@copilotkit/core 1.63.2 → 1.64.0

package/dist/index.umd.js

@@ -708,6 +708,12 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		get capabilities() {
 			return this._capabilities;
 		}
+		requestInit(input) {
+			return {
+				...super.requestInit(input),
+				...this.credentials ? { credentials: this.credentials } : {}
+			};
+		}
 		async getCapabilities() {
 			var _this$_capabilities;
 			return (_this$_capabilities = this._capabilities) !== null && _this$_capabilities !== void 0 ? _this$_capabilities : {};
@@ -1885,6 +1891,19 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 //#endregion
 //#region src/core/run-handler.ts
 /**
+	* Absolute safety cap on the depth of recursive follow-up runs triggered by
+	* `processAgentResult`. Without this, any scenario that keeps
+	* `needsFollowUp = true` (e.g. the LLM repeatedly calling the same tool, a
+	* backend that errors after receiving tool results, or input processors that
+	* reprocess tool messages) would loop indefinitely, silently consuming API
+	* quota and potentially DOS'ing the backend.
+	*
+	* The cap is deliberately high so that legitimate multi-step agent workflows
+	* (search → fill form → confirm → update → send email, etc.) are never
+	* affected; it only trips on runaway recursion.
+	*/
+	const MAX_FOLLOW_UP_DEPTH = 100;
+	/**
 	* Handles agent execution, tool calling, and agent connectivity for CopilotKitCore.
 	* Manages the complete lifecycle of agent runs including tool execution and follow-ups.
 	*/
@@ -2101,33 +2120,64 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			const agentId = agent.agentId;
 			let needsFollowUp = false;
 			if (executeFrontendTools) {
-				for (const message of newMessages) if (message.role === "assistant") {
-					for (const toolCall of message.toolCalls || []) if (newMessages.findIndex((m) => m.role === "tool" && m.toolCallId === toolCall.id) === -1) {
-						const tool = this.getTool({
-							toolName: toolCall.function.name,
+				for (const message of newMessages) if (message.role === "assistant") for (const toolCall of message.toolCalls || []) {
+					const tool = this.getTool({
+						toolName: toolCall.function.name,
+						agentId: agent.agentId
+					});
+					let wildcardTool;
+					const getWildcardTool = () => {
+						if (tool || wildcardTool) return wildcardTool;
+						wildcardTool = this.getTool({
+							toolName: "*",
 							agentId: agent.agentId
 						});
-						if (tool) {
-							if (await this.executeSpecificTool(tool, toolCall, message, agent, agentId)) needsFollowUp = true;
-						} else {
-							const wildcardTool = this.getTool({
-								toolName: "*",
-								agentId: agent.agentId
-							});
-							if (wildcardTool) {
-								if (await this.executeWildcardTool(wildcardTool, toolCall, message, agent, agentId)) needsFollowUp = true;
-							}
+						return wildcardTool;
+					};
+					let existingResultIndex = newMessages.findIndex((m) => m.role === "tool" && m.toolCallId === toolCall.id);
+					const existingResult = existingResultIndex === -1 ? void 0 : newMessages[existingResultIndex];
+					const executableTool = tool !== null && tool !== void 0 ? tool : getWildcardTool();
+					if (existingResult && (executableTool === null || executableTool === void 0 ? void 0 : executableTool.handler) && this.isFrontendPlaceholderResult(existingResult)) {
+						newMessages.splice(existingResultIndex, 1);
+						existingResultIndex = -1;
+						const agentMsgIdx = agent.messages.findIndex((m) => m.role === "tool" && m.toolCallId === toolCall.id);
+						if (agentMsgIdx !== -1) agent.messages.splice(agentMsgIdx, 1);
+					}
+					if (existingResultIndex === -1) if (tool) {
+						if (await this.executeSpecificTool(tool, toolCall, message, agent, agentId)) needsFollowUp = true;
+					} else {
+						const fallbackTool = getWildcardTool();
+						if (fallbackTool) {
+							if (await this.executeWildcardTool(fallbackTool, toolCall, message, agent, agentId)) needsFollowUp = true;
 						}
 					}
 				}
 			}
-			if (needsFollowUp && !((_this$_runAbortContro2 = this._runAbortController) === null || _this$_runAbortContro2 === void 0 ? void 0 : _this$_runAbortContro2.signal.aborted)) {
+			if (needsFollowUp && !((_this$_runAbortContro2 = this._runAbortController) === null || _this$_runAbortContro2 === void 0 ? void 0 : _this$_runAbortContro2.signal.aborted)) if (this._runDepth >= MAX_FOLLOW_UP_DEPTH) _copilotkit_shared.logger.warn(`[CopilotKit] Follow-up depth limit (${MAX_FOLLOW_UP_DEPTH}) reached for agent "${agentId}". Stopping recursive follow-up runs to prevent an infinite loop. This usually indicates a tool that keeps requesting a follow-up (e.g. the LLM repeatedly calling the same tool). Consider setting "followUp: false" on the offending tool.`);
+			else {
 				await this._internal.waitForPendingFrameworkUpdates();
 				return await this.runAgent({ agent });
 			}
 			this._internal.suggestionEngine.reloadSuggestions(agentId);
 			return runAgentResult;
 		}
+		isFrontendPlaceholderResult(message) {
+			if (message.role !== "tool") return false;
+			return this.normalizeToolResultContent(message.content) === "Forwarded to client";
+		}
+		normalizeToolResultContent(content) {
+			if (typeof content === "string") return content.trim();
+			if (Array.isArray(content)) {
+				const text = content.flatMap((part) => {
+					if (typeof part === "string") return [part];
+					if (part && typeof part === "object" && "text" in part && typeof part.text === "string") return [part.text];
+					return [];
+				}).join("").trim();
+				return text.length > 0 ? text : null;
+			}
+			if (content && typeof content === "object" && "text" in content && typeof content.text === "string") return content.text.trim();
+			return null;
+		}
 		/**
 		* Shared handler execution logic used by executeSpecificTool, executeWildcardTool, and runTool.
