@copilotkit/runtime 1.83.0 → 2.0.0-rc.0

package/dist/lib/runtime/legacy-service-adapter-agent.mjs

@@ -1,359 +0,0 @@
-import "reflect-metadata";
-import { RuntimeEventSubject, RuntimeEventTypes } from "../../service-adapters/events.mjs";
-import { aguiToGQL } from "../../graphql/message-conversion/agui-to-gql.mjs";
-import { convertToolsToVercelAITools } from "../../agent/index.mjs";
-import { randomUUID } from "@copilotkit/shared";
-import { Observable } from "rxjs";
-import { AbstractAgent, EventType } from "@ag-ui/client";
-import { InvalidToolInputError, TypeValidationError, asSchema } from "ai";
-
-//#region src/v1-deprecated/lib/runtime/legacy-service-adapter-agent.ts
-/**
-* More than one step is required: the v2 client starts a follow-up run only
-* after it executes a frontend tool, so a server tool's result reaches the
-* model only if this run calls it again. Ten is the limit BuiltInAgent uses
-* when it loops (with learned skills). Its own default is one step, which
-* stops before answering a server tool (OSS-1232).
-*/
-const MAX_STEPS = 10;
-/** Roles `aguiToGQL` converts. Anything else (e.g. `activity`) has no v1 form. */
-const V1_ROLES = new Set([
-	"developer",
-	"system",
-	"assistant",
-	"user",
-	"tool"
-]);
-/**
-* Runs a v1 `CopilotServiceAdapter` through its own `process()` method.
-*
-* Since v1.50.0 the runtime turned a service adapter into a `BuiltInAgent`,
-* which only works when the adapter can name a model. An adapter whose value
-* lives in `process()` -- `LangChainAdapter`'s `chainFn` above all -- had no
-* path to execution at all (#3217). This agent is that path: it converts the
-* AG-UI input to the v1 request shape, calls `process()`, and maps the
-* adapter's runtime events back to AG-UI events.
-*
-* Server-side v1 `actions` and `mcpServers` reach it the same way they reach
-* `BuiltInAgent`, as `config.tools`. They are advertised to the adapter
-* alongside the frontend tools, and executed here when the model calls them,
-* which is what the v1 runtime did before v1.50.0.
-*/
-var LegacyServiceAdapterAgent = class extends AbstractAgent {
-	constructor(serviceAdapter) {
-		super();
-		this.serviceAdapter = serviceAdapter;
-		this.config = {};
-	}
-	clone() {
-		const cloned = super.clone();
-		Reflect.set(cloned, "serviceAdapter", this.serviceAdapter);
-		cloned.config = { ...this.config };
-		return cloned;
-	}
-	/**
-	* Stops the current run, which is what the runner calls when the user
-	* presses Stop. The adapter's in-flight stream is abandoned, no further
-	* `process()` step or server-side tool runs, and the run completes without
-	* a terminal event, the same as `BuiltInAgent`.
-	*/
-	abortRun() {
-		this.abortController?.abort();
-	}
-	run(input) {
-		return new Observable((subscriber) => {
-			const controller = new AbortController();
-			this.abortController = controller;
-			const { signal } = controller;
-			const emit = (event) => {
-				if (!signal.aborted) subscriber.next(event);
-			};
-			const release = () => {
-				if (this.abortController === controller) this.abortController = void 0;
-			};
-			this.execute(input, emit, signal).then(() => {
-				release();
-				if (signal.aborted) {
-					subscriber.complete();
-					return;
-				}
-				emit({
-					type: EventType.RUN_FINISHED,
-					threadId: input.threadId,
-					runId: input.runId
-				});
-				subscriber.complete();
-			}, (error) => {
-				release();
-				if (signal.aborted) {
-					subscriber.complete();
-					return;
-				}
-				emit({
-					type: EventType.RUN_ERROR,
-					message: error instanceof Error ? error.message : String(error)
-				});
-				subscriber.error(error);
-			});
-			return () => {
-				controller.abort();
-				release();
-			};
-		});
-	}
-	async execute(input, emit, signal) {
-		emit({
-			type: EventType.RUN_STARTED,
-			threadId: input.threadId,
-			runId: input.runId
-		});
-		const frontendNames = new Set(input.tools.map((tool) => tool.name));
-		const serverTools = /* @__PURE__ */ new Map();
-		for (const tool of this.config.tools ?? []) if (tool.execute && !frontendNames.has(tool.name)) serverTools.set(tool.name, tool);
-		const actions = [...input.tools.map((tool) => ({
-			name: tool.name,
-			description: tool.description ?? "",
-			jsonSchema: JSON.stringify(tool.parameters ?? {
-				type: "object",
-				properties: {}
-			})
-		})), ...await Promise.all([...serverTools.values()].map(async (tool) => ({
-			name: tool.name,
-			description: tool.description ?? "",
-			jsonSchema: JSON.stringify(await asSchema(tool.parameters).jsonSchema)
-		})))];
-		const messages = [];
-		if (input.context?.length) messages.push({
-			id: randomUUID(),
-			role: "system",
-			content: "## Context from the application\n" + input.context.map((ctx) => `${ctx.description}:\n${ctx.value}\n`).join("")
-		});
-		messages.push(...input.messages.filter((message) => V1_ROLES.has(message.role)));
-		for (let step = 0; step < MAX_STEPS; step++) {
-			const result = await this.runStep(input, messages, actions, emit, signal);
-			if (signal.aborted) return;
-			const answered = new Set(result.results.map((r) => r.toolCallId));
-			const pending = result.toolCalls.filter((call) => !answered.has(call.id));
-			const serverCalls = pending.filter((call) => serverTools.has(call.name));
-			if (result.text || result.toolCalls.length) messages.push({
-				id: result.textMessageId ?? randomUUID(),
-				role: "assistant",
-				content: result.text,
-				...result.toolCalls.length && { toolCalls: result.toolCalls.map((call) => ({
-					id: call.id,
-					type: "function",
-					function: {
-						name: call.name,
-						arguments: call.args || "{}"
-					}
-				})) }
-			});
-			for (const { toolCallId, content } of result.results) messages.push({
-				id: randomUUID(),
-				role: "tool",
-				toolCallId,
-				content
-			});
-			const rejected = /* @__PURE__ */ new Set();
-			for (const call of pending) {
-				if (serverTools.has(call.name)) continue;
-				const tool = input.tools.find((t) => t.name === call.name);
-				if (!tool) continue;
-				let schema;
-				try {
-					schema = convertToolsToVercelAITools([tool])[tool.name]?.inputSchema;
-				} catch {
-					continue;
-				}
