copilotkit 4.28.0 → 4.29.0

package/index.js

@@ -45404,6 +45404,7 @@ var init_telemetry_catalog = __esm({
       "Left at a question \xB7 Setup",
       "Left at a question \xB7 Model key",
       "Left at a question \xB7 Plan approval",
+      "Left at a question \xB7 Sign-in",
       "Left at a question \xB7 Other"
     ];
     ONBOARDING_PROVEN_NOT_CLOSED = "Proof passed, not closed";
@@ -46314,7 +46315,14 @@ function canonicalCodingAgent(slug) {
   }
   return "other";
 }
-var CODING_AGENTS, CODING_AGENT_ALIASES, LISTED_AGENTS, CODING_AGENT_VERSION_SUFFIX;
+function codingAgentName(slug) {
+  const normalized = slug?.trim().toLowerCase() ?? "";
+  if (normalized === "")
+    return void 0;
+  const agent = canonicalCodingAgent(normalized);
+  return agent === "other" ? void 0 : CODING_AGENT_NAMES[agent];
+}
+var CODING_AGENTS, CODING_AGENT_NAMES, CODING_AGENT_ALIASES, LISTED_AGENTS, CODING_AGENT_VERSION_SUFFIX;
 var init_coding_agents = __esm({
   "libs/ops-contracts/src/coding-agents.ts"() {
     "use strict";
@@ -46356,6 +46364,43 @@ var init_coding_agents = __esm({
       "muse",
       "openclaw"
     ];
+    CODING_AGENT_NAMES = {
+      "claude-code": "Claude Code",
+      "claude-cowork": "Claude Cowork",
+      codex: "Codex",
+      cursor: "Cursor",
+      opencode: "OpenCode",
+      "github-copilot": "GitHub Copilot",
+      "gemini-cli": "Gemini CLI",
+      antigravity: "Antigravity",
+      augment: "Augment",
+      devin: "Devin",
+      replit: "Replit",
+      v0: "v0",
+      windsurf: "Windsurf",
+      cline: "Cline",
+      "roo-code": "Roo Code",
+      "kilo-code": "Kilo Code",
+      kiro: "Kiro",
+      aider: "Aider",
+      amp: "Amp",
+      codebuff: "Codebuff",
+      goose: "Goose",
+      crush: "Crush",
+      "factory-droid": "Factory Droid",
+      "qwen-code": "Qwen Code",
+      "kimi-cli": "Kimi CLI",
+      trae: "Trae",
+      warp: "Warp",
+      zed: "Zed",
+      junie: "Junie",
+      grok: "Grok",
+      mimo: "MiMo",
+      doubao: "Doubao",
+      hermes: "Hermes",
+      muse: "Muse",
+      openclaw: "OpenClaw"
+    };
     CODING_AGENT_ALIASES = {
       claude: "claude-code",
       claudecode: "claude-code",
@@ -46475,6 +46520,7 @@ __export(src_exports, {
   CLI_VERIFY_SOURCES: () => CLI_VERIFY_SOURCES,
   CODING_AGENTS: () => CODING_AGENTS,
   CODING_AGENT_ALIASES: () => CODING_AGENT_ALIASES,
+  CODING_AGENT_NAMES: () => CODING_AGENT_NAMES,
   CODING_AGENT_VERSION_SUFFIX: () => CODING_AGENT_VERSION_SUFFIX,
   COHORT_RETENTION_THRESHOLDS: () => COHORT_RETENTION_THRESHOLDS,
   CliLocalEvaluationLicenseRequestSchema: () => CliLocalEvaluationLicenseRequestSchema,
@@ -46566,6 +46612,7 @@ __export(src_exports, {
   cliTelemetryIdentityRequestSchema: () => cliTelemetryIdentityRequestSchema,
   cliTelemetryIdentityResponseSchema: () => cliTelemetryIdentityResponseSchema,
   cliTelemetryProjectIdSchema: () => cliTelemetryProjectIdSchema,
+  codingAgentName: () => codingAgentName,
   createAdminEnterpriseSubscriptionRequestSchema: () => createAdminEnterpriseSubscriptionRequestSchema,
   createCheckoutSessionRequestSchema: () => createCheckoutSessionRequestSchema,
   createCheckoutSessionResponseSchema: () => createCheckoutSessionResponseSchema,
@@ -51236,6 +51283,7 @@ __export(onboarding_state_exports, {
   boundCodingAgent: () => boundCodingAgent,
   clearCommandFailure: () => clearCommandFailure,
   clearProofFailure: () => clearProofFailure,
+  closeOpenQuestion: () => closeOpenQuestion,
   codingAgentMismatchProperty: () => codingAgentMismatchProperty,
   codingAgentProperty: () => codingAgentProperty,
   isOnboardingRunId: () => isOnboardingRunId,
@@ -51257,6 +51305,7 @@ __export(onboarding_state_exports, {
   readOnboardingRunId: () => readOnboardingRunId,
   readOnboardingRunStartedAt: () => readOnboardingRunStartedAt,
   readOnboardingStartIntent: () => readOnboardingStartIntent,
+  readOpenQuestion: () => readOpenQuestion,
   readProofFailure: () => readProofFailure,
   readProofFailureRepeats: () => readProofFailureRepeats,
   readProofOutcome: () => readProofOutcome,
@@ -51268,6 +51317,7 @@ __export(onboarding_state_exports, {
   recordCommandFailure: () => recordCommandFailure,
   recordForeignRoundTripPass: () => recordForeignRoundTripPass,
   recordLearningContainerCheck: () => recordLearningContainerCheck,
+  recordOpenQuestion: () => recordOpenQuestion,
   recordProofFailure: () => recordProofFailure,
   recordProofOutcome: () => recordProofOutcome,
   recordRoundTripFailure: () => recordRoundTripFailure,
@@ -52015,6 +52065,36 @@ function readProofFailure(dependencies, runId) {
     return void 0;
   return { id: stored.id, status: stored.status };
 }
+function recordOpenQuestion(dependencies, runId, about) {
+  writeState(
+    dependencies.store,
+    stateRef("question", resolveAnchoredRoot(dependencies, { runId })),
+    { runId, about }
+  );
+}
+function readOpenQuestion(dependencies, runId) {
+  const stored = readState(
+    dependencies.store,
+    stateRef("question", resolveAnchoredRoot(dependencies, { runId }))
+  );
+  if (typeof stored !== "object" || stored === null)
+    return void 0;
+  if (stored.runId !== runId)
+    return void 0;
+  if (typeof stored.about !== "string" || !QUESTION_PATTERN.test(stored.about)) {
+    return void 0;
+  }
+  return stored.about;
+}
+function closeOpenQuestion(dependencies, runId) {
+  if (readOpenQuestion(dependencies, runId) === void 0)
+    return;
+  writeState(
+    dependencies.store,
+    stateRef("question", resolveAnchoredRoot(dependencies, { runId })),
+    { runId }
+  );
+}
 function recordRunActivity(dependencies, runId, activity) {
   writeState(
     dependencies.store,
@@ -52039,7 +52119,7 @@ function readRunActivity(dependencies, runId) {
   }
   return { endedAt: stored.endedAt, command: stored.command };
 }
-var CODING_AGENT_PATTERN, MODEL_PATTERN, MODEL_FAMILY_PATTERN, CODING_AGENT_PRODUCTS, LISTED_MODEL_FAMILIES, ONBOARDING_INTENT_PATTERN, ONBOARDING_PROJECT_ID_PATTERN, MOVED_NAMESPACES, ERROR_CODE_PATTERN, KEPT_FAILURE_KINDS, KEPT_PROVIDER_ERRORS, KEPT_DETAIL_LIMIT, PROOF_FAILURE_IDS, ACTIVITY_COMMAND_PATTERN;
+var CODING_AGENT_PATTERN, MODEL_PATTERN, MODEL_FAMILY_PATTERN, CODING_AGENT_PRODUCTS, LISTED_MODEL_FAMILIES, ONBOARDING_INTENT_PATTERN, ONBOARDING_PROJECT_ID_PATTERN, MOVED_NAMESPACES, ERROR_CODE_PATTERN, KEPT_FAILURE_KINDS, KEPT_PROVIDER_ERRORS, KEPT_DETAIL_LIMIT, PROOF_FAILURE_IDS, ACTIVITY_COMMAND_PATTERN, QUESTION_PATTERN;
 var init_onboarding_state = __esm({
   "apps/cli/src/services/onboarding-state.ts"() {
     "use strict";
@@ -52084,6 +52164,7 @@ var init_onboarding_state = __esm({
