@copilotkit/runtime 2.0.0-next.1 → 2.0.0-rc.0

package/dist/runtime/intelligence-platform/skill-registry/snapshot.mjs

@@ -0,0 +1,91 @@
+import { LearnedSkillsError } from "../learned-skills.mjs";
+import { invalidSnapshot } from "./errors.mjs";
+import { MAX_SNAPSHOT_BYTES, readArchive, safeRelativePath } from "./archive.mjs";
+import { createHash } from "node:crypto";
+
+//#region src/runtime/intelligence-platform/skill-registry/snapshot.ts
+function object(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function sha256(bytes) {
+	return createHash("sha256").update(bytes).digest("hex");
+}
+function utf8(bytes) {
+	try {
+		return new TextDecoder("utf-8", {
+			fatal: true,
+			ignoreBOM: true
+		}).decode(bytes);
+	} catch {
+		return;
+	}
+}
+/** Validate a replacement fully before it can become an invocation snapshot. */
+async function validateSnapshot(response, signal) {
+	try {
+		if (!object(response) || !(response.bytes instanceof Uint8Array) || typeof response.revision !== "string" || typeof response.etag !== "string" || typeof response.contentType !== "string") throw invalidSnapshot();
+		const { revision, etag, contentType } = response;
+		if (response.status !== "snapshot" || response.bytes.byteLength > MAX_SNAPSHOT_BYTES || contentType.split(";", 1)[0]?.trim().toLowerCase() !== "application/zip" || !revision || !/^"[a-f0-9]{64}"$/.test(etag)) throw invalidSnapshot();
+		const bytes = Buffer.from(response.bytes);
+		if (`"${sha256(bytes)}"` !== etag) throw invalidSnapshot();
+		const archive = await readArchive(bytes, signal);
+		const manifestBytes = archive.get("manifest.json");
+		if (!manifestBytes) throw invalidSnapshot();
+		const decoded = utf8(manifestBytes);
+		if (decoded === void 0) throw invalidSnapshot();
+		const manifest = JSON.parse(decoded);
+		if (!object(manifest)) throw invalidSnapshot();
+		if (typeof manifest.schemaVersion === "number" && manifest.schemaVersion !== 1) throw new LearnedSkillsError("UNSUPPORTED_SERVER", false);
+		if (manifest.schemaVersion !== 1 || manifest.revision !== revision || !Array.isArray(manifest.skills)) throw invalidSnapshot();
+		const expected = new Set(["manifest.json"]);
+		let previousName;
+		const skills = [];
+		for (const skill of manifest.skills) {
+			if (!object(skill) || typeof skill.name !== "string" || !safeRelativePath(skill.name) || skill.name.includes("/") || previousName !== void 0 && Buffer.compare(Buffer.from(previousName), Buffer.from(skill.name)) >= 0 || typeof skill.description !== "string" || !Array.isArray(skill.files)) throw invalidSnapshot();
+			previousName = skill.name;
+			let previousPath;
+			let hasSkill = false;
+			const files = [];
+			for (const file of skill.files) {
+				if (!object(file) || typeof file.path !== "string" || !safeRelativePath(file.path) || previousPath !== void 0 && Buffer.compare(Buffer.from(previousPath), Buffer.from(file.path)) >= 0 || typeof file.size !== "number" || !Number.isSafeInteger(file.size) || file.size < 0 || typeof file.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(file.sha256)) throw invalidSnapshot();
+				previousPath = file.path;
+				const path = `${skill.name}/${file.path}`;
+				if (expected.has(path)) throw invalidSnapshot();
+				expected.add(path);
+				const content = archive.get(path);
+				if (!content || content.length !== file.size || sha256(content) !== file.sha256) throw invalidSnapshot();
+				const text = utf8(content);
+				if (file.path === "SKILL.md") {
+					if (text === void 0) throw invalidSnapshot();
+					hasSkill = true;
+				}
+				files.push(Object.freeze({
+					path: file.path,
+					size: file.size,
+					sha256: file.sha256,
+					...text !== void 0 ? { text } : {}
+				}));
+			}
+			if (!hasSkill) throw invalidSnapshot();
+			skills.push(Object.freeze({
+				name: skill.name,
+				description: skill.description,
+				files: Object.freeze(files)
+			}));
+		}
+		if (expected.size !== archive.size || [...archive.keys()].some((path) => !expected.has(path))) throw invalidSnapshot();
+		return Object.freeze({
+			revision,
+			etag,
+			skills: Object.freeze(skills)
+		});
+	} catch (error) {
+		if (signal?.aborted) throw signal.reason;
+		if (error instanceof LearnedSkillsError) throw error;
+		throw invalidSnapshot(error);
+	}
+}
+
+//#endregion
+export { validateSnapshot };
+//# sourceMappingURL=snapshot.mjs.map

