copilotkit 4.8.1 → 4.8.3

package/README.md

@@ -60,6 +60,16 @@ commands. It stores the local CLI session used by `whoami`, `license`, and the
 `init`/`create` workspace connection; it does not scaffold a project or issue a
 license key by itself.
 
+For a coding agent that needs an agent-readable sign-in flow, use:
+
+```bash
+copilotkit login --json
+```
+
+The command prints JSON lines for the sign-in URL, the action to take, and the
+final result. It does not open a browser. A failed sign-in prints one final
+failure object and exits nonzero.
+
 The onboarding commands are:
 
 - `copilotkit init`
@@ -134,6 +144,12 @@ available. Where the flow needs you to do something in a provider console it
 stops and tells you what, why, which variables to set, and the exact command to
 resume with. A stop is a normal outcome and exits 0.
 
+At an interactive terminal, `channels add support --adapter teams` sets up the
+Microsoft app automatically when it finds no existing credential input. Existing
+Teams credentials in `.env` or the process environment keep the by-hand attach
+path. Pass `--no-provision` to choose that path yourself. Non-interactive runs
+stay on the by-hand path unless they pass `--provision`.
+
 No flag accepts a credential value. Credentials are read from your project's
 `.env`, from a named environment variable, or from a JSON document on stdin; at a
 terminal the CLI offers a masked prompt instead.
@@ -210,8 +226,20 @@ copilotkit skills install --list
 copilotkit skills onboard
 copilotkit skills onboard --no-clipboard
 copilotkit skills onboard --channels
+# Run `copilotkit project select` in this directory first.
+copilotkit skills download <learning-container-id> --output ./learned-skills
 ```
 
+When the `learning.platform-v1` rollout flag is on, `copilotkit skills download`
+signs in through the existing CLI session, reads the project selected in the
+current directory, fetches that container's immutable ZIP through a
+project-scoped app-api route, checks its SHA-256 ETag when present, and extracts
+each skill directory into the new `--output` path.
+It stops if the output path already exists. A malformed archive, unsafe path,
+symbolic link, collision, or partial write leaves no output directory behind.
+The CLI rejects downloads over 20 MiB and bundles with more than 1,000 files,
+a file over 256 KiB, or more than 16 MiB of extracted content.
+
 `--channels` hands over the Slack Channel setup prompt instead of the generic
 add-CopilotKit-to-my-app prompt. It is the same prompt
 `copilotkit channels setup` prints; only the prompt differs, and the install
@@ -365,12 +393,34 @@ revalidate the live Clerk organization before using local auth as needed. If a
 workspace or organization check fails because the cached session is stale, the
 CLI may clear local auth and rerun browser login before continuing.
 
+### A command, subcommand, or flag that should exist is rejected
+
+`npx` keys its cache on the spec string, so `copilotkit@latest` can keep serving
+a build it installed while `latest` was an older version. Input that ships in the
+published CLI then looks unshipped. Sandboxed environments with a prepopulated
+npm cache, and a global `copilotkit` earlier on `PATH`, produce the same symptom.
+
+Every rejection path — unknown command, unknown subcommand, and unknown option —
+names the version that actually ran. Read it before concluding something was
+never released, and compare it against the registry:
+
+```bash
+npm view copilotkit version          # what is published
+npx --yes copilotkit@<version> ...   # pin it explicitly; bypasses the cached spec
+rm -rf ~/.npm/_npx                   # if the pin is not enough
+```
+
+`copilotkit version` reports the same version alongside the build and commit.
+Adding `@latest` does not force a re-resolve; only an exact-version spec or a
+cache clear does.
+
 ## Telemetry
 
-The CLI collects anonymous usage data (command names, success/failure, timing —
-no project contents, no PII) to help improve the product. Collection is enabled
-by default; the first interactive run prints a one-time notice explaining what
-is collected and how to opt out.
+The CLI collects usage data such as command names, results, and timing. While
+you are signed in, the data is linked to your CopilotKit account. The onboarding
+feedback command can also send up to 2,048 UTF-8 bytes of text. Collection is
+enabled by default; the first interactive run prints a one-time notice that
+explains the data and how to opt out.
 
 Manage the preference at any time:
 

package/cli-build-info.json

@@ -2,20 +2,20 @@
   "schemaVersion": 1,
   "package": {
     "name": "copilotkit",
-    "version": "4.8.1"
+    "version": "4.8.3"
   },
   "intelligence": {
-    "commit": "7e4dbf17af5094cde256eeaecdbef1869ebd13e4"
+    "commit": "a000695b07fd11c83d6a82d51079f839a876be66"
   },
   "copilotKit": {
-    "submittedInput": "7e502dd4a452",
-    "commit": "7e502dd4a452feee7d26c6355fd262948f8c25e6"
+    "submittedInput": "e0a2f00cca326c76739217e8ca40902e609539a4",
+    "commit": "e0a2f00cca326c76739217e8ca40902e609539a4"
   },
   "channel": "production",
-  "triggeringActor": "BenTaylorDev",
+  "triggeringActor": "MikeRyanDev",
   "workflow": {
-    "runId": "31032635990",
-    "runUrl": "https://github.com/CopilotKit/Intelligence/actions/runs/31032635990"
+    "runId": "32159069979",
+    "runUrl": "https://github.com/CopilotKit/Intelligence/actions/runs/32159069979"
   },
   "validationResult": "passed",
   "ag2": {
@@ -24,5 +24,5 @@
     "revision": "main",
     "pinned": false
   },
-  "builtAt": "2026-08-05T18:01:39Z"
+  "builtAt": "2026-08-18T16:14:50Z"
 }