chore: import upstream snapshot with attribution

.github/workflows/check-all-workflows.yml

@@ -0,0 +1,19 @@
+name: Check All
+on:
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  check-all:
+    runs-on: ubuntu-latest
+    permissions:
+      checks: read
+      statuses: read
+    steps:
+      - name: Check All
+        uses: upsidr/merge-gatekeeper@v1
+        with:
+          timeout: 900 # 15 minutes
+          token: ${{ secrets.GITHUB_TOKEN }}
+          self: check-all

.github/workflows/check-integration-categories.yml

@@ -0,0 +1,46 @@
+name: Check Integration Categories
+
+on: pull_request
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  check-integration-categories:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+      - name: Get changed files
+        id: changed-files
+        uses: tj-actions/changed-files@v46
+        with:
+          files: 'integrations/**/*.{ts,md,svg,vrl}'
+          separator: '\n'
+      - name: Check integration categories
+        env:
+          CHANGED_FILES: ${{ steps.changed-files.outputs.all_changed_files }}
+        run: |
+          modified_integrations=$(echo -e "$CHANGED_FILES" | awk -F'/' '{print $2}' | sort -u)
+
+          should_fail=0
+
+          for integration in $modified_integrations; do
+            if [ ! -d "integrations/$integration" ]; then
+              continue
+            fi
+
+            echo "Checking $integration"
+
+            if ! ./.github/scripts/integration-has-valid-category.sh "$integration"; then
+              should_fail=1
+            fi
+          done
+
+          if [ "$should_fail" -ne 0 ]; then
+            echo "Please add a valid category attribute to your integration definition before pushing your changes."
+            exit 1
+          fi

.github/workflows/check-integration-versions.yml

@@ -0,0 +1,64 @@
+name: Check Integration Versions
+
+on: pull_request
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  check-integration-versions:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+      - name: Login to Botpress
+        env:
+          TOKEN: ${{ secrets.PRODUCTION_TOKEN_CLOUD_OPS_ACCOUNT }}
+          WORKSPACE_ID: ${{ secrets.PRODUCTION_CLOUD_OPS_WORKSPACE_ID }}
+        run: pnpm bp login -y --token "$TOKEN" --workspace-id "$WORKSPACE_ID"
+      - name: Get changed files
+        id: changed-files
+        uses: tj-actions/changed-files@v46
+        with:
+          files: 'integrations/**/*.{ts,md,svg,vrl}'
+          separator: '\n'
+      - name: Check integration versions
+        env:
+          CHANGED_FILES: ${{ steps.changed-files.outputs.all_changed_files }}
+        run: |
+          modified_integrations=$(echo -e "$CHANGED_FILES" | awk -F'/' '{print $2}' | sort -u)
+
+          should_fail=0
+
+          SKIP_INTEGRATIONS=("chat")
+
+          for integration in $modified_integrations; do
+            skip=0
+            for skip_integration in "${SKIP_INTEGRATIONS[@]}"; do
+              if [ "$integration" = "$skip_integration" ]; then
+                echo "Skipping $integration"
+                skip=1
+                break
+              fi
+            done
+
+            if [ $skip -eq 1 ]; then
+              continue
+            fi
+
+            echo "Checking $integration"
+            exists=$(./.github/scripts/integration-exists.sh "$integration")
+
+            if [ "$exists" -ne 0 ]; then
+              echo "Integration $integration is already deployed publicly with the same version. Please update the version of your integration."
+              should_fail=1
+            fi
+          done
+
+          if [ "$should_fail" -ne 0 ]; then
+            echo "Please update the version of your integration before pushing your changes."
+            exit 1
+          fi

.github/workflows/check-plugin-versions.yml

@@ -0,0 +1,49 @@
+name: Check Plugins Versions
+
+on: pull_request
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  check-plugins-versions:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+      - name: Login to Botpress
+        env:
+          TOKEN: ${{ secrets.PRODUCTION_TOKEN_CLOUD_OPS_ACCOUNT }}
+          WORKSPACE_ID: ${{ secrets.PRODUCTION_CLOUD_OPS_WORKSPACE_ID }}
+        run: pnpm bp login -y --token "$TOKEN" --workspace-id "$WORKSPACE_ID"
+      - name: Get changed files
+        id: changed-files
+        uses: tj-actions/changed-files@v46
+        with:
+          files: 'plugins/**/*.{ts,md,svg}'
+          separator: '\n'
+      - name: Check plugin versions
+        env:
+          CHANGED_FILES: ${{ steps.changed-files.outputs.all_changed_files }}
+        run: |
+          modified_plugins=$(echo -e "$CHANGED_FILES" | awk -F'/' '{print $2}' | sort -u)
+
+          should_fail=0
+
+          for plugin in $modified_plugins; do
+            echo "Checking $plugin"
+            exists=$(./.github/scripts/plugin-exists.sh "$plugin")
+
+            if [ "$exists" -ne 0 ]; then
+              echo "Plugin $plugin is already deployed publicly with the same version. Please update the version of your plugin."
+              should_fail=1
+            fi
+          done
+
+          if [ "$should_fail" -ne 0 ]; then
+            echo "Please update the version of your plugin before pushing your changes."
+            exit 1
+          fi

