copilotkit 4.10.0 → 4.11.0

package/README.md

@@ -230,6 +230,17 @@ npx --yes copilotkit@latest onboard start \
 | `add-voice`              | Add documented voice transcription to the existing composer |
 | `add-realtime-sync`      | Prove managed thread changes sync between active clients    |
 
+Run `copilotkit channels setup` to copy the same small `onboard start --run <id>`
+prompt as the website CTA. There is no `--intent add-channels`. The copied
+prompt has no Channel sentence. When the project has no frontend, the root graph
+asks which frontend they want and offers Slack and Microsoft Teams there. If the
+copied prompt came from a Slack or Teams docs page, that page is the named
+frontend.
+Its first prompt records the coding agent with `onboard identify`, including when
+the entry command omitted `--coding-agent`. Channel setup stage events include
+the existing `onboarding_run_id` when the command runs inside an onboarding run;
+standalone commands omit it. These events use the CLI's existing telemetry consent gate.
+
 The intent describes the developer's requested outcome, not a claim about the
 current project state. Each path inspects the app first: it preserves a proven
 existing configuration, stops rather than inventing credentials or identities,
@@ -362,14 +373,13 @@ copilotkit channels setup
 copilotkit channels setup --no-clipboard
 ```
 
-It installs the `channels-setup` skill, then prints a one-line prompt to paste
+The command copies the small `onboard start --run <id>` prompt.
+It installs the `channels-setup` skill, then prints that prompt to paste
 into your coding agent and copies it to your clipboard. The prompt is always
 printed, so you can read it before handing it over. Pass `--no-clipboard` in a
 headless or remote shell.
 
-Everything the run needs is in the skill, so the prompt only names the skill and
-the goal. It does not name a provider: Slack or Microsoft Teams is the skill's
-own first question.
+The copied command does not name a provider. The graph asks Slack or Teams.
 
 Only the prompt goes to stdout. The line introducing it and the clipboard result
 go to stderr, so `copilotkit channels setup > prompt.txt` gives you the payload

package/cli-build-info.json

@@ -2,20 +2,20 @@
   "schemaVersion": 1,
   "package": {
     "name": "copilotkit",
-    "version": "4.10.0"
+    "version": "4.11.0"
   },
   "intelligence": {
-    "commit": "c8e38c8634104047e47545c1ed45a21c259a8658"
+    "commit": "362d341410722307c1067c71ac14710245300cff"
   },
   "copilotKit": {
-    "submittedInput": "ce490419d0",
-    "commit": "ce490419d046abe697438b070a99ad5d674365cc"
+    "submittedInput": "dc1238c0bd473e259c992b85026cb30fe6b3b726",
+    "commit": "dc1238c0bd473e259c992b85026cb30fe6b3b726"
   },
   "channel": "production",
-  "triggeringActor": "BenTaylorDev",
+  "triggeringActor": "tylerslaton",
   "workflow": {
-    "runId": "35011911410",
-    "runUrl": "https://github.com/CopilotKit/Intelligence/actions/runs/35011911410"
+    "runId": "35162202498",
+    "runUrl": "https://github.com/CopilotKit/Intelligence/actions/runs/35162202498"
   },
   "validationResult": "passed",
   "ag2": {
@@ -24,5 +24,5 @@
     "revision": "main",
     "pinned": false
   },
-  "builtAt": "2026-09-15T19:10:59Z"
+  "builtAt": "2026-09-16T23:26:51Z"
 }

package/index.js

@@ -96,14 +96,14 @@ function getTelemetryEndpointUrl() {
 }
 function getBuildInfo() {
   return {
-    version: true ? "4.10.0" : "dev",
-    buildNumber: true ? "35011911410" : "dev",
-    commitSha: true ? "c8e38c8634104047e47545c1ed45a21c259a8658" : "dev",
+    version: true ? "4.11.0" : "dev",
+    buildNumber: true ? "35162202498" : "dev",
+    commitSha: true ? "362d341410722307c1067c71ac14710245300cff" : "dev",
     copilotKitCommit: getTemplateRef()
   };
 }
 function getTemplateRef() {
-  return true ? "ce490419d046abe697438b070a99ad5d674365cc" : "main";
+  return true ? "dc1238c0bd473e259c992b85026cb30fe6b3b726" : "main";
 }
 function getC15tBackendUrl() {
   return true ? "https://calm-hazelnut-joy-copilotkit.inth.app" : "";
@@ -28668,18 +28668,22 @@ var init_repository_root = __esm({
 import * as fs7 from "node:fs";
 import * as os2 from "node:os";
 import * as path9 from "node:path";
-function prepareProjectConfig(selection, previous, generateBindingId) {
+function prepareProjectConfig(selection, previous, generateBindingId, statedRuntimeUrl) {
   const telemetryBindingId = previous?.projectId === selection.projectId && previous.clerkOrgId === selection.clerkOrgId && previous.telemetryBindingId !== void 0 ? previous.telemetryBindingId : generateBindingId();
   return projectConfigSchema.extend({ telemetryBindingId: external_exports.string().trim().min(1) }).parse({
     ...selection,
     telemetryBindingId,
-    // Carried through unconditionally, including across a change of project.