-				const checked = await validateToolArgs(call, schema);
-				if ("error" in checked) {
-					rejected.add(call.id);
-					emit({
-						type: EventType.TOOL_CALL_RESULT,
-						messageId: randomUUID(),
-						toolCallId: call.id,
-						content: checked.error
-					});
-					messages.push({
-						id: randomUUID(),
-						role: "tool",
-						toolCallId: call.id,
-						content: checked.error
-					});
-				}
-			}
-			for (const call of serverCalls) {
-				if (signal.aborted) return;
-				const content = await this.executeServerTool(serverTools.get(call.name), call);
-				emit({
-					type: EventType.TOOL_CALL_RESULT,
-					messageId: randomUUID(),
-					toolCallId: call.id,
-					content
-				});
-				messages.push({
-					id: randomUUID(),
-					role: "tool",
-					toolCallId: call.id,
-					content
-				});
-			}
-			const answeredHere = serverCalls.length + rejected.size;
-			if (!answeredHere || answeredHere !== pending.length) return;
-		}
-	}
-	async executeServerTool(tool, call) {
-		const checked = await validateToolArgs(call, tool.parameters);
-		if ("error" in checked) return checked.error;
-		try {
-			const output = await tool.execute(checked.value);
-			return typeof output === "string" ? output : JSON.stringify(output ?? "");
-		} catch (error) {
-			return JSON.stringify({
-				error: {
-					code: "ERROR",
-					message: error instanceof Error ? error.message : String(error)
-				},
-				result: ""
-			});
-		}
-	}
-	/** One call to `process()`, with its runtime events forwarded as AG-UI. */
-	async runStep(input, messages, actions, emit, signal) {
-		let streamCallback;
-		await this.serviceAdapter.process({
-			eventSource: { stream: async (callback) => {
-				streamCallback = callback;
-			} },
-			messages: aguiToGQL(messages),
-			actions,
-			threadId: input.threadId,
-			runId: input.runId
-		});
-		const result = {
-			text: "",
-			toolCalls: [],
-			results: []
-		};
-		if (!streamCallback || signal.aborted) return result;
-		const subject = new RuntimeEventSubject(signal);
-		const done = new Promise((resolve, reject) => {
-			subject.subscribe({
-				next: (event) => {
-					try {
-						this.forward(event, result, emit);
-					} catch (error) {
-						reject(error);
-					}
-				},
-				error: reject,
-				complete: resolve
-			});
-			signal.addEventListener("abort", () => resolve(), { once: true });
-		});
-		streamCallback(subject).then(() => subject.complete(), (error) => subject.error(error));
-		await done;
-		return result;
-	}
-	forward(event, step, emit) {
-		switch (event.type) {
-			case RuntimeEventTypes.TextMessageStart:
-				step.textMessageId ??= event.messageId;
-				emit({
-					type: EventType.TEXT_MESSAGE_START,
-					messageId: event.messageId,
-					role: "assistant"
-				});
-				return;
-			case RuntimeEventTypes.TextMessageContent:
-				if (!event.content) return;
-				step.text += event.content;
-				emit({
-					type: EventType.TEXT_MESSAGE_CONTENT,
-					messageId: event.messageId,
-					delta: event.content
-				});
-				return;
-			case RuntimeEventTypes.TextMessageEnd:
-				emit({
-					type: EventType.TEXT_MESSAGE_END,
-					messageId: event.messageId
-				});
-				return;
-			case RuntimeEventTypes.ActionExecutionStart:
-				step.toolCalls.push({
-					id: event.actionExecutionId,
-					name: event.actionName,
-					args: ""
-				});
-				emit({
-					type: EventType.TOOL_CALL_START,
-					toolCallId: event.actionExecutionId,
-					toolCallName: event.actionName,
-					parentMessageId: event.parentMessageId
-				});
-				return;
-			case RuntimeEventTypes.ActionExecutionArgs: {
-				if (!event.args) return;
-				const call = step.toolCalls.find((c) => c.id === event.actionExecutionId);
-				if (call) call.args += event.args;
-				emit({
-					type: EventType.TOOL_CALL_ARGS,
-					toolCallId: event.actionExecutionId,
-					delta: event.args
-				});
-				return;
-			}
-			case RuntimeEventTypes.ActionExecutionEnd:
-				emit({
-					type: EventType.TOOL_CALL_END,
-					toolCallId: event.actionExecutionId
-				});
-				return;
-			case RuntimeEventTypes.ActionExecutionResult:
-				step.results.push({
-					toolCallId: event.actionExecutionId,
-					content: event.result
-				});
-				emit({
-					type: EventType.TOOL_CALL_RESULT,
-					messageId: randomUUID(),
-					toolCallId: event.actionExecutionId,
-					content: event.result
-				});
-				return;
-			case RuntimeEventTypes.RunError: throw new Error(event.message);
-			default: return;
-		}
-	}
-};
-/**
-* Parses a tool call's arguments and checks them against `schema`, with the
-* AI SDK's own error, so a failure reads exactly as it does on BuiltInAgent.
-* Returns the validated value (undeclared keys stripped by a Zod schema) or
-* the text of the error result to send back.
-*/
-async function validateToolArgs(call, schema) {
-	let args = {};
-	try {
-		args = call.args ? JSON.parse(call.args) : {};
-	} catch {
-		return { error: `The tool "${call.name}" received arguments that are not valid JSON.` };
-	}
-	const validate = asSchema(schema).validate;
-	if (!validate) return { value: args };
-	const result = await validate(args);
-	if ("error" in result) return { error: `Error: ${new InvalidToolInputError({
-		toolName: call.name,
-		toolInput: call.args,
-		cause: TypeValidationError.wrap({
-			value: args,
-			cause: result.error
-		})
-	}).message}` };
-	return { value: result.value };
-}
-
-//#endregion
-export { LegacyServiceAdapterAgent };
-//# sourceMappingURL=legacy-service-adapter-agent.mjs.map

