@copilotkit/runtime 1.72.1-canary.sp-longthread-perf → 1.73.0

package/dist/v2/runtime/intelligence-platform/skill-registry/snapshot.cjs

@@ -0,0 +1,93 @@
+require("reflect-metadata");
+const require_runtime = require('../../../../_virtual/_rolldown/runtime.cjs');
+const require_learned_skills = require('../learned-skills.cjs');
+const require_errors = require('./errors.cjs');
+const require_archive = require('./archive.cjs');
+let node_crypto = require("node:crypto");
+
+//#region src/v2/runtime/intelligence-platform/skill-registry/snapshot.ts
+function object(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function sha256(bytes) {
+	return (0, node_crypto.createHash)("sha256").update(bytes).digest("hex");
+}
+function utf8(bytes) {
+	try {
+		return new TextDecoder("utf-8", {
+			fatal: true,
+			ignoreBOM: true
+		}).decode(bytes);
+	} catch {
+		return;
+	}
+}
+/** Validate a replacement fully before it can become an invocation snapshot. */
+async function validateSnapshot(response, signal) {
+	try {
+		if (!object(response) || !(response.bytes instanceof Uint8Array) || typeof response.revision !== "string" || typeof response.etag !== "string" || typeof response.contentType !== "string") throw require_errors.invalidSnapshot();
+		const { revision, etag, contentType } = response;
+		if (response.status !== "snapshot" || response.bytes.byteLength > require_archive.MAX_SNAPSHOT_BYTES || contentType.split(";", 1)[0]?.trim().toLowerCase() !== "application/zip" || !revision || !/^"[a-f0-9]{64}"$/.test(etag)) throw require_errors.invalidSnapshot();
+		const bytes = Buffer.from(response.bytes);
+		if (`"${sha256(bytes)}"` !== etag) throw require_errors.invalidSnapshot();
+		const archive = await require_archive.readArchive(bytes, signal);
+		const manifestBytes = archive.get("manifest.json");
+		if (!manifestBytes) throw require_errors.invalidSnapshot();
+		const decoded = utf8(manifestBytes);
+		if (decoded === void 0) throw require_errors.invalidSnapshot();
+		const manifest = JSON.parse(decoded);
+		if (!object(manifest)) throw require_errors.invalidSnapshot();
+		if (typeof manifest.schemaVersion === "number" && manifest.schemaVersion !== 1) throw new require_learned_skills.LearnedSkillsError("UNSUPPORTED_SERVER", false);
+		if (manifest.schemaVersion !== 1 || manifest.revision !== revision || !Array.isArray(manifest.skills)) throw require_errors.invalidSnapshot();
+		const expected = new Set(["manifest.json"]);
+		let previousName;
+		const skills = [];
+		for (const skill of manifest.skills) {
+			if (!object(skill) || typeof skill.name !== "string" || !require_archive.safeRelativePath(skill.name) || skill.name.includes("/") || previousName !== void 0 && Buffer.compare(Buffer.from(previousName), Buffer.from(skill.name)) >= 0 || typeof skill.description !== "string" || !Array.isArray(skill.files)) throw require_errors.invalidSnapshot();
+			previousName = skill.name;
+			let previousPath;
+			let hasSkill = false;
+			const files = [];
+			for (const file of skill.files) {
+				if (!object(file) || typeof file.path !== "string" || !require_archive.safeRelativePath(file.path) || previousPath !== void 0 && Buffer.compare(Buffer.from(previousPath), Buffer.from(file.path)) >= 0 || typeof file.size !== "number" || !Number.isSafeInteger(file.size) || file.size < 0 || typeof file.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(file.sha256)) throw require_errors.invalidSnapshot();
+				previousPath = file.path;
+				const path = `${skill.name}/${file.path}`;
+				if (expected.has(path)) throw require_errors.invalidSnapshot();
+				expected.add(path);
+				const content = archive.get(path);
+				if (!content || content.length !== file.size || sha256(content) !== file.sha256) throw require_errors.invalidSnapshot();
+				const text = utf8(content);
+				if (file.path === "SKILL.md") {
+					if (text === void 0) throw require_errors.invalidSnapshot();
+					hasSkill = true;
+				}
+				files.push(Object.freeze({
+					path: file.path,
+					size: file.size,
+					sha256: file.sha256,
+					...text !== void 0 ? { text } : {}
+				}));
+			}
+			if (!hasSkill) throw require_errors.invalidSnapshot();
+			skills.push(Object.freeze({
+				name: skill.name,
+				description: skill.description,
+				files: Object.freeze(files)
+			}));
+		}
+		if (expected.size !== archive.size || [...archive.keys()].some((path) => !expected.has(path))) throw require_errors.invalidSnapshot();
+		return Object.freeze({
+			revision,
+			etag,
+			skills: Object.freeze(skills)
+		});
+	} catch (error) {
+		if (signal?.aborted) throw signal.reason;
+		if (error instanceof require_learned_skills.LearnedSkillsError) throw error;
+		throw require_errors.invalidSnapshot(error);
+	}
+}
+
+//#endregion
+exports.validateSnapshot = validateSnapshot;
+//# sourceMappingURL=snapshot.cjs.map

