[dependabot]

Bumps the npm-minor-patch group with 39 updates in the / directory:

Package	From	To
@ai-sdk/gateway	4.0.90	4.0.126
@google-cloud/text-to-speech	7.1.0	7.2.0
@google/genai	2.24.0	2.31.0
@types/node	26.0.0	26.6.5
ai	7.0.112	7.0.153
chrome-devtools-mcp	1.10.1	1.12.0
dotenv	18.0.3	18.0.9
openai	7.23.0	7.43.0
@modelcontextprotocol/sdk	1.30.1	1.32.2
next	16.3.8	16.4.3
turbo	2.11.3	2.11.10
undici	8.11.0	8.12.3
@ai-sdk/react	4.0.117	4.0.157
@flags-sdk/vercel	1.4.9	1.5.2
@opentelemetry/api	1.9.1	1.10.0
@opentelemetry/exporter-trace-otlp-http	0.222.0	0.300.0
@opentelemetry/instrumentation	0.222.0	0.300.0
@opentelemetry/sdk-trace-base	2.11.0	2.12.0
@radix-ui/react-label	2.1.15	2.1.17
@radix-ui/react-separator	1.1.15	1.2.0
@radix-ui/react-tabs	1.1.21	1.2.1
@sentry/nextjs	11.0.0	11.9.0
@supabase/supabase-js	2.117.1	2.118.0
@v0-sdk/react	3.0.7	3.0.12
@vercel/blob	2.8.0	2.8.2
@vercel/functions	3.9.9	3.10.3
lucide-react	1.47.0	1.61.0
react-resizable-panels	4.13.2	4.15.0
redis	6.2.1	6.3.0
tldts	7.4.15	7.4.19
v0	3.0.7	3.0.12
zod	4.6.5	4.6.7
zustand	5.0.15	5.0.16
@playwright/test	1.63.0	1.64.1
eslint-config-next	16.3.6	16.4.3
jsdom	30.1.1	30.1.3
playwright	1.63.0	1.64.1
postcss	8.5.28	8.5.31
vite	8.3.0	8.3.5

Updates @ai-sdk/gateway from 4.0.90 to 4.0.126

Changelog

Sourced from @​ai-sdk/gateway's changelog.

4.0.126

Patch Changes

• e729d58: chore(docs): update README.md for consistent format and to avoid duplication
• Updated dependencies [5475347]
• Updated dependencies [e729d58]
  • @​ai-sdk/provider@​4.0.34
  • @​ai-sdk/provider-utils@​5.0.68

4.0.125

Patch Changes

• a706678: feat(provider/moonshotai): add kimi-k3.1-pro and kimi-k3.1-pro-highspeed

4.0.124

Patch Changes

• 1bf6d85: chore(provider/gateway): update gateway model settings files

4.0.123

Patch Changes

• 8202f5b: feat(gateway): implement experimental streaming speech in the gateway provider

  GatewaySpeechModel implements Experimental_StreamingSpeechModelV4 and streams speech over the AI Gateway speech WebSocket (/speech-model, ai-gateway-speech.v1 subprotocol). @ai-sdk/provider-utils adds the experimental speech-stream envelope (experimental_parseSpeechStreamClientFrame, experimental_serializeSpeechStreamPart, experimental_parseSpeechStreamPart) shared by clients and servers, plus the EXPERIMENTAL_SPEECH_STREAM_* frame type constants and Experimental_SpeechStream* frame types. Text-delta frames carry each text part's voice and providerOptions; the start frame carries outputFormat as an audio format object. Adds gateway.experimental_speech, callable like speech(modelId), with a server-side getToken() that mints a speech-bound short-lived client secret for browser use.

• Updated dependencies [8202f5b]

• Updated dependencies [85d84a1]

  • @​ai-sdk/provider-utils@​5.0.67
  • @​ai-sdk/provider@​4.0.33

4.0.122

Patch Changes

• 101ce42: chore(provider/gateway): update gateway model settings files

• e104368: Add Voxtral 3 offline transcription and speech model IDs. Support transcription context phrases and detected language, update timestamp validation for Voxtral 3, and expose speech expressiveness and pronunciation hints.

