@github/copilot-sdk-linuxmusl-arm64 1.0.14 → 1.0.15-preview.1

package/copilot-sdk/generated/session-events.d.ts

@@ -9,7 +9,7 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
 /**
  * Union of all session event variants emitted by the Copilot CLI runtime.
  */
-export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | WarningEvent | ModelChangeEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | FactoryRunUpdatedEvent | FactoryRunStartedEvent | FactoryRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
+export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | IndexedSearchEvent | WarningEvent | ModelChangeEvent | ModelDeselectedEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | PermissionRecoveryEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | PermissionAssentDetectedEvent | PermissionContextualAuthorizationEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | FactoryRunUpdatedEvent | FactoryRunStartedEvent | FactoryRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
 /**
  * Routing preference used when the session model is `auto`. `fast` is an integrator-only latency preset and is not a first-party GitHub Copilot product preference.
  */
@@ -112,6 +112,165 @@ export type AutopilotObjectiveChangedStatus =
  | "cap_reached"
 /** Objective was completed by the agent. */
  | "completed";
+/**
+ * Transient indexed-search status and diagnostics from the live runtime service. Never persisted or used to infer activation from session history.
+ */
+export type IndexedSearchData = {
+    /**
+     * Indexed-search event variant discriminator.
+     */
+    kind: "status";
+    state: IndexedSearchState;
+} | {
+    disabledReason?: IndexedSearchDisabledReason;
+    /**
+     * Whether the repository meets the automatic indexing file-count threshold, when known.
+     */
+    eligible?: boolean;
+    /**
+     * Startup failure details. May contain sensitive user data; restricted telemetry only.
+     */
+    errorMessage?: string;
+    /**
+     * Number of text files counted in the repository.
+     */
+    fileCount?: number;
+    /**
+     * Whether indexed search was explicitly enabled through the environment.
+     */
+    forcedByEnv: boolean;
+    /**
+     * Indexed-search event variant discriminator.
+     */
+    kind: "startup";
+    outcome: IndexedSearchOutcome;
+    /**
+     * Wall-clock duration of startup in milliseconds.
+     */
+    startupDurationMs: number;
+    /**
+     * Whether waiting for index readiness was requested, including skipped attempts.
+     */
+    warmStart: boolean;
+} | {
+    /**
+     * Server failure details. May contain sensitive user data; restricted telemetry only.
+     */
+    errorMessage?: string;
+    errorType: IndexedSearchErrorType;
+    /**
+     * Process exit code, when available.
+     */
+    exitCode?: number;
+    /**
+     * Indexed-search event variant discriminator.
+     */
+    kind: "server_error";
+} | {
+    /**
+     * Number of added files.
+     */
+    addedFileCount?: number;
+    /**
+     * Number of modified files.
+     */
+    changedFileCount?: number;
+    /**
+     * Number of deleted files.
+     */
+    deletedFileCount?: number;
+    /**
+     * Indexed-search event variant discriminator.
+     */
+    kind: "incremental";
+    phase: IndexedSearchIncrementalPhase;
+    /**
+     * Total number of detected changes.
+     */
+    totalChangeCount?: number;
+    /**
+     * Total incremental indexing duration in milliseconds.
+     */
+    totalDurationMs?: number;
+    /**
+     * Index update duration in milliseconds.
+     */
+    updateDurationMs?: number;
+    /**
+     * Workspace scan duration in milliseconds.
+     */
+    walkDurationMs?: number;
+};
+/**
+ * Live indexed-search state for this session activation, never inferred from persisted history.
+ */
+export type IndexedSearchState = 
+/** Indexed search is not active for this session. */
+"disabled"
+/** Indexed-search startup is in progress. */
+ | "starting"
+/** The indexed-search server started successfully; its index may still be warming. */
+ | "enabled"
+/** The indexed-search server and its index are ready. */
+ | "ready"
+/** Indexed-search startup or the active server failed. */
+ | "failed";
+/**
+ * Configuration, policy, or workspace condition that disabled indexed search.
+ */
+export type IndexedSearchDisabledReason = 
+/** Indexed search was explicitly disabled by the environment. */
+"use_tgrep_false"
+/** Search uses the external ripgrep binary instead of bundled search. */
+ | "use_builtin_ripgrep_false"
+/** Organization policy disables indexed search. */
+ | "organization"
+/** Authentication has not resolved organization policy. */
+ | "organization_policy_auth_pending"
+/** Organization policy could not be determined. */
+ | "organization_policy_unknown"
+/** The workspace uses a virtualized or network filesystem. */
+ | "virtual_filesystem"
+/** The workspace is inside a Windows cloud-sync root. */
+ | "cloud_sync_root"
+/** The Windows cloud-sync safety check failed. */
+ | "cloud_sync_detection_failed"
+/** The workspace is not available on the runtime's local filesystem. */
+ | "workspace_not_local";
+/**
+ * Result of an indexed-search startup attempt.
