feat(inspector/telemetry): propagate telemetryDisabled from runtime env var through inspector

- Add telemetryDisabled to RuntimeInfo from COPILOTKIT_TELEMETRY_DISABLED/DO_NOT_TRACK env vars
- Mirror through AgentRegistry and expose via CopilotKitCore getter
- Guard track calls, URL param appending, and console disclosure on core.telemetryDisabled
- Move maybeShowDisclosure() to onRuntimeConnectionStatusChanged (fires after core attaches)
- Update docs to replace localStorage toggle description with env var approach
- Add telemetryDisabled test suite to get-runtime-info tests

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: 2 people

docs/snippets/shared/telemetry/anonymous.mdx

@@ -15,7 +15,7 @@ In CopilotRuntime, simply set `COPILOTKIT_TELEMETRY_DISABLED=true`. We also resp
 
 Alternatively, you can directly set the `telemetryDisabled` flag to `true` when configuring your Copilot Runtime endpoint.
 
-In the **Inspector** dev-console, open the **Privacy** tab and toggle off **Send anonymous usage data**. The setting is stored in your browser's localStorage and short-circuits all sends from the inspector.
+For the **Inspector** dev-console, set `COPILOTKIT_TELEMETRY_DISABLED=true` in your project's environment variables. The inspector reads this setting from the runtime at startup and suppresses all anonymous interaction events.
 
 ## How to adjust telemetry sample rate
 
@@ -35,7 +35,7 @@ Every event also carries a `distinct_id` (a UUID v4 generated on first inspector
 
 When the inspector renders a banner CTA link, it appends the same anonymous `distinct_id` to outbound URLs as a `posthog_distinct_id` query parameter. This lets the destination site (typically `copilotkit.ai`) bridge the visit back to the inspector session for funnel correlation, without storing any cookie or identifier from the host page. The URL parameter is suppressed when you opt out.
 
-The inspector telemetry pipeline never sends message content, agent state, prompts, completions, banner markdown text, or any payload you inspect. The opt-out toggle covers all anonymous interaction telemetry, including any future signup attribution.
+The inspector telemetry pipeline never sends message content, agent state, prompts, completions, banner markdown text, or any payload you inspect. Setting `COPILOTKIT_TELEMETRY_DISABLED=true` suppresses all anonymous interaction telemetry from the inspector, including any future signup attribution.
 
 ## Get in touch
 

packages/core/src/core/agent-registry.ts

@@ -69,6 +69,7 @@ export class AgentRegistry {
   private _a2uiEnabled: boolean = false;
   private _openGenerativeUIEnabled: boolean = false;
   private _licenseStatus?: RuntimeLicenseStatus;
+  private _telemetryDisabled: boolean = false;
 
   constructor(private core: CopilotKitCore) {}
 
@@ -119,6 +120,10 @@ export class AgentRegistry {
     return this._licenseStatus;
   }
 
+  get telemetryDisabled(): boolean {
+    return this._telemetryDisabled;
+  }
+
   /**
    * Initialize agents from configuration
    */
@@ -404,6 +409,7 @@ export class AgentRegistry {
       this._openGenerativeUIEnabled =
         runtimeInfoResponse.openGenerativeUIEnabled ?? false;
       this._licenseStatus = runtimeInfoResponse.licenseStatus;
+      this._telemetryDisabled = runtimeInfoResponse.telemetryDisabled ?? false;
 
       await this.notifyRuntimeStatusChanged(
         CopilotKitCoreRuntimeConnectionStatus.Connected,

packages/core/src/core/core.ts

@@ -628,6 +628,10 @@ export class CopilotKitCore {
     return this.agentRegistry.licenseStatus;
   }
 
+  get telemetryDisabled(): boolean {
+    return this.agentRegistry.telemetryDisabled;
+  }
+
   /**
    * Configuration updates
    */

packages/runtime/src/v2/runtime/__tests__/get-runtime-info.test.ts

@@ -1,7 +1,7 @@
 import { handleGetRuntimeInfo } from "../handlers/get-runtime-info";
 import { CopilotRuntime } from "../core/runtime";
 import { TranscriptionService } from "../transcription-service/transcription-service";
-import { describe, it, expect, vi } from "vitest";
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
 import type { AbstractAgent } from "@ag-ui/client";
 
 // Mock transcription service
@@ -35,6 +35,7 @@ describe("handleGetRuntimeInfo", () => {
       mode: "sse",
       a2uiEnabled: false,
       openGenerativeUIEnabled: false,
+      telemetryDisabled: false,
     });
   });
 
@@ -60,6 +61,7 @@ describe("handleGetRuntimeInfo", () => {
       mode: "sse",
       a2uiEnabled: false,
       openGenerativeUIEnabled: false,
+      telemetryDisabled: false,
     });
   });
 
