veryfront 0.1.63 → 0.1.65

package/esm/src/channels/invoke.d.ts

@@ -1,11 +1,12 @@
 import type { Agent, AgentMessage as Message, AgentResponse } from "../agent/index.js";
 import type { HandlerContext } from "../types/index.js";
 import { z } from "zod";
+import { type RuntimeAgentDiscoveryDeps } from "./control-plane.js";
 export declare const ChannelInvokeRequestSchema: z.ZodObject<{
     dispatchId: z.ZodString;
     conversationId: z.ZodString;
     projectId: z.ZodString;
-    agentConfigId: z.ZodString;
+    assistantId: z.ZodString;
     platform: z.ZodLiteral<"slack">;
     inboundMessage: z.ZodObject<{
         text: z.ZodString;
@@ -97,7 +98,7 @@ export declare const ChannelInvokeRequestSchema: z.ZodObject<{
     projectId: string;
     dispatchId: string;
     conversationId: string;
-    agentConfigId: string;
+    assistantId: string;
     inboundMessage: {
         text: string;
         userId: string;
@@ -128,7 +129,7 @@ export declare const ChannelInvokeRequestSchema: z.ZodObject<{
     projectId: string;
     dispatchId: string;
     conversationId: string;
-    agentConfigId: string;
+    assistantId: string;
     inboundMessage: {
         text: string;
         userId: string;
@@ -155,6 +156,67 @@ export declare const ChannelInvokeRequestSchema: z.ZodObject<{
         maxResponseTokens?: number | undefined;
     } | undefined;
 }>;
+export declare const ChannelAssistantsRequestSchema: z.ZodObject<{
+    requestId: z.ZodString;
+    projectId: z.ZodString;
+    platform: z.ZodLiteral<"slack">;
+}, "strip", z.ZodTypeAny, {
+    requestId: string;
+    platform: "slack";
+    projectId: string;
+}, {
+    requestId: string;
+    platform: "slack";
+    projectId: string;
+}>;
+export declare const ChannelAssistantSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    model: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    id: string;
+    description?: string | null | undefined;
+    model?: string | null | undefined;
+}, {
+    name: string;
+    id: string;
+    description?: string | null | undefined;
+    model?: string | null | undefined;
+}>;
+export declare const ChannelAssistantsResponseSchema: z.ZodObject<{
+    assistants: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        model: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        id: string;
+        description?: string | null | undefined;
+        model?: string | null | undefined;
+    }, {
+        name: string;
+        id: string;
+        description?: string | null | undefined;
+        model?: string | null | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    assistants: {
+        name: string;
+        id: string;
+        description?: string | null | undefined;
+        model?: string | null | undefined;
+    }[];
+}, {
+    assistants: {
+        name: string;
+        id: string;
+        description?: string | null | undefined;
+        model?: string | null | undefined;