-    // Nothing in the CLI writes it, so its only possible author is a person,
-    // and it describes where this directory's app serves rather than which
+    // A stated URL wins. Otherwise the recorded one is carried through
+    // unconditionally, including across a change of project, because it
+    // describes where this directory's app serves rather than which
     // Intelligence project the app reports to (OSS-1090).
-    ...previous?.runtimeUrl === void 0 ? {} : { runtimeUrl: previous.runtimeUrl }
+    ...runtimeUrlFields(statedRuntimeUrl, previous?.runtimeUrl)
   });
 }
+function runtimeUrlFields(stated, recorded) {
+  const chosen = stated?.trim() === "" ? void 0 : stated ?? recorded;
+  return chosen === void 0 ? {} : { runtimeUrl: chosen };
+}
 function projectConfigPath(dir) {
   return path9.join(dir, ".copilotkit", "project.json");
 }
@@ -28776,15 +28780,19 @@ var init_project_config = __esm({
       telemetryBindingId: external_exports.string().trim().min(1).optional(),
       /**
        * Absolute URL of this project's CopilotKit runtime, when the project pins
-       * one by hand.
+       * one.
+       *
+       * Stated, never guessed. `copilotkit verify` works out the port from the
+       * app's own dev configuration, and this is where a project whose runtime is
+       * somewhere that cannot be worked out — a different mount path, a
+       * container, a port that only ever appears on a command line — says so once
+       * instead of passing `--runtime-url` on every invocation (OSS-1090).
        *
-       * Written by a person, not by the CLI. `copilotkit verify` works out the
-       * port from the app's own dev configuration, and this is where a project
-       * whose runtime is somewhere that cannot be worked out — a different mount
-       * path, a container, a port that only ever appears on a command line —
-       * states it once instead of passing `--runtime-url` on every invocation
-       * (OSS-1090). The schema is strict, so it has to be declared here for such
-       * a file to parse at all.
+       * A person writes it, and so does `project select --runtime-url`. An
+       * onboarding run settles a free port and then has nowhere to put it, so
+       * `verify` falls back to its assumed default and reports on whatever holds
+       * that port — in one run, an unrelated checkout (PE-58). The flag is still
+       * a statement rather than a guess: the caller has to name the URL.
        */
       runtimeUrl: external_exports.string().trim().min(1).optional()
     }).strict();
@@ -66837,7 +66845,7 @@ var require_websocket = __commonJS({
     var http4 = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes3, createHash: createHash8 } = __require("crypto");
+    var { randomBytes: randomBytes4, createHash: createHash8 } = __require("crypto");
     var { Duplex, Readable: Readable5 } = __require("stream");
     var { URL: URL7 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -67384,7 +67392,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes3(16).toString("base64");
+      const key = randomBytes4(16).toString("base64");
       const request = isSecure ? https2.request : http4.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -92313,7 +92321,8 @@ function recordChannelsStage(input) {
       // the builder writes every key explicitly from its input so customer
       // content cannot leak in by construction, and reading ambient process
       // state inside it would break that guarantee. Both values are booleans.