package/dist/runtime/intelligence-platform/skill-registry/snapshot.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.mjs","names":["SkillDeliveryError"],"sources":["../../../../src/runtime/intelligence-platform/skill-registry/snapshot.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { LearnedSkillsSnapshotResult } from \"../learned-skills\";\nimport { SkillDeliveryError, invalidSnapshot } from \"./errors\";\nimport { MAX_SNAPSHOT_BYTES, readArchive, safeRelativePath } from \"./archive\";\n\nexport interface SnapshotFile {\n  readonly path: string;\n  readonly size: number;\n  readonly sha256: string;\n  /** Absent for supporting resources that cannot be decoded as UTF-8 text. */\n  readonly text?: string;\n}\nexport interface SnapshotSkill {\n  readonly name: string;\n  readonly description: string;\n  readonly files: readonly SnapshotFile[];\n}\nexport interface VerifiedSnapshot {\n  readonly revision: string;\n  readonly etag: string;\n  readonly skills: readonly SnapshotSkill[];\n}\n\nfunction object(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\nfunction sha256(bytes: Uint8Array): string {\n  return createHash(\"sha256\").update(bytes).digest(\"hex\");\n}\nfunction utf8(bytes: Uint8Array): string | undefined {\n  try {\n    return new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true }).decode(\n      bytes,\n    );\n  } catch {\n    return undefined;\n  }\n}\n\n/** Validate a replacement fully before it can become an invocation snapshot. */\nexport async function validateSnapshot(\n  response: Extract<LearnedSkillsSnapshotResult, { status: \"snapshot\" }>,\n  signal?: AbortSignal,\n): Promise<VerifiedSnapshot> {\n  try {\n    if (\n      !object(response) ||\n      !(response.bytes instanceof Uint8Array) ||\n      typeof response.revision !== \"string\" ||\n      typeof response.etag !== \"string\" ||\n      typeof response.contentType !== \"string\"\n    )\n      throw invalidSnapshot();\n    const { revision, etag, contentType } = response;\n    if (\n      response.status !== \"snapshot\" ||\n      response.bytes.byteLength > MAX_SNAPSHOT_BYTES ||\n      contentType.split(\";\", 1)[0]?.trim().toLowerCase() !==\n        \"application/zip\" ||\n      !revision ||\n      !/^\"[a-f0-9]{64}\"$/.test(etag)\n    )\n      throw invalidSnapshot();\n    // Own the bytes before asynchronous decompression so an injected client\n    // cannot mutate an in-flight replacement after its digest is checked.\n    const bytes = Buffer.from(response.bytes);\n    if (`\"${sha256(bytes)}\"` !== etag) throw invalidSnapshot();\n    const archive = await readArchive(bytes, signal);\n    const manifestBytes = archive.get(\"manifest.json\");\n    if (!manifestBytes) throw invalidSnapshot();\n    const decoded = utf8(manifestBytes);\n    if (decoded === undefined) throw invalidSnapshot();\n    const manifest: unknown = JSON.parse(decoded);\n    if (!object(manifest)) throw invalidSnapshot();\n    if (\n      typeof manifest.schemaVersion === \"number\" &&\n      manifest.schemaVersion !== 1\n    )\n      throw new SkillDeliveryError(\"UNSUPPORTED_SERVER\", false);\n    if (\n      manifest.schemaVersion !== 1 ||\n      manifest.revision !== revision ||\n      !Array.isArray(manifest.skills)\n    )\n      throw invalidSnapshot();\n    const expected = new Set([\"manifest.json\"]);\n    let previousName: string | undefined;\n    const skills: SnapshotSkill[] = [];\n    for (const skill of manifest.skills) {\n      if (\n        !object(skill) ||\n        typeof skill.name !== \"string\" ||\n        !safeRelativePath(skill.name) ||\n        skill.name.includes(\"/\") ||\n        (previousName !== undefined &&\n          Buffer.compare(Buffer.from(previousName), Buffer.from(skill.name)) >=\n            0) ||\n        typeof skill.description !== \"string\" ||\n        !Array.isArray(skill.files)\n      )\n        throw invalidSnapshot();\n      previousName = skill.name;\n      let previousPath: string | undefined;\n      let hasSkill = false;\n      const files: SnapshotFile[] = [];\n      for (const file of skill.files) {\n        if (\n          !object(file) ||\n          typeof file.path !== \"string\" ||\n          !safeRelativePath(file.path) ||\n          (previousPath !== undefined &&\n            Buffer.compare(Buffer.from(previousPath), Buffer.from(file.path)) >=\n              0) ||\n          typeof file.size !== \"number\" ||\n          !Number.isSafeInteger(file.size) ||\n          file.size < 0 ||\n          typeof file.sha256 !== \"string\" ||\n          !/^[a-f0-9]{64}$/.test(file.sha256)\n        )\n          throw invalidSnapshot();\n        previousPath = file.path;\n        const path = `${skill.name}/${file.path}`;\n        if (expected.has(path)) throw invalidSnapshot();\n        expected.add(path);\n        const content = archive.get(path);\n        if (\n          !content ||\n          content.length !== file.size ||\n          sha256(content) !== file.sha256\n        )\n          throw invalidSnapshot();\n        const text = utf8(content);\n        if (file.path === \"SKILL.md\") {\n          if (text === undefined) throw invalidSnapshot();\n          hasSkill = true;\n        }\n        files.push(\n          Object.freeze({\n            path: file.path,\n            size: file.size,\n            sha256: file.sha256,\n            ...(text !== undefined ? { text } : {}),\n          }),\n        );\n      }\n      if (!hasSkill) throw invalidSnapshot();\n      skills.push(\n        Object.freeze({\n          name: skill.name,\n          description: skill.description,\n          files: Object.freeze(files),\n        }),\n      );\n    }\n    if (\n      expected.size !== archive.size ||\n      [...archive.keys()].some((path) => !expected.has(path))\n    )\n      throw invalidSnapshot();\n    return Object.freeze({\n      revision: revision,\n      etag: etag,\n      skills: Object.freeze(skills),\n    });\n  } catch (error) {\n    if (signal?.aborted) throw signal.reason;\n    if (error instanceof SkillDeliveryError) throw error;\n    throw invalidSnapshot(error);\n  }\n}\n"],"mappings":";;;;;;AAuBA,SAAS,OAAO,OAAkD;AAChE,QAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM;;AAE7E,SAAS,OAAO,OAA2B;AACzC,QAAO,WAAW,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;AAEzD,SAAS,KAAK,OAAuC;AACnD,KAAI;AACF,SAAO,IAAI,YAAY,SAAS;GAAE,OAAO;GAAM,WAAW;GAAM,CAAC,CAAC,OAChE,MACD;SACK;AACN;;;;AAKJ,eAAsB,iBACpB,UACA,QAC2B;AAC3B,KAAI;AACF,MACE,CAAC,OAAO,SAAS,IACjB,EAAE,SAAS,iBAAiB,eAC5B,OAAO,SAAS,aAAa,YAC7B,OAAO,SAAS,SAAS,YACzB,OAAO,SAAS,gBAAgB,SAEhC,OAAM,iBAAiB;EACzB,MAAM,EAAE,UAAU,MAAM,gBAAgB;AACxC,MACE,SAAS,WAAW,cACpB,SAAS,MAAM,aAAa,sBAC5B,YAAY,MAAM,KAAK,EAAE,CAAC,IAAI,MAAM,CAAC,aAAa,KAChD,qBACF,CAAC,YACD,CAAC,mBAAmB,KAAK,KAAK,CAE9B,OAAM,iBAAiB;EAGzB,MAAM,QAAQ,OAAO,KAAK,SAAS,MAAM;AACzC,MAAI,IAAI,OAAO,MAAM,CAAC,OAAO,KAAM,OAAM,iBAAiB;EAC1D,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO;EAChD,MAAM,gBAAgB,QAAQ,IAAI,gBAAgB;AAClD,MAAI,CAAC,cAAe,OAAM,iBAAiB;EAC3C,MAAM,UAAU,KAAK,cAAc;AACnC,MAAI,YAAY,OAAW,OAAM,iBAAiB;EAClD,MAAM,WAAoB,KAAK,MAAM,QAAQ;AAC7C,MAAI,CAAC,OAAO,SAAS,CAAE,OAAM,iBAAiB;AAC9C,MACE,OAAO,SAAS,kBAAkB,YAClC,SAAS,kBAAkB,EAE3B,OAAM,IAAIA,mBAAmB,sBAAsB,MAAM;AAC3D,MACE,SAAS,kBAAkB,KAC3B,SAAS,aAAa,YACtB,CAAC,MAAM,QAAQ,SAAS,OAAO,CAE/B,OAAM,iBAAiB;EACzB,MAAM,WAAW,IAAI,IAAI,CAAC,gBAAgB,CAAC;EAC3C,IAAI;EACJ,MAAM,SAA0B,EAAE;AAClC,OAAK,MAAM,SAAS,SAAS,QAAQ;AACnC,OACE,CAAC,OAAO,MAAM,IACd,OAAO,MAAM,SAAS,YACtB,CAAC,iBAAiB,MAAM,KAAK,IAC7B,MAAM,KAAK,SAAS,IAAI,IACvB,iBAAiB,UAChB,OAAO,QAAQ,OAAO,KAAK,aAAa,EAAE,OAAO,KAAK,MAAM,KAAK,CAAC,IAChE,KACJ,OAAO,MAAM,gBAAgB,YAC7B,CAAC,MAAM,QAAQ,MAAM,MAAM,CAE3B,OAAM,iBAAiB;AACzB,kBAAe,MAAM;GACrB,IAAI;GACJ,IAAI,WAAW;GACf,MAAM,QAAwB,EAAE;AAChC,QAAK,MAAM,QAAQ,MAAM,OAAO;AAC9B,QACE,CAAC,OAAO,KAAK,IACb,OAAO,KAAK,SAAS,YACrB,CAAC,iBAAiB,KAAK,KAAK,IAC3B,iBAAiB,UAChB,OAAO,QAAQ,OAAO,KAAK,aAAa,EAAE,OAAO,KAAK,KAAK,KAAK,CAAC,IAC/D,KACJ,OAAO,KAAK,SAAS,YACrB,CAAC,OAAO,cAAc,KAAK,KAAK,IAChC,KAAK,OAAO,KACZ,OAAO,KAAK,WAAW,YACvB,CAAC,iBAAiB,KAAK,KAAK,OAAO,CAEnC,OAAM,iBAAiB;AACzB,mBAAe,KAAK;IACpB,MAAM,OAAO,GAAG,MAAM,KAAK,GAAG,KAAK;AACnC,QAAI,SAAS,IAAI,KAAK,CAAE,OAAM,iBAAiB;AAC/C,aAAS,IAAI,KAAK;IAClB,MAAM,UAAU,QAAQ,IAAI,KAAK;AACjC,QACE,CAAC,WACD,QAAQ,WAAW,KAAK,QACxB,OAAO,QAAQ,KAAK,KAAK,OAEzB,OAAM,iBAAiB;IACzB,MAAM,OAAO,KAAK,QAAQ;AAC1B,QAAI,KAAK,SAAS,YAAY;AAC5B,SAAI,SAAS,OAAW,OAAM,iBAAiB;AAC/C,gBAAW;;AAEb,UAAM,KACJ,OAAO,OAAO;KACZ,MAAM,KAAK;KACX,MAAM,KAAK;KACX,QAAQ,KAAK;KACb,GAAI,SAAS,SAAY,EAAE,MAAM,GAAG,EAAE;KACvC,CAAC,CACH;;AAEH,OAAI,CAAC,SAAU,OAAM,iBAAiB;AACtC,UAAO,KACL,OAAO,OAAO;IACZ,MAAM,MAAM;IACZ,aAAa,MAAM;IACnB,OAAO,OAAO,OAAO,MAAM;IAC5B,CAAC,CACH;;AAEH,MACE,SAAS,SAAS,QAAQ,QAC1B,CAAC,GAAG,QAAQ,MAAM,CAAC,CAAC,MAAM,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,CAEvD,OAAM,iBAAiB;AACzB,SAAO,OAAO,OAAO;GACT;GACJ;GACN,QAAQ,OAAO,OAAO,OAAO;GAC9B,CAAC;UACK,OAAO;AACd,MAAI,QAAQ,QAAS,OAAM,OAAO;AAClC,MAAI,iBAAiBA,mBAAoB,OAAM;AAC/C,QAAM,gBAAgB,MAAM"}