package/dist/v2/runtime/intelligence-platform/skill-registry/snapshot.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.cjs","names":["invalidSnapshot","MAX_SNAPSHOT_BYTES","readArchive","SkillDeliveryError","safeRelativePath"],"sources":["../../../../../src/v2/runtime/intelligence-platform/skill-registry/snapshot.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { LearnedSkillsSnapshotResult } from \"../learned-skills\";\nimport { SkillDeliveryError, invalidSnapshot } from \"./errors\";\nimport { MAX_SNAPSHOT_BYTES, readArchive, safeRelativePath } from \"./archive\";\n\nexport interface SnapshotFile {\n  readonly path: string;\n  readonly size: number;\n  readonly sha256: string;\n  /** Absent for supporting resources that cannot be decoded as UTF-8 text. */\n  readonly text?: string;\n}\nexport interface SnapshotSkill {\n  readonly name: string;\n  readonly description: string;\n  readonly files: readonly SnapshotFile[];\n}\nexport interface VerifiedSnapshot {\n  readonly revision: string;\n  readonly etag: string;\n  readonly skills: readonly SnapshotSkill[];\n}\n\nfunction object(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\nfunction sha256(bytes: Uint8Array): string {\n  return createHash(\"sha256\").update(bytes).digest(\"hex\");\n}\nfunction utf8(bytes: Uint8Array): string | undefined {\n  try {\n    return new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true }).decode(\n      bytes,\n    );\n  } catch {\n    return undefined;\n  }\n}\n\n/** Validate a replacement fully before it can become an invocation snapshot. */\nexport async function validateSnapshot(\n  response: Extract<LearnedSkillsSnapshotResult, { status: \"snapshot\" }>,\n  signal?: AbortSignal,\n): Promise<VerifiedSnapshot> {\n  try {\n    if (\n      !object(response) ||\n      !(response.bytes instanceof Uint8Array) ||\n      typeof response.revision !== \"string\" ||\n      typeof response.etag !== \"string\" ||\n      typeof response.contentType !== \"string\"\n    )\n      throw invalidSnapshot();\n    const { revision, etag, contentType } = response;\n    if (\n      response.status !== \"snapshot\" ||\n      response.bytes.byteLength > MAX_SNAPSHOT_BYTES ||\n      contentType.split(\";\", 1)[0]?.trim().toLowerCase() !==\n        \"application/zip\" ||\n      !revision ||\n      !/^\"[a-f0-9]{64}\"$/.test(etag)\n    )\n      throw invalidSnapshot();\n    // Own the bytes before asynchronous decompression so an injected client\n    // cannot mutate an in-flight replacement after its digest is checked.\n    const bytes = Buffer.from(response.bytes);\n    if (`\"${sha256(bytes)}\"` !== etag) throw invalidSnapshot();\n    const archive = await readArchive(bytes, signal);\n    const manifestBytes = archive.get(\"manifest.json\");\n    if (!manifestBytes) throw invalidSnapshot();\n    const decoded = utf8(manifestBytes);\n    if (decoded === undefined) throw invalidSnapshot();\n    const manifest: unknown = JSON.parse(decoded);\n    if (!object(manifest)) throw invalidSnapshot();\n    if (\n      typeof manifest.schemaVersion === \"number\" &&\n      manifest.schemaVersion !== 1\n    )\n      throw new SkillDeliveryError(\"UNSUPPORTED_SERVER\", false);\n    if (\n      manifest.schemaVersion !== 1 ||\n      manifest.revision !== revision ||\n      !Array.isArray(manifest.skills)\n    )\n      throw invalidSnapshot();\n    const expected = new Set([\"manifest.json\"]);\n    let previousName: string | undefined;\n    const skills: SnapshotSkill[] = [];\n    for (const skill of manifest.skills) {\n      if (\n        !object(skill) ||\n        typeof skill.name !== \"string\" ||\n        !safeRelativePath(skill.name) ||\n        skill.name.includes(\"/\") ||\n        (previousName !== undefined &&\n          Buffer.compare(Buffer.from(previousName), Buffer.from(skill.name)) >=\n            0) ||\n        typeof skill.description !== \"string\" ||\n        !Array.isArray(skill.files)\n      )\n        throw invalidSnapshot();\n      previousName = skill.name;\n      let previousPath: string | undefined;\n      let hasSkill = false;\n      const files: SnapshotFile[] = [];\n      for (const file of skill.files) {\n        if (\n          !object(file) ||\n          typeof file.path !== \"string\" ||\n          !safeRelativePath(file.path) ||\n          (previousPath !== undefined &&\n            Buffer.compare(Buffer.from(previousPath), Buffer.from(file.path)) >=\n              0) ||\n          typeof file.size !