@copilotkit/core 1.67.1 → 1.68.0

package/dist/index.umd.js

@@ -197,6 +197,45 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			this.config = config;
 			this.sharedState = sharedState;
 		}
+		/**
+		* Headers sent with the REST join requests (`/connect`, `/run`).
+		*
+		* Deliberately a public accessor pair rather than a plain read of `config`.
+		* `ProxiedCopilotRuntimeAgent` builds its delegate once and caches it for the
+		* proxy's lifetime, so a header that changes later (a tenant switch, a
+		* rotated bearer) would otherwise never reach the gateway. The accessor is
+		* what closes that gap: `syncDelegate` refreshes the delegate before every
+		* join, and its `hasHeaders` probe is an `"headers" in agent` check — which a
+		* prototype accessor satisfies but a `private config` does not.
+		*
+		* The setter replaces the config object instead of mutating it because
+		* `clone()` hands the same config reference to the copy. An in-place write
+		* would therefore have a per-thread clone's headers land on the original's
+		* config too. The join path itself would survive that (`syncDelegate`
+		* rewrites the headers just before every join), but the re-acquisition inside
+		* an already-running pipeline does not go through `syncDelegate` — so a
+		* clone's tenant could ride out on the original's socket-error refresh. That
+		* is the same cross-tenant leak this accessor exists to prevent.
+		*/
+		get headers() {
+			return this.config.headers;
+		}
+		set headers(headers) {
+			this.config = {
+				...this.config,
+				headers
+			};
+		}
+		/** Credentials mode for the REST join requests. Live for the same reason as {@link headers}. */
+		get credentials() {
+			return this.config.credentials;
+		}
+		set credentials(credentials) {
+			this.config = {
+				...this.config,
+				credentials
+			};
+		}
 		clone() {
 			return new IntelligenceAgent(this.config, this.sharedState);
 		}
@@ -358,7 +397,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 						method: "POST",
 						headers: {
 							"Content-Type": "application/json",
-							...this.config.headers
+							...this.headers
 						},
 						body: JSON.stringify({
 							threadId: input.threadId,
@@ -370,7 +409,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 							forwardedProps: input.forwardedProps,
 							...mode === "connect" ? { lastSeenEventId: replayCursor === void 0 ? this.getReconnectCursor(input) : replayCursor } : {}
 						}),
-						...this.config.credentials ? { credentials: this.config.credentials } : {}
+						...this.credentials ? { credentials: this.credentials } : {}
 					});
 					if (response.status === 204 && mode === "connect") return null;
 					if (response.status === 409 && mode === "run") throw new AgentThreadLockedError(input.threadId);
@@ -6042,7 +6081,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		const mutableInterrupts = [...interrupts];
 		const resume = (0, _ag_ui_client.buildResumeArray)(mutableInterrupts, _classPrivateFieldGet2(_responses, this));
 		const toolResults = mutableInterrupts.flatMap((interrupt) => {
-			if (!interrupt.toolCallId) return [];
+			if (!interrupt.toolCallId || interrupt.reason !== "tool_call") return [];
 			return [{
 				toolCallId: interrupt.toolCallId,
 				content: toolResultContent(_classPrivateFieldGet2(_responses, this)[interrupt.id])