@copilotkit/runtime 1.72.0 → 1.73.0

package/dist/v2/runtime/handlers/sse/connect.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"connect.cjs","names":["createSseEventResponse","mergeForwardableHeaders","resolveForwardHeadersPolicy"],"sources":["../../../../../src/v2/runtime/handlers/sse/connect.ts"],"sourcesContent":["import type { AbstractAgent } from \"@ag-ui/client\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport { createSseEventResponse } from \"../shared/sse-response\";\nimport {\n  mergeForwardableHeaders,\n  resolveForwardHeadersPolicy,\n} from \"../header-utils\";\n\n/**\n * `headers` lives on the HTTP-backed agent configs (e.g. `HttpAgent`), not on\n * the base `AbstractAgent`. Mirror the runtime's own optional-headers shape so\n * we can read server-configured headers off the per-request clone without a\n * cast. See `agent-utils.ts`.\n */\ntype AgentWithHeaders = AbstractAgent & {\n  headers?: Record<string, string>;\n};\n\ninterface HandleSseConnectParams {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agentId: string;\n  threadId: string;\n  /**\n   * The per-request agent clone, carrying any server-configured `agent.headers`\n   * (e.g. service-to-service auth). Used only to compute the merged header set\n   * threaded into `runner.connect` below — see the note there for why that\n   * merge is forward-looking plumbing rather than active outbound auth today.\n   */\n  agent?: AgentWithHeaders;\n}\n\nexport function handleSseConnect({\n  runtime,\n  request,\n  agentId,\n  threadId,\n  agent,\n}: HandleSseConnectParams): Response {\n  return createSseEventResponse({\n    request,\n    debugEventBus: runtime.debugEventBus,\n    // Forward the real agentId so debug envelopes reflect the agent the\n    // route resolved to — not the literal string \"connect\".\n    agentId,\n    telemetry: runtime.telemetry,\n    observableFactory: () =>\n      runtime.runner.connect({\n        threadId,\n        agentId,\n        // Forward-looking plumbing: we compute the merged header set (server\n        // `agent.headers` win on collision, case-insensitively; non-colliding\n        // inbound headers still forward — see `mergeForwardableHeaders`, #5712)\n        // and thread it into `runner.connect`. NO shipped runner consumes the\n        // `headers` field of `AgentRunnerConnectRequest` today — every runner\n        // (in-memory, intelligence, telemetry, sqlite) reads only `threadId`.\n        // The real outbound header forwarding is the /run path, where\n        // `cloneAgentForRequest` mutates `agent.headers` directly\n        // (agent-utils.ts). This wiring exists so a future outbound-connecting\n        // runner can pick the merged headers up without a route change; the\n        // collision precedence noted here is purely about that merge, not about\n        // middleware/mutation parity with /run.\n        headers: mergeForwardableHeaders(\n          agent?.headers,\n          request,\n          // Optional on `CopilotRuntimeLike` (non-breaking minor release);\n          // coalesce a policy-less external implementor to the default resolved\n          // policy (default-on denylist) instead of dereffing undefined.\n          runtime.forwardHeadersPolicy ??\n            resolveForwardHeadersPolicy(undefined),\n        ),\n      }),\n  });\n}\n"],"mappings":";;;;;AAgCA,SAAgB,iBAAiB,EAC/B,SACA,SACA,SACA,UACA,SACmC;AACnC,QAAOA,4CAAuB;EAC5B;EACA,eAAe,QAAQ;EAGvB;EACA,WAAW,QAAQ;EACnB,yBACE,QAAQ,OAAO,QAAQ;GACrB;GACA;GAaA,SAASC,6CACP,OAAO,SACP,SAIA,QAAQ,wBACNC,iDAA4B,OAAU,CACzC;GACF,CAAC;EACL,CAAC"}
+{"version":3,"file":"connect.cjs","names":["createSseEventResponse","mergeForwardableHeaders","resolveForwardHeadersPolicy"],"sources":["../../../../../src/v2/runtime/handlers/sse/connect.ts"],"sourcesContent":["import type { AbstractAgent } from \"@ag-ui/client\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport { createSseEventResponse } from \"../shared/sse-response\";\nimport {\n  mergeForwardableHeaders,\n  resolveForwardHeadersPolicy,\n} from \"../header-utils\";\n\n/**\n * `headers` lives on the HTTP-backed agent configs (e.g. `HttpAgent`), not on\n * the base `AbstractAgent`. Mirror the runtime's own optional-headers shape so\n * we can read server-configured headers off the per-request clone without a\n * cast. See `agent-utils.ts`.\n */\ntype AgentWithHeaders = AbstractAgent & {\n  headers?: Record<string, string>;\n};\n\ninterface HandleSseConnectParams {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agentId: string;\n  threadId: string;\n  /**\n   * The per-request agent clone, carrying any server-configured `agent.headers`\n   * (e.g. service-to-service auth). Used only to compute the merged header set\n   * threaded into `runner.connect` below — see the note there for why that\n   * merge is forward-looking plumbing rather than active outbound auth today.\n   */\n  agent?: AgentWithHeaders;\n}\n\nexport function handleSseConnect({\n  runtime,\n  request,\n  agentId,\n  threadId,\n  agent,\n}: HandleSseConnectParams): Response {\n  return createSseEventResponse({\n    request,\n    debugEventBus: runtime.debugEventBus,\n    // Forward the real agentId so debug envelopes reflect the agent the\n    // route resolved to — not the literal string \"connect\".\n    agentId,\n    telemetry: runtime.telemetry,\n    keepAliveIntervalSeconds: runtime.sseKeepAliveIntervalSeconds,\n    observableFactory: () =>\n      runtime.runner.connect({\n        threadId,\n        agentId,\n        // Forward-looking plumbing: we compute the merged header set (server\n        // `agent.headers` win on collision, case-insensitively; non-colliding\n        // inbound headers still forward — see `mergeForwardableHeaders`, #5712)\n        // and thread it into `runner.connect`. NO shipped runner consumes the\n        // `headers` field of `AgentRunnerConnectRequest` today — every runner\n        // (in-memory, intelligence, telemetry, sqlite) reads only `threadId`.\n        // The real outbound header forwarding is the /run path, where\n        // `cloneAgentForRequest` mutates `agent.headers` directly\n        // (agent-utils.ts). This wiring exists so a future outbound-connecting\n        // runner can pick the merged headers up without a route change; the\n        // collision precedence noted here is purely about that merge, not about\n        // middleware/mutation parity with /run.\n        headers: mergeForwardableHeaders(\n          agent?.headers,\n          request,\n          // Optional on `CopilotRuntimeLike` (non-breaking minor release);\n          // coalesce a policy-less external implementor to the default resolved\n          // policy (default-on denylist) instead of dereffing undefined.\n          runtime.forwardHeadersPolicy ??\n            resolveForwardHeadersPolicy(undefined),\n        ),\n      }),\n  });\n}\n"],"mappings":";;;;;AAgCA,SAAgB,iBAAiB,EAC/B,SACA,SACA,SACA,UACA,SACmC;AACnC,QAAOA,4CAAuB;EAC5B;EACA,eAAe,QAAQ;EAGvB;EACA,WAAW,QAAQ;EACnB,0BAA0B,QAAQ;EAClC,yBACE,QAAQ,OAAO,QAAQ;GACrB;GACA;GAaA,SAASC,6CACP,OAAO,SACP,SAIA,QAAQ,wBACNC,iDAA4B,OAAU,CACzC;GACF,CAAC;EACL,CAAC"}

package/dist/v2/runtime/handlers/sse/connect.mjs

@@ -9,6 +9,7 @@ function handleSseConnect({ runtime, request, agentId, threadId, agent }) {
 		debugEventBus: runtime.debugEventBus,
 		agentId,
 		telemetry: runtime.telemetry,
+		keepAliveIntervalSeconds: runtime.sseKeepAliveIntervalSeconds,
 		observableFactory: () => runtime.runner.connect({
 			threadId,
 			agentId,

