@copilotkit/runtime 1.62.1 → 1.62.2-canary.1783457132

package/dist/v2/runtime/core/hooks.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.cjs","names":[],"sources":["../../../../src/v2/runtime/core/hooks.ts"],"sourcesContent":["/**\n * Lifecycle hooks for CopilotKit runtime request processing.\n *\n * Hooks let you intercept requests at various stages of the pipeline:\n * - `onRequest`: Before routing — auth, correlation IDs, header injection\n * - `onBeforeHandler`: After routing — route-specific authorization\n * - `onResponse`: After handler — add headers, log, set cookies\n * - `onError`: On error — custom error responses\n *\n * @example\n * ```typescript\n * const handler = createCopilotRuntimeHandler({\n *   runtime,\n *   hooks: {\n *     onRequest: async ({ request }) => {\n *       const token = request.headers.get(\"authorization\");\n *       if (!token) throw new Response(\"Unauthorized\", { status: 401 });\n *     },\n *     onResponse: async ({ response }) => {\n *       const headers = new Headers(response.headers);\n *       headers.set(\"x-copilot-version\", \"2.0\");\n *       return new Response(response.body, { ...response, headers });\n *     },\n *   },\n * });\n * ```\n */\n\nimport type { MaybePromise } from \"@copilotkit/shared\";\nimport type { CopilotRuntimeLike } from \"./runtime\";\n\n/* ------------------------------------------------------------------------------------------------\n * Route info\n * --------------------------------------------------------------------------------------------- */\n\nexport type RouteInfo =\n  | { method: \"agent/run\"; agentId: string }\n  | { method: \"agent/connect\"; agentId: string }\n  | { method: \"agent/stop\"; agentId: string; threadId: string }\n  | { method: \"info\" }\n  | { method: \"transcribe\" }\n  | { method: \"threads/list\" }\n  | { method: \"threads/subscribe\" }\n  | { method: \"threads/update\"; threadId: string }\n  | { method: \"threads/archive\"; threadId: string }\n  | { method: \"threads/messages\"; threadId: string }\n  | { method: \"threads/events\"; threadId: string }\n  | { method: \"threads/state\"; threadId: string }\n  | { method: \"threads/clear\" }\n  | { method: \"annotate\" }\n  | { method: \"cpk-debug-events\" };\n\n/* ------------------------------------------------------------------------------------------------\n * Hook contexts\n * --------------------------------------------------------------------------------------------- */\n\nexport interface HookContext {\n  /** The incoming Fetch Request (possibly modified by prior hooks). */\n  request: Request;\n  /** The resolved URL pathname. */\n  path: string;\n  /** The CopilotRuntimeLike instance. */\n  runtime: CopilotRuntimeLike;\n}\n\nexport interface HandlerHookContext extends HookContext {\n  /** The resolved route information. */\n  route: RouteInfo;\n}\n\nexport interface ResponseHookContext extends HookContext {\n  /** The Response produced by the handler. */\n  response: Response;\n  /** The resolved route information. */\n  route: RouteInfo;\n}\n\nexport interface ErrorHookContext extends HookContext {\n  /** The error that occurred. */\n  error: unknown;\n  /** The route info, if routing had already succeeded. */\n  route?: RouteInfo;\n}\n\n/* ------------------------------------------------------------------------------------------------\n * Hooks interface\n * --------------------------------------------------------------------------------------------- */\n\nexport interface CopilotRuntimeHooks {\n  /**\n   * Called at the start of every request, before routing.\n   * Use to validate auth, attach headers, initialize correlation IDs, etc.\n   *\n   * Return a modified Request to replace the original, or void to continue.\n   * Throw a Response to short-circuit with an early response.\n   */\n  onRequest?: (ctx: HookContext) => MaybePromise<Request | void>;\n\n  /**\n   * Called after routing is resolved but before the handler executes.\n   * Receives the resolved route info (method, agentId, threadId).\n   *\n   * Use to do route-specific authorization, attach headers for agent calls, etc.\n   * Return a modified Request or void.\n   * Throw a Response to short-circuit.\n   */\n  onBeforeHandler?: (ctx: HandlerHookContext) => MaybePromise<Request | void>;\n\n  /**\n   * Called after the handler produces a Response, before it's sent to the client.\n   * Use to set cookies, add debugging headers, log, etc.\n   *\n   * Return a modified Response to replace the original, or void.\n   */\n  onResponse?: (ctx: ResponseHookContext) => MaybePromise<Response | void>;\n\n  /**\n   * Called when an error occurs during request processing.\n   * Return a Response to override the default error response, or void to use the default.\n   */\n  onError?: (ctx: ErrorHookContext) => MaybePromise<Response | void>;\n}\n\n/* ------------------------------------------------------------------------------------------------\n * Internal hook runners\n * --------------------------------------------------------------------------------------------- */\n\nexport async function runOnRequest(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: HookContext,\n): Promise<Request> {\n  if (!hooks?.onRequest) return ctx.request;\n  const result = await hooks.onRequest(ctx);\n  return result instanceof Request ? result : ctx.request;\n}\n\nexport async function runOnBeforeHandler(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: HandlerHookContext,\n): Promise<Request> {\n  if (!hooks?.onBeforeHandler) return ctx.request;\n  const result = await hooks.onBeforeHandler(ctx);\n  return result instanceof Request ? result : ctx.request;\n}\n\nexport async function runOnResponse(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: ResponseHookContext,\n): Promise<Response> {\n  if (!hooks?.onResponse) return ctx.response;\n  const result = await hooks.onResponse(ctx);\n  return result instanceof Response ? result : ctx.response;\n}\n\nexport async function runOnError(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: ErrorHookContext,\n): Promise<Response | void> {\n  if (!hooks?.onError) return;\n  return hooks.onError(ctx);\n}\n"],"mappings":";;;AA+HA,eAAsB,aACpB,OACA,KACkB;AAClB,KAAI,CAAC,OAAO,UAAW,QAAO,IAAI;CAClC,MAAM,SAAS,MAAM,MAAM,UAAU,IAAI;AACzC,QAAO,kBAAkB,UAAU,SAAS,IAAI;;AAGlD,eAAsB,mBACpB,OACA,KACkB;AAClB,KAAI,CAAC,OAAO,gBAAiB,QAAO,IAAI;CACxC,MAAM,SAAS,MAAM,MAAM,gBAAgB,IAAI;AAC/C,QAAO,kBAAkB,UAAU,SAAS,IAAI;;AAGlD,eAAsB,cACpB,OACA,KACmB;AACnB,KAAI,CAAC,OAAO,WAAY,QAAO,IAAI;CACnC,MAAM,SAAS,MAAM,MAAM,WAAW,IAAI;AAC1C,QAAO,kBAAkB,WAAW,SAAS,IAAI;;AAGnD,eAAsB,WACpB,OACA,KAC0B;AAC1B,KAAI,CAAC,OAAO,QAAS;AACrB,QAAO,MAAM,QAAQ,IAAI"}
+{"version":3,"file":"hooks.cjs","names":[],"sources":["../../../../src/v2/runtime/core/hooks.ts"],"sourcesContent":["/**\n * Lifecycle hooks for CopilotKit runtime request processing.\n *\n * Hooks let you intercept requests at various stages of the pipeline:\n * - `onRequest`: Before routing — auth, correlation IDs, header injection\n * - `onBeforeHandler`: After routing — route-specific authorization\n * - `onResponse`: After handler — add headers, log, set cookies\n * - `onError`: On error — custom error responses\n *\n * @example\n * ```typescript\n * const handler = createCopilotRuntimeHandler({\n *   runtime,\n *   hooks: {\n *     onRequest: async ({ request }) => {\n *       const token = request.headers.get(\"authorization\");\n *       if (!token) throw new Response(\"Unauthorized\", { status: 401 });\n *     },\n *     onResponse: async ({ response }) => {\n *       const headers = new Headers(response.headers);\n *       headers.set(\"x-copilot-version\", \"2.0\");\n *       return new Response(response.body, { ...response, headers });\n *     },\n *   },\n * });\n * ```\n */\n\nimport type { MaybePromise } from \"@copilotkit/shared\";\nimport type { CopilotRuntimeLike } from \"./runtime\";\n\n/* ------------------------------------------------------------------------------------------------\n * Route info\n * --------------------------------------------------------------------------------------------- */\n\nexport type RouteInfo =\n  | { method: \"agent/run\"; agentId: string }\n  | { method: \"agent/connect\"; agentId: string }\n  | { method: \"agent/stop\"; agentId: string; threadId: string }\n  | { method: \"info\" }\n  | { method: \"transcribe\" }\n  | { method: \"threads/list\" }\n  | { method: \"threads/subscribe\" }\n  | { method: \"threads/update\"; threadId: string }\n  | { method: \"threads/archive\"; threadId: string }\n  | { method: \"threads/messages\"; threadId: string }\n  | { method: \"threads/events\"; threadId: string }\n  | { method: \"threads/state\"; threadId: string }\n  | { method: \"threads/clear\" }\n  | { method: \"memories/list\" }\n  | { method: \"memories/subscribe\" }\n  | { method: \"memories/mutate\"; memoryId: string }\n  | { method: \"annotate\" }\n  | { method: \"cpk-debug-events\" };\n\n/* ------------------------------------------------------------------------------------------------\n * Hook contexts\n * --------------------------------------------------------------------------------------------- */\n\nexport interface HookContext {\n  /** The incoming Fetch Request (possibly modified by prior hooks). */\n  request: Request;\n  /** The resolved URL pathname. */\n  path: string;\n  /** The CopilotRuntimeLike instance. */\n  runtime: CopilotRuntimeLike;\n}\n\nexport interface HandlerHookContext extends HookContext {\n  /** The resolved route information. */\n  route: RouteInfo;\n}\n\nexport interface ResponseHookContext extends HookContext {\n  /** The Response produced by the handler. */\n  response: Response;\n  /** The resolved route information. */\n  route: RouteInfo;\n}\n\nexport interface ErrorHookContext extends HookContext {\n  /** The error that occurred. */\n  error: unknown;\n  /** The route info, if routing had already succeeded. */\n  route?: RouteInfo;\n}\n\n/* ------------------------------------------------------------------------------------------------\n * Hooks interface\n * --------------------------------------------------------------------------------------------- */\n\nexport interface CopilotRuntimeHooks {\n  /**\n   * Called at the start of every request, before routing.\n   * Use to validate auth, attach headers, initialize correlation IDs, etc.\n   *\n   * Return a modified Request to replace the original, or void to continue.\n   * Throw a Response to short-circuit with an early response.\n   */\n  onRequest?: (ctx: HookContext) => MaybePromise<Request | void>;\n\n  /**\n   * Called after routing is resolved but before the handler executes.\n   * Receives the resolved route info (method, agentId, threadId).\n   *\n   * Use to do route-specific authorization, attach headers for agent calls, etc.\n   * Return a modified Request or void.\n   * Throw a Response to short-circuit.\n   */\n  onBeforeHandler?: (ctx: HandlerHookContext) => MaybePromise<Request | void>;\n\n  /**\n   * Called after the handler produces a Response, before it's sent to the client.\n   * Use to set cookies, add debugging headers, log, etc.\n   *\n   * Return a modified Response to replace the original, or void.\n   */\n  onResponse?: (ctx: ResponseHookContext) => MaybePromise<Response | void>;\n\n  /**\n   * Called when an error occurs during request processing.\n   * Return a Response to override the default error response, or void to use the default.\n   */\n  onError?: (ctx: ErrorHookContext) => MaybePromise<Response | void>;\n}\n\n/* ------------------------------------------------------------------------------------------------\n * Internal hook runners\n * --------------------------------------------------------------------------------------------- */\n\nexport async function runOnRequest(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: HookContext,\n): Promise<Request> {\n  if (!hooks?.onRequest) return ctx.request;\n  const result = await hooks.onRequest(ctx);\n  return result instanceof Request ? result : ctx.request;\n}\n\nexport async function runOnBeforeHandler(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: HandlerHookContext,\n): Promise<Request> {\n  if (!hooks?.onBeforeHandler) return ctx.request;\n  const result = await hooks.onBeforeHandler(ctx);\n  return result instanceof Request ? result : ctx.request;\n}\n\nexport async function runOnResponse(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: ResponseHookContext,\n): Promise<Response> {\n  if (!hooks?.onResponse) return ctx.response;\n  const result = await hooks.onResponse(ctx);\n  return result instanceof Response ? result : ctx.response;\n}\n\nexport async function runOnError(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: ErrorHookContext,\n): Promise<Response | void> {\n  if (!hooks?.onError) return;\n  return hooks.onError(ctx);\n}\n"],"mappings":";;;AAkIA,eAAsB,aACpB,OACA,KACkB;AAClB,KAAI,CAAC,OAAO,UAAW,QAAO,IAAI;CAClC,MAAM,SAAS,MAAM,MAAM,UAAU,IAAI;AACzC,QAAO,kBAAkB,UAAU,SAAS,IAAI;;AAGlD,eAAsB,mBACpB,OACA,KACkB;AAClB,KAAI,CAAC,OAAO,gBAAiB,QAAO,IAAI;CACxC,MAAM,SAAS,MAAM,MAAM,gBAAgB,IAAI;AAC/C,QAAO,kBAAkB,UAAU,SAAS,IAAI;;AAGlD,eAAsB,cACpB,OACA,KACmB;AACnB,KAAI,CAAC,OAAO,WAAY,QAAO,IAAI;CACnC,MAAM,SAAS,MAAM,MAAM,WAAW,IAAI;AAC1C,QAAO,kBAAkB,WAAW,SAAS,IAAI;;AAGnD,eAAsB,WACpB,OACA,KAC0B;AAC1B,KAAI,CAAC,OAAO,QAAS;AACrB,QAAO,MAAM,QAAQ,IAAI"}

package/dist/v2/runtime/core/hooks.d.cts

@@ -38,6 +38,13 @@ type RouteInfo = {
   threadId: string;
 } | {
   method: "threads/clear";
+} | {
+  method: "memories/list";
+} | {
+  method: "memories/subscribe";
+} | {
+  method: "memories/mutate";
+  memoryId: string;
 } | {
   method: "annotate";
 } | {

package/dist/v2/runtime/core/hooks.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.d.cts","names":[],"sources":["../../../../src/v2/runtime/core/hooks.ts"],"mappings":";;;;;KAmCY,SAAA;EACN,MAAA;EAAqB,OAAA;AAAA;EACrB,MAAA;EAAyB,OAAA;AAAA;EACzB,MAAA;EAAsB,OAAA;EAAiB,QAAA;AAAA;EACvC,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;EAA0B,QAAA;AAAA;EAC1B,MAAA;EAA2B,QAAA;AAAA;EAC3B,MAAA;EAA4B,QAAA;AAAA;EAC5B,MAAA;EAA0B,QAAA;AAAA;EAC1B,MAAA;EAAyB,QAAA;AAAA;EACzB,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;AAAA,UAMW,WAAA;EAqBiB;EAnBhC,OAAA,EAAS,OAAA;EAmB0C;EAjBnD,IAAA;EAmBA;EAjBA,OAAA,EAAS,kBAAA;AAAA;AAAA,UAGM,kBAAA,SAA2B,WAAA;EAgBzB;EAdjB,KAAA,EAAO,SAAA;AAAA;AAAA,UAGQ,mBAAA,SAA4B,WAAA;EA0BzB;EAxBlB,QAAA,EAAU,QAAA;EAwBwB;EAtBlC,KAAA,EAAO,SAAA;AAAA;AAAA,UAGQ,gBAAA,SAAyB,WAAA;EAqCrB;EAnCnB,KAAA;EAmC2C;EAjC3C,KAAA,GAAQ,SAAA;AAAA;AAAA,UAOO,mBAAA;EAgCkC;;;;;;;EAxBjD,SAAA,IAAa,GAAA,EAAK,WAAA,KAAgB,YAAA,CAAa,OAAA;EAUvB;;;;;;;;EAAxB,eAAA,IAAmB,GAAA,EAAK,kBAAA,KAAuB,YAAA,CAAa,OAAA;EAc5D;;;;;;EANA,UAAA,IAAc,GAAA,EAAK,mBAAA,KAAwB,YAAA,CAAa,QAAA;;;;;EAMxD,OAAA,IAAW,GAAA,EAAK,gBAAA,KAAqB,YAAA,CAAa,QAAA;AAAA"}
+{"version":3,"file":"hooks.d.cts","names":[],"sources":["../../../../src/v2/runtime/core/hooks.ts"],"mappings":";;;;;KAmCY,SAAA;EACN,MAAA;EAAqB,OAAA;AAAA;EACrB,MAAA;EAAyB,OAAA;AAAA;EACzB,MAAA;EAAsB,OAAA;EAAiB,QAAA;AAAA;EACvC,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;EAA0B,QAAA;AAAA;EAC1B,MAAA;EAA2B,QAAA;AAAA;EAC3B,MAAA;EAA4B,QAAA;AAAA;EAC5B,MAAA;EAA0B,QAAA;AAAA;EAC1B,MAAA;EAAyB,QAAA;AAAA;EACzB,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;EAA2B,QAAA;AAAA;EAC3B,MAAA;AAAA;EACA,MAAA;AAAA;AAAA,UAMW,WAAA;EAqByB;EAnBxC,OAAA,EAAS,OAAA;EAuBT;EArBA,IAAA;EAqBiB;EAnBjB,OAAA,EAAS,kBAAA;AAAA;AAAA,UAGM,kBAAA,SAA2B,WAAA;;EAE1C,KAAA,EAAO,SAAA;AAAA;AAAA,UAGQ,mBAAA,SAA4B,WAAA;EAoCnB;EAlCxB,QAAA,EAAU,QAAA;EAkCqC;EAhC/C,KAAA,EAAO,SAAA;AAAA;AAAA,UAGQ,gBAAA,SAAyB,WAAA;EA2CxB;EAzChB,KAAA;EAyCqC;EAvCrC,KAAA,GAAQ,SAAA;AAAA;AAAA,UAOO,mBAAA;EAQG;;;;;;;EAAlB,SAAA,IAAa,GAAA,EAAK,WAAA,KAAgB,YAAA,CAAa,OAAA;EAUa;;;;;;;;EAA5D,eAAA,IAAmB,GAAA,EAAK,kBAAA,KAAuB,YAAA,CAAa,OAAA;EAcvB;;;;;;EANrC,UAAA,IAAc,GAAA,EAAK,mBAAA,KAAwB,YAAA,CAAa,QAAA;;;;;EAMxD,OAAA,IAAW,GAAA,EAAK,gBAAA,KAAqB,YAAA,CAAa,QAAA;AAAA"}

package/dist/v2/runtime/core/hooks.d.mts

@@ -38,6 +38,13 @@ type RouteInfo = {
   threadId: string;
 } | {
   method: "threads/clear";
+} | {
+  method: "memories/list";
+} | {
+  method: "memories/subscribe";
+} | {
+  method: "memories/mutate";
+  memoryId: string;
 } | {
   method: "annotate";
 } | {

package/dist/v2/runtime/core/hooks.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.d.mts","names":[],"sources":["../../../../src/v2/runtime/core/hooks.ts"],"mappings":";;;;;KAmCY,SAAA;EACN,MAAA;EAAqB,OAAA;AAAA;EACrB,MAAA;EAAyB,OAAA;AAAA;EACzB,MAAA;EAAsB,OAAA;EAAiB,QAAA;AAAA;EACvC,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;EAA0B,QAAA;AAAA;EAC1B,MAAA;EAA2B,QAAA;AAAA;EAC3B,MAAA;EAA4B,QAAA;AAAA;EAC5B,MAAA;EAA0B,QAAA;AAAA;EAC1B,MAAA;EAAyB,QAAA;AAAA;EACzB,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;AAAA,UAMW,WAAA;EAqBiB;EAnBhC,OAAA,EAAS,OAAA;EAmB0C;EAjBnD,IAAA;EAmBA;EAjBA,OAAA,EAAS,kBAAA;AAAA;AAAA,UAGM,kBAAA,SAA2B,WAAA;EAgBzB;EAdjB,KAAA,EAAO,SAAA;AAAA;AAAA,UAGQ,mBAAA,SAA4B,WAAA;EA0BzB;EAxBlB,QAAA,EAAU,QAAA;EAwBwB;EAtBlC,KAAA,EAAO,SAAA;AAAA;AAAA,UAGQ,gBAAA,SAAyB,WAAA;EAqCrB;EAnCnB,KAAA;EAmC2C;EAjC3C,KAAA,GAAQ,SAAA;AAAA;AAAA,UAOO,mBAAA;EAgCkC;;;;;;;EAxBjD,SAAA,IAAa,GAAA,EAAK,WAAA,KAAgB,YAAA,CAAa,OAAA;EAUvB;;;;;;;;EAAxB,eAAA,IAAmB,GAAA,EAAK,kBAAA,KAAuB,YAAA,CAAa,OAAA;EAc5D;;;;;;EANA,UAAA,IAAc,GAAA,EAAK,mBAAA,KAAwB,YAAA,CAAa,QAAA;;;;;EAMxD,OAAA,IAAW,GAAA,EAAK,gBAAA,KAAqB,YAAA,CAAa,QAAA;AAAA"}
+{"version":3,"file":"hooks.d.mts","names":[],"sources":["../../../../src/v2/runtime/core/hooks.ts"],"mappings":";;;;;KAmCY,SAAA;EACN,MAAA;EAAqB,OAAA;AAAA;EACrB,MAAA;EAAyB,OAAA;AAAA;EACzB,MAAA;EAAsB,OAAA;EAAiB,QAAA;AAAA;EACvC,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;EAA0B,QAAA;AAAA;EAC1B,MAAA;EAA2B,QAAA;AAAA;EAC3B,MAAA;EAA4B,QAAA;AAAA;EAC5B,MAAA;EAA0B,QAAA;AAAA;EAC1B,MAAA;EAAyB,QAAA;AAAA;EACzB,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;AAAA;EACA,MAAA;EAA2B,QAAA;AAAA;EAC3B,MAAA;AAAA;EACA,MAAA;AAAA;AAAA,UAMW,WAAA;EAqByB;EAnBxC,OAAA,EAAS,OAAA;EAuBT;EArBA,IAAA;EAqBiB;EAnBjB,OAAA,EAAS,kBAAA;AAAA;AAAA,UAGM,kBAAA,SAA2B,WAAA;;EAE1C,KAAA,EAAO,SAAA;AAAA;AAAA,UAGQ,mBAAA,SAA4B,WAAA;EAoCnB;EAlCxB,QAAA,EAAU,QAAA;EAkCqC;EAhC/C,KAAA,EAAO,SAAA;AAAA;AAAA,UAGQ,gBAAA,SAAyB,WAAA;EA2CxB;EAzChB,KAAA;EAyCqC;EAvCrC,KAAA,GAAQ,SAAA;AAAA;AAAA,UAOO,mBAAA;EAQG;;;;;;;EAAlB,SAAA,IAAa,GAAA,EAAK,WAAA,KAAgB,YAAA,CAAa,OAAA;EAUa;;;;;;;;EAA5D,eAAA,IAAmB,GAAA,EAAK,kBAAA,KAAuB,YAAA,CAAa,OAAA;EAcvB;;;;;;EANrC,UAAA,IAAc,GAAA,EAAK,mBAAA,KAAwB,YAAA,CAAa,QAAA;;;;;EAMxD,OAAA,IAAW,GAAA,EAAK,gBAAA,KAAqB,YAAA,CAAa,QAAA;AAAA"}