== \"number\" ||\n          !Number.isSafeInteger(file.size) ||\n          file.size < 0 ||\n          typeof file.sha256 !== \"string\" ||\n          !/^[a-f0-9]{64}$/.test(file.sha256)\n        )\n          throw invalidSnapshot();\n        previousPath = file.path;\n        const path = `${skill.name}/${file.path}`;\n        if (expected.has(path)) throw invalidSnapshot();\n        expected.add(path);\n        const content = archive.get(path);\n        if (\n          !content ||\n          content.length !== file.size ||\n          sha256(content) !== file.sha256\n        )\n          throw invalidSnapshot();\n        const text = utf8(content);\n        if (file.path === \"SKILL.md\") {\n          if (text === undefined) throw invalidSnapshot();\n          hasSkill = true;\n        }\n        files.push(\n          Object.freeze({\n            path: file.path,\n            size: file.size,\n            sha256: file.sha256,\n            ...(text !== undefined ? { text } : {}),\n          }),\n        );\n      }\n      if (!hasSkill) throw invalidSnapshot();\n      skills.push(\n        Object.freeze({\n          name: skill.name,\n          description: skill.description,\n          files: Object.freeze(files),\n        }),\n      );\n    }\n    if (\n      expected.size !== archive.size ||\n      [...archive.keys()].some((path) => !expected.has(path))\n    )\n      throw invalidSnapshot();\n    return Object.freeze({\n      revision: revision,\n      etag: etag,\n      skills: Object.freeze(skills),\n    });\n  } catch (error) {\n    if (signal?.aborted) throw signal.reason;\n    if (error instanceof SkillDeliveryError) throw error;\n    throw invalidSnapshot(error);\n  }\n}\n"],"mappings":";;;;;;;;AAuBA,SAAS,OAAO,OAAkD;AAChE,QAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM;;AAE7E,SAAS,OAAO,OAA2B;AACzC,oCAAkB,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;AAEzD,SAAS,KAAK,OAAuC;AACnD,KAAI;AACF,SAAO,IAAI,YAAY,SAAS;GAAE,OAAO;GAAM,WAAW;GAAM,CAAC,CAAC,OAChE,MACD;SACK;AACN;;;;AAKJ,eAAsB,iBACpB,UACA,QAC2B;AAC3B,KAAI;AACF,MACE,CAAC,OAAO,SAAS,IACjB,EAAE,SAAS,iBAAiB,eAC5B,OAAO,SAAS,aAAa,YAC7B,OAAO,SAAS,SAAS,YACzB,OAAO,SAAS,gBAAgB,SAEhC,OAAMA,gCAAiB;EACzB,MAAM,EAAE,UAAU,MAAM,gBAAgB;AACxC,MACE,SAAS,WAAW,cACpB,SAAS,MAAM,aAAaC,sCAC5B,YAAY,MAAM,KAAK,EAAE,CAAC,IAAI,MAAM,CAAC,aAAa,KAChD,qBACF,CAAC,YACD,CAAC,mBAAmB,KAAK,KAAK,CAE9B,OAAMD,gCAAiB;EAGzB,MAAM,QAAQ,OAAO,KAAK,SAAS,MAAM;AACzC,MAAI,IAAI,OAAO,MAAM,CAAC,OAAO,KAAM,OAAMA,gCAAiB;EAC1D,MAAM,UAAU,MAAME,4BAAY,OAAO,OAAO;EAChD,MAAM,gBAAgB,QAAQ,IAAI,gBAAgB;AAClD,MAAI,CAAC,cAAe,OAAMF,gCAAiB;EAC3C,MAAM,UAAU,KAAK,cAAc;AACnC,MAAI,YAAY,OAAW,OAAMA,gCAAiB;EAClD,MAAM,WAAoB,KAAK,MAAM,QAAQ;AAC7C,MAAI,CAAC,OAAO,SAAS,CAAE,OAAMA,gCAAiB;AAC9C,MACE,OAAO,SAAS,kBAAkB,YAClC,SAAS,kBAAkB,EAE3B,OAAM,IAAIG,0CAAmB,sBAAsB,MAAM;AAC3D,MACE,SAAS,kBAAkB,KAC3B,SAAS,aAAa,YACtB,CAAC,MAAM,QAAQ,SAAS,OAAO,CAE/B,OAAMH,gCAAiB;EACzB,MAAM,WAAW,IAAI,IAAI,CAAC,gBAAgB,CAAC;EAC3C,IAAI;EACJ,MAAM,SAA0B,EAAE;AAClC,OAAK,MAAM,SAAS,SAAS,QAAQ;AACnC,OACE,CAAC,OAAO,MAAM,IACd,OAAO,MAAM,SAAS,YACtB,CAACI,iCAAiB,MAAM,KAAK,IAC7B,MAAM,KAAK,SAAS,IAAI,IACvB,iBAAiB,UAChB,OAAO,QAAQ,OAAO,KAAK,aAAa,EAAE,OAAO,KAAK,MAAM,KAAK,CAAC,IAChE,KACJ,OAAO,MAAM,gBAAgB,YAC7B,CAAC,MAAM,QAAQ,MAAM,MAAM,CAE3B,OAAMJ,gCAAiB;AACzB,kBAAe,MAAM;GACrB,IAAI;GACJ,IAAI,WAAW;GACf,MAAM,QAAwB,EAAE;AAChC,QAAK,MAAM,QAAQ,MAAM,OAAO;AAC9B,QACE,CAAC,OAAO,KAAK,IACb,OAAO,KAAK,SAAS,YACrB,CAACI,iCAAiB,KAAK,KAAK,IAC3B,iBAAiB,UAChB,OAAO,QAAQ,OAAO,KAAK,aAAa,EAAE,OAAO,KAAK,KAAK,KAAK,CAAC,IAC/D,KACJ,OAAO,KAAK,SAAS,YACrB,CAAC,OAAO,cAAc,KAAK,KAAK,IAChC,KAAK,OAAO,KACZ,OAAO,KAAK,WAAW,YACvB,CAAC,iBAAiB,KAAK,KAAK,OAAO,CAEnC,OAAMJ,gCAAiB;AACzB,mBAAe,KAAK;IACpB,MAAM,OAAO,GAAG,MAAM,KAAK,GAAG,KAAK;AACnC,QAAI,SAAS,IAAI,KAAK,CAAE,OAAMA,gCAAiB;AAC/C,aAAS,IAAI,KAAK;IAClB,MAAM,UAAU,QAAQ,IAAI,KAAK;AACjC,QACE,CAAC,WACD,QAAQ,WAAW,KAAK,QACxB,OAAO,QAAQ,KAAK,KAAK,OAEzB,OAAMA,gCAAiB;IACzB,MAAM,OAAO,KAAK,QAAQ;AAC1B,QAAI,KAAK,SAAS,YAAY;AAC5B,SAAI,SAAS,OAAW,OAAMA,gCAAiB;AAC/C,gBAAW;;AAEb,UAAM,KACJ,OAAO,OAAO;KACZ,MAAM,KAAK;KACX,MAAM,KAAK;KACX,QAAQ,KAAK;KACb,GAAI,SAAS,SAAY,EAAE,MAAM,GAAG,EAAE;KACvC,CAAC,CACH;;AAEH,OAAI,CAAC,SAAU,OAAMA,gCAAiB;AACtC,UAAO,KACL,OAAO,OAAO;IACZ,MAAM,MAAM;IACZ,aAAa,MAAM;IACnB,OAAO,OAAO,OAAO,MAAM;IAC5B,CAAC,CACH;;AAEH,MACE,SAAS,SAAS,QAAQ,QAC1B,CAAC,GAAG,QAAQ,MAAM,CAAC,CAAC,MAAM,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,CAEvD,OAAMA,gCAAiB;AACzB,SAAO,OAAO,OAAO;GACT;GACJ;GACN,QAAQ,OAAO,OAAO,OAAO;GAC9B,CAAC;UACK,OAAO;AACd,MAAI,QAAQ,QAAS,OAAM,OAAO;AAClC,MAAI,iBAAiBG,0CAAoB,OAAM;AAC/C,QAAMH,+BAAgB,MAAM"}