package/dist/v2/runtime/handlers/sse/connect.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"connect.mjs","names":[],"sources":["../../../../../src/v2/runtime/handlers/sse/connect.ts"],"sourcesContent":["import type { AbstractAgent } from \"@ag-ui/client\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport { createSseEventResponse } from \"../shared/sse-response\";\nimport {\n  mergeForwardableHeaders,\n  resolveForwardHeadersPolicy,\n} from \"../header-utils\";\n\n/**\n * `headers` lives on the HTTP-backed agent configs (e.g. `HttpAgent`), not on\n * the base `AbstractAgent`. Mirror the runtime's own optional-headers shape so\n * we can read server-configured headers off the per-request clone without a\n * cast. See `agent-utils.ts`.\n */\ntype AgentWithHeaders = AbstractAgent & {\n  headers?: Record<string, string>;\n};\n\ninterface HandleSseConnectParams {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agentId: string;\n  threadId: string;\n  /**\n   * The per-request agent clone, carrying any server-configured `agent.headers`\n   * (e.g. service-to-service auth). Used only to compute the merged header set\n   * threaded into `runner.connect` below — see the note there for why that\n   * merge is forward-looking plumbing rather than active outbound auth today.\n   */\n  agent?: AgentWithHeaders;\n}\n\nexport function handleSseConnect({\n  runtime,\n  request,\n  agentId,\n  threadId,\n  agent,\n}: HandleSseConnectParams): Response {\n  return createSseEventResponse({\n    request,\n    debugEventBus: runtime.debugEventBus,\n    // Forward the real agentId so debug envelopes reflect the agent the\n    // route resolved to — not the literal string \"connect\".\n    agentId,\n    telemetry: runtime.telemetry,\n    observableFactory: () =>\n      runtime.runner.connect({\n        threadId,\n        agentId,\n        // Forward-looking plumbing: we compute the merged header set (server\n        // `agent.headers` win on collision, case-insensitively; non-colliding\n        // inbound headers still forward — see `mergeForwardableHeaders`, #5712)\n        // and thread it into `runner.connect`. NO shipped runner consumes the\n        // `headers` field of `AgentRunnerConnectRequest` today — every runner\n        // (in-memory, intelligence, telemetry, sqlite) reads only `threadId`.\n        // The real outbound header forwarding is the /run path, where\n        // `cloneAgentForRequest` mutates `agent.headers` directly\n        // (agent-utils.ts). This wiring exists so a future outbound-connecting\n        // runner can pick the merged headers up without a route change; the\n        // collision precedence noted here is purely about that merge, not about\n        // middleware/mutation parity with /run.\n        headers: mergeForwardableHeaders(\n          agent?.headers,\n          request,\n          // Optional on `CopilotRuntimeLike` (non-breaking minor release);\n          // coalesce a policy-less external implementor to the default resolved\n          // policy (default-on denylist) instead of dereffing undefined.\n          runtime.forwardHeadersPolicy ??\n            resolveForwardHeadersPolicy(undefined),\n        ),\n      }),\n  });\n}\n"],"mappings":";;;;;AAgCA,SAAgB,iBAAiB,EAC/B,SACA,SACA,SACA,UACA,SACmC;AACnC,QAAO,uBAAuB;EAC5B;EACA,eAAe,QAAQ;EAGvB;EACA,WAAW,QAAQ;EACnB,yBACE,QAAQ,OAAO,QAAQ;GACrB;GACA;GAaA,SAAS,wBACP,OAAO,SACP,SAIA,QAAQ,wBACN,4BAA4B,OAAU,CACzC;GACF,CAAC;EACL,CAAC"}
+{"version":3,"file":"connect.mjs","names":[],"sources":["../../../../../src/v2/runtime/handlers/sse/connect.ts"],"sourcesContent":["import type { AbstractAgent } from \"@ag-ui/client\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport { createSseEventResponse } from \"../shared/sse-response\";\nimport {\n  mergeForwardableHeaders,\n  resolveForwardHeadersPolicy,\n} from \"../header-utils\";\n\n/**\n * `headers` lives on the HTTP-backed agent configs (e.g. `HttpAgent`), not on\n * the base `AbstractAgent`. Mirror the runtime's own optional-headers shape so\n * we can read server-configured headers off the per-request clone without a\n * cast. See `agent-utils.ts`.\n */\ntype AgentWithHeaders = AbstractAgent & {\n  headers?: Record<string, string>;\n};\n\ninterface HandleSseConnectParams {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agentId: string;\n  threadId: string;\n  /**\n   * The per-request agent clone, carrying any server-configured `agent.headers`\n   * (e.g. service-to-service auth). Used only to compute the merged header set\n   * threaded into `runner.connect` below — see the note there for why that\n   * merge is forward-looking plumbing rather than active outbound auth today.\n   */\n  agent?: AgentWithHeaders;\n}\n\nexport function handleSseConnect({\n  runtime,\n  request,\n  agentId,\n  threadId,\n  agent,\n}: HandleSseConnectParams): Response {\n  return createSseEventResponse({\n    request,\n    debugEventBus: runtime.debugEventBus,\n    // Forward the real agentId so debug envelopes reflect the agent the\n    // route resolved to — not the literal string \"connect\".\n    agentId,\n    telemetry: runtime.telemetry,\n    keepAliveIntervalSeconds: runtime.sseKeepAliveIntervalSeconds,\n    observableFactory: () =>\n      runtime.runner.connect({\n        threadId,\n        agentId,\n        // Forward-looking plumbing: we compute the merged header set (server\n        // `agent.headers` win on collision, case-insensitively; non-colliding\n        // inbound headers still forward — see `mergeForwardableHeaders`, #5712)\n        // and thread it into `runner.connect`. NO shipped runner consumes the\n        // `headers` field of `AgentRunnerConnectRequest` today — every runner\n        // (in-memory, intelligence, telemetry, sqlite) reads only `threadId`.\n        // The real outbound header forwarding is the /run path, where\n        // `cloneAgentForRequest` mutates `agent.headers` directly\n        // (agent-utils.ts). This wiring exists so a future outbound-connecting\n        // runner can pick the merged headers up without a route change; the\n        // collision precedence noted here is purely about that merge, not about\n        // middleware/mutation parity with /run.\n        headers: mergeForwardableHeaders(\n          agent?.headers,\n          request,\n          // Optional on `CopilotRuntimeLike` (non-breaking minor release);\n          // coalesce a policy-less external implementor to the default resolved\n          // policy (default-on denylist) instead of dereffing undefined.\n          runtime.forwardHeadersPolicy ??\n            resolveForwardHeadersPolicy(undefined),\n        ),\n      }),\n  });\n}\n"],"mappings":";;;;;AAgCA,SAAgB,iBAAiB,EAC/B,SACA,SACA,SACA,UACA,SACmC;AACnC,QAAO,uBAAuB;EAC5B;EACA,eAAe,QAAQ;EAGvB;EACA,WAAW,QAAQ;EACnB,0BAA0B,QAAQ;EAClC,yBACE,QAAQ,OAAO,QAAQ;GACrB;GACA;GAaA,SAAS,wBACP,OAAO,SACP,SAIA,QAAQ,wBACN,4BAA4B,OAAU,CACzC;GACF,CAAC;EACL,CAAC"}

package/dist/v2/runtime/handlers/sse/run.cjs

@@ -13,6 +13,8 @@ function handleSseRun({ runtime, request, agent, input, agentId, debug, logger,
 		runtimeErrorReporter: require_runtime_error_reporter.getRuntimeErrorReporter(runtime),
 		startTime,
 		telemetry: runtime.telemetry,
+		keepAliveIntervalSeconds: runtime.sseKeepAliveIntervalSeconds,
+		executionSeed: { llmHostClass: agent.modelHostClass ?? "unknown" },
 		observableFactory: () => runtime.runner.run({
 			threadId: input.threadId,
 			agent,

package/dist/v2/runtime/handlers/sse/run.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"run.cjs","names":["createSseEventResponse","getRuntimeErrorReporter"],"sources":["../../../../../src/v2/runtime/handlers/sse/run.ts"],"sourcesContent":["import type { AbstractAgent, RunAgentInput } from \"@ag-ui/client\";\nimport type { ResolvedDebugConfig } from \"@copilotkit/shared\";\nimport type { CopilotRuntimeLogger } from \"../../../../v1-deprecated/lib/logger\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport { getRuntimeErrorReporter } from \"../../core/runtime-error-reporter\";\nimport { createSseEventResponse } from \"../shared/sse-response\";\n\ninterface HandleSseRunParams {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agent: AbstractAgent;\n  input: RunAgentInput;\n  agentId: string;\n  debug?: ResolvedDebugConfig;\n  /** Pre-created logger instance to avoid creating a new pino logger per request. */\n  logger?: CopilotRuntimeLogger;\n  startTime?: number;\n}\n\nexport function handleSseRun({\n  runtime,\n  request,\n  agent,\n  input,\n  agentId,\n  debug,\n  logger,\n  startTime,\n}: HandleSseRunParams): Response {\n  return createSseEventResponse({\n    request,\n    debugEventBus: runtime.debugEventBus,\n    agentId,\n    debug,\n    logger,\n    runtimeErrorReporter: getRuntimeErrorReporter(runtime),\n    startTime,\n    telemetry: runtime.telemetry,\n    observableFactory: () =>\n      runtime.runner.run({\n        threadId: input.threadId,\n        agent,\n        input,\n      }),\n  });\n}\n"],"mappings":";;;;;AAmBA,SAAgB,aAAa,EAC3B,SACA,SACA,OACA,OACA,SACA,OACA,QACA,aAC+B;AAC/B,QAAOA,4CAAuB;EAC5B;EACA,eAAe,QAAQ;EACvB;EACA;EACA;EACA,sBAAsBC,uDAAwB,QAAQ;EACtD;EACA,WAAW,QAAQ;EACnB,yBACE,QAAQ,OAAO,IAAI;GACjB,UAAU,MAAM;GAChB;GACA;GACD,CAAC;EACL,CAAC"}
+{"version":3,"file":"run.cjs","names":["createSseEventResponse","getRuntimeErrorReporter"],"sources":["../../../../../src/v2/runtime/handlers/sse/run.ts"],"sourcesContent":["import type { AbstractAgent, RunAgentInput } from \"@ag-ui/client\";\nimport type { ResolvedDebugConfig, ModelHostClass } from \"@copilotkit/shared\";\nimport type { CopilotRuntimeLogger } from \"../../../../v1-deprecated/lib/logger\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport { getRuntimeErrorReporter } from \"../../core/runtime-error-reporter\";\nimport { createSseEventResponse } from \"../shared/sse-response\";\n\ninterface HandleSseRunParams {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agent: AbstractAgent;\n  input: RunAgentInput;\n  agentId: string;\n  debug?: ResolvedDebugConfig;\n  /** Pre-created logger instance to avoid creating a new pino logger per request. */\n  logger?: CopilotRuntimeLogger;\n  startTime?: number;\n}\n\nexport function handleSseRun({\n  runtime,\n  request,\n  agent,\n  input,\n  agentId,\n  debug,\n  logger,\n  startTime,\n}: HandleSseRunParams): Response {\n  return createSseEventResponse({\n    request,\n    debugEventBus: runtime.debugEventBus,\n    agentId,\n    debug,\n    logger,\n    runtimeErrorReporter: getRuntimeErrorReporter(runtime),\n    startTime,\n    telemetry: runtime.telemetry,\n    keepAliveIntervalSeconds: runtime.sseKeepAliveIntervalSeconds,\n    // Read structurally rather than via `instanceof BuiltInAgent`, which would\n    // pull the agent module into this handler. Any agent can opt in by\n    // exposing the same property.\n    executionSeed: {\n      llmHostClass:\n        (agent as { modelHostClass?: ModelHostClass }).modelHostClass ??\n        \"unknown\",\n    },\n    observableFactory: () =>\n      runtime.runner.run({\n        threadId: input.threadId,\n        agent,\n        input,\n      }),\n  });\n}\n"],"mappings":";;;;;AAmBA,SAAgB,aAAa,EAC3B,SACA,SACA,OACA,OACA,SACA,OACA,QACA,aAC+B;AAC/B,QAAOA,4CAAuB;EAC5B;EACA,eAAe,QAAQ;EACvB;EACA;EACA;EACA,sBAAsBC,uDAAwB,QAAQ;EACtD;EACA,WAAW,QAAQ;EACnB,0BAA0B,QAAQ;EAIlC,eAAe,EACb,cACG,MAA8C,kBAC/C,WACH;EACD,yBACE,QAAQ,OAAO,IAAI;GACjB,UAAU,MAAM;GAChB;GACA;GACD,CAAC;EACL,CAAC"}

package/dist/v2/runtime/handlers/sse/run.mjs

@@ -13,6 +13,8 @@ function handleSseRun({ runtime, request, agent, input, agentId, debug, logger,
 		runtimeErrorReporter: getRuntimeErrorReporter(runtime),
 		startTime,
 		telemetry: runtime.telemetry,
+		keepAliveIntervalSeconds: runtime.sseKeepAliveIntervalSeconds,
+		executionSeed: { llmHostClass: agent.modelHostClass ?? "unknown" },
 		observableFactory: () => runtime.runner.run({
 			threadId: input.threadId,
 			agent,

