@copilotkit/core 1.73.0 → 1.73.2-canary.1790068297

package/dist/index.umd.js

@@ -422,16 +422,24 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			return (0, rxjs.defer)(async () => {
 				try {
 					var _this$config$fetch;
-					const response = await ((_this$config$fetch = this.config.fetch) !== null && _this$config$fetch !== void 0 ? _this$config$fetch : globalFetch)(this.buildRuntimeUrl(mode), {
+					const requestFetch = (_this$config$fetch = this.config.fetch) !== null && _this$config$fetch !== void 0 ? _this$config$fetch : globalFetch;
+					const body = {
+						...input,
+						...mode === "connect" ? { lastSeenEventId: replayCursor === void 0 ? this.getReconnectCursor(input) : replayCursor } : {}
+					};
+					const single = this.config.transport === "single";
+					const response = await requestFetch(single ? this.config.runtimeUrl : this.buildRuntimeUrl(mode), {
 						method: "POST",
+						redirect: "error",
 						headers: {
 							"Content-Type": "application/json",
 							...this.headers
 						},
-						body: JSON.stringify({
-							...input,
-							...mode === "connect" ? { lastSeenEventId: replayCursor === void 0 ? this.getReconnectCursor(input) : replayCursor } : {}
-						}),
+						body: JSON.stringify(single ? {
+							method: `agent/${mode}`,
+							params: { agentId: this.config.agentId },
+							body
+						} : body),
 						...this.credentials ? { credentials: this.credentials } : {}
 					});
 					if (response.status === 204 && mode === "connect") return null;
@@ -672,6 +680,90 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		return typeof error === "object" && error !== null && typeof error.runtimeInfoStatus === "number";
 	}
 
+//#endregion
+//#region src/core/message-filter.ts
+	function toolCallIdsOf(message) {
+		const calls = message.toolCalls;
+		if (!Array.isArray(calls)) return [];
+		return calls.map((call) => call.id).filter((id) => Boolean(id));
+	}
+	function resultCallIdOf(message) {
+		if (message.role !== "tool") return void 0;
+		return message.toolCallId;
+	}
+	/**
+	* Repair the tool-call pairs a filter broke.
+	*
+	* Every provider rejects a half pair. A tool result whose call is gone reads as
+	* a reply to nothing, and an assistant tool call whose result is gone leaves
+	* the turn unanswered — the failure reporters hit on #1482 when a trimmed
+	* history landed mid-HITL and Anthropic answered "a tool result is expected".
+	* A filter written as `messages.slice(-1)` cannot know this, so the repair runs
+	* for every filter rather than being something each caller opts into.
+	*
+	* Both repairs restore, never discard, and both are anchored on the untrimmed
+	* thread:
+	*
+	* - A kept tool result whose assistant call was trimmed away gets that call put
+	*   back in front of it. Dropping the result instead would be protocol-safe and
+	*   semantically wrong: on a human-in-the-loop turn the result IS the new
+	*   information, and a backend that already holds the call would be asked to
+	*   resume with nothing.
+	* - A kept assistant call whose result was trimmed gets that result restored,
+	*   placed directly after the call.
+	*
+	* Restoring a call pulls in every result for that call, not only the one the
+	* filter kept. Providers reject an assistant turn with a parallel tool call
+	* left unanswered, so a half-answered set is as invalid as a missing one.
+	*
+	* A call with no result anywhere in `full` is left alone. That is an open call
+	* (a pending frontend tool, an unanswered interrupt), not a broken pair. A
+	* result whose call is nowhere in `full` is left alone too: it was already
+	* unpaired before the filter ran, so it is not this function's to fix.
+	*
+	* The filter's own ordering is preserved. Restorations are the only insertions,
+	* and messages the filter synthesized (absent from `full`) pass through
+	* untouched.
+	*/
+	function ɵrepairToolCallPairs(kept, full) {
+		const callIdToIssuer = /* @__PURE__ */ new Map();
+		const callIdToResult = /* @__PURE__ */ new Map();
+		for (const message of full) {
+			for (const callId of toolCallIdsOf(message)) callIdToIssuer.set(callId, message);
+			const resultCallId = resultCallIdOf(message);
+			if (resultCallId !== void 0) callIdToResult.set(resultCallId, message);
+		}
+		const repaired = [];
+		const emitted = /* @__PURE__ */ new Set();
+		const emit = (message) => {
+			if (emitted.has(message.id)) return;
+			emitted.add(message.id);
+			repaired.push(message);
+		};
+		/** Emit an assistant turn together with every result it is owed. */
+		const emitWithResults = (message) => {
+			emit(message);
+			for (const callId of toolCallIdsOf(message)) {
+				const result = callIdToResult.get(callId);
+				if (result) emit(result);
+			}
+		};
+		for (const message of kept) {
+			const resultCallId = resultCallIdOf(message);
+			if (resultCallId === void 0) {
+				emitWithResults(message);
+				continue;
+			}
+			const issuer = callIdToIssuer.get(resultCallId);
+			if (issuer) {
+				emitWithResults(issuer);
+				continue;
+			}
+			emit(message);
+		}
+		return repaired;
+	}
+
 //#endregion
 //#region \0@oxc-project+runtime@0.112.0/helpers/checkPrivateRedeclaration.js
 	function _checkPrivateRedeclaration(e, t) {
@@ -773,6 +865,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			_defineProperty(this, "_capabilities", void 0);
 			_defineProperty(this, "delegate", void 0);
 			_defineProperty(this, "runtimeInfoPromise", void 0);
+			_defineProperty(this, "_messageFilter", void 0);
+			_defineProperty(this, "activeRun", void 0);
 			this.runtimeUrl = normalizedRuntimeUrl !== null && normalizedRuntimeUrl !== void 0 ? normalizedRuntimeUrl : config.runtimeUrl;
 			this.runtimeEndpointUrl = config.runtimeUrl;
 			this.credentials = config.credentials;
@@ -781,10 +875,48 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			this.runtimeMode = (_config$runtimeMode = config.runtimeMode) !== null && _config$runtimeMode !== void 0 ? _config$runtimeMode : _copilotkit_shared.RUNTIME_MODE_SSE;
 			this.intelligence = config.intelligence;
 			this._capabilities = config.capabilities;
+			this._messageFilter = config.messageFilter;
 			if (config.debug) this.debug = config.debug;
 			if (this.transport === "single") this.singleEndpointUrl = this.runtimeEndpointUrl;
 		}
 		/**
+		* Adopt the runtime mode a fresh `/info` just reported.