+ */
+export type IndexedSearchOutcome = 
+/** A new indexed-search server was started. */
+"started"
+/** The repository has too few files for automatic indexing. */
+ | "skipped_below_threshold"
+/** No Git repository was found and indexing was not forced. */
+ | "skipped_no_gitroot"
+/** Configuration, policy, or workspace safety disabled indexing. */
+ | "skipped_disabled"
+/** An existing indexed-search server was reused. */
+ | "reused_existing"
+/** The startup attempt failed. */
+ | "failed";
+/**
+ * Category of an indexed-search server failure.
+ */
+export type IndexedSearchErrorType = 
+/** The indexed-search server could not be spawned. */
+"spawn_error"
+/** The indexed-search server exited unexpectedly. */
+ | "unexpected_exit"
+/** The indexed-search server was terminated by a signal. */
+ | "killed_by_signal";
+/**
+ * Phase of an incremental indexed-search update.
+ */
+export type IndexedSearchIncrementalPhase = 
+/** A workspace scan found changes to index. */
+"changes_detected"
+/** The incremental index update completed. */
+ | "updated";
 /**
  * Origin of an effective session model change.
  */
@@ -136,8 +295,16 @@ export type ModelChangeSource =
  | "plan_mode"
 /** The runtime selected the model automatically, such as rate-limit recovery or refusal fallback. */
  | "automatic"
+/** The user selected the promoted model from the changeboarding card or its keyboard shortcut. */
+ | "changeboarding_shortcut"
 /** An SDK or RPC caller selected the model. */
  | "sdk";
+/**
+ * Why the session no longer has an explicitly selected model.
+ */
+export type ModelDeselectedReason = 
+/** A host-managed provider snapshot no longer publishes the selected model. */
+"provider_withdrawn";
 /**
  * Auto preferences that Copilot API can recommend.
  */
@@ -219,6 +386,94 @@ export type CompactionTrigger =
  | "memory_pressure"
 /** Compaction requested while switching to a model with a smaller context window. */
  | "model_switch";
+/**
+ * Category of structured task blocker
+ */
+export type TaskBlockerKind = 
+/** Autopilot permission recovery requires intervention or has no safe autonomous path. */
+"permission_recovery";
+/**
+ * Runtime handling applied to a recovery attempt
+ */
+export type PermissionRecoveryAttemptDisposition = 
+/** The request was denied without prompting so the agent could try an alternative. */
+"deferred"
+/** The request was surfaced to an interactive responder. */
+ | "prompted"
+/** The interactive responder approved the request. */
+ | "approved"
+/** The interactive responder denied the request or became unavailable. */
+ | "denied"
+/** The request exhausted unattended recovery and produced a blocked outcome. */
+ | "blocked"
+/** A tool call succeeded as an equivalent alternative. */
+ | "succeeded";
+/**
+ * Controlled reason for an individual attempt disposition
+ */
+export type PermissionRecoveryAttemptReason = 
+/** The attempt required permission that Assisted Permissions could not grant. */
+"permission_required"
+/** The request repeated an earlier attempt. */
+ | "repeated_attempt"
+/** The request exceeded the bounded number of distinct attempts. */
+ | "attempts_exhausted"
+/** The interactive responder approved the request. */
+ | "permission_approved"
+/** The interactive responder denied the request. */
+ | "permission_denied"
+/** The interactive responder became unavailable. */
+ | "responder_unavailable"
+/** The tool call succeeded without the blocked permission. */
+ | "equivalent_alternative_succeeded";
+/**
+ * Relationship of an attempt to earlier permission requests
+ */
+export type PermissionRecoveryAttemptRelation = 
+/** The first denied permission request in the episode. */
+"initial"
+/** A request equivalent to an earlier attempt. */
+ | "retry"
+/** A distinct request or a successful alternative tool call. */
+ | "alternative";
+/**
+ * Action selected when autonomous recovery cannot continue
+ */
+export type PermissionRecoveryOnBlocked = 
+/** Surface the existing permission prompt to a response-capable client. */
+"ask"
+/** Return a structured unsuccessful blocked outcome because no responder is available. */
+ | "fail";
+/**
+ * Controlled reason for a permission-recovery episode transition
+ */
+export type PermissionRecoveryReason = 
+/** An action required permission that Assisted Permissions could not grant. */
+"permission_required"
+/** The agent repeated an equivalent permission request instead of making progress. */
+ | "repeated_attempt"
+/** The bounded number of distinct permission attempts was exhausted. */
+ | "attempts_exhausted"
+/** A responder approved the escalated permission request. */
+ | "permission_approved"
+/** A responder denied the escalated permission request. */