package/dist/v2/runtime/handlers/sse/run.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"run.mjs","names":[],"sources":["../../../../../src/v2/runtime/handlers/sse/run.ts"],"sourcesContent":["import type { AbstractAgent, RunAgentInput } from \"@ag-ui/client\";\nimport type { ResolvedDebugConfig } from \"@copilotkit/shared\";\nimport type { CopilotRuntimeLogger } from \"../../../../v1-deprecated/lib/logger\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport { getRuntimeErrorReporter } from \"../../core/runtime-error-reporter\";\nimport { createSseEventResponse } from \"../shared/sse-response\";\n\ninterface HandleSseRunParams {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agent: AbstractAgent;\n  input: RunAgentInput;\n  agentId: string;\n  debug?: ResolvedDebugConfig;\n  /** Pre-created logger instance to avoid creating a new pino logger per request. */\n  logger?: CopilotRuntimeLogger;\n  startTime?: number;\n}\n\nexport function handleSseRun({\n  runtime,\n  request,\n  agent,\n  input,\n  agentId,\n  debug,\n  logger,\n  startTime,\n}: HandleSseRunParams): Response {\n  return createSseEventResponse({\n    request,\n    debugEventBus: runtime.debugEventBus,\n    agentId,\n    debug,\n    logger,\n    runtimeErrorReporter: getRuntimeErrorReporter(runtime),\n    startTime,\n    telemetry: runtime.telemetry,\n    observableFactory: () =>\n      runtime.runner.run({\n        threadId: input.threadId,\n        agent,\n        input,\n      }),\n  });\n}\n"],"mappings":";;;;;AAmBA,SAAgB,aAAa,EAC3B,SACA,SACA,OACA,OACA,SACA,OACA,QACA,aAC+B;AAC/B,QAAO,uBAAuB;EAC5B;EACA,eAAe,QAAQ;EACvB;EACA;EACA;EACA,sBAAsB,wBAAwB,QAAQ;EACtD;EACA,WAAW,QAAQ;EACnB,yBACE,QAAQ,OAAO,IAAI;GACjB,UAAU,MAAM;GAChB;GACA;GACD,CAAC;EACL,CAAC"}
+{"version":3,"file":"run.mjs","names":[],"sources":["../../../../../src/v2/runtime/handlers/sse/run.ts"],"sourcesContent":["import type { AbstractAgent, RunAgentInput } from \"@ag-ui/client\";\nimport type { ResolvedDebugConfig, ModelHostClass } from \"@copilotkit/shared\";\nimport type { CopilotRuntimeLogger } from \"../../../../v1-deprecated/lib/logger\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport { getRuntimeErrorReporter } from \"../../core/runtime-error-reporter\";\nimport { createSseEventResponse } from \"../shared/sse-response\";\n\ninterface HandleSseRunParams {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agent: AbstractAgent;\n  input: RunAgentInput;\n  agentId: string;\n  debug?: ResolvedDebugConfig;\n  /** Pre-created logger instance to avoid creating a new pino logger per request. */\n  logger?: CopilotRuntimeLogger;\n  startTime?: number;\n}\n\nexport function handleSseRun({\n  runtime,\n  request,\n  agent,\n  input,\n  agentId,\n  debug,\n  logger,\n  startTime,\n}: HandleSseRunParams): Response {\n  return createSseEventResponse({\n    request,\n    debugEventBus: runtime.debugEventBus,\n    agentId,\n    debug,\n    logger,\n    runtimeErrorReporter: getRuntimeErrorReporter(runtime),\n    startTime,\n    telemetry: runtime.telemetry,\n    keepAliveIntervalSeconds: runtime.sseKeepAliveIntervalSeconds,\n    // Read structurally rather than via `instanceof BuiltInAgent`, which would\n    // pull the agent module into this handler. Any agent can opt in by\n    // exposing the same property.\n    executionSeed: {\n      llmHostClass:\n        (agent as { modelHostClass?: ModelHostClass }).modelHostClass ??\n        \"unknown\",\n    },\n    observableFactory: () =>\n      runtime.runner.run({\n        threadId: input.threadId,\n        agent,\n        input,\n      }),\n  });\n}\n"],"mappings":";;;;;AAmBA,SAAgB,aAAa,EAC3B,SACA,SACA,OACA,OACA,SACA,OACA,QACA,aAC+B;AAC/B,QAAO,uBAAuB;EAC5B;EACA,eAAe,QAAQ;EACvB;EACA;EACA;EACA,sBAAsB,wBAAwB,QAAQ;EACtD;EACA,WAAW,QAAQ;EACnB,0BAA0B,QAAQ;EAIlC,eAAe,EACb,cACG,MAA8C,kBAC/C,WACH;EACD,yBACE,QAAQ,OAAO,IAAI;GACjB,UAAU,MAAM;GAChB;GACA;GACD,CAAC;EACL,CAAC"}

package/dist/v2/runtime/index.d.cts

@@ -1,11 +1,11 @@
 
 import { TranscribeFileOptions, TranscriptionService } from "./transcription-service/transcription-service.cjs";
 import { AgentRunner, AgentRunnerConnectRequest, AgentRunnerIsRunningRequest, AgentRunnerRunRequest, AgentRunnerStopRequest, LocalThreadEndpointRecord, LocalThreadEndpointRunner, supportsLocalThreadEndpoints } from "./runner/agent-runner.cjs";
-import { CopilotRuntimeLearningConfig, CopilotRuntimeLearningContext, CopilotRuntimeUser, GetLearningContainerId, LearningContainerSelectorInput } from "./core/learning.cjs";
 import { GetLearnedSkillsSnapshotRequest, LearnedSkillsError, LearnedSkillsErrorCode, LearnedSkillsSnapshotResult } from "./intelligence-platform/learned-skills.cjs";
-import { CopilotKitIntelligence, CopilotKitIntelligenceConfig, CreateThreadRequest, ListThreadsResponse, SubscribeToThreadsRequest, SubscribeToThreadsResponse, ThreadSummary, UpdateThreadRequest } from "./intelligence-platform/client.cjs";
 import "./intelligence-platform/index.cjs";
 import { AgentFactoryContext, AgentsConfig, AgentsFactory, CopilotIntelligenceRuntime, CopilotIntelligenceRuntimeLike, CopilotIntelligenceRuntimeOptions, CopilotRuntime, CopilotRuntimeConstructor, CopilotRuntimeLike, CopilotRuntimeMemoryConfig, CopilotRuntimeOptions, CopilotSseRuntime, CopilotSseRuntimeLike, CopilotSseRuntimeOptions, IdentifyUserCallback, McpAppsConfig, McpAppsServerConfig, MemoryAccess, MemoryConsumer, MemoryGrant, OpenGenerativeUIConfig, OpenGenerativeUIOptions, RuntimeWithDeclaredChannels, VERSION, isA2UIEnabled, isIntelligenceRuntime, resolveAgents } from "./core/runtime.cjs";
+import { CopilotRuntimeLearningConfig, CopilotRuntimeLearningContext, CopilotRuntimeUser, GetLearningContainerId, LearningContainerSelectorInput } from "./core/learning.cjs";
+import { CopilotKitIntelligence, CopilotKitIntelligenceConfig, CreateThreadRequest, ListThreadsResponse, SubscribeToThreadsRequest, SubscribeToThreadsResponse, ThreadSummary, UpdateThreadRequest } from "./intelligence-platform/client.cjs";
 import { CopilotCorsConfig } from "./core/fetch-cors.cjs";
 import { CopilotRuntimeHooks, ErrorHookContext, HandlerHookContext, HookContext, ResponseHookContext, RouteInfo } from "./core/hooks.cjs";
 import { ChannelStatus, ChannelsControl } from "./core/channel-manager.cjs";
@@ -16,7 +16,7 @@ import { createCopilotEndpointSingleRouteExpress } from "./endpoints/express-sin
 import "./endpoints/index.cjs";
 import { InMemoryAgentRunner, InMemoryAgentRunnerOptions, InMemoryLimits, InMemoryThread, ɵBoundedThreadStore, ɵGLOBAL_STORE, ɵINMEMORY_DEFAULTS, ɵestimateBytes, ɵnormalizeLimits } from "./runner/in-memory.cjs";
 import { IntelligenceAgentRunner, IntelligenceAgentRunnerOptions, RunnerStartupBoundary } from "./runner/intelligence.cjs";
-import { finalizeRunEvents } from "./runner/index.cjs";
+import { FinalizeRunOptions, RunEventFinalizer, createRunEventFinalizer, finalizeRunEvents } from "./runner/index.cjs";
 import { CopilotRuntimeFetchHandler, CopilotRuntimeFetchHandlerWithChannels, CopilotRuntimeHandlerOptions, createCopilotRuntimeHandler } from "./core/fetch-handler.cjs";
 import { MCPClient, MCPTransport } from "@ai-sdk/mcp";
 

package/dist/v2/runtime/index.d.mts

@@ -1,11 +1,11 @@
 
 import { TranscribeFileOptions, TranscriptionService } from "./transcription-service/transcription-service.mjs";
 import { AgentRunner, AgentRunnerConnectRequest, AgentRunnerIsRunningRequest, AgentRunnerRunRequest, AgentRunnerStopRequest, LocalThreadEndpointRecord, LocalThreadEndpointRunner, supportsLocalThreadEndpoints } from "./runner/agent-runner.mjs";
-import { CopilotRuntimeLearningConfig, CopilotRuntimeLearningContext, CopilotRuntimeUser, GetLearningContainerId, LearningContainerSelectorInput } from "./core/learning.mjs";
 import { GetLearnedSkillsSnapshotRequest, LearnedSkillsError, LearnedSkillsErrorCode, LearnedSkillsSnapshotResult } from "./intelligence-platform/learned-skills.mjs";
-import { CopilotKitIntelligence, CopilotKitIntelligenceConfig, CreateThreadRequest, ListThreadsResponse, SubscribeToThreadsRequest, SubscribeToThreadsResponse, ThreadSummary, UpdateThreadRequest } from "./intelligence-platform/client.mjs";
 import "./intelligence-platform/index.mjs";
 import { AgentFactoryContext, AgentsConfig, AgentsFactory, CopilotIntelligenceRuntime, CopilotIntelligenceRuntimeLike, CopilotIntelligenceRuntimeOptions, CopilotRuntime, CopilotRuntimeConstructor, CopilotRuntimeLike, CopilotRuntimeMemoryConfig, CopilotRuntimeOptions, CopilotSseRuntime, CopilotSseRuntimeLike, CopilotSseRuntimeOptions, IdentifyUserCallback, McpAppsConfig, McpAppsServerConfig, MemoryAccess, MemoryConsumer, MemoryGrant, OpenGenerativeUIConfig, OpenGenerativeUIOptions, RuntimeWithDeclaredChannels, VERSION, isA2UIEnabled, isIntelligenceRuntime, resolveAgents } from "./core/runtime.mjs";
+import { CopilotRuntimeLearningConfig, CopilotRuntimeLearningContext, CopilotRuntimeUser, GetLearningContainerId, LearningContainerSelectorInput } from "./core/learning.mjs";
+import { CopilotKitIntelligence, CopilotKitIntelligenceConfig, CreateThreadRequest, ListThreadsResponse, SubscribeToThreadsRequest, SubscribeToThreadsResponse, ThreadSummary, UpdateThreadRequest } from "./intelligence-platform/client.mjs";
 import { CopilotCorsConfig } from "./core/fetch-cors.mjs";
 import { CopilotRuntimeHooks, ErrorHookContext, HandlerHookContext, HookContext, ResponseHookContext, RouteInfo } from "./core/hooks.mjs";
 import { ChannelStatus, ChannelsControl } from "./core/channel-manager.mjs";
@@ -16,7 +16,7 @@ import { createCopilotEndpointSingleRouteExpress } from "./endpoints/express-sin
 import "./endpoints/index.mjs";
 import { InMemoryAgentRunner, InMemoryAgentRunnerOptions, InMemoryLimits, InMemoryThread, ɵBoundedThreadStore, ɵGLOBAL_STORE, ɵINMEMORY_DEFAULTS, ɵestimateBytes, ɵnormalizeLimits } from "./runner/in-memory.mjs";
 import { IntelligenceAgentRunner, IntelligenceAgentRunnerOptions, RunnerStartupBoundary } from "./runner/intelligence.mjs";
-import { finalizeRunEvents } from "./runner/index.mjs";
+import { FinalizeRunOptions, RunEventFinalizer, createRunEventFinalizer, finalizeRunEvents } from "./runner/index.mjs";
 import { CopilotRuntimeFetchHandler, CopilotRuntimeFetchHandlerWithChannels, CopilotRuntimeHandlerOptions, createCopilotRuntimeHandler } from "./core/fetch-handler.mjs";
 import { MCPClient, MCPTransport } from "@ai-sdk/mcp";
 

package/dist/v2/runtime/intelligence-platform/client.d.cts

@@ -1,6 +1,6 @@
 
-import { GetLearningContainerId } from "../core/learning.cjs";
 import { GetLearnedSkillsSnapshotRequest, LearnedSkillsSnapshotResult } from "./learned-skills.cjs";
+import { GetLearningContainerId } from "../core/learning.cjs";
 import { InspectorLearningRequestV1, InspectorLearningSnapshotV1, InspectorMetadataV1, RuntimeEntitlementResponse } from "@copilotkit/shared";
 
