@github/copilot-language-server 1.553.0 → 1.554.0

package/dist/node_modules/@github/copilot-sdk/dist/cjs/cliVersion.js

@@ -22,7 +22,7 @@ __export(cliVersion_exports, {
   COPILOT_CLI_VERSION: () => COPILOT_CLI_VERSION
 });
 module.exports = __toCommonJS(cliVersion_exports);
-const COPILOT_CLI_VERSION = "1.0.94";
+const COPILOT_CLI_VERSION = "1.0.96";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/node_modules/@github/copilot-sdk/dist/cjs/client.js

@@ -1315,6 +1315,7 @@ class CopilotClient {
           isTerminal: tool.isTerminal
         })),
         toolSearch: config.toolSearch,
+        imageGeneration: config.imageGeneration,
         canvases: config.canvases?.map((canvas) => canvas.declaration),
         requestCanvasRenderer: config.requestCanvasRenderer,
         requestExtensions: config.requestExtensions,
@@ -1591,6 +1592,7 @@ class CopilotClient {
           isTerminal: tool.isTerminal
         })),
         toolSearch: config.toolSearch,
+        imageGeneration: config.imageGeneration,
         canvases: config.canvases?.map((canvas) => canvas.declaration),
         workflows: workflows?.map((workflow) => workflow.meta),
         requestCanvasRenderer: config.requestCanvasRenderer,
@@ -2453,6 +2455,7 @@ stderr: ${stderrOutput}`
   /** Starts the in-process FFI runtime with SDK-managed typed options. */
   async startInProcessFfi() {
     const explicitEntrypoint = this.resolvedEnv.COPILOT_CLI_PATH;
+    const cliLoginSyncIntegrationId = this.resolvedEnv.GITHUB_COPILOT_INTEGRATION_ID?.trim() || void 0;
     let runtimeLibrary;
     if (explicitEntrypoint) {
       const entrypointDirectory = (0, import_node_path.dirname)((0, import_node_path.resolve)(explicitEntrypoint));
@@ -2464,7 +2467,8 @@ stderr: ${stderrOutput}`
         "runtime.node"
       );
     } else {
-      runtimeLibrary = (0, import_node_path.join)((0, import_node_path.dirname)(await getBundledRuntimePath()), "runtime.node");
+      const bundledRuntimePath = await getBundledRuntimePath();
+      runtimeLibrary = (0, import_node_path.join)((0, import_node_path.dirname)(bundledRuntimePath), "runtime.node");
     }
     const { FfiRuntimeHost } = await import("./ffiRuntimeHost.js");
     const environment = {};
@@ -2493,6 +2497,9 @@ stderr: ${stderrOutput}`
     if (this.options.enableRemoteSessions) {
       args.push("--remote");
     }
+    if (cliLoginSyncIntegrationId) {
+      args.push(`--cli-login-sync-integration-id=${cliLoginSyncIntegrationId}`);
+    }
     const host = FfiRuntimeHost.create(runtimeLibrary, explicitEntrypoint, environment, args);
     this.ffiHost = host;
     await host.start();

package/dist/node_modules/@github/copilot-sdk/dist/cjs/extension.js

@@ -42,12 +42,14 @@ async function joinSession(config = {}) {
   const {
     extensionSdkPath: _stripped,
     skillProvider: _strippedSkillProvider,
+    imageGeneration: _strippedImageGeneration,
     workflows,
     requestedEnvironmentVariables,
     ...rest
   } = config;
   void _stripped;
   void _strippedSkillProvider;
+  void _strippedImageGeneration;
   return client.resumeSessionForExtension(
     sessionId,
     {

