Files
Maxim 0163beab8e feat(reskinnable-demo): stream the harness into a CLI console via AG-UI subagents
Makes the offsite-expenses beat legible while it runs, and gives it its own
model, by taking the AG-UI subagent surface from the canary line.

## The expense analyst is now a real subagent

    banking                       gpt-5.4, temp 0
      │  banking's prompt; browser frontend tools; Intelligence memory tools
      └─ expense-analyst          gpt-5.6-sol, reasoning_effort=high
           │  sandboxed shell, submit_expense_report
           └─ merchant-researcher gpt-5.4, one per merchant, Tavily

Previously the beat was a section of banking's prompt, which left nowhere to put
per-beat configuration: model, effort and recursion limit are all agent-level and
there was one agent. It also meant banking's ~21,000-character rulebook rode
every one of the ~20 model calls the run makes, re-sending rules about markdown
tables while the agent read a CSV.

Reached as a `CompiledSubAgent` because a raw `SubAgent` spec has no `subagents`
field and this one needs its own — the per-merchant fan-out is a headline of the
beat, and a flat subagent could only research serially. Verified nesting
survives: a probe showed the analyst's `task` dispatches, the researchers'
`search_merchant` calls and the final report tool all reaching `astream_events`.

`gpt-5.6-sol` additionally needs `use_responses_api=True`: with function tools
and `reasoning_effort` it 400s on /v1/chat/completions. The first probe missed
that by asking the model a question with NO tools bound — a model probe for an
agent has to bind one.

## The console: one CLI window, streaming

`shell/subagents/subagent-activity.tsx` subscribes to the agent's event stream
and folds it into console lines. Reading `agent.messages` (the previous design)
was wrong twice over: messages materialise at the `MESSAGES_SNAPSHOT`, two per
run, so the pane sat still for minutes and then filled at once; and persisted
messages carry no `subagentRunId`, so the harness's narration could not be told
from banking's own reply.

The fold is pure and idempotent — every line keyed by the id of the thing that
produced it — so the same code serves the live subscription and a replay of the
thread's stored events when a conversation is reopened.

Three heuristics are deleted, each replaced by identity the protocol already
carried:

- the console's "first tool call" anchor      -> the run's first `task` call, from
                                                 MESSAGE order (durable; the
                                                 event-derived version rendered
                                                 one console per delegation on a
                                                 restored thread — six, measured)
- `CONSOLE_TOOL_NAMES` suppression list       -> `subagentRunId` presence
- `disable_streaming` on the researchers      -> the canary's per-lane state

`shell/subagents/subagent-message-filter.tsx` keeps subagent narration out of the
conversation. It suppresses the PROSE and keeps the TOOL CALLS: an agent
routinely narrates and calls a tool in one message, and returning null for the
whole message hid the REPORT CARD — the run looked perfect and ended with nothing
to show. Shell-level and inert for a skin whose agent has no subagents.

## Canary stack, contained to this app

The subagent surface only exists on the canary line, and a released
`@ag-ui/client` <= 0.0.57 rejects `SUBAGENT_*` events in the HTTP transport
before any middleware runs, killing the stream. So the demo leaves the root pnpm
workspace and ships its own lockfile, pinning `@copilotkit/* 1.68.3-canary` and
`@ag-ui/* 0.0.59-canary` locally instead of imposing an unreleased protocol on
every package in the monorepo.

A 1.62.2-based canary was tried first and could not compile the app: it silently
rewound the CopilotKit API five minors under a demo written against 1.67.1, and
`OpenGenerativeUIActivityRenderer` (a public `/v2` export since ~1.63) was the
first thing to break. `workspace:*` is not a version, so the app had no recorded
lower bound on the API it needs.

KNOWN GAP, deliberately not fixed here: Nx discovers projects THROUGH the pnpm
workspace (there is no `workspaceLayout` in `nx.json`), so leaving it also
removes the demo from the repo-wide `nx run-many -t build` and `-t check-types`
sweeps. Verified — `nx show project deep-agents` and the other standalone
showcases return "Could not find project". No workflow names this demo, so it is
currently unbuilt and untype-checked in CI and needs its own job. Run the four
gates locally until that lands. Documented in `pnpm-workspace.yaml`.

## Fixes

- The run clock is keyed per run and read through an injected `ToolRuntime`
  instead of taking the oldest open stamp across the process. Model calls AFTER
  the report re-stamped the clock and that leftover became the next run's start:
  a two-minute run reported 333s. Now 86s reported against 98s wall clock — the
  gap is thread-naming and delegation, before the analyst's first model call,
  which is what the tile claims to measure.
- `merchantKind` non-answers are rejected on the leading token, on hedging
  language, and over 40 characters. With no search tool the model wrote a bare
  "unclear"; with Tavily live it hedges in prose ("unknown (likely
  bookbindery/bookshop retail, but not established for this exact merchant)"),
  which an exact-match filter passed into a 60-character label glued to the
  merchant name.
- `vitest` no longer externalises `@copilotkit/*`. Installing them from npm moved
  `src/app/layout.tsx`'s stylesheet import under `node_modules/.pnpm/`, where
  Node's ESM loader threw `Unknown file extension ".css"` and took out 16 suites
  while naming a stylesheet nobody had touched.
- `agent/main.py` reads the demo's `.env` as well as its own, so `TAVILY_API_KEY`
  works wherever an operator puts it. Two env files to keep in sync is a trap
  whose failure mode is "the agent ignores a key that is plainly sitting in .env".

