@github/copilot-sdk 1.0.29-preview.0 → 1.0.29-preview.10

package/dist/session.js

@@ -157,6 +157,11 @@ class WorkflowProgressBuffer {
     if (this.closed) {
       throw new Error("Cannot log after the workflow run has settled");
     }
+    if (typeof text !== "string") {
+      throw new TypeError(
+        `${kind}() expects a string; got ${text === null ? "null" : typeof text}.`
+      );
+    }
     this.pending.push({ seq: this.nextSeq++, kind, text });
     this.scheduleFlush();
   }
@@ -284,6 +289,7 @@ class CopilotSession {
   /** Settles once every earlier `setTools` call has finished. */
   setToolsQueue = Promise.resolve();
   pendingExternalTools = /* @__PURE__ */ new Map();
+  pendingSessionCreations = /* @__PURE__ */ new Set();
   canvases = /* @__PURE__ */ new Map();
   bearerTokenProviders = /* @__PURE__ */ new Map();
   commandHandlers = /* @__PURE__ */ new Map();
@@ -296,6 +302,7 @@ class CopilotSession {
   exitPlanModeHandler;
   autoModeSwitchHandler;
   skillProvider;
+  sessionCreationHandler;
   hooks;
   transformCallbacks;
   _rpc = null;
@@ -883,6 +890,10 @@ class CopilotSession {
       controller.abort();
     }
     this.pendingExternalTools.clear();
+    for (const controller of this.pendingSessionCreations) {
+      controller.abort();
+    }
+    this.pendingSessionCreations.clear();
     this.eventHandlers.clear();
     this.typedEventHandlers.clear();
     this.toolHandlers.clear();
@@ -893,6 +904,7 @@ class CopilotSession {
     this.exitPlanModeHandler = void 0;
     this.autoModeSwitchHandler = void 0;
     this.skillProvider = void 0;
+    this.sessionCreationHandler = void 0;
     this.hooks = void 0;
     this.traceContextProvider = void 0;
     this.bearerTokenProviders.clear();
@@ -1152,6 +1164,13 @@ class CopilotSession {
       } else if (typeof rawResult === "string") {
         result = rawResult;
       } else if (isToolResultObject(rawResult)) {
+        try {
+          JSON.stringify(rawResult.toolTelemetry);
+        } catch (error) {
+          const message = error instanceof Error ? error.message : String(error);
+          throw new Error(`failed to serialize tool telemetry: ${message}`);
+        }
+        JSON.stringify(rawResult);
         result = rawResult;
       } else {
         result = JSON.stringify(rawResult);
@@ -1164,7 +1183,10 @@ class CopilotSession {
       if (!this._claimExternalTool(requestId, controller)) {
         return;
       }
-      const message = error instanceof Error ? error.message : String(error);
+      let message = error instanceof Error ? error.message : String(error);
+      if (!message) {
+        message = error instanceof Error && error.name || "Error";
+      }
       try {
         await this.rpc.tools.handlePendingToolCall({ requestId, error: message });
       } catch (rpcError) {
@@ -1562,6 +1584,7 @@ class CopilotSession {
           assertWorkflowResult(result);
           return { result };
         } finally {
+          controller.abort(new DOMException("Workflow run has settled", "AbortError"));
           try {
             await progress.close();
           } finally {
@@ -1856,6 +1879,41 @@ class CopilotSession {
     this.assertConnected();
     this.skillProvider = provider;
   }
+  /**
+   * Registers the host's creation callback without enabling the tool group.
+   * Enable it separately with `session.rpc.management.configure({ enabled: true })`.
+   */
+  async setSessionCreationHandler(handler) {
+    this.assertConnected();
+    const previous = this.sessionCreationHandler;
+    this.sessionCreationHandler = handler;
+    try {
+      return await this.rpc.management.configure({ hasCreateHandler: handler !== void 0 });
+    } catch (error) {
+      if (this.sessionCreationHandler === handler) this.sessionCreationHandler = previous;
+      throw error;
+    }
+  }
+  /** @internal */
+  async _handleSessionManagementCreate(request, token) {
+    this.assertConnected();
+    const handler = this.sessionCreationHandler;
+    if (!handler || request.parentSessionId !== this.sessionId || request.sessionId !== this.sessionId) {
+      throw new Error("Session creation handler is unavailable");
+    }
+    const controller = new AbortController();
+    this.pendingSessionCreations.add(controller);
+    const subscription = token.onCancellationRequested(() => controller.abort());
+    if (token.isCancellationRequested) controller.abort();
+    try {
+      return await handler(request, { signal: controller.signal });
+    } catch {
+      throw new Error("Session creation callback failed");
+    } finally {
+      subscription.dispose();
+      this.pendingSessionCreations.delete(controller);
+    }
+  }
   /**
    * Handles a `skillProvider.list` request from the runtime.
    *