       "round-trip",
       "proof-failure",
       "activity",
+      "question",
       "learning-check"
     ];
     ERROR_CODE_PATTERN = /^[a-z][a-z_]{0,39}$/;
@@ -52096,6 +52177,7 @@ var init_onboarding_state = __esm({
       ...ROUND_TRIP_CHECK_IDS.map((id2) => `round-trip:${id2}`)
     ]);
     ACTIVITY_COMMAND_PATTERN = /^[a-z][a-z0-9-]{0,39}( [a-z][a-z0-9-]{0,39})?$/;
+    QUESTION_PATTERN = /^[a-z][a-z0-9-]{0,39}$/;
   }
 });
 
@@ -52709,9 +52791,9 @@ function getTelemetryEndpointUrl() {
 }
 function getBuildInfo() {
   return {
-    version: true ? "4.28.0" : "dev",
-    buildNumber: true ? "38464768008" : "dev",
-    commitSha: true ? "a033e00c2995392ce8ace961b4aba1acdf4705f5" : "dev",
+    version: true ? "4.29.0" : "dev",
+    buildNumber: true ? "38603793405" : "dev",
+    commitSha: true ? "c2941f81dd4028b36bcc8d09cead7a5cf9381519" : "dev",
     copilotKitCommit: getTemplateRef()
   };
 }
@@ -72850,6 +72932,261 @@ var init_unknown_input = __esm({
   }
 });
 
+// apps/cli/src/services/onboarding-checkpoint.ts
+function reviewCheckpoint(input) {
+  const reviewed = reviewPhaseAndAttempt(input);
+  if (!reviewed.ok || input.reason === void 0)
+    return reviewed;
+  const planStop = reviewed.checkpoint.phase === PLAN_STOP_PHASE;
+  const planStopReason = planStop ? reviewPlanStopReason(input.reason) : void 0;
+  if (planStopReason !== void 0) {
+    return { ...reviewed, checkpoint: { ...reviewed.checkpoint, planStopReason } };
+  }
+  return {
+    ...reviewed,
+    checkpoint: planStop ? { ...reviewed.checkpoint, planStopReason: "other" } : reviewed.checkpoint,
+    reasonRefusal: {
+      code: "CHECKPOINT_REASON_INVALID",
+      message: `--reason goes with --phase ${PLAN_STOP_PHASE} only, and takes one or more of these, comma-separated: ${PLAN_STOP_REASONS.join(", ")}. The checkpoint was kept${planStop ? " with the reason `other`" : " without the reason"}.`
+    }
+  };
+}
+function reviewPlanStopReason(reason) {
+  const named = reason.split(",").map((one) => one.trim());
+  if (named.some((one) => !PLAN_STOP_REASONS.some((known) => known === one)))
+    return void 0;
+  return PLAN_STOP_REASONS.filter((known) => named.includes(known)).join(",");
+}
+function reviewPhaseAndAttempt(input) {
+  const allowed = `--phase must be one of: ${REPORTABLE_CHECKPOINT_PHASES.join(", ")}.`;
+  const observed = [...OBSERVED_ONLY_PHASES].find(([known]) => known === input.phase);
+  if (observed !== void 0) {
+    return {
+      ok: false,
+      refusal: {
+        code: "CHECKPOINT_PHASE_INVALID",
+        message: `${observed[0]} ${observed[1]}, not by a checkpoint. ${allowed}`
+      }
+    };
+  }
+  const phase = REPORTABLE_CHECKPOINT_PHASES.find((known) => known === input.phase);
+  if (phase === void 0) {
+    return {
+      ok: false,
+      refusal: { code: "CHECKPOINT_PHASE_INVALID", message: allowed }
+    };
+  }
+  const subagent = reviewSubagentReturn(phase, input.brief, input.result);
+  if (!subagent.ok)
+    return subagent;
+  const question = reviewAbout(phase, input.about);
+  const kept = question.refusal === void 0 ? {} : { aboutRefusal: question.refusal };
+  const named = {
+    ...question.about === void 0 ? {} : { about: question.about },
+    ...subagent.named
+  };
+  if (input.attempt === void 0) {
+    return { ok: true, checkpoint: { phase, ...named }, ...kept };
+  }
+  const attempt = /^[1-9][0-9]*$/.test(input.attempt) ? Number(input.attempt) : Number.NaN;
+  if (!Number.isInteger(attempt) || attempt > MAX_CHECKPOINT_ATTEMPT) {
+    return {
+      ok: false,
+      refusal: {
+        code: "CHECKPOINT_ATTEMPT_INVALID",
+        message: `--attempt must be a whole number from 1 to ${MAX_CHECKPOINT_ATTEMPT}.`
+      }
+    };
+  }
+  return { ok: true, checkpoint: { attempt, phase, ...named }, ...kept };
+}
+function reviewAbout(phase, about) {
+  if (about === void 0)
+    return {};
+  const wait = phase === QUESTION_PHASE;
+  const known = wait ? CHECKPOINT_ABOUT_TOPICS.find((topic) => topic === about) : void 0;
+  if (known !== void 0)
+    return { about: known };
+  return {
+    ...wait ? { about: "other" } : {},
+    refusal: {
+      code: "CHECKPOINT_ABOUT_INVALID",
+      message: wait ? `--about must be one of: ${CHECKPOINT_ABOUT_TOPICS.join(", ")}. The checkpoint was kept with the question \`other\`.` : `--about names the question a run waits on, so only --phase ${QUESTION_PHASE} takes it. The checkpoint was kept without the question.`
+    }
+  };
+}
+function reviewSubagentReturn(phase, brief, result2) {
+  if (phase !== RETURN_PHASE) {
+    if (brief === void 0 && result2 === void 0)
+      return { ok: true, named: {} };
+    const flag = brief === void 0 ? "result" : "brief";
+    return {
+      ok: false,
+      refusal: {
+        code: flag === "brief" ? "CHECKPOINT_BRIEF_INVALID" : "CHECKPOINT_RESULT_INVALID",
+        message: `--${flag} names a subagent's return, so only --phase ${RETURN_PHASE} takes it.`
+      }
+    };
+  }
+  const knownBrief = SUBAGENT_BRIEFS.find((known) => known === brief);
+  if (knownBrief === void 0) {
+    return {
+      ok: false,
+      refusal: {
+        code: "CHECKPOINT_BRIEF_INVALID",
+        message: `--brief must be one of: ${SUBAGENT_BRIEFS.join(", ")}.`
+      }
+    };
+  }
+  const knownResult = SUBAGENT_RESULTS.find((known) => known === result2);
+  if (knownResult === void 0) {
+    return {
+      ok: false,
+      refusal: {
+        code: "CHECKPOINT_RESULT_INVALID",
+        message: `--result must be one of: ${SUBAGENT_RESULTS.join(", ")}.`
+      }
+    };
+  }
+  return { ok: true, named: { brief: knownBrief, result: knownResult } };
+}
+var CHECKPOINT_PHASES, OBSERVED_ONLY_PHASES, REPORTABLE_CHECKPOINT_PHASES, SUBAGENT_BRIEFS, SUBAGENT_RESULTS, RETURN_PHASE, CHECKPOINT_ABOUT_TOPICS, QUESTION_PHASE, MAX_CHECKPOINT_ATTEMPT, PLAN_STOP_REASONS, PLAN_STOP_PHASE;
+var init_onboarding_checkpoint = __esm({
+  "apps/cli/src/services/onboarding-checkpoint.ts"() {
+    "use strict";
+    init_define_CLI_LOCAL_EVALUATION_SUPPORT();
+    CHECKPOINT_PHASES = [
+      // The first node's two moments (PE-538). Most runs that stop at
+      // `authenticate/start` sent nothing after it, so a stop there could not say
+      // whether the agent stopped reading, sign-in never finished, or the developer
+      // signed in and the agent stopped. Only the model sees either moment: the
+      // welcome is its own message, and a successful `login` says the developer
+      // signed in, not that the agent read the result and went on. Research can
+      // start while sign-in still waits, so `sign-in-settled` may follow it.
