feat(ag-ui): distinguish run outcomes from HTTP completion

[blove]

A closed HTTP stream does not establish that an AG-UI run succeeded. The locked SDK also accepts mismatched root identifiers and trailing terminal events, while the supported Python provider represents a pause with CUSTOM on_interrupt followed by RUN_FINISHED.

Add a private run owner over the private HTTP request owner. Each invocation captures caller-assigned identity, admits matching root events, and resolves exactly once to success, pause, interruption, error or abort. It captures terminal evidence before the projection callback, so callback mutation cannot change authority; synchronous local or external cancellation still wins if triggered inside that callback. Every domain terminal closes the physical request, even if the server holds it open.

Native child events remain observations and cannot settle the parent. Child-tagged RUN_* events delivered by the SDK are rejected. Supported SSE tests preserve that distinction; protobuf can erase those tags before the coordinator, so this change makes no guarantee about recovering absent attribution. Public exports, SDK state application, transcripts, tools, dependencies and releases are unchanged.

Validation:

• 81 private runtime tests (56 new) and 456 legacy AG-UI tests; strict runtime/public types, build and lint (zero errors, existing legacy warnings).
• Actual HTTP regressions for terminal authority, identity, child attribution, EOF, callback mutation/reentrancy, physical cancellation and independent starts. Retained RED controls cover false success, lost abort, admission errors and omitted synchronous cleanup.
• 266 focused runtime-config/boundary/inventory policy tests; inventory, source boundaries and release-version checks.
• Actual deterministic Python provider HTTP success, graph failure and interrupt cases resolve success/error/paused without unhandled rejection.
• Automated Chromium, Chrome MCP and in-app-browser walkthroughs each cover six outcomes; all 18 requests physically close with no uncaught JavaScript or console errors.
• Independent compliance and code-quality review.

This is private run authority. Neutral session publication, complete transcript fidelity and public AG-UI/React parity remain separate work.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
threadplane	Ready	Preview	Sep 24, 2026 9:59pm UTC

[github-actions]

Automated approval: this PR received an intelligent (AI) code review. See the review comments on this PR.

[github-actions]

Claude finished @blove's task in 0s —— View job

---

I'll analyze this and get back to you.