@agentproto/adapter-copilot-cli 0.0.0-stage → 0.2.0

package/COPILOT.md

@@ -0,0 +1,130 @@
+---
+name: copilot-cli
+id: copilot-cli
+description: GitHub's official Copilot CLI (`copilot --acp --stdio`) — a terminal coding agent driving GitHub-hosted models over the Agent Client Protocol. Public github.com and GitHub Enterprise (GH_HOST).
+version: 0.1.0
+bin: copilot
+bin_args: ["--acp", "--stdio"]
+install:
+  - method: npm
+    package: "@github/copilot"
+    global: true
+  - method: brew
+    package: copilot-cli
+  - method: curl
+    url: "https://gh.io/copilot-install"
+version_check:
+  cmd: copilot --version
+  parse: "(\\d+\\.\\d+\\.\\d+)"
+  range: ">=0.0.410"
+  timeout_ms: 15000
+auth:
+  ref: ./SECRETS.md
+  state:
+    env:
+      - COPILOT_GITHUB_TOKEN
+      - GH_TOKEN
+      - GITHUB_TOKEN
+      - GH_ENTERPRISE_TOKEN
+      - GITHUB_ENTERPRISE_TOKEN
+sandbox: ./SANDBOX.md
+protocol: acp
+acp: ./copilot-acp.ACP.md
+session:
+  mode: persistent
+  idle_timeout_ms: 1800000
+  context_carryover: true
+capabilities:
+  streaming: true
+  tool_calls: true
+  sub_agents: false
+  file_io: true
+  multimodal: false
+  resumable: true
+  bidirectional: true
+tags: ["copilot", "github", "acp", "agent-runtime", "coding", "enterprise"]
+---
+
+# GitHub Copilot CLI adapter
+
+`@agentproto/adapter-copilot-cli` wraps GitHub's official **Copilot CLI**
+(binary `copilot`, GitHub: `github/copilot-cli`, docs:
+<https://docs.github.com/en/copilot/concepts/agents/copilot-cli/about-copilot-cli>)
+as an AIP-45 agent CLI by spawning `copilot --acp --stdio` — the CLI's own
+first-party ACP-over-stdio server.
+
+## Why ACP, not a print bridge
+
+GitHub Copilot CLI ships a first-party Agent Client Protocol server
+(`copilot --acp`, stdio by default; `--acp --port N` for TCP). ACP support was
+added in **0.0.397** (2026-01-28) and is in public preview. The server speaks
+NDJSON JSON-RPC 2.0 over stdio, exposes **model** and **reasoning-effort** ACP
+session config options, and supports **loading existing sessions** (0.0.410+).
+
+The CLI also has a headless one-shot mode — `copilot -p "<prompt>"
+--output-format json` emits JSONL, with `--model`, `--resume[=ID]`,
+`--allow-all-tools`, and `--stream` — but ACP is the richer, persistent,
+resumable posture, so this adapter drives ACP. It avoids a bespoke print event
+mapper in `@agentproto/driver-agent-cli` (whose `event_schema` enum is closed).
+
+## Install
+
+Any of the official channels works; the adapter declares all three:
+
+```bash
+npm install -g @github/copilot      # npm
+brew install copilot-cli            # Homebrew cask (macOS/Linux)
+curl -fsSL https://gh.io/copilot-install | bash   # installer script
+```
+
+## Auth — public github.com and GitHub Enterprise
+
+Copilot CLI checks credentials in this order:
+
+1. `COPILOT_GITHUB_TOKEN`
+2. `GH_TOKEN`
+3. `GITHUB_TOKEN`
+4. OAuth token from the system keychain / `~/.copilot/config.json`
+5. `gh auth token` fallback
+
+Supported token types: OAuth (`gho_`), fine-grained PAT with the **"Copilot
+Requests"** permission (`github_pat_`, owned by a personal account), and GitHub
+App user-to-server (`ghu_`). **Classic PATs (`ghp_`) are not supported.**
+
+| Target | How |
+|--------|-----|
+| github.com | `GH_TOKEN` / `GITHUB_TOKEN` (or `copilot login`) |
+| GHEC with data residency | `GH_HOST=example.ghe.com` + a `GH_TOKEN`/`GITHUB_TOKEN`, or `copilot login --host https://example.ghe.com` |
+| GitHub Enterprise Server | `GH_HOST=YOUR-GHES-HOSTNAME` + `GH_ENTERPRISE_TOKEN` (or `GITHUB_ENTERPRISE_TOKEN`); the `COPILOT_PROVIDER_GHES_HOST` / `COPILOT_PROVIDER_GHES_TOKEN` / `COPILOT_OFFLINE=true` triple is the disconnected alternative |
+
+The `github_host` option sets `GH_HOST` on the spawn.