+		*
+		* A live proxy outlives the runtime configuration that minted it: a
+		* redeploy, an env-var change or a rollback can flip `intelligence` → `sse`
+		* under a page that is already open. The registry preserves the proxy across
+		* that re-sync on purpose — it is backing an open conversation — so the new
+		* mode is pushed onto the instance here instead of replacing it.
+		*
+		* Without this the mode was decided once, at construction, and `run()` kept
+		* taking the delegate path against a runtime serving plain SSE, where
+		* `response.json()` on a `text/event-stream` body throws for the rest of the
+		* page's life. See #7130.
+		*
+		* A delegate built for the old mode is torn down: it speaks a protocol the
+		* runtime no longer serves, and it may be holding a websocket open. The
+		* memoized `/info` promise goes with it — it answered for the old
+		* configuration, so a later `ensureRuntimeConfiguration()` must re-ask
+		* rather than treat that answer as current.
+		*
+		* Only `wsUrl` is compared on the Intelligence metadata, because that is the
+		* one field the delegate bakes in at construction.
+		*/
+		adoptRuntimeMode(runtimeMode, intelligence) {
+			var _this$intelligence;
+			const unchanged = this.runtimeMode === runtimeMode && ((_this$intelligence = this.intelligence) === null || _this$intelligence === void 0 ? void 0 : _this$intelligence.wsUrl) === (intelligence === null || intelligence === void 0 ? void 0 : intelligence.wsUrl);
+			this.runtimeMode = runtimeMode;
+			this.intelligence = intelligence;
+			if (unchanged) return;
+			this.runtimeInfoPromise = void 0;
+			const staleDelegate = this.delegate;
+			this.delegate = void 0;
+			if (staleDelegate) {
+				staleDelegate.abortRun();
+				this.detachActiveRun();
+			}
+		}
+		/**
 		* The agent id used for outbound runtime requests — `runtimeAgentId` when
 		* set (manually-registered proxy), otherwise `agentId` (registry id
 		* matches runtime id). Subscriber bookkeeping keeps using `agentId`
@@ -803,6 +935,20 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		get capabilities() {
 			return this._capabilities;
 		}
+		/**
+		* The filter applied to the outbound message list on every run.
+		*
+		* Registry-owned. `AgentRegistry` writes it whenever the core-level filter
+		* changes, so an agent discovered before the app configured one still picks
+		* it up — and so a value written here by hand is replaced on the registry's
+		* next sweep. Configure it through `CopilotKitCore` instead.
+		*/
+		get messageFilter() {
+			return this._messageFilter;
+		}
+		set messageFilter(filter) {
+			this._messageFilter = filter;
+		}
 		requestInit(input) {
 			return {
 				...super.requestInit(input),
@@ -818,6 +964,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			await super.detachActiveRun();
 		}
 		abortRun() {
+			var _this$activeRun;
 			if (this.delegate) {
 				this.syncDelegate(this.delegate);
 				this.delegate.abortRun();
@@ -827,6 +974,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			if (!this.agentId || !this.threadId) return;
 			if (typeof fetch === "undefined") return;
 			const routedId = this.routedAgentId();
+			const runId = ((_this$activeRun = this.activeRun) === null || _this$activeRun === void 0 ? void 0 : _this$activeRun.threadId) === this.threadId ? this.activeRun.runId : void 0;
 			if (this.transport === "single") {
 				if (!this.singleEndpointUrl) return;
 				const headers = new Headers({
@@ -841,7 +989,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 						params: {
 							agentId: routedId,
 							threadId: this.threadId
-						}
+						},
+						...runId === void 0 ? {} : { body: { runId } }
 					}),
 					...this.credentials ? { credentials: this.credentials } : {}
 				}).catch((error) => {
@@ -860,6 +1009,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 					"Content-Type": "application/json",
 					...this.headers
 				},
+				...runId === void 0 ? {} : { body: JSON.stringify({ runId }) },
 				...this.credentials ? { credentials: this.credentials } : {}
 			}).catch((error) => {
 				console.error("ProxiedCopilotRuntimeAgent: stop request failed", error);
@@ -926,7 +1076,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 				intelligence: this.intelligence,
 				capabilities: this._capabilities,
 				debug: this.debug,
-				fetch: this.fetch
+				fetch: this.fetch,
+				messageFilter: this._messageFilter
 			});
 			cloned.threadId = this.threadId;
 			cloned.setState(this.state);
@@ -1058,12 +1209,14 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			};
 		}
 		createIntelligenceDelegate() {
-			var _this$intelligence;
+			var _this$intelligence2, _this$runtimeEndpoint3;
 			const routedId = this.routedAgentId();
-			if (!this.runtimeUrl || !routedId || !((_this$intelligence = this.intelligence) === null || _this$intelligence === void 0 ? void 0 : _this$intelligence.wsUrl)) throw new Error("Intelligence mode requires runtimeUrl, agentId, and intelligence websocket metadata");
+			if (!this.runtimeUrl || !routedId || !((_this$intelligence2 = this.intelligence) === null || _this$intelligence2 === void 0 ? void 0 : _this$intelligence2.wsUrl)) throw new Error("Intelligence mode requires runtimeUrl, agentId, and intelligence websocket metadata");
+			const single = this.transport === "single";
 			return new IntelligenceAgent({
 				url: this.intelligence.wsUrl,
-				runtimeUrl: this.runtimeUrl,
+				runtimeUrl: single ? (_this$runtimeEndpoint3 = this.runtimeEndpointUrl) !== null && _this$runtimeEndpoint3 !== void 0 ? _this$runtimeEndpoint3 : this.runtimeUrl : this.runtimeUrl,
+				transport: single ? "single" : "rest",
 				agentId: routedId,
 				headers: { ...this.headers },
 				credentials: this.credentials,
@@ -1081,10 +1234,60 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		}
 	};
 	_ProxiedCopilotRuntimeAgent = ProxiedCopilotRuntimeAgent;
+	/**
+	* Narrow the outbound payload with the configured message filter.