• eb1f056: fix(provider/gateway): update parallelSearch for Parallel's GA Search API

  • Accept the turbo, fast, basic, and advanced modes. Tool calls that use one of these modes no longer fail client-side input validation. one-shot and agentic are deprecated but still accepted.
  • Add the location and top-level maxCharsTotal options, plus fetchPolicy.timeoutSeconds and fetchPolicy.disableCacheFallback. excerpts.maxCharsTotal is deprecated in favor of maxCharsTotal.
  • Fix the result type and schema to match the response the gateway returns: search_id, results with url, nullable title and publish_date, and excerpts: string[], plus optional warnings, usage, and session_id. The searchId, excerpt, publishDate, and relevanceScore fields were never populated and are removed; update code that reads them. validateUIMessages now accepts Parallel Search results.

• 5893e99: chore(provider/gateway): update gateway model settings files

• Updated dependencies [10026d1]

  • @​ai-sdk/provider@​4.0.32

... (truncated)

Commits

• 612be23 Version Packages (#23938)
• e729d58 chore(docs): update README.md for consistent format and to avoid duplicatio...
• 2deca8c Version Packages (#23883)
• a706678 feat(provider/moonshotai): add kimi-k3.1-pro and kimi-k3.1-pro-highspeed (#23...
• a089a0a Version Packages (#23880)
• 1bf6d85 chore(provider/gateway): update gateway model settings files (#23879)
• 594495a Version Packages (#23857)
• 8202f5b feat(gateway): implement experimental streaming speech in the gateway provide...
• 401cadc Version Packages (#23785)
• 5893e99 chore(provider/gateway): update gateway model settings files (#23840)
• Additional commits viewable in compare view

Updates @google-cloud/text-to-speech from 7.1.0 to 7.2.0

Release notes

Sourced from @​google-cloud/text-to-speech's releases.

text-to-speech: v7.2.0

7.2.0 (2026-10-08)

Features

• Update API sources and regenerate (#9554) (8b6837a)

video-intelligence: v7.2.0

7.2.0 (2026-10-08)

Features

• Update API sources and regenerate (#9554) (8b6837a)

Changelog

Sourced from @​google-cloud/text-to-speech's changelog.

7.2.0 (2026-10-08)

Features

• Update API sources and regenerate (#9554) (8b6837a)

7.1.1 (2026-09-28)

Bug Fixes

• Update package.json and .gitignore across packages (#9378) (9c54cec)

Commits

• 703154b chore: release main (#9584)
• 6375767 chore(packages): migrate generated packages to runtime-agnostic test runner (...
• 27c2f65 chore: release main (#9442)
• 9c54cec fix: update package.json and .gitignore across packages (#9378)
• cd8400f chore: upgrade to latest version of gapic-generator-typescript (#9374)
• 65a9440 chore: revert update .nycrc, Contributing.md, and .gitignore across packages ...
• 3ff5ae9 chore: update .nycrc, Contributing.md, and .gitignore across packages (#9144)
• e96b309 chore: release main (#9262)
• c249594 chore: upgrade librarian gapic-generator-typescript to v5.2.0 (#9252)
• See full diff in compare view

Updates @google/genai from 2.24.0 to 2.31.0

Release notes

Sourced from @​google/genai's releases.

v2.31.0

2.31.0 (2026-10-22)

Features

• Add store to GenerateContentConfig (Gemini Developer API only) and labels to LiveConnectConfig. (0b52aa5)
• add base_voice to PromptedVoice in GAOS SDK (d62820b)
• Add generation_output_config to GenerateContentConfig (e82a75a)
• Add Live API in-session context updates (send_context_update) and types across GenAI SDKs. (177ee68)
• include AudioContent, DocumentContent, and VideoContent in FunctionResultSubContent (aeaed4e)
• sdks: enable fixes.openSingleValueEnumsOct2026 across all SDKs (0059474)
• update discovery doc (40d6e98)

