chore: sync upstream main (29 commits)

.github/workflows/codegen-check.yml

@@ -0,0 +1,56 @@
+name: "Codegen Check"
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    paths:
+      - 'scripts/codegen/**'
+      - 'nodejs/src/generated/**'
+      - 'dotnet/src/Generated/**'
+      - 'python/copilot/generated/**'
+      - 'go/generated_*.go'
+      - 'go/rpc/**'
+      - '.github/workflows/codegen-check.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    name: "Verify generated files are up-to-date"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version: '1.22'
+
+      - name: Install nodejs SDK dependencies
+        working-directory: ./nodejs
+        run: npm ci
+
+      - name: Install codegen dependencies
+        working-directory: ./scripts/codegen
+        run: npm ci
+
+      - name: Run codegen
+        working-directory: ./scripts/codegen
+        run: npm run generate
+
+      - name: Check for uncommitted changes
+        run: |
+          if [ -n "$(git status --porcelain)" ]; then
+            echo "::error::Generated files are out of date. Run 'cd scripts/codegen && npm run generate' and commit the changes."
+            git diff --stat
+            git diff
+            exit 1
+          fi
+          echo "✅ Generated files are up-to-date"

.github/workflows/dotnet-sdk-tests.yml

@@ -46,7 +46,7 @@ jobs:
           dotnet-version: "8.0.x"
       - uses: actions/setup-node@v6
         with:
-          node-version: "24"
+          node-version: "22"
           cache: "npm"
           cache-dependency-path: "./nodejs/package-lock.json"
 

.github/workflows/nodejs-sdk-tests.yml

@@ -47,7 +47,7 @@ jobs:
         with:
           cache: "npm"
           cache-dependency-path: "./nodejs/package-lock.json"
-          node-version: 24
+          node-version: 22
       - name: Install dependencies
         run: npm ci --ignore-scripts
 

.github/workflows/python-sdk-tests.yml

@@ -49,7 +49,7 @@ jobs:
           python-version: "3.12"
       - uses: actions/setup-node@v6
         with:
-          node-version: "24"
+          node-version: "22"
           cache: "npm"
           cache-dependency-path: "./nodejs/package-lock.json"
 
@@ -59,7 +59,7 @@ jobs:
           enable-cache: true
 
       - name: Install Python dev dependencies
-        run: uv sync --locked --all-extras --dev
+        run: uv sync --all-extras --dev
 
       - name: Install Node.js dependencies (for CLI in tests)
         working-directory: ./nodejs