package/dist/lib/runtime/legacy-service-adapter-agent.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"legacy-service-adapter-agent.mjs","names":[],"sources":["../../../../src/v1-deprecated/lib/runtime/legacy-service-adapter-agent.ts"],"sourcesContent":["import { AbstractAgent, EventType } from \"@ag-ui/client\";\nimport type {\n  BaseEvent,\n  Message as AguiMessage,\n  RunAgentInput,\n} from \"@ag-ui/client\";\nimport { Observable } from \"rxjs\";\nimport { asSchema, InvalidToolInputError, TypeValidationError } from \"ai\";\nimport type { FlexibleSchema } from \"ai\";\nimport { randomUUID } from \"@copilotkit/shared\";\nimport type * as SharedAgui from \"@copilotkit/shared\";\nimport { convertToolsToVercelAITools } from \"../../../agent\";\nimport type { BuiltInAgentClassicConfig } from \"../../../agent\";\nimport type { CopilotServiceAdapter } from \"../../service-adapters/service-adapter\";\nimport {\n  RuntimeEventSubject,\n  RuntimeEventTypes,\n} from \"../../service-adapters/events\";\nimport type {\n  RuntimeEvent,\n  RuntimeEventSource,\n} from \"../../service-adapters/events\";\nimport { aguiToGQL } from \"../../graphql/message-conversion/agui-to-gql\";\nimport type { ActionInput } from \"../../graphql/inputs/action.input\";\n\n/**\n * More than one step is required: the v2 client starts a follow-up run only\n * after it executes a frontend tool, so a server tool's result reaches the\n * model only if this run calls it again. Ten is the limit BuiltInAgent uses\n * when it loops (with learned skills). Its own default is one step, which\n * stops before answering a server tool (OSS-1232).\n */\nconst MAX_STEPS = 10;\n\n/** Roles `aguiToGQL` converts. Anything else (e.g. `activity`) has no v1 form. */\nconst V1_ROLES = new Set([\"developer\", \"system\", \"assistant\", \"user\", \"tool\"]);\n\ntype ServerTool = NonNullable<BuiltInAgentClassicConfig[\"tools\"]>[number];\n\ninterface StepToolCall {\n  id: string;\n  name: string;\n  args: string;\n}\n\ninterface StepResult {\n  text: string;\n  textMessageId?: string;\n  toolCalls: StepToolCall[];\n  results: { toolCallId: string; content: string }[];\n}\n\n/**\n * Runs a v1 `CopilotServiceAdapter` through its own `process()` method.\n *\n * Since v1.50.0 the runtime turned a service adapter into a `BuiltInAgent`,\n * which only works when the adapter can name a model. An adapter whose value\n * lives in `process()` -- `LangChainAdapter`'s `chainFn` above all -- had no\n * path to execution at all (#3217). This agent is that path: it converts the\n * AG-UI input to the v1 request shape, calls `process()`, and maps the\n * adapter's runtime events back to AG-UI events.\n *\n * Server-side v1 `actions` and `mcpServers` reach it the same way they reach\n * `BuiltInAgent`, as `config.tools`. They are advertised to the adapter\n * alongside the frontend tools, and executed here when the model calls them,\n * which is what the v1 runtime did before v1.50.0.\n */\nexport class LegacyServiceAdapterAgent extends AbstractAgent {\n  /** Written by `assignToolsToAgents`, the same as on `BuiltInAgent`. */\n  config: { tools?: BuiltInAgentClassicConfig[\"tools\"] } = {};\n\n  private abortController?: AbortController;\n\n  constructor(private readonly serviceAdapter: CopilotServiceAdapter) {\n    super();\n  }\n\n  clone(): LegacyServiceAdapterAgent {\n    const cloned = super.clone() as LegacyServiceAdapterAgent;\n    Reflect.set(cloned, \"serviceAdapter\", this.serviceAdapter);\n    cloned.config = { ...this.config };\n    return cloned;\n  }\n\n  /**\n   * Stops the current run, which is what the runner calls when the user\n   * presses Stop. The adapter's in-flight stream is abandoned, no further\n   * `process()` step or server-side tool runs, and the run completes without\n   * a terminal event, the same as `BuiltInAgent`.\n   */\n  abortRun(): void {\n    this.abortController?.abort();\n  }\n\n  run(input: RunAgentInput): Observable<BaseEvent> {\n    return new Observable<BaseEvent>((subscriber) => {\n      const controller = new AbortController();\n      this.abortController = controller;\n      const { signal } = controller;\n      const emit = (event: BaseEvent) => {\n        if (!signal.aborted) subscriber.next(event);\n      };\n      const release = () => {\n        if (this.abortController === controller) {\n          this.abortController = undefined;\n        }\n      };\n\n      this.execute(input, emit, signal).then(\n        () => {\n          release();\n          if (signal.aborted) {\n            subscriber.complete();\n            return;\n          }\n          emit({\n            type: EventType.RUN_FINISHED,\n            threadId: input.threadId,\n            runId: input.runId,\n          } as BaseEvent);\n          subscriber.complete();\n        },\n        (error: unknown) => {\n          release();\n          if (signal.aborted) {\n            subscriber.complete();\n            return;\n          }\n          emit({\n            type: EventType.RUN_ERROR,\n            message: error instanceof Error ? error.message : String(error),\n          } as BaseEvent);\n          subscriber.error(error);\n        },\n      );\n\n      return () => {\n        controller.abort();\n        release();\n      };\n    });\n  }\n\n  private async execute(\n    input: RunAgentInput,\n    emit: (event: BaseEvent) => void,\n    signal: AbortSignal,\n  ): Promise<void> {\n    emit({\n      type: EventType.RUN_STARTED,\n      threadId: input.threadId,\n      runId: input.runId,\n    } as BaseEvent);\n\n    const frontendNames = new Set(input.tools.map((tool) => tool.name));\n    const serverTools = new Map<string, ServerTool>();\n    for (const tool of this.config.tools ?? []) {\n      // A frontend tool of the same name wins, as it does on BuiltInAgent.\n      if (tool.execute && !frontendNames.has(tool.name)) {\n        serverTools.set(tool.name, tool);\n      }\n    }\n\n    const actions = [\n      ...input.tools.map((tool) => ({\n        name: tool.name,\n        description: tool.description ?? \"\",\n        jsonSchema: JSON.stringify(\n          tool.parameters ?? { type: \"object\", properties: {} },\n        ),\n      })),\n      ...(await Promise.all(\n        [...serverTools.values()].map(async (tool) => ({\n          name: tool.name,\n          description: tool.description ?? \"\",\n          // v1 actions and MCP tools arrive here with Zod parameters; the AI\n          // SDK is what converts those for BuiltInAgent too.\n          jsonSchema: JSON.stringify(\n            await asSchema(tool.parameters as FlexibleSchema<unknown>)\n              .jsonSchema,\n          ),\n        })),\n      )),\n    ] as ActionInput[];\n\n    const messages: AguiMessage[] = [];\n    if (input.context?.length) {\n      // The v1 frontend folded readable context into the system message. The\n      // v2 frontend sends it separately, so put it back where the adapter\n      // expects it.