 //#region src/v2/runtime/intelligence-platform/client.d.ts

package/dist/v2/runtime/intelligence-platform/client.d.mts

@@ -1,6 +1,6 @@
 
-import { GetLearningContainerId } from "../core/learning.mjs";
 import { GetLearnedSkillsSnapshotRequest, LearnedSkillsSnapshotResult } from "./learned-skills.mjs";
+import { GetLearningContainerId } from "../core/learning.mjs";
 import { InspectorLearningRequestV1, InspectorLearningSnapshotV1, InspectorMetadataV1, RuntimeEntitlementResponse } from "@copilotkit/shared";
 
 //#region src/v2/runtime/intelligence-platform/client.d.ts

package/dist/v2/runtime/intelligence-platform/skill-registry/archive.cjs

@@ -0,0 +1,132 @@
+require("reflect-metadata");
+const require_runtime = require('../../../../_virtual/_rolldown/runtime.cjs');
+const require_errors = require('./errors.cjs');
+let yauzl = require("yauzl");
+
+//#region src/v2/runtime/intelligence-platform/skill-registry/archive.ts
+/** Internal corruption bounds, including manifest and directory entries. */
+const MAX_ARCHIVE_ENTRIES = 1e3;
+const MAX_SNAPSHOT_BYTES = 32 * 1024 * 1024;
+function safeRelativePath(path) {
+	return path.length > 0 && !/[\\\x00-\x1f\x7f]/.test(path) && !/^[a-z]:/i.test(path) && path.split("/").every((part) => part !== "" && part !== "." && part !== "..");
+}
+/** Decode only the listed ZIP namespace. No filesystem is involved. */
+function readArchive(bytes, signal) {
+	return new Promise((resolve, reject) => {
+		let archive;
+		let stream;
+		let settled = false;
+		const finish = (error) => {
+			if (settled) return;
+			settled = true;
+			signal?.removeEventListener("abort", abort);
+			stream?.destroy();
+			archive?.close();
+			if (error !== void 0) reject(error);
+			else resolve(files);
+		};
+		const abort = () => finish(signal?.reason ?? require_errors.invalidSnapshot());
+		const files = /* @__PURE__ */ new Map();
+		const names = /* @__PURE__ */ new Set();
+		let decodedBytes = 0;
+		signal?.addEventListener("abort", abort, { once: true });
+		if (signal?.aborted) {
+			abort();
+			return;
+		}
+		(0, yauzl.fromBuffer)(bytes, {
+			lazyEntries: true,
+			decodeStrings: false,
+			validateEntrySizes: true,
+			autoClose: false
+		}, (error, zip) => {
+			if (error) {
+				finish(require_errors.invalidSnapshot(error));
+				return;
+			}
+			archive = zip;
+			if (settled) {
+				zip.close();
+				return;
+			}
+			zip.on("error", (cause) => finish(require_errors.invalidSnapshot(cause)));
+			zip.on("end", () => finish());
+			if (zip.entryCount > MAX_ARCHIVE_ENTRIES) {
+				finish(require_errors.invalidSnapshot());
+				return;
+			}
+			zip.on("entry", (entry) => {
+				try {
+					const rawName = entry.fileName;
+					if (!Buffer.isBuffer(rawName)) throw require_errors.invalidSnapshot();
+					const name = new TextDecoder("utf-8", {
+						fatal: true,
+						ignoreBOM: true
+					}).decode(rawName);
+					const directory = name.endsWith("/");
+					if (!safeRelativePath(directory ? name.slice(0, -1) : name) || names.has(name)) throw require_errors.invalidSnapshot();
+					names.add(name);
+					const fileType = entry.externalFileAttributes >>> 16 & 61440;
+					if (fileType !== 0 && fileType !== (directory ? 16384 : 32768)) throw require_errors.invalidSnapshot();
+					if (entry.isEncrypted() || ![0, 8].includes(entry.compressionMethod)) throw require_errors.invalidSnapshot();
+					if (!Number.isSafeInteger(entry.uncompressedSize) || entry.uncompressedSize < 0) throw require_errors.invalidSnapshot();
+					decodedBytes += entry.uncompressedSize;
+					if (decodedBytes > MAX_SNAPSHOT_BYTES || directory && entry.uncompressedSize !== 0) throw require_errors.invalidSnapshot();
+					const local = entry.relativeOffsetOfLocalHeader;
+					if (local < 0 || local + 30 > bytes.length || bytes.readUInt32LE(local) !== 67324752) throw require_errors.invalidSnapshot();
+					if (bytes.readUInt16LE(local + 6) !== entry.generalPurposeBitFlag || bytes.readUInt16LE(local + 8) !== entry.compressionMethod) throw require_errors.invalidSnapshot();
+					const localNameLength = bytes.readUInt16LE(local + 26);
+					const localExtraLength = bytes.readUInt16LE(local + 28);
+					if (local + 30 + localNameLength + localExtraLength + entry.compressedSize > bytes.length || !bytes.subarray(local + 30, local + 30 + localNameLength).equals(rawName)) throw require_errors.invalidSnapshot();
+					if (!(entry.generalPurposeBitFlag & 8) && (bytes.readUInt32LE(local + 18) !== entry.compressedSize || bytes.readUInt32LE(local + 22) !== entry.uncompressedSize)) throw require_errors.invalidSnapshot();
+					if (directory) {
+						zip.readEntry();
+						return;
+					}
+					zip.openReadStream(entry, (readError, readStream) => {
+						if (readError) {
+							finish(require_errors.invalidSnapshot(readError));
+							return;
+						}
+						stream = readStream;
+						if (settled) {
+							readStream.destroy();
+							return;
+						}
+						const chunks = [];
+						let size = 0;
+						readStream.on("error", (cause) => finish(require_errors.invalidSnapshot(cause)));
+						readStream.on("data", (chunk) => {
+							size += chunk.length;
+							if (size > entry.uncompressedSize || size > MAX_SNAPSHOT_BYTES) {
+								finish(require_errors.invalidSnapshot());
+								return;
+							}
+							chunks.push(chunk);
+						});
+						readStream.on("end", () => {
+							if (settled) return;
+							if (size !== entry.uncompressedSize) {
+								finish(require_errors.invalidSnapshot());
+								return;
+							}
+							files.set(name, Buffer.concat(chunks, size));
+							stream = void 0;
+							zip.readEntry();
+						});
+					});
+				} catch (cause) {
+					finish(require_errors.invalidSnapshot(cause));
+				}
+			});
+			zip.readEntry();
+		});
+	});
+}
+
+//#endregion
+exports.MAX_ARCHIVE_ENTRIES = MAX_ARCHIVE_ENTRIES;
+exports.MAX_SNAPSHOT_BYTES = MAX_SNAPSHOT_BYTES;
+exports.readArchive = readArchive;
+exports.safeRelativePath = safeRelativePath;
+//# sourceMappingURL=archive.cjs.map