+	*
+	* **Called from the HTTP paths only, and that placement is the Intelligence
+	* exemption.** An earlier revision applied the filter in
+	* `prepareRunAgentInput`, which runs before the runtime mode is resolved:
+	* with the default `"auto"` transport, or on a proxy still `"pending"` its
+	* first `/info`, `run()` prepared the input, *then* resolved the mode, then
+	* handed that already-filtered input to `#runViaDelegate` — so a managed
+	* runtime received a truncated thread despite the exemption. Filtering here
+	* makes that unreachable by construction: `#runViaHttp` and
+	* `#connectViaHttp` are only entered once the mode is known not to be
+	* Intelligence. Do not move this back up the call chain.
+	*
+	* The managed runtime is the store of record for the thread — the threads
+	* drawer and the Slack transcript read from it — so a client-side truncation
+	* there has a blast radius nobody asked for. Every reporter on #1482 is
+	* self-hosted.
+	*
+	* `prepareRunAgentInput` has already deep-cloned the thread and stripped
+	* `activity` messages by the time the input reaches here, so the filter
+	* cannot reach the messages the UI renders no matter what it does with the
+	* array it is handed. The filter gets a *second* deep clone on top of that,
+	* because `input.messages` is also the repair baseline and the untrimmed
+	* fallback: sharing the message objects let a filter that mutates a kept
+	* message's `toolCallId` corrupt the baseline, and an orphaned tool result
+	* then went out on the wire — a payload the provider rejects, which is
+	* exactly the failure this whole mechanism exists to prevent.
+	*/
+	function _applyMessageFilter(input) {
+		const filter = this._messageFilter;
+		if (!filter) return input;
+		try {
+			var _this$agentId;
+			const kept = filter((0, _ag_ui_client.structuredClone_)(input.messages), { agentId: (_this$agentId = this.agentId) !== null && _this$agentId !== void 0 ? _this$agentId : "" });
+			if (!Array.isArray(kept)) {
+				console.warn("ProxiedCopilotRuntimeAgent: messageFilter returned a non-array value; sending the full message history instead.");
+				return input;
+			}
+			return {
+				...input,
+				messages: ɵrepairToolCallPairs(kept, input.messages)
+			};
+		} catch (error) {
+			console.warn("ProxiedCopilotRuntimeAgent: messageFilter failed; sending the full message history instead.", error);
+			return input;
+		}
+	}
 	function _connectViaDelegate(input) {
 		return (0, rxjs.defer)(() => (0, rxjs.from)(this.resolveDelegate())).pipe((0, rxjs_operators.switchMap)((delegate) => withAbortErrorHandling(delegate.connect(input))));
 	}
-	function _connectViaHttp(input) {
+	function _connectViaHttp(unfiltered) {
+		const input = _assertClassBrand(_ProxiedCopilotRuntimeAgent_brand, this, _applyMessageFilter).call(this, unfiltered);
+		this.activeRun = void 0;
 		const routedId = this.routedAgentId();
 		if (this.transport === "single") {
 			if (!this.singleEndpointUrl) throw new Error("Single endpoint transport requires a runtimeUrl");
@@ -1098,13 +1301,24 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 	function _runViaDelegate(input) {
 		return (0, rxjs.defer)(() => (0, rxjs.from)(this.resolveDelegate())).pipe((0, rxjs_operators.switchMap)((delegate) => withAbortErrorHandling(delegate.run(input))));
 	}
-	function _runViaHttp(input) {
+	function _runViaHttp(unfiltered) {
+		const input = _assertClassBrand(_ProxiedCopilotRuntimeAgent_brand, this, _applyMessageFilter).call(this, unfiltered);
+		const activeRun = {
+			threadId: input.threadId,
+			runId: input.runId
+		};
+		const trackActiveRun = (source) => {
+			this.activeRun = activeRun;
+			return source.pipe((0, rxjs_operators.finalize)(() => {
+				if (this.activeRun === activeRun) this.activeRun = void 0;
+			}));
+		};
 		if (this.transport === "single") {
 			if (!this.singleEndpointUrl) throw new Error("Single endpoint transport requires a runtimeUrl");
 			const requestInit = this.createSingleRouteRequestInit(input, "agent/run", { agentId: this.routedAgentId() });
-			return withAbortErrorHandling((0, _ag_ui_client.transformHttpEventStream)((0, _ag_ui_client.runHttpRequest)(() => this.fetch(this.singleEndpointUrl, requestInit))));
+			return trackActiveRun(withAbortErrorHandling((0, _ag_ui_client.transformHttpEventStream)((0, _ag_ui_client.runHttpRequest)(() => this.fetch(this.singleEndpointUrl, requestInit)))));
 		}
-		return withAbortErrorHandling(_superPropGet(_ProxiedCopilotRuntimeAgent.prototype, "run", this, 2)([input]));
+		return trackActiveRun(withAbortErrorHandling(_superPropGet(_ProxiedCopilotRuntimeAgent.prototype, "run", this, 2)([input])));
 	}
 
 //#endregion
@@ -1343,6 +1557,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			this.localAgents = this.assignAgentIds(agents);
 			this.applyHeadersToAgents(this.localAgents);
 			this.applyCredentialsToAgents(this.localAgents);
+			this.applyMessageFilterToAgents(this.localAgents);
 			this.applyRuntimeFetchToAgents(this.localAgents);
 			this._agents = this.localAgents;
 		}
@@ -1435,6 +1650,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			};
 			this.applyHeadersToAgents(this._agents);