package/dist/node_modules/@github/copilot-sdk/dist/cjs/generated/rpc.js

@@ -707,6 +707,17 @@ function createServerRpc(connection) {
        * @returns Effective enterprise managed settings for an account, resolved without a session.
        */
       resolve: async (params) => connection.sendRequest("managedSettings.resolve", params),
+      /** @experimental */
+      permissions: {
+        /**
+         * Pure, sessionless evaluation of operations against a supplied permissionsContext. Performs no policy discovery, I/O, prompting, navigation, permission grants, or sandbox changes. Obtain the context from managedSettings.resolve or session.managedSettings.get, or reuse an in-memory context. Results preserve input order and duplicates. Consumers must block deny, obtain approval for ask, and use their normal permission flow for unmanaged. Unknown policy returns failClosed with every operation denied. This is not a substitute for user permissions or other security controls.
+         *
+         * @param params Managed policy context and ordered operations for pure, sessionless evaluation.
+         *
+         * @returns Ordered managed permission verdicts and the supplied policy's fail-closed posture.
+         */
+        evaluate: async (params) => connection.sendRequest("managedSettings.permissions.evaluate", params)
+      },
       /**
        * Returns the managed-settings authoring JSON schema with descriptive `x-composition` annotations aligned with the shared settings-engine vocabulary. These annotations are not a complete runtime composition contract: model, effortLevel, and contextTier remain coupled. Use `managedSettings.compose` for the runtime's effective result. Performs no I/O.
        *
@@ -1068,6 +1079,42 @@ function createInternalServerRpc(connection) {
      */
     connect: async (params) => connection.sendRequest("connect", params),
     /** @experimental */
+    mcp: {
+      /** @experimental */
+      registry: {
+        /**
+         * Allocates an ID for one cancellable MCP registry search. The ID exists before the search starts, so callers can cancel before it starts. The networking stack supplies the cancellation namespace. The runtime retains at most 1,024 unused IDs. At capacity, another allocation can reclaim an unused ID. Active searches retain their IDs until they finish.
+         *
+         * @returns Request id naming a cancellable registry search.
+         */
+        allocateRequestId: async () => connection.sendRequest("mcp.registry.allocateRequestId", {}),
+        /**
+         * Searches the MCP registry the supplied credential may read, resolving the registry endpoint from policy first. Hosts usually send credential-free `AuthIdentity`; a `token` identity can be resolved only when it embeds a token, while `env` and `gh-cli` identities can use a token embedded in the request first. The runtime follows registry pages, keeps the newest entry per server name, cuts the list to `limit`, and sorts an empty-query result by GitHub stars. Each server object is carried opaquely.
+         *
+         * @param params Registry search terms, the credential to search under, and the request id that makes the search cancellable.
+         *
+         * @returns Servers selected from the registry response.
+         */
+        search: async (params) => connection.sendRequest("mcp.registry.search", params),
+        /**
+         * Abandons the registry search that uses the given request ID. It acts only on IDs from `mcp.registry.allocateRequestId`, so it never cancels another component's request. Answers `canceled: true` when it stops a running search. Answers `canceled: false` for unknown or reclaimed IDs, completed or canceled searches, and unused reservations. It releases an unused reservation, so a later search with that ID is refused.
+         *
+         * @param params Registry search to abandon.
+         *
+         * @returns Whether the cancel reached a live search.
+         */
+        cancel: async (params) => connection.sendRequest("mcp.registry.cancel", params)
+      },
+      /**
+       * Reports whether the gh-replaceable GitHub MCP tools may be clipped for a session, which a host feeds back as the `excludeGhReplaceableTools` build option. The tools are redundant only when the session can reach a shell *and* the host has the `gh` that would replace them, so both halves are decided here. The shell half runs the platform shell tool through the runtime's own tool-filter matcher, so entry forms like `builtin:bash` and `builtin:*` behave exactly as they do when a session builds its tool catalog. The host half probes for `gh`, and is skipped entirely when the filters already rule the shell out. Host presence alone is not enough: a session restricted to, say, `view` would otherwise lose the built-in issue-read fallback while having no shell to replace it with. The answer describes the host the runtime runs on, so it is never forwarded to a remote engine.
+       *
+       * @param params The session tool filters that decide whether the session still has a shell to run `gh` with.
+       *
+       * @returns Whether the gh-replaceable GitHub MCP tools may be clipped for the session described by the request.
+       */
+      shouldExcludeGitHubTools: async (params) => connection.sendRequest("mcp.shouldExcludeGitHubTools", params)
+    },