package/dist/v2/runtime/core/hooks.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.mjs","names":[],"sources":["../../../../src/v2/runtime/core/hooks.ts"],"sourcesContent":["/**\n * Lifecycle hooks for CopilotKit runtime request processing.\n *\n * Hooks let you intercept requests at various stages of the pipeline:\n * - `onRequest`: Before routing — auth, correlation IDs, header injection\n * - `onBeforeHandler`: After routing — route-specific authorization\n * - `onResponse`: After handler — add headers, log, set cookies\n * - `onError`: On error — custom error responses\n *\n * @example\n * ```typescript\n * const handler = createCopilotRuntimeHandler({\n *   runtime,\n *   hooks: {\n *     onRequest: async ({ request }) => {\n *       const token = request.headers.get(\"authorization\");\n *       if (!token) throw new Response(\"Unauthorized\", { status: 401 });\n *     },\n *     onResponse: async ({ response }) => {\n *       const headers = new Headers(response.headers);\n *       headers.set(\"x-copilot-version\", \"2.0\");\n *       return new Response(response.body, { ...response, headers });\n *     },\n *   },\n * });\n * ```\n */\n\nimport type { MaybePromise } from \"@copilotkit/shared\";\nimport type { CopilotRuntimeLike } from \"./runtime\";\n\n/* ------------------------------------------------------------------------------------------------\n * Route info\n * --------------------------------------------------------------------------------------------- */\n\nexport type RouteInfo =\n  | { method: \"agent/run\"; agentId: string }\n  | { method: \"agent/connect\"; agentId: string }\n  | { method: \"agent/stop\"; agentId: string; threadId: string }\n  | { method: \"info\" }\n  | { method: \"transcribe\" }\n  | { method: \"threads/list\" }\n  | { method: \"threads/subscribe\" }\n  | { method: \"threads/update\"; threadId: string }\n  | { method: \"threads/archive\"; threadId: string }\n  | { method: \"threads/messages\"; threadId: string }\n  | { method: \"threads/events\"; threadId: string }\n  | { method: \"threads/state\"; threadId: string }\n  | { method: \"threads/clear\" }\n  | { method: \"annotate\" }\n  | { method: \"cpk-debug-events\" };\n\n/* ------------------------------------------------------------------------------------------------\n * Hook contexts\n * --------------------------------------------------------------------------------------------- */\n\nexport interface HookContext {\n  /** The incoming Fetch Request (possibly modified by prior hooks). */\n  request: Request;\n  /** The resolved URL pathname. */\n  path: string;\n  /** The CopilotRuntimeLike instance. */\n  runtime: CopilotRuntimeLike;\n}\n\nexport interface HandlerHookContext extends HookContext {\n  /** The resolved route information. */\n  route: RouteInfo;\n}\n\nexport interface ResponseHookContext extends HookContext {\n  /** The Response produced by the handler. */\n  response: Response;\n  /** The resolved route information. */\n  route: RouteInfo;\n}\n\nexport interface ErrorHookContext extends HookContext {\n  /** The error that occurred. */\n  error: unknown;\n  /** The route info, if routing had already succeeded. */\n  route?: RouteInfo;\n}\n\n/* ------------------------------------------------------------------------------------------------\n * Hooks interface\n * --------------------------------------------------------------------------------------------- */\n\nexport interface CopilotRuntimeHooks {\n  /**\n   * Called at the start of every request, before routing.\n   * Use to validate auth, attach headers, initialize correlation IDs, etc.\n   *\n   * Return a modified Request to replace the original, or void to continue.\n   * Throw a Response to short-circuit with an early response.\n   */\n  onRequest?: (ctx: HookContext) => MaybePromise<Request | void>;\n\n  /**\n   * Called after routing is resolved but before the handler executes.\n   * Receives the resolved route info (method, agentId, threadId).\n   *\n   * Use to do route-specific authorization, attach headers for agent calls, etc.\n   * Return a modified Request or void.\n   * Throw a Response to short-circuit.\n   */\n  onBeforeHandler?: (ctx: HandlerHookContext) => MaybePromise<Request | void>;\n\n  /**\n   * Called after the handler produces a Response, before it's sent to the client.\n   * Use to set cookies, add debugging headers, log, etc.\n   *\n   * Return a modified Response to replace the original, or void.\n   */\n  onResponse?: (ctx: ResponseHookContext) => MaybePromise<Response | void>;\n\n  /**\n   * Called when an error occurs during request processing.\n   * Return a Response to override the default error response, or void to use the default.\n   */\n  onError?: (ctx: ErrorHookContext) => MaybePromise<Response | void>;\n}\n\n/* ------------------------------------------------------------------------------------------------\n * Internal hook runners\n * --------------------------------------------------------------------------------------------- */\n\nexport async function runOnRequest(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: HookContext,\n): Promise<Request> {\n  if (!hooks?.onRequest) return ctx.request;\n  const result = await hooks.onRequest(ctx);\n  return result instanceof Request ? result : ctx.request;\n}\n\nexport async function runOnBeforeHandler(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: HandlerHookContext,\n): Promise<Request> {\n  if (!hooks?.onBeforeHandler) return ctx.request;\n  const result = await hooks.onBeforeHandler(ctx);\n  return result instanceof Request ? result : ctx.request;\n}\n\nexport async function runOnResponse(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: ResponseHookContext,\n): Promise<Response> {\n  if (!hooks?.onResponse) return ctx.response;\n  const result = await hooks.onResponse(ctx);\n  return result instanceof Response ? result : ctx.response;\n}\n\nexport async function runOnError(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: ErrorHookContext,\n): Promise<Response | void> {\n  if (!hooks?.onError) return;\n  return hooks.onError(ctx);\n}\n"],"mappings":";;AA+HA,eAAsB,aACpB,OACA,KACkB;AAClB,KAAI,CAAC,OAAO,UAAW,QAAO,IAAI;CAClC,MAAM,SAAS,MAAM,MAAM,UAAU,IAAI;AACzC,QAAO,kBAAkB,UAAU,SAAS,IAAI;;AAGlD,eAAsB,mBACpB,OACA,KACkB;AAClB,KAAI,CAAC,OAAO,gBAAiB,QAAO,IAAI;CACxC,MAAM,SAAS,MAAM,MAAM,gBAAgB,IAAI;AAC/C,QAAO,kBAAkB,UAAU,SAAS,IAAI;;AAGlD,eAAsB,cACpB,OACA,KACmB;AACnB,KAAI,CAAC,OAAO,WAAY,QAAO,IAAI;CACnC,MAAM,SAAS,MAAM,MAAM,WAAW,IAAI;AAC1C,QAAO,kBAAkB,WAAW,SAAS,IAAI;;AAGnD,eAAsB,WACpB,OACA,KAC0B;AAC1B,KAAI,CAAC,OAAO,QAAS;AACrB,QAAO,MAAM,QAAQ,IAAI"}
+{"version":3,"file":"hooks.mjs","names":[],"sources":["../../../../src/v2/runtime/core/hooks.ts"],"sourcesContent":["/**\n * Lifecycle hooks for CopilotKit runtime request processing.\n *\n * Hooks let you intercept requests at various stages of the pipeline:\n * - `onRequest`: Before routing — auth, correlation IDs, header injection\n * - `onBeforeHandler`: After routing — route-specific authorization\n * - `onResponse`: After handler — add headers, log, set cookies\n * - `onError`: On error — custom error responses\n *\n * @example\n * ```typescript\n * const handler = createCopilotRuntimeHandler({\n *   runtime,\n *   hooks: {\n *     onRequest: async ({ request }) => {\n *       const token = request.headers.get(\"authorization\");\n *       if (!token) throw new Response(\"Unauthorized\", { status: 401 });\n *     },\n *     onResponse: async ({ response }) => {\n *       const headers = new Headers(response.headers);\n *       headers.set(\"x-copilot-version\", \"2.0\");\n *       return new Response(response.body, { ...response, headers });\n *     },\n *   },\n * });\n * ```\n */\n\nimport type { MaybePromise } from \"@copilotkit/shared\";\nimport type { CopilotRuntimeLike } from \"./runtime\";\n\n/* ------------------------------------------------------------------------------------------------\n * Route info\n * --------------------------------------------------------------------------------------------- */\n\nexport type RouteInfo =\n  | { method: \"agent/run\"; agentId: string }\n  | { method: \"agent/connect\"; agentId: string }\n  | { method: \"agent/stop\"; agentId: string; threadId: string }\n  | { method: \"info\" }\n  | { method: \"transcribe\" }\n  | { method: \"threads/list\" }\n  | { method: \"threads/subscribe\" }\n  | { method: \"threads/update\"; threadId: string }\n  | { method: \"threads/archive\"; threadId: string }\n  | { method: \"threads/messages\"; threadId: string }\n  | { method: \"threads/events\"; threadId: string }\n  | { method: \"threads/state\"; threadId: string }\n  | { method: \"threads/clear\" }\n  | { method: \"memories/list\" }\n  | { method: \"memories/subscribe\" }\n  | { method: \"memories/mutate\"; memoryId: string }\n  | { method: \"annotate\" }\n  | { method: \"cpk-debug-events\" };\n\n/* ------------------------------------------------------------------------------------------------\n * Hook contexts\n * --------------------------------------------------------------------------------------------- */\n\nexport interface HookContext {\n  /** The incoming Fetch Request (possibly modified by prior hooks). */\n  request: Request;\n  /** The resolved URL pathname. */\n  path: string;\n  /** The CopilotRuntimeLike instance. */\n  runtime: CopilotRuntimeLike;\n}\n\nexport interface HandlerHookContext extends HookContext {\n  /** The resolved route information. */\n  route: RouteInfo;\n}\n\nexport interface ResponseHookContext extends HookContext {\n  /** The Response produced by the handler. */\n  response: Response;\n  /** The resolved route information. */\n  route: RouteInfo;\n}\n\nexport interface ErrorHookContext extends HookContext {\n  /** The error that occurred. */\n  error: unknown;\n  /** The route info, if routing had already succeeded. */\n  route?: RouteInfo;\n}\n\n/* ------------------------------------------------------------------------------------------------\n * Hooks interface\n * --------------------------------------------------------------------------------------------- */\n\nexport interface CopilotRuntimeHooks {\n  /**\n   * Called at the start of every request, before routing.\n   * Use to validate auth, attach headers, initialize correlation IDs, etc.\n   *\n   * Return a modified Request to replace the original, or void to continue.\n   * Throw a Response to short-circuit with an early response.\n   */\n  onRequest?: (ctx: HookContext) => MaybePromise<Request | void>;\n\n  /**\n   * Called after routing is resolved but before the handler executes.\n   * Receives the resolved route info (method, agentId, threadId).\n   *\n   * Use to do route-specific authorization, attach headers for agent calls, etc.\n   * Return a modified Request or void.\n   * Throw a Response to short-circuit.\n   */\n  onBeforeHandler?: (ctx: HandlerHookContext) => MaybePromise<Request | void>;\n\n  /**\n   * Called after the handler produces a Response, before it's sent to the client.\n   * Use to set cookies, add debugging headers, log, etc.\n   *\n   * Return a modified Response to replace the original, or void.\n   */\n  onResponse?: (ctx: ResponseHookContext) => MaybePromise<Response | void>;\n\n  /**\n   * Called when an error occurs during request processing.\n   * Return a Response to override the default error response, or void to use the default.\n   */\n  onError?: (ctx: ErrorHookContext) => MaybePromise<Response | void>;\n}\n\n/* ------------------------------------------------------------------------------------------------\n * Internal hook runners\n * --------------------------------------------------------------------------------------------- */\n\nexport async function runOnRequest(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: HookContext,\n): Promise<Request> {\n  if (!hooks?.onRequest) return ctx.request;\n  const result = await hooks.onRequest(ctx);\n  return result instanceof Request ? result : ctx.request;\n}\n\nexport async function runOnBeforeHandler(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: HandlerHookContext,\n): Promise<Request> {\n  if (!hooks?.onBeforeHandler) return ctx.request;\n  const result = await hooks.onBeforeHandler(ctx);\n  return result instanceof Request ? result : ctx.request;\n}\n\nexport async function runOnResponse(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: ResponseHookContext,\n): Promise<Response> {\n  if (!hooks?.onResponse) return ctx.response;\n  const result = await hooks.onResponse(ctx);\n  return result instanceof Response ? result : ctx.response;\n}\n\nexport async function runOnError(\n  hooks: CopilotRuntimeHooks | undefined,\n  ctx: ErrorHookContext,\n): Promise<Response | void> {\n  if (!hooks?.onError) return;\n  return hooks.onError(ctx);\n}\n"],"mappings":";;AAkIA,eAAsB,aACpB,OACA,KACkB;AAClB,KAAI,CAAC,OAAO,UAAW,QAAO,IAAI;CAClC,MAAM,SAAS,MAAM,MAAM,UAAU,IAAI;AACzC,QAAO,kBAAkB,UAAU,SAAS,IAAI;;AAGlD,eAAsB,mBACpB,OACA,KACkB;AAClB,KAAI,CAAC,OAAO,gBAAiB,QAAO,IAAI;CACxC,MAAM,SAAS,MAAM,MAAM,gBAAgB,IAAI;AAC/C,QAAO,kBAAkB,UAAU,SAAS,IAAI;;AAGlD,eAAsB,cACpB,OACA,KACmB;AACnB,KAAI,CAAC,OAAO,WAAY,QAAO,IAAI;CACnC,MAAM,SAAS,MAAM,MAAM,WAAW,IAAI;AAC1C,QAAO,kBAAkB,WAAW,SAAS,IAAI;;AAGnD,eAAsB,WACpB,OACA,KAC0B;AAC1B,KAAI,CAAC,OAAO,QAAS;AACrB,QAAO,MAAM,QAAQ,IAAI"}

package/dist/v2/runtime/core/runtime.cjs

@@ -1,5 +1,6 @@
 require("reflect-metadata");
 const require_runtime = require('../../../_virtual/_rolldown/runtime.cjs');
+const require_header_utils = require('../handlers/header-utils.cjs');
 const require_package$1 = require('../../../package.cjs');
 const require_logger = require('../../../lib/logger.cjs');
 const require_telemetry_disclosure = require('../../../lib/telemetry-disclosure.cjs');
@@ -40,6 +41,7 @@ var BaseCopilotRuntime = class {
 		this.resolvedLicenseToken = options.licenseToken ?? process.env.COPILOTKIT_LICENSE_TOKEN;
 		if (this.resolvedLicenseToken) require_telemetry_client.default.setLicenseToken(this.resolvedLicenseToken);
 		if (process.env.NODE_ENV !== "production") this.debugEventBus = new require_debug_event_bus.DebugEventBus();
+		this.forwardHeadersPolicy = require_header_utils.resolveForwardHeadersPolicy(options.forwardHeaders);
 		this.debug = (0, _copilotkit_shared.resolveDebugConfig)(options.debug);
 		if (this.debug.enabled) this.debugLogger = require_logger.createLogger({
 			level: "debug",
@@ -162,6 +164,9 @@ var CopilotRuntime = class {
 	get debugLogger() {
 		return this.delegate.debugLogger;
 	}
+	get forwardHeadersPolicy() {
+		return this.delegate.forwardHeadersPolicy;
+	}
 };
 
