@copilotkit/react-core 1.70.0 → 1.70.2

package/dist/v2/index.umd.js

@@ -283,6 +283,62 @@ _radix_ui_react_dropdown_menu = __toESM(_radix_ui_react_dropdown_menu);
 	const useCopilotChatConfiguration = () => {
 		return (0, react.useContext)(CopilotChatConfiguration);
 	};
+	/**
+	* Reports modal open/close requests to the host, and — when `open` is
+	* supplied — makes the modal state of an already-established chat
+	* configuration **controlled** for the subtree it wraps.
+	*
+	* This is deliberately a scope component rather than another mode inside
+	* {@link CopilotChatConfigurationProvider}. The provider resolves modal state
+	* across a nested chain (own state, parent sync, drawer mutual-exclusion, the
+	* modal-closer registry); a controlled branch inside that resolution would add
+	* a fourth interacting mode. Overriding the context for the subtree instead
+	* leaves every one of those paths untouched:
+	*
+	* - `isModalOpen` is replaced with the host's `open`, so the rendered surface
+	*   follows the prop from the very first frame (no open-then-close flash).
+	* - `setModalOpen` still calls the underlying setter, so the existing
+	*   parent-sync and drawer mutual-exclusion side effects continue to run, and
+	*   *then* reports the request through `onOpenChange`.
+	* - The wrapped setter is registered as the modal closer, so the drawer's
+	*   mobile mutual-exclusion reaches the host instead of silently flipping
+	*   state that nothing displays.
+	*
+	* A host that supplies `open` and ignores `onOpenChange` gets a modal pinned
+	* to `open`, which is the standard controlled-component contract. A host that
+	* supplies only `onOpenChange` is notified while the modal keeps managing
+	* itself.
+	*
+	* Renders `children` unchanged when no chat configuration is in scope.
+	*/
+	const ControlledModalOpenScope = ({ children, open, onOpenChange }) => {
+		const parentConfig = (0, react.useContext)(CopilotChatConfiguration);
+		const parentSetModalOpen = parentConfig?.setModalOpen;
+		const registerModalCloser = parentConfig?.ɵregisterModalCloser;
+		const setModalOpen = (0, react.useCallback)((next) => {
+			parentSetModalOpen?.(next);
+			onOpenChange?.(next);
+		}, [parentSetModalOpen, onOpenChange]);
+		(0, react.useEffect)(() => {
+			if (!registerModalCloser) return;
+			return registerModalCloser(setModalOpen);
+		}, [registerModalCloser, setModalOpen]);
+		const configurationValue = (0, react.useMemo)(() => parentConfig ? {
+			...parentConfig,
+			isModalOpen: open ?? parentConfig.isModalOpen,
+			setModalOpen
+		} : null, [
+			parentConfig,
+			open,
+			setModalOpen
+		]);
+		if (!configurationValue) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children });
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CopilotChatConfiguration.Provider, {
+			value: configurationValue,
+			children
+		});
+	};
+	ControlledModalOpenScope.displayName = "ControlledModalOpenScope";
 
 //#endregion
 //#region src/v2/lib/utils.ts
@@ -1876,7 +1932,6 @@ _radix_ui_react_dropdown_menu = __toESM(_radix_ui_react_dropdown_menu);
 			newMessages: []
 		};
 	}
-	const PROTOCOL_VERSION = "2025-06-18";
 	function buildSandboxHTML(extraCspDomains) {
 		const baseScriptSrc = "'self' 'wasm-unsafe-eval' 'unsafe-inline' 'unsafe-eval' blob: data: http://localhost:* https://localhost:*";
 		const baseFrameSrc = "* blob: data: http://localhost:* https://localhost:*";
@@ -1988,6 +2043,13 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 		}
 	};
 	const mcpAppsRequestQueue = new MCPAppsRequestQueue();
+	const MCP_OPEN_LINK_BLOCKED_SCHEMES = new Set([
+		"javascript:",
+		"data:",
+		"vbscript:",
+		"blob:",
+		"file:"
+	]);
 	/**
 	* Activity type for MCP Apps events - must match the middleware's MCPAppsActivityType
 	*/
@@ -2003,18 +2065,32 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 		serverId: zod.z.string().optional(),
 		toolInput: zod.z.record(zod.z.string(), zod.z.unknown()).optional()
 	});
-	function isRequest(msg) {
-		return "id" in msg && "method" in msg;
-	}
-	function isNotification(msg) {
-		return !("id" in msg) && "method" in msg;
-	}
 	/**
 	* MCP Apps Extension Activity Renderer
 	*
 	* Renders MCP Apps UI in a sandboxed iframe with full protocol support.
 	* Fetches resource content on-demand via proxied MCP requests.
 	*/
+	/**
+	* Permissive `ui/message` schema. ext-apps restricts the request to
+	* `role: "user"` with no `followUp`, but CopilotKit intentionally extends
+	* `ui/message` with `role` ("user" | "assistant") and `followUp` (documented
+	* behavior with dedicated tests). We register our own handler (instead of the
+	* bridge's strict `onmessage`) so those extensions survive the migration.
