@love-moon/ai-sdk 0.4.0 → 0.4.2

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @love-moon/ai-sdk
 
+## 0.4.2
+
+### Patch Changes
+
+- e8936fb: Upgrade the GitHub Copilot SDK permission protocol so Copilot-backed tasks auto-approve tool calls with current Copilot CLI releases instead of failing with `unexpected user permission response`.
+
+## 0.4.1
+
+### Patch Changes
+
+- aada753: Add explicit ChatGPT and Gemini web backend aliases, expose project icon
+  configuration in generated CLI settings, and default browser-backed session
+  checks to headed mode for reliable authenticated detection.
+
 ## 0.4.0
 
 ### Minor Changes

package/dist/manager/quota/copilot.js

@@ -371,7 +371,7 @@ function resolveClientOptions(opts) {
         useLoggedInUser: explicitGithubToken
             ? opts.clientOptions?.useLoggedInUser
             : opts.clientOptions?.useLoggedInUser ?? true,
-        ...(opts.githubToken ? { githubToken: opts.githubToken } : {}),
+        ...(opts.githubToken ? { gitHubToken: opts.githubToken } : {}),
     };
     if (options.cliPath === undefined &&
         options.cliUrl === undefined &&
@@ -384,7 +384,7 @@ function resolveClientOptions(opts) {
     return options;
 }
 function resolveExplicitGithubToken(opts) {
-    return opts.githubToken ?? opts.clientOptions?.githubToken;
+    return opts.githubToken ?? opts.clientOptions?.gitHubToken;
 }
 function hasExplicitCopilotCliPathEnv(env) {
     return Boolean(typeof env?.COPILOT_CLI_PATH === "string" && env.COPILOT_CLI_PATH.trim());
@@ -472,7 +472,7 @@ function resolveKnownGitHubHost(rawHost) {
     return host || envHost || undefined;
 }
 function resolveGitHubLoginToken(opts) {
-    return opts.githubToken ?? opts.clientOptions?.githubToken ?? process.env.GITHUB_TOKEN;
+    return opts.githubToken ?? opts.clientOptions?.gitHubToken ?? process.env.GITHUB_TOKEN;
 }
 async function fetchCopilotUserQuota(authInfo, opts, doFetch, timeoutMs) {
     if (!timeoutMs || timeoutMs <= 0)

package/dist/providers/chat-web-session.d.ts

@@ -13,7 +13,7 @@
  *
  * Lifecycle:
  *   - `boot()` lazily imports `@love-moon/chat-web`, registers its built-in
- *     providers, and opens a long-lived `ChatSession` (headless by default).
+ *     providers, and opens a long-lived `ChatSession` (headed by default).
  *   - `runTurn(prompt)` calls `session.send(prompt)` and emits a single
  *     `assistant_message` with the model's reply.
  *   - `close()` tears the Chromium context down.

package/dist/providers/chat-web-session.js

@@ -102,7 +102,7 @@ function isPlaywrightMissingError(error) {
  *
  * Lifecycle:
  *   - `boot()` lazily imports `@love-moon/chat-web`, registers its built-in
- *     providers, and opens a long-lived `ChatSession` (headless by default).
+ *     providers, and opens a long-lived `ChatSession` (headed by default).
  *   - `runTurn(prompt)` calls `session.send(prompt)` and emits a single
  *     `assistant_message` with the model's reply.
  *   - `close()` tears the Chromium context down.
@@ -119,7 +119,16 @@ export class ChatWebSession extends EventEmitter {
         this.options = options;
         this.logger = normalizeLogger(options.logger);
         this.chatWebProvider = resolveChatWebProvider(options);
-        this.headless = options.headless !== false;
+        // Match chat-web SDK's own default (headed). Per chat-web/core/browser.ts
+        // resolveHeadless(), headed mode is the documented safe default for
+        // anti-bot heuristics — ChatGPT/AI Studio routinely serve unauthenticated
+        // or challenge pages to chrome-headless-shell even when profile cookies
+        // are valid, which masquerades as "not logged in" downstream. The old
+        // `options.headless !== false` defaulted to true and effectively neutered
+        // chat-web's anti-bot stance whenever the caller (daemon, serve-ai)
+        // didn't explicitly pass a value. Users who actually want headless must
+        // now opt in with an explicit `headless: true`.
+        this.headless = options.headless === true;
         // Optional: use a specific Chromium-family binary (system Chrome /
         // Edge / explicit path) instead of Playwright's bundled
         // `chrome-headless-shell`. Useful when the user's network treats