+      "welcome-sent",
+      "sign-in-settled",
+      "research-dispatched",
+      "surface-probed",
+      "research-returned",
+      "starter-cloned",
+      "plan-written",
+      "container-surveyed",
+      "container-settled",
+      "build-validated",
+      "journey-attempted",
+      "repair-attempted",
+      // The first time the app answers a chat through its runtime, as `verify
+      // --round-trip` or `onboard proof-check` saw it (PE-548). A passed proof is
+      // the full proof; this is the working app, which a run can reach and then
+      // fail a later check or skip the proof. Only those commands record it.
+      "first-answer",
+      // Out of step order too: a run spawns subagents in several steps, and each
+      // brief read and each return is reported (PE-553). Only the research
+      // dispatch was recorded before, so a plan, implementation or proof subagent
+      // that never came back read the same as a run that stopped waiting on one.
+      // The CLI records the dispatch when a `subagent/*` brief is read. The return
+      // names its brief and result, so `--brief` and `--result` go with it.
+      "subagent-dispatched",
+      "subagent-returned",
+      // Out of step order, like the mode below: a run can wait at any step. A
+      // coding agent that needs something only the developer can supply asks, then
+      // ends its turn. Without this phase the only report it had was a stop, so a
+      // run that was waiting read the same as one that had ended.
+      "awaiting-developer",
+      // The wait a run most often never returns from, so it is named apart from
+      // every other question. Codex built-in runs ended at `settle-credentials`
+      // on an `awaiting-developer` that said nothing about what they waited for
+      // (PE-409).
+      "awaiting-model-credential",
+      // The wait between showing the plan and the developer's answer. The next
+      // read, `implementation/build-and-validate`, comes only after the approval,
+      // so without this phase the planning subagent's time and the developer's
+      // reading time were one number on `subagent/create-plan` (PE-462).
+      "awaiting-plan-approval",
+      // Last rather than in step order, because this one is a mode and not a step.
+      // It is reported once, at the first delegation, and what it changes is how
+      // every later step runs rather than how far the run has got.
+      "delegation-unavailable"
+    ];
+    OBSERVED_ONLY_PHASES = /* @__PURE__ */ new Map([
+      [
+        "first-answer",
+        "is recorded when `verify --round-trip` or `onboard proof-check` sees the app answer"
+      ],
+      ["subagent-dispatched", "is recorded when `onboard read subagent/<brief>` serves a brief"]
+    ]);
+    REPORTABLE_CHECKPOINT_PHASES = CHECKPOINT_PHASES.filter((phase) => !OBSERVED_ONLY_PHASES.has(phase));
+    SUBAGENT_BRIEFS = [
+      "inspect-repository",
+      "create-plan",
+      "implement-and-validate",
+      "prove-oss-baseline",
+      "prove-round-trip"
+    ];
+    SUBAGENT_RESULTS = ["ok", "refused", "failed"];
+    RETURN_PHASE = "subagent-returned";
+    CHECKPOINT_ABOUT_TOPICS = [
+      // The harness refused or held a command until the developer approves it.
+      "harness-permission",
+      // The browser sign-in the developer has not finished.
+      "sign-in",
+      // The one setup message that asks every open choice at once.
+      "setup-answers",
+      // The framework, model provider, frontend, or how an existing agent runs.
+      "stack-choice",
+      // Confirm or name a new project.
+      "project-name",
+      // Which existing project the developer meant.
+      "which-project",
+      // Git tracks, or does not ignore, the env file the key would go in.
+      "env-file-tracked",
+      // Approve the local stack's install and its connection writes.
+      "local-connection",
+      // Accept the local evaluation agreement, which only the developer can do,
+      // in their own terminal.
+      "local-terms",
+      // The folder is not one a project can go in: home, a system folder, or a
+      // folder of projects.
+      "existing-folder",
+      // Something only the developer can install or change on the machine.
+      "environment-fix",
+      // Allow an edit to a file with uncommitted changes the plan does not name.
+      "uncommitted-file",
+      // Approve a change to the existing agent: its instructions, tools, or
+      // dependencies.
+      "agent-change",
+      // After a stop or a tripwire: restore the changed files, or go on.
+      "restore-files",
+      // The app refused the verifier's run, so the developer sends one message and
+      // gives its thread id.
+      "thread-id",
+      // Approve the one scoped fix that would finish a failed run.
+      "scoped-fix",
+      // Which existing Channel or Learning Container this project serves.
+      "feature-binding",
+      // None of the above. Kept last, and kept rare.
+      "other"
+    ];
+    QUESTION_PHASE = "awaiting-developer";
+    MAX_CHECKPOINT_ATTEMPT = 9;
+    PLAN_STOP_REASONS = [
+      "dependency_upgrade",
+      "dependency_removal",
+      "file_removal",
+      "uncommitted_file",
+      "gitignore",
+      "env_file",
+      "existing_agent_change",
+      "file_count",
+      "outside_project",
+      "copilotkit_version",
+      "backup_partial",
+      "other"
+    ];
+    PLAN_STOP_PHASE = "awaiting-plan-approval";
+  }
+});
+
 // node_modules/.pnpm/@c15t+schema@2.1.0_typescript@5.9.3/node_modules/@c15t/schema/dist/194.js
 function createCompactUiProfile() {
   return {
@@ -131248,6 +131585,22 @@ function currentRunIdleProperties(startedAt) {
     return {};
   }
 }
+function takeAnsweredQuestionProperties() {
+  try {
+    const dependencies = { cwd: process.cwd(), store: onboardingStateStore };
+    const runId = readOnboardingRunId(dependencies);
+    if (runId === void 0)
+      return {};
+    const stored = readOpenQuestion(dependencies, runId);
+    if (stored === void 0)
+      return {};
+    closeOpenQuestion(dependencies, runId);
+    const about = CHECKPOINT_ABOUT_TOPICS.find((known) => known === stored);
+    return about === void 0 ? {} : { answered_about: about };
+  } catch {
+    return {};
+  }
+}
 async function withTelemetry(base2, fn) {
   const buildInfo = getBuildInfo();
   const provider = getConsentProvider();
@@ -131283,6 +131636,7 @@ async function withTelemetry(base2, fn) {
       ...currentCliStateProperties(base2.command),
       ...currentOnboardingRunProperties(),
       ...currentRunIdleProperties(startedAt),
+      ...takeAnsweredQuestionProperties(),
       outcome: "started"
     }
   });
@@ -131397,6 +131751,7 @@ var init_telemetry2 = __esm({
   async "apps/cli/src/services/telemetry/index.ts"() {
     "use strict";
     init_define_CLI_LOCAL_EVALUATION_SUPPORT();
+    init_onboarding_checkpoint();
     init_config();
     init_config_service();
     init_onboarding_state();
@@ -138525,6 +138880,9 @@ function recordOnboardingCheckpoint(recorder, phase, options = {}) {
         ...phase === "starter-cloned" ? { starterClonedAt: Date.now() } : {}
       });
     }
+    if (options.about !== void 0) {
+      recordOpenQuestion(recorder, runId, options.about);
+    }
   } catch {
   }
   const intent = readOnboardingIntent(recorder);
@@ -138538,6 +138896,9 @@ function recordOnboardingCheckpoint(recorder, phase, options = {}) {
         cli_version: recorder.cliVersion,
         checkpoint_phase: phase,
         ...options.properties ?? {},
+        ...options.about === void 0 ? {} : { checkpoint_about: options.about },
+        ...options.brief === void 0 ? {} : { subagent_brief: options.brief },
+        ...options.result === void 0 ? {} : { subagent_result: options.result },
         // Spread so a step that does not loop leaves the key off rather than
         // reporting a first attempt at something.
