@copilotkit/runtime 1.62.2 → 1.63.0

package/dist/v2/runtime/core/runtime.d.mts

@@ -1,4 +1,5 @@
 import "reflect-metadata";
+import { ForwardHeadersConfig, ResolvedForwardHeadersPolicy } from "../handlers/header-utils.mjs";
 import { AfterRequestMiddleware, BeforeRequestMiddleware } from "./middleware.mjs";
 import { CopilotRuntimeLogger } from "../../../lib/logger.mjs";
 import { TranscriptionService } from "../transcription-service/transcription-service.mjs";
@@ -10,6 +11,7 @@ import { LicenseChecker } from "@copilotkit/license-verifier";
 import { AbstractAgent } from "@ag-ui/client";
 import { A2UIMiddlewareConfig } from "@ag-ui/a2ui-middleware";
 import { MCPClientConfig } from "@ag-ui/mcp-apps-middleware";
+import { Channel } from "@copilotkit/channels-core";
 
 //#region src/v2/runtime/core/runtime.d.ts
 declare const VERSION: string;
@@ -98,6 +100,15 @@ interface BaseCopilotRuntimeOptions extends CopilotRuntimeMiddlewares {
   licenseToken?: string;
   /** Enable debug logging for the event pipeline. */
   debug?: DebugConfig;
+  /**
+   * Policy controlling which inbound HTTP headers are forwarded onto the
+   * outgoing agent call. By default a built-in denylist strips known
+   * infrastructure/proxy/platform headers (`x-forwarded-*`, `x-real-ip`,
+   * `x-vercel-*`, `x-copilotcloud-*`, etc.) while `authorization` and custom
+   * `x-*` application headers continue to forward (#5712). Set
+   * `{ useDefaultDenylist: false }` to restore the previous wide-open behavior.
+   */
+  forwardHeaders?: ForwardHeadersConfig;
 }
 interface CopilotRuntimeUser {
   id: string;
@@ -109,6 +120,8 @@ interface CopilotSseRuntimeOptions extends BaseCopilotRuntimeOptions {
   runner?: AgentRunner;
   intelligence?: undefined;
   generateThreadNames?: undefined;
+  /** Intelligence Channels require the Intelligence runtime; not available in SSE mode. */
+  channels?: undefined;
 }
 interface CopilotIntelligenceRuntimeOptions extends BaseCopilotRuntimeOptions {
   /** Configures Intelligence mode for durable threads and realtime events. */
@@ -127,6 +140,14 @@ interface CopilotIntelligenceRuntimeOptions extends BaseCopilotRuntimeOptions {
   lockKeyPrefix?: string;
   /** Interval in seconds at which the runtime renews the thread lock. Clamped to a maximum of 3000 (50 minutes). @default 15 */
   lockHeartbeatIntervalSeconds?: number;
+  /**
+   * Intelligence Channels declared by this runtime. Each is a
+   * `createChannel({ name })` instance. Only available on the Intelligence runtime
+   * path. Names are validated (required, lowercase kebab-case, unique) and wired
+   * to delivery/egress transports when activated via `startChannels` from
+   * `@copilotkit/channels-intelligence` — not at construction.
+   */
+  channels?: Channel[];
 }
 type CopilotRuntimeOptions = CopilotSseRuntimeOptions | CopilotIntelligenceRuntimeOptions;
 interface CopilotRuntimeLike {
@@ -145,6 +166,15 @@ interface CopilotRuntimeLike {
   debugEventBus?: DebugEventBus;
   debug: ResolvedDebugConfig;
   debugLogger?: CopilotRuntimeLogger;
+  /**
+   * Resolved inbound-header forwarding policy read by the /run and /connect call
+   * sites. Optional on the published interface so an external `CopilotRuntimeLike`
+   * implementor predating this field stays source-compatible (non-breaking minor
+   * release). Concrete runtimes (`BaseCopilotRuntime`) always resolve and set it;
+   * the call sites coalesce a missing value to the default resolved policy
+   * (`resolveForwardHeadersPolicy(undefined)` — default-on denylist).
+   */
+  forwardHeadersPolicy?: ResolvedForwardHeadersPolicy;
 }
 interface CopilotSseRuntimeLike extends CopilotRuntimeLike {
   intelligence?: undefined;
@@ -157,6 +187,7 @@ interface CopilotIntelligenceRuntimeLike extends CopilotRuntimeLike {
   lockTtlSeconds: number;
   lockKeyPrefix?: string;
   lockHeartbeatIntervalSeconds: number;
+  channels: Channel[];
   mode: typeof RUNTIME_MODE_INTELLIGENCE;
 }
 declare abstract class BaseCopilotRuntime implements CopilotRuntimeLike {
@@ -172,6 +203,7 @@ declare abstract class BaseCopilotRuntime implements CopilotRuntimeLike {
   readonly debugEventBus?: DebugEventBus;
   debug: ResolvedDebugConfig;
   debugLogger?: CopilotRuntimeLogger;
+  readonly forwardHeadersPolicy: ResolvedForwardHeadersPolicy;
   /**
    * License token resolved once with the env fallback, so telemetry
    * attribution (below) and subclass feature gating
@@ -195,6 +227,7 @@ declare class CopilotIntelligenceRuntime extends BaseCopilotRuntime implements C
   readonly lockTtlSeconds: number;
   readonly lockKeyPrefix?: string;
   readonly lockHeartbeatIntervalSeconds: number;
+  readonly channels: Channel[];
   readonly mode: "intelligence";
   /** Maximum allowed lock TTL in seconds (1 hour). */
   static readonly MAX_LOCK_TTL_SECONDS = 3600;
@@ -215,32 +248,68 @@ declare function isIntelligenceRuntime(runtime: CopilotRuntimeLike): runtime is
  */
 declare function isA2UIEnabled(a2ui: CopilotRuntimeOptions["a2ui"]): a2ui is NonNullable<CopilotRuntimeOptions["a2ui"]>;
 /**
- * Compatibility shim that preserves the legacy `CopilotRuntime` entrypoint.
- * New code should prefer `CopilotSseRuntime` or `CopilotIntelligenceRuntime`.
+ * Compile-time phantom brand marking a {@link CopilotRuntime} that was
+ * constructed with at least one declared Intelligence Channel. It has no runtime
+ * representation — the shim never sets this property; it exists purely so
+ * `createCopilotRuntimeHandler` can tell, at the type level, that the resulting
+ * handler will carry a non-optional `.channels` control surface.
  */
-declare class CopilotRuntime implements CopilotRuntimeLike {
-  private delegate;
-  constructor(options: CopilotRuntimeOptions);
-  get agents(): CopilotRuntimeOptions["agents"];
-  get transcriptionService(): CopilotRuntimeOptions["transcriptionService"];
-  get beforeRequestMiddleware(): CopilotRuntimeOptions["beforeRequestMiddleware"];
-  get afterRequestMiddleware(): CopilotRuntimeOptions["afterRequestMiddleware"];
-  get runner(): AgentRunner;
-  get a2ui(): CopilotRuntimeOptions["a2ui"];
-  get mcpApps(): CopilotRuntimeOptions["mcpApps"];
-  get openGenerativeUI(): CopilotRuntimeOptions["openGenerativeUI"];
-  get intelligence(): CopilotKitIntelligence | undefined;
-  get generateThreadNames(): boolean | undefined;
-  get identifyUser(): IdentifyUserCallback | undefined;
-  get lockTtlSeconds(): number | undefined;
-  get lockKeyPrefix(): string | undefined;
-  get lockHeartbeatIntervalSeconds(): number | undefined;
-  get mode(): RuntimeMode;
-  get licenseChecker(): LicenseChecker;
-  get debugEventBus(): DebugEventBus;
-  get debug(): ResolvedDebugConfig;
-  get debugLogger(): CopilotRuntimeLogger | undefined;
+interface RuntimeWithDeclaredChannels {
+  /**
+   * @internal Phantom brand key. Never present at runtime; do not read or set.
+   */
+  readonly __copilotkitChannelsDeclared: true;
 }
+/**
+ * Instance shape of the {@link CopilotRuntime} compatibility shim. Extends
+ * {@link CopilotRuntimeLike} with the Intelligence-only accessors the shim
+ * surfaces (all `undefined` in SSE mode). Declared explicitly so the exported
+ * `CopilotRuntime` name resolves as a type as well as a value.
+ */
+interface CopilotRuntime extends CopilotRuntimeLike {
+  /** Auto-generate short thread names; `undefined` in SSE mode. */
+  generateThreadNames?: boolean;
+  /** Thread lock TTL in seconds; `undefined` in SSE mode. */
+  lockTtlSeconds?: number;
+  /** Custom Redis key prefix for the thread lock; `undefined` in SSE mode. */
+  lockKeyPrefix?: string;
+  /** Thread lock heartbeat interval in seconds; `undefined` in SSE mode. */
+  lockHeartbeatIntervalSeconds?: number;
+  /** Declared Intelligence Channels; `undefined` in SSE mode. */
+  channels?: Channel[];
+}
+/**
+ * Constructor type for the {@link CopilotRuntime} compatibility shim.
+ *
+ * The first overload fires when the caller passes `intelligence` together with a
+ * non-empty `channels` tuple: it returns a {@link RuntimeWithDeclaredChannels}-
+ * branded runtime, which `createCopilotRuntimeHandler` maps to a handler whose
+ * `.channels` is non-optional. Every other configuration (SSE, or Intelligence
+ * without channels, or an empty `channels: []`) falls through to the second
+ * overload and stays unbranded, so its handler keeps `.channels` optional.
+ *
+ * A class constructor cannot vary its return type across overloads (it is pinned
+ * to the instance type), so the branding lives on this construct-signature
+ * interface instead of on the class itself.
+ */
+interface CopilotRuntimeConstructor {
+  new (options: Omit<CopilotIntelligenceRuntimeOptions, "channels"> & {
+    channels: readonly [Channel, ...Channel[]];
+  }): CopilotRuntime & RuntimeWithDeclaredChannels;
+  new (options: CopilotRuntimeOptions): CopilotRuntime;
+}
+/**
+ * The public `CopilotRuntime` constructor. Backed by {@link CopilotRuntimeShim}
+ * but typed as {@link CopilotRuntimeConstructor} so that constructing with a
+ * non-empty `channels` array yields a {@link RuntimeWithDeclaredChannels}-branded
+ * runtime type.
+ *
+ * The `as unknown as` cast is required (not dishonest widening): the brand is a
+ * phantom, compile-time-only marker with no runtime representation, so the shim
+ * instances legitimately do not carry the brand property. Behavior is identical
+ * to the former `class CopilotRuntime` — this only refines the static type.
+ */
+declare const CopilotRuntime: CopilotRuntimeConstructor;
 //#endregion
-export { AgentFactoryContext, AgentsConfig, AgentsFactory, CopilotIntelligenceRuntime, CopilotIntelligenceRuntimeLike, CopilotIntelligenceRuntimeOptions, CopilotRuntime, CopilotRuntimeLike, CopilotRuntimeOptions, CopilotRuntimeUser, CopilotSseRuntime, CopilotSseRuntimeLike, CopilotSseRuntimeOptions, IdentifyUserCallback, McpAppsConfig, McpAppsServerConfig, OpenGenerativeUIConfig, OpenGenerativeUIOptions, VERSION, isA2UIEnabled, isIntelligenceRuntime, resolveAgents };
+export { AgentFactoryContext, AgentsConfig, AgentsFactory, CopilotIntelligenceRuntime, CopilotIntelligenceRuntimeLike, CopilotIntelligenceRuntimeOptions, CopilotRuntime, CopilotRuntimeConstructor, CopilotRuntimeLike, CopilotRuntimeOptions, CopilotRuntimeUser, CopilotSseRuntime, CopilotSseRuntimeLike, CopilotSseRuntimeOptions, IdentifyUserCallback, McpAppsConfig, McpAppsServerConfig, OpenGenerativeUIConfig, OpenGenerativeUIOptions, RuntimeWithDeclaredChannels, VERSION, isA2UIEnabled, isIntelligenceRuntime, resolveAgents };
 //# sourceMappingURL=runtime.d.mts.map