.github/workflows/check-shells.yml

@@ -0,0 +1,18 @@
+name: Check Shell Scripts
+
+on:
+  pull_request:
+    paths:
+      - '**/*.sh'
+      - .github/workflows
+      - .github/actions
+
+jobs:
+  check-shells:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: Check shell scripts
+        uses: botpress/gh-actions/check-shells@v3

.github/workflows/deploy-bots.yml

@@ -0,0 +1,52 @@
+name: Deploy Bots
+
+on: workflow_dispatch
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        env:
+          BUGBUSTER_GITHUB_TOKEN: ${{ secrets.BUGBUSTER_GITHUB_TOKEN }}
+          BUGBUSTER_GITHUB_WEBHOOK_SECRET: ${{ secrets.BUGBUSTER_GITHUB_WEBHOOK_SECRET }}
+          BUGBUSTER_LINEAR_API_KEY: ${{ secrets.BUGBUSTER_LINEAR_API_KEY }}
+          BUGBUSTER_LINEAR_WEBHOOK_SIGNING_SECRET: ${{ secrets.BUGBUSTER_LINEAR_WEBHOOK_SIGNING_SECRET }}
+          BUGBUSTER_TELEGRAM_BOT_TOKEN: ${{ secrets.BUGBUSTER_TELEGRAM_BOT_TOKEN }}
+          BUGBUSTER_SLACK_REFRESH_TOKEN: ${{ secrets.BUGBUSTER_SLACK_REFRESH_TOKEN }}
+          BUGBUSTER_SLACK_CLIENT_ID: ${{ secrets.BUGBUSTER_SLACK_CLIENT_ID }}
+          BUGBUSTER_SLACK_CLIENT_SECRET: ${{ secrets.BUGBUSTER_SLACK_CLIENT_SECRET }}
+          BUGBUSTER_SLACK_SIGNING_SECRET: ${{ secrets.BUGBUSTER_SLACK_SIGNING_SECRET }}
+          CLOG_SLACK_CLIENT_ID: ${{ secrets.CLOG_SLACK_CLIENT_ID }}
+          CLOG_SLACK_CLIENT_SECRET: ${{ secrets.CLOG_SLACK_CLIENT_SECRET }}
+          CLOG_SLACK_SIGNING_SECRET: ${{ secrets.CLOG_SLACK_SIGNING_SECRET }}
+          CLOG_SLACK_REFRESH_TOKEN: ${{ secrets.CLOG_SLACK_REFRESH_TOKEN }}
+        uses: ./.github/actions/setup
+      - name: Deploy Bots
+        env:
+          WORKSPACE_ID: ${{ secrets.PRODUCTION_CLOUD_OPS_WORKSPACE_ID }}
+          TOKEN: ${{ secrets.PRODUCTION_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          api_url="https://api.botpress.cloud"
+
+          # login
+
+          echo "### Logging in to $api_url ###"
+          pnpm bp login -y --api-url "$api_url" --workspaceId "$WORKSPACE_ID" --token "$TOKEN"
+
+          # deploy
+
+          bots="pnpm list -F bugbuster -F clog --json"
+          bot_paths=$(eval "$bots" | jq -r 'map(.path) | .[]')
+
+          for bot_path in $bot_paths; do
+              bot_name=$(basename "$bot_path")
+              echo -e "\nDeploying bot: ### $bot_name ###\n"
+              bot_id=$(pnpm bp bots new --name "$bot_name" --json --if-not-exists | jq -r ".id")
+              pnpm retry -n 2 -- pnpm -F "$bot_name" -c exec -- "pnpm bp deploy -v -y --botId $bot_id"
+          done

