@copilotkit/react-core 1.60.2 → 1.61.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@copilotkit/react-core",
-  "version": "1.60.2",
+  "version": "1.61.1",
   "private": false,
   "keywords": [
     "ai",
@@ -79,11 +79,11 @@
     "untruncate-json": "^0.0.1",
     "use-stick-to-bottom": "^1.1.1",
     "zod-to-json-schema": "^3.24.5",
-    "@copilotkit/a2ui-renderer": "1.60.2",
-    "@copilotkit/core": "1.60.2",
-    "@copilotkit/runtime-client-gql": "1.60.2",
-    "@copilotkit/shared": "1.60.2",
-    "@copilotkit/web-inspector": "1.60.2"
+    "@copilotkit/a2ui-renderer": "1.61.1",
+    "@copilotkit/core": "1.61.1",
+    "@copilotkit/shared": "1.61.1",
+    "@copilotkit/web-inspector": "1.61.1",
+    "@copilotkit/runtime-client-gql": "1.61.1"
   },
   "devDependencies": {
     "@tailwindcss/cli": "^4.1.11",

package/skills/react-core/references/provider-setup.md

@@ -100,15 +100,33 @@ of re-rendering the provider with a new `headers` prop.
 import { useCopilotKit } from "@copilotkit/react-core/v2";
 import { useEffect } from "react";
 
-export function AuthTokenSync({ token }: { token: string }) {
+export function AuthTokenSync({ token }: { token: string | null }) {
   const { copilotkit } = useCopilotKit();
   useEffect(() => {
-    copilotkit.setHeaders({ Authorization: `Bearer ${token}` });
+    // setHeaders is an overwrite, not a merge — spread the current headers so
+    // entries set elsewhere (e.g. the public license key) survive. A `null`
+    // value clears that header, so logging out removes `Authorization` instead
+    // of sending an empty one.
+    copilotkit.setHeaders({
+      ...copilotkit.headers,
+      Authorization: token ? `Bearer ${token}` : null,
+    });
   }, [copilotkit, token]);
   return null;
 }
 ```
 
+`setHeaders` accepts `null`/`undefined` values and drops those keys, so passing
+`Authorization: null` is the supported way to clear a header. Setting it to an
+empty string would keep the header present with a blank value.
+
+Do not set the same header through both the `headers` prop and imperative
+`setHeaders`. Whenever any provider prop changes, the provider calls
+`setHeaders` with its prop-derived headers — a full overwrite that drops every
+imperatively-set header, not just keys the prop also defines. Keep rotating
+values like the auth token out of the `headers` prop and manage them only
+through `setHeaders` (as above).
+
 ### Global error handler
 
 `onError` fires for every `CopilotKitCoreErrorCode` emitted by core. Keeps