to tell \"already\n   * decided\" from \"answer it on the original channel\".\n   */\n  async function forwardDecision(request: Request, route: string, name: string): Promise<Response> {\n    try {\n      const body = await request.text();\n      const headers: Record<string, string> = {\n        'Content-Type': 'application/json',\n        ...authHeader,\n      };\n      for (const name of DECISION_HEADER_NAMES) {\n        const value = request.headers.get(name);\n        if (value) headers[name] = value;\n      }\n      Object.assign(headers, pickTraceHeader(request));\n\n      const response = await fetch(`${baseUrl}/${route}`, {\n        method: 'POST',\n        headers,\n        body,\n      });\n\n      return new Response(await response.text(), {\n        status: response.status,\n        headers: { 'Content-Type': 'application/json' },\n      });\n    } catch (error) {\n      console.error(`AlquimiaProxy ${name} exception:`, error);\n      return new Response(\n        JSON.stringify({ error: `Failed to forward ${name} request` }),\n        { status: 500, headers: { 'Content-Type': 'application/json' } }\n      );\n    }\n  }\n\n  return {\n    async handleInfer(request: Request, pathSuffix: string): Promise<Response> {\n      try {\n        const body = await request.json();\n        const url = new URL(request.url);\n        const querySuffix = url.searchParams.toString()\n          ? `?${url.searchParams.toString()}`\n          : '';\n        const slug = pathSuffix.replace(/^\\/+|\\/+$/g, '');\n        const targetUrl = `${baseUrl}/${inferRoute}/${slug}${querySuffix}`;\n\n\n        const response = await fetch(targetUrl, {\n          method: 'POST',\n          headers: {\n            'Content-Type': 'application/json',\n            ...authHeader,\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n          body: JSON.stringify(body),\n        });\n\n        if (!response.ok) {\n          const errorJson = await response.json().catch(() => ({}));\n          console.error('AlquimiaProxy handleInfer error:', {\n            status: response.status,\n            statusText: response.statusText,\n            body: errorJson,\n          });\n          return new Response(\n            JSON.stringify({\n              status: response.status,\n              statusText: response.statusText,\n              ...errorJson,\n            }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        return new Response(response.body, {\n          status: 200,\n          headers: {\n            'Access-Control-Allow-Origin': '*',\n            'Access-Control-Allow-Methods': 'POST, OPTIONS',\n            'Access-Control-Allow-Headers': 'Content-Type, Content-Encoding',\n          },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleInfer exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward infer request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleStream(request: Request, pathSuffix: string): Promise<Response> {\n      try {\n        const targetUrl = `${baseUrl}/${streamRoute}/${pathSuffix}`;\n\n        const response = await fetch(targetUrl, {\n          headers: {\n            'Content-Type': 'application/json',\n            ...authHeader,\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n        });\n\n        if (!response.ok) {\n          const errorJson = await response.json().catch(() => ({}));\n          console.error('AlquimiaProxy handleStream error:', {\n            status: response.status,\n            statusText: response.statusText,\n            body: errorJson,\n          });\n          return new