@copilotkit/runtime 1.75.2 → 1.77.0

package/dist/v2/runtime/handlers/shared/agent-utils.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"agent-utils.cjs","names":["resolveAgents","isA2UIEnabled","A2UIMiddleware","isIntelligenceRuntime","resolveMcpAppsServers","MCPAppsMiddleware","OpenGenerativeUIMiddleware","mergeForwardableHeaders","resolveForwardHeadersPolicy","resolveIntelligenceUser","resolveWebMemory","grantAllowsMemory","errorResponse","MCPMiddleware","INTELLIGENCE_USER_ID_HEADER","INTELLIGENCE_MEMORY_GRANT_HEADER","RunAgentInputSchema"],"sources":["../../../../../src/v2/runtime/handlers/shared/agent-utils.ts"],"sourcesContent":["import type { AbstractAgent, RunAgentInput } from \"@ag-ui/client\";\nimport { RunAgentInputSchema } from \"@ag-ui/client\";\nimport {\n  A2UIMiddleware,\n  OpenGenerativeUIMiddleware,\n} from \"@copilotkit/shared/event-transforms\";\nimport { MCPAppsMiddleware } from \"@ag-ui/mcp-apps-middleware\";\nimport { MCPMiddleware } from \"@ag-ui/mcp-middleware\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport {\n  isA2UIEnabled,\n  isIntelligenceRuntime,\n  resolveAgents,\n} from \"../../core/runtime\";\nimport {\n  INTELLIGENCE_MEMORY_GRANT_HEADER,\n  INTELLIGENCE_USER_ID_HEADER,\n} from \"../../intelligence-platform/client\";\nimport {\n  mergeForwardableHeaders,\n  resolveForwardHeadersPolicy,\n} from \"../header-utils\";\nimport { resolveMcpAppsServers } from \"./mcp-apps-servers\";\nimport { resolveIntelligenceUser } from \"./resolve-intelligence-user\";\nimport { grantAllowsMemory, resolveWebMemory } from \"./memory-policy\";\nimport { errorResponse } from \"./json-response\";\nimport { logger } from \"@copilotkit/shared\";\n\ntype MiddlewareCapableAgent = AbstractAgent & {\n  use?: (middleware: unknown) => void;\n  headers?: Record<string, string>;\n};\n\nexport interface RunAgentParameters {\n  request: Request;\n  runtime: CopilotRuntimeLike;\n  agentId: string;\n}\n\nexport interface ConnectRequestBody extends RunAgentInput {\n  lastSeenEventId?: string | null;\n}\n\n/**\n * Resolve `agentId` against the runtime's agents and return a per-request\n * clone of the matching agent.\n *\n * Dual return contract — both callers (`handle-run.ts`, `handle-connect.ts`)\n * depend on it:\n * - Returns a cloned `AbstractAgent` when the agent exists.\n * - Returns a 404 `Response` (`{ error: \"Agent not found\", ... }`) when the\n *   agent is unknown. Callers MUST `instanceof Response`-check the result and\n *   return it directly; this doubles as the connect/run path's agent-existence\n *   guard, so skipping the check would let unknown agent ids slip through.\n *\n * The clone is what subsequent per-request mutation (middleware attach,\n * `agent.headers` merge) operates on, leaving the shared agent registration\n * untouched.\n */\nexport async function cloneAgentForRequest(\n  runtime: CopilotRuntimeLike,\n  agentId: string,\n  request?: Request,\n): Promise<AbstractAgent | Response> {\n  const agents = await resolveAgents(runtime.agents, request);\n\n  if (!agents[agentId]) {\n    return new Response(\n      JSON.stringify({\n        error: \"Agent not found\",\n        message: `Agent '${agentId}' does not exist`,\n      }),\n      {\n        status: 404,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n\n  return (agents[agentId] as AbstractAgent).clone() as AbstractAgent;\n}\n\nexport function configureAgentForRequest(params: {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agentId: string;\n  agent: AbstractAgent;\n  /**\n   * True when the React provider was given an A2UI catalog\n   * (`<CopilotKit a2ui={{ catalog }}>`), forwarded per-run. A catalog alone is\n   * enough to enable A2UI and inject the render tool — the developer no longer\n   * has to also set `a2ui.injectA2UITool` on the runtime.\n   */\n  providerA2UIHasCatalog?: boolean;\n  /** Retain proxy rejection even when no server is available to this agent. */\n  isMcpProxyRequest?: boolean;\n}): void {\n  const {\n    runtime,\n    request,\n    agentId,\n    providerA2UIHasCatalog,\n    isMcpProxyRequest,\n  } = params;\n  const agent = params.agent as MiddlewareCapableAgent;\n\n  // A2UI is on when the runtime explicitly enables it, OR when the provider\n  // forwarded a catalog — but an explicit `enabled: false` always wins (we\n  // provide a quick default, never override a deeper opt-out).\n  const a2uiEnabledByCatalog =\n    !!providerA2UIHasCatalog && runtime.a2ui?.enabled !== false;\n\n  if (isA2UIEnabled(runtime.a2ui) || a2uiEnabledByCatalog) {\n    // `enabled` is a CopilotKit-level switch, not an A2UIMiddleware option —\n    // drop it (alongside the agent filter) before forwarding to the middleware.\n    const {\n      agents: targetAgents,\n      enabled: _enabled,\n      injectA2UITool,\n      ...a2uiOptions\n    } = runtime.a2ui ?? {};\n    const shouldApply = !targetAgents || targetAgents.includes(agentId);\n    if (shouldApply && typeof agent.use === \"function\") {\n      agent.use(\n        new A2UIMiddleware({\n          ...a2uiOptions,\n          // Default render-tool injection on when a catalog is present and the\n          // developer hasn't set it explicitly. `??` means an explicit value\n          // (including `false`) is always respected.\n          injectA2UITool:\n            injectA2UITool ?? (providerA2UIHasCatalog ? true : undefined),\n        }),\n      );\n    }\n  }\n\n  if (isIntelligenceRuntime(runtime) && typeof agent.use === \"function\") {\n    // Ordinary runs need no middleware without selected servers. Proxy requests\n    // still need the upstream guard so they cannot fall through to the model.\n    const mcpServers = resolveMcpAppsServers(\n      runtime.mcpApps?.servers ?? [],\n      agentId,\n    );\n    if (mcpServers.length > 0 || isMcpProxyRequest) {\n      agent.use(\n        new MCPAppsMiddleware({ mcpServers, discoveryFailureMode: \"throw\" }),\n      );\n    }\n  } else if (runtime.mcpApps?.servers?.length) {\n    const mcpServers = resolveMcpAppsServers(runtime.mcpApps.servers, agentId);\n\n    if (mcpServers.length > 0 && typeof agent.use === \"function\") {\n      agent.use(new MCPAppsMiddleware({ mcpServers }));\n    }\n  }\n\n  if (runtime.openGenerativeUI) {\n    const config = runtime.openGenerativeUI;\n    const targetAgents = typeof config === \"object\" ? config.agents : undefined;\n    const shouldApply = !targetAgents || targetAgents.includes(agentId);\n    if (shouldApply && typeof agent.use === \"function\") {\n      agent.use(new OpenGenerativeUIMiddleware());\n    }\n  }\n\n  // Forward eligible inbound headers onto the outgoing agent call under the\n  // runtime's resolved forwarding policy (`authorization` / custom `x-*`, with\n  // known infra/proxy/platform headers stripped by the default denylist —\n  // #5712), but let headers the server explicitly configured on the agent WIN\n  // on collision (case-insensitively): a server-set service-to-service token\n  // (e.g. an IAM bearer) must never be silently overridden by a\n  // browser/edge/platform-injected inbound header. See `mergeForwardableHeaders`\n  // for the casing/duplicate-key rationale and `shouldForwardHeader` for breadth.\n  agent.headers = mergeForwardableHeaders(\n    agent.headers,\n    request,\n    // `forwardHeadersPolicy` is optional on the published `CopilotRuntimeLike`\n    // interface (non-breaking minor release). Concrete runtimes always set it;\n    // a policy-less external implementor falls back to the default resolved\n    // policy (default-on denylist) so behavior stays identical and never derefs\n    // undefined.\n    runtime.forwardHeadersPolicy ?? resolveForwardHeadersPolicy(undefined),\n  );\n}\n\n/**\n * Shared by the two places a run meets a middleware-less agent: before Memory\n * is resolved (nothing left to resolve) and after (Memory resolved to nothing).\n */\nconst NO_MIDDLEWARE_WARNING =\n  \"CopilotKitIntelligence.enableEnterpriseLearning is enabled, but the agent \" +\n  \"does not support middleware (no `.use()` method); Intelligence tools were \" +\n  \"not attached for this run.\";\n\n/**\n * Attach CopilotKit Intelligence's MCP tools to the agent run when\n * `CopilotKitIntelligence` was constructed with\n * `enableEnterpriseLearning: true`. Uses `@ag-ui/mcp-middleware`, so the\n * tools are available uniformly across agent frameworks (not just\n * `BuiltInAgent`).\n *\n * The middleware sits on a per-request agent clone, so the per-request\n * auth (Bearer apiKey + resolved user-id) is baked into the transport\n * headers at attach time. If user resolution fails, attachment is\n * skipped silently — the intelligence run handler will reject the\n * request with the same error. Note this means `identifyUser` is\n * resolved twice per learning-enabled run (here and in the run handler);\n * the callback is expected to be idempotent and side-effect-free.\n *\n * Intentionally split out from `configureAgentForRequest`: this is only\n * relevant to actual agent runs, not auxiliary flows like thread-name\n * generation (which has no need for MCP tools and shouldn't pay the\n * `listTools` round-trip).\n */\nexport async function attachIntelligenceEnterpriseLearning(params: {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agent: AbstractAgent;\n}): Promise<void | Response> {\n  const { runtime, request } = params;\n  const agent = params.agent as MiddlewareCapableAgent;\n\n  if (!isIntelligenceRuntime(runtime)) return;\n\n  const learningEnabled =\n    runtime.intelligence?.ɵisEnterpriseLearningEnabled?.() === true;\n  if (runtime.memory === undefined && !learningEnabled) return;\n\n  // Nothing here is resolvable for an agent whose framework can't take\n  // middleware and whose runtime configures no Memory — bail before paying for\n  // `identifyUser`, so an enterprise-learning-only run keeps warning rather\n  // than acquiring a new way to fail.\n  if (runtime.memory === undefined && typeof agent.use !== \"function\") {\n    logger.warn(NO_MIDDLEWARE_WARNING);\n    return;\n  }\n\n  const userResult = await resolveIntelligenceUser({ runtime, request });\n  if (userResult instanceof Response) return userResult;\n  const access = await resolveWebMemory(runtime, request, userResult, \"agent\");\n  if (access instanceof Response) return access;\n\n  const memoryGranted =\n    runtime.memory !== undefined && grantAllowsMemory(access.grant);\n\n  // A policy that grants no scope means this run gets no Memory — it does NOT\n  // mean the run is refused. Attach nothing and let the conversation proceed,\n  // exactly as a Channel does when its grant asks for nothing\n  // (`hasMemoryAccess` in @copilotkit/channels-core). Returning a 403 here\n  // instead fails the whole run, so switching Memory off for one tenant would\n  // leave that tenant with no assistant, and the only signal is a run error the\n  // chat surface has no reason to render.