+ | "permission_denied"
+/** The response-capable client became unavailable while escalation was pending. */
+ | "responder_unavailable"
+/** A later tool call succeeded without requiring the blocked permission. */
+ | "equivalent_alternative_succeeded";
+/**
+ * Lifecycle state of a permission-recovery episode
+ */
+export type PermissionRecoveryStatus = 
+/** Autopilot may try a bounded equivalent alternative. */
+"recovering"
+/** An interactive permission response is required. */
+ | "awaiting_approval"
+/** The episode ended through approval or a successful equivalent alternative. */
+ | "resolved"
+/** No autonomous path remains and the task requires intervention. */
+ | "blocked";
 /**
  * Semantic result of evaluating a task completion request
  */
@@ -482,6 +737,20 @@ export type AbortReason =
  | "user_abort"
 /** Autopilot stopped the run because the active objective reached its user-set --max-ai-credits limit. */
  | "autopilot_credit_limit";
+/**
+ * Configuration source: user, workspace, plugin, builtin, or managed
+ */
+export type McpServerSource = 
+/** Server configured in the user's global MCP configuration. */
+"user"
+/** Server configured by the current workspace. */
+ | "workspace"
+/** Server contributed by an installed plugin. */
+ | "plugin"
+/** Server bundled with the runtime. */
+ | "builtin"
+/** Server supplied by a trusted host-managed catalog. */
+ | "managed";
 /**
  * Transport mechanism: stdio, http, sse (deprecated), or memory (in-process MCP server)
  */
@@ -565,18 +834,6 @@ export type SkillInvokedTrigger =
  | "agent-invoked"
 /** Skill content loaded as part of another context, such as a configured custom agent or subagent. */
  | "context-load";
-/**
- * Where the model input for a task-tool sub-agent came from.
- */
-export type SubagentTaskModelSource = 
-/** The spawning agent supplied the task tool's model argument. */
-"task_argument"
-/** The task omitted a model and the per-sub-agent settings entry supplied a concrete one. */
- | "subagent_configuration"
-/** The task omitted a model and the user-defined custom agent's definition supplied one. */
- | "custom_agent_definition"
-/** Neither the task call, the per-sub-agent settings entry, nor a custom agent definition supplied a model. */
- | "unset";
 /**
  * Authority or runtime mechanism responsible for sub-agent model selection.
  */
@@ -595,6 +852,18 @@ export type SubagentModelSelectionSource =
  | "agent_definition_default"
 /** Runtime policy, Auto mode, or an experiment selected the model. */
  | "runtime_policy";
+/**
+ * Where the model input for a task-tool sub-agent came from.
+ */
+export type SubagentTaskModelSource = 
+/** The spawning agent supplied the task tool's model argument. */
+"task_argument"
+/** The task omitted a model and the per-sub-agent settings entry supplied a concrete one. */
+ | "subagent_configuration"
+/** The task omitted a model and the user-defined custom agent's definition supplied one. */
+ | "custom_agent_definition"
+/** Neither the task call, the per-sub-agent settings entry, nor a custom agent definition supplied a model. */
+ | "unset";
 /**
  * Binary asset type discriminator. Use "image" for images and "resource" otherwise.
  */
@@ -831,6 +1100,8 @@ export type McpHeadersRefreshCompletedOutcome =
 "headers"
 /** The host responded with no dynamic headers. */
  | "none"
+/** The host credential broker rejected or failed the refresh. */
+ | "error"
 /** No response arrived within the bounded window. */
  | "timeout";
 /**
@@ -976,18 +1247,6 @@ export type AgentModelPolicy =
 "preferred"
 /** Require subagent execution to use one of the authored models. */
  | "required";
-/**
- * Configuration source: user, workspace, plugin, or builtin
- */
-export type McpServerSource = 
-/** Server configured in the user's global MCP configuration. */
-"user"
-/** Server configured by the current workspace. */
- | "workspace"
-/** Server contributed by an installed plugin. */
- | "plugin"
-/** Server bundled with the runtime. */
- | "builtin";
 /**
  * Connection status: connected, failed, needs-auth, pending, disabled, stopped, or not_configured
  */
@@ -1702,6 +1961,36 @@ export interface InfoData {
      */
     url?: string;
 }
+/**
+ * Session event "session.indexed_search". Transient indexed-search status and diagnostics from the live runtime service. Never persisted or used to infer activation from session history.
+ */
+export interface IndexedSearchEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: IndexedSearchData;
+    /**
+     * Always true for events that are transient and not persisted to the session event log on disk.
+     */
+    ephemeral: true;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "session.indexed_search".