+
+### BYOK (no GitHub login)
+
+Copilot CLI can run against an OpenAI-compatible / Azure / Anthropic endpoint
+with `COPILOT_PROVIDER_BASE_URL`, `COPILOT_PROVIDER_TYPE`,
+`COPILOT_PROVIDER_API_KEY`, and `COPILOT_MODEL`. Not wired as options here;
+pass them through the spawn `env` if you need it.
+
+## Models
+
+The model menu is plan/entitlement-dependent and served under one GitHub
+identity, and the exact `--model` slugs are not published in a stable table, so
+this adapter declares **no fixed `models.allowed`**. Pass any id from the CLI's
+`/model` picker through the free-form `model` option (e.g. `claude-sonnet-4.5`,
+`gpt-5`, `auto`); it is applied via the ACP `model` session config option and
+validated by the CLI against your account.
+
+## What's verified vs. assumed
+
+**Verified from the official docs** (2026-10-01): the `copilot` binary name,
+the `--acp --stdio` ACP surface and its stdio/TCP transports, the ACP server's
+model + effort config options and session-load support, the token env
+precedence and token types, the Enterprise host/token variables, and the
+`-p --output-format json` headless surface.
+
+**Not live-verified** (the `copilot` binary is not installed in this worktree):
+the exact `copilot --version` stdout shape (the semver parse is conventional),
+the precise ACP config-option ids (`model`/`effort` are assumed from the
+changelog's "ACP model/effort session config options"), and the ACP
+`promptCapabilities` (multimodal declared `false` conservatively).

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/copilot-acp.ACP.md

@@ -0,0 +1,59 @@
+# copilot-cli — ACP wire profile
+
+AIP-44 ACP profile for GitHub Copilot CLI's first-party ACP server. The agent
+side is the `copilot` binary itself, spawned as `copilot --acp --stdio`
+(NDJSON JSON-RPC 2.0 over stdio; the same server also runs over TCP via
+`copilot --acp --port N`). Docs:
+<https://docs.github.com/en/copilot/reference/copilot-cli-reference/acp-server>.
+
+ACP support was added in **0.0.397** (2026-01-28) and is in public preview.
+
+## Lifecycle
+
+| Method            | Behaviour                                                        |
+| ----------------- | --------------------------------------------------------------- |
+| `initialize`      | Standard ACP handshake; returns `agentCapabilities` / `authMethods`. |
+| `authenticate`    | The server requires a Copilot login before `authenticate` returns success (0.0.7x changelog); auth is normally satisfied by the spawn env (see `SECRETS.md`). |
+| `session/new`     | Creates a session for the requested `cwd` + `mcpServers`; returns a session id. |
+| `session/load`    | Supported (0.0.410+, 2026-02-14) — backs this adapter's `native-resume` continuation. |
+| `session/prompt`  | Streams the turn as ACP `session/update` notifications (agent message chunks, tool calls, usage). |
+| `session/cancel`  | Cancels the in-flight turn. |
+| `session/close`   | Supported (closeSession request). |
+
+## Session config options
+
+The server advertises config options via the `configOptions` API, including:
+
+- **model** — the active Copilot model; can be changed during a session. This
+  adapter applies the `model` option via `session/set_config_option`.
+- **effort** — reasoning effort (`low`/`medium`/`high`/`xhigh`/`max`). Applied
+  via `session/set_config_option`; the server also accepts
+  `--effort`/`--reasoning-effort` at start.
+- **agent** — custom-agent selection.
+- **allow_all** — unrestricted permissions.