Bug Fixes

• genai: raise mid-stream SSE errors and dropped connections consistently across SDKs; add continuation conformance tests (38f6ebc)
• interactions: sync InteractionSseEventInteractionStatus enum with InteractionStatus (be6aa9f)
• triggers: fix agent triggers OpenAPI overlays, numeric fields, and SDK patches (0e9031d)

v2.30.0

2.30.0 (2026-10-14)

Features

• interactions: add gemini-4-argon to Model enum (8a3c307)

Bug Fixes

• clear continuation state and preserve prompt feedback when continuation hop returns no candidates (e63d1f1)
• fix the grounding metadata merging for automatic continuation in generate content and generate content stream (6bfba87)
• make continuation streams retry dropped hops, stop on prompt_feedback, and keep real errors in generate_content (6bdc0d9)
• type GeminiNextGen signatures with public, importable names (ad3fb89)

v2.29.1

2.29.1 (2026-10-13)

Bug Fixes

• concatenate output_text across multi-step model responses in a turn (567cc8a)

v2.29.0

2.29.0 (2026-10-13)

Features

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

2.31.0 (2026-10-22)

Features

• Add store to GenerateContentConfig (Gemini Developer API only) and labels to LiveConnectConfig. (0b52aa5)
• add base_voice to PromptedVoice in GAOS SDK (d62820b)
• Add generation_output_config to GenerateContentConfig (e82a75a)
• Add Live API in-session context updates (send_context_update) and types across GenAI SDKs. (177ee68)
• include AudioContent, DocumentContent, and VideoContent in FunctionResultSubContent (aeaed4e)
• sdks: enable fixes.openSingleValueEnumsOct2026 across all SDKs (0059474)
• update discovery doc (40d6e98)

Bug Fixes

• genai: raise mid-stream SSE errors and dropped connections consistently across SDKs; add continuation conformance tests (38f6ebc)
• interactions: sync InteractionSseEventInteractionStatus enum with InteractionStatus (be6aa9f)
• triggers: fix agent triggers OpenAPI overlays, numeric fields, and SDK patches (0e9031d)

2.30.0 (2026-10-14)

Features

• interactions: add gemini-4-argon to Model enum (8a3c307)

Bug Fixes

• clear continuation state and preserve prompt feedback when continuation hop returns no candidates (e63d1f1)
• fix the grounding metadata merging for automatic continuation in generate content and generate content stream (6bfba87)
• make continuation streams retry dropped hops, stop on prompt_feedback, and keep real errors in generate_content (6bdc0d9)
• type GeminiNextGen signatures with public, importable names (ad3fb89)

2.29.1 (2026-10-13)

Bug Fixes

• concatenate output_text across multi-step model responses in a turn (567cc8a)

2.29.0 (2026-10-13)

Features

• accumulate streaming continuation usage metadata and expose initialPromptTokenCount (dbc961f)
• Add continuation_token to the Interactions interaction.status_update event. (a93776c)
• Add a CONTINUATION_REQUIRED Interaction status (754f71f)

... (truncated)

Commits

• 1748ce7 chore(main): release 2.31.0 (#2065)
• 0b52aa5 feat: Add store to GenerateContentConfig (Gemini Developer API only) and ...
• aeaed4e feat: include AudioContent, DocumentContent, and VideoContent in FunctionResu...
• 41aaecb chore(cli): update Speakeasy OpenAPI generator to v2.950.8
• 38f6ebc fix(genai): raise mid-stream SSE errors and dropped connections consistently ...
• ce47243 docs: Update unenforced JSON Schema keywords on Interactions schema fields.
• bc1d9d0 chore: make bash the valid return type
• 8934c3f chore(cli): update Speakeasy OpenAPI generator to v2.950.5
• e82a75a feat: Add generation_output_config to GenerateContentConfig
• 40d6e98 feat: update discovery doc
• Additional commits viewable in compare view

Updates @types/node from 26.0.0 to 26.6.5

Commits

• See full diff in compare view

Updates ai from 7.0.112 to 7.0.153

Changelog

Sourced from ai's changelog.

