@github/copilot-sdk-win32-x64 1.0.15-preview.2 → 1.0.15-preview.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -4080,6 +4080,15 @@ function createServerRpc(connection) {
4080
4080
  getBuiltInCatalog: async () => connection.sendRequest("models.getBuiltInCatalog", {})
4081
4081
  },
4082
4082
  /** @experimental */
4083
+ sandbox: {
4084
+ /**
4085
+ * Reports whether the host running this runtime can run the command sandbox, without starting a session or spawning a sandboxed command.
4086
+ *
4087
+ * @returns Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
4088
+ */
4089
+ getHostSupport: async () => connection.sendRequest("sandbox.getHostSupport", {})
4090
+ },
4091
+ /** @experimental */
4083
4092
  tools: {
4084
4093
  /**
4085
4094
  * Lists built-in tools available for a model.
@@ -5438,7 +5447,20 @@ function createSessionRpc(connection, sessionId) {
5438
5447
  *
5439
5448
  * @returns Instruction sources loaded for the session, in merge order.
5440
5449
  */
5441
- getSources: async () => connection.sendRequest("session.instructions.getSources", { sessionId })
5450
+ getSources: async () => connection.sendRequest("session.instructions.getSources", { sessionId }),
5451
+ /**
5452
+ * Invalidates cached custom-instruction discovery so subsequent turns and source reads observe instruction files currently on disk.
5453
+ */
5454
+ reload: async () => connection.sendRequest("session.instructions.reload", { sessionId })
5455
+ },
5456
+ /** @experimental */
5457
+ customizations: {
5458
+ /**
5459
+ * Reloads all repository and user customizations for the active session: instructions, plugins and their MCP servers and hooks, custom agents, extensions, and skills. Returns diagnostics from the final skill reload.
5460
+ *
5461
+ * @returns Diagnostics from reloading skill definitions, with warnings and errors as separate lists.
5462
+ */
5463
+ reload: async () => connection.sendRequest("session.customizations.reload", { sessionId })
5442
5464
  },
5443
5465
  /** @experimental */
5444
5466
  fleet: {
@@ -5848,6 +5870,25 @@ function createSessionRpc(connection, sessionId) {
5848
5870
  }
5849
5871
  },
5850
5872
  /** @experimental */
5873
+ diagnostics: {
5874
+ /**
5875
+ * Patches configured session diagnostic sources without restarting their producers. Setting a source level to off clears its retained diagnostics and invalidates cursors selecting that source.
5876
+ *
5877
+ * @param params Patch session diagnostic thresholds for explicitly supplied sources.
5878
+ *
5879
+ * @returns Per-source session diagnostics configuration.
5880
+ */
5881
+ configure: async (params) => connection.sendRequest("session.diagnostics.configure", { sessionId, ...params }),
5882
+ /**
5883
+ * Reads a bounded batch of retained session diagnostics for the selected sources. Records are never consumed and each reader advances independently through its opaque cursor.
5884
+ *
5885
+ * @param params Cursor-based request for session diagnostics. The default limit is 100 (maximum 500); the default waitMs is zero (maximum 30000).
5886
+ *
5887
+ * @returns One cursor-addressed page of retained session diagnostics.
5888
+ */
5889
+ read: async (params) => connection.sendRequest("session.diagnostics.read", { sessionId, ...params })
5890
+ },
5891
+ /** @experimental */
5851
5892
  connectors: {
5852
5893
  /**
5853
5894
  * Returns feature availability and bounded polling limits for the EXPERIMENTAL session connector API. This method never performs a Connector service request.
@@ -6727,11 +6768,11 @@ function createSessionRpc(connection, sessionId) {
6727
6768
  */
6728
6769
  updateText: async (params) => connection.sendRequest("session.queue.updateText", { sessionId, ...params }),
6729
6770
  /**
6730
- * Atomically withdraws an unchanged, unconsumed user message from the local queued or steering lane. A client retaining the original draft may restore it only when removed is true. Does not interrupt the running turn.
6771
+ * Atomically withdraws an unchanged user message of a local session: from the queued or steering lane while unconsumed, or from the running turn it started while the model has not answered it and nothing the user sent after it is pending. Withdrawing from the running turn interrupts that turn and removes its events from history. A client retaining the original draft may restore it only when removed is true.
6731
6772
  *
6732
- * @param params Conditional withdrawal of a single user message, before the runtime claims it for delivery.
6773
+ * @param params Conditional withdrawal of a single user message, from its queue or from the running turn it started.
6733
6774
  *
6734
- * @returns Result of removing a queued item.
6775
+ * @returns Result of withdrawing a user message.