package/dist/runtime/intelligence-platform/thread-lock-heartbeat.cjs

@@ -0,0 +1,142 @@
+const require_runtime = require('../../_virtual/_rolldown/runtime.cjs');
+const require_client = require('./client.cjs');
+let _copilotkit_shared = require("@copilotkit/shared");
+
+//#region src/runtime/intelligence-platform/thread-lock-heartbeat.ts
+/** Delay before the first retry of a failed renewal; doubles per attempt. */
+const INITIAL_RETRY_DELAY_MS = 1e3;
+/** Upper bound for the delay between renewal retries. */
+const MAX_RETRY_DELAY_MS = 8e3;
+/** Longest a single renewal may stay in flight before it counts as failed. */
+const ATTEMPT_TIMEOUT_MS = 1e4;
+/** Stop retrying this long before the lock would expire. */
+const DEADLINE_SAFETY_MARGIN_MS = 1e3;
+var RenewalTimeoutError = class extends Error {
+	constructor(timeoutMs) {
+		super(`Thread lock renewal did not settle within ${timeoutMs}ms`);
+		this.name = "RenewalTimeoutError";
+	}
+};
+/**
+* Whether a failed renewal may succeed if retried. A lost lock is a 409 the
+* platform marks `retryable: false`; server failures (5xx), timeouts and
+* network errors are worth retrying while the lock is still valid.
+*/
+function isRetryableLockRenewalError(error) {
+	if (error instanceof require_client.PlatformRequestError) {
+		if (error.retryable !== void 0) return error.retryable;
+		return error.status >= 500 || error.status === 408 || error.status === 429;
+	}
+	return true;
+}
+/**
+* Keep a thread lock alive for a running agent.
+*
+* Renews every `intervalMs` (sooner if that would run past the lock's
+* lifetime), with at most one renewal in flight. A failed renewal is retried
+* with exponential backoff while the lock is still valid: the deadline is when
+* the last successful renewal was *sent* plus the `ttlSeconds` it returned,
+* because the platform starts the TTL when it handles the request (initially
+* start plus `initialTtlSeconds`, or `fallbackTtlSeconds` when the platform
+* reported no lifetime at acquisition). A non-retryable failure, or running
+* out of time before the deadline, calls `onLost`.
+* A `"completed"` response means the run already ended on the platform, so
+* the heartbeat stops without calling `onLost`.
+*/
+function startThreadLockHeartbeat(options) {
+	const { renew, intervalMs, fallbackTtlSeconds, onLost } = options;
+	let stopped = false;
+	let timer;
+	const initialTtlSeconds = typeof options.initialTtlSeconds === "number" && Number.isFinite(options.initialTtlSeconds) ? options.initialTtlSeconds : fallbackTtlSeconds;
+	let deadline = Date.now() + initialTtlSeconds * 1e3;
+	let failedAttempts = 0;
+	const schedule = (delayMs) => {
+		timer = setTimeout(() => {
+			timer = void 0;
+			attempt();
+		}, delayMs);
+		if (options.unref) timer.unref?.();
+	};
+	/** Time left before the safety cutoff ahead of the lock's expiry. */
+	const remainingMs = () => deadline - DEADLINE_SAFETY_MARGIN_MS - Date.now();
+	const scheduleRenewal = () => {
+		schedule(intervalMs < remainingMs() ? intervalMs : 0);
+	};
+	const stop = () => {
+		stopped = true;
+		if (timer !== void 0) {
+			clearTimeout(timer);
+			timer = void 0;
+		}
+	};
+	const lose = (error) => {
+		stop();
+		onLost(error);
+	};
+	const attempt = async () => {
+		const timeoutMs = Math.min(ATTEMPT_TIMEOUT_MS, remainingMs());
+		if (timeoutMs <= 0) {
+			lose(/* @__PURE__ */ new Error("Thread lock expired before it could be renewed"));
+			return;
+		}
+		const sentAt = Date.now();
+		const controller = new AbortController();
+		let response;
+		try {
+			response = await withTimeout(renew(controller.signal), timeoutMs, options.unref, () => controller.abort());
+		} catch (error) {
+			if (!stopped) handleFailure(error);
+			return;
+		}
+		if (stopped) return;
+		failedAttempts = 0;
+		if (response?.status === "completed") {
+			stop();
+			return;
+		}
+		deadline = sentAt + (typeof response?.ttlSeconds === "number" && response.ttlSeconds > 0 ? response.ttlSeconds : fallbackTtlSeconds) * 1e3;
+		scheduleRenewal();
+	};
+	const handleFailure = (error) => {
+		if (!isRetryableLockRenewalError(error)) {
+			lose(error);
+			return;
+		}
+		const delayMs = Math.min(INITIAL_RETRY_DELAY_MS * 2 ** failedAttempts, MAX_RETRY_DELAY_MS);
+		failedAttempts += 1;
+		const remaining = remainingMs();
+		if (delayMs >= remaining) {
+			lose(error);
+			return;
+		}
+		_copilotkit_shared.logger.warn({
+			err: error,
+			attempt: failedAttempts,
+			retryInMs: delayMs,
+			remainingMs: remaining
+		}, "Thread lock renewal failed; retrying before the lock expires");
+		schedule(delayMs);
+	};
+	scheduleRenewal();
+	return { stop };
+}
+function withTimeout(promise, timeoutMs, unref, onTimeout) {
+	return new Promise((resolve, reject) => {
+		const timeout = setTimeout(() => {
+			onTimeout();
+			reject(new RenewalTimeoutError(timeoutMs));
+		}, timeoutMs);
+		if (unref) timeout.unref?.();
+		promise.then((value) => {
+			clearTimeout(timeout);
+			resolve(value);
+		}, (error) => {
+			clearTimeout(timeout);
+			reject(error);
+		});
+	});
+}
+
+//#endregion
+exports.startThreadLockHeartbeat = startThreadLockHeartbeat;
+//# sourceMappingURL=thread-lock-heartbeat.cjs.map