-      ...currentCliStateProperties(input.command ?? "channels")
+      ...currentCliStateProperties(input.command ?? "channels"),
+      ...currentOnboardingRunProperties()
     }
   });
 }
@@ -96144,6 +96153,13 @@ function validateProjectName(raw2, existing) {
       message: `Intelligence project name must be ${MAX_PROJECT_NAME_LENGTH} characters or fewer.`
     };
   }
+  if (name.length < MIN_PROJECT_NAME_LENGTH || GENERIC_PROJECT_NAMES.has(name.toLowerCase()) || THROWAWAY_PROJECT_NAME.test(name.toLowerCase())) {
+    return {
+      ok: false,
+      reason: "generic",
+      message: `"${name}" names a directory rather than a project. Give a name that says what this project does, so it can be told apart in the dashboard later.`
+    };
+  }
   const duplicate = existing.find(
     (project) => project.name.toLowerCase() === name.toLowerCase()
   );
@@ -96158,11 +96174,33 @@ function validateProjectName(raw2, existing) {
   }
   return { ok: true, name };
 }
-var MAX_PROJECT_NAME_LENGTH, NUMERIC_SUFFIX, SUGGESTION_ATTEMPTS;
+var MAX_PROJECT_NAME_LENGTH, MIN_PROJECT_NAME_LENGTH, GENERIC_PROJECT_NAMES, THROWAWAY_PROJECT_NAME, NUMERIC_SUFFIX, SUGGESTION_ATTEMPTS;
 var init_hosted_project_name = __esm({
   "apps/cli/src/services/hosted-project-name.ts"() {
     "use strict";
     MAX_PROJECT_NAME_LENGTH = 100;
+    MIN_PROJECT_NAME_LENGTH = 3;
+    GENERIC_PROJECT_NAMES = /* @__PURE__ */ new Set([
+      "api",
+      "app",
+      "apps",
+      "backend",
+      "client",
+      "frontend",
+      "lib",
+      "libs",
+      "package",
+      "packages",
+      "project",
+      "repo",
+      "server",
+      "service",
+      "site",
+      "src",
+      "web",
+      "website"
+    ]);
+    THROWAWAY_PROJECT_NAME = /^(?:bar|baz|demo|example|foo|hello|placeholder|qux|run|sample|scratch|temp|test|tmp|trial|try)(?:[-_]?(?:\d+|[a-z]))?$/u;
     NUMERIC_SUFFIX = /-\d+$/;
     SUGGESTION_ATTEMPTS = 1e3;
   }
@@ -96191,6 +96229,13 @@ function defer() {
   });
   return { promise: promise3, resolve: resolve9 };
 }
+function hostedProjectPickerWindowStart(selectedIndex, itemCount) {
+  const lastStart = Math.max(0, itemCount - MAX_HOSTED_PROJECT_PICKER_VISIBLE);
+  return Math.min(
+    Math.max(0, selectedIndex - MAX_HOSTED_PROJECT_PICKER_VISIBLE + 1),
+    lastStart
+  );
+}
 function ProjectExplainer({ dim = false }) {
   return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: dim, children: "An Intelligence project is where this app's threads, messages, and analytics are stored." });
 }
@@ -96385,12 +96430,21 @@ function HostedProjectSelect({
       })),
       { label: "Create a new project", value: "__create__" }
     ];
+    const windowStart = hostedProjectPickerWindowStart(
+      pickerIndex,
+      items.length
+    );
+    const visibleItems = items.slice(
+      windowStart,
+      windowStart + MAX_HOSTED_PROJECT_PICKER_VISIBLE
+    );
     return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { flexDirection: "column", children: [
       /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Connect this app to one of your existing projects, or create a new one." }),
       /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(ProjectExplainer, { dim: true }),
       /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
       /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Select a project (\u2191/\u2193 to move, Enter to choose, Esc to cancel):" }),
-      items.map((item, index2) => {
+      visibleItems.map((item, visibleIndex) => {
+        const index2 = windowStart + visibleIndex;
         const selected = index2 === pickerIndex;
         return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(
           Text,
@@ -96441,7 +96495,7 @@ function HostedProjectSelect({
   }
   return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: view.message });
 }
-var import_react37, import_jsx_runtime7;