package/dist/v2/runtime/intelligence-platform/skill-registry/snapshot.d.cts

@@ -0,0 +1,28 @@
+
+import { LearnedSkillsSnapshotResult } from "../learned-skills.cjs";
+
+//#region src/v2/runtime/intelligence-platform/skill-registry/snapshot.d.ts
+interface SnapshotFile {
+  readonly path: string;
+  readonly size: number;
+  readonly sha256: string;
+  /** Absent for supporting resources that cannot be decoded as UTF-8 text. */
+  readonly text?: string;
+}
+interface SnapshotSkill {
+  readonly name: string;
+  readonly description: string;
+  readonly files: readonly SnapshotFile[];
+}
+interface VerifiedSnapshot {
+  readonly revision: string;
+  readonly etag: string;
+  readonly skills: readonly SnapshotSkill[];
+}
+/** Validate a replacement fully before it can become an invocation snapshot. */
+declare function validateSnapshot(response: Extract<LearnedSkillsSnapshotResult, {
+  status: "snapshot";
+}>, signal?: AbortSignal): Promise<VerifiedSnapshot>;
+//#endregion
+export { SnapshotFile, SnapshotSkill, VerifiedSnapshot, validateSnapshot };
+//# sourceMappingURL=snapshot.d.cts.map

package/dist/v2/runtime/intelligence-platform/skill-registry/snapshot.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.cts","names":[],"sources":["../../../../../src/v2/runtime/intelligence-platform/skill-registry/snapshot.ts"],"mappings":";;;;UAKiB,YAAA;EAAA,SACN,IAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA;;WAEA,IAAA;AAAA;AAAA,UAEM,aAAA;EAAA,SACN,IAAA;EAAA,SACA,WAAA;EAAA,SACA,KAAA,WAAgB,YAAA;AAAA;AAAA,UAEV,gBAAA;EAAA,SACN,QAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA,WAAiB,aAAA;AAAA;;iBAoBN,gBAAA,CACpB,QAAA,EAAU,OAAA,CAAQ,2BAAA;EAA+B,MAAA;AAAA,IACjD,MAAA,GAAS,WAAA,GACR,OAAA,CAAQ,gBAAA"}

package/dist/v2/runtime/intelligence-platform/skill-registry/snapshot.d.mts

@@ -0,0 +1,28 @@
+
+import { LearnedSkillsSnapshotResult } from "../learned-skills.mjs";
+
+//#region src/v2/runtime/intelligence-platform/skill-registry/snapshot.d.ts
+interface SnapshotFile {
+  readonly path: string;
+  readonly size: number;
+  readonly sha256: string;
+  /** Absent for supporting resources that cannot be decoded as UTF-8 text. */
+  readonly text?: string;
+}
+interface SnapshotSkill {
+  readonly name: string;
+  readonly description: string;
+  readonly files: readonly SnapshotFile[];
+}
+interface VerifiedSnapshot {
+  readonly revision: string;
+  readonly etag: string;
+  readonly skills: readonly SnapshotSkill[];
+}
+/** Validate a replacement fully before it can become an invocation snapshot. */
+declare function validateSnapshot(response: Extract<LearnedSkillsSnapshotResult, {
+  status: "snapshot";
+}>, signal?: AbortSignal): Promise<VerifiedSnapshot>;
+//#endregion
+export { SnapshotFile, SnapshotSkill, VerifiedSnapshot, validateSnapshot };
+//# sourceMappingURL=snapshot.d.mts.map

package/dist/v2/runtime/intelligence-platform/skill-registry/snapshot.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.mts","names":[],"sources":["../../../../../src/v2/runtime/intelligence-platform/skill-registry/snapshot.ts"],"mappings":";;;;UAKiB,YAAA;EAAA,SACN,IAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA;;WAEA,IAAA;AAAA;AAAA,UAEM,aAAA;EAAA,SACN,IAAA;EAAA,SACA,WAAA;EAAA,SACA,KAAA,WAAgB,YAAA;AAAA;AAAA,UAEV,gBAAA;EAAA,SACN,QAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA,WAAiB,aAAA;AAAA;;iBAoBN,gBAAA,CACpB,QAAA,EAAU,OAAA,CAAQ,2BAAA;EAA+B,MAAA;AAAA,IACjD,MAAA,GAAS,WAAA,GACR,OAAA,CAAQ,gBAAA"}