+
+## Server-start options
+
+Some settings are fixed when the server starts and inherited by every session
+they create or load, because `session/new` does not carry them:
+
+| Flag | Effect |
+| ---- | ------ |
+| `--available-tools=TOOL ...` | Restrict the session to the listed tools. |
+| `--excluded-tools=TOOL ...` | Remove the listed tools. |
+| `--effort=LEVEL` / `--reasoning-effort=LEVEL` | Initial reasoning effort. |
+
+## Permissions
+
+Over ACP the server raises `session/request_permission` for tool use; the
+agentproto ACP client auto-answers by default (`permissionHold` off), so tool
+execution proceeds. The interactive CLI's `--allow-all-tools` /
+`--allow-tool` / `--deny-tool` flags are a separate, launch-time surface.
+
+## Not surfaced
+
+- **Subagents**: the server reports subagent ids/activity to its client, but
+  that is the agent's internal delegation, not an AIP-45 `sub_agents` surface.
+- **Multimodal**: the ACP `promptCapabilities` are not documented; declared
+  `false` conservatively. (The interactive CLI accepts pasted images, but that
+  is not an ACP content-block channel.)

package/dist/index.d.ts

@@ -0,0 +1,38 @@
+import { AgentCliHandle, AgentCliRuntime } from '@agentproto/driver-agent-cli';
+export { AgentCliHandle, AgentCliRuntime } from '@agentproto/driver-agent-cli';
+
+/**
+ * @agentproto/adapter-copilot-cli — AIP-45 adapter for GitHub Copilot CLI.
+ *
+ * GitHub Copilot CLI (binary `copilot`, product name "GitHub Copilot CLI") is
+ * GitHub's official terminal coding agent — https://github.com/github/copilot-cli,
+ * docs at
+ * https://docs.github.com/en/copilot/concepts/agents/copilot-cli/about-copilot-cli.
+ *
+ * It ships a FIRST-PARTY ACP server, so — like the `grok-cli` adapter — this is
+ * a `protocol: "acp"` arm, not a print/headless one. `copilot --acp --stdio`
+ * speaks Agent Client Protocol JSON-RPC 2.0 as NDJSON over stdio (verified
+ * against the official docs at
+ * https://docs.github.com/en/copilot/reference/copilot-cli-reference/acp-server;
+ * ACP was added in 0.0.397 on 2026-01-28 and is in public preview). The server
+ * exposes model and reasoning-effort ACP session config options and supports
+ * loading existing sessions.
+ *
+ * A headless one-shot surface also exists — `copilot -p "<prompt>"
+ * --output-format json` emits JSONL — but the ACP arm is the richer, persistent,
+ * resumable posture, and it avoids a bespoke print event mapper in the driver.
+ *
+ *   import { copilotCli, copilotCliRuntime } from "@agentproto/adapter-copilot-cli"
+ *   const session = await copilotCliRuntime().start({
+ *     env: { GH_TOKEN: "github_pat_..." },
+ *   })
+ *   for await (const evt of session.send({ role: "user", content: "..." })) {
+ *     console.log(evt)
+ *   }
+ *   await session.close()
+ */
+
+declare const copilotCli: AgentCliHandle;
+declare function copilotCliRuntime(): AgentCliRuntime;
+
+export { copilotCli, copilotCliRuntime };

package/dist/index.mjs

@@ -0,0 +1,134 @@
+import { defineAgentCli, createAgentCliRuntime } from '@agentproto/driver-agent-cli';
+
+/**
+ * @agentproto/adapter-copilot-cli v0.1.0
+ * AIP-45 adapter for GitHub's official Copilot CLI in ACP mode (`copilot --acp --stdio`).
+ */
+
+var copilotCli = defineAgentCli({
+  name: "copilot-cli",
+  id: "copilot-cli",
+  description: "GitHub's official Copilot CLI (`copilot --acp --stdio`) \u2014 a terminal coding agent driving GitHub-hosted models (Claude, GPT, Gemini, Grok, \u2026) over the Agent Client Protocol. Works with github.com and GitHub Enterprise (GH_HOST).",
+  version: "0.1.0",
+  bin: "copilot",
+  // First-party ACP server over stdio (the default transport when `--acp` is
+  // set; `--stdio` is passed explicitly to disambiguate from TCP `--port`).
