v1.0.29

• Defer allocator reclamation until disposed session data is released on opted-in Linux/glibc hosts, and preserve requests made during trim cooldown.
• Sandbox deny rules support glob patterns, including hidden files and home-relative patterns, without changing literal grants.
• Session-summary failure diagnostics omit private parent directories.
• Start model requests without waiting for host event acknowledgements, while preserving stop-hook ordering and cancellation.
• Reduced memory growth in non-streaming sessions by limiting retained transient events.
• Session event-log reads now return promptly when a session disconnects instead of waiting for the long-poll timeout.
• Fixed a bug where MCP, LSP, and plugin manifest files
• Improved the Node.js SDK README by updating Permission
• Runtime now prevents block compaction when buffers are
• Custom subagents with private MCP connections avoid
• Session metadata from getSessionMetadata and listSessions
• Rust: Breaking: SessionMetadata adds client_name and
• Fixed a bug where stop_bash could incorrectly report a
• Fix Kerberos auth callback handling: .NET callbacks no
• Node.js: a request whose params cannot be serialized no
• Improve Claude token estimates used for session context
• Sandbox blockedHosts now also match visible TLS SNI in
• instructions.getDiscoveryPaths, skills.getDiscoveryPaths
• Fixed a runtime bug where settings merges could overwrite
• Local workspace diffs use the session's current working
• Sandboxed Hugo commands receive Hugo and Go cache grants
• Shell safety warnings are no longer duplicated as
• Added validation for reasoning effort values before they
• Improved runtime caching so MCP call results are preserved
• Added SDK contracts to expose GitHub services through the
• Keep credential assignments redacted across detached-shell
• Added optional causal provenance to inter-agent session
• Clarified errors when a managed sandbox cannot be
• For authenticated github.com sessions, the runtime now
• Eligible WorkIQ OAuth requests use the host's Entra
• Expose Team marketplaces through plugin APIs.
• Fix access to bundled search binaries in sandboxed SDK
• Switching a concrete-model session to Auto now reconciles
• Fusion model switches accept a null reasoning-effort reset
• Sessions created with customAgents and
• Requests can fall back to direct networking when system
• Fixed a bug where hook configuration files encoded with a
• Fixed a bug where LSP files matched by an empty extension
• Java: The deprecated parentToolCallId property of the
• Honor HTTP 429 Retry-After timing using existing request
• Fixed an issue where setting session.mcp.disable after
• Unlisted GPT models now use GPT-6.1 defaults, and unlisted
• Java previews with the same base SDK version now update
• Fixed plugin uninstall behavior so listed plugins can be
• Sessions created on the standalone runtime host now return
• Fixed a runtime bug where continuations with no usage were
• Fixed premature extension readiness reporting that could
• A session whose events cannot be persisted now emits a
• Fixed an issue where failed HTTP MCP tool calls could
• Sessions created or resumed with a stored Efficiency Auto
• Java and Python SDKs now preserve experimental markers on
• Explicitly reap POSIX stdio MCP child processes during
• Preserve application-defined request metadata in MCP App
• Fixed extensions being stuck behind a pending managed
• A leading ~ or ~/ in skillDirectories,
• Added a warning when a top-level SKILL.md in a skills
• Node.js, Python, Go, .NET and Rust: stop() no longer
• Add agent attribution to lifecycle progress diagnostics
• Fixed a runtime issue where preToolUse hooks were not
• Resuming a session on the same connection now replaces the
• Auto model selection no longer falls back to the legacy
• Fix a standalone session startup race between initial
• Fixed a bug where LSP rename applied its WorkspaceEdit as
• Fixed a runtime bug where abort requests could hang if the
• session.rpc.shell.exec now honours a timeout above
• Fixed web_fetch to decode an XML document in the
• createSession and resumeSession now reject a
• Fixed empty input hints in session.commands.list for
• session.options.update now rejects a workingDirectory
• Fixed duplicate session.created and session.deleted events
• Fixed: sign-in flows started with
• session.send, sendAndWait and sendMessages now reject a
• Fixed customizations.reload incorrectly reporting
• Protected sessions can read their selected extension SDK's
• Coalesce renewable GitHub CLI credential acquisition and
• Fixed an issue where ACP clients could not leave autopilot
• Improved telemetry privacy by redacting credentials from
• tasks.getProgress now returns a detached shell's recent
• A malformed managedSettings.permissions.limitTo passed at
• Add experimental session.rpc.history.setCompactionConfig
• Sandboxed Node MCP servers can write to their configured
• command.queued can now carry scheduled slash commands
• Fixed background-output search hints for named BYOK model
• Java: tools defined with ToolDefinition.from or
• Java: session RPC methods now send null entries in map
• Go: a tool call whose result telemetry cannot be encoded
• Node.js, Rust and Go: a client whose working directory
• Java: an elicitation handler whose result is null, or
• Node.js, Python, .NET and Java: a tool call whose result
• Preserve completed conversation history and cancellation
• Sessions on mai-code-1.1-flash no longer fail with
• Session events: IndexedSearchDisabledReason now includes
• Avoid an unnecessary skill-content scan when paging
• Added device-code sign-in support to
• Sending a message with an agentMode outside interactive,
• Improved session handling so system-prompt segments stay
• Fixed Microsoft 365 account display labels after Entra
• none ### Validation - `cd benchmarks/vally; node --test
• Fixed a BYOK runtime bug where reasoning_effort was sent
• Reuse GitHub token metadata across repeated MCP
• Connector requests preserve session account credentials
• Connector startup avoids redundant authentication
• Fixed an issue where refusal fallback retries could fail
• A HydraFusion turn that cannot retrieve the model catalog
• Java: when the runtime stops responding,
• In unattended Assisted Autopilot, a session that declares
• .NET, Python: an elicitation handler that fails with
• Expose runtime-resolved plugin content roots and opaque
• Expose hook definition URIs and canonical plugin ownership
• Cold-resumed Auto compaction preserves session capability
• Sessions whose client tools returned a binary result with
• session.send and sendAndWait now reject a missing or
• The .NET SDK can be packed under a custom NuGet
• SDK resume inventory contention no longer occupies a
• Local-model server adoption preserves complete process
• Preserve proxy 407 errors when Kerberos credentials are
• Policy-helper timeout handling preserves already-resolved
• Python, .NET: a Python tool or slash-command handler that
• Node.js: the bundled runtime now starts on Windows when
• Java SDK: excludedTools denylist is no longer silently
• Automatically initialize staff mode for eligible SDK users
• Sandboxed local MCP servers configured with a cwd now
• Fixed a CLI bug where pasting Unicode line separators
• .NET: builds no longer keep the downloaded Copilot runtime
• Plaintext native HTTP requests skip explicit platform
• .NET: an elicitation handler that accepts with a list of
• Go, Node.js, .NET, Rust: a tool handler that fails with an
• Python, Go and Java: resuming a session with an empty
• Python: CopilotClient now starts its provisioned runtime
• Sandboxed language servers now resolve relative
• Fix Linux file-watch notifications lost when a directory