6735
6776
  */
6736
6777
  withdrawMessage: async (params) => connection.sendRequest("session.queue.withdrawMessage", { sessionId, ...params }),
6737
6778
  /**
@@ -9366,6 +9407,7 @@ var CopilotSession = class {
9366
9407
  });
9367
9408
  let lastAssistantMessage;
9368
9409
  const unsubscribe = this.on((event) => {
9410
+ if (event.agentId) return;
9369
9411
  if (event.type === "assistant.message") {
9370
9412
  lastAssistantMessage = event;
9371
9413
  } else if (event.type === "session.idle" && event.data.mode !== "autopilot") {
@@ -12507,6 +12549,7 @@ var CopilotClient = class _CopilotClient {
12507
12549
  includeSubAgentStreamingEvents: config.includeSubAgentStreamingEvents ?? true,
12508
12550
  ...this.onGitHubTelemetry != null ? { enableGitHubTelemetryForwarding: true } : {},
12509
12551
  mcpServers: toWireMcpServers(config.mcpServers),
12552
+ ...config.diagnostics !== void 0 ? { diagnostics: config.diagnostics } : {},
12510
12553
  mcpOAuthTokenStorage: config.mcpOAuthTokenStorage,
12511
12554
  authClientIdMetadataUrl: config.authClientIdMetadataUrl,
12512
12555
  envValueMode: "direct",
@@ -12516,6 +12559,7 @@ var CopilotClient = class _CopilotClient {
12516
12559
  agent: config.agent,
12517
12560
  configDir: config.configDirectory,
12518
12561
  enableConfigDiscovery: config.enableConfigDiscovery,
12562
+ refreshCustomInstructions: config.refreshCustomInstructions,
12519
12563
  skipEmbeddingRetrieval: config.skipEmbeddingRetrieval,
12520
12564
  embeddingCacheStorage: config.embeddingCacheStorage,
12521
12565
  organizationCustomInstructions: config.organizationCustomInstructions,
@@ -12758,6 +12802,7 @@ var CopilotClient = class _CopilotClient {
12758
12802
  includeSubAgentStreamingEvents: config.includeSubAgentStreamingEvents ?? true,
12759
12803
  ...this.onGitHubTelemetry != null ? { enableGitHubTelemetryForwarding: true } : {},
12760
12804
  mcpServers: toWireMcpServers(config.mcpServers),
12805
+ ...config.diagnostics !== void 0 ? { diagnostics: config.diagnostics } : {},
12761
12806
  mcpOAuthTokenStorage: config.mcpOAuthTokenStorage,
12762
12807
  authClientIdMetadataUrl: config.authClientIdMetadataUrl,
12763
12808
  envValueMode: "direct",
@@ -1210,6 +1210,127 @@ export type DebugCollectLogsResultKind =
1210
1210
  "archive"
1211
1211
  /** A directory containing the collected files was written. */
1212
1212
  | "directory";
1213
+ /**
1214
+ * Whether the supplied diagnostic cursor remained within the retained buffer window.
1215
+ *
1216
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
1217
+ * via the `definition` "DiagnosticCursorStatus".
1218
+ */
1219
+ /** @experimental */
1220
+ export type DiagnosticCursorStatus =
1221
+ /** The cursor is valid for the current retained window. */
1222
+ "ok"
1223
+ /** The cursor no longer addresses retained records; reading resumes at the oldest retained record. */
1224
+ | "expired";
1225
+ /**
1226
+ * One retained session-scoped diagnostic record. Potentially content-bearing diagnostic data is opt-in and must not be exported automatically as telemetry.
1227
+ *
1228
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
1229
+ * via the `definition` "DiagnosticEntry".
1230
+ */
1231
+ /** @experimental */
1232
+ export type DiagnosticEntry = {
1233
+ /**
1234
+ * UTC RFC 3339 timestamp captured at the diagnostic source.
1235
+ */
1236
+ timestamp: string;
1237
+ level: DiagnosticSeverity;
1238
+ /**
1239
+ * Agent identifier for a subagent host. Omitted for the root agent.
1240
+ */
1241
+ agentId?: string;
1242
+ /**
1243
+ * Human-readable diagnostic summary.
1244
+ */
1245
+ message: string;
1246
+ /**
1247
+ * Whether message or data was truncated to the record-size bound.
1248
+ */
1249
+ truncated?: boolean;
1250
+ /**
1251
+ * Original byte count when a known-size message or data value was truncated.
1252
+ */
1253
+ originalBytes?: number;
1254
+ details: McpDiagnosticDetails;
1255
+ /**
1256
+ * Diagnostic source identifying the typed details payload.
1257
+ */
1258
+ source: "mcp";
1259
+ };
1260
+ /**
1261
+ * Severity of an emitted diagnostic record.
1262
+ *
1263
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
1264
+ * via the `definition` "DiagnosticSeverity".
1265
+ */
1266
+ /** @experimental */
1267
+ export type DiagnosticSeverity =
1268
+ /** Failure that prevented or interrupted communication. */
1269
+ "error"
1270
+ /** A recoverable warning or server standard-error output. */
1271
+ | "warning"
1272
+ /** Lifecycle transition. */
1273
+ | "info"
1274
+ /** Protocol-frame or launch diagnostic. */
1275
+ | "debug"
1276
+ /** HTTP metadata diagnostic. */
1277
+ | "trace";
1278
+ /**
1279
+ * Category for an MCP diagnostic record.
1280
+ *
1281
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
1282
+ * via the `definition` "McpDiagnosticKind".