+  bin_args: ["--acp", "--stdio"],
+  install: [
+    { method: "npm", package: "@github/copilot", global: true },
+    { method: "brew", package: "copilot-cli" },
+    { method: "curl", url: "https://gh.io/copilot-install" }
+  ],
+  version_check: {
+    // `copilot --version` / `-v` prints version information. The ACP server
+    // landed in 0.0.397 (2026-01-28); ACP session LOAD — the resume surface
+    // this adapter's `native-resume` continuation rides on — landed in 0.0.410
+    // (2026-02-14), so that is the floor. The exact stdout shape is UNVERIFIED
+    // (the CLI is not installed in this worktree), so the parse is the
+    // conventional semver grab.
+    cmd: "copilot --version",
+    parse: "(\\d+\\.\\d+\\.\\d+)",
+    range: ">=0.0.410",
+    timeout_ms: 15e3
+  },
+  auth: {
+    ref: "./SECRETS.md",
+    // Documented token precedence: COPILOT_GITHUB_TOKEN > GH_TOKEN >
+    // GITHUB_TOKEN (github.com and ghe.com subdomains). GitHub Enterprise
+    // Server uses GH_ENTERPRISE_TOKEN / GITHUB_ENTERPRISE_TOKEN. Supported
+    // token types: OAuth (`gho_`), fine-grained PAT with the "Copilot
+    // Requests" permission (`github_pat_`), and GitHub App user-to-server
+    // (`ghu_`). Classic PATs (`ghp_`) are NOT supported.
+    state: {
+      env: [
+        "COPILOT_GITHUB_TOKEN",
+        "GH_TOKEN",
+        "GITHUB_TOKEN",
+        "GH_ENTERPRISE_TOKEN",
+        "GITHUB_ENTERPRISE_TOKEN"
+      ]
+    }
+  },
+  sandbox: "./SANDBOX.md",
+  protocol: "acp",
+  acp: "./copilot-acp.ACP.md",
+  session: {
+    mode: "persistent",
+    idle_timeout_ms: 18e5,
+    context_carryover: true
+  },
+  // No `models` block by design: the model menu is plan/entitlement-dependent
+  // and served under ONE GitHub identity (not a per-provider api-key route the
+  // catalog could bill), and the exact `--model` slugs are not documented in a
+  // stable table. The honest surface is the free-form `model` option below,
+  // which the ACP arm applies via the `model` session config option; the CLI
+  // validates explicit ids against the account. `models.apply` therefore
+  // defaults to `"config"` (ACP set_config_option), and no catalog `provider`
+  // is declared — Copilot bills through the GitHub subscription, not a
+  // provider API key.
+  capabilities: {
+    streaming: true,
+    tool_calls: true,
+    // The ACP server reports subagent activity to its client, but that is the
+    // agent's own internal delegation, not an AIP-45 `sub_agents` surface —
+    // declared false, same posture as grok-cli.
+    sub_agents: false,
+    file_io: true,
+    // The ACP `promptCapabilities` for this server are not documented; declared
+    // false rather than overclaiming (the interactive CLI does accept pasted
+    // images, but that is not an ACP content-block channel).
+    multimodal: false,
+    // ACP session load (0.0.410+) backs the `native-resume` continuation.
+    resumable: true,
+    bidirectional: true
+  },
+  options: [
+    {
+      id: "model",
+      type: "string",
+      description: "Copilot model id for this session (e.g. `claude-sonnet-4.5`, `gpt-5`, `auto`). Applied via the ACP `model` session config option; the CLI validates the id against your plan/entitlements and rejects an unknown one."
+    },
+    {
+      id: "effort",
+      type: "enum",
+      enum: ["low", "medium", "high", "xhigh", "max"],
+      description: "Reasoning effort for this session. Applied via the ACP `effort` session config option (the server also accepts `--effort`/`--reasoning-effort` at start)."
+    },
+    {
+      id: "github_host",
+      type: "string",
+      description: "GitHub hostname for GitHub Enterprise \u2014 GHEC with data residency (e.g. `example.ghe.com`) or a GHES host. Sets `GH_HOST`; pair with `GH_ENTERPRISE_TOKEN` / `GITHUB_ENTERPRISE_TOKEN` for GitHub Enterprise Server.",
+      env: { GH_HOST: "{value}" }
+    }
+  ],
+  continuation: {
+    default: "native-resume",
+    supported: ["native-resume", "pinned-session", "transcript", "none"],
+    pinned_session: {
+      idle_timeout_ms: 18e5,
+      key_scope: ["conversation", "operator"]
+    }
+  },
+  metadata: {
+    acp: {
+      checked: "2026-10-01",
+      result: "GitHub Copilot CLI ships a first-party ACP server: `copilot --acp --stdio` (NDJSON JSON-RPC 2.0 over stdio; TCP via `--acp --port`). Added in 0.0.397 (2026-01-28), public preview. The server exposes model and reasoning-effort ACP session config options and supports loading existing sessions (0.0.410+). This adapter drives ACP, not the print/headless surface."