 			this.applyCredentialsToAgents(this._agents);
+			this.applyMessageFilterToAgents(this._agents);
 			this.applyRuntimeFetchToAgents(this._agents);
 			this.notifyAgentsChanged();
 		}
@@ -1488,7 +1704,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 				credentials: friends.credentials,
 				runtimeMode: this._runtimeUrl ? this._runtimeConnectionStatus === CopilotKitCoreRuntimeConnectionStatus.Connected ? this._runtimeMode : "pending" : _copilotkit_shared.RUNTIME_MODE_SSE,
 				intelligence: this._intelligence,
-				debug: debug ? (0, _copilotkit_shared.resolveDebugConfig)(debug) : void 0
+				debug: debug ? (0, _copilotkit_shared.resolveDebugConfig)(debug) : void 0,
+				messageFilter: friends.messageFilter
 			});
 			this.applyHeadersToAgent(agent);
 			this.applyRuntimeFetchToAgent(agent);
@@ -1557,6 +1774,48 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 				this.applyCredentialsToAgent(agent);
 			});
 		}
+		/**
+		* Carry the mode a fresh `/info` reported onto a proxy this re-sync kept.
+		*
+		* `canReuseRuntimeAgent` deliberately ignores the mode: a preserved proxy is
+		* backing an open conversation, and replacing the instance to change one
+		* field would drop it. The mode is therefore pushed onto the survivor here,
+		* the same way headers and credentials are. Without it the mode was fixed at
+		* construction, so a runtime that flipped `intelligence` → `sse` under an
+		* open page left every later run on the delegate path. See #7130.
+		*/
+		applyRuntimeModeToAgent(agent, runtimeInfo) {
+			if (agent instanceof ProxiedCopilotRuntimeAgent) {
+				var _runtimeInfo$mode;
+				agent.adoptRuntimeMode((_runtimeInfo$mode = runtimeInfo.mode) !== null && _runtimeInfo$mode !== void 0 ? _runtimeInfo$mode : _copilotkit_shared.RUNTIME_MODE_SSE, runtimeInfo.intelligence);
+			}
+		}
+		/**
+		* Apply the core's message filter to an agent.
+		*
+		* The test is the class, not which bucket the agent is registered in: every
+		* `ProxiedCopilotRuntimeAgent` gets the core filter, whether it came from
+		* `/info` or from `registerProxiedAgent` (which files its proxy under
+		* `localAgents`). Agents of any other class are left untouched — an
+		* `AbstractAgent` the app built has no such hook, and its owner already has
+		* the AG-UI middleware seam.
+		*
+		* This is the sole writer of `agent.messageFilter` in normal operation. The
+		* public setter exists for the registry and for tests; a value written
+		* directly onto an agent is replaced the next time the registry sweeps, the
+		* same way per-agent credentials are.
+		*/
+		applyMessageFilterToAgent(agent) {
+			if (agent instanceof ProxiedCopilotRuntimeAgent) agent.messageFilter = this.core.messageFilter;
+		}
+		/**
+		* Apply the core's message filter to all agents
+		*/
+		applyMessageFilterToAgents(agents) {
+			Object.values(agents).forEach((agent) => {
+				this.applyMessageFilterToAgent(agent);
+			});
+		}
 		createRuntimeFetch() {
 			if (!this.runtimeFetch) this.runtimeFetch = (async (input, init) => {
 				const meta = () => runtimeRequestMeta(init);
@@ -1952,7 +2211,9 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 					if (existing instanceof ProxiedCopilotRuntimeAgent && this.canReuseRuntimeAgent(existing, runtimeUrl, this._runtimeTransport)) {
 						this.applyHeadersToAgent(existing);
 						this.applyCredentialsToAgent(existing);
+						this.applyMessageFilterToAgent(existing);
 						this.applyRuntimeFetchToAgent(existing);
+						this.applyRuntimeModeToAgent(existing, runtimeInfoResponse);
 						return [id, existing];
 					}
 					const agent = new ProxiedCopilotRuntimeAgent({
@@ -1964,7 +2225,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 						runtimeMode: (_runtimeInfoResponse$ = runtimeInfoResponse.mode) !== null && _runtimeInfoResponse$ !== void 0 ? _runtimeInfoResponse$ : _copilotkit_shared.RUNTIME_MODE_SSE,
 						intelligence: runtimeInfoResponse.intelligence,
 						capabilities,
-						debug: rawDebug ? (0, _copilotkit_shared.resolveDebugConfig)(rawDebug) : void 0
+						debug: rawDebug ? (0, _copilotkit_shared.resolveDebugConfig)(rawDebug) : void 0,
+						messageFilter: this.core.messageFilter
 					});
 					this.applyHeadersToAgent(agent);
 					this.applyRuntimeFetchToAgent(agent);
@@ -2371,7 +2633,10 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 							credentials
 						}) } : {}
 					});
-				} else suggestionAgent = suggestionsProviderAgent.clone();
+				} else {
+					suggestionAgent = suggestionsProviderAgent.clone();
+					if (suggestionAgent instanceof ProxiedCopilotRuntimeAgent) suggestionAgent.messageFilter = void 0;
+				}
 				suggestionAgent.threadId = suggestionId;
 				suggestionAgent.setMessages(seededMessages);
 				suggestionAgent.setState(seededState);
@@ -2755,6 +3020,20 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 //#endregion
 //#region src/core/run-handler.ts
 /**
+	* Live approvals cancelled by stopping their own run, keyed by the handler's
+	* signal. The value reports whether that stop is still current: no reconnect
+	* has started and the thread is unchanged, so nothing will restore the call.