package/dist/v2/runtime/intelligence-platform/skill-registry/snapshot.mjs

@@ -0,0 +1,92 @@
+import "reflect-metadata";
+import { LearnedSkillsError } from "../learned-skills.mjs";
+import { invalidSnapshot } from "./errors.mjs";
+import { MAX_SNAPSHOT_BYTES, readArchive, safeRelativePath } from "./archive.mjs";
+import { createHash } from "node:crypto";
+
+//#region src/v2/runtime/intelligence-platform/skill-registry/snapshot.ts
+function object(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function sha256(bytes) {
+	return createHash("sha256").update(bytes).digest("hex");
+}
+function utf8(bytes) {
+	try {
+		return new TextDecoder("utf-8", {
+			fatal: true,
+			ignoreBOM: true
+		}).decode(bytes);
+	} catch {
+		return;
+	}
+}
+/** Validate a replacement fully before it can become an invocation snapshot. */
+async function validateSnapshot(response, signal) {
+	try {
+		if (!object(response) || !(response.bytes instanceof Uint8Array) || typeof response.revision !== "string" || typeof response.etag !== "string" || typeof response.contentType !== "string") throw invalidSnapshot();
+		const { revision, etag, contentType } = response;
+		if (response.status !== "snapshot" || response.bytes.byteLength > MAX_SNAPSHOT_BYTES || contentType.split(";", 1)[0]?.trim().toLowerCase() !== "application/zip" || !revision || !/^"[a-f0-9]{64}"$/.test(etag)) throw invalidSnapshot();
+		const bytes = Buffer.from(response.bytes);
+		if (`"${sha256(bytes)}"` !== etag) throw invalidSnapshot();
+		const archive = await readArchive(bytes, signal);
+		const manifestBytes = archive.get("manifest.json");
+		if (!manifestBytes) throw invalidSnapshot();
+		const decoded = utf8(manifestBytes);
+		if (decoded === void 0) throw invalidSnapshot();
+		const manifest = JSON.parse(decoded);
+		if (!object(manifest)) throw invalidSnapshot();
+		if (typeof manifest.schemaVersion === "number" && manifest.schemaVersion !== 1) throw new LearnedSkillsError("UNSUPPORTED_SERVER", false);
+		if (manifest.schemaVersion !== 1 || manifest.revision !== revision || !Array.isArray(manifest.skills)) throw invalidSnapshot();
+		const expected = new Set(["manifest.json"]);
+		let previousName;
+		const skills = [];
+		for (const skill of manifest.skills) {
+			if (!object(skill) || typeof skill.name !== "string" || !safeRelativePath(skill.name) || skill.name.includes("/") || previousName !== void 0 && Buffer.compare(Buffer.from(previousName), Buffer.from(skill.name)) >= 0 || typeof skill.description !== "string" || !Array.isArray(skill.files)) throw invalidSnapshot();
+			previousName = skill.name;
+			let previousPath;
+			let hasSkill = false;
+			const files = [];
+			for (const file of skill.files) {
+				if (!object(file) || typeof file.path !== "string" || !safeRelativePath(file.path) || previousPath !== void 0 && Buffer.compare(Buffer.from(previousPath), Buffer.from(file.path)) >= 0 || typeof file.size !== "number" || !Number.isSafeInteger(file.size) || file.size < 0 || typeof file.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(file.sha256)) throw invalidSnapshot();
+				previousPath = file.path;
+				const path = `${skill.name}/${file.path}`;
+				if (expected.has(path)) throw invalidSnapshot();
+				expected.add(path);
+				const content = archive.get(path);
+				if (!content || content.length !== file.size || sha256(content) !== file.sha256) throw invalidSnapshot();
+				const text = utf8(content);
+				if (file.path === "SKILL.md") {
+					if (text === void 0) throw invalidSnapshot();
+					hasSkill = true;
+				}
+				files.push(Object.freeze({
+					path: file.path,
+					size: file.size,
+					sha256: file.sha256,
+					...text !== void 0 ? { text } : {}
+				}));
+			}
+			if (!hasSkill) throw invalidSnapshot();
+			skills.push(Object.freeze({
+				name: skill.name,
+				description: skill.description,
+				files: Object.freeze(files)
+			}));
+		}
+		if (expected.size !== archive.size || [...archive.keys()].some((path) => !expected.has(path))) throw invalidSnapshot();
+		return Object.freeze({
+			revision,
+			etag,
+			skills: Object.freeze(skills)
+		});
+	} catch (error) {
+		if (signal?.aborted) throw signal.reason;
+		if (error instanceof LearnedSkillsError) throw error;
+		throw invalidSnapshot(error);
+	}
+}
+
+//#endregion
+export { validateSnapshot };
+//# sourceMappingURL=snapshot.mjs.map