\n  //\n  // Enterprise learning rides the SAME MCP server, so \"no Memory\" must not cost\n  // an operator the learning tools too. When it is on, attach anyway and let\n  // Intelligence filter: it registers one Memory tool per granted scope and\n  // none at all for an all-none grant, leaving the learning tools untouched.\n  if (!memoryGranted && !learningEnabled) return;\n\n  // Whatever is left to attach needs middleware. Failing the run is right only\n  // when Memory was actually granted and cannot be delivered; a run that merely\n  // wanted learning tools warns and proceeds, as it always has.\n  if (typeof agent.use !== \"function\") {\n    if (memoryGranted) {\n      return errorResponse(\n        \"Memory is configured, but this agent does not support middleware\",\n        500,\n      );\n    }\n    logger.warn(NO_MIDDLEWARE_WARNING);\n    return;\n  }\n\n  agent.use(\n    new MCPMiddleware([\n      {\n        type: \"http\",\n        url: `${runtime.intelligence.ɵgetApiUrl()}/mcp`,\n        serverId: \"intelligence\",\n        headers: {\n          Authorization: `Bearer ${runtime.intelligence.ɵgetApiKey()}`,\n          [INTELLIGENCE_USER_ID_HEADER]: userResult.id,\n          ...(runtime.memory\n            ? {\n                [INTELLIGENCE_MEMORY_GRANT_HEADER]: JSON.stringify(\n                  access.grant,\n                ),\n              }\n            : {}),\n        },\n      },\n    ]),\n  );\n}\n\nexport async function parseRunRequest(\n  request: Request,\n): Promise<RunAgentInput | Response> {\n  try {\n    const requestBody = await request.json();\n    return RunAgentInputSchema.parse(requestBody);\n  } catch (error) {\n    logger.error(\"Invalid run request body:\", error);\n    return new Response(\n      JSON.stringify({\n        error: \"Invalid request body\",\n        details: error instanceof Error ? error.message : String(error),\n      }),\n      {\n        status: 400,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n\nexport async function parseConnectRequest(request: Request): Promise<\n  | Response\n  | {\n      input: RunAgentInput;\n      lastSeenEventId: string | null;\n    }\n> {\n  try {\n    const requestBody = await request.json();\n    const input = RunAgentInputSchema.parse(requestBody);\n    let lastSeenEventId: string | null = null;\n\n    if (\n      \"lastSeenEventId\" in (requestBody as Record<string, unknown>) &&\n      (typeof (requestBody as Record<string, unknown>).lastSeenEventId ===\n        \"string\" ||\n        (requestBody as Record<string, unknown>).lastSeenEventId === null)\n    ) {\n      lastSeenEventId =\n        (requestBody as ConnectRequestBody).lastSeenEventId ?? null;\n    }\n\n    return { input, lastSeenEventId };\n  } catch (error) {\n    logger.error(\"Invalid connect request body:\", error);\n    return new Response(\n      JSON.stringify({\n        error: \"Invalid request body\",\n        details: error instanceof Error ? error.message : String(error),\n      }),\n      {\n        status: 400,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,eAAsB,qBACpB,SACA,SACA,SACmC;CACnC,MAAM,SAAS,MAAMA,gCAAc,QAAQ,QAAQ,QAAQ;AAE3D,KAAI,CAAC,OAAO,SACV,QAAO,IAAI,SACT,KAAK,UAAU;EACb,OAAO;EACP,SAAS,UAAU,QAAQ;EAC5B,CAAC,EACF;EACE,QAAQ;EACR,SAAS,EAAE,gBAAgB,oBAAoB;EAChD,CACF;AAGH,QAAQ,OAAO,SAA2B,OAAO;;AAGnD,SAAgB,yBAAyB,QAchC;CACP,MAAM,EACJ,SACA,SACA,SACA,wBACA,sBACE;CACJ,MAAM,QAAQ,OAAO;CAKrB,MAAM,uBACJ,CAAC,CAAC,0BAA0B,QAAQ,MAAM,YAAY;AAExD,KAAIC,gCAAc,QAAQ,KAAK,IAAI,sBAAsB;EAGvD,MAAM,EACJ,QAAQ,cACR,SAAS,UACT,gBACA,GAAG,gBACD,QAAQ,QAAQ,EAAE;AAEtB,OADoB,CAAC,gBAAgB,aAAa,SAAS,QAAQ,KAChD,OAAO,MAAM,QAAQ,WACtC,OAAM,IACJ,IAAIC,mDAAe;GACjB,GAAG;GAIH,gBACE,mBAAmB,yBAAyB,OAAO;GACtD,CAAC,CACH;;AAIL,KAAIC,wCAAsB,QAAQ,IAAI,OAAO,MAAM,QAAQ,YAAY;EAGrE,MAAM,aAAaC,+CACjB,QAAQ,SAAS,WAAW,EAAE,EAC9B,QACD;AACD,MAAI,WAAW,SAAS,KAAK,kBAC3B,OAAM,IACJ,IAAIC,6CAAkB;GAAE;GAAY,sBAAsB;GAAS,CAAC,CACrE;YAEM,QAAQ,SAAS,SAAS,QAAQ;EAC3C,MAAM,aAAaD,+CAAsB,QAAQ,QAAQ,SAAS,QAAQ;AAE1E,MAAI,WAAW,SAAS,KAAK,OAAO,MAAM,QAAQ,WAChD,OAAM,IAAI,IAAIC,6CAAkB,EAAE,YAAY,CAAC,CAAC;;AAIpD,KAAI,QAAQ,kBAAkB;EAC5B,MAAM,SAAS,QAAQ;EACvB,MAAM,eAAe,OAAO,WAAW,WAAW,OAAO,SAAS;AAElE,OADoB,CAAC,gBAAgB,aAAa,SAAS,QAAQ,KAChD,OAAO,MAAM,QAAQ,WACtC,OAAM,IAAI,IAAIC,gEAA4B,CAAC;;AAY/C,OAAM,UAAUC,6CACd,MAAM,SACN,SAMA,QAAQ,wBAAwBC,iDAA4B,OAAU,CACvE;;;;;;AAOH,MAAM,wBACJ;;;;;;;;;;;;;;;;;;;;;AAwBF,eAAsB,qCAAqC,QAI9B;CAC3B,MAAM,EAAE,SAAS,YAAY;CAC7B,MAAM,QAAQ,OAAO;AAErB,KAAI,CAACL,wCAAsB,QAAQ,CAAE;CAErC,MAAM,kBACJ,QAAQ,cAAc,gCAAgC,KAAK;AAC7D,KAAI,QAAQ,WAAW,UAAa,CAAC,gBAAiB;AAMtD,KAAI,QAAQ,WAAW,UAAa,OAAO,MAAM,QAAQ,YAAY;AACnE,4BAAO,KAAK,sBAAsB;AAClC;;CAGF,MAAM,aAAa,MAAMM,0DAAwB;EAAE;EAAS;EAAS,CAAC;AACtE,KAAI,sBAAsB,SAAU,QAAO;CAC3C,MAAM,SAAS,MAAMC,uCAAiB,SAAS,SAAS,YAAY,QAAQ;AAC5E,KAAI,kBAAkB,SAAU,QAAO;CAEvC,MAAM,gBACJ,QAAQ,WAAW,UAAaC,wCAAkB,OAAO,MAAM;AAcjE,KAAI,CAAC,iBAAiB,CAAC,gBAAiB;AAKxC,KAAI,OAAO,MAAM,QAAQ,YAAY;AACnC,MAAI,cACF,QAAOC,oCACL,oEACA,IACD;AAEH,4BAAO,KAAK,sBAAsB;AAClC;;AAGF,OAAM,IACJ,IAAIC,oCAAc,CAChB;EACE,MAAM;EACN,KAAK,GAAG,QAAQ,aAAa,YAAY,CAAC;EAC1C,UAAU;EACV,SAAS;GACP,eAAe,UAAU,QAAQ,aAAa,YAAY;IACzDC,6CAA8B,WAAW;GAC1C,GAAI,QAAQ,SACR,GACGC,kDAAmC,KAAK,UACvC,OAAO,MACR,EACF,GACD,EAAE;GACP;EACF,CACF,CAAC,CACH;;AAGH,eAAsB,gBACpB,SACmC;AACnC,KAAI;EACF,MAAM,cAAc,MAAM,QAAQ,MAAM;AACxC,SAAOC,kCAAoB,MAAM,YAAY;UACtC,OAAO;AACd,4BAAO,MAAM,6BAA6B,MAAM;AAChD,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAChE,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF;;;AAIL,eAAsB,oBAAoB,SAMxC;AACA,KAAI;EACF,MAAM,cAAc,MAAM,QAAQ,MAAM;EACxC,MAAM,QAAQA,kCAAoB,MAAM,YAAY;EACpD,IAAI,kBAAiC;AAErC,MACE,qBAAsB,gBACrB,OAAQ,YAAwC,oBAC/C,YACC,YAAwC,oBAAoB,MAE/D,mBACG,YAAmC,mBAAmB;AAG3D,SAAO;GAAE;GAAO;GAAiB;UAC1B,OAAO;AACd,4BAAO,MAAM,iCAAiC,MAAM;AACpD,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAChE,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF"}
+{"version":3,"file":"agent-utils.cjs","names":["resolveAgents","isA2UIEnabled","A2UIMiddleware","isIntelligenceRuntime","resolveMcpAppsServers","MCPAppsMiddleware","OpenGenerativeUIMiddleware","mergeForwardableHeaders","resolveForwardHeadersPolicy","resolveIntelligenceUser","resolveWebMemory","grantAllowsMemory","errorResponse","MCPMiddleware","INTELLIGENCE_USER_ID_HEADER","INTELLIGENCE_MEMORY_GRANT_HEADER","RunAgentInputSchema"],"sources":["../../../../../src/v2/runtime/handlers/shared/agent-utils.ts"],"sourcesContent":["import type { AbstractAgent, RunAgentInput } from \"@ag-ui/client\";\nimport { RunAgentInputSchema } from \"@ag-ui/core/schemas\";\nimport {\n  A2UIMiddleware,\n  OpenGenerativeUIMiddleware,\n} from \"@copilotkit/shared/event-transforms\";\nimport { MCPAppsMiddleware } from \"@ag-ui/mcp-apps-middleware\";\nimport { MCPMiddleware } from \"@ag-ui/mcp-middleware\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport {\n  isA2UIEnabled,\n  isIntelligenceRuntime,\n  resolveAgents,\n} from \"../../core/runtime\";\nimport {\n  INTELLIGENCE_MEMORY_GRANT_HEADER,\n  INTELLIGENCE_USER_ID_HEADER,\n} from \"../../intelligence-platform/client\";\nimport {\n  mergeForwardableHeaders,\n  resolveForwardHeadersPolicy,\n} from \"../header-utils\";\nimport { resolveMcpAppsServers } from \"./mcp-apps-servers\";\nimport { resolveIntelligenceUser } from \"./resolve-intelligence-user\";\nimport { grantAllowsMemory, resolveWebMemory } from \"./memory-policy\";\nimport { errorResponse } from \"./json-response\";\nimport { logger } from \"@copilotkit/shared\";\n\ntype MiddlewareCapableAgent = AbstractAgent & {\n  use?: (middleware: unknown) => void;\n  headers?: Record<string, string>;\n};\n\nexport interface RunAgentParameters {\n  request: Request;\n  runtime: CopilotRuntimeLike;\n  agentId: string;\n}\n\nexport interface ConnectRequestBody extends RunAgentInput {\n  lastSeenEventId?: string | null;\n}\n\n/**\n * Resolve `agentId` against the runtime's agents and return a per-request\n * clone of the matching agent.\n *\n * Dual return contract — both callers (`handle-run.ts`, `handle-connect.ts`)\n * depend on it:\n * - Returns a cloned `AbstractAgent` when the agent exists.\n * - Returns a 404 `Response` (`{ error: \"Agent not found\", ... }`) when the\n *   agent is unknown. Callers MUST `instanceof Response`-check the result and\n *   return it directly; this doubles as the connect/run path's agent-existence\n *   guard, so skipping the check would let unknown agent ids slip through.\n *\n * The clone is what subsequent per-request mutation (middleware attach,\n * `agent.headers` merge) operates on, leaving the shared agent registration\n * untouched.\n */\nexport async function cloneAgentForRequest(\n  runtime: CopilotRuntimeLike,\n  agentId: string,\n  request?: Request,\n): Promise<AbstractAgent | Response> {\n  const agents = await resolveAgents(runtime.agents, request);\n\n  if (!agents[agentId]) {\n    return new Response(\n      JSON.stringify({\n        error: \"Agent not found\",\n        message: `Agent '${agentId}' does not exist`,\n      }),\n      {\n        status: 404,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n\n  return (agents[agentId] as AbstractAgent).clone() as AbstractAgent;\n}\n\nexport function configureAgentForRequest(params: {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agentId: string;\n  agent: AbstractAgent;\n  /**\n   * True when the React provider was given an A2UI catalog\n   * (`<CopilotKit a2ui={{ catalog }}>`), forwarded per-run. A catalog alone is\n   * enough to enable A2UI and inject the render tool — the developer no longer\n   * has to also set `a2ui.injectA2UITool` on the runtime.\n   */\n  providerA2UIHasCatalog?: boolean;\n  /** Retain proxy rejection even when no server is available to this agent. */\n  isMcpProxyRequest?: boolean;\n}): void {\n  const {\n    runtime,\n    request,\n    agentId,\n    providerA2UIHasCatalog,\n    isMcpProxyRequest,\n  } = params;\n  const agent = params.agent as MiddlewareCapableAgent;\n\n  // A2UI is on when the runtime explicitly enables it, OR when the provider\n  // forwarded a catalog — but an explicit `enabled: false` always wins (we\n  // provide a quick default, never override a deeper opt-out).\n  const a2uiEnabledByCatalog =\n    !!providerA2UIHasCatalog && runtime.a2ui?.enabled !== false;\n\n  if (isA2UIEnabled(runtime.a2ui) || a2uiEnabledByCatalog) {\n    // `enabled` is a CopilotKit-level switch, not an A2UIMiddleware option —\n    // drop it (alongside the agent filter) before forwarding to the middleware.\n    const {\n      agents: targetAgents,\n      enabled: _enabled,\n      injectA2UITool,\n      ...a2uiOptions\n    } = runtime.a2ui ?? {};\n    const shouldApply = !targetAgents || targetAgents.includes(agentId);\n    if (shouldApply && typeof agent.use === \"function\") {\n      agent.use(\n        new A2UIMiddleware({\n          ...a2uiOptions,\n          // Default render-tool injection on when a catalog is present and the\n          // developer hasn't set it explicitly. `??` means an explicit value\n          // (including `false`) is always respected.