+    },
+    print: {
+      checked: "2026-10-01",
+      result: 'A headless one-shot surface also exists: `copilot -p "<prompt>" --output-format json` emits JSONL, with `--model`, `--resume[=ID]`, `--allow-all-tools`, `--stream`, and `--share-gist`. Not wired here \u2014 ACP is the richer posture and avoids a bespoke print event mapper.'
+    },
+    auth: {
+      checked: "2026-10-01",
+      result: "Token env precedence: COPILOT_GITHUB_TOKEN > GH_TOKEN > GITHUB_TOKEN. GitHub Enterprise Cloud (data residency) uses `copilot login --host` or GH_HOST + a token; GitHub Enterprise Server uses GH_HOST + GH_ENTERPRISE_TOKEN/GITHUB_ENTERPRISE_TOKEN (or the COPILOT_PROVIDER_GHES_* vars). BYOK (COPILOT_PROVIDER_BASE_URL/TYPE/API_KEY/MODEL) can run without a GitHub login \u2014 not wired here."
+    }
+  },
+  tags: ["copilot", "github", "acp", "agent-runtime", "coding", "enterprise"]
+});
+function copilotCliRuntime() {
+  return createAgentCliRuntime(copilotCli);
+}
+
+export { copilotCli, copilotCliRuntime };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;AAsCO,IAAM,aAA6B,cAAA,CAAe;AAAA,EACvD,IAAA,EAAM,aAAA;AAAA,EACN,EAAA,EAAI,aAAA;AAAA,EACJ,WAAA,EACE,gPAAA;AAAA,EACF,OAAA,EAAS,OAAA;AAAA,EACT,GAAA,EAAK,SAAA;AAAA;AAAA;AAAA,EAGL,QAAA,EAAU,CAAC,OAAA,EAAS,SAAS,CAAA;AAAA,EAC7B,OAAA,EAAS;AAAA,IACP,EAAE,MAAA,EAAQ,KAAA,EAAO,OAAA,EAAS,iBAAA,EAAmB,QAAQ,IAAA,EAAK;AAAA,IAC1D,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,aAAA,EAAc;AAAA,IACzC,EAAE,MAAA,EAAQ,MAAA,EAAQ,GAAA,EAAK,+BAAA;AAAgC,GACzD;AAAA,EACA,aAAA,EAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOb,GAAA,EAAK,mBAAA;AAAA,IACL,KAAA,EAAO,sBAAA;AAAA,IACP,KAAA,EAAO,WAAA;AAAA,IACP,UAAA,EAAY;AAAA,GACd;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,GAAA,EAAK,cAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,KAAA,EAAO;AAAA,MACL,GAAA,EAAK;AAAA,QACH,sBAAA;AAAA,QACA,UAAA;AAAA,QACA,cAAA;AAAA,QACA,qBAAA;AAAA,QACA;AAAA;AACF;AACF,GACF;AAAA,EACA,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,KAAA;AAAA,EACV,GAAA,EAAK,sBAAA;AAAA,EACL,OAAA,EAAS;AAAA,IACP,IAAA,EAAM,YAAA;AAAA,IACN,eAAA,EAAiB,IAAA;AAAA,IACjB,iBAAA,EAAmB;AAAA,GACrB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,UAAA,EAAY,IAAA;AAAA;AAAA;AAAA;AAAA,IAIZ,UAAA,EAAY,KAAA;AAAA,IACZ,OAAA,EAAS,IAAA;AAAA;AAAA;AAAA;AAAA,IAIT,UAAA,EAAY,KAAA;AAAA;AAAA,IAEZ,SAAA,EAAW,IAAA;AAAA,IACX,aAAA,EAAe;AAAA,GACjB;AAAA,EACA,OAAA,EAAS;AAAA,IACP;AAAA,MACE,EAAA,EAAI,OAAA;AAAA,MACJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE;AAAA,KAGJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,QAAA;AAAA,MACJ,IAAA,EAAM,MAAA;AAAA,MACN,MAAM,CAAC,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,SAAS,KAAK,CAAA;AAAA,MAC9C,WAAA,EACE;AAAA,KAEJ;AAAA,IACA;AAAA,MACE,EAAA,EAAI,aAAA;AAAA,MACJ,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE,0NAAA;AAAA,MAGF,GAAA,EAAK,EAAE,OAAA,EAAS,SAAA;AAAU;AAC5B,GACF;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,OAAA,EAAS,eAAA;AAAA,IACT,SAAA,EAAW,CAAC,eAAA,EAAiB,gBAAA,EAAkB,cAAc,MAAM,CAAA;AAAA,IACnE,cAAA,EAAgB;AAAA,MACd,eAAA,EAAiB,IAAA;AAAA,MACjB,SAAA,EAAW,CAAC,cAAA,EAAgB,UAAU;AAAA;AACxC,GACF;AAAA,EACA,QAAA,EAAU;AAAA,IACR,GAAA,EAAK;AAAA,MACH,OAAA,EAAS,YAAA;AAAA,MACT,MAAA,EACE;AAAA,KAKJ;AAAA,IACA,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,YAAA;AAAA,MACT,MAAA,EACE;AAAA,KAIJ;AAAA,IACA,IAAA,EAAM;AAAA,MACJ,OAAA,EAAS,YAAA;AAAA,MACT,MAAA,EACE;AAAA;AAMJ,GACF;AAAA,EACA,MAAM,CAAC,SAAA,EAAW,UAAU,KAAA,EAAO,eAAA,EAAiB,UAAU,YAAY;AAC5E,CAAC;AAEM,SAAS,iBAAA,GAAqC;AACnD,EAAA,OAAO,sBAAsB,UAAU,CAAA;AACzC","file":"index.mjs","sourcesContent":["/**\n * @agentproto/adapter-copilot-cli — AIP-45 adapter for GitHub Copilot CLI.