+	*
+	* Going forward, widgets SHOULD pass the extensions under
+	* `params._meta.copilotkit`; the top-level `role`/`followUp` fields are the
+	* legacy channel, kept for backward compatibility and slated for deprecation.
+	*/
+	const CopilotKitUiMessageSchema = zod.z.object({
+		method: zod.z.literal("ui/message"),
+		params: zod.z.object({
+			role: zod.z.string().optional(),
+			content: zod.z.array(zod.z.any()).optional(),
+			followUp: zod.z.boolean().optional(),
+			_meta: zod.z.record(zod.z.string(), zod.z.any()).optional()
+		}).passthrough()
+	});
 	const MCPAppsActivityRenderer = function MCPAppsActivityRenderer({ content, agent }) {
 		const { copilotkit } = useCopilotKit();
 		const containerRef = (0, react.useRef)(null);
@@ -2028,41 +2104,12 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 		contentRef.current = content;
 		const agentRef = (0, react.useRef)(agent);
 		agentRef.current = agent;
+		const bridgeRef = (0, react.useRef)(null);
 		const fetchStateRef = (0, react.useRef)({
 			inProgress: false,
 			promise: null,
 			resourceUri: null
 		});
-		const sendToIframe = (0, react.useCallback)((msg) => {
-			if (iframeRef.current?.contentWindow) {
-				console.log("[MCPAppsRenderer] Sending to iframe:", msg);
-				iframeRef.current.contentWindow.postMessage(msg, "*");
-			}
-		}, []);
-		const sendResponse = (0, react.useCallback)((id, result) => {
-			sendToIframe({
-				jsonrpc: "2.0",
-				id,
-				result
-			});
-		}, [sendToIframe]);
-		const sendErrorResponse = (0, react.useCallback)((id, code, message) => {
-			sendToIframe({
-				jsonrpc: "2.0",
-				id,
-				error: {
-					code,
-					message
-				}
-			});
-		}, [sendToIframe]);
-		const sendNotification = (0, react.useCallback)((method, params) => {
-			sendToIframe({
-				jsonrpc: "2.0",
-				method,
-				params: params || {}
-			});
-		}, [sendToIframe]);
 		(0, react.useEffect)(() => {
 			const { resourceUri, serverHash, serverId } = content;
 			if (fetchStateRef.current.inProgress && fetchStateRef.current.resourceUri === resourceUri) {
@@ -2117,11 +2164,15 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 			const container = containerRef.current;
 			if (!container) return;
 			let mounted = true;
-			let messageHandler = null;
-			let initialListener = null;
+			let bridge = null;
 			let createdIframe = null;
 			const setup = async () => {
 				try {
+					const bridgeModule = await import("@modelcontextprotocol/ext-apps/app-bridge").catch((importErr) => {
+						throw new Error("MCP Apps require '@modelcontextprotocol/ext-apps' and its peer '@modelcontextprotocol/sdk'. Install them with: npm install @modelcontextprotocol/ext-apps @modelcontextprotocol/sdk", { cause: importErr });
+					});
+					if (!mounted) return;
+					const { AppBridge, PostMessageTransport } = bridgeModule;
 					const iframe = document.createElement("iframe");
 					createdIframe = iframe;
 					iframe.style.width = "100%";
@@ -2132,151 +2183,108 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 					iframe.setAttribute("sandbox", "allow-scripts allow-same-origin allow-forms");
 					iframe.setAttribute("data-testid", "mcp-app-iframe");
 					iframe.setAttribute("title", "Interactive MCP application");
-					const sandboxReady = new Promise((resolve) => {
-						initialListener = (event) => {
-							if (event.source === iframe.contentWindow) {
-								if (event.data?.method === "ui/notifications/sandbox-proxy-ready") {
-									if (initialListener) {
-										window.removeEventListener("message", initialListener);
-										initialListener = null;
-									}
-									resolve();
-								}
-							}
-						};
-						window.addEventListener("message", initialListener);
-					});
-					if (!mounted) {
-						if (initialListener) {
-							window.removeEventListener("message", initialListener);
-							initialListener = null;
-						}
-						return;
-					}
 					const cspDomains = fetchedResource._meta?.ui?.csp?.resourceDomains;
 					iframe.srcdoc = buildSandboxHTML(cspDomains);
 					iframeRef.current = iframe;
 					container.appendChild(iframe);
-					await sandboxReady;
-					if (!mounted) return;
-					console.log("[MCPAppsRenderer] Sandbox proxy ready");
-					messageHandler = async (event) => {
-						if (event.source !== iframe.contentWindow) return;
-						const msg = event.data;
-						if (!msg || typeof msg !== "object" || msg.jsonrpc !== "2.0") return;
-						console.log("[MCPAppsRenderer] Received from iframe:", msg);
-						if (isRequest(msg)) switch (msg.method) {
-							case "ui/initialize":
-								sendResponse(msg.id, {
-									protocolVersion: PROTOCOL_VERSION,
-									hostInfo: {
-										name: "CopilotKit MCP Apps Host",
-										version: "1.0.0"
-									},
-									hostCapabilities: {
-										openLinks: {},
-										logging: {}
-									},
-									hostContext: {
-										theme: "light",