+    }[];
+}>;
 export declare const ChannelResponsePartSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     type: z.ZodLiteral<"text">;
     text: z.ZodString;
@@ -375,53 +437,18 @@ export declare const ChannelInvokeResponseSchema: z.ZodObject<{
         outputTokens?: number | undefined;
     } | undefined;
 }>;
-declare const dispatchClaimsSchema: z.ZodObject<{
-    iss: z.ZodString;
-    aud: z.ZodString;
-    sub: z.ZodString;
-    project_id: z.ZodString;
-    platform: z.ZodString;
-    body_sha256: z.ZodString;
-    iat: z.ZodNumber;
-    exp: z.ZodNumber;
-}, "strip", z.ZodTypeAny, {
-    project_id: string;
-    platform: string;
-    sub: string;
-    iss: string;
-    aud: string;
-    body_sha256: string;
-    iat: number;
-    exp: number;
-}, {
-    project_id: string;
-    platform: string;
-    sub: string;
-    iss: string;
-    aud: string;
-    body_sha256: string;
-    iat: number;
-    exp: number;
-}>;
 export type ChannelInvokeRequest = z.infer<typeof ChannelInvokeRequestSchema>;
 export type ChannelInvokeResponse = z.infer<typeof ChannelInvokeResponseSchema>;
+export type ChannelAssistantsRequest = z.infer<typeof ChannelAssistantsRequestSchema>;
+export type ChannelAssistantsResponse = z.infer<typeof ChannelAssistantsResponseSchema>;
 type ChannelResponsePart = z.infer<typeof ChannelResponsePartSchema>;
-type DispatchClaims = z.infer<typeof dispatchClaimsSchema>;
-export interface ChannelInvokeDeps {
-    ensureProjectDiscovery: (ctx: HandlerContext) => Promise<void>;
-    getAgent: (id: string) => Agent | undefined;
-    getAllAgentIds: () => string[];
+export interface ChannelInvokeDeps extends RuntimeAgentDiscoveryDeps {
 }
 export declare const defaultChannelInvokeDeps: ChannelInvokeDeps;
-export declare function verifyDispatchJws(jws: string, body: string, options: {
-    audience: string;
-    publicKeyPem: string;
-    maxAgeSeconds: number;
-    expectedProjectId?: string;
-}): Promise<DispatchClaims>;
+export declare function listChannelAssistants(ctx: HandlerContext, deps: ChannelInvokeDeps): Promise<ChannelAssistantsResponse>;
+export { verifyDispatchJws } from "./control-plane.js";
 export declare function normalizeConversationHistoryForRuntime(messages: ChannelInvokeRequest["conversationHistory"]): Message[];
-export declare function resolveChannelInvokeAgent(agentConfigId: string, deps: Pick<ChannelInvokeDeps, "getAgent" | "getAllAgentIds">): Agent | undefined;
+export declare function resolveChannelInvokeAgent(assistantId: string, deps: Pick<ChannelInvokeDeps, "getAgent" | "getAllAgentIds">): Agent | undefined;
 export declare function buildChannelResponseParts(response: AgentResponse): ChannelResponsePart[];
 export declare function executeChannelInvoke(payload: ChannelInvokeRequest, ctx: HandlerContext, deps: ChannelInvokeDeps): Promise<ChannelInvokeResponse>;
-export {};
 //# sourceMappingURL=invoke.d.ts.map