@@ -97,6 +99,7 @@ describe("handleGetRuntimeInfo", () => {
       mode: "sse",
       a2uiEnabled: false,
       openGenerativeUIEnabled: false,
+      telemetryDisabled: false,
     });
   });
 
@@ -250,6 +253,61 @@ describe("handleGetRuntimeInfo", () => {
     warnSpy.mockRestore();
   });
 
+  describe("telemetryDisabled", () => {
+    beforeEach(() => {
+      delete process.env.COPILOTKIT_TELEMETRY_DISABLED;
+      delete process.env.DO_NOT_TRACK;
+    });
+
+    afterEach(() => {
+      delete process.env.COPILOTKIT_TELEMETRY_DISABLED;
+      delete process.env.DO_NOT_TRACK;
+    });
+
+    it("returns telemetryDisabled: false when env var is not set", async () => {
+      const runtime = new CopilotRuntime({ agents: {} });
+      const response = await handleGetRuntimeInfo({
+        runtime,
+        request: mockRequest,
+      });
+      const data = await response.json();
+      expect(data.telemetryDisabled).toBe(false);
+    });
+
+    it("returns telemetryDisabled: true when COPILOTKIT_TELEMETRY_DISABLED=true", async () => {
+      process.env.COPILOTKIT_TELEMETRY_DISABLED = "true";
+      const runtime = new CopilotRuntime({ agents: {} });
+      const response = await handleGetRuntimeInfo({
+        runtime,
+        request: mockRequest,
+      });
+      const data = await response.json();
+      expect(data.telemetryDisabled).toBe(true);
+    });
+
+    it("returns telemetryDisabled: true when COPILOTKIT_TELEMETRY_DISABLED=1", async () => {
+      process.env.COPILOTKIT_TELEMETRY_DISABLED = "1";
+      const runtime = new CopilotRuntime({ agents: {} });
+      const response = await handleGetRuntimeInfo({
+        runtime,
+        request: mockRequest,
+      });
+      const data = await response.json();
+      expect(data.telemetryDisabled).toBe(true);
+    });
+
+    it("returns telemetryDisabled: true when DO_NOT_TRACK=1", async () => {
+      process.env.DO_NOT_TRACK = "1";
+      const runtime = new CopilotRuntime({ agents: {} });
+      const response = await handleGetRuntimeInfo({
+        runtime,
+        request: mockRequest,
+      });
+      const data = await response.json();
+      expect(data.telemetryDisabled).toBe(true);
+    });
+  });
+
   it("should return 500 error when runtime.agents throws an error", async () => {
     const runtime = {
       get agents(): Record<string, AbstractAgent> {

packages/runtime/src/v2/runtime/handlers/get-runtime-info.ts

@@ -1,15 +1,10 @@
 import type { AgentCapabilities } from "@ag-ui/core";
-import {
-  CopilotRuntimeLike,
-  isIntelligenceRuntime,
-  resolveAgents,
-} from "../core/runtime";
-import {
-  AgentDescription,
-  RuntimeInfo,
-  type RuntimeLicenseStatus,
-} from "@copilotkit/shared";
+import type { CopilotRuntimeLike } from "../core/runtime";
+import { isIntelligenceRuntime, resolveAgents } from "../core/runtime";
+import type { AgentDescription, RuntimeInfo } from "@copilotkit/shared";
+import { type RuntimeLicenseStatus } from "@copilotkit/shared";
 import { VERSION } from "../core/runtime";
+import { isTelemetryDisabled } from "../telemetry/telemetry-client";
 
 function resolveLicenseStatus(
   runtime: CopilotRuntimeLike,
@@ -84,6 +79,7 @@ export async function handleGetRuntimeInfo({
       ...(isIntelligenceRuntime(runtime)
         ? { licenseStatus: resolveLicenseStatus(runtime) }
         : {}),
+      telemetryDisabled: isTelemetryDisabled(),
     };
 
     return new Response(JSON.stringify(runtimeInfo), {

packages/shared/src/utils/types.ts

@@ -48,4 +48,5 @@ export interface RuntimeInfo {
   a2uiEnabled?: boolean;
   openGenerativeUIEnabled?: boolean;
   licenseStatus?: RuntimeLicenseStatus;
+  telemetryDisabled?: boolean;
 }

packages/web-inspector/src/index.ts

@@ -2630,6 +2630,9 @@ export class WebInspectorElement extends LitElement {
       onRuntimeConnectionStatusChanged: ({ status }) => {
         this.runtimeStatus = status;
         if (status === "connected") {
+          if (!core.telemetryDisabled) {
+            maybeShowDisclosure();
+          }
           for (const agentId of this._ownedThreadStores.keys()) {
             this.refreshOwnedThreadStore(agentId);
           }
@@ -4188,10 +4191,6 @@ ${argsString}</pre
       return;
     }
 