-										platform: "web"
-									}
-								});
-								break;
-							case "ui/message": {
-								const currentAgent = agentRef.current;
-								if (!currentAgent) {
-									console.warn("[MCPAppsRenderer] ui/message: No agent available");
-									sendResponse(msg.id, { isError: false });
-									break;
-								}
-								try {
-									const params = msg.params;
-									const role = params.role || "user";
-									const textContent = params.content?.filter((c) => c.type === "text" && c.text).map((c) => c.text).join("\n") || "";
-									if (textContent) currentAgent.addMessage({
-										id: crypto.randomUUID(),
-										role,
-										content: textContent
-									});
-									sendResponse(msg.id, { isError: false });
-									if ((params.followUp ?? role === "user") && textContent) {
-										const capturedThreadId = currentAgent.threadId || "default";
-										mcpAppsRequestQueue.enqueue(currentAgent, () => ɵrunMcpFollowUp({
-											host: copilotkit,
-											agent: currentAgent,
-											capturedThreadId
-										})).catch((err) => console.error("[MCPAppsRenderer] ui/message agent run failed:", err));
-									}
-								} catch (err) {
-									console.error("[MCPAppsRenderer] ui/message error:", err);
-									sendResponse(msg.id, { isError: true });
-								}
-								break;
-							}
-							case "ui/open-link": {
-								const url = msg.params?.url;
-								if (url) {
-									window.open(url, "_blank", "noopener,noreferrer");
-									sendResponse(msg.id, { isError: false });
-								} else sendErrorResponse(msg.id, -32602, "Missing url parameter");
-								break;
-							}
-							case "tools/call": {
-								const { serverHash, serverId } = contentRef.current;
-								const currentAgent = agentRef.current;
-								if (!serverHash) {
-									sendErrorResponse(msg.id, -32603, "No server hash available for proxying");
-									break;
-								}
-								if (!currentAgent) {
-									sendErrorResponse(msg.id, -32603, "No agent available for proxying");
-									break;
-								}
-								try {
-									const runResult = await mcpAppsRequestQueue.enqueue(currentAgent, () => currentAgent.runAgent({ forwardedProps: { __proxiedMCPRequest: {
-										serverHash,
-										serverId,
-										method: "tools/call",
-										params: msg.params
-									} } }));
-									sendResponse(msg.id, runResult.result || {});
-								} catch (err) {
-									console.error("[MCPAppsRenderer] tools/call error:", err);
-									sendErrorResponse(msg.id, -32603, String(err));
-								}
-								break;
-							}
-							default: sendErrorResponse(msg.id, -32601, `Method not found: ${msg.method}`);
-						}
-						if (isNotification(msg)) switch (msg.method) {
-							case "ui/notifications/initialized":
-								console.log("[MCPAppsRenderer] Inner iframe initialized");
-								if (mounted) setIframeReady(true);
-								break;
-							case "ui/notifications/size-changed": {
-								const { width, height } = msg.params || {};
-								console.log("[MCPAppsRenderer] Size change:", {
-									width,
-									height
-								});
-								if (mounted) setIframeSize({
-									width: typeof width === "number" ? width : void 0,
-									height: typeof height === "number" ? height : void 0
-								});
-								break;
-							}
-							case "notifications/message":
-								console.log("[MCPAppsRenderer] App log:", msg.params);
-								break;
-						}
-					};
-					window.addEventListener("message", messageHandler);
+					const win = iframe.contentWindow;
+					if (!win) throw new Error("Sandbox iframe has no contentWindow");
 					let html;
 					if (fetchedResource.text) html = fetchedResource.text;
 					else if (fetchedResource.blob) html = atob(fetchedResource.blob);
 					else throw new Error("Resource has no text or blob content");
-					sendNotification("ui/notifications/sandbox-resource-ready", { html });
+					bridge = new AppBridge(null, {
+						name: "CopilotKit MCP Apps Host",
+						version: "1.0.0"
+					}, {
+						openLinks: {},
+						logging: {},
+						message: { text: {} }
+					}, { hostContext: {
+						theme: "light",
+						platform: "web"
+					} });
+					bridge.onsandboxready = () => {
+						bridge?.sendSandboxResourceReady({ html });
+					};
+					bridge.setRequestHandler(CopilotKitUiMessageSchema, async (req) => {
+						const currentAgent = agentRef.current;
+						if (!currentAgent) {
+							console.warn("[MCPAppsRenderer] ui/message: No agent available");
+							return { isError: false };
+						}
+						try {
+							const params = req.params;
+							const ck = params._meta?.copilotkit ?? {};
+							const role = ck.role || params.role || "user";
+							const textContent = params.content?.filter((c) => c.type === "text" && c.text).map((c) => c.text).join("\n") || "";
+							if (textContent) currentAgent.addMessage({