7.0.153

Patch Changes

• 5475347: Fix non-streaming Responses API structured output failing when multiple assistant messages contain JSON. Providers can supply separate structured-output text for parsing, allowing OpenAI and Azure Responses models to select the last final_answer while preserving all generated content, annotations, conversation history, and token usage.
• Updated dependencies [5475347]
• Updated dependencies [e729d58]
  • @​ai-sdk/provider@​4.0.34
  • @​ai-sdk/provider-utils@​5.0.68
  • @​ai-sdk/gateway@​4.0.126

7.0.152

Patch Changes

• Updated dependencies [a706678]
  • @​ai-sdk/gateway@​4.0.125

7.0.151

Patch Changes

• Updated dependencies [1bf6d85]
  • @​ai-sdk/gateway@​4.0.124

7.0.150

Patch Changes

• 8e18d59: feat(ai): add experimental_streamSpeech

  Streams speech audio from a string, or an array, iterable, or stream of text deltas and/or text parts (each with an optional voice and providerOptions) using speech models that implement the experimental Experimental_StreamingSpeechModelV4 extension. Returns a single-consumer audioStream / fullStream plus usage, warnings, responses, and providerMetadata promises. Provider error parts are non-fatal and reported through onError (default console.error). A user abort or a cancel rejects the result promises immediately. Exports the Experimental_SpeechTextPart, Experimental_SpeechStreamPart, Experimental_SpeechStreamUsage, and Experimental_StreamSpeechResult types, adds an optional cause to NoSpeechGeneratedError, and adds Experimental_MockStreamingSpeechModelV4 to ai/test.

• Updated dependencies [8202f5b]

• Updated dependencies [85d84a1]

  • @​ai-sdk/gateway@​4.0.123
  • @​ai-sdk/provider-utils@​5.0.67
  • @​ai-sdk/provider@​4.0.33

7.0.149

Patch Changes

• 1727442: fix(ai): process only the first approval response per tool call, so repeated or conflicting responses in the final tool message no longer execute a tool twice or both execute and deny it

• 0a5d0e7: Fix toolChoice: 'none' by forwarding it to the Hugging Face Responses API and rejecting tool calls before local execution in generateText, streamText, and WorkflowAgent. Streamed tool parts are withheld so client-side tools cannot act on them, and repairToolCall and experimental_refineToolInput are not invoked for rejected tool calls.

• 10026d1: Add the interrupted finish reason for provider streams that end without a completion signal. Preserve partial output without introducing an error solely for interruption, and stop tool execution, agent continuation, and automatic UI follow-ups for interrupted responses, including late tool results and approvals. Provider detection and emission will be added separately.

  Compatibility notice: Adding interrupted to the public finish-reason types can break type checking after upgrading, even though this is a patch release. Exhaustive switches (for example, using an assertNever fallback) and mappings such as Record<FinishReason, string> must handle the new value. Update any custom validation or application logic that assumes the existing set of finish reasons is exhaustive.

  When providers begin emitting interrupted, a stream ending without a completion signal will preserve partial output and report this finish reason without emitting an error solely for the interruption. Applications that need to detect incomplete responses should check finishReason === 'interrupted' as well as their existing error handling.

... (truncated)

Commits

• 612be23 Version Packages (#23938)
• 5475347 fix(openai): parse the last final answer for non-streaming structured output ...
• 2deca8c Version Packages (#23883)
• a089a0a Version Packages (#23880)
• 594495a Version Packages (#23857)
• 8202f5b feat(gateway): implement experimental streaming speech in the gateway provide...
• 8e18d59 feat(ai): add experimental_streamSpeech (#23794)
• 401cadc Version Packages (#23785)
• 0a5d0e7 fix: honor toolChoice none in core and Hugging Face (#23843)
• 10026d1 feat(ai): add support for interrupted finish reasons (#23778)
• Additional commits viewable in compare view

Updates chrome-devtools-mcp from 1.10.1 to 1.12.0

Release notes

Sourced from chrome-devtools-mcp's releases.