+    /** @experimental */
     agents: {
       /**
        * Lists the agents this runtime ships, by name. A consumer separating shipped agents from ones the user or a plugin authored should compare against these names rather than against `AgentInfo.source`: an authored agent may carry the `builtin` source while not being one of these, and the runtime treats the two as separate questions. `disableableNames` is the subset a user may turn off, which a client needs to decide whether to offer a toggle. `yamlBasedNames` is the subset backed by a shipped YAML definition, which a client needs before asking the runtime to load one.
@@ -1125,7 +1172,7 @@ function createInternalServerRpc(connection) {
        */
       loadForConfigDir: async (params) => connection.sendRequest("globalState.loadForConfigDir", params),
       /**
-       * Records one top-level key in the host's machine-wide state, the counterpart to `globalState.load`. A host calls this to remember that it has shown an onboarding step, asked a one-off question, or completed a migration, so the next run can skip it. Only the named key is replaced and the rest of the document is preserved, which lets two writers record different flags without overwriting each other; passing no value removes the key instead. Only the keys a host records itself are writable: `appInstallNudgeResponded`, `appTipShown`, `askedSetupTerminals`, `autoFeedbackLastPromptedAt`, `firstLaunchAt`, `recentModelIds`, `sandboxCredentialProxyCaDeclined` and `sandboxOnboardingShown`. Every other key is refused, including `installedPlugins`, the stored credentials, `trustedFolders`, the staff flags and the signed-in accounts. Plugin enablement must use the plugin APIs, which apply repository and managed-policy checks.
+       * Records one top-level key in the host's machine-wide state, the counterpart to `globalState.load`. A host calls this to remember that it has shown an onboarding step, asked a one-off question, or completed a migration, so the next run can skip it. Only the named key is replaced and the rest of the document is preserved, which lets two writers record different flags without overwriting each other; passing no value removes the key instead. Only the keys a host records itself are writable: `appTipShown`, `askedSetupTerminals`, `autoFeedbackLastPromptedAt`, `firstLaunchAt`, `recentModelIds`, `sandboxCredentialProxyCaDeclined` and `sandboxOnboardingShown`. Every other key is refused, including `installedPlugins`, the stored credentials, `trustedFolders`, the staff flags and the signed-in accounts. Plugin enablement must use the plugin APIs, which apply repository and managed-policy checks.
        *
        * @param params A single top-level key to record in the host's machine-wide state. The write replaces only that key and leaves the rest of the document untouched, so two writers recording different one-off flags do not overwrite each other. The stored credential keys cannot be written through this method.
        */
@@ -1355,6 +1402,12 @@ function createSessionRpc(connection, sessionId) {
        * @returns Managed sandbox enforcement state for a session.
        */
       getEnforcementStatus: async () => connection.sendRequest("session.sandbox.getEnforcementStatus", { sessionId }),
+      /**
+       * Lists possible secret-bearing environment variables available to new sandboxed shells that are not already covered by credential masking. Uses local name rules and known-provider host suggestions, never returns secret values, and changes no settings or network permissions. Returns no suggestions while the session is not sandboxed.
+       *
+       * @returns Possible unconfigured secrets in the sandbox shell environment, sorted by variable name, with no secret values.
+       */
+      getCredentialSuggestions: async () => connection.sendRequest("session.sandbox.getCredentialSuggestions", { sessionId }),
       /**
        * Disables sandboxing for the remainder of the current session and approves the referenced pending sandbox-bypass permission request. The request is rejected unless the exact request is still pending and the effective sandbox policy permits bypass.
        *
@@ -2590,7 +2643,15 @@ function createSessionRpc(connection, sessionId) {
        *
        * @param params Optional flags controlling which side effects the reload performs.
        */
-      reload: async (params) => connection.sendRequest("session.plugins.reload", { ...params, sessionId })
+      reload: async (params) => connection.sendRequest("session.plugins.reload", { ...params, sessionId }),
+      /**
+       * Installs or updates the plugins the session's managed settings require now, without waiting for the next automatic attempt after a failure, then reloads plugins. Reports progress and failures with the same `session.info` and `session.warning` events as automatic preparation. Fails when the runtime does not prepare managed plugins for the session.
+       *
+       * @param params Plugins required by the session's managed settings to install or update again.
+       *
+       * @returns Per-plugin outcomes of retrying the plugins required by the session's managed settings.
+       */
+      retryManaged: async (params) => connection.sendRequest("session.plugins.retryManaged", { ...params, sessionId })
     },
     /** @experimental */
     provider: {