Response(\n            JSON.stringify({\n              error: errorJson.message || response.statusText || 'Failed to forward stream',\n              ...errorJson,\n            }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        return new Response(response.body, {\n          status: 200,\n          headers: {\n            'Content-Type': 'text/event-stream',\n            'Cache-Control': 'no-cache',\n            Connection: 'keep-alive',\n          },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleStream exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward stream request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleBlobUpload(request: Request): Promise<Response> {\n      try {\n        const targetUrl = `${baseUrl}/${blobUploadRoute}`;\n        const contentType = request.headers.get('Content-Type') ?? '';\n\n        const response = await fetch(targetUrl, {\n          method: 'POST',\n          headers: {\n            ...authHeader,\n            ...(contentType && { 'Content-Type': contentType }),\n            ...pickIdentityHeaders(request),\n            ...pickTraceHeader(request),\n          },\n          body: request.body,\n          duplex: 'half',\n        } as RequestInit);\n\n        if (!response.ok) {\n          return new Response(\n            JSON.stringify({ error: 'Failed to upload blob', status: response.status }),\n            { status: response.status, headers: { 'Content-Type': 'application/json' } }\n          );\n        }\n\n        const responseText = await response.text();\n        return new Response(responseText, {\n          status: 200,\n          headers: { 'Content-Type': 'application/json' },\n        });\n      } catch (error) {\n        console.error('AlquimiaProxy handleBlobUpload exception:', error);\n        return new Response(\n          JSON.stringify({ error: 'Failed to forward blob upload request' }),\n          { status: 500, headers: { 'Content-Type': 'application/json' } }\n        );\n      }\n    },\n\n    async handleToolCompletion(request: Request): Promise<Response> {\n      return forwardDecision(request, toolCompletionRoute, 'tool-completion');\n    },\n\n    async handleToolApproval(request: Request): Promise<Response> {\n      return forwardDecision(request, toolApprovalRoute, 'tool-approval');\n    },\n  };\n}\n"],"mappings":";AAkBA,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,oBAAoB,SAA0C;AACrE,QAAM,MAA8B,CAAC;AACrC,aAAW,QAAQ,uBAAuB;AACxC,UAAM,QAAQ,QAAQ,QAAQ,IAAI,IAAI;AACtC,QAAI,MAAO,KAAI,IAAI,IAAI;AAAA,EACzB;AACA,SAAO;AACT;AAYA,SAAS,gBAAgB,SAA0C;AACjE,QAAM,aAAa,QAAQ,QAAQ,IAAI,gBAAgB;AACvD,MAAI,WAAY,QAAO,EAAE,kBAAkB,WAAW;AAEtD,QAAM,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,cAAc;AACtE,MAAI,UAAW,QAAO,EAAE,kBAAkB,UAAU;AAEpD,SAAO,CAAC;AACV;AASA,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA,EAGA;AACF;AAEO,SAAS,2BAA2B,QAA2C;AACpF,QAAM,UAAU,OAAO,iBAAiB,QAAQ,OAAO,EAAE;AACzD,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,cAAc,OAAO,eAAe;AAC1C,QAAM,kBAAkB,OAAO,mBAAmB;AAClD,QAAM,sBAAsB,OAAO,uBAAuB;AAC1D,QAAM,oBAAoB,OAAO,qBAAqB;AACtD,QAAM,aAAa,EAAE,eAAe,UAAU,OAAO,MAAM,GAAG;AAQ9D,iBAAe,gBAAgB,SAAkB,OAAe,MAAiC;AAC/F,QAAI;AACF,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,UAAkC;AAAA,QACtC,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AACA,iBAAWA,SAAQ,uBAAuB;AACxC,cAAM,QAAQ,QAAQ,QAAQ,IAAIA,KAAI;AACtC,YAAI,MAAO,SAAQA,KAAI,IAAI;AAAA,MAC7B;AACA,aAAO,OAAO,SAAS,gBAAgB,OAAO,CAAC;AAE/C,YAAM,WAAW,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,IAAI;AAAA,QAClD,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAED,aAAO,IAAI,SAAS,MAAM,SAAS,KAAK,GAAG;AAAA,QACzC,QAAQ,SAAS;AAAA,QACjB,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,OAAO;AACd,cAAQ,MAAM,iBAAiB,IAAI,eAAe,KAAK;AACvD,aAAO,IAAI;AAAA,QACT,KAAK,UAAU,EAAE,OAAO,qBAAqB,IAAI,WAAW,CAAC;AAAA,QAC7D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,YAAY,SAAkB,YAAuC;AACzE,UAAI;AACF,cAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,cAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,cAAM,cAAc,IAAI,aAAa,SAAS,IAC1C,IAAI,IAAI,aAAa,SAAS,CAAC,KAC/B;AACJ,cAAM,OAAO,WAAW,QAAQ,cAAc,EAAE;AAChD,cAAM,YAAY,GAAG,OAAO,IAAI,UAAU,IAAI,IAAI,GAAG,WAAW;AAGhE,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,GAAG;AAAA,YACH,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,UACA,MAAM,KAAK,UAAU,IAAI;AAAA,QAC3B,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AAChB,gBAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,kBAAQ,MAAM,oCAAoC;AAAA,YAChD,QAAQ,SAAS;AAAA,YACjB,YAAY,SAAS;AAAA,YACrB,MAAM;AAAA,UACR,CAAC;AACD,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU;AAAA,cACb,QAAQ,SAAS;AAAA,cACjB,YAAY,SAAS;AAAA,cACrB,GAAG;AAAA,YACL,CAAC;AAAA,YACD,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,eAAO,IAAI,SAAS,SAAS,MAAM;AAAA,UACjC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,+BAA+B;AAAA,YAC/B,gCAAgC;AAAA,YAChC,gCAAgC;AAAA,UAClC;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,wCAAwC,KAAK;AAC3D,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,kCAAkC,CAAC;AAAA,UAC3D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,aAAa,SAAkB,YAAuC;AAC1E,UAAI;AACF,cAAM,YAAY,GAAG,OAAO,IAAI,WAAW,IAAI,UAAU;AAEzD,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,GAAG;AAAA,YACH,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,QACF,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AAChB,gBAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,kBAAQ,MAAM,qCAAqC;AAAA,YACjD,QAAQ,SAAS;AAAA,YACjB,YAAY,SAAS;AAAA,YACrB,MAAM;AAAA,UACR,CAAC;AACD,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU;AAAA,cACb,OAAO,UAAU,WAAW,SAAS,cAAc;AAAA,cACnD,GAAG;AAAA,YACL,CAAC;AAAA,YACD,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,eAAO,IAAI,SAAS,SAAS,MAAM;AAAA,UACjC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,iBAAiB;AAAA,YACjB,YAAY;AAAA,UACd;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,yCAAyC,KAAK;AAC5D,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,mCAAmC,CAAC;AAAA,UAC5D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,iBAAiB,SAAqC;AAC1D,UAAI;AACF,cAAM,YAAY,GAAG,OAAO,IAAI,eAAe;AAC/C,cAAM,cAAc,QAAQ,QAAQ,IAAI,cAAc,KAAK;AAE3D,cAAM,WAAW,MAAM,MAAM,WAAW;AAAA,UACtC,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,GAAG;AAAA,YACH,GAAI,eAAe,EAAE,gBAAgB,YAAY;AAAA,YACjD,GAAG,oBAAoB,OAAO;AAAA,YAC9B,GAAG,gBAAgB,OAAO;AAAA,UAC5B;AAAA,UACA,MAAM,QAAQ;AAAA,UACd,QAAQ;AAAA,QACV,CAAgB;AAEhB,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU,EAAE,OAAO,yBAAyB,QAAQ,SAAS,OAAO,CAAC;AAAA,YAC1E,EAAE,QAAQ,SAAS,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UAC7E;AAAA,QACF;AAEA,cAAM,eAAe,MAAM,SAAS,KAAK;AACzC,eAAO,IAAI,SAAS,cAAc;AAAA,UAChC,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAChD,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,6CAA6C,KAAK;AAChE,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,wCAAwC,CAAC;AAAA,UACjE,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,qBAAqB,SAAqC;AAC9D,aAAO,gBAAgB,SAAS,qBAAqB,iBAAiB;AAAA,IACxE;AAAA,IAEA,MAAM,mBAAmB,SAAqC;AAC5D,aAAO,gBAAgB,SAAS,mBAAmB,eAAe;AAAA,IACpE;AAAA,EACF;AACF;","names":["name"]}

package/dist/sdk/index.d.mts

@@ -1,10 +1,28 @@
-import { W as WhisperProvider, S as StableDiffusionProvider, C as CharacterizationProvider, R as RatingsProvider, L as LoggerProvider } from '../providers-DiR9cgyo.mjs';