package/dist/v2/runtime/core/runtime.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.mts","names":[],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"mappings":";;;;;;;;;;;;;;cAgCa,OAAA;AAAA,UAEH,mCAAA;;EAER,MAAA;AAAA;AAAA,KAGU,mBAAA,GAAsB,eAAA;EALW,uFAO3C,OAAA;AAAA;AAAA,UAGe,aAAA;EALL;EAOV,OAAA,EAAS,mBAAA;AAAA;AAAA,UAGM,uBAAA,SAAgC,mCAAA;AAAA,KAErC,sBAAA,aAAmC,uBAAA;AAAA,UAErC,yBAAA;;;;AAJV;EASE,IAAA,GAAO,mCAAA,GACL,oBAAA;IAV6C;;;AAEjD;;;IAeM,OAAA;EAAA;EAbI;EAgBR,OAAA,GAAU,aAAA;;EAEV,gBAAA,GAAmB,sBAAA;AAAA;;;;UAMJ,mBAAA;EAnBf;EAqBA,OAAA,EAAS,OAAA;AAAA;;;;;KAOC,aAAA,IACV,GAAA,EAAK,mBAAA,KACF,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA;;;AAXhD;;;;KAmBY,YAAA,GACR,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA,MAC3C,aAAA;AAZJ;;;;;AAAA,iBAmBsB,aAAA,CACpB,MAAA,EAAQ,YAAA,EACR,OAAA,GAAU,OAAA,GACT,OAAA,CAAQ,MAAA,SAAe,aAAA;AAAA,UAYhB,yBAAA,SAAkC,yBAAA;EAhCvC;;;;;;;;;;;AAQL;;;;;EAyCE,MAAA,EAAQ,YAAA;EAxCN;EA0CF,oBAAA,GAAuB,oBAAA;EAzCR;EA2Cf,uBAAA,GAA0B,uBAAA;EA5CxB;EA8CF,sBAAA,GAAyB,sBAAA;EA9CK;EAgD9B,YAAA;EA/CE;EAiDF,KAAA,GAAQ,WAAA;AAAA;AAAA,UAGO,kBAAA;EACf,EAAA;EACA,IAAA;AAAA;AAAA,KAGU,oBAAA,IACV,OAAA,EAAS,OAAA,KACN,YAAA,CAAa,kBAAA;AAAA,UAED,wBAAA,SAAiC,yBAAA;EAnDvC;EAqDT,MAAA,GAAS,WAAA;EACT,YAAA;EACA,mBAAA;AAAA;AAAA,UAGe,iCAAA,SAA0C,yBAAA;EA3D/C;EA6DV,YAAA,EAAc,sBAAA;EA5Db;EA8DD,YAAA,EAAc,oBAAA;EA9DU;EAgExB,mBAAA;EAhEqC;EAkErC,cAAA;EAtDkC;EAwDlC,WAAA;EAvCQ;EAyCR,cAAA;EArC0B;EAuC1B,aAAA;EAjCQ;EAmCR,4BAAA;AAAA;AAAA,KAGU,qBAAA,GACR,wBAAA,GACA,iCAAA;AAAA,UAEa,kBAAA;EACf,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,YAAA,GAAe,sBAAA;EACf,YAAA,GAAe,oBAAA;EACf,IAAA,EAAM,WAAA;EACN,cAAA,GAAiB,cAAA;EACjB,aAAA,GAAgB,aAAA;EAChB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;AAAA;AAAA,UAGC,qBAAA,SAA8B,kBAAA;EAC7C,YAAA;EACA,IAAA,SAAa,gBAAA;AAAA;AAAA,UAGE,8BAAA,SAAuC,kBAAA;EACtD,YAAA,EAAc,sBAAA;EACd,YAAA,EAAc,oBAAA;EACd,mBAAA;EACA,cAAA;EACA,aAAA;EACA,4BAAA;EACA,IAAA,SAAa,yBAAA;AAAA;AAAA,uBAGA,kBAAA,YAA8B,kBAAA;EACpC,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,cAAA,GAAiB,cAAA;EAAA,SACR,aAAA,GAAgB,aAAA;EACzB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;EAvEF;AAGrB;;;;;EAHqB,mBA+EA,oBAAA;EAAA,kBAED,YAAA,GAAe,sBAAA;EAAA,kBACf,IAAA,EAAM,WAAA;cAEZ,OAAA,EAAS,yBAAA,EAA2B,MAAA,EAAQ,WAAA;AAAA;AAAA,cAkD7C,iBAAA,SACH,kBAAA,YACG,qBAAA;EAAA,SAEF,YAAA;EAAA,SACA,IAAA;cAEG,OAAA,EAAS,wBAAA;AAAA;AAAA,cAKV,0BAAA,SACH,kBAAA,YACG,8BAAA;EAAA,SAEF,YAAA,EAAc,sBAAA;EAAA,SACd,YAAA,EAAc,oBAAA;EAAA,SACd,mBAAA;EAAA,SACA,cAAA;EAAA,SACA,aAAA;EAAA,SACA,4BAAA;EAAA,SACA,IAAA;;kBAGO,oBAAA;EAvImB;EAAA,gBAyInB,8BAAA;cAEJ,OAAA,EAAS,iCAAA;AAAA;AAAA,iBAmCP,qBAAA,CACd,OAAA,EAAS,kBAAA,GACR,OAAA,IAAW,8BAAA;;;;;;;;;;;iBAcE,aAAA,CACd,IAAA,EAAM,qBAAA,WACL,IAAA,IAAQ,WAAA,CAAY,qBAAA;;;;;cAQV,cAAA,YAA0B,kBAAA;EAAA,QAC7B,QAAA;cAEI,OAAA,EAAS,qBAAA;EAAA,IAMjB,MAAA,CAAA,GAAU,qBAAA;EAAA,IAIV,oBAAA,CAAA,GAAwB,qBAAA;EAAA,IAIxB,uBAAA,CAAA,GAA2B,qBAAA;EAAA,IAI3B,sBAAA,CAAA,GAA0B,qBAAA;EAAA,IAI1B,MAAA,CAAA,GAAU,WAAA;EAAA,IAIV,IAAA,CAAA,GAAQ,qBAAA;EAAA,IAIR,OAAA,CAAA,GAAW,qBAAA;EAAA,IAIX,gBAAA,CAAA,GAAoB,qBAAA;EAAA,IAIpB,YAAA,CAAA,GAAgB,sBAAA;EAAA,IAIhB,mBAAA,CAAA;EAAA,IAMA,YAAA,CAAA,GAAgB,oBAAA;EAAA,IAMhB,cAAA,CAAA;EAAA,IAMA,aAAA,CAAA;EAAA,IAMA,4BAAA,CAAA;EAAA,IAMA,IAAA,CAAA,GAAQ,WAAA;EAAA,IAIR,cAAA,CAAA,GAAc,cAAA;EAAA,IAId,aAAA,CAAA,GAAa,aAAA;EAAA,IAIb,KAAA,CAAA,GAAS,mBAAA;EAAA,IAIT,WAAA,CAAA,GAAe,oBAAA;AAAA"}
+{"version":3,"file":"runtime.d.mts","names":[],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"mappings":";;;;;;;;;;;;;;;;cA0Ca,OAAA;AAAA,UAEH,mCAAA;;EAER,MAAA;AAAA;AAAA,KAGU,mBAAA,GAAsB,eAAA;EALW,uFAO3C,OAAA;AAAA;AAAA,UAGe,aAAA;EALL;EAOV,OAAA,EAAS,mBAAA;AAAA;AAAA,UAGM,uBAAA,SAAgC,mCAAA;AAAA,KAErC,sBAAA,aAAmC,uBAAA;AAAA,UAErC,yBAAA;;;;AAJV;EASE,IAAA,GAAO,mCAAA,GACL,oBAAA;IAV6C;;;AAEjD;;;IAeM,OAAA;EAAA;EAbI;EAgBR,OAAA,GAAU,aAAA;;EAEV,gBAAA,GAAmB,sBAAA;AAAA;;;;UAMJ,mBAAA;EAnBf;EAqBA,OAAA,EAAS,OAAA;AAAA;;;;;KAOC,aAAA,IACV,GAAA,EAAK,mBAAA,KACF,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA;;;AAXhD;;;;KAmBY,YAAA,GACR,YAAA,CAAa,cAAA,CAAe,MAAA,SAAe,aAAA,MAC3C,aAAA;AAZJ;;;;;AAAA,iBAmBsB,aAAA,CACpB,MAAA,EAAQ,YAAA,EACR,OAAA,GAAU,OAAA,GACT,OAAA,CAAQ,MAAA,SAAe,aAAA;AAAA,UAYhB,yBAAA,SAAkC,yBAAA;EAhCvC;;;;;;;;;;;AAQL;;;;;EAyCE,MAAA,EAAQ,YAAA;EAxCN;EA0CF,oBAAA,GAAuB,oBAAA;EAzCR;EA2Cf,uBAAA,GAA0B,uBAAA;EA5CxB;EA8CF,sBAAA,GAAyB,sBAAA;EA9CK;EAgD9B,YAAA;EA/CE;EAiDF,KAAA,GAAQ,WAAA;EAjDO;AAOjB;;;;;;;EAmDE,cAAA,GAAiB,oBAAA;AAAA;AAAA,UAGF,kBAAA;EACf,EAAA;EACA,IAAA;AAAA;AAAA,KAGU,oBAAA,IACV,OAAA,EAAS,OAAA,KACN,YAAA,CAAa,kBAAA;AAAA,UAED,wBAAA,SAAiC,yBAAA;EA5DvC;EA8DT,MAAA,GAAS,WAAA;EACT,YAAA;EACA,mBAAA;EApDQ;EAsDR,QAAA;AAAA;AAAA,UAGe,iCAAA,SAA0C,yBAAA;EAtClC;EAwCvB,YAAA,EAAc,sBAAA;EApCW;EAsCzB,YAAA,EAAc,oBAAA;EAzBG;EA2BjB,mBAAA;EA/DmE;EAiEnE,cAAA;EAjE0C;EAmE1C,WAAA;EAlDQ;EAoDR,cAAA;EAlDuB;EAoDvB,aAAA;EAlD0B;EAoD1B,4BAAA;EAlDyB;;;;;;;EA0DzB,QAAA,GAAW,OAAA;AAAA;AAAA,KAGD,qBAAA,GACR,wBAAA,GACA,iCAAA;AAAA,UAEa,kBAAA;EACf,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,YAAA,GAAe,sBAAA;EACf,YAAA,GAAe,oBAAA;EACf,IAAA,EAAM,WAAA;EACN,cAAA,GAAiB,cAAA;EACjB,aAAA,GAAgB,aAAA;EAChB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;EAzDoB;AAEpC;;;;;;;EAgEE,oBAAA,GAAuB,4BAAA;AAAA;AAAA,UAGR,qBAAA,SAA8B,kBAAA;EAC7C,YAAA;EACA,IAAA,SAAa,gBAAA;AAAA;AAAA,UAGE,8BAAA,SAAuC,kBAAA;EACtD,YAAA,EAAc,sBAAA;EACd,YAAA,EAAc,oBAAA;EACd,mBAAA;EACA,cAAA;EACA,aAAA;EACA,4BAAA;EACA,QAAA,EAAU,OAAA;EACV,IAAA,SAAa,yBAAA;AAAA;AAAA,uBAGA,kBAAA,YAA8B,kBAAA;EACpC,MAAA,EAAQ,qBAAA;EACR,oBAAA,EAAsB,qBAAA;EACtB,uBAAA,EAAyB,qBAAA;EACzB,sBAAA,EAAwB,qBAAA;EACxB,MAAA,EAAQ,WAAA;EACR,IAAA,EAAM,qBAAA;EACN,OAAA,EAAS,qBAAA;EACT,gBAAA,EAAkB,qBAAA;EAClB,cAAA,GAAiB,cAAA;EAAA,SACR,aAAA,GAAgB,aAAA;EACzB,KAAA,EAAO,mBAAA;EACP,WAAA,GAAc,oBAAA;EAAA,SACL,oBAAA,EAAsB,4BAAA;EA5DP;;;;AAIjC;;EAJiC,mBAoEZ,oBAAA;EAAA,kBAED,YAAA,GAAe,sBAAA;EAAA,kBACf,IAAA,EAAM,WAAA;cAEZ,OAAA,EAAS,yBAAA,EAA2B,MAAA,EAAQ,WAAA;AAAA;AAAA,cAyD7C,iBAAA,SACH,kBAAA,YACG,qBAAA;EAAA,SAEF,YAAA;EAAA,SACA,IAAA;cAEG,OAAA,EAAS,wBAAA;AAAA;AAAA,cAiBV,0BAAA,SACH,kBAAA,YACG,8BAAA;EAAA,SAEF,YAAA,EAAc,sBAAA;EAAA,SACd,YAAA,EAAc,oBAAA;EAAA,SACd,mBAAA;EAAA,SACA,cAAA;EAAA,SACA,aAAA;EAAA,SACA,4BAAA;EAAA,SACA,QAAA,EAAU,OAAA;EAAA,SACV,IAAA;EAhKT;EAAA,gBAmKgB,oBAAA;EAlKhB;EAAA,gBAoKgB,8BAAA;cAEJ,OAAA,EAAS,iCAAA;AAAA;AAAA,iBAoDP,qBAAA,CACd,OAAA,EAAS,kBAAA,GACR,OAAA,IAAW,8BAAA;;;;;;;;;;;iBAcE,aAAA,CACd,IAAA,EAAM,qBAAA,WACL,IAAA,IAAQ,WAAA,CAAY,qBAAA;;;;;;;;UAWN,2BAAA;EA3Of;;;EAAA,SA+OS,4BAAA;AAAA;;;;AAlOX;;;UA2OiB,cAAA,SAAuB,kBAAA;EA3OO;EA6O7C,mBAAA;EA3OA;EA6OA,cAAA;EA7O6B;EA+O7B,aAAA;EA5Oe;EA8Of,4BAAA;;EAEA,QAAA,GAAW,OAAA;AAAA;;;;;;;;;;;;;;;UAiBI,yBAAA;EAAA,KAEb,OAAA,EAAS,IAAA,CAAK,iCAAA;IACZ,QAAA,YAAoB,OAAA,KAAY,OAAA;EAAA,IAEjC,cAAA,GAAiB,2BAAA;EAAA,KACf,OAAA,EAAS,qBAAA,GAAwB,cAAA;AAAA;AA9PvC;;;;;;;;;;;AAAA,cA8XY,cAAA,EAAgB,yBAAA"}