package/dist/runtime/intelligence-platform/thread-lock-heartbeat.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-lock-heartbeat.cjs","names":["PlatformRequestError"],"sources":["../../../src/runtime/intelligence-platform/thread-lock-heartbeat.ts"],"sourcesContent":["import { logger } from \"@copilotkit/shared\";\nimport { PlatformRequestError } from \"./client\";\nimport type { RenewThreadLockResponse } from \"./client\";\n\n/** Delay before the first retry of a failed renewal; doubles per attempt. */\nconst INITIAL_RETRY_DELAY_MS = 1_000;\n/** Upper bound for the delay between renewal retries. */\nconst MAX_RETRY_DELAY_MS = 8_000;\n/** Longest a single renewal may stay in flight before it counts as failed. */\nconst ATTEMPT_TIMEOUT_MS = 10_000;\n/** Stop retrying this long before the lock would expire. */\nconst DEADLINE_SAFETY_MARGIN_MS = 1_000;\n\nexport interface ThreadLockHeartbeatOptions {\n  /**\n   * Sends one renewal request. The signal aborts when the attempt times out,\n   * so an abandoned request never overlaps its retry.\n   */\n  renew: (signal: AbortSignal) => Promise<RenewThreadLockResponse>;\n  /** Delay between successful renewals. */\n  intervalMs: number;\n  /**\n   * Lock lifetime assumed when the platform has not reported one: until the\n   * first successful renewal when {@link initialTtlSeconds} is absent, and\n   * for renewal responses that omit `ttlSeconds`.\n   */\n  fallbackTtlSeconds: number;\n  /**\n   * Remaining lock lifetime when the heartbeat starts, as reported by the\n   * platform at acquisition, measured from when the acquire request was sent.\n   * Used until the first successful renewal; when absent,\n   * {@link fallbackTtlSeconds} applies instead. A value of zero or less means\n   * the lock has already expired.\n   */\n  initialTtlSeconds?: number;\n  /**\n   * Called once when the lock can no longer be kept: a non-retryable failure,\n   * or retryable failures that ran out the lock's remaining lifetime. Never\n   * called after {@link ThreadLockHeartbeat.stop}.\n   */\n  onLost: (error: unknown) => void;\n  /** Unref timers so a pending heartbeat never keeps the process alive. */\n  unref?: boolean;\n}\n\nexport interface ThreadLockHeartbeat {\n  /** Cancel the next renewal and any pending retry. Idempotent. */\n  stop(): void;\n}\n\nclass RenewalTimeoutError extends Error {\n  constructor(timeoutMs: number) {\n    super(`Thread lock renewal did not settle within ${timeoutMs}ms`);\n    this.name = \"RenewalTimeoutError\";\n  }\n}\n\n/**\n * Whether a failed renewal may succeed if retried. A lost lock is a 409 the\n * platform marks `retryable: false`; server failures (5xx), timeouts and\n * network errors are worth retrying while the lock is still valid.\n */\nexport function isRetryableLockRenewalError(error: unknown): boolean {\n  if (error instanceof PlatformRequestError) {\n    if (error.retryable !== undefined) return error.retryable;\n    return error.status >= 500 || error.status === 408 || error.status === 429;\n  }\n  // Timeouts, fetch network failures and malformed responses.\n  return true;\n}\n\n/**\n * Keep a thread lock alive for a running agent.\n *\n * Renews every `intervalMs` (sooner if that would run past the lock's\n * lifetime), with at most one renewal in flight. A failed renewal is retried\n * with exponential backoff while the lock is still valid: the deadline is when\n * the last successful renewal was *sent* plus the `ttlSeconds` it returned,\n * because the platform starts the TTL when it handles the request (initially\n * start plus `initialTtlSeconds`, or `fallbackTtlSeconds` when the platform\n * reported no lifetime at acquisition). A non-retryable failure, or running\n * out of time before the deadline, calls `onLost`.\n * A `\"completed\"` response means the run already ended on the platform, so\n * the heartbeat stops without calling `onLost`.\n */\nexport function startThreadLockHeartbeat(\n  options: ThreadLockHeartbeatOptions,\n): ThreadLockHeartbeat {\n  const { renew, intervalMs, fallbackTtlSeconds, onLost } = options;\n  let stopped = false;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const initialTtlSeconds =\n    typeof options.initialTtlSeconds === \"number\" &&\n    Number.isFinite(options.initialTtlSeconds)\n      ? options.initialTtlSeconds\n      : fallbackTtlSeconds;\n  let deadline = Date.now() + initialTtlSeconds * 1_000;\n  let failedAttempts = 0;\n\n  const schedule = (delayMs: number): void => {\n    timer = setTimeout(() => {\n      timer = undefined;\n      void attempt();\n    }, delayMs);\n    if (options.unref) timer.unref?.();\n  };\n\n  /** Time left before the safety cutoff ahead of the lock's expiry. */\n  const remainingMs = (): number =>\n    deadline - DEADLINE_SAFETY_MARGIN_MS - Date.now();\n\n  // Renew on the interval, or right away when waiting that long would run\n  // past the cutoff and leave the lock to lapse.\n  const scheduleRenewal = (): void => {\n    schedule(intervalMs < remainingMs() ? intervalMs : 0);\n  };\n\n  const stop = (): void => {\n    stopped = true;\n    if (timer !== undefined) {\n      clearTimeout(timer);\n      timer = undefined;\n    }\n  };\n\n  const lose = (error: unknown): void => {\n    stop();\n    onLost(error);\n  };\n\n  const attempt = async (): Promise<void> => {\n    // Bound each attempt by the lock's remaining lifetime so a hung request\n    // cannot silently outlive the lock; past the cutoff, renewing is too late.\n    const timeoutMs = Math.min(ATTEMPT_TIMEOUT_MS, remainingMs());\n    if (timeoutMs <= 0) {\n      lose(new Error(\"Thread lock expired before it could be renewed\"));\n      return;\n    }\n    const sentAt = Date.now();\n    const controller = new AbortController();\n    let response: RenewThreadLockResponse;\n    try {\n      response = await withTimeout(\n        renew(controller.signal),\n        timeoutMs,\n        options.unref,\n        () => controller.abort(),\n      );\n    } catch (error) {\n      if (!stopped) handleFailure(error);\n      return;\n    }\n    if (stopped) return;\n\n    failedAttempts = 0;\n    if (response?.status === \"completed\") {\n      stop();\n      return;\n    }\n    const ttlSeconds =\n      typeof response?.ttlSeconds === \"number\" && response.ttlSeconds > 0\n        ? response.ttlSeconds\n        : fallbackTtlSeconds;\n    deadline = sentAt + ttlSeconds * 1_000;\n    scheduleRenewal();\n  };\n\n  const handleFailure = (error: unknown): void => {\n    if (!isRetryableLockRenewalError(error)) {\n      lose(error);\n      return;\n    }\n    const delayMs = Math.min(\n      INITIAL_RETRY_DELAY_MS * 2 ** failedAttempts,\n      MAX_RETRY_DELAY_MS,\n    );\n    failedAttempts += 1;\n    const remaining = remainingMs();\n    if (delayMs >= remaining) {\n      lose(error);\n      return;\n    }\n    logger.warn(\n      {\n        err: error,\n        attempt: failedAttempts,\n        retryInMs: delayMs,\n        remainingMs: remaining,\n      },\n      \"Thread lock renewal failed; retrying before the lock expires\",\n    );\n    schedule(delayMs);\n  };\n\n  scheduleRenewal();\n  return { stop };\n}\n\nfunction withTimeout<T>(\n  promise: Promise<T>,\n  timeoutMs: number,\n  unref: boolean | undefined,\n  onTimeout: () => void,\n): Promise<T> {\n  return new Promise<T>((resolve, reject) => {\n    const timeout = setTimeout(() => {\n      onTimeout();\n      reject(new RenewalTimeoutError(timeoutMs));\n    }, timeoutMs);\n    if (unref) timeout.unref?.();\n    promise.then(\n      (value) => {\n        clearTimeout(timeout);\n        resolve(value);\n      },\n      (error: unknown) => {\n        clearTimeout(timeout);\n        reject(error);\n      },\n    );\n  });\n}\n"],"mappings":";;;;;;AAKA,MAAM,yBAAyB;;AAE/B,MAAM,qBAAqB;;AAE3B,MAAM,qBAAqB;;AAE3B,MAAM,4BAA4B;AAuClC,IAAM,sBAAN,cAAkC,MAAM;CACtC,YAAY,WAAmB;AAC7B,QAAM,6CAA6C,UAAU,IAAI;AACjE,OAAK,OAAO;;;;;;;;AAShB,SAAgB,4BAA4B,OAAyB;AACnE,KAAI,iBAAiBA,qCAAsB;AACzC,MAAI,MAAM,cAAc,OAAW,QAAO,MAAM;AAChD,SAAO,MAAM,UAAU,OAAO,MAAM,WAAW,OAAO,MAAM,WAAW;;AAGzE,QAAO;;;;;;;;;;;;;;;;AAiBT,SAAgB,yBACd,SACqB;CACrB,MAAM,EAAE,OAAO,YAAY,oBAAoB,WAAW;CAC1D,IAAI,UAAU;CACd,IAAI;CACJ,MAAM,oBACJ,OAAO,QAAQ,sBAAsB,YACrC,OAAO,SAAS,QAAQ,kBAAkB,GACtC,QAAQ,oBACR;CACN,IAAI,WAAW,KAAK,KAAK,GAAG,oBAAoB;CAChD,IAAI,iBAAiB;CAErB,MAAM,YAAY,YAA0B;AAC1C,UAAQ,iBAAiB;AACvB,WAAQ;AACR,GAAK,SAAS;KACb,QAAQ;AACX,MAAI,QAAQ,MAAO,OAAM,SAAS;;;CAIpC,MAAM,oBACJ,WAAW,4BAA4B,KAAK,KAAK;CAInD,MAAM,wBAA8B;AAClC,WAAS,aAAa,aAAa,GAAG,aAAa,EAAE;;CAGvD,MAAM,aAAmB;AACvB,YAAU;AACV,MAAI,UAAU,QAAW;AACvB,gBAAa,MAAM;AACnB,WAAQ;;;CAIZ,MAAM,QAAQ,UAAyB;AACrC,QAAM;AACN,SAAO,MAAM;;CAGf,MAAM,UAAU,YAA2B;EAGzC,MAAM,YAAY,KAAK,IAAI,oBAAoB,aAAa,CAAC;AAC7D,MAAI,aAAa,GAAG;AAClB,wBAAK,IAAI,MAAM,iDAAiD,CAAC;AACjE;;EAEF,MAAM,SAAS,KAAK,KAAK;EACzB,MAAM,aAAa,IAAI,iBAAiB;EACxC,IAAI;AACJ,MAAI;AACF,cAAW,MAAM,YACf,MAAM,WAAW,OAAO,EACxB,WACA,QAAQ,aACF,WAAW,OAAO,CACzB;WACM,OAAO;AACd,OAAI,CAAC,QAAS,eAAc,MAAM;AAClC;;AAEF,MAAI,QAAS;AAEb,mBAAiB;AACjB,MAAI,UAAU,WAAW,aAAa;AACpC,SAAM;AACN;;AAMF,aAAW,UAHT,OAAO,UAAU,eAAe,YAAY,SAAS,aAAa,IAC9D,SAAS,aACT,sBAC2B;AACjC,mBAAiB;;CAGnB,MAAM,iBAAiB,UAAyB;AAC9C,MAAI,CAAC,4BAA4B,MAAM,EAAE;AACvC,QAAK,MAAM;AACX;;EAEF,MAAM,UAAU,KAAK,IACnB,yBAAyB,KAAK,gBAC9B,mBACD;AACD,oBAAkB;EAClB,MAAM,YAAY,aAAa;AAC/B,MAAI,WAAW,WAAW;AACxB,QAAK,MAAM;AACX;;AAEF,4BAAO,KACL;GACE,KAAK;GACL,SAAS;GACT,WAAW;GACX,aAAa;GACd,EACD,+DACD;AACD,WAAS,QAAQ;;AAGnB,kBAAiB;AACjB,QAAO,EAAE,MAAM;;AAGjB,SAAS,YACP,SACA,WACA,OACA,WACY;AACZ,QAAO,IAAI,SAAY,SAAS,WAAW;EACzC,MAAM,UAAU,iBAAiB;AAC/B,cAAW;AACX,UAAO,IAAI,oBAAoB,UAAU,CAAC;KACzC,UAAU;AACb,MAAI,MAAO,SAAQ,SAAS;AAC5B,UAAQ,MACL,UAAU;AACT,gBAAa,QAAQ;AACrB,WAAQ,MAAM;MAEf,UAAmB;AAClB,gBAAa,QAAQ;AACrB,UAAO,MAAM;IAEhB;GACD"}

