@copilotkit/core 1.63.2 → 1.63.3-canary.rc-1

package/dist/index.cjs

@@ -602,6 +602,12 @@ var ProxiedCopilotRuntimeAgent = class ProxiedCopilotRuntimeAgent extends _ag_ui
 	get capabilities() {
 		return this._capabilities;
 	}
+	requestInit(input) {
+		return {
+			...super.requestInit(input),
+			...this.credentials ? { credentials: this.credentials } : {}
+		};
+	}
 	async getCapabilities() {
 		return this._capabilities ?? {};
 	}
@@ -1747,6 +1753,19 @@ const SUGGEST_TOOL = {
 //#endregion
 //#region src/core/run-handler.ts
 /**
+* Absolute safety cap on the depth of recursive follow-up runs triggered by
+* `processAgentResult`. Without this, any scenario that keeps
+* `needsFollowUp = true` (e.g. the LLM repeatedly calling the same tool, a
+* backend that errors after receiving tool results, or input processors that
+* reprocess tool messages) would loop indefinitely, silently consuming API
+* quota and potentially DOS'ing the backend.
+*
+* The cap is deliberately high so that legitimate multi-step agent workflows
+* (search → fill form → confirm → update → send email, etc.) are never
+* affected; it only trips on runaway recursion.
+*/
+const MAX_FOLLOW_UP_DEPTH = 100;
+/**
 * Handles agent execution, tool calling, and agent connectivity for CopilotKitCore.
 * Manages the complete lifecycle of agent runs including tool execution and follow-ups.
 */
@@ -2001,7 +2020,8 @@ var RunHandler = class {
 				}
 			}
 		}
-		if (needsFollowUp && !this._runAbortController?.signal.aborted) {
+		if (needsFollowUp && !this._runAbortController?.signal.aborted) if (this._runDepth >= MAX_FOLLOW_UP_DEPTH) _copilotkit_shared.logger.warn(`[CopilotKit] Follow-up depth limit (${MAX_FOLLOW_UP_DEPTH}) reached for agent "${agentId}". Stopping recursive follow-up runs to prevent an infinite loop. This usually indicates a tool that keeps requesting a follow-up (e.g. the LLM repeatedly calling the same tool). Consider setting "followUp: false" on the offending tool.`);
+		else {
 			await this._internal.waitForPendingFrameworkUpdates();
 			return await this.runAgent({ agent });
 		}
@@ -2324,6 +2344,7 @@ var RunHandler = class {
 				await emitAgentError(error, error instanceof AgentThreadLockedError ? CopilotKitCoreErrorCode.AGENT_THREAD_LOCKED : CopilotKitCoreErrorCode.AGENT_RUN_FAILED_EVENT, { source: "onRunFailed" });
 			},
 			onRunErrorEvent: async ({ event }) => {
+				if (this._runAbortController?.signal.aborted === true || event?.code === "abort") return;
 				const eventError = event?.rawEvent instanceof Error ? event.rawEvent : event?.rawEvent?.error instanceof Error ? event.rawEvent.error : void 0;
 				const errorMessage = typeof event?.rawEvent?.error === "string" ? event.rawEvent.error : event?.message ?? "Agent run error";
 				const rawError = eventError ?? new Error(errorMessage);