package/dist/v2/runtime/core/runtime.mjs

@@ -1,6 +1,7 @@
 import "reflect-metadata";
 import { __toESM } from "../../../_virtual/_rolldown/runtime.mjs";
-import { require_package } from "../../../package.mjs";
+import { resolveForwardHeadersPolicy } from "../handlers/header-utils.mjs";
+import { require_package } from "../../../runtime/package.mjs";
 import { createLogger } from "../../../lib/logger.mjs";
 import { logRuntimeTelemetryDisclosure } from "../../../lib/telemetry-disclosure.mjs";
 import { DebugEventBus } from "./debug-event-bus.mjs";
@@ -40,6 +41,7 @@ var BaseCopilotRuntime = class {
 		this.resolvedLicenseToken = options.licenseToken ?? process.env.COPILOTKIT_LICENSE_TOKEN;
 		if (this.resolvedLicenseToken) telemetry.setLicenseToken(this.resolvedLicenseToken);
 		if (process.env.NODE_ENV !== "production") this.debugEventBus = new DebugEventBus();
+		this.forwardHeadersPolicy = resolveForwardHeadersPolicy(options.forwardHeaders);
 		this.debug = resolveDebugConfig(options.debug);
 		if (this.debug.enabled) this.debugLogger = createLogger({
 			level: "debug",
@@ -49,6 +51,8 @@ var BaseCopilotRuntime = class {
 };
 var CopilotSseRuntime = class extends BaseCopilotRuntime {
 	constructor(options) {
+		const channels = options.channels;
+		if (Array.isArray(channels) && channels.length > 0) throw new Error("`channels` requires the Intelligence runtime (pass `intelligence`); Intelligence Channels are not available in SSE mode.");
 		super(options, options.runner ?? new InMemoryAgentRunner());
 		this.intelligence = void 0;
 		this.mode = RUNTIME_MODE_SSE;
@@ -76,6 +80,8 @@ var CopilotIntelligenceRuntime = class CopilotIntelligenceRuntime extends BaseCo
 		this.lockTtlSeconds = Math.min(options.lockTtlSeconds ?? 20, CopilotIntelligenceRuntime.MAX_LOCK_TTL_SECONDS);
 		this.lockKeyPrefix = options.lockKeyPrefix;
 		this.lockHeartbeatIntervalSeconds = Math.min(options.lockHeartbeatIntervalSeconds ?? 15, CopilotIntelligenceRuntime.MAX_HEARTBEAT_INTERVAL_SECONDS);
+		this.channels = options.channels ?? [];
+		for (const c of this.channels) if (!c.name) throw new Error("Intelligence Channel is missing a `name` — pass createChannel({ name }) for each Channel in `channels`");
 	}
 };
 function hasIntelligenceOptions(options) {
@@ -100,8 +106,12 @@ function isA2UIEnabled(a2ui) {
 /**
 * Compatibility shim that preserves the legacy `CopilotRuntime` entrypoint.
 * New code should prefer `CopilotSseRuntime` or `CopilotIntelligenceRuntime`.
+*
+* Exported to consumers as the {@link CopilotRuntime} value (typed as
+* {@link CopilotRuntimeConstructor}) rather than as a class, so that the
+* channel-presence brand can flow from construction into the handler type.
 */
-var CopilotRuntime = class {
+var CopilotRuntimeShim = class {
 	constructor(options) {
 		this.delegate = hasIntelligenceOptions(options) ? new CopilotIntelligenceRuntime(options) : new CopilotSseRuntime(options);
 	}
@@ -147,6 +157,9 @@ var CopilotRuntime = class {
 	get lockHeartbeatIntervalSeconds() {
 		return isIntelligenceRuntime(this.delegate) ? this.delegate.lockHeartbeatIntervalSeconds : void 0;
 	}
+	get channels() {
+		return isIntelligenceRuntime(this.delegate) ? this.delegate.channels : void 0;
+	}
 	get mode() {
 		return this.delegate.mode;
 	}
@@ -162,7 +175,22 @@ var CopilotRuntime = class {
 	get debugLogger() {
 		return this.delegate.debugLogger;
 	}
+	get forwardHeadersPolicy() {
+		return this.delegate.forwardHeadersPolicy;
+	}
 };
+/**
+* The public `CopilotRuntime` constructor. Backed by {@link CopilotRuntimeShim}
+* but typed as {@link CopilotRuntimeConstructor} so that constructing with a
+* non-empty `channels` array yields a {@link RuntimeWithDeclaredChannels}-branded
+* runtime type.
+*
+* The `as unknown as` cast is required (not dishonest widening): the brand is a
+* phantom, compile-time-only marker with no runtime representation, so the shim
+* instances legitimately do not carry the brand property. Behavior is identical
+* to the former `class CopilotRuntime` — this only refines the static type.
+*/
+const CopilotRuntime = CopilotRuntimeShim;
 
 //#endregion
 export { CopilotIntelligenceRuntime, CopilotRuntime, CopilotSseRuntime, VERSION, isA2UIEnabled, isIntelligenceRuntime, resolveAgents };