package/dist/types.d.ts

@@ -9,13 +9,23 @@ export type { InstallationConfirmationHandler } from "./installationConfirmation
 import type { AgentModelPolicy, AttachmentExtensionContext as GeneratedExtensionContextAttachment, AutoTier, ModelProviderRef, PermissionRequest as GeneratedPermissionRequest, PermissionRequestedData as GeneratedPermissionRequestedData, PermissionRequestedEvent as GeneratedPermissionRequestedEvent, ReasoningSummary, SessionLimitsConfig, SessionEvent as GeneratedSessionEvent } from "./generated/session-events.js";
 import type { CopilotSession } from "./session.js";
 import type { JsonValue } from "./workflow.js";
-import type { ExtensionLaunchProviderHandler as GeneratedExtensionLaunchProvider, AutopilotOptions, GitHubTokenAcquireRequest, GitHubTokenAcquireResult, GitHubTelemetryNotification, HostDiagnostics, ModelBillingTokenPrices, DiagnosticsConfiguration, OpenCanvasInstance, ProtocolExternalToolNamespace, CurrentToolMetadata, KerberosAuthAcquireRequest, KerberosAuthMode, KerberosAuthScope, SandboxConfig } from "./generated/rpc.js";
+import type { ExtensionLaunchProviderHandler as GeneratedExtensionLaunchProvider, AutopilotOptions, GitHubTokenAcquireRequest, GitHubTokenAcquireResult, GitHubTelemetryNotification, HostDiagnostics, ModelBillingTokenPrices, DiagnosticsConfiguration, OpenCanvasInstance, ProtocolExternalToolNamespace, CurrentToolMetadata, KerberosAuthAcquireRequest, KerberosAuthMode, KerberosAuthScope, SandboxConfig, SessionManagementCreateHostRequest, SessionManagementCreateResult } from "./generated/rpc.js";
 import type { ToolSet } from "./toolSet.js";
 export type { KerberosAuthAcquireRequest, KerberosAuthMode, KerberosAuthScope, } from "./generated/rpc.js";
 export type { RemoteSessionMode } from "./generated/rpc.js";
 export type { AutopilotOptions } from "./generated/rpc.js";
 export type { CurrentToolMetadata } from "./generated/rpc.js";
 export type { SandboxConfig, SandboxConfigSource } from "./generated/rpc.js";
+export type { ManagedSessionInfo, SessionManagementCloseRequest, SessionManagementCloseResult, SessionManagementConfigureRequest, SessionManagementCreateHostRequest, SessionManagementCreateRequest, SessionManagementCreateResult, SessionManagementListRequest, SessionManagementListResult, SessionManagementMessageRequest, SessionManagementMessageResult, SessionManagementPolicy, SessionManagementScope, SessionManagementToolOverrides, } from "./generated/rpc.js";
+/**
+ * Creates and supervises a separate session for this session's management tools.
+ * Use newSessionId as the child's exact identity and apply the requested launch
+ * options and permission ceiling. Route approvals independently, retain the new
+ * session, and dispose it with the host. Do not copy the parent's conversation.
+ */
+export type SessionCreationHandler = (request: SessionManagementCreateHostRequest, options: {
+    signal: AbortSignal;
+}) => SessionManagementCreateResult | Promise<SessionManagementCreateResult>;
 export type { AuthIdentityMetadata, AuthInfoType, ConnectorAccountRequest, ConnectorAvailability, ConnectorCapabilities, ConnectorCatalogEntry, ConnectorCatalogResult, ConnectorCatalogStatus, ConnectorConnectRequest, ConnectorConnectResult, ConnectorContinueRequest, ConnectorDisconnectResult, ConnectorMcpStatus, ConnectorReconcileRequest, ConnectorRuntimeStatus, ConnectorSessionAccount, ConnectorSessionAccountResult, ConnectorStatus, ExtensionLaunchProfile, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, HostDiagnostics, HostErrorReportingStatus, InstallationConfirmationRequest, InstallationConfirmationResponse, InstallationDecision, InstallationReview, McpInstallationReview, } from "./generated/rpc.js";
 /**
  * Arguments passed to a session's {@link GitHubTokenProvider}.
@@ -132,14 +142,10 @@ export interface StdioRuntimeConnection extends ChildProcessRuntimeConnection {
  * {@link RuntimeConnection.forInProcess}.
  *
  * @experimental The in-process (FFI) transport is experimental and its behavior may
- * change. Per-client options that are lowered to environment variables — including
- * {@link CopilotClientOptions.env}, {@link CopilotClientOptions.telemetry},
- * {@link CopilotClientOptions.gitHubToken}, and
- * {@link CopilotClientOptions.baseDirectory} — are **not** honored with this
- * transport, because the native runtime loads into the shared host process and its
- * worker inherits that process's ambient environment. To configure the in-process
- * runtime, set the corresponding environment variables on the host process before
- * constructing the client. See https://github.com/github/copilot-sdk/issues/1934.
+ * change. Typed authentication and {@link CopilotClientOptions.baseDirectory}
+ * are scoped to this host. Client-level `env`, `workingDirectory` and
+ * `telemetry` are unsupported; set working directories
+ * on individual sessions.
  */
 export interface InProcessRuntimeConnection {
     readonly kind: "inprocess";
@@ -218,11 +224,9 @@ export declare const RuntimeConnection: {
     /**
      * Host the runtime in-process over the native runtime library's C ABI (FFI).