-    // First-run console disclosure for anonymous interaction telemetry.
-    // No-ops when the user has opted out or has already seen the message.
-    maybeShowDisclosure();
-
     // Ensure the anonymous distinct-ID is set on inspector load (per
     // OSS-96 acceptance criteria), so it's available for cross-domain
     // propagation onto banner-CTA links even before the first event
@@ -5669,31 +5668,30 @@ ${argsString}</pre
   }
 
   private renderSettingsPanel() {
+    const optedOut = this.core?.telemetryDisabled ?? false;
     return html`
       <div class="flex h-full flex-col overflow-hidden">
         <div class="overflow-auto p-4">
-          <div class="mx-auto max-w-2xl space-y-6">
-            <div>
-              <h2 class="text-base font-semibold text-slate-900">Settings</h2>
-            </div>
+          <div class="space-y-3">
+            <h2 class="text-sm font-semibold text-slate-900">Settings</h2>
 
-            <div class="space-y-3">
-              <h3 class="text-sm font-medium text-slate-700">Privacy</h3>
+            <div class="space-y-2">
+              <h3 class="text-sm text-slate-500">Privacy</h3>
               <div class="rounded-lg border border-slate-200 bg-white p-4 space-y-3">
-                <p class="text-sm text-gray-600">
-                  CopilotKit collects anonymous interaction events from the
-                  inspector (banner views, clicks, tab navigation) so we know
-                  which features people use. We never collect message content,
-                  agent state, prompts, completions, or any payload you inspect.
+                <p class="text-sm text-gray-600 flex items-start gap-2">
+                  <span>${optedOut ? "❌" : "✅"}</span>
+                  <span>
+                    ${optedOut
+                      ? "You have disabled anonymous interaction data collection."
+                      : "CopilotKit is currently collecting anonymous interaction data from the inspector so we know which features people use. We never collect message content, agent state, prompts, or completions."}
+                  </span>
                 </p>
                 <a
                   class="inline-flex items-center gap-1 text-sm text-slate-700 underline hover:text-slate-900"
                   href=${TELEMETRY_DOCS_URL}
                   target="_blank"
                   rel="noopener"
-                >
-                  I want to opt out — show me how →
-                </a>
+                >Learn more →</a>
               </div>
             </div>
           </div>
@@ -5705,6 +5703,7 @@ ${argsString}</pre
   // Fires `banner_clicked` at most once per `${bannerId}:${cta}` per mount so
   // copy-button retries and accidental multi-clicks don't inflate funnel counts.
   private trackBannerClickedOnce(opts: { cta: "body" | "dismiss" }): void {
+    if (this.core?.telemetryDisabled) return;
     const id = this.announcementTimestamp;
     if (!id) return;
     const key = `${id}:${opts.cta}`;
@@ -6484,7 +6483,7 @@ ${prettyEvent}</pre
   }
 
   private handleMenuSelect(key: MenuKey): void {
-    if (!this.menuItems.some((item) => item.key === key)) {
+    if (key !== "settings" && !this.menuItems.some((item) => item.key === key)) {
       return;
     }
 
@@ -6523,7 +6522,7 @@ ${prettyEvent}</pre
     }
 
     if (key === "threads") {
-      if (this.selectedMenu !== "threads") {
+      if (this.selectedMenu !== "threads" && !this.core?.telemetryDisabled) {
         trackThreadsTabClicked();
       }
       this.autoSelectLatestThread();
@@ -7499,10 +7498,12 @@ ${prettyEvent}</pre
         !this.viewedBannerTimestamps.has(timestamp)
       ) {
         this.viewedBannerTimestamps.add(timestamp);
-        trackBannerViewed({
-          banner_id: timestamp,
-          cta_label: ctaLabel ?? undefined,
-        });
+        if (!this.core?.telemetryDisabled) {
+          trackBannerViewed({
+            banner_id: timestamp,
+            cta_label: ctaLabel ?? undefined,
+          });
+        }
       }
 
       this.requestUpdate();
@@ -7617,7 +7618,7 @@ ${prettyEvent}</pre
       // close the banner_viewed → banner_clicked → signup_attributed
       // funnel. Returns null when the user has opted out, so opt-out
       // suppresses cross-domain ID leaks too.
-      if (!url.searchParams.has("posthog_distinct_id")) {
+      if (!url.searchParams.has("posthog_distinct_id") && !this.core?.telemetryDisabled) {
         const distinctId = getTelemetryDistinctIdForUrl();
         if (distinctId) {
           url.searchParams.append("posthog_distinct_id", distinctId);