+var import_react37, import_jsx_runtime7, MAX_HOSTED_PROJECT_PICKER_VISIBLE;
 var init_hosted_project_select = __esm({
   async "apps/cli/src/ui/hosted-project-select.tsx"() {
     "use strict";
@@ -96451,6 +96505,7 @@ var init_hosted_project_select = __esm({
     init_hosted_project_name();
     init_theme();
     import_jsx_runtime7 = __toESM(require_jsx_runtime(), 1);
+    MAX_HOSTED_PROJECT_PICKER_VISIBLE = 6;
   }
 });
 
@@ -96812,7 +96867,7 @@ var init_telemetry_identity_events = __esm({
 // apps/cli/src/commands/project-select-effects.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import * as path18 from "node:path";
-function persistSelection(dir, selection) {
+function persistSelection(dir, selection, statedRuntimeUrl) {
   try {
     const previous = readProjectConfig(dir) ?? null;
     const config3 = prepareProjectConfig(
@@ -96822,7 +96877,8 @@ function persistSelection(dir, selection) {
         clerkOrgId: selection.organizationId
       },
       previous,
-      randomUUID3
+      randomUUID3,
+      statedRuntimeUrl
     );
     writeProjectConfig(dir, config3);
     return {
@@ -97013,9 +97069,9 @@ function toRequest(options) {
   }
   return null;
 }
-async function completeSelection(apiClient, selection) {
+async function completeSelection(apiClient, selection, statedRuntimeUrl) {
   const recordDir = resolveProjectConfigWriteDir(process.cwd());
-  const persisted = persistSelection(recordDir, selection);
+  const persisted = persistSelection(recordDir, selection, statedRuntimeUrl);
   if (persisted.bindingId === null) {
     return withoutSelection(persisted.outcome);
   }
@@ -97066,7 +97122,7 @@ The recorded selection is kept, so finish it with \`${projectSelectRetryCommand(
     configPath
   };
 }
-async function driveFlagSelect(apiClient, request) {
+async function driveFlagSelect(apiClient, request, statedRuntimeUrl) {
   const { prompts, refusal } = createFlagPrompts(request);
   let result;
   try {
@@ -97096,7 +97152,7 @@ async function driveFlagSelect(apiClient, request) {
       ...recorded.suggestedName === void 0 ? {} : { suggestedName: recorded.suggestedName }
     });
   }
-  return await completeSelection(apiClient, result);
+  return await completeSelection(apiClient, result, statedRuntimeUrl);
 }
 async function drivePicker(apiClient, options) {
   let outcome = { kind: "canceled" };
@@ -97135,7 +97191,7 @@ async function drivePicker(apiClient, options) {
   if (selection === null) {
     return withoutSelection(outcome);
   }
-  return await completeSelection(apiClient, selection);
+  return await completeSelection(apiClient, selection, options.runtimeUrl);
 }
 async function driveProjectSelect(options, render2 = { renderToStderr: false }) {
   const auth2 = authStore.get();
@@ -97154,7 +97210,10 @@ async function driveProjectSelect(options, render2 = { renderToStderr: false })
     productOrganizationId: auth2.clerkOrgId
   });
   const request = toRequest(options);
-  return request === null ? await drivePicker(apiClient, render2) : await driveFlagSelect(apiClient, request);
+  return request === null ? await drivePicker(apiClient, {
+    ...render2,
+    ...options.runtimeUrl === void 0 ? {} : { runtimeUrl: options.runtimeUrl }
+  }) : await driveFlagSelect(apiClient, request, options.runtimeUrl);
 }
 async function runProjectSelect(options = {}) {
   const { outcome } = await driveProjectSelect(options);
@@ -97856,13 +97915,17 @@ var init_clipboard = __esm({
 });
 
 // apps/cli/src/services/agent-prompt.ts
+import { randomBytes as randomBytes2 } from "node:crypto";
 function buildSkillsOnboardPrompt() {
   return SKILLS_ONBOARD_AGENT_PROMPT;
 }
 function buildChannelsSetupPrompt() {
-  return CHANNELS_SETUP_PROMPT;
+  const runId = randomBytes2(9).toString("base64url");
+  return `Help me get started with CopilotKit. Run this command and follow the instructions:
+
+npx --yes copilotkit@latest onboard start --run=${runId}`;
 }
-var SKILLS_ONBOARD_AGENT_PROMPT, CHANNELS_SETUP_SKILL, CHANNELS_SETUP_PROMPT;
+var SKILLS_ONBOARD_AGENT_PROMPT, CHANNELS_SETUP_SKILL;
 var init_agent_prompt = __esm({
   "apps/cli/src/services/agent-prompt.ts"() {
     "use strict";
@@ -97876,7 +97939,6 @@ Use the copilotkit-setup skill to:
 
 Start by inspecting my repo, then walk me through the setup.`;
     CHANNELS_SETUP_SKILL = "channels-setup";
-    CHANNELS_SETUP_PROMPT = `Use the \`${CHANNELS_SETUP_SKILL}\` skill to set up a Channel for this project.`;
   }
 });
 
@@ -141620,7 +141682,7 @@ var require_websocket2 = __commonJS({
     var http4 = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes3, createHash: createHash8 } = __require("crypto");
+    var { randomBytes: randomBytes4, createHash: createHash8 } = __require("crypto");
     var { Duplex, Readable: Readable5 } = __require("stream");
     var { URL: URL7 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate2();
@@ -142175,7 +142237,7 @@ var require_websocket2 = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes3(16).toString("base64");
+      const key = randomBytes4(16).toString("base64");
       const request = isSecure ? https2.request : http4.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -386886,7 +386948,7 @@ __export(onboard_exports, {
   ONBOARD_SUBCOMMANDS: () => ONBOARD_SUBCOMMANDS,
   runOnboard: () => runOnboard
 });
-import { randomBytes as randomBytes2 } from "node:crypto";
+import { randomBytes as randomBytes3 } from "node:crypto";
 import { parseArgs as parseArgs2 } from "node:util";
 async function runOnboard(argv, dependencies) {
   const deps = dependencies ?? {
@@ -386896,7 +386958,7 @@ async function runOnboard(argv, dependencies) {
     stderr: process.stderr,
     store: configStore,
     cliVersion: getBuildInfo().version,
-    randomRunId: () => randomBytes2(9).toString("base64url"),
+    randomRunId: () => randomBytes3(9).toString("base64url"),
     loadPrompt: loadOnboardingPrompt,
     loadGraphTree: loadOnboardingGraphTree,
     loadStartPrompt: loadOnboardingStartPrompt,
@@ -387599,6 +387661,9 @@ ${detail}${NOTHING_PROVED}`;
     ""
   ].join("\n");
 }
+function leavesSurfaceUnproven(check4) {
+  return check4.outcome !== "performed" && check4.outcome !== DECLINED_SURFACE_CHECK;
+}
 function parseFrontendUrl(rest) {
   const flagIndex = rest.indexOf("--frontend-url");
   if (flagIndex === -1)
@@ -387925,6 +387990,18 @@ function blockedWithoutSurfaceProof(check4) {
     ""
   ].join("\n");
 }
+function declinedSurfaceNote(check4) {
+  const surface = check4.kind === "visual" ? "browser" : "device";
+  return [
+    "CopilotKit onboarding marked complete.",
+    "",
+    `  This run cloned a starter, so it drove no ${surface} of its own.`,
+    "  That code is what the starter smoke jobs drive on every change, and",
+    "  `copilotkit verify --round-trip` proved the agent round trip here.",
+    `  To see it yourself, open the app and drive it once by hand.`,
+    ""
+  ].join("\n");
+}
 function blockedAfterProof(blocker) {
   const report = BLOCKER_REPORTS[blocker];
   return [
@@ -387948,13 +388025,15 @@ function blockedAfterProof(blocker) {
   ].join("\n");
 }
 function completionReport(input) {
-  if (input.check.outcome !== "performed") {
+  if (leavesSurfaceUnproven(input.check)) {
     const surface = blockedWithoutSurfaceProof(input.check);
     if (input.blocker === void 0)
       return surface;
     return `${surface}${blockedAfterProof(input.blocker)}`;
   }
-  return input.blocker === void 0 ? "CopilotKit onboarding marked complete.\n" : blockedAfterProof(input.blocker);
+  if (input.blocker !== void 0)
+    return blockedAfterProof(input.blocker);
+  return input.check.outcome === DECLINED_SURFACE_CHECK ? declinedSurfaceNote(input.check) : "CopilotKit onboarding marked complete.\n";