      *
-     * @experimental Per-client options lowered to environment variables (`env`,
-     * `telemetry`, `gitHubToken`, `baseDirectory`) are **not** honored in-process;
-     * the worker inherits the host process's ambient environment. Set the
-     * corresponding environment variables on the host process instead. See
-     * https://github.com/github/copilot-sdk/issues/1934.
+     * @experimental Runtime configuration from `gitHubToken` and
+     * `baseDirectory` is scoped to this host, not the process environment.
+     * Client-level `env`, `telemetry` and `workingDirectory` are unsupported.
      */
     readonly forInProcess: (options?: Pick<InProcessRuntimeConnection, "runOnUiThread">) => InProcessRuntimeConnection;
 };
@@ -317,6 +321,7 @@ export interface CopilotClientOptions {
     /**
      * Base directory for Copilot data (session state, config, etc.).
      * Sets the COPILOT_HOME environment variable on the spawned runtime.
+     * In-process hosts also keep their runtime cache in this directory's `cache` subdirectory.
      * When not set, the runtime defaults to ~/.copilot.
      * Ignored when connecting to an existing runtime via {@link RuntimeConnection.forUri}.
      */
@@ -352,6 +357,7 @@ export interface CopilotClientOptions {
     logLevel?: "none" | "error" | "warning" | "info" | "debug" | "all";
     /**
      * Environment variables to pass to the runtime process. If not set, inherits process.env.
+     * Unsupported with {@link RuntimeConnection.forInProcess}; use typed client/session options.
      */
     env?: Record<string, string | undefined>;
     /**
@@ -363,7 +369,8 @@ export interface CopilotClientOptions {
     /**
      * Whether to use the logged-in user for authentication.
      * When true, the runtime will attempt to use stored OAuth tokens or gh CLI auth.
-     * When false, only explicit tokens (gitHubToken or environment variables) are used.
+     * When false, only explicit tokens such as gitHubToken are used; environment variable
+     * tokens (COPILOT_GITHUB_TOKEN, GH_TOKEN, GITHUB_TOKEN) are ignored.
      * @default true (but defaults to false when gitHubToken is provided)
      */
     useLoggedInUser?: boolean;
@@ -1181,6 +1188,12 @@ export interface UserInputRequest {
      * @default true
      */
     allowFreeform?: boolean;
+    /**
+     * Runtime ID of the pending `user_input.requested` request. Pass it as `requestId`
+     * to answer this exact request through the session's UI RPCs. Absent when the
+     * runtime predates this field.
+     */
+    requestId?: string;
 }
 /**
  * Response to a user input request
@@ -1213,6 +1226,12 @@ export interface ExitPlanModeRequest {
     actions: string[];
     /** The action recommended by the runtime. */
     recommendedAction: string;
+    /**
+     * Runtime ID of the pending `exit_plan_mode.requested` request. Pass it as
+     * `requestId` to answer this exact request through the session's UI RPCs. Absent
+     * when the runtime predates this field.
+     */
+    requestId?: string;
 }
 /**
  * Response to an exit-plan-mode request.
@@ -1854,9 +1873,10 @@ export interface LargeToolOutputConfig {
     outputDirectory?: string;
 }
 /**
- * Valid reasoning effort levels for models that support it.
+ * Model-defined reasoning effort for models that support it.
+ * Use client.listModels() to discover supported values; BYOK providers can define additional levels.
  */
-export type ReasoningEffort = "low" | "medium" | "high" | "xhigh" | "max";
+export type ReasoningEffort = string;
 /**
  * Context window tier for the session. "long_context" pins the session to the
  * long-context tier when the selected model supports it.
@@ -3261,6 +3281,9 @@ export interface MessageOptions {
      * sendAndWait still returns an assistant message event. For a typed result, pass a
      * Zod-compatible schema as sendAndWait's second argument instead.
      * Streaming events remain text and may include intermediate messages.
+     * Sent with strict: true and not rewritten, so provider schema restrictions apply: strict
+     * OpenAI output needs an object root with every property required (use Zod's .nullable()
+     * rather than .optional()).
      * Use rpc.send's responseFormat for provider-specific name, description and strict options.
      */
     responseSchema?: ZodSchema | Record<string, unknown>;
@@ -3359,6 +3382,18 @@ export interface SessionMetadata {
     isRemote: boolean;
     /** Working directory context (working directory, git info) from session creation */
     context?: SessionContext;
+    /**
+     * Name of the client that created the session (for example `github/cli`). Omitted when
+     * unknown.
+     */
+    clientName?: string;
+    /**
+     * Name of the client that most recently ran the session: the client that created it, or a
+     * client that resumed it and then ran it. Resuming a session only to observe it does not
+     * change this. Omitted when unknown, such as for sessions persisted before this field
+     * existed.
+     */
+    lastClientName?: string;
 }
 /**
  * Response from status.get