         ...options.attempt === void 0 ? {} : { checkpoint_attempt: options.attempt }
@@ -138637,7 +138998,9 @@ var init_onboarding_checkpoint_record = __esm({
       "build-validated",
       "journey-attempted",
       "repair-attempted",
-      "first-answer"
+      "first-answer",
+      // Every `subagent/*` brief read (PE-553).
+      "subagent-dispatched"
     ]);
   }
 });
@@ -423692,10 +424055,27 @@ function setupWelcome() {
 }
 function signInMessage(input) {
   const why = "First, sign in to CopilotKit Intelligence, or create an account. It is free: the Developer plan costs nothing, and this setup needs no paid subscription. Signing in gives this project its own CopilotKit Intelligence project and API key, which let your users reopen past conversations. You can remove the key later to disconnect this workspace.";
-  const page = input.browserOpened ? "I opened the sign-in page in your browser." : `Open this page to sign in:
-${input.url}`;
-  const code = input.userCode === void 0 ? [] : [`Check that the page shows this code: **${input.userCode}**`];
-  return [why, page, ...code].join("\n\n");
+  const page = !input.browserOpened ? `Open this page to sign in:
+${input.url}` : input.linkWhenOpened === true ? `I opened the sign-in page in your browser. If it did not open, open this page:
+${input.url}` : "I opened the sign-in page in your browser.";
+  return [why, page, ...codeCheck(input.userCode)].join("\n\n");
+}
+function codeCheck(userCode) {
+  return userCode === void 0 ? [] : [`Check that the page shows this code: **${userCode}**`];
+}
+function renewedSignInMessage(input) {
+  return [
+    ...input.browserOpened ? [
+      "The sign-in code expired before anyone approved it, so I opened a new sign-in page in your browser.",
+      `If it did not open, open this page:
+${input.url}`
+    ] : [
+      "The sign-in code expired before anyone approved it, so here is a new one.",
+      `Open this page to sign in:
+${input.url}`
+    ],
+    ...codeCheck(input.userCode)
+  ].join("\n\n");
 }
 var WELCOME_INTRO, SELF_HOST_LINE, WELCOME_PROMISE;
 var init_onboarding_welcome = __esm({
@@ -423859,8 +424239,7 @@ async function runLoginJson(dependencies = {
   let renewals = 0;
   function openPage(url4, after, actionLine) {
     openings.push(
-      // In onboarding the developer opens it, from the message that says why.
-      (options.onboarding === true ? Promise.resolve(false) : dependencies.openBrowser(url4).catch(() => false)).then((opened) => {
+      dependencies.openBrowser(url4).catch(() => false).then((opened) => {
         after(opened);
         writeJsonLine(dependencies.stdout, actionLine(opened));
       }).catch(() => void 0)
@@ -423881,12 +424260,13 @@ async function runLoginJson(dependencies = {
         authenticationLine["resumed"] === true
       ),
       (opened) => ({
-        action: options.onboarding === true ? ONBOARDING_SIGN_IN_ACTION : opened ? OPENED_DEVICE_ACTION : DEVICE_ACTION,
+        action: options.onboarding === true ? opened ? ONBOARDING_OPENED_SIGN_IN_ACTION : ONBOARDING_SIGN_IN_ACTION : opened ? OPENED_DEVICE_ACTION : DEVICE_ACTION,
         browser_opened: opened,
         // The developer does not see this record. The agent writes `message`
         // in its own reply: why to sign in, before the link.
         message: signInMessage({
           browserOpened: opened,
+          ...options.onboarding === true ? { linkWhenOpened: true } : {},
           url: String(authenticationLine["url"] ?? ""),
           ...typeof authenticationLine["user_code"] === "string" ? { userCode: authenticationLine["user_code"] } : {}
         }),
@@ -423915,11 +424295,11 @@ async function runLoginJson(dependencies = {
         handoff === void 0 ? 0 : Date.now() - handoff.handedOffAt
       ),
       (opened) => ({
-        action: options.onboarding === true ? ONBOARDING_RENEWED_ACTION : opened ? OPENED_RENEWED_DEVICE_ACTION : RENEWED_DEVICE_ACTION,
+        action: options.onboarding === true ? opened ? ONBOARDING_OPENED_RENEWED_ACTION : ONBOARDING_RENEWED_ACTION : opened ? OPENED_RENEWED_DEVICE_ACTION : RENEWED_DEVICE_ACTION,
         browser_opened: opened,
         ...options.onboarding === true ? {
-          message: signInMessage({
-            browserOpened: false,
+          message: renewedSignInMessage({
+            browserOpened: opened,
             url: String(authenticationLine["url"] ?? ""),
             ...typeof authenticationLine["user_code"] === "string" ? { userCode: authenticationLine["user_code"] } : {}
           })
@@ -424121,7 +424501,7 @@ async function runLoginDevice(dependencies = {
   }
   stdout.write("Logged in successfully!\n");
 }
-var import_jsx_runtime18, LOGIN_STALL_REPORT_MS, ONBOARDING_SIGN_IN_ACTION, ONBOARDING_RENEWED_ACTION, REPEATED_EXPIRY_LIMIT, MAX_CODE_RENEWALS, REPEATED_EXPIRY_WAIT_MS, REPEATED_EXPIRY_POLL_MS, RETRY_ASK_DEVELOPER, REPEATED_EXPIRY_MESSAGE, RepeatedExpiryError, RenewalFailedError, DEVICE_ACTION, OPENED_DEVICE_ACTION, RENEWED_DEVICE_ACTION, OPENED_RENEWED_DEVICE_ACTION;
+var import_jsx_runtime18, LOGIN_STALL_REPORT_MS, ONBOARDING_SIGN_IN_ACTION, ONBOARDING_OPENED_SIGN_IN_ACTION, ONBOARDING_RENEWED_ACTION, ONBOARDING_OPENED_RENEWED_ACTION, REPEATED_EXPIRY_LIMIT, MAX_CODE_RENEWALS, REPEATED_EXPIRY_WAIT_MS, REPEATED_EXPIRY_POLL_MS, RETRY_ASK_DEVELOPER, REPEATED_EXPIRY_MESSAGE, RepeatedExpiryError, RenewalFailedError, DEVICE_ACTION, OPENED_DEVICE_ACTION, RENEWED_DEVICE_ACTION, OPENED_RENEWED_DEVICE_ACTION;
 var init_login = __esm({
   async "apps/cli/src/commands/login.tsx"() {
     "use strict";
@@ -424141,7 +424521,9 @@ var init_login = __esm({
     import_jsx_runtime18 = __toESM(require_jsx_runtime(), 1);
     LOGIN_STALL_REPORT_MS = 12e4;
     ONBOARDING_SIGN_IN_ACTION = "The developer does not see your tool output. Write `message` in your own reply, word for word: it says why to sign in, then gives the link and the code. Do not open authentication_url yourself; the developer opens it from your message. Report the pause with `onboard checkpoint --phase awaiting-developer`, then end your turn. Keep this process running, and read it again when the developer says they signed in.";
+    ONBOARDING_OPENED_SIGN_IN_ACTION = "The CLI opened authentication_url in the default browser. Do not open it again. The developer does not see your tool output. Write `message` in your own reply, word for word: it says why to sign in, that the page opened, then gives the link and the code. Report the pause with `onboard checkpoint --phase awaiting-developer`, then end your turn. Keep this process running, and read it again when the developer says they signed in.";