package/dist/v2/runtime/core/runtime.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.mjs","names":["pkg"],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"sourcesContent":["import type {\n  MaybePromise,\n  NonEmptyRecord,\n  RuntimeMode,\n} from \"@copilotkit/shared\";\nimport {\n  RUNTIME_MODE_SSE,\n  RUNTIME_MODE_INTELLIGENCE,\n} from \"@copilotkit/shared\";\nimport { createLicenseChecker } from \"@copilotkit/license-verifier\";\nimport type { LicenseChecker } from \"@copilotkit/license-verifier\";\nimport { resolveDebugConfig } from \"@copilotkit/shared\";\nimport type { ResolvedDebugConfig, DebugConfig } from \"@copilotkit/shared\";\nimport type { AbstractAgent } from \"@ag-ui/client\";\nimport type { MCPClientConfig } from \"@ag-ui/mcp-apps-middleware\";\nimport type { A2UIMiddlewareConfig } from \"@ag-ui/a2ui-middleware\";\nimport pkg from \"../../../../package.json\";\nimport type {\n  BeforeRequestMiddleware,\n  AfterRequestMiddleware,\n} from \"./middleware\";\nimport { createLogger } from \"../../../lib/logger\";\nimport type { CopilotRuntimeLogger } from \"../../../lib/logger\";\nimport { logRuntimeTelemetryDisclosure } from \"../../../lib/telemetry-disclosure\";\nimport type { TranscriptionService } from \"../transcription-service/transcription-service\";\nimport { DebugEventBus } from \"./debug-event-bus\";\nimport type { AgentRunner } from \"../runner/agent-runner\";\nimport { InMemoryAgentRunner } from \"../runner/in-memory\";\nimport { IntelligenceAgentRunner } from \"../runner/intelligence\";\nimport type { CopilotKitIntelligence } from \"../intelligence-platform\";\nimport telemetry from \"../telemetry/telemetry-client\";\n\nexport const VERSION = pkg.version;\n\ninterface BaseCopilotRuntimeMiddlewareOptions {\n  /** If set, middleware only applies to these named agents. Applies to all agents if omitted. */\n  agents?: string[];\n}\n\nexport type McpAppsServerConfig = MCPClientConfig & {\n  /** Agent to bind this server to. If omitted, the server is available to all agents. */\n  agentId?: string;\n};\n\nexport interface McpAppsConfig {\n  /** List of MCP server configurations. */\n  servers: McpAppsServerConfig[];\n}\n\nexport interface OpenGenerativeUIOptions extends BaseCopilotRuntimeMiddlewareOptions {}\n\nexport type OpenGenerativeUIConfig = boolean | OpenGenerativeUIOptions;\n\ninterface CopilotRuntimeMiddlewares {\n  /**\n   * Auto-apply A2UIMiddleware to agents at run time.\n   * Pass an object to enable and customise behaviour, or omit to disable.\n   */\n  a2ui?: BaseCopilotRuntimeMiddlewareOptions &\n    A2UIMiddlewareConfig & {\n      /**\n       * Explicit on/off switch. Omit (or set `true`) to enable; set `false`\n       * to disable A2UI for this runtime while keeping the rest of the config\n       * (e.g. a `schema`/`catalog`) in place. A bare `a2ui: {}` stays enabled\n       * for backwards compatibility.\n       */\n      enabled?: boolean;\n    };\n  /** Auto-apply MCPAppsMiddleware to agents at run time. */\n  mcpApps?: McpAppsConfig;\n  /** Auto-apply OpenGenerativeUIMiddleware to agents at run time. */\n  openGenerativeUI?: OpenGenerativeUIConfig;\n}\n\n/**\n * Context passed to agent factory functions for per-request agent resolution.\n */\nexport interface AgentFactoryContext {\n  /** The incoming HTTP request. */\n  request: Request;\n}\n\n/**\n * A function that dynamically creates agents on a per-request basis.\n * Useful for multi-tenant scenarios or request-scoped agent configuration.\n */\nexport type AgentsFactory = (\n  ctx: AgentFactoryContext,\n) => MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>;\n\n/**\n * Agents can be provided as:\n * - A static record of agents\n * - A Promise that resolves to a record of agents\n * - A factory function that receives request context and returns agents (or a Promise of agents)\n */\nexport type AgentsConfig =\n  | MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>\n  | AgentsFactory;\n\n/**\n * Resolve an AgentsConfig value to a concrete record of agents.\n * If the config is a factory function, it is called with the given request context.\n * Otherwise it is awaited directly (static record or Promise).\n */\nexport async function resolveAgents(\n  agents: AgentsConfig,\n  request?: Request,\n): Promise<Record<string, AbstractAgent>> {\n  if (typeof agents === \"function\") {\n    if (!request) {\n      throw new Error(\n        \"Agent factory function requires a request context, but none was provided.\",\n      );\n    }\n    return agents({ request });\n  }\n  return agents;\n}\n\ninterface BaseCopilotRuntimeOptions extends CopilotRuntimeMiddlewares {\n  /**\n   * Map of available agents, or a factory function for per-request agent resolution.\n   *\n   * Static record:\n   * ```ts\n   * agents: { support: new SupportAgent(), technical: new TechnicalAgent() }\n   * ```\n   *\n   * Factory function (called per-request):\n   * ```ts\n   * agents: ({ request }) => {\n   *   const tenantId = request.headers.get(\"x-tenant-id\");\n   *   return { default: createAgentForTenant(tenantId) };\n   * }\n   * ```\n   */\n  agents: AgentsConfig;\n  /** Optional transcription service for audio processing. */\n  transcriptionService?: TranscriptionService;\n  /** Optional *before* middleware – callback function or webhook URL. */\n  beforeRequestMiddleware?: BeforeRequestMiddleware;\n  /** Optional *after* middleware – callback function or webhook URL. */\n  afterRequestMiddleware?: AfterRequestMiddleware;\n  /** Signed license token for server-side feature verification. Falls back to COPILOTKIT_LICENSE_TOKEN env var. */\n  licenseToken?: string;\n  /** Enable debug logging for the event pipeline. */\n  debug?: DebugConfig;\n}\n\nexport interface CopilotRuntimeUser {\n  id: string;\n  name: string;\n}\n\nexport type IdentifyUserCallback = (\n  request: Request,\n) => MaybePromise<CopilotRuntimeUser>;\n\nexport interface CopilotSseRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** The runner to use for running agents in SSE mode. */\n  runner?: AgentRunner;\n  intelligence?: undefined;\n  generateThreadNames?: undefined;\n}\n\nexport interface CopilotIntelligenceRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** Configures Intelligence mode for durable threads and realtime events. */\n  intelligence: CopilotKitIntelligence;\n  /** Resolves the authenticated user for intelligence requests. */\n  identifyUser: IdentifyUserCallback;\n  /** Auto-generate short names for newly created threads. */\n  generateThreadNames?: boolean;\n  /** Max delay (ms) for WebSocket reconnect backoff. @default 10_000 */\n  maxReconnectMs?: number;\n  /** Max delay (ms) for channel rejoin backoff. @default 30_000 */\n  maxRejoinMs?: number;\n  /** Lock TTL in seconds. Clamped to a maximum of 3600 (1 hour). @default 20 */\n  lockTtlSeconds?: number;\n  /** Custom Redis key prefix for the thread lock. */\n  lockKeyPrefix?: string;\n  /** Interval in seconds at which the runtime renews the thread lock. Clamped to a maximum of 3000 (50 minutes). @default 15 */\n  lockHeartbeatIntervalSeconds?: number;\n}\n\nexport type CopilotRuntimeOptions =\n  | CopilotSseRuntimeOptions\n  | CopilotIntelligenceRuntimeOptions;\n\nexport interface CopilotRuntimeLike {\n  agents: CopilotRuntimeOptions[\"agents\"];\n  transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  runner: AgentRunner;\n  a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  intelligence?: CopilotKitIntelligence;\n  identifyUser?: IdentifyUserCallback;\n  mode: RuntimeMode;\n  licenseChecker?: LicenseChecker;\n  debugEventBus?: DebugEventBus;\n  debug: ResolvedDebugConfig;\n  debugLogger?: CopilotRuntimeLogger;\n}\n\nexport interface CopilotSseRuntimeLike extends CopilotRuntimeLike {\n  intelligence?: undefined;\n  mode: typeof RUNTIME_MODE_SSE;\n}\n\nexport interface CopilotIntelligenceRuntimeLike extends CopilotRuntimeLike {\n  intelligence: CopilotKitIntelligence;\n  identifyUser: IdentifyUserCallback;\n  generateThreadNames: boolean;\n  lockTtlSeconds: number;\n  lockKeyPrefix?: string;\n  lockHeartbeatIntervalSeconds: number;\n  mode: typeof RUNTIME_MODE_INTELLIGENCE;\n}\n\nabstract class BaseCopilotRuntime implements CopilotRuntimeLike {\n  public agents: CopilotRuntimeOptions[\"agents\"];\n  public transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  public beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  public afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  public runner: AgentRunner;\n  public a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  public mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  public openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  public licenseChecker?: LicenseChecker;\n  public readonly debugEventBus?: DebugEventBus;\n  public debug: ResolvedDebugConfig;\n  public debugLogger?: CopilotRuntimeLogger;\n\n  /**\n   * License token resolved once with the env fallback, so telemetry\n   * attribution (below) and subclass feature gating\n   * (CopilotIntelligenceRuntime's licenseChecker) read the exact same value\n   * instead of each re-applying `?? COPILOTKIT_LICENSE_TOKEN`.\n   */\n  protected readonly resolvedLicenseToken?: string;\n\n  abstract readonly intelligence?: CopilotKitIntelligence;\n  abstract readonly mode: RuntimeMode;\n\n  constructor(options: BaseCopilotRuntimeOptions, runner: AgentRunner) {\n    logRuntimeTelemetryDisclosure();\n\n    const {\n      agents,\n      transcriptionService,\n      beforeRequestMiddleware,\n      afterRequestMiddleware,\n      a2ui,\n      mcpApps,\n      openGenerativeUI,\n    } = options;\n\n    this.agents = agents;\n    this.transcriptionService = transcriptionService;\n    this.beforeRequestMiddleware = beforeRequestMiddleware;\n    this.afterRequestMiddleware = afterRequestMiddleware;\n    this.a2ui = a2ui || undefined;\n    this.mcpApps = mcpApps;\n    this.openGenerativeUI = openGenerativeUI;\n    this.runner = runner;\n\n    // Resolve the license token once (matching the license-verifier's env\n    // fallback) so telemetry attribution and subclass feature gating share\n    // one value.\n    this.resolvedLicenseToken =\n      options.licenseToken ?? process.env.COPILOTKIT_LICENSE_TOKEN;\n\n    // Attribute telemetry to the licensed customer for *every* runtime mode.\n    // Done in the shared base (not the subclasses) so SSE and Intelligence\n    // runtimes behave identically — previously only CopilotIntelligenceRuntime\n    // set this, so self-hosted SSE users never got a telemetry_id on their\n    // runtime events even with a license token configured.\n    if (this.resolvedLicenseToken) {\n      telemetry.setLicenseToken(this.resolvedLicenseToken);\n    }\n\n    if (process.env.NODE_ENV !== \"production\") {\n      this.debugEventBus = new DebugEventBus();\n    }\n    this.debug = resolveDebugConfig(options.debug);\n    if (this.debug.enabled) {\n      this.debugLogger = createLogger({\n        level: \"debug\",\n        component: \"copilotkit-debug\",\n      });\n    }\n  }\n}\n\nexport class CopilotSseRuntime\n  extends BaseCopilotRuntime\n  implements CopilotSseRuntimeLike\n{\n  readonly intelligence = undefined;\n  readonly mode = RUNTIME_MODE_SSE;\n\n  constructor(options: CopilotSseRuntimeOptions) {\n    super(options, options.runner ?? new InMemoryAgentRunner());\n  }\n}\n\nexport class CopilotIntelligenceRuntime\n  extends BaseCopilotRuntime\n  implements CopilotIntelligenceRuntimeLike\n{\n  readonly intelligence: CopilotKitIntelligence;\n  readonly identifyUser: IdentifyUserCallback;\n  readonly generateThreadNames: boolean;\n  readonly lockTtlSeconds: number;\n  readonly lockKeyPrefix?: string;\n  readonly lockHeartbeatIntervalSeconds: number;\n  readonly mode = RUNTIME_MODE_INTELLIGENCE;\n\n  /** Maximum allowed lock TTL in seconds (1 hour). */\n  static readonly MAX_LOCK_TTL_SECONDS = 3_600;\n  /** Maximum allowed heartbeat interval in seconds (50 minutes). */\n  static readonly MAX_HEARTBEAT_INTERVAL_SECONDS = 3_000;\n\n  constructor(options: CopilotIntelligenceRuntimeOptions) {\n    super(\n      options,\n      new IntelligenceAgentRunner({\n        url: options.intelligence.ɵgetRunnerWsUrl(),\n        authToken: options.intelligence.ɵgetRunnerAuthToken(),\n        maxReconnectMs: options.maxReconnectMs,\n        maxRejoinMs: options.maxRejoinMs,\n      }),\n    );\n    this.intelligence = options.intelligence;\n    this.identifyUser = options.identifyUser;\n    this.generateThreadNames = options.generateThreadNames ?? true;\n    // Telemetry attribution is handled by the base constructor for all modes;\n    // here we only need the token for feature gating. Reuse the base-resolved\n    // value so gating and attribution can never disagree.\n    this.licenseChecker = createLicenseChecker(this.resolvedLicenseToken);\n    this.lockTtlSeconds = Math.min(\n      options.lockTtlSeconds ?? 20,\n      CopilotIntelligenceRuntime.MAX_LOCK_TTL_SECONDS,\n    );\n    this.lockKeyPrefix = options.lockKeyPrefix;\n    this.lockHeartbeatIntervalSeconds = Math.min(\n      options.lockHeartbeatIntervalSeconds ?? 15,\n      CopilotIntelligenceRuntime.MAX_HEARTBEAT_INTERVAL_SECONDS,\n    );\n  }\n}\n\nfunction hasIntelligenceOptions(\n  options: CopilotRuntimeOptions,\n): options is CopilotIntelligenceRuntimeOptions {\n  return \"intelligence\" in options && !!options.intelligence;\n}\n\nexport function isIntelligenceRuntime(\n  runtime: CopilotRuntimeLike,\n): runtime is CopilotIntelligenceRuntimeLike {\n  return runtime.mode === RUNTIME_MODE_INTELLIGENCE && !!runtime.intelligence;\n}\n\n/**\n * Single source of truth for \"is A2UI on for this runtime?\". Both the run path\n * (which applies `A2UIMiddleware`) and the `/info` response (which tells the\n * client whether to mount the A2UI renderer + catalog context) MUST go through\n * this, so they can never disagree — the divergence between them was the root\n * of CopilotKit/CopilotKit#5369.\n *\n * Backwards compatible: any config object is enabled (matching the historical\n * `!!runtime.a2ui`); only an explicit `enabled: false` turns it off.\n */\nexport function isA2UIEnabled(\n  a2ui: CopilotRuntimeOptions[\"a2ui\"],\n): a2ui is NonNullable<CopilotRuntimeOptions[\"a2ui\"]> {\n  return !!a2ui && a2ui.enabled !== false;\n}\n\n/**\n * Compatibility shim that preserves the legacy `CopilotRuntime` entrypoint.\n * New code should prefer `CopilotSseRuntime` or `CopilotIntelligenceRuntime`.