\n      messages.push({\n        id: randomUUID(),\n        role: \"system\",\n        content:\n          \"## Context from the application\\n\" +\n          input.context\n            .map((ctx) => `${ctx.description}:\\n${ctx.value}\\n`)\n            .join(\"\"),\n      });\n    }\n    messages.push(\n      ...input.messages.filter((message) => V1_ROLES.has(message.role)),\n    );\n\n    for (let step = 0; step < MAX_STEPS; step++) {\n      const result = await this.runStep(input, messages, actions, emit, signal);\n      if (signal.aborted) return;\n\n      const answered = new Set(result.results.map((r) => r.toolCallId));\n      const pending = result.toolCalls.filter((call) => !answered.has(call.id));\n      const serverCalls = pending.filter((call) => serverTools.has(call.name));\n\n      if (result.text || result.toolCalls.length) {\n        messages.push({\n          id: result.textMessageId ?? randomUUID(),\n          role: \"assistant\",\n          content: result.text,\n          ...(result.toolCalls.length && {\n            toolCalls: result.toolCalls.map((call) => ({\n              id: call.id,\n              type: \"function\" as const,\n              function: { name: call.name, arguments: call.args || \"{}\" },\n            })),\n          }),\n        });\n      }\n      for (const { toolCallId, content } of result.results) {\n        messages.push({ id: randomUUID(), role: \"tool\", toolCallId, content });\n      }\n\n      // BuiltInAgent checks frontend tool calls against their JSON Schema on\n      // the server too, and answers a failing call with an error result\n      // instead of sending it to the browser. Do the same, so the client never\n      // runs a handler with arguments its own schema rejects.\n      const rejected = new Set<string>();\n      for (const call of pending) {\n        if (serverTools.has(call.name)) continue;\n        const tool = input.tools.find((t) => t.name === call.name);\n        if (!tool) continue;\n        let schema: FlexibleSchema<unknown> | undefined;\n        try {\n          schema = convertToolsToVercelAITools([tool])[tool.name]?.inputSchema;\n        } catch {\n          // Not a JSON Schema the validator accepts: leave the call as it was.\n          continue;\n        }\n        const checked = await validateToolArgs(call, schema);\n        if (\"error\" in checked) {\n          rejected.add(call.id);\n          emit({\n            type: EventType.TOOL_CALL_RESULT,\n            messageId: randomUUID(),\n            toolCallId: call.id,\n            content: checked.error,\n          } as BaseEvent);\n          messages.push({\n            id: randomUUID(),\n            role: \"tool\",\n            toolCallId: call.id,\n            content: checked.error,\n          });\n        }\n      }\n\n      for (const call of serverCalls) {\n        if (signal.aborted) return;\n        const content = await this.executeServerTool(\n          serverTools.get(call.name)!,\n          call,\n        );\n        emit({\n          type: EventType.TOOL_CALL_RESULT,\n          messageId: randomUUID(),\n          toolCallId: call.id,\n          content,\n        } as BaseEvent);\n        messages.push({\n          id: randomUUID(),\n          role: \"tool\",\n          toolCallId: call.id,\n          content,\n        });\n      }\n\n      // Another step only makes sense when every open call has a result. A\n      // frontend tool call ends the run; the client executes it and starts\n      // the next one. A rejected call already has its (error) result.\n      const answeredHere = serverCalls.length + rejected.size;\n      if (!answeredHere || answeredHere !== pending.length) {\n        return;\n      }\n    }\n  }\n\n  private async executeServerTool(\n    tool: ServerTool,\n    call: StepToolCall,\n  ): Promise<string> {\n    // Validate against the tool's schema, as the AI SDK does for BuiltInAgent,\n    // so one action behaves the same whichever adapter runs it. Arguments that\n    // fail go back to the model as an error result it can correct, and never\n    // reach the handler. Unknown keys are stripped. v1 itself (<= 1.10) passed\n    // the raw parsed JSON to the handler; this follows BuiltInAgent instead.\n    const checked = await validateToolArgs(\n      call,\n      tool.parameters as FlexibleSchema<unknown> | undefined,\n    );\n    if (\"error\" in checked) return checked.error;\n    try {\n      const output = await tool.execute!(checked.value as never);\n      return typeof output === \"string\" ? output : JSON.stringify(output ?? \"\");\n    } catch (error) {\n      return JSON.stringify({\n        error: {\n          code: \"ERROR\",\n          message: error instanceof Error ? error.message : String(error),\n        },\n        result: \"\",\n      });\n    }\n  }\n\n  /** One call to `process()`, with its runtime events forwarded as AG-UI. */\n  private async runStep(\n    input: RunAgentInput,\n    messages: AguiMessage[],\n    actions: ActionInput[],\n    emit: (event: BaseEvent) => void,\n    signal: AbortSignal,\n  ): Promise<StepResult> {\n    let streamCallback:\n      | ((eventStream$: RuntimeEventSubject) => Promise<void>)\n      | undefined;\n    // `RuntimeEventSource.stream` only stores the callback; the code that\n    // consumed it was deleted in v1.50.0. Capture it and consume it here.\n    const eventSource = {\n      stream: async (\n        callback: (eventStream$: RuntimeEventSubject) => Promise<void>,\n      ) => {\n        streamCallback = callback;\n      },\n    } as unknown as RuntimeEventSource;\n\n    await this.serviceAdapter.process({\n      eventSource,\n      messages: aguiToGQL(messages as SharedAgui.Message[]),\n      actions,\n      threadId: input.threadId,\n      runId: input.runId,\n    });\n\n    const result: StepResult = { text: \"\", toolCalls: [], results: [] };\n    if (!streamCallback || signal.aborted) {\n      return result;\n    }\n\n    const subject = new RuntimeEventSubject(signal);\n    const done = new Promise<void>((resolve, reject) => {\n      subject.subscribe({\n        next: (event) => {\n          try {\n            this.forward(event, result, emit);\n          } catch (error) {\n            reject(error);\n          }\n        },\n        error: reject,\n        complete: resolve,\n      });\n      // Nothing can cancel an adapter's stream from outside, so on abort stop\n      // waiting for it; `emit` already drops anything it sends afterwards.