.github/workflows/deploy-chat-production.yml

@@ -0,0 +1,75 @@
+name: Deploy Chat Production
+
+on:
+  workflow_dispatch:
+    inputs:
+      branchOrCommit:
+        description: 'Branch/Commit/Tag to deploy'
+        required: false
+        type: string
+        default: 'master'
+      skipDeploy:
+        description: 'Skip deployment to ECS'
+        required: false
+        type: boolean
+        default: false
+      builder:
+        description: 'Image Builder'
+        required: false
+        type: choice
+        options:
+          - docker
+          - depot
+        default: 'depot'
+
+permissions:
+  id-token: write
+  contents: write
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: false
+
+jobs:
+  deploy-chat-production:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: botpress/gh-actions/full-service-deploy@v3.3
+        with:
+          service: chat
+          repository: chat-integration
+          dockerfile: integrations/chat/Dockerfile
+          context: .
+          builder: ${{ inputs.builder || 'depot' }}
+          depot-project: ${{ secrets.DEPOT_PROJECT_ID }}
+          role-ecs-update: botpress_infra_update
+          skip-ecs-update: ${{ inputs.skipDeploy }}
+          create-tag: true
+          ref: ${{ inputs.branchOrCommit || github.sha }}
+          environment: production
+
+  deploy-chat-lambda:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          ref: ${{ inputs.branchOrCommit || github.sha }}
+      - name: Setup
+        uses: ./.github/actions/setup
+      - name: Deploy to Lambda
+        run: |
+          pnpm bp login -y --api-url "https://api.botpress.cloud" --workspaceId "${{ secrets.PRODUCTION_CLOUD_OPS_WORKSPACE_ID }}" --token "${{ secrets.PRODUCTION_TOKEN_CLOUD_OPS_ACCOUNT }}"
+          pnpm -F "{integrations/chat}" -c exec -- bp deploy -v -y --noBuild --visibility public --allowDeprecated
+
+  ping-success:
+    needs: [deploy-chat-production, deploy-chat-lambda]
+    runs-on: ubuntu-latest
+    steps:
+      - run: curl -m 10 --retry 5 "${{ secrets.CHAT_DEPLOY_PRODUCTION_PING_URL }}"
+
+  ping-failure:
+    needs: [deploy-chat-production, deploy-chat-lambda]
+    if: ${{ failure() }}
+    runs-on: ubuntu-latest
+    steps:
+      - run: curl -m 10 --retry 5 "${{ secrets.CHAT_DEPLOY_PRODUCTION_PING_URL }}/fail"

.github/workflows/deploy-chat-staging.yml

@@ -0,0 +1,79 @@
+name: Deploy Chat Staging
+
+on:
+  push:
+    branches:
+      - master
+    paths:
+      - 'integrations/chat/**'
+  workflow_dispatch:
+    inputs:
+      branchOrCommit:
+        description: 'Branch/Commit/Tag to deploy'
+        required: false
+        type: string
+        default: 'master'
+      skipDeploy:
+        description: 'Skip deployment to ECS'
+        required: false
+        type: boolean
+        default: false
+      builder:
+        description: 'Image Builder'
+        required: false
+        type: choice
+        options:
+          - docker
+          - depot
+        default: 'depot'
+
+permissions:
+  id-token: write
+  contents: write
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: false
+
+jobs:
+  deploy-chat-staging:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: botpress/gh-actions/full-service-deploy@v3.3
+        with:
+          service: chat
+          repository: chat-integration
+          dockerfile: integrations/chat/Dockerfile
+          context: .
+          builder: ${{ inputs.builder || 'depot' }}
+          depot-project: ${{ secrets.DEPOT_PROJECT_ID }}
+          role-ecs-update: botpress_infra_update
+          skip-ecs-update: ${{ inputs.skipDeploy }}
+          ref: ${{ inputs.branchOrCommit || github.sha }}
+          environment: staging
+
+  deploy-chat-lambda:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          ref: ${{ inputs.branchOrCommit || github.sha }}
+      - name: Setup
+        uses: ./.github/actions/setup
+      - name: Deploy to Lambda
+        run: |
+          pnpm bp login -y --api-url "https://api.botpress.dev" --workspaceId "${{ secrets.STAGING_CLOUD_OPS_WORKSPACE_ID }}" --token "${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}"
+          pnpm -F "{integrations/chat}" -c exec -- bp deploy -v -y --noBuild --visibility public --allowDeprecated
+
+  ping-success:
+    needs: [deploy-chat-staging, deploy-chat-lambda]
+    runs-on: ubuntu-latest
+    steps:
+      - run: curl -m 10 --retry 5 "${{ secrets.CHAT_DEPLOY_STAGING_PING_URL }}"
+
+  ping-failure:
+    needs: [deploy-chat-staging, deploy-chat-lambda]
+    if: ${{ failure() }}
+    runs-on: ubuntu-latest
+    steps:
+      - run: curl -m 10 --retry 5 "${{ secrets.CHAT_DEPLOY_STAGING_PING_URL }}/fail"