\n *\n * GitHub Copilot CLI (binary `copilot`, product name \"GitHub Copilot CLI\") is\n * GitHub's official terminal coding agent — https://github.com/github/copilot-cli,\n * docs at\n * https://docs.github.com/en/copilot/concepts/agents/copilot-cli/about-copilot-cli.\n *\n * It ships a FIRST-PARTY ACP server, so — like the `grok-cli` adapter — this is\n * a `protocol: \"acp\"` arm, not a print/headless one. `copilot --acp --stdio`\n * speaks Agent Client Protocol JSON-RPC 2.0 as NDJSON over stdio (verified\n * against the official docs at\n * https://docs.github.com/en/copilot/reference/copilot-cli-reference/acp-server;\n * ACP was added in 0.0.397 on 2026-01-28 and is in public preview). The server\n * exposes model and reasoning-effort ACP session config options and supports\n * loading existing sessions.\n *\n * A headless one-shot surface also exists — `copilot -p \"<prompt>\"\n * --output-format json` emits JSONL — but the ACP arm is the richer, persistent,\n * resumable posture, and it avoids a bespoke print event mapper in the driver.\n *\n *   import { copilotCli, copilotCliRuntime } from \"@agentproto/adapter-copilot-cli\"\n *   const session = await copilotCliRuntime().start({\n *     env: { GH_TOKEN: \"github_pat_...\" },\n *   })\n *   for await (const evt of session.send({ role: \"user\", content: \"...\" })) {\n *     console.log(evt)\n *   }\n *   await session.close()\n */\n\nimport {\n  createAgentCliRuntime,\n  defineAgentCli,\n  type AgentCliHandle,\n  type AgentCliRuntime,\n} from \"@agentproto/driver-agent-cli\"\n\nexport const copilotCli: AgentCliHandle = defineAgentCli({\n  name: \"copilot-cli\",\n  id: \"copilot-cli\",\n  description:\n    \"GitHub's official Copilot CLI (`copilot --acp --stdio`) — a terminal coding agent driving GitHub-hosted models (Claude, GPT, Gemini, Grok, …) over the Agent Client Protocol. Works with github.com and GitHub Enterprise (GH_HOST).\",\n  version: \"0.1.0\",\n  bin: \"copilot\",\n  // First-party ACP server over stdio (the default transport when `--acp` is\n  // set; `--stdio` is passed explicitly to disambiguate from TCP `--port`).\n  bin_args: [\"--acp\", \"--stdio\"],\n  install: [\n    { method: \"npm\", package: \"@github/copilot\", global: true },\n    { method: \"brew\", package: \"copilot-cli\" },\n    { method: \"curl\", url: \"https://gh.io/copilot-install\" },\n  ],\n  version_check: {\n    // `copilot --version` / `-v` prints version information. The ACP server\n    // landed in 0.0.397 (2026-01-28); ACP session LOAD — the resume surface\n    // this adapter's `native-resume` continuation rides on — landed in 0.0.410\n    // (2026-02-14), so that is the floor. The exact stdout shape is UNVERIFIED\n    // (the CLI is not installed in this worktree), so the parse is the\n    // conventional semver grab.\n    cmd: \"copilot --version\",\n    parse: \"(\\\\d+\\\\.\\\\d+\\\\.