\n */\nexport class CopilotRuntime implements CopilotRuntimeLike {\n  private delegate: CopilotRuntimeLike;\n\n  constructor(options: CopilotRuntimeOptions) {\n    this.delegate = hasIntelligenceOptions(options)\n      ? new CopilotIntelligenceRuntime(options)\n      : new CopilotSseRuntime(options);\n  }\n\n  get agents(): CopilotRuntimeOptions[\"agents\"] {\n    return this.delegate.agents;\n  }\n\n  get transcriptionService(): CopilotRuntimeOptions[\"transcriptionService\"] {\n    return this.delegate.transcriptionService;\n  }\n\n  get beforeRequestMiddleware(): CopilotRuntimeOptions[\"beforeRequestMiddleware\"] {\n    return this.delegate.beforeRequestMiddleware;\n  }\n\n  get afterRequestMiddleware(): CopilotRuntimeOptions[\"afterRequestMiddleware\"] {\n    return this.delegate.afterRequestMiddleware;\n  }\n\n  get runner(): AgentRunner {\n    return this.delegate.runner;\n  }\n\n  get a2ui(): CopilotRuntimeOptions[\"a2ui\"] {\n    return this.delegate.a2ui;\n  }\n\n  get mcpApps(): CopilotRuntimeOptions[\"mcpApps\"] {\n    return this.delegate.mcpApps;\n  }\n\n  get openGenerativeUI(): CopilotRuntimeOptions[\"openGenerativeUI\"] {\n    return this.delegate.openGenerativeUI;\n  }\n\n  get intelligence(): CopilotKitIntelligence | undefined {\n    return this.delegate.intelligence;\n  }\n\n  get generateThreadNames(): boolean | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.generateThreadNames\n      : undefined;\n  }\n\n  get identifyUser(): IdentifyUserCallback | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.identifyUser\n      : undefined;\n  }\n\n  get lockTtlSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockTtlSeconds\n      : undefined;\n  }\n\n  get lockKeyPrefix(): string | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockKeyPrefix\n      : undefined;\n  }\n\n  get lockHeartbeatIntervalSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockHeartbeatIntervalSeconds\n      : undefined;\n  }\n\n  get mode(): RuntimeMode {\n    return this.delegate.mode;\n  }\n\n  get licenseChecker() {\n    return this.delegate.licenseChecker;\n  }\n\n  get debugEventBus() {\n    return this.delegate.debugEventBus;\n  }\n\n  get debug(): ResolvedDebugConfig {\n    return this.delegate.debug;\n  }\n\n  get debugLogger(): CopilotRuntimeLogger | undefined {\n    return this.delegate.debugLogger;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAgCA,MAAa,UAAUA,uBAAI;;;;;;AAyE3B,eAAsB,cACpB,QACA,SACwC;AACxC,KAAI,OAAO,WAAW,YAAY;AAChC,MAAI,CAAC,QACH,OAAM,IAAI,MACR,4EACD;AAEH,SAAO,OAAO,EAAE,SAAS,CAAC;;AAE5B,QAAO;;AAyGT,IAAe,qBAAf,MAAgE;CAyB9D,YAAY,SAAoC,QAAqB;AACnE,iCAA+B;EAE/B,MAAM,EACJ,QACA,sBACA,yBACA,wBACA,MACA,SACA,qBACE;AAEJ,OAAK,SAAS;AACd,OAAK,uBAAuB;AAC5B,OAAK,0BAA0B;AAC/B,OAAK,yBAAyB;AAC9B,OAAK,OAAO,QAAQ;AACpB,OAAK,UAAU;AACf,OAAK,mBAAmB;AACxB,OAAK,SAAS;AAKd,OAAK,uBACH,QAAQ,gBAAgB,QAAQ,IAAI;AAOtC,MAAI,KAAK,qBACP,WAAU,gBAAgB,KAAK,qBAAqB;AAGtD,MAAI,QAAQ,IAAI,aAAa,aAC3B,MAAK,gBAAgB,IAAI,eAAe;AAE1C,OAAK,QAAQ,mBAAmB,QAAQ,MAAM;AAC9C,MAAI,KAAK,MAAM,QACb,MAAK,cAAc,aAAa;GAC9B,OAAO;GACP,WAAW;GACZ,CAAC;;;AAKR,IAAa,oBAAb,cACU,mBAEV;CAIE,YAAY,SAAmC;AAC7C,QAAM,SAAS,QAAQ,UAAU,IAAI,qBAAqB,CAAC;sBAJrC;cACR;;;AAOlB,IAAa,6BAAb,MAAa,mCACH,mBAEV;;8BAUyC;;;wCAEU;;CAEjD,YAAY,SAA4C;AACtD,QACE,SACA,IAAI,wBAAwB;GAC1B,KAAK,QAAQ,aAAa,iBAAiB;GAC3C,WAAW,QAAQ,aAAa,qBAAqB;GACrD,gBAAgB,QAAQ;GACxB,aAAa,QAAQ;GACtB,CAAC,CACH;cAhBa;AAiBd,OAAK,eAAe,QAAQ;AAC5B,OAAK,eAAe,QAAQ;AAC5B,OAAK,sBAAsB,QAAQ,uBAAuB;AAI1D,OAAK,iBAAiB,qBAAqB,KAAK,qBAAqB;AACrE,OAAK,iBAAiB,KAAK,IACzB,QAAQ,kBAAkB,IAC1B,2BAA2B,qBAC5B;AACD,OAAK,gBAAgB,QAAQ;AAC7B,OAAK,+BAA+B,KAAK,IACvC,QAAQ,gCAAgC,IACxC,2BAA2B,+BAC5B;;;AAIL,SAAS,uBACP,SAC8C;AAC9C,QAAO,kBAAkB,WAAW,CAAC,CAAC,QAAQ;;AAGhD,SAAgB,sBACd,SAC2C;AAC3C,QAAO,QAAQ,SAAS,6BAA6B,CAAC,CAAC,QAAQ;;;;;;;;;;;;AAajE,SAAgB,cACd,MACoD;AACpD,QAAO,CAAC,CAAC,QAAQ,KAAK,YAAY;;;;;;AAOpC,IAAa,iBAAb,MAA0D;CAGxD,YAAY,SAAgC;AAC1C,OAAK,WAAW,uBAAuB,QAAQ,GAC3C,IAAI,2BAA2B,QAAQ,GACvC,IAAI,kBAAkB,QAAQ;;CAGpC,IAAI,SAA0C;AAC5C,SAAO,KAAK,SAAS;;CAGvB,IAAI,uBAAsE;AACxE,SAAO,KAAK,SAAS;;CAGvB,IAAI,0BAA4E;AAC9E,SAAO,KAAK,SAAS;;CAGvB,IAAI,yBAA0E;AAC5E,SAAO,KAAK,SAAS;;CAGvB,IAAI,SAAsB;AACxB,SAAO,KAAK,SAAS;;CAGvB,IAAI,OAAsC;AACxC,SAAO,KAAK,SAAS;;CAGvB,IAAI,UAA4C;AAC9C,SAAO,KAAK,SAAS;;CAGvB,IAAI,mBAA8D;AAChE,SAAO,KAAK,SAAS;;CAGvB,IAAI,eAAmD;AACrD,SAAO,KAAK,SAAS;;CAGvB,IAAI,sBAA2C;AAC7C,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,sBACd;;CAGN,IAAI,eAAiD;AACnD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,eACd;;CAGN,IAAI,iBAAqC;AACvC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,iBACd;;CAGN,IAAI,gBAAoC;AACtC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,gBACd;;CAGN,IAAI,+BAAmD;AACrD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,+BACd;;CAGN,IAAI,OAAoB;AACtB,SAAO,KAAK,SAAS;;CAGvB,IAAI,iBAAiB;AACnB,SAAO,KAAK,SAAS;;CAGvB,IAAI,gBAAgB;AAClB,SAAO,KAAK,SAAS;;CAGvB,IAAI,QAA6B;AAC/B,SAAO,KAAK,SAAS;;CAGvB,IAAI,cAAgD;AAClD,SAAO,KAAK,SAAS"}
+{"version":3,"file":"runtime.mjs","names":["pkg"],"sources":["../../../../src/v2/runtime/core/runtime.ts"],"sourcesContent":["import type {\n  MaybePromise,\n  NonEmptyRecord,\n  RuntimeMode,\n} from \"@copilotkit/shared\";\nimport {\n  RUNTIME_MODE_SSE,\n  RUNTIME_MODE_INTELLIGENCE,\n} from \"@copilotkit/shared\";\nimport { createLicenseChecker } from \"@copilotkit/license-verifier\";\nimport type { LicenseChecker } from \"@copilotkit/license-verifier\";\nimport { resolveDebugConfig } from \"@copilotkit/shared\";\nimport type { ResolvedDebugConfig, DebugConfig } from \"@copilotkit/shared\";\nimport { resolveForwardHeadersPolicy } from \"../handlers/header-utils\";\nimport type {\n  ForwardHeadersConfig,\n  ResolvedForwardHeadersPolicy,\n} from \"../handlers/header-utils\";\nimport type { AbstractAgent } from \"@ag-ui/client\";\nimport type { MCPClientConfig } from \"@ag-ui/mcp-apps-middleware\";\nimport type { A2UIMiddlewareConfig } from \"@ag-ui/a2ui-middleware\";\nimport pkg from \"../../../../package.json\";\nimport type {\n  BeforeRequestMiddleware,\n  AfterRequestMiddleware,\n} from \"./middleware\";\nimport { createLogger } from \"../../../lib/logger\";\nimport type { CopilotRuntimeLogger } from \"../../../lib/logger\";\nimport { logRuntimeTelemetryDisclosure } from \"../../../lib/telemetry-disclosure\";\nimport type { TranscriptionService } from \"../transcription-service/transcription-service\";\nimport { DebugEventBus } from \"./debug-event-bus\";\nimport type { AgentRunner } from \"../runner/agent-runner\";\nimport { InMemoryAgentRunner } from \"../runner/in-memory\";\nimport { IntelligenceAgentRunner } from \"../runner/intelligence\";\nimport type { CopilotKitIntelligence } from \"../intelligence-platform\";\n// Type-only: @copilotkit/channels-core is the pure-ESM type source, so a value import would break this\n// package's CJS output. The channels are validated + activated (wired to delivery\n// transports) by `startChannels` from @copilotkit/channels-intelligence, called\n// by the Channel-listener bootstrap — not here.\nimport type { Channel } from \"@copilotkit/channels-core\";\nimport telemetry from \"../telemetry/telemetry-client\";\n\nexport const VERSION = pkg.version;\n\ninterface BaseCopilotRuntimeMiddlewareOptions {\n  /** If set, middleware only applies to these named agents. Applies to all agents if omitted. */\n  agents?: string[];\n}\n\nexport type McpAppsServerConfig = MCPClientConfig & {\n  /** Agent to bind this server to. If omitted, the server is available to all agents. */\n  agentId?: string;\n};\n\nexport interface McpAppsConfig {\n  /** List of MCP server configurations. */\n  servers: McpAppsServerConfig[];\n}\n\nexport interface OpenGenerativeUIOptions extends BaseCopilotRuntimeMiddlewareOptions {}\n\nexport type OpenGenerativeUIConfig = boolean | OpenGenerativeUIOptions;\n\ninterface CopilotRuntimeMiddlewares {\n  /**\n   * Auto-apply A2UIMiddleware to agents at run time.\n   * Pass an object to enable and customise behaviour, or omit to disable.\n   */\n  a2ui?: BaseCopilotRuntimeMiddlewareOptions &\n    A2UIMiddlewareConfig & {\n      /**\n       * Explicit on/off switch. Omit (or set `true`) to enable; set `false`\n       * to disable A2UI for this runtime while keeping the rest of the config\n       * (e.g. a `schema`/`catalog`) in place. A bare `a2ui: {}` stays enabled\n       * for backwards compatibility.\n       */\n      enabled?: boolean;\n    };\n  /** Auto-apply MCPAppsMiddleware to agents at run time. */\n  mcpApps?: McpAppsConfig;\n  /** Auto-apply OpenGenerativeUIMiddleware to agents at run time. */\n  openGenerativeUI?: OpenGenerativeUIConfig;\n}\n\n/**\n * Context passed to agent factory functions for per-request agent resolution.\n */\nexport interface AgentFactoryContext {\n  /** The incoming HTTP request. */\n  request: Request;\n}\n\n/**\n * A function that dynamically creates agents on a per-request basis.\n * Useful for multi-tenant scenarios or request-scoped agent configuration.\n */\nexport type AgentsFactory = (\n  ctx: AgentFactoryContext,\n) => MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>;\n\n/**\n * Agents can be provided as:\n * - A static record of agents\n * - A Promise that resolves to a record of agents\n * - A factory function that receives request context and returns agents (or a Promise of agents)\n */\nexport type AgentsConfig =\n  | MaybePromise<NonEmptyRecord<Record<string, AbstractAgent>>>\n  | AgentsFactory;\n\n/**\n * Resolve an AgentsConfig value to a concrete record of agents.\n * If the config is a factory function, it is called with the given request context.\n * Otherwise it is awaited directly (static record or Promise).\n */\nexport async function resolveAgents(\n  agents: AgentsConfig,\n  request?: Request,\n): Promise<Record<string, AbstractAgent>> {\n  if (typeof agents === \"function\") {\n    if (!request) {\n      throw new Error(\n        \"Agent factory function requires a request context, but none was provided.\",\n      );\n    }\n    return agents({ request });\n  }\n  return agents;\n}\n\ninterface BaseCopilotRuntimeOptions extends CopilotRuntimeMiddlewares {\n  /**\n   * Map of available agents, or a factory function for per-request agent resolution.\n   *\n   * Static record:\n   * ```ts\n   * agents: { support: new SupportAgent(), technical: new TechnicalAgent() }\n   * ```\n   *\n   * Factory function (called per-request):\n   * ```ts\n   * agents: ({ request }) => {\n   *   const tenantId = request.headers.get(\"x-tenant-id\");\n   *   return { default: createAgentForTenant(tenantId) };\n   * }\n   * ```\n   */\n  agents: AgentsConfig;\n  /** Optional transcription service for audio processing. */\n  transcriptionService?: TranscriptionService;\n  /** Optional *before* middleware – callback function or webhook URL. */\n  beforeRequestMiddleware?: BeforeRequestMiddleware;\n  /** Optional *after* middleware – callback function or webhook URL. */\n  afterRequestMiddleware?: AfterRequestMiddleware;\n  /** Signed license token for server-side feature verification. Falls back to COPILOTKIT_LICENSE_TOKEN env var. */\n  licenseToken?: string;\n  /** Enable debug logging for the event pipeline. */\n  debug?: DebugConfig;\n  /**\n   * Policy controlling which inbound HTTP headers are forwarded onto the\n   * outgoing agent call. By default a built-in denylist strips known\n   * infrastructure/proxy/platform headers (`x-forwarded-*`, `x-real-ip`,\n   * `x-vercel-*`, `x-copilotcloud-*`, etc.) while `authorization` and custom\n   * `x-*` application headers continue to forward (#5712). Set\n   * `{ useDefaultDenylist: false }` to restore the previous wide-open behavior.\n   */\n  forwardHeaders?: ForwardHeadersConfig;\n}\n\nexport interface CopilotRuntimeUser {\n  id: string;\n  name: string;\n}\n\nexport type IdentifyUserCallback = (\n  request: Request,\n) => MaybePromise<CopilotRuntimeUser>;\n\nexport interface CopilotSseRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** The runner to use for running agents in SSE mode. */\n  runner?: AgentRunner;\n  intelligence?: undefined;\n  generateThreadNames?: undefined;\n  /** Intelligence Channels require the Intelligence runtime; not available in SSE mode. */\n  channels?: undefined;\n}\n\nexport interface CopilotIntelligenceRuntimeOptions extends BaseCopilotRuntimeOptions {\n  /** Configures Intelligence mode for durable threads and realtime events. */\n  intelligence: CopilotKitIntelligence;\n  /** Resolves the authenticated user for intelligence requests. */\n  identifyUser: IdentifyUserCallback;\n  /** Auto-generate short names for newly created threads. */\n  generateThreadNames?: boolean;\n  /** Max delay (ms) for WebSocket reconnect backoff. @default 10_000 */\n  maxReconnectMs?: number;\n  /** Max delay (ms) for channel rejoin backoff. @default 30_000 */\n  maxRejoinMs?: number;\n  /** Lock TTL in seconds. Clamped to a maximum of 3600 (1 hour). @default 20 */\n  lockTtlSeconds?: number;\n  /** Custom Redis key prefix for the thread lock. */\n  lockKeyPrefix?: string;\n  /** Interval in seconds at which the runtime renews the thread lock. Clamped to a maximum of 3000 (50 minutes). @default 15 */\n  lockHeartbeatIntervalSeconds?: number;\n  /**\n   * Intelligence Channels declared by this runtime. Each is a\n   * `createChannel({ name })` instance. Only available on the Intelligence runtime\n   * path. Names are validated (required, lowercase kebab-case, unique) and wired\n   * to delivery/egress transports when activated via `startChannels` from\n   * `@copilotkit/channels-intelligence` — not at construction.\n   */\n  channels?: Channel[];\n}\n\nexport type CopilotRuntimeOptions =\n  | CopilotSseRuntimeOptions\n  | CopilotIntelligenceRuntimeOptions;\n\nexport interface CopilotRuntimeLike {\n  agents: CopilotRuntimeOptions[\"agents\"];\n  transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  runner: AgentRunner;\n  a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  intelligence?: CopilotKitIntelligence;\n  identifyUser?: IdentifyUserCallback;\n  mode: RuntimeMode;\n  licenseChecker?: LicenseChecker;\n  debugEventBus?: DebugEventBus;\n  debug: ResolvedDebugConfig;\n  debugLogger?: CopilotRuntimeLogger;\n  /**\n   * Resolved inbound-header forwarding policy read by the /run and /connect call\n   * sites. Optional on the published interface so an external `CopilotRuntimeLike`\n   * implementor predating this field stays source-compatible (non-breaking minor\n   * release). Concrete runtimes (`BaseCopilotRuntime`) always resolve and set it;\n   * the call sites coalesce a missing value to the default resolved policy\n   * (`resolveForwardHeadersPolicy(undefined)` — default-on denylist).\n   */\n  forwardHeadersPolicy?: ResolvedForwardHeadersPolicy;\n}\n\nexport interface CopilotSseRuntimeLike extends CopilotRuntimeLike {\n  intelligence?: undefined;\n  mode: typeof RUNTIME_MODE_SSE;\n}\n\nexport interface CopilotIntelligenceRuntimeLike extends CopilotRuntimeLike {\n  intelligence: CopilotKitIntelligence;\n  identifyUser: IdentifyUserCallback;\n  generateThreadNames: boolean;\n  lockTtlSeconds: number;\n  lockKeyPrefix?: string;\n  lockHeartbeatIntervalSeconds: number;\n  channels: Channel[];\n  mode: typeof RUNTIME_MODE_INTELLIGENCE;\n}\n\nabstract class BaseCopilotRuntime implements CopilotRuntimeLike {\n  public agents: CopilotRuntimeOptions[\"agents\"];\n  public transcriptionService: CopilotRuntimeOptions[\"transcriptionService\"];\n  public beforeRequestMiddleware: CopilotRuntimeOptions[\"beforeRequestMiddleware\"];\n  public afterRequestMiddleware: CopilotRuntimeOptions[\"afterRequestMiddleware\"];\n  public runner: AgentRunner;\n  public a2ui: CopilotRuntimeOptions[\"a2ui\"];\n  public mcpApps: CopilotRuntimeOptions[\"mcpApps\"];\n  public openGenerativeUI: CopilotRuntimeOptions[\"openGenerativeUI\"];\n  public licenseChecker?: LicenseChecker;\n  public readonly debugEventBus?: DebugEventBus;\n  public debug: ResolvedDebugConfig;\n  public debugLogger?: CopilotRuntimeLogger;\n  public readonly forwardHeadersPolicy: ResolvedForwardHeadersPolicy;\n\n  /**\n   * License token resolved once with the env fallback, so telemetry\n   * attribution (below) and subclass feature gating\n   * (CopilotIntelligenceRuntime's licenseChecker) read the exact same value\n   * instead of each re-applying `?? COPILOTKIT_LICENSE_TOKEN`.\n   */\n  protected readonly resolvedLicenseToken?: string;\n\n  abstract readonly intelligence?: CopilotKitIntelligence;\n  abstract readonly mode: RuntimeMode;\n\n  constructor(options: BaseCopilotRuntimeOptions, runner: AgentRunner) {\n    logRuntimeTelemetryDisclosure();\n\n    const {\n      agents,\n      transcriptionService,\n      beforeRequestMiddleware,\n      afterRequestMiddleware,\n      a2ui,\n      mcpApps,\n      openGenerativeUI,\n    } = options;\n\n    this.agents = agents;\n    this.transcriptionService = transcriptionService;\n    this.beforeRequestMiddleware = beforeRequestMiddleware;\n    this.afterRequestMiddleware = afterRequestMiddleware;\n    this.a2ui = a2ui || undefined;\n    this.mcpApps = mcpApps;\n    this.openGenerativeUI = openGenerativeUI;\n    this.runner = runner;\n\n    // Resolve the license token once (matching the license-verifier's env\n    // fallback) so telemetry attribution and subclass feature gating share\n    // one value.