package/esm/src/channels/invoke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoke.d.ts","sourceRoot":"","sources":["../../../src/src/channels/invoke.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,IAAI,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA8BxB,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBrC,CAAC;AAiCH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAMpC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYtC,CAAC;AAQH,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;EASxB,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,KAAK,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AACrE,KAAK,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,sBAAsB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,KAAK,GAAG,SAAS,CAAC;IAC5C,cAAc,EAAE,MAAM,MAAM,EAAE,CAAC;CAChC;AAED,eAAO,MAAM,wBAAwB,EAAE,iBAItC,CAAC;AAyCF,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,GACA,OAAO,CAAC,cAAc,CAAC,CA2DzB;AAqCD,wBAAgB,sCAAsC,CACpD,QAAQ,EAAE,oBAAoB,CAAC,qBAAqB,CAAC,GACpD,OAAO,EAAE,CAUX;AAED,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,GAAG,gBAAgB,CAAC,GAC3D,KAAK,GAAG,SAAS,CA2BnB;AAsDD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,aAAa,GAAG,mBAAmB,EAAE,CAiDxF;AAgBD,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,qBAAqB,CAAC,CAkEhC"}
+{"version":3,"file":"invoke.d.ts","sourceRoot":"","sources":["../../../src/src/channels/invoke.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,IAAI,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAqB,KAAK,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AA4CvF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAiC,CAAC;AAEzE,eAAO,MAAM,8BAA8B;;;;;;;;;;;;EAIzC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;EAKjC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE1C,CAAC;AAiCH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAMpC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYtC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,KAAK,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AACrE,MAAM,WAAW,iBAAkB,SAAQ,yBAAyB;CAAG;AAEvE,eAAO,MAAM,wBAAwB,EAAE,iBAItC,CAAC;AAEF,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,yBAAyB,CAAC,CAYpC;AACD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAqCvD,wBAAgB,sCAAsC,CACpD,QAAQ,EAAE,oBAAoB,CAAC,qBAAqB,CAAC,GACpD,OAAO,EAAE,CAUX;AAED,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,GAAG,gBAAgB,CAAC,GAC3D,KAAK,GAAG,SAAS,CAEnB;AAsDD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,aAAa,GAAG,mBAAmB,EAAE,CAiDxF;AAgBD,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,qBAAqB,CAAC,CAkEhC"}