\n          injectA2UITool:\n            injectA2UITool ?? (providerA2UIHasCatalog ? true : undefined),\n        }),\n      );\n    }\n  }\n\n  if (isIntelligenceRuntime(runtime) && typeof agent.use === \"function\") {\n    // Ordinary runs need no middleware without selected servers. Proxy requests\n    // still need the upstream guard so they cannot fall through to the model.\n    const mcpServers = resolveMcpAppsServers(\n      runtime.mcpApps?.servers ?? [],\n      agentId,\n    );\n    if (mcpServers.length > 0 || isMcpProxyRequest) {\n      agent.use(\n        new MCPAppsMiddleware({ mcpServers, discoveryFailureMode: \"throw\" }),\n      );\n    }\n  } else if (runtime.mcpApps?.servers?.length) {\n    const mcpServers = resolveMcpAppsServers(runtime.mcpApps.servers, agentId);\n\n    if (mcpServers.length > 0 && typeof agent.use === \"function\") {\n      agent.use(new MCPAppsMiddleware({ mcpServers }));\n    }\n  }\n\n  if (runtime.openGenerativeUI) {\n    const config = runtime.openGenerativeUI;\n    const targetAgents = typeof config === \"object\" ? config.agents : undefined;\n    const shouldApply = !targetAgents || targetAgents.includes(agentId);\n    if (shouldApply && typeof agent.use === \"function\") {\n      agent.use(new OpenGenerativeUIMiddleware());\n    }\n  }\n\n  // Forward eligible inbound headers onto the outgoing agent call under the\n  // runtime's resolved forwarding policy (`authorization` / custom `x-*`, with\n  // known infra/proxy/platform headers stripped by the default denylist —\n  // #5712), but let headers the server explicitly configured on the agent WIN\n  // on collision (case-insensitively): a server-set service-to-service token\n  // (e.g. an IAM bearer) must never be silently overridden by a\n  // browser/edge/platform-injected inbound header. See `mergeForwardableHeaders`\n  // for the casing/duplicate-key rationale and `shouldForwardHeader` for breadth.\n  agent.headers = mergeForwardableHeaders(\n    agent.headers,\n    request,\n    // `forwardHeadersPolicy` is optional on the published `CopilotRuntimeLike`\n    // interface (non-breaking minor release). Concrete runtimes always set it;\n    // a policy-less external implementor falls back to the default resolved\n    // policy (default-on denylist) so behavior stays identical and never derefs\n    // undefined.\n    runtime.forwardHeadersPolicy ?? resolveForwardHeadersPolicy(undefined),\n  );\n}\n\n/**\n * Shared by the two places a run meets a middleware-less agent: before Memory\n * is resolved (nothing left to resolve) and after (Memory resolved to nothing).\n */\nconst NO_MIDDLEWARE_WARNING =\n  \"CopilotKitIntelligence.enableEnterpriseLearning is enabled, but the agent \" +\n  \"does not support middleware (no `.use()` method); Intelligence tools were \" +\n  \"not attached for this run.\";\n\n/**\n * Attach CopilotKit Intelligence's MCP tools to the agent run when\n * `CopilotKitIntelligence` was constructed with\n * `enableEnterpriseLearning: true`. Uses `@ag-ui/mcp-middleware`, so the\n * tools are available uniformly across agent frameworks (not just\n * `BuiltInAgent`).\n *\n * The middleware sits on a per-request agent clone, so the per-request\n * auth (Bearer apiKey + resolved user-id) is baked into the transport\n * headers at attach time. If user resolution fails, attachment is\n * skipped silently — the intelligence run handler will reject the\n * request with the same error. Note this means `identifyUser` is\n * resolved twice per learning-enabled run (here and in the run handler);\n * the callback is expected to be idempotent and side-effect-free.\n *\n * Intentionally split out from `configureAgentForRequest`: this is only\n * relevant to actual agent runs, not auxiliary flows like thread-name\n * generation (which has no need for MCP tools and shouldn't pay the\n * `listTools` round-trip).\n */\nexport async function attachIntelligenceEnterpriseLearning(params: {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agent: AbstractAgent;\n}): Promise<void | Response> {\n  const { runtime, request } = params;\n  const agent = params.agent as MiddlewareCapableAgent;\n\n  if (!isIntelligenceRuntime(runtime)) return;\n\n  const learningEnabled =\n    runtime.intelligence?.ɵisEnterpriseLearningEnabled?.() === true;\n  if (runtime.memory === undefined && !learningEnabled) return;\n\n  // Nothing here is resolvable for an agent whose framework can't take\n  // middleware and whose runtime configures no Memory — bail before paying for\n  // `identifyUser`, so an enterprise-learning-only run keeps warning rather\n  // than acquiring a new way to fail.\n  if (runtime.memory === undefined && typeof agent.use !== \"function\") {\n    logger.warn(NO_MIDDLEWARE_WARNING);\n    return;\n  }\n\n  const userResult = await resolveIntelligenceUser({ runtime, request });\n  if (userResult instanceof Response) return userResult;\n  const access = await resolveWebMemory(runtime, request, userResult, \"agent\");\n  if (access instanceof Response) return access;\n\n  const memoryGranted =\n    runtime.memory !== undefined && grantAllowsMemory(access.grant);\n\n  // A policy that grants no scope means this run gets no Memory — it does NOT\n  // mean the run is refused. Attach nothing and let the conversation proceed,\n  // exactly as a Channel does when its grant asks for nothing\n  // (`hasMemoryAccess` in @copilotkit/channels-core). Returning a 403 here\n  // instead fails the whole run, so switching Memory off for one tenant would\n  // leave that tenant with no assistant, and the only signal is a run error the\n  // chat surface has no reason to render.\n  //\n  // Enterprise learning rides the SAME MCP server, so \"no Memory\" must not cost\n  // an operator the learning tools too. When it is on, attach anyway and let\n  // Intelligence filter: it registers one Memory tool per granted scope and\n  // none at all for an all-none grant, leaving the learning tools untouched.\n  if (!memoryGranted && !learningEnabled) return;\n\n  // Whatever is left to attach needs middleware. Failing the run is right only\n  // when Memory was actually granted and cannot be delivered; a run that merely\n  // wanted learning tools warns and proceeds, as it always has.\n  if (typeof agent.use !== \"function\") {\n    if (memoryGranted) {\n      return errorResponse(\n        \"Memory is configured, but this agent does not support middleware\",\n        500,\n      );\n    }\n    logger.warn(NO_MIDDLEWARE_WARNING);\n    return;\n  }\n\n  agent.use(\n    new MCPMiddleware([\n      {\n        type: \"http\",\n        url: `${runtime.intelligence.ɵgetApiUrl()}/mcp`,\n        serverId: \"intelligence\",\n        headers: {\n          Authorization: `Bearer ${runtime.intelligence.ɵgetApiKey()}`,\n          [INTELLIGENCE_USER_ID_HEADER]: userResult.id,\n          ...(runtime.memory\n            ? {\n                [INTELLIGENCE_MEMORY_GRANT_HEADER]: JSON.stringify(\n                  access.grant,\n                ),\n              }\n            : {}),\n        },\n      },\n    ]),\n  );\n}\n\n// Intentional local exception: HTTP request parsing runs before AG-UI's event\n// compatibility boundary. Mirror its historically accepted optional-null rules\n// and its legacy binary-part upgrade here, without depending on a new public\n// AG-UI helper (AG-UI does not export one). Keep these aligned\n// with client/src/middleware/compatibility-boundary.ts and AG-UI's migration guide.\n// Required nulls and nulls within application data must remain untouched.\nfunction warnCompatibility(what: string, replacement: string) {\n  if (\n    typeof process !== \"undefined\" &&\n    typeof process.env !== \"undefined\" &&\n    process.env.SUPPRESS_TRANSFORMATION_WARNINGS\n  )\n    return;\n  console.warn(\n    `[ag-ui][compat] Converting deprecated ${what} to ${replacement}. The old shape leaves the protocol after its shim window — see the repo-root DEPRECATIONS.md. Set SUPPRESS_TRANSFORMATION_WARNINGS=true to silence.`,\n  );\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction omitLegacyNull(\n  value: unknown,\n  field: string,\n  context: string,\n): unknown {\n  if (!isRecord(value) || value[field] !== null) return value;\n  warnCompatibility(`${context}.${field}: null`, \"an absent field\");\n  const { [field]: _null, ...rest } = value;\n  return rest;\n}\n\nfunction mapProtocolArray(\n  value: unknown,\n  field: string,\n  normalize: (entry: unknown) => unknown,\n): unknown {\n  if (!isRecord(value) || !Array.isArray(value[field])) return value;\n  const original = value[field];\n  const entries = original.map(normalize);\n  return entries.some((entry, index) => entry !== original[index])\n    ? { ...value, [field]: entries }\n    : value;\n}\n\nfunction mediaTypeFor(\n  mimeType: string,\n): \"image\" | \"audio\" | \"video\" | \"document\" {\n  if (mimeType.startsWith(\"image/\")) return \"image\";\n  if (mimeType.startsWith(\"audio/\")) return \"audio\";\n  if (mimeType.startsWith(\"video/\")) return \"video\";\n  return \"document\";\n}\n\nfunction sameSource(part: unknown, converted: Record<string, unknown>) {\n  if (!isRecord(part) || part.type !== converted.type) return false;\n  const a = part.source;\n  const b = converted.source as Record<string, unknown>;\n  return (\n    isRecord(a) &&\n    a.type === b.type &&\n    a.value === b.value &&\n    a.mimeType === b.mimeType\n  );\n}\n\n/**\n * The 0.x `{ type: \"binary\" }` part, which 1.0 retired and main accepted.\n * Mirrors AG-UI's outgoing upgrade (client/src/middleware/legacy-content.ts):\n * data or url becomes the media part its mime type names, and a binary part\n * that only mirrors a modern part already in the message is dropped. A part\n * with only an `id` has no 1.0 form; it is dropped with a warning instead of\n * failing the whole request, which is what BuiltInAgent already did with it.\n */\nfunction upgradeLegacyBinaryParts(content: unknown[]): unknown[] {\n  return content.flatMap((part) => {\n    if (\n      !isRecord(part) ||\n      part.type !== \"binary\" ||\n      typeof part.mimeType !== \"string\"\n    )\n      return [part];\n    const kind =\n      typeof part.data === \"string\"\n        ? \"data\"\n        : typeof part.url === \"string\"\n          ? \"url\"\n          : null;\n    if (kind === null) {\n      console.warn(\n        \"[CopilotKit] Dropping a legacy binary content part that has no data or url; AG-UI 1.0 has no equivalent for it.\",\n      );\n      return [];\n    }\n    warnCompatibility(\"binary input content\", \"the modern media content part\");\n    const converted: Record<string, unknown> = {\n      type: mediaTypeFor(part.mimeType),\n      source: {\n        type: kind,\n        value: kind === \"data\" ? part.data : part.url,\n        mimeType: part.mimeType,\n      },\n      ...