\\\\d+)\",\n    range: \">=0.0.410\",\n    timeout_ms: 15_000,\n  },\n  auth: {\n    ref: \"./SECRETS.md\",\n    // Documented token precedence: COPILOT_GITHUB_TOKEN > GH_TOKEN >\n    // GITHUB_TOKEN (github.com and ghe.com subdomains). GitHub Enterprise\n    // Server uses GH_ENTERPRISE_TOKEN / GITHUB_ENTERPRISE_TOKEN. Supported\n    // token types: OAuth (`gho_`), fine-grained PAT with the \"Copilot\n    // Requests\" permission (`github_pat_`), and GitHub App user-to-server\n    // (`ghu_`). Classic PATs (`ghp_`) are NOT supported.\n    state: {\n      env: [\n        \"COPILOT_GITHUB_TOKEN\",\n        \"GH_TOKEN\",\n        \"GITHUB_TOKEN\",\n        \"GH_ENTERPRISE_TOKEN\",\n        \"GITHUB_ENTERPRISE_TOKEN\",\n      ],\n    },\n  },\n  sandbox: \"./SANDBOX.md\",\n  protocol: \"acp\",\n  acp: \"./copilot-acp.ACP.md\",\n  session: {\n    mode: \"persistent\",\n    idle_timeout_ms: 1_800_000,\n    context_carryover: true,\n  },\n  // No `models` block by design: the model menu is plan/entitlement-dependent\n  // and served under ONE GitHub identity (not a per-provider api-key route the\n  // catalog could bill), and the exact `--model` slugs are not documented in a\n  // stable table. The honest surface is the free-form `model` option below,\n  // which the ACP arm applies via the `model` session config option; the CLI\n  // validates explicit ids against the account. `models.apply` therefore\n  // defaults to `\"config\"` (ACP set_config_option), and no catalog `provider`\n  // is declared — Copilot bills through the GitHub subscription, not a\n  // provider API key.\n  capabilities: {\n    streaming: true,\n    tool_calls: true,\n    // The ACP server reports subagent activity to its client, but that is the\n    // agent's own internal delegation, not an AIP-45 `sub_agents` surface —\n    // declared false, same posture as grok-cli.\n    sub_agents: false,\n    file_io: true,\n    // The ACP `promptCapabilities` for this server are not documented; declared\n    // false rather than overclaiming (the interactive CLI does accept pasted\n    // images, but that is not an ACP content-block channel).\n    multimodal: false,\n    // ACP session load (0.0.410+) backs the `native-resume` continuation.\n    resumable: true,\n    bidirectional: true,\n  },\n  options: [\n    {\n      id: \"model\",\n      type: \"string\",\n      description:\n        \"Copilot model id for this session (e.g. `claude-sonnet-4.5`, `gpt-5`, \" +\n        \"`auto`). Applied via the ACP `model` session config option; the CLI \" +\n        \"validates the id against your plan/entitlements and rejects an unknown one.\",\n    },\n    {\n      id: \"effort\",\n      type: \"enum\",\n      enum: [\"low\", \"medium\", \"high\", \"xhigh\", \"max\"],\n      description:\n        \"Reasoning effort for this session. Applied via the ACP `effort` session \" +\n        \"config option (the server also accepts `--effort`/`--reasoning-effort` at start).\",\n    },\n    {\n      id: \"github_host\",\n      type: \"string\",\n      description:\n        \"GitHub hostname for GitHub Enterprise — GHEC with data residency \" +\n        \"(e.g. `example.ghe.com`) or a GHES host. Sets `GH_HOST`; pair with \" +\n        \"`GH_ENTERPRISE_TOKEN` / `GITHUB_ENTERPRISE_TOKEN` for GitHub Enterprise Server.