1283
+ */
1284
+ /** @experimental */
1285
+ export type McpDiagnosticKind =
1286
+ /** Connection lifecycle transition or failure. */
1287
+ "lifecycle"
1288
+ /** JSON-RPC protocol frame. */
1289
+ | "protocol"
1290
+ /** HTTP request or response metadata. */
1291
+ | "http"
1292
+ /** Local MCP server standard-error output. */
1293
+ | "stderr";
1294
+ /**
1295
+ * Direction of an observed MCP protocol frame.
1296
+ *
1297
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
1298
+ * via the `definition` "McpDiagnosticDirection".
1299
+ */
1300
+ /** @experimental */
1301
+ export type McpDiagnosticDirection =
1302
+ /** Frame emitted by the Copilot MCP client. */
1303
+ "client-to-server"
1304
+ /** Frame received from the MCP server. */
1305
+ | "server-to-client";
1306
+ /**
1307
+ * Session-scoped diagnostic threshold. Capture is disabled by default and is never persisted with the session.
1308
+ *
1309
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
1310
+ * via the `definition` "DiagnosticLogLevel".
1311
+ */
1312
+ /** @experimental */
1313
+ export type DiagnosticLogLevel =
1314
+ /** Disable capture and clear retained diagnostics. */
1315
+ "off"
1316
+ /** Capture failures only. */
1317
+ | "error"
1318
+ /** Capture failures, warnings, and stderr. */
1319
+ | "warning"
1320
+ /** Capture lifecycle diagnostics. */
1321
+ | "info"
1322
+ /** Capture protocol frames and launch diagnostics. */
1323
+ | "debug"
1324
+ /** Capture HTTP metadata in addition to debug diagnostics. */
1325
+ | "trace";
1326
+ /**
1327
+ * A supported diagnostic source.
1328
+ *
1329
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
1330
+ * via the `definition` "DiagnosticSource".
1331
+ */
1332
+ /** @experimental */
1333
+ export type DiagnosticSource = "mcp";
1213
1334
  /**
1214
1335
  * Persisted extension discovery source
1215
1336
  *
@@ -3275,6 +3396,14 @@ export type ResponseFormat = {
3275
3396
  */
3276
3397
  type: "json_schema";
3277
3398
  };
3399
+ /**
3400
+ * Extensible identifier of a sandbox policy feature whose availability varies between hosts. A plain string, so an older client decodes a name added by a newer runtime; ignore names you do not recognize. Known values: `network` — sandboxed commands can reach the network (`network.allowOutbound`, on by default); on Linux this needs the tooling for Bubblewrap's private network namespace, such as slirp4netns. `network_filtering` — host rules and the sandbox proxy (`network.allowedHosts`, `network.blockedHosts`, `network.proxy`); on Linux this needs the same tooling as `network`; on Windows it needs a version with Process Security Environment 1.1 host-loopback support, and a policy that uses it must also set `network.allowLocalNetwork`, because Windows reaches the local proxy only together with private-network access. `denied_paths` — native enforcement of `filesystem.deniedPaths`; on Windows this needs a version whose sandbox contract reports denied-path support. `shell` — shell commands inside the sandbox: bash on macOS and Linux, PowerShell on Windows; on Windows this needs a version with Process Security Environment 1.1 filesystem enumeration support.
3401
+ *
3402
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
3403
+ * via the `definition` "SandboxHostCapabilityName".
3404
+ */
3405
+ /** @experimental */
3406
+ export type SandboxHostCapabilityName = string;
3278
3407
  /**
3279
3408
  * A session-scoped sandbox transition applied while handling a slash command
3280
3409
  *
@@ -8161,6 +8290,120 @@ export interface DebugCollectLogsSkippedEntry {
8161
8290
  */
8162
8291
  reason: string;
8163
8292
  }
8293
+ /**
8294
+ * MCP-specific detail for a source-discriminated diagnostic entry.
8295
+ *
8296
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
8297
+ * via the `definition` "McpDiagnosticDetails".
8298
+ */
8299
+ /** @experimental */
8300
+ export interface McpDiagnosticDetails {
8301
+ kind: McpDiagnosticKind;
8302
+ /**
8303
+ * Configured MCP server name.
8304
+ */
8305
+ serverName: string;
8306
+ /**
8307
+ * Fresh identifier for the MCP connection attempt, including failed starts.
8308
+ */
8309
+ connectionId: string;
8310
+ direction?: McpDiagnosticDirection;
8311
+ /**
8312
+ * Serialized diagnostic detail. Protocol and HTTP records use JSON when detail is present.
8313
+ */
8314
+ data?: string;
8315
+ }
8316
+ /**
8317
+ * Per-source session diagnostics configuration.
8318
+ *
8319
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
8320
+ * via the `definition` "DiagnosticsConfiguration".
8321
+ */
8322
+ /** @experimental */
8323
+ export interface DiagnosticsConfiguration {
8324
+ sources: DiagnosticSourcesConfiguration;
8325
+ }
8326
+ /**
8327
+ * Typed diagnostic source configuration. At least one source is required by diagnostics configuration methods.
8328
+ *
8329
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
8330
+ * via the `definition` "DiagnosticSourcesConfiguration".