(typeof part.filename === \"string\"\n        ? { metadata: { filename: part.filename } }\n        : {}),\n    };\n    return content.some((other) => sameSource(other, converted))\n      ? []\n      : [converted];\n  });\n}\n\nfunction normalizeLegacyMessageContent(message: unknown): unknown {\n  const upgraded =\n    isRecord(message) &&\n    Array.isArray(message.content) &&\n    message.content.some((part) => isRecord(part) && part.type === \"binary\")\n      ? {\n          ...message,\n          content: upgradeLegacyBinaryParts(message.content),\n        }\n      : message;\n  return mapProtocolArray(upgraded, \"content\", (part) => {\n    if (!isRecord(part)) return part;\n    switch (part.type) {\n      case \"image\":\n      case \"audio\":\n      case \"video\":\n      case \"document\":\n        return omitLegacyNull(part, \"metadata\", `${part.type} input content`);\n      default:\n        return part;\n    }\n  });\n}\n\nfunction normalizeLegacyRunAgentInput(input: unknown): unknown {\n  let normalized = omitLegacyNull(input, \"forwardedProps\", \"RunAgentInput\");\n  normalized = mapProtocolArray(normalized, \"tools\", (tool) =>\n    omitLegacyNull(tool, \"parameters\", \"Tool\"),\n  );\n  normalized = mapProtocolArray(normalized, \"resume\", (entry) =>\n    omitLegacyNull(entry, \"payload\", \"ResumeEntry\"),\n  );\n  return mapProtocolArray(\n    normalized,\n    \"messages\",\n    normalizeLegacyMessageContent,\n  );\n}\n\nfunction parseRunAgentInput(value: unknown): RunAgentInput {\n  // With strictNullChecks disabled, Zod infers some required nested fields\n  // (such as image.source) as optional. The schema still validates them.\n  return RunAgentInputSchema.parse(\n    normalizeLegacyRunAgentInput(value),\n  ) as RunAgentInput;\n}\n\nexport async function parseRunRequest(\n  request: Request,\n): Promise<RunAgentInput | Response> {\n  try {\n    const requestBody = await request.json();\n    return parseRunAgentInput(requestBody);\n  } catch (error) {\n    logger.error(\"Invalid run request body:\", error);\n    return new Response(\n      JSON.stringify({\n        error: \"Invalid request body\",\n        details: error instanceof Error ? error.message : String(error),\n      }),\n      {\n        status: 400,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n\nexport async function parseConnectRequest(request: Request): Promise<\n  | Response\n  | {\n      input: RunAgentInput;\n      lastSeenEventId: string | null;\n    }\n> {\n  try {\n    const requestBody = await request.json();\n    const input = parseRunAgentInput(requestBody);\n    let lastSeenEventId: string | null = null;\n\n    if (\n      \"lastSeenEventId\" in (requestBody as Record<string, unknown>) &&\n      (typeof (requestBody as Record<string, unknown>).lastSeenEventId ===\n        \"string\" ||\n        (requestBody as Record<string, unknown>).lastSeenEventId === null)\n    ) {\n      lastSeenEventId =\n        (requestBody as ConnectRequestBody).lastSeenEventId ?? null;\n    }\n\n    return { input, lastSeenEventId };\n  } catch (error) {\n    logger.error(\"Invalid connect request body:\", error);\n    return new Response(\n      JSON.stringify({\n        error: \"Invalid request body\",\n        details: error instanceof Error ? error.message : String(error),\n      }),\n      {\n        status: 400,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,eAAsB,qBACpB,SACA,SACA,SACmC;CACnC,MAAM,SAAS,MAAMA,gCAAc,QAAQ,QAAQ,QAAQ;AAE3D,KAAI,CAAC,OAAO,SACV,QAAO,IAAI,SACT,KAAK,UAAU;EACb,OAAO;EACP,SAAS,UAAU,QAAQ;EAC5B,CAAC,EACF;EACE,QAAQ;EACR,SAAS,EAAE,gBAAgB,oBAAoB;EAChD,CACF;AAGH,QAAQ,OAAO,SAA2B,OAAO;;AAGnD,SAAgB,yBAAyB,QAchC;CACP,MAAM,EACJ,SACA,SACA,SACA,wBACA,sBACE;CACJ,MAAM,QAAQ,OAAO;CAKrB,MAAM,uBACJ,CAAC,CAAC,0BAA0B,QAAQ,MAAM,YAAY;AAExD,KAAIC,gCAAc,QAAQ,KAAK,IAAI,sBAAsB;EAGvD,MAAM,EACJ,QAAQ,cACR,SAAS,UACT,gBACA,GAAG,gBACD,QAAQ,QAAQ,EAAE;AAEtB,OADoB,CAAC,gBAAgB,aAAa,SAAS,QAAQ,KAChD,OAAO,MAAM,QAAQ,WACtC,OAAM,IACJ,IAAIC,mDAAe;GACjB,GAAG;GAIH,gBACE,mBAAmB,yBAAyB,OAAO;GACtD,CAAC,CACH;;AAIL,KAAIC,wCAAsB,QAAQ,IAAI,OAAO,MAAM,QAAQ,YAAY;EAGrE,MAAM,aAAaC,+CACjB,QAAQ,SAAS,WAAW,EAAE,EAC9B,QACD;AACD,MAAI,WAAW,SAAS,KAAK,kBAC3B,OAAM,IACJ,IAAIC,6CAAkB;GAAE;GAAY,sBAAsB;GAAS,CAAC,CACrE;YAEM,QAAQ,SAAS,SAAS,QAAQ;EAC3C,MAAM,aAAaD,+CAAsB,QAAQ,QAAQ,SAAS,QAAQ;AAE1E,MAAI,WAAW,SAAS,KAAK,OAAO,MAAM,QAAQ,WAChD,OAAM,IAAI,IAAIC,6CAAkB,EAAE,YAAY,CAAC,CAAC;;AAIpD,KAAI,QAAQ,kBAAkB;EAC5B,MAAM,SAAS,QAAQ;EACvB,MAAM,eAAe,OAAO,WAAW,WAAW,OAAO,SAAS;AAElE,OADoB,CAAC,gBAAgB,aAAa,SAAS,QAAQ,KAChD,OAAO,MAAM,QAAQ,WACtC,OAAM,IAAI,IAAIC,gEAA4B,CAAC;;AAY/C,OAAM,UAAUC,6CACd,MAAM,SACN,SAMA,QAAQ,wBAAwBC,iDAA4B,OAAU,CACvE;;;;;;AAOH,MAAM,wBACJ;;;;;;;;;;;;;;;;;;;;;AAwBF,eAAsB,qCAAqC,QAI9B;CAC3B,MAAM,EAAE,SAAS,YAAY;CAC7B,MAAM,QAAQ,OAAO;AAErB,KAAI,CAACL,wCAAsB,QAAQ,CAAE;CAErC,MAAM,kBACJ,QAAQ,cAAc,gCAAgC,KAAK;AAC7D,KAAI,QAAQ,WAAW,UAAa,CAAC,gBAAiB;AAMtD,KAAI,QAAQ,WAAW,UAAa,OAAO,MAAM,QAAQ,YAAY;AACnE,4BAAO,KAAK,sBAAsB;AAClC;;CAGF,MAAM,aAAa,MAAMM,0DAAwB;EAAE;EAAS;EAAS,CAAC;AACtE,KAAI,sBAAsB,SAAU,QAAO;CAC3C,MAAM,SAAS,MAAMC,uCAAiB,SAAS,SAAS,YAAY,QAAQ;AAC5E,KAAI,kBAAkB,SAAU,QAAO;CAEvC,MAAM,gBACJ,QAAQ,WAAW,UAAaC,wCAAkB,OAAO,MAAM;AAcjE,KAAI,CAAC,iBAAiB,CAAC,gBAAiB;AAKxC,KAAI,OAAO,MAAM,QAAQ,YAAY;AACnC,MAAI,cACF,QAAOC,oCACL,oEACA,IACD;AAEH,4BAAO,KAAK,sBAAsB;AAClC;;AAGF,OAAM,IACJ,IAAIC,oCAAc,CAChB;EACE,MAAM;EACN,KAAK,GAAG,QAAQ,aAAa,YAAY,CAAC;EAC1C,UAAU;EACV,SAAS;GACP,eAAe,UAAU,QAAQ,aAAa,YAAY;IACzDC,6CAA8B,WAAW;GAC1C,GAAI,QAAQ,SACR,GACGC,kDAAmC,KAAK,UACvC,OAAO,MACR,EACF,GACD,EAAE;GACP;EACF,CACF,CAAC,CACH;;AASH,SAAS,kBAAkB,MAAc,aAAqB;AAC5D,KACE,OAAO,YAAY,eACnB,OAAO,QAAQ,QAAQ,eACvB,QAAQ,IAAI,iCAEZ;AACF,SAAQ,KACN,yCAAyC,KAAK,MAAM,YAAY,sJACjE;;AAGH,SAAS,SAAS,OAAkD;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG7E,SAAS,eACP,OACA,OACA,SACS;AACT,KAAI,CAAC,SAAS,MAAM,IAAI,MAAM,WAAW,KAAM,QAAO;AACtD,mBAAkB,GAAG,QAAQ,GAAG,MAAM,SAAS,kBAAkB;CACjE,MAAM,GAAG,QAAQ,OAAO,GAAG,SAAS;AACpC,QAAO;;AAGT,SAAS,iBACP,OACA,OACA,WACS;AACT,KAAI,CAAC,SAAS,MAAM,IAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,CAAE,QAAO;CAC7D,MAAM,WAAW,MAAM;CACvB,MAAM,UAAU,SAAS,IAAI,UAAU;AACvC,QAAO,QAAQ,MAAM,OAAO,UAAU,UAAU,SAAS,OAAO,GAC5D;EAAE,GAAG;GAAQ,QAAQ;EAAS,GAC9B;;AAGN,SAAS,aACP,UAC0C;AAC1C,KAAI,SAAS,WAAW,SAAS,CAAE,QAAO;AAC1C,KAAI,SAAS,WAAW,SAAS,CAAE,QAAO;AAC1C,KAAI,SAAS,WAAW,SAAS,CAAE,QAAO;AAC1C,QAAO;;AAGT,SAAS,WAAW,MAAe,WAAoC;AACrE,KAAI,CAAC,SAAS,KAAK,IAAI,KAAK,SAAS,UAAU,KAAM,QAAO;CAC5D,MAAM,IAAI,KAAK;CACf,MAAM,IAAI,UAAU;AACpB,QACE,SAAS,EAAE,IACX,EAAE,SAAS,EAAE,QACb,EAAE,UAAU,EAAE,SACd,EAAE,aAAa,EAAE;;;;;;;;;;AAYrB,SAAS,yBAAyB,SAA+B;AAC/D,QAAO,QAAQ,SAAS,SAAS;AAC/B,MACE,CAAC,SAAS,KAAK,IACf,KAAK,SAAS,YACd,OAAO,KAAK,aAAa,SAEzB,QAAO,CAAC,KAAK;EACf,MAAM,OACJ,OAAO,KAAK,SAAS,WACjB,SACA,OAAO,KAAK,QAAQ,WAClB,QACA;AACR,MAAI,SAAS,MAAM;AACjB,WAAQ,KACN,kHACD;AACD,UAAO,EAAE;;AAEX,oBAAkB,wBAAwB,gCAAgC;EAC1E,MAAM,YAAqC;GACzC,MAAM,aAAa,KAAK,SAAS;GACjC,QAAQ;IACN,MAAM;IACN,OAAO,SAAS,SAAS,KAAK,OAAO,KAAK;IAC1C,UAAU,KAAK;IAChB;GACD,GAAI,OAAO,KAAK,aAAa,WACzB,EAAE,UAAU,EAAE,UAAU,KAAK,UAAU,EAAE,GACzC,EAAE;GACP;AACD,SAAO,QAAQ,MAAM,UAAU,WAAW,OAAO,UAAU,CAAC,GACxD,EAAE,GACF,CAAC,UAAU;GACf;;AAGJ,SAAS,8BAA8B,SAA2B;AAUhE,QAAO,iBARL,SAAS,QAAQ,IACjB,MAAM,QAAQ,QAAQ,QAAQ,IAC9B,QAAQ,QAAQ,MAAM,SAAS,SAAS,KAAK,IAAI,KAAK,SAAS,SAAS,GACpE;EACE,GAAG;EACH,SAAS,yBAAyB,QAAQ,QAAQ;EACnD,GACD,SAC4B,YAAY,SAAS;AACrD,MAAI,CAAC,SAAS,KAAK,CAAE,QAAO;AAC5B,UAAQ,KAAK,MAAb;GACE,KAAK;GACL,KAAK;GACL,KAAK;GACL,KAAK,WACH,QAAO,eAAe,MAAM,YAAY,GAAG,KAAK,KAAK,gBAAgB;GACvE,QACE,QAAO;;GAEX;;AAGJ,SAAS,6BAA6B,OAAyB;CAC7D,IAAI,aAAa,eAAe,OAAO,kBAAkB,gBAAgB;AACzE,cAAa,iBAAiB,YAAY,UAAU,SAClD,eAAe,MAAM,cAAc,OAAO,CAC3C;AACD,cAAa,iBAAiB,YAAY,WAAW,UACnD,eAAe,OAAO,WAAW,cAAc,CAChD;AACD,QAAO,iBACL,YACA,YACA,8BACD;;AAGH,SAAS,mBAAmB,OAA+B;AAGzD,QAAOC,wCAAoB,MACzB,6BAA6B,MAAM,CACpC;;AAGH,eAAsB,gBACpB,SACmC;AACnC,KAAI;AAEF,SAAO,mBADa,MAAM,QAAQ,MAAM,CACF;UAC/B,OAAO;AACd,4BAAO,MAAM,6BAA6B,MAAM;AAChD,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAChE,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF;;;AAIL,eAAsB,oBAAoB,SAMxC;AACA,KAAI;EACF,MAAM,cAAc,MAAM,QAAQ,MAAM;EACxC,MAAM,QAAQ,mBAAmB,YAAY;EAC7C,IAAI,kBAAiC;AAErC,MACE,qBAAsB,gBACrB,OAAQ,YAAwC,oBAC/C,YACC,YAAwC,oBAAoB,MAE/D,mBACG,YAAmC,mBAAmB;AAG3D,SAAO;GAAE;GAAO;GAAiB;UAC1B,OAAO;AACd,4BAAO,MAAM,iCAAiC,MAAM;AACpD,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAChE,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF"}

package/dist/v2/runtime/handlers/shared/agent-utils.mjs

@@ -7,8 +7,8 @@ import { errorResponse } from "./json-response.mjs";
 import { resolveIntelligenceUser } from "./resolve-intelligence-user.mjs";
 import { grantAllowsMemory, resolveWebMemory } from "./memory-policy.mjs";
 import { logger } from "@copilotkit/shared";
-import { RunAgentInputSchema } from "@ag-ui/client";
 import { MCPMiddleware } from "@ag-ui/mcp-middleware";
+import { RunAgentInputSchema } from "@ag-ui/core/schemas";
 import { A2UIMiddleware, OpenGenerativeUIMiddleware } from "@copilotkit/shared/event-transforms";
 import { MCPAppsMiddleware } from "@ag-ui/mcp-apps-middleware";
 
@@ -128,10 +128,96 @@ async function attachIntelligenceEnterpriseLearning(params) {
 		}
 	}]));
 }
+function warnCompatibility(what, replacement) {
+	if (typeof process !== "undefined" && typeof process.env !== "undefined" && process.env.SUPPRESS_TRANSFORMATION_WARNINGS) return;
+	console.warn(`[ag-ui][compat] Converting deprecated ${what} to ${replacement}. The old shape leaves the protocol after its shim window — see the repo-root DEPRECATIONS.md. Set SUPPRESS_TRANSFORMATION_WARNINGS=true to silence.`);
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function omitLegacyNull(value, field, context) {
+	if (!isRecord(value) || value[field] !== null) return value;
+	warnCompatibility(`${context}.${field}: null`, "an absent field");
+	const { [field]: _null, ...rest } = value;
+	return rest;
+}
+function mapProtocolArray(value, field, normalize) {
+	if (!isRecord(value) || !Array.isArray(value[field])) return value;
+	const original = value[field];
+	const entries = original.map(normalize);
+	return entries.some((entry, index) => entry !== original[index]) ? {
+		...value,
+		[field]: entries
+	} : value;
+}
+function mediaTypeFor(mimeType) {
+	if (mimeType.startsWith("image/")) return "image";
+	if (mimeType.startsWith("audio/")) return "audio";
+	if (mimeType.startsWith("video/")) return "video";
+	return "document";
+}
+function sameSource(part, converted) {
+	if (!isRecord(part) || part.type !== converted.type) return false;
+	const a = part.source;
+	const b = converted.source;
+	return isRecord(a) && a.type === b.type && a.value === b.value && a.mimeType === b.mimeType;
+}
+/**
+* The 0.x `{ type: "binary" }` part, which 1.0 retired and main accepted.
+* Mirrors AG-UI's outgoing upgrade (client/src/middleware/legacy-content.ts):
+* data or url becomes the media part its mime type names, and a binary part
+* that only mirrors a modern part already in the message is dropped. A part
+* with only an `id` has no 1.0 form; it is dropped with a warning instead of
+* failing the whole request, which is what BuiltInAgent already did with it.