package/dist/types.js

@@ -38,11 +38,9 @@ const RuntimeConnection = {
   /**
    * Host the runtime in-process over the native runtime library's C ABI (FFI).
    *
-   * @experimental Per-client options lowered to environment variables (`env`,
-   * `telemetry`, `gitHubToken`, `baseDirectory`) are **not** honored in-process;
-   * the worker inherits the host process's ambient environment. Set the
-   * corresponding environment variables on the host process instead. See
-   * https://github.com/github/copilot-sdk/issues/1934.
+   * @experimental Runtime configuration from `gitHubToken` and
+   * `baseDirectory` is scoped to this host, not the process environment.
+   * Client-level `env`, `telemetry` and `workingDirectory` are unsupported.
    */
   forInProcess(options = {}) {
     return { kind: "inprocess", ...options };

package/docs/agent-author.md

@@ -95,7 +95,7 @@ tools: [
             // Return value: string or ToolResultObject
             //   string → treated as success
             //   { textResultForLlm, resultType } → structured result
-            //     resultType: "success" | "failure" | "rejected" | "denied"
+            //     resultType: "success" | "failure" | "rejected" | "denied" | "timeout"
             return `Result: ${args.arg1}`;
         },
     },
@@ -105,7 +105,7 @@ tools: [
 **Constraints:**
 
 - Tool names must be unique across ALL loaded extensions. Collisions cause the second extension to fail to load.
-- Handler must return a string or `{ textResultForLlm: string, resultType?: string }`.
+- Handler must return a string or `{ textResultForLlm: string, resultType: "success" | "failure" | "rejected" | "denied" | "timeout" }`. `resultType` is required: an object without a recognized `resultType` is not a structured result, and the model receives it serialized as JSON text.
 - Handler receives `(args, invocation)` — the second argument has `sessionId`, `toolCallId`, `toolName`.
 - Use `session.log()` to surface messages to the user. Don't use `console.log()` (stdout is reserved for JSON-RPC).
 
