fix: resolve merge conflict with main (pnpm-lock.yaml)

Author: mxmzb

.changeset/empty-mails-applaud.md

@@ -0,0 +1,5 @@
+---
+"@copilotkit/runtime": patch
+---
+
+fix: preserve jsonSchema structure in MCP tool parameter extraction

.changeset/five-avocados-visit.md

@@ -0,0 +1,5 @@
+---
+"@copilotkit/react-core": patch
+---
+
+fix: pass toolCallId to useRenderTool render components

.changeset/little-pears-tell.md

@@ -0,0 +1,5 @@
+---
+"@copilotkit/react-ui": patch
+---
+
+fix: pass urlTransform prop through to ReactMarkdown

.github/workflows/publish-release.yml

@@ -74,6 +74,20 @@ jobs:
           git config --global user.email "github-actions[bot]@users.noreply.github.com"
           git config --global user.name "github-actions[bot]"
 
+      - name: Check for pre-existing tags
+        run: |
+          SCOPE="${{ steps.meta.outputs.scope }}"
+          VERSION="${{ steps.publish.outputs.version }}"
+          if [ "$SCOPE" == "monorepo" ]; then
+            TAG="v${VERSION}"
+          else
+            TAG="${SCOPE}/v${VERSION}"
+          fi
+          if git rev-parse "$TAG" >/dev/null 2>&1; then
+            echo "ERROR: Tag $TAG already exists" >&2
+            exit 1
+          fi
+
       - name: Create and push git tag
         run: |
           SCOPE="${{ steps.meta.outputs.scope }}"

.github/workflows/showcase_aimock-e2e.yml

@@ -78,7 +78,7 @@ jobs:
       - name: Start aimock
         run: |
           npm install -g @copilotkit/aimock@latest
-          npx aimock --port 4010 --host 127.0.0.1 --fixtures showcase/aimock/feature-parity.json &
+          npx aimock --port 4010 --host 127.0.0.1 --fixtures showcase/aimock/feature-parity.json --validate-on-load &
           # Wait for aimock to be ready
           for i in $(seq 1 20); do
             curl -sf http://localhost:4010/ > /dev/null 2>&1 && break

.github/workflows/showcase_deploy.yml

@@ -59,6 +59,16 @@ jobs:
           elif [ $EXIT_CODE -eq 3 ]; then
             echo "Has review items + clean transforms"
             echo "action=push_and_pr" >> "$GITHUB_OUTPUT"
+            if [ -f review-items.txt ]; then
+              REVIEW_ITEMS=$(cat review-items.txt)
+            else
+              echo "::warning::review-items.txt not found despite exit code 3 — sync script may have a bug"
+              REVIEW_ITEMS="(review-items.txt not found — check sync script output)"
+            fi
+            # Persist review items to a file for downstream jq-based payload building
+            # (avoids unsafe string interpolation of untrusted filenames into JSON).
+            printf '%s' "$REVIEW_ITEMS" > review-items-raw.txt
+            echo "review_items_file=review-items-raw.txt" >> "$GITHUB_OUTPUT"
           else
             echo "Sync failed with exit code $EXIT_CODE"
             exit 1
@@ -91,8 +101,11 @@ jobs:
           CHANGED=$(git diff --cached --name-only | wc -l | tr -d ' ')
 
           if [ "$CHANGED" = "0" ]; then
-            echo "Nothing to commit"
+            echo "Nothing to commit — no PR will be opened (deliberate)"
             echo "files_changed=0" >> "$GITHUB_OUTPUT"
+            # Explicit signal: no PR opened, and this is the intended outcome
+            # (not an error path). Downstream alerts key on this.
+            echo "pr_opened=false" >> "$GITHUB_OUTPUT"
             exit 0
           fi
 