 		* Handles arg parsing, subscriber notifications, handler invocation, result stringification,
@@ -2231,15 +2281,18 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 				messageId: message.id
 			});
 			{
+				var _agent$messages$inser;
 				const messageIndex = agent.messages.findIndex((m) => m.id === message.id);
 				if (messageIndex === -1) return false;
+				let insertAt = messageIndex + 1;
+				while (insertAt < agent.messages.length && ((_agent$messages$inser = agent.messages[insertAt]) === null || _agent$messages$inser === void 0 ? void 0 : _agent$messages$inser.role) === "tool") insertAt++;
 				const toolMessage = {
 					id: (0, _copilotkit_shared.randomUUID)(),
 					role: "tool",
 					toolCallId: toolCall.id,
 					content: handlerResult.result
 				};
-				agent.messages.splice(messageIndex + 1, 0, toolMessage);
+				agent.messages.splice(insertAt, 0, toolMessage);
 				if (!handlerResult.error && (tool === null || tool === void 0 ? void 0 : tool.followUp) !== false) return true;
 			}
 			return false;
@@ -2326,15 +2379,18 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 				}, "Subscriber onToolExecutionEnd error:");
 			}
 			{
+				var _agent$messages$inser2;
 				const messageIndex = agent.messages.findIndex((m) => m.id === message.id);
 				if (messageIndex === -1) return false;
+				let insertAt = messageIndex + 1;
+				while (insertAt < agent.messages.length && ((_agent$messages$inser2 = agent.messages[insertAt]) === null || _agent$messages$inser2 === void 0 ? void 0 : _agent$messages$inser2.role) === "tool") insertAt++;
 				const toolMessage = {
 					id: (0, _copilotkit_shared.randomUUID)(),
 					role: "tool",
 					toolCallId: toolCall.id,
 					content: toolCallResult
 				};
-				agent.messages.splice(messageIndex + 1, 0, toolMessage);
+				agent.messages.splice(insertAt, 0, toolMessage);
 				if (!errorMessage && (wildcardTool === null || wildcardTool === void 0 ? void 0 : wildcardTool.followUp) !== false) return true;
 			}
 			return false;
@@ -2460,7 +2516,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 					await emitAgentError(error, error instanceof AgentThreadLockedError ? CopilotKitCoreErrorCode.AGENT_THREAD_LOCKED : CopilotKitCoreErrorCode.AGENT_RUN_FAILED_EVENT, { source: "onRunFailed" });
 				},
 				onRunErrorEvent: async ({ event }) => {
-					var _event$rawEvent, _event$rawEvent2, _event$message;
+					var _this$_runAbortContro4, _event$rawEvent, _event$rawEvent2, _event$message;
+					if (((_this$_runAbortContro4 = this._runAbortController) === null || _this$_runAbortContro4 === void 0 ? void 0 : _this$_runAbortContro4.signal.aborted) === true || (event === null || event === void 0 ? void 0 : event.code) === "abort") return;
 					const eventError = (event === null || event === void 0 ? void 0 : event.rawEvent) instanceof Error ? event.rawEvent : (event === null || event === void 0 || (_event$rawEvent = event.rawEvent) === null || _event$rawEvent === void 0 ? void 0 : _event$rawEvent.error) instanceof Error ? event.rawEvent.error : void 0;
 					const errorMessage = typeof (event === null || event === void 0 || (_event$rawEvent2 = event.rawEvent) === null || _event$rawEvent2 === void 0 ? void 0 : _event$rawEvent2.error) === "string" ? event.rawEvent.error : (_event$message = event === null || event === void 0 ? void 0 : event.message) !== null && _event$message !== void 0 ? _event$message : "Agent run error";
 					const rawError = eventError !== null && eventError !== void 0 ? eventError : new Error(errorMessage);