-import { i as AttachmentPayload, T as TTSResult } from '../type-DqX3-9QS.mjs';
-import { T as ToolExecutionResponse } from '../types-CMVbyEv8.mjs';
+import { W as WhisperProvider, S as StableDiffusionProvider, C as CharacterizationProvider, R as RatingsProvider, L as LoggerProvider } from '../providers-YKiEag2L.mjs';
+import { d as AttachmentPayload, T as TTSResult, C as Content, e as RuntimeBlob } from '../type-C_sKpIM1.mjs';
+import { ToolApprovalResult } from '../types/index.mjs';
 import { AlquimiaAdapter, AlquimiaSDKOptions } from '../adapters/index.mjs';
+import { T as ToolExecutionResponse } from '../types-CMVbyEv8.mjs';
 import '@elastic/apm-rum';
 import 'ai';
+import '../types-lOliroPw.mjs';
 
+/** Per-turn options for {@link AlquimiaSDK.sendMessage}. */
+interface SendMessageOptions {
+    /** W3C traceparent, so infer and stream share one trace. */
+    traceParent?: string;
+    /**
+     * Audio input for this turn (runtime v0.5.1). Upload it with
+     * {@link AlquimiaSDK.uploadAttachment} first and pass the blob it returns.
+     * May be sent with or instead of `query`.
+     */
+    inputAudio?: RuntimeBlob;
+    /**
+     * Set to `false` to force a text-only reply from an audio-enabled agent.
+     * The runtime defaults to `true`, so leaving this unset keeps its behaviour.
+     */
+    outputAudio?: boolean;
+}
 declare class AlquimiaSDK {
     private adapter;
     private assistantId;
@@ -13,6 +31,8 @@ declare class AlquimiaSDK {
     private sessionId;
     private streamId;
     private traceParent;
+    private versionTag;
+    private agentspaceId;
     private tools;
     private extraInstructions;
     private assistantConfig;
@@ -37,10 +57,20 @@ declare class AlquimiaSDK {
     withExtraInstructions(extraInstructions: Record<string, string>): AlquimiaSDK;
     withAssistantConfig(assistantConfig: any): AlquimiaSDK;
     withUserId(userId: string): AlquimiaSDK;
+    /**
+     * Pin inference to a cached registry version. Sent as the `version_tag`
+     * query parameter, which `POST /event/infer/{assistant_id}` accepts from
+     * **runtime v0.5.2** onward; older runtimes ignore it.
+     *
+     * Works on every version: pass a versioned assistant ref
+     * (`<agentspace>/<assistant>[:<tag>]`) as the `assistantId` instead — the
+     * runtime parses the tag out of the path itself.
+     */
+    withVersionTag(versionTag: string): AlquimiaSDK;
     getEnforceCharacterization(): boolean;
     textToSpeech(text: string): Promise<TTSResult>;
     speechToText(audio: string): Promise<string>;
-    sendMessage(query: string, traceParent?: string): Promise<AlquimiaSDK>;
+    sendMessage(query?: Content, options?: string | SendMessageOptions): Promise<AlquimiaSDK>;
     /**
      * Complete a pending client-tool execution (the missing "submit half" of the
      * client-tool loop). POSTs a {@link ToolExecutionResponse} to the runtime's
@@ -50,6 +80,17 @@ declare class AlquimiaSDK {
      * `context-metadata` header (taskid + sessionid).
      */
     submitToolResult(response: ToolExecutionResponse): Promise<void>;
+    /**
+     * Answer a `HumanApprovalRequired` gate: POSTs a {@link ToolApprovalEvent} to
+     * the runtime's `/event/tool-approval`. `controlId` is the gate's own control
+     * id (the `HumanApprovalRequired` record's), not the parked tool call's.
+     *
+     * Never throws for a runtime refusal — each 409 means something different to
+     * the UI, so the answer comes back classified as a {@link ToolApprovalResult}.
