copilotkit 4.9.4 → 4.9.24

package/README.md

@@ -32,7 +32,7 @@ node dist/apps/cli/index.js project select
 ```
 
 `project select` selects or creates a hosted Intelligence project and provisions
-its project-scoped `INTELLIGENCE_API_KEY`. Threads-enabled `init` and `create`
+its project-scoped `CPK_INTELLIGENCE_API_KEY`. Threads-enabled `init` and `create`
 scaffolds run the same hosted project selection and API-key provisioning path;
 use the built entrypoint when manually validating those steps too.
 
@@ -86,7 +86,7 @@ that needs the key.
 **Check all four summary fields, not just the exit code.** Key provisioning is
 deliberately non-fatal: if it fails, the selection is still persisted, a warning
 goes to stderr, and the command still exits 0 — leaving a scaffold with no
-`INTELLIGENCE_API_KEY`, whose first run fails with an opaque "Failed to
+`CPK_INTELLIGENCE_API_KEY`, whose first run fails with an opaque "Failed to
 initialize thread". `api_key_provisioned` and `environment_file_written` are
 false in this state.
 Re-running `project select` is a valid recovery.
@@ -145,9 +145,10 @@ copilotkit create --name my-agent --framework langgraph-py
 ```
 
 Every supported framework ships with CopilotKit Intelligence (durable threads,
-persistence, insights), and `init` provisions a free license automatically —
-you sign in with your browser during scaffolding. The `-i`/`--intelligence`
-flag is retained as a deprecated no-op for backward compatibility.
+persistence, insights). Managed `init` selects an Intelligence project and
+writes its project-scoped API key; it does not issue or write a managed license
+token. Local/self-hosted builds retain legacy license setup where required. The
+`-i`/`--intelligence` flag is a deprecated no-op kept for compatibility.
 
 Rather than maintaining the list of framework values here, ask the CLI:
 
@@ -385,17 +386,17 @@ The CLI expects:
 - The .NET SDK for the Microsoft Agent Framework .NET template.
 
 Project creation requires a CopilotKit workspace connection through Ops/Clerk
-(browser sign-in when no session exists). Standard framework templates use that
-connection only to authorize creation; they do not request or write a license
-key. Threads-framework templates additionally issue a CopilotKit license key and
-write it into the generated project.
+(browser sign-in when no session exists). Managed threads-framework templates
+use that connection to select a project and provision
+`CPK_INTELLIGENCE_API_KEY`; they do not request or write a license token.
+Local/self-hosted builds can still issue the legacy license where required.
 
 ## Environment Files
 
 The scaffold step copies `.env.example` to `.env` when a template provides one.
-If the selected starter requires a license, the CLI also ensures
-`COPILOTKIT_LICENSE_TOKEN` is present in `.env`. Standard starters do not receive
-a license token.
+Managed scaffolds write `CPK_INTELLIGENCE_API_KEY` after project selection.
+Local/self-hosted scaffolds still ensure `COPILOTKIT_LICENSE_TOKEN` is present
+when the selected starter requires the legacy license.
 
 During scaffolding, `copilotkit init` interactively prompts for any required LLM vendor API key (`OPENAI_API_KEY` or `GOOGLE_API_KEY`) and writes it into `.env` for you — press Enter to skip and set it manually later.
 
@@ -423,6 +424,19 @@ The Microsoft Agent Framework .NET template uses GitHub Models. Set its C# agent
 
 Do not commit generated `.env` files or personal secrets.
 
+Before writing a credential, `copilotkit license --write` and
+`copilotkit project select` ask git whether it ignores the target `.env`. When it
+does not, they append `.env`, `.env.*` and `!.env.example` to your `.gitignore` as
+one marked block, leaving your existing lines untouched. A `.gitignore` listing
+only `.env` does not cover `.env.local`, so a credential written beside it is
+staged by the next `git add -A`.
+
+Appending a pattern cannot untrack a file git already tracks. In that one case
+neither command writes the credential: `license` prints the `COPILOTKIT_LICENSE_TOKEN`
+line on stdout so an already-issued token is not lost, and `project select` reports
+`api_key_provisioned: false`. Untrack the file, then re-run. Outside a git work tree
+there is nothing to protect and both write as before.
+
 ## Version Control
 
 Outside a repository, `copilotkit init` runs `git init` in the new app and makes

package/cli-build-info.json

@@ -2,20 +2,20 @@
   "schemaVersion": 1,
   "package": {
     "name": "copilotkit",
-    "version": "4.9.4"
+    "version": "4.9.24"
   },
   "intelligence": {
-    "commit": "db031f9bc6f6c3918774aa8e375b6938ad66bb5e"
+    "commit": "2294aa96b17fd0ef36647b1b414064e107472912"
   },
   "copilotKit": {
-    "submittedInput": "f6f2dc4bb62b50d2f09384619f5b9e8fe7edde02",
-    "commit": "f6f2dc4bb62b50d2f09384619f5b9e8fe7edde02"
+    "submittedInput": "2d44d3ff00910e9f3494d5e57aaa7bdd69a82e04",
+    "commit": "2d44d3ff00910e9f3494d5e57aaa7bdd69a82e04"
   },
   "channel": "production",
-  "triggeringActor": "copilotkit-qa-bot[bot]",
+  "triggeringActor": "maxkorp",
   "workflow": {
-    "runId": "33113403059",
-    "runUrl": "https://github.com/CopilotKit/Intelligence/actions/runs/33113403059"
+    "runId": "33517811596",
+    "runUrl": "https://github.com/CopilotKit/Intelligence/actions/runs/33517811596"
   },
   "validationResult": "passed",
   "ag2": {
@@ -24,5 +24,5 @@
     "revision": "main",
     "pinned": false
   },
-  "builtAt": "2026-08-27T20:28:56Z"
+  "builtAt": "2026-09-01T14:12:01Z"
 }