+								id: crypto.randomUUID(),
+								role,
+								content: textContent
+							});
+							if ((ck.followUp ?? params.followUp ?? role === "user") && textContent) {
+								const capturedThreadId = currentAgent.threadId || "default";
+								mcpAppsRequestQueue.enqueue(currentAgent, () => ɵrunMcpFollowUp({
+									host: copilotkit,
+									agent: currentAgent,
+									capturedThreadId
+								})).catch((err) => console.error("[MCPAppsRenderer] ui/message agent run failed:", err));
+							}
+							return { isError: false };
+						} catch (err) {
+							console.error("[MCPAppsRenderer] ui/message error:", err);
+							return { isError: true };
+						}
+					});
+					bridge.onopenlink = async ({ url }) => {
+						let parsed;
+						try {
+							parsed = new URL(url);
+						} catch {
+							console.warn("[MCPAppsRenderer] ui/open-link rejected: unparseable url");
+							return { isError: true };
+						}
+						if (MCP_OPEN_LINK_BLOCKED_SCHEMES.has(parsed.protocol)) {
+							console.warn("[MCPAppsRenderer] ui/open-link rejected: blocked scheme", parsed.protocol);
+							return { isError: true };
+						}
+						window.open(url, "_blank", "noopener,noreferrer");
+						return { isError: false };
+					};
+					bridge.oncalltool = async (params) => {
+						const { serverHash, serverId } = contentRef.current;
+						const currentAgent = agentRef.current;
+						if (!serverHash) throw new Error("No server hash available for proxying");
+						if (!currentAgent) throw new Error("No agent available for proxying");
+						return (await mcpAppsRequestQueue.enqueue(currentAgent, () => currentAgent.runAgent({ forwardedProps: { __proxiedMCPRequest: {
+							serverHash,
+							serverId,
+							method: "tools/call",
+							params
+						} } }))).result || { content: [] };
+					};
+					bridge.onsizechange = (p) => {
+						if (!mounted) return;
+						const { width, height } = p || {};
+						setIframeSize({
+							width: typeof width === "number" ? width : void 0,
+							height: typeof height === "number" ? height : void 0
+						});
+					};
+					bridge.oninitialized = () => {
+						if (mounted) setIframeReady(true);
+					};
+					bridge.onloggingmessage = (p) => {
+						console.log("[MCPAppsRenderer] App log:", p);
+					};
+					const transport = new PostMessageTransport(win, win);
+					await bridge.connect(transport);
+					if (!mounted) {
+						await bridge.close();
+						return;
+					}
+					bridgeRef.current = bridge;
 				} catch (err) {
 					console.error("[MCPAppsRenderer] Setup error:", err);
 					if (mounted) setError(err instanceof Error ? err : new Error(String(err)));
@@ -2285,11 +2293,8 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 			setup();
 			return () => {
 				mounted = false;
-				if (initialListener) {
-					window.removeEventListener("message", initialListener);
-					initialListener = null;
-				}
-				if (messageHandler) window.removeEventListener("message", messageHandler);
+				bridgeRef.current = null;
+				bridge?.close();
 				if (createdIframe) {
 					createdIframe.remove();
 					createdIframe = null;
@@ -2299,9 +2304,7 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 		}, [
 			isLoading,
 			fetchedResource,
-			sendNotification,
-			sendResponse,
-			sendErrorResponse
+			copilotkit
 		]);
 		(0, react.useEffect)(() => {
 			if (iframeRef.current) {
@@ -2313,25 +2316,11 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 			}
 		}, [iframeSize]);
 		(0, react.useEffect)(() => {
-			if (iframeReady && content.toolInput) {
-				console.log("[MCPAppsRenderer] Sending tool input:", content.toolInput);
-				sendNotification("ui/notifications/tool-input", { arguments: content.toolInput });
-			}
-		}, [
-			iframeReady,
-			content.toolInput,
-			sendNotification
-		]);
+			if (iframeReady && content.toolInput) bridgeRef.current?.sendToolInput({ arguments: content.toolInput });
+		}, [iframeReady, content.toolInput]);
 		(0, react.useEffect)(() => {
-			if (iframeReady && content.result) {
-				console.log("[MCPAppsRenderer] Sending tool result:", content.result);
-				sendNotification("ui/notifications/tool-result", content.result);
-			}
-		}, [
-			iframeReady,
-			content.result,
-			sendNotification
-		]);
+			if (iframeReady && content.result) bridgeRef.current?.sendToolResult(content.result);
+		}, [iframeReady, content.result]);
 		const borderStyle = fetchedResource?._meta?.ui?.prefersBorder === true ? {
 			borderRadius: "8px",
 			backgroundColor: "#f9f9f9",
@@ -4050,7 +4039,8 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 			tool.name,
 			tool.available,
 			copilotkit,
-			JSON.stringify(extraDeps)
+			JSON.stringify(extraDeps),
+			JSON.stringify(tool.webmcp ?? null)
 		]);
 	}
 
@@ -5505,7 +5495,7 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 	*         at the call site.
