OUT-3970: monkey patch script to fix invalid token issue in pre-production environment

[SandipBajracharya]

Summary

• Assembly platform generates token with new token payload which older SDK does not posses. This is resulting in Invalid keys in token payload.
• As a temporary fix in staging environment, prepare a monkey patch that fixes this issue. This patch is not for production.
• Upgrading to latest sdk in in pipeline.

[linear-code]

OUT-3970

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
quickbooks-sync	Ready	Preview, Comment	Jul 10, 2026 9:30am
quickbooks-sync (dev)	Ready	Preview, Comment	Jul 10, 2026 9:30am

[greptile-apps]

Greptile Summary

This PR adds a temporary Copilot SDK patch for pre-production token handling. The main changes are:

• Adds a copied Copilot SDK init patch under lib-patches.
• Adds a package script to copy the patch into node_modules.
• Moves the build flow into scripts/build.sh.
• Runs the Copilot patch only outside production builds.
• Points Vercel at the new build script.

Confidence Score: 5/5

This looks safe to merge.

• No blocking issues found in the changed code.

Important Files Changed

Filename	Overview
vercel.json	Adds the Vercel build command that runs the new build script.
scripts/build.sh	Adds the non-production build wrapper that applies the Copilot SDK patch before building.
package.json	Adds the script that copies the Copilot SDK patch into the installed package.
lib-patches/copilot-node-sdk.js	Adds the temporary Copilot SDK init replacement for pre-production token parsing.
build.sh	Removes the old root build script.

_{Reviews (2): Last reviewed commit: "fix(OUT-3970): mark scripts/build.sh exe..." | Re-trigger Greptile}

[SandipBajracharya]

@greptileai Re-review the PR again