## Upstream finding (reported separately, not fixed here)

`@copilotkit/runtime` drops `subagentRunId` when persisting messages: 2888 of
3026 stream events carry it, 0 of 53 persisted messages do. Reproduced with
Intelligence removed entirely, so it is the runtime's message shape rather than
the platform store — and `@copilotkit/runtime`'s dist contains no occurrence of
the field at all, while `@ag-ui/core`, `ag-ui-protocol` and `@copilotkit/core`
all model it. One field threaded through would let the console rebuild from
message history and delete the event-replay seeding added here.

`CLAUDE.md`'s appended block is generated by `next dev`
(`next/dist/server/lib/generate-agent-files.js`) and committed per its own
instruction to keep the tree clean.

Gates: lint 0, typecheck 0, test:unit 2460 passed across 216 files, build 0.
Measured end to end in Intelligence mode: 14 rows, 9 merchants researched, 6
charges filed with ids read out of real 201 bodies, totals reconciling against
their own rows, 3220 events with 6 SUBAGENT_STARTED/FINISHED pairs.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JRubZT6AS6LCGkcE2KzcfA
2026-08-20 13:54:58 +02:00

203 lines
8.9 KiB
Python

"""FastAPI server exposing banking's deep agent over AG-UI.
The reskinnable demo's Next app registers this endpoint as an ordinary AG-UI
agent (`HttpAgent`) in its server agent registry, so every event this service
emits — reasoning, tool calls, subagent activity, the final report tool — rides
the same AG-UI stream as any other agent in the app.
"""
import os
import pathlib
from ag_ui_langgraph import add_langgraph_fastapi_endpoint
from copilotkit import LangGraphAGUIAgent
from dotenv import load_dotenv
from fastapi import FastAPI
from fastapi.middleware.cors import CORSMiddleware
from agent import build_agent
# Read the DEMO's `.env` as well as this service's own.
#
# The app and this agent need the same keys (`OPENAI_API_KEY` for both,
# `TAVILY_API_KEY` for merchant research), and asking an operator to keep two
# env files in sync is a trap: the failure is silent and looks like the agent
# ignoring a key that is plainly sitting in `.env`.
#
# `agent/.env` is loaded FIRST and wins on conflict (python-dotenv does not
# override already-set values), so this service can still be pointed somewhere
# else — a different model, a separate quota — without touching the app's file.
_HERE = pathlib.Path(__file__).parent
load_dotenv(_HERE / ".env")
load_dotenv(_HERE.parent / ".env")
app = FastAPI(
title="Northwind offsite-expenses agent",
description="LangChain deep agent behind the reskinnable demo's banking skin",
version="0.1.0",
)
app.add_middleware(
CORSMiddleware,
allow_origins=["*"],
allow_credentials=True,
allow_methods=["*"],
allow_headers=["*"],
)
@app.get("/health")
def health():
"""Health check — `run-demo.sh` and docker-compose both wait on this."""
return {"status": "ok", "service": "banking-agent"}
class BankingAGUIAgent(LangGraphAGUIAgent):
"""`LangGraphAGUIAgent` with a working `clone()`.
WORKAROUND for an incompatibility between two published packages, not a
preference. `ag_ui_langgraph`'s endpoint clones the agent on EVERY request
(`endpoint.py`, for per-request state isolation), and since upstream commit
3dec0125 "feat(langgraph): add structured interrupt/resume support"
(2026-06-12, released in ag-ui-langgraph 0.0.42) the base `clone()` passes
three newer keyword arguments — `enable_legacy_on_interrupt_event`,
`emit_interrupt_outcome`, `emit_raw_events`.
`copilotkit`'s `LangGraphAGUIAgent.__init__` accepts only
`(name, graph, description, config)` and does not override `clone()`, so on
ag-ui-langgraph >= 0.0.42 every single request dies with:
TypeError: LangGraphAGUIAgent must override clone() or ensure its
__init__ accepts (name, graph, description, config) as keyword
arguments: ... unexpected keyword argument
'enable_legacy_on_interrupt_event'
Verified against copilotkit 0.1.95 (the current release AND this repo's own
`sdk-python` source) with ag-ui-langgraph 0.0.43.
Dropping the three flags is safe HERE: this agent uses no structured
interrupts and does not consume raw events, so the base defaults are what we
want anyway. The real fix belongs in the SDK — either a `clone()` override
or a `**kwargs` passthrough in
`sdk-python/copilotkit/langgraph_agui_agent.py`. Delete this class once that
ships.
"""
def clone(self):
clone = type(self)(
name=self.name,
graph=self.graph,
description=self.description,
config=dict(self.config) if self.config else None,
)