 //#endregion

package/dist/v2/runtime/core/runtime.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.cjs","names":["pkg","DebugEventBus","createLogger","InMemoryAgentRunner","RUNTIME_MODE_SSE","IntelligenceAgentRunner","RUNTIME_MODE_INTELLIGENCE"],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"sourcesContent":["import type {\n  MaybePromise,\n  NonEmptyRecord,\n  RuntimeMode,\n} from \"@copilotkit/shared\";\nimport {\n  RUNTIME_MODE_SSE,\n  RUNTIME_MODE_INTELLIGENCE,\n} from \"@copilotkit/shared\";\nimport { createLicenseChecker } from \"@copilotkit/license-verifier\";\nimport type { LicenseChecker } from \"@copilotkit/license-verifier\";\nimport { resolveDebugConfig } from \"@copilotkit/shared\";\nimport type { ResolvedDebugConfig, DebugConfig } from \"@copilotkit/shared\";\nimport type { AbstractAgent } from \"@ag-ui/client\";\nimport type { MCPClientConfig } from \"@ag-ui/mcp-apps-middleware\";\nimport type { A2UIMiddlewareConfig } from \"@ag-ui/a2ui-middleware\";\nimport pkg from \"../../../../package.json\";\nimport type {\n  BeforeRequestMiddleware,\n  AfterRequestMiddleware,\n} from \"./middleware\";\nimport { createLogger } from \"../../../lib/logger\";\nimport type { CopilotRuntimeLogger } from \"../../../lib/logger\";\nimport { logRuntimeTelemetryDisclosure } from \"../../../lib/telemetry-disclosure\";\nimport type { TranscriptionService } from \"../transcription-service/transcription-service\";\nimport { DebugEventBus } from \"./debug-event-bus\";\nimport type { AgentRunner } from \"../runner/agent-runner\";\nimport { InMemoryAgentRunner } from \"../runner/in-memory\";\nimport { IntelligenceAgentRunner } from \"../runner/intelligence\";\nimport type { CopilotKitIntelligence } from \"../intelligence-platform\";\nimport telemetry from \"../telemetry/telemetry-client\";\n\nexport const VERSION = pkg.version;\n\ninterface BaseCopilotRuntimeMiddlewareOptions {\n  /** If set, middleware only applies to these named agents. Applies to all agents if omitted. */\n  agents?: string[];\n}\n\nexport type McpAppsServerConfig = MCPClientConfig & {\n  /** Agent to bind this server to. If omitted, the server is available to all agents. */\n  agentId?: string;\n};\n\nexport interface McpAppsConfig {\n  /** List of MCP server configurations. */\n  servers: McpAppsServerConfig[];\n}\n\nexport interface OpenGenerativeUIOptions extends BaseCopilotRuntimeMiddlewareOptions {}\n\nexport type OpenGenerativeUIConfig = boolean | OpenGenerativeUIOptions;\n\ninterface CopilotRuntimeMiddlewares {\n  /**\n   * Auto-apply A2UIMiddleware to agents at run time.\n   * Pass an object to enable and customise behaviour, or omit to disable.\n   */\n  a2ui?: BaseCopilotRuntimeMiddlewareOptions &\n    A2UIMiddlewareConfig & {\n      /**\n       * Explicit on/off switch. Omit (or set `true`) to enable; set `false`\n       * to disable A2UI for this runtime while keeping the rest of the config\n       * (e.g. a `schema`/`catalog`) in place. A bare `a2ui: {}` stays enabled\n       * for backwards compatibility.\n       */\n      enabled?: boolean;\n    };\n  /** Auto-apply MCPAppsMiddleware to agents at run time. */\n  mcpApps?: McpAppsConfig;\n  /** Auto-apply OpenGenerativeUIMiddleware to agents at run time. */\n  openGenerativeUI?: OpenGenerativeUIConfig;\n}\n\n/**\n * Context passed to agent factory functions for per-request agent resolution.\n */\nexport interface AgentFactoryContext {\n  /** The incoming HTTP request. */\n  request: Request;\n}\n\n/**\n * A function that dynamically creates agents on a per-request basis.\n * Useful for multi-tenant scenarios or request-scoped agent configuration.\n */\nexport type AgentsFactory = (\n  ctx: AgentFactoryContext,\n) => MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>;\n\n/**\n * Agents can be provided as:\n * - A static record of agents\n * - A Promise that resolves to a record of agents\n * - A factory function that receives request context and returns agents (or a Promise of agents)\n */\nexport type AgentsConfig =\n  | MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>\n  | AgentsFactory;\n\n/**\n * Resolve an AgentsConfig value to a concrete record of agents.\n * If the config is a factory function, it is called with the given request context.\n * Otherwise it is awaited directly (static record or Promise).\n */\nexport async function resolveAgents(\n  agents: AgentsConfig,\n  request?: Request,\n): Promise<Record<string, AbstractAgent>> {\n  if (typeof agents === \"function\") {\n    if (!request) {\n      throw new Error(\n        \"Agent factory function requires a request context, but none was provided.\",\n      );\n    }\n    return agents({ request });\n  }\n  return agents;\n}\n\ninterface BaseCopilotRuntimeOptions extends CopilotRuntimeMiddlewares {\n  /**\n   * Map of available agents, or a factory function for per-request agent resolution.\n   *\n   * Static record:\n   * ```ts\n   * agents: { support: new SupportAgent(), technical: new TechnicalAgent() }\n   * ```\n   *\n   * Factory function (called per-request):\n   * ```ts\n   * agents: ({ request }) => {\n   *   const tenantId = request.headers.get(\"x-tenant-id\");\n   *   return { default: createAgentForTenant(tenantId) };\n   * }\n   * ```\n   */\n  agents: AgentsConfig;\n  /** Optional transcription service for audio processing. */\n  transcriptionService?: TranscriptionService;\n  /** Optional *before* middleware – callback function or webhook URL. */\n  beforeRequestMiddleware?: BeforeRequestMiddleware;\n  /** Optional *after* middleware – callback function or webhook URL. */\n  afterRequestMiddleware?: AfterRequestMiddleware;\n  /** Signed license token for server-side feature verification. Falls back to COPILOTKIT_LICENSE_TOKEN env var. */\n  licenseToken?: string;\n  /** Enable debug logging for the event pipeline. */\n  debug?: DebugConfig;\n}\n\nexport interface CopilotRuntimeUser {\n  id: string;\n  name: string;\n}\n\nexport type IdentifyUserCallback = (\n  request: Request,\n) => MaybePromise<CopilotRuntimeUser>;\n\nexport interface CopilotSseRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** The runner to use for running agents in SSE mode. */\n  runner?: AgentRunner;\n  intelligence?: undefined;\n  generateThreadNames?: undefined;\n}\n\nexport interface CopilotIntelligenceRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** Configures Intelligence mode for durable threads and realtime events. */\n  intelligence: CopilotKitIntelligence;\n  /** Resolves the authenticated user for intelligence requests. */\n  identifyUser: IdentifyUserCallback;\n  /** Auto-generate short names for newly created threads. */\n  generateThreadNames?: boolean;\n  /** Max delay (ms) for WebSocket reconnect backoff. @default 10_000 */\n  maxReconnectMs?: number;\n  /** Max delay (ms) for channel rejoin backoff. @default 30_000 */\n  maxRejoinMs?: number;\n  /** Lock TTL in seconds. Clamped to a maximum of 3600 (1 hour). @default 20 */\n  lockTtlSeconds?: number;\n  /** Custom Redis key prefix for the thread lock. */\n  lockKeyPrefix?: string;\n  /** Interval in seconds at which the runtime renews the thread lock. Clamped to a maximum of 3000 (50 minutes). @default 15 */\n  lockHeartbeatIntervalSeconds?: number;\n}\n\nexport type CopilotRuntimeOptions =\n  | CopilotSseRuntimeOptions\n  | CopilotIntelligenceRuntimeOptions;\n\nexport interface CopilotRuntimeLike {\n  agents: CopilotRuntimeOptions[\"agents\"];\n  transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  runner: AgentRunner;\n  a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  intelligence?: CopilotKitIntelligence;\n  identifyUser?: IdentifyUserCallback;\n  mode: RuntimeMode;\n  licenseChecker?: LicenseChecker;\n  debugEventBus?: DebugEventBus;\n  debug: ResolvedDebugConfig;\n  debugLogger?: CopilotRuntimeLogger;\n}\n\nexport interface CopilotSseRuntimeLike extends CopilotRuntimeLike {\n  intelligence?: undefined;\n  mode: typeof RUNTIME_MODE_SSE;\n}\n\nexport interface CopilotIntelligenceRuntimeLike extends CopilotRuntimeLike {\n  intelligence: CopilotKitIntelligence;\n  identifyUser: IdentifyUserCallback;\n  generateThreadNames: boolean;\n  lockTtlSeconds: number;\n  lockKeyPrefix?: string;\n  lockHeartbeatIntervalSeconds: number;\n  mode: typeof RUNTIME_MODE_INTELLIGENCE;\n}\n\nabstract class BaseCopilotRuntime implements CopilotRuntimeLike {\n  public agents: CopilotRuntimeOptions[\"agents\"];\n  public transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  public beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  public afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  public runner: AgentRunner;\n  public a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  public mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  public openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  public licenseChecker?: LicenseChecker;\n  public readonly debugEventBus?: DebugEventBus;\n  public debug: ResolvedDebugConfig;\n  public debugLogger?: CopilotRuntimeLogger;\n\n  /**\n   * License token resolved once with the env fallback, so telemetry\n   * attribution (below) and subclass feature gating\n   * (CopilotIntelligenceRuntime's licenseChecker) read the exact same value\n   * instead of each re-applying `?? COPILOTKIT_LICENSE_TOKEN`.\n   */\n  protected readonly resolvedLicenseToken?: string;\n\n  abstract readonly intelligence?: CopilotKitIntelligence;\n  abstract readonly mode: RuntimeMode;\n\n  constructor(options: BaseCopilotRuntimeOptions, runner: AgentRunner) {\n    logRuntimeTelemetryDisclosure();\n\n    const {\n      agents,\n      transcriptionService,\n      beforeRequestMiddleware,\n      afterRequestMiddleware,\n      a2ui,\n      mcpApps,\n      openGenerativeUI,\n    } = options;\n\n    this.agents = agents;\n    this.transcriptionService = transcriptionService;\n    this.beforeRequestMiddleware = beforeRequestMiddleware;\n    this.afterRequestMiddleware = afterRequestMiddleware;\n    this.a2ui = a2ui || undefined;\n    this.mcpApps = mcpApps;\n    this.openGenerativeUI = openGenerativeUI;\n    this.runner = runner;\n\n    // Resolve the license token once (matching the license-verifier's env\n    // fallback) so telemetry attribution and subclass feature gating share\n    // one value.\n    this.resolvedLicenseToken =\n      options.licenseToken ?? process.env.COPILOTKIT_LICENSE_TOKEN;\n\n    // Attribute telemetry to the licensed customer for *every* runtime mode.\n    // Done in the shared base (not the subclasses) so SSE and Intelligence\n    // runtimes behave identically — previously only CopilotIntelligenceRuntime\n    // set this, so self-hosted SSE users never got a telemetry_id on their\n    // runtime events even with a license token configured.\n    if (this.resolvedLicenseToken) {\n      telemetry.setLicenseToken(this.resolvedLicenseToken);\n    }\n\n    if (process.env.NODE_ENV !== \"production\") {\n      this.debugEventBus = new DebugEventBus();\n    }\n    this.debug = resolveDebugConfig(options.debug);\n    if (this.debug.enabled) {\n      this.debugLogger = createLogger({\n        level: \"debug\",\n        component: \"copilotkit-debug\",\n      });\n    }\n  }\n}\n\nexport class CopilotSseRuntime\n  extends BaseCopilotRuntime\n  implements CopilotSseRuntimeLike\n{\n  readonly intelligence = undefined;\n  readonly mode = RUNTIME_MODE_SSE;\n\n  constructor(options: CopilotSseRuntimeOptions) {\n    super(options, options.runner ?? new InMemoryAgentRunner());\n  }\n}\n\nexport class CopilotIntelligenceRuntime\n  extends BaseCopilotRuntime\n  implements CopilotIntelligenceRuntimeLike\n{\n  readonly intelligence: CopilotKitIntelligence;\n  readonly identifyUser: IdentifyUserCallback;\n  readonly generateThreadNames: boolean;\n  readonly lockTtlSeconds: number;\n  readonly lockKeyPrefix?: string;\n  readonly lockHeartbeatIntervalSeconds: number;\n  readonly mode = RUNTIME_MODE_INTELLIGENCE;\n\n  /** Maximum allowed lock TTL in seconds (1 hour). */\n  static readonly MAX_LOCK_TTL_SECONDS = 3_600;\n  /** Maximum allowed heartbeat interval in seconds (50 minutes). */\n  static readonly MAX_HEARTBEAT_INTERVAL_SECONDS = 3_000;\n\n  constructor(options: CopilotIntelligenceRuntimeOptions) {\n    super(\n      options,\n      new IntelligenceAgentRunner({\n        url: options.intelligence.ɵgetRunnerWsUrl(),\n        authToken: options.intelligence.ɵgetRunnerAuthToken(),\n        maxReconnectMs: options.maxReconnectMs,\n        maxRejoinMs: options.maxRejoinMs,\n      }),\n    );\n    this.intelligence = options.intelligence;\n    this.identifyUser = options.identifyUser;\n    this.generateThreadNames = options.generateThreadNames ?? true;\n    // Telemetry attribution is handled by the base constructor for all modes;\n    // here we only need the token for feature gating. Reuse the base-resolved\n    // value so gating and attribution can never disagree.\n    this.licenseChecker = createLicenseChecker(this.resolvedLicenseToken);\n    this.lockTtlSeconds = Math.min(\n      options.lockTtlSeconds ?? 20,\n      CopilotIntelligenceRuntime.MAX_LOCK_TTL_SECONDS,\n    );\n    this.lockKeyPrefix = options.lockKeyPrefix;\n    this.lockHeartbeatIntervalSeconds = Math.min(\n      options.lockHeartbeatIntervalSeconds ?? 15,\n      CopilotIntelligenceRuntime.MAX_HEARTBEAT_INTERVAL_SECONDS,\n    );\n  }\n}\n\nfunction hasIntelligenceOptions(\n  options: CopilotRuntimeOptions,\n): options is CopilotIntelligenceRuntimeOptions {\n  return \"intelligence\" in options && !!options.intelligence;\n}\n\nexport function isIntelligenceRuntime(\n  runtime: CopilotRuntimeLike,\n): runtime is CopilotIntelligenceRuntimeLike {\n  return runtime.mode === RUNTIME_MODE_INTELLIGENCE && !!runtime.intelligence;\n}\n\n/**\n * Single source of truth for \"is A2UI on for this runtime?\". Both the run path\n * (which applies `A2UIMiddleware`) and the `/info` response (which tells the\n * client whether to mount the A2UI renderer + catalog context) MUST go through\n * this, so they can never disagree — the divergence between them was the root\n * of CopilotKit/CopilotKit#5369.\n *\n * Backwards compatible: any config object is enabled (matching the historical\n * `!!runtime.a2ui`); only an explicit `enabled: false` turns it off.\n */\nexport function isA2UIEnabled(\n  a2ui: CopilotRuntimeOptions[\"a2ui\"],\n): a2ui is NonNullable<CopilotRuntimeOptions[\"a2ui\"]> {\n  return !!a2ui && a2ui.enabled !== false;\n}\n\n/**\n * Compatibility shim that preserves the legacy `CopilotRuntime` entrypoint.\n * New code should prefer `CopilotSseRuntime` or `CopilotIntelligenceRuntime`.\n */\nexport class CopilotRuntime implements CopilotRuntimeLike {\n  private delegate: CopilotRuntimeLike;\n\n  constructor(options: CopilotRuntimeOptions) {\n    this.delegate = hasIntelligenceOptions(options)\n      ? new CopilotIntelligenceRuntime(options)\n      : new CopilotSseRuntime(options);\n  }\n\n  get agents(): CopilotRuntimeOptions[\"agents\"] {\n    return this.delegate.agents;\n  }\n\n  get transcriptionService(): CopilotRuntimeOptions[\"transcriptionService\"] {\n    return this.delegate.transcriptionService;\n  }\n\n  get beforeRequestMiddleware(): CopilotRuntimeOptions[\"beforeRequestMiddleware\"] {\n    return this.delegate.beforeRequestMiddleware;\n  }\n\n  get afterRequestMiddleware(): CopilotRuntimeOptions[\"afterRequestMiddleware\"] {\n    return this.delegate.afterRequestMiddleware;\n  }\n\n  get runner(): AgentRunner {\n    return this.delegate.runner;\n  }\n\n  get a2ui(): CopilotRuntimeOptions[\"a2ui\"] {\n    return this.delegate.a2ui;\n  }\n\n  get mcpApps(): CopilotRuntimeOptions[\"mcpApps\"] {\n    return this.delegate.mcpApps;\n  }\n\n  get openGenerativeUI(): CopilotRuntimeOptions[\"openGenerativeUI\"] {\n    return this.delegate.openGenerativeUI;\n  }\n\n  get intelligence(): CopilotKitIntelligence | undefined {\n    return this.delegate.intelligence;\n  }\n\n  get generateThreadNames(): boolean | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.generateThreadNames\n      : undefined;\n  }\n\n  get identifyUser(): IdentifyUserCallback | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.identifyUser\n      : undefined;\n  }\n\n  get lockTtlSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockTtlSeconds\n      : undefined;\n  }\n\n  get lockKeyPrefix(): string | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockKeyPrefix\n      : undefined;\n  }\n\n  get lockHeartbeatIntervalSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockHeartbeatIntervalSeconds\n      : undefined;\n  }\n\n  get mode(): RuntimeMode {\n    return this.delegate.mode;\n  }\n\n  get licenseChecker() {\n    return this.delegate.licenseChecker;\n  }\n\n  get debugEventBus() {\n    return this.delegate.debugEventBus;\n  }\n\n  get debug(): ResolvedDebugConfig {\n    return this.delegate.debug;\n  }\n\n  get debugLogger(): CopilotRuntimeLogger | undefined {\n    return this.delegate.debugLogger;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAgCA,MAAa,UAAUA,uBAAI;;;;;;AAyE3B,eAAsB,cACpB,QACA,SACwC;AACxC,KAAI,OAAO,WAAW,YAAY;AAChC,MAAI,CAAC,QACH,OAAM,IAAI,MACR,4EACD;AAEH,SAAO,OAAO,EAAE,SAAS,CAAC;;AAE5B,QAAO;;AAyGT,IAAe,qBAAf,MAAgE;CAyB9D,YAAY,SAAoC,QAAqB;AACnE,8DAA+B;EAE/B,MAAM,EACJ,QACA,sBACA,yBACA,wBACA,MACA,SACA,qBACE;AAEJ,OAAK,SAAS;AACd,OAAK,uBAAuB;AAC5B,OAAK,0BAA0B;AAC/B,OAAK,yBAAyB;AAC9B,OAAK,OAAO,QAAQ;AACpB,OAAK,UAAU;AACf,OAAK,mBAAmB;AACxB,OAAK,SAAS;AAKd,OAAK,uBACH,QAAQ,gBAAgB,QAAQ,IAAI;AAOtC,MAAI,KAAK,qBACP,kCAAU,gBAAgB,KAAK,qBAAqB;AAGtD,MAAI,QAAQ,IAAI,aAAa,aAC3B,MAAK,gBAAgB,IAAIC,uCAAe;AAE1C,OAAK,mDAA2B,QAAQ,MAAM;AAC9C,MAAI,KAAK,MAAM,QACb,MAAK,cAAcC,4BAAa;GAC9B,OAAO;GACP,WAAW;GACZ,CAAC;;;AAKR,IAAa,oBAAb,cACU,mBAEV;CAIE,YAAY,SAAmC;AAC7C,QAAM,SAAS,QAAQ,UAAU,IAAIC,uCAAqB,CAAC;sBAJrC;cACRC;;;AAOlB,IAAa,6BAAb,MAAa,mCACH,mBAEV;;8BAUyC;;;wCAEU;;CAEjD,YAAY,SAA4C;AACtD,QACE,SACA,IAAIC,6CAAwB;GAC1B,KAAK,QAAQ,aAAa,iBAAiB;GAC3C,WAAW,QAAQ,aAAa,qBAAqB;GACrD,gBAAgB,QAAQ;GACxB,aAAa,QAAQ;GACtB,CAAC,CACH;cAhBaC;AAiBd,OAAK,eAAe,QAAQ;AAC5B,OAAK,eAAe,QAAQ;AAC5B,OAAK,sBAAsB,QAAQ,uBAAuB;AAI1D,OAAK,wEAAsC,KAAK,qBAAqB;AACrE,OAAK,iBAAiB,KAAK,IACzB,QAAQ,kBAAkB,IAC1B,2BAA2B,qBAC5B;AACD,OAAK,gBAAgB,QAAQ;AAC7B,OAAK,+BAA+B,KAAK,IACvC,QAAQ,gCAAgC,IACxC,2BAA2B,+BAC5B;;;AAIL,SAAS,uBACP,SAC8C;AAC9C,QAAO,kBAAkB,WAAW,CAAC,CAAC,QAAQ;;AAGhD,SAAgB,sBACd,SAC2C;AAC3C,QAAO,QAAQ,SAASA,gDAA6B,CAAC,CAAC,QAAQ;;;;;;;;;;;;AAajE,SAAgB,cACd,MACoD;AACpD,QAAO,CAAC,CAAC,QAAQ,KAAK,YAAY;;;;;;AAOpC,IAAa,iBAAb,MAA0D;CAGxD,YAAY,SAAgC;AAC1C,OAAK,WAAW,uBAAuB,QAAQ,GAC3C,IAAI,2BAA2B,QAAQ,GACvC,IAAI,kBAAkB,QAAQ;;CAGpC,IAAI,SAA0C;AAC5C,SAAO,KAAK,SAAS;;CAGvB,IAAI,uBAAsE;AACxE,SAAO,KAAK,SAAS;;CAGvB,IAAI,0BAA4E;AAC9E,SAAO,KAAK,SAAS;;CAGvB,IAAI,yBAA0E;AAC5E,SAAO,KAAK,SAAS;;CAGvB,IAAI,SAAsB;AACxB,SAAO,KAAK,SAAS;;CAGvB,IAAI,OAAsC;AACxC,SAAO,KAAK,SAAS;;CAGvB,IAAI,UAA4C;AAC9C,SAAO,KAAK,SAAS;;CAGvB,IAAI,mBAA8D;AAChE,SAAO,KAAK,SAAS;;CAGvB,IAAI,eAAmD;AACrD,SAAO,KAAK,SAAS;;CAGvB,IAAI,sBAA2C;AAC7C,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,sBACd;;CAGN,IAAI,eAAiD;AACnD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,eACd;;CAGN,IAAI,iBAAqC;AACvC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,iBACd;;CAGN,IAAI,gBAAoC;AACtC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,gBACd;;CAGN,IAAI,+BAAmD;AACrD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,+BACd;;CAGN,IAAI,OAAoB;AACtB,SAAO,KAAK,SAAS;;CAGvB,IAAI,iBAAiB;AACnB,SAAO,KAAK,SAAS;;CAGvB,IAAI,gBAAgB;AAClB,SAAO,KAAK,SAAS;;CAGvB,IAAI,QAA6B;AAC/B,SAAO,KAAK,SAAS;;CAGvB,IAAI,cAAgD;AAClD,SAAO,KAAK,SAAS"}
+{"version":3,"file":"runtime.cjs","names":["pkg","DebugEventBus","resolveForwardHeadersPolicy","createLogger","InMemoryAgentRunner","RUNTIME_MODE_SSE","IntelligenceAgentRunner","RUNTIME_MODE_INTELLIGENCE"],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"sourcesContent":["import type {\n  MaybePromise,\n  NonEmptyRecord,\n  RuntimeMode,\n} from \"@copilotkit/shared\";\nimport {\n  RUNTIME_MODE_SSE,\n  RUNTIME_MODE_INTELLIGENCE,\n} from \"@copilotkit/shared\";\nimport { createLicenseChecker } from \"@copilotkit/license-verifier\";\nimport type { LicenseChecker } from \"@copilotkit/license-verifier\";\nimport { resolveDebugConfig } from \"@copilotkit/shared\";\nimport type { ResolvedDebugConfig, DebugConfig } from \"@copilotkit/shared\";\nimport { resolveForwardHeadersPolicy } from \"../handlers/header-utils\";\nimport type {\n  ForwardHeadersConfig,\n  ResolvedForwardHeadersPolicy,\n} from \"../handlers/header-utils\";\nimport type { AbstractAgent } from \"@ag-ui/client\";\nimport type { MCPClientConfig } from \"@ag-ui/mcp-apps-middleware\";\nimport type { A2UIMiddlewareConfig } from \"@ag-ui/a2ui-middleware\";\nimport pkg from \"../../../../package.json\";\nimport type {\n  BeforeRequestMiddleware,\n  AfterRequestMiddleware,\n} from \"./middleware\";\nimport { createLogger } from \"../../../lib/logger\";\nimport type { CopilotRuntimeLogger } from \"../../../lib/logger\";\nimport { logRuntimeTelemetryDisclosure } from \"../../../lib/telemetry-disclosure\";\nimport type { TranscriptionService } from \"../transcription-service/transcription-service\";\nimport { DebugEventBus } from \"./debug-event-bus\";\nimport type { AgentRunner } from \"../runner/agent-runner\";\nimport { InMemoryAgentRunner } from \"../runner/in-memory\";\nimport { IntelligenceAgentRunner } from \"../runner/intelligence\";\nimport type { CopilotKitIntelligence } from \"../intelligence-platform\";\nimport telemetry from \"../telemetry/telemetry-client\";\n\nexport const VERSION = pkg.version;\n\ninterface BaseCopilotRuntimeMiddlewareOptions {\n  /** If set, middleware only applies to these named agents. Applies to all agents if omitted. */\n  agents?: string[];\n}\n\nexport type McpAppsServerConfig = MCPClientConfig & {\n  /** Agent to bind this server to. If omitted, the server is available to all agents. */\n  agentId?: string;\n};\n\nexport interface McpAppsConfig {\n  /** List of MCP server configurations. */\n  servers: McpAppsServerConfig[];\n}\n\nexport interface OpenGenerativeUIOptions extends BaseCopilotRuntimeMiddlewareOptions {}\n\nexport type OpenGenerativeUIConfig = boolean | OpenGenerativeUIOptions;\n\ninterface CopilotRuntimeMiddlewares {\n  /**\n   * Auto-apply A2UIMiddleware to agents at run time.\n   * Pass an object to enable and customise behaviour, or omit to disable.\n   */\n  a2ui?: BaseCopilotRuntimeMiddlewareOptions &\n    A2UIMiddlewareConfig & {\n      /**\n       * Explicit on/off switch. Omit (or set `true`) to enable; set `false`\n       * to disable A2UI for this runtime while keeping the rest of the config\n       * (e.g. a `schema`/`catalog`) in place. A bare `a2ui: {}` stays enabled\n       * for backwards compatibility.\n       */\n      enabled?: boolean;\n    };\n  /** Auto-apply MCPAppsMiddleware to agents at run time. */\n  mcpApps?: McpAppsConfig;\n  /** Auto-apply OpenGenerativeUIMiddleware to agents at run time. */\n  openGenerativeUI?: OpenGenerativeUIConfig;\n}\n\n/**\n * Context passed to agent factory functions for per-request agent resolution.\n */\nexport interface AgentFactoryContext {\n  /** The incoming HTTP request. */\n  request: Request;\n}\n\n/**\n * A function that dynamically creates agents on a per-request basis.\n * Useful for multi-tenant scenarios or request-scoped agent configuration.\n */\nexport type AgentsFactory = (\n  ctx: AgentFactoryContext,\n) => MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>;\n\n/**\n * Agents can be provided as:\n * - A static record of agents\n * - A Promise that resolves to a record of agents\n * - A factory function that receives request context and returns agents (or a Promise of agents)\n */\nexport type AgentsConfig =\n  | MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>\n  | AgentsFactory;\n\n/**\n * Resolve an AgentsConfig value to a concrete record of agents.\n * If the config is a factory function, it is called with the given request context.\n * Otherwise it is awaited directly (static record or Promise).\n */\nexport async function resolveAgents(\n  agents: AgentsConfig,\n  request?: Request,\n): Promise<Record<string, AbstractAgent>> {\n  if (typeof agents === \"function\") {\n    if (!request) {\n      throw new Error(\n        \"Agent factory function requires a request context, but none was provided.\",\n      );\n    }\n    return agents({ request });\n  }\n  return agents;\n}\n\ninterface BaseCopilotRuntimeOptions extends CopilotRuntimeMiddlewares {\n  /**\n   * Map of available agents, or a factory function for per-request agent resolution.\n   *\n   * Static record:\n   * ```ts\n   * agents: { support: new SupportAgent(), technical: new TechnicalAgent() }\n   * ```\n   *\n   * Factory function (called per-request):\n   * ```ts\n   * agents: ({ request }) => {\n   *   const tenantId = request.headers.get(\"x-tenant-id\");\n   *   return { default: createAgentForTenant(tenantId) };\n   * }\n   * ```\n   */\n  agents: AgentsConfig;\n  /** Optional transcription service for audio processing. */\n  transcriptionService?: TranscriptionService;\n  /** Optional *before* middleware – callback function or webhook URL. */\n  beforeRequestMiddleware?: BeforeRequestMiddleware;\n  /** Optional *after* middleware – callback function or webhook URL. */\n  afterRequestMiddleware?: AfterRequestMiddleware;\n  /** Signed license token for server-side feature verification. Falls back to COPILOTKIT_LICENSE_TOKEN env var. */\n  licenseToken?: string;\n  /** Enable debug logging for the event pipeline. */\n  debug?: DebugConfig;\n  /**\n   * Policy controlling which inbound HTTP headers are forwarded onto the\n   * outgoing agent call. By default a built-in denylist strips known\n   * infrastructure/proxy/platform headers (`x-forwarded-*`, `x-real-ip`,\n   * `x-vercel-*`, `x-copilotcloud-*`, etc.) while `authorization` and custom\n   * `x-*` application headers continue to forward (#5712). Set\n   * `{ useDefaultDenylist: false }` to restore the previous wide-open behavior.\n   */\n  forwardHeaders?: ForwardHeadersConfig;\n}\n\nexport interface CopilotRuntimeUser {\n  id: string;\n  name: string;\n}\n\nexport type IdentifyUserCallback = (\n  request: Request,\n) => MaybePromise<CopilotRuntimeUser>;\n\nexport interface CopilotSseRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** The runner to use for running agents in SSE mode. */\n  runner?: AgentRunner;\n  intelligence?: undefined;\n  generateThreadNames?: undefined;\n}\n\nexport interface CopilotIntelligenceRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** Configures Intelligence mode for durable threads and realtime events. */\n  intelligence: CopilotKitIntelligence;\n  /** Resolves the authenticated user for intelligence requests. */\n  identifyUser: IdentifyUserCallback;\n  /** Auto-generate short names for newly created threads. */\n  generateThreadNames?: boolean;\n  /** Max delay (ms) for WebSocket reconnect backoff. @default 10_000 */\n  maxReconnectMs?: number;\n  /** Max delay (ms) for channel rejoin backoff. @default 30_000 */\n  maxRejoinMs?: number;\n  /** Lock TTL in seconds. Clamped to a maximum of 3600 (1 hour). @default 20 */\n  lockTtlSeconds?: number;\n  /** Custom Redis key prefix for the thread lock. */\n  lockKeyPrefix?: string;\n  /** Interval in seconds at which the runtime renews the thread lock. Clamped to a maximum of 3000 (50 minutes). @default 15 */\n  lockHeartbeatIntervalSeconds?: number;\n}\n\nexport type CopilotRuntimeOptions =\n  | CopilotSseRuntimeOptions\n  | CopilotIntelligenceRuntimeOptions;\n\nexport interface CopilotRuntimeLike {\n  agents: CopilotRuntimeOptions[\"agents\"];\n  transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  runner: AgentRunner;\n  a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  intelligence?: CopilotKitIntelligence;\n  identifyUser?: IdentifyUserCallback;\n  mode: RuntimeMode;\n  licenseChecker?: LicenseChecker;\n  debugEventBus?: DebugEventBus;\n  debug: ResolvedDebugConfig;\n  debugLogger?: CopilotRuntimeLogger;\n  /**\n   * Resolved inbound-header forwarding policy read by the /run and /connect call\n   * sites. Optional on the published interface so an external `CopilotRuntimeLike`\n   * implementor predating this field stays source-compatible (non-breaking minor\n   * release). Concrete runtimes (`BaseCopilotRuntime`) always resolve and set it;\n   * the call sites coalesce a missing value to the default resolved policy\n   * (`resolveForwardHeadersPolicy(undefined)` — default-on denylist).\n   */\n  forwardHeadersPolicy?: ResolvedForwardHeadersPolicy;\n}\n\nexport interface CopilotSseRuntimeLike extends CopilotRuntimeLike {\n  intelligence?: undefined;\n  mode: typeof RUNTIME_MODE_SSE;\n}\n\nexport interface CopilotIntelligenceRuntimeLike extends CopilotRuntimeLike {\n  intelligence: CopilotKitIntelligence;\n  identifyUser: IdentifyUserCallback;\n  generateThreadNames: boolean;\n  lockTtlSeconds: number;\n  lockKeyPrefix?: string;\n  lockHeartbeatIntervalSeconds: number;\n  mode: typeof RUNTIME_MODE_INTELLIGENCE;\n}\n\nabstract class BaseCopilotRuntime implements CopilotRuntimeLike {\n  public agents: CopilotRuntimeOptions[\"agents\"];\n  public transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  public beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  public afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  public runner: AgentRunner;\n  public a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  public mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  public openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  public licenseChecker?: LicenseChecker;\n  public readonly debugEventBus?: DebugEventBus;\n  public debug: ResolvedDebugConfig;\n  public debugLogger?: CopilotRuntimeLogger;\n  public readonly forwardHeadersPolicy: ResolvedForwardHeadersPolicy;\n\n  /**\n   * License token resolved once with the env fallback, so telemetry\n   * attribution (below) and subclass feature gating\n   * (CopilotIntelligenceRuntime's licenseChecker) read the exact same value\n   * instead of each re-applying `?? COPILOTKIT_LICENSE_TOKEN`.\n   */\n  protected readonly resolvedLicenseToken?: string;\n\n  abstract readonly intelligence?: CopilotKitIntelligence;\n  abstract readonly mode: RuntimeMode;\n\n  constructor(options: BaseCopilotRuntimeOptions, runner: AgentRunner) {\n    logRuntimeTelemetryDisclosure();\n\n    const {\n      agents,\n      transcriptionService,\n      beforeRequestMiddleware,\n      afterRequestMiddleware,\n      a2ui,\n      mcpApps,\n      openGenerativeUI,\n    } = options;\n\n    this.agents = agents;\n    this.transcriptionService = transcriptionService;\n    this.beforeRequestMiddleware = beforeRequestMiddleware;\n    this.afterRequestMiddleware = afterRequestMiddleware;\n    this.a2ui = a2ui || undefined;\n    this.mcpApps = mcpApps;\n    this.openGenerativeUI = openGenerativeUI;\n    this.runner = runner;\n\n    // Resolve the license token once (matching the license-verifier's env\n    // fallback) so telemetry attribution and subclass feature gating share\n    // one value.\n    this.resolvedLicenseToken =\n      options.licenseToken ?? process.env.COPILOTKIT_LICENSE_TOKEN;\n\n    // Attribute telemetry to the licensed customer for *every* runtime mode.\n    // Done in the shared base (not the subclasses) so SSE and Intelligence\n    // runtimes behave identically — previously only CopilotIntelligenceRuntime\n    // set this, so self-hosted SSE users never got a telemetry_id on their\n    // runtime events even with a license token configured.\n    if (this.resolvedLicenseToken) {\n      telemetry.setLicenseToken(this.resolvedLicenseToken);\n    }\n\n    if (process.env.NODE_ENV !== \"production\") {\n      this.debugEventBus = new DebugEventBus();\n    }\n    // Resolve the inbound-header forwarding policy once (mirroring the\n    // `debug` → `ResolvedDebugConfig` resolve-once above) so both the /run and\n    // /connect call sites read the exact same resolved policy off the runtime\n    // and can never diverge.\n    this.forwardHeadersPolicy = resolveForwardHeadersPolicy(\n      options.forwardHeaders,\n    );\n    this.debug = resolveDebugConfig(options.debug);\n    if (this.debug.enabled) {\n      this.debugLogger = createLogger({\n        level: \"debug\",\n        component: \"copilotkit-debug\",\n      });\n    }\n  }\n}\n\nexport class CopilotSseRuntime\n  extends BaseCopilotRuntime\n  implements CopilotSseRuntimeLike\n{\n  readonly intelligence = undefined;\n  readonly mode = RUNTIME_MODE_SSE;\n\n  constructor(options: CopilotSseRuntimeOptions) {\n    super(options, options.runner ?? new InMemoryAgentRunner());\n  }\n}\n\nexport class CopilotIntelligenceRuntime\n  extends BaseCopilotRuntime\n  implements CopilotIntelligenceRuntimeLike\n{\n  readonly intelligence: CopilotKitIntelligence;\n  readonly identifyUser: IdentifyUserCallback;\n  readonly generateThreadNames: boolean;\n  readonly lockTtlSeconds: number;\n  readonly lockKeyPrefix?: string;\n  readonly lockHeartbeatIntervalSeconds: number;\n  readonly mode = RUNTIME_MODE_INTELLIGENCE;\n\n  /** Maximum allowed lock TTL in seconds (1 hour). */\n  static readonly MAX_LOCK_TTL_SECONDS = 3_600;\n  /** Maximum allowed heartbeat interval in seconds (50 minutes). */\n  static readonly MAX_HEARTBEAT_INTERVAL_SECONDS = 3_000;\n\n  constructor(options: CopilotIntelligenceRuntimeOptions) {\n    super(\n      options,\n      new IntelligenceAgentRunner({\n        url: options.intelligence.ɵgetRunnerWsUrl(),\n        authToken: options.intelligence.ɵgetRunnerAuthToken(),\n        maxReconnectMs: options.maxReconnectMs,\n        maxRejoinMs: options.maxRejoinMs,\n      }),\n    );\n    this.intelligence = options.intelligence;\n    this.identifyUser = options.identifyUser;\n    this.generateThreadNames = options.generateThreadNames ?? true;\n    // Telemetry attribution is handled by the base constructor for all modes;\n    // here we only need the token for feature gating. Reuse the base-resolved\n    // value so gating and attribution can never disagree.\n    this.licenseChecker = createLicenseChecker(this.resolvedLicenseToken);\n    this.lockTtlSeconds = Math.min(\n      options.lockTtlSeconds ?? 20,\n      CopilotIntelligenceRuntime.MAX_LOCK_TTL_SECONDS,\n    );\n    this.lockKeyPrefix = options.lockKeyPrefix;\n    this.lockHeartbeatIntervalSeconds = Math.min(\n      options.lockHeartbeatIntervalSeconds ?? 15,\n      CopilotIntelligenceRuntime.MAX_HEARTBEAT_INTERVAL_SECONDS,\n    );\n  }\n}\n\nfunction hasIntelligenceOptions(\n  options: CopilotRuntimeOptions,\n): options is CopilotIntelligenceRuntimeOptions {\n  return \"intelligence\" in options && !!options.intelligence;\n}\n\nexport function isIntelligenceRuntime(\n  runtime: CopilotRuntimeLike,\n): runtime is CopilotIntelligenceRuntimeLike {\n  return runtime.mode === RUNTIME_MODE_INTELLIGENCE && !!runtime.intelligence;\n}\n\n/**\n * Single source of truth for \"is A2UI on for this runtime?\". Both the run path\n * (which applies `A2UIMiddleware`) and the `/info` response (which tells the\n * client whether to mount the A2UI renderer + catalog context) MUST go through\n * this, so they can never disagree — the divergence between them was the root\n * of CopilotKit/CopilotKit#5369.\n *\n * Backwards compatible: any config object is enabled (matching the historical\n * `!!runtime.a2ui`); only an explicit `enabled: false` turns it off.\n */\nexport function isA2UIEnabled(\n  a2ui: CopilotRuntimeOptions[\"a2ui\"],\n): a2ui is NonNullable<CopilotRuntimeOptions[\"a2ui\"]> {\n  return !!a2ui && a2ui.enabled !== false;\n}\n\n/**\n * Compatibility shim that preserves the legacy `CopilotRuntime` entrypoint.\n * New code should prefer `CopilotSseRuntime` or `CopilotIntelligenceRuntime`.\n */\nexport class CopilotRuntime implements CopilotRuntimeLike {\n  private delegate: CopilotRuntimeLike;\n\n  constructor(options: CopilotRuntimeOptions) {\n    this.delegate = hasIntelligenceOptions(options)\n      ? new CopilotIntelligenceRuntime(options)\n      : new CopilotSseRuntime(options);\n  }\n\n  get agents(): CopilotRuntimeOptions[\"agents\"] {\n    return this.delegate.agents;\n  }\n\n  get transcriptionService(): CopilotRuntimeOptions[\"transcriptionService\"] {\n    return this.delegate.transcriptionService;\n  }\n\n  get beforeRequestMiddleware(): CopilotRuntimeOptions[\"beforeRequestMiddleware\"] {\n    return this.delegate.beforeRequestMiddleware;\n  }\n\n  get afterRequestMiddleware(): CopilotRuntimeOptions[\"afterRequestMiddleware\"] {\n    return this.delegate.afterRequestMiddleware;\n  }\n\n  get runner(): AgentRunner {\n    return this.delegate.runner;\n  }\n\n  get a2ui(): CopilotRuntimeOptions[\"a2ui\"] {\n    return this.delegate.a2ui;\n  }\n\n  get mcpApps(): CopilotRuntimeOptions[\"mcpApps\"] {\n    return this.delegate.mcpApps;\n  }\n\n  get openGenerativeUI(): CopilotRuntimeOptions[\"openGenerativeUI\"] {\n    return this.delegate.openGenerativeUI;\n  }\n\n  get intelligence(): CopilotKitIntelligence | undefined {\n    return this.delegate.intelligence;\n  }\n\n  get generateThreadNames(): boolean | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.generateThreadNames\n      : undefined;\n  }\n\n  get identifyUser(): IdentifyUserCallback | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.identifyUser\n      : undefined;\n  }\n\n  get lockTtlSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockTtlSeconds\n      : undefined;\n  }\n\n  get lockKeyPrefix(): string | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockKeyPrefix\n      : undefined;\n  }\n\n  get lockHeartbeatIntervalSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockHeartbeatIntervalSeconds\n      : undefined;\n  }\n\n  get mode(): RuntimeMode {\n    return this.delegate.mode;\n  }\n\n  get licenseChecker() {\n    return this.delegate.licenseChecker;\n  }\n\n  get debugEventBus() {\n    return this.delegate.debugEventBus;\n  }\n\n  get debug(): ResolvedDebugConfig {\n    return this.delegate.debug;\n  }\n\n  get debugLogger(): CopilotRuntimeLogger | undefined {\n    return this.delegate.debugLogger;\n  }\n\n  get forwardHeadersPolicy(): ResolvedForwardHeadersPolicy {\n    return this.delegate.forwardHeadersPolicy;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAqCA,MAAa,UAAUA,uBAAI;;;;;;AAyE3B,eAAsB,cACpB,QACA,SACwC;AACxC,KAAI,OAAO,WAAW,YAAY;AAChC,MAAI,CAAC,QACH,OAAM,IAAI,MACR,4EACD;AAEH,SAAO,OAAO,EAAE,SAAS,CAAC;;AAE5B,QAAO;;AA2HT,IAAe,qBAAf,MAAgE;CA0B9D,YAAY,SAAoC,QAAqB;AACnE,8DAA+B;EAE/B,MAAM,EACJ,QACA,sBACA,yBACA,wBACA,MACA,SACA,qBACE;AAEJ,OAAK,SAAS;AACd,OAAK,uBAAuB;AAC5B,OAAK,0BAA0B;AAC/B,OAAK,yBAAyB;AAC9B,OAAK,OAAO,QAAQ;AACpB,OAAK,UAAU;AACf,OAAK,mBAAmB;AACxB,OAAK,SAAS;AAKd,OAAK,uBACH,QAAQ,gBAAgB,QAAQ,IAAI;AAOtC,MAAI,KAAK,qBACP,kCAAU,gBAAgB,KAAK,qBAAqB;AAGtD,MAAI,QAAQ,IAAI,aAAa,aAC3B,MAAK,gBAAgB,IAAIC,uCAAe;AAM1C,OAAK,uBAAuBC,iDAC1B,QAAQ,eACT;AACD,OAAK,mDAA2B,QAAQ,MAAM;AAC9C,MAAI,KAAK,MAAM,QACb,MAAK,cAAcC,4BAAa;GAC9B,OAAO;GACP,WAAW;GACZ,CAAC;;;AAKR,IAAa,oBAAb,cACU,mBAEV;CAIE,YAAY,SAAmC;AAC7C,QAAM,SAAS,QAAQ,UAAU,IAAIC,uCAAqB,CAAC;sBAJrC;cACRC;;;AAOlB,IAAa,6BAAb,MAAa,mCACH,mBAEV;;8BAUyC;;;wCAEU;;CAEjD,YAAY,SAA4C;AACtD,QACE,SACA,IAAIC,6CAAwB;GAC1B,KAAK,QAAQ,aAAa,iBAAiB;GAC3C,WAAW,QAAQ,aAAa,qBAAqB;GACrD,gBAAgB,QAAQ;GACxB,aAAa,QAAQ;GACtB,CAAC,CACH;cAhBaC;AAiBd,OAAK,eAAe,QAAQ;AAC5B,OAAK,eAAe,QAAQ;AAC5B,OAAK,sBAAsB,QAAQ,uBAAuB;AAI1D,OAAK,wEAAsC,KAAK,qBAAqB;AACrE,OAAK,iBAAiB,KAAK,IACzB,QAAQ,kBAAkB,IAC1B,2BAA2B,qBAC5B;AACD,OAAK,gBAAgB,QAAQ;AAC7B,OAAK,+BAA+B,KAAK,IACvC,QAAQ,gCAAgC,IACxC,2BAA2B,+BAC5B;;;AAIL,SAAS,uBACP,SAC8C;AAC9C,QAAO,kBAAkB,WAAW,CAAC,CAAC,QAAQ;;AAGhD,SAAgB,sBACd,SAC2C;AAC3C,QAAO,QAAQ,SAASA,gDAA6B,CAAC,CAAC,QAAQ;;;;;;;;;;;;AAajE,SAAgB,cACd,MACoD;AACpD,QAAO,CAAC,CAAC,QAAQ,KAAK,YAAY;;;;;;AAOpC,IAAa,iBAAb,MAA0D;CAGxD,YAAY,SAAgC;AAC1C,OAAK,WAAW,uBAAuB,QAAQ,GAC3C,IAAI,2BAA2B,QAAQ,GACvC,IAAI,kBAAkB,QAAQ;;CAGpC,IAAI,SAA0C;AAC5C,SAAO,KAAK,SAAS;;CAGvB,IAAI,uBAAsE;AACxE,SAAO,KAAK,SAAS;;CAGvB,IAAI,0BAA4E;AAC9E,SAAO,KAAK,SAAS;;CAGvB,IAAI,yBAA0E;AAC5E,SAAO,KAAK,SAAS;;CAGvB,IAAI,SAAsB;AACxB,SAAO,KAAK,SAAS;;CAGvB,IAAI,OAAsC;AACxC,SAAO,KAAK,SAAS;;CAGvB,IAAI,UAA4C;AAC9C,SAAO,KAAK,SAAS;;CAGvB,IAAI,mBAA8D;AAChE,SAAO,KAAK,SAAS;;CAGvB,IAAI,eAAmD;AACrD,SAAO,KAAK,SAAS;;CAGvB,IAAI,sBAA2C;AAC7C,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,sBACd;;CAGN,IAAI,eAAiD;AACnD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,eACd;;CAGN,IAAI,iBAAqC;AACvC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,iBACd;;CAGN,IAAI,gBAAoC;AACtC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,gBACd;;CAGN,IAAI,+BAAmD;AACrD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,+BACd;;CAGN,IAAI,OAAoB;AACtB,SAAO,KAAK,SAAS;;CAGvB,IAAI,iBAAiB;AACnB,SAAO,KAAK,SAAS;;CAGvB,IAAI,gBAAgB;AAClB,SAAO,KAAK,SAAS;;CAGvB,IAAI,QAA6B;AAC/B,SAAO,KAAK,SAAS;;CAGvB,IAAI,cAAgD;AAClD,SAAO,KAAK,SAAS;;CAGvB,IAAI,uBAAqD;AACvD,SAAO,KAAK,SAAS"}