8331
+ */
8332
+ /** @experimental */
8333
+ export interface DiagnosticSourcesConfiguration {
8334
+ mcp?: McpDiagnosticSourceConfiguration;
8335
+ }
8336
+ /**
8337
+ * MCP diagnostic source configuration.
8338
+ *
8339
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
8340
+ * via the `definition` "McpDiagnosticSourceConfiguration".
8341
+ */
8342
+ /** @experimental */
8343
+ export interface McpDiagnosticSourceConfiguration {
8344
+ level: DiagnosticLogLevel;
8345
+ }
8346
+ /**
8347
+ * Patch session diagnostic thresholds for explicitly supplied sources.
8348
+ *
8349
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
8350
+ * via the `definition` "DiagnosticsConfigureRequest".
8351
+ */
8352
+ /** @experimental */
8353
+ export interface DiagnosticsConfigureRequest {
8354
+ sources: DiagnosticSourcesConfiguration;
8355
+ }
8356
+ /**
8357
+ * Cursor-based request for session diagnostics. The default limit is 100 (maximum 500); the default waitMs is zero (maximum 30000).
8358
+ *
8359
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
8360
+ * via the `definition` "DiagnosticsReadRequest".
8361
+ */
8362
+ /** @experimental */
8363
+ export interface DiagnosticsReadRequest {
8364
+ /**
8365
+ * Nonempty selection of sources to read. Each source may be listed once.
8366
+ */
8367
+ sources: DiagnosticSource[];
8368
+ /**
8369
+ * Opaque cursor returned by an earlier read. Omit to start at the oldest retained record.
8370
+ */
8371
+ cursor?: string;
8372
+ /**
8373
+ * Maximum number of records to return, from 1 through 500. Omit for 100.
8374
+ */
8375
+ max?: number;
8376
+ /**
8377
+ * Maximum time in milliseconds to wait for a new record, from 0 through 30000.
8378
+ */
8379
+ waitMs?: number;
8380
+ }
8381
+ /**
8382
+ * One cursor-addressed page of retained session diagnostics.
8383
+ *
8384
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
8385
+ * via the `definition` "DiagnosticsReadResult".
8386
+ */
8387
+ /** @experimental */
8388
+ export interface DiagnosticsReadResult {
8389
+ /**
8390
+ * Retained records beginning at the requested cursor.
8391
+ */
8392
+ entries: DiagnosticEntry[];
8393
+ /**
8394
+ * Opaque cursor for the next independent read.
8395
+ */
8396
+ cursor: string;
8397
+ cursorStatus: DiagnosticCursorStatus;
8398
+ /**
8399
+ * Number of records lost before this page when known. Omitted when a buffer generation change makes the count unknowable.
8400
+ */
8401
+ droppedCount?: number;
8402
+ /**
8403
+ * Whether additional retained records follow this page.
8404
+ */
8405
+ hasMore: boolean;
8406
+ }
8164
8407
  /**
8165
8408
  * Discovered extension metadata and persistent enablement state.
8166
8409
  *
@@ -11909,6 +12152,10 @@ export interface McpServerConfigHttp {
11909
12152
  * OAuth client ID for a pre-registered remote MCP OAuth client.
11910
12153
  */
11911
12154
  oauthClientId?: string;
12155
+ /**
12156
+ * Non-empty array of valid RFC 6749 scope-token strings to request for the statically configured OAuth client when the server challenge omits scope or provides an empty scope. Requires a non-empty oauthClientId. These scopes take precedence over protected-resource metadata.
12157
+ */
12158
+ oauthScopes?: string[];
11912
12159
  /**
11913
12160
  * Whether the configured OAuth client is public and does not require a client secret.
11914
12161
  */
@@ -17624,6 +17871,10 @@ export interface QueuePendingItems {
17624
17871
  */
17625
17872
  displayText: string;
17626
17873
  agentMode: SendAgentMode;
17874
+ /**
17875
+ * Optional source tag associated with this pending queue entry. This is an open string, not authenticated authorship. In particular, `user` does not prove that a person typed the message. If the source is absent or unrecognized, consumers must not infer human or agent authorship and should handle the entry neutrally. Consumers should tolerate future source values.
17876
+ */
17877
+ source?: string;
17627
17878
  }
17628
17879
  /**
17629
17880
  * Snapshot of the session's pending queued items and immediate-steering messages.
@@ -17645,6 +17896,10 @@ export interface QueuePendingItemsResult {
17645
17896
  * How many leading entries of `steeringMessages` have already been folded into the running turn (and so have an emitted `user.message`), as opposed to still waiting for one. Absent for hosts that do not distinguish the two.
17646
17897
  */
17647
17898
  inFlightSteeringCount?: number;
17899
+ /**
17900
+ * ID of the running turn's user message while the model has not answered it, so `withdrawMessage` can still take it back once nothing sent after it is pending. A message leaves `items` when its turn starts, before its `user.message` is recorded; this tells that message apart from one that was removed. Absent when no turn prompt can be taken back.
17901
+ */
17902
+ withdrawableTurnMessageId?: string;
17648
17903
  }
17649
17904
  /**
17650
17905
  * Parameters for removing a queued item by stable id.