.github/workflows/deploy-integrations-production.yml

@@ -0,0 +1,55 @@
+name: Deploy Integrations Production
+
+on:
+  workflow_dispatch:
+    inputs:
+      force:
+        description: 'Force re-deploying integrations'
+        type: boolean
+        required: false
+        default: false
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  deploy-production:
+    runs-on: depot-ubuntu-22.04-8
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+      - name: Deploy Interfaces
+        uses: ./.github/actions/deploy-interfaces
+        with:
+          environment: 'production'
+          force: ${{ github.event.inputs.force == 'true' }}
+          token_cloud_ops_account: ${{ secrets.PRODUCTION_TOKEN_CLOUD_OPS_ACCOUNT }}
+          cloud_ops_workspace_id: ${{ secrets.PRODUCTION_CLOUD_OPS_WORKSPACE_ID }}
+      - name: Deploy Integrations
+        uses: ./.github/actions/deploy-integrations
+        with:
+          environment: 'production'
+          extra_filter: "-F '!docusign' -F '!chat' -F '!grafana'"
+          force: ${{ github.event.inputs.force == 'true' }}
+          token_cloud_ops_account: ${{ secrets.PRODUCTION_TOKEN_CLOUD_OPS_ACCOUNT }}
+          cloud_ops_workspace_id: ${{ secrets.PRODUCTION_CLOUD_OPS_WORKSPACE_ID }}
+          shopify_admin_automation_token: ${{ secrets.PRODUCTION_SHOPIFY_ADMIN_AUTOMATION_TOKEN }}
+          shopify_storefront_automation_token: ${{ secrets.PRODUCTION_SHOPIFY_STOREFRONT_AUTOMATION_TOKEN }}
+      - name: Deploy Plugins
+        uses: ./.github/actions/deploy-plugins
+        with:
+          extra_filter: "-F '!analytics' -F '!logger' -F '!personality' -F '!synchronizer' -F '!knowledge'"
+          environment: 'production'
+          force: ${{ github.event.inputs.force == 'true' }}
+          token_cloud_ops_account: ${{ secrets.PRODUCTION_TOKEN_CLOUD_OPS_ACCOUNT }}
+          cloud_ops_workspace_id: ${{ secrets.PRODUCTION_CLOUD_OPS_WORKSPACE_ID }}
+
+      - name: Update Linear Status
+        uses: ./.github/actions/update-linear-status
+        continue-on-error: true
+        with:
+          linearApiKey: ${{secrets.LINEAR_API_KEY}}
+          teamName: 'SHELL (Integration)'
+          targetLabel: 'area/integrations'

.github/workflows/deploy-integrations-staging.yml

@@ -0,0 +1,56 @@
+name: Deploy Integrations Staging
+
+on:
+  push:
+    branches:
+      - master
+
+  pull_request:
+    paths: 'integrations/**'
+
+  workflow_dispatch:
+    inputs:
+      force:
+        description: 'Force re-deploying integrations'
+        type: boolean
+        required: false
+        default: false
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  deploy-staging:
+    runs-on: depot-ubuntu-22.04-8
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+      - name: Deploy Interfaces
+        uses: ./.github/actions/deploy-interfaces
+        if: ${{ github.event_name != 'pull_request' }}
+        with:
+          environment: 'staging'
+          force: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.force == 'true' }}
+          token_cloud_ops_account: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+          cloud_ops_workspace_id: ${{ secrets.STAGING_CLOUD_OPS_WORKSPACE_ID }}
+      - name: Deploy Integrations
+        uses: ./.github/actions/deploy-integrations
+        with:
+          environment: 'staging'
+          extra_filter: "-F '!chat'"
+          force: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.force == 'true' }}
+          dry_run: ${{ github.event_name == 'pull_request' }}
+          token_cloud_ops_account: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+          cloud_ops_workspace_id: ${{ secrets.STAGING_CLOUD_OPS_WORKSPACE_ID }}
+          shopify_admin_automation_token: ${{ secrets.STAGING_SHOPIFY_ADMIN_AUTOMATION_TOKEN }}
+          shopify_storefront_automation_token: ${{ secrets.STAGING_SHOPIFY_STOREFRONT_AUTOMATION_TOKEN }}
+      - name: Deploy Plugins
+        uses: ./.github/actions/deploy-plugins
+        if: ${{ github.event_name != 'pull_request' }}
+        with:
+          environment: 'staging'
+          force: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.force == 'true' }}
+          token_cloud_ops_account: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+          cloud_ops_workspace_id: ${{ secrets.STAGING_CLOUD_OPS_WORKSPACE_ID }}

.github/workflows/docker-chat.yml

@@ -0,0 +1,89 @@
+name: Check Chat Integration Docker
+
+on:
+  pull_request:
+    branches:
+      - master
+    paths:
+      - 'integrations/chat/**'
+      - 'packages/sdk/**'
+
+permissions:
+  id-token: write
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: false
+
+jobs:
+  build-and-test:
+    runs-on: depot-ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Depot CLI
+        uses: depot/setup-action@v1
+
+      - name: Build Docker image
+        uses: depot/build-push-action@v1
+        with:
+          project: ${{ secrets.DEPOT_PROJECT_ID }}
+          build-args: |
+            MINIFY=true
+          file: ./integrations/chat/Dockerfile
+          context: .
+          push: false
+          load: true
+          tags: chat-integration:test
+
+      - name: Start Docker container
+        run: |
+          docker run -d \
+            --name chat-test \
+            -p 8081:8081 \
+            -e SECRET_SIGNAL_URL=https://chat.botpress.dev \
+            chat-integration:test
+
+      - name: Wait for container to be ready
+        run: |
+          echo "Waiting for container to start..."
+          for i in {1..30}; do
+            if docker ps --filter "name=chat-test" --filter "status=running" | grep -q chat-test; then
+              echo "Container is running"
+              sleep 5
+              exit 0
+            fi
+            if docker ps -a --filter "name=chat-test" --filter "status=exited" | grep -q chat-test; then
+              echo "Container exited prematurely!"
+              docker logs chat-test
+              exit 1
+            fi
+            echo "Waiting for container... ($i/30)"
+            sleep 2
+          done
+          echo "Container did not start within expected time"
+          docker ps -a
+          exit 1
+
+      - name: Check health endpoint
+        run: |
+          echo "Checking /health endpoint..."
+          for i in {1..15}; do
+            if curl -f http://localhost:8081/health; then
+              echo "Health check passed!"
+              exit 0
+            fi
+            echo "Attempt $i/15 failed, retrying..."
+            sleep 2
+          done
+          echo "Health check failed after 15 attempts"
+          exit 1
+
+      - name: Show container logs on failure
+        if: failure()
+        run: docker logs chat-test
+
+      - name: Cleanup container
+        if: always()
+        run: docker rm -f chat-test || true