package/esm/src/channels/invoke.js

@@ -1,12 +1,10 @@
-import * as dntShim from "../../_dnt.shims.js";
 import { fromError } from "../errors/veryfront-error.js";
 import { serverLogger } from "../utils/index.js";
-import { base64urlEncodeBytes } from "../utils/base64url.js";
 import { z } from "zod";
 import { getAgent as getRegisteredAgent, getAllAgentIds as getRegisteredAgentIds, } from "../agent/composition/composition.js";
+import { listRuntimeAgents } from "./control-plane.js";
 import { ensureProjectDiscovery as ensureProjectDiscoveryForProject } from "../server/handlers/request/api/project-discovery.js";
 const logger = serverLogger.component("channels-invoke");
-const SIGNATURE_SKEW_SECONDS = 5;
 const rawHistoryPartSchema = z.object({
     type: z.string(),
 }).passthrough();
@@ -24,11 +22,11 @@ const channelInvokeHistoryMessageSchema = z.object({
     metadata: z.record(z.unknown()).optional(),
     createdAt: z.string().optional(),
 });
-export const ChannelInvokeRequestSchema = z.object({
+const channelInvokeRequestWireSchema = z.object({
     dispatchId: z.string().min(1),
     conversationId: z.string().min(1),
     projectId: z.string().min(1),
-    agentConfigId: z.string().min(1),
+    assistantId: z.string().min(1),
     platform: z.literal("slack"),
     inboundMessage: z.object({
         text: z.string(),
@@ -42,6 +40,21 @@ export const ChannelInvokeRequestSchema = z.object({
         maxResponseTokens: z.number().int().positive().max(16384).optional(),
     }).optional(),
 });
+export const ChannelInvokeRequestSchema = channelInvokeRequestWireSchema;
+export const ChannelAssistantsRequestSchema = z.object({
+    requestId: z.string().min(1),
+    projectId: z.string().min(1),
+    platform: z.literal("slack"),
+});
+export const ChannelAssistantSchema = z.object({
+    id: z.string().min(1),
+    name: z.string().min(1),
+    description: z.string().nullable().optional(),
+    model: z.string().nullable().optional(),
+});
+export const ChannelAssistantsResponseSchema = z.object({
+    assistants: z.array(ChannelAssistantSchema),
+});
 const channelTextPartSchema = z.object({
     type: z.literal("text"),
     text: z.string(),
@@ -88,97 +101,22 @@ export const ChannelInvokeResponseSchema = z.object({
         retryable: z.boolean(),
     }).optional(),
 });
-const dispatchHeaderSchema = z.object({
-    alg: z.literal("EdDSA"),
-    typ: z.string().optional(),
-    kid: z.string().optional(),
-});
-const dispatchClaimsSchema = z.object({
-    iss: z.string(),
-    aud: z.string(),
-    sub: z.string(),
-    project_id: z.string(),
-    platform: z.string(),
-    body_sha256: z.string(),
-    iat: z.number().int(),
-    exp: z.number().int(),
-});
 export const defaultChannelInvokeDeps = {
     ensureProjectDiscovery: ensureProjectDiscoveryForProject,
     getAgent: getRegisteredAgent,
     getAllAgentIds: getRegisteredAgentIds,
 };
-function base64urlDecodeToBytes(input) {
-    const normalized = input
-        .replaceAll("-", "+")
-        .replaceAll("_", "/")
-        .padEnd(Math.ceil(input.length / 4) * 4, "=");
-    return toArrayBuffer(Uint8Array.from(atob(normalized), (char) => char.charCodeAt(0)));
-}
-function toArrayBuffer(bytes) {
-    const buffer = new ArrayBuffer(bytes.byteLength);
-    new Uint8Array(buffer).set(bytes);
-    return buffer;
-}
-function pemToDer(pem, label) {
-    const body = pem
-        .replace(`-----BEGIN ${label}-----`, "")
-        .replace(`-----END ${label}-----`, "")
-        .replace(/\s/g, "");
-    return toArrayBuffer(Uint8Array.from(atob(body), (char) => char.charCodeAt(0)));
-}
-async function importEd25519PublicKey(pem) {
-    return dntShim.crypto.subtle.importKey("spki", pemToDer(pem, "PUBLIC KEY"), "Ed25519", false, ["verify"]);
-}
-async function sha256Base64url(body) {
-    const hash = await dntShim.crypto.subtle.digest("SHA-256", new TextEncoder().encode(body));
-    return base64urlEncodeBytes(new Uint8Array(hash));
-}
-export async function verifyDispatchJws(jws, body, options) {
-    const parts = jws.split(".");
-    if (parts.length !== 3) {
-        throw new Error("Channel dispatch signature must be a compact JWS");
-    }
-    const encodedHeader = parts[0];
-    const encodedPayload = parts[1];
-    const encodedSignature = parts[2];
-    if (!encodedHeader || !encodedPayload || !encodedSignature) {
-        throw new Error("Channel dispatch signature must include header, payload, and signature");
-    }