package/dist/runtime/intelligence-platform/thread-lock-heartbeat.mjs

@@ -0,0 +1,141 @@
+import { PlatformRequestError } from "./client.mjs";
+import { logger } from "@copilotkit/shared";
+
+//#region src/runtime/intelligence-platform/thread-lock-heartbeat.ts
+/** Delay before the first retry of a failed renewal; doubles per attempt. */
+const INITIAL_RETRY_DELAY_MS = 1e3;
+/** Upper bound for the delay between renewal retries. */
+const MAX_RETRY_DELAY_MS = 8e3;
+/** Longest a single renewal may stay in flight before it counts as failed. */
+const ATTEMPT_TIMEOUT_MS = 1e4;
+/** Stop retrying this long before the lock would expire. */
+const DEADLINE_SAFETY_MARGIN_MS = 1e3;
+var RenewalTimeoutError = class extends Error {
+	constructor(timeoutMs) {
+		super(`Thread lock renewal did not settle within ${timeoutMs}ms`);
+		this.name = "RenewalTimeoutError";
+	}
+};
+/**
+* Whether a failed renewal may succeed if retried. A lost lock is a 409 the
+* platform marks `retryable: false`; server failures (5xx), timeouts and
+* network errors are worth retrying while the lock is still valid.
+*/
+function isRetryableLockRenewalError(error) {
+	if (error instanceof PlatformRequestError) {
+		if (error.retryable !== void 0) return error.retryable;
+		return error.status >= 500 || error.status === 408 || error.status === 429;
+	}
+	return true;
+}
+/**
+* Keep a thread lock alive for a running agent.
+*
+* Renews every `intervalMs` (sooner if that would run past the lock's
+* lifetime), with at most one renewal in flight. A failed renewal is retried
+* with exponential backoff while the lock is still valid: the deadline is when
+* the last successful renewal was *sent* plus the `ttlSeconds` it returned,
+* because the platform starts the TTL when it handles the request (initially
+* start plus `initialTtlSeconds`, or `fallbackTtlSeconds` when the platform
+* reported no lifetime at acquisition). A non-retryable failure, or running
+* out of time before the deadline, calls `onLost`.
+* A `"completed"` response means the run already ended on the platform, so
+* the heartbeat stops without calling `onLost`.
+*/
+function startThreadLockHeartbeat(options) {
+	const { renew, intervalMs, fallbackTtlSeconds, onLost } = options;
+	let stopped = false;
+	let timer;
+	const initialTtlSeconds = typeof options.initialTtlSeconds === "number" && Number.isFinite(options.initialTtlSeconds) ? options.initialTtlSeconds : fallbackTtlSeconds;
+	let deadline = Date.now() + initialTtlSeconds * 1e3;
+	let failedAttempts = 0;
+	const schedule = (delayMs) => {
+		timer = setTimeout(() => {
+			timer = void 0;
+			attempt();
+		}, delayMs);
+		if (options.unref) timer.unref?.();
+	};
+	/** Time left before the safety cutoff ahead of the lock's expiry. */
+	const remainingMs = () => deadline - DEADLINE_SAFETY_MARGIN_MS - Date.now();
+	const scheduleRenewal = () => {
+		schedule(intervalMs < remainingMs() ? intervalMs : 0);
+	};
+	const stop = () => {
+		stopped = true;
+		if (timer !== void 0) {
+			clearTimeout(timer);
+			timer = void 0;
+		}
+	};
+	const lose = (error) => {
+		stop();
+		onLost(error);
+	};
+	const attempt = async () => {
+		const timeoutMs = Math.min(ATTEMPT_TIMEOUT_MS, remainingMs());
+		if (timeoutMs <= 0) {
+			lose(/* @__PURE__ */ new Error("Thread lock expired before it could be renewed"));
+			return;
+		}
+		const sentAt = Date.now();
+		const controller = new AbortController();
+		let response;
+		try {
+			response = await withTimeout(renew(controller.signal), timeoutMs, options.unref, () => controller.abort());
+		} catch (error) {
+			if (!stopped) handleFailure(error);
+			return;
+		}
+		if (stopped) return;
+		failedAttempts = 0;
+		if (response?.status === "completed") {
+			stop();
+			return;
+		}
+		deadline = sentAt + (typeof response?.ttlSeconds === "number" && response.ttlSeconds > 0 ? response.ttlSeconds : fallbackTtlSeconds) * 1e3;
+		scheduleRenewal();
+	};
+	const handleFailure = (error) => {
+		if (!isRetryableLockRenewalError(error)) {
+			lose(error);
+			return;
+		}
+		const delayMs = Math.min(INITIAL_RETRY_DELAY_MS * 2 ** failedAttempts, MAX_RETRY_DELAY_MS);
+		failedAttempts += 1;
+		const remaining = remainingMs();
+		if (delayMs >= remaining) {
+			lose(error);
+			return;
+		}
+		logger.warn({
+			err: error,
+			attempt: failedAttempts,
+			retryInMs: delayMs,
+			remainingMs: remaining
+		}, "Thread lock renewal failed; retrying before the lock expires");
+		schedule(delayMs);
+	};
+	scheduleRenewal();
+	return { stop };
+}
+function withTimeout(promise, timeoutMs, unref, onTimeout) {
+	return new Promise((resolve, reject) => {
+		const timeout = setTimeout(() => {
+			onTimeout();
+			reject(new RenewalTimeoutError(timeoutMs));
+		}, timeoutMs);
+		if (unref) timeout.unref?.();
+		promise.then((value) => {
+			clearTimeout(timeout);
+			resolve(value);
+		}, (error) => {
+			clearTimeout(timeout);
+			reject(error);
+		});
+	});
+}
+
+//#endregion
+export { startThreadLockHeartbeat };
+//# sourceMappingURL=thread-lock-heartbeat.mjs.map