\n    this.resolvedLicenseToken =\n      options.licenseToken ?? process.env.COPILOTKIT_LICENSE_TOKEN;\n\n    // Attribute telemetry to the licensed customer for *every* runtime mode.\n    // Done in the shared base (not the subclasses) so SSE and Intelligence\n    // runtimes behave identically — previously only CopilotIntelligenceRuntime\n    // set this, so self-hosted SSE users never got a telemetry_id on their\n    // runtime events even with a license token configured.\n    if (this.resolvedLicenseToken) {\n      telemetry.setLicenseToken(this.resolvedLicenseToken);\n    }\n\n    if (process.env.NODE_ENV !== \"production\") {\n      this.debugEventBus = new DebugEventBus();\n    }\n    // Resolve the inbound-header forwarding policy once (mirroring the\n    // `debug` → `ResolvedDebugConfig` resolve-once above) so both the /run and\n    // /connect call sites read the exact same resolved policy off the runtime\n    // and can never diverge.\n    this.forwardHeadersPolicy = resolveForwardHeadersPolicy(\n      options.forwardHeaders,\n    );\n    this.debug = resolveDebugConfig(options.debug);\n    if (this.debug.enabled) {\n      this.debugLogger = createLogger({\n        level: \"debug\",\n        component: \"copilotkit-debug\",\n      });\n    }\n  }\n}\n\nexport class CopilotSseRuntime\n  extends BaseCopilotRuntime\n  implements CopilotSseRuntimeLike\n{\n  readonly intelligence = undefined;\n  readonly mode = RUNTIME_MODE_SSE;\n\n  constructor(options: CopilotSseRuntimeOptions) {\n    // Runtime guard mirroring the discriminated-union type: the SSE runtime has\n    // no Intelligence delivery path, so `channels` cannot be honored here. The\n    // type forbids it, but a JS / `as any` caller passing `{ agents, channels }`\n    // would otherwise land here and have `channels` silently dropped — fail\n    // loud instead.\n    const channels = (options as { channels?: unknown[] }).channels;\n    if (Array.isArray(channels) && channels.length > 0) {\n      throw new Error(\n        \"`channels` requires the Intelligence runtime (pass `intelligence`); \" +\n          \"Intelligence Channels are not available in SSE mode.\",\n      );\n    }\n    super(options, options.runner ?? new InMemoryAgentRunner());\n  }\n}\n\nexport class CopilotIntelligenceRuntime\n  extends BaseCopilotRuntime\n  implements CopilotIntelligenceRuntimeLike\n{\n  readonly intelligence: CopilotKitIntelligence;\n  readonly identifyUser: IdentifyUserCallback;\n  readonly generateThreadNames: boolean;\n  readonly lockTtlSeconds: number;\n  readonly lockKeyPrefix?: string;\n  readonly lockHeartbeatIntervalSeconds: number;\n  readonly channels: Channel[];\n  readonly mode = RUNTIME_MODE_INTELLIGENCE;\n\n  /** Maximum allowed lock TTL in seconds (1 hour). */\n  static readonly MAX_LOCK_TTL_SECONDS = 3_600;\n  /** Maximum allowed heartbeat interval in seconds (50 minutes). */\n  static readonly MAX_HEARTBEAT_INTERVAL_SECONDS = 3_000;\n\n  constructor(options: CopilotIntelligenceRuntimeOptions) {\n    super(\n      options,\n      new IntelligenceAgentRunner({\n        url: options.intelligence.ɵgetRunnerWsUrl(),\n        authToken: options.intelligence.ɵgetRunnerAuthToken(),\n        maxReconnectMs: options.maxReconnectMs,\n        maxRejoinMs: options.maxRejoinMs,\n      }),\n    );\n    this.intelligence = options.intelligence;\n    this.identifyUser = options.identifyUser;\n    this.generateThreadNames = options.generateThreadNames ?? true;\n    // Telemetry attribution is handled by the base constructor for all modes;\n    // here we only need the token for feature gating. Reuse the base-resolved\n    // value so gating and attribution can never disagree.\n    this.licenseChecker = createLicenseChecker(this.resolvedLicenseToken);\n    this.lockTtlSeconds = Math.min(\n      options.lockTtlSeconds ?? 20,\n      CopilotIntelligenceRuntime.MAX_LOCK_TTL_SECONDS,\n    );\n    this.lockKeyPrefix = options.lockKeyPrefix;\n    this.lockHeartbeatIntervalSeconds = Math.min(\n      options.lockHeartbeatIntervalSeconds ?? 15,\n      CopilotIntelligenceRuntime.MAX_HEARTBEAT_INTERVAL_SECONDS,\n    );\n    // Declared Intelligence Channels. Lowercase kebab-case name-shape validation\n    // (`assertValidChannelNames`) lives in the channels-intelligence launcher —\n    // it can't run here because it's a value import from the pure-ESM\n    // `@copilotkit/channels-intelligence`, which this CJS package must not pull in.\n    // Name UNIQUENESS across declared Channels is enforced by\n    // `ChannelManager.activate()`, not the launcher: the managed path activates\n    // one Channel per launcher call, so the launcher never sees the full set.\n    // Fail fast on the most common misconfiguration (a missing name) right here\n    // at construction, though, rather than only at activation.\n    this.channels = options.channels ?? [];\n    for (const c of this.channels) {\n      if (!c.name) {\n        throw new Error(\n          \"Intelligence Channel is missing a `name` — pass createChannel({ name }) for each Channel in `channels`\",\n        );\n      }\n    }\n  }\n}\n\nfunction hasIntelligenceOptions(\n  options: CopilotRuntimeOptions,\n): options is CopilotIntelligenceRuntimeOptions {\n  return \"intelligence\" in options && !!options.intelligence;\n}\n\nexport function isIntelligenceRuntime(\n  runtime: CopilotRuntimeLike,\n): runtime is CopilotIntelligenceRuntimeLike {\n  return runtime.mode === RUNTIME_MODE_INTELLIGENCE && !!runtime.intelligence;\n}\n\n/**\n * Single source of truth for \"is A2UI on for this runtime?\". Both the run path\n * (which applies `A2UIMiddleware`) and the `/info` response (which tells the\n * client whether to mount the A2UI renderer + catalog context) MUST go through\n * this, so they can never disagree — the divergence between them was the root\n * of CopilotKit/CopilotKit#5369.\n *\n * Backwards compatible: any config object is enabled (matching the historical\n * `!!runtime.a2ui`); only an explicit `enabled: false` turns it off.\n */\nexport function isA2UIEnabled(\n  a2ui: CopilotRuntimeOptions[\"a2ui\"],\n): a2ui is NonNullable<CopilotRuntimeOptions[\"a2ui\"]> {\n  return !!a2ui && a2ui.enabled !== false;\n}\n\n/**\n * Compile-time phantom brand marking a {@link CopilotRuntime} that was\n * constructed with at least one declared Intelligence Channel. It has no runtime\n * representation — the shim never sets this property; it exists purely so\n * `createCopilotRuntimeHandler` can tell, at the type level, that the resulting\n * handler will carry a non-optional `.channels` control surface.\n */\nexport interface RuntimeWithDeclaredChannels {\n  /**\n   * @internal Phantom brand key. Never present at runtime; do not read or set.\n   */\n  readonly __copilotkitChannelsDeclared: true;\n}\n\n/**\n * Instance shape of the {@link CopilotRuntime} compatibility shim. Extends\n * {@link CopilotRuntimeLike} with the Intelligence-only accessors the shim\n * surfaces (all `undefined` in SSE mode). Declared explicitly so the exported\n * `CopilotRuntime` name resolves as a type as well as a value.\n */\nexport interface CopilotRuntime extends CopilotRuntimeLike {\n  /** Auto-generate short thread names; `undefined` in SSE mode. */\n  generateThreadNames?: boolean;\n  /** Thread lock TTL in seconds; `undefined` in SSE mode. */\n  lockTtlSeconds?: number;\n  /** Custom Redis key prefix for the thread lock; `undefined` in SSE mode. */\n  lockKeyPrefix?: string;\n  /** Thread lock heartbeat interval in seconds; `undefined` in SSE mode. */\n  lockHeartbeatIntervalSeconds?: number;\n  /** Declared Intelligence Channels; `undefined` in SSE mode. */\n  channels?: Channel[];\n}\n\n/**\n * Constructor type for the {@link CopilotRuntime} compatibility shim.\n *\n * The first overload fires when the caller passes `intelligence` together with a\n * non-empty `channels` tuple: it returns a {@link RuntimeWithDeclaredChannels}-\n * branded runtime, which `createCopilotRuntimeHandler` maps to a handler whose\n * `.channels` is non-optional. Every other configuration (SSE, or Intelligence\n * without channels, or an empty `channels: []`) falls through to the second\n * overload and stays unbranded, so its handler keeps `.channels` optional.\n *\n * A class constructor cannot vary its return type across overloads (it is pinned\n * to the instance type), so the branding lives on this construct-signature\n * interface instead of on the class itself.\n */\nexport interface CopilotRuntimeConstructor {\n  new (\n    options: Omit<CopilotIntelligenceRuntimeOptions, \"channels\"> & {\n      channels: readonly [Channel, ...Channel[]];\n    },\n  ): CopilotRuntime & RuntimeWithDeclaredChannels;\n  new (options: CopilotRuntimeOptions): CopilotRuntime;\n}\n\n/**\n * Compatibility shim that preserves the legacy `CopilotRuntime` entrypoint.\n * New code should prefer `CopilotSseRuntime` or `CopilotIntelligenceRuntime`.\n *\n * Exported to consumers as the {@link CopilotRuntime} value (typed as\n * {@link CopilotRuntimeConstructor}) rather than as a class, so that the\n * channel-presence brand can flow from construction into the handler type.\n */\nclass CopilotRuntimeShim implements CopilotRuntime {\n  private delegate: CopilotRuntimeLike;\n\n  constructor(options: CopilotRuntimeOptions) {\n    this.delegate = hasIntelligenceOptions(options)\n      ? new CopilotIntelligenceRuntime(options)\n      : new CopilotSseRuntime(options);\n  }\n\n  get agents(): CopilotRuntimeOptions[\"agents\"] {\n    return this.delegate.agents;\n  }\n\n  get transcriptionService(): CopilotRuntimeOptions[\"transcriptionService\"] {\n    return this.delegate.transcriptionService;\n  }\n\n  get beforeRequestMiddleware(): CopilotRuntimeOptions[\"beforeRequestMiddleware\"] {\n    return this.delegate.beforeRequestMiddleware;\n  }\n\n  get afterRequestMiddleware(): CopilotRuntimeOptions[\"afterRequestMiddleware\"] {\n    return this.delegate.afterRequestMiddleware;\n  }\n\n  get runner(): AgentRunner {\n    return this.delegate.runner;\n  }\n\n  get a2ui(): CopilotRuntimeOptions[\"a2ui\"] {\n    return this.delegate.a2ui;\n  }\n\n  get mcpApps(): CopilotRuntimeOptions[\"mcpApps\"] {\n    return this.delegate.mcpApps;\n  }\n\n  get openGenerativeUI(): CopilotRuntimeOptions[\"openGenerativeUI\"] {\n    return this.delegate.openGenerativeUI;\n  }\n\n  get intelligence(): CopilotKitIntelligence | undefined {\n    return this.delegate.intelligence;\n  }\n\n  get generateThreadNames(): boolean | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.generateThreadNames\n      : undefined;\n  }\n\n  get identifyUser(): IdentifyUserCallback | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.identifyUser\n      : undefined;\n  }\n\n  get lockTtlSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockTtlSeconds\n      : undefined;\n  }\n\n  get lockKeyPrefix(): string | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockKeyPrefix\n      : undefined;\n  }\n\n  get lockHeartbeatIntervalSeconds(): number | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.lockHeartbeatIntervalSeconds\n      : undefined;\n  }\n\n  get channels(): Channel[] | undefined {\n    return isIntelligenceRuntime(this.delegate)\n      ? this.delegate.channels\n      : undefined;\n  }\n\n  get mode(): RuntimeMode {\n    return this.delegate.mode;\n  }\n\n  get licenseChecker() {\n    return this.delegate.licenseChecker;\n  }\n\n  get debugEventBus() {\n    return this.delegate.debugEventBus;\n  }\n\n  get debug(): ResolvedDebugConfig {\n    return this.delegate.debug;\n  }\n\n  get debugLogger(): CopilotRuntimeLogger | undefined {\n    return this.delegate.debugLogger;\n  }\n\n  get forwardHeadersPolicy(): ResolvedForwardHeadersPolicy {\n    return this.delegate.forwardHeadersPolicy;\n  }\n}\n\n/**\n * The public `CopilotRuntime` constructor. Backed by {@link CopilotRuntimeShim}\n * but typed as {@link CopilotRuntimeConstructor} so that constructing with a\n * non-empty `channels` array yields a {@link RuntimeWithDeclaredChannels}-branded\n * runtime type.\n *\n * The `as unknown as` cast is required (not dishonest widening): the brand is a\n * phantom, compile-time-only marker with no runtime representation, so the shim\n * instances legitimately do not carry the brand property. Behavior is identical\n * to the former `class CopilotRuntime` — this only refines the static type.\n */\nexport const CopilotRuntime: CopilotRuntimeConstructor =\n  CopilotRuntimeShim as unknown as CopilotRuntimeConstructor;\n"],"mappings":";;;;;;;;;;;;;;;AA0CA,MAAa,UAAUA,uBAAI;;;;;;AAyE3B,eAAsB,cACpB,QACA,SACwC;AACxC,KAAI,OAAO,WAAW,YAAY;AAChC,MAAI,CAAC,QACH,OAAM,IAAI,MACR,4EACD;AAEH,SAAO,OAAO,EAAE,SAAS,CAAC;;AAE5B,QAAO;;AAsIT,IAAe,qBAAf,MAAgE;CA0B9D,YAAY,SAAoC,QAAqB;AACnE,iCAA+B;EAE/B,MAAM,EACJ,QACA,sBACA,yBACA,wBACA,MACA,SACA,qBACE;AAEJ,OAAK,SAAS;AACd,OAAK,uBAAuB;AAC5B,OAAK,0BAA0B;AAC/B,OAAK,yBAAyB;AAC9B,OAAK,OAAO,QAAQ;AACpB,OAAK,UAAU;AACf,OAAK,mBAAmB;AACxB,OAAK,SAAS;AAKd,OAAK,uBACH,QAAQ,gBAAgB,QAAQ,IAAI;AAOtC,MAAI,KAAK,qBACP,WAAU,gBAAgB,KAAK,qBAAqB;AAGtD,MAAI,QAAQ,IAAI,aAAa,aAC3B,MAAK,gBAAgB,IAAI,eAAe;AAM1C,OAAK,uBAAuB,4BAC1B,QAAQ,eACT;AACD,OAAK,QAAQ,mBAAmB,QAAQ,MAAM;AAC9C,MAAI,KAAK,MAAM,QACb,MAAK,cAAc,aAAa;GAC9B,OAAO;GACP,WAAW;GACZ,CAAC;;;AAKR,IAAa,oBAAb,cACU,mBAEV;CAIE,YAAY,SAAmC;EAM7C,MAAM,WAAY,QAAqC;AACvD,MAAI,MAAM,QAAQ,SAAS,IAAI,SAAS,SAAS,EAC/C,OAAM,IAAI,MACR,2HAED;AAEH,QAAM,SAAS,QAAQ,UAAU,IAAI,qBAAqB,CAAC;sBAhBrC;cACR;;;AAmBlB,IAAa,6BAAb,MAAa,mCACH,mBAEV;;8BAWyC;;;wCAEU;;CAEjD,YAAY,SAA4C;AACtD,QACE,SACA,IAAI,wBAAwB;GAC1B,KAAK,QAAQ,aAAa,iBAAiB;GAC3C,WAAW,QAAQ,aAAa,qBAAqB;GACrD,gBAAgB,QAAQ;GACxB,aAAa,QAAQ;GACtB,CAAC,CACH;cAhBa;AAiBd,OAAK,eAAe,QAAQ;AAC5B,OAAK,eAAe,QAAQ;AAC5B,OAAK,sBAAsB,QAAQ,uBAAuB;AAI1D,OAAK,iBAAiB,qBAAqB,KAAK,qBAAqB;AACrE,OAAK,iBAAiB,KAAK,IACzB,QAAQ,kBAAkB,IAC1B,2BAA2B,qBAC5B;AACD,OAAK,gBAAgB,QAAQ;AAC7B,OAAK,+BAA+B,KAAK,IACvC,QAAQ,gCAAgC,IACxC,2BAA2B,+BAC5B;AAUD,OAAK,WAAW,QAAQ,YAAY,EAAE;AACtC,OAAK,MAAM,KAAK,KAAK,SACnB,KAAI,CAAC,EAAE,KACL,OAAM,IAAI,MACR,yGACD;;;AAMT,SAAS,uBACP,SAC8C;AAC9C,QAAO,kBAAkB,WAAW,CAAC,CAAC,QAAQ;;AAGhD,SAAgB,sBACd,SAC2C;AAC3C,QAAO,QAAQ,SAAS,6BAA6B,CAAC,CAAC,QAAQ;;;;;;;;;;;;AAajE,SAAgB,cACd,MACoD;AACpD,QAAO,CAAC,CAAC,QAAQ,KAAK,YAAY;;;;;;;;;;AAmEpC,IAAM,qBAAN,MAAmD;CAGjD,YAAY,SAAgC;AAC1C,OAAK,WAAW,uBAAuB,QAAQ,GAC3C,IAAI,2BAA2B,QAAQ,GACvC,IAAI,kBAAkB,QAAQ;;CAGpC,IAAI,SAA0C;AAC5C,SAAO,KAAK,SAAS;;CAGvB,IAAI,uBAAsE;AACxE,SAAO,KAAK,SAAS;;CAGvB,IAAI,0BAA4E;AAC9E,SAAO,KAAK,SAAS;;CAGvB,IAAI,yBAA0E;AAC5E,SAAO,KAAK,SAAS;;CAGvB,IAAI,SAAsB;AACxB,SAAO,KAAK,SAAS;;CAGvB,IAAI,OAAsC;AACxC,SAAO,KAAK,SAAS;;CAGvB,IAAI,UAA4C;AAC9C,SAAO,KAAK,SAAS;;CAGvB,IAAI,mBAA8D;AAChE,SAAO,KAAK,SAAS;;CAGvB,IAAI,eAAmD;AACrD,SAAO,KAAK,SAAS;;CAGvB,IAAI,sBAA2C;AAC7C,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,sBACd;;CAGN,IAAI,eAAiD;AACnD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,eACd;;CAGN,IAAI,iBAAqC;AACvC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,iBACd;;CAGN,IAAI,gBAAoC;AACtC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,gBACd;;CAGN,IAAI,+BAAmD;AACrD,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,+BACd;;CAGN,IAAI,WAAkC;AACpC,SAAO,sBAAsB,KAAK,SAAS,GACvC,KAAK,SAAS,WACd;;CAGN,IAAI,OAAoB;AACtB,SAAO,KAAK,SAAS;;CAGvB,IAAI,iBAAiB;AACnB,SAAO,KAAK,SAAS;;CAGvB,IAAI,gBAAgB;AAClB,SAAO,KAAK,SAAS;;CAGvB,IAAI,QAA6B;AAC/B,SAAO,KAAK,SAAS;;CAGvB,IAAI,cAAgD;AAClD,SAAO,KAAK,SAAS;;CAGvB,IAAI,uBAAqD;AACvD,SAAO,KAAK,SAAS;;;;;;;;;;;;;;AAezB,MAAa,iBACX"}

