Upgrade @github/copilot-sdk to v0.1.30 and fix v0.1.28 permission breaking change

[Copilot]

Planeteer was on SDK v0.1.24; v0.1.28 introduced a breaking change that denies all privileged tool operations by default when no onPermissionRequest handler is registered. Without this fix, file writes, shell commands, URL fetches, and MCP calls silently fail in v0.1.28+.

Changes

• package.json — bumped @github/copilot-sdk from ^0.1.24 to ^0.1.30
• src/services/copilot.ts
  • Imported approveAll from the SDK and set it as onPermissionRequest in SessionConfig — restores the previously implicit permissive behavior now required to be explicit
  • Added clientName: 'planeteer' to SessionConfig — new v0.1.28 field sent in the User-Agent header

// Before (v0.1.24 behaviour — permissions were implicitly allowed by the CLI)
const sessionConfig = { model: currentModel, streaming: true };

// After (v0.1.28+ requires explicit handler; deny-all is the new default)
const sessionConfig = {
  clientName: 'planeteer',
  model: currentModel,
  streaming: true,
  onPermissionRequest: approveAll,
};

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[enhancement] Upgrade to Copilot SDK v0.1.30 and audit for breaking changes</issue_title>
<issue_description>## Background

Planeteer currently uses @github/copilot-sdk v0.1.24 (from package.json). The SDK has released v0.1.30 on March 3, 2026, which is 6 versions ahead.

Recent SDK releases include:

• v0.1.30 (March 3): Tool overriding, session.setModel() API (release notes)
• v0.1.29 (Feb 27): Python exception handling changes
• v0.1.28 (Feb 27): Breaking change - deny all permissions by default, clientName in SessionConfig

The v0.1.28 release notes specifically mention a breaking change around permission handling (PR colindembovsky/planeteer#509).

Proposal

Perform a systematic upgrade to v0.1.30 with full compatibility testing:

1. Update dependency - Bump @github/copilot-sdk to ^0.1.30 in package.json

2. Review breaking changes - Audit release notes for v0.1.25 through v0.1.30 to identify:

   • API changes that affect src/services/copilot.ts
   • Permission handling changes (v0.1.28 breaking change)
   • Any deprecated APIs that Planeteer currently uses

3. Update integration layer - Modify src/services/copilot.ts to:

   • Add clientName: "planeteer" to SessionConfig (new field in v0.1.28)
   • Ensure permission handling is explicit (v0.1.28 denies all by default)
   • Update any deprecated API usage

4. Comprehensive testing - Run full test suite and manual testing:

   • All screens (Home, Clarify, Breakdown, Refine, Execute)
   • Session event handling and compaction
   • Multi-turn conversations and refinement
   • Parallel task execution with dependency graph

5. Update documentation - Document any behavior changes users should be aware of

Benefit

• Access to new features: Unlocks tool overriding and model switching capabilities
• Bug fixes: Get all fixes from 6 intermediate releases
• Security: Stay current with SDK security patches
• Future compatibility: Reduces technical debt and makes future upgrades easier
• Performance: Benefit from any SDK performance improvements

Acceptance Criteria

• package.json specifies @github/copilot-sdk version ^0.1.30
• npm install completes successfully with no peer dependency conflicts
• All release notes from v0.1.25-v0.1.30 reviewed and breaking changes documented
• src/services/copilot.ts updated for any API changes (e.g., clientName field)
• Permission handling explicitly configured (not relying on defaults)
• All existing tests pass (npm test)
• Manual testing of all user flows completed successfully
• Session compaction and event handling still work correctly
• Documentation updated if any user-facing behavior changed
• Memory stored with verified build/test commands if any changes needed

AI generated by Weekly Enhancement Suggestions

Comments on the Issue (you are @copilot in this section)

• Fixes [enhancement] Upgrade to Copilot SDK v0.1.30 and audit for breaking changes #29

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.