package/dist/v2/runtime/core/runtime.d.cts

@@ -1,4 +1,5 @@
 
+import { ForwardHeadersConfig, ResolvedForwardHeadersPolicy } from "../handlers/header-utils.cjs";
 import { AfterRequestMiddleware, BeforeRequestMiddleware } from "./middleware.cjs";
 import { CopilotRuntimeLogger } from "../../../lib/logger.cjs";
 import { TranscriptionService } from "../transcription-service/transcription-service.cjs";
@@ -98,6 +99,15 @@ interface BaseCopilotRuntimeOptions extends CopilotRuntimeMiddlewares {
   licenseToken?: string;
   /** Enable debug logging for the event pipeline. */
   debug?: DebugConfig;
+  /**
+   * Policy controlling which inbound HTTP headers are forwarded onto the
+   * outgoing agent call. By default a built-in denylist strips known
+   * infrastructure/proxy/platform headers (`x-forwarded-*`, `x-real-ip`,
+   * `x-vercel-*`, `x-copilotcloud-*`, etc.) while `authorization` and custom
+   * `x-*` application headers continue to forward (#5712). Set
+   * `{ useDefaultDenylist: false }` to restore the previous wide-open behavior.
+   */
+  forwardHeaders?: ForwardHeadersConfig;
 }
 interface CopilotRuntimeUser {
   id: string;
@@ -145,6 +155,15 @@ interface CopilotRuntimeLike {
   debugEventBus?: DebugEventBus;
   debug: ResolvedDebugConfig;
   debugLogger?: CopilotRuntimeLogger;
+  /**
+   * Resolved inbound-header forwarding policy read by the /run and /connect call
+   * sites. Optional on the published interface so an external `CopilotRuntimeLike`
+   * implementor predating this field stays source-compatible (non-breaking minor
+   * release). Concrete runtimes (`BaseCopilotRuntime`) always resolve and set it;
+   * the call sites coalesce a missing value to the default resolved policy
+   * (`resolveForwardHeadersPolicy(undefined)` — default-on denylist).
+   */
+  forwardHeadersPolicy?: ResolvedForwardHeadersPolicy;
 }
 interface CopilotSseRuntimeLike extends CopilotRuntimeLike {
   intelligence?: undefined;
@@ -172,6 +191,7 @@ declare abstract class BaseCopilotRuntime implements CopilotRuntimeLike {
   readonly debugEventBus?: DebugEventBus;
   debug: ResolvedDebugConfig;
   debugLogger?: CopilotRuntimeLogger;
+  readonly forwardHeadersPolicy: ResolvedForwardHeadersPolicy;
   /**
    * License token resolved once with the env fallback, so telemetry
    * attribution (below) and subclass feature gating
@@ -240,6 +260,7 @@ declare class CopilotRuntime implements CopilotRuntimeLike {
   get debugEventBus(): DebugEventBus;
   get debug(): ResolvedDebugConfig;
   get debugLogger(): CopilotRuntimeLogger | undefined;
+  get forwardHeadersPolicy(): ResolvedForwardHeadersPolicy;
 }
 //#endregion
 export { AgentFactoryContext, AgentsConfig, AgentsFactory, CopilotIntelligenceRuntime, CopilotIntelligenceRuntimeLike, CopilotIntelligenceRuntimeOptions, CopilotRuntime, CopilotRuntimeLike, CopilotRuntimeOptions, CopilotRuntimeUser, CopilotSseRuntime, CopilotSseRuntimeLike, CopilotSseRuntimeOptions, IdentifyUserCallback, McpAppsConfig, McpAppsServerConfig, OpenGenerativeUIConfig, OpenGenerativeUIOptions, VERSION, isA2UIEnabled, isIntelligenceRuntime, resolveAgents };