package/dist/v2/runtime/endpoints/express-single.d.cts

@@ -1,4 +1,4 @@
-
+require("reflect-metadata");
 import { CopilotRuntimeLike } from "../core/runtime.cjs";
 import { CopilotRuntimeHooks } from "../core/hooks.cjs";
 import { Router } from "express";

package/dist/v2/runtime/endpoints/express.cjs

@@ -8,15 +8,18 @@ let cors = require("cors");
 cors = require_runtime.__toESM(cors);
 
 //#region src/v2/runtime/endpoints/express.ts
-function createCopilotExpressHandler({ runtime, basePath, mode = "multi-route", cors: corsOption = true, hooks }) {
+function createCopilotExpressHandler({ runtime, basePath, mode = "multi-route", cors: corsOption = true, hooks, activateChannels, __channelEngine }) {
 	const normalizedBase = normalizeBasePath(basePath);
-	const nodeHandler = require_express_fetch_bridge.createExpressNodeHandler(require_fetch_handler.createCopilotRuntimeHandler({
+	const handler = require_fetch_handler.createCopilotRuntimeHandler({
 		runtime,
 		basePath: normalizedBase,
 		mode,
 		cors: false,
-		hooks
-	}));
+		hooks,
+		activateChannels,
+		__channelEngine
+	});
+	const nodeHandler = require_express_fetch_bridge.createExpressNodeHandler(handler);
 	const expressHandler = async (req, res, next) => {
 		try {
 			await nodeHandler(req, res);
@@ -46,7 +49,9 @@ function createCopilotExpressHandler({ runtime, basePath, mode = "multi-route",
 		router.options(normalizedBase, expressHandler);
 	} else if (normalizedBase === "/") router.all(/.*/, expressHandler);
 	else router.all(new RegExp(`^${escapeRegExp(normalizedBase)}(\\/.*)?$`), expressHandler);
-	return router;
+	const exposedRouter = router;
+	exposedRouter.channels = handler.channels;
+	return exposedRouter;
 }
 function escapeRegExp(s) {
 	return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");

package/dist/v2/runtime/endpoints/express.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"express.cjs","names":["createExpressNodeHandler","createCopilotRuntimeHandler"],"sources":["../../../../src/v2/runtime/endpoints/express.ts"],"sourcesContent":["import express from \"express\";\nimport type {\n  Request as ExpressRequest,\n  Response as ExpressResponse,\n  NextFunction,\n  Router,\n} from \"express\";\nimport cors from \"cors\";\nimport type { CorsOptions } from \"cors\";\nimport type { CopilotRuntimeLike } from \"../core/runtime\";\nimport { createCopilotRuntimeHandler } from \"../core/fetch-handler\";\nimport { createExpressNodeHandler } from \"./express-fetch-bridge\";\nimport type { CopilotRuntimeHooks } from \"../core/hooks\";\n\nexport interface CopilotExpressEndpointParams {\n  runtime: CopilotRuntimeLike;\n  basePath: string;\n\n  /**\n   * Endpoint mode.\n   * - `\"multi-route\"` (default): separate routes for each operation\n   * - `\"single-route\"`: single POST endpoint with JSON envelope dispatch\n   */\n  mode?: \"multi-route\" | \"single-route\";\n\n  /**\n   * CORS configuration for the Express router.\n   * - `true` (default): permissive CORS (`origin: \"*\"`, all methods, all headers).\n   * - `false`: no CORS middleware is applied — handle it yourself.\n   * - object: passed directly to the Express `cors()` middleware.\n   */\n  cors?: boolean | CorsOptions;\n\n  /**\n   * Lifecycle hooks for request processing.\n   */\n  hooks?: CopilotRuntimeHooks;\n}\n\n/**\n * Creates an Express router that serves the CopilotKit runtime.\n *\n * In **multi-route** mode (default) the router exposes:\n * - `GET  {basePath}/info` — runtime info\n * - `POST {basePath}/agent/:agentId/run` — start an agent run\n * - `POST {basePath}/agent/:agentId/connect` — connect to an agent run\n * - `POST {basePath}/agent/:agentId/stop/:threadId` — stop an agent run\n * - `POST {basePath}/transcribe` — transcribe audio\n *\n * In **single-route** mode a single `POST {basePath}` endpoint accepts a JSON\n * envelope `{ method, params, body }` and dispatches to the appropriate handler.\n *\n * @example\n * ```typescript\n * import express from \"express\";\n * import { CopilotRuntime } from \"@copilotkit/runtime/v2\";\n * import { createCopilotExpressHandler } from \"@copilotkit/runtime/v2/express\";\n *\n * const runtime = new CopilotRuntime({\n *   agents: { default: new BuiltInAgent({ model: \"openai/gpt-4o-mini\" }) },\n * });\n *\n * const app = express();\n * app.use(createCopilotExpressHandler({\n *   runtime,\n *   basePath: \"/api/copilotkit\",\n *   cors: true,\n * }));\n * app.listen(4000);\n * ```\n *\n * @example Single-route mode with lifecycle hooks\n * ```typescript\n * app.use(createCopilotExpressHandler({\n *   runtime,\n *   basePath: \"/api/copilotkit\",\n *   mode: \"single-route\",\n *   hooks: {\n *     onRequest: ({ request }) => {\n *       if (!request.headers.get(\"authorization\")) {\n *         throw new Response(\"Unauthorized\", { status: 401 });\n *       }\n *     },\n *   },\n * }));\n * ```\n */\n/** @deprecated Use `createCopilotExpressHandler` instead. */\nexport { createCopilotExpressHandler as createCopilotEndpointExpress };\n\nexport function createCopilotExpressHandler({\n  runtime,\n  basePath,\n  mode = \"multi-route\",\n  cors: corsOption = true,\n  hooks,\n}: CopilotExpressEndpointParams): Router {\n  const normalizedBase = normalizeBasePath(basePath);\n\n  const handler = createCopilotRuntimeHandler({\n    runtime,\n    basePath: normalizedBase,\n    mode,\n    cors: false, // CORS is handled at the Express middleware layer\n    hooks,\n  });\n\n  const nodeHandler = createExpressNodeHandler(handler);\n\n  const expressHandler = async (\n    req: ExpressRequest,\n    res: ExpressResponse,\n    next: NextFunction,\n  ) => {\n    try {\n      await nodeHandler(req, res);\n    } catch (err) {\n      next(err);\n    }\n  };\n\n  const router = express.Router();\n\n  // CORS middleware\n  if (corsOption) {\n    const corsConfig: CorsOptions =\n      corsOption === true\n        ? {\n            origin: \"*\",\n            methods: [\n              \"GET\",\n              \"HEAD\",\n              \"PUT\",\n              \"POST\",\n              \"DELETE\",\n              \"PATCH\",\n              \"OPTIONS\",\n            ],\n            allowedHeaders: [\"*\"],\n          }\n        : corsOption;\n    router.use(cors(corsConfig));\n  }\n\n  // Route mounting\n  if (mode === \"single-route\") {\n    router.post(normalizedBase, expressHandler);\n    router.options(normalizedBase, expressHandler);\n  } else if (normalizedBase === \"/\") {\n    router.all(/.*/, expressHandler);\n  } else {\n    router.all(\n      new RegExp(`^${escapeRegExp(normalizedBase)}(\\\\/.*)?$`),\n      expressHandler,\n    );\n  }\n\n  return router;\n}\n\nfunction escapeRegExp(s: string): string {\n  return s.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\nfunction normalizeBasePath(path: string): string {\n  if (!path) {\n    throw new Error(\"basePath must be provided for Express endpoint\");\n  }\n\n  if (!path.startsWith(\"/\")) {\n    return `/${path}`;\n  }\n\n  if (path.length > 1 && path.endsWith(\"/\")) {\n    return path.slice(0, -1);\n  }\n\n  return path;\n}\n"],"mappings":";;;;;;;;;;AA0FA,SAAgB,4BAA4B,EAC1C,SACA,UACA,OAAO,eACP,MAAM,aAAa,MACnB,SACuC;CACvC,MAAM,iBAAiB,kBAAkB,SAAS;CAUlD,MAAM,cAAcA,sDARJC,kDAA4B;EAC1C;EACA,UAAU;EACV;EACA,MAAM;EACN;EACD,CAAC,CAEmD;CAErD,MAAM,iBAAiB,OACrB,KACA,KACA,SACG;AACH,MAAI;AACF,SAAM,YAAY,KAAK,IAAI;WACpB,KAAK;AACZ,QAAK,IAAI;;;CAIb,MAAM,SAAS,gBAAQ,QAAQ;AAG/B,KAAI,YAAY;EACd,MAAM,aACJ,eAAe,OACX;GACE,QAAQ;GACR,SAAS;IACP;IACA;IACA;IACA;IACA;IACA;IACA;IACD;GACD,gBAAgB,CAAC,IAAI;GACtB,GACD;AACN,SAAO,sBAAS,WAAW,CAAC;;AAI9B,KAAI,SAAS,gBAAgB;AAC3B,SAAO,KAAK,gBAAgB,eAAe;AAC3C,SAAO,QAAQ,gBAAgB,eAAe;YACrC,mBAAmB,IAC5B,QAAO,IAAI,MAAM,eAAe;KAEhC,QAAO,IACL,IAAI,OAAO,IAAI,aAAa,eAAe,CAAC,WAAW,EACvD,eACD;AAGH,QAAO;;AAGT,SAAS,aAAa,GAAmB;AACvC,QAAO,EAAE,QAAQ,uBAAuB,OAAO;;AAGjD,SAAS,kBAAkB,MAAsB;AAC/C,KAAI,CAAC,KACH,OAAM,IAAI,MAAM,iDAAiD;AAGnE,KAAI,CAAC,KAAK,WAAW,IAAI,CACvB,QAAO,IAAI;AAGb,KAAI,KAAK,SAAS,KAAK,KAAK,SAAS,IAAI,CACvC,QAAO,KAAK,MAAM,GAAG,GAAG;AAG1B,QAAO"}
+{"version":3,"file":"express.cjs","names":["createCopilotRuntimeHandler","createExpressNodeHandler"],"sources":["../../../../src/v2/runtime/endpoints/express.ts"],"sourcesContent":["import express from \"express\";\nimport type {\n  Request as ExpressRequest,\n  Response as ExpressResponse,\n  NextFunction,\n  Router,\n} from \"express\";\nimport cors from \"cors\";\nimport type { CorsOptions } from \"cors\";\nimport type { CopilotRuntimeLike } from \"../core/runtime\";\nimport { createCopilotRuntimeHandler } from \"../core/fetch-handler\";\nimport type {\n  ActivateChannelEngine,\n  ChannelsControl,\n} from \"../core/channel-manager\";\nimport { createExpressNodeHandler } from \"./express-fetch-bridge\";\nimport type { CopilotRuntimeHooks } from \"../core/hooks\";\n\n/**\n * An Express {@link Router} that may also carry an optional\n * {@link ChannelsControl} surface. Express's Router is a request-scoped\n * middleware object, not a long-running process owner — Node\n * (`createCopilotNodeListener`) is the lifecycle-owning surface for\n * `.channels`. It is attached here too, best-effort, for callers that mount\n * the router directly and want to observe/stop managed Channel activation\n * without also standing up a Node listener.\n */\nexport type CopilotExpressRouter = Router & { channels?: ChannelsControl };\n\nexport interface CopilotExpressEndpointParams {\n  runtime: CopilotRuntimeLike;\n  basePath: string;\n\n  /**\n   * Endpoint mode.\n   * - `\"multi-route\"` (default): separate routes for each operation\n   * - `\"single-route\"`: single POST endpoint with JSON envelope dispatch\n   */\n  mode?: \"multi-route\" | \"single-route\";\n\n  /**\n   * CORS configuration for the Express router.\n   * - `true` (default): permissive CORS (`origin: \"*\"`, all methods, all headers).\n   * - `false`: no CORS middleware is applied — handle it yourself.\n   * - object: passed directly to the Express `cors()` middleware.\n   */\n  cors?: boolean | CorsOptions;\n\n  /**\n   * Lifecycle hooks for request processing.\n   */\n  hooks?: CopilotRuntimeHooks;\n\n  /**\n   * Whether the underlying handler activates the runtime's declared managed\n   * Channels at creation time. Defaults to `true`. See\n   * `CopilotRuntimeHandlerOptions.activateChannels`.\n   */\n  activateChannels?: boolean;\n\n  /**\n   * @internal Test seam: inject a fake Channel activation engine. Forwarded\n   * to `createCopilotRuntimeHandler`. Not part of the public API.\n   */\n  __channelEngine?: ActivateChannelEngine;\n}\n\n/**\n * Creates an Express router that serves the CopilotKit runtime.\n *\n * In **multi-route** mode (default) the router exposes:\n * - `GET  {basePath}/info` — runtime info\n * - `POST {basePath}/agent/:agentId/run` — start an agent run\n * - `POST {basePath}/agent/:agentId/connect` — connect to an agent run\n * - `POST {basePath}/agent/:agentId/stop/:threadId` — stop an agent run\n * - `POST {basePath}/transcribe` — transcribe audio\n *\n * In **single-route** mode a single `POST {basePath}` endpoint accepts a JSON\n * envelope `{ method, params, body }` and dispatches to the appropriate handler.\n *\n * @example\n * ```typescript\n * import express from \"express\";\n * import { CopilotRuntime } from \"@copilotkit/runtime/v2\";\n * import { createCopilotExpressHandler } from \"@copilotkit/runtime/v2/express\";\n *\n * const runtime = new CopilotRuntime({\n *   agents: { default: new BuiltInAgent({ model: \"openai/gpt-4o-mini\" }) },\n * });\n *\n * const app = express();\n * app.use(createCopilotExpressHandler({\n *   runtime,\n *   basePath: \"/api/copilotkit\",\n *   cors: true,\n * }));\n * app.listen(4000);\n * ```\n *\n * @example Single-route mode with lifecycle hooks\n * ```typescript\n * app.use(createCopilotExpressHandler({\n *   runtime,\n *   basePath: \"/api/copilotkit\",\n *   mode: \"single-route\",\n *   hooks: {\n *     onRequest: ({ request }) => {\n *       if (!request.headers.get(\"authorization\")) {\n *         throw new Response(\"Unauthorized\", { status: 401 });\n *       }\n *     },\n *   },\n * }));\n * ```\n */\n/** @deprecated Use `createCopilotExpressHandler` instead. */\nexport { createCopilotExpressHandler as createCopilotEndpointExpress };\n\nexport function createCopilotExpressHandler({\n  runtime,\n  basePath,\n  mode = \"multi-route\",\n  cors: corsOption = true,\n  hooks,\n  activateChannels,\n  __channelEngine,\n}: CopilotExpressEndpointParams): CopilotExpressRouter {\n  const normalizedBase = normalizeBasePath(basePath);\n\n  const handler = createCopilotRuntimeHandler({\n    runtime,\n    basePath: normalizedBase,\n    mode,\n    cors: false, // CORS is handled at the Express middleware layer\n    hooks,\n    activateChannels,\n    __channelEngine,\n  });\n\n  const nodeHandler = createExpressNodeHandler(handler);\n\n  const expressHandler = async (\n    req: ExpressRequest,\n    res: ExpressResponse,\n    next: NextFunction,\n  ) => {\n    try {\n      await nodeHandler(req, res);\n    } catch (err) {\n      next(err);\n    }\n  };\n\n  const router = express.Router();\n\n  // CORS middleware\n  if (corsOption) {\n    const corsConfig: CorsOptions =\n      corsOption === true\n        ? {\n            origin: \"*\",\n            methods: [\n              \"GET\",\n              \"HEAD\",\n              \"PUT\",\n              \"POST\",\n              \"DELETE\",\n              \"PATCH\",\n              \"OPTIONS\",\n            ],\n            allowedHeaders: [\"*\"],\n          }\n        : corsOption;\n    router.use(cors(corsConfig));\n  }\n\n  // Route mounting\n  if (mode === \"single-route\") {\n    router.post(normalizedBase, expressHandler);\n    router.options(normalizedBase, expressHandler);\n  } else if (normalizedBase === \"/\") {\n    router.all(/.*/, expressHandler);\n  } else {\n    router.all(\n      new RegExp(`^${escapeRegExp(normalizedBase)}(\\\\/.*)?$`),\n      expressHandler,\n    );\n  }\n\n  const exposedRouter: CopilotExpressRouter = router;\n  exposedRouter.channels = handler.channels;\n  return exposedRouter;\n}\n\nfunction escapeRegExp(s: string): string {\n  return s.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\nfunction normalizeBasePath(path: string): string {\n  if (!path) {\n    throw new Error(\"basePath must be provided for Express endpoint\");\n  }\n\n  if (!path.startsWith(\"/\")) {\n    return `/${path}`;\n  }\n\n  if (path.length > 1 && path.endsWith(\"/\")) {\n    return path.slice(0, -1);\n  }\n\n  return path;\n}\n"],"mappings":";;;;;;;;;;AAsHA,SAAgB,4BAA4B,EAC1C,SACA,UACA,OAAO,eACP,MAAM,aAAa,MACnB,OACA,kBACA,mBACqD;CACrD,MAAM,iBAAiB,kBAAkB,SAAS;CAElD,MAAM,UAAUA,kDAA4B;EAC1C;EACA,UAAU;EACV;EACA,MAAM;EACN;EACA;EACA;EACD,CAAC;CAEF,MAAM,cAAcC,sDAAyB,QAAQ;CAErD,MAAM,iBAAiB,OACrB,KACA,KACA,SACG;AACH,MAAI;AACF,SAAM,YAAY,KAAK,IAAI;WACpB,KAAK;AACZ,QAAK,IAAI;;;CAIb,MAAM,SAAS,gBAAQ,QAAQ;AAG/B,KAAI,YAAY;EACd,MAAM,aACJ,eAAe,OACX;GACE,QAAQ;GACR,SAAS;IACP;IACA;IACA;IACA;IACA;IACA;IACA;IACD;GACD,gBAAgB,CAAC,IAAI;GACtB,GACD;AACN,SAAO,sBAAS,WAAW,CAAC;;AAI9B,KAAI,SAAS,gBAAgB;AAC3B,SAAO,KAAK,gBAAgB,eAAe;AAC3C,SAAO,QAAQ,gBAAgB,eAAe;YACrC,mBAAmB,IAC5B,QAAO,IAAI,MAAM,eAAe;KAEhC,QAAO,IACL,IAAI,OAAO,IAAI,aAAa,eAAe,CAAC,WAAW,EACvD,eACD;CAGH,MAAM,gBAAsC;AAC5C,eAAc,WAAW,QAAQ;AACjC,QAAO;;AAGT,SAAS,aAAa,GAAmB;AACvC,QAAO,EAAE,QAAQ,uBAAuB,OAAO;;AAGjD,SAAS,kBAAkB,MAAsB;AAC/C,KAAI,CAAC,KACH,OAAM,IAAI,MAAM,iDAAiD;AAGnE,KAAI,CAAC,KAAK,WAAW,IAAI,CACvB,QAAO,IAAI;AAGb,KAAI,KAAK,SAAS,KAAK,KAAK,SAAS,IAAI,CACvC,QAAO,KAAK,MAAM,GAAG,GAAG;AAG1B,QAAO"}