@@ -17788,7 +18043,7 @@ export interface QueueUpdateTextResult {
17788
18043
  updated: boolean;
17789
18044
  }
17790
18045
  /**
17791
- * Conditional withdrawal of a single user message, before the runtime claims it for delivery.
18046
+ * Conditional withdrawal of a single user message, from its queue or from the running turn it started.
17792
18047
  *
17793
18048
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
17794
18049
  * via the `definition` "QueueWithdrawMessageRequest".
@@ -17804,6 +18059,23 @@ export interface QueueWithdrawMessageRequest {
17804
18059
  */
17805
18060
  expectedPrompt: string;
17806
18061
  }
18062
+ /**
18063
+ * Result of withdrawing a user message.
18064
+ *
18065
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
18066
+ * via the `definition` "QueueWithdrawMessageResult".
18067
+ */
18068
+ /** @experimental */
18069
+ export interface QueueWithdrawMessageResult {
18070
+ /**
18071
+ * True when the message left the queue or, for a running turn, history.
18072
+ */
18073
+ removed: boolean;
18074
+ /**
18075
+ * True when the running turn was interrupted to withdraw the message. With removed false, the turn was interrupted but its events could not be removed, for example because the model answered first, so the message stays in the interrupted turn.
18076
+ */
18077
+ interrupted: boolean;
18078
+ }
17807
18079
  /**
17808
18080
  * Event type to register consumer interest for, used by runtime gating logic.
17809
18081
  *
@@ -18395,6 +18667,45 @@ export interface SandboxEnforcementStatus {
18395
18667
  */
18396
18668
  reason?: string;
18397
18669
  }
18670
+ /**
18671
+ * Whether this host can run one sandbox policy feature. A session whose effective policy uses an unsupported feature fails each sandboxed command with `reason`.
18672
+ *
18673
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
18674
+ * via the `definition` "SandboxHostCapability".
18675
+ */
18676
+ /** @experimental */
18677
+ export interface SandboxHostCapability {
18678
+ name: SandboxHostCapabilityName;
18679
+ /**
18680
+ * Whether this host can run the feature.
18681
+ */
18682
+ supported: boolean;
18683
+ /**
18684
+ * Human-readable reason and remedy when the feature is unsupported, such as a package to install or an OS update. Present only when `supported` is false.
18685
+ */
18686
+ reason?: string;
18687
+ }
18688
+ /**
18689
+ * Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
18690
+ *
18691
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
18692
+ * via the `definition` "SandboxHostSupport".
18693
+ */
18694
+ /** @experimental */
18695
+ export interface SandboxHostSupport {
18696
+ /**
18697
+ * Whether a process-containment backend is usable on this host: Seatbelt on macOS, Bubblewrap on Linux, or ProcessContainer on Windows.
18698
+ */
18699
+ supported: boolean;
18700
+ /**
18701
+ * Human-readable reason the sandbox cannot run on this host. Present only when `supported` is false.
18702
+ */
18703
+ reason?: string;
18704
+ /**
18705
+ * Sandbox policy features whose availability varies between hosts that can run the backend. Empty when `supported` is false, because no feature can run without a backend. Later runtimes can add entries; ignore an entry whose `name` you do not recognize.
18706
+ */
18707
+ capabilities: SandboxHostCapability[];
18708
+ }
18398
18709
  /**
18399
18710
  * Register an absolute-time scheduled prompt.
18400
18711
  *
@@ -26040,6 +26351,15 @@ export declare function createServerRpc(connection: MessageConnection): {
26040
26351
  getBuiltInCatalog: () => Promise<BuiltInModelCatalog>;
26041
26352
  };
26042
26353
  /** @experimental */
26354
+ sandbox: {
26355
+ /**
26356
+ * Reports whether the host running this runtime can run the command sandbox, without starting a session or spawning a sandboxed command.
26357
+ *
26358
+ * @returns Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
26359
+ */
26360
+ getHostSupport: () => Promise<SandboxHostSupport>;
26361
+ };
26362
+ /** @experimental */
26043
26363
  tools: {
26044
26364
  /**
26045
26365
  * Lists built-in tools available for a model.
@@ -27329,6 +27649,19 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
27329
27649
  * @returns Instruction sources loaded for the session, in merge order.
27330
27650
  */
27331
27651
  getSources: () => Promise<InstructionsGetSourcesResult>;
27652
+ /**
27653
+ * Invalidates cached custom-instruction discovery so subsequent turns and source reads observe instruction files currently on disk.
27654
+ */
27655
+ reload: () => Promise<void>;
27656
+ };
27657
+ /** @experimental */
27658
+ customizations: {
27659
+ /**
27660
+ * Reloads all repository and user customizations for the active session: instructions, plugins and their MCP servers and hooks, custom agents, extensions, and skills. Returns diagnostics from the final skill reload.
27661
+ *
27662
+ * @returns Diagnostics from reloading skill definitions, with warnings and errors as separate lists.
27663
+ */
27664
+ reload: () => Promise<SkillsLoadDiagnostics>;
27332
27665
  };
27333
27666
  /** @experimental */
27334
27667
  fleet: {
@@ -27738,6 +28071,25 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
27738
28071
  };
27739
28072
  };
27740
28073
  /** @experimental */
28074
+ diagnostics: {
28075
+ /**
28076
+ * Patches configured session diagnostic sources without restarting their producers. Setting a source level to off clears its retained diagnostics and invalidates cursors selecting that source.