@@ -116,18 +116,22 @@ tools: [
 ```js
 hooks: {
     onUserPromptSubmitted: async (input, invocation) => { ... },
+    onUserPromptTransformed: async (input, invocation) => { ... },
     onPreToolUse: async (input, invocation) => { ... },
+    onPreMcpToolCall: async (input, invocation) => { ... },
     onPostToolUse: async (input, invocation) => { ... },
     onPostToolUseFailure: async (input, invocation) => { ... },
     onSessionStart: async (input, invocation) => { ... },
     onSessionEnd: async (input, invocation) => { ... },
     onErrorOccurred: async (input, invocation) => { ... },
+    onAgentStop: async (input, invocation) => { ... },
     onSubagentStart: async (input, invocation) => { ... },
     onSubagentStop: async (input, invocation) => { ... },
 }
 ```
 
 All hook inputs include `sessionId`, `timestamp` (`Date`) and `workingDirectory`.
+Tool hooks also receive `toolCallId` when the runtime supplies one; correlate a call's hooks with `(input.sessionId, input.toolCallId)`.
 All handlers receive `invocation: { sessionId: string }` as the second argument.
 All handlers may return `void`/`undefined` (no-op) or an output object.
 
@@ -143,9 +147,23 @@ All handlers may return `void`/`undefined` (no-op) or an output object.
 | `decision` | `"block"` | Refuses the prompt: no model turn runs and no user message is recorded |
 | `reason` | `string` | Why the prompt was blocked, carried by the ephemeral `session.warning` (`warningType: "policy_blocked"`) |
 
+### onUserPromptTransformed
+
+Fires after the runtime adds generated context to the submitted prompt, before
+the result is stored in session history or sent to the model. `prompt` is the
+prompt after `onUserPromptSubmitted`; `transformedPrompt` also carries the
+runtime-generated context.
+
+**Input:** `{ prompt: string, transformedPrompt: string, timestamp, workingDirectory }`
+
+**Output (all fields optional):**
+| Field | Type | Effect |
+|-------|------|--------|
+| `modifiedTransformedPrompt` | `string` | Replaces the content stored in session history and sent to the model |
+
 ### onPreToolUse
 
-**Input:** `{ toolName: string, toolArgs: unknown, timestamp, workingDirectory }`
+**Input:** `{ toolCallId?: string, toolName: string, toolArgs: unknown, timestamp, workingDirectory }`
 
 **Output (all fields optional):**
 | Field | Type | Effect |
@@ -155,9 +173,22 @@ All handlers may return `void`/`undefined` (no-op) or an output object.
 | `modifiedArgs` | `unknown` | Replaces the tool arguments |
 | `additionalContext` | `string` | Injected into the conversation |
 
+### onPreMcpToolCall
+
+Fires before a tool call is sent to an MCP server. It controls only the `_meta`
+object sent with the request; to allow, deny or change the call itself, use
+`onPreToolUse`.
+
+**Input:** `{ toolCallId?: string, serverName: string, toolName: string, arguments: unknown, _meta?: Record<string, unknown>, timestamp, workingDirectory }`
+
+**Output (all fields optional):**
+| Field | Type | Effect |
+|-------|------|--------|
+| `metaToUse` | `Record<string, unknown> \| null` | An object becomes the request's `_meta`; `null` omits it; leaving it out keeps the current `_meta` |
+
 ### onPostToolUse
 
-**Input:** `{ toolName: string, toolArgs: unknown, toolResult: ToolResultObject, timestamp, workingDirectory }`
+**Input:** `{ toolCallId?: string, toolName: string, toolArgs: unknown, toolResult: ToolResultObject, timestamp, workingDirectory }`
 
 Fires only when the tool returned a successful result. To observe non-success
 outcomes, register `onPostToolUseFailure` as well.
@@ -170,7 +201,7 @@ outcomes, register `onPostToolUseFailure` as well.
 
