Developer guide / architecture
Architecture and ownership
The host authenticates the user. Intelligence Runner sends agent events to the platform.
Draft · The release review is in progress.
One runner in five languages
Each library connects your application to Intelligence. TypeScript exposes CopilotIntelligenceRuntime and IntelligenceAgentRunner.
Your agent produces AG-UI events. Intelligence Runner runs the agent and sends its events to the platform.
The host owns authentication
The host callback returns a trusted application-user ID. A browser-supplied ID is not proof of identity.
The application user is not the person who created the platform API key. Thread ownership follows the application user.
The host also owns CORS configuration and diagnostic logs. The test-driver identity headers are not a production authentication scheme.
Intelligence stores the data
The platform API stores threads, memories, and annotations. It grants run locks and issues realtime connection credentials.
The gateway accepts authenticated Phoenix connections from the runner. It acknowledges events after storage.
The browser receives separate connection credentials. The runtime never sends its platform API key to the browser.