.github/workflows/prod-master-version-verification.yml

@@ -0,0 +1,78 @@
+name: Production version matches master
+
+on:
+  schedule:
+    - cron: '0 8 * * 1-5'
+  workflow_dispatch: # optional manual trigger
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+      - name: Login to Botpress
+        env:
+          TOKEN: ${{ secrets.PRODUCTION_TOKEN_CLOUD_OPS_ACCOUNT }}
+          WORKSPACE_ID: ${{ secrets.PRODUCTION_CLOUD_OPS_WORKSPACE_ID }}
+        run: pnpm bp login -y --token "$TOKEN" --workspace-id "$WORKSPACE_ID"
+      - name: Check integration versions
+        env:
+          SERVER_URL: ${{ github.server_url }}
+          REPO: ${{ github.repository }}
+          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WORKFLOW_SEAGULL_WEBHOOK_URL }}
+        run: |
+          SKIP_INTEGRATIONS=("chat" "docusign" "zendesk-messaging-hitl")
+
+          integrations=$(find integrations -mindepth 1 -maxdepth 1 -type d -print0 | xargs -0 -n1 basename | sort -u)
+          should_fail=0
+          outdated_integrations=""
+          skipped_integrations=""
+
+          for integration in $integrations; do
+            # Check if integration should be skipped
+            skip=0
+            for skip_integration in "${SKIP_INTEGRATIONS[@]}"; do
+              if [ "$integration" = "$skip_integration" ]; then
+                echo "Skipping $integration"
+                skip=1
+                skipped_integrations="$skipped_integrations> $integration\n"
+                break
+              fi
+            done
+
+            if [ $skip -eq 1 ]; then
+              continue
+            fi
+
+            echo "Checking $integration"
+            exists=$(.github/scripts/integration-exists.sh "$integration")
+
+            if [ "$exists" -eq 0 ]; then
+              echo "Integration $integration is not up to date. Please deploy the latest version of your integration."
+              should_fail=1
+              outdated_integrations="$outdated_integrations> $integration\n"
+            fi
+          done
+
+          if [ $should_fail -eq 1 ]; then
+            message="\n\nThe following integrations are out of date:\n$outdated_integrations"
+            message="$message\nThe following integrations were skipped:\n$skipped_integrations"
+            message="$message\nPlease run the deployment for the out-of-date integrations in ${SERVER_URL}/${REPO}"
+
+            echo -e "\n\nSending curl request to Slack webhook"
+            echo "Response:"
+            curl -X POST "$SLACK_WEBHOOK_URL" \
+            -H "Content-Type: application/json" \
+            -d '{
+              "key": "prod-master-version-verification",
+              "text": "'"$message"'"
+            }'
+            echo -e "\nCurl request sent"
+
+            echo -e "$message"
+
+            exit 1
+          fi

.github/workflows/publish-packages.yml

@@ -0,0 +1,65 @@
+name: Publish Packages
+
+on:
+  workflow_dispatch: {}
+  push:
+    branches:
+      - master
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  publish-packages:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    env:
+      NODE_OPTIONS: '--max_old_space_size=8192'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+        with:
+          extra_filters: '-F @botpress/* -F llmz -F @bpinternal/zui'
+
+      - name: update npm
+        shell: bash
+        run: npm install -g npm@^11.5.1 # Required for OIDC login
+
+      - name: Publish Zui
+        uses: botpress/gh-actions/publish-if-not-exists@master
+        with:
+          path: './packages/zui'
+      - name: Publish Client
+        uses: botpress/gh-actions/publish-if-not-exists@master
+        with:
+          path: './packages/client'
+      - name: Publish SDK
+        uses: botpress/gh-actions/publish-if-not-exists@master
+        with:
+          path: './packages/sdk'
+      - name: Publish CLI
+        uses: botpress/gh-actions/publish-if-not-exists@master
+        with:
+          path: './packages/cli'
+      - name: Publish Chat Client
+        uses: botpress/gh-actions/publish-if-not-exists@master
+        with:
+          path: './packages/chat-client'
+      - name: Publish Cognitive Client
+        uses: botpress/gh-actions/publish-if-not-exists@master
+        with:
+          path: './packages/cognitive'
+      - name: Publish Vai
+        uses: botpress/gh-actions/publish-if-not-exists@master
+        with:
+          path: './packages/vai'
+      - name: Publish Zai
+        uses: botpress/gh-actions/publish-if-not-exists@master
+        with:
+          path: './packages/zai'
+      - name: Publish LLMz
+        uses: botpress/gh-actions/publish-if-not-exists@master
+        with:
+          path: './packages/llmz'