 	*/
 	async function recordAnnotation(args) {
-		const { runtimeUrl, headers, type, payload, threadId, occurredAt } = args;
+		const { runtimeUrl, headers, type, payload, threadId, occurredAt, fetch: fetchImplementation = globalThis.fetch } = args;
 		const body = {
 			type,
 			threadId,
@@ -5513,7 +5503,7 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 			...payload !== void 0 ? { payload } : {},
 			...occurredAt !== void 0 ? { occurredAt } : {}
 		};
-		const response = await fetch(`${runtimeUrl}/annotate`, {
+		const response = await fetchImplementation(`${runtimeUrl}/annotate`, {
 			method: "POST",
 			headers: {
 				"Content-Type": "application/json",
@@ -5582,6 +5572,7 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 				...input.data !== void 0 ? { data: input.data } : {}
 			};
 			return recordAnnotation({
+				fetch: copilotkit.ɵruntimeFetch,
 				runtimeUrl,
 				headers: copilotkit.headers ?? {},
 				type: "user_action",
@@ -5651,7 +5642,22 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 
 //#endregion
 //#region src/v2/hooks/use-attachments.tsx
-/**
+	const DEFAULT_MAX_SIZE = 20 * 1024 * 1024;
+	/**
+	* How many uploads run at once when `maxConcurrentUploads` is unset. One, because
+	* `onUpload` is a public callback an app may have written expecting the previous
+	* file to have finished — concurrency is something the app asks for.
+	*/
+	const DEFAULT_MAX_CONCURRENT_UPLOADS = 1;
+	/**
+	* At least one upload at a time, whole files only; `NaN` or a non-number falls back to the
+	* default, and `Infinity` means "no limit" — bounded in practice by how many files are queued.
+	*/
+	function resolveMaxConcurrentUploads(configured) {
+		if (typeof configured !== "number" || Number.isNaN(configured)) return DEFAULT_MAX_CONCURRENT_UPLOADS;
+		return Math.max(1, Math.floor(configured));
+	}
+	/**
 	* Hook that manages file attachment state — uploads, drag-and-drop, paste,
 	* and lifecycle. All returned callbacks are referentially stable across
 	* renders (via useCallback) to avoid destabilizing downstream memoization.
@@ -5666,10 +5672,62 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 		configRef.current = config;
 		const attachmentsRef = (0, react.useRef)([]);
 		attachmentsRef.current = attachments;
+		const uploadQueueRef = (0, react.useRef)([]);
+		const activeWorkersRef = (0, react.useRef)(0);
+		const uploadFile = (0, react.useCallback)(async (file, placeholder, cfg) => {
+			try {
+				let source;
+				let uploadMetadata;
+				if (cfg?.onUpload) {
+					const { metadata: meta, ...uploadSource } = await cfg.onUpload(file);
+					source = uploadSource;
+					uploadMetadata = meta;
+				} else source = {
+					type: "data",
+					value: await (0, _copilotkit_shared.readFileAsBase64)(file),
+					mimeType: file.type
+				};
+				let thumbnail;
+				if (placeholder.type === "video") thumbnail = await (0, _copilotkit_shared.generateVideoThumbnail)(file);
+				setAttachments((prev) => prev.map((att) => att.id === placeholder.id ? {
+					...att,
+					source,
+					status: "ready",
+					thumbnail,
+					metadata: uploadMetadata
+				} : att));
+			} catch (error) {
+				setAttachments((prev) => prev.filter((att) => att.id !== placeholder.id));
+				console.error(`[CopilotKit] Failed to upload "${file.name}":`, error);
+				cfg?.onUploadFailed?.({
+					reason: "upload-failed",
+					file,
+					message: error instanceof Error ? error.message : `Failed to upload "${file.name}"`
+				});
+			}
+		}, []);
+		const drainUploadQueue = (0, react.useCallback)(async () => {
+			activeWorkersRef.current++;
+			try {
+				for (;;) {
+					const item = uploadQueueRef.current.shift();
+					if (!item) return;
+					try {
+						await uploadFile(item.file, item.placeholder, item.cfg);
+					} catch (error) {
+						console.error("[CopilotKit] Upload worker error:", error);
+					} finally {
+						item.settle();
+					}
+				}
+			} finally {
+				activeWorkersRef.current--;
+			}
+		}, [uploadFile]);