+*/
+function upgradeLegacyBinaryParts(content) {
+	return content.flatMap((part) => {
+		if (!isRecord(part) || part.type !== "binary" || typeof part.mimeType !== "string") return [part];
+		const kind = typeof part.data === "string" ? "data" : typeof part.url === "string" ? "url" : null;
+		if (kind === null) {
+			console.warn("[CopilotKit] Dropping a legacy binary content part that has no data or url; AG-UI 1.0 has no equivalent for it.");
+			return [];
+		}
+		warnCompatibility("binary input content", "the modern media content part");
+		const converted = {
+			type: mediaTypeFor(part.mimeType),
+			source: {
+				type: kind,
+				value: kind === "data" ? part.data : part.url,
+				mimeType: part.mimeType
+			},
+			...typeof part.filename === "string" ? { metadata: { filename: part.filename } } : {}
+		};
+		return content.some((other) => sameSource(other, converted)) ? [] : [converted];
+	});
+}
+function normalizeLegacyMessageContent(message) {
+	return mapProtocolArray(isRecord(message) && Array.isArray(message.content) && message.content.some((part) => isRecord(part) && part.type === "binary") ? {
+		...message,
+		content: upgradeLegacyBinaryParts(message.content)
+	} : message, "content", (part) => {
+		if (!isRecord(part)) return part;
+		switch (part.type) {
+			case "image":
+			case "audio":
+			case "video":
+			case "document": return omitLegacyNull(part, "metadata", `${part.type} input content`);
+			default: return part;
+		}
+	});
+}
+function normalizeLegacyRunAgentInput(input) {
+	let normalized = omitLegacyNull(input, "forwardedProps", "RunAgentInput");
+	normalized = mapProtocolArray(normalized, "tools", (tool) => omitLegacyNull(tool, "parameters", "Tool"));
+	normalized = mapProtocolArray(normalized, "resume", (entry) => omitLegacyNull(entry, "payload", "ResumeEntry"));
+	return mapProtocolArray(normalized, "messages", normalizeLegacyMessageContent);
+}
+function parseRunAgentInput(value) {
+	return RunAgentInputSchema.parse(normalizeLegacyRunAgentInput(value));
+}
 async function parseRunRequest(request) {
 	try {
-		const requestBody = await request.json();
-		return RunAgentInputSchema.parse(requestBody);
+		return parseRunAgentInput(await request.json());
 	} catch (error) {
 		logger.error("Invalid run request body:", error);
 		return new Response(JSON.stringify({
@@ -146,7 +232,7 @@ async function parseRunRequest(request) {
 async function parseConnectRequest(request) {
 	try {
 		const requestBody = await request.json();
-		const input = RunAgentInputSchema.parse(requestBody);
+		const input = parseRunAgentInput(requestBody);
 		let lastSeenEventId = null;
 		if ("lastSeenEventId" in requestBody && (typeof requestBody.lastSeenEventId === "string" || requestBody.lastSeenEventId === null)) lastSeenEventId = requestBody.lastSeenEventId ?? null;
 		return {

package/dist/v2/runtime/handlers/shared/agent-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"agent-utils.mjs","names":[],"sources":["../../../../../src/v2/runtime/handlers/shared/agent-utils.ts"],"sourcesContent":["import type { AbstractAgent, RunAgentInput } from \"@ag-ui/client\";\nimport { RunAgentInputSchema } from \"@ag-ui/client\";\nimport {\n  A2UIMiddleware,\n  OpenGenerativeUIMiddleware,\n} from \"@copilotkit/shared/event-transforms\";\nimport { MCPAppsMiddleware } from \"@ag-ui/mcp-apps-middleware\";\nimport { MCPMiddleware } from \"@ag-ui/mcp-middleware\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport {\n  isA2UIEnabled,\n  isIntelligenceRuntime,\n  resolveAgents,\n} from \"../../core/runtime\";\nimport {\n  INTELLIGENCE_MEMORY_GRANT_HEADER,\n  INTELLIGENCE_USER_ID_HEADER,\n} from \"../../intelligence-platform/client\";\nimport {\n  mergeForwardableHeaders,\n  resolveForwardHeadersPolicy,\n} from \"../header-utils\";\nimport { resolveMcpAppsServers } from \"./mcp-apps-servers\";\nimport { resolveIntelligenceUser } from \"./resolve-intelligence-user\";\nimport { grantAllowsMemory, resolveWebMemory } from \"./memory-policy\";\nimport { errorResponse } from \"./json-response\";\nimport { logger } from \"@copilotkit/shared\";\n\ntype MiddlewareCapableAgent = AbstractAgent & {\n  use?: (middleware: unknown) => void;\n  headers?: Record<string, string>;\n};\n\nexport interface RunAgentParameters {\n  request: Request;\n  runtime: CopilotRuntimeLike;\n  agentId: string;\n}\n\nexport interface ConnectRequestBody extends RunAgentInput {\n  lastSeenEventId?: string | null;\n}\n\n/**\n * Resolve `agentId` against the runtime's agents and return a per-request\n * clone of the matching agent.\n *\n * Dual return contract — both callers (`handle-run.ts`, `handle-connect.ts`)\n * depend on it:\n * - Returns a cloned `AbstractAgent` when the agent exists.\n * - Returns a 404 `Response` (`{ error: \"Agent not found\", ... }`) when the\n *   agent is unknown. Callers MUST `instanceof Response`-check the result and\n *   return it directly; this doubles as the connect/run path's agent-existence\n *   guard, so skipping the check would let unknown agent ids slip through.\n *\n * The clone is what subsequent per-request mutation (middleware attach,\n * `agent.headers` merge) operates on, leaving the shared agent registration\n * untouched.\n */\nexport async function cloneAgentForRequest(\n  runtime: CopilotRuntimeLike,\n  agentId: string,\n  request?: Request,\n): Promise<AbstractAgent | Response> {\n  const agents = await resolveAgents(runtime.agents, request);\n\n  if (!agents[agentId]) {\n    return new Response(\n      JSON.stringify({\n        error: \"Agent not found\",\n        message: `Agent '${agentId}' does not exist`,\n      }),\n      {\n        status: 404,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n\n  return (agents[agentId] as AbstractAgent).clone() as AbstractAgent;\n}\n\nexport function configureAgentForRequest(params: {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agentId: string;\n  agent: AbstractAgent;\n  /**\n   * True when the React provider was given an A2UI catalog\n   * (`<CopilotKit a2ui={{ catalog }}>`), forwarded per-run. A catalog alone is\n   * enough to enable A2UI and inject the render tool — the developer no longer\n   * has to also set `a2ui.injectA2UITool` on the runtime.\n   */\n  providerA2UIHasCatalog?: boolean;\n  /** Retain proxy rejection even when no server is available to this agent. */\n  isMcpProxyRequest?: boolean;\n}): void {\n  const {\n    runtime,\n    request,\n    agentId,\n    providerA2UIHasCatalog,\n    isMcpProxyRequest,\n  } = params;\n  const agent = params.agent as MiddlewareCapableAgent;\n\n  // A2UI is on when the runtime explicitly enables it, OR when the provider\n  // forwarded a catalog — but an explicit `enabled: false` always wins (we\n  // provide a quick default, never override a deeper opt-out).\n  const a2uiEnabledByCatalog =\n    !!providerA2UIHasCatalog && runtime.a2ui?.enabled !== false;\n\n  if (isA2UIEnabled(runtime.a2ui) || a2uiEnabledByCatalog) {\n    // `enabled` is a CopilotKit-level switch, not an A2UIMiddleware option —\n    // drop it (alongside the agent filter) before forwarding to the middleware.\n    const {\n      agents: targetAgents,\n      enabled: _enabled,\n      injectA2UITool,\n      ...a2uiOptions\n    } = runtime.a2ui ?? {};\n    const shouldApply = !targetAgents || targetAgents.includes(agentId);\n    if (shouldApply && typeof agent.use === \"function\") {\n      agent.use(\n        new A2UIMiddleware({\n          ...a2uiOptions,\n          // Default render-tool injection on when a catalog is present and the\n          // developer hasn't set it explicitly. `??` means an explicit value\n          // (including `false`) is always respected.\n          injectA2UITool:\n            injectA2UITool ?? (providerA2UIHasCatalog ? true : undefined),\n        }),\n      );\n    }\n  }\n\n  if (isIntelligenceRuntime(runtime) && typeof agent.use === \"function\") {\n    // Ordinary runs need no middleware without selected servers. Proxy requests\n    // still need the upstream guard so they cannot fall through to the model.\n    const mcpServers = resolveMcpAppsServers(\n      runtime.mcpApps?.servers ?? [],\n      agentId,\n    );\n    if (mcpServers.length > 0 || isMcpProxyRequest) {\n      agent.use(\n        new MCPAppsMiddleware({ mcpServers, discoveryFailureMode: \"throw\" }),\n      );\n    }\n  } else if (runtime.mcpApps?.servers?.length) {\n    const mcpServers = resolveMcpAppsServers(runtime.mcpApps.servers, agentId);\n\n    if (mcpServers.length > 0 && typeof agent.use === \"function\") {\n      agent.use(new MCPAppsMiddleware({ mcpServers }));\n    }\n  }\n\n  if (runtime.openGenerativeUI) {\n    const config = runtime.openGenerativeUI;\n    const targetAgents = typeof config === \"object\" ? config.agents : undefined;\n    const shouldApply = !targetAgents || targetAgents.includes(agentId);\n    if (shouldApply && typeof agent.use === \"function\") {\n      agent.use(new OpenGenerativeUIMiddleware());\n    }\n  }\n\n  // Forward eligible inbound headers onto the outgoing agent call under the\n  // runtime's resolved forwarding policy (`authorization` / custom `x-*`, with\n  // known infra/proxy/platform headers stripped by the default denylist —\n  // #5712), but let headers the server explicitly configured on the agent WIN\n  // on collision (case-insensitively): a server-set service-to-service token\n  // (e.g. an IAM bearer) must never be silently overridden by a\n  // browser/edge/platform-injected inbound header. See `mergeForwardableHeaders`\n  // for the casing/duplicate-key rationale and `shouldForwardHeader` for breadth.\n  agent.headers = mergeForwardableHeaders(\n    agent.headers,\n    request,\n    // `forwardHeadersPolicy` is optional on the published `CopilotRuntimeLike`\n    // interface (non-breaking minor release). Concrete runtimes always set it;\n    // a policy-less external implementor falls back to the default resolved\n    // policy (default-on denylist) so behavior stays identical and never derefs\n    // undefined.\n    runtime.forwardHeadersPolicy ?? resolveForwardHeadersPolicy(undefined),\n  );\n}\n\n/**\n * Shared by the two places a run meets a middleware-less agent: before Memory\n * is resolved (nothing left to resolve) and after (Memory resolved to nothing).\n */\nconst NO_MIDDLEWARE_WARNING =\n  \"CopilotKitIntelligence.enableEnterpriseLearning is enabled, but the agent \" +\n  \"does not support middleware (no `.use()` method); Intelligence tools were \" +\n  \"not attached for this run.\";\n\n/**\n * Attach CopilotKit Intelligence's MCP tools to the agent run when\n * `CopilotKitIntelligence` was constructed with\n * `enableEnterpriseLearning: true`. Uses `@ag-ui/mcp-middleware`, so the\n * tools are available uniformly across agent frameworks (not just\n * `BuiltInAgent`).\n *\n * The middleware sits on a per-request agent clone, so the per-request\n * auth (Bearer apiKey + resolved user-id) is baked into the transport\n * headers at attach time. If user resolution fails, attachment is\n * skipped silently — the intelligence run handler will reject the\n * request with the same error. Note this means `identifyUser` is\n * resolved twice per learning-enabled run (here and in the run handler);\n * the callback is expected to be idempotent and side-effect-free.