package/dist/runtime/intelligence-platform/thread-lock-heartbeat.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-lock-heartbeat.mjs","names":[],"sources":["../../../src/runtime/intelligence-platform/thread-lock-heartbeat.ts"],"sourcesContent":["import { logger } from \"@copilotkit/shared\";\nimport { PlatformRequestError } from \"./client\";\nimport type { RenewThreadLockResponse } from \"./client\";\n\n/** Delay before the first retry of a failed renewal; doubles per attempt. */\nconst INITIAL_RETRY_DELAY_MS = 1_000;\n/** Upper bound for the delay between renewal retries. */\nconst MAX_RETRY_DELAY_MS = 8_000;\n/** Longest a single renewal may stay in flight before it counts as failed. */\nconst ATTEMPT_TIMEOUT_MS = 10_000;\n/** Stop retrying this long before the lock would expire. */\nconst DEADLINE_SAFETY_MARGIN_MS = 1_000;\n\nexport interface ThreadLockHeartbeatOptions {\n  /**\n   * Sends one renewal request. The signal aborts when the attempt times out,\n   * so an abandoned request never overlaps its retry.\n   */\n  renew: (signal: AbortSignal) => Promise<RenewThreadLockResponse>;\n  /** Delay between successful renewals. */\n  intervalMs: number;\n  /**\n   * Lock lifetime assumed when the platform has not reported one: until the\n   * first successful renewal when {@link initialTtlSeconds} is absent, and\n   * for renewal responses that omit `ttlSeconds`.\n   */\n  fallbackTtlSeconds: number;\n  /**\n   * Remaining lock lifetime when the heartbeat starts, as reported by the\n   * platform at acquisition, measured from when the acquire request was sent.\n   * Used until the first successful renewal; when absent,\n   * {@link fallbackTtlSeconds} applies instead. A value of zero or less means\n   * the lock has already expired.\n   */\n  initialTtlSeconds?: number;\n  /**\n   * Called once when the lock can no longer be kept: a non-retryable failure,\n   * or retryable failures that ran out the lock's remaining lifetime. Never\n   * called after {@link ThreadLockHeartbeat.stop}.\n   */\n  onLost: (error: unknown) => void;\n  /** Unref timers so a pending heartbeat never keeps the process alive. */\n  unref?: boolean;\n}\n\nexport interface ThreadLockHeartbeat {\n  /** Cancel the next renewal and any pending retry. Idempotent. */\n  stop(): void;\n}\n\nclass RenewalTimeoutError extends Error {\n  constructor(timeoutMs: number) {\n    super(`Thread lock renewal did not settle within ${timeoutMs}ms`);\n    this.name = \"RenewalTimeoutError\";\n  }\n}\n\n/**\n * Whether a failed renewal may succeed if retried. A lost lock is a 409 the\n * platform marks `retryable: false`; server failures (5xx), timeouts and\n * network errors are worth retrying while the lock is still valid.\n */\nexport function isRetryableLockRenewalError(error: unknown): boolean {\n  if (error instanceof PlatformRequestError) {\n    if (error.retryable !== undefined) return error.retryable;\n    return error.status >= 500 || error.status === 408 || error.status === 429;\n  }\n  // Timeouts, fetch network failures and malformed responses.\n  return true;\n}\n\n/**\n * Keep a thread lock alive for a running agent.\n *\n * Renews every `intervalMs` (sooner if that would run past the lock's\n * lifetime), with at most one renewal in flight. A failed renewal is retried\n * with exponential backoff while the lock is still valid: the deadline is when\n * the last successful renewal was *sent* plus the `ttlSeconds` it returned,\n * because the platform starts the TTL when it handles the request (initially\n * start plus `initialTtlSeconds`, or `fallbackTtlSeconds` when the platform\n * reported no lifetime at acquisition). A non-retryable failure, or running\n * out of time before the deadline, calls `onLost`.\n * A `\"completed\"` response means the run already ended on the platform, so\n * the heartbeat stops without calling `onLost`.\n */\nexport function startThreadLockHeartbeat(\n  options: ThreadLockHeartbeatOptions,\n): ThreadLockHeartbeat {\n  const { renew, intervalMs, fallbackTtlSeconds, onLost } = options;\n  let stopped = false;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const initialTtlSeconds =\n    typeof options.initialTtlSeconds === \"number\" &&\n    Number.isFinite(options.initialTtlSeconds)\n      ? options.initialTtlSeconds\n      : fallbackTtlSeconds;\n  let deadline = Date.now() + initialTtlSeconds * 1_000;\n  let failedAttempts = 0;\n\n  const schedule = (delayMs: number): void => {\n    timer = setTimeout(() => {\n      timer = undefined;\n      void attempt();\n    }, delayMs);\n    if (options.unref) timer.unref?.();\n  };\n\n  /** Time left before the safety cutoff ahead of the lock's expiry. */\n  const remainingMs = (): number =>\n    deadline - DEADLINE_SAFETY_MARGIN_MS - Date.now();\n\n  // Renew on the interval, or right away when waiting that long would run\n  // past the cutoff and leave the lock to lapse.\n  const scheduleRenewal = (): void => {\n    schedule(intervalMs < remainingMs() ? intervalMs : 0);\n  };\n\n  const stop = (): void => {\n    stopped = true;\n    if (timer !== undefined) {\n      clearTimeout(timer);\n      timer = undefined;\n    }\n  };\n\n  const lose = (error: unknown): void => {\n    stop();\n    onLost(error);\n  };\n\n  const attempt = async (): Promise<void> => {\n    // Bound each attempt by the lock's remaining lifetime so a hung request\n    // cannot silently outlive the lock; past the cutoff, renewing is too late.\n    const timeoutMs = Math.min(ATTEMPT_TIMEOUT_MS, remainingMs());\n    if (timeoutMs <= 0) {\n      lose(new Error(\"Thread lock expired before it could be renewed\"));\n      return;\n    }\n    const sentAt = Date.now();\n    const controller = new AbortController();\n    let response: RenewThreadLockResponse;\n    try {\n      response = await withTimeout(\n        renew(controller.signal),\n        timeoutMs,\n        options.unref,\n        () => controller.abort(),\n      );\n    } catch (error) {\n      if (!stopped) handleFailure(error);\n      return;\n    }\n    if (stopped) return;\n\n    failedAttempts = 0;\n    if (response?.status === \"completed\") {\n      stop();\n      return;\n    }\n    const ttlSeconds =\n      typeof response?.ttlSeconds === \"number\" && response.ttlSeconds > 0\n        ? response.ttlSeconds\n        : fallbackTtlSeconds;\n    deadline = sentAt + ttlSeconds * 1_000;\n    scheduleRenewal();\n  };\n\n  const handleFailure = (error: unknown): void => {\n    if (!isRetryableLockRenewalError(error)) {\n      lose(error);\n      return;\n    }\n    const delayMs = Math.min(\n      INITIAL_RETRY_DELAY_MS * 2 ** failedAttempts,\n      MAX_RETRY_DELAY_MS,\n    );\n    failedAttempts += 1;\n    const remaining = remainingMs();\n    if (delayMs >= remaining) {\n      lose(error);\n      return;\n    }\n    logger.warn(\n      {\n        err: error,\n        attempt: failedAttempts,\n        retryInMs: delayMs,\n        remainingMs: remaining,\n      },\n      \"Thread lock renewal failed; retrying before the lock expires\",\n    );\n    schedule(delayMs);\n  };\n\n  scheduleRenewal();\n  return { stop };\n}\n\nfunction withTimeout<T>(\n  promise: Promise<T>,\n  timeoutMs: number,\n  unref: boolean | undefined,\n  onTimeout: () => void,\n): Promise<T> {\n  return new Promise<T>((resolve, reject) => {\n    const timeout = setTimeout(() => {\n      onTimeout();\n      reject(new RenewalTimeoutError(timeoutMs));\n    }, timeoutMs);\n    if (unref) timeout.unref?.();\n    promise.then(\n      (value) => {\n        clearTimeout(timeout);\n        resolve(value);\n      },\n      (error: unknown) => {\n        clearTimeout(timeout);\n        reject(error);\n      },\n    );\n  });\n}\n"],"mappings":";;;;;AAKA,MAAM,yBAAyB;;AAE/B,MAAM,qBAAqB;;AAE3B,MAAM,qBAAqB;;AAE3B,MAAM,4BAA4B;AAuClC,IAAM,sBAAN,cAAkC,MAAM;CACtC,YAAY,WAAmB;AAC7B,QAAM,6CAA6C,UAAU,IAAI;AACjE,OAAK,OAAO;;;;;;;;AAShB,SAAgB,4BAA4B,OAAyB;AACnE,KAAI,iBAAiB,sBAAsB;AACzC,MAAI,MAAM,cAAc,OAAW,QAAO,MAAM;AAChD,SAAO,MAAM,UAAU,OAAO,MAAM,WAAW,OAAO,MAAM,WAAW;;AAGzE,QAAO;;;;;;;;;;;;;;;;AAiBT,SAAgB,yBACd,SACqB;CACrB,MAAM,EAAE,OAAO,YAAY,oBAAoB,WAAW;CAC1D,IAAI,UAAU;CACd,IAAI;CACJ,MAAM,oBACJ,OAAO,QAAQ,sBAAsB,YACrC,OAAO,SAAS,QAAQ,kBAAkB,GACtC,QAAQ,oBACR;CACN,IAAI,WAAW,KAAK,KAAK,GAAG,oBAAoB;CAChD,IAAI,iBAAiB;CAErB,MAAM,YAAY,YAA0B;AAC1C,UAAQ,iBAAiB;AACvB,WAAQ;AACR,GAAK,SAAS;KACb,QAAQ;AACX,MAAI,QAAQ,MAAO,OAAM,SAAS;;;CAIpC,MAAM,oBACJ,WAAW,4BAA4B,KAAK,KAAK;CAInD,MAAM,wBAA8B;AAClC,WAAS,aAAa,aAAa,GAAG,aAAa,EAAE;;CAGvD,MAAM,aAAmB;AACvB,YAAU;AACV,MAAI,UAAU,QAAW;AACvB,gBAAa,MAAM;AACnB,WAAQ;;;CAIZ,MAAM,QAAQ,UAAyB;AACrC,QAAM;AACN,SAAO,MAAM;;CAGf,MAAM,UAAU,YAA2B;EAGzC,MAAM,YAAY,KAAK,IAAI,oBAAoB,aAAa,CAAC;AAC7D,MAAI,aAAa,GAAG;AAClB,wBAAK,IAAI,MAAM,iDAAiD,CAAC;AACjE;;EAEF,MAAM,SAAS,KAAK,KAAK;EACzB,MAAM,aAAa,IAAI,iBAAiB;EACxC,IAAI;AACJ,MAAI;AACF,cAAW,MAAM,YACf,MAAM,WAAW,OAAO,EACxB,WACA,QAAQ,aACF,WAAW,OAAO,CACzB;WACM,OAAO;AACd,OAAI,CAAC,QAAS,eAAc,MAAM;AAClC;;AAEF,MAAI,QAAS;AAEb,mBAAiB;AACjB,MAAI,UAAU,WAAW,aAAa;AACpC,SAAM;AACN;;AAMF,aAAW,UAHT,OAAO,UAAU,eAAe,YAAY,SAAS,aAAa,IAC9D,SAAS,aACT,sBAC2B;AACjC,mBAAiB;;CAGnB,MAAM,iBAAiB,UAAyB;AAC9C,MAAI,CAAC,4BAA4B,MAAM,EAAE;AACvC,QAAK,MAAM;AACX;;EAEF,MAAM,UAAU,KAAK,IACnB,yBAAyB,KAAK,gBAC9B,mBACD;AACD,oBAAkB;EAClB,MAAM,YAAY,aAAa;AAC/B,MAAI,WAAW,WAAW;AACxB,QAAK,MAAM;AACX;;AAEF,SAAO,KACL;GACE,KAAK;GACL,SAAS;GACT,WAAW;GACX,aAAa;GACd,EACD,+DACD;AACD,WAAS,QAAQ;;AAGnB,kBAAiB;AACjB,QAAO,EAAE,MAAM;;AAGjB,SAAS,YACP,SACA,WACA,OACA,WACY;AACZ,QAAO,IAAI,SAAY,SAAS,WAAW;EACzC,MAAM,UAAU,iBAAiB;AAC/B,cAAW;AACX,UAAO,IAAI,oBAAoB,UAAU,CAAC;KACzC,UAAU;AACb,MAAI,MAAO,SAAQ,SAAS;AAC5B,UAAQ,MACL,UAAU;AACT,gBAAa,QAAQ;AACrB,WAAQ,MAAM;MAEf,UAAmB;AAClB,gBAAa,QAAQ;AACrB,UAAO,MAAM;IAEhB;GACD"}