.github/workflows/purge-cache.yml

@@ -0,0 +1,29 @@
+name: Purge Cache
+on:
+  workflow_dispatch: {}
+jobs:
+  purge-cache:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Delete Cache Entries
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REPO: ${{ github.repository }}
+          BRANCH: ${{ github.ref_name }}
+        run: |
+          gh extension install actions/gh-actions-cache
+
+          echo "Fetching list of cache keys for branch '$BRANCH'"
+          cacheKeysForBranch=$(gh actions-cache list --limit 100 -R "$REPO" -B "$BRANCH" | cut -f 1 )
+
+          ## Setting this to not fail the workflow while deleting cache keys. 
+          set +e
+          echo "Deleting cache entries..."
+
+          for cacheKey in $cacheKeysForBranch
+          do
+              echo "Deleting entry: $cacheKey"
+              gh actions-cache delete "$cacheKey" -R "$REPO" -B "$BRANCH" --confirm
+          done
+
+          echo "Done"

.github/workflows/refresh-instagram-access-tokens-production.yml

@@ -0,0 +1,43 @@
+name: Refresh Instagram Access Tokens Production
+
+on:
+  schedule:
+    # Run at 10:00 AM EST (15:00 UTC) on the first Tuesday of every month
+    - cron: '0 15 1-7 * 2'
+  workflow_dispatch:
+
+jobs:
+  refresh-tokens:
+    runs-on: depot-ubuntu-22.04-8
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Setup
+        uses: ./.github/actions/setup
+        with:
+          extra_filters: '-F @botpresshub/instagram'
+      - name: Refresh Instagram Access Tokens
+        uses: ./.github/actions/refresh-instagram-tokens
+        with:
+          token_cloud_ops_account: ${{ secrets.PRODUCTION_TOKEN_CLOUD_OPS_ACCOUNT }}
+          cloud_ops_workspace_id: ${{ secrets.PRODUCTION_CLOUD_OPS_WORKSPACE_ID }}
+          api_url: https://api.botpress.cloud
+          current_token: ${{ secrets.PRODUCTION_INSTAGRAM_ACCESS_TOKEN }}
+          secret_name: PRODUCTION_INSTAGRAM_ACCESS_TOKEN
+          sync_secret_app_id: ${{ vars.SYNC_SECRET_APP_ID }}
+          sync_secret_app_private_key: ${{ secrets.SYNC_SECRET_APP_PRIVATE_KEY }}
+  ping-success:
+    runs-on: depot-ubuntu-22.04-8
+    needs: [refresh-tokens]
+    steps:
+      - env:
+          PING_URL: ${{ secrets.INSTAGRAM_REFRESH_TOKEN_PING_URL }}
+        run: curl -m 10 --retry 5 "$PING_URL"
+  ping-failure:
+    runs-on: depot-ubuntu-22.04-8
+    if: ${{ failure() }}
+    needs: [refresh-tokens]
+    steps:
+      - env:
+          PING_URL: ${{ secrets.INSTAGRAM_REFRESH_TOKEN_PING_URL }}
+        run: curl -m 10 --retry 5 "$PING_URL/fail"

.github/workflows/refresh-instagram-access-tokens-staging.yml

@@ -0,0 +1,43 @@
+name: Refresh Instagram Access Tokens Staging
+
+on:
+  schedule:
+    # Run at 10:00 AM EST (15:00 UTC) on the first Tuesday of every month
+    - cron: '0 15 1-7 * 2'
+  workflow_dispatch:
+
+jobs:
+  refresh-tokens:
+    runs-on: depot-ubuntu-22.04-8
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Setup
+        uses: ./.github/actions/setup
+        with:
+          extra_filters: '-F @botpresshub/instagram'
+      - name: Refresh Instagram Access Tokens
+        uses: ./.github/actions/refresh-instagram-tokens
+        with:
+          token_cloud_ops_account: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+          cloud_ops_workspace_id: ${{ secrets.STAGING_CLOUD_OPS_WORKSPACE_ID }}
+          api_url: https://api.botpress.dev
+          current_token: ${{ secrets.STAGING_INSTAGRAM_ACCESS_TOKEN }}
+          secret_name: STAGING_INSTAGRAM_ACCESS_TOKEN
+          sync_secret_app_id: ${{ vars.SYNC_SECRET_APP_ID }}
+          sync_secret_app_private_key: ${{ secrets.SYNC_SECRET_APP_PRIVATE_KEY }}
+  ping-success:
+    runs-on: depot-ubuntu-22.04-8
+    needs: [refresh-tokens]
+    steps:
+      - env:
+          PING_URL: ${{ secrets.STAGING_INSTAGRAM_REFRESH_TOKEN_PING_URL }}
+        run: curl -m 10 --retry 5 "$PING_URL"
+  ping-failure:
+    runs-on: depot-ubuntu-22.04-8
+    if: ${{ failure() }}
+    needs: [refresh-tokens]
+    steps:
+      - env:
+          PING_URL: ${{ secrets.STAGING_INSTAGRAM_REFRESH_TOKEN_PING_URL }}
+        run: curl -m 10 --retry 5 "$PING_URL/fail"