\n      signal.addEventListener(\"abort\", () => resolve(), { once: true });\n    });\n    // An adapter that returns without completing its stream is finished too.\n    streamCallback(subject).then(\n      () => subject.complete(),\n      (error) => subject.error(error),\n    );\n    await done;\n    return result;\n  }\n\n  private forward(\n    event: RuntimeEvent,\n    step: StepResult,\n    emit: (event: BaseEvent) => void,\n  ): void {\n    switch (event.type) {\n      case RuntimeEventTypes.TextMessageStart:\n        step.textMessageId ??= event.messageId;\n        emit({\n          type: EventType.TEXT_MESSAGE_START,\n          messageId: event.messageId,\n          role: \"assistant\",\n        } as BaseEvent);\n        return;\n      case RuntimeEventTypes.TextMessageContent:\n        // AG-UI rejects an empty delta.\n        if (!event.content) return;\n        step.text += event.content;\n        emit({\n          type: EventType.TEXT_MESSAGE_CONTENT,\n          messageId: event.messageId,\n          delta: event.content,\n        } as BaseEvent);\n        return;\n      case RuntimeEventTypes.TextMessageEnd:\n        emit({\n          type: EventType.TEXT_MESSAGE_END,\n          messageId: event.messageId,\n        } as BaseEvent);\n        return;\n      case RuntimeEventTypes.ActionExecutionStart:\n        step.toolCalls.push({\n          id: event.actionExecutionId,\n          name: event.actionName,\n          args: \"\",\n        });\n        emit({\n          type: EventType.TOOL_CALL_START,\n          toolCallId: event.actionExecutionId,\n          toolCallName: event.actionName,\n          parentMessageId: event.parentMessageId,\n        } as BaseEvent);\n        return;\n      case RuntimeEventTypes.ActionExecutionArgs: {\n        if (!event.args) return;\n        const call = step.toolCalls.find(\n          (c) => c.id === event.actionExecutionId,\n        );\n        if (call) call.args += event.args;\n        emit({\n          type: EventType.TOOL_CALL_ARGS,\n          toolCallId: event.actionExecutionId,\n          delta: event.args,\n        } as BaseEvent);\n        return;\n      }\n      case RuntimeEventTypes.ActionExecutionEnd:\n        emit({\n          type: EventType.TOOL_CALL_END,\n          toolCallId: event.actionExecutionId,\n        } as BaseEvent);\n        return;\n      case RuntimeEventTypes.ActionExecutionResult:\n        step.results.push({\n          toolCallId: event.actionExecutionId,\n          content: event.result,\n        });\n        emit({\n          type: EventType.TOOL_CALL_RESULT,\n          messageId: randomUUID(),\n          toolCallId: event.actionExecutionId,\n          content: event.result,\n        } as BaseEvent);\n        return;\n      case RuntimeEventTypes.RunError:\n        throw new Error(event.message);\n      default:\n        // Agent-state and LangGraph meta events came only from remote agent\n        // endpoints, which do not run through a service adapter.\n        return;\n    }\n  }\n}\n\n/**\n * Parses a tool call's arguments and checks them against `schema`, with the\n * AI SDK's own error, so a failure reads exactly as it does on BuiltInAgent.\n * Returns the validated value (undeclared keys stripped by a Zod schema) or\n * the text of the error result to send back.\n */\nasync function validateToolArgs(\n  call: StepToolCall,\n  schema: FlexibleSchema<unknown> | undefined,\n): Promise<{ value: unknown } | { error: string }> {\n  let args: unknown = {};\n  try {\n    args = call.args ? JSON.parse(call.args) : {};\n  } catch {\n    return {\n      error: `The tool \"${call.name}\" received arguments that are not valid JSON.`,\n    };\n  }\n  const validate = asSchema(schema).validate;\n  if (!validate) return { value: args };\n  const result = await validate(args);\n  // `in`, not `!result.success`: this package compiles with `strict: false`,\n  // which does not narrow on a boolean discriminant.\n  if (\"error\" in result) {\n    const error = new InvalidToolInputError({\n      toolName: call.name,\n      toolInput: call.args,\n      cause: TypeValidationError.wrap({ value: args, cause: result.error }),\n    });\n    return { error: `Error: ${error.message}` };\n  }\n  return { value: result.value };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAgCA,MAAM,YAAY;;AAGlB,MAAM,WAAW,IAAI,IAAI;CAAC;CAAa;CAAU;CAAa;CAAQ;CAAO,CAAC;;;;;;;;;;;;;;;;AAgC9E,IAAa,4BAAb,cAA+C,cAAc;CAM3D,YAAY,AAAiB,gBAAuC;AAClE,SAAO;EADoB;gBAJ4B,EAAE;;CAQ3D,QAAmC;EACjC,MAAM,SAAS,MAAM,OAAO;AAC5B,UAAQ,IAAI,QAAQ,kBAAkB,KAAK,eAAe;AAC1D,SAAO,SAAS,EAAE,GAAG,KAAK,QAAQ;AAClC,SAAO;;;;;;;;CAST,WAAiB;AACf,OAAK,iBAAiB,OAAO;;CAG/B,IAAI,OAA6C;AAC/C,SAAO,IAAI,YAAuB,eAAe;GAC/C,MAAM,aAAa,IAAI,iBAAiB;AACxC,QAAK,kBAAkB;GACvB,MAAM,EAAE,WAAW;GACnB,MAAM,QAAQ,UAAqB;AACjC,QAAI,CAAC,OAAO,QAAS,YAAW,KAAK,MAAM;;GAE7C,MAAM,gBAAgB;AACpB,QAAI,KAAK,oBAAoB,WAC3B,MAAK,kBAAkB;;AAI3B,QAAK,QAAQ,OAAO,MAAM,OAAO,CAAC,WAC1B;AACJ,aAAS;AACT,QAAI,OAAO,SAAS;AAClB,gBAAW,UAAU;AACrB;;AAEF,SAAK;KACH,MAAM,UAAU;KAChB,UAAU,MAAM;KAChB,OAAO,MAAM;KACd,CAAc;AACf,eAAW,UAAU;OAEtB,UAAmB;AAClB,aAAS;AACT,QAAI,OAAO,SAAS;AAClB,gBAAW,UAAU;AACrB;;AAEF,SAAK;KACH,MAAM,UAAU;KAChB,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KAChE,CAAc;AACf,eAAW,MAAM,MAAM;KAE1B;AAED,gBAAa;AACX,eAAW,OAAO;AAClB,aAAS;;IAEX;;CAGJ,MAAc,QACZ,OACA,MACA,QACe;AACf,OAAK;GACH,MAAM,UAAU;GAChB,UAAU,MAAM;GAChB,OAAO,MAAM;GACd,CAAc;EAEf,MAAM,gBAAgB,IAAI,IAAI,MAAM,MAAM,KAAK,SAAS,KAAK,KAAK,CAAC;EACnE,MAAM,8BAAc,IAAI,KAAyB;AACjD,OAAK,MAAM,QAAQ,KAAK,OAAO,SAAS,EAAE,CAExC,KAAI,KAAK,WAAW,CAAC,cAAc,IAAI,KAAK,KAAK,CAC/C,aAAY,IAAI,KAAK,MAAM,KAAK;EAIpC,MAAM,UAAU,CACd,GAAG,MAAM,MAAM,KAAK,UAAU;GAC5B,MAAM,KAAK;GACX,aAAa,KAAK,eAAe;GACjC,YAAY,KAAK,UACf,KAAK,cAAc;IAAE,MAAM;IAAU,YAAY,EAAE;IAAE,CACtD;GACF,EAAE,EACH,GAAI,MAAM,QAAQ,IAChB,CAAC,GAAG,YAAY,QAAQ,CAAC,CAAC,IAAI,OAAO,UAAU;GAC7C,MAAM,KAAK;GACX,aAAa,KAAK,eAAe;GAGjC,YAAY,KAAK,UACf,MAAM,SAAS,KAAK,WAAsC,CACvD,WACJ;GACF,EAAE,CACJ,CACF;EAED,MAAM,WAA0B,EAAE;AAClC,MAAI,MAAM,SAAS,OAIjB,UAAS,KAAK;GACZ,IAAI,YAAY;GAChB,MAAM;GACN,SACE,sCACA,MAAM,QACH,KAAK,QAAQ,GAAG,IAAI,YAAY,KAAK,IAAI,MAAM,IAAI,CACnD,KAAK,GAAG;GACd,CAAC;AAEJ,WAAS,KACP,GAAG,MAAM,SAAS,QAAQ,YAAY,SAAS,IAAI,QAAQ,KAAK,CAAC,CAClE;AAED,OAAK,IAAI,OAAO,GAAG,OAAO,WAAW,QAAQ;GAC3C,MAAM,SAAS,MAAM,KAAK,QAAQ,OAAO,UAAU,SAAS,MAAM,OAAO;AACzE,OAAI,OAAO,QAAS;GAEpB,MAAM,WAAW,IAAI,IAAI,OAAO,QAAQ,KAAK,MAAM,EAAE,WAAW,CAAC;GACjE,MAAM,UAAU,OAAO,UAAU,QAAQ,SAAS,CAAC,SAAS,IAAI,KAAK,GAAG,CAAC;GACzE,MAAM,cAAc,QAAQ,QAAQ,SAAS,YAAY,IAAI,KAAK,KAAK,CAAC;AAExE,OAAI,OAAO,QAAQ,OAAO,UAAU,OAClC,UAAS,KAAK;IACZ,IAAI,OAAO,iBAAiB,YAAY;IACxC,MAAM;IACN,SAAS,OAAO;IAChB,GAAI,OAAO,UAAU,UAAU,EAC7B,WAAW,OAAO,UAAU,KAAK,UAAU;KACzC,IAAI,KAAK;KACT,MAAM;KACN,UAAU;MAAE,MAAM,KAAK;MAAM,WAAW,KAAK,QAAQ;MAAM;KAC5D,EAAE,EACJ;IACF,CAAC;AAEJ,QAAK,MAAM,EAAE,YAAY,aAAa,OAAO,QAC3C,UAAS,KAAK;IAAE,IAAI,YAAY;IAAE,MAAM;IAAQ;IAAY;IAAS,CAAC;GAOxE,MAAM,2BAAW,IAAI,KAAa;AAClC,QAAK,MAAM,QAAQ,SAAS;AAC1B,QAAI,YAAY,IAAI,KAAK,KAAK,CAAE;IAChC,MAAM,OAAO,MAAM,MAAM,MAAM,MAAM,EAAE,SAAS,KAAK,KAAK;AAC1D,QAAI,CAAC,KAAM;IACX,IAAI;AACJ,QAAI;AACF,cAAS,4BAA4B,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO;YACnD;AAEN;;IAEF,MAAM,UAAU,MAAM,iBAAiB,MAAM,OAAO;AACpD,QAAI,WAAW,SAAS;AACtB,cAAS,IAAI,KAAK,GAAG;AACrB,UAAK;MACH,MAAM,UAAU;MAChB,WAAW,YAAY;MACvB,YAAY,KAAK;MACjB,SAAS,QAAQ;MAClB,CAAc;AACf,cAAS,KAAK;MACZ,IAAI,YAAY;MAChB,MAAM;MACN,YAAY,KAAK;MACjB,SAAS,QAAQ;MAClB,CAAC;;;AAIN,QAAK,MAAM,QAAQ,aAAa;AAC9B,QAAI,OAAO,QAAS;IACpB,MAAM,UAAU,MAAM,KAAK,kBACzB,YAAY,IAAI,KAAK,KAAK,EAC1B,KACD;AACD,SAAK;KACH,MAAM,UAAU;KAChB,WAAW,YAAY;KACvB,YAAY,KAAK;KACjB;KACD,CAAc;AACf,aAAS,KAAK;KACZ,IAAI,YAAY;KAChB,MAAM;KACN,YAAY,KAAK;KACjB;KACD,CAAC;;GAMJ,MAAM,eAAe,YAAY,SAAS,SAAS;AACnD,OAAI,CAAC,gBAAgB,iBAAiB,QAAQ,OAC5C;;;CAKN,MAAc,kBACZ,MACA,MACiB;EAMjB,MAAM,UAAU,MAAM,iBACpB,MACA,KAAK,WACN;AACD,MAAI,WAAW,QAAS,QAAO,QAAQ;AACvC,MAAI;GACF,MAAM,SAAS,MAAM,KAAK,QAAS,QAAQ,MAAe;AAC1D,UAAO,OAAO,WAAW,WAAW,SAAS,KAAK,UAAU,UAAU,GAAG;WAClE,OAAO;AACd,UAAO,KAAK,UAAU;IACpB,OAAO;KACL,MAAM;KACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KAChE;IACD,QAAQ;IACT,CAAC;;;;CAKN,MAAc,QACZ,OACA,UACA,SACA,MACA,QACqB;EACrB,IAAI;AAaJ,QAAM,KAAK,eAAe,QAAQ;GAChC,aATkB,EAClB,QAAQ,OACN,aACG;AACH,qBAAiB;MAEpB;GAIC,UAAU,UAAU,SAAiC;GACrD;GACA,UAAU,MAAM;GAChB,OAAO,MAAM;GACd,CAAC;EAEF,MAAM,SAAqB;GAAE,MAAM;GAAI,WAAW,EAAE;GAAE,SAAS,EAAE;GAAE;AACnE,MAAI,CAAC,kBAAkB,OAAO,QAC5B,QAAO;EAGT,MAAM,UAAU,IAAI,oBAAoB,OAAO;EAC/C,MAAM,OAAO,IAAI,SAAe,SAAS,WAAW;AAClD,WAAQ,UAAU;IAChB,OAAO,UAAU;AACf,SAAI;AACF,WAAK,QAAQ,OAAO,QAAQ,KAAK;cAC1B,OAAO;AACd,aAAO,MAAM;;;IAGjB,OAAO;IACP,UAAU;IACX,CAAC;AAGF,UAAO,iBAAiB,eAAe,SAAS,EAAE,EAAE,MAAM,MAAM,CAAC;IACjE;AAEF,iBAAe,QAAQ,CAAC,WAChB,QAAQ,UAAU,GACvB,UAAU,QAAQ,MAAM,MAAM,CAChC;AACD,QAAM;AACN,SAAO;;CAGT,AAAQ,QACN,OACA,MACA,MACM;AACN,UAAQ,MAAM,MAAd;GACE,KAAK,kBAAkB;AACrB,SAAK,kBAAkB,MAAM;AAC7B,SAAK;KACH,MAAM,UAAU;KAChB,WAAW,MAAM;KACjB,MAAM;KACP,CAAc;AACf;GACF,KAAK,kBAAkB;AAErB,QAAI,CAAC,MAAM,QAAS;AACpB,SAAK,QAAQ,MAAM;AACnB,SAAK;KACH,MAAM,UAAU;KAChB,WAAW,MAAM;KACjB,OAAO,MAAM;KACd,CAAc;AACf;GACF,KAAK,kBAAkB;AACrB,SAAK;KACH,MAAM,UAAU;KAChB,WAAW,MAAM;KAClB,CAAc;AACf;GACF,KAAK,kBAAkB;AACrB,SAAK,UAAU,KAAK;KAClB,IAAI,MAAM;KACV,MAAM,MAAM;KACZ,MAAM;KACP,CAAC;AACF,SAAK;KACH,MAAM,UAAU;KAChB,YAAY,MAAM;KAClB,cAAc,MAAM;KACpB,iBAAiB,MAAM;KACxB,CAAc;AACf;GACF,KAAK,kBAAkB,qBAAqB;AAC1C,QAAI,CAAC,MAAM,KAAM;IACjB,MAAM,OAAO,KAAK,UAAU,MACzB,MAAM,EAAE,OAAO,MAAM,kBACvB;AACD,QAAI,KAAM,MAAK,QAAQ,MAAM;AAC7B,SAAK;KACH,MAAM,UAAU;KAChB,YAAY,MAAM;KAClB,OAAO,MAAM;KACd,CAAc;AACf;;GAEF,KAAK,kBAAkB;AACrB,SAAK;KACH,MAAM,UAAU;KAChB,YAAY,MAAM;KACnB,CAAc;AACf;GACF,KAAK,kBAAkB;AACrB,SAAK,QAAQ,KAAK;KAChB,YAAY,MAAM;KAClB,SAAS,MAAM;KAChB,CAAC;AACF,SAAK;KACH,MAAM,UAAU;KAChB,WAAW,YAAY;KACvB,YAAY,MAAM;KAClB,SAAS,MAAM;KAChB,CAAc;AACf;GACF,KAAK,kBAAkB,SACrB,OAAM,IAAI,MAAM,MAAM,QAAQ;GAChC,QAGE;;;;;;;;;;AAWR,eAAe,iBACb,MACA,QACiD;CACjD,IAAI,OAAgB,EAAE;AACtB,KAAI;AACF,SAAO,KAAK,OAAO,KAAK,MAAM,KAAK,KAAK,GAAG,EAAE;SACvC;AACN,SAAO,EACL,OAAO,aAAa,KAAK,KAAK,gDAC/B;;CAEH,MAAM,WAAW,SAAS,OAAO,CAAC;AAClC,KAAI,CAAC,SAAU,QAAO,EAAE,OAAO,MAAM;CACrC,MAAM,SAAS,MAAM,SAAS,KAAK;AAGnC,KAAI,WAAW,OAMb,QAAO,EAAE,OAAO,UALF,IAAI,sBAAsB;EACtC,UAAU,KAAK;EACf,WAAW,KAAK;EAChB,OAAO,oBAAoB,KAAK;GAAE,OAAO;GAAM,OAAO,OAAO;GAAO,CAAC;EACtE,CAAC,CAC8B,WAAW;AAE7C,QAAO,EAAE,OAAO,OAAO,OAAO"}

package/dist/lib/runtime/mcp-client-cache.cjs

@@ -1,135 +0,0 @@
-require("reflect-metadata");
-
-//#region src/v1-deprecated/lib/runtime/mcp-client-cache.ts
-/**
-* Cap on live MCP connections. Reached only by runtimes whose endpoint config
-* varies per request — a static `mcpServers` list occupies one slot per
-* server for the life of the process.
-*/
-const MAX_ENTRIES = 100;
-const cache = /* @__PURE__ */ new Map();
-/**
-* A form of the endpoint that is safe to write to application logs.
-*
-* Both halves of an endpoint URL can carry a secret: userinfo, and the query
-* string — the #2407 reporter's own workaround appended `?uid=<hash of the
-* API key>`. Only the origin and path survive.
-*
-* Used for anything that leaves this process with an endpoint in it: log
-* lines, and the tool descriptions that go to the model provider.
-*/
-function describeEndpoint(endpoint) {
-	if (!endpoint) return "an MCP endpoint";
-	try {
-		const url = new URL(endpoint);
-		return `${url.protocol}//${url.host}${url.pathname}`;
-	} catch {
-		return "an MCP endpoint";
-	}
-}
-/**
-* Identity for a `createMCPClient` implementation.
-*
-* Two runtimes that pass the same factory may share a connection. Two that
-* pass different factories must not: the second runtime's factory could wrap
-* the transport, add auth, or point somewhere else entirely, and handing it a
-* client built by the first would silently bypass all of that.
-*/
-const factoryIds = /* @__PURE__ */ new WeakMap();
-let nextFactoryId = 0;
-function factoryId(factory) {
-	let id = factoryIds.get(factory);
-	if (!id) {
-		id = `f${++nextFactoryId}`;
-		factoryIds.set(factory, id);
-	}
-	return id;
-}
-/**
-* Deterministic serialization of an endpoint config, so that two configs that
-* differ only in key order produce one cache entry, and two that differ in
-* `apiKey` produce two.
