copilotkit 4.25.1 → 4.26.0

package/README.md

@@ -1044,14 +1044,19 @@ line on stdout so an already-issued token is not lost, and `project select` repo
 `api_key_provisioned: false` and exits 75. Untrack the file, then re-run. Outside a
 git work tree there is nothing to protect and both write as before.
 
-For a Next.js app, which reads `.env.local` before `.env`, you can keep a tracked
-`.env` and put the key in `.env.local` instead. Pass `--env-name .env.local` to
-`project select`, or to `onboard credentials`, whose `env-file-exposed` question
-offers this choice as `question.alternative`. Only `.env.local` must then be
-ignored: the command adds `/.env.local` to `.gitignore` when it is not, and it
-leaves `.env` as it is. The onboarding run keeps the choice, so later
-`onboard credentials` and `onboard model-key` calls use `.env.local` without the
-flag.
+For a Next.js app that hosts the CopilotKit runtime in its own route, or will,
+because the repository has no CopilotKit runtime yet, you can keep a tracked
+`.env` and put the key in `.env.local` instead: Next.js reads it before `.env`. Pass `--env-name .env.local` to `project select`, or to
+`onboard credentials`, whose `env-file-exposed` question offers this choice as
+`question.alternative`. Where the runtime is a separate server the flag is
+refused, because that server does not read `.env.local`. A runtime import
+anywhere inside the Next.js app folder counts as the app's own. The search for a
+separate runtime reads source files up to 12 folders below the repository root
+and skips `node_modules`, build output and dot folders. The command adds `.env.*` and
+`!.env.example` to `.gitignore` when they are missing, and leaves `.env` as it
+is. The onboarding run keeps the choice for that directory only, so later
+`onboard credentials` and `onboard model-key` calls from there use `.env.local`
+without the flag, and calls from any other directory use `.env`.
 
 ## Onboarding backups and restore
 
@@ -1944,8 +1949,8 @@ JSON and non-interactive setup require a prior `copilotkit login`.
 Local setup obtains the license after sign-in. The license belongs to the selected
 organization; Ops records the signed-in person who requests it.
 The [local evaluation EULA flow](../../docs/licensing/local-evaluation-eula-cli.md)
-adds acceptance before new setup and renewal licenses. Enforcement defaults off in every environment
-until the CLI ships; development can opt in with a labeled template. Interactive commands show a
+adds acceptance before new setup and renewal licenses. Hosted dev, staging, and production
+require acceptance; use CLI 4.25.1 or newer. Interactive commands show a
 short developer-license summary, version, organization, and user, then open the full EULA in the
 browser. Review it, type `accept` exactly, and press Enter. The link stays visible for manual review
 if the browser cannot open. Opening the page does not accept; there is no scroll requirement.

package/cli-build-info.json

@@ -2,20 +2,20 @@
   "schemaVersion": 1,
   "package": {
     "name": "copilotkit",
-    "version": "4.25.1"
+    "version": "4.26.0"
   },
   "intelligence": {
-    "commit": "a10c17350078f78341c11e534f041224926553b1"
+    "commit": "65a719934521967a682f8881d2dd5725b8b5cb4f"
   },
   "copilotKit": {
     "submittedInput": "6c428329c9b81b3aa7e92b602ab1c0a9431d36a3",
     "commit": "6c428329c9b81b3aa7e92b602ab1c0a9431d36a3"
   },
   "channel": "production",
-  "triggeringActor": "dustywusty",
+  "triggeringActor": "BenTaylorDev",
   "workflow": {
-    "runId": "37696292513",
-    "runUrl": "https://github.com/CopilotKit/Intelligence/actions/runs/37696292513"
+    "runId": "37726987302",
+    "runUrl": "https://github.com/CopilotKit/Intelligence/actions/runs/37726987302"
   },
   "validationResult": "passed",
   "ag2": {
@@ -24,5 +24,5 @@
     "revision": "main",
     "pinned": false
   },
-  "builtAt": "2026-10-07T22:29:19Z"
+  "builtAt": "2026-10-08T04:22:13Z"
 }