package/dist/v2/runtime/core/runtime.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.cts","names":[],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"mappings":";;;;;;;;;;;;;;cAgCa,OAAA;AAAA,UAEH,mCAAA;;EAER,MAAA;AAAA;AAAA,KAGU,mBAAA,GAAsB,eAAA;EALW,uFAO3C,OAAA;AAAA;AAAA,UAGe,aAAA;EALL;EAOV,OAAA,EAAS,mBAAA;AAAA;AAAA,UAGM,uBAAA,SAAgC,mCAAA;AAAA,KAErC,sBAAA,aAAmC,uBAAA;AAAA,UAErC,yBAAA;;;;AAJV;EASE,IAAA,GAAO,mCAAA,GACL,oBAAA;IAV6C;;;AAEjD;;;IAeM,OAAA;EAAA;EAbI;EAgBR,OAAA,GAAU,aAAA;;EAEV,gBAAA,GAAmB,sBAAA;AAAA;;;;UAMJ,mBAAA;EAnBf;EAqBA,OAAA,EAAS,OAAA;AAAA;;;;;KAOC,aAAA,IACV,GAAA,EAAK,mBAAA,KACF,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA;;;AAXhD;;;;KAmBY,YAAA,GACR,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA,MAC3C,aAAA;AAZJ;;;;;AAAA,iBAmBsB,aAAA,CACpB,MAAA,EAAQ,YAAA,EACR,OAAA,GAAU,OAAA,GACT,OAAA,CAAQ,MAAA,SAAe,aAAA;AAAA,UAYhB,yBAAA,SAAkC,yBAAA;EAhCvC;;;;;;;;;;;AAQL;;;;;EAyCE,MAAA,EAAQ,YAAA;EAxCN;EA0CF,oBAAA,GAAuB,oBAAA;EAzCR;EA2Cf,uBAAA,GAA0B,uBAAA;EA5CxB;EA8CF,sBAAA,GAAyB,sBAAA;EA9CK;EAgD9B,YAAA;EA/CE;EAiDF,KAAA,GAAQ,WAAA;AAAA;AAAA,UAGO,kBAAA;EACf,EAAA;EACA,IAAA;AAAA;AAAA,KAGU,oBAAA,IACV,OAAA,EAAS,OAAA,KACN,YAAA,CAAa,kBAAA;AAAA,UAED,wBAAA,SAAiC,yBAAA;EAnDvC;EAqDT,MAAA,GAAS,WAAA;EACT,YAAA;EACA,mBAAA;AAAA;AAAA,UAGe,iCAAA,SAA0C,yBAAA;EA3D/C;EA6DV,YAAA,EAAc,sBAAA;EA5Db;EA8DD,YAAA,EAAc,oBAAA;EA9DU;EAgExB,mBAAA;EAhEqC;EAkErC,cAAA;EAtDkC;EAwDlC,WAAA;EAvCQ;EAyCR,cAAA;EArC0B;EAuC1B,aAAA;EAjCQ;EAmCR,4BAAA;AAAA;AAAA,KAGU,qBAAA,GACR,wBAAA,GACA,iCAAA;AAAA,UAEa,kBAAA;EACf,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,YAAA,GAAe,sBAAA;EACf,YAAA,GAAe,oBAAA;EACf,IAAA,EAAM,WAAA;EACN,cAAA,GAAiB,cAAA;EACjB,aAAA,GAAgB,aAAA;EAChB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;AAAA;AAAA,UAGC,qBAAA,SAA8B,kBAAA;EAC7C,YAAA;EACA,IAAA,SAAa,gBAAA;AAAA;AAAA,UAGE,8BAAA,SAAuC,kBAAA;EACtD,YAAA,EAAc,sBAAA;EACd,YAAA,EAAc,oBAAA;EACd,mBAAA;EACA,cAAA;EACA,aAAA;EACA,4BAAA;EACA,IAAA,SAAa,yBAAA;AAAA;AAAA,uBAGA,kBAAA,YAA8B,kBAAA;EACpC,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,cAAA,GAAiB,cAAA;EAAA,SACR,aAAA,GAAgB,aAAA;EACzB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;EAvEF;AAGrB;;;;;EAHqB,mBA+EA,oBAAA;EAAA,kBAED,YAAA,GAAe,sBAAA;EAAA,kBACf,IAAA,EAAM,WAAA;cAEZ,OAAA,EAAS,yBAAA,EAA2B,MAAA,EAAQ,WAAA;AAAA;AAAA,cAkD7C,iBAAA,SACH,kBAAA,YACG,qBAAA;EAAA,SAEF,YAAA;EAAA,SACA,IAAA;cAEG,OAAA,EAAS,wBAAA;AAAA;AAAA,cAKV,0BAAA,SACH,kBAAA,YACG,8BAAA;EAAA,SAEF,YAAA,EAAc,sBAAA;EAAA,SACd,YAAA,EAAc,oBAAA;EAAA,SACd,mBAAA;EAAA,SACA,cAAA;EAAA,SACA,aAAA;EAAA,SACA,4BAAA;EAAA,SACA,IAAA;;kBAGO,oBAAA;EAvImB;EAAA,gBAyInB,8BAAA;cAEJ,OAAA,EAAS,iCAAA;AAAA;AAAA,iBAmCP,qBAAA,CACd,OAAA,EAAS,kBAAA,GACR,OAAA,IAAW,8BAAA;;;;;;;;;;;iBAcE,aAAA,CACd,IAAA,EAAM,qBAAA,WACL,IAAA,IAAQ,WAAA,CAAY,qBAAA;;;;;cAQV,cAAA,YAA0B,kBAAA;EAAA,QAC7B,QAAA;cAEI,OAAA,EAAS,qBAAA;EAAA,IAMjB,MAAA,CAAA,GAAU,qBAAA;EAAA,IAIV,oBAAA,CAAA,GAAwB,qBAAA;EAAA,IAIxB,uBAAA,CAAA,GAA2B,qBAAA;EAAA,IAI3B,sBAAA,CAAA,GAA0B,qBAAA;EAAA,IAI1B,MAAA,CAAA,GAAU,WAAA;EAAA,IAIV,IAAA,CAAA,GAAQ,qBAAA;EAAA,IAIR,OAAA,CAAA,GAAW,qBAAA;EAAA,IAIX,gBAAA,CAAA,GAAoB,qBAAA;EAAA,IAIpB,YAAA,CAAA,GAAgB,sBAAA;EAAA,IAIhB,mBAAA,CAAA;EAAA,IAMA,YAAA,CAAA,GAAgB,oBAAA;EAAA,IAMhB,cAAA,CAAA;EAAA,IAMA,aAAA,CAAA;EAAA,IAMA,4BAAA,CAAA;EAAA,IAMA,IAAA,CAAA,GAAQ,WAAA;EAAA,IAIR,cAAA,CAAA,GAAc,cAAA;EAAA,IAId,aAAA,CAAA,GAAa,aAAA;EAAA,IAIb,KAAA,CAAA,GAAS,mBAAA;EAAA,IAIT,WAAA,CAAA,GAAe,oBAAA;AAAA"}
+{"version":3,"file":"runtime.d.cts","names":[],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"mappings":";;;;;;;;;;;;;;;cAqCa,OAAA;AAAA,UAEH,mCAAA;;EAER,MAAA;AAAA;AAAA,KAGU,mBAAA,GAAsB,eAAA;EALW,uFAO3C,OAAA;AAAA;AAAA,UAGe,aAAA;EALL;EAOV,OAAA,EAAS,mBAAA;AAAA;AAAA,UAGM,uBAAA,SAAgC,mCAAA;AAAA,KAErC,sBAAA,aAAmC,uBAAA;AAAA,UAErC,yBAAA;;;;AAJV;EASE,IAAA,GAAO,mCAAA,GACL,oBAAA;IAV6C;;;AAEjD;;;IAeM,OAAA;EAAA;EAbI;EAgBR,OAAA,GAAU,aAAA;;EAEV,gBAAA,GAAmB,sBAAA;AAAA;;;;UAMJ,mBAAA;EAnBf;EAqBA,OAAA,EAAS,OAAA;AAAA;;;;;KAOC,aAAA,IACV,GAAA,EAAK,mBAAA,KACF,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA;;;AAXhD;;;;KAmBY,YAAA,GACR,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA,MAC3C,aAAA;AAZJ;;;;;AAAA,iBAmBsB,aAAA,CACpB,MAAA,EAAQ,YAAA,EACR,OAAA,GAAU,OAAA,GACT,OAAA,CAAQ,MAAA,SAAe,aAAA;AAAA,UAYhB,yBAAA,SAAkC,yBAAA;EAhCvC;;;;;;;;;;;AAQL;;;;;EAyCE,MAAA,EAAQ,YAAA;EAxCN;EA0CF,oBAAA,GAAuB,oBAAA;EAzCR;EA2Cf,uBAAA,GAA0B,uBAAA;EA5CxB;EA8CF,sBAAA,GAAyB,sBAAA;EA9CK;EAgD9B,YAAA;EA/CE;EAiDF,KAAA,GAAQ,WAAA;EAjDO;AAOjB;;;;;;;EAmDE,cAAA,GAAiB,oBAAA;AAAA;AAAA,UAGF,kBAAA;EACf,EAAA;EACA,IAAA;AAAA;AAAA,KAGU,oBAAA,IACV,OAAA,EAAS,OAAA,KACN,YAAA,CAAa,kBAAA;AAAA,UAED,wBAAA,SAAiC,yBAAA;EA5DvC;EA8DT,MAAA,GAAS,WAAA;EACT,YAAA;EACA,mBAAA;AAAA;AAAA,UAGe,iCAAA,SAA0C,yBAAA;;EAEzD,YAAA,EAAc,sBAAA;EAtCS;EAwCvB,YAAA,EAAc,oBAAA;EApCW;EAsCzB,mBAAA;EAzBiB;EA2BjB,cAAA;EA/DmE;EAiEnE,WAAA;EAjE0C;EAmE1C,cAAA;EAlDQ;EAoDR,aAAA;EAlDuB;EAoDvB,4BAAA;AAAA;AAAA,KAGU,qBAAA,GACR,wBAAA,GACA,iCAAA;AAAA,UAEa,kBAAA;EACf,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,YAAA,GAAe,sBAAA;EACf,YAAA,GAAe,oBAAA;EACf,IAAA,EAAM,WAAA;EACN,cAAA,GAAiB,cAAA;EACjB,aAAA,GAAgB,aAAA;EAChB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;EAhDL;;;;;;;;EAyDT,oBAAA,GAAuB,4BAAA;AAAA;AAAA,UAGR,qBAAA,SAA8B,kBAAA;EAC7C,YAAA;EACA,IAAA,SAAa,gBAAA;AAAA;AAAA,UAGE,8BAAA,SAAuC,kBAAA;EACtD,YAAA,EAAc,sBAAA;EACd,YAAA,EAAc,oBAAA;EACd,mBAAA;EACA,cAAA;EACA,aAAA;EACA,4BAAA;EACA,IAAA,SAAa,yBAAA;AAAA;AAAA,uBAGA,kBAAA,YAA8B,kBAAA;EACpC,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,cAAA,GAAiB,cAAA;EAAA,SACR,aAAA,GAAgB,aAAA;EACzB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;EAAA,SACL,oBAAA,EAAsB,4BAAA;EApEtC;;;;;;EAAA,mBA4EmB,oBAAA;EAAA,kBAED,YAAA,GAAe,sBAAA;EAAA,kBACf,IAAA,EAAM,WAAA;cAEZ,OAAA,EAAS,yBAAA,EAA2B,MAAA,EAAQ,WAAA;AAAA;AAAA,cAyD7C,iBAAA,SACH,kBAAA,YACG,qBAAA;EAAA,SAEF,YAAA;EAAA,SACA,IAAA;cAEG,OAAA,EAAS,wBAAA;AAAA;AAAA,cAKV,0BAAA,SACH,kBAAA,YACG,8BAAA;EAAA,SAEF,YAAA,EAAc,sBAAA;EAAA,SACd,YAAA,EAAc,oBAAA;EAAA,SACd,mBAAA;EAAA,SACA,cAAA;EAAA,SACA,aAAA;EAAA,SACA,4BAAA;EAAA,SACA,IAAA;EAxIH;EAAA,gBA2IU,oBAAA;EAzIA;EAAA,gBA2IA,8BAAA;cAEJ,OAAA,EAAS,iCAAA;AAAA;AAAA,iBAmCP,qBAAA,CACd,OAAA,EAAS,kBAAA,GACR,OAAA,IAAW,8BAAA;;;;;;;;;;;iBAcE,aAAA,CACd,IAAA,EAAM,qBAAA,WACL,IAAA,IAAQ,WAAA,CAAY,qBAAA;;;;;cAQV,cAAA,YAA0B,kBAAA;EAAA,QAC7B,QAAA;cAEI,OAAA,EAAS,qBAAA;EAAA,IAMjB,MAAA,CAAA,GAAU,qBAAA;EAAA,IAIV,oBAAA,CAAA,GAAwB,qBAAA;EAAA,IAIxB,uBAAA,CAAA,GAA2B,qBAAA;EAAA,IAI3B,sBAAA,CAAA,GAA0B,qBAAA;EAAA,IAI1B,MAAA,CAAA,GAAU,WAAA;EAAA,IAIV,IAAA,CAAA,GAAQ,qBAAA;EAAA,IAIR,OAAA,CAAA,GAAW,qBAAA;EAAA,IAIX,gBAAA,CAAA,GAAoB,qBAAA;EAAA,IAIpB,YAAA,CAAA,GAAgB,sBAAA;EAAA,IAIhB,mBAAA,CAAA;EAAA,IAMA,YAAA,CAAA,GAAgB,oBAAA;EAAA,IAMhB,cAAA,CAAA;EAAA,IAMA,aAAA,CAAA;EAAA,IAMA,4BAAA,CAAA;EAAA,IAMA,IAAA,CAAA,GAAQ,WAAA;EAAA,IAIR,cAAA,CAAA,GAAc,cAAA;EAAA,IAId,aAAA,CAAA,GAAa,aAAA;EAAA,IAIb,KAAA,CAAA,GAAS,mBAAA;EAAA,IAIT,WAAA,CAAA,GAAe,oBAAA;EAAA,IAIf,oBAAA,CAAA,GAAwB,4BAAA;AAAA"}

package/dist/v2/runtime/core/runtime.d.mts

@@ -1,4 +1,5 @@
 import "reflect-metadata";
+import { ForwardHeadersConfig, ResolvedForwardHeadersPolicy } from "../handlers/header-utils.mjs";
 import { AfterRequestMiddleware, BeforeRequestMiddleware } from "./middleware.mjs";
 import { CopilotRuntimeLogger } from "../../../lib/logger.mjs";
 import { TranscriptionService } from "../transcription-service/transcription-service.mjs";
@@ -98,6 +99,15 @@ interface BaseCopilotRuntimeOptions extends CopilotRuntimeMiddlewares {
   licenseToken?: string;
   /** Enable debug logging for the event pipeline. */
   debug?: DebugConfig;
+  /**
+   * Policy controlling which inbound HTTP headers are forwarded onto the
+   * outgoing agent call. By default a built-in denylist strips known
+   * infrastructure/proxy/platform headers (`x-forwarded-*`, `x-real-ip`,
+   * `x-vercel-*`, `x-copilotcloud-*`, etc.) while `authorization` and custom
+   * `x-*` application headers continue to forward (#5712). Set
+   * `{ useDefaultDenylist: false }` to restore the previous wide-open behavior.
+   */
+  forwardHeaders?: ForwardHeadersConfig;
 }
 interface CopilotRuntimeUser {
   id: string;
@@ -145,6 +155,15 @@ interface CopilotRuntimeLike {
   debugEventBus?: DebugEventBus;
   debug: ResolvedDebugConfig;
   debugLogger?: CopilotRuntimeLogger;
+  /**
+   * Resolved inbound-header forwarding policy read by the /run and /connect call
+   * sites. Optional on the published interface so an external `CopilotRuntimeLike`
+   * implementor predating this field stays source-compatible (non-breaking minor
+   * release). Concrete runtimes (`BaseCopilotRuntime`) always resolve and set it;
+   * the call sites coalesce a missing value to the default resolved policy
+   * (`resolveForwardHeadersPolicy(undefined)` — default-on denylist).
+   */
+  forwardHeadersPolicy?: ResolvedForwardHeadersPolicy;
 }
 interface CopilotSseRuntimeLike extends CopilotRuntimeLike {
   intelligence?: undefined;
@@ -172,6 +191,7 @@ declare abstract class BaseCopilotRuntime implements CopilotRuntimeLike {
   readonly debugEventBus?: DebugEventBus;
   debug: ResolvedDebugConfig;
   debugLogger?: CopilotRuntimeLogger;
+  readonly forwardHeadersPolicy: ResolvedForwardHeadersPolicy;
   /**
    * License token resolved once with the env fallback, so telemetry
    * attribution (below) and subclass feature gating
@@ -240,6 +260,7 @@ declare class CopilotRuntime implements CopilotRuntimeLike {
   get debugEventBus(): DebugEventBus;
   get debug(): ResolvedDebugConfig;
   get debugLogger(): CopilotRuntimeLogger | undefined;
+  get forwardHeadersPolicy(): ResolvedForwardHeadersPolicy;
 }
 //#endregion
 export { AgentFactoryContext, AgentsConfig, AgentsFactory, CopilotIntelligenceRuntime, CopilotIntelligenceRuntimeLike, CopilotIntelligenceRuntimeOptions, CopilotRuntime, CopilotRuntimeLike, CopilotRuntimeOptions, CopilotRuntimeUser, CopilotSseRuntime, CopilotSseRuntimeLike, CopilotSseRuntimeOptions, IdentifyUserCallback, McpAppsConfig, McpAppsServerConfig, OpenGenerativeUIConfig, OpenGenerativeUIOptions, VERSION, isA2UIEnabled, isIntelligenceRuntime, resolveAgents };

package/dist/v2/runtime/core/runtime.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.mts","names":[],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"mappings":";;;;;;;;;;;;;;cAgCa,OAAA;AAAA,UAEH,mCAAA;;EAER,MAAA;AAAA;AAAA,KAGU,mBAAA,GAAsB,eAAA;EALW,uFAO3C,OAAA;AAAA;AAAA,UAGe,aAAA;EALL;EAOV,OAAA,EAAS,mBAAA;AAAA;AAAA,UAGM,uBAAA,SAAgC,mCAAA;AAAA,KAErC,sBAAA,aAAmC,uBAAA;AAAA,UAErC,yBAAA;;;;AAJV;EASE,IAAA,GAAO,mCAAA,GACL,oBAAA;IAV6C;;;AAEjD;;;IAeM,OAAA;EAAA;EAbI;EAgBR,OAAA,GAAU,aAAA;;EAEV,gBAAA,GAAmB,sBAAA;AAAA;;;;UAMJ,mBAAA;EAnBf;EAqBA,OAAA,EAAS,OAAA;AAAA;;;;;KAOC,aAAA,IACV,GAAA,EAAK,mBAAA,KACF,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA;;;AAXhD;;;;KAmBY,YAAA,GACR,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA,MAC3C,aAAA;AAZJ;;;;;AAAA,iBAmBsB,aAAA,CACpB,MAAA,EAAQ,YAAA,EACR,OAAA,GAAU,OAAA,GACT,OAAA,CAAQ,MAAA,SAAe,aAAA;AAAA,UAYhB,yBAAA,SAAkC,yBAAA;EAhCvC;;;;;;;;;;;AAQL;;;;;EAyCE,MAAA,EAAQ,YAAA;EAxCN;EA0CF,oBAAA,GAAuB,oBAAA;EAzCR;EA2Cf,uBAAA,GAA0B,uBAAA;EA5CxB;EA8CF,sBAAA,GAAyB,sBAAA;EA9CK;EAgD9B,YAAA;EA/CE;EAiDF,KAAA,GAAQ,WAAA;AAAA;AAAA,UAGO,kBAAA;EACf,EAAA;EACA,IAAA;AAAA;AAAA,KAGU,oBAAA,IACV,OAAA,EAAS,OAAA,KACN,YAAA,CAAa,kBAAA;AAAA,UAED,wBAAA,SAAiC,yBAAA;EAnDvC;EAqDT,MAAA,GAAS,WAAA;EACT,YAAA;EACA,mBAAA;AAAA;AAAA,UAGe,iCAAA,SAA0C,yBAAA;EA3D/C;EA6DV,YAAA,EAAc,sBAAA;EA5Db;EA8DD,YAAA,EAAc,oBAAA;EA9DU;EAgExB,mBAAA;EAhEqC;EAkErC,cAAA;EAtDkC;EAwDlC,WAAA;EAvCQ;EAyCR,cAAA;EArC0B;EAuC1B,aAAA;EAjCQ;EAmCR,4BAAA;AAAA;AAAA,KAGU,qBAAA,GACR,wBAAA,GACA,iCAAA;AAAA,UAEa,kBAAA;EACf,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,YAAA,GAAe,sBAAA;EACf,YAAA,GAAe,oBAAA;EACf,IAAA,EAAM,WAAA;EACN,cAAA,GAAiB,cAAA;EACjB,aAAA,GAAgB,aAAA;EAChB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;AAAA;AAAA,UAGC,qBAAA,SAA8B,kBAAA;EAC7C,YAAA;EACA,IAAA,SAAa,gBAAA;AAAA;AAAA,UAGE,8BAAA,SAAuC,kBAAA;EACtD,YAAA,EAAc,sBAAA;EACd,YAAA,EAAc,oBAAA;EACd,mBAAA;EACA,cAAA;EACA,aAAA;EACA,4BAAA;EACA,IAAA,SAAa,yBAAA;AAAA;AAAA,uBAGA,kBAAA,YAA8B,kBAAA;EACpC,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,cAAA,GAAiB,cAAA;EAAA,SACR,aAAA,GAAgB,aAAA;EACzB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;EAvEF;AAGrB;;;;;EAHqB,mBA+EA,oBAAA;EAAA,kBAED,YAAA,GAAe,sBAAA;EAAA,kBACf,IAAA,EAAM,WAAA;cAEZ,OAAA,EAAS,yBAAA,EAA2B,MAAA,EAAQ,WAAA;AAAA;AAAA,cAkD7C,iBAAA,SACH,kBAAA,YACG,qBAAA;EAAA,SAEF,YAAA;EAAA,SACA,IAAA;cAEG,OAAA,EAAS,wBAAA;AAAA;AAAA,cAKV,0BAAA,SACH,kBAAA,YACG,8BAAA;EAAA,SAEF,YAAA,EAAc,sBAAA;EAAA,SACd,YAAA,EAAc,oBAAA;EAAA,SACd,mBAAA;EAAA,SACA,cAAA;EAAA,SACA,aAAA;EAAA,SACA,4BAAA;EAAA,SACA,IAAA;;kBAGO,oBAAA;EAvImB;EAAA,gBAyInB,8BAAA;cAEJ,OAAA,EAAS,iCAAA;AAAA;AAAA,iBAmCP,qBAAA,CACd,OAAA,EAAS,kBAAA,GACR,OAAA,IAAW,8BAAA;;;;;;;;;;;iBAcE,aAAA,CACd,IAAA,EAAM,qBAAA,WACL,IAAA,IAAQ,WAAA,CAAY,qBAAA;;;;;cAQV,cAAA,YAA0B,kBAAA;EAAA,QAC7B,QAAA;cAEI,OAAA,EAAS,qBAAA;EAAA,IAMjB,MAAA,CAAA,GAAU,qBAAA;EAAA,IAIV,oBAAA,CAAA,GAAwB,qBAAA;EAAA,IAIxB,uBAAA,CAAA,GAA2B,qBAAA;EAAA,IAI3B,sBAAA,CAAA,GAA0B,qBAAA;EAAA,IAI1B,MAAA,CAAA,GAAU,WAAA;EAAA,IAIV,IAAA,CAAA,GAAQ,qBAAA;EAAA,IAIR,OAAA,CAAA,GAAW,qBAAA;EAAA,IAIX,gBAAA,CAAA,GAAoB,qBAAA;EAAA,IAIpB,YAAA,CAAA,GAAgB,sBAAA;EAAA,IAIhB,mBAAA,CAAA;EAAA,IAMA,YAAA,CAAA,GAAgB,oBAAA;EAAA,IAMhB,cAAA,CAAA;EAAA,IAMA,aAAA,CAAA;EAAA,IAMA,4BAAA,CAAA;EAAA,IAMA,IAAA,CAAA,GAAQ,WAAA;EAAA,IAIR,cAAA,CAAA,GAAc,cAAA;EAAA,IAId,aAAA,CAAA,GAAa,aAAA;EAAA,IAIb,KAAA,CAAA,GAAS,mBAAA;EAAA,IAIT,WAAA,CAAA,GAAe,oBAAA;AAAA"}
+{"version":3,"file":"runtime.d.mts","names":[],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"mappings":";;;;;;;;;;;;;;;cAqCa,OAAA;AAAA,UAEH,mCAAA;;EAER,MAAA;AAAA;AAAA,KAGU,mBAAA,GAAsB,eAAA;EALW,uFAO3C,OAAA;AAAA;AAAA,UAGe,aAAA;EALL;EAOV,OAAA,EAAS,mBAAA;AAAA;AAAA,UAGM,uBAAA,SAAgC,mCAAA;AAAA,KAErC,sBAAA,aAAmC,uBAAA;AAAA,UAErC,yBAAA;;;;AAJV;EASE,IAAA,GAAO,mCAAA,GACL,oBAAA;IAV6C;;;AAEjD;;;IAeM,OAAA;EAAA;EAbI;EAgBR,OAAA,GAAU,aAAA;;EAEV,gBAAA,GAAmB,sBAAA;AAAA;;;;UAMJ,mBAAA;EAnBf;EAqBA,OAAA,EAAS,OAAA;AAAA;;;;;KAOC,aAAA,IACV,GAAA,EAAK,mBAAA,KACF,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA;;;AAXhD;;;;KAmBY,YAAA,GACR,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA,MAC3C,aAAA;AAZJ;;;;;AAAA,iBAmBsB,aAAA,CACpB,MAAA,EAAQ,YAAA,EACR,OAAA,GAAU,OAAA,GACT,OAAA,CAAQ,MAAA,SAAe,aAAA;AAAA,UAYhB,yBAAA,SAAkC,yBAAA;EAhCvC;;;;;;;;;;;AAQL;;;;;EAyCE,MAAA,EAAQ,YAAA;EAxCN;EA0CF,oBAAA,GAAuB,oBAAA;EAzCR;EA2Cf,uBAAA,GAA0B,uBAAA;EA5CxB;EA8CF,sBAAA,GAAyB,sBAAA;EA9CK;EAgD9B,YAAA;EA/CE;EAiDF,KAAA,GAAQ,WAAA;EAjDO;AAOjB;;;;;;;EAmDE,cAAA,GAAiB,oBAAA;AAAA;AAAA,UAGF,kBAAA;EACf,EAAA;EACA,IAAA;AAAA;AAAA,KAGU,oBAAA,IACV,OAAA,EAAS,OAAA,KACN,YAAA,CAAa,kBAAA;AAAA,UAED,wBAAA,SAAiC,yBAAA;EA5DvC;EA8DT,MAAA,GAAS,WAAA;EACT,YAAA;EACA,mBAAA;AAAA;AAAA,UAGe,iCAAA,SAA0C,yBAAA;;EAEzD,YAAA,EAAc,sBAAA;EAtCS;EAwCvB,YAAA,EAAc,oBAAA;EApCW;EAsCzB,mBAAA;EAzBiB;EA2BjB,cAAA;EA/DmE;EAiEnE,WAAA;EAjE0C;EAmE1C,cAAA;EAlDQ;EAoDR,aAAA;EAlDuB;EAoDvB,4BAAA;AAAA;AAAA,KAGU,qBAAA,GACR,wBAAA,GACA,iCAAA;AAAA,UAEa,kBAAA;EACf,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,YAAA,GAAe,sBAAA;EACf,YAAA,GAAe,oBAAA;EACf,IAAA,EAAM,WAAA;EACN,cAAA,GAAiB,cAAA;EACjB,aAAA,GAAgB,aAAA;EAChB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;EAhDL;;;;;;;;EAyDT,oBAAA,GAAuB,4BAAA;AAAA;AAAA,UAGR,qBAAA,SAA8B,kBAAA;EAC7C,YAAA;EACA,IAAA,SAAa,gBAAA;AAAA;AAAA,UAGE,8BAAA,SAAuC,kBAAA;EACtD,YAAA,EAAc,sBAAA;EACd,YAAA,EAAc,oBAAA;EACd,mBAAA;EACA,cAAA;EACA,aAAA;EACA,4BAAA;EACA,IAAA,SAAa,yBAAA;AAAA;AAAA,uBAGA,kBAAA,YAA8B,kBAAA;EACpC,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,cAAA,GAAiB,cAAA;EAAA,SACR,aAAA,GAAgB,aAAA;EACzB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;EAAA,SACL,oBAAA,EAAsB,4BAAA;EApEtC;;;;;;EAAA,mBA4EmB,oBAAA;EAAA,kBAED,YAAA,GAAe,sBAAA;EAAA,kBACf,IAAA,EAAM,WAAA;cAEZ,OAAA,EAAS,yBAAA,EAA2B,MAAA,EAAQ,WAAA;AAAA;AAAA,cAyD7C,iBAAA,SACH,kBAAA,YACG,qBAAA;EAAA,SAEF,YAAA;EAAA,SACA,IAAA;cAEG,OAAA,EAAS,wBAAA;AAAA;AAAA,cAKV,0BAAA,SACH,kBAAA,YACG,8BAAA;EAAA,SAEF,YAAA,EAAc,sBAAA;EAAA,SACd,YAAA,EAAc,oBAAA;EAAA,SACd,mBAAA;EAAA,SACA,cAAA;EAAA,SACA,aAAA;EAAA,SACA,4BAAA;EAAA,SACA,IAAA;EAxIH;EAAA,gBA2IU,oBAAA;EAzIA;EAAA,gBA2IA,8BAAA;cAEJ,OAAA,EAAS,iCAAA;AAAA;AAAA,iBAmCP,qBAAA,CACd,OAAA,EAAS,kBAAA,GACR,OAAA,IAAW,8BAAA;;;;;;;;;;;iBAcE,aAAA,CACd,IAAA,EAAM,qBAAA,WACL,IAAA,IAAQ,WAAA,CAAY,qBAAA;;;;;cAQV,cAAA,YAA0B,kBAAA;EAAA,QAC7B,QAAA;cAEI,OAAA,EAAS,qBAAA;EAAA,IAMjB,MAAA,CAAA,GAAU,qBAAA;EAAA,IAIV,oBAAA,CAAA,GAAwB,qBAAA;EAAA,IAIxB,uBAAA,CAAA,GAA2B,qBAAA;EAAA,IAI3B,sBAAA,CAAA,GAA0B,qBAAA;EAAA,IAI1B,MAAA,CAAA,GAAU,WAAA;EAAA,IAIV,IAAA,CAAA,GAAQ,qBAAA;EAAA,IAIR,OAAA,CAAA,GAAW,qBAAA;EAAA,IAIX,gBAAA,CAAA,GAAoB,qBAAA;EAAA,IAIpB,YAAA,CAAA,GAAgB,sBAAA;EAAA,IAIhB,mBAAA,CAAA;EAAA,IAMA,YAAA,CAAA,GAAgB,oBAAA;EAAA,IAMhB,cAAA,CAAA;EAAA,IAMA,aAAA,CAAA;EAAA,IAMA,4BAAA,CAAA;EAAA,IAMA,IAAA,CAAA,GAAQ,WAAA;EAAA,IAIR,cAAA,CAAA,GAAc,cAAA;EAAA,IAId,aAAA,CAAA,GAAa,aAAA;EAAA,IAIb,KAAA,CAAA,GAAS,mBAAA;EAAA,IAIT,WAAA,CAAA,GAAe,oBAAA;EAAA,IAIf,oBAAA,CAAA,GAAwB,4BAAA;AAAA"}