 ### onPostToolUseFailure
 
-**Input:** `{ toolName: string, toolArgs: unknown, error: string, timestamp, workingDirectory }`
+**Input:** `{ toolCallId?: string, toolName: string, toolArgs: unknown, error: string, timestamp, workingDirectory }`
 
 Fires after a tool execution whose result was `"failure"`. `onPostToolUse`
 does **not** fire for these outcomes, so register this handler to observe or
@@ -218,6 +249,23 @@ fire it.
 | `retryCount` | `number` | Max retries (when errorHandling is "retry") |
 | `userNotification` | `string` | Message shown to the user |
 
+### onAgentStop
+
+Fires when the top-level agent reaches a natural terminal stop: it went idle
+without pending work and was not aborted. Sub-agents fire `onSubagentStop`
+instead.
+
+**Input:** `{ stopReason?: string, transcriptPath?: string, stopHookActive?: boolean, timestamp, workingDirectory }`
+
+`stopHookActive` is `true` when this stop follows an earlier `"block"` from this
+hook; check it to avoid blocking indefinitely. The runtime also caps
+consecutive blocks.
+
+**Output (optional):**
+| Field | Type | Effect |
+|-------|------|--------|
+| `decision` and `reason` | `"block"` and `string` | Keep the agent running; `reason` is enqueued as its next user message |
+
 ### onSubagentStart
 
 Fires before a sub-agent's first turn. The input's `sessionId` and the

package/docs/examples.md

@@ -152,15 +152,20 @@ Hooks intercept and modify behavior at key lifecycle points. Register them in th
 
 ### Available Hooks
 
-| Hook                    | Fires When                               | Can Modify                                  |
-| ----------------------- | ---------------------------------------- | ------------------------------------------- |
-| `onUserPromptSubmitted` | User sends a message                     | The prompt text, add context                |
-| `onPreToolUse`          | Before a tool executes                   | Tool args, permission decision, add context |
-| `onPostToolUse`         | After a tool executes successfully       | Tool result, add context                    |
-| `onPostToolUseFailure`  | After a tool execution returns a failure | Add hidden guidance to the model            |
-| `onSessionStart`        | Session starts or resumes                | Add context                                 |
-| `onSessionEnd`          | Session ends                             | Cleanup actions, summary                    |
-| `onErrorOccurred`       | An error occurs                          | Error handling strategy (retry/skip/abort)  |
+| Hook                      | Fires When                                   | Can Modify                                  |
+| ------------------------- | -------------------------------------------- | ------------------------------------------- |
+| `onUserPromptSubmitted`   | User sends a message                         | The prompt text, add context                |
+| `onUserPromptTransformed` | Runtime has transformed the submitted prompt | The transformed prompt                      |
+| `onPreToolUse`            | Before a tool executes                       | Tool args, permission decision, add context |
+| `onPreMcpToolCall`        | Before an MCP tool call is sent              | The request's `_meta`                       |
+| `onPostToolUse`           | After a tool executes successfully           | Tool result, add context                    |
+| `onPostToolUseFailure`    | After a tool execution returns a failure     | Add hidden guidance to the model            |
+| `onSessionStart`          | Session starts or resumes                    | Add context                                 |
+| `onSessionEnd`            | Session ends                                 | Cleanup actions, summary                    |
+| `onErrorOccurred`         | An error occurs                              | Error handling strategy (retry/skip/abort)  |
+| `onAgentStop`             | Top-level agent naturally stops              | Block the stop and request another turn     |
+| `onSubagentStart`         | Before a sub-agent's first turn              | Add context to its prompt                   |
+| `onSubagentStop`          | After a sub-agent completes a turn           | Request another turn, replace its response  |
 
 All hook inputs include `timestamp` (`Date`) and `workingDirectory`.
 