\n *\n * Intentionally split out from `configureAgentForRequest`: this is only\n * relevant to actual agent runs, not auxiliary flows like thread-name\n * generation (which has no need for MCP tools and shouldn't pay the\n * `listTools` round-trip).\n */\nexport async function attachIntelligenceEnterpriseLearning(params: {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agent: AbstractAgent;\n}): Promise<void | Response> {\n  const { runtime, request } = params;\n  const agent = params.agent as MiddlewareCapableAgent;\n\n  if (!isIntelligenceRuntime(runtime)) return;\n\n  const learningEnabled =\n    runtime.intelligence?.ɵisEnterpriseLearningEnabled?.() === true;\n  if (runtime.memory === undefined && !learningEnabled) return;\n\n  // Nothing here is resolvable for an agent whose framework can't take\n  // middleware and whose runtime configures no Memory — bail before paying for\n  // `identifyUser`, so an enterprise-learning-only run keeps warning rather\n  // than acquiring a new way to fail.\n  if (runtime.memory === undefined && typeof agent.use !== \"function\") {\n    logger.warn(NO_MIDDLEWARE_WARNING);\n    return;\n  }\n\n  const userResult = await resolveIntelligenceUser({ runtime, request });\n  if (userResult instanceof Response) return userResult;\n  const access = await resolveWebMemory(runtime, request, userResult, \"agent\");\n  if (access instanceof Response) return access;\n\n  const memoryGranted =\n    runtime.memory !== undefined && grantAllowsMemory(access.grant);\n\n  // A policy that grants no scope means this run gets no Memory — it does NOT\n  // mean the run is refused. Attach nothing and let the conversation proceed,\n  // exactly as a Channel does when its grant asks for nothing\n  // (`hasMemoryAccess` in @copilotkit/channels-core). Returning a 403 here\n  // instead fails the whole run, so switching Memory off for one tenant would\n  // leave that tenant with no assistant, and the only signal is a run error the\n  // chat surface has no reason to render.\n  //\n  // Enterprise learning rides the SAME MCP server, so \"no Memory\" must not cost\n  // an operator the learning tools too. When it is on, attach anyway and let\n  // Intelligence filter: it registers one Memory tool per granted scope and\n  // none at all for an all-none grant, leaving the learning tools untouched.\n  if (!memoryGranted && !learningEnabled) return;\n\n  // Whatever is left to attach needs middleware. Failing the run is right only\n  // when Memory was actually granted and cannot be delivered; a run that merely\n  // wanted learning tools warns and proceeds, as it always has.\n  if (typeof agent.use !== \"function\") {\n    if (memoryGranted) {\n      return errorResponse(\n        \"Memory is configured, but this agent does not support middleware\",\n        500,\n      );\n    }\n    logger.warn(NO_MIDDLEWARE_WARNING);\n    return;\n  }\n\n  agent.use(\n    new MCPMiddleware([\n      {\n        type: \"http\",\n        url: `${runtime.intelligence.ɵgetApiUrl()}/mcp`,\n        serverId: \"intelligence\",\n        headers: {\n          Authorization: `Bearer ${runtime.intelligence.ɵgetApiKey()}`,\n          [INTELLIGENCE_USER_ID_HEADER]: userResult.id,\n          ...(runtime.memory\n            ? {\n                [INTELLIGENCE_MEMORY_GRANT_HEADER]: JSON.stringify(\n                  access.grant,\n                ),\n              }\n            : {}),\n        },\n      },\n    ]),\n  );\n}\n\nexport async function parseRunRequest(\n  request: Request,\n): Promise<RunAgentInput | Response> {\n  try {\n    const requestBody = await request.json();\n    return RunAgentInputSchema.parse(requestBody);\n  } catch (error) {\n    logger.error(\"Invalid run request body:\", error);\n    return new Response(\n      JSON.stringify({\n        error: \"Invalid request body\",\n        details: error instanceof Error ? error.message : String(error),\n      }),\n      {\n        status: 400,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n\nexport async function parseConnectRequest(request: Request): Promise<\n  | Response\n  | {\n      input: RunAgentInput;\n      lastSeenEventId: string | null;\n    }\n> {\n  try {\n    const requestBody = await request.json();\n    const input = RunAgentInputSchema.parse(requestBody);\n    let lastSeenEventId: string | null = null;\n\n    if (\n      \"lastSeenEventId\" in (requestBody as Record<string, unknown>) &&\n      (typeof (requestBody as Record<string, unknown>).lastSeenEventId ===\n        \"string\" ||\n        (requestBody as Record<string, unknown>).lastSeenEventId === null)\n    ) {\n      lastSeenEventId =\n        (requestBody as ConnectRequestBody).lastSeenEventId ?? null;\n    }\n\n    return { input, lastSeenEventId };\n  } catch (error) {\n    logger.error(\"Invalid connect request body:\", error);\n    return new Response(\n      JSON.stringify({\n        error: \"Invalid request body\",\n        details: error instanceof Error ? error.message : String(error),\n      }),\n      {\n        status: 400,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,eAAsB,qBACpB,SACA,SACA,SACmC;CACnC,MAAM,SAAS,MAAM,cAAc,QAAQ,QAAQ,QAAQ;AAE3D,KAAI,CAAC,OAAO,SACV,QAAO,IAAI,SACT,KAAK,UAAU;EACb,OAAO;EACP,SAAS,UAAU,QAAQ;EAC5B,CAAC,EACF;EACE,QAAQ;EACR,SAAS,EAAE,gBAAgB,oBAAoB;EAChD,CACF;AAGH,QAAQ,OAAO,SAA2B,OAAO;;AAGnD,SAAgB,yBAAyB,QAchC;CACP,MAAM,EACJ,SACA,SACA,SACA,wBACA,sBACE;CACJ,MAAM,QAAQ,OAAO;CAKrB,MAAM,uBACJ,CAAC,CAAC,0BAA0B,QAAQ,MAAM,YAAY;AAExD,KAAI,cAAc,QAAQ,KAAK,IAAI,sBAAsB;EAGvD,MAAM,EACJ,QAAQ,cACR,SAAS,UACT,gBACA,GAAG,gBACD,QAAQ,QAAQ,EAAE;AAEtB,OADoB,CAAC,gBAAgB,aAAa,SAAS,QAAQ,KAChD,OAAO,MAAM,QAAQ,WACtC,OAAM,IACJ,IAAI,eAAe;GACjB,GAAG;GAIH,gBACE,mBAAmB,yBAAyB,OAAO;GACtD,CAAC,CACH;;AAIL,KAAI,sBAAsB,QAAQ,IAAI,OAAO,MAAM,QAAQ,YAAY;EAGrE,MAAM,aAAa,sBACjB,QAAQ,SAAS,WAAW,EAAE,EAC9B,QACD;AACD,MAAI,WAAW,SAAS,KAAK,kBAC3B,OAAM,IACJ,IAAI,kBAAkB;GAAE;GAAY,sBAAsB;GAAS,CAAC,CACrE;YAEM,QAAQ,SAAS,SAAS,QAAQ;EAC3C,MAAM,aAAa,sBAAsB,QAAQ,QAAQ,SAAS,QAAQ;AAE1E,MAAI,WAAW,SAAS,KAAK,OAAO,MAAM,QAAQ,WAChD,OAAM,IAAI,IAAI,kBAAkB,EAAE,YAAY,CAAC,CAAC;;AAIpD,KAAI,QAAQ,kBAAkB;EAC5B,MAAM,SAAS,QAAQ;EACvB,MAAM,eAAe,OAAO,WAAW,WAAW,OAAO,SAAS;AAElE,OADoB,CAAC,gBAAgB,aAAa,SAAS,QAAQ,KAChD,OAAO,MAAM,QAAQ,WACtC,OAAM,IAAI,IAAI,4BAA4B,CAAC;;AAY/C,OAAM,UAAU,wBACd,MAAM,SACN,SAMA,QAAQ,wBAAwB,4BAA4B,OAAU,CACvE;;;;;;AAOH,MAAM,wBACJ;;;;;;;;;;;;;;;;;;;;;AAwBF,eAAsB,qCAAqC,QAI9B;CAC3B,MAAM,EAAE,SAAS,YAAY;CAC7B,MAAM,QAAQ,OAAO;AAErB,KAAI,CAAC,sBAAsB,QAAQ,CAAE;CAErC,MAAM,kBACJ,QAAQ,cAAc,gCAAgC,KAAK;AAC7D,KAAI,QAAQ,WAAW,UAAa,CAAC,gBAAiB;AAMtD,KAAI,QAAQ,WAAW,UAAa,OAAO,MAAM,QAAQ,YAAY;AACnE,SAAO,KAAK,sBAAsB;AAClC;;CAGF,MAAM,aAAa,MAAM,wBAAwB;EAAE;EAAS;EAAS,CAAC;AACtE,KAAI,sBAAsB,SAAU,QAAO;CAC3C,MAAM,SAAS,MAAM,iBAAiB,SAAS,SAAS,YAAY,QAAQ;AAC5E,KAAI,kBAAkB,SAAU,QAAO;CAEvC,MAAM,gBACJ,QAAQ,WAAW,UAAa,kBAAkB,OAAO,MAAM;AAcjE,KAAI,CAAC,iBAAiB,CAAC,gBAAiB;AAKxC,KAAI,OAAO,MAAM,QAAQ,YAAY;AACnC,MAAI,cACF,QAAO,cACL,oEACA,IACD;AAEH,SAAO,KAAK,sBAAsB;AAClC;;AAGF,OAAM,IACJ,IAAI,cAAc,CAChB;EACE,MAAM;EACN,KAAK,GAAG,QAAQ,aAAa,YAAY,CAAC;EAC1C,UAAU;EACV,SAAS;GACP,eAAe,UAAU,QAAQ,aAAa,YAAY;IACzD,8BAA8B,WAAW;GAC1C,GAAI,QAAQ,SACR,GACG,mCAAmC,KAAK,UACvC,OAAO,MACR,EACF,GACD,EAAE;GACP;EACF,CACF,CAAC,CACH;;AAGH,eAAsB,gBACpB,SACmC;AACnC,KAAI;EACF,MAAM,cAAc,MAAM,QAAQ,MAAM;AACxC,SAAO,oBAAoB,MAAM,YAAY;UACtC,OAAO;AACd,SAAO,MAAM,6BAA6B,MAAM;AAChD,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAChE,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF;;;AAIL,eAAsB,oBAAoB,SAMxC;AACA,KAAI;EACF,MAAM,cAAc,MAAM,QAAQ,MAAM;EACxC,MAAM,QAAQ,oBAAoB,MAAM,YAAY;EACpD,IAAI,kBAAiC;AAErC,MACE,qBAAsB,gBACrB,OAAQ,YAAwC,oBAC/C,YACC,YAAwC,oBAAoB,MAE/D,mBACG,YAAmC,mBAAmB;AAG3D,SAAO;GAAE;GAAO;GAAiB;UAC1B,OAAO;AACd,SAAO,MAAM,iCAAiC,MAAM;AACpD,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAChE,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF"}
+{"version":3,"file":"agent-utils.mjs","names":[],"sources":["../../../../../src/v2/runtime/handlers/shared/agent-utils.ts"],"sourcesContent":["import type { AbstractAgent, RunAgentInput } from \"@ag-ui/client\";\nimport { RunAgentInputSchema } from \"@ag-ui/core/schemas\";\nimport {\n  A2UIMiddleware,\n  OpenGenerativeUIMiddleware,\n} from \"@copilotkit/shared/event-transforms\";\nimport { MCPAppsMiddleware } from \"@ag-ui/mcp-apps-middleware\";\nimport { MCPMiddleware } from \"@ag-ui/mcp-middleware\";\nimport type { CopilotRuntimeLike } from \"../../core/runtime\";\nimport {\n  isA2UIEnabled,\n  isIntelligenceRuntime,\n  resolveAgents,\n} from \"../../core/runtime\";\nimport {\n  INTELLIGENCE_MEMORY_GRANT_HEADER,\n  INTELLIGENCE_USER_ID_HEADER,\n} from \"../../intelligence-platform/client\";\nimport {\n  mergeForwardableHeaders,\n  resolveForwardHeadersPolicy,\n} from \"../header-utils\";\nimport { resolveMcpAppsServers } from \"./mcp-apps-servers\";\nimport { resolveIntelligenceUser } from \"./resolve-intelligence-user\";\nimport { grantAllowsMemory, resolveWebMemory } from \"./memory-policy\";\nimport { errorResponse } from \"./json-response\";\nimport { logger } from \"@copilotkit/shared\";\n\ntype MiddlewareCapableAgent = AbstractAgent & {\n  use?: (middleware: unknown) => void;\n  headers?: Record<string, string>;\n};\n\nexport interface RunAgentParameters {\n  request: Request;\n  runtime: CopilotRuntimeLike;\n  agentId: string;\n}\n\nexport interface ConnectRequestBody extends RunAgentInput {\n  lastSeenEventId?: string | null;\n}\n\n/**\n * Resolve `agentId` against the runtime's agents and return a per-request\n * clone of the matching agent.\n *\n * Dual return contract — both callers (`handle-run.ts`, `handle-connect.ts`)\n * depend on it:\n * - Returns a cloned `AbstractAgent` when the agent exists.\n * - Returns a 404 `Response` (`{ error: \"Agent not found\", ... }`) when the\n *   agent is unknown. Callers MUST `instanceof Response`-check the result and\n *   return it directly; this doubles as the connect/run path's agent-existence\n *   guard, so skipping the check would let unknown agent ids slip through.\n *\n * The clone is what subsequent per-request mutation (middleware attach,\n * `agent.headers` merge) operates on, leaving the shared agent registration\n * untouched.\n */\nexport async function cloneAgentForRequest(\n  runtime: CopilotRuntimeLike,\n  agentId: string,\n  request?: Request,\n): Promise<AbstractAgent | Response> {\n  const agents = await resolveAgents(runtime.agents, request);\n\n  if (!agents[agentId]) {\n    return new Response(\n      JSON.stringify({\n        error: \"Agent not found\",\n        message: `Agent '${agentId}' does not exist`,\n      }),\n      {\n        status: 404,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n\n  return (agents[agentId] as AbstractAgent).clone() as AbstractAgent;\n}\n\nexport function configureAgentForRequest(params: {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agentId: string;\n  agent: AbstractAgent;\n  /**\n   * True when the React provider was given an A2UI catalog\n   * (`<CopilotKit a2ui={{ catalog }}>`), forwarded per-run. A catalog alone is\n   * enough to enable A2UI and inject the render tool — the developer no longer\n   * has to also set `a2ui.injectA2UITool` on the runtime.