 		const processFiles = (0, react.useCallback)(async (files) => {
 			const cfg = configRef.current;
 			const accept = cfg?.accept ?? "*/*";
-			const maxSize = cfg?.maxSize ?? 20 * 1024 * 1024;
+			const maxSize = cfg?.maxSize ?? DEFAULT_MAX_SIZE;
 			const rejectedFiles = files.filter((file) => !(0, _copilotkit_shared.matchesAcceptFilter)(file, accept));
 			for (const file of rejectedFiles) cfg?.onUploadFailed?.({
 				reason: "invalid-type",
@@ -5677,6 +5735,7 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 				message: `File "${file.name}" is not accepted. Supported types: ${accept}`
 			});
 			const validFiles = files.filter((file) => (0, _copilotkit_shared.matchesAcceptFilter)(file, accept));
+			const queued = [];
 			for (const file of validFiles) {
 				if ((0, _copilotkit_shared.exceedsMaxSize)(file, maxSize)) {
 					cfg?.onUploadFailed?.({
@@ -5686,53 +5745,37 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 					});
 					continue;
 				}
-				const modality = (0, _copilotkit_shared.getModalityFromMimeType)(file.type);
-				const placeholderId = (0, _copilotkit_shared.randomUUID)();
-				const placeholder = {
-					id: placeholderId,
-					type: modality,
-					source: {
-						type: "data",
-						value: "",
-						mimeType: file.type
-					},
-					filename: file.name,
-					size: file.size,
-					status: "uploading"
-				};
-				setAttachments((prev) => [...prev, placeholder]);
-				try {
-					let source;
-					let uploadMetadata;
-					if (cfg?.onUpload) {
-						const { metadata: meta, ...uploadSource } = await cfg.onUpload(file);
-						source = uploadSource;
-						uploadMetadata = meta;
-					} else source = {
-						type: "data",
-						value: await (0, _copilotkit_shared.readFileAsBase64)(file),
-						mimeType: file.type
-					};
-					let thumbnail;
-					if (modality === "video") thumbnail = await (0, _copilotkit_shared.generateVideoThumbnail)(file);
-					setAttachments((prev) => prev.map((att) => att.id === placeholderId ? {
-						...att,
-						source,
-						status: "ready",
-						thumbnail,
-						metadata: uploadMetadata
-					} : att));
-				} catch (error) {
-					setAttachments((prev) => prev.filter((att) => att.id !== placeholderId));
-					console.error(`[CopilotKit] Failed to upload "${file.name}":`, error);
-					cfg?.onUploadFailed?.({
-						reason: "upload-failed",
-						file,
-						message: error instanceof Error ? error.message : `Failed to upload "${file.name}"`
-					});
-				}
+				queued.push({
+					file,
+					placeholder: {
+						id: (0, _copilotkit_shared.randomUUID)(),
+						type: (0, _copilotkit_shared.getModalityFromMimeType)(file.type),
+						source: {
+							type: "data",
+							value: "",
+							mimeType: file.type
+						},
+						filename: file.name,
+						size: file.size,
+						status: "uploading"
+					}
+				});
 			}
-		}, []);
+			if (queued.length === 0) return;
+			setAttachments((prev) => [...prev, ...queued.map((q) => q.placeholder)]);
+			const settled = queued.map(({ file, placeholder }) => new Promise((resolve) => {
+				uploadQueueRef.current.push({
+					file,
+					placeholder,
+					cfg,
+					settle: resolve
+				});
+			}));
+			const limit = resolveMaxConcurrentUploads(cfg?.maxConcurrentUploads);
+			const toSpawn = Math.min(uploadQueueRef.current.length, Math.max(0, limit - activeWorkersRef.current));
+			for (let i = 0; i < toSpawn; i++) drainUploadQueue();
+			await Promise.all(settled);
+		}, [drainUploadQueue]);
 		const handleFileUpload = (0, react.useCallback)(async (e) => {
 			if (!e.target.files?.length) return;
 			try {
@@ -5844,9 +5887,9 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 	* }
 	* ```
 	*
-	* @deprecated Legacy plural-container annotation compatibility only. New
-	* Intelligence runtimes assign one container with `ɵlearning.containerId` on
-	* `CopilotRuntime`.
+	* @deprecated This hook supports only the legacy plural-container annotation.
+	* Configure `getLearningContainerId` on `CopilotKitIntelligence` for new
+	* Intelligence runtimes.