@@ -111,44 +124,163 @@ jobs:
           echo "Created PR: $PR_URL"
           echo "files_changed=${CHANGED}" >> "$GITHUB_OUTPUT"
           echo "pr_url=${PR_URL}" >> "$GITHUB_OUTPUT"
+          # Only set pr_opened=true after the PR URL is captured. Any earlier
+          # failure (push, gh pr create) will leave this unset so downstream
+          # alerts fall through to failure() instead of a falsely-benign path.
+          echo "pr_opened=true" >> "$GITHUB_OUTPUT"
 
           gh pr merge "$PR_URL" --merge
 
+      # Build all Slack payloads via jq into tmpfiles. This guarantees any
+      # review-item filename containing ", \, or control chars is safely
+      # JSON-escaped (never string-interpolated into a JSON literal).
+      - name: Build Slack payloads
+        id: payloads
+        if: always()
+        env:
+          RUN_URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
+          PR_URL: ${{ steps.push.outputs.pr_url }}
+          FILES_CHANGED: ${{ steps.push.outputs.files_changed }}
+          REVIEW_ITEMS_FILE: ${{ steps.sync.outputs.review_items_file }}
+          SYNC_OUTCOME: ${{ steps.sync.outcome }}
+          BOT_TOKEN_OUTCOME: ${{ steps.bot-token.outcome }}
+          PUSH_OUTCOME: ${{ steps.push.outcome }}
+        run: |
+          set -euo pipefail
+          mkdir -p slack-payloads
+
+          # auto-sync success (PR merged)
+          jq -n \
+            --arg pr_url "${PR_URL:-}" \
+            --arg files "${FILES_CHANGED:-?}" \
+            --arg run_url "$RUN_URL" \
+            '{text: (":arrows_counterclockwise: *Docs sync*: auto-merged " + $files + " file(s)\n" + $pr_url + "\n<" + $run_url + "|View run>")}' \
+            > slack-payloads/auto-sync.json
+
+          # merge failed (PR exists but gh pr merge failed)
+          jq -n \
+            --arg pr_url "${PR_URL:-}" \
+            --arg run_url "$RUN_URL" \
+            '{text: (":warning: *Docs sync*: PR created but auto-merge FAILED — needs manual merge\n" + $pr_url + "\n<" + $run_url + "|View run>")}' \
+            > slack-payloads/merge-failed.json
+
+          # review-needed payloads: read items from file, let jq handle escaping
+          REVIEW_ITEMS=""
+          if [ -n "${REVIEW_ITEMS_FILE:-}" ] && [ -f "$REVIEW_ITEMS_FILE" ]; then
+            REVIEW_ITEMS=$(cat "$REVIEW_ITEMS_FILE")
+          fi
+
+          jq -n \
+            --arg items "$REVIEW_ITEMS" \
+            --arg pr_url "${PR_URL:-}" \
+            --arg run_url "$RUN_URL" \
+            '{text: (":warning: *Docs sync*: files needing manual review\n```" + $items + "```\nReview: " + $pr_url + "\n<" + $run_url + "|View run>")}' \
+            > slack-payloads/review-with-pr.json
+
+          jq -n \
+            --arg items "$REVIEW_ITEMS" \
+            --arg run_url "$RUN_URL" \
+            '{text: (":warning: *Docs sync*: files needing manual review (no auto-PR opened)\n```" + $items + "```\n<" + $run_url + "|View run>")}' \
+            > slack-payloads/review-no-pr.json
+
+          # failure alert
+          FAILED_STEP="unknown"
+          if [ "${SYNC_OUTCOME:-}" = "failure" ]; then
+            FAILED_STEP="sync-docs script"
+          elif [ "${BOT_TOKEN_OUTCOME:-}" = "failure" ]; then
+            FAILED_STEP="bot token generation (check DEVOPS_BOT_PRIVATE_KEY secret)"
+          elif [ "${PUSH_OUTCOME:-}" = "failure" ]; then
+            FAILED_STEP="push/PR creation"
+          fi
+          jq -n \
+            --arg failed_step "$FAILED_STEP" \
+            --arg run_url "$RUN_URL" \
+            '{text: (":x: *Docs sync*: workflow failed\n*Failed step:* " + $failed_step + " | <" + $run_url + "|View run>")}' \
+            > slack-payloads/failure.json
+
       - name: Notify Slack (auto-sync)
+        id: notify-auto-sync
         if: always() && steps.push.outcome == 'success' && steps.push.outputs.files_changed != '0'
         uses: slackapi/slack-github-action@v2.1.0
         with:
           webhook: ${{ secrets.SLACK_WEBHOOK_OSS_ALERTS }}
           webhook-type: incoming-webhook
-          payload: |
-            { "text": ":arrows_counterclockwise: *Docs sync*: auto-merged ${{ steps.push.outputs.files_changed || '?' }} file(s)\n${{ steps.push.outputs.pr_url || '' }}\n<https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|View run>" }
+          payload-file-path: slack-payloads/auto-sync.json
 