@@ -198,7 +203,7 @@ Use `session.send()` to programmatically inject a new user message.
 ```js
 hooks: {
     onUserPromptSubmitted: async (input) => {
-        if (/\\burgent\\b/i.test(input.prompt)) {
+        if (/\burgent\b/i.test(input.prompt)) {
             // Fire-and-forget a follow-up message
             setTimeout(() => session.send({ prompt: "Please prioritize this." }), 0);
         }
@@ -217,7 +222,7 @@ hooks: {
     onPreToolUse: async (input) => {
         if (input.toolName === "bash") {
             const cmd = String(input.toolArgs?.command || "");
-            if (/rm\\s+-rf/i.test(cmd) || /Remove-Item\\s+.*-Recurse/i.test(cmd)) {
+            if (/rm\s+-rf/i.test(cmd) || /Remove-Item\s+.*-Recurse/i.test(cmd)) {
                 return {
                     permissionDecision: "deny",
                     permissionDecisionReason: "Destructive commands are not allowed.",
@@ -394,7 +399,7 @@ function copyToClipboard(text) {
 const session = await joinSession({
     hooks: {
         onUserPromptSubmitted: async (input) => {
-            if (/\\bcopy\\b/i.test(input.prompt)) {
+            if (/\bcopy\b/i.test(input.prompt)) {
                 copyNextResponse = true;
             }
         },
@@ -513,7 +518,7 @@ const debounce = new Map();
 
 watch(cwd, { recursive: true }, (eventType, filename) => {
     if (!filename || eventType !== "change") return;
-    if (filename.split(/[\\\\\\/]/).some((p) => IGNORE.has(p))) return;
+    if (filename.split(/[\\/]/).some((p) => IGNORE.has(p))) return;
 
     if (debounce.has(filename)) clearTimeout(debounce.get(filename));
     debounce.set(filename, setTimeout(() => {
@@ -524,7 +529,7 @@ watch(cwd, { recursive: true }, (eventType, filename) => {
         try { if (!statSync(fullPath).isFile()) return; } catch { return; }
         const relPath = relative(cwd, fullPath);
         session.send({
-            prompt: `The user edited \\`${relPath}\\`.`,
+            prompt: `The user edited \`${relPath}\`.`,
             attachments: [{ type: "file", path: fullPath }],
         });
     }, 500));
@@ -619,7 +624,7 @@ function openInEditor(filePath) {
 const session = await joinSession({
     hooks: {
         onUserPromptSubmitted: async (input) => {
-            if (/\\bcopy this\\b/i.test(input.prompt)) {
+            if (/\bcopy this\b/i.test(input.prompt)) {
                 copyNextResponse = true;
             }
             return {
@@ -629,7 +634,7 @@ const session = await joinSession({
         onPreToolUse: async (input) => {
             if (input.toolName === "bash") {
                 const cmd = String(input.toolArgs?.command || "");
-                if (/rm\\s+-rf\\s+\//i.test(cmd) || /Remove-Item\\s+.*-Recurse/i.test(cmd)) {
+                if (/rm\s+-rf\s+\//i.test(cmd) || /Remove-Item\s+.*-Recurse/i.test(cmd)) {
                     return {
                         permissionDecision: "deny",
                         permissionDecisionReason: "Destructive commands are not allowed.",

package/docs/workflows.md

@@ -225,7 +225,6 @@ Observation does not restore execution eligibility. Starting, resuming, pausing,
 ```ts
 const runs = await session.workflow.listRuns();
 const runsPage = await session.workflow.listRuns({
-    afterSeq,
     beforeSeq,
     limit,
 });
@@ -233,15 +232,15 @@ const detail = await session.workflow.getRunDetail(runId);
 const progressPage = await session.workflow.getRunProgress(runId, {
     phaseId,
     afterSeq,
-    beforeSeq,
     limit,
 });
 ```
 
 - `listRuns()` returns only the runs array from the newest default page of this session's durable workflow runs. This overload preserves the original convenience API.
-- `listRuns({ afterSeq, beforeSeq, limit })` returns the full page. Its `oldestSeq`, `newestSeq`, `hasMoreNewer`, and `omittedOlder` fields let callers continue paging without raw RPC calls.
+- `listRuns({ afterSeq, limit })` or `listRuns({ beforeSeq, limit })` returns the full page. Its `oldestSeq`, `newestSeq`, `hasMoreNewer`, and `omittedOlder` fields let callers continue paging without raw RPC calls.