package/dist/v2/runtime/intelligence-platform/skill-registry/snapshot.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.mjs","names":["SkillDeliveryError"],"sources":["../../../../../src/v2/runtime/intelligence-platform/skill-registry/snapshot.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { LearnedSkillsSnapshotResult } from \"../learned-skills\";\nimport { SkillDeliveryError, invalidSnapshot } from \"./errors\";\nimport { MAX_SNAPSHOT_BYTES, readArchive, safeRelativePath } from \"./archive\";\n\nexport interface SnapshotFile {\n  readonly path: string;\n  readonly size: number;\n  readonly sha256: string;\n  /** Absent for supporting resources that cannot be decoded as UTF-8 text. */\n  readonly text?: string;\n}\nexport interface SnapshotSkill {\n  readonly name: string;\n  readonly description: string;\n  readonly files: readonly SnapshotFile[];\n}\nexport interface VerifiedSnapshot {\n  readonly revision: string;\n  readonly etag: string;\n  readonly skills: readonly SnapshotSkill[];\n}\n\nfunction object(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\nfunction sha256(bytes: Uint8Array): string {\n  return createHash(\"sha256\").update(bytes).digest(\"hex\");\n}\nfunction utf8(bytes: Uint8Array): string | undefined {\n  try {\n    return new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true }).decode(\n      bytes,\n    );\n  } catch {\n    return undefined;\n  }\n}\n\n/** Validate a replacement fully before it can become an invocation snapshot. */\nexport async function validateSnapshot(\n  response: Extract<LearnedSkillsSnapshotResult, { status: \"snapshot\" }>,\n  signal?: AbortSignal,\n): Promise<VerifiedSnapshot> {\n  try {\n    if (\n      !object(response) ||\n      !(response.bytes instanceof Uint8Array) ||\n      typeof response.revision !== \"string\" ||\n      typeof response.etag !== \"string\" ||\n      typeof response.contentType !== \"string\"\n    )\n      throw invalidSnapshot();\n    const { revision, etag, contentType } = response;\n    if (\n      response.status !== \"snapshot\" ||\n      response.bytes.byteLength > MAX_SNAPSHOT_BYTES ||\n      contentType.split(\";\", 1)[0]?.trim().toLowerCase() !==\n        \"application/zip\" ||\n      !revision ||\n      !/^\"[a-f0-9]{64}\"$/.test(etag)\n    )\n      throw invalidSnapshot();\n    // Own the bytes before asynchronous decompression so an injected client\n    // cannot mutate an in-flight replacement after its digest is checked.\n    const bytes = Buffer.from(response.bytes);\n    if (`\"${sha256(bytes)}\"` !== etag) throw invalidSnapshot();\n    const archive = await readArchive(bytes, signal);\n    const manifestBytes = archive.get(\"manifest.json\");\n    if (!manifestBytes) throw invalidSnapshot();\n    const decoded = utf8(manifestBytes);\n    if (decoded === undefined) throw invalidSnapshot();\n    const manifest: unknown = JSON.parse(decoded);\n    if (!object(manifest)) throw invalidSnapshot();\n    if (\n      typeof manifest.schemaVersion === \"number\" &&\n      manifest.schemaVersion !== 1\n    )\n      throw new SkillDeliveryError(\"UNSUPPORTED_SERVER\", false);\n    if (\n      manifest.schemaVersion !== 1 ||\n      manifest.revision !== revision ||\n      !Array.isArray(manifest.skills)\n    )\n      throw invalidSnapshot();\n    const expected = new Set([\"manifest.json\"]);\n    let previousName: string | undefined;\n    const skills: SnapshotSkill[] = [];\n    for (const skill of manifest.skills) {\n      if (\n        !object(skill) ||\n        typeof skill.name !== \"string\" ||\n        !safeRelativePath(skill.name) ||\n        skill.name.includes(\"/\") ||\n        (previousName !== undefined &&\n          Buffer.compare(Buffer.from(previousName), Buffer.from(skill.name)) >=\n            0) ||\n        typeof skill.description !== \"string\" ||\n        !Array.isArray(skill.files)\n      )\n        throw invalidSnapshot();\n      previousName = skill.name;\n      let previousPath: string | undefined;\n      let hasSkill = false;\n      const files: SnapshotFile[] = [];\n      for (const file of skill.files) {\n        if (\n          !object(file) ||\n          typeof file.path !== \"string\" ||\n          !safeRelativePath(file.path) ||\n          (previousPath !== undefined &&\n            Buffer.compare(Buffer.from(previousPath), Buffer.from(file.path)) >=\n              0) ||\n          typeof file.size !== \"number\" ||\n          !Number.isSafeInteger(file.size) ||\n          file.size < 0 ||\n          typeof file.sha256 !