+     * It does throw when the adapter has no approval route, which is a wiring bug
+     * rather than a runtime answer.
+     */
+    submitToolApproval(controlId: string, approved: boolean, message?: string): Promise<ToolApprovalResult>;
     generateImage(query: string): Promise<string>;
     analyzeCharacterization(text: string): Promise<Record<string, any>>;
     rate(data: any): Promise<Record<string, any>>;
@@ -61,16 +102,30 @@ declare class AlquimiaSDK {
      * session via headers. Always returns `[]`; kept for source compatibility.
      */
     getAttachmentResponses(): string[];
-    uploadAttachment(file: File, _attachmentId?: string): Promise<void>;
+    /**
+     * Upload a file into the session context. Returns the runtime {@link RuntimeBlob},
+     * which is what `sendMessage`'s `inputAudio` expects for audio inference.
+     */
+    uploadAttachment(file: File, _attachmentId?: string): Promise<RuntimeBlob>;
     /**
      * Identity headers (kebab-case) required by `/context/blob/upload` and
      * the rest of the runtime's internal endpoints introduced in v0.2.0→next.
      */
     private buildIdentityHeaders;
+    /**
+     * Correlation headers for tool-completion and tool-approval: the runtime's
+     * `CommonAttributes` header aliases, with no separator. Not interchangeable
+     * with the kebab-case set in {@link buildIdentityHeaders}.
+     */
+    private buildDecisionHeaders;
     getUrlStream(): string;
     getStreamId(): string | null;
     /** Alias for {@link getStreamId} — same value as infer `taskid`. */
     getTaskId(): string | null;
+    /** Registry version tag resolved by the runtime for the current task, if any. */
+    getVersionTag(): string | null;
+    /** Agentspace the runtime resolved for the current task, if any. */
+    getAgentspaceId(): string | null;
 }
 
 export { AlquimiaSDK };

package/dist/sdk/index.d.ts

@@ -1,10 +1,28 @@
-import { W as WhisperProvider, S as StableDiffusionProvider, C as CharacterizationProvider, R as RatingsProvider, L as LoggerProvider } from '../providers-b5_yMyMo.js';
-import { i as AttachmentPayload, T as TTSResult } from '../type-xksRnBUW.js';
-import { T as ToolExecutionResponse } from '../types-CMVbyEv8.js';
+import { W as WhisperProvider, S as StableDiffusionProvider, C as CharacterizationProvider, R as RatingsProvider, L as LoggerProvider } from '../providers-J_Z9rQ3Q.js';
+import { d as AttachmentPayload, T as TTSResult, C as Content, e as RuntimeBlob } from '../type-BFtGEEb4.js';
+import { ToolApprovalResult } from '../types/index.js';
 import { AlquimiaAdapter, AlquimiaSDKOptions } from '../adapters/index.js';
+import { T as ToolExecutionResponse } from '../types-CMVbyEv8.js';
 import '@elastic/apm-rum';
 import 'ai';
+import '../types-lOliroPw.js';
 
+/** Per-turn options for {@link AlquimiaSDK.sendMessage}. */
+interface SendMessageOptions {
+    /** W3C traceparent, so infer and stream share one trace. */
+    traceParent?: string;
+    /**
+     * Audio input for this turn (runtime v0.5.1). Upload it with
+     * {@link AlquimiaSDK.uploadAttachment} first and pass the blob it returns.
+     * May be sent with or instead of `query`.
+     */
+    inputAudio?: RuntimeBlob;
+    /**
+     * Set to `false` to force a text-only reply from an audio-enabled agent.
+     * The runtime defaults to `true`, so leaving this unset keeps its behaviour.