+	*
+	* Kept here rather than in `AbortSignal.reason`: React Native's global
+	* `AbortController` is the `abort-controller@3` polyfill, whose `abort()`
+	* takes no reason and whose signals never expose one.
+	*/
+	const liveHITLStops = /* @__PURE__ */ new WeakMap();
+	function discardAbortedResult(signal, discardOnAbort, errorMessage) {
+		var _liveHITLStops$get;
+		return !!(discardOnAbort && (signal === null || signal === void 0 ? void 0 : signal.aborted) && !(((_liveHITLStops$get = liveHITLStops.get(signal)) === null || _liveHITLStops$get === void 0 ? void 0 : _liveHITLStops$get()) && errorMessage));
+	}
+	/**
 	* Absolute safety cap on the depth of recursive follow-up runs triggered by
 	* `processAgentResult`. Without this, any scenario that keeps
 	* `needsFollowUp = true` (e.g. the LLM repeatedly calling the same tool, a
@@ -2793,15 +3072,24 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			_defineProperty(this, "_lastConnectedThreadIdsByAgent", /* @__PURE__ */ new Map());
 			_defineProperty(this, "_anonymousAgentIds", /* @__PURE__ */ new WeakMap());
 			_defineProperty(this, "_nextAnonymousAgentId", 0);
+			_defineProperty(this, "_executingToolCalls", /* @__PURE__ */ new WeakMap());
+			_defineProperty(this, "_connectionGenerations", /* @__PURE__ */ new WeakMap());
+			_defineProperty(this, "_interactionAbortControllers", /* @__PURE__ */ new WeakMap());
 		}
 		/**
 		* Abort the current run. Called by `CopilotKitCore.stopAgent()` to signal
 		* that in-flight tool handlers should stop and `processAgentResult` should
 		* not start a follow-up run.
 		*/
-		abortCurrentRun() {
+		abortCurrentRun(agent) {
 			var _this$_runAbortContro;
 			(_this$_runAbortContro = this._runAbortController) === null || _this$_runAbortContro === void 0 || _this$_runAbortContro.abort();
+			const replay = this._interactionAbortControllers.get(agent);
+			if (replay) {
+				for (const controller of replay.controllers) controller.abort();
+				this._interactionAbortControllers.delete(agent);
+				this._executingToolCalls.delete(agent);
+			}
 		}
 		/**
 		* Typed access to CopilotKitCore's internal ("friend") methods.
@@ -2958,9 +3246,16 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		*/
 		async connectAgent({ agent }) {
 			var _agent$threadId;
+			this._connectionGenerations.set(agent, {});
 			const incomingThreadId = (_agent$threadId = agent.threadId) !== null && _agent$threadId !== void 0 ? _agent$threadId : null;
+			const previousReplay = this._interactionAbortControllers.get(agent);
+			if (previousReplay && previousReplay.threadId !== incomingThreadId) {
+				for (const controller of previousReplay.controllers) controller.abort();
+				this._interactionAbortControllers.delete(agent);
+				this._executingToolCalls.delete(agent);
+			}
 			try {
-				var _this$_lastConnectedT;
+				var _this$_lastConnectedT, _agent$threadId2, _this$_interactionAbo;
 				const restoreKey = this.getConnectRestoreKey(agent);
 				const isFreshRestore = incomingThreadId !== ((_this$_lastConnectedT = this._lastConnectedThreadIdsByAgent.get(restoreKey)) !== null && _this$_lastConnectedT !== void 0 ? _this$_lastConnectedT : null);
 				this._lastConnectedThreadIdsByAgent.set(restoreKey, incomingThreadId);
@@ -2987,11 +3282,33 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 					tools: this.buildFrontendTools(agent.agentId),
 					context: this._internal.getContextForAgent(agent.agentId)
 				}, this.createAgentErrorSubscriber(agent));
-				return this.processAgentResult({
+				if (((_agent$threadId2 = agent.threadId) !== null && _agent$threadId2 !== void 0 ? _agent$threadId2 : null) !== incomingThreadId) return runAgentResult;
+				const controller = new AbortController();
+				const replay = (_this$_interactionAbo = this._interactionAbortControllers.get(agent)) !== null && _this$_interactionAbo !== void 0 ? _this$_interactionAbo : {
+					threadId: incomingThreadId,
+					controllers: /* @__PURE__ */ new Set()
+				};
+				replay.controllers.add(controller);
+				this._interactionAbortControllers.set(agent, replay);
+				this.processAgentResult({
 					runAgentResult,
 					agent,
-					executeFrontendTools: false
+					toolExecutionMode: "human-in-the-loop",
+					signal: controller.signal
+				}).catch(async (error) => {
+					await this._internal.emitError({
+						error: error instanceof Error ? error : new Error(String(error)),
+						code: CopilotKitCoreErrorCode.AGENT_CONNECT_FAILED,
+						context: {
+							agentId: agent.agentId,
+							threadId: incomingThreadId
+						}
+					});
+				}).finally(() => {
+					replay.controllers.delete(controller);
+					if (replay.controllers.size === 0 && this._interactionAbortControllers.get(agent) === replay) this._interactionAbortControllers.delete(agent);
 				});
+				return runAgentResult;
 			} catch (error) {
 				const connectError = error instanceof Error ? error : new Error(String(error));
 				if (!isAbortError$1(connectError)) {
@@ -3096,46 +3413,92 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		/**
 		* Process agent result and execute tools
 		*/
-		async processAgentResult({ runAgentResult, agent, runId, executeFrontendTools = true }) {
+		async processAgentResult({ runAgentResult, agent, runId, toolExecutionMode = "all", signal = (() => {
 			var _this$_runAbortContro2;
+			return (_this$_runAbortContro2 = this._runAbortController) === null || _this$_runAbortContro2 === void 0 ? void 0 : _this$_runAbortContro2.signal;
+		})() }) {
+			var _this$_executingToolC;
 			const { newMessages } = runAgentResult;
 			const agentId = agent.agentId;
 			let needsFollowUp = false;
-			if (executeFrontendTools) {
-				for (const message of newMessages) if (message.role === "assistant") for (const toolCall of message.toolCalls || []) {