 }
 function describeSubmission(subject, submission) {
   switch (submission.status) {
@@ -388271,7 +388350,7 @@ function recordBestEffort(dependencies, event) {
   } catch {
   }
 }
-var ONBOARD_SUBCOMMANDS, READ_RUN_NOT_BOUND, IDENTIFY_RUN_NOT_BOUND, STEP_RUN_NOT_BOUND, REBASELINE_USAGE, ACCEPT_USAGE, AUTHORIZE_USAGE, ACCEPT_CREDENTIAL_USAGE, PRIOR_CHANGE_USAGE, UNPLANNED_USAGE, EXCLUSIVE_MODE_USAGE, NOTHING_PROVED, NOTHING_AUTHORIZED, NOTHING_ACCEPTED, VISUAL_CHECK_OUTCOMES, DEVICE_CHECK_OUTCOMES, BLOCKER_CAUSES, BLOCKER_USAGE, SURFACE_CHECK_USAGE, FRONTEND_URL_USAGE, PROOF_STEPS, PROOF_OUTCOMES, BASELINE_PREDICATE_COUNT, PROOF_USAGE, IDENTIFY_USAGE, BLOCKER_REPORTS;
+var ONBOARD_SUBCOMMANDS, READ_RUN_NOT_BOUND, IDENTIFY_RUN_NOT_BOUND, STEP_RUN_NOT_BOUND, REBASELINE_USAGE, ACCEPT_USAGE, AUTHORIZE_USAGE, ACCEPT_CREDENTIAL_USAGE, PRIOR_CHANGE_USAGE, UNPLANNED_USAGE, EXCLUSIVE_MODE_USAGE, NOTHING_PROVED, NOTHING_AUTHORIZED, NOTHING_ACCEPTED, DECLINED_SURFACE_CHECK, VISUAL_CHECK_OUTCOMES, DEVICE_CHECK_OUTCOMES, BLOCKER_CAUSES, BLOCKER_USAGE, SURFACE_CHECK_USAGE, FRONTEND_URL_USAGE, PROOF_STEPS, PROOF_OUTCOMES, BASELINE_PREDICATE_COUNT, PROOF_USAGE, IDENTIFY_USAGE, BLOCKER_REPORTS;
 var init_onboard = __esm({
   async "apps/cli/src/commands/onboard.ts"() {
     "use strict";
@@ -388321,14 +388400,17 @@ var init_onboard = __esm({
     NOTHING_PROVED = "This is a missing baseline, not a preservation failure: no protected path has\nbeen proved changed, and none has been proved unchanged either.\n";
     NOTHING_AUTHORIZED = "Nothing was recorded. No path in this call was authorized, including any path\nnamed before the one above.\n";
     NOTHING_ACCEPTED = "Nothing was recorded. No path in this call was accepted, including any path\nnamed before the one above.\n";
+    DECLINED_SURFACE_CHECK = "skipped-cloned-starter";
     VISUAL_CHECK_OUTCOMES = [
       "performed",
       "skipped-no-browser-tool",
+      DECLINED_SURFACE_CHECK,
       "failed"
     ];
     DEVICE_CHECK_OUTCOMES = [
       "performed",
       "skipped-no-device",
+      DECLINED_SURFACE_CHECK,
       "failed"
     ];
     BLOCKER_CAUSES = [
@@ -388342,7 +388424,7 @@ surface this run proved and what blocked it afterwards are separate facts.
 Use \`other\` rather than leaving the flag off. A run with no way to say it was
 blocked reads the unsupported terminal instead, and reports a path that works
 as one this release does not carry.`;
-    SURFACE_CHECK_USAGE = "Usage: copilotkit onboard complete --visual-check <performed|skipped-no-browser-tool|failed>\n   or: copilotkit onboard complete --device-check <performed|skipped-no-device|failed>\nPass exactly one. A web journey is proven in a browser and a mobile one on a device;\nwhich flag you pass is how this run states which surface it proved.";
+    SURFACE_CHECK_USAGE = "Usage: copilotkit onboard complete --visual-check <performed|skipped-no-browser-tool|skipped-cloned-starter|failed>\n   or: copilotkit onboard complete --device-check <performed|skipped-no-device|skipped-cloned-starter|failed>\n`skipped-cloned-starter` is for a run that cloned a starter and was told to open no\nbrowser. It does not block. Every other skip says the surface is unproven and does.\nPass exactly one. A web journey is proven in a browser and a mobile one on a device;\nwhich flag you pass is how this run states which surface it proved.";
     FRONTEND_URL_USAGE = "Usage: copilotkit onboard complete <surface-check> --frontend-url <absolute url>\nPass the URL a browser actually opened, for example http://localhost:3000.\nOnly the kind of host is recorded -- loopback hostname, loopback IP literal,\nother IP literal, other name -- never the host itself.";
     PROOF_STEPS = ONBOARDING_PROOF_STEPS;
     PROOF_OUTCOMES = ONBOARDING_PROOF_OUTCOMES;
@@ -392020,6 +392102,7 @@ name the answer up front, so they run in a non-interactive shell.