+     */
+    type: "session.indexed_search";
+}
 /**
  * Session event "session.warning". Warning message for timeline display with categorization
  */
@@ -1819,6 +2108,46 @@ export interface ModelChangeData {
     source?: ModelChangeSource;
     verbosity?: Verbosity;
 }
+/**
+ * Session event "session.model_deselected". The model the user had explicitly selected is no longer available, because the host that published it withdrew it, so the session no longer has an explicit selection. The next turn resolves a default as though the user had never chosen a model. Clients should stop presenting the previous model as selected. This event is durable because resume rebuilds the selected model from the event log; without it a resumed session would restore a model its provider no longer serves. Reasoning effort, verbosity, and other session-level preferences are deliberately unchanged, because they belong to the session rather than to the model.
+ */
+export interface ModelDeselectedEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: ModelDeselectedData;
+    /**
+     * When true, the event is transient and not persisted to the session event log on disk
+     */
+    ephemeral?: boolean;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "session.model_deselected".
+     */
+    type: "session.model_deselected";
+}
+/**
+ * The model the user had explicitly selected is no longer available, because the host that published it withdrew it, so the session no longer has an explicit selection. The next turn resolves a default as though the user had never chosen a model. Clients should stop presenting the previous model as selected. This event is durable because resume rebuilds the selected model from the event log; without it a resumed session would restore a model its provider no longer serves. Reasoning effort, verbosity, and other session-level preferences are deliberately unchanged, because they belong to the session rather than to the model.
+ */
+export interface ModelDeselectedData {
+    /**
+     * Model that was selected before the host withdrew it.
+     */
+    previousModel: string;
+    reason: ModelDeselectedReason;
+}
 /**
  * Session event "session.auto_tier_recommendation". Live-only Auto preference recommendation from Copilot API after a successful Auto model call.
  */
@@ -2898,6 +3227,7 @@ export interface CompactionCompleteData {
      * GitHub request tracing ID (x-github-request-id header) for the compaction LLM call
      */
     requestId?: string;
+    responsesReasoning?: ResponsesReasoning;
     /**
      * Copilot service request ID (x-copilot-service-request-id header) for the compaction LLM call
      */
@@ -2986,6 +3316,23 @@ export interface CompactionCompleteCompactionTokensUsedCopilotUsageTokenDetail {
      */
     tokenType: string;
 }
+/**
+ * Original request-level and effective conversation reasoning effort for a Responses history boundary
+ */
+export interface ResponsesReasoning {
+    /**
+     * Effective effort selected before this message, independent of the response-level reasoning field
+     */
+    effort: string;
+    /**
+     * Original request-level effort, retained while replaying this conversation prefix
+     */
+    initialEffort: string;
+    /**
+     * Provider model whose reasoning settings this boundary records
+     */
+    model: string;
+}
 /**
  * Session event "session.task_complete". Task completion notification with summary from the agent
  */
@@ -3020,6 +3367,7 @@ export interface TaskCompleteEvent {
  * Task completion notification with summary from the agent
  */
 export interface TaskCompleteData {
+    blocker?: TaskBlocker;
     /**
      * Active autopilot objective ID evaluated by the completion reviewer
      */
@@ -3038,6 +3386,64 @@ export interface TaskCompleteData {
      */
     summary?: string;
 }
+/**
+ * Structured reason that the task cannot continue without intervention
+ */
+/** @experimental */
+export interface TaskBlocker {
+    kind: TaskBlockerKind;
+    permissionRecovery: PermissionRecoveryData;
+    reason: PermissionRecoveryReason;
+    /**
+     * Whether a later user response or steering message can resume the task
+     */
+    resumable: boolean;
+}
+/**
+ * Authoritative snapshot of an Autopilot permission-recovery episode
+ */
+export interface PermissionRecoveryData {
+    /**
+     * Ordered privacy-safe record of permission attempts and the successful alternative, when any
+     */
+    attempts: PermissionRecoveryAttempt[];
+    /**
+     * Stable identifier shared by every transition in this recovery episode
+     */
+    episodeId: string;
+    /**
+     * Maximum number of distinct autonomous permission attempts allowed before escalation
+     */
+    maxAttempts: number;
+    onBlocked: PermissionRecoveryOnBlocked;
+    reason: PermissionRecoveryReason;
+    status: PermissionRecoveryStatus;
+}
+export interface PermissionRecoveryAttempt {
+    /**
+     * Unique identifier for this attempt record
+     */
+    attemptId: string;
+    disposition: PermissionRecoveryAttemptDisposition;
+    /**
+     * One-based position of this attempt in the episode
+     */
+    ordinal: number;
+    /**
+     * Controlled permission request kind, such as shell, path, URL, or tool
+     */
+    permissionKind: string;
+    reason: PermissionRecoveryAttemptReason;
+    relation: PermissionRecoveryAttemptRelation;
+    /**
+     * SHA-256 fingerprint of normalized request data; raw permission arguments are not included
+     */
+    requestFingerprint: string;
+    /**
+     * Tool-call identifier associated with this attempt, when available
+     */
+    toolCallId?: string;
+}
 /**
  * Session event "session.completion_receipt". Behavior-neutral record of structured runtime facts present when an agent completion decision is accepted.