package/dist/runtime/intelligence-platform/trajectories.cjs

@@ -0,0 +1,95 @@
+const require_runtime = require('../../_virtual/_rolldown/runtime.cjs');
+let _copilotkit_shared = require("@copilotkit/shared");
+let zod = require("zod");
+
+//#region src/runtime/intelligence-platform/trajectories.ts
+const trajectoryIdSchema = zod.z.string().uuid();
+function isValidTrajectoryId(value) {
+	return trajectoryIdSchema.safeParse(value).success;
+}
+const joinResponseSchema = zod.z.object({
+	joinToken: zod.z.string().refine((value) => value.trim().length > 0),
+	trajectoryId: trajectoryIdSchema
+});
+const grantSchema = zod.z.object({
+	joinToken: zod.z.string().refine((value) => value.trim().length > 0),
+	realtime: zod.z.object({
+		clientUrl: zod.z.string().url().refine((value) => {
+			const url = new URL(value);
+			return (url.protocol === "wss:" || url.protocol === "ws:") && !url.username && !url.password;
+		}),
+		topic: zod.z.string().refine((value) => value.trim().length > 0 && !/\p{Cc}/u.test(value))
+	})
+});
+const runtimeConfigurationErrorSchema = zod.z.object({ error: zod.z.object({ code: zod.z.enum([
+	"AUTH_UNAUTHENTICATED",
+	"API_KEY_NOT_FOUND",
+	"ORG_NOT_FOUND",
+	"PROJECT_NOT_FOUND"
+]) }) });
+const contractErrorSchema = zod.z.object({ error: zod.z.object({
+	code: zod.z.enum([
+		"VALIDATION_ERROR",
+		"TRAJECTORY_APP_USER_CONFLICT",
+		"LEARNING_CONTAINER_NOT_FOUND",
+		"RATE_LIMIT_EXCEEDED",
+		"INTERNAL_SERVER_ERROR",
+		"MARKETPLACE_LICENSE_REQUIRED",
+		"TRAJECTORIES_NOT_ENABLED"
+	]),
+	message: zod.z.string().trim().min(1).max(512)
+}) });
+var TrajectoryConnectionError = class extends Error {
+	constructor(code, message, status) {
+		super(message);
+		this.code = code;
+		this.status = status;
+		this.name = "TrajectoryConnectionError";
+	}
+};
+function parseTrajectoryConnectionGrant(value, trajectoryId, clientUrl) {
+	const join = joinResponseSchema.safeParse(value);
+	const result = grantSchema.safeParse(join.success && join.data.trajectoryId === trajectoryId ? {
+		joinToken: join.data.joinToken,
+		realtime: {
+			clientUrl,
+			topic: `trajectory:${trajectoryId}`
+		}
+	} : void 0);
+	if (!result.success) {
+		const joinValid = join.success && join.data.trajectoryId === trajectoryId;
+		_copilotkit_shared.logger.warn({ trajectoryIdMatches: joinValid }, joinValid ? "Intelligence returned a Trajectory join token, but the Gateway URL is invalid; check the Intelligence wsUrl" : "Intelligence returned an invalid Trajectory join response");
+		throw new TrajectoryConnectionError("CONNECTION_FAILED", "Intelligence returned an invalid trajectory connection grant", 502);
+	}
+	return {
+		joinToken: result.data.joinToken,
+		realtime: {
+			clientUrl: result.data.realtime.clientUrl,
+			topic: result.data.realtime.topic
+		}
+	};
+}
+const routeNotFoundSchema = zod.z.object({ error: zod.z.object({ code: zod.z.literal("ROUTE_NOT_FOUND") }) });
+const upstreamCodeSchema = zod.z.object({ error: zod.z.object({ code: zod.z.string().regex(/^[A-Z][A-Z0-9_]{0,63}$/) }) });
+/** Forward only the public contract, never raw platform errors or credentials. */
+function trajectoryResponseError(value, status, apiKey) {
+	const result = contractErrorSchema.safeParse(value);
+	if (result.success && !result.data.error.message.includes(apiKey)) return new TrajectoryConnectionError(result.data.error.code, result.data.error.message, status);
+	if (status === 404 && routeNotFoundSchema.safeParse(value).success) {
+		_copilotkit_shared.logger.warn({ status }, "Intelligence does not serve Trajectory capture; enable Trajectories for this deployment");
+		return new TrajectoryConnectionError("TRAJECTORIES_UNAVAILABLE", "This Intelligence deployment does not serve Trajectory capture", 404);
+	}
+	_copilotkit_shared.logger.warn({
+		status,
+		upstreamCode: upstreamCodeSchema.safeParse(value).data?.error.code
+	}, "Intelligence rejected the Trajectory connection request; the browser receives CONNECTION_FAILED");
+	if (runtimeConfigurationErrorSchema.safeParse(value).success) return new TrajectoryConnectionError("CONNECTION_FAILED", "Could not connect to Intelligence", 502);
+	return new TrajectoryConnectionError("CONNECTION_FAILED", "Intelligence rejected the trajectory connection request", status);
+}
+
+//#endregion
+exports.TrajectoryConnectionError = TrajectoryConnectionError;
+exports.isValidTrajectoryId = isValidTrajectoryId;
+exports.parseTrajectoryConnectionGrant = parseTrajectoryConnectionGrant;
+exports.trajectoryResponseError = trajectoryResponseError;
+//# sourceMappingURL=trajectories.cjs.map