chrome-devtools-mcp: v1.12.0

1.12.0 (2026-10-22)

🎉 Features

• add --maxNavigationSaved flag to configure retained navigation history (#3018) (a580d13)
• add Kimi Code plugin manifest (#3029) (cd00b64)
• Analyze heap snapshots without a browser connection (#3156) (78c8320)
• config: add --watchConfig to reload config file changes (#3248) (b48561f)
• config: introduce layered ServerConfig for live reload (#3203) (37f1fda)
• config: share ReadonlyServerConfig with McpContext and McpPage (#3204) (0813bf3)
• config: support reloading blockedUrlPattern and allowedUrlPattern (#3268) (cc850f5)
• context: release disabled feature state on config reload (#3049) (c0140d1)
• Paginate by default in heap snapshot tools (#3201) (fb8375b)
• Paginate detailed diff in compare_heapsnapshots (#3195) (4a9dd53)
• run independent tool calls in parallel with a TaskRunner (#3243) (8a8d877)
• run page-scoped tools on different pages in parallel (#3252) (f8f18ac)
• server: add McpServer.applyConfig() to reload configuration (#3051) (f874aeb)
• slim: support filepath in slim mode screenshot (#3296) (d399c4a)
• Sort objects for class by self size in compare_heapsnapshots (#3205) (f8a18c6)
• tools: support updating ToolHandler definitions in place (#3050) (8064138)
• wait_for: support opt-in visible text matching (#3212) (eef92da)

🛠️ Fixes

• allow paths below a filesystem-root workspace root (#3277) (296ccef)
• block evaluate_script while a dialog is open (#3196) (545bcbb)
• bound take_snapshot wait and clear the geolocation override (#3265) (6282f54)
• browser: redact WebSocket headers from connection logs (#2901) (3a2f91e)
• capture thrown transform errors as Zod validation issues (#3242) (0f95c21)
• clear handled dialog in McpPage.getDialog() (#3241) (2ab93a3), closes #2958
• cli: disallow --slim in CLI start options (#2987) (#3113) (ae3f61c)
• cli: do not forward tool args to start (#3114) (fef1598)
• cli: serialize object daemon arguments (#2797) (f73a440)
• close the tab opened by a failed new_page (#2928) (c174677)
• config: accept native JSON objects for wsHeaders in config files (#3262) (371e6c2)
• console: describe Map, Set, function, DOM node, symbol and cyclic arguments (#3199) (968e4e5)
• console: include the reason of unhandled promise rejections (#3148) (f7cdf73)
• defer focus emulation until a page is explicitly targeted (#3230) (35abe35)
• disable Puppeteer signal handlers for launched browsers (#3238) (3afec73), closes #3154
• discover third-party developer tools before tool lookup (#3208) (2777fa0), closes #2973
• discover third-party developer tools in page tools (#3207) (cf33529), closes #2980
• drop InlineTextBox nodes from text snapshots (#3202) (f8c775a)
• emulate: keep previous viewport when setViewport fails (#3150) (19d883c)
• exclude source maps from the npm package (#3295) (d575da4)
• keep surrogate pairs and emoji whole when truncating titles, names and bodies (#3215) (058adcf)
• let resourceTypes match CORS preflights and prefetches (#3217) (e342c6e)
• lighthouse: explain unsupported URL schemes in navigation mode (#3144) (c6ad84a)

... (truncated)

Changelog

Sourced from chrome-devtools-mcp's changelog.

1.12.0 (2026-10-22)