.github/workflows/scenario-builds.yml

@@ -0,0 +1,186 @@
+name: "Scenario Build Verification"
+
+on:
+  pull_request:
+    paths:
+      - "test/scenarios/**"
+      - "nodejs/src/**"
+      - "python/copilot/**"
+      - "go/**/*.go"
+      - "dotnet/src/**"
+      - ".github/workflows/scenario-builds.yml"
+  push:
+    branches:
+      - main
+    paths:
+      - "test/scenarios/**"
+      - ".github/workflows/scenario-builds.yml"
+  workflow_dispatch:
+  merge_group:
+
+permissions:
+  contents: read
+
+jobs:
+  # ── TypeScript ──────────────────────────────────────────────────────
+  build-typescript:
+    name: "TypeScript scenarios"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 22
+
+      - uses: actions/cache@v4
+        with:
+          path: ~/.npm
+          key: ${{ runner.os }}-npm-scenarios-${{ hashFiles('test/scenarios/**/package.json') }}
+          restore-keys: |
+            ${{ runner.os }}-npm-scenarios-
+
+      # Build the SDK so local file: references resolve
+      - name: Build SDK
+        working-directory: nodejs
+        run: npm ci --ignore-scripts
+
+      - name: Build all TypeScript scenarios
+        run: |
+          PASS=0; FAIL=0; FAILURES=""
+          for dir in $(find test/scenarios -path '*/typescript/package.json' -exec dirname {} \; | sort); do
+            scenario="${dir#test/scenarios/}"
+            echo "::group::$scenario"
+            if (cd "$dir" && npm install --ignore-scripts 2>&1); then
+              echo "✅ $scenario"
+              PASS=$((PASS + 1))
+            else
+              echo "❌ $scenario"
+              FAIL=$((FAIL + 1))
+              FAILURES="$FAILURES\n  $scenario"
+            fi
+            echo "::endgroup::"
+          done
+          echo ""
+          echo "TypeScript builds: $PASS passed, $FAIL failed"
+          if [ "$FAIL" -gt 0 ]; then
+            echo -e "Failures:$FAILURES"
+            exit 1
+          fi
+
+  # ── Python ──────────────────────────────────────────────────────────
+  build-python:
+    name: "Python scenarios"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.12"
+
+      - name: Install Python SDK
+        run: pip install -e python/
+
+      - name: Compile and import-check all Python scenarios
+        run: |
+          PASS=0; FAIL=0; FAILURES=""
+          for main in $(find test/scenarios -path '*/python/main.py' | sort); do
+            dir=$(dirname "$main")
+            scenario="${dir#test/scenarios/}"
+            echo "::group::$scenario"
+            if python3 -m py_compile "$main" 2>&1 && python3 -c "import copilot" 2>&1; then
+              echo "✅ $scenario"
+              PASS=$((PASS + 1))
+            else
+              echo "❌ $scenario"
+              FAIL=$((FAIL + 1))
+              FAILURES="$FAILURES\n  $scenario"
+            fi
+            echo "::endgroup::"
+          done
+          echo ""
+          echo "Python builds: $PASS passed, $FAIL failed"
+          if [ "$FAIL" -gt 0 ]; then
+            echo -e "Failures:$FAILURES"
+            exit 1
+          fi
+
+  # ── Go ──────────────────────────────────────────────────────────────
+  build-go:
+    name: "Go scenarios"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version: "1.24"
+          cache: true
+          cache-dependency-path: test/scenarios/**/go.sum
+
+      - name: Build all Go scenarios
+        run: |
+          PASS=0; FAIL=0; FAILURES=""
+          for mod in $(find test/scenarios -path '*/go/go.mod' | sort); do
+            dir=$(dirname "$mod")
+            scenario="${dir#test/scenarios/}"
+            echo "::group::$scenario"
+            if (cd "$dir" && go build ./... 2>&1); then
+              echo "✅ $scenario"
+              PASS=$((PASS + 1))
+            else
+              echo "❌ $scenario"
+              FAIL=$((FAIL + 1))
+              FAILURES="$FAILURES\n  $scenario"
+            fi
+            echo "::endgroup::"
+          done
+          echo ""
+          echo "Go builds: $PASS passed, $FAIL failed"
+          if [ "$FAIL" -gt 0 ]; then
+            echo -e "Failures:$FAILURES"
+            exit 1
+          fi
+
+  # ── C# ─────────────────────────────────────────────────────────────
+  build-csharp:
+    name: "C# scenarios"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-dotnet@v5
+        with:
+          dotnet-version: "8.0.x"
+
+      - uses: actions/cache@v4
+        with:
+          path: ~/.nuget/packages
+          key: ${{ runner.os }}-nuget-scenarios-${{ hashFiles('test/scenarios/**/*.csproj') }}
+          restore-keys: |
+            ${{ runner.os }}-nuget-scenarios-
+
+      - name: Build all C# scenarios
+        run: |
+          PASS=0; FAIL=0; FAILURES=""
+          for proj in $(find test/scenarios -name '*.csproj' | sort); do
+            dir=$(dirname "$proj")
+            scenario="${dir#test/scenarios/}"
+            echo "::group::$scenario"
+            if (cd "$dir" && dotnet build --nologo 2>&1); then
+              echo "✅ $scenario"
+              PASS=$((PASS + 1))
+            else
+              echo "❌ $scenario"
+              FAIL=$((FAIL + 1))
+              FAILURES="$FAILURES\n  $scenario"
+            fi
+            echo "::endgroup::"
+          done
+          echo ""
+          echo "C# builds: $PASS passed, $FAIL failed"
+          if [ "$FAIL" -gt 0 ]; then
+            echo -e "Failures:$FAILURES"
+            exit 1
+          fi

.gitignore

@@ -1,3 +1,4 @@
 
 # Documentation validation output
 docs/.validation/
+.DS_Store

README.md

@@ -14,12 +14,12 @@ The GitHub Copilot SDK exposes the same engine behind Copilot CLI: a production-
 
 ## Available SDKs
 
-| SDK                      | Location                                          | Installation                              |
-| ------------------------ | ------------------------------------------------- | ----------------------------------------- |
-| **Node.js / TypeScript** | [`cookbook/nodejs/`](https://github.com/github/awesome-copilot/blob/main/cookbook/copilot-sdk/nodejs/README.md) | `npm install @github/copilot-sdk`         |
-| **Python**               | [`cookbook/python/`](https://github.com/github/awesome-copilot/blob/main/cookbook/copilot-sdk/python/README.md) | `pip install github-copilot-sdk`          |
-| **Go**                   | [`cookbook/go/`](https://github.com/github/awesome-copilot/blob/main/cookbook/copilot-sdk/go/README.md)         | `go get github.com/github/copilot-sdk/go` |
-| **.NET**                 | [`cookbook/dotnet/`](https://github.com/github/awesome-copilot/blob/main/cookbook/copilot-sdk/dotnet/README.md) | `dotnet add package GitHub.Copilot.SDK`   |
+| SDK                      | Location       | Cookbook                                          | Installation                              |
+| ------------------------ | -------------- | ------------------------------------------------- | ----------------------------------------- |
+| **Node.js / TypeScript** | [`nodejs/`](./nodejs/)   | [Cookbook](https://github.com/github/awesome-copilot/blob/main/cookbook/copilot-sdk/nodejs/README.md) | `npm install @github/copilot-sdk`         |
+| **Python**               | [`python/`](./python/)   | [Cookbook](https://github.com/github/awesome-copilot/blob/main/cookbook/copilot-sdk/python/README.md) | `pip install github-copilot-sdk`          |
+| **Go**                   | [`go/`](./go/)           | [Cookbook](https://github.com/github/awesome-copilot/blob/main/cookbook/copilot-sdk/go/README.md)     | `go get github.com/github/copilot-sdk/go` |
+| **.NET**                 | [`dotnet/`](./dotnet/)   | [Cookbook](https://github.com/github/awesome-copilot/blob/main/cookbook/copilot-sdk/dotnet/README.md) | `dotnet add package GitHub.Copilot.SDK`   |
 