package/dist/v2/runtime/intelligence-platform/skill-registry/archive.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.cjs","names":["invalidSnapshot"],"sources":["../../../../../src/v2/runtime/intelligence-platform/skill-registry/archive.ts"],"sourcesContent":["import { fromBuffer } from \"yauzl\";\nimport type { Entry, ZipFile } from \"yauzl\";\nimport type { Readable } from \"node:stream\";\nimport { invalidSnapshot } from \"./errors\";\n\n/** Internal corruption bounds, including manifest and directory entries. */\nexport const MAX_ARCHIVE_ENTRIES = 1_000;\nexport const MAX_SNAPSHOT_BYTES = 32 * 1024 * 1024;\n\nexport function safeRelativePath(path: string): boolean {\n  return (\n    path.length > 0 &&\n    // Reject control bytes in archive paths, including NUL and DEL.\n    // eslint-disable-next-line no-control-regex\n    !/[\\\\\\x00-\\x1f\\x7f]/.test(path) &&\n    !/^[a-z]:/i.test(path) &&\n    path\n      .split(\"/\")\n      .every((part) => part !== \"\" && part !== \".\" && part !== \"..\")\n  );\n}\n\n/** Decode only the listed ZIP namespace. No filesystem is involved. */\nexport function readArchive(\n  bytes: Buffer,\n  signal?: AbortSignal,\n): Promise<Map<string, Buffer>> {\n  return new Promise((resolve, reject) => {\n    let archive: ZipFile | undefined;\n    let stream: Readable | undefined;\n    let settled = false;\n    const finish = (error?: unknown) => {\n      if (settled) return;\n      settled = true;\n      signal?.removeEventListener(\"abort\", abort);\n      stream?.destroy();\n      archive?.close();\n      if (error !== undefined) reject(error);\n      else resolve(files);\n    };\n    const abort = () => finish(signal?.reason ?? invalidSnapshot());\n    const files = new Map<string, Buffer>();\n    const names = new Set<string>();\n    let decodedBytes = 0;\n    signal?.addEventListener(\"abort\", abort, { once: true });\n    if (signal?.aborted) {\n      abort();\n      return;\n    }\n    fromBuffer(\n      bytes,\n      {\n        lazyEntries: true,\n        decodeStrings: false,\n        validateEntrySizes: true,\n        autoClose: false,\n      },\n      (error, zip) => {\n        if (error) {\n          finish(invalidSnapshot(error));\n          return;\n        }\n        archive = zip;\n        if (settled) {\n          zip.close();\n          return;\n        }\n        zip.on(\"error\", (cause: unknown) => finish(invalidSnapshot(cause)));\n        zip.on(\"end\", () => finish());\n        if (zip.entryCount > MAX_ARCHIVE_ENTRIES) {\n          finish(invalidSnapshot());\n          return;\n        }\n        zip.on(\"entry\", (entry: Entry) => {\n          try {\n            // decodeStrings:false preserves raw UTF-8 names instead of normalizing\n            // backslashes or consulting alternate Unicode-path extra fields.\n            const rawName: unknown = entry.fileName;\n            if (!Buffer.isBuffer(rawName)) throw invalidSnapshot();\n            const name = new TextDecoder(\"utf-8\", {\n              fatal: true,\n              ignoreBOM: true,\n            }).decode(rawName);\n            const directory = name.endsWith(\"/\");\n            if (\n              !safeRelativePath(directory ? name.slice(0, -1) : name) ||\n              names.has(name)\n            )\n              throw invalidSnapshot();\n            names.add(name);\n            const fileType = (entry.externalFileAttributes >>> 16) & 0o170000;\n            if (\n              fileType !== 0 &&\n              fileType !== (directory ? 0o040000 : 0o100000)\n            )\n              throw invalidSnapshot();\n            if (\n              entry.isEncrypted() ||\n              ![0, 8].includes(entry.compressionMethod)\n            )\n              throw invalidSnapshot();\n            if (\n              !Number.isSafeInteger(entry.uncompressedSize) ||\n              entry.uncompressedSize < 0\n            )\n              throw invalidSnapshot();\n            decodedBytes += entry.uncompressedSize;\n            if (\n              decodedBytes > MAX_SNAPSHOT_BYTES ||\n              (directory && entry.uncompressedSize !== 0)\n            )\n              throw invalidSnapshot();\n            // Require the central directory and the local entry to name the same\n            // bytes. ZIP data descriptors may leave local sizes unset.\n            const local = entry.relativeOffsetOfLocalHeader;\n            if (\n              local < 0 ||\n              local + 30 > bytes.length ||\n              bytes.readUInt32LE(local) !== 0x04034b50\n            )\n              throw invalidSnapshot();\n            if (\n              bytes.readUInt16LE(local + 6) !== entry.generalPurposeBitFlag ||\n              bytes.readUInt16LE(local + 8) !== entry.compressionMethod\n            )\n              throw invalidSnapshot();\n            const localNameLength = bytes.readUInt16LE(local + 26);\n            const localExtraLength = bytes.readUInt16LE(local + 28);\n            const dataStart = local + 30 + localNameLength + localExtraLength;\n            if (\n              dataStart + entry.compressedSize > bytes.length ||\n              !bytes\n                .subarray(local + 30, local + 30 + localNameLength)\n                .equals(rawName)\n            )\n              throw invalidSnapshot();\n            if (\n              !(entry.generalPurposeBitFlag & 8) &&\n              (bytes.readUInt32LE(local + 18) !== entry.compressedSize ||\n                bytes.readUInt32LE(local + 22) !== entry.uncompressedSize)\n            )\n              throw invalidSnapshot();\n            if (directory) {\n              zip.readEntry();\n              return;\n            }\n            zip.openReadStream(entry, (readError, readStream) => {\n              if (readError) {\n                finish(invalidSnapshot(readError));\n                return;\n              }\n              stream = readStream;\n              if (settled) {\n                readStream.destroy();\n                return;\n              }\n              const chunks: Buffer[] = [];\n              let size = 0;\n              readStream.on(\"error\", (cause: unknown) =>\n                finish(invalidSnapshot(cause)),\n              );\n              readStream.on(\"data\", (chunk: Buffer) => {\n                size += chunk.length;\n                if (\n                  size > entry.uncompressedSize ||\n                  size > MAX_SNAPSHOT_BYTES\n                ) {\n                  finish(invalidSnapshot());\n                  return;\n                }\n                chunks.push(chunk);\n              });\n              readStream.on(\"end\", () => {\n                if (settled) return;\n                if (size !== entry.uncompressedSize) {\n                  finish(invalidSnapshot());\n                  return;\n                }\n                files.set(name, Buffer.concat(chunks, size));\n                stream = undefined;\n                zip.readEntry();\n              });\n            });\n          } catch (cause) {\n            finish(invalidSnapshot(cause));\n          }\n        });\n        zip.readEntry();\n      },\n    );\n  });\n}\n"],"mappings":";;;;;;;AAMA,MAAa,sBAAsB;AACnC,MAAa,qBAAqB,KAAK,OAAO;AAE9C,SAAgB,iBAAiB,MAAuB;AACtD,QACE,KAAK,SAAS,KAGd,CAAC,oBAAoB,KAAK,KAAK,IAC/B,CAAC,WAAW,KAAK,KAAK,IACtB,KACG,MAAM,IAAI,CACV,OAAO,SAAS,SAAS,MAAM,SAAS,OAAO,SAAS,KAAK;;;AAKpE,SAAgB,YACd,OACA,QAC8B;AAC9B,QAAO,IAAI,SAAS,SAAS,WAAW;EACtC,IAAI;EACJ,IAAI;EACJ,IAAI,UAAU;EACd,MAAM,UAAU,UAAoB;AAClC,OAAI,QAAS;AACb,aAAU;AACV,WAAQ,oBAAoB,SAAS,MAAM;AAC3C,WAAQ,SAAS;AACjB,YAAS,OAAO;AAChB,OAAI,UAAU,OAAW,QAAO,MAAM;OACjC,SAAQ,MAAM;;EAErB,MAAM,cAAc,OAAO,QAAQ,UAAUA,gCAAiB,CAAC;EAC/D,MAAM,wBAAQ,IAAI,KAAqB;EACvC,MAAM,wBAAQ,IAAI,KAAa;EAC/B,IAAI,eAAe;AACnB,UAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AACxD,MAAI,QAAQ,SAAS;AACnB,UAAO;AACP;;AAEF,wBACE,OACA;GACE,aAAa;GACb,eAAe;GACf,oBAAoB;GACpB,WAAW;GACZ,GACA,OAAO,QAAQ;AACd,OAAI,OAAO;AACT,WAAOA,+BAAgB,MAAM,CAAC;AAC9B;;AAEF,aAAU;AACV,OAAI,SAAS;AACX,QAAI,OAAO;AACX;;AAEF,OAAI,GAAG,UAAU,UAAmB,OAAOA,+BAAgB,MAAM,CAAC,CAAC;AACnE,OAAI,GAAG,aAAa,QAAQ,CAAC;AAC7B,OAAI,IAAI,aAAa,qBAAqB;AACxC,WAAOA,gCAAiB,CAAC;AACzB;;AAEF,OAAI,GAAG,UAAU,UAAiB;AAChC,QAAI;KAGF,MAAM,UAAmB,MAAM;AAC/B,SAAI,CAAC,OAAO,SAAS,QAAQ,CAAE,OAAMA,gCAAiB;KACtD,MAAM,OAAO,IAAI,YAAY,SAAS;MACpC,OAAO;MACP,WAAW;MACZ,CAAC,CAAC,OAAO,QAAQ;KAClB,MAAM,YAAY,KAAK,SAAS,IAAI;AACpC,SACE,CAAC,iBAAiB,YAAY,KAAK,MAAM,GAAG,GAAG,GAAG,KAAK,IACvD,MAAM,IAAI,KAAK,CAEf,OAAMA,gCAAiB;AACzB,WAAM,IAAI,KAAK;KACf,MAAM,WAAY,MAAM,2BAA2B,KAAM;AACzD,SACE,aAAa,KACb,cAAc,YAAY,QAAW,OAErC,OAAMA,gCAAiB;AACzB,SACE,MAAM,aAAa,IACnB,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,MAAM,kBAAkB,CAEzC,OAAMA,gCAAiB;AACzB,SACE,CAAC,OAAO,cAAc,MAAM,iBAAiB,IAC7C,MAAM,mBAAmB,EAEzB,OAAMA,gCAAiB;AACzB,qBAAgB,MAAM;AACtB,SACE,eAAe,sBACd,aAAa,MAAM,qBAAqB,EAEzC,OAAMA,gCAAiB;KAGzB,MAAM,QAAQ,MAAM;AACpB,SACE,QAAQ,KACR,QAAQ,KAAK,MAAM,UACnB,MAAM,aAAa,MAAM,KAAK,SAE9B,OAAMA,gCAAiB;AACzB,SACE,MAAM,aAAa,QAAQ,EAAE,KAAK,MAAM,yBACxC,MAAM,aAAa,QAAQ,EAAE,KAAK,MAAM,kBAExC,OAAMA,gCAAiB;KACzB,MAAM,kBAAkB,MAAM,aAAa,QAAQ,GAAG;KACtD,MAAM,mBAAmB,MAAM,aAAa,QAAQ,GAAG;AAEvD,SADkB,QAAQ,KAAK,kBAAkB,mBAEnC,MAAM,iBAAiB,MAAM,UACzC,CAAC,MACE,SAAS,QAAQ,IAAI,QAAQ,KAAK,gBAAgB,CAClD,OAAO,QAAQ,CAElB,OAAMA,gCAAiB;AACzB,SACE,EAAE,MAAM,wBAAwB,OAC/B,MAAM,aAAa,QAAQ,GAAG,KAAK,MAAM,kBACxC,MAAM,aAAa,QAAQ,GAAG,KAAK,MAAM,kBAE3C,OAAMA,gCAAiB;AACzB,SAAI,WAAW;AACb,UAAI,WAAW;AACf;;AAEF,SAAI,eAAe,QAAQ,WAAW,eAAe;AACnD,UAAI,WAAW;AACb,cAAOA,+BAAgB,UAAU,CAAC;AAClC;;AAEF,eAAS;AACT,UAAI,SAAS;AACX,kBAAW,SAAS;AACpB;;MAEF,MAAM,SAAmB,EAAE;MAC3B,IAAI,OAAO;AACX,iBAAW,GAAG,UAAU,UACtB,OAAOA,+BAAgB,MAAM,CAAC,CAC/B;AACD,iBAAW,GAAG,SAAS,UAAkB;AACvC,eAAQ,MAAM;AACd,WACE,OAAO,MAAM,oBACb,OAAO,oBACP;AACA,eAAOA,gCAAiB,CAAC;AACzB;;AAEF,cAAO,KAAK,MAAM;QAClB;AACF,iBAAW,GAAG,aAAa;AACzB,WAAI,QAAS;AACb,WAAI,SAAS,MAAM,kBAAkB;AACnC,eAAOA,gCAAiB,CAAC;AACzB;;AAEF,aAAM,IAAI,MAAM,OAAO,OAAO,QAAQ,KAAK,CAAC;AAC5C,gBAAS;AACT,WAAI,WAAW;QACf;OACF;aACK,OAAO;AACd,YAAOA,+BAAgB,MAAM,CAAC;;KAEhC;AACF,OAAI,WAAW;IAElB;GACD"}

