@github/copilot-sdk-win32-x64 1.0.17-preview.0 → 1.0.17-preview.1

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@github/copilot-sdk-win32-x64",
-    "version": "1.0.17-preview.0",
+    "version": "1.0.17-preview.1",
     "description": "Platform runtime for @github/copilot-sdk (win32-x64)",
     "repository": {
         "type": "git",

package/prebuilds/win32-x64/runtime.node

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/prebuilds/win32-x64/runtime.node
-size: 104363296 bytes
-sha256: 6abed5dc44c7982d5886f291f5b1ddd410d61e7cf22422f3144a683a88e0ba6c
+size: 105172256 bytes
+sha256: 0aca157a568da61163a7af4239de80bdf24b8beff01596efbecdd49056bb68e0

package/schemas/api.schema.json

@@ -6380,6 +6380,11 @@
                 "$ref": "#/definitions/McpOauthLoginGrantType",
                 "description": "Optional OAuth grant type override for this login. Defaults to the server configuration, or authorization_code when no grant type is specified."
               },
+              "redirectUri": {
+                "type": "string",
+                "format": "uri",
+                "description": "Optional externally visible HTTPS redirect URI for a host-managed callback endpoint. When supplied, the runtime still owns discovery, PKCE, token exchange, persistence, and reconnect, but does not bind a loopback listener or terminate HTTPS. The URI must not contain query parameters or a fragment and must be registered for the selected CIMD, DCR, or static OAuth client."
+              },
               "loginId": {
                 "type": "string",
                 "description": "Required for owned login. Consumes the exact prepareLogin handle once.\nSet forceReauth and display options during preparation, not consumption."
@@ -6394,7 +6399,7 @@
               "serverName"
             ],
             "additionalProperties": false,
-            "description": "Remote MCP server name and optional overrides controlling reauthentication, OAuth client display name, callback success-page copy, and static OAuth client selection.",
+            "description": "Remote MCP server name and optional overrides controlling reauthentication, OAuth client display name, callback handling, and static OAuth client selection.",
             "title": "McpOauthLoginRequest",
             "stability": "experimental",
             "x-legacy-parameters": [
@@ -6414,6 +6419,42 @@
           },
           "stability": "experimental"
         },
+        "complete": {
+          "rpcMethod": "session.mcp.oauth.complete",
+          "description": "Completes a runtime-managed MCP OAuth login after the authorization server redirects to a host-managed callback URL.",
+          "params": {
+            "type": "object",
+            "properties": {
+              "sessionId": {
+                "type": "string",
+                "description": "Target session identifier"
+              },
+              "authorizationId": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Opaque identifier returned by session.mcp.oauth.login for the pending external callback."
+              },
+              "callbackUrl": {
+                "type": "string",
+                "format": "uri",
+                "description": "Full externally visible HTTPS callback URL received by the host, including the authorization response query parameters. Applications behind a reverse proxy must reconstruct the public URL rather than passing an internal proxy URL."
+              }
+            },
+            "required": [
+              "sessionId",
+              "authorizationId",
+              "callbackUrl"
+            ],
+            "additionalProperties": false,
+            "description": "Host-delivered callback for a runtime-managed MCP OAuth login.",
+            "title": "McpOauthCompleteRequest",
+            "stability": "experimental"
+          },
+          "result": {
+            "type": "null"
+          },
+          "stability": "experimental"
+        },
         "probe": {
           "rpcMethod": "session.mcp.oauth.probe",
           "description": "Passively probes a configured remote MCP server to classify whether OAuth is required or a cached/override token is accepted. Does not start OAuth, emit pending OAuth requests, or mutate MCP connection state.",
@@ -6881,6 +6922,89 @@
           },
           "stability": "experimental"
         }
+      },
+      "prompts": {
+        "list": {
+          "rpcMethod": "session.mcp.prompts.list",
+          "description": "Enumerate one page of prompts a connected MCP server exposes (proxies MCP `prompts/list`). Pass `cursor` to continue from a prior result's `nextCursor`.",
+          "params": {
+            "type": "object",
+            "properties": {
+              "sessionId": {
+                "type": "string",
+                "description": "Target session identifier"
+              },
+              "serverName": {
+                "type": "string",
+                "minLength": 1,
+                "pattern": "^[^\\x00-\\x1f/\\x7f-\\x9f}]+(?:\\/[^\\x00-\\x1f/\\x7f-\\x9f}]+)*$",
+                "description": "Name of the MCP server whose prompts to enumerate"
+              },
+              "cursor": {
+                "type": "string",
+                "description": "Opaque MCP pagination cursor from a prior `nextCursor` value"
+              }
+            },
+            "required": [
+              "sessionId",
+              "serverName"
+            ],
+            "additionalProperties": false,
+            "description": "MCP server whose prompts to enumerate.",
+            "title": "McpPromptsListRequest",
+            "stability": "experimental"
+          },
+          "result": {
+            "$ref": "#/definitions/McpPromptsListResult",
+            "description": "One page of prompts advertised by the named MCP server."