.github/workflows/run-chat-tests.yml

@@ -0,0 +1,32 @@
+name: Run Chat Tests
+
+on: pull_request
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  run-chat-tests:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    env:
+      NODE_OPTIONS: '--max_old_space_size=8192'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+        with:
+          extra_filters: '-F @botpresshub/chat -F @bp-bots/echo -F @botpress/chat'
+      - name: Install tilt
+        run: curl -k -fsSL https://raw.githubusercontent.com/tilt-dev/tilt/master/scripts/install.sh | bash
+      - name: Run Tilt
+        env:
+          BP_TOKEN: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          tilt ci -f ./echo.Tiltfile -- \
+            --skip-install \
+            --skip-build \
+            --bp-domain 'botpress.dev' \
+            --bp-workspace-id '95de33eb-1551-4af9-9088-e5dcb02efd09' \
+            --bp-token "$BP_TOKEN"

.github/workflows/run-checks.yml

@@ -0,0 +1,26 @@
+name: Run Checks
+
+on: pull_request
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  run-checks:
+    runs-on: depot-ubuntu-22.04-8
+    timeout-minutes: 15
+    env:
+      NODE_OPTIONS: '--max_old_space_size=8192'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+      - run: pnpm run check:dep
+      - run: pnpm run check:sherif
+      - run: pnpm run check:oxlint
+      - run: pnpm run check:format
+      - run: pnpm run check:eslint
+      - run: pnpm run check:bplint
+      - run: pnpm run check:type
+      - run: pnpm run test

.github/workflows/run-cli-tests-windows.yml

@@ -0,0 +1,29 @@
+name: Run CLI Tests Windows
+
+on:
+  pull_request: {}
+  workflow_dispatch: {}
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  run-cli-tests-windows:
+    runs-on: windows-latest
+    timeout-minutes: 15
+    env:
+      NODE_OPTIONS: '--max_old_space_size=8192'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+        with:
+          extra_filters: '-F @botpress/cli'
+      - env:
+          WORKSPACE_ID: ${{ secrets.STAGING_E2E_TESTS_WORKSPACE_ID }}
+          TOKEN: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          # shellcheck disable=all
+          pnpm run -F cli test:e2e -v --api-url https://api.botpress.dev --workspace-id $env:WORKSPACE_ID --workspace-handle clitests --token $env:TOKEN --sdk-path "$(pwd)/packages/sdk" --client-path "$(pwd)/packages/client"
+        shell: pwsh

.github/workflows/run-cli-tests.yml

@@ -0,0 +1,33 @@
+name: Run CLI Tests
+
+on:
+  pull_request: {}
+  workflow_dispatch: {}
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  run-cli-tests:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    env:
+      NODE_OPTIONS: '--max_old_space_size=8192'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+        with:
+          extra_filters: '-F @botpress/cli'
+      - env:
+          WORKSPACE_ID: ${{ secrets.STAGING_E2E_TESTS_WORKSPACE_ID }}
+          TOKEN: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          pnpm run -F cli test:e2e -v \
+            --api-url https://api.botpress.dev \
+            --workspace-id "$WORKSPACE_ID" \
+            --workspace-handle clitests \
+            --token "$TOKEN" \
+            --sdk-path "$(pwd)/packages/sdk" \
+            --client-path "$(pwd)/packages/client"

.github/workflows/run-client-tests.yml

@@ -0,0 +1,23 @@
+name: Run Client Tests
+
+on: pull_request
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  run-client-tests:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    env:
+      NODE_OPTIONS: '--max_old_space_size=8192'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+        with:
+          extra_filters: '-F @botpress/client'
+      - run: |
+          # pnpm -F client exec puppeteer browsers install chrome
+          pnpm -F client run test:e2e

.github/workflows/run-cognitive-tests.yml

@@ -0,0 +1,49 @@
+name: Run Cognitive Tests
+
+on:
+  pull_request:
+    paths:
+      - 'packages/cognitive/**'
+      - '.github/workflows/run-cognitive-tests.yml'
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  run-cognitive-tests:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    env:
+      NODE_OPTIONS: '--max_old_space_size=8192'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+        with:
+          extra_filters: '-F @botpress/cognitive'
+      - name: Login
+        env:
+          BP_API_URL: 'https://api.botpress.dev'
+          BP_WORKSPACE_ID: ${{ secrets.STAGING_E2E_TESTS_WORKSPACE_ID }}
+          BP_TOKEN: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          pnpm bp login
+      - name: Run Cognitive Tests
+        id: 'run-tests'
+        env:
+          CLOUD_PAT: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          bot_id=$(pnpm bp bots new --json | jq -r ".id")
+          echo "bot_id=$bot_id" >> "$GITHUB_OUTPUT"
+
+          export CLOUD_API_ENDPOINT='https://api.botpress.dev'
+          export CLOUD_BOT_ID="$bot_id"
+          pnpm -F cognitive run test:e2e
+
+      - name: Cleanup
+        if: ${{ always() }}
+        env:
+          BOT_ID: ${{ steps.run-tests.outputs.bot_id }}
+        run: |
+          pnpm bp bots rm "$BOT_ID"