package/dist/runtime/intelligence-platform/trajectories.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"trajectories.cjs","names":["z"],"sources":["../../../src/runtime/intelligence-platform/trajectories.ts"],"sourcesContent":["import { logger } from \"@copilotkit/shared\";\nimport { z } from \"zod\";\n\nexport interface TrajectoryConnectionGrant {\n  joinToken: string;\n  realtime: { clientUrl: string; topic: string };\n}\n\nconst trajectoryIdSchema = z.string().uuid();\n\nexport function isValidTrajectoryId(value: unknown): value is string {\n  return trajectoryIdSchema.safeParse(value).success;\n}\n\nconst joinResponseSchema = z.object({\n  joinToken: z.string().refine((value) => value.trim().length > 0),\n  trajectoryId: trajectoryIdSchema,\n});\n\nconst grantSchema = z.object({\n  joinToken: z.string().refine((value) => value.trim().length > 0),\n  realtime: z.object({\n    clientUrl: z\n      .string()\n      .url()\n      .refine((value) => {\n        const url = new URL(value);\n        return (\n          (url.protocol === \"wss:\" || url.protocol === \"ws:\") &&\n          !url.username &&\n          !url.password\n        );\n      }),\n    topic: z\n      .string()\n      .refine((value) => value.trim().length > 0 && !/\\p{Cc}/u.test(value)),\n  }),\n});\n\nconst runtimeConfigurationErrorSchema = z.object({\n  error: z.object({\n    code: z.enum([\n      \"AUTH_UNAUTHENTICATED\",\n      \"API_KEY_NOT_FOUND\",\n      \"ORG_NOT_FOUND\",\n      \"PROJECT_NOT_FOUND\",\n    ]),\n  }),\n});\n\nconst contractErrorSchema = z.object({\n  error: z.object({\n    code: z.enum([\n      \"VALIDATION_ERROR\",\n      \"TRAJECTORY_APP_USER_CONFLICT\",\n      \"LEARNING_CONTAINER_NOT_FOUND\",\n      \"RATE_LIMIT_EXCEEDED\",\n      \"INTERNAL_SERVER_ERROR\",\n      \"MARKETPLACE_LICENSE_REQUIRED\",\n      \"TRAJECTORIES_NOT_ENABLED\",\n    ]),\n    message: z.string().trim().min(1).max(512),\n  }),\n});\n\nexport class TrajectoryConnectionError extends Error {\n  constructor(\n    public readonly code: string,\n    message: string,\n    public readonly status: number,\n  ) {\n    super(message);\n    this.name = \"TrajectoryConnectionError\";\n  }\n}\n\nexport function parseTrajectoryConnectionGrant(\n  value: unknown,\n  trajectoryId: string,\n  clientUrl: string,\n): TrajectoryConnectionGrant {\n  const join = joinResponseSchema.safeParse(value);\n  const result = grantSchema.safeParse(\n    join.success && join.data.trajectoryId === trajectoryId\n      ? {\n          joinToken: join.data.joinToken,\n          realtime: { clientUrl, topic: `trajectory:${trajectoryId}` },\n        }\n      : undefined,\n  );\n  if (!result.success) {\n    const joinValid = join.success && join.data.trajectoryId === trajectoryId;\n    logger.warn(\n      { trajectoryIdMatches: joinValid },\n      joinValid\n        ? \"Intelligence returned a Trajectory join token, but the Gateway URL is invalid; check the Intelligence wsUrl\"\n        : \"Intelligence returned an invalid Trajectory join response\",\n    );\n    throw new TrajectoryConnectionError(\n      \"CONNECTION_FAILED\",\n      \"Intelligence returned an invalid trajectory connection grant\",\n      502,\n    );\n  }\n  return {\n    joinToken: result.data.joinToken,\n    realtime: {\n      clientUrl: result.data.realtime.clientUrl,\n      topic: result.data.realtime.topic,\n    },\n  };\n}\n\n// Intelligence answers with this code when Trajectory capture is switched off\n// for the deployment, because the join route is then not registered.\nconst routeNotFoundSchema = z.object({\n  error: z.object({ code: z.literal(\"ROUTE_NOT_FOUND\") }),\n});\n\nconst upstreamCodeSchema = z.object({\n  error: z.object({ code: z.string().regex(/^[A-Z][A-Z0-9_]{0,63}$/) }),\n});\n\n/** Forward only the public contract, never raw platform errors or credentials. */\nexport function trajectoryResponseError(\n  value: unknown,\n  status: number,\n  apiKey: string,\n): TrajectoryConnectionError {\n  const result = contractErrorSchema.safeParse(value);\n  if (result.success && !result.data.error.message.includes(apiKey)) {\n    return new TrajectoryConnectionError(\n      result.data.error.code,\n      result.data.error.message,\n      status,\n    );\n  }\n  if (status === 404 && routeNotFoundSchema.safeParse(value).success) {\n    logger.warn(\n      { status },\n      \"Intelligence does not serve Trajectory capture; enable Trajectories for this deployment\",\n    );\n    return new TrajectoryConnectionError(\n      \"TRAJECTORIES_UNAVAILABLE\",\n      \"This Intelligence deployment does not serve Trajectory capture\",\n      404,\n    );\n  }\n  // The browser only learns that the connection failed. Log the upstream code,\n  // never the message, so the cause is visible to the Runtime's operator.\n  logger.warn(\n    {\n      status,\n      upstreamCode: upstreamCodeSchema.safeParse(value).data?.error.code,\n    },\n    \"Intelligence rejected the Trajectory connection request; the browser receives CONNECTION_FAILED\",\n  );\n  // These failures describe the Runtime's server credentials or tenant setup,\n  // not the browser user's identity. Do not expose them as a client auth error.\n  if (runtimeConfigurationErrorSchema.safeParse(value).success) {\n    return new TrajectoryConnectionError(\n      \"CONNECTION_FAILED\",\n      \"Could not connect to Intelligence\",\n      502,\n    );\n  }\n  return new TrajectoryConnectionError(\n    \"CONNECTION_FAILED\",\n    \"Intelligence rejected the trajectory connection request\",\n    status,\n  );\n}\n"],"mappings":";;;;;AAQA,MAAM,qBAAqBA,MAAE,QAAQ,CAAC,MAAM;AAE5C,SAAgB,oBAAoB,OAAiC;AACnE,QAAO,mBAAmB,UAAU,MAAM,CAAC;;AAG7C,MAAM,qBAAqBA,MAAE,OAAO;CAClC,WAAWA,MAAE,QAAQ,CAAC,QAAQ,UAAU,MAAM,MAAM,CAAC,SAAS,EAAE;CAChE,cAAc;CACf,CAAC;AAEF,MAAM,cAAcA,MAAE,OAAO;CAC3B,WAAWA,MAAE,QAAQ,CAAC,QAAQ,UAAU,MAAM,MAAM,CAAC,SAAS,EAAE;CAChE,UAAUA,MAAE,OAAO;EACjB,WAAWA,MACR,QAAQ,CACR,KAAK,CACL,QAAQ,UAAU;GACjB,MAAM,MAAM,IAAI,IAAI,MAAM;AAC1B,WACG,IAAI,aAAa,UAAU,IAAI,aAAa,UAC7C,CAAC,IAAI,YACL,CAAC,IAAI;IAEP;EACJ,OAAOA,MACJ,QAAQ,CACR,QAAQ,UAAU,MAAM,MAAM,CAAC,SAAS,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC;EACxE,CAAC;CACH,CAAC;AAEF,MAAM,kCAAkCA,MAAE,OAAO,EAC/C,OAAOA,MAAE,OAAO,EACd,MAAMA,MAAE,KAAK;CACX;CACA;CACA;CACA;CACD,CAAC,EACH,CAAC,EACH,CAAC;AAEF,MAAM,sBAAsBA,MAAE,OAAO,EACnC,OAAOA,MAAE,OAAO;CACd,MAAMA,MAAE,KAAK;EACX;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,SAASA,MAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI;CAC3C,CAAC,EACH,CAAC;AAEF,IAAa,4BAAb,cAA+C,MAAM;CACnD,YACE,AAAgB,MAChB,SACA,AAAgB,QAChB;AACA,QAAM,QAAQ;EAJE;EAEA;AAGhB,OAAK,OAAO;;;AAIhB,SAAgB,+BACd,OACA,cACA,WAC2B;CAC3B,MAAM,OAAO,mBAAmB,UAAU,MAAM;CAChD,MAAM,SAAS,YAAY,UACzB,KAAK,WAAW,KAAK,KAAK,iBAAiB,eACvC;EACE,WAAW,KAAK,KAAK;EACrB,UAAU;GAAE;GAAW,OAAO,cAAc;GAAgB;EAC7D,GACD,OACL;AACD,KAAI,CAAC,OAAO,SAAS;EACnB,MAAM,YAAY,KAAK,WAAW,KAAK,KAAK,iBAAiB;AAC7D,4BAAO,KACL,EAAE,qBAAqB,WAAW,EAClC,YACI,gHACA,4DACL;AACD,QAAM,IAAI,0BACR,qBACA,gEACA,IACD;;AAEH,QAAO;EACL,WAAW,OAAO,KAAK;EACvB,UAAU;GACR,WAAW,OAAO,KAAK,SAAS;GAChC,OAAO,OAAO,KAAK,SAAS;GAC7B;EACF;;AAKH,MAAM,sBAAsBA,MAAE,OAAO,EACnC,OAAOA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,kBAAkB,EAAE,CAAC,EACxD,CAAC;AAEF,MAAM,qBAAqBA,MAAE,OAAO,EAClC,OAAOA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,CAAC,MAAM,yBAAyB,EAAE,CAAC,EACtE,CAAC;;AAGF,SAAgB,wBACd,OACA,QACA,QAC2B;CAC3B,MAAM,SAAS,oBAAoB,UAAU,MAAM;AACnD,KAAI,OAAO,WAAW,CAAC,OAAO,KAAK,MAAM,QAAQ,SAAS,OAAO,CAC/D,QAAO,IAAI,0BACT,OAAO,KAAK,MAAM,MAClB,OAAO,KAAK,MAAM,SAClB,OACD;AAEH,KAAI,WAAW,OAAO,oBAAoB,UAAU,MAAM,CAAC,SAAS;AAClE,4BAAO,KACL,EAAE,QAAQ,EACV,0FACD;AACD,SAAO,IAAI,0BACT,4BACA,kEACA,IACD;;AAIH,2BAAO,KACL;EACE;EACA,cAAc,mBAAmB,UAAU,MAAM,CAAC,MAAM,MAAM;EAC/D,EACD,kGACD;AAGD,KAAI,gCAAgC,UAAU,MAAM,CAAC,QACnD,QAAO,IAAI,0BACT,qBACA,qCACA,IACD;AAEH,QAAO,IAAI,0BACT,qBACA,2DACA,OACD"}

package/dist/runtime/intelligence-platform/trajectories.d.cts

@@ -0,0 +1,11 @@
+//#region src/runtime/intelligence-platform/trajectories.d.ts
+interface TrajectoryConnectionGrant {
+  joinToken: string;
+  realtime: {
+    clientUrl: string;
+    topic: string;
+  };
+}
+//#endregion
+export { TrajectoryConnectionGrant };
+//# sourceMappingURL=trajectories.d.cts.map

package/dist/runtime/intelligence-platform/trajectories.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trajectories.d.cts","names":[],"sources":["../../../src/runtime/intelligence-platform/trajectories.ts"],"mappings":";UAGiB,yBAAA;EACf,SAAA;EACA,QAAA;IAAY,SAAA;IAAmB,KAAA;EAAA;AAAA"}

package/dist/runtime/intelligence-platform/trajectories.d.mts

@@ -0,0 +1,11 @@
+//#region src/runtime/intelligence-platform/trajectories.d.ts
+interface TrajectoryConnectionGrant {
+  joinToken: string;
+  realtime: {
+    clientUrl: string;
+    topic: string;
+  };
+}
+//#endregion
+export { TrajectoryConnectionGrant };
+//# sourceMappingURL=trajectories.d.mts.map

package/dist/runtime/intelligence-platform/trajectories.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trajectories.d.mts","names":[],"sources":["../../../src/runtime/intelligence-platform/trajectories.ts"],"mappings":";UAGiB,yBAAA;EACf,SAAA;EACA,QAAA;IAAY,SAAA;IAAmB,KAAA;EAAA;AAAA"}