package/dist/v2/runtime/intelligence-platform/skill-registry/archive.d.cts

@@ -0,0 +1,11 @@
+
+//#region src/v2/runtime/intelligence-platform/skill-registry/archive.d.ts
+/** Internal corruption bounds, including manifest and directory entries. */
+declare const MAX_ARCHIVE_ENTRIES = 1000;
+declare const MAX_SNAPSHOT_BYTES: number;
+declare function safeRelativePath(path: string): boolean;
+/** Decode only the listed ZIP namespace. No filesystem is involved. */
+declare function readArchive(bytes: Buffer, signal?: AbortSignal): Promise<Map<string, Buffer>>;
+//#endregion
+export { MAX_ARCHIVE_ENTRIES, MAX_SNAPSHOT_BYTES, readArchive, safeRelativePath };
+//# sourceMappingURL=archive.d.cts.map

package/dist/v2/runtime/intelligence-platform/skill-registry/archive.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.d.cts","names":[],"sources":["../../../../../src/v2/runtime/intelligence-platform/skill-registry/archive.ts"],"mappings":";;;cAMa,mBAAA;AAAA,cACA,kBAAA;AAAA,iBAEG,gBAAA,CAAiB,IAAA;;iBAcjB,WAAA,CACd,KAAA,EAAO,MAAA,EACP,MAAA,GAAS,WAAA,GACR,OAAA,CAAQ,GAAA,SAAY,MAAA"}

package/dist/v2/runtime/intelligence-platform/skill-registry/archive.d.mts

@@ -0,0 +1,11 @@
+
+//#region src/v2/runtime/intelligence-platform/skill-registry/archive.d.ts
+/** Internal corruption bounds, including manifest and directory entries. */
+declare const MAX_ARCHIVE_ENTRIES = 1000;
+declare const MAX_SNAPSHOT_BYTES: number;
+declare function safeRelativePath(path: string): boolean;
+/** Decode only the listed ZIP namespace. No filesystem is involved. */
+declare function readArchive(bytes: Buffer, signal?: AbortSignal): Promise<Map<string, Buffer>>;
+//#endregion
+export { MAX_ARCHIVE_ENTRIES, MAX_SNAPSHOT_BYTES, readArchive, safeRelativePath };
+//# sourceMappingURL=archive.d.mts.map

package/dist/v2/runtime/intelligence-platform/skill-registry/archive.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.d.mts","names":[],"sources":["../../../../../src/v2/runtime/intelligence-platform/skill-registry/archive.ts"],"mappings":";;;cAMa,mBAAA;AAAA,cACA,kBAAA;AAAA,iBAEG,gBAAA,CAAiB,IAAA;;iBAcjB,WAAA,CACd,KAAA,EAAO,MAAA,EACP,MAAA,GAAS,WAAA,GACR,OAAA,CAAQ,GAAA,SAAY,MAAA"}

package/dist/v2/runtime/intelligence-platform/skill-registry/archive.mjs

@@ -0,0 +1,128 @@
+import "reflect-metadata";
+import { invalidSnapshot } from "./errors.mjs";
+import { fromBuffer } from "yauzl";
+
+//#region src/v2/runtime/intelligence-platform/skill-registry/archive.ts
+/** Internal corruption bounds, including manifest and directory entries. */
+const MAX_ARCHIVE_ENTRIES = 1e3;
+const MAX_SNAPSHOT_BYTES = 32 * 1024 * 1024;
+function safeRelativePath(path) {
+	return path.length > 0 && !/[\\\x00-\x1f\x7f]/.test(path) && !/^[a-z]:/i.test(path) && path.split("/").every((part) => part !== "" && part !== "." && part !== "..");
+}
+/** Decode only the listed ZIP namespace. No filesystem is involved. */
+function readArchive(bytes, signal) {
+	return new Promise((resolve, reject) => {
+		let archive;
+		let stream;
+		let settled = false;
+		const finish = (error) => {
+			if (settled) return;
+			settled = true;
+			signal?.removeEventListener("abort", abort);
+			stream?.destroy();
+			archive?.close();
+			if (error !== void 0) reject(error);
+			else resolve(files);
+		};
+		const abort = () => finish(signal?.reason ?? invalidSnapshot());
+		const files = /* @__PURE__ */ new Map();
+		const names = /* @__PURE__ */ new Set();
+		let decodedBytes = 0;
+		signal?.addEventListener("abort", abort, { once: true });
+		if (signal?.aborted) {
+			abort();
+			return;
+		}
+		fromBuffer(bytes, {
+			lazyEntries: true,
+			decodeStrings: false,
+			validateEntrySizes: true,
+			autoClose: false
+		}, (error, zip) => {
+			if (error) {
+				finish(invalidSnapshot(error));
+				return;
+			}
+			archive = zip;
+			if (settled) {
+				zip.close();
+				return;
+			}
+			zip.on("error", (cause) => finish(invalidSnapshot(cause)));
+			zip.on("end", () => finish());
+			if (zip.entryCount > MAX_ARCHIVE_ENTRIES) {
+				finish(invalidSnapshot());
+				return;
+			}
+			zip.on("entry", (entry) => {
+				try {
+					const rawName = entry.fileName;
+					if (!Buffer.isBuffer(rawName)) throw invalidSnapshot();
+					const name = new TextDecoder("utf-8", {
+						fatal: true,
+						ignoreBOM: true
+					}).decode(rawName);
+					const directory = name.endsWith("/");
+					if (!safeRelativePath(directory ? name.slice(0, -1) : name) || names.has(name)) throw invalidSnapshot();
+					names.add(name);
+					const fileType = entry.externalFileAttributes >>> 16 & 61440;
+					if (fileType !== 0 && fileType !== (directory ? 16384 : 32768)) throw invalidSnapshot();
+					if (entry.isEncrypted() || ![0, 8].includes(entry.compressionMethod)) throw invalidSnapshot();
+					if (!Number.isSafeInteger(entry.uncompressedSize) || entry.uncompressedSize < 0) throw invalidSnapshot();
+					decodedBytes += entry.uncompressedSize;
+					if (decodedBytes > MAX_SNAPSHOT_BYTES || directory && entry.uncompressedSize !== 0) throw invalidSnapshot();
+					const local = entry.relativeOffsetOfLocalHeader;
+					if (local < 0 || local + 30 > bytes.length || bytes.readUInt32LE(local) !== 67324752) throw invalidSnapshot();
+					if (bytes.readUInt16LE(local + 6) !== entry.generalPurposeBitFlag || bytes.readUInt16LE(local + 8) !== entry.compressionMethod) throw invalidSnapshot();
+					const localNameLength = bytes.readUInt16LE(local + 26);
+					const localExtraLength = bytes.readUInt16LE(local + 28);
+					if (local + 30 + localNameLength + localExtraLength + entry.compressedSize > bytes.length || !bytes.subarray(local + 30, local + 30 + localNameLength).equals(rawName)) throw invalidSnapshot();
+					if (!(entry.generalPurposeBitFlag & 8) && (bytes.readUInt32LE(local + 18) !== entry.compressedSize || bytes.readUInt32LE(local + 22) !== entry.uncompressedSize)) throw invalidSnapshot();
+					if (directory) {
+						zip.readEntry();
+						return;
+					}
+					zip.openReadStream(entry, (readError, readStream) => {
+						if (readError) {
+							finish(invalidSnapshot(readError));
+							return;
+						}
+						stream = readStream;
+						if (settled) {
+							readStream.destroy();
+							return;
+						}
+						const chunks = [];
+						let size = 0;
+						readStream.on("error", (cause) => finish(invalidSnapshot(cause)));
+						readStream.on("data", (chunk) => {
+							size += chunk.length;
+							if (size > entry.uncompressedSize || size > MAX_SNAPSHOT_BYTES) {
+								finish(invalidSnapshot());
+								return;
+							}
+							chunks.push(chunk);
+						});
+						readStream.on("end", () => {
+							if (settled) return;
+							if (size !== entry.uncompressedSize) {
+								finish(invalidSnapshot());
+								return;
+							}
+							files.set(name, Buffer.concat(chunks, size));
+							stream = void 0;
+							zip.readEntry();
+						});
+					});
+				} catch (cause) {
+					finish(invalidSnapshot(cause));
+				}
+			});
+			zip.readEntry();
+		});
+	});
+}
+
+//#endregion
+export { MAX_ARCHIVE_ENTRIES, MAX_SNAPSHOT_BYTES, readArchive, safeRelativePath };
+//# sourceMappingURL=archive.mjs.map