package/dist/v2/runtime/endpoints/express.d.cts

@@ -1,10 +1,23 @@
-
+require("reflect-metadata");
 import { CopilotRuntimeLike } from "../core/runtime.cjs";
 import { CopilotRuntimeHooks } from "../core/hooks.cjs";
+import { ActivateChannelEngine, ChannelsControl } from "../core/channel-manager.cjs";
 import { Router } from "express";
 import { CorsOptions } from "cors";
 
 //#region src/v2/runtime/endpoints/express.d.ts
+/**
+ * An Express {@link Router} that may also carry an optional
+ * {@link ChannelsControl} surface. Express's Router is a request-scoped
+ * middleware object, not a long-running process owner — Node
+ * (`createCopilotNodeListener`) is the lifecycle-owning surface for
+ * `.channels`. It is attached here too, best-effort, for callers that mount
+ * the router directly and want to observe/stop managed Channel activation
+ * without also standing up a Node listener.
+ */
+type CopilotExpressRouter = Router & {
+  channels?: ChannelsControl;
+};
 interface CopilotExpressEndpointParams {
   runtime: CopilotRuntimeLike;
   basePath: string;
@@ -25,14 +38,27 @@ interface CopilotExpressEndpointParams {
    * Lifecycle hooks for request processing.
    */
   hooks?: CopilotRuntimeHooks;
+  /**
+   * Whether the underlying handler activates the runtime's declared managed
+   * Channels at creation time. Defaults to `true`. See
+   * `CopilotRuntimeHandlerOptions.activateChannels`.
+   */
+  activateChannels?: boolean;
+  /**
+   * @internal Test seam: inject a fake Channel activation engine. Forwarded
+   * to `createCopilotRuntimeHandler`. Not part of the public API.
+   */
+  __channelEngine?: ActivateChannelEngine;
 }
 declare function createCopilotExpressHandler({
   runtime,
   basePath,
   mode,
   cors: corsOption,
-  hooks
-}: CopilotExpressEndpointParams): Router;
+  hooks,
+  activateChannels,
+  __channelEngine
+}: CopilotExpressEndpointParams): CopilotExpressRouter;
 //#endregion
-export { CopilotExpressEndpointParams, createCopilotExpressHandler };
+export { CopilotExpressEndpointParams, CopilotExpressRouter, createCopilotExpressHandler };
 //# sourceMappingURL=express.d.cts.map

package/dist/v2/runtime/endpoints/express.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"express.d.cts","names":[],"sources":["../../../../src/v2/runtime/endpoints/express.ts"],"mappings":";;;;;;;UAciB,4BAAA;EACf,OAAA,EAAS,kBAAA;EACT,QAAA;EAF2C;;;;;EAS3C,IAAA;EAa2B;;;;;;EAL3B,IAAA,aAAiB,WAAA;EAKjB;;;EAAA,KAAA,GAAQ,mBAAA;AAAA;AAAA,iBAsDM,2BAAA,CAAA;EACd,OAAA;EACA,QAAA;EACA,IAAA;EACA,IAAA,EAAM,UAAA;EACN;AAAA,GACC,4BAAA,GAA+B,MAAA"}
+{"version":3,"file":"express.d.cts","names":[],"sources":["../../../../src/v2/runtime/endpoints/express.ts"],"mappings":";;;;;;;;;;AA2BA;;;;;;;KAAY,oBAAA,GAAuB,MAAA;EAAW,QAAA,GAAW,eAAA;AAAA;AAAA,UAExC,4BAAA;EACf,OAAA,EAAS,kBAAA;EACT,QAAA;EAeiB;;;;;EARjB,IAAA;EARS;;;;;;EAgBT,IAAA,aAAiB,WAAA;EAYjB;;;EAPA,KAAA,GAAQ,mBAAA;EAa+B;AAsDzC;;;;EA5DE,gBAAA;EA+DA;;;;EAzDA,eAAA,GAAkB,qBAAA;AAAA;AAAA,iBAsDJ,2BAAA,CAAA;EACd,OAAA;EACA,QAAA;EACA,IAAA;EACA,IAAA,EAAM,UAAA;EACN,KAAA;EACA,gBAAA;EACA;AAAA,GACC,4BAAA,GAA+B,oBAAA"}

package/dist/v2/runtime/endpoints/express.d.mts

@@ -1,10 +1,23 @@
 import "reflect-metadata";
 import { CopilotRuntimeLike } from "../core/runtime.mjs";
 import { CopilotRuntimeHooks } from "../core/hooks.mjs";
+import { ActivateChannelEngine, ChannelsControl } from "../core/channel-manager.mjs";
 import { Router } from "express";
 import { CorsOptions } from "cors";
 
 //#region src/v2/runtime/endpoints/express.d.ts
+/**
+ * An Express {@link Router} that may also carry an optional
+ * {@link ChannelsControl} surface. Express's Router is a request-scoped
+ * middleware object, not a long-running process owner — Node
+ * (`createCopilotNodeListener`) is the lifecycle-owning surface for
+ * `.channels`. It is attached here too, best-effort, for callers that mount
+ * the router directly and want to observe/stop managed Channel activation
+ * without also standing up a Node listener.
+ */
+type CopilotExpressRouter = Router & {
+  channels?: ChannelsControl;
+};
 interface CopilotExpressEndpointParams {
   runtime: CopilotRuntimeLike;
   basePath: string;
@@ -25,14 +38,27 @@ interface CopilotExpressEndpointParams {
    * Lifecycle hooks for request processing.
    */
   hooks?: CopilotRuntimeHooks;
+  /**
+   * Whether the underlying handler activates the runtime's declared managed
+   * Channels at creation time. Defaults to `true`. See
+   * `CopilotRuntimeHandlerOptions.activateChannels`.
+   */
+  activateChannels?: boolean;
+  /**
+   * @internal Test seam: inject a fake Channel activation engine. Forwarded
+   * to `createCopilotRuntimeHandler`. Not part of the public API.
+   */
+  __channelEngine?: ActivateChannelEngine;
 }
 declare function createCopilotExpressHandler({
   runtime,
   basePath,
   mode,
   cors: corsOption,
-  hooks
-}: CopilotExpressEndpointParams): Router;
+  hooks,
+  activateChannels,
+  __channelEngine
+}: CopilotExpressEndpointParams): CopilotExpressRouter;
 //#endregion
-export { CopilotExpressEndpointParams, createCopilotExpressHandler };
+export { CopilotExpressEndpointParams, CopilotExpressRouter, createCopilotExpressHandler };
 //# sourceMappingURL=express.d.mts.map

package/dist/v2/runtime/endpoints/express.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"express.d.mts","names":[],"sources":["../../../../src/v2/runtime/endpoints/express.ts"],"mappings":";;;;;;;UAciB,4BAAA;EACf,OAAA,EAAS,kBAAA;EACT,QAAA;EAF2C;;;;;EAS3C,IAAA;EAa2B;;;;;;EAL3B,IAAA,aAAiB,WAAA;EAKjB;;;EAAA,KAAA,GAAQ,mBAAA;AAAA;AAAA,iBAsDM,2BAAA,CAAA;EACd,OAAA;EACA,QAAA;EACA,IAAA;EACA,IAAA,EAAM,UAAA;EACN;AAAA,GACC,4BAAA,GAA+B,MAAA"}
+{"version":3,"file":"express.d.mts","names":[],"sources":["../../../../src/v2/runtime/endpoints/express.ts"],"mappings":";;;;;;;;;;AA2BA;;;;;;;KAAY,oBAAA,GAAuB,MAAA;EAAW,QAAA,GAAW,eAAA;AAAA;AAAA,UAExC,4BAAA;EACf,OAAA,EAAS,kBAAA;EACT,QAAA;EAeiB;;;;;EARjB,IAAA;EARS;;;;;;EAgBT,IAAA,aAAiB,WAAA;EAYjB;;;EAPA,KAAA,GAAQ,mBAAA;EAa+B;AAsDzC;;;;EA5DE,gBAAA;EA+DA;;;;EAzDA,eAAA,GAAkB,qBAAA;AAAA;AAAA,iBAsDJ,2BAAA,CAAA;EACd,OAAA;EACA,QAAA;EACA,IAAA;EACA,IAAA,EAAM,UAAA;EACN,KAAA;EACA,gBAAA;EACA;AAAA,GACC,4BAAA,GAA+B,oBAAA"}