     ONBOARDING_RENEWED_ACTION = "The last code expired before anyone approved it, so the CLI issued a new one. The developer does not see your tool output. Write `message` in your own reply, word for word, and do not open authentication_url yourself. Report the pause with `onboard checkpoint --phase awaiting-developer`, then end your turn. Keep this process running.";
+    ONBOARDING_OPENED_RENEWED_ACTION = "The last code expired before anyone approved it, so the CLI issued a new one and opened its page in the default browser. Do not open it again. The developer does not see your tool output. Write `message` in your own reply, word for word. Report the pause with `onboard checkpoint --phase awaiting-developer`, then end your turn. Keep this process running.";
     REPEATED_EXPIRY_LIMIT = 2;
     MAX_CODE_RENEWALS = 2;
     REPEATED_EXPIRY_WAIT_MS = 6e4;
@@ -428984,7 +429366,7 @@ var init_package = __esm({
   "apps/cli/package.json"() {
     package_default = {
       name: "copilotkit",
-      version: "4.28.0",
+      version: "4.29.0",
       type: "module",
       engines: {
         node: ">=20.9.0"
@@ -436716,163 +437098,45 @@ var init_onboarding_friction = __esm({
   }
 });
 
-// apps/cli/src/services/onboarding-checkpoint.ts
-function reviewCheckpoint(input) {
-  const reviewed = reviewPhaseAndAttempt(input);
-  if (!reviewed.ok || input.reason === void 0)
-    return reviewed;
-  const planStop = reviewed.checkpoint.phase === PLAN_STOP_PHASE;
-  const planStopReason = planStop ? reviewPlanStopReason(input.reason) : void 0;
-  if (planStopReason !== void 0) {
-    return { ok: true, checkpoint: { ...reviewed.checkpoint, planStopReason } };
-  }
-  return {
-    ok: true,
-    checkpoint: planStop ? { ...reviewed.checkpoint, planStopReason: "other" } : reviewed.checkpoint,
-    reasonRefusal: {
-      code: "CHECKPOINT_REASON_INVALID",
-      message: `--reason goes with --phase ${PLAN_STOP_PHASE} only, and takes one or more of these, comma-separated: ${PLAN_STOP_REASONS.join(", ")}. The checkpoint was kept${planStop ? " with the reason `other`" : " without the reason"}.`
-    }
-  };
-}
-function reviewPlanStopReason(reason) {
-  const named = reason.split(",").map((one) => one.trim());
-  if (named.some((one) => !PLAN_STOP_REASONS.some((known) => known === one)))
+// apps/cli/src/services/onboarding-harness-blocks.ts
+function readMarker(line) {
+  const match2 = /^<!-- (\/?)([a-z-]+) -->$/u.exec(line.trim());
+  if (match2 === null)
     return void 0;
-  return PLAN_STOP_REASONS.filter((known) => named.includes(known)).join(",");
-}
-function reviewPhaseAndAttempt(input) {
-  const allowed = `--phase must be one of: ${REPORTABLE_CHECKPOINT_PHASES.join(", ")}.`;
-  const observed = [...OBSERVED_ONLY_PHASES].find((known) => known === input.phase);
-  if (observed !== void 0) {
-    return {
-      ok: false,
-      refusal: {
-        code: "CHECKPOINT_PHASE_INVALID",
-        message: `${observed} is recorded when \`verify --round-trip\` or \`onboard proof-check\` sees the app answer, not by a checkpoint. ${allowed}`
-      }
-    };
-  }
-  const phase = REPORTABLE_CHECKPOINT_PHASES.find((known) => known === input.phase);
-  if (phase === void 0) {
-    return {
-      ok: false,
-      refusal: { code: "CHECKPOINT_PHASE_INVALID", message: allowed }
-    };
-  }
-  if (input.attempt === void 0)
-    return { ok: true, checkpoint: { phase } };
-  const attempt = /^[1-9][0-9]*$/.test(input.attempt) ? Number(input.attempt) : Number.NaN;
-  if (!Number.isInteger(attempt) || attempt > MAX_CHECKPOINT_ATTEMPT) {
-    return {
-      ok: false,
-      refusal: {
-        code: "CHECKPOINT_ATTEMPT_INVALID",
-        message: `--attempt must be a whole number from 1 to ${MAX_CHECKPOINT_ATTEMPT}.`
-      }
-    };
-  }
-  return { ok: true, checkpoint: { attempt, phase } };
+  const kind = match2[2] ?? "";
+  if (!(kind in HARNESS_PASSAGE_AGENTS))
+    return void 0;
+  return { kind, closes: match2[1] === "/" };
 }
-var CHECKPOINT_PHASES, OBSERVED_ONLY_PHASES, REPORTABLE_CHECKPOINT_PHASES, MAX_CHECKPOINT_ATTEMPT, PLAN_STOP_REASONS, PLAN_STOP_PHASE;
-var init_onboarding_checkpoint = __esm({
-  "apps/cli/src/services/onboarding-checkpoint.ts"() {
-    "use strict";
-    init_define_CLI_LOCAL_EVALUATION_SUPPORT();
-    CHECKPOINT_PHASES = [
-      // The first node's two moments (PE-538). Most runs that stop at
-      // `authenticate/start` sent nothing after it, so a stop there could not say
-      // whether the agent stopped reading, sign-in never finished, or the developer
-      // signed in and the agent stopped. Only the model sees either moment: the
-      // welcome is its own message, and a successful `login` says the developer
-      // signed in, not that the agent read the result and went on. Research can
-      // start while sign-in still waits, so `sign-in-settled` may follow it.
-      "welcome-sent",
-      "sign-in-settled",
-      "research-dispatched",
-      "surface-probed",
-      "research-returned",
-      "starter-cloned",
-      "plan-written",
-      "container-surveyed",
-      "container-settled",
-      "build-validated",
-      "journey-attempted",
-      "repair-attempted",
-      // The first time the app answers a chat through its runtime, as `verify
-      // --round-trip` or `onboard proof-check` saw it (PE-548). A passed proof is
-      // the full proof; this is the working app, which a run can reach and then
-      // fail a later check or skip the proof. Only those commands record it.
-      "first-answer",
-      // Out of step order, like the mode below: a run can wait at any step. A
-      // coding agent that needs something only the developer can supply asks, then
-      // ends its turn. Without this phase the only report it had was a stop, so a
-      // run that was waiting read the same as one that had ended.
-      "awaiting-developer",
-      // The wait a run most often never returns from, so it is named apart from
-      // every other question. Codex built-in runs ended at `settle-credentials`
-      // on an `awaiting-developer` that said nothing about what they waited for
-      // (PE-409).
-      "awaiting-model-credential",
-      // The wait between showing the plan and the developer's answer. The next
-      // read, `implementation/build-and-validate`, comes only after the approval,
-      // so without this phase the planning subagent's time and the developer's
-      // reading time were one number on `subagent/create-plan` (PE-462).
-      "awaiting-plan-approval",
-      // Last rather than in step order, because this one is a mode and not a step.
-      // It is reported once, at the first delegation, and what it changes is how
-      // every later step runs rather than how far the run has got.