  */
@@ -3510,6 +3916,36 @@ export interface FusionCompletedData {
      */
     turnId: string;
 }
+/**
+ * Session event "session.permission_recovery". Authoritative snapshot of an Autopilot permission-recovery episode
+ */
+export interface PermissionRecoveryEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: PermissionRecoveryData;
+    /**
+     * When true, the event is transient and not persisted to the session event log on disk
+     */
+    ephemeral?: boolean;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "session.permission_recovery".
+     */
+    type: "session.permission_recovery";
+}
 /**
  * Session event "user.message". Payload of `user.message` with displayed and model-transformed content, attachments, source/delivery metadata, mode, and telemetry IDs.
  */
@@ -3574,6 +4010,7 @@ export interface UserMessageData {
      * Parent agent task ID for background telemetry correlated to this user turn
      */
     parentAgentTaskId?: string;
+    responsesReasoning?: ResponsesReasoning;
     /**
      * Origin of this message, used for timeline filtering and attribution (e.g., `skill-pdf` for hidden skill injection or `agent-<agent-id>` for an inter-agent prompt)
      */
@@ -4745,6 +5182,10 @@ export interface AssistantMessageData {
      * Model that produced this assistant message, if known
      */
     model?: string;
+    /**
+     * Logical ID of the primary user message that initiated this run, matching the messageId returned by session.send (or the last messageId of session.sendMessages). Stable across model/tool iterations, steering messages, and stop-hook corrections. Subagent runs use their own initiating message ID, not the parent's. Absent for runs without an associated initiating message, such as empty batches.
+     */
+    originatingMessageId?: string;
     /**
      * Actual output token count from the API response (completion_tokens), used for accurate token accounting
      */
@@ -5764,6 +6205,11 @@ export interface ToolExecutionStartData {
      * @experimental
      */
     fusion?: FusionAttribution;
+    /**
+     * Preferred lookup name for the MCP server hosting this tool: the configured (namespaced) config-map key when the tool carries one, otherwise the display name from `mcpServerName`. Present when the tool is an MCP tool; this is the name unrestricted provenance telemetry hashes so it joins with `mcp_server_setup`, which keys off the configured name too.
+     */
+    mcpConfigServerName?: string;
+    mcpConfigSource?: McpServerSource;
     /**
      * Name of the MCP server hosting this tool, when the tool is an MCP tool
      */
@@ -5796,6 +6242,10 @@ export interface ToolExecutionStartData {
      * Name of the tool being executed
      */
     toolName: string;
+    /**
+     * Human-readable display title for the tool, when the selected tool descriptor has a non-empty title.
+     */
+    toolTitle?: string;
     /**
      * Identifier for the agent loop turn this tool was invoked in, matching the corresponding assistant.turn_start event
      */
@@ -6012,6 +6462,12 @@ export interface ToolExecutionCompleteData {
      * Whether this tool execution ran inside a sandbox container
      */
     sandboxed?: boolean;
+    /**
+     * Experimental shell completion facts captured before the persisted result contents are stripped.
+     *
+     * @experimental
+     */
+    shellExecution?: ToolExecutionCompleteShellExecution;
     /**
      * Whether the tool execution completed successfully
      */
@@ -6071,7 +6527,7 @@ export interface ToolExecutionCompleteResult {
      */
     contents?: ToolExecutionCompleteContent[];
     /**
-     * Full detailed tool result for UI/timeline display, preserving complete content such as diffs. Falls back to content when absent.
+     * Detailed tool result for UI/timeline display, preserving complete content such as diffs for most tools. Successful skill invocations intentionally use the concise model-facing content here; the authoritative skill body is carried by the corresponding skill invocation event. Falls back to content when absent.
      */
     detailedContent?: string;
     /**
@@ -6485,6 +6941,16 @@ export interface ToolExecutionCompleteUIResourceMetaUIPermissionsGeolocation {
  */
 export interface ToolExecutionCompleteUIResourceMetaUIPermissionsMicrophone {
 }
+/**
+ * Experimental shell completion facts retained independently of the full tool result.
+ */
+/** @experimental */
+export interface ToolExecutionCompleteShellExecution {
+    /**
+     * Process exit code reported by the shell driver.
+     */
+    exitCode: number;
+}
 /**
  * Tool definition metadata, present for MCP tools with MCP Apps support
  */
@@ -6611,6 +7077,10 @@ export interface SkillInvokedData {
      * Whether model invocation is disabled for this skill
      */
     disableModelInvocation?: boolean;
+    /**
+     * Projected chat-message count when the skill was invoked. New writers persist this so replay does not need to reconstruct superseded history; readers derive it for legacy events when absent.
