mirror of
https://github.com/CopilotKit/CopilotKit.git
synced 2026-09-14 16:26:20 +08:00
Benjamin Taylor
2bca275008
SDK-emit half of OSS-446 (lease-token fencing for hosted-bot render/complete). The fail path already sends the lease token; render-accept and the completion intent did not, so app-api fell back to instance-id + expiry there. - HTTP: HttpRenderEventSink.push now includes leaseToken (new leaseTokenFor() bridge on HttpDeliverySource, mirroring scopeFor). (ack already sent it.) - Phoenix: push (render-accept) and complete_requested now carry leaseToken from DeliveryState (fail already did). Optional/forward-compatible: app-api + gateway already accept and fence on the token when present (verified render/complete validators + fencing SQL), falling back to the old check when absent — so this deploys safely ahead of the app-api flip-to-required (OSS-446 half B), which waits on #511 settling managed-bots service.ts.