== \"string\" ||\n          !/^[a-f0-9]{64}$/.test(file.sha256)\n        )\n          throw invalidSnapshot();\n        previousPath = file.path;\n        const path = `${skill.name}/${file.path}`;\n        if (expected.has(path)) throw invalidSnapshot();\n        expected.add(path);\n        const content = archive.get(path);\n        if (\n          !content ||\n          content.length !== file.size ||\n          sha256(content) !== file.sha256\n        )\n          throw invalidSnapshot();\n        const text = utf8(content);\n        if (file.path === \"SKILL.md\") {\n          if (text === undefined) throw invalidSnapshot();\n          hasSkill = true;\n        }\n        files.push(\n          Object.freeze({\n            path: file.path,\n            size: file.size,\n            sha256: file.sha256,\n            ...(text !== undefined ? { text } : {}),\n          }),\n        );\n      }\n      if (!hasSkill) throw invalidSnapshot();\n      skills.push(\n        Object.freeze({\n          name: skill.name,\n          description: skill.description,\n          files: Object.freeze(files),\n        }),\n      );\n    }\n    if (\n      expected.size !== archive.size ||\n      [...archive.keys()].some((path) => !expected.has(path))\n    )\n      throw invalidSnapshot();\n    return Object.freeze({\n      revision: revision,\n      etag: etag,\n      skills: Object.freeze(skills),\n    });\n  } catch (error) {\n    if (signal?.aborted) throw signal.reason;\n    if (error instanceof SkillDeliveryError) throw error;\n    throw invalidSnapshot(error);\n  }\n}\n"],"mappings":";;;;;;;AAuBA,SAAS,OAAO,OAAkD;AAChE,QAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM;;AAE7E,SAAS,OAAO,OAA2B;AACzC,QAAO,WAAW,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;AAEzD,SAAS,KAAK,OAAuC;AACnD,KAAI;AACF,SAAO,IAAI,YAAY,SAAS;GAAE,OAAO;GAAM,WAAW;GAAM,CAAC,CAAC,OAChE,MACD;SACK;AACN;;;;AAKJ,eAAsB,iBACpB,UACA,QAC2B;AAC3B,KAAI;AACF,MACE,CAAC,OAAO,SAAS,IACjB,EAAE,SAAS,iBAAiB,eAC5B,OAAO,SAAS,aAAa,YAC7B,OAAO,SAAS,SAAS,YACzB,OAAO,SAAS,gBAAgB,SAEhC,OAAM,iBAAiB;EACzB,MAAM,EAAE,UAAU,MAAM,gBAAgB;AACxC,MACE,SAAS,WAAW,cACpB,SAAS,MAAM,aAAa,sBAC5B,YAAY,MAAM,KAAK,EAAE,CAAC,IAAI,MAAM,CAAC,aAAa,KAChD,qBACF,CAAC,YACD,CAAC,mBAAmB,KAAK,KAAK,CAE9B,OAAM,iBAAiB;EAGzB,MAAM,QAAQ,OAAO,KAAK,SAAS,MAAM;AACzC,MAAI,IAAI,OAAO,MAAM,CAAC,OAAO,KAAM,OAAM,iBAAiB;EAC1D,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO;EAChD,MAAM,gBAAgB,QAAQ,IAAI,gBAAgB;AAClD,MAAI,CAAC,cAAe,OAAM,iBAAiB;EAC3C,MAAM,UAAU,KAAK,cAAc;AACnC,MAAI,YAAY,OAAW,OAAM,iBAAiB;EAClD,MAAM,WAAoB,KAAK,MAAM,QAAQ;AAC7C,MAAI,CAAC,OAAO,SAAS,CAAE,OAAM,iBAAiB;AAC9C,MACE,OAAO,SAAS,kBAAkB,YAClC,SAAS,kBAAkB,EAE3B,OAAM,IAAIA,mBAAmB,sBAAsB,MAAM;AAC3D,MACE,SAAS,kBAAkB,KAC3B,SAAS,aAAa,YACtB,CAAC,MAAM,QAAQ,SAAS,OAAO,CAE/B,OAAM,iBAAiB;EACzB,MAAM,WAAW,IAAI,IAAI,CAAC,gBAAgB,CAAC;EAC3C,IAAI;EACJ,MAAM,SAA0B,EAAE;AAClC,OAAK,MAAM,SAAS,SAAS,QAAQ;AACnC,OACE,CAAC,OAAO,MAAM,IACd,OAAO,MAAM,SAAS,YACtB,CAAC,iBAAiB,MAAM,KAAK,IAC7B,MAAM,KAAK,SAAS,IAAI,IACvB,iBAAiB,UAChB,OAAO,QAAQ,OAAO,KAAK,aAAa,EAAE,OAAO,KAAK,MAAM,KAAK,CAAC,IAChE,KACJ,OAAO,MAAM,gBAAgB,YAC7B,CAAC,MAAM,QAAQ,MAAM,MAAM,CAE3B,OAAM,iBAAiB;AACzB,kBAAe,MAAM;GACrB,IAAI;GACJ,IAAI,WAAW;GACf,MAAM,QAAwB,EAAE;AAChC,QAAK,MAAM,QAAQ,MAAM,OAAO;AAC9B,QACE,CAAC,OAAO,KAAK,IACb,OAAO,KAAK,SAAS,YACrB,CAAC,iBAAiB,KAAK,KAAK,IAC3B,iBAAiB,UAChB,OAAO,QAAQ,OAAO,KAAK,aAAa,EAAE,OAAO,KAAK,KAAK,KAAK,CAAC,IAC/D,KACJ,OAAO,KAAK,SAAS,YACrB,CAAC,OAAO,cAAc,KAAK,KAAK,IAChC,KAAK,OAAO,KACZ,OAAO,KAAK,WAAW,YACvB,CAAC,iBAAiB,KAAK,KAAK,OAAO,CAEnC,OAAM,iBAAiB;AACzB,mBAAe,KAAK;IACpB,MAAM,OAAO,GAAG,MAAM,KAAK,GAAG,KAAK;AACnC,QAAI,SAAS,IAAI,KAAK,CAAE,OAAM,iBAAiB;AAC/C,aAAS,IAAI,KAAK;IAClB,MAAM,UAAU,QAAQ,IAAI,KAAK;AACjC,QACE,CAAC,WACD,QAAQ,WAAW,KAAK,QACxB,OAAO,QAAQ,KAAK,KAAK,OAEzB,OAAM,iBAAiB;IACzB,MAAM,OAAO,KAAK,QAAQ;AAC1B,QAAI,KAAK,SAAS,YAAY;AAC5B,SAAI,SAAS,OAAW,OAAM,iBAAiB;AAC/C,gBAAW;;AAEb,UAAM,KACJ,OAAO,OAAO;KACZ,MAAM,KAAK;KACX,MAAM,KAAK;KACX,QAAQ,KAAK;KACb,GAAI,SAAS,SAAY,EAAE,MAAM,GAAG,EAAE;KACvC,CAAC,CACH;;AAEH,OAAI,CAAC,SAAU,OAAM,iBAAiB;AACtC,UAAO,KACL,OAAO,OAAO;IACZ,MAAM,MAAM;IACZ,aAAa,MAAM;IACnB,OAAO,OAAO,OAAO,MAAM;IAC5B,CAAC,CACH;;AAEH,MACE,SAAS,SAAS,QAAQ,QAC1B,CAAC,GAAG,QAAQ,MAAM,CAAC,CAAC,MAAM,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,CAEvD,OAAM,iBAAiB;AACzB,SAAO,OAAO,OAAO;GACT;GACJ;GACN,QAAQ,OAAO,OAAO,OAAO;GAC9B,CAAC;UACK,OAAO;AACd,MAAI,QAAQ,QAAS,OAAM,OAAO;AAClC,MAAI,iBAAiBA,mBAAoB,OAAM;AAC/C,QAAM,gBAAgB,MAAM"}