 - `getRunDetail(runId)` returns phases, prompt-safe agent summaries, and the latest progress page. Each current-runtime agent summary includes `consumedNanoAiu`, the known spend from that direct agent and its descendants. Older runtimes omit the field, and historical agents without attributable charge rows also omit it when the run contains unattributed spend.
 - `getRunProgress(runId, options?)` pages progress forward, backward, by phase, or from the latest tail.
+- Both paging calls take at most one cursor: `afterSeq` pages forward and `beforeSeq` pages backward, each exclusive of the given sequence number. A request with both fails with JSON-RPC `-32602` and `data.code: "workflow_runs_invalid_cursor"` from `listRuns`, or `"workflow_progress_invalid_cursor"` from `getRunProgress`.
 
 `getRun(runId)` reads the latest run envelope. `pause(runId)` pauses a running attempt and returns its `paused` envelope. `cancel(runId)` cancels a run and returns its terminal envelope.
 

package/package.json

@@ -5,8 +5,8 @@
         "url": "https://github.com/github/copilot-agent-runtime.git",
         "directory": "src/sdk/nodejs"
     },
-    "version": "1.0.29-preview.0",
-    "copilotCliVersion": "1.0.106-1",
+    "version": "1.0.29-preview.10",
+    "copilotCliVersion": "1.0.106-11",
     "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
     "main": "./dist/cjs/index.js",
     "types": "./dist/index.d.ts",
@@ -68,7 +68,7 @@
     "author": "GitHub",
     "license": "MIT",
     "dependencies": {
-        "koffi": "3.3.3",
+        "koffi": "3.3.4",
         "vscode-jsonrpc": "10.0.0",
         "zod": "4.6.7"
     },
@@ -79,12 +79,13 @@
         "@types/node": "^26.6.5",
         "@types/semver": "7.8.0",
         "@types/ws": "^8.18.1",
-        "@typescript-eslint/eslint-plugin": "^8.72.1",
-        "@typescript-eslint/parser": "^8.72.1",
+        "@typescript-eslint/eslint-plugin": "^8.72.0",
+        "@typescript-eslint/parser": "^8.72.0",
+        "@vitest/coverage-v8": "^5.0.5",
         "esbuild": "^0.28.1",
         "eslint": "^10.13.0",
         "file-entry-cache": "file:./scripts/eslint-file-cache",
-        "glob": "^13.0.1",
+        "glob": "^14.0.3",
         "json-schema": "^0.4.0",
         "json-schema-to-typescript": "^16.0.0",
         "jsonc-parser": "^3.3.1",
@@ -101,6 +102,8 @@
     },
     "overrides": {
         "file-entry-cache": "$file-entry-cache",
+        "glob": "$glob",
+        "minimatch": "^11.0.4",
         "prettier": "$prettier",
         "vite": "$vite"
     },
@@ -114,18 +117,18 @@
         "README.md"
     ],
     "copilotRuntime": {
-        "sourceSha": "1fb35cfaf220f19b8983d5cbd2f7aa2128e58b3c",
-        "version": "1.0.106-1",
+        "sourceSha": "2bfb456b9e0878c4cb3dd05cb9877ac9c97cbd68",
+        "version": "1.0.106-11",
         "visibility": "public"
     },
     "optionalDependencies": {
-        "@github/copilot-sdk-darwin-arm64": "1.0.29-preview.0",
-        "@github/copilot-sdk-darwin-x64": "1.0.29-preview.0",
-        "@github/copilot-sdk-linux-arm64": "1.0.29-preview.0",
-        "@github/copilot-sdk-linux-x64": "1.0.29-preview.0",
-        "@github/copilot-sdk-linuxmusl-arm64": "1.0.29-preview.0",
-        "@github/copilot-sdk-linuxmusl-x64": "1.0.29-preview.0",
-        "@github/copilot-sdk-win32-arm64": "1.0.29-preview.0",
-        "@github/copilot-sdk-win32-x64": "1.0.29-preview.0"
+        "@github/copilot-sdk-darwin-arm64": "1.0.29-preview.10",
+        "@github/copilot-sdk-darwin-x64": "1.0.29-preview.10",
+        "@github/copilot-sdk-linux-arm64": "1.0.29-preview.10",
+        "@github/copilot-sdk-linux-x64": "1.0.29-preview.10",
+        "@github/copilot-sdk-linuxmusl-arm64": "1.0.29-preview.10",
+        "@github/copilot-sdk-linuxmusl-x64": "1.0.29-preview.10",
+        "@github/copilot-sdk-win32-arm64": "1.0.29-preview.10",
+        "@github/copilot-sdk-win32-x64": "1.0.29-preview.10"
     }
 }