package/dist/providers/copilot-sdk-session.js

@@ -405,10 +405,10 @@ function buildCopilotClientOptions(options, cwd, env) {
     const explicitGithubToken = typeof options.githubToken === "string" && options.githubToken.trim()
         ? options.githubToken.trim()
         : "";
-    if (clientOptions.githubToken === undefined && explicitGithubToken) {
-        clientOptions.githubToken = explicitGithubToken;
+    if (clientOptions.gitHubToken === undefined && explicitGithubToken) {
+        clientOptions.gitHubToken = explicitGithubToken;
     }
-    const hasExplicitGithubToken = typeof clientOptions.githubToken === "string" && clientOptions.githubToken.trim();
+    const hasExplicitGithubToken = typeof clientOptions.gitHubToken === "string" && clientOptions.gitHubToken.trim();
     if (clientOptions.useLoggedInUser === undefined && typeof options.useLoggedInUser === "boolean") {
         clientOptions.useLoggedInUser = options.useLoggedInUser;
     }
@@ -908,7 +908,7 @@ export class CopilotSdkSession extends EventEmitter {
         }
         const permissionHandler = typeof sdkModule.approveAll === "function"
             ? sdkModule.approveAll
-            : () => ({ kind: "approved" });
+            : () => ({ kind: "approve-once" });
         const clientOptions = buildCopilotClientOptions(this.options, this.cwd, this.env);
         this.client = new sdkModule.CopilotClient(clientOptions);
         const cleanupIfClosedDuringBoot = async (session = null) => {

package/dist/resume/copilot.js

@@ -116,13 +116,13 @@ async function buildCopilotClientOptions(options = {}) {
             clientOptions.cliArgs = cliLaunch.cliArgs;
         }
     }
-    const explicitGithubToken = typeof clientOptions.githubToken === "string" && clientOptions.githubToken.trim()
-        ? clientOptions.githubToken.trim()
+    const explicitGithubToken = typeof clientOptions.gitHubToken === "string" && clientOptions.gitHubToken.trim()
+        ? clientOptions.gitHubToken.trim()
         : typeof options.githubToken === "string" && options.githubToken.trim()
             ? options.githubToken.trim()
             : "";
-    if (clientOptions.githubToken === undefined && explicitGithubToken) {
-        clientOptions.githubToken = explicitGithubToken;
+    if (clientOptions.gitHubToken === undefined && explicitGithubToken) {
+        clientOptions.gitHubToken = explicitGithubToken;
     }
     if (clientOptions.useLoggedInUser === undefined && typeof options.useLoggedInUser === "boolean") {
         clientOptions.useLoggedInUser = options.useLoggedInUser;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@love-moon/ai-sdk",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/lovemoon-ai/conductor.git"
@@ -25,19 +25,19 @@
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.2.72",
-    "@github/copilot-sdk": "^0.2.2",
+    "@github/copilot-sdk": "^0.3.0",
     "@opencode-ai/sdk": "^1.2.25",
     "js-yaml": "^4.1.1",
     "yaml": "^2.5.1",
     "zod": "^4.1.5"
   },
   "optionalDependencies": {
-    "@love-moon/chat-web": "^0.4.0"
+    "@love-moon/chat-web": "^0.4.2"
   },
   "devDependencies": {
     "@types/node": "^22.10.2",
     "tsx": "^4.20.6",
     "typescript": "^5.6.3"
   },
-  "gitCommitId": "2d1526c"
+  "gitCommitId": "23fc1c2"
 }