\",\n      env: { GH_HOST: \"{value}\" },\n    },\n  ],\n  continuation: {\n    default: \"native-resume\",\n    supported: [\"native-resume\", \"pinned-session\", \"transcript\", \"none\"],\n    pinned_session: {\n      idle_timeout_ms: 1_800_000,\n      key_scope: [\"conversation\", \"operator\"],\n    },\n  },\n  metadata: {\n    acp: {\n      checked: \"2026-10-01\",\n      result:\n        \"GitHub Copilot CLI ships a first-party ACP server: `copilot --acp --stdio` \" +\n        \"(NDJSON JSON-RPC 2.0 over stdio; TCP via `--acp --port`). Added in 0.0.397 \" +\n        \"(2026-01-28), public preview. The server exposes model and reasoning-effort \" +\n        \"ACP session config options and supports loading existing sessions (0.0.410+). \" +\n        \"This adapter drives ACP, not the print/headless surface.\",\n    },\n    print: {\n      checked: \"2026-10-01\",\n      result:\n        \"A headless one-shot surface also exists: `copilot -p \\\"<prompt>\\\" \" +\n        \"--output-format json` emits JSONL, with `--model`, `--resume[=ID]`, \" +\n        \"`--allow-all-tools`, `--stream`, and `--share-gist`. Not wired here — \" +\n        \"ACP is the richer posture and avoids a bespoke print event mapper.\",\n    },\n    auth: {\n      checked: \"2026-10-01\",\n      result:\n        \"Token env precedence: COPILOT_GITHUB_TOKEN > GH_TOKEN > GITHUB_TOKEN. \" +\n        \"GitHub Enterprise Cloud (data residency) uses `copilot login --host` or \" +\n        \"GH_HOST + a token; GitHub Enterprise Server uses GH_HOST + \" +\n        \"GH_ENTERPRISE_TOKEN/GITHUB_ENTERPRISE_TOKEN (or the COPILOT_PROVIDER_GHES_* \" +\n        \"vars). BYOK (COPILOT_PROVIDER_BASE_URL/TYPE/API_KEY/MODEL) can run without \" +\n        \"a GitHub login — not wired here.\",\n    },\n  },\n  tags: [\"copilot\", \"github\", \"acp\", \"agent-runtime\", \"coding\", \"enterprise\"],\n})\n\nexport function copilotCliRuntime(): AgentCliRuntime {\n  return createAgentCliRuntime(copilotCli)\n}\n\nexport type { AgentCliHandle, AgentCliRuntime }\n"]}

package/package.json

@@ -1,6 +1,62 @@
 {
   "name": "@agentproto/adapter-copilot-cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.2.0",
+  "description": "@agentproto/adapter-copilot-cli — AIP-45 AGENT-CLI adapter for GitHub's official Copilot CLI (`copilot --acp --stdio`). Public github.com and GitHub Enterprise (GH_HOST).",
+  "keywords": [
+    "agentproto",
+    "aip-45",
+    "copilot",
+    "github",
+    "acp",
+    "agent-cli",
+    "adapter"
+  ],
+  "homepage": "https://agentproto.sh/docs/aip-45",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/agentproto/ts",
+    "directory": "adapters/copilot-cli"
+  },
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "dist/index.mjs",
+  "module": "dist/index.mjs",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
+    },
+    "./COPILOT.md": "./COPILOT.md",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "COPILOT.md",
+    "copilot-acp.ACP.md",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@agentproto/driver-agent-cli": "2.6.4"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.5",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.7",
+    "@agentproto/tooling": "0.1.0"
+  },
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsup",
+    "clean": "rm -rf dist",
+    "check-types": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "test:watch": "vitest"
+  }
 }

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.