+          },
+          "stability": "experimental"
+        },
+        "get": {
+          "rpcMethod": "session.mcp.prompts.get",
+          "description": "Get a prompt's messages from a connected MCP server (proxies MCP `prompts/get`). Content is preserved as opaque JSON. Does not send messages to the model, execute tools, or fetch referenced resources.",
+          "params": {
+            "type": "object",
+            "properties": {
+              "sessionId": {
+                "type": "string",
+                "description": "Target session identifier"
+              },
+              "serverName": {
+                "type": "string",
+                "minLength": 1,
+                "pattern": "^[^\\x00-\\x1f/\\x7f-\\x9f}]+(?:\\/[^\\x00-\\x1f/\\x7f-\\x9f}]+)*$",
+                "description": "Name of the MCP server hosting the prompt"
+              },
+              "promptName": {
+                "type": "string",
+                "minLength": 1,
+                "description": "The programmatic name of the prompt"
+              },
+              "arguments": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                },
+                "description": "String-valued arguments to pass to the prompt"
+              }
+            },
+            "required": [
+              "sessionId",
+              "serverName",
+              "promptName"
+            ],
+            "additionalProperties": false,
+            "description": "MCP server, prompt name, and optional string-valued arguments.",
+            "title": "McpPromptsGetRequest",
+            "stability": "experimental"
+          },
+          "result": {
+            "$ref": "#/definitions/McpPromptsGetResult",
+            "description": "Prompt messages returned by the MCP server without sending them to the model."
+          },
+          "stability": "experimental"
+        }
       }
     },
     "diagnostics": {
@@ -10549,7 +10673,7 @@
     "shell": {
       "exec": {
         "rpcMethod": "session.shell.exec",
-        "description": "Starts a shell command and streams output through session notifications. The command runs as the leader of its own process group (POSIX) or in a dedicated job object (Windows), so a forced termination — via \"shell.kill\", the request timeout, or session disposal — signals that whole group/job rather than only the direct child. Two gaps are worth planning for: a command that exits on its own does not trigger that teardown, and on POSIX a descendant that moves itself into a new session or process group (for example via \"setsid\") leaves the signalled group, so either can leave a background process running.",
+        "description": "Starts a shell command, returning an RPC error if it cannot be spawned. The command runs as the leader of its own process group (POSIX) or in a dedicated job object (Windows), so a forced termination — via \"shell.kill\", the request timeout, or session disposal — signals that whole group/job rather than only the direct child. Two gaps are worth planning for: a command that exits on its own does not trigger that teardown, and on POSIX a descendant that moves itself into a new session or process group (for example via \"setsid\") leaves the signalled group, so either can leave a background process running.",
         "params": {
           "type": "object",
           "properties": {
@@ -10577,13 +10701,13 @@
             "command"
           ],
           "additionalProperties": false,
-          "description": "Shell command to run, with optional working directory and timeout in milliseconds.",
+          "description": "Shell command to run, with optional working directory and timeout in milliseconds. Spawn failures return an RPC error.",
           "title": "ShellExecRequest",
           "stability": "experimental"
         },
         "result": {
           "$ref": "#/definitions/ShellExecResult",
-          "description": "Identifier of the spawned process, used to correlate streamed output and exit notifications."
+          "description": "Identifier of the spawned shell process, usable with shell.kill while the process is running."
         },
         "stability": "experimental"
       },
@@ -28754,6 +28878,29 @@
       "additionalProperties": false,
       "description": "Honest terminal cancellation result; persistence or recovery failures remain RPC errors."
     },
+    "McpOauthCompleteRequest": {
+      "type": "object",
+      "properties": {
+        "authorizationId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Opaque identifier returned by session.mcp.oauth.login for the pending external callback."
+        },
+        "callbackUrl": {
+          "type": "string",
+          "format": "uri",
+          "description": "Full externally visible HTTPS callback URL received by the host, including the authorization response query parameters. Applications behind a reverse proxy must reconstruct the public URL rather than passing an internal proxy URL."