-      "delegation-unavailable"
-    ];
-    OBSERVED_ONLY_PHASES = /* @__PURE__ */ new Set([
-      "first-answer"
-    ]);
-    REPORTABLE_CHECKPOINT_PHASES = CHECKPOINT_PHASES.filter((phase) => !OBSERVED_ONLY_PHASES.has(phase));
-    MAX_CHECKPOINT_ATTEMPT = 9;
-    PLAN_STOP_REASONS = [
-      "dependency_upgrade",
-      "dependency_removal",
-      "file_removal",
-      "uncommitted_file",
-      "gitignore",
-      "env_file",
-      "existing_agent_change",
-      "file_count",
-      "outside_project",
-      "copilotkit_version",
-      "backup_partial",
-      "other"
-    ];
-    PLAN_STOP_PHASE = "awaiting-plan-approval";
-  }
-});
-
-// apps/cli/src/services/onboarding-harness-blocks.ts
-function hasSandboxedHarnessBlock(markdown) {
-  return markdown.split("\n").some((line) => line.trim() === SANDBOXED_HARNESS_OPEN);
+function hasHarnessBlock(markdown) {
+  return markdown.split("\n").some((line) => {
+    const marker = readMarker(line);
+    return marker !== void 0 && !marker.closes;
+  });
 }
-function applySandboxedHarnessBlocks(markdown, agent) {
-  const keep = SANDBOXED_HARNESS_AGENTS.has(agent);
+function applyHarnessBlocks(markdown, agent) {
   const lines = markdown.split("\n");
   const served = [];
-  let inside = false;
+  let open7;
+  let keep = false;
   let dropNextBlank = false;
   for (const line of lines) {
-    const marker = line.trim();
-    if (marker === SANDBOXED_HARNESS_OPEN) {
-      if (inside)
-        throw new Error("A sandboxed-harness passage opens twice.");
-      inside = true;
+    const marker = readMarker(line);
+    if (marker !== void 0 && !marker.closes) {
+      if (open7 !== void 0)
+        throw new Error("A harness passage opens twice.");
+      open7 = marker.kind;
+      keep = HARNESS_PASSAGE_AGENTS[marker.kind]?.has(agent) ?? false;
       continue;
     }
-    if (marker === SANDBOXED_HARNESS_CLOSE) {
-      if (!inside)
-        throw new Error("A sandboxed-harness passage closes unopened.");
-      inside = false;
+    if (marker !== void 0) {
+      if (open7 !== marker.kind)
+        throw new Error("A harness passage closes unopened.");
+      open7 = void 0;
       dropNextBlank = !keep && (served.length === 0 || served.at(-1) === "");
       continue;
     }
-    if (inside && !keep)
+    if (open7 !== void 0 && !keep)
       continue;
     if (dropNextBlank && line === "") {
       dropNextBlank = false;
@@ -436881,18 +437145,19 @@ function applySandboxedHarnessBlocks(markdown, agent) {
     dropNextBlank = false;
     served.push(line);
   }
-  if (inside)
-    throw new Error("A sandboxed-harness passage never closes.");
+  if (open7 !== void 0)
+    throw new Error("A harness passage never closes.");
   return served.join("\n");
 }
-var SANDBOXED_HARNESS_OPEN, SANDBOXED_HARNESS_CLOSE, SANDBOXED_HARNESS_AGENTS;
+var HARNESS_PASSAGE_AGENTS;
 var init_onboarding_harness_blocks = __esm({
   "apps/cli/src/services/onboarding-harness-blocks.ts"() {
     "use strict";
     init_define_CLI_LOCAL_EVALUATION_SUPPORT();
-    SANDBOXED_HARNESS_OPEN = "<!-- sandboxed-harness -->";
-    SANDBOXED_HARNESS_CLOSE = "<!-- /sandboxed-harness -->";
-    SANDBOXED_HARNESS_AGENTS = /* @__PURE__ */ new Set(["codex"]);
+    HARNESS_PASSAGE_AGENTS = {
+      "sandboxed-harness": /* @__PURE__ */ new Set(["codex"]),
+      "antigravity-harness": /* @__PURE__ */ new Set(["antigravity"])
+    };
   }
 });
 
@@ -443448,7 +443713,9 @@ async function runOnboard(argv, dependencies, lifecycle = NO_LIFECYCLE) {
     const pausedAt = binding.reentered ? pausedStop(deps) : void 0;
     if (pausedAt !== void 0) {
       printRunId(deps, binding.runId);
-      deps.stdout.write(pausedRunStartNotice(pausedAt));
+      deps.stdout.write(
+        pausedRunStartNotice(pausedAt, await loadCliCommand(deps.loadPackageSpec))
+      );
       return;
     }
     const startPrompt = binding.intent === parsed.values.intent ? requestedStartPrompt : await loadPromptForOutput(
@@ -443496,6 +443763,18 @@ async function runOnboard(argv, dependencies, lifecycle = NO_LIFECYCLE) {
         backupRecorder(deps, binding.runId)
       );
     }
+    const underWayAt = binding.reentered ? stepUnderWay(deps, startPrompt.name) : void 0;
+    if (underWayAt !== void 0) {
+      printRunId(deps, binding.runId);
+      deps.stdout.write(
+        underWayStartNotice(
+          underWayAt,
+          await loadCliCommand(deps.loadPackageSpec)
+        )
+      );
+      recordStartReentry(deps, binding.runId, underWayAt);
+      return;
+    }
     printRunId(deps, binding.runId);
     await printGraphTree(deps);
     if (folderNotice !== void 0)
@@ -445061,6 +445340,9 @@ ${PROOF_CHECK_USAGE}`
       )
     }
   );
+  if (result2.checks.some((check4) => check4.id === "runtime-answers" && check4.status === "pass")) {
+    recordBuildOnBuildRoute(dependencies, runId);
+  }
   const failure = describeProofFailure(result2.firstFailure);
   keepProofFailureBestEffort(
     dependencies,
@@ -445448,17 +445730,29 @@ function checkpointsForRead(node, routeBefore) {
   if (node === "subagent/implement-and-validate" || FEATURE_IMPLEMENT_NODE.test(node)) {
     phases.push("plan-written");
   }
-  if (node === "proof/round-trip" && routeBefore.includes("implementation/build-and-validate") || FEATURE_PROOF_NODE.test(node) && routeBefore.some((served) => FEATURE_IMPLEMENT_NODE.test(served))) {
+  if (FEATURE_PROOF_NODE.test(node) && routeBefore.some((served) => FEATURE_IMPLEMENT_NODE.test(served))) {
     phases.push("build-validated");
   }
   return phases;
 }
+function subagentBriefOf(node) {
+  return SUBAGENT_BRIEFS.find((brief) => node === `subagent/${brief}`);
+}
 function recordReadCheckpoints(dependencies, runId, node, routeBefore) {
   for (const phase of checkpointsForRead(node, routeBefore)) {
     recordCheckpointPhase(dependencies, runId, phase);
   }
+  const brief = subagentBriefOf(node);
+  if (brief !== void 0) {
+    recordCheckpointPhase(dependencies, runId, "subagent-dispatched", void 0, { brief });
+  }
+}
+function recordBuildOnBuildRoute(dependencies, runId) {
+  if (readRouteBestEffort(dependencies).includes(BUILD_NODE)) {
+    recordCheckpointPhase(dependencies, runId, "build-validated");
+  }
 }
-function recordCheckpointPhase(dependencies, runId, phase, attempt, planStopReason) {
+function recordCheckpointPhase(dependencies, runId, phase, attempt, named = {}) {
   if (phase === "awaiting-developer" && readSetupMessageShown({ cwd: dependencies.cwd, store: dependencies.store })) {
     recordOnboardingCheckpoint(checkpointRecorder(dependencies), "welcome-sent");
   }
@@ -445466,7 +445760,10 @@ function recordCheckpointPhase(dependencies, runId, phase, attempt, planStopReas
     ...attempt === void 0 ? {} : { attempt },
     ...phase === "research-returned" ? { properties: observedStateProperties(dependencies) } : {},
     // Why the plan stopped (PE-778).