\n   */\n  providerA2UIHasCatalog?: boolean;\n  /** Retain proxy rejection even when no server is available to this agent. */\n  isMcpProxyRequest?: boolean;\n}): void {\n  const {\n    runtime,\n    request,\n    agentId,\n    providerA2UIHasCatalog,\n    isMcpProxyRequest,\n  } = params;\n  const agent = params.agent as MiddlewareCapableAgent;\n\n  // A2UI is on when the runtime explicitly enables it, OR when the provider\n  // forwarded a catalog — but an explicit `enabled: false` always wins (we\n  // provide a quick default, never override a deeper opt-out).\n  const a2uiEnabledByCatalog =\n    !!providerA2UIHasCatalog && runtime.a2ui?.enabled !== false;\n\n  if (isA2UIEnabled(runtime.a2ui) || a2uiEnabledByCatalog) {\n    // `enabled` is a CopilotKit-level switch, not an A2UIMiddleware option —\n    // drop it (alongside the agent filter) before forwarding to the middleware.\n    const {\n      agents: targetAgents,\n      enabled: _enabled,\n      injectA2UITool,\n      ...a2uiOptions\n    } = runtime.a2ui ?? {};\n    const shouldApply = !targetAgents || targetAgents.includes(agentId);\n    if (shouldApply && typeof agent.use === \"function\") {\n      agent.use(\n        new A2UIMiddleware({\n          ...a2uiOptions,\n          // Default render-tool injection on when a catalog is present and the\n          // developer hasn't set it explicitly. `??` means an explicit value\n          // (including `false`) is always respected.\n          injectA2UITool:\n            injectA2UITool ?? (providerA2UIHasCatalog ? true : undefined),\n        }),\n      );\n    }\n  }\n\n  if (isIntelligenceRuntime(runtime) && typeof agent.use === \"function\") {\n    // Ordinary runs need no middleware without selected servers. Proxy requests\n    // still need the upstream guard so they cannot fall through to the model.\n    const mcpServers = resolveMcpAppsServers(\n      runtime.mcpApps?.servers ?? [],\n      agentId,\n    );\n    if (mcpServers.length > 0 || isMcpProxyRequest) {\n      agent.use(\n        new MCPAppsMiddleware({ mcpServers, discoveryFailureMode: \"throw\" }),\n      );\n    }\n  } else if (runtime.mcpApps?.servers?.length) {\n    const mcpServers = resolveMcpAppsServers(runtime.mcpApps.servers, agentId);\n\n    if (mcpServers.length > 0 && typeof agent.use === \"function\") {\n      agent.use(new MCPAppsMiddleware({ mcpServers }));\n    }\n  }\n\n  if (runtime.openGenerativeUI) {\n    const config = runtime.openGenerativeUI;\n    const targetAgents = typeof config === \"object\" ? config.agents : undefined;\n    const shouldApply = !targetAgents || targetAgents.includes(agentId);\n    if (shouldApply && typeof agent.use === \"function\") {\n      agent.use(new OpenGenerativeUIMiddleware());\n    }\n  }\n\n  // Forward eligible inbound headers onto the outgoing agent call under the\n  // runtime's resolved forwarding policy (`authorization` / custom `x-*`, with\n  // known infra/proxy/platform headers stripped by the default denylist —\n  // #5712), but let headers the server explicitly configured on the agent WIN\n  // on collision (case-insensitively): a server-set service-to-service token\n  // (e.g. an IAM bearer) must never be silently overridden by a\n  // browser/edge/platform-injected inbound header. See `mergeForwardableHeaders`\n  // for the casing/duplicate-key rationale and `shouldForwardHeader` for breadth.\n  agent.headers = mergeForwardableHeaders(\n    agent.headers,\n    request,\n    // `forwardHeadersPolicy` is optional on the published `CopilotRuntimeLike`\n    // interface (non-breaking minor release). Concrete runtimes always set it;\n    // a policy-less external implementor falls back to the default resolved\n    // policy (default-on denylist) so behavior stays identical and never derefs\n    // undefined.\n    runtime.forwardHeadersPolicy ?? resolveForwardHeadersPolicy(undefined),\n  );\n}\n\n/**\n * Shared by the two places a run meets a middleware-less agent: before Memory\n * is resolved (nothing left to resolve) and after (Memory resolved to nothing).\n */\nconst NO_MIDDLEWARE_WARNING =\n  \"CopilotKitIntelligence.enableEnterpriseLearning is enabled, but the agent \" +\n  \"does not support middleware (no `.use()` method); Intelligence tools were \" +\n  \"not attached for this run.\";\n\n/**\n * Attach CopilotKit Intelligence's MCP tools to the agent run when\n * `CopilotKitIntelligence` was constructed with\n * `enableEnterpriseLearning: true`. Uses `@ag-ui/mcp-middleware`, so the\n * tools are available uniformly across agent frameworks (not just\n * `BuiltInAgent`).\n *\n * The middleware sits on a per-request agent clone, so the per-request\n * auth (Bearer apiKey + resolved user-id) is baked into the transport\n * headers at attach time. If user resolution fails, attachment is\n * skipped silently — the intelligence run handler will reject the\n * request with the same error. Note this means `identifyUser` is\n * resolved twice per learning-enabled run (here and in the run handler);\n * the callback is expected to be idempotent and side-effect-free.\n *\n * Intentionally split out from `configureAgentForRequest`: this is only\n * relevant to actual agent runs, not auxiliary flows like thread-name\n * generation (which has no need for MCP tools and shouldn't pay the\n * `listTools` round-trip).\n */\nexport async function attachIntelligenceEnterpriseLearning(params: {\n  runtime: CopilotRuntimeLike;\n  request: Request;\n  agent: AbstractAgent;\n}): Promise<void | Response> {\n  const { runtime, request } = params;\n  const agent = params.agent as MiddlewareCapableAgent;\n\n  if (!isIntelligenceRuntime(runtime)) return;\n\n  const learningEnabled =\n    runtime.intelligence?.ɵisEnterpriseLearningEnabled?.() === true;\n  if (runtime.memory === undefined && !learningEnabled) return;\n\n  // Nothing here is resolvable for an agent whose framework can't take\n  // middleware and whose runtime configures no Memory — bail before paying for\n  // `identifyUser`, so an enterprise-learning-only run keeps warning rather\n  // than acquiring a new way to fail.\n  if (runtime.memory === undefined && typeof agent.use !== \"function\") {\n    logger.warn(NO_MIDDLEWARE_WARNING);\n    return;\n  }\n\n  const userResult = await resolveIntelligenceUser({ runtime, request });\n  if (userResult instanceof Response) return userResult;\n  const access = await resolveWebMemory(runtime, request, userResult, \"agent\");\n  if (access instanceof Response) return access;\n\n  const memoryGranted =\n    runtime.memory !== undefined && grantAllowsMemory(access.grant);\n\n  // A policy that grants no scope means this run gets no Memory — it does NOT\n  // mean the run is refused. Attach nothing and let the conversation proceed,\n  // exactly as a Channel does when its grant asks for nothing\n  // (`hasMemoryAccess` in @copilotkit/channels-core). Returning a 403 here\n  // instead fails the whole run, so switching Memory off for one tenant would\n  // leave that tenant with no assistant, and the only signal is a run error the\n  // chat surface has no reason to render.\n  //\n  // Enterprise learning rides the SAME MCP server, so \"no Memory\" must not cost\n  // an operator the learning tools too. When it is on, attach anyway and let\n  // Intelligence filter: it registers one Memory tool per granted scope and\n  // none at all for an all-none grant, leaving the learning tools untouched.\n  if (!memoryGranted && !learningEnabled) return;\n\n  // Whatever is left to attach needs middleware. Failing the run is right only\n  // when Memory was actually granted and cannot be delivered; a run that merely\n  // wanted learning tools warns and proceeds, as it always has.\n  if (typeof agent.use !== \"function\") {\n    if (memoryGranted) {\n      return errorResponse(\n        \"Memory is configured, but this agent does not support middleware\",\n        500,\n      );\n    }\n    logger.warn(NO_MIDDLEWARE_WARNING);\n    return;\n  }\n\n  agent.use(\n    new MCPMiddleware([\n      {\n        type: \"http\",\n        url: `${runtime.intelligence.ɵgetApiUrl()}/mcp`,\n        serverId: \"intelligence\",\n        headers: {\n          Authorization: `Bearer ${runtime.intelligence.ɵgetApiKey()}`,\n          [INTELLIGENCE_USER_ID_HEADER]: userResult.id,\n          ...(runtime.memory\n            ? {\n                [INTELLIGENCE_MEMORY_GRANT_HEADER]: JSON.stringify(\n                  access.grant,\n                ),\n              }\n            : {}),\n        },\n      },\n    ]),\n  );\n}\n\n// Intentional local exception: HTTP request parsing runs before AG-UI's event\n// compatibility boundary. Mirror its historically accepted optional-null rules\n// and its legacy binary-part upgrade here, without depending on a new public\n// AG-UI helper (AG-UI does not export one). Keep these aligned\n// with client/src/middleware/compatibility-boundary.ts and AG-UI's migration guide.\n// Required nulls and nulls within application data must remain untouched.\nfunction warnCompatibility(what: string, replacement: string) {\n  if (\n    typeof process !== \"undefined\" &&\n    typeof process.env !== \"undefined\" &&\n    process.env.SUPPRESS_TRANSFORMATION_WARNINGS\n  )\n    return;\n  console.warn(\n    `[ag-ui][compat] Converting deprecated ${what} to ${replacement}. The old shape leaves the protocol after its shim window — see the repo-root DEPRECATIONS.md. Set SUPPRESS_TRANSFORMATION_WARNINGS=true to silence.`,\n  );\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction omitLegacyNull(\n  value: unknown,\n  field: string,\n  context: string,\n): unknown {\n  if (!isRecord(value) || value[field] !== null) return value;\n  warnCompatibility(`${context}.${field}: null`, \"an absent field\");\n  const { [field]: _null, ...rest } = value;\n  return rest;\n}\n\nfunction mapProtocolArray(\n  value: unknown,\n  field: string,\n  normalize: (entry: unknown) => unknown,\n): unknown {\n  if (!isRecord(value) || !Array.isArray(value[field])) return value;\n  const original = value[field];\n  const entries = original.map(normalize);\n  return entries.some((entry, index) => entry !== original[index])\n    ? { ...value, [field]: entries }\n    : value;\n}\n\nfunction mediaTypeFor(\n  mimeType: string,\n): \"image\" | \"audio\" | \"video\" | \"document\" {\n  if (mimeType.startsWith(\"image/\")) return \"image\";\n  if (mimeType.startsWith(\"audio/\")) return \"audio\";\n  if (mimeType.startsWith(\"video/\")) return \"video\";\n  return \"document\";\n}\n\nfunction sameSource(part: unknown, converted: Record<string, unknown>) {\n  if (!isRecord(part) || part.type !== converted.type) return false;\n  const a = part.source;\n  const b = converted.source as Record<string, unknown>;\n  return (\n    isRecord(a) &&\n    a.type === b.type &&\n    a.value === b.value &&\n    a.mimeType === b.mimeType\n  );\n}\n\n/**\n * The 0.x `{ type: \"binary\" }` part, which 1.0 retired and main accepted.