 	*/
 	function useLearningContainers({ threadId, learningContainers }) {
 		const { copilotkit } = useCopilotKit();
@@ -5860,8 +5903,10 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 		const warnedMissingUrlRef = (0, react.useRef)(false);
 		const runtimeUrlRef = (0, react.useRef)(copilotkit.runtimeUrl);
 		const headersRef = (0, react.useRef)(copilotkit.headers ?? {});
+		const runtimeFetchRef = (0, react.useRef)(copilotkit.ɵruntimeFetch);
 		runtimeUrlRef.current = copilotkit.runtimeUrl;
 		headersRef.current = copilotkit.headers ?? {};
+		runtimeFetchRef.current = copilotkit.ɵruntimeFetch;
 		const key = JSON.stringify(learningContainers);
 		const defaultKey = JSON.stringify(DEFAULT_CONTAINERS);
 		(0, react.useEffect)(() => {
@@ -5881,6 +5926,7 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 					return;
 				}
 				recordAnnotation({
+					fetch: copilotkit.ɵruntimeFetch,
 					runtimeUrl,
 					headers,
 					type: "set_learning_containers",
@@ -5908,6 +5954,7 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 				const capturedRuntimeUrl = runtimeUrlRef.current;
 				const capturedHeaders = headersRef.current;
 				if (capturedRuntimeUrl) recordAnnotation({
+					fetch: runtimeFetchRef.current,
 					runtimeUrl: capturedRuntimeUrl,
 					headers: capturedHeaders,
 					type: "set_learning_containers",
@@ -5950,9 +5997,9 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 	* }
 	* ```
 	*
-	* @deprecated Legacy plural-container annotation compatibility only. New
-	* Intelligence runtimes assign one container with `ɵlearning.containerId` on
-	* `CopilotRuntime`.
+	* @deprecated This hook supports only the legacy plural-container annotation.
+	* Configure `getLearningContainerId` on `CopilotKitIntelligence` for new
+	* Intelligence runtimes.
 	*/
 	function useLearningContainersInCurrentThread({ learningContainers }) {
 		const threadId = useCopilotChatConfiguration()?.threadId;
@@ -9170,6 +9217,41 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 	});
 	CopilotChatToggleButton.displayName = "CopilotChatToggleButton";
 
+//#endregion
+//#region src/v2/components/chat/modal-open-control.tsx
+	const ModalOpenControlContext = (0, react.createContext)({});
+	/**
+	* Carries `open` / `onOpenChange` from a prebuilt surface down to the view that
+	* owns the modal state.
+	*
+	* A context is required rather than plain props because `<CopilotSidebar>`
+	* hands its view to `<CopilotChat>` as a `chatView` **component**. Threading a
+	* value that changes (like `open`) through that component's identity would mint
+	* a new element type on every toggle, and React unmounts and remounts the whole
+	* chat subtree when the element type changes. That is the remount class of bug
+	* already fixed for `<CopilotPopup>` on resize. Context keeps the override
+	* identity stable while still re-rendering the view when `open` changes.
+	*/
+	function ModalOpenControlProvider({ open, onOpenChange, children }) {
+		const value = (0, react.useMemo)(() => ({
+			open,
+			onOpenChange
+		}), [open, onOpenChange]);
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ModalOpenControlContext.Provider, {
+			value,
+			children
+		});
+	}
+	/**
+	* Reads the controlled open state supplied by the surrounding prebuilt
+	* surface. Returns an empty control (uncontrolled) when there is none.
+	*
+	* @returns The host's `open` / `onOpenChange` pair.
+	*/
+	function useModalOpenControl() {
+		return (0, react.useContext)(ModalOpenControlContext);
+	}
+
 //#endregion
 //#region src/v2/components/chat/CopilotModalHeader.tsx
 /**
@@ -9279,15 +9361,22 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 	const DEFAULT_SIDEBAR_WIDTH = 480;
 	const SIDEBAR_TRANSITION_MS = 260;
 	function CopilotSidebarView({ header, toggleButton, width, defaultOpen = true, position = "right", ...props }) {
+		const { open, onOpenChange } = useModalOpenControl();
+		const hasOpenControl = open !== void 0 || onOpenChange !== void 0;
+		const internal = /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CopilotSidebarViewInternal, {
+			header,
+			toggleButton,
+			width,
+			position,
+			...props
+		});
 		return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CopilotChatConfigurationProvider, {
-			isModalDefaultOpen: defaultOpen,
-			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CopilotSidebarViewInternal, {
-				header,
-				toggleButton,
-				width,
-				position,
-				...props
-			})
+			isModalDefaultOpen: open ?? defaultOpen,
+			children: hasOpenControl ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ControlledModalOpenScope, {
+				open,
+				onOpenChange,
+				children: internal
+			}) : internal
 		});
 	}
 	function CopilotSidebarViewInternal({ header, toggleButton, width, position = "right", ...props }) {
@@ -9351,7 +9440,7 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 			"data-position": position,
 			className: cn("copilotKitSidebar copilotKitWindow", "cpk:fixed cpk:top-0 cpk:z-[1200] cpk:flex", position === "left" ? "cpk:left-0" : "cpk:right-0", "cpk:h-[100vh] cpk:h-[100dvh] cpk:max-h-screen", "cpk:w-full", position === "left" ? "cpk:border-r" : "cpk:border-l", "cpk:border-border cpk:bg-background cpk:text-foreground cpk:shadow-xl", "cpk:transition-transform cpk:duration-300 cpk:ease-out", isSidebarOpen ? "cpk:translate-x-0" : position === "left" ? "cpk:-translate-x-full cpk:pointer-events-none" : "cpk:translate-x-full cpk:pointer-events-none"),