+        }
+      },
+      "required": [
+        "authorizationId",
+        "callbackUrl"
+      ],
+      "additionalProperties": false,
+      "description": "Host-delivered callback for a runtime-managed MCP OAuth login.",
+      "title": "McpOauthCompleteRequest",
+      "stability": "experimental"
+    },
     "McpOauthHandlePendingRequest": {
       "type": "object",
       "properties": {
@@ -28840,6 +28987,11 @@
           "$ref": "#/definitions/McpOauthLoginGrantType",
           "description": "Optional OAuth grant type override for this login. Defaults to the server configuration, or authorization_code when no grant type is specified."
         },
+        "redirectUri": {
+          "type": "string",
+          "format": "uri",
+          "description": "Optional externally visible HTTPS redirect URI for a host-managed callback endpoint. When supplied, the runtime still owns discovery, PKCE, token exchange, persistence, and reconnect, but does not bind a loopback listener or terminate HTTPS. The URI must not contain query parameters or a fragment and must be registered for the selected CIMD, DCR, or static OAuth client."
+        },
         "loginId": {
           "type": "string",
           "description": "Required for owned login. Consumes the exact prepareLogin handle once.\nSet forceReauth and display options during preparation, not consumption."
@@ -28853,7 +29005,7 @@
         "serverName"
       ],
       "additionalProperties": false,
-      "description": "Remote MCP server name and optional overrides controlling reauthentication, OAuth client display name, callback success-page copy, and static OAuth client selection.",
+      "description": "Remote MCP server name and optional overrides controlling reauthentication, OAuth client display name, callback handling, and static OAuth client selection.",
       "title": "McpOauthLoginRequest",
       "stability": "experimental",
       "x-legacy-parameters": [
@@ -28881,7 +29033,11 @@
         "authorizationUrl": {
           "type": "string",
           "format": "uri",
-          "description": "URL the caller should open in a browser to complete OAuth. Omitted when cached tokens were still valid and no browser interaction was needed — the server is already reconnected in that case. When present, the runtime starts the callback listener before returning and continues the flow in the background; completion is signaled via session.mcp_server_status_changed."
+          "description": "URL the caller should open in a browser to complete OAuth. Omitted when cached tokens were still valid and no browser interaction was needed — the server is already reconnected in that case. For the default loopback flow, the runtime starts its listener before returning. With redirectUri, the host receives the callback and completes it through session.mcp.oauth.complete. The runtime continues the flow in the background and signals completion via session.mcp_server_status_changed."
+        },
+        "authorizationId": {
+          "type": "string",
+          "description": "Opaque authorization identifier returned only for a host-managed redirect URI. The runtime also sends it as the OAuth state value, so the callback endpoint can read state and pass it with the full callback URL to session.mcp.oauth.complete."
         }
       },
       "additionalProperties": false,
@@ -30095,6 +30251,307 @@
       "description": "Side-effect-free preparation of one original bound remote MCP choice.",
       "title": "McpPrepareInstallRequest"
     },
+    "McpPrompt": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "The programmatic name of the prompt"
+        },
+        "title": {
+          "type": "string",
+          "description": "Human-readable display title"
+        },
+        "description": {
+          "type": "string",
+          "description": "Description of what this prompt provides"
+        },
+        "arguments": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/McpPromptArgument",
+            "description": "An argument accepted by an MCP prompt."
+          },
+          "description": "Arguments accepted by the prompt"
+        },
+        "icons": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/McpPromptIcon",
+            "description": "An MCP prompt icon with standard size hints and preserved non-standard fields."