🎉 Features

• add --maxNavigationSaved flag to configure retained navigation history (#3018) (a580d13)
• add Kimi Code plugin manifest (#3029) (cd00b64)
• Analyze heap snapshots without a browser connection (#3156) (78c8320)
• config: add --watchConfig to reload config file changes (#3248) (b48561f)
• config: introduce layered ServerConfig for live reload (#3203) (37f1fda)
• config: share ReadonlyServerConfig with McpContext and McpPage (#3204) (0813bf3)
• config: support reloading blockedUrlPattern and allowedUrlPattern (#3268) (cc850f5)
• context: release disabled feature state on config reload (#3049) (c0140d1)
• Paginate by default in heap snapshot tools (#3201) (fb8375b)
• Paginate detailed diff in compare_heapsnapshots (#3195) (4a9dd53)
• run independent tool calls in parallel with a TaskRunner (#3243) (8a8d877)
• run page-scoped tools on different pages in parallel (#3252) (f8f18ac)
• server: add McpServer.applyConfig() to reload configuration (#3051) (f874aeb)
• slim: support filepath in slim mode screenshot (#3296) (d399c4a)
• Sort objects for class by self size in compare_heapsnapshots (#3205) (f8a18c6)
• tools: support updating ToolHandler definitions in place (#3050) (8064138)
• wait_for: support opt-in visible text matching (#3212) (eef92da)

🛠️ Fixes

• allow paths below a filesystem-root workspace root (#3277) (296ccef)
• block evaluate_script while a dialog is open (#3196) (545bcbb)
• bound take_snapshot wait and clear the geolocation override (#3265) (6282f54)
• browser: redact WebSocket headers from connection logs (#2901) (3a2f91e)
• capture thrown transform errors as Zod validation issues (#3242) (0f95c21)
• clear handled dialog in McpPage.getDialog() (#3241) (2ab93a3), closes #2958
• cli: disallow --slim in CLI start options (#2987) (#3113) (ae3f61c)
• cli: do not forward tool args to start (#3114) (fef1598)
• cli: serialize object daemon arguments (#2797) (f73a440)
• close the tab opened by a failed new_page (#2928) (c174677)
• config: accept native JSON objects for wsHeaders in config files (#3262) (371e6c2)
• console: describe Map, Set, function, DOM node, symbol and cyclic arguments (#3199) (968e4e5)
• console: include the reason of unhandled promise rejections (#3148) (f7cdf73)
• defer focus emulation until a page is explicitly targeted (#3230) (35abe35)
• disable Puppeteer signal handlers for launched browsers (#3238) (3afec73), closes #3154
• discover third-party developer tools before tool lookup (#3208) (2777fa0), closes #2973
• discover third-party developer tools in page tools (#3207) (cf33529), closes #2980
• drop InlineTextBox nodes from text snapshots (#3202) (f8c775a)
• emulate: keep previous viewport when setViewport fails (#3150) (19d883c)
• exclude source maps from the npm package (#3295) (d575da4)
• keep surrogate pairs and emoji whole when truncating titles, names and bodies (#3215) (058adcf)
• let resourceTypes match CORS preflights and prefetches (#3217) (e342c6e)
• lighthouse: explain unsupported URL schemes in navigation mode (#3144) (c6ad84a)
• lighthouse: fail the audit when Lighthouse reports a runtime error (#3188) (53ea78d)

... (truncated)

Commits

• af28344 chore(main): release chrome-devtools-mcp 1.12.0 (#3168)
• 7d5f7de fix: treat 0.0.0.0 and [::] browser endpoints as local (#3321)
• db442f9 chore(deps-dev): bump the dev-dependencies group across 1 directory with 3 up...
• 296ccef fix: allow paths below a filesystem-root workspace root (#3277)
• 3eb76a6 chore(dep): bump pptr (#3318)
• f25f3df fix(network): reset page network emulation before applying URL restrictions (...
• 47db2b8 docs(config): note that hot-reloaded URL restrictions keep open targets attac...
• a560c32 ci: use pull_request trigger for PR title check (#3310)
• 841793f chore(deps): reimport lighthouse 13.5.0 bundle (#3309)
• 186ea66 fix(pages): revert reporting the page size after resize_page (#3308)
• Additional commits viewable in compare view

Updates dotenv from 18.0.3 to 18.0.9

Changelog

Sourced from dotenv's changelog.