\n * Mirrors AG-UI's outgoing upgrade (client/src/middleware/legacy-content.ts):\n * data or url becomes the media part its mime type names, and a binary part\n * that only mirrors a modern part already in the message is dropped. A part\n * with only an `id` has no 1.0 form; it is dropped with a warning instead of\n * failing the whole request, which is what BuiltInAgent already did with it.\n */\nfunction upgradeLegacyBinaryParts(content: unknown[]): unknown[] {\n  return content.flatMap((part) => {\n    if (\n      !isRecord(part) ||\n      part.type !== \"binary\" ||\n      typeof part.mimeType !== \"string\"\n    )\n      return [part];\n    const kind =\n      typeof part.data === \"string\"\n        ? \"data\"\n        : typeof part.url === \"string\"\n          ? \"url\"\n          : null;\n    if (kind === null) {\n      console.warn(\n        \"[CopilotKit] Dropping a legacy binary content part that has no data or url; AG-UI 1.0 has no equivalent for it.\",\n      );\n      return [];\n    }\n    warnCompatibility(\"binary input content\", \"the modern media content part\");\n    const converted: Record<string, unknown> = {\n      type: mediaTypeFor(part.mimeType),\n      source: {\n        type: kind,\n        value: kind === \"data\" ? part.data : part.url,\n        mimeType: part.mimeType,\n      },\n      ...(typeof part.filename === \"string\"\n        ? { metadata: { filename: part.filename } }\n        : {}),\n    };\n    return content.some((other) => sameSource(other, converted))\n      ? []\n      : [converted];\n  });\n}\n\nfunction normalizeLegacyMessageContent(message: unknown): unknown {\n  const upgraded =\n    isRecord(message) &&\n    Array.isArray(message.content) &&\n    message.content.some((part) => isRecord(part) && part.type === \"binary\")\n      ? {\n          ...message,\n          content: upgradeLegacyBinaryParts(message.content),\n        }\n      : message;\n  return mapProtocolArray(upgraded, \"content\", (part) => {\n    if (!isRecord(part)) return part;\n    switch (part.type) {\n      case \"image\":\n      case \"audio\":\n      case \"video\":\n      case \"document\":\n        return omitLegacyNull(part, \"metadata\", `${part.type} input content`);\n      default:\n        return part;\n    }\n  });\n}\n\nfunction normalizeLegacyRunAgentInput(input: unknown): unknown {\n  let normalized = omitLegacyNull(input, \"forwardedProps\", \"RunAgentInput\");\n  normalized = mapProtocolArray(normalized, \"tools\", (tool) =>\n    omitLegacyNull(tool, \"parameters\", \"Tool\"),\n  );\n  normalized = mapProtocolArray(normalized, \"resume\", (entry) =>\n    omitLegacyNull(entry, \"payload\", \"ResumeEntry\"),\n  );\n  return mapProtocolArray(\n    normalized,\n    \"messages\",\n    normalizeLegacyMessageContent,\n  );\n}\n\nfunction parseRunAgentInput(value: unknown): RunAgentInput {\n  // With strictNullChecks disabled, Zod infers some required nested fields\n  // (such as image.source) as optional. The schema still validates them.\n  return RunAgentInputSchema.parse(\n    normalizeLegacyRunAgentInput(value),\n  ) as RunAgentInput;\n}\n\nexport async function parseRunRequest(\n  request: Request,\n): Promise<RunAgentInput | Response> {\n  try {\n    const requestBody = await request.json();\n    return parseRunAgentInput(requestBody);\n  } catch (error) {\n    logger.error(\"Invalid run request body:\", error);\n    return new Response(\n      JSON.stringify({\n        error: \"Invalid request body\",\n        details: error instanceof Error ? error.message : String(error),\n      }),\n      {\n        status: 400,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n\nexport async function parseConnectRequest(request: Request): Promise<\n  | Response\n  | {\n      input: RunAgentInput;\n      lastSeenEventId: string | null;\n    }\n> {\n  try {\n    const requestBody = await request.json();\n    const input = parseRunAgentInput(requestBody);\n    let lastSeenEventId: string | null = null;\n\n    if (\n      \"lastSeenEventId\" in (requestBody as Record<string, unknown>) &&\n      (typeof (requestBody as Record<string, unknown>).lastSeenEventId ===\n        \"string\" ||\n        (requestBody as Record<string, unknown>).lastSeenEventId === null)\n    ) {\n      lastSeenEventId =\n        (requestBody as ConnectRequestBody).lastSeenEventId ?? null;\n    }\n\n    return { input, lastSeenEventId };\n  } catch (error) {\n    logger.error(\"Invalid connect request body:\", error);\n    return new Response(\n      JSON.stringify({\n        error: \"Invalid request body\",\n        details: error instanceof Error ? error.message : String(error),\n      }),\n      {\n        status: 400,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,eAAsB,qBACpB,SACA,SACA,SACmC;CACnC,MAAM,SAAS,MAAM,cAAc,QAAQ,QAAQ,QAAQ;AAE3D,KAAI,CAAC,OAAO,SACV,QAAO,IAAI,SACT,KAAK,UAAU;EACb,OAAO;EACP,SAAS,UAAU,QAAQ;EAC5B,CAAC,EACF;EACE,QAAQ;EACR,SAAS,EAAE,gBAAgB,oBAAoB;EAChD,CACF;AAGH,QAAQ,OAAO,SAA2B,OAAO;;AAGnD,SAAgB,yBAAyB,QAchC;CACP,MAAM,EACJ,SACA,SACA,SACA,wBACA,sBACE;CACJ,MAAM,QAAQ,OAAO;CAKrB,MAAM,uBACJ,CAAC,CAAC,0BAA0B,QAAQ,MAAM,YAAY;AAExD,KAAI,cAAc,QAAQ,KAAK,IAAI,sBAAsB;EAGvD,MAAM,EACJ,QAAQ,cACR,SAAS,UACT,gBACA,GAAG,gBACD,QAAQ,QAAQ,EAAE;AAEtB,OADoB,CAAC,gBAAgB,aAAa,SAAS,QAAQ,KAChD,OAAO,MAAM,QAAQ,WACtC,OAAM,IACJ,IAAI,eAAe;GACjB,GAAG;GAIH,gBACE,mBAAmB,yBAAyB,OAAO;GACtD,CAAC,CACH;;AAIL,KAAI,sBAAsB,QAAQ,IAAI,OAAO,MAAM,QAAQ,YAAY;EAGrE,MAAM,aAAa,sBACjB,QAAQ,SAAS,WAAW,EAAE,EAC9B,QACD;AACD,MAAI,WAAW,SAAS,KAAK,kBAC3B,OAAM,IACJ,IAAI,kBAAkB;GAAE;GAAY,sBAAsB;GAAS,CAAC,CACrE;YAEM,QAAQ,SAAS,SAAS,QAAQ;EAC3C,MAAM,aAAa,sBAAsB,QAAQ,QAAQ,SAAS,QAAQ;AAE1E,MAAI,WAAW,SAAS,KAAK,OAAO,MAAM,QAAQ,WAChD,OAAM,IAAI,IAAI,kBAAkB,EAAE,YAAY,CAAC,CAAC;;AAIpD,KAAI,QAAQ,kBAAkB;EAC5B,MAAM,SAAS,QAAQ;EACvB,MAAM,eAAe,OAAO,WAAW,WAAW,OAAO,SAAS;AAElE,OADoB,CAAC,gBAAgB,aAAa,SAAS,QAAQ,KAChD,OAAO,MAAM,QAAQ,WACtC,OAAM,IAAI,IAAI,4BAA4B,CAAC;;AAY/C,OAAM,UAAU,wBACd,MAAM,SACN,SAMA,QAAQ,wBAAwB,4BAA4B,OAAU,CACvE;;;;;;AAOH,MAAM,wBACJ;;;;;;;;;;;;;;;;;;;;;AAwBF,eAAsB,qCAAqC,QAI9B;CAC3B,MAAM,EAAE,SAAS,YAAY;CAC7B,MAAM,QAAQ,OAAO;AAErB,KAAI,CAAC,sBAAsB,QAAQ,CAAE;CAErC,MAAM,kBACJ,QAAQ,cAAc,gCAAgC,KAAK;AAC7D,KAAI,QAAQ,WAAW,UAAa,CAAC,gBAAiB;AAMtD,KAAI,QAAQ,WAAW,UAAa,OAAO,MAAM,QAAQ,YAAY;AACnE,SAAO,KAAK,sBAAsB;AAClC;;CAGF,MAAM,aAAa,MAAM,wBAAwB;EAAE;EAAS;EAAS,CAAC;AACtE,KAAI,sBAAsB,SAAU,QAAO;CAC3C,MAAM,SAAS,MAAM,iBAAiB,SAAS,SAAS,YAAY,QAAQ;AAC5E,KAAI,kBAAkB,SAAU,QAAO;CAEvC,MAAM,gBACJ,QAAQ,WAAW,UAAa,kBAAkB,OAAO,MAAM;AAcjE,KAAI,CAAC,iBAAiB,CAAC,gBAAiB;AAKxC,KAAI,OAAO,MAAM,QAAQ,YAAY;AACnC,MAAI,cACF,QAAO,cACL,oEACA,IACD;AAEH,SAAO,KAAK,sBAAsB;AAClC;;AAGF,OAAM,IACJ,IAAI,cAAc,CAChB;EACE,MAAM;EACN,KAAK,GAAG,QAAQ,aAAa,YAAY,CAAC;EAC1C,UAAU;EACV,SAAS;GACP,eAAe,UAAU,QAAQ,aAAa,YAAY;IACzD,8BAA8B,WAAW;GAC1C,GAAI,QAAQ,SACR,GACG,mCAAmC,KAAK,UACvC,OAAO,MACR,EACF,GACD,EAAE;GACP;EACF,CACF,CAAC,CACH;;AASH,SAAS,kBAAkB,MAAc,aAAqB;AAC5D,KACE,OAAO,YAAY,eACnB,OAAO,QAAQ,QAAQ,eACvB,QAAQ,IAAI,iCAEZ;AACF,SAAQ,KACN,yCAAyC,KAAK,MAAM,YAAY,sJACjE;;AAGH,SAAS,SAAS,OAAkD;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG7E,SAAS,eACP,OACA,OACA,SACS;AACT,KAAI,CAAC,SAAS,MAAM,IAAI,MAAM,WAAW,KAAM,QAAO;AACtD,mBAAkB,GAAG,QAAQ,GAAG,MAAM,SAAS,kBAAkB;CACjE,MAAM,GAAG,QAAQ,OAAO,GAAG,SAAS;AACpC,QAAO;;AAGT,SAAS,iBACP,OACA,OACA,WACS;AACT,KAAI,CAAC,SAAS,MAAM,IAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,CAAE,QAAO;CAC7D,MAAM,WAAW,MAAM;CACvB,MAAM,UAAU,SAAS,IAAI,UAAU;AACvC,QAAO,QAAQ,MAAM,OAAO,UAAU,UAAU,SAAS,OAAO,GAC5D;EAAE,GAAG;GAAQ,QAAQ;EAAS,GAC9B;;AAGN,SAAS,aACP,UAC0C;AAC1C,KAAI,SAAS,WAAW,SAAS,CAAE,QAAO;AAC1C,KAAI,SAAS,WAAW,SAAS,CAAE,QAAO;AAC1C,KAAI,SAAS,WAAW,SAAS,CAAE,QAAO;AAC1C,QAAO;;AAGT,SAAS,WAAW,MAAe,WAAoC;AACrE,KAAI,CAAC,SAAS,KAAK,IAAI,KAAK,SAAS,UAAU,KAAM,QAAO;CAC5D,MAAM,IAAI,KAAK;CACf,MAAM,IAAI,UAAU;AACpB,QACE,SAAS,EAAE,IACX,EAAE,SAAS,EAAE,QACb,EAAE,UAAU,EAAE,SACd,EAAE,aAAa,EAAE;;;;;;;;;;AAYrB,SAAS,yBAAyB,SAA+B;AAC/D,QAAO,QAAQ,SAAS,SAAS;AAC/B,MACE,CAAC,SAAS,KAAK,IACf,KAAK,SAAS,YACd,OAAO,KAAK,aAAa,SAEzB,QAAO,CAAC,KAAK;EACf,MAAM,OACJ,OAAO,KAAK,SAAS,WACjB,SACA,OAAO,KAAK,QAAQ,WAClB,QACA;AACR,MAAI,SAAS,MAAM;AACjB,WAAQ,KACN,kHACD;AACD,UAAO,EAAE;;AAEX,oBAAkB,wBAAwB,gCAAgC;EAC1E,MAAM,YAAqC;GACzC,MAAM,aAAa,KAAK,SAAS;GACjC,QAAQ;IACN,MAAM;IACN,OAAO,SAAS,SAAS,KAAK,OAAO,KAAK;IAC1C,UAAU,KAAK;IAChB;GACD,GAAI,OAAO,KAAK,aAAa,WACzB,EAAE,UAAU,EAAE,UAAU,KAAK,UAAU,EAAE,GACzC,EAAE;GACP;AACD,SAAO,QAAQ,MAAM,UAAU,WAAW,OAAO,UAAU,CAAC,GACxD,EAAE,GACF,CAAC,UAAU;GACf;;AAGJ,SAAS,8BAA8B,SAA2B;AAUhE,QAAO,iBARL,SAAS,QAAQ,IACjB,MAAM,QAAQ,QAAQ,QAAQ,IAC9B,QAAQ,QAAQ,MAAM,SAAS,SAAS,KAAK,IAAI,KAAK,SAAS,SAAS,GACpE;EACE,GAAG;EACH,SAAS,yBAAyB,QAAQ,QAAQ;EACnD,GACD,SAC4B,YAAY,SAAS;AACrD,MAAI,CAAC,SAAS,KAAK,CAAE,QAAO;AAC5B,UAAQ,KAAK,MAAb;GACE,KAAK;GACL,KAAK;GACL,KAAK;GACL,KAAK,WACH,QAAO,eAAe,MAAM,YAAY,GAAG,KAAK,KAAK,gBAAgB;GACvE,QACE,QAAO;;GAEX;;AAGJ,SAAS,6BAA6B,OAAyB;CAC7D,IAAI,aAAa,eAAe,OAAO,kBAAkB,gBAAgB;AACzE,cAAa,iBAAiB,YAAY,UAAU,SAClD,eAAe,MAAM,cAAc,OAAO,CAC3C;AACD,cAAa,iBAAiB,YAAY,WAAW,UACnD,eAAe,OAAO,WAAW,cAAc,CAChD;AACD,QAAO,iBACL,YACA,YACA,8BACD;;AAGH,SAAS,mBAAmB,OAA+B;AAGzD,QAAO,oBAAoB,MACzB,6BAA6B,MAAM,CACpC;;AAGH,eAAsB,gBACpB,SACmC;AACnC,KAAI;AAEF,SAAO,mBADa,MAAM,QAAQ,MAAM,CACF;UAC/B,OAAO;AACd,SAAO,MAAM,6BAA6B,MAAM;AAChD,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAChE,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF;;;AAIL,eAAsB,oBAAoB,SAMxC;AACA,KAAI;EACF,MAAM,cAAc,MAAM,QAAQ,MAAM;EACxC,MAAM,QAAQ,mBAAmB,YAAY;EAC7C,IAAI,kBAAiC;AAErC,MACE,qBAAsB,gBACrB,OAAQ,YAAwC,oBAC/C,YACC,YAAwC,oBAAoB,MAE/D,mBACG,YAAmC,mBAAmB;AAG3D,SAAO;GAAE;GAAO;GAAiB;UAC1B,OAAO;AACd,SAAO,MAAM,iCAAiC,MAAM;AACpD,SAAO,IAAI,SACT,KAAK,UAAU;GACb,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAChE,CAAC,EACF;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CACF"}

package/dist/v2/runtime/intelligence-platform/client.cjs

@@ -1,6 +1,7 @@
 require("reflect-metadata");
 const require_runtime = require('../../../_virtual/_rolldown/runtime.cjs');
 const require_learned_skills = require('./learned-skills.cjs');
+const require_trajectories = require('./trajectories.cjs');
 let _copilotkit_shared = require("@copilotkit/shared");
 let zod = require("zod");
 let crypto = require("crypto");
@@ -625,6 +626,25 @@ var CopilotKitIntelligence = class {
 			clearTimeout(timeout);
 		}
 	}
+	/** Mint a browser capture grant using only the Runtime's project and user. */
+	async ɵconnectTrajectory(params) {
+		const response = await fetch(`${this.#apiUrl}/api/trajectories/join`, {
+			method: "POST",
+			headers: {
+				Authorization: `Bearer ${this.#apiKey}`,
+				"Content-Type": "application/json"
+			},
+			body: JSON.stringify({
+				trajectoryId: params.trajectoryId,
+				appUserId: params.user.id
+			}),
+			signal: params.signal,
+			redirect: "error"
+		});
+		const payload = await response.json().catch(() => void 0);
+		if (!response.ok) throw require_trajectories.trajectoryResponseError(payload, response.status, this.#apiKey);
+		return require_trajectories.parseTrajectoryConnectionGrant(payload, params.trajectoryId, this.ɵgetClientWsUrl());
+	}
 	async #request(method, path, body, extraHeaders) {
 		const url = `${this.#apiUrl}${path}`;
 		const headers = {