 Options:
       --project <ref>    Select an existing project by slug or id, no prompt
       --create <name>    Create a project with this name and select it
+      --runtime-url <url>  Record where this project's runtime serves
       --json             Emit a machine-readable result on stdout
   -h, --help             Show help for project select
 
@@ -392028,6 +392111,11 @@ organization's real projects, so a typo fails with the available slugs rather
 than recording a selection that points at nothing. Run
 \`copilotkit project list --json\` first to see them.
 
+--runtime-url records "runtimeUrl" in the project record, so \`copilotkit verify\`
+probes the URL this project states instead of assuming port 3000. Pass it when
+the app serves somewhere that cannot be worked out from its dev configuration: a
+non-default port, a different mount path, or a container.
+
 --json reports selected_project_slug, project_file_written,
 api_key_provisioned, and environment_file_written. The payload never contains
 the API key.
@@ -392883,6 +392971,7 @@ ${formatStaleBuildNote()}
     options: {
       project: { type: "string" },
       create: { type: "string" },
+      "runtime-url": { type: "string" },
       json: { type: "boolean" }
     },
     strict: true,
@@ -392890,7 +392979,24 @@ ${formatStaleBuildNote()}
   });
   const project = parsed.values["project"];
   const create3 = parsed.values["create"];
+  const runtimeUrl = parsed.values["runtime-url"];
   const json4 = parsed.values["json"] === true;
+  if (runtimeUrl !== void 0 && !URL.canParse(runtimeUrl)) {
+    recordTelemetryEvent({
+      properties: {
+        command: "project",
+        subcommand: "select",
+        outcome: "failed",
+        error_code: "validation"
+      }
+    });
+    process.stderr.write(
+      `Error: --runtime-url must be an absolute URL (received "${runtimeUrl}").
+`
+    );
+    await exitWithFlush(1);
+    return;
+  }
   if (project !== void 0 && create3 !== void 0) {
     recordTelemetryEvent({
       properties: {
@@ -392927,7 +393033,8 @@ ${formatStaleBuildNote()}
   }
   const options = {
     ...project === void 0 ? {} : { project },
-    ...create3 === void 0 ? {} : { create: create3 }
+    ...create3 === void 0 ? {} : { create: create3 },
+    ...runtimeUrl === void 0 ? {} : { runtimeUrl }
   };
   await withTelemetry(
     { command: "project", subcommand: "select" },

package/onboarding/index.json

@@ -1,5 +1,5 @@
 {
-  "graphTree": "d0d29f5f2ed37dd76f08bb7655e28da124813c2f",
+  "graphTree": "31372aea9d38d802779516dc556c136faf611b32",
   "intentRoots": {
     "add-a2ui": "feature/a2ui/start",
     "add-chat-suggestions": "feature/chat-suggestions/start",
@@ -106,6 +106,30 @@
       "milestone": "feature",
       "name": "feature/a2ui/start"
     },
+    {
+      "edges": [
+        "feature/stop",
+        "feature/channels/proof"
+      ],
+      "milestone": "feature",
+      "name": "feature/channels/implement"
+    },
+    {
+      "edges": [
+        "feature/stop",
+        "feature/complete"
+      ],
+      "milestone": "feature",
+      "name": "feature/channels/proof"
+    },
+    {
+      "edges": [
+        "feature/stop",
+        "feature/channels/implement"
+      ],
+      "milestone": "feature",
+      "name": "feature/channels/start"
+    },
     {
       "edges": [
         "feature/stop",
@@ -437,6 +461,7 @@
         "frontend/angular",
         "frontend/vue",
         "frontend/react-native",
+        "feature/channels/start",
         "unsupported/no-validated-path"
       ],
       "milestone": "frontend",