package/dist/v2/runtime/runner/agent-runner.d.cts

@@ -1,6 +1,6 @@
 
-import { Observable } from "rxjs";
 import { AbstractAgent, BaseEvent, Message, RunAgentInput } from "@ag-ui/client";
+import { Observable } from "rxjs";
 
 //#region src/v2/runtime/runner/agent-runner.d.ts
 interface AgentRunnerRunRequest {

package/dist/v2/runtime/runner/in-memory.d.cts

@@ -1,7 +1,7 @@
 
 import { AgentRunner, AgentRunnerConnectRequest, AgentRunnerIsRunningRequest, AgentRunnerRunRequest, AgentRunnerStopRequest } from "./agent-runner.cjs";
-import { Observable, ReplaySubject } from "rxjs";
 import { AbstractAgent, BaseEvent, Message } from "@ag-ui/client";
+import { Observable, ReplaySubject } from "rxjs";
 
 //#region src/v2/runtime/runner/in-memory.d.ts
 interface InMemoryLimits {

package/dist/v2/runtime/runner/index.d.cts

@@ -2,5 +2,5 @@
 import { AgentRunner, AgentRunnerConnectRequest, AgentRunnerIsRunningRequest, AgentRunnerRunRequest, AgentRunnerStopRequest, LocalThreadEndpointRecord, LocalThreadEndpointRunner, supportsLocalThreadEndpoints } from "./agent-runner.cjs";
 import { InMemoryAgentRunner, InMemoryAgentRunnerOptions, InMemoryLimits, InMemoryThread, ɵBoundedThreadStore, ɵGLOBAL_STORE, ɵINMEMORY_DEFAULTS, ɵestimateBytes, ɵnormalizeLimits } from "./in-memory.cjs";
 import { IntelligenceAgentRunner, IntelligenceAgentRunnerOptions, RunnerStartupBoundary } from "./intelligence.cjs";
-import { finalizeRunEvents } from "@copilotkit/shared";
-export { finalizeRunEvents };
+import { FinalizeRunOptions, RunEventFinalizer, createRunEventFinalizer, finalizeRunEvents } from "@copilotkit/shared";
+export { type FinalizeRunOptions, type RunEventFinalizer, createRunEventFinalizer, finalizeRunEvents };

package/dist/v2/runtime/runner/index.d.mts

@@ -2,5 +2,5 @@
 import { AgentRunner, AgentRunnerConnectRequest, AgentRunnerIsRunningRequest, AgentRunnerRunRequest, AgentRunnerStopRequest, LocalThreadEndpointRecord, LocalThreadEndpointRunner, supportsLocalThreadEndpoints } from "./agent-runner.mjs";
 import { InMemoryAgentRunner, InMemoryAgentRunnerOptions, InMemoryLimits, InMemoryThread, ɵBoundedThreadStore, ɵGLOBAL_STORE, ɵINMEMORY_DEFAULTS, ɵestimateBytes, ɵnormalizeLimits } from "./in-memory.mjs";
 import { IntelligenceAgentRunner, IntelligenceAgentRunnerOptions, RunnerStartupBoundary } from "./intelligence.mjs";
-import { finalizeRunEvents as finalizeRunEvents$1 } from "@copilotkit/shared";
-export { finalizeRunEvents$1 as finalizeRunEvents };
+import { FinalizeRunOptions, RunEventFinalizer, createRunEventFinalizer as createRunEventFinalizer$1, finalizeRunEvents as finalizeRunEvents$1 } from "@copilotkit/shared";
+export { type FinalizeRunOptions, type RunEventFinalizer, createRunEventFinalizer$1 as createRunEventFinalizer, finalizeRunEvents$1 as finalizeRunEvents };

package/dist/v2/runtime/runner/index.mjs

@@ -2,6 +2,6 @@ import "reflect-metadata";
 import { AgentRunner, supportsLocalThreadEndpoints } from "./agent-runner.mjs";
 import { InMemoryAgentRunner, ɵBoundedThreadStore, ɵGLOBAL_STORE, ɵINMEMORY_DEFAULTS, ɵestimateBytes, ɵnormalizeLimits } from "./in-memory.mjs";
 import { IntelligenceAgentRunner } from "./intelligence.mjs";
-import { finalizeRunEvents as finalizeRunEvents$1 } from "@copilotkit/shared";
+import { createRunEventFinalizer as createRunEventFinalizer$1, finalizeRunEvents as finalizeRunEvents$1 } from "@copilotkit/shared";
 
-export { finalizeRunEvents$1 as finalizeRunEvents };
+export { createRunEventFinalizer$1 as createRunEventFinalizer, finalizeRunEvents$1 as finalizeRunEvents };

package/dist/v2/runtime/runner/intelligence.d.cts

@@ -1,7 +1,7 @@
 
 import { AgentRunner, AgentRunnerConnectRequest, AgentRunnerIsRunningRequest, AgentRunnerRunRequest, AgentRunnerStopRequest } from "./agent-runner.cjs";
-import { Observable } from "rxjs";
 import { BaseEvent } from "@ag-ui/client";
+import { Observable } from "rxjs";
 
 //#region src/v2/runtime/runner/intelligence.d.ts
 interface IntelligenceAgentRunnerOptions {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@copilotkit/runtime",
-  "version": "1.72.1-canary.sp-longthread-perf",
+  "version": "1.73.0",
   "private": false,
   "keywords": [
     "ai",
@@ -38,6 +38,10 @@
       "import": "./dist/index.mjs",
       "require": "./dist/index.cjs"
     },
+    "./internal/learned-skills": {
+      "import": "./dist/internal/learned-skills.mjs",
+      "require": "./dist/internal/learned-skills.cjs"
+    },
     "./langgraph": {
       "import": "./dist/langgraph.mjs",
       "require": "./dist/langgraph.cjs"
@@ -78,7 +82,6 @@
     "@ai-sdk/openai": "^3.0.36",
     "@cfworker/json-schema": "^4.1.1",
     "@copilotkit/license-verifier": "~0.5.0",
-    "@copilotkit/shared": "1.72.1-canary.sp-longthread-perf",
     "@graphql-yoga/plugin-defer-stream": "^3.3.1",
     "@hono/node-server": "^1.13.5",
     "@modelcontextprotocol/sdk": "^1.18.2",
@@ -108,8 +111,10 @@
     "uuid": "^11.1.0",
     "ws": "^8.18.0",
     "zod": "^3.23.3",
+    "yauzl": "2.10.0",
     "@copilotkit/channels-core": "^0.10.0",
-    "@copilotkit/channels-intelligence": "0.10.0"
+    "@copilotkit/channels-intelligence": "0.10.0",
+    "@copilotkit/shared": "1.73.0"
   },
   "devDependencies": {
     "@copilotkit/aimock": "latest",
@@ -130,6 +135,7 @@
     "typescript": "^5.2.3",
     "valibot": "^1.2.0",
     "vitest": "^3.2.4",
+    "@types/yauzl": "2.10.3",
     "@copilotkit/channels": "0.10.0",
     "tsconfig": "1.4.12"
   },