-					const tool = this.getTool({
-						toolName: toolCall.function.name,
+			const threadId = agent.threadId;
+			const executing = (_this$_executingToolC = this._executingToolCalls.get(agent)) !== null && _this$_executingToolC !== void 0 ? _this$_executingToolC : /* @__PURE__ */ new Set();
+			this._executingToolCalls.set(agent, executing);
+			if (toolExecutionMode === "human-in-the-loop" && agent.messages.some((message) => {
+				var _message$toolCalls;
+				return message.role === "assistant" && ((_message$toolCalls = message.toolCalls) === null || _message$toolCalls === void 0 ? void 0 : _message$toolCalls.some((call) => executing.has(JSON.stringify([threadId, call.id])) && !agent.messages.some((result) => result.role === "tool" && result.toolCallId === call.id && !this.isFrontendPlaceholderResult(result))));
+			})) return runAgentResult;
+			const messagesToProcess = toolExecutionMode === "human-in-the-loop" ? [...agent.messages] : newMessages;
+			for (const message of messagesToProcess) if (message.role === "assistant") for (const toolCall of message.toolCalls || []) {
+				var _agent$messages$find;
+				const tool = this.getTool({
+					toolName: toolCall.function.name,
+					agentId: agent.agentId
+				});
+				let wildcardTool;
+				const getWildcardTool = () => {
+					if (tool || wildcardTool) return wildcardTool;
+					wildcardTool = this.getTool({
+						toolName: WILDCARD_TOOL_NAME,
 						agentId: agent.agentId
 					});
-					let wildcardTool;
-					const getWildcardTool = () => {
-						if (tool || wildcardTool) return wildcardTool;
-						wildcardTool = this.getTool({
-							toolName: WILDCARD_TOOL_NAME,
-							agentId: agent.agentId
-						});
-						return wildcardTool;
+					return wildcardTool;
+				};
+				const executableTool = tool !== null && tool !== void 0 ? tool : getWildcardTool();
+				if (toolExecutionMode === "human-in-the-loop" && ((executableTool === null || executableTool === void 0 ? void 0 : executableTool.type) !== "human-in-the-loop" || !executableTool.handler)) continue;
+				const executionKey = JSON.stringify([threadId, toolCall.id]);
+				if ((signal === null || signal === void 0 ? void 0 : signal.aborted) || agent.threadId !== threadId || executing.has(executionKey)) continue;
+				const existingResultIndex = newMessages.findIndex((m) => m.role === "tool" && m.toolCallId === toolCall.id);
+				let existingResult = (_agent$messages$find = agent.messages.find((m) => m.role === "tool" && m.toolCallId === toolCall.id)) !== null && _agent$messages$find !== void 0 ? _agent$messages$find : newMessages[existingResultIndex];
+				if (existingResult && (executableTool === null || executableTool === void 0 ? void 0 : executableTool.handler) && this.isFrontendPlaceholderResult(existingResult)) {
+					if (existingResultIndex !== -1) newMessages.splice(existingResultIndex, 1);
+					existingResult = void 0;
+					const agentMsgIdx = agent.messages.findIndex((m) => m.role === "tool" && m.toolCallId === toolCall.id);
+					if (agentMsgIdx !== -1) agent.messages.splice(agentMsgIdx, 1);
+				}
+				if (!existingResult) {
+					var _this$_interactionAbo2, _interactionControlle;
+					executing.add(executionKey);
+					const interactionController = toolExecutionMode === "all" && (executableTool === null || executableTool === void 0 ? void 0 : executableTool.type) === "human-in-the-loop" ? new AbortController() : void 0;
+					const interactions = (_this$_interactionAbo2 = this._interactionAbortControllers.get(agent)) !== null && _this$_interactionAbo2 !== void 0 ? _this$_interactionAbo2 : {
+						threadId: threadId !== null && threadId !== void 0 ? threadId : null,
+						controllers: /* @__PURE__ */ new Set()
 					};
-					let existingResultIndex = newMessages.findIndex((m) => m.role === "tool" && m.toolCallId === toolCall.id);
-					const existingResult = existingResultIndex === -1 ? void 0 : newMessages[existingResultIndex];
-					const executableTool = tool !== null && tool !== void 0 ? tool : getWildcardTool();
-					if (existingResult && (executableTool === null || executableTool === void 0 ? void 0 : executableTool.handler) && this.isFrontendPlaceholderResult(existingResult)) {
-						newMessages.splice(existingResultIndex, 1);
-						existingResultIndex = -1;
-						const agentMsgIdx = agent.messages.findIndex((m) => m.role === "tool" && m.toolCallId === toolCall.id);
-						if (agentMsgIdx !== -1) agent.messages.splice(agentMsgIdx, 1);
+					const abortInteraction = () => {
+						if (!interactionController) return;
+						const connectionGeneration = this._connectionGenerations.get(agent);
+						liveHITLStops.set(interactionController.signal, () => this._connectionGenerations.get(agent) === connectionGeneration && agent.threadId === threadId);
+						interactionController.abort();
+					};
+					if (interactionController) {
+						interactions.controllers.add(interactionController);
+						this._interactionAbortControllers.set(agent, interactions);
+						signal === null || signal === void 0 || signal.addEventListener("abort", abortInteraction, { once: true });
+						if (signal === null || signal === void 0 ? void 0 : signal.aborted) abortInteraction();
 					}
-					if (existingResultIndex === -1) if (tool) {
-						if (await this.executeSpecificTool(tool, toolCall, message, agent, agentId)) needsFollowUp = true;
-					} else {
-						const fallbackTool = getWildcardTool();
-						if (fallbackTool) {
-							if (await this.executeWildcardTool(fallbackTool, toolCall, message, agent, agentId)) needsFollowUp = true;
+					const executionSignal = (_interactionControlle = interactionController === null || interactionController === void 0 ? void 0 : interactionController.signal) !== null && _interactionControlle !== void 0 ? _interactionControlle : signal;