+     */
+    invokedAtTurn?: number;
     /**
      * Model identifier active when the skill was invoked, when known
      */
@@ -6699,6 +7169,7 @@ export interface SubagentStartedData {
      * Model the sub-agent will run with, when known at start.
      */
     model?: string;
+    modelSelectionSource?: SubagentModelSelectionSource;
     /**
      * Task-registry ID of the spawning sub-agent. Absent when the root session spawned this child.
      */
@@ -7073,7 +7544,7 @@ export interface HookStartData {
      */
     hookType: string;
     /**
-     * Input data passed to the hook. For postToolUse hooks the retained copy served by session.eventLog.read (and by a resumed session) elides the tool result's inline `contents`/`uiResource` and replaces an over-long `textResultForLlm` with a `[copilot:elided ...]` marker, to keep a multi-megabyte payload out of the durable event log; the live subscription stream still delivers the full value. Read the adjacent tool.execution_complete event for the tool result itself.
+     * Input data passed to the hook. For postToolUse hooks the retained copy served by session.eventLog.read (and by a resumed session) drops the tool result's inline `contents`/`uiResource`/`skillInvocation` and replaces duplicated text result fields with a `[copilot:elided ...]` marker; the live subscription stream still delivers the full value. Canonical tool output remains in the adjacent tool.execution_complete event, while an invoked skill's authoritative body remains in its skill invocation event.
      */
     input?: JsonValue;
     /**
@@ -7125,7 +7596,7 @@ export interface HookEndData {
      */
     hookType: string;
     /**
-     * Output data produced by the hook
+     * Output data produced by the hook. Durable and resumed postToolUse receipts may omit messages owned by a successful skill invocation and replace an unchanged skill sessionLog copy with an elision marker; hook-modified or re-sourced values are preserved, and the authoritative body remains in the skill invocation event.
      */
     output?: JsonValue;
     /**
@@ -7298,6 +7769,10 @@ export interface SystemMessageData {
      * The system or developer prompt text sent as model input
      */
     content: string;
+    /**
+     * Optional ordered structured blocks corresponding to content, retained for prompt-cache layout restoration.
+     */
+    contentBlocks?: SystemMessageContentBlock[];
     /**
      * Logical interaction identifier for the model run receiving this prompt
      */
@@ -7309,12 +7784,29 @@ export interface SystemMessageData {
     name?: string;
     role: SystemMessageRole;
 }
+/**
+ * One persisted structured system-message block and its cache intent
+ */
+export interface SystemMessageContentBlock {
+    /**
+     * Explicit prompt-cache intent. True places a breakpoint after this block, false suppresses one, and absence preserves the provider's legacy default.
+     */
+    cacheBreakpoint?: boolean;
+    /**
+     * Text content for this system-message block.
+     */
+    content: string;
+    /**
+     * Diagnostic classification indicating whether the block is stable across equivalent sessions.
+     */
+    isStatic?: boolean;
+}
 /**
  * Metadata about the prompt template and its construction
  */
 export interface SystemMessageMetadata {
     /**
-     * Version identifier of the prompt template used
+     * Version identifier of the prompt template or structured prompt layout used
      */
     promptVersion?: string;
     /**
@@ -7363,6 +7855,7 @@ export interface SystemNotificationData {
      */
     content: string;
     kind: SystemNotification;
+    responsesReasoning?: ResponsesReasoning;
 }
 /**
  * System notification metadata for a background agent that completed or failed, including agent ID, type, status, description, and prompt.
@@ -7602,8 +8095,13 @@ export interface PermissionRequestedEvent {
  */
 export interface PermissionRequestedData {
     agentMode?: SessionMode;
+    permissionMode?: PermissionMode;
     permissionRequest: PermissionRequest;
     promptRequest?: PermissionPromptRequest;
+    /**
+     * Permission-recovery episode that authorized this request to surface for interactive attention
+     */
+    recoveryEpisodeId?: string;
     /**
      * Unique identifier for this permission request; used to respond via session.respondToPermission()
      */
@@ -7944,6 +8442,7 @@ export interface PermissionRequestMemory {
  */
 /** @experimental */
 export interface PermissionAssistedApproval {
+    evaluation?: PermissionApprovalEvaluation;
     failureReason?: AssistedApprovalJudgeFailureReason;
     /**
      * Model id that produced the recommendation, when the judge was consulted and reported one. Absent for `excluded` (the judge was not consulted) and for failures that occurred before a model was selected.
@@ -7955,6 +8454,95 @@ export interface PermissionAssistedApproval {
     reason?: string;
     recommendation: AssistedApprovalRecommendation;
 }
+/**
+ * Bounded runtime attribution, independent of free-text rationale. Telemetry revalidates this vocabulary before standard collection.
+ */
+export interface PermissionApprovalEvaluation {
+    /**
+     * Stage that produced this attribution.