+     */
+    outputAudio?: boolean;
+}
 declare class AlquimiaSDK {
     private adapter;
     private assistantId;
@@ -13,6 +31,8 @@ declare class AlquimiaSDK {
     private sessionId;
     private streamId;
     private traceParent;
+    private versionTag;
+    private agentspaceId;
     private tools;
     private extraInstructions;
     private assistantConfig;
@@ -37,10 +57,20 @@ declare class AlquimiaSDK {
     withExtraInstructions(extraInstructions: Record<string, string>): AlquimiaSDK;
     withAssistantConfig(assistantConfig: any): AlquimiaSDK;
     withUserId(userId: string): AlquimiaSDK;
+    /**
+     * Pin inference to a cached registry version. Sent as the `version_tag`
+     * query parameter, which `POST /event/infer/{assistant_id}` accepts from
+     * **runtime v0.5.2** onward; older runtimes ignore it.
+     *
+     * Works on every version: pass a versioned assistant ref
+     * (`<agentspace>/<assistant>[:<tag>]`) as the `assistantId` instead — the
+     * runtime parses the tag out of the path itself.
+     */
+    withVersionTag(versionTag: string): AlquimiaSDK;
     getEnforceCharacterization(): boolean;
     textToSpeech(text: string): Promise<TTSResult>;
     speechToText(audio: string): Promise<string>;
-    sendMessage(query: string, traceParent?: string): Promise<AlquimiaSDK>;
+    sendMessage(query?: Content, options?: string | SendMessageOptions): Promise<AlquimiaSDK>;
     /**
      * Complete a pending client-tool execution (the missing "submit half" of the
      * client-tool loop). POSTs a {@link ToolExecutionResponse} to the runtime's
@@ -50,6 +80,17 @@ declare class AlquimiaSDK {
      * `context-metadata` header (taskid + sessionid).
      */
     submitToolResult(response: ToolExecutionResponse): Promise<void>;
+    /**
+     * Answer a `HumanApprovalRequired` gate: POSTs a {@link ToolApprovalEvent} to
+     * the runtime's `/event/tool-approval`. `controlId` is the gate's own control
+     * id (the `HumanApprovalRequired` record's), not the parked tool call's.
+     *
+     * Never throws for a runtime refusal — each 409 means something different to
+     * the UI, so the answer comes back classified as a {@link ToolApprovalResult}.
+     * It does throw when the adapter has no approval route, which is a wiring bug
+     * rather than a runtime answer.
+     */
+    submitToolApproval(controlId: string, approved: boolean, message?: string): Promise<ToolApprovalResult>;
     generateImage(query: string): Promise<string>;
     analyzeCharacterization(text: string): Promise<Record<string, any>>;
     rate(data: any): Promise<Record<string, any>>;
@@ -61,16 +102,30 @@ declare class AlquimiaSDK {
      * session via headers. Always returns `[]`; kept for source compatibility.
      */
     getAttachmentResponses(): string[];
-    uploadAttachment(file: File, _attachmentId?: string): Promise<void>;
+    /**
+     * Upload a file into the session context. Returns the runtime {@link RuntimeBlob},
+     * which is what `sendMessage`'s `inputAudio` expects for audio inference.
+     */
+    uploadAttachment(file: File, _attachmentId?: string): Promise<RuntimeBlob>;
     /**
      * Identity headers (kebab-case) required by `/context/blob/upload` and
      * the rest of the runtime's internal endpoints introduced in v0.2.0→next.
      */
     private buildIdentityHeaders;
+    /**
+     * Correlation headers for tool-completion and tool-approval: the runtime's
+     * `CommonAttributes` header aliases, with no separator. Not interchangeable
+     * with the kebab-case set in {@link buildIdentityHeaders}.
+     */
+    private buildDecisionHeaders;
     getUrlStream(): string;
     getStreamId(): string | null;
     /** Alias for {@link getStreamId} — same value as infer `taskid`. */
     getTaskId(): string | null;
+    /** Registry version tag resolved by the runtime for the current task, if any. */
+    getVersionTag(): string | null;
+    /** Agentspace the runtime resolved for the current task, if any. */
+    getAgentspaceId(): string | null;
 }
 
 export { AlquimiaSDK };