@copilotkit/core 1.67.1 → 1.68.1

package/dist/index.cjs

@@ -158,6 +158,45 @@ var IntelligenceAgent = class IntelligenceAgent extends _ag_ui_client.AbstractAg
 		this.config = config;
 		this.sharedState = sharedState;
 	}
+	/**
+	* Headers sent with the REST join requests (`/connect`, `/run`).
+	*
+	* Deliberately a public accessor pair rather than a plain read of `config`.
+	* `ProxiedCopilotRuntimeAgent` builds its delegate once and caches it for the
+	* proxy's lifetime, so a header that changes later (a tenant switch, a
+	* rotated bearer) would otherwise never reach the gateway. The accessor is
+	* what closes that gap: `syncDelegate` refreshes the delegate before every
+	* join, and its `hasHeaders` probe is an `"headers" in agent` check — which a
+	* prototype accessor satisfies but a `private config` does not.
+	*
+	* The setter replaces the config object instead of mutating it because
+	* `clone()` hands the same config reference to the copy. An in-place write
+	* would therefore have a per-thread clone's headers land on the original's
+	* config too. The join path itself would survive that (`syncDelegate`
+	* rewrites the headers just before every join), but the re-acquisition inside
+	* an already-running pipeline does not go through `syncDelegate` — so a
+	* clone's tenant could ride out on the original's socket-error refresh. That
+	* is the same cross-tenant leak this accessor exists to prevent.
+	*/
+	get headers() {
+		return this.config.headers;
+	}
+	set headers(headers) {
+		this.config = {
+			...this.config,
+			headers
+		};
+	}
+	/** Credentials mode for the REST join requests. Live for the same reason as {@link headers}. */
+	get credentials() {
+		return this.config.credentials;
+	}
+	set credentials(credentials) {
+		this.config = {
+			...this.config,
+			credentials
+		};
+	}
 	clone() {
 		return new IntelligenceAgent(this.config, this.sharedState);
 	}
@@ -318,7 +357,7 @@ var IntelligenceAgent = class IntelligenceAgent extends _ag_ui_client.AbstractAg
 					method: "POST",
 					headers: {
 						"Content-Type": "application/json",
-						...this.config.headers
+						...this.headers
 					},
 					body: JSON.stringify({
 						threadId: input.threadId,
@@ -330,7 +369,7 @@ var IntelligenceAgent = class IntelligenceAgent extends _ag_ui_client.AbstractAg
 						forwardedProps: input.forwardedProps,
 						...mode === "connect" ? { lastSeenEventId: replayCursor === void 0 ? this.getReconnectCursor(input) : replayCursor } : {}
 					}),
-					...this.config.credentials ? { credentials: this.config.credentials } : {}
+					...this.credentials ? { credentials: this.credentials } : {}
 				});
 				if (response.status === 204 && mode === "connect") return null;
 				if (response.status === 409 && mode === "run") throw new AgentThreadLockedError(input.threadId);
@@ -5838,7 +5877,7 @@ var ɵInterruptState = class {
 		const mutableInterrupts = [...interrupts];
 		const resume = (0, _ag_ui_client.buildResumeArray)(mutableInterrupts, this.#responses);
 		const toolResults = mutableInterrupts.flatMap((interrupt) => {
-			if (!interrupt.toolCallId) return [];
+			if (!interrupt.toolCallId || interrupt.reason !== "tool_call") return [];
 			return [{
 				toolCallId: interrupt.toolCallId,
 				content: toolResultContent(this.#responses[interrupt.id])