# Carry the flag across the per-request clone by hand.
#
# `emit_raw_events` defaults to True, which piggybacks LangChain's
# internal event objects onto the AG-UI stream. On a multi-minute run
# that is most of the payload — a measured run streamed ~27MB, of which
# RAW was the single largest event category. The thread PERSISTS those
# events (a completed run replayed 8221 of them), and this demo's whole
# premise is that you can leave a running thread and come back to it, so
# the replay path pays that weight every time.
#
# Nothing downstream reads RAW: the report card renders off
# TOOL_CALL_RESULT and the transcript off TEXT_MESSAGE_*.
#
# It is set as an ATTRIBUTE rather than a constructor argument because
# `copilotkit`'s `LangGraphAGUIAgent.__init__` accepts only
# (name, graph, description, config) — the same narrow signature behind
# the clone() bug this class already works around.
clone.emit_raw_events = self.emit_raw_events
# Same reason, higher stakes. `emit_subagent_events` is what makes the
# nested analyst and its researchers representable at all — lifecycle
# events, `subagentRunId` attribution, and (the part this demo needs)
# subagent messages persisting across turns via the snapshot.
#
# The BASE `clone()` forwards it; this override does not, because it
# exists precisely to stop passing kwargs the copilotkit subclass cannot
# take. So every flag the base would have carried has to be re-applied by
# hand here, and forgetting one is silent: the endpoint clones per
# request, so the flag would be set on an object no request ever uses and
# the stream would quietly revert to pre-subagent behaviour.
clone.emit_subagent_events = self.emit_subagent_events
return clone
async def run(self, input):
"""Log what the host sent, once per run.
NOT once per process. A run against the Intelligence runtime arrives as
TWO calls into this service: thread-name generation first (two messages,
zero tools — correctly, it is only naming the conversation), then the
user's actual run carrying the browser's frontend tools plus the
Intelligence MCP tools (`recall_memory`, `save_memory`, `forget_memory`,
`copilotkit_knowledge_base_shell`).
Instrumenting only the first call is how you conclude the platform
forwards nothing when it forwards everything. It cost a full round of
wrong analysis here; the fix is one line, and it is this one.
"""
names = [
getattr(t, "name", None) for t in (getattr(input, "tools", None) or [])
]
print(
f"[banking-agent] run: {len(input.messages or [])} message(s), "
f"host sent {len(names)} tool(s) {sorted(n for n in names if n)}",
flush=True,
)
async for event in super().run(input):
yield event
banking_agent = BankingAGUIAgent(
name="banking",
description=(
"Northwind Finance's banking copilot. Drives the dashboard, renders "
"reports on the canvas, and runs the multi-minute offsite-expense "
"analysis in a sandboxed shell with parallel research subagents."
),
graph=build_agent(),
# A multi-minute run over fourteen rows with per-merchant subagents and a
# shell burns supersteps fast — a measured run used well over a hundred.
# LangGraph's default is 25, and this is the ONLY place the adapter honours
# the setting (see the note in `agent.py`).
config={"recursion_limit": 300},
)
# See `clone()` above for why these are attributes rather than constructor
# arguments: copilotkit's `LangGraphAGUIAgent.__init__` accepts only
# (name, graph, description, config) and silently drops the rest.
banking_agent.emit_raw_events = False
# Turn the subagent surface ON. It is opt-in upstream for a good reason: a
# released `@ag-ui/client` <= 0.0.57 validates every event against a
# discriminated union IN THE HTTP TRANSPORT, before any middleware runs, so a
# single `SUBAGENT_STARTED` kills the whole stream and no client-side filter can
# save it. This app pins `@ag-ui/client` 0.0.59-canary in its own lockfile
# precisely so it can take these events — which is also why the demo is not a
# member of the root pnpm workspace (see `pnpm-workspace.yaml`).
#
# What it buys, all of which this beat needs:
# * subagent messages persist across turns via the snapshot — without it the
# whole nested journey collapses to one ToolMessage ("Completed
# successfully.") and a rejoin shows a thread that did nothing for minutes;
# * per-lane state, so ten concurrent researchers stop shredding their prose
# into one interleaved message;
# * `subagentRunId` / `parentSubagentRunId`, which give the console real
# identity to group by instead of guessing from the first tool call.
banking_agent.emit_subagent_events = True
add_langgraph_fastapi_endpoint(app=app, agent=banking_agent, path="/")
def main():
import uvicorn
host = os.getenv("SERVER_HOST", "0.0.0.0")
port = int(os.getenv("SERVER_PORT", "8124"))
print(f"[banking-agent] listening on {host}:{port}")
uvicorn.run("main:app", host=host, port=port, log_level="info")
if __name__ == "__main__":
main()