-    ...planStopReason === void 0 ? {} : { properties: { plan_stop_reason: planStopReason } }
+    ...named.planStopReason === void 0 ? {} : { properties: { plan_stop_reason: named.planStopReason } },
+    ...named.about === void 0 ? {} : { about: named.about },
+    ...named.brief === void 0 ? {} : { brief: named.brief },
+    ...named.result === void 0 ? {} : { result: named.result }
   });
 }
 async function fileCredentialsStopReport(dependencies, runId, stopReason) {
@@ -445574,7 +445871,10 @@ function reportCheckpoint(dependencies, runId, args) {
     parsed = parseOnboardArgs(dependencies.cwd, "checkpoint", args, {
       phase: { type: "string" },
       attempt: { type: "string" },
-      reason: { type: "string" }
+      reason: { type: "string" },
+      about: { type: "string" },
+      brief: { type: "string" },
+      result: { type: "string" }
     });
   } catch {
     return printCheckpointRefusal(dependencies, runId, {
@@ -445583,27 +445883,28 @@ function reportCheckpoint(dependencies, runId, args) {
     });
   }
   const reviewed = reviewCheckpoint({
+    about: parsed.values.about,
     attempt: parsed.values.attempt,
+    brief: parsed.values.brief,
     phase: parsed.values.phase,
-    reason: parsed.values.reason
+    reason: parsed.values.reason,
+    result: parsed.values.result
   });
   if (!reviewed.ok) {
     return printCheckpointRefusal(dependencies, runId, reviewed.refusal);
   }
-  recordCheckpointPhase(
-    dependencies,
-    runId,
-    reviewed.checkpoint.phase,
-    reviewed.checkpoint.attempt,
-    reviewed.checkpoint.planStopReason
-  );
+  const { checkpoint: checkpoint2 } = reviewed;
+  recordCheckpointPhase(dependencies, runId, checkpoint2.phase, checkpoint2.attempt, checkpoint2);
+  if (checkpoint2.phase === "subagent-returned" && checkpoint2.brief === "implement-and-validate" && checkpoint2.result === "ok") {
+    recordBuildOnBuildRoute(dependencies, runId);
+  }
   dependencies.stdout.write("Checkpoint included in telemetry when enabled.\n");
-  if (reviewed.reasonRefusal !== void 0) {
-    recordReportRefused(dependencies, runId, "checkpoint", reviewed.reasonRefusal.code);
-    dependencies.stdout.write(
-      `${reviewed.reasonRefusal.code}: ${reviewed.reasonRefusal.message}
-`
-    );
+  for (const refusal of [reviewed.aboutRefusal, reviewed.reasonRefusal]) {
+    if (refusal === void 0)
+      continue;
+    recordReportRefused(dependencies, runId, "checkpoint", refusal.code);
+    dependencies.stdout.write(`${refusal.code}: ${refusal.message}
+`);
   }
 }
 function printCheckpointRefusal(dependencies, runId, refusal) {
@@ -446795,26 +447096,69 @@ async function loadPromptForOutput(dependencies, load2) {
     throw error98;
   }
 }
-function pausedRunStartNotice(stop) {
+function pausedRunStartNotice(stop, cli) {
   return [
     `This run is paused at \`${stop}\`, so \`onboard start\` served nothing.`,
-    `Run \`copilotkit onboard read ${stop}\` to read the stop instructions again.`,
+    `Run \`${cli} onboard read ${stop}\` to read the stop instructions again.`,
     "After the developer approves the fix, run",
-    '`copilotkit onboard resume --message "<the fix the developer approved>"`.',
+    `\`${cli} onboard resume --message "<the fix the developer approved>"\`.`,
+    ...startOverLines(cli),
+    ""
+  ].join("\n");
+}
+function startOverLines(cli) {
+  return [
     "To drop this run and start over instead, ask the developer first, then run",
-    "`copilotkit onboard start --run <new-12-character-id>`.",
+    `\`${cli} onboard start --run <new-12-character-id>\`.`
+  ];
+}
+function underWayStartNotice(step, cli) {
+  return [
+    `This run is already at \`${step}\`, so \`onboard start\` served nothing.`,
+    "The welcome is already sent. Do not send it again.",
+    `Go on from that step. To read it again, run \`${cli} onboard read ${step}\`.`,
+    `\`${cli} onboard route\` prints every step this run has served.`,
+    "If this session did not read the earlier steps, their run-wide rules still hold:",
+    "- Act only as the orchestrator. Give every project task to a subagent. Do a task yourself only when its subagent returns nothing usable.",
+    "- Run each CLI call exactly as written, as its own command, from the directory this run is bound to.",
+    "- Read only inside the target project.",
+    "- To wait for a subagent or the developer, end your turn. Do not sleep.",
+    `- Before a turn ends while the run is open, run \`${cli} onboard checkpoint --phase awaiting-developer --about <question>\`.`,
+    `- Before you stop the run, run \`${cli} onboard friction --phase stop --category <slug> --message "<the step and what stopped it>"\`.`,
+    `- \`${cli} onboard --help\` lists the values \`--about\` and \`--category\` take.`,
+    ...startOverLines(cli),
     ""
   ].join("\n");
 }
+function recordStartReentry(deps, runId, step) {
+  const route = readRouteBestEffort(deps);
+  recordBestEffort(deps, {
+    event: "cli.onboarding.prompt_served",
+    properties: {
+      command: "onboard",
+      ...onboardingIntentProperties(deps),
+      onboarding_run_id: runId,
+      cli_version: deps.cliVersion,
+      prompt_name: step,
+      step_index: route.length,
+      prompt_repeat: route.filter((node) => node === step).length + 1,
+      reentry: "start"
+    }
+  });
+}
+function stepUnderWay(deps, startNode) {
+  const step = readRouteBestEffort(deps).filter((node) => node !== startNode && !node.startsWith("subagent/")).at(-1);
+  return step === void 0 || RUN_ENDINGS.has(step) ? void 0 : step;
+}
 function pausedStop(deps) {
   const last = readOnboardingRoute({ cwd: deps.cwd, store: deps.store }).at(-1);
   return last !== void 0 && RESUMABLE_TERMINALS.includes(last) ? last : void 0;
 }
 function servedMarkdown(dependencies, markdown) {
-  if (!hasSandboxedHarnessBlock(markdown))
+  if (!hasHarnessBlock(markdown))
     return markdown;
   try {
-    return applySandboxedHarnessBlocks(
+    return applyHarnessBlocks(
       markdown,
       detectRunningCodingAgent(dependencies).agent
     );
@@ -447145,7 +447489,7 @@ function recordBestEffort(dependencies, event) {
   } catch {
   }
 }