+					const discardOnAbort = toolExecutionMode === "human-in-the-loop" || !!interactionController;
+					try {
+						if (tool) {
+							if (await this.executeSpecificTool(tool, toolCall, message, agent, agentId, executionSignal, discardOnAbort)) needsFollowUp = true;
+						} else {
+							const fallbackTool = getWildcardTool();
+							if (fallbackTool) {
+								if (await this.executeWildcardTool(fallbackTool, toolCall, message, agent, agentId, executionSignal, discardOnAbort)) needsFollowUp = true;
+							}
+						}
+					} finally {
+						executing.delete(executionKey);
+						if (interactionController) {
+							signal === null || signal === void 0 || signal.removeEventListener("abort", abortInteraction);
+							interactions.controllers.delete(interactionController);
+							if (interactions.controllers.size === 0 && this._interactionAbortControllers.get(agent) === interactions) this._interactionAbortControllers.delete(agent);
 						}
 					}
+					if (interactionController === null || interactionController === void 0 ? void 0 : interactionController.signal.aborted) return runAgentResult;
 				}
 			}
-			if (needsFollowUp && !((_this$_runAbortContro2 = this._runAbortController) === null || _this$_runAbortContro2 === void 0 ? void 0 : _this$_runAbortContro2.signal.aborted)) if (this._runDepth >= MAX_FOLLOW_UP_DEPTH) _copilotkit_shared.logger.warn(`[CopilotKit] Follow-up depth limit (${MAX_FOLLOW_UP_DEPTH}) reached for agent "${agentId}". Stopping recursive follow-up runs to prevent an infinite loop. This usually indicates a tool that keeps requesting a follow-up (e.g. the LLM repeatedly calling the same tool). Consider setting "followUp: false" on the offending tool.`);
+			if (needsFollowUp && agent.threadId === threadId && !(signal === null || signal === void 0 ? void 0 : signal.aborted)) if (this._runDepth >= MAX_FOLLOW_UP_DEPTH) _copilotkit_shared.logger.warn(`[CopilotKit] Follow-up depth limit (${MAX_FOLLOW_UP_DEPTH}) reached for agent "${agentId}". Stopping recursive follow-up runs to prevent an infinite loop. This usually indicates a tool that keeps requesting a follow-up (e.g. the LLM repeatedly calling the same tool). Consider setting "followUp: false" on the offending tool.`);
 			else {
 				await this._internal.waitForPendingFrameworkUpdates();
 				const continuationHandoff = this._internal.stateManager.markNextRunAsContinuation(agent, runId);
@@ -3155,7 +3518,10 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		* Handles arg parsing, subscriber notifications, handler invocation, result stringification,
 		* and error handling.
 		*/
-		async executeToolHandler({ tool, toolCall, agent, agentId, handlerArgs, toolType, messageId }) {
+		async executeToolHandler({ tool, toolCall, agent, agentId, handlerArgs, toolType, messageId, signal = (() => {
+			var _this$_runAbortContro3;
+			return (_this$_runAbortContro3 = this._runAbortController) === null || _this$_runAbortContro3 === void 0 ? void 0 : _this$_runAbortContro3.signal;
+		})(), discardOnAbort = false }) {
 			let toolCallResult = "";
 			let errorMessage;
 			let isArgumentError = false;
@@ -3190,11 +3556,10 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 				});
 			}, "Subscriber onToolExecutionStart error:");
 			if (!errorMessage) try {
-				var _this$_runAbortContro3;
 				const result = await tool.handler(parsedArgs, {
 					toolCall,
 					agent,
-					signal: (_this$_runAbortContro3 = this._runAbortController) === null || _this$_runAbortContro3 === void 0 ? void 0 : _this$_runAbortContro3.signal
+					signal
 				});
 				if (result === void 0 || result === null) toolCallResult = "";
 				else if (typeof result === "string") toolCallResult = result;
@@ -3202,7 +3567,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			} catch (error) {
 				const handlerError = error instanceof Error ? error : new Error(String(error));
 				errorMessage = handlerError.message;
-				await this._internal.emitError({
+				if (!discardAbortedResult(signal, discardOnAbort, errorMessage)) await this._internal.emitError({
 					error: handlerError,
 					code: CopilotKitCoreErrorCode.TOOL_HANDLER_FAILED,
 					context: {
@@ -3236,7 +3601,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		/**
 		* Execute a specific tool
 		*/
-		async executeSpecificTool(tool, toolCall, message, agent, agentId) {
+		async executeSpecificTool(tool, toolCall, message, agent, agentId, signal, discardOnAbort = false) {
+			const threadId = agent.threadId;
 			if ((tool === null || tool === void 0 ? void 0 : tool.agentId) && tool.agentId !== agent.agentId) return false;
 			let handlerResult = {
 				result: "",
@@ -3250,12 +3616,14 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 				agentId,
 				handlerArgs: toolCall.function.arguments,
 				toolType: "specific",
-				messageId: message.id
+				messageId: message.id,
+				signal,
+				discardOnAbort
 			});
 			{
 				var _agent$messages$inser;
 				const messageIndex = agent.messages.findIndex((m) => m.id === message.id);
-				if (messageIndex === -1) return false;
+				if (discardAbortedResult(signal, discardOnAbort, handlerResult.error) || agent.threadId !== threadId || messageIndex === -1 || agent.messages.some((m) => m.role === "tool" && m.toolCallId === toolCall.id && !this.isFrontendPlaceholderResult(m))) return false;
 				let insertAt = messageIndex + 1;
 				while (insertAt < agent.messages.length && ((_agent$messages$inser = agent.messages[insertAt]) === null || _agent$messages$inser === void 0 ? void 0 : _agent$messages$inser.role) === "tool") insertAt++;
 				const toolMessage = {
@@ -3275,7 +3643,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		* specific tools, so this method keeps its own arg-wrapping logic rather than
 		* delegating to `executeToolHandler`.