+     */
+    evaluationStage: "unknown"
+    /** The request resolved before assisted-approval evaluation. */
+     | "not_reached"
+    /** A runtime gate skipped the judge. */
+     | "pre_judge"
+    /** The judge interface produced the evaluation. */
+     | "judge"
+    /** A cached recommendation or another request's outcome was reused. */
+     | "reuse";
+    /**
+     * Whether the request invoked the judge interface. A cached recommendation retains the original attempt fact. Omitted means unknown, including inherited outcomes.
+     */
+    judgeAttempted?: boolean;
+    /**
+     * Status of the local judge interface, not proof of a model network call.
+     */
+    judgeStatus: "unknown"
+    /** This evaluation did not invoke the judge interface. */
+     | "not_called"
+    /** The judge interface returned a usable verdict. */
+     | "completed"
+    /** The judge interface returned an error. */
+     | "failed"
+    /** This evaluation reused a cached recommendation. */
+     | "cached"
+    /** This request inherited another decision without local judge attribution. */
+     | "inherited";
+    /**
+     * Machine-readable runtime gate reason, never a command, path or human rationale.
+     */
+    reasonCode: "unknown"
+    /** The request resolved before assisted-approval evaluation. */
+     | "not-reached"
+    /** Assisted approval was inactive for this request. */
+     | "inactive"
+    /** The judge was skipped because authorization extraction could not safely establish a complete recent history. */
+     | "authorization-history-incomplete"
+    /** Managed policy required a human decision. */
+     | "managed-approval-required"
+    /** The request asked to bypass sandbox restrictions. */
+     | "sandbox-bypass"
+    /** An action field exceeded the judge input limit. */
+     | "action-too-long"
+    /** The script path was not authorized for inspection. */
+     | "path-not-authorized"
+    /** The script working directory was invalid. */
+     | "invalid-working-directory"
+    /** The script snapshot could not be read. */
+     | "unreadable"
+    /** The script path was not a regular file. */
+     | "not-regular-file"
+    /** The script snapshot exceeded the size limit. */
+     | "too-large"
+    /** The script snapshot was not UTF-8. */
+     | "non-utf8"
+    /** The script interpreter could not be inspected. */
+     | "interpreter-unavailable"
+    /** The interpreter snapshot exceeded the size limit. */
+     | "interpreter-too-large"
+    /** The shell environment could not be reviewed. */
+     | "shell-environment-unreviewable"
+    /** A script path could not be represented for review. */
+     | "unrepresentable-path"
+    /** An interpreter wrapped a script that could not be reviewed. */
+     | "interpreter-wrapped-script"
+    /** The script invocation could not be reviewed. */
+     | "unreviewable-script-invocation"
+    /** The script argument binding could not be reviewed. */
+     | "argument-binding-unreviewable"
+    /** The script review metadata was malformed. */
+     | "malformed-script-action-review"
+    /** The script snapshot manifest was malformed. */
+     | "malformed-script-action-manifest"
+    /** Script review was unavailable. */
+     | "unavailable"
+    /** The judge interface returned a usable verdict. */
+     | "judge-verdict"
+    /** The judge interface returned an error. */
+     | "judge-error"
+    /** The request inherited an outcome from another decision. */
+     | "inherited";
+}
 /**
  * Custom tool invocation permission request
  */
@@ -8698,12 +9286,17 @@ export interface PermissionCompletedEvent {
  * Permission request completion notification signaling UI dismissal
  */
 export interface PermissionCompletedData {
+    blocker?: TaskBlocker;
     /**
      * Who decided this permission request. Absent on completions recorded before this field existed, which consumers must treat as "not a human decision" rather than assuming one. Authorization records are minted only for `human_response`; an assisted-approval verdict, a host policy, an unattended fallback, and a hook resolution all produce the same `result` a person does, so this is the only field that distinguishes them.
      *
      * @experimental
      */
     decisionSource?: PermissionDecisionSource;
+    /**
+     * Permission-recovery episode settled by this response, when the request was escalated by Autopilot
+     */
+    recoveryEpisodeId?: string;
     /**
      * Request ID of the resolved permission request; clients should dismiss any UI for this request
      */
@@ -9139,7 +9732,7 @@ export interface PermissionMessageAuthorizationData {
     world?: JsonValue;
 }
 /**
- * Session event "permission.messageAuthorizationRead". Records that one human turn has been read by the blinded authorization proposer, whether or not it minted anything, so a resumed session does not re-run the extraction model on a turn the live session already read. Persisted purely to avoid wasted model calls across resume; it is never a correctness mechanism.
+ * Session event "permission.messageAuthorizationRead". Records that one human turn has been read by the blinded authorization proposer, whether or not it minted anything, so a resumed session does not re-run the extraction model on a turn the live session already read. Also records whether that pass activates ongoing extraction; contextual-assent-only passes do not, so unrelated future messages remain outside extraction.