 See the individual SDK READMEs for installation, usage examples, and API reference.
 
@@ -116,17 +116,17 @@ Please use the [GitHub Issues](https://github.com/github/copilot-sdk/issues) pag
 
 ⚠️ Disclaimer: These are unofficial, community-driven SDKs and they are not supported by GitHub. Use at your own risk.
 
-| SDK           | Location                                           |
-| --------------| -------------------------------------------------- |
-| **Java**      | [copilot-community-sdk/copilot-sdk-java][sdk-java] |
-| **Rust**      | [copilot-community-sdk/copilot-sdk-rust][sdk-rust] |
-| **C++**       | [0xeb/copilot-sdk-cpp][sdk-cpp]                    |
-| **Clojure**   | [krukow/copilot-sdk-clojure][sdk-clojure]          |
+| SDK           | Location                                                          |
+| --------------| ----------------------------------------------------------------- |
+| **Java**      | [copilot-community-sdk/copilot-sdk-java][sdk-java]                |
+| **Rust**      | [copilot-community-sdk/copilot-sdk-rust][sdk-rust]                |
+| **Clojure**   | [copilot-community-sdk/copilot-sdk-clojure][sdk-clojure]          |
+| **C++**       | [0xeb/copilot-sdk-cpp][sdk-cpp]                                   |
 
 [sdk-java]: https://github.com/copilot-community-sdk/copilot-sdk-java
 [sdk-rust]: https://github.com/copilot-community-sdk/copilot-sdk-rust
 [sdk-cpp]: https://github.com/0xeb/copilot-sdk-cpp
-[sdk-clojure]: https://github.com/krukow/copilot-sdk-clojure
+[sdk-clojure]: https://github.com/copilot-community-sdk/copilot-sdk-clojure
 
 ## Contributing
 

docs/compatibility.md

@@ -124,20 +124,13 @@ The `--share` option is not available via SDK. Workarounds:
 
 ### Permission Control
 
+The SDK uses a **deny-by-default** permission model. All permission requests (file writes, shell commands, URL fetches, etc.) are denied unless your app provides an `onPermissionRequest` handler.
+
 Instead of `--allow-all-paths` or `--yolo`, use the permission handler:
 
 ```typescript
 const session = await client.createSession({
-  onPermissionRequest: async (request) => {
-    // Auto-approve everything (equivalent to --yolo)
-    return { approved: true };
-
-    // Or implement custom logic
-    if (request.kind === "shell") {
-      return { approved: request.command.startsWith("git") };
-    }
-    return { approved: true };
-  },
+  onPermissionRequest: approveAll,
 });
 ```
 

docs/guides/session-persistence.md

@@ -293,12 +293,16 @@ session_id = create_session_id("alice", "code-review")
 ### Listing Active Sessions
 
 ```typescript
+// List all sessions
 const sessions = await client.listSessions();
 console.log(`Found ${sessions.length} sessions`);
 
 for (const session of sessions) {
   console.log(`- ${session.sessionId} (created: ${session.createdAt})`);
 }
+
+// Filter sessions by repository
+const repoSessions = await client.listSessions({ repository: "owner/repo" });
 ```
 
 ### Cleaning Up Old Sessions
@@ -521,7 +525,7 @@ await withSessionLock("user-123-task-456", async () => {
 | **Create resumable session** | Provide your own `sessionId` |
 | **Resume session** | `client.resumeSession(sessionId)` |
 | **BYOK resume** | Re-provide `provider` config |
-| **List sessions** | `client.listSessions()` |
+| **List sessions** | `client.listSessions(filter?)` |
 | **Delete session** | `client.deleteSession(sessionId)` |
 | **Destroy active session** | `session.destroy()` |
 | **Containerized deployment** | Mount `~/.copilot/session-state/` to persistent storage |