 		*/
-		async executeWildcardTool(wildcardTool, toolCall, message, agent, agentId) {
+		async executeWildcardTool(wildcardTool, toolCall, message, agent, agentId, signal, discardOnAbort = false) {
+			const threadId = agent.threadId;
 			if ((wildcardTool === null || wildcardTool === void 0 ? void 0 : wildcardTool.agentId) && wildcardTool.agentId !== agent.agentId) return false;
 			let toolCallResult = "";
 			let errorMessage;
@@ -3316,7 +3685,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 				if (!errorMessage) try {
 					const result = await wildcardTool.handler(wildcardArgs, {
 						toolCall,
-						agent
+						agent,
+						signal
 					});
 					if (result === void 0 || result === null) toolCallResult = "";
 					else if (typeof result === "string") toolCallResult = result;
@@ -3324,7 +3694,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 				} catch (error) {
 					const handlerError = error instanceof Error ? error : new Error(String(error));
 					errorMessage = handlerError.message;
-					await this._internal.emitError({
+					if (!discardAbortedResult(signal, discardOnAbort, errorMessage)) await this._internal.emitError({
 						error: handlerError,
 						code: CopilotKitCoreErrorCode.TOOL_HANDLER_FAILED,
 						context: {
@@ -3353,7 +3723,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			{
 				var _agent$messages$inser2;
 				const messageIndex = agent.messages.findIndex((m) => m.id === message.id);
-				if (messageIndex === -1) return false;
+				if (discardAbortedResult(signal, discardOnAbort, errorMessage) || agent.threadId !== threadId || messageIndex === -1 || agent.messages.some((m) => m.role === "tool" && m.toolCallId === toolCall.id && !this.isFrontendPlaceholderResult(m))) return false;
 				let insertAt = messageIndex + 1;
 				while (insertAt < agent.messages.length && ((_agent$messages$inser2 = agent.messages[insertAt]) === null || _agent$messages$inser2 === void 0 ? void 0 : _agent$messages$inser2.role) === "tool") insertAt++;
 				const toolMessage = {
@@ -5188,9 +5558,10 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		return Object.fromEntries(Object.entries(headers).filter((entry) => entry[1] != null));
 	}
 	var CopilotKitCore = class {
-		constructor({ runtimeUrl, runtimeTransport = "auto", deferInitialConnection = false, headers = {}, credentials, properties = {}, agents__unsafe_dev_only = {}, tools = [], suggestionsConfig = [], debug }) {
+		constructor({ runtimeUrl, runtimeTransport = "auto", deferInitialConnection = false, headers = {}, credentials, messageFilter, properties = {}, agents__unsafe_dev_only = {}, tools = [], suggestionsConfig = [], debug }) {
 			_defineProperty(this, "_headers", void 0);
 			_defineProperty(this, "_credentials", void 0);
+			_defineProperty(this, "_messageFilter", void 0);
 			_defineProperty(this, "_properties", void 0);
 			_defineProperty(this, "_defaultThrottleMs", void 0);
 			_defineProperty(this, "_debug", void 0);
@@ -5205,6 +5576,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			_defineProperty(this, "previousAgentIds", /* @__PURE__ */ new Set());
 			this._headers = normalizeHeaders(headers);
 			this._credentials = credentials;
+			this._messageFilter = messageFilter;
 			this._properties = properties;
 			this._debug = debug;
 			this.agentRegistry = new AgentRegistry(this);
@@ -5327,6 +5699,9 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 		get credentials() {
 			return this._credentials;
 		}
+		get messageFilter() {
+			return this._messageFilter;
+		}
 		get properties() {
 			return this._properties;
 		}
@@ -5475,6 +5850,17 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			this.agentRegistry.applyCredentialsToAgents(this.agentRegistry.agents);
 			this.agentRegistry.handleCredentialsChanged();
 		}
+		/**
+		* Replace the message filter applied to every runtime agent.
+		*
+		* Applies to agents already discovered as well as ones discovered later, so
+		* a filter set before `/info` lands is not lost. Pass `undefined` to go back
+		* to sending the full thread.
+		*/
+		setMessageFilter(messageFilter) {
+			this._messageFilter = messageFilter;
+			this.agentRegistry.applyMessageFilterToAgents(this.agentRegistry.agents);
+		}
 		setProperties(properties) {
 			this._properties = properties;
 			this.notifySubscribers((subscriber) => {
@@ -5834,7 +6220,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 			return this.runHandler.connectAgent(params);
 		}
 		stopAgent(params) {
-			this.runHandler.abortCurrentRun();
+			this.runHandler.abortCurrentRun(params.agent);
 			params.agent.abortRun();
 		}
 		async runAgent(params) {