package/dist/v2/runtime/intelligence-platform/skill-registry/archive.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.mjs","names":[],"sources":["../../../../../src/v2/runtime/intelligence-platform/skill-registry/archive.ts"],"sourcesContent":["import { fromBuffer } from \"yauzl\";\nimport type { Entry, ZipFile } from \"yauzl\";\nimport type { Readable } from \"node:stream\";\nimport { invalidSnapshot } from \"./errors\";\n\n/** Internal corruption bounds, including manifest and directory entries. */\nexport const MAX_ARCHIVE_ENTRIES = 1_000;\nexport const MAX_SNAPSHOT_BYTES = 32 * 1024 * 1024;\n\nexport function safeRelativePath(path: string): boolean {\n  return (\n    path.length > 0 &&\n    // Reject control bytes in archive paths, including NUL and DEL.\n    // eslint-disable-next-line no-control-regex\n    !/[\\\\\\x00-\\x1f\\x7f]/.test(path) &&\n    !/^[a-z]:/i.test(path) &&\n    path\n      .split(\"/\")\n      .every((part) => part !== \"\" && part !== \".\" && part !== \"..\")\n  );\n}\n\n/** Decode only the listed ZIP namespace. No filesystem is involved. */\nexport function readArchive(\n  bytes: Buffer,\n  signal?: AbortSignal,\n): Promise<Map<string, Buffer>> {\n  return new Promise((resolve, reject) => {\n    let archive: ZipFile | undefined;\n    let stream: Readable | undefined;\n    let settled = false;\n    const finish = (error?: unknown) => {\n      if (settled) return;\n      settled = true;\n      signal?.removeEventListener(\"abort\", abort);\n      stream?.destroy();\n      archive?.close();\n      if (error !== undefined) reject(error);\n      else resolve(files);\n    };\n    const abort = () => finish(signal?.reason ?? invalidSnapshot());\n    const files = new Map<string, Buffer>();\n    const names = new Set<string>();\n    let decodedBytes = 0;\n    signal?.addEventListener(\"abort\", abort, { once: true });\n    if (signal?.aborted) {\n      abort();\n      return;\n    }\n    fromBuffer(\n      bytes,\n      {\n        lazyEntries: true,\n        decodeStrings: false,\n        validateEntrySizes: true,\n        autoClose: false,\n      },\n      (error, zip) => {\n        if (error) {\n          finish(invalidSnapshot(error));\n          return;\n        }\n        archive = zip;\n        if (settled) {\n          zip.close();\n          return;\n        }\n        zip.on(\"error\", (cause: unknown) => finish(invalidSnapshot(cause)));\n        zip.on(\"end\", () => finish());\n        if (zip.entryCount > MAX_ARCHIVE_ENTRIES) {\n          finish(invalidSnapshot());\n          return;\n        }\n        zip.on(\"entry\", (entry: Entry) => {\n          try {\n            // decodeStrings:false preserves raw UTF-8 names instead of normalizing\n            // backslashes or consulting alternate Unicode-path extra fields.\n            const rawName: unknown = entry.fileName;\n            if (!Buffer.isBuffer(rawName)) throw invalidSnapshot();\n            const name = new TextDecoder(\"utf-8\", {\n              fatal: true,\n              ignoreBOM: true,\n            }).decode(rawName);\n            const directory = name.endsWith(\"/\");\n            if (\n              !safeRelativePath(directory ? name.slice(0, -1) : name) ||\n              names.has(name)\n            )\n              throw invalidSnapshot();\n            names.add(name);\n            const fileType = (entry.externalFileAttributes >>> 16) & 0o170000;\n            if (\n              fileType !== 0 &&\n              fileType !== (directory ? 0o040000 : 0o100000)\n            )\n              throw invalidSnapshot();\n            if (\n              entry.isEncrypted() ||\n              ![0, 8].includes(entry.compressionMethod)\n            )\n              throw invalidSnapshot();\n            if (\n              !Number.isSafeInteger(entry.uncompressedSize) ||\n              entry.uncompressedSize < 0\n            )\n              throw invalidSnapshot();\n            decodedBytes += entry.uncompressedSize;\n            if (\n              decodedBytes > MAX_SNAPSHOT_BYTES ||\n              (directory && entry.uncompressedSize !== 0)\n            )\n              throw invalidSnapshot();\n            // Require the central directory and the local entry to name the same\n            // bytes. ZIP data descriptors may leave local sizes unset.\n            const local = entry.relativeOffsetOfLocalHeader;\n            if (\n              local < 0 ||\n              local + 30 > bytes.length ||\n              bytes.readUInt32LE(local) !== 0x04034b50\n            )\n              throw invalidSnapshot();\n            if (\n              bytes.readUInt16LE(local + 6) !== entry.generalPurposeBitFlag ||\n              bytes.readUInt16LE(local + 8) !== entry.compressionMethod\n            )\n              throw invalidSnapshot();\n            const localNameLength = bytes.readUInt16LE(local + 26);\n            const localExtraLength = bytes.readUInt16LE(local + 28);\n            const dataStart = local + 30 + localNameLength + localExtraLength;\n            if (\n              dataStart + entry.compressedSize > bytes.length ||\n              !bytes\n                .subarray(local + 30, local + 30 + localNameLength)\n                .equals(rawName)\n            )\n              throw invalidSnapshot();\n            if (\n              !(entry.generalPurposeBitFlag & 8) &&\n              (bytes.readUInt32LE(local + 18) !== entry.compressedSize ||\n                bytes.readUInt32LE(local + 22) !== entry.uncompressedSize)\n            )\n              throw invalidSnapshot();\n            if (directory) {\n              zip.readEntry();\n              return;\n            }\n            zip.openReadStream(entry, (readError, readStream) => {\n              if (readError) {\n                finish(invalidSnapshot(readError));\n                return;\n              }\n              stream = readStream;\n              if (settled) {\n                readStream.destroy();\n                return;\n              }\n              const chunks: Buffer[] = [];\n              let size = 0;\n              readStream.on(\"error\", (cause: unknown) =>\n                finish(invalidSnapshot(cause)),\n              );\n              readStream.on(\"data\", (chunk: Buffer) => {\n                size += chunk.length;\n                if (\n                  size > entry.uncompressedSize ||\n                  size > MAX_SNAPSHOT_BYTES\n                ) {\n                  finish(invalidSnapshot());\n                  return;\n                }\n                chunks.push(chunk);\n              });\n              readStream.on(\"end\", () => {\n                if (settled) return;\n                if (size !== entry.uncompressedSize) {\n                  finish(invalidSnapshot());\n                  return;\n                }\n                files.set(name, Buffer.concat(chunks, size));\n                stream = undefined;\n                zip.readEntry();\n              });\n            });\n          } catch (cause) {\n            finish(invalidSnapshot(cause));\n          }\n        });\n        zip.readEntry();\n      },\n    );\n  });\n}\n"],"mappings":";;;;;;AAMA,MAAa,sBAAsB;AACnC,MAAa,qBAAqB,KAAK,OAAO;AAE9C,SAAgB,iBAAiB,MAAuB;AACtD,QACE,KAAK,SAAS,KAGd,CAAC,oBAAoB,KAAK,KAAK,IAC/B,CAAC,WAAW,KAAK,KAAK,IACtB,KACG,MAAM,IAAI,CACV,OAAO,SAAS,SAAS,MAAM,SAAS,OAAO,SAAS,KAAK;;;AAKpE,SAAgB,YACd,OACA,QAC8B;AAC9B,QAAO,IAAI,SAAS,SAAS,WAAW;EACtC,IAAI;EACJ,IAAI;EACJ,IAAI,UAAU;EACd,MAAM,UAAU,UAAoB;AAClC,OAAI,QAAS;AACb,aAAU;AACV,WAAQ,oBAAoB,SAAS,MAAM;AAC3C,WAAQ,SAAS;AACjB,YAAS,OAAO;AAChB,OAAI,UAAU,OAAW,QAAO,MAAM;OACjC,SAAQ,MAAM;;EAErB,MAAM,cAAc,OAAO,QAAQ,UAAU,iBAAiB,CAAC;EAC/D,MAAM,wBAAQ,IAAI,KAAqB;EACvC,MAAM,wBAAQ,IAAI,KAAa;EAC/B,IAAI,eAAe;AACnB,UAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AACxD,MAAI,QAAQ,SAAS;AACnB,UAAO;AACP;;AAEF,aACE,OACA;GACE,aAAa;GACb,eAAe;GACf,oBAAoB;GACpB,WAAW;GACZ,GACA,OAAO,QAAQ;AACd,OAAI,OAAO;AACT,WAAO,gBAAgB,MAAM,CAAC;AAC9B;;AAEF,aAAU;AACV,OAAI,SAAS;AACX,QAAI,OAAO;AACX;;AAEF,OAAI,GAAG,UAAU,UAAmB,OAAO,gBAAgB,MAAM,CAAC,CAAC;AACnE,OAAI,GAAG,aAAa,QAAQ,CAAC;AAC7B,OAAI,IAAI,aAAa,qBAAqB;AACxC,WAAO,iBAAiB,CAAC;AACzB;;AAEF,OAAI,GAAG,UAAU,UAAiB;AAChC,QAAI;KAGF,MAAM,UAAmB,MAAM;AAC/B,SAAI,CAAC,OAAO,SAAS,QAAQ,CAAE,OAAM,iBAAiB;KACtD,MAAM,OAAO,IAAI,YAAY,SAAS;MACpC,OAAO;MACP,WAAW;MACZ,CAAC,CAAC,OAAO,QAAQ;KAClB,MAAM,YAAY,KAAK,SAAS,IAAI;AACpC,SACE,CAAC,iBAAiB,YAAY,KAAK,MAAM,GAAG,GAAG,GAAG,KAAK,IACvD,MAAM,IAAI,KAAK,CAEf,OAAM,iBAAiB;AACzB,WAAM,IAAI,KAAK;KACf,MAAM,WAAY,MAAM,2BAA2B,KAAM;AACzD,SACE,aAAa,KACb,cAAc,YAAY,QAAW,OAErC,OAAM,iBAAiB;AACzB,SACE,MAAM,aAAa,IACnB,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,MAAM,kBAAkB,CAEzC,OAAM,iBAAiB;AACzB,SACE,CAAC,OAAO,cAAc,MAAM,iBAAiB,IAC7C,MAAM,mBAAmB,EAEzB,OAAM,iBAAiB;AACzB,qBAAgB,MAAM;AACtB,SACE,eAAe,sBACd,aAAa,MAAM,qBAAqB,EAEzC,OAAM,iBAAiB;KAGzB,MAAM,QAAQ,MAAM;AACpB,SACE,QAAQ,KACR,QAAQ,KAAK,MAAM,UACnB,MAAM,aAAa,MAAM,KAAK,SAE9B,OAAM,iBAAiB;AACzB,SACE,MAAM,aAAa,QAAQ,EAAE,KAAK,MAAM,yBACxC,MAAM,aAAa,QAAQ,EAAE,KAAK,MAAM,kBAExC,OAAM,iBAAiB;KACzB,MAAM,kBAAkB,MAAM,aAAa,QAAQ,GAAG;KACtD,MAAM,mBAAmB,MAAM,aAAa,QAAQ,GAAG;AAEvD,SADkB,QAAQ,KAAK,kBAAkB,mBAEnC,MAAM,iBAAiB,MAAM,UACzC,CAAC,MACE,SAAS,QAAQ,IAAI,QAAQ,KAAK,gBAAgB,CAClD,OAAO,QAAQ,CAElB,OAAM,iBAAiB;AACzB,SACE,EAAE,MAAM,wBAAwB,OAC/B,MAAM,aAAa,QAAQ,GAAG,KAAK,MAAM,kBACxC,MAAM,aAAa,QAAQ,GAAG,KAAK,MAAM,kBAE3C,OAAM,iBAAiB;AACzB,SAAI,WAAW;AACb,UAAI,WAAW;AACf;;AAEF,SAAI,eAAe,QAAQ,WAAW,eAAe;AACnD,UAAI,WAAW;AACb,cAAO,gBAAgB,UAAU,CAAC;AAClC;;AAEF,eAAS;AACT,UAAI,SAAS;AACX,kBAAW,SAAS;AACpB;;MAEF,MAAM,SAAmB,EAAE;MAC3B,IAAI,OAAO;AACX,iBAAW,GAAG,UAAU,UACtB,OAAO,gBAAgB,MAAM,CAAC,CAC/B;AACD,iBAAW,GAAG,SAAS,UAAkB;AACvC,eAAQ,MAAM;AACd,WACE,OAAO,MAAM,oBACb,OAAO,oBACP;AACA,eAAO,iBAAiB,CAAC;AACzB;;AAEF,cAAO,KAAK,MAAM;QAClB;AACF,iBAAW,GAAG,aAAa;AACzB,WAAI,QAAS;AACb,WAAI,SAAS,MAAM,kBAAkB;AACnC,eAAO,iBAAiB,CAAC;AACzB;;AAEF,aAAM,IAAI,MAAM,OAAO,OAAO,QAAQ,KAAK,CAAC;AAC5C,gBAAS;AACT,WAAI,WAAW;QACf;OACF;aACK,OAAO;AACd,YAAO,gBAAgB,MAAM,CAAC;;KAEhC;AACF,OAAI,WAAW;IAElB;GACD"}