28077
+ *
28078
+ * @param params Patch session diagnostic thresholds for explicitly supplied sources.
28079
+ *
28080
+ * @returns Per-source session diagnostics configuration.
28081
+ */
28082
+ configure: (params: DiagnosticsConfigureRequest) => Promise<DiagnosticsConfiguration>;
28083
+ /**
28084
+ * Reads a bounded batch of retained session diagnostics for the selected sources. Records are never consumed and each reader advances independently through its opaque cursor.
28085
+ *
28086
+ * @param params Cursor-based request for session diagnostics. The default limit is 100 (maximum 500); the default waitMs is zero (maximum 30000).
28087
+ *
28088
+ * @returns One cursor-addressed page of retained session diagnostics.
28089
+ */
28090
+ read: (params: DiagnosticsReadRequest) => Promise<DiagnosticsReadResult>;
28091
+ };
28092
+ /** @experimental */
27741
28093
  connectors: {
27742
28094
  /**
27743
28095
  * Returns feature availability and bounded polling limits for the EXPERIMENTAL session connector API. This method never performs a Connector service request.
@@ -28617,13 +28969,13 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
28617
28969
  */
28618
28970
  updateText: (params: QueueUpdateTextRequest) => Promise<QueueUpdateTextResult>;
28619
28971
  /**
28620
- * Atomically withdraws an unchanged, unconsumed user message from the local queued or steering lane. A client retaining the original draft may restore it only when removed is true. Does not interrupt the running turn.
28972
+ * Atomically withdraws an unchanged user message of a local session: from the queued or steering lane while unconsumed, or from the running turn it started while the model has not answered it and nothing the user sent after it is pending. Withdrawing from the running turn interrupts that turn and removes its events from history. A client retaining the original draft may restore it only when removed is true.
28621
28973
  *
28622
- * @param params Conditional withdrawal of a single user message, before the runtime claims it for delivery.
28974
+ * @param params Conditional withdrawal of a single user message, from its queue or from the running turn it started.
28623
28975
  *
28624
- * @returns Result of removing a queued item.
28976
+ * @returns Result of withdrawing a user message.
28625
28977
  */
28626
- withdrawMessage: (params: QueueWithdrawMessageRequest) => Promise<QueueRemoveAtResult>;
28978
+ withdrawMessage: (params: QueueWithdrawMessageRequest) => Promise<QueueWithdrawMessageResult>;
28627
28979
  /**
28628
28980
  * Atomically appends text and attachments to an unchanged, unconsumed local steering message. Returns updated=false if delivery or withdrawal already claimed the message.
28629
28981
  *
@@ -2684,12 +2684,16 @@ export interface SnapshotRewindEvent {
2684
2684
  * Session rewind details including target event and count of removed events
2685
2685
  */
2686
2686
  export interface SnapshotRewindData {
2687
+ /**
2688
+ * The removed events, starting with `upToEventId`. Later events not listed were kept, such as a background agent's events that interleaved with a withdrawn turn
2689
+ */
2690
+ eventIds?: string[];
2687
2691
  /**
2688
2692
  * Number of events that were removed by the rewind
2689
2693
  */
2690
2694
  eventsRemoved: number;
2691
2695
  /**
2692
- * Event ID that was rewound to; this event and all after it were removed
2696
+ * First removed event. Without `eventIds`, it and every event after it were removed
2693
2697
  */
2694
2698
  upToEventId: string;
2695
2699
  }
@@ -3317,7 +3321,7 @@ export interface CompactionCompleteCompactionTokensUsedCopilotUsageTokenDetail {
3317
3321
  tokenType: string;
3318
3322
  }
3319
3323
  /**
3320
- * Original request-level and effective conversation reasoning effort for a Responses history boundary
3324
+ * Original request-level and effective conversation reasoning effort for a provider history boundary; the historical type name is retained for compatibility
3321
3325
  */
3322
3326
  export interface ResponsesReasoning {
3323
3327
  /**
@@ -5385,6 +5389,10 @@ export interface FusionAttribution {
5385
5389
  * Stable identifier for the HydraFusion turn that produced the event.
5386
5390
  */
5387
5391
  fusionId: string;
5392
+ /**
5393
+ * Whether this model request consumed a user steering message rather than only internal Fusion work.
5394
+ */
5395
+ hasUserSteering?: boolean;
5388
5396
  /**
5389
5397
  * HydraFusion orchestration pattern selected for the turn.