       - name: Notify Slack (merge failed)
-        if: failure() && steps.push.outputs.pr_url != ''
+        id: notify-merge-failed
+        if: failure() && steps.push.outputs.pr_opened == 'true'
         uses: slackapi/slack-github-action@v2.1.0
         with:
           webhook: ${{ secrets.SLACK_WEBHOOK_OSS_ALERTS }}
           webhook-type: incoming-webhook
-          payload: |
-            { "text": ":warning: *Docs sync*: PR created but auto-merge FAILED — needs manual merge\n${{ steps.push.outputs.pr_url }}\n<https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|View run>" }
+          payload-file-path: slack-payloads/merge-failed.json
 
       # Review items = files the sync script flagged but did NOT write to disk
-      # (local modifications, files deleted on main). No file changes to propose —
-      # just alert Slack so a human can manually reconcile.
-      - name: Notify Slack (review needed)
-        if: always() && steps.sync.outputs.action == 'push_and_pr'
+      # (local modifications, files deleted on main). A PR was opened for the
+      # clean-transform portion — link it so reviewers can click through.
+      # Gated on pr_opened == 'true' so it only fires when we actually have a
+      # PR URL (not on any error path that leaves pr_url empty).
+      - name: Notify Slack (review needed, with PR)
+        id: notify-review-with-pr
+        if: always() && steps.sync.outputs.action == 'push_and_pr' && steps.push.outputs.pr_opened == 'true'
         uses: slackapi/slack-github-action@v2.1.0
         with:
           webhook: ${{ secrets.SLACK_WEBHOOK_OSS_ALERTS }}
           webhook-type: incoming-webhook
-          payload: |
-            { "text": ":warning: *Docs sync*: files needing manual review — see workflow run for details\n<https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|View run>" }
+          payload-file-path: slack-payloads/review-with-pr.json
+
+      # Review items but the clean-transform portion was empty so no PR was
+      # opened. Gated on pr_opened == 'false' (deliberate no-PR path) — not
+      # empty pr_url, which would also match error paths.
+      - name: Notify Slack (review needed, no PR)
+        id: notify-review-no-pr
+        if: always() && steps.sync.outputs.action == 'push_and_pr' && steps.push.outputs.pr_opened == 'false'
+        uses: slackapi/slack-github-action@v2.1.0
+        with:
+          webhook: ${{ secrets.SLACK_WEBHOOK_OSS_ALERTS }}
+          webhook-type: incoming-webhook
+          payload-file-path: slack-payloads/review-no-pr.json
 