 			style: {
-				["--sidebar-width"]: widthToCss(sidebarWidth),
+				"--sidebar-width": widthToCss(sidebarWidth),
 				paddingTop: "env(safe-area-inset-top)",
 				paddingBottom: "env(safe-area-inset-bottom)"
 			},
@@ -9413,17 +9502,24 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 		return `${fallback}px`;
 	};
 	function CopilotPopupView({ header, toggleButton, width, height, clickOutsideToClose, defaultOpen = true, className, ...restProps }) {
+		const { open, onOpenChange } = useModalOpenControl();
+		const hasOpenControl = open !== void 0 || onOpenChange !== void 0;
+		const internal = /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CopilotPopupViewInternal, {
+			header,
+			toggleButton,
+			width,
+			height,
+			clickOutsideToClose,
+			className,
+			...restProps
+		});
 		return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CopilotChatConfigurationProvider, {
-			isModalDefaultOpen: defaultOpen,
-			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CopilotPopupViewInternal, {
-				header,
-				toggleButton,
-				width,
-				height,
-				clickOutsideToClose,
-				className,
-				...restProps
-			})
+			isModalDefaultOpen: open ?? defaultOpen,
+			children: hasOpenControl ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ControlledModalOpenScope, {
+				open,
+				onOpenChange,
+				children: internal
+			}) : internal
 		});
 	}
 	function CopilotPopupViewInternal({ header, toggleButton, width, height, clickOutsideToClose, className, ...restProps }) {
@@ -9556,7 +9652,7 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 
 //#endregion
 //#region src/v2/components/chat/CopilotSidebar.tsx
-	function CopilotSidebar({ header, toggleButton, defaultOpen, width, position, ...chatProps }) {
+	function CopilotSidebar({ header, toggleButton, defaultOpen, open, onOpenChange, width, position, ...chatProps }) {
 		const { checkFeature } = useLicenseContext();
 		const isSidebarLicensed = checkFeature("sidebar");
 		(0, react.useEffect)(() => {
@@ -9582,11 +9678,15 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 			defaultOpen,
 			position
 		]);
-		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [!isSidebarLicensed && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(InlineFeatureWarning, { featureName: "Sidebar" }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CopilotChat, {
-			welcomeScreen: CopilotSidebarView.WelcomeScreen,
-			...chatProps,
-			isModalDefaultOpen: defaultOpen,
-			chatView: SidebarViewOverride
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [!isSidebarLicensed && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(InlineFeatureWarning, { featureName: "Sidebar" }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ModalOpenControlProvider, {
+			open,
+			onOpenChange,
+			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CopilotChat, {
+				welcomeScreen: CopilotSidebarView.WelcomeScreen,
+				...chatProps,
+				isModalDefaultOpen: defaultOpen,
+				chatView: SidebarViewOverride
+			})
 		})] });
 	}
 	CopilotSidebar.displayName = "CopilotSidebar";
@@ -9608,7 +9708,7 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 		});
 	};
 	const PopupViewOverrideWithStatics = Object.assign(PopupViewOverride, CopilotChatView_default);
-	function CopilotPopup({ header, toggleButton, defaultOpen, width, height, clickOutsideToClose, ...chatProps }) {
+	function CopilotPopup({ header, toggleButton, defaultOpen, open, onOpenChange, width, height, clickOutsideToClose, ...chatProps }) {
 		const { checkFeature } = useLicenseContext();
 		const isPopupLicensed = checkFeature("popup");
 		(0, react.useEffect)(() => {
@@ -9631,11 +9731,15 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 		]);
 		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [!isPopupLicensed && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(InlineFeatureWarning, { featureName: "Popup" }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PopupShellPropsContext.Provider, {
 			value: shellProps,
-			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CopilotChat, {
-				welcomeScreen: CopilotPopupView_default.WelcomeScreen,
-				...chatProps,
-				isModalDefaultOpen: defaultOpen,
-				chatView: PopupViewOverrideWithStatics
+			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ModalOpenControlProvider, {
+				open,
+				onOpenChange,
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CopilotChat, {
+					welcomeScreen: CopilotPopupView_default.WelcomeScreen,
+					...chatProps,
+					isModalDefaultOpen: defaultOpen,
+					chatView: PopupViewOverrideWithStatics
+				})
 			})
 		})] });
 	}
@@ -10952,7 +11056,7 @@ window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-
 		switch (error.code) {
 			case _copilotkit_shared.CopilotKitErrorCode.MISSING_PUBLIC_API_KEY_ERROR: return { primary: {
 				label: "Show me how",
-				onClick: () => window.open("https://docs.copilotkit.ai/premium/overview#getting-access", "_blank", "noopener,noreferrer")
+				onClick: () => window.open("https://docs.copilotkit.ai/intelligence/overview#plans-and-access", "_blank", "noopener,noreferrer")
 			} };
 			case _copilotkit_shared.CopilotKitErrorCode.UPGRADE_REQUIRED_ERROR: return { primary: {
 				label: "Upgrade",