package/dist/v2/runtime/intelligence-platform/skill-registry/config.cjs

@@ -0,0 +1,48 @@
+require("reflect-metadata");
+const require_learned_skills = require('../learned-skills.cjs');
+const require_client = require('../client.cjs');
+
+//#region src/v2/runtime/intelligence-platform/skill-registry/config.ts
+/** Resolve once. Never retain the options object, environment, or a second key. */
+function resolveRegistryConfig(options = {}, environment = process.env) {
+	try {
+		const containerId = options.containerId ?? environment.CPK_INTELLIGENCE_LEARNING_CONTAINER_ID;
+		const revision = options.revision ?? environment.CPK_INTELLIGENCE_SKILLS_REVISION;
+		const freshnessWindowMs = options.freshnessWindowMs ?? 5e3;
+		const requestTimeoutMs = options.requestTimeoutMs ?? 5e3;
+		const debug = options.debug ?? false;
+		if (typeof containerId !== "string" || !containerId.trim() || revision !== void 0 && (typeof revision !== "string" || revision.length === 0) || !Number.isSafeInteger(freshnessWindowMs) || freshnessWindowMs < 0 || !Number.isSafeInteger(requestTimeoutMs) || requestTimeoutMs < 1 || requestTimeoutMs > 2147483647 || typeof debug !== "boolean") throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false);
+		let client = options.client;
+		if (client !== void 0) {
+			if (!client || typeof client.getLearnedSkillsSnapshot !== "function") throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false);
+		} else {
+			const apiKey = options.apiKey ?? environment.CPK_INTELLIGENCE_API_KEY;
+			const apiUrl = options.apiUrl ?? environment.INTELLIGENCE_API_URL;
+			if (typeof apiKey !== "string" || !apiKey.trim()) throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false);
+			if (apiUrl?.trim()) {
+				const url = new URL(apiUrl);
+				if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.search || url.hash) throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false);
+			}
+			client = new require_client.CopilotKitIntelligence({
+				apiKey,
+				...apiUrl !== void 0 ? { apiUrl } : {},
+				...apiUrl?.trim() ? { wsUrl: "wss://realtime.intelligence.copilotkit.ai" } : {}
+			});
+		}
+		return Object.freeze({
+			client,
+			containerId,
+			...revision !== void 0 ? { revision } : {},
+			freshnessWindowMs,
+			requestTimeoutMs,
+			debug
+		});
+	} catch (error) {
+		if (error instanceof require_learned_skills.LearnedSkillsError) throw error;
+		throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false, error);
+	}
+}
+
+//#endregion
+exports.resolveRegistryConfig = resolveRegistryConfig;
+//# sourceMappingURL=config.cjs.map

package/dist/v2/runtime/intelligence-platform/skill-registry/config.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.cjs","names":["SkillDeliveryError","CopilotKitIntelligence"],"sources":["../../../../../src/v2/runtime/intelligence-platform/skill-registry/config.ts"],"sourcesContent":["import { CopilotKitIntelligence } from \"../client\";\nimport { SkillDeliveryError } from \"./errors\";\n\nexport interface SkillRegistryOptions {\n  client?: CopilotKitIntelligence;\n  apiKey?: string;\n  apiUrl?: string;\n  containerId?: string;\n  revision?: string;\n  freshnessWindowMs?: number;\n  requestTimeoutMs?: number;\n  debug?: boolean;\n}\nexport interface RegistryConfig {\n  readonly client: CopilotKitIntelligence;\n  readonly containerId: string;\n  readonly revision?: string;\n  readonly freshnessWindowMs: number;\n  readonly requestTimeoutMs: number;\n  readonly debug: boolean;\n}\n\n/** Resolve once. Never retain the options object, environment, or a second key. */\nexport function resolveRegistryConfig(\n  options: SkillRegistryOptions = {},\n  environment: NodeJS.ProcessEnv = process.env,\n): RegistryConfig {\n  try {\n    const containerId =\n      options.containerId ?? environment.CPK_INTELLIGENCE_LEARNING_CONTAINER_ID;\n    const revision =\n      options.revision ?? environment.CPK_INTELLIGENCE_SKILLS_REVISION;\n    const freshnessWindowMs = options.freshnessWindowMs ?? 5_000;\n    const requestTimeoutMs = options.requestTimeoutMs ?? 5_000;\n    const debug = options.debug ?? false;\n    if (\n      typeof containerId !== \"string\" ||\n      !containerId.trim() ||\n      (revision !== undefined &&\n        (typeof revision !== \"string\" || revision.length === 0)) ||\n      !Number.isSafeInteger(freshnessWindowMs) ||\n      freshnessWindowMs < 0 ||\n      !Number.isSafeInteger(requestTimeoutMs) ||\n      requestTimeoutMs < 1 ||\n      requestTimeoutMs > 2_147_483_647 ||\n      typeof debug !== \"boolean\"\n    )\n      throw new SkillDeliveryError(\"INVALID_CONFIG\", false);\n    let client = options.client;\n    if (client !== undefined) {\n      if (!client || typeof client.getLearnedSkillsSnapshot !== \"function\")\n        throw new SkillDeliveryError(\"INVALID_CONFIG\", false);\n    } else {\n      const apiKey = options.apiKey ?? environment.CPK_INTELLIGENCE_API_KEY;\n      const apiUrl = options.apiUrl ?? environment.INTELLIGENCE_API_URL;\n      if (typeof apiKey !== \"string\" || !apiKey.trim())\n        throw new SkillDeliveryError(\"INVALID_CONFIG\", false);\n      if (apiUrl?.trim()) {\n        const url = new URL(apiUrl);\n        if (\n          ![\"http:\", \"https:\"].includes(url.protocol) ||\n          url.username ||\n          url.password ||\n          url.search ||\n          url.hash\n        )\n          throw new SkillDeliveryError(\"INVALID_CONFIG\", false);\n      }\n      client = new CopilotKitIntelligence({\n        apiKey,\n        ...(apiUrl !== undefined ? { apiUrl } : {}),\n        // This private helper client uses REST only. Explicitly retain the\n        // canonical websocket default to prevent an irrelevant host warning.\n        ...(apiUrl?.trim()\n          ? { wsUrl: \"wss://realtime.intelligence.copilotkit.ai\" }\n          : {}),\n      });\n    }\n    return Object.freeze({\n      client,\n      containerId,\n      ...(revision !== undefined ? { revision } : {}),\n      freshnessWindowMs,\n      requestTimeoutMs,\n      debug,\n    });\n  } catch (error) {\n    if (error instanceof SkillDeliveryError) throw error;\n    throw new SkillDeliveryError(\"INVALID_CONFIG\", false, error);\n  }\n}\n"],"mappings":";;;;;;AAuBA,SAAgB,sBACd,UAAgC,EAAE,EAClC,cAAiC,QAAQ,KACzB;AAChB,KAAI;EACF,MAAM,cACJ,QAAQ,eAAe,YAAY;EACrC,MAAM,WACJ,QAAQ,YAAY,YAAY;EAClC,MAAM,oBAAoB,QAAQ,qBAAqB;EACvD,MAAM,mBAAmB,QAAQ,oBAAoB;EACrD,MAAM,QAAQ,QAAQ,SAAS;AAC/B,MACE,OAAO,gBAAgB,YACvB,CAAC,YAAY,MAAM,IAClB,aAAa,WACX,OAAO,aAAa,YAAY,SAAS,WAAW,MACvD,CAAC,OAAO,cAAc,kBAAkB,IACxC,oBAAoB,KACpB,CAAC,OAAO,cAAc,iBAAiB,IACvC,mBAAmB,KACnB,mBAAmB,cACnB,OAAO,UAAU,UAEjB,OAAM,IAAIA,0CAAmB,kBAAkB,MAAM;EACvD,IAAI,SAAS,QAAQ;AACrB,MAAI,WAAW,QACb;OAAI,CAAC,UAAU,OAAO,OAAO,6BAA6B,WACxD,OAAM,IAAIA,0CAAmB,kBAAkB,MAAM;SAClD;GACL,MAAM,SAAS,QAAQ,UAAU,YAAY;GAC7C,MAAM,SAAS,QAAQ,UAAU,YAAY;AAC7C,OAAI,OAAO,WAAW,YAAY,CAAC,OAAO,MAAM,CAC9C,OAAM,IAAIA,0CAAmB,kBAAkB,MAAM;AACvD,OAAI,QAAQ,MAAM,EAAE;IAClB,MAAM,MAAM,IAAI,IAAI,OAAO;AAC3B,QACE,CAAC,CAAC,SAAS,SAAS,CAAC,SAAS,IAAI,SAAS,IAC3C,IAAI,YACJ,IAAI,YACJ,IAAI,UACJ,IAAI,KAEJ,OAAM,IAAIA,0CAAmB,kBAAkB,MAAM;;AAEzD,YAAS,IAAIC,sCAAuB;IAClC;IACA,GAAI,WAAW,SAAY,EAAE,QAAQ,GAAG,EAAE;IAG1C,GAAI,QAAQ,MAAM,GACd,EAAE,OAAO,6CAA6C,GACtD,EAAE;IACP,CAAC;;AAEJ,SAAO,OAAO,OAAO;GACnB;GACA;GACA,GAAI,aAAa,SAAY,EAAE,UAAU,GAAG,EAAE;GAC9C;GACA;GACA;GACD,CAAC;UACK,OAAO;AACd,MAAI,iBAAiBD,0CAAoB,OAAM;AAC/C,QAAM,IAAIA,0CAAmB,kBAAkB,OAAO,MAAM"}

package/dist/v2/runtime/intelligence-platform/skill-registry/config.d.cts

@@ -0,0 +1,27 @@
+
+import { CopilotKitIntelligence } from "../client.cjs";
+
+//#region src/v2/runtime/intelligence-platform/skill-registry/config.d.ts
+interface SkillRegistryOptions {
+  client?: CopilotKitIntelligence;
+  apiKey?: string;
+  apiUrl?: string;
+  containerId?: string;
+  revision?: string;
+  freshnessWindowMs?: number;
+  requestTimeoutMs?: number;
+  debug?: boolean;
+}
+interface RegistryConfig {
+  readonly client: CopilotKitIntelligence;
+  readonly containerId: string;
+  readonly revision?: string;
+  readonly freshnessWindowMs: number;
+  readonly requestTimeoutMs: number;
+  readonly debug: boolean;
+}
+/** Resolve once. Never retain the options object, environment, or a second key. */
+declare function resolveRegistryConfig(options?: SkillRegistryOptions, environment?: NodeJS.ProcessEnv): RegistryConfig;
+//#endregion
+export { RegistryConfig, SkillRegistryOptions, resolveRegistryConfig };
+//# sourceMappingURL=config.d.cts.map

package/dist/v2/runtime/intelligence-platform/skill-registry/config.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.cts","names":[],"sources":["../../../../../src/v2/runtime/intelligence-platform/skill-registry/config.ts"],"mappings":";;;;UAGiB,oBAAA;EACf,MAAA,GAAS,sBAAA;EACT,MAAA;EACA,MAAA;EACA,WAAA;EACA,QAAA;EACA,iBAAA;EACA,gBAAA;EACA,KAAA;AAAA;AAAA,UAEe,cAAA;EAAA,SACN,MAAA,EAAQ,sBAAA;EAAA,SACR,WAAA;EAAA,SACA,QAAA;EAAA,SACA,iBAAA;EAAA,SACA,gBAAA;EAAA,SACA,KAAA;AAAA;;iBAIK,qBAAA,CACd,OAAA,GAAS,oBAAA,EACT,WAAA,GAAa,MAAA,CAAO,UAAA,GACnB,cAAA"}