-*/
-function stableStringify(value) {
-	if (value === null || typeof value !== "object") return JSON.stringify(value) ?? "null";
-	if (Array.isArray(value)) return `[${value.map(stableStringify).join(",")}]`;
-	return `{${Object.entries(value).filter(([, v]) => typeof v !== "function" && v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(",")}}`;
-}
-function mcpCacheKey(createMCPClient, config) {
-	return `${factoryId(createMCPClient)}::${stableStringify(config)}`;
-}
-async function closeQuietly(client, label) {
-	try {
-		await client.close?.();
-	} catch (error) {
-		console.error(`MCP: Failed to close the client for ${label}:`, error);
-	}
-}
-/** Drop the least recently used entries until the cache is within its cap. */
-async function evictDownToCap() {
-	while (cache.size > MAX_ENTRIES) {
-		const oldestKey = cache.keys().next().value;
-		if (oldestKey === void 0) return;
-		const evicted = cache.get(oldestKey);
-		cache.delete(oldestKey);
-		if (!evicted) continue;
-		try {
-			const entry = await evicted.entry;
-			if (entry) await closeQuietly(entry.client, evicted.label);
-		} catch {}
-	}
-}
-/**
-* Return the cached connection for this factory and config, creating it on
-* first use.
-*
-* A rejected creation is removed rather than cached, so a server that was
-* briefly unreachable is retried on the next request instead of staying
-* toolless for the life of the process.
-*/
-function resolveMCPEntry(createMCPClient, config, build) {
-	const key = mcpCacheKey(createMCPClient, config);
-	const hit = cache.get(key);
-	if (hit) {
-		cache.delete(key);
-		cache.set(key, hit);
-		return hit.entry;
-	}
-	const slot = {
-		label: describeEndpoint(config?.endpoint),
-		entry: void 0
-	};
-	const created = build().catch((error) => {
-		if (cache.get(key) === slot) cache.delete(key);
-		throw error;
-	});
-	slot.entry = created;
-	cache.set(key, slot);
-	evictDownToCap();
-	return created;
-}
-/**
-* Mark an entry as recently used.
-*
-* Without this, an entry's position is set once, when the agent resolves, and
-* a run that is actively calling tools still ages toward eviction — so a busy
-* process can close a connection out from under a live run. Tool execution is
-* the only signal available that a connection is still wanted: the v1 runtime
-* has no reliable end-of-run hook to lease against (an abandoned SSE run never
-* fires one), so a lease taken at resolution could never be released.
-*
-* A no-op when the key is gone, which is the already-evicted case.
-*/
-function touchMCPEntry(createMCPClient, config) {
-	const key = mcpCacheKey(createMCPClient, config);
-	const slot = cache.get(key);
-	if (!slot) return;
-	cache.delete(key);
-	cache.set(key, slot);
-}
-
-//#endregion
-exports.describeEndpoint = describeEndpoint;
-exports.resolveMCPEntry = resolveMCPEntry;
-exports.touchMCPEntry = touchMCPEntry;
-//# sourceMappingURL=mcp-client-cache.cjs.map

package/dist/lib/runtime/mcp-client-cache.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-client-cache.cjs","names":[],"sources":["../../../../src/v1-deprecated/lib/runtime/mcp-client-cache.ts"],"sourcesContent":["/*\n * V1 SDK DEPRECATED. USE V2 INSTEAD\n *\n * Internal helper for the v1 CopilotRuntime shim. Not exported from the\n * package. The v2 path builds its MCP clients per run in `agent/index.ts`.\n *\n * END V1 SDK DEPRECATED. USE V2 INSTEAD NOTICE\n */\n\nimport type { MCPClient, MCPEndpointConfig } from \"./mcp-tools-utils\";\n\n/**\n * One cached MCP connection and the tool definitions built from it.\n *\n * The tool definitions close over `tool.execute` on this exact client, so the\n * two share a lifetime: dropping the entry has to close the client, and\n * closing the client has to drop the tools.\n */\nexport interface MCPCacheEntry<TTools> {\n  client: MCPClient;\n  tools: TTools;\n}\n\n/**\n * Cap on live MCP connections. Reached only by runtimes whose endpoint config\n * varies per request — a static `mcpServers` list occupies one slot per\n * server for the life of the process.\n */\nconst MAX_ENTRIES = 100;\n\n/**\n * Process-wide, not per runtime instance.\n *\n * The documented per-request pattern builds `new CopilotRuntime(...)` inside\n * the request handler, so a cache owned by the instance is a fresh cache on\n * every request: one connection per HTTP request, never closed. Keying the\n * cache on the client factory plus the endpoint config instead means those\n * runtimes share the connection they would otherwise re-open, and the entry\n * count is bounded by the number of distinct credentials in play rather than\n * by traffic.\n *\n * The slot carries a redacted endpoint label beside the connection. The cache\n * *key* cannot be used for that: it contains the serialized config, and the\n * config contains `apiKey`.\n */\ninterface MCPCacheSlot {\n  /** Safe to log. See `describeEndpoint`. */\n  label: string;\n  entry: Promise<MCPCacheEntry<unknown>>;\n}\n\nconst cache = new Map<string, MCPCacheSlot>();\n\n/**\n * A form of the endpoint that is safe to write to application logs.\n *\n * Both halves of an endpoint URL can carry a secret: userinfo, and the query\n * string — the #2407 reporter's own workaround appended `?uid=<hash of the\n * API key>`. Only the origin and path survive.\n *\n * Used for anything that leaves this process with an endpoint in it: log\n * lines, and the tool descriptions that go to the model provider.\n */\nexport function describeEndpoint(endpoint: string | undefined): string {\n  if (!endpoint) return \"an MCP endpoint\";\n  try {\n    const url = new URL(endpoint);\n    // Not `url.origin`: for any scheme other than http(s) that is the opaque\n    // origin, the literal string \"null\", and `pathname` is empty — so a\n    // `stdio://` endpoint would render as \"null\" in a log and in a prompt.\n    // Rebuilding from protocol and host keeps every scheme legible while\n    // still dropping userinfo, query, and fragment.\n    return `${url.protocol}//${url.host}${url.pathname}`;\n  } catch {\n    return \"an MCP endpoint\";\n  }\n}\n\n/**\n * Identity for a `createMCPClient` implementation.\n *\n * Two runtimes that pass the same factory may share a connection. Two that\n * pass different factories must not: the second runtime's factory could wrap\n * the transport, add auth, or point somewhere else entirely, and handing it a\n * client built by the first would silently bypass all of that.\n */\nconst factoryIds = new WeakMap<object, string>();\nlet nextFactoryId = 0;\n\nfunction factoryId(factory: object): string {\n  let id = factoryIds.get(factory);\n  if (!id) {\n    id = `f${++nextFactoryId}`;\n    factoryIds.set(factory, id);\n  }\n  return id;\n}\n\n/**\n * Deterministic serialization of an endpoint config, so that two configs that\n * differ only in key order produce one cache entry, and two that differ in\n * `apiKey` produce two.