       - name: Notify Slack (failure)
-        if: failure() && steps.push.outputs.pr_url == ''
+        id: notify-failure
+        if: failure() && steps.push.outputs.pr_opened != 'true'
         uses: slackapi/slack-github-action@v2.1.0
         with:
           webhook: ${{ secrets.SLACK_WEBHOOK_OSS_ALERTS }}
           webhook-type: incoming-webhook
-          payload: |
-            { "text": ":x: *Docs sync*: workflow failed\n*Failed step:* ${{ steps.sync.outcome == 'failure' && 'sync-docs script' || steps.bot-token.outcome == 'failure' && 'bot token generation (check DEVOPS_BOT_PRIVATE_KEY secret)' || steps.push.outcome == 'failure' && 'push/PR creation' || 'unknown' }} | <https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|View run>" }
+          payload-file-path: slack-payloads/failure.json
+
+      # Unconditional fallback: if any notify-* step above failed (webhook 5xx,
+      # rate limit, malformed payload), fire a plain-text alert so we never
+      # silently lose a review-needed or failure notification. Uses curl
+      # directly so it doesn't share failure modes with the slackapi action.
+      # Payload is inlined (not read from slack-payloads/) so this fallback
+      # has no dependency on the Build Slack payloads step succeeding — if
+      # that step broke (jq missing, mkdir failed, etc), every notify-* step
+      # would fail AND the fallback could not read its file. RUN_URL is
+      # constructed from GitHub-controlled env vars only (no user input), so
+      # direct string interpolation into the JSON literal is safe — the
+      # values cannot contain " or \.
+      - name: Notify Slack (alert machinery failed)
+        if: >-
+          always() && (
+            steps.notify-auto-sync.outcome == 'failure' ||
+            steps.notify-merge-failed.outcome == 'failure' ||
+            steps.notify-review-with-pr.outcome == 'failure' ||
+            steps.notify-review-no-pr.outcome == 'failure' ||
+            steps.notify-failure.outcome == 'failure'
+          )
+        env:
+          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK_OSS_ALERTS }}
+        run: |
+          set -eu
+          if [ -z "${SLACK_WEBHOOK:-}" ]; then
+            echo "::warning::SLACK_WEBHOOK_OSS_ALERTS not set — cannot post fallback alert"
+            exit 0
+          fi
+          RUN_URL="https://github.com/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}"
+          curl -sS -X POST \
+            -H "Content-Type: application/json" \
+            --data "{\"text\": \":rotating_light: *Docs sync*: review/alert machinery failed — check Actions UI ${RUN_URL}\"}" \
+            "$SLACK_WEBHOOK" || echo "::warning::fallback Slack post also failed"

.github/workflows/showcase_docs-sync.yml

@@ -74,45 +74,45 @@ jobs:
 
       - name: Build Slack payload
         if: failure()
+        id: slack-payload
+        env:
+          DETAILS_RAW: ${{ steps.failures.outputs.details }}
         run: |
-          SUMMARY=$(echo "${{ steps.failures.outputs.details }}" | head -3 | sed 's/\x1b\[[0-9;]*m//g' | cut -c1-200)
+          # Strip ANSI sequences (SGR, OSC, and G0/G1 charset designators), then truncate
+          # to 200 bytes and drop any trailing partial UTF-8 bytes so we don't emit mojibake.
+          SUMMARY=$(printf '%s' "$DETAILS_RAW" | head -3 \
+            | sed -E 's/\x1b\[[0-9;?]*[A-Za-z]//g; s/\x1b\][^\x07]*\x07//g; s/\x1b[()][A-Za-z0-9]//g' \
+            | head -c 200 | iconv -f UTF-8 -t UTF-8//IGNORE)
+          if [ -z "$SUMMARY" ]; then
+            SUMMARY="(no failure detail captured — see job log)"
+          fi
           URL="https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}"
-          jq -n --arg text ":x: *Showcase E2E suite failed*\n<$URL|View run>\n\`\`\`$SUMMARY\`\`\`" \
-            '{text: $text}' > /tmp/slack-payload.json
+          JOB_URL="${URL}/job/${{ github.job }}"
+
+          SLACK_MSG=$(mktemp)
+          SLACK_PAYLOAD=$(mktemp)
+
+          # Build the message with REAL newlines, then hand it to jq via --rawfile so escaping is handled correctly.
+          {
+            printf ':x: *Showcase E2E suite failed*\n'
+            printf '<%s|View run> · <%s|View job>\n' "$URL" "$JOB_URL"
+            printf '```\n%s\n```\n' "$SUMMARY"
+          } > "$SLACK_MSG"
+          jq -n --rawfile text "$SLACK_MSG" '{text: $text}' > "$SLACK_PAYLOAD"
+          rm -f "$SLACK_MSG"
+          echo "payload_path=${SLACK_PAYLOAD}" >> "$GITHUB_OUTPUT"
 