package/dist/node_modules/@github/copilot-sdk/package.json

@@ -5,8 +5,8 @@
         "url": "https://github.com/github/copilot-agent-runtime.git",
         "directory": "src/sdk/nodejs"
     },
-    "version": "1.0.18",
-    "copilotCliVersion": "1.0.94",
+    "version": "1.0.20",
+    "copilotCliVersion": "1.0.96",
     "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
     "main": "./dist/cjs/index.js",
     "types": "./dist/index.d.ts",
@@ -104,18 +104,18 @@
         "README.md"
     ],
     "copilotRuntime": {
-        "sourceSha": "fdeb5949944ebccf3bb4dda8552a21aa1a09b6f6",
-        "version": "1.0.94",
+        "sourceSha": "8227e3a7b5f74c8dde298fcc69dcb27a9a044a93",
+        "version": "1.0.96",
         "visibility": "public"
     },
     "optionalDependencies": {
-        "@github/copilot-sdk-darwin-arm64": "1.0.18",
-        "@github/copilot-sdk-darwin-x64": "1.0.18",
-        "@github/copilot-sdk-linux-arm64": "1.0.18",
-        "@github/copilot-sdk-linux-x64": "1.0.18",
-        "@github/copilot-sdk-linuxmusl-arm64": "1.0.18",
-        "@github/copilot-sdk-linuxmusl-x64": "1.0.18",
-        "@github/copilot-sdk-win32-arm64": "1.0.18",
-        "@github/copilot-sdk-win32-x64": "1.0.18"
+        "@github/copilot-sdk-darwin-arm64": "1.0.20",
+        "@github/copilot-sdk-darwin-x64": "1.0.20",
+        "@github/copilot-sdk-linux-arm64": "1.0.20",
+        "@github/copilot-sdk-linux-x64": "1.0.20",
+        "@github/copilot-sdk-linuxmusl-arm64": "1.0.20",
+        "@github/copilot-sdk-linuxmusl-x64": "1.0.20",
+        "@github/copilot-sdk-win32-arm64": "1.0.20",
+        "@github/copilot-sdk-win32-x64": "1.0.20"
     }
 }

package/package.json

@@ -11,7 +11,7 @@
         "url": "git+https://github.com/github/copilot-language-server-release.git"
     },
     "license": "MIT",
-    "version": "1.553.0",
+    "version": "1.554.0",
     "bin": {
         "copilot-language-server": "../dist/language-server.js"
     },
@@ -40,25 +40,25 @@
         "vscode-languageserver-protocol": "^3.17.5"
     },
     "optionalDependencies": {
-        "@github/copilot-language-server-win32-x64": "1.553.0",
-        "@github/copilot-language-server-win32-arm64": "1.553.0",
-        "@github/copilot-language-server-linux-x64": "1.553.0",
-        "@github/copilot-language-server-linux-arm64": "1.553.0",
-        "@github/copilot-language-server-darwin-x64": "1.553.0",
-        "@github/copilot-language-server-darwin-arm64": "1.553.0",
-        "@github/copilot-win32-x64": "1.0.94",
-        "@github/copilot-win32-arm64": "1.0.94",
-        "@github/copilot-linux-x64": "1.0.94",
-        "@github/copilot-linux-arm64": "1.0.94",
-        "@github/copilot-darwin-x64": "1.0.94",
-        "@github/copilot-darwin-arm64": "1.0.94",
-        "@github/copilot-sdk-win32-x64": "1.0.18",
-        "@github/copilot-sdk-win32-arm64": "1.0.18",
-        "@github/copilot-sdk-linux-x64": "1.0.18",
-        "@github/copilot-sdk-linux-arm64": "1.0.18",
-        "@github/copilot-sdk-darwin-x64": "1.0.18",
-        "@github/copilot-sdk-darwin-arm64": "1.0.18"
+        "@github/copilot-language-server-win32-x64": "1.554.0",
+        "@github/copilot-language-server-win32-arm64": "1.554.0",
+        "@github/copilot-language-server-linux-x64": "1.554.0",
+        "@github/copilot-language-server-linux-arm64": "1.554.0",
+        "@github/copilot-language-server-darwin-x64": "1.554.0",
+        "@github/copilot-language-server-darwin-arm64": "1.554.0",
+        "@github/copilot-win32-x64": "1.0.96",
+        "@github/copilot-win32-arm64": "1.0.96",
+        "@github/copilot-linux-x64": "1.0.96",
+        "@github/copilot-linux-arm64": "1.0.96",
+        "@github/copilot-darwin-x64": "1.0.96",
+        "@github/copilot-darwin-arm64": "1.0.96",
+        "@github/copilot-sdk-win32-x64": "1.0.20",
+        "@github/copilot-sdk-win32-arm64": "1.0.20",
+        "@github/copilot-sdk-linux-x64": "1.0.20",
+        "@github/copilot-sdk-linux-arm64": "1.0.20",
+        "@github/copilot-sdk-darwin-x64": "1.0.20",
+        "@github/copilot-sdk-darwin-arm64": "1.0.20"
     },
     "buildType": "prod",
-    "build": "173"
+    "build": "174"
 }