-    const header = dispatchHeaderSchema.parse(JSON.parse(new TextDecoder().decode(base64urlDecodeToBytes(encodedHeader))));
-    const claims = dispatchClaimsSchema.parse(JSON.parse(new TextDecoder().decode(base64urlDecodeToBytes(encodedPayload))));
-    if (header.alg !== "EdDSA") {
-        throw new Error("Unsupported channel dispatch JWS algorithm");
-    }
-    const signingInput = new TextEncoder().encode(`${encodedHeader}.${encodedPayload}`);
-    const signature = base64urlDecodeToBytes(encodedSignature);
-    const publicKey = await importEd25519PublicKey(options.publicKeyPem);
-    const verified = await dntShim.crypto.subtle.verify("Ed25519", publicKey, signature, signingInput);
-    if (!verified) {
-        throw new Error("Channel dispatch signature verification failed");
-    }
-    if (claims.aud !== options.audience) {
-        throw new Error("Channel dispatch audience mismatch");
-    }
-    if (options.expectedProjectId && claims.project_id !== options.expectedProjectId) {
-        throw new Error("Channel dispatch project mismatch");
-    }
-    const now = Math.floor(Date.now() / 1000);
-    if (claims.exp <= now) {
-        throw new Error("Channel dispatch signature expired");
-    }
-    if (claims.iat > now + SIGNATURE_SKEW_SECONDS) {
-        throw new Error("Channel dispatch signature issued in the future");
-    }
-    if (now - claims.iat > options.maxAgeSeconds) {
-        throw new Error("Channel dispatch signature is too old");
-    }
-    const bodySha256 = await sha256Base64url(body);
-    if (claims.body_sha256 !== bodySha256) {
-        throw new Error("Channel dispatch body hash mismatch");
-    }
-    return claims;
+export async function listChannelAssistants(ctx, deps) {
+    const response = await listRuntimeAgents(ctx, deps);
+    const assistants = response.agents.map((agent) => ChannelAssistantSchema.parse({
+        id: agent.id,
+        name: agent.name,
+        description: agent.description ?? null,
+        model: agent.model ?? null,
+    }));
+    return ChannelAssistantsResponseSchema.parse({ assistants });
 }
+export { verifyDispatchJws } from "./control-plane.js";
 function normalizeConversationPart(part) {
     if (part.type === "text" && typeof part.text === "string") {
         return { type: "text", text: part.text };
@@ -217,27 +155,8 @@ export function normalizeConversationHistoryForRuntime(messages) {
         ...(message.metadata ? { metadata: message.metadata } : {}),
     }));
 }
-export function resolveChannelInvokeAgent(agentConfigId, deps) {
-    const exactAgent = deps.getAgent(agentConfigId);
-    if (exactAgent) {
-        return exactAgent;
-    }
-    const agentIds = deps.getAllAgentIds();
-    if (agentIds.length !== 1) {
-        return undefined;
-    }
-    const onlyAgentId = agentIds[0];
-    if (!onlyAgentId) {
-        return undefined;
-    }
-    const onlyAgent = deps.getAgent(onlyAgentId);
-    if (onlyAgent) {
-        logger.warn("Channel invoke fell back to the only discovered runtime agent because agentConfigId did not match a registry id", {
-            requestedAgentConfigId: agentConfigId,
-            resolvedAgentId: onlyAgentId,
-        });
-    }
-    return onlyAgent;
+export function resolveChannelInvokeAgent(assistantId, deps) {
+    return deps.getAgent(assistantId);
 }
 function normalizeToolCallState(status) {
     switch (status) {
@@ -338,10 +257,10 @@ function classifyRuntimeError(error) {
 }
 export async function executeChannelInvoke(payload, ctx, deps) {
     await deps.ensureProjectDiscovery(ctx);
-    const agent = resolveChannelInvokeAgent(payload.agentConfigId, deps);
+    const agent = resolveChannelInvokeAgent(payload.assistantId, deps);
     if (!agent) {
         logger.error("Channel invoke could not resolve a runtime agent for the request", {
-            requestedAgentConfigId: payload.agentConfigId,
+            requestedAssistantId: payload.assistantId,
             discoveredAgentIds: deps.getAllAgentIds(),
             projectSlug: ctx.projectSlug,
             projectId: ctx.projectId,
@@ -364,7 +283,7 @@ export async function executeChannelInvoke(payload, ctx, deps) {
                 dispatchId: payload.dispatchId,
                 conversationId: payload.conversationId,
                 projectId: payload.projectId,
-                agentConfigId: payload.agentConfigId,
+                assistantId: payload.assistantId,
                 channel: payload.inboundMessage,
             },
             ...(payload.generation?.maxResponseTokens