       - name: Post failure to Slack
         if: failure()
         uses: slackapi/slack-github-action@v2.1.0
         with:
           webhook: ${{ secrets.SLACK_WEBHOOK_OSS_ALERTS }}
           webhook-type: incoming-webhook
-          payload-file-path: /tmp/slack-payload.json
+          payload-file-path: ${{ steps.slack-payload.outputs.payload_path }}
 
-      - name: Create issue on failure
-        if: failure()
-        uses: actions/github-script@v7
-        with:
-          script: |
-            const title = '[Drift] Showcase E2E suite failing';
-            const body = `## E2E Drift Detection Alert\n\n**Run**: ${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}\n**Schedule**: ${context.payload.schedule || 'manual'}\n\nThe centralized E2E smoke suite is failing. Please investigate.`;
-
-            const { data: issues } = await github.rest.issues.listForRepo({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              labels: 'showcase-drift',
-              state: 'open',
-            });
-
-            const existing = issues.find(i => i.title === title);
-            if (!existing) {
-              await github.rest.issues.create({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                title,
-                body,
-                labels: ['showcase-drift'],
-              });
-            }
+      - name: Clean up Slack payload tmpfile
+        if: always() && steps.slack-payload.outputs.payload_path
+        run: rm -f "${{ steps.slack-payload.outputs.payload_path }}"
 
   version-drift:
     name: Version Drift Report
@@ -195,67 +195,14 @@ jobs:
           echo -e "$report" >> $GITHUB_OUTPUT
           echo "EOF" >> $GITHUB_OUTPUT
 
-      - name: Create drift report issue
-        id: drift_issue
-        if: steps.python_drift.outputs.report != '' || steps.npm_drift.outputs.report != ''
-        uses: actions/github-script@v7
-        with:
-          script: |
-            const pythonDrift = `${{ steps.python_drift.outputs.report }}`.trim();
-            const npmDrift = `${{ steps.npm_drift.outputs.report }}`.trim();
-
-            if (!pythonDrift && !npmDrift) return;
-
-            const title = `[Drift] Showcase packages have outdated pinned versions`;
-            const body = `## Weekly Version Drift Report
-
-            Showcase packages have pinned versions that differ from the latest releases.
-            Review each and update if the new version is compatible.
-
-            ${pythonDrift ? `### Python Packages\n| Package | Dep | Pinned | Latest |\n|---------|-----|--------|--------|\n${pythonDrift}` : ''}
-
-            ${npmDrift ? `### npm Packages\n| Package | Dep | Pinned | Latest |\n|---------|-----|--------|--------|\n${npmDrift}` : ''}
-
-            **Action**: For each outdated dep, check the Dojo example for the correct version.
-            Update \`requirements.txt\` / \`package.json\`, rebuild, and verify demos still work.
-            `;
-
-            const { data: issues } = await github.rest.issues.listForRepo({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              labels: 'showcase-drift,version-drift',
-              state: 'open',
-            });
-
-            let issueUrl;
-            if (issues.length === 0) {
-              const { data: created } = await github.rest.issues.create({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                title,
-                body,
-                labels: ['showcase-drift', 'version-drift'],
-              });
-              issueUrl = created.html_url;
-            } else {
-              await github.rest.issues.update({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                issue_number: issues[0].number,
-                body,
-              });
-              issueUrl = issues[0].html_url;
-            }
-            core.setOutput('issue_url', issueUrl);
-
       - name: Notify Slack (version drift)
         if: steps.python_drift.outputs.report != '' || steps.npm_drift.outputs.report != ''
         uses: slackapi/slack-github-action@v2.1.0
         with:
           webhook: ${{ secrets.SLACK_WEBHOOK_OSS_ALERTS }}
           webhook-type: incoming-webhook
           payload: |
-            { "text": ":warning: *Version drift*: dependency updates available | <${{ steps.drift_issue.outputs.issue_url }}|View issue>" }
+            { "text": ":warning: *Version drift*: dependency updates available | <https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|View run>" }
 
       - name: Notify Slack (version drift failure)
         if: failure()