.github/workflows/run-llmz-tests.yml

@@ -0,0 +1,49 @@
+name: Run LLMz Tests
+
+on:
+  pull_request:
+    paths:
+      - 'packages/llmz/**'
+      - '.github/workflows/run-llmz-tests.yml'
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  run-llmz-tests:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    env:
+      NODE_OPTIONS: '--max_old_space_size=8192'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+        with:
+          extra_filters: '-F llmz'
+      - name: Login
+        env:
+          BP_API_URL: 'https://api.botpress.dev'
+          BP_WORKSPACE_ID: ${{ secrets.STAGING_E2E_TESTS_WORKSPACE_ID }}
+          BP_TOKEN: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          pnpm bp login
+      - name: Run LLMz Tests
+        id: 'run-tests'
+        env:
+          CLOUD_PAT: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          bot_id=$(pnpm bp bots new --json | jq -r ".id")
+          echo "bot_id=$bot_id" >> "$GITHUB_OUTPUT"
+
+          export CLOUD_API_ENDPOINT='https://api.botpress.dev'
+          export CLOUD_BOT_ID="$bot_id"
+          pnpm -F llmz run test:e2e
+
+      - name: Cleanup
+        if: ${{ always() }}
+        env:
+          BOT_ID: ${{ steps.run-tests.outputs.bot_id }}
+        run: |
+          pnpm bp bots rm "$BOT_ID"

.github/workflows/run-vai-tests.yml

@@ -0,0 +1,49 @@
+name: Run Vai Tests
+
+on:
+  pull_request:
+    paths:
+      - 'packages/vai/**'
+      - '.github/workflows/run-vai-tests.yml'
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  run-vai-tests:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    env:
+      NODE_OPTIONS: '--max_old_space_size=8192'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+        with:
+          extra_filters: '-F @botpress/vai'
+      - name: Login
+        env:
+          BP_API_URL: 'https://api.botpress.dev'
+          BP_WORKSPACE_ID: ${{ secrets.STAGING_E2E_TESTS_WORKSPACE_ID }}
+          BP_TOKEN: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          pnpm bp login
+      - name: Run Vai Tests
+        id: 'run-tests'
+        env:
+          CLOUD_PAT: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          bot_id=$(pnpm bp bots new --json | jq -r ".id")
+          echo "bot_id=$bot_id" >> "$GITHUB_OUTPUT"
+
+          export CLOUD_API_ENDPOINT='https://api.botpress.dev'
+          export CLOUD_BOT_ID="$bot_id"
+          pnpm -F vai run test:e2e
+
+      - name: Cleanup
+        if: ${{ always() }}
+        env:
+          BOT_ID: ${{ steps.run-tests.outputs.bot_id }}
+        run: |
+          pnpm bp bots rm "$BOT_ID"

.github/workflows/run-zai-tests.yml

@@ -0,0 +1,49 @@
+name: Run Zai Tests
+
+on:
+  pull_request:
+    paths:
+      - 'packages/zai/**'
+      - '.github/workflows/run-zai-tests.yml'
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  run-zai-tests:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    env:
+      NODE_OPTIONS: '--max_old_space_size=8192'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup
+        uses: ./.github/actions/setup
+        with:
+          extra_filters: '-F @botpress/zai'
+      - name: Login
+        env:
+          BP_API_URL: 'https://api.botpress.dev'
+          BP_WORKSPACE_ID: ${{ secrets.STAGING_E2E_TESTS_WORKSPACE_ID }}
+          BP_TOKEN: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          pnpm bp login
+      - name: Run Zai Tests
+        id: 'run-tests'
+        env:
+          CLOUD_PAT: ${{ secrets.STAGING_TOKEN_CLOUD_OPS_ACCOUNT }}
+        run: |
+          bot_id=$(pnpm bp bots new --json | jq -r ".id")
+          echo "bot_id=$bot_id" >> "$GITHUB_OUTPUT"
+
+          export CLOUD_API_ENDPOINT='https://api.botpress.dev'
+          export CLOUD_BOT_ID="$bot_id"
+          pnpm -F zai run test:e2e
+
+      - name: Cleanup
+        if: ${{ always() }}
+        env:
+          BOT_ID: ${{ steps.run-tests.outputs.bot_id }}
+        run: |
+          pnpm bp bots rm "$BOT_ID"