\n */\nfunction stableStringify(value: unknown): string {\n  if (value === null || typeof value !== \"object\") {\n    return JSON.stringify(value) ?? \"null\";\n  }\n  if (Array.isArray(value)) {\n    return `[${value.map(stableStringify).join(\",\")}]`;\n  }\n  const entries = Object.entries(value as Record<string, unknown>)\n    .filter(([, v]) => typeof v !== \"function\" && v !== undefined)\n    .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))\n    .map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`);\n  return `{${entries.join(\",\")}}`;\n}\n\nexport function mcpCacheKey(\n  createMCPClient: object,\n  config: MCPEndpointConfig,\n): string {\n  return `${factoryId(createMCPClient)}::${stableStringify(config)}`;\n}\n\nasync function closeQuietly(client: MCPClient, label: string) {\n  try {\n    await client.close?.();\n  } catch (error) {\n    console.error(`MCP: Failed to close the client for ${label}:`, error);\n  }\n}\n\n/** Drop the least recently used entries until the cache is within its cap. */\nasync function evictDownToCap() {\n  while (cache.size > MAX_ENTRIES) {\n    const oldestKey = cache.keys().next().value as string | undefined;\n    if (oldestKey === undefined) return;\n    const evicted = cache.get(oldestKey);\n    cache.delete(oldestKey);\n    if (!evicted) continue;\n    try {\n      const entry = await evicted.entry;\n      if (entry) await closeQuietly(entry.client, evicted.label);\n    } catch {\n      // A rejected entry has nothing to close.\n    }\n  }\n}\n\n/**\n * Return the cached connection for this factory and config, creating it on\n * first use.\n *\n * A rejected creation is removed rather than cached, so a server that was\n * briefly unreachable is retried on the next request instead of staying\n * toolless for the life of the process.\n */\nexport function resolveMCPEntry<TTools>(\n  createMCPClient: object,\n  config: MCPEndpointConfig,\n  build: () => Promise<MCPCacheEntry<TTools>>,\n): Promise<MCPCacheEntry<TTools>> {\n  const key = mcpCacheKey(createMCPClient, config);\n  const hit = cache.get(key);\n  if (hit) {\n    // Re-insert so that Map iteration order stays least-recently-used first.\n    cache.delete(key);\n    cache.set(key, hit);\n    return hit.entry as Promise<MCPCacheEntry<TTools>>;\n  }\n\n  const slot: MCPCacheSlot = {\n    label: describeEndpoint(config?.endpoint),\n    // Assigned below; `build()` cannot run before the slot exists, because the\n    // rejection handler compares against it.\n    entry: undefined as unknown as Promise<MCPCacheEntry<unknown>>,\n  };\n\n  const created = build().catch((error: unknown) => {\n    // Only drop our own slot. Eviction can remove this key while `build()` is\n    // still in flight, and a later request can insert a replacement under it;\n    // an unconditional delete would evict that replacement and leave its\n    // client live but outside cache cleanup, which is the leak this file\n    // exists to prevent.\n    if (cache.get(key) === slot) {\n      cache.delete(key);\n    }\n    throw error;\n  });\n\n  slot.entry = created as Promise<MCPCacheEntry<unknown>>;\n  cache.set(key, slot);\n  void evictDownToCap();\n  return created;\n}\n\n/**\n * Mark an entry as recently used.\n *\n * Without this, an entry's position is set once, when the agent resolves, and\n * a run that is actively calling tools still ages toward eviction — so a busy\n * process can close a connection out from under a live run. Tool execution is\n * the only signal available that a connection is still wanted: the v1 runtime\n * has no reliable end-of-run hook to lease against (an abandoned SSE run never\n * fires one), so a lease taken at resolution could never be released.\n *\n * A no-op when the key is gone, which is the already-evicted case.\n */\nexport function touchMCPEntry(\n  createMCPClient: object,\n  config: MCPEndpointConfig,\n): void {\n  const key = mcpCacheKey(createMCPClient, config);\n  const slot = cache.get(key);\n  if (!slot) return;\n  cache.delete(key);\n  cache.set(key, slot);\n}\n\n/** Test seam: close and forget every cached connection. */\nexport async function __resetMCPClientCache() {\n  const slots = Array.from(cache.values());\n  cache.clear();\n  await Promise.all(\n    slots.map(async (slot) => {\n      try {\n        const entry = await slot.entry;\n        await closeQuietly(entry.client, slot.label);\n      } catch {\n        // Nothing to close.\n      }\n    }),\n  );\n}\n\n/** Test seam: how many connections are live. */\nexport function __mcpClientCacheSize() {\n  return cache.size;\n}\n"],"mappings":";;;;;;;;AA4BA,MAAM,cAAc;AAuBpB,MAAM,wBAAQ,IAAI,KAA2B;;;;;;;;;;;AAY7C,SAAgB,iBAAiB,UAAsC;AACrE,KAAI,CAAC,SAAU,QAAO;AACtB,KAAI;EACF,MAAM,MAAM,IAAI,IAAI,SAAS;AAM7B,SAAO,GAAG,IAAI,SAAS,IAAI,IAAI,OAAO,IAAI;SACpC;AACN,SAAO;;;;;;;;;;;AAYX,MAAM,6BAAa,IAAI,SAAyB;AAChD,IAAI,gBAAgB;AAEpB,SAAS,UAAU,SAAyB;CAC1C,IAAI,KAAK,WAAW,IAAI,QAAQ;AAChC,KAAI,CAAC,IAAI;AACP,OAAK,IAAI,EAAE;AACX,aAAW,IAAI,SAAS,GAAG;;AAE7B,QAAO;;;;;;;AAQT,SAAS,gBAAgB,OAAwB;AAC/C,KAAI,UAAU,QAAQ,OAAO,UAAU,SACrC,QAAO,KAAK,UAAU,MAAM,IAAI;AAElC,KAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,IAAI,MAAM,IAAI,gBAAgB,CAAC,KAAK,IAAI,CAAC;AAMlD,QAAO,IAJS,OAAO,QAAQ,MAAiC,CAC7D,QAAQ,GAAG,OAAO,OAAO,MAAM,cAAc,MAAM,OAAU,CAC7D,MAAM,CAAC,IAAI,CAAC,OAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,EAAG,CAChD,KAAK,CAAC,GAAG,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAC7C,KAAK,IAAI,CAAC;;AAG/B,SAAgB,YACd,iBACA,QACQ;AACR,QAAO,GAAG,UAAU,gBAAgB,CAAC,IAAI,gBAAgB,OAAO;;AAGlE,eAAe,aAAa,QAAmB,OAAe;AAC5D,KAAI;AACF,QAAM,OAAO,SAAS;UACf,OAAO;AACd,UAAQ,MAAM,uCAAuC,MAAM,IAAI,MAAM;;;;AAKzE,eAAe,iBAAiB;AAC9B,QAAO,MAAM,OAAO,aAAa;EAC/B,MAAM,YAAY,MAAM,MAAM,CAAC,MAAM,CAAC;AACtC,MAAI,cAAc,OAAW;EAC7B,MAAM,UAAU,MAAM,IAAI,UAAU;AACpC,QAAM,OAAO,UAAU;AACvB,MAAI,CAAC,QAAS;AACd,MAAI;GACF,MAAM,QAAQ,MAAM,QAAQ;AAC5B,OAAI,MAAO,OAAM,aAAa,MAAM,QAAQ,QAAQ,MAAM;UACpD;;;;;;;;;;;AAcZ,SAAgB,gBACd,iBACA,QACA,OACgC;CAChC,MAAM,MAAM,YAAY,iBAAiB,OAAO;CAChD,MAAM,MAAM,MAAM,IAAI,IAAI;AAC1B,KAAI,KAAK;AAEP,QAAM,OAAO,IAAI;AACjB,QAAM,IAAI,KAAK,IAAI;AACnB,SAAO,IAAI;;CAGb,MAAM,OAAqB;EACzB,OAAO,iBAAiB,QAAQ,SAAS;EAGzC,OAAO;EACR;CAED,MAAM,UAAU,OAAO,CAAC,OAAO,UAAmB;AAMhD,MAAI,MAAM,IAAI,IAAI,KAAK,KACrB,OAAM,OAAO,IAAI;AAEnB,QAAM;GACN;AAEF,MAAK,QAAQ;AACb,OAAM,IAAI,KAAK,KAAK;AACpB,CAAK,gBAAgB;AACrB,QAAO;;;;;;;;;;;;;;AAeT,SAAgB,cACd,iBACA,QACM;CACN,MAAM,MAAM,YAAY,iBAAiB,OAAO;CAChD,MAAM,OAAO,MAAM,IAAI,IAAI;AAC3B,KAAI,CAAC,KAAM;AACX,OAAM,OAAO,IAAI;AACjB,OAAM,IAAI,KAAK,KAAK"}