-var import_onboarding_intents, ONBOARD_SUBCOMMANDS, ONBOARD_FLAG_OWNERS, NO_LIFECYCLE, OnboardExtraArgumentError, READ_USAGE, READ_RUN_NOT_BOUND, IDENTIFY_RUN_NOT_BOUND, STEP_RUN_NOT_BOUND, DECLINED_SURFACE_CHECK, CHANNELS_SURFACE_CHECK, NO_BROWSER_CHECK, BROWSER_ONLY_CHECKS, CHANNELS_LEG_PREFIX, LEARNING_LEG_PREFIX, LEARNING_INTENT, VISUAL_CHECK_OUTCOMES, DEVICE_CHECK_OUTCOMES, BLOCKER_CAUSES, BLOCKER_USAGE, SURFACE_CHECK_USAGE, FRONTEND_URL_USAGE, PROOF_STEPS, PROOF_OUTCOMES, BASELINE_PREDICATE_COUNT, PROOF_USAGE, IDENTIFY_USAGE, LOCAL_STACK_PRESENT, DEPLOYMENT_USAGE, LOCAL_TERMS_USAGE, LOCAL_TERMS_SETUP_LINE, SETUP_ANSWERS_USAGE, SETUP_APPROVALS, SETUP_LEARNING_CHOICES, CREDENTIAL_PARAMETER, HEX_ACCOUNT_ID, CLOUDFLARE_ACCOUNT_HOSTS, FRAMEWORK_NAME_MAX, SETUP_FRAMEWORK_REFUSAL, SETUP_BASE_URL_REFUSAL, SETUP_ENV_FILE_ANSWERS, SETUP_FRAMEWORK_CHOICES, SETUP_MESSAGE_USAGE, SETUP_LANGUAGES, SETUP_MESSAGE_VENDORS, FALLBACK_PROJECT_NAME, verifyFromDirectory, PROOF_CHECK_USAGE, PROOF_CHECK_REPEAT_LIMIT, UPGRADE_PLAN_USAGE, RUNTIME_URL_USAGE, ENV_LOCAL_REFUSAL, CREDENTIALS_USAGE, CREDENTIALS_STOP_TEXT, selectProjectFromDirectory, MODEL_KEY_SEVERITY, FEATURE_IMPLEMENT_NODE, FEATURE_PROOF_NODE, HELD_BACK_OUTCOME, EXISTING_AGENT_STATES, MODEL_KEY_GUIDANCE, MAX_UNPLACED_DEPENDENCIES, BLOCKER_REPORTS, ISOLATED_HOSTS, LISTED_SKIPPED_PATHS, INTENT_FEATURE_FOLDERS, RUN_ENDINGS, SIGN_IN_PROMPT, SIGN_IN_GATED_PROMPT, PROJECT_SELECTION_PROMPTS, CHILD_PROJECT_SCAN_ENTRIES;
+var import_onboarding_intents, ONBOARD_SUBCOMMANDS, ONBOARD_FLAG_OWNERS, NO_LIFECYCLE, OnboardExtraArgumentError, READ_USAGE, READ_RUN_NOT_BOUND, IDENTIFY_RUN_NOT_BOUND, STEP_RUN_NOT_BOUND, DECLINED_SURFACE_CHECK, CHANNELS_SURFACE_CHECK, NO_BROWSER_CHECK, BROWSER_ONLY_CHECKS, CHANNELS_LEG_PREFIX, LEARNING_LEG_PREFIX, LEARNING_INTENT, VISUAL_CHECK_OUTCOMES, DEVICE_CHECK_OUTCOMES, BLOCKER_CAUSES, BLOCKER_USAGE, SURFACE_CHECK_USAGE, FRONTEND_URL_USAGE, PROOF_STEPS, PROOF_OUTCOMES, BASELINE_PREDICATE_COUNT, PROOF_USAGE, IDENTIFY_USAGE, LOCAL_STACK_PRESENT, DEPLOYMENT_USAGE, LOCAL_TERMS_USAGE, LOCAL_TERMS_SETUP_LINE, SETUP_ANSWERS_USAGE, SETUP_APPROVALS, SETUP_LEARNING_CHOICES, CREDENTIAL_PARAMETER, HEX_ACCOUNT_ID, CLOUDFLARE_ACCOUNT_HOSTS, FRAMEWORK_NAME_MAX, SETUP_FRAMEWORK_REFUSAL, SETUP_BASE_URL_REFUSAL, SETUP_ENV_FILE_ANSWERS, SETUP_FRAMEWORK_CHOICES, SETUP_MESSAGE_USAGE, SETUP_LANGUAGES, SETUP_MESSAGE_VENDORS, FALLBACK_PROJECT_NAME, verifyFromDirectory, PROOF_CHECK_USAGE, PROOF_CHECK_REPEAT_LIMIT, UPGRADE_PLAN_USAGE, RUNTIME_URL_USAGE, ENV_LOCAL_REFUSAL, CREDENTIALS_USAGE, CREDENTIALS_STOP_TEXT, selectProjectFromDirectory, MODEL_KEY_SEVERITY, FEATURE_IMPLEMENT_NODE, FEATURE_PROOF_NODE, BUILD_NODE, HELD_BACK_OUTCOME, EXISTING_AGENT_STATES, MODEL_KEY_GUIDANCE, MAX_UNPLACED_DEPENDENCIES, BLOCKER_REPORTS, ISOLATED_HOSTS, LISTED_SKIPPED_PATHS, INTENT_FEATURE_FOLDERS, RUN_ENDINGS, SIGN_IN_PROMPT, SIGN_IN_GATED_PROMPT, PROJECT_SELECTION_PROMPTS, CHILD_PROJECT_SCAN_ENTRIES;
 var init_onboard = __esm({
   async "apps/cli/src/commands/onboard.ts"() {
     "use strict";
@@ -447235,12 +447579,14 @@ var init_onboard = __esm({
       "resume"
     ];
     ONBOARD_FLAG_OWNERS = {
+      about: ["checkpoint"],
       agent: ["proof-check"],
       "agent-framework": ["classify"],
       attempt: ["checkpoint"],
       "base-url": ["setup-answers"],
       continue: ["tripwire"],
       "blocked-by": ["complete"],
+      brief: ["checkpoint"],
       category: ["friction"],
       check: ["upgrade-plan"],
       choice: ["deployment"],
@@ -447288,6 +447634,7 @@ var init_onboard = __esm({
       predicate: ["proof"],
       project: ["start", "setup-answers", "credentials"],
       purpose: ["setup-answers"],
+      result: ["checkpoint"],
       revert: ["upgrade-plan"],
       run: ["start", "restore"],
       "runtime-url": ["credentials"],
@@ -447424,6 +447771,7 @@ round trip has no numbered predicates at all.`;
     ];
     FEATURE_IMPLEMENT_NODE = /^feature\/[^/]+\/implement$/u;
     FEATURE_PROOF_NODE = /^feature\/[^/]+\/proof$/u;
+    BUILD_NODE = "implementation/build-and-validate";
     HELD_BACK_OUTCOME = {
       "setup-answers": "Nothing was recorded.",
       credentials: "Nothing was checked or copied.",
@@ -451000,6 +451348,7 @@ Options:
        copilotkit onboard classify --starting-state <state> --agent-framework <framework> --frontend <frontend> [--model-vendor <vendor> --model-vendor-choice <choice>]
        copilotkit onboard tripwire --continue
        copilotkit onboard checkpoint --phase <slug> [--attempt <n>] [--reason <reasons>]
+                                [--about <question>] [--brief <name> --result <ok|refused|failed>]
        copilotkit onboard proof --step <oss-baseline|round-trip> --outcome <passed|failed|skipped>
                                 [--predicate <1-6>]
        copilotkit onboard complete
@@ -451126,9 +451475,19 @@ otherwise say nothing between one prompt and the next. --phase takes one of:
 welcome-sent, sign-in-settled,
 research-dispatched, surface-probed, research-returned, starter-cloned,
 plan-written, container-surveyed, container-settled, build-validated,
-journey-attempted, repair-attempted, awaiting-developer,
+journey-attempted, repair-attempted, subagent-returned, awaiting-developer,
 awaiting-model-credential, awaiting-plan-approval, delegation-unavailable.
 Pass --attempt <1-9> where the step loops, so a repair cycle can be counted.
+Pass --about <question> with awaiting-developer to name what the run waits on:
+harness-permission, sign-in, setup-answers, stack-choice, project-name,
+which-project, env-file-tracked, local-connection, local-terms,
+existing-folder, environment-fix, uncommitted-file, agent-change,
+restore-files, thread-id, scoped-fix, feature-binding, other.
+subagent-returned records a subagent coming back, and takes both --brief
+<name> and --result <ok|refused|failed>. --brief names the subagent brief:
+inspect-repository, create-plan, implement-and-validate, prove-oss-baseline,
+prove-round-trip. Reading a subagent brief records its dispatch, so there is
+no phase to report for that.
 A refused checkpoint exits zero and prints the closed set. It is called from
 the middle of the longest step of a run, and a non-zero exit there reads as a
 broken build rather than a rejected ping.