5390
5398
  */
@@ -10366,6 +10374,10 @@ export interface McpOauthRequiredStaticClientConfig {
10366
10374
  * Whether this is a public OAuth client
10367
10375
  */
10368
10376
  publicClient?: boolean;
10377
+ /**
10378
+ * Configured OAuth scope string used when the server challenge omits scope or provides an empty scope
10379
+ */
10380
+ scope?: string;
10369
10381
  }
10370
10382
  /**
10371
10383
  * OAuth WWW-Authenticate parameters parsed from an MCP auth challenge
@@ -12,6 +12,6 @@ export { defineWorkflow, WorkflowResumeError, isWorkflowRunTerminal } from "./wo
12
12
  export { Canvas, CanvasError, createCanvas, type CanvasAction, type CanvasDeclaration, type CanvasHostContext, type CanvasHostContextCapabilities, type CanvasJsonSchema, type CanvasOptions, } from "./canvas.js";
13
13
  export { defineTool, approveAll, createAttributedPermissionResult, convertMcpCallToolResult, createSessionFsAdapter, CopilotRequestHandler, CopilotWebSocketHandler, CopilotWebSocketCloseStatus, CopilotWebSocketForwarder, SessionFsSqliteTransactionFailure, SYSTEM_MESSAGE_SECTIONS, } from "./types.js";
14
14
  export type * from "./generated/session-events.js";
15
- export type { AskUserVariant, CommandContext, CommandDefinition, CommandHandler, CanvasProviderIdentity, CloudSessionOptions, CloudSessionRepository, AutoModeSwitchHandler, AutoModeSwitchRequest, AutoModeSwitchResponse, AgentStopHandler, AgentStopHookInput, AgentStopHookOutput, UserPromptTransformedHandler, UserPromptTransformedHookInput, UserPromptTransformedHookOutput, CopilotClientInfo, CopilotClientMode, CopilotClientOptions, CopilotExpAssignmentResponse, StdioRuntimeConnection, InProcessRuntimeConnection, TcpRuntimeConnection, UriRuntimeConnection, ChildProcessRuntimeConnection, CustomAgentConfig, ElicitationFieldValue, ElicitationHandler, ElicitationParams, ElicitationContext, ElicitationResult, ElicitationSchema, ElicitationSchemaField, ExpConfigEntry, ExpFlagValue, ExitPlanModeHandler, ExitPlanModeRequest, ExitPlanModeResult, ExtensionLaunchProfile, ExtensionLaunchProvider, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, ExtensionInfo, ForegroundSessionInfo, GetAuthStatusResponse, GetStatusResponse, GitHubMcpToolConfig, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTokenProvider, GitHubTokenProviderArgs, GitHubTokenProviderResult, InfiniteSessionConfig, LargeToolOutputConfig, MemoryConfiguration, UiInputOptions, FactoryLimits, FactoryMeta, MCPStdioServerConfig, MCPHTTPServerConfig, MCPServerConfig, DefaultAgentConfig, BearerTokenProvider, ExtensionContextAttachment, MessageOptions, ResponseSchema, MessageSource, ManagedSettings, ManagedSettingsPermissions, ModelBilling, ModelBillingTokenPrices, ModelBillingTokenPricesLongContext, AutoTier, CapiSessionOptions, CurrentModel, ModelSwitchAutoTierResult, ModelSwitchAutoTierStatus, ModelCapabilities, ModelCapabilitiesOverride, ModelInfo, ModelPolicy, NamedProviderConfig, PermissionHandler, PermissionRequest, PermissionRequestedData, PermissionRequestedEvent, PermissionRequestResult, AttributedPermissionResult, PermissionDecisionContext, PermissionDecisionOutcome, PermissionDecisionSource, PermissionDecisionSurface, PermissionResponseCapability, ProviderConfig, ProviderModelConfig, ProviderTokenArgs, RemoteSessionMode, ResumeSessionConfig, SectionOverride, SectionOverrideAction, SectionTransformFn, SessionCapabilities, SessionConfig, SessionConfigBase, SessionEvent, SessionEventHandler, SessionEventPayload, SessionEventType, SessionLifecycleEvent, SessionLifecycleEventMetadata, SessionLifecycleEventType, SessionLifecycleHandler, SessionHooks, SessionCreatedEvent, SessionDeletedEvent, SessionUpdatedEvent, SessionForegroundEvent, SessionBackgroundEvent, SessionContext, SessionListFilter, SessionMetadata, SessionUiApi, SessionFsConfig, SessionFsProvider, SessionFsFileInfo, SessionFsSqliteQueryResult, SessionFsSqliteQueryType, SessionFsSqliteProvider, SessionFsSqliteStatement, SessionFsSqliteTransactionErrorClass, CopilotRequestContext, SystemMessageAppendConfig, SystemMessageConfig, SystemMessageCustomizeConfig, SystemMessageReplaceConfig, SystemMessageSection, TelemetryConfig, TraceContext, TraceContextProvider, Tool, ToolHandler, ToolInvocation, CurrentToolMetadata, ToolTelemetry, ToolResultObject, ToolSearchConfig, TypedSessionEventHandler, TypedSessionLifecycleHandler, ZodSchema, } from "./types.js";
15