package/dist/v2/runtime/core/runtime.mjs

@@ -1,5 +1,6 @@
 import "reflect-metadata";
 import { __toESM } from "../../../_virtual/_rolldown/runtime.mjs";
+import { resolveForwardHeadersPolicy } from "../handlers/header-utils.mjs";
 import { require_package } from "../../../package.mjs";
 import { createLogger } from "../../../lib/logger.mjs";
 import { logRuntimeTelemetryDisclosure } from "../../../lib/telemetry-disclosure.mjs";
@@ -40,6 +41,7 @@ var BaseCopilotRuntime = class {
 		this.resolvedLicenseToken = options.licenseToken ?? process.env.COPILOTKIT_LICENSE_TOKEN;
 		if (this.resolvedLicenseToken) telemetry.setLicenseToken(this.resolvedLicenseToken);
 		if (process.env.NODE_ENV !== "production") this.debugEventBus = new DebugEventBus();
+		this.forwardHeadersPolicy = resolveForwardHeadersPolicy(options.forwardHeaders);
 		this.debug = resolveDebugConfig(options.debug);
 		if (this.debug.enabled) this.debugLogger = createLogger({
 			level: "debug",
@@ -162,6 +164,9 @@ var CopilotRuntime = class {
 	get debugLogger() {
 		return this.delegate.debugLogger;
 	}
+	get forwardHeadersPolicy() {
+		return this.delegate.forwardHeadersPolicy;
+	}
 };
 