18.0.9 (2026-10-14)

Changed

• Permit DOTENV_PATH being empty string with the CLI (#1076)

18.0.8 (2026-10-14)

Changed

• Fast parser should strip appended extra quotes (#1073)
• Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

• Treat undefined settings like quiet: true as null rather than falsey (#1070)
• CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

• Use smarter parseBoolean not Boolean() to fix override (#1069)

Description has been truncated

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
v0-uvai	Ready	Preview, v0	Oct 28, 2026 8:28am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: groupthinking/EventRelay
• Branch: main
• File: .coderabbit.yaml
• Commit: ba2777d
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 10b41bb3-376d-47b2-b582-7734054de0a2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🔍 PR Validation

⚠️ Large PR detected (5343 lines changed)

[github-actions]

✅ E2E Test Results: ALL TESTS PASSED

Metric	Value
Status	🟢 GREEN
Total Tests
Passed	16
Failed
Deployment	https://v0-uvai-iu9hb209p-garv1.vercel.app

Test Output

s on every request without persisting it�[32m 1�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mTemplate Gallery�[2m > �[22mhomepage returns 200 with HTML�[32m 115�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mTemplate Gallery�[2m > �[22mfeatures page contains template/workflow markup�[32m 160�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mTemplate Gallery�[2m > �[22mfeatures page surfaces at least 5 workflow/template indicators�[32m 135�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mVideo Pack Pipeline�[2m > �[22mPOST /api/video/pack accepts a YouTube URL without hanging�[33m 1799�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mVideo Pack Pipeline�[2m > �[22mGET /api/video/pack resolves to a ready pack with evidence lineage�[33m 512�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mError Handling�[2m > �[22mmissing URL returns 400, not a hang�[32m 82�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mError Handling�[2m > �[22minvalid URL returns 400 quickly, not a hang�[32m 63�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mError Handling�[2m > �[22mPOST /api/video/pack with no body returns 400�[32m 61�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mDashboard�[2m > �[22m/dashboard returns 200�[32m 117�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mDashboard�[2m > �[22m/dashboard contains agent or pipeline visualization markup�[32m 184�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mAPI Health�[2m > �[22mGET /api returns a response (not 404)�[32m 217�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mAPI Health�[2m > �[22mretired /api/pipeline routes are gone (no pipeline served)�[32m 40�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mStatic Assets�[2m > �[22mhomepage has proper meta tags�[32m 68�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mStatic Assets�[2m > �[22m/features page returns 200�[32m 90�[2mms�[22m�[39m

�[2m Test Files �[22m �[1m�[32m1 passed�[39m�[22m�[90m (1)�[39m
�[2m      Tests �[22m �[1m�[32m16 passed�[39m�[22m�[90m (16)�[39m
�[2m   Start at �[22m 07:53:45
�[2m   Duration �[22m 5.18s�[2m (transform 55ms, setup 0ms, import 70ms, tests 4.98s, environment 0ms)�[22m

[github-actions]

✅ E2E Test Results: ALL TESTS PASSED

Metric	Value
Status	🟢 GREEN
Total Tests
Passed	16
Failed
Deployment	https://v0-uvai-p26z78lob-garv1.vercel.app

Test Output

 every request without persisting it�[32m 1�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mTemplate Gallery�[2m > �[22mhomepage returns 200 with HTML�[32m 123�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mTemplate Gallery�[2m > �[22mfeatures page contains template/workflow markup�[32m 169�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mTemplate Gallery�[2m > �[22mfeatures page surfaces at least 5 workflow/template indicators�[32m 231�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mVideo Pack Pipeline�[2m > �[22mPOST /api/video/pack accepts a YouTube URL without hanging�[33m 1807�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mVideo Pack Pipeline�[2m > �[22mGET /api/video/pack resolves to a ready pack with evidence lineage�[33m 609�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mError Handling�[2m > �[22mmissing URL returns 400, not a hang�[32m 95�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mError Handling�[2m > �[22minvalid URL returns 400 quickly, not a hang�[32m 106�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mError Handling�[2m > �[22mPOST /api/video/pack with no body returns 400�[32m 101�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mDashboard�[2m > �[22m/dashboard returns 200�[32m 181�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mDashboard�[2m > �[22m/dashboard contains agent or pipeline visualization markup�[32m 190�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mAPI Health�[2m > �[22mGET /api returns a response (not 404)�[32m 259�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mAPI Health�[2m > �[22mretired /api/pipeline routes are gone (no pipeline served)�[32m 61�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mStatic Assets�[2m > �[22mhomepage has proper meta tags�[32m 118�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mStatic Assets�[2m > �[22m/features page returns 200�[32m 159�[2mms�[22m�[39m

