@copilotkit/core 1.63.2 → 1.63.3-canary.rc-1

package/dist/index.umd.js

@@ -708,6 +708,12 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		get capabilities() {
 			return this._capabilities;
 		}
+		requestInit(input) {
+			return {
+				...super.requestInit(input),
+				...this.credentials ? { credentials: this.credentials } : {}
+			};
+		}
 		async getCapabilities() {
 			var _this$_capabilities;
 			return (_this$_capabilities = this._capabilities) !== null && _this$_capabilities !== void 0 ? _this$_capabilities : {};
@@ -1885,6 +1891,19 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 //#endregion
 //#region src/core/run-handler.ts
 /**
+	* Absolute safety cap on the depth of recursive follow-up runs triggered by
+	* `processAgentResult`. Without this, any scenario that keeps
+	* `needsFollowUp = true` (e.g. the LLM repeatedly calling the same tool, a
+	* backend that errors after receiving tool results, or input processors that
+	* reprocess tool messages) would loop indefinitely, silently consuming API
+	* quota and potentially DOS'ing the backend.
+	*
+	* The cap is deliberately high so that legitimate multi-step agent workflows
+	* (search → fill form → confirm → update → send email, etc.) are never
+	* affected; it only trips on runaway recursion.
+	*/
+	const MAX_FOLLOW_UP_DEPTH = 100;
+	/**
 	* Handles agent execution, tool calling, and agent connectivity for CopilotKitCore.
 	* Manages the complete lifecycle of agent runs including tool execution and follow-ups.
 	*/
@@ -2121,7 +2140,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 					}
 				}
 			}
-			if (needsFollowUp && !((_this$_runAbortContro2 = this._runAbortController) === null || _this$_runAbortContro2 === void 0 ? void 0 : _this$_runAbortContro2.signal.aborted)) {
+			if (needsFollowUp && !((_this$_runAbortContro2 = this._runAbortController) === null || _this$_runAbortContro2 === void 0 ? void 0 : _this$_runAbortContro2.signal.aborted)) if (this._runDepth >= MAX_FOLLOW_UP_DEPTH) _copilotkit_shared.logger.warn(`[CopilotKit] Follow-up depth limit (${MAX_FOLLOW_UP_DEPTH}) reached for agent "${agentId}". Stopping recursive follow-up runs to prevent an infinite loop. This usually indicates a tool that keeps requesting a follow-up (e.g. the LLM repeatedly calling the same tool). Consider setting "followUp: false" on the offending tool.`);
+			else {
 				await this._internal.waitForPendingFrameworkUpdates();
 				return await this.runAgent({ agent });
 			}
@@ -2460,7 +2480,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 					await emitAgentError(error, error instanceof AgentThreadLockedError ? CopilotKitCoreErrorCode.AGENT_THREAD_LOCKED : CopilotKitCoreErrorCode.AGENT_RUN_FAILED_EVENT, { source: "onRunFailed" });
 				},
 				onRunErrorEvent: async ({ event }) => {
-					var _event$rawEvent, _event$rawEvent2, _event$message;
+					var _this$_runAbortContro4, _event$rawEvent, _event$rawEvent2, _event$message;
+					if (((_this$_runAbortContro4 = this._runAbortController) === null || _this$_runAbortContro4 === void 0 ? void 0 : _this$_runAbortContro4.signal.aborted) === true || (event === null || event === void 0 ? void 0 : event.code) === "abort") return;
 					const eventError = (event === null || event === void 0 ? void 0 : event.rawEvent) instanceof Error ? event.rawEvent : (event === null || event === void 0 || (_event$rawEvent = event.rawEvent) === null || _event$rawEvent === void 0 ? void 0 : _event$rawEvent.error) instanceof Error ? event.rawEvent.error : void 0;
 					const errorMessage = typeof (event === null || event === void 0 || (_event$rawEvent2 = event.rawEvent) === null || _event$rawEvent2 === void 0 ? void 0 : _event$rawEvent2.error) === "string" ? event.rawEvent.error : (_event$message = event === null || event === void 0 ? void 0 : event.message) !== null && _event$message !== void 0 ? _event$message : "Agent run error";
 					const rawError = eventError !== null && eventError !== void 0 ? eventError : new Error(errorMessage);