+ export type { AskUserVariant, CommandContext, CommandDefinition, CommandHandler, CanvasProviderIdentity, CloudSessionOptions, CloudSessionRepository, ConnectorAccountRequest, ConnectorAvailability, ConnectorCapabilities, ConnectorCatalogEntry, ConnectorCatalogResult, ConnectorCatalogStatus, ConnectorConnectRequest, ConnectorConnectResult, ConnectorContinueRequest, ConnectorDisconnectResult, ConnectorMcpStatus, ConnectorReconcileRequest, ConnectorRuntimeStatus, ConnectorStatus, AutoModeSwitchHandler, AutoModeSwitchRequest, AutoModeSwitchResponse, AgentStopHandler, AgentStopHookInput, AgentStopHookOutput, UserPromptTransformedHandler, UserPromptTransformedHookInput, UserPromptTransformedHookOutput, CopilotClientInfo, CopilotClientMode, CopilotClientOptions, CopilotExpAssignmentResponse, StdioRuntimeConnection, InProcessRuntimeConnection, TcpRuntimeConnection, UriRuntimeConnection, ChildProcessRuntimeConnection, CustomAgentConfig, ElicitationFieldValue, ElicitationHandler, ElicitationParams, ElicitationContext, ElicitationResult, ElicitationSchema, ElicitationSchemaField, ExpConfigEntry, ExpFlagValue, ExitPlanModeHandler, ExitPlanModeRequest, ExitPlanModeResult, ExtensionLaunchProfile, ExtensionLaunchProvider, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, ExtensionInfo, ForegroundSessionInfo, GetAuthStatusResponse, GetStatusResponse, GitHubMcpToolConfig, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTokenProvider, GitHubTokenProviderArgs, GitHubTokenProviderResult, InfiniteSessionConfig, LargeToolOutputConfig, MemoryConfiguration, UiInputOptions, FactoryLimits, FactoryMeta, MCPStdioServerConfig, MCPHTTPServerConfig, MCPServerConfig, DefaultAgentConfig, BearerTokenProvider, ExtensionContextAttachment, MessageOptions, ResponseSchema, MessageSource, ManagedSettings, ManagedSettingsPermissions, ModelBilling, ModelBillingTokenPrices, ModelBillingTokenPricesLongContext, AutoTier, CapiSessionOptions, CurrentModel, ModelSwitchAutoTierResult, ModelSwitchAutoTierStatus, ModelCapabilities, ModelCapabilitiesOverride, ModelInfo, ModelPolicy, NamedProviderConfig, PermissionHandler, PermissionRequest, PermissionRequestedData, PermissionRequestedEvent, PermissionRequestResult, AttributedPermissionResult, PermissionDecisionContext, PermissionDecisionOutcome, PermissionDecisionSource, PermissionDecisionSurface, PermissionResponseCapability, ProviderConfig, ProviderModelConfig, ProviderTokenArgs, RemoteSessionMode, ResumeSessionConfig, SectionOverride, SectionOverrideAction, SectionTransformFn, SessionCapabilities, SessionConfig, SessionConfigBase, SessionEvent, SessionEventHandler, SessionEventPayload, SessionEventType, SessionLifecycleEvent, SessionLifecycleEventMetadata, SessionLifecycleEventType, SessionLifecycleHandler, SessionHooks, SessionCreatedEvent, SessionDeletedEvent, SessionUpdatedEvent, SessionForegroundEvent, SessionBackgroundEvent, SessionContext, SessionListFilter, SessionMetadata, SessionUiApi, SessionFsConfig, SessionFsProvider, SessionFsFileInfo, SessionFsSqliteQueryResult, SessionFsSqliteQueryType, SessionFsSqliteProvider, SessionFsSqliteStatement, SessionFsSqliteTransactionErrorClass, CopilotRequestContext, SystemMessageAppendConfig, SystemMessageConfig, SystemMessageCustomizeConfig, SystemMessageReplaceConfig, SystemMessageSection, TelemetryConfig, TraceContext, TraceContextProvider, Tool, ToolHandler, ToolInvocation, CurrentToolMetadata, ToolTelemetry, ToolResultObject, ToolSearchConfig, TypedSessionEventHandler, TypedSessionLifecycleHandler, ZodSchema, } from "./types.js";
16
16
  export type { RunOptions, ResumeOptions, FactoryLimitOverrides, FactoryResumeErrorCode, SessionFactoryApi, FactoryAgentOptions, FactoryContext, FactoryDefinition, FactoryHandle, FactoryJsonSchema, JsonValue, FactoryPipelineStage, FactoryStepOptions, FactoryRunResult, FactoryRunStatus, FactoryRunSummary, FactoryListRunsOptions, FactoryRunsPage, FactoryRunDetail, FactoryProgressPage, FactoryProgressLine, FactoryPhaseObservation, FactoryPhaseStatus, FactoryAgentSummary, } from "./factory.js";
17
17
  export type { WorkflowRunOptions, WorkflowResumeOptions, WorkflowLimitOverrides, WorkflowResumeErrorCode, SessionWorkflowApi, WorkflowAgentOptions, WorkflowContext, WorkflowDefinition, WorkflowHandle, WorkflowJsonSchema, WorkflowLimits, WorkflowMeta, WorkflowPipelineStage, WorkflowStepOptions, WorkflowRunResult, WorkflowRunStatus, WorkflowRunSummary, WorkflowListRunsOptions, WorkflowRunsPage, WorkflowRunDetail, WorkflowProgressPage, WorkflowProgressLine, WorkflowPhaseObservation, WorkflowPhaseStatus, WorkflowAgentSummary, } from "./workflow.js";