�[2m Test Files �[22m �[1m�[32m1 passed�[39m�[22m�[90m (1)�[39m
�[2m      Tests �[22m �[1m�[32m16 passed�[39m�[22m�[90m (16)�[39m
�[2m   Start at �[22m 08:18:25
�[2m   Duration �[22m 5.88s�[2m (transform 45ms, setup 0ms, import 57ms, tests 5.73s, environment 0ms)�[22m

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.
• ⚠️ 10 packages with OpenSSF Scorecard issues.

View full job summary

[github-actions]

✅ E2E Test Results: ALL TESTS PASSED

Metric	Value
Status	🟢 GREEN
Total Tests
Passed	16
Failed
Deployment	https://v0-uvai-r6v9dmepq-garv1.vercel.app

Test Output

very request without persisting it�[32m 1�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mTemplate Gallery�[2m > �[22mhomepage returns 200 with HTML�[32m 131�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mTemplate Gallery�[2m > �[22mfeatures page contains template/workflow markup�[32m 258�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mTemplate Gallery�[2m > �[22mfeatures page surfaces at least 5 workflow/template indicators�[32m 191�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mVideo Pack Pipeline�[2m > �[22mPOST /api/video/pack accepts a YouTube URL without hanging�[33m 2269�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mVideo Pack Pipeline�[2m > �[22mGET /api/video/pack resolves to a ready pack with evidence lineage�[33m 704�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mError Handling�[2m > �[22mmissing URL returns 400, not a hang�[32m 122�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mError Handling�[2m > �[22minvalid URL returns 400 quickly, not a hang�[32m 125�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mError Handling�[2m > �[22mPOST /api/video/pack with no body returns 400�[32m 113�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mDashboard�[2m > �[22m/dashboard returns 200�[32m 215�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mDashboard�[2m > �[22m/dashboard contains agent or pipeline visualization markup�[32m 159�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mAPI Health�[2m > �[22mGET /api returns a response (not 404)�[32m 259�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mAPI Health�[2m > �[22mretired /api/pipeline routes are gone (no pipeline served)�[32m 113�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mStatic Assets�[2m > �[22mhomepage has proper meta tags�[32m 181�[2mms�[22m�[39m
 �[32m✓�[39m tests/e2e/pipeline.test.ts�[2m > �[22mEventRelay E2E — Live Deployment�[2m > �[22mStatic Assets�[2m > �[22m/features page returns 200�[32m 160�[2mms�[22m�[39m

�[2m Test Files �[22m �[1m�[32m1 passed�[39m�[22m�[90m (1)�[39m
�[2m      Tests �[22m �[1m�[32m16 passed�[39m�[22m�[90m (16)�[39m
�[2m   Start at �[22m 08:28:47
�[2m   Duration �[22m 6.76s�[2m (transform 35ms, setup 0ms, import 45ms, tests 6.64s, environment 0ms)�[22m

[groupthinking]

Review at 760efdfd82cb2d4e5f7dd0b7a21770cb2b785708: this grouped update covers the package targets in seven older individual PRs (#2404, #2403, #2399, #2398, #2342, #2341, #2340). A clean npm 10 install, web tests (1,520 passed, 28 skipped), lint, and production build passed locally; hosted Python 3.11 and 3.12 checks passed. The local Python unit test could not run because pytest is unavailable here. A fresh npm audit reports 31 findings on this branch versus 33 on the current base lockfile; 31 findings remain and this is not a clean security verdict.

The hosted dependency-review check fails with a three-base/one-head snapshot warning and no reliable evidence artifact. I am keeping the review open without approval or a merge recommendation until that comparison is corrected. The seven individual PRs should remain open until this grouped replacement is accepted.