  */
 /** @experimental */
 export interface PermissionMessageAuthorizationReadEvent {
@@ -9170,10 +9763,16 @@ export interface PermissionMessageAuthorizationReadEvent {
     type: "permission.messageAuthorizationRead";
 }
 /**
- * Records that one human turn has been read by the blinded authorization proposer, whether or not it minted anything, so a resumed session does not re-run the extraction model on a turn the live session already read. Persisted purely to avoid wasted model calls across resume; it is never a correctness mechanism.
+ * Records that one human turn has been read by the blinded authorization proposer, whether or not it minted anything, so a resumed session does not re-run the extraction model on a turn the live session already read. Also records whether that pass activates ongoing extraction; contextual-assent-only passes do not, so unrelated future messages remain outside extraction.
  */
 /** @experimental */
 export interface PermissionMessageAuthorizationReadData {
+    /**
+     * Whether this read activates ongoing message-backed extraction. False for a contextual-assent-only pass while auto-approval is off, so unrelated future messages remain outside extraction.
+     *
+     * @experimental
+     */
+    activatesExtraction?: boolean;
     /**
      * The human turn that was read by the proposer.
      *
@@ -9224,6 +9823,128 @@ export interface PermissionMessageAuthorizationDegradedData {
      */
     turnIndex: number;
 }
+/**
+ * Session event "permission.assentDetected". Records that deterministic text recognition found likely assent in the human turn immediately following a root Autopilot permission request that was blocked because no interactive response was available. This event grants no authority; its model-facing projection only suggests retrying the unchanged operation.
+ */
+/** @experimental */
+export interface PermissionAssentDetectedEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: PermissionAssentDetectedData;
+    /**
+     * When true, the event is transient and not persisted to the session event log on disk
+     */
+    ephemeral?: boolean;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "permission.assentDetected".
+     */
+    type: "permission.assentDetected";
+}
+/**
+ * Records that deterministic text recognition found likely assent in the human turn immediately following a root Autopilot permission request that was blocked because no interactive response was available. This event grants no authority; its model-facing projection only suggests retrying the unchanged operation.
+ */
+/** @experimental */
+export interface PermissionAssentDetectedData {
+    /**
+     * Permission request the likely assent may refer to. The runtime derives this from the preceding durable blocker; the human message and extraction model do not choose it.
+     *
+     * @experimental
+     */
+    requestId: string;
+    /**
+     * Human turn whose text triggered the deterministic assent recognizer.
+     *
+     * @experimental
+     */
+    turnIndex: number;
+}
+/**
+ * Session event "permission.contextualAuthorization". Freezes a blinded contextual authorization proposal whose verbatim human span was deterministically bound to the immediately preceding blocked permission request. The event carries no action fields; replay re-derives the exact action from the earlier permission request and mints a one-shot message grant only when the binding and span still verify.
+ */
+/** @experimental */
+export interface PermissionContextualAuthorizationEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: PermissionContextualAuthorizationData;
+    /**
+     * When true, the event is transient and not persisted to the session event log on disk
+     */
+    ephemeral?: boolean;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "permission.contextualAuthorization".
+     */
+    type: "permission.contextualAuthorization";
+}
+/**
+ * Freezes a blinded contextual authorization proposal whose verbatim human span was deterministically bound to the immediately preceding blocked permission request. The event carries no action fields; replay re-derives the exact action from the earlier permission request and mints a one-shot message grant only when the binding and span still verify.
+ */
+/** @experimental */
+export interface PermissionContextualAuthorizationData {
+    /**
+     * Whether the contextual human span granted or denied authority.
+     *
+     * @experimental
+     */
+    polarity: PermissionMessageAuthorizationPolarity;
+    /**
+     * Deterministic identity of the contextual message grant.
+     *
+     * @experimental
+     */
+    recordId: string;
+    /**
+     * Original blocked permission request selected by deterministic event ordering, never by the extraction model.
+     *
+     * @experimental
+     */
+    requestId: string;
+    /**
+     * End byte offset of the contextual decision span within the turn.
+     *
+     * @experimental
+     */
+    spanEnd: number;
+    /**
+     * Start byte offset of the contextual decision span within the turn.
+     *
+     * @experimental
+     */
+    spanStart: number;
+    /**
+     * Human turn containing the contextual decision.
+     *
+     * @experimental
+     */
+    turnIndex: number;
+}
 /**
  * Session event "user_input.requested". User input request notification with question and optional predefined choices
  */
@@ -11198,6 +11919,10 @@ export interface McpServersLoadedData {
  * A single MCP server status summary in `session.mcp_servers_loaded`, including name, status, source, transport, and plugin metadata.
  */
 export interface McpServersLoadedServer {
+    /**
+     * Human-readable display name supplied by a managed server catalog.
+     */
+    displayName?: string;
     /**
      * Error message if the server failed to connect
      */