package/esm/src/integrations/endpoint-executor.d.ts

@@ -1,4 +1,5 @@
 import type { IntegrationEndpoint } from "./types.js";
+export declare function validateEndpointUrl(url: string): void;
 interface ExecutionContext {
     integration: string;
     toolId: string;

package/esm/src/integrations/endpoint-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"endpoint-executor.d.ts","sourceRoot":"","sources":["../../../src/src/integrations/endpoint-executor.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGtD,UAAU,gBAAgB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,mBAAmB,EAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAK9C"}
+{"version":3,"file":"endpoint-executor.d.ts","sourceRoot":"","sources":["../../../src/src/integrations/endpoint-executor.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAetD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAiCrD;AAED,UAAU,gBAAgB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,mBAAmB,EAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAK9C"}

package/esm/src/integrations/endpoint-executor.js

@@ -8,6 +8,48 @@
 import * as dntShim from "../../_dnt.shims.js";
 import { logger } from "../utils/index.js";
 import { INVALID_ARGUMENT } from "../errors/index.js";
+const PRIVATE_IP_RANGES = [
+    /^127\./, // 127.0.0.0/8
+    /^10\./, // 10.0.0.0/8
+    /^172\.(1[6-9]|2\d|3[01])\./, // 172.16.0.0/12
+    /^192\.168\./, // 192.168.0.0/16
+    /^169\.254\./, // 169.254.0.0/16
+    /^0\./, // 0.0.0.0/8
+    /^::1$/, // IPv6 loopback
+    /^f[cd][0-9a-f]{2}:/i, // IPv6 unique local (fc00::/7)
+    /^fe80:/i, // IPv6 link-local (fe80::/10)
+];
+export function validateEndpointUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw INVALID_ARGUMENT.create({ detail: `Invalid endpoint URL: ${url}` });
+    }
+    if (parsed.protocol !== "https:") {
+        throw INVALID_ARGUMENT.create({
+            detail: `Endpoint URL must use HTTPS: ${parsed.protocol}`,
+        });
+    }
+    const hostname = parsed.hostname.toLowerCase();
+    if (hostname === "localhost") {
+        throw INVALID_ARGUMENT.create({
+            detail: "Endpoint URL must not target localhost",
+        });
+    }
+    // Strip IPv6 brackets for regex matching
+    const bare = hostname.startsWith("[") && hostname.endsWith("]")
+        ? hostname.slice(1, -1)
+        : hostname;
+    for (const range of PRIVATE_IP_RANGES) {
+        if (range.test(bare)) {
+            throw INVALID_ARGUMENT.create({
+                detail: "Endpoint URL must not target private/internal networks",
+            });
+        }
+    }
+}
 export async function executeEndpoint(endpoint, args, accessToken, ctx) {
     if (endpoint.type === "graphql") {
         return executeGraphQL(endpoint, args, accessToken, ctx);
@@ -40,6 +82,7 @@ async function executeGraphQL(endpoint, args, accessToken, ctx) {
             headers[key] = args[key] !== undefined ? String(args[key]) : String(def.default ?? "");
         }
     }
+    validateEndpointUrl(endpoint.url);
     logger.debug("Executing GraphQL endpoint", {
         integration: ctx.integration,
         tool: ctx.toolId,
@@ -112,6 +155,7 @@ async function executeRest(endpoint, args, accessToken, ctx) {
         body = JSON.stringify(bodyObj);
         headers["Content-Type"] = endpoint.contentType ?? "application/json";
     }
+    validateEndpointUrl(urlObj.toString());
     logger.debug("Executing REST endpoint", {
         integration: ctx.integration,
         tool: ctx.toolId,

package/esm/src/internal-agents/ag-ui-sse.d.ts

@@ -0,0 +1,35 @@
+import type { AgentResponse } from "../agent/index.js";
+type RuntimeDataEvent = Record<string, unknown> & {
+    type: string;
+};
+export interface RunFinishedMetadata {
+    provider?: string;
+    model?: string;
+    inputTokens?: number;
+    outputTokens?: number;
+    totalTokens?: number;
+    finishReason?: string;
+}
+export interface StreamTransformState {
+    messageId: string | null;
+    textOpen: boolean;
+    stepIndex: number;
+    sawTerminalError: boolean;
+    metadata: RunFinishedMetadata;
+}
+export declare function createStreamTransformState(): StreamTransformState;
+export declare function formatAgUiEvent(event: string, payload: Record<string, unknown>): Uint8Array;
+export declare function parseSseJsonEvents(chunk: string): {
+    events: RuntimeDataEvent[];
+    remainder: string;
+};
+export declare function mapRuntimeEventToAgUi(state: StreamTransformState, event: RuntimeDataEvent): Array<{
+    event: string;
+    payload: Record<string, unknown>;
+}>;
+export declare function finalizeRunEvents(state: StreamTransformState, response: AgentResponse | null): Array<{
+    event: string;
+    payload: Record<string, unknown>;
+}>;
+export {};
+//# sourceMappingURL=ag-ui-sse.d.ts.map

package/esm/src/internal-agents/ag-ui-sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ag-ui-sse.d.ts","sourceRoot":"","sources":["../../../src/src/internal-agents/ag-ui-sse.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAOvD,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED,wBAAgB,0BAA0B,IAAI,oBAAoB,CAQjE;AA2DD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAI3F;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG;IACjD,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB,CAyBA;AAkDD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,gBAAgB,GACtB,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAoH5D;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,oBAAoB,EAC3B,QAAQ,EAAE,aAAa,GAAG,IAAI,GAC7B,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAwB5D"}