 //#endregion

package/dist/v2/runtime/core/runtime.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.mjs","names":["pkg"],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"sourcesContent":["import type {\n  MaybePromise,\n  NonEmptyRecord,\n  RuntimeMode,\n} from \"@copilotkit/shared\";\nimport {\n  RUNTIME_MODE_SSE,\n  RUNTIME_MODE_INTELLIGENCE,\n} from \"@copilotkit/shared\";\nimport { createLicenseChecker } from \"@copilotkit/license-verifier\";\nimport type { LicenseChecker } from \"@copilotkit/license-verifier\";\nimport { resolveDebugConfig } from \"@copilotkit/shared\";\nimport type { ResolvedDebugConfig, DebugConfig } from \"@copilotkit/shared\";\nimport type { AbstractAgent } from \"@ag-ui/client\";\nimport type { MCPClientConfig } from \"@ag-ui/mcp-apps-middleware\";\nimport type { A2UIMiddlewareConfig } from \"@ag-ui/a2ui-middleware\";\nimport pkg from \"../../../../package.json\";\nimport type {\n  BeforeRequestMiddleware,\n  AfterRequestMiddleware,\n} from \"./middleware\";\nimport { createLogger } from \"../../../lib/logger\";\nimport type { CopilotRuntimeLogger } from \"../../../lib/logger\";\nimport { logRuntimeTelemetryDisclosure } from \"../../../lib/telemetry-disclosure\";\nimport type { TranscriptionService } from \"../transcription-service/transcription-service\";\nimport { DebugEventBus } from \"./debug-event-bus\";\nimport type { AgentRunner } from \"../runner/agent-runner\";\nimport { InMemoryAgentRunner } from \"../runner/in-memory\";\nimport { IntelligenceAgentRunner } from \"../runner/intelligence\";\nimport type { CopilotKitIntelligence } from \"../intelligence-platform\";\nimport telemetry from \"../telemetry/telemetry-client\";\n\nexport const VERSION = pkg.version;\n\ninterface BaseCopilotRuntimeMiddlewareOptions {\n  /** If set, middleware only applies to these named agents. Applies to all agents if omitted. */\n  agents?: string[];\n}\n\nexport type McpAppsServerConfig = MCPClientConfig & {\n  /** Agent to bind this server to. If omitted, the server is available to all agents. */\n  agentId?: string;\n};\n\nexport interface McpAppsConfig {\n  /** List of MCP server configurations. */\n  servers: McpAppsServerConfig[];\n}\n\nexport interface OpenGenerativeUIOptions extends BaseCopilotRuntimeMiddlewareOptions {}\n\nexport type OpenGenerativeUIConfig = boolean | OpenGenerativeUIOptions;\n\ninterface CopilotRuntimeMiddlewares {\n  /**\n   * Auto-apply A2UIMiddleware to agents at run time.\n   * Pass an object to enable and customise behaviour, or omit to disable.\n   */\n  a2ui?: BaseCopilotRuntimeMiddlewareOptions &\n    A2UIMiddlewareConfig & {\n      /**\n       * Explicit on/off switch. Omit (or set `true`) to enable; set `false`\n       * to disable A2UI for this runtime while keeping the rest of the config\n       * (e.g. a `schema`/`catalog`) in place. A bare `a2ui: {}` stays enabled\n       * for backwards compatibility.\n       */\n      enabled?: boolean;\n    };\n  /** Auto-apply MCPAppsMiddleware to agents at run time. */\n  mcpApps?: McpAppsConfig;\n  /** Auto-apply OpenGenerativeUIMiddleware to agents at run time. */\n  openGenerativeUI?: OpenGenerativeUIConfig;\n}\n\n/**\n * Context passed to agent factory functions for per-request agent resolution.\n */\nexport interface AgentFactoryContext {\n  /** The incoming HTTP request. */\n  request: Request;\n}\n\n/**\n * A function that dynamically creates agents on a per-request basis.\n * Useful for multi-tenant scenarios or request-scoped agent configuration.\n */\nexport type AgentsFactory = (\n  ctx: AgentFactoryContext,\n) => MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>;\n\n/**\n * Agents can be provided as:\n * - A static record of agents\n * - A Promise that resolves to a record of agents\n * - A factory function that receives request context and returns agents (or a Promise of agents)\n */\nexport type AgentsConfig =\n  | MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>\n  | AgentsFactory;\n\n/**\n * Resolve an AgentsConfig value to a concrete record of agents.\n * If the config is a factory function, it is called with the given request context.\n * Otherwise it is awaited directly (static record or Promise).\n */\nexport async function resolveAgents(\n  agents: AgentsConfig,\n  request?: Request,\n): Promise<Record<string, AbstractAgent>> {\n  if (typeof agents === \"function\") {\n    if (!request) {\n      throw new Error(\n        \"Agent factory function requires a request context, but none was provided.\",\n      );\n    }\n    return agents({ request });\n  }\n  return agents;\n}\n\ninterface BaseCopilotRuntimeOptions extends CopilotRuntimeMiddlewares {\n  /**\n   * Map of available agents, or a factory function for per-request agent resolution.\n   *\n   * Static record:\n   * ```ts\n   * agents: { support: new SupportAgent(), technical: new TechnicalAgent() }\n   * ```\n   *\n   * Factory function (called per-request):\n   * ```ts\n   * agents: ({ request }) => {\n   *   const tenantId = request.headers.get(\"x-tenant-id\");\n   *   return { default: createAgentForTenant(tenantId) };\n   * }\n   * ```\n   */\n  agents: AgentsConfig;\n  /** Optional transcription service for audio processing. */\n  transcriptionService?: TranscriptionService;\n  /** Optional *before* middleware – callback function or webhook URL. */\n  beforeRequestMiddleware?: BeforeRequestMiddleware;\n  /** Optional *after* middleware – callback function or webhook URL. */\n  afterRequestMiddleware?: AfterRequestMiddleware;\n  /** Signed license token for server-side feature verification. Falls back to COPILOTKIT_LICENSE_TOKEN env var. */\n  licenseToken?: string;\n  /** Enable debug logging for the event pipeline. */\n  debug?: DebugConfig;\n}\n\nexport interface CopilotRuntimeUser {\n  id: string;\n  name: string;\n}\n\nexport type IdentifyUserCallback = (\n  request: Request,\n) => MaybePromise<CopilotRuntimeUser>;\n\nexport interface CopilotSseRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** The runner to use for running agents in SSE mode. */\n  runner?: AgentRunner;\n  intelligence?: undefined;\n  generateThreadNames?: undefined;\n}\n\nexport interface CopilotIntelligenceRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** Configures Intelligence mode for durable threads and realtime events. */\n  intelligence: CopilotKitIntelligence;\n  /** Resolves the authenticated user for intelligence requests. */\n  identifyUser: IdentifyUserCallback;\n  /** Auto-generate short names for newly created threads. */\n  generateThreadNames?: boolean;\n  /** Max delay (ms) for WebSocket reconnect backoff. @default 10_000 */\n  maxReconnectMs?: number;\n  /** Max delay (ms) for channel rejoin backoff. @default 30_000 */\n  maxRejoinMs?: number;\n  /** Lock TTL in seconds. Clamped to a maximum of 3600 (1 hour). @default 20 */\n  lockTtlSeconds?: number;\n  /** Custom Redis key prefix for the thread lock. */\n  lockKeyPrefix?: string;\n  /** Interval in seconds at which the runtime renews the thread lock. Clamped to a maximum of 3000 (50 minutes). @default 15 */\n  lockHeartbeatIntervalSeconds?: number;\n}\n\nexport type CopilotRuntimeOptions =\n  | CopilotSseRuntimeOptions\n  | CopilotIntelligenceRuntimeOptions;\n\nexport interface CopilotRuntimeLike {\n  agents: CopilotRuntimeOptions[\"agents\"];\n  transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  runner: AgentRunner;\n  a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  intelligence?: CopilotKitIntelligence;\n  identifyUser?: IdentifyUserCallback;\n  mode: RuntimeMode;\n  licenseChecker?: LicenseChecker;\n  debugEventBus?: DebugEventBus;\n  debug: ResolvedDebugConfig;\n  debugLogger?: CopilotRuntimeLogger;\n}\n\nexport interface CopilotSseRuntimeLike extends CopilotRuntimeLike {\n  intelligence?: undefined;\n  mode: typeof RUNTIME_MODE_SSE;\n}\n\nexport interface CopilotIntelligenceRuntimeLike extends CopilotRuntimeLike {\n  intelligence: CopilotKitIntelligence;\n  identifyUser: IdentifyUserCallback;\n  generateThreadNames: boolean;\n  lockTtlSeconds: number;\n  lockKeyPrefix?: string;\n  lockHeartbeatIntervalSeconds: number;\n  mode: typeof RUNTIME_MODE_INTELLIGENCE;\n}\n\nabstract class BaseCopilotRuntime implements CopilotRuntimeLike {\n  public agents: CopilotRuntimeOptions[\"agents\"];\n  public transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  public beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  public afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  public runner: AgentRunner;\n  public a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  public mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  public openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  public licenseChecker?: LicenseChecker;\n  public readonly debugEventBus?: DebugEventBus;\n  public debug: ResolvedDebugConfig;\n  public debugLogger?: CopilotRuntimeLogger;\n\n  /**\n   * License token resolved once with the env fallback, so telemetry\n   * attribution (below) and subclass feature gating\n   * (CopilotIntelligenceRuntime's licenseChecker) read the exact same value\n   * instead of each re-applying `?? COPILOTKIT_LICENSE_TOKEN`.\n   */\n  protected readonly resolvedLicenseToken?: string;\n\n  abstract readonly intelligence?: CopilotKitIntelligence;\n  abstract readonly mode: RuntimeMode;\n\n  constructor(options: BaseCopilotRuntimeOptions, runner: AgentRunner) {\n    logRuntimeTelemetryDisclosure();\n\n    const {\n      agents,\n      transcriptionService,\n      beforeRequestMiddleware,\n      afterRequestMiddleware,\n      a2ui,\n      mcpApps,\n      openGenerativeUI,\n    } = options;\n\n    this.agents = agents;\n    this.transcriptionService = transcriptionService;\n    this.beforeRequestMiddleware = beforeRequestMiddleware;\n    this.afterRequestMiddleware = afterRequestMiddleware;\n    this.a2ui = a2ui || undefined;\n    this.mcpApps = mcpApps;\n    this.openGenerativeUI = openGenerativeUI;\n    this.runner = runner;\n\n    // Resolve the license token once (matching the license-verifier's env\n    // fallback) so telemetry attribution and subclass feature gating share\n    // one value.\n    this.resolvedLicenseToken =\n      options.licenseToken ?? process.env.COPILOTKIT_LICENSE_TOKEN;\n\n    // Attribute telemetry to the licensed customer for *every* runtime mode.\n    // Done in the shared base (not the subclasses) so SSE and Intelligence\n    // runtimes behave identically — previously only CopilotIntelligenceRuntime\n    // set this, so self-hosted SSE users never got a telemetry_id on their\n    // runtime events even with a license token configured.\n    if (this.resolvedLicenseToken) {\n      telemetry.setLicenseToken(this.resolvedLicenseToken);\n    }\n\n    if (process.env.NODE_ENV !== \"production\") {\n      this.debugEventBus = new DebugEventBus();\n    }\n    this.debug = resolveDebugConfig(options.debug);\n    if (this.debug.enabled) {\n      this.debugLogger = createLogger({\n        level: \"debug\",\n        component: \"copilotkit-debug\",\n      });\n    }\n  }\n}\n\nexport class CopilotSseRuntime\n  extends BaseCopilotRuntime\n  implements CopilotSseRuntimeLike\n{\n  readonly intelligence = undefined;\n  readonly mode = RUNTIME_MODE_SSE;\n\n  constructor(options: CopilotSseRuntimeOptions) {\n    super(options, options.runner ?? new InMemoryAgentRunner());\n  }\n}\n\nexport class CopilotIntelligenceRuntime\n  extends BaseCopilotRuntime\n  implements CopilotIntelligenceRuntimeLike\n{\n  readonly intelligence: CopilotKitIntelligence;\n  readonly identifyUser: IdentifyUserCallback;\n  readonly generateThreadNames: boolean;\n  readonly lockTtlSeconds: number;\n  readonly lockKeyPrefix?: string;\n  readonly lockHeartbeatIntervalSeconds: number;\n  readonly mode = RUNTIME_MODE_INTELLIGENCE;\n\n  /** Maximum allowed lock TTL in seconds (1 hour). */\n  static readonly MAX_LOCK_TTL_SECONDS = 3_600;\n  /** Maximum allowed heartbeat interval in seconds (50 minutes). */\n  static readonly MAX_HEARTBEAT_INTERVAL_SECONDS = 3_000;\n\n  constructor(options: CopilotIntelligenceRuntimeOptions) {\n    super(\n      options,\n      new IntelligenceAgentRunner({\n        url: options.intelligence.ɵgetRunnerWsUrl(),\n        authToken: options.intelligence.ɵgetRunnerAuthToken(),\n        maxReconnectMs: options.maxReconnectMs,\n        maxRejoinMs: options.maxRejoinMs,\n      }),\n    );\n    this.intelligence = options.intelligence;\n    this.identifyUser = options.identifyUser;\n    this.generateThreadNames = options.generateThreadNames ?? true;\n    // Telemetry attribution is handled by the base constructor for all modes;\n    // here we only need the token for feature gating. Reuse the base-resolved\n    // value so gating and attribution can never disagree.\n    this.licenseChecker = createLicenseChecker(this.resolvedLicenseToken);\n    this.lockTtlSeconds = Math.min(\n      options.lockTtlSeconds ?? 20,\n      CopilotIntelligenceRuntime.MAX_LOCK_TTL_SECONDS,\n    );\n    this.lockKeyPrefix = options.lockKeyPrefix;\n    this.lockHeartbeatIntervalSeconds = Math.min(\n      options.lockHeartbeatIntervalSeconds ?? 15,\n      CopilotIntelligenceRuntime.MAX_HEARTBEAT_INTERVAL_SECONDS,\n    );\n  }\n}\n\nfunction hasIntelligenceOptions(\n  options: CopilotRuntimeOptions,\n): options is CopilotIntelligenceRuntimeOptions {\n  return \"intelligence\" in options && !!options.intelligence;\n}\n\nexport function isIntelligenceRuntime(\n  runtime: CopilotRuntimeLike,\n): runtime is CopilotIntelligenceRuntimeLike {\n  return runtime.mode === RUNTIME_MODE_INTELLIGENCE && !!runtime.intelligence;\n}\n\n/**\n * Single source of truth for \"is A2UI on for this runtime?\". Both the run path\n * (which applies `A2UIMiddleware`) and the `/info` response (which tells the\n * client whether to mount the A2UI renderer + catalog context) MUST go through\n * this, so they can never disagree — the divergence between them was the root\n * of CopilotKit/CopilotKit#5369.\n *\n * Backwards compatible: any config object is enabled (matching the historical\n * `!!runtime.a2ui`); only an explicit `enabled: false` turns it off.\n */\nexport function isA2UIEnabled(\n  a2ui: CopilotRuntimeOptions[\"a2ui\"],\n): a2ui is NonNullable<CopilotRuntimeOptions[\"a2ui\"]> {\n  return !!a2ui && a2ui.enabled !== false;\n}\n\n/**\n * Compatibility shim that preserves the legacy `CopilotRuntime` entrypoint.\n * New code should prefer `CopilotSseRuntime` or `CopilotIntelligenceRuntime`.\n */\nexport class CopilotRuntime implements CopilotRuntimeLike {\n  private delegate: CopilotRuntimeLike;\n\n  constructor(options: CopilotRuntimeOptions) {\n    this.delegate = hasIntelligenceOptions(options)\n      ? new CopilotIntelligenceRuntime(options)\n      : new CopilotSseRuntime(options);\n  }\n\n  get agents(): CopilotRuntimeOptions[\"agents\"] {\n    return this.delegate.agents;\n  }\n\n  get transcriptionService(): CopilotRuntimeOptions[\"transcriptionService\"] {\n    return this.delegate.transcriptionService;\n  }\n\n  get beforeRequestMiddleware(): CopilotRuntimeOptions[\"beforeRequestMiddleware\"] {\n    return this.delegate.beforeRequestMiddleware;\n  }\n\n  get afterRequestMiddleware(): CopilotRuntimeOptions[\"afterRequestMiddleware\"] {\n    return this.delegate.afterRequestMiddleware;\n  }\n\n  get runner(): AgentRunner {\n    return this.delegate.runner;\n  }\n\n  get a2ui(): CopilotRuntimeOptions[\"a2ui\"] {\n    return this.delegate.a2ui;\n  }\n\n  get mcpApps(): CopilotRuntimeOptions[\"mcpApps\"] {\n    return this.delegate.mcpApps;\n  }\n\n  get openGenerativeUI(): CopilotRuntimeOptions[\"openGenerativeUI\"] {\n    return this.delegate.openGenerativeUI;\n  }\n\n  get intelligence(): CopilotKitIntelligence | undefined {\n    return this.delegate.intelligence;\n  }\n\n  get generateThreadNames(): boolean | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.generateThreadNames\n      : undefined;\n  }\n\n  get identifyUser(): IdentifyUserCallback | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.identifyUser\n      : undefined;\n  }\n\n  get lockTtlSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockTtlSeconds\n      : undefined;\n  }\n\n  get lockKeyPrefix(): string | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockKeyPrefix\n      : undefined;\n  }\n\n  get lockHeartbeatIntervalSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockHeartbeatIntervalSeconds\n      : undefined;\n  }\n\n  get mode(): RuntimeMode {\n    return this.delegate.mode;\n  }\n\n  get licenseChecker() {\n    return this.delegate.licenseChecker;\n  }\n\n  get debugEventBus() {\n    return this.delegate.debugEventBus;\n  }\n\n  get debug(): ResolvedDebugConfig {\n    return this.delegate.debug;\n  }\n\n  get debugLogger(): CopilotRuntimeLogger | undefined {\n    return this.delegate.debugLogger;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAgCA,MAAa,UAAUA,uBAAI;;;;;;AAyE3B,eAAsB,cACpB,QACA,SACwC;AACxC,KAAI,OAAO,WAAW,YAAY;AAChC,MAAI,CAAC,QACH,OAAM,IAAI,MACR,4EACD;AAEH,SAAO,OAAO,EAAE,SAAS,CAAC;;AAE5B,QAAO;;AAyGT,IAAe,qBAAf,MAAgE;CAyB9D,YAAY,SAAoC,QAAqB;AACnE,iCAA+B;EAE/B,MAAM,EACJ,QACA,sBACA,yBACA,wBACA,MACA,SACA,qBACE;AAEJ,OAAK,SAAS;AACd,OAAK,uBAAuB;AAC5B,OAAK,0BAA0B;AAC/B,OAAK,yBAAyB;AAC9B,OAAK,OAAO,QAAQ;AACpB,OAAK,UAAU;AACf,OAAK,mBAAmB;AACxB,OAAK,SAAS;AAKd,OAAK,uBACH,QAAQ,gBAAgB,QAAQ,IAAI;AAOtC,MAAI,KAAK,qBACP,WAAU,gBAAgB,KAAK,qBAAqB;AAGtD,MAAI,QAAQ,IAAI,aAAa,aAC3B,MAAK,gBAAgB,IAAI,eAAe;AAE1C,OAAK,QAAQ,mBAAmB,QAAQ,MAAM;AAC9C,MAAI,KAAK,MAAM,QACb,MAAK,cAAc,aAAa;GAC9B,OAAO;GACP,WAAW;GACZ,CAAC;;;AAKR,IAAa,oBAAb,cACU,mBAEV;CAIE,YAAY,SAAmC;AAC7C,QAAM,SAAS,QAAQ,UAAU,IAAI,qBAAqB,CAAC;sBAJrC;cACR;;;AAOlB,IAAa,6BAAb,MAAa,mCACH,mBAEV;;8BAUyC;;;wCAEU;;CAEjD,YAAY,SAA4C;AACtD,QACE,SACA,IAAI,wBAAwB;GAC1B,KAAK,QAAQ,aAAa,iBAAiB;GAC3C,WAAW,QAAQ,aAAa,qBAAqB;GACrD,gBAAgB,QAAQ;GACxB,aAAa,QAAQ;GACtB,CAAC,CACH;cAhBa;AAiBd,OAAK,eAAe,QAAQ;AAC5B,OAAK,eAAe,QAAQ;AAC5B,OAAK,sBAAsB,QAAQ,uBAAuB;AAI1D,OAAK,iBAAiB,qBAAqB,KAAK,qBAAqB;AACrE,OAAK,iBAAiB,KAAK,IACzB,QAAQ,kBAAkB,IAC1B,2BAA2B,qBAC5B;AACD,OAAK,gBAAgB,QAAQ;AAC7B,OAAK,+BAA+B,KAAK,IACvC,QAAQ,gCAAgC,IACxC,2BAA2B,+BAC5B;;;AAIL,SAAS,uBACP,SAC8C;AAC9C,QAAO,kBAAkB,WAAW,CAAC,CAAC,QAAQ;;AAGhD,SAAgB,sBACd,SAC2C;AAC3C,QAAO,QAAQ,SAAS,6BAA6B,CAAC,CAAC,QAAQ;;;;;;;;;;;;AAajE,SAAgB,cACd,MACoD;AACpD,QAAO,CAAC,CAAC,QAAQ,KAAK,YAAY;;;;;;AAOpC,IAAa,iBAAb,MAA0D;CAGxD,YAAY,SAAgC;AAC1C,OAAK,WAAW,uBAAuB,QAAQ,GAC3C,IAAI,2BAA2B,QAAQ,GACvC,IAAI,kBAAkB,QAAQ;;CAGpC,IAAI,SAA0C;AAC5C,SAAO,KAAK,SAAS;;CAGvB,IAAI,uBAAsE;AACxE,SAAO,KAAK,SAAS;;CAGvB,IAAI,0BAA4E;AAC9E,SAAO,KAAK,SAAS;;CAGvB,IAAI,yBAA0E;AAC5E,SAAO,KAAK,SAAS;;CAGvB,IAAI,SAAsB;AACxB,SAAO,KAAK,SAAS;;CAGvB,IAAI,OAAsC;AACxC,SAAO,KAAK,SAAS;;CAGvB,IAAI,UAA4C;AAC9C,SAAO,KAAK,SAAS;;CAGvB,IAAI,mBAA8D;AAChE,SAAO,KAAK,SAAS;;CAGvB,IAAI,eAAmD;AACrD,SAAO,KAAK,SAAS;;CAGvB,IAAI,sBAA2C;AAC7C,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,sBACd;;CAGN,IAAI,eAAiD;AACnD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,eACd;;CAGN,IAAI,iBAAqC;AACvC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,iBACd;;CAGN,IAAI,gBAAoC;AACtC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,gBACd;;CAGN,IAAI,+BAAmD;AACrD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,+BACd;;CAGN,IAAI,OAAoB;AACtB,SAAO,KAAK,SAAS;;CAGvB,IAAI,iBAAiB;AACnB,SAAO,KAAK,SAAS;;CAGvB,IAAI,gBAAgB;AAClB,SAAO,KAAK,SAAS;;CAGvB,IAAI,QAA6B;AAC/B,SAAO,KAAK,SAAS;;CAGvB,IAAI,cAAgD;AAClD,SAAO,KAAK,SAAS"}
+{"version":3,"file":"runtime.mjs","names":["pkg"],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"sourcesContent":["import type {\n  MaybePromise,\n  NonEmptyRecord,\n  RuntimeMode,\n} from \"@copilotkit/shared\";\nimport {\n  RUNTIME_MODE_SSE,\n  RUNTIME_MODE_INTELLIGENCE,\n} from \"@copilotkit/shared\";\nimport { createLicenseChecker } from \"@copilotkit/license-verifier\";\nimport type { LicenseChecker } from \"@copilotkit/license-verifier\";\nimport { resolveDebugConfig } from \"@copilotkit/shared\";\nimport type { ResolvedDebugConfig, DebugConfig } from \"@copilotkit/shared\";\nimport { resolveForwardHeadersPolicy } from \"../handlers/header-utils\";\nimport type {\n  ForwardHeadersConfig,\n  ResolvedForwardHeadersPolicy,\n} from \"../handlers/header-utils\";\nimport type { AbstractAgent } from \"@ag-ui/client\";\nimport type { MCPClientConfig } from \"@ag-ui/mcp-apps-middleware\";\nimport type { A2UIMiddlewareConfig } from \"@ag-ui/a2ui-middleware\";\nimport pkg from \"../../../../package.json\";\nimport type {\n  BeforeRequestMiddleware,\n  AfterRequestMiddleware,\n} from \"./middleware\";\nimport { createLogger } from \"../../../lib/logger\";\nimport type { CopilotRuntimeLogger } from \"../../../lib/logger\";\nimport { logRuntimeTelemetryDisclosure } from \"../../../lib/telemetry-disclosure\";\nimport type { TranscriptionService } from \"../transcription-service/transcription-service\";\nimport { DebugEventBus } from \"./debug-event-bus\";\nimport type { AgentRunner } from \"../runner/agent-runner\";\nimport { InMemoryAgentRunner } from \"../runner/in-memory\";\nimport { IntelligenceAgentRunner } from \"../runner/intelligence\";\nimport type { CopilotKitIntelligence } from \"../intelligence-platform\";\nimport telemetry from \"../telemetry/telemetry-client\";\n\nexport const VERSION = pkg.version;\n\ninterface BaseCopilotRuntimeMiddlewareOptions {\n  /** If set, middleware only applies to these named agents. Applies to all agents if omitted. */\n  agents?: string[];\n}\n\nexport type McpAppsServerConfig = MCPClientConfig & {\n  /** Agent to bind this server to. If omitted, the server is available to all agents. */\n  agentId?: string;\n};\n\nexport interface McpAppsConfig {\n  /** List of MCP server configurations. */\n  servers: McpAppsServerConfig[];\n}\n\nexport interface OpenGenerativeUIOptions extends BaseCopilotRuntimeMiddlewareOptions {}\n\nexport type OpenGenerativeUIConfig = boolean | OpenGenerativeUIOptions;\n\ninterface CopilotRuntimeMiddlewares {\n  /**\n   * Auto-apply A2UIMiddleware to agents at run time.\n   * Pass an object to enable and customise behaviour, or omit to disable.\n   */\n  a2ui?: BaseCopilotRuntimeMiddlewareOptions &\n    A2UIMiddlewareConfig & {\n      /**\n       * Explicit on/off switch. Omit (or set `true`) to enable; set `false`\n       * to disable A2UI for this runtime while keeping the rest of the config\n       * (e.g. a `schema`/`catalog`) in place. A bare `a2ui: {}` stays enabled\n       * for backwards compatibility.\n       */\n      enabled?: boolean;\n    };\n  /** Auto-apply MCPAppsMiddleware to agents at run time. */\n  mcpApps?: McpAppsConfig;\n  /** Auto-apply OpenGenerativeUIMiddleware to agents at run time. */\n  openGenerativeUI?: OpenGenerativeUIConfig;\n}\n\n/**\n * Context passed to agent factory functions for per-request agent resolution.\n */\nexport interface AgentFactoryContext {\n  /** The incoming HTTP request. */\n  request: Request;\n}\n\n/**\n * A function that dynamically creates agents on a per-request basis.\n * Useful for multi-tenant scenarios or request-scoped agent configuration.\n */\nexport type AgentsFactory = (\n  ctx: AgentFactoryContext,\n) => MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>;\n\n/**\n * Agents can be provided as:\n * - A static record of agents\n * - A Promise that resolves to a record of agents\n * - A factory function that receives request context and returns agents (or a Promise of agents)\n */\nexport type AgentsConfig =\n  | MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>\n  | AgentsFactory;\n\n/**\n * Resolve an AgentsConfig value to a concrete record of agents.\n * If the config is a factory function, it is called with the given request context.\n * Otherwise it is awaited directly (static record or Promise).\n */\nexport async function resolveAgents(\n  agents: AgentsConfig,\n  request?: Request,\n): Promise<Record<string, AbstractAgent>> {\n  if (typeof agents === \"function\") {\n    if (!request) {\n      throw new Error(\n        \"Agent factory function requires a request context, but none was provided.\",\n      );\n    }\n    return agents({ request });\n  }\n  return agents;\n}\n\ninterface BaseCopilotRuntimeOptions extends CopilotRuntimeMiddlewares {\n  /**\n   * Map of available agents, or a factory function for per-request agent resolution.\n   *\n   * Static record:\n   * ```ts\n   * agents: { support: new SupportAgent(), technical: new TechnicalAgent() }\n   * ```\n   *\n   * Factory function (called per-request):\n   * ```ts\n   * agents: ({ request }) => {\n   *   const tenantId = request.headers.get(\"x-tenant-id\");\n   *   return { default: createAgentForTenant(tenantId) };\n   * }\n   * ```\n   */\n  agents: AgentsConfig;\n  /** Optional transcription service for audio processing. */\n  transcriptionService?: TranscriptionService;\n  /** Optional *before* middleware – callback function or webhook URL. */\n  beforeRequestMiddleware?: BeforeRequestMiddleware;\n  /** Optional *after* middleware – callback function or webhook URL. */\n  afterRequestMiddleware?: AfterRequestMiddleware;\n  /** Signed license token for server-side feature verification. Falls back to COPILOTKIT_LICENSE_TOKEN env var. */\n  licenseToken?: string;\n  /** Enable debug logging for the event pipeline. */\n  debug?: DebugConfig;\n  /**\n   * Policy controlling which inbound HTTP headers are forwarded onto the\n   * outgoing agent call. By default a built-in denylist strips known\n   * infrastructure/proxy/platform headers (`x-forwarded-*`, `x-real-ip`,\n   * `x-vercel-*`, `x-copilotcloud-*`, etc.) while `authorization` and custom\n   * `x-*` application headers continue to forward (#5712). Set\n   * `{ useDefaultDenylist: false }` to restore the previous wide-open behavior.\n   */\n  forwardHeaders?: ForwardHeadersConfig;\n}\n\nexport interface CopilotRuntimeUser {\n  id: string;\n  name: string;\n}\n\nexport type IdentifyUserCallback = (\n  request: Request,\n) => MaybePromise<CopilotRuntimeUser>;\n\nexport interface CopilotSseRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** The runner to use for running agents in SSE mode. */\n  runner?: AgentRunner;\n  intelligence?: undefined;\n  generateThreadNames?: undefined;\n}\n\nexport interface CopilotIntelligenceRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** Configures Intelligence mode for durable threads and realtime events. */\n  intelligence: CopilotKitIntelligence;\n  /** Resolves the authenticated user for intelligence requests. */\n  identifyUser: IdentifyUserCallback;\n  /** Auto-generate short names for newly created threads. */\n  generateThreadNames?: boolean;\n  /** Max delay (ms) for WebSocket reconnect backoff. @default 10_000 */\n  maxReconnectMs?: number;\n  /** Max delay (ms) for channel rejoin backoff. @default 30_000 */\n  maxRejoinMs?: number;\n  /** Lock TTL in seconds. Clamped to a maximum of 3600 (1 hour). @default 20 */\n  lockTtlSeconds?: number;\n  /** Custom Redis key prefix for the thread lock. */\n  lockKeyPrefix?: string;\n  /** Interval in seconds at which the runtime renews the thread lock. Clamped to a maximum of 3000 (50 minutes). @default 15 */\n  lockHeartbeatIntervalSeconds?: number;\n}\n\nexport type CopilotRuntimeOptions =\n  | CopilotSseRuntimeOptions\n  | CopilotIntelligenceRuntimeOptions;\n\nexport interface CopilotRuntimeLike {\n  agents: CopilotRuntimeOptions[\"agents\"];\n  transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  runner: AgentRunner;\n  a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  intelligence?: CopilotKitIntelligence;\n  identifyUser?: IdentifyUserCallback;\n  mode: RuntimeMode;\n  licenseChecker?: LicenseChecker;\n  debugEventBus?: DebugEventBus;\n  debug: ResolvedDebugConfig;\n  debugLogger?: CopilotRuntimeLogger;\n  /**\n   * Resolved inbound-header forwarding policy read by the /run and /connect call\n   * sites. Optional on the published interface so an external `CopilotRuntimeLike`\n   * implementor predating this field stays source-compatible (non-breaking minor\n   * release). Concrete runtimes (`BaseCopilotRuntime`) always resolve and set it;\n   * the call sites coalesce a missing value to the default resolved policy\n   * (`resolveForwardHeadersPolicy(undefined)` — default-on denylist).\n   */\n  forwardHeadersPolicy?: ResolvedForwardHeadersPolicy;\n}\n\nexport interface CopilotSseRuntimeLike extends CopilotRuntimeLike {\n  intelligence?: undefined;\n  mode: typeof RUNTIME_MODE_SSE;\n}\n\nexport interface CopilotIntelligenceRuntimeLike extends CopilotRuntimeLike {\n  intelligence: CopilotKitIntelligence;\n  identifyUser: IdentifyUserCallback;\n  generateThreadNames: boolean;\n  lockTtlSeconds: number;\n  lockKeyPrefix?: string;\n  lockHeartbeatIntervalSeconds: number;\n  mode: typeof RUNTIME_MODE_INTELLIGENCE;\n}\n\nabstract class BaseCopilotRuntime implements CopilotRuntimeLike {\n  public agents: CopilotRuntimeOptions[\"agents\"];\n  public transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  public beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  public afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  public runner: AgentRunner;\n  public a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  public mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  public openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  public licenseChecker?: LicenseChecker;\n  public readonly debugEventBus?: DebugEventBus;\n  public debug: ResolvedDebugConfig;\n  public debugLogger?: CopilotRuntimeLogger;\n  public readonly forwardHeadersPolicy: ResolvedForwardHeadersPolicy;\n\n  /**\n   * License token resolved once with the env fallback, so telemetry\n   * attribution (below) and subclass feature gating\n   * (CopilotIntelligenceRuntime's licenseChecker) read the exact same value\n   * instead of each re-applying `?? COPILOTKIT_LICENSE_TOKEN`.\n   */\n  protected readonly resolvedLicenseToken?: string;\n\n  abstract readonly intelligence?: CopilotKitIntelligence;\n  abstract readonly mode: RuntimeMode;\n\n  constructor(options: BaseCopilotRuntimeOptions, runner: AgentRunner) {\n    logRuntimeTelemetryDisclosure();\n\n    const {\n      agents,\n      transcriptionService,\n      beforeRequestMiddleware,\n      afterRequestMiddleware,\n      a2ui,\n      mcpApps,\n      openGenerativeUI,\n    } = options;\n\n    this.agents = agents;\n    this.transcriptionService = transcriptionService;\n    this.beforeRequestMiddleware = beforeRequestMiddleware;\n    this.afterRequestMiddleware = afterRequestMiddleware;\n    this.a2ui = a2ui || undefined;\n    this.mcpApps = mcpApps;\n    this.openGenerativeUI = openGenerativeUI;\n    this.runner = runner;\n\n    // Resolve the license token once (matching the license-verifier's env\n    // fallback) so telemetry attribution and subclass feature gating share\n    // one value.\n    this.resolvedLicenseToken =\n      options.licenseToken ?? process.env.COPILOTKIT_LICENSE_TOKEN;\n\n    // Attribute telemetry to the licensed customer for *every* runtime mode.\n    // Done in the shared base (not the subclasses) so SSE and Intelligence\n    // runtimes behave identically — previously only CopilotIntelligenceRuntime\n    // set this, so self-hosted SSE users never got a telemetry_id on their\n    // runtime events even with a license token configured.\n    if (this.resolvedLicenseToken) {\n      telemetry.setLicenseToken(this.resolvedLicenseToken);\n    }\n\n    if (process.env.NODE_ENV !== \"production\") {\n      this.debugEventBus = new DebugEventBus();\n    }\n    // Resolve the inbound-header forwarding policy once (mirroring the\n    // `debug` → `ResolvedDebugConfig` resolve-once above) so both the /run and\n    // /connect call sites read the exact same resolved policy off the runtime\n    // and can never diverge.\n    this.forwardHeadersPolicy = resolveForwardHeadersPolicy(\n      options.forwardHeaders,\n    );\n    this.debug = resolveDebugConfig(options.debug);\n    if (this.debug.enabled) {\n      this.debugLogger = createLogger({\n        level: \"debug\",\n        component: \"copilotkit-debug\",\n      });\n    }\n  }\n}\n\nexport class CopilotSseRuntime\n  extends BaseCopilotRuntime\n  implements CopilotSseRuntimeLike\n{\n  readonly intelligence = undefined;\n  readonly mode = RUNTIME_MODE_SSE;\n\n  constructor(options: CopilotSseRuntimeOptions) {\n    super(options, options.runner ?? new InMemoryAgentRunner());\n  }\n}\n\nexport class CopilotIntelligenceRuntime\n  extends BaseCopilotRuntime\n  implements CopilotIntelligenceRuntimeLike\n{\n  readonly intelligence: CopilotKitIntelligence;\n  readonly identifyUser: IdentifyUserCallback;\n  readonly generateThreadNames: boolean;\n  readonly lockTtlSeconds: number;\n  readonly lockKeyPrefix?: string;\n  readonly lockHeartbeatIntervalSeconds: number;\n  readonly mode = RUNTIME_MODE_INTELLIGENCE;\n\n  /** Maximum allowed lock TTL in seconds (1 hour). */\n  static readonly MAX_LOCK_TTL_SECONDS = 3_600;\n  /** Maximum allowed heartbeat interval in seconds (50 minutes). */\n  static readonly MAX_HEARTBEAT_INTERVAL_SECONDS = 3_000;\n\n  constructor(options: CopilotIntelligenceRuntimeOptions) {\n    super(\n      options,\n      new IntelligenceAgentRunner({\n        url: options.intelligence.ɵgetRunnerWsUrl(),\n        authToken: options.intelligence.ɵgetRunnerAuthToken(),\n        maxReconnectMs: options.maxReconnectMs,\n        maxRejoinMs: options.maxRejoinMs,\n      }),\n    );\n    this.intelligence = options.intelligence;\n    this.identifyUser = options.identifyUser;\n    this.generateThreadNames = options.generateThreadNames ?? true;\n    // Telemetry attribution is handled by the base constructor for all modes;\n    // here we only need the token for feature gating. Reuse the base-resolved\n    // value so gating and attribution can never disagree.\n    this.licenseChecker = createLicenseChecker(this.resolvedLicenseToken);\n    this.lockTtlSeconds = Math.min(\n      options.lockTtlSeconds ?? 20,\n      CopilotIntelligenceRuntime.MAX_LOCK_TTL_SECONDS,\n    );\n    this.lockKeyPrefix = options.lockKeyPrefix;\n    this.lockHeartbeatIntervalSeconds = Math.min(\n      options.lockHeartbeatIntervalSeconds ?? 15,\n      CopilotIntelligenceRuntime.MAX_HEARTBEAT_INTERVAL_SECONDS,\n    );\n  }\n}\n\nfunction hasIntelligenceOptions(\n  options: CopilotRuntimeOptions,\n): options is CopilotIntelligenceRuntimeOptions {\n  return \"intelligence\" in options && !!options.intelligence;\n}\n\nexport function isIntelligenceRuntime(\n  runtime: CopilotRuntimeLike,\n): runtime is CopilotIntelligenceRuntimeLike {\n  return runtime.mode === RUNTIME_MODE_INTELLIGENCE && !!runtime.intelligence;\n}\n\n/**\n * Single source of truth for \"is A2UI on for this runtime?\". Both the run path\n * (which applies `A2UIMiddleware`) and the `/info` response (which tells the\n * client whether to mount the A2UI renderer + catalog context) MUST go through\n * this, so they can never disagree — the divergence between them was the root\n * of CopilotKit/CopilotKit#5369.\n *\n * Backwards compatible: any config object is enabled (matching the historical\n * `!!runtime.a2ui`); only an explicit `enabled: false` turns it off.\n */\nexport function isA2UIEnabled(\n  a2ui: CopilotRuntimeOptions[\"a2ui\"],\n): a2ui is NonNullable<CopilotRuntimeOptions[\"a2ui\"]> {\n  return !!a2ui && a2ui.enabled !== false;\n}\n\n/**\n * Compatibility shim that preserves the legacy `CopilotRuntime` entrypoint.\n * New code should prefer `CopilotSseRuntime` or `CopilotIntelligenceRuntime`.\n */\nexport class CopilotRuntime implements CopilotRuntimeLike {\n  private delegate: CopilotRuntimeLike;\n\n  constructor(options: CopilotRuntimeOptions) {\n    this.delegate = hasIntelligenceOptions(options)\n      ? new CopilotIntelligenceRuntime(options)\n      : new CopilotSseRuntime(options);\n  }\n\n  get agents(): CopilotRuntimeOptions[\"agents\"] {\n    return this.delegate.agents;\n  }\n\n  get transcriptionService(): CopilotRuntimeOptions[\"transcriptionService\"] {\n    return this.delegate.transcriptionService;\n  }\n\n  get beforeRequestMiddleware(): CopilotRuntimeOptions[\"beforeRequestMiddleware\"] {\n    return this.delegate.beforeRequestMiddleware;\n  }\n\n  get afterRequestMiddleware(): CopilotRuntimeOptions[\"afterRequestMiddleware\"] {\n    return this.delegate.afterRequestMiddleware;\n  }\n\n  get runner(): AgentRunner {\n    return this.delegate.runner;\n  }\n\n  get a2ui(): CopilotRuntimeOptions[\"a2ui\"] {\n    return this.delegate.a2ui;\n  }\n\n  get mcpApps(): CopilotRuntimeOptions[\"mcpApps\"] {\n    return this.delegate.mcpApps;\n  }\n\n  get openGenerativeUI(): CopilotRuntimeOptions[\"openGenerativeUI\"] {\n    return this.delegate.openGenerativeUI;\n  }\n\n  get intelligence(): CopilotKitIntelligence | undefined {\n    return this.delegate.intelligence;\n  }\n\n  get generateThreadNames(): boolean | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.generateThreadNames\n      : undefined;\n  }\n\n  get identifyUser(): IdentifyUserCallback | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.identifyUser\n      : undefined;\n  }\n\n  get lockTtlSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockTtlSeconds\n      : undefined;\n  }\n\n  get lockKeyPrefix(): string | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockKeyPrefix\n      : undefined;\n  }\n\n  get lockHeartbeatIntervalSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockHeartbeatIntervalSeconds\n      : undefined;\n  }\n\n  get mode(): RuntimeMode {\n    return this.delegate.mode;\n  }\n\n  get licenseChecker() {\n    return this.delegate.licenseChecker;\n  }\n\n  get debugEventBus() {\n    return this.delegate.debugEventBus;\n  }\n\n  get debug(): ResolvedDebugConfig {\n    return this.delegate.debug;\n  }\n\n  get debugLogger(): CopilotRuntimeLogger | undefined {\n    return this.delegate.debugLogger;\n  }\n\n  get forwardHeadersPolicy(): ResolvedForwardHeadersPolicy {\n    return this.delegate.forwardHeadersPolicy;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAqCA,MAAa,UAAUA,uBAAI;;;;;;AAyE3B,eAAsB,cACpB,QACA,SACwC;AACxC,KAAI,OAAO,WAAW,YAAY;AAChC,MAAI,CAAC,QACH,OAAM,IAAI,MACR,4EACD;AAEH,SAAO,OAAO,EAAE,SAAS,CAAC;;AAE5B,QAAO;;AA2HT,IAAe,qBAAf,MAAgE;CA0B9D,YAAY,SAAoC,QAAqB;AACnE,iCAA+B;EAE/B,MAAM,EACJ,QACA,sBACA,yBACA,wBACA,MACA,SACA,qBACE;AAEJ,OAAK,SAAS;AACd,OAAK,uBAAuB;AAC5B,OAAK,0BAA0B;AAC/B,OAAK,yBAAyB;AAC9B,OAAK,OAAO,QAAQ;AACpB,OAAK,UAAU;AACf,OAAK,mBAAmB;AACxB,OAAK,SAAS;AAKd,OAAK,uBACH,QAAQ,gBAAgB,QAAQ,IAAI;AAOtC,MAAI,KAAK,qBACP,WAAU,gBAAgB,KAAK,qBAAqB;AAGtD,MAAI,QAAQ,IAAI,aAAa,aAC3B,MAAK,gBAAgB,IAAI,eAAe;AAM1C,OAAK,uBAAuB,4BAC1B,QAAQ,eACT;AACD,OAAK,QAAQ,mBAAmB,QAAQ,MAAM;AAC9C,MAAI,KAAK,MAAM,QACb,MAAK,cAAc,aAAa;GAC9B,OAAO;GACP,WAAW;GACZ,CAAC;;;AAKR,IAAa,oBAAb,cACU,mBAEV;CAIE,YAAY,SAAmC;AAC7C,QAAM,SAAS,QAAQ,UAAU,IAAI,qBAAqB,CAAC;sBAJrC;cACR;;;AAOlB,IAAa,6BAAb,MAAa,mCACH,mBAEV;;8BAUyC;;;wCAEU;;CAEjD,YAAY,SAA4C;AACtD,QACE,SACA,IAAI,wBAAwB;GAC1B,KAAK,QAAQ,aAAa,iBAAiB;GAC3C,WAAW,QAAQ,aAAa,qBAAqB;GACrD,gBAAgB,QAAQ;GACxB,aAAa,QAAQ;GACtB,CAAC,CACH;cAhBa;AAiBd,OAAK,eAAe,QAAQ;AAC5B,OAAK,eAAe,QAAQ;AAC5B,OAAK,sBAAsB,QAAQ,uBAAuB;AAI1D,OAAK,iBAAiB,qBAAqB,KAAK,qBAAqB;AACrE,OAAK,iBAAiB,KAAK,IACzB,QAAQ,kBAAkB,IAC1B,2BAA2B,qBAC5B;AACD,OAAK,gBAAgB,QAAQ;AAC7B,OAAK,+BAA+B,KAAK,IACvC,QAAQ,gCAAgC,IACxC,2BAA2B,+BAC5B;;;AAIL,SAAS,uBACP,SAC8C;AAC9C,QAAO,kBAAkB,WAAW,CAAC,CAAC,QAAQ;;AAGhD,SAAgB,sBACd,SAC2C;AAC3C,QAAO,QAAQ,SAAS,6BAA6B,CAAC,CAAC,QAAQ;;;;;;;;;;;;AAajE,SAAgB,cACd,MACoD;AACpD,QAAO,CAAC,CAAC,QAAQ,KAAK,YAAY;;;;;;AAOpC,IAAa,iBAAb,MAA0D;CAGxD,YAAY,SAAgC;AAC1C,OAAK,WAAW,uBAAuB,QAAQ,GAC3C,IAAI,2BAA2B,QAAQ,GACvC,IAAI,kBAAkB,QAAQ;;CAGpC,IAAI,SAA0C;AAC5C,SAAO,KAAK,SAAS;;CAGvB,IAAI,uBAAsE;AACxE,SAAO,KAAK,SAAS;;CAGvB,IAAI,0BAA4E;AAC9E,SAAO,KAAK,SAAS;;CAGvB,IAAI,yBAA0E;AAC5E,SAAO,KAAK,SAAS;;CAGvB,IAAI,SAAsB;AACxB,SAAO,KAAK,SAAS;;CAGvB,IAAI,OAAsC;AACxC,SAAO,KAAK,SAAS;;CAGvB,IAAI,UAA4C;AAC9C,SAAO,KAAK,SAAS;;CAGvB,IAAI,mBAA8D;AAChE,SAAO,KAAK,SAAS;;CAGvB,IAAI,eAAmD;AACrD,SAAO,KAAK,SAAS;;CAGvB,IAAI,sBAA2C;AAC7C,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,sBACd;;CAGN,IAAI,eAAiD;AACnD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,eACd;;CAGN,IAAI,iBAAqC;AACvC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,iBACd;;CAGN,IAAI,gBAAoC;AACtC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,gBACd;;CAGN,IAAI,+BAAmD;AACrD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,+BACd;;CAGN,IAAI,OAAoB;AACtB,SAAO,KAAK,SAAS;;CAGvB,IAAI,iBAAiB;AACnB,SAAO,KAAK,SAAS;;CAGvB,IAAI,gBAAgB;AAClB,SAAO,KAAK,SAAS;;CAGvB,IAAI,QAA6B;AAC/B,SAAO,KAAK,SAAS;;CAGvB,IAAI,cAAgD;AAClD,SAAO,KAAK,SAAS;;CAGvB,IAAI,uBAAqD;AACvD,SAAO,KAAK,SAAS"}

package/dist/v2/runtime/handlers/handle-connect.cjs

@@ -28,7 +28,8 @@ async function handleConnectAgent({ runtime, request, agentId }) {
 			runtime,
 			request,
 			agentId,
-			threadId: connectRequest.input.threadId
+			threadId: connectRequest.input.threadId,
+			agent
 		});
 	} catch (error) {
 		console.error("Error running agent:", error);

package/dist/v2/runtime/handlers/handle-connect.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"handle-connect.cjs","names":["cloneAgentForRequest","parseConnectRequest","isIntelligenceRuntime","handleIntelligenceConnect","handleSseConnect"],"sources":["../../../../src/v2/runtime/handlers/handle-connect.ts"],"sourcesContent":["import { handleIntelligenceConnect } from \"./intelligence/connect\";\nimport { handleSseConnect } from \"./sse/connect\";\nimport { isIntelligenceRuntime } from \"../core/runtime\";\nimport { telemetry } from \"../telemetry\";\nimport {\n  parseConnectRequest,\n  RunAgentParameters as ConnectAgentParameters,\n  cloneAgentForRequest,\n} from \"./shared/agent-utils\";\n\nexport async function handleConnectAgent({\n  runtime,\n  request,\n  agentId,\n}: ConnectAgentParameters) {\n  telemetry.capture(\"oss.runtime.copilot_request_created\", {\n    \"cloud.guardrails.enabled\": false,\n    requestType: \"connect\",\n    \"cloud.api_key_provided\": !!request.headers.get(\n      \"x-copilotcloud-public-api-key\",\n    ),\n    ...(request.headers.get(\"x-copilotcloud-public-api-key\")\n      ? {\n          \"cloud.public_api_key\": request.headers.get(\n            \"x-copilotcloud-public-api-key\",\n          )!,\n        }\n      : {}),\n  });\n\n  try {\n    const agent = await cloneAgentForRequest(runtime, agentId, request);\n    if (agent instanceof Response) {\n      return agent;\n    }\n\n    const connectRequest = await parseConnectRequest(request);\n    if (connectRequest instanceof Response) {\n      return connectRequest;\n    }\n\n    if (isIntelligenceRuntime(runtime)) {\n      return handleIntelligenceConnect({\n        runtime,\n        request,\n        agentId,\n        threadId: connectRequest.input.threadId,\n      });\n    }\n\n    return handleSseConnect({\n      runtime,\n      request,\n      agentId,\n      threadId: connectRequest.input.threadId,\n    });\n  } catch (error) {\n    console.error(\"Error running agent:\", error);\n    console.error(\n      \"Error stack:\",\n      error instanceof Error ? error.stack : \"No stack trace\",\n    );\n    console.error(\"Error details:\", {\n      name: error instanceof Error ? error.name : \"Unknown\",\n      message: error instanceof Error ? error.message : String(error),\n      cause: error instanceof Error ? error.cause : undefined,\n    });\n\n    return new Response(\n      JSON.stringify({\n        error: \"Failed to run agent\",\n        message: error instanceof Error ? error.message : \"Unknown error\",\n      }),\n      {\n        status: 500,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n"],"mappings":";;;;;;;;AAUA,eAAsB,mBAAmB,EACvC,SACA,SACA,WACyB;AACzB,kCAAU,QAAQ,uCAAuC;EACvD,4BAA4B;EAC5B,aAAa;EACb,0BAA0B,CAAC,CAAC,QAAQ,QAAQ,IAC1C,gCACD;EACD,GAAI,QAAQ,QAAQ,IAAI,gCAAgC,GACpD,EACE,wBAAwB,QAAQ,QAAQ,IACtC,gCACD,EACF,GACD,EAAE;EACP,CAAC;AAEF,KAAI;EACF,MAAM,QAAQ,MAAMA,yCAAqB,SAAS,SAAS,QAAQ;AACnE,MAAI,iBAAiB,SACnB,QAAO;EAGT,MAAM,iBAAiB,MAAMC,wCAAoB,QAAQ;AACzD,MAAI,0BAA0B,SAC5B,QAAO;AAGT,MAAIC,sCAAsB,QAAQ,CAChC,QAAOC,0CAA0B;GAC/B;GACA;GACA;GACA,UAAU,eAAe,MAAM;GAChC,CAAC;AAGJ,SAAOC,mCAAiB;GACtB;GACA;GACA;GACA,UAAU,eAAe,MAAM;GAChC,CAAC;UACK,OAAO;AACd,UAAQ,MAAM,wBAAwB,MAAM;AAC5C,UAAQ,MACN,gBACA,iBAAiB,QAAQ,MAAM,QAAQ,iBACxC;AACD,UAAQ,MAAM,kBAAkB;GAC9B,MAAM,iBAAiB,QAAQ,MAAM,OAAO;GAC5C,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC/D,OAAO,iBAAiB,QAAQ,MAAM,QAAQ;GAC/C,CAAC;AAEF,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU;GACnD,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF"}
+{"version":3,"file":"handle-connect.cjs","names":["cloneAgentForRequest","parseConnectRequest","isIntelligenceRuntime","handleIntelligenceConnect","handleSseConnect"],"sources":["../../../../src/v2/runtime/handlers/handle-connect.ts"],"sourcesContent":["import { handleIntelligenceConnect } from \"./intelligence/connect\";\nimport { handleSseConnect } from \"./sse/connect\";\nimport { isIntelligenceRuntime } from \"../core/runtime\";\nimport { telemetry } from \"../telemetry\";\nimport type { RunAgentParameters as ConnectAgentParameters } from \"./shared/agent-utils\";\nimport {\n  parseConnectRequest,\n  cloneAgentForRequest,\n} from \"./shared/agent-utils\";\n\nexport async function handleConnectAgent({\n  runtime,\n  request,\n  agentId,\n}: ConnectAgentParameters) {\n  telemetry.capture(\"oss.runtime.copilot_request_created\", {\n    \"cloud.guardrails.enabled\": false,\n    requestType: \"connect\",\n    \"cloud.api_key_provided\": !!request.headers.get(\n      \"x-copilotcloud-public-api-key\",\n    ),\n    ...(request.headers.get(\"x-copilotcloud-public-api-key\")\n      ? {\n          \"cloud.public_api_key\": request.headers.get(\n            \"x-copilotcloud-public-api-key\",\n          )!,\n        }\n      : {}),\n  });\n\n  try {\n    // Runs on BOTH branches deliberately: this is the only place the connect\n    // path validates that `agentId` exists, returning a 404 `Response` for an\n    // unknown agent. The intelligence branch below never re-checks the id (it\n    // hands `agentId` straight to `ɵconnectThread`), so this clone/resolve must\n    // happen before the branch split or unknown agents would slip through. The\n    // SSE branch additionally uses the returned clone's `agent.headers`.\n    const agent = await cloneAgentForRequest(runtime, agentId, request);\n    if (agent instanceof Response) {\n      return agent;\n    }\n\n    const connectRequest = await parseConnectRequest(request);\n    if (connectRequest instanceof Response) {\n      return connectRequest;\n    }\n\n    if (isIntelligenceRuntime(runtime)) {\n      return handleIntelligenceConnect({\n        runtime,\n        request,\n        agentId,\n        threadId: connectRequest.input.threadId,\n      });\n    }\n\n    return handleSseConnect({\n      runtime,\n      request,\n      agentId,\n      threadId: connectRequest.input.threadId,\n      // Pass the per-request clone so its server-configured `agent.headers` are\n      // folded into the merged header set threaded into `runner.connect`. That\n      // merge is forward-looking plumbing — no shipped runner consumes\n      // connect-path headers yet; see the note in `sse/connect.ts`.\n      agent,\n    });\n  } catch (error) {\n    console.error(\"Error running agent:\", error);\n    console.error(\n      \"Error stack:\",\n      error instanceof Error ? error.stack : \"No stack trace\",\n    );\n    console.error(\"Error details:\", {\n      name: error instanceof Error ? error.name : \"Unknown\",\n      message: error instanceof Error ? error.message : String(error),\n      cause: error instanceof Error ? error.cause : undefined,\n    });\n\n    return new Response(\n      JSON.stringify({\n        error: \"Failed to run agent\",\n        message: error instanceof Error ? error.message : \"Unknown error\",\n      }),\n      {\n        status: 500,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n"],"mappings":";;;;;;;;AAUA,eAAsB,mBAAmB,EACvC,SACA,SACA,WACyB;AACzB,kCAAU,QAAQ,uCAAuC;EACvD,4BAA4B;EAC5B,aAAa;EACb,0BAA0B,CAAC,CAAC,QAAQ,QAAQ,IAC1C,gCACD;EACD,GAAI,QAAQ,QAAQ,IAAI,gCAAgC,GACpD,EACE,wBAAwB,QAAQ,QAAQ,IACtC,gCACD,EACF,GACD,EAAE;EACP,CAAC;AAEF,KAAI;EAOF,MAAM,QAAQ,MAAMA,yCAAqB,SAAS,SAAS,QAAQ;AACnE,MAAI,iBAAiB,SACnB,QAAO;EAGT,MAAM,iBAAiB,MAAMC,wCAAoB,QAAQ;AACzD,MAAI,0BAA0B,SAC5B,QAAO;AAGT,MAAIC,sCAAsB,QAAQ,CAChC,QAAOC,0CAA0B;GAC/B;GACA;GACA;GACA,UAAU,eAAe,MAAM;GAChC,CAAC;AAGJ,SAAOC,mCAAiB;GACtB;GACA;GACA;GACA,UAAU,eAAe,MAAM;GAK/B;GACD,CAAC;UACK,OAAO;AACd,UAAQ,MAAM,wBAAwB,MAAM;AAC5C,UAAQ,MACN,gBACA,iBAAiB,QAAQ,MAAM,QAAQ,iBACxC;AACD,UAAQ,MAAM,kBAAkB;GAC9B,MAAM,iBAAiB,QAAQ,MAAM,OAAO;GAC5C,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC/D,OAAO,iBAAiB,QAAQ,MAAM,QAAQ;GAC/C,CAAC;AAEF,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU;GACnD,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF"}

package/dist/v2/runtime/handlers/handle-connect.mjs

@@ -28,7 +28,8 @@ async function handleConnectAgent({ runtime, request, agentId }) {
 			runtime,
 			request,
 			agentId,
-			threadId: connectRequest.input.threadId
+			threadId: connectRequest.input.threadId,
+			agent
 		});
 	} catch (error) {
 		console.error("Error running agent:", error);

package/dist/v2/runtime/handlers/handle-connect.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"handle-connect.mjs","names":[],"sources":["../../../../src/v2/runtime/handlers/handle-connect.ts"],"sourcesContent":["import { handleIntelligenceConnect } from \"./intelligence/connect\";\nimport { handleSseConnect } from \"./sse/connect\";\nimport { isIntelligenceRuntime } from \"../core/runtime\";\nimport { telemetry } from \"../telemetry\";\nimport {\n  parseConnectRequest,\n  RunAgentParameters as ConnectAgentParameters,\n  cloneAgentForRequest,\n} from \"./shared/agent-utils\";\n\nexport async function handleConnectAgent({\n  runtime,\n  request,\n  agentId,\n}: ConnectAgentParameters) {\n  telemetry.capture(\"oss.runtime.copilot_request_created\", {\n    \"cloud.guardrails.enabled\": false,\n    requestType: \"connect\",\n    \"cloud.api_key_provided\": !!request.headers.get(\n      \"x-copilotcloud-public-api-key\",\n    ),\n    ...(request.headers.get(\"x-copilotcloud-public-api-key\")\n      ? {\n          \"cloud.public_api_key\": request.headers.get(\n            \"x-copilotcloud-public-api-key\",\n          )!,\n        }\n      : {}),\n  });\n\n  try {\n    const agent = await cloneAgentForRequest(runtime, agentId, request);\n    if (agent instanceof Response) {\n      return agent;\n    }\n\n    const connectRequest = await parseConnectRequest(request);\n    if (connectRequest instanceof Response) {\n      return connectRequest;\n    }\n\n    if (isIntelligenceRuntime(runtime)) {\n      return handleIntelligenceConnect({\n        runtime,\n        request,\n        agentId,\n        threadId: connectRequest.input.threadId,\n      });\n    }\n\n    return handleSseConnect({\n      runtime,\n      request,\n      agentId,\n      threadId: connectRequest.input.threadId,\n    });\n  } catch (error) {\n    console.error(\"Error running agent:\", error);\n    console.error(\n      \"Error stack:\",\n      error instanceof Error ? error.stack : \"No stack trace\",\n    );\n    console.error(\"Error details:\", {\n      name: error instanceof Error ? error.name : \"Unknown\",\n      message: error instanceof Error ? error.message : String(error),\n      cause: error instanceof Error ? error.cause : undefined,\n    });\n\n    return new Response(\n      JSON.stringify({\n        error: \"Failed to run agent\",\n        message: error instanceof Error ? error.message : \"Unknown error\",\n      }),\n      {\n        status: 500,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n"],"mappings":";;;;;;;;AAUA,eAAsB,mBAAmB,EACvC,SACA,SACA,WACyB;AACzB,WAAU,QAAQ,uCAAuC;EACvD,4BAA4B;EAC5B,aAAa;EACb,0BAA0B,CAAC,CAAC,QAAQ,QAAQ,IAC1C,gCACD;EACD,GAAI,QAAQ,QAAQ,IAAI,gCAAgC,GACpD,EACE,wBAAwB,QAAQ,QAAQ,IACtC,gCACD,EACF,GACD,EAAE;EACP,CAAC;AAEF,KAAI;EACF,MAAM,QAAQ,MAAM,qBAAqB,SAAS,SAAS,QAAQ;AACnE,MAAI,iBAAiB,SACnB,QAAO;EAGT,MAAM,iBAAiB,MAAM,oBAAoB,QAAQ;AACzD,MAAI,0BAA0B,SAC5B,QAAO;AAGT,MAAI,sBAAsB,QAAQ,CAChC,QAAO,0BAA0B;GAC/B;GACA;GACA;GACA,UAAU,eAAe,MAAM;GAChC,CAAC;AAGJ,SAAO,iBAAiB;GACtB;GACA;GACA;GACA,UAAU,eAAe,MAAM;GAChC,CAAC;UACK,OAAO;AACd,UAAQ,MAAM,wBAAwB,MAAM;AAC5C,UAAQ,MACN,gBACA,iBAAiB,QAAQ,MAAM,QAAQ,iBACxC;AACD,UAAQ,MAAM,kBAAkB;GAC9B,MAAM,iBAAiB,QAAQ,MAAM,OAAO;GAC5C,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC/D,OAAO,iBAAiB,QAAQ,MAAM,QAAQ;GAC/C,CAAC;AAEF,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU;GACnD,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF"}
+{"version":3,"file":"handle-connect.mjs","names":[],"sources":["../../../../src/v2/runtime/handlers/handle-connect.ts"],"sourcesContent":["import { handleIntelligenceConnect } from \"./intelligence/connect\";\nimport { handleSseConnect } from \"./sse/connect\";\nimport { isIntelligenceRuntime } from \"../core/runtime\";\nimport { telemetry } from \"../telemetry\";\nimport type { RunAgentParameters as ConnectAgentParameters } from \"./shared/agent-utils\";\nimport {\n  parseConnectRequest,\n  cloneAgentForRequest,\n} from \"./shared/agent-utils\";\n\nexport async function handleConnectAgent({\n  runtime,\n  request,\n  agentId,\n}: ConnectAgentParameters) {\n  telemetry.capture(\"oss.runtime.copilot_request_created\", {\n    \"cloud.guardrails.enabled\": false,\n    requestType: \"connect\",\n    \"cloud.api_key_provided\": !!request.headers.get(\n      \"x-copilotcloud-public-api-key\",\n    ),\n    ...(request.headers.get(\"x-copilotcloud-public-api-key\")\n      ? {\n          \"cloud.public_api_key\": request.headers.get(\n            \"x-copilotcloud-public-api-key\",\n          )!,\n        }\n      : {}),\n  });\n\n  try {\n    // Runs on BOTH branches deliberately: this is the only place the connect\n    // path validates that `agentId` exists, returning a 404 `Response` for an\n    // unknown agent. The intelligence branch below never re-checks the id (it\n    // hands `agentId` straight to `ɵconnectThread`), so this clone/resolve must\n    // happen before the branch split or unknown agents would slip through. The\n    // SSE branch additionally uses the returned clone's `agent.headers`.\n    const agent = await cloneAgentForRequest(runtime, agentId, request);\n    if (agent instanceof Response) {\n      return agent;\n    }\n\n    const connectRequest = await parseConnectRequest(request);\n    if (connectRequest instanceof Response) {\n      return connectRequest;\n    }\n\n    if (isIntelligenceRuntime(runtime)) {\n      return handleIntelligenceConnect({\n        runtime,\n        request,\n        agentId,\n        threadId: connectRequest.input.threadId,\n      });\n    }\n\n    return handleSseConnect({\n      runtime,\n      request,\n      agentId,\n      threadId: connectRequest.input.threadId,\n      // Pass the per-request clone so its server-configured `agent.headers` are\n      // folded into the merged header set threaded into `runner.connect`. That\n      // merge is forward-looking plumbing — no shipped runner consumes\n      // connect-path headers yet; see the note in `sse/connect.ts`.\n      agent,\n    });\n  } catch (error) {\n    console.error(\"Error running agent:\", error);\n    console.error(\n      \"Error stack:\",\n      error instanceof Error ? error.stack : \"No stack trace\",\n    );\n    console.error(\"Error details:\", {\n      name: error instanceof Error ? error.name : \"Unknown\",\n      message: error instanceof Error ? error.message : String(error),\n      cause: error instanceof Error ? error.cause : undefined,\n    });\n\n    return new Response(\n      JSON.stringify({\n        error: \"Failed to run agent\",\n        message: error instanceof Error ? error.message : \"Unknown error\",\n      }),\n      {\n        status: 500,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n"],"mappings":";;;;;;;;AAUA,eAAsB,mBAAmB,EACvC,SACA,SACA,WACyB;AACzB,WAAU,QAAQ,uCAAuC;EACvD,4BAA4B;EAC5B,aAAa;EACb,0BAA0B,CAAC,CAAC,QAAQ,QAAQ,IAC1C,gCACD;EACD,GAAI,QAAQ,QAAQ,IAAI,gCAAgC,GACpD,EACE,wBAAwB,QAAQ,QAAQ,IACtC,gCACD,EACF,GACD,EAAE;EACP,CAAC;AAEF,KAAI;EAOF,MAAM,QAAQ,MAAM,qBAAqB,SAAS,SAAS,QAAQ;AACnE,MAAI,iBAAiB,SACnB,QAAO;EAGT,MAAM,iBAAiB,MAAM,oBAAoB,QAAQ;AACzD,MAAI,0BAA0B,SAC5B,QAAO;AAGT,MAAI,sBAAsB,QAAQ,CAChC,QAAO,0BAA0B;GAC/B;GACA;GACA;GACA,UAAU,eAAe,MAAM;GAChC,CAAC;AAGJ,SAAO,iBAAiB;GACtB;GACA;GACA;GACA,UAAU,eAAe,MAAM;GAK/B;GACD,CAAC;UACK,OAAO;AACd,UAAQ,MAAM,wBAAwB,MAAM;AAC5C,UAAQ,MACN,gBACA,iBAAiB,QAAQ,MAAM,QAAQ,iBACxC;AACD,UAAQ,MAAM,kBAAkB;GAC9B,MAAM,iBAAiB,QAAQ,MAAM,OAAO;GAC5C,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC/D,OAAO,iBAAiB,QAAQ,MAAM,QAAQ;GAC/C,CAAC;AAEF,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU;GACnD,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF"}