+          },
+          "description": "Icons associated with this prompt"
+        },
+        "_meta": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "Prompt-level metadata"
+        },
+        "additionalProperties": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "Server-provided non-standard descriptor fields"
+        }
+      },
+      "required": [
+        "name"
+      ],
+      "additionalProperties": false,
+      "description": "An MCP prompt descriptor. Server-provided non-standard fields are exposed under `additionalProperties`.",
+      "title": "McpPrompt"
+    },
+    "McpPromptArgument": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "Name of the argument"
+        },
+        "description": {
+          "type": "string",
+          "description": "Description of the argument"
+        },
+        "required": {
+          "type": "boolean",
+          "description": "Whether the argument is required; omission is distinct from false"
+        },
+        "_meta": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "Argument-level metadata"
+        },
+        "additionalProperties": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "Server-provided non-standard argument fields"
+        }
+      },
+      "required": [
+        "name"
+      ],
+      "additionalProperties": false,
+      "description": "An argument accepted by an MCP prompt.",
+      "title": "McpPromptArgument"
+    },
+    "McpPromptIcon": {
+      "type": "object",
+      "properties": {
+        "src": {
+          "type": "string",
+          "description": "Icon URI"
+        },
+        "mimeType": {
+          "type": "string",
+          "description": "Icon MIME type, when known"
+        },
+        "sizes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Icon sizes, such as `48x48` or `any`"
+        },
+        "theme": {
+          "type": "string",
+          "description": "Theme hint for this icon"
+        },
+        "additionalProperties": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "Server-provided non-standard icon fields"
+        }
+      },
+      "required": [
+        "src"
+      ],
+      "additionalProperties": false,
+      "description": "An MCP prompt icon with standard size hints and preserved non-standard fields.",
+      "title": "McpPromptIcon"
+    },
+    "McpPromptMessage": {
+      "type": "object",
+      "properties": {
+        "role": {
+          "$ref": "#/definitions/McpPromptRole",
+          "description": "The role of the message sender"
+        },
+        "content": {
+          "description": "The original MCP content block, including nested metadata and unfamiliar content types",
+          "x-opaque-json": true
+        },
+        "_meta": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "Message-level metadata"
+        },
+        "additionalProperties": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "Server-provided non-standard message fields"
+        }
+      },
+      "required": [
+        "role",
+        "content"
+      ],
+      "additionalProperties": false,
+      "description": "An MCP prompt message with opaque JSON content preserved without flattening or content-type filtering.",
+      "title": "McpPromptMessage"
+    },
+    "McpPromptRole": {
+      "type": "string",
+      "enum": [
+        "user",
+        "assistant"
+      ],
+      "description": "The sender role of an MCP prompt message.",
+      "title": "McpPromptRole",
+      "x-enumDescriptions": {
+        "user": "A message from the user.",
+        "assistant": "A message from the assistant."
+      }
+    },
+    "McpPromptsGetRequest": {
+      "type": "object",
+      "properties": {
+        "serverName": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^[^\\x00-\\x1f/\\x7f-\\x9f}]+(?:\\/[^\\x00-\\x1f/\\x7f-\\x9f}]+)*$",
+          "description": "Name of the MCP server hosting the prompt"
+        },
+        "promptName": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The programmatic name of the prompt"
+        },
+        "arguments": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "String-valued arguments to pass to the prompt"
+        }
+      },
+      "required": [
+        "serverName",
+        "promptName"
+      ],
+      "additionalProperties": false,
+      "description": "MCP server, prompt name, and optional string-valued arguments.",
+      "title": "McpPromptsGetRequest",
+      "stability": "experimental"
+    },
+    "McpPromptsGetResult": {
+      "type": "object",
+      "properties": {
+        "description": {
+          "type": "string",
+          "description": "Description of the prompt"
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/McpPromptMessage",
+            "description": "An MCP prompt message with opaque JSON content preserved without flattening or content-type filtering."
+          },
+          "description": "Ordered prompt messages"
+        },
+        "_meta": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "MCP result metadata"
+        },
+        "additionalProperties": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "Server-provided non-standard result fields"
+        }
+      },
+      "required": [
+        "messages"
+      ],
+      "additionalProperties": false,
+      "description": "Prompt messages returned by the MCP server without sending them to the model.",
+      "title": "McpPromptsGetResult"
+    },
+    "McpPromptsListRequest": {
+      "type": "object",
+      "properties": {
+        "serverName": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^[^\\x00-\\x1f/\\x7f-\\x9f}]+(?:\\/[^\\x00-\\x1f/\\x7f-\\x9f}]+)*$",
+          "description": "Name of the MCP server whose prompts to enumerate"
+        },
+        "cursor": {
+          "type": "string",
+          "description": "Opaque MCP pagination cursor from a prior `nextCursor` value"
+        }
+      },
+      "required": [
+        "serverName"
+      ],
+      "additionalProperties": false,
+      "description": "MCP server whose prompts to enumerate.",
+      "title": "McpPromptsListRequest",
+      "stability": "experimental"
+    },
+    "McpPromptsListResult": {
+      "type": "object",
+      "properties": {
+        "prompts": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/McpPrompt",
+            "description": "An MCP prompt descriptor. Server-provided non-standard fields are exposed under `additionalProperties`."
+          },
+          "description": "Prompts advertised by the server"
+        },
+        "nextCursor": {
+          "type": "string",
+          "description": "Opaque cursor for the next page, if the server has more prompts"
+        },
+        "_meta": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "MCP result metadata"
+        },
+        "additionalProperties": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "Server-provided non-standard result fields"
+        }
+      },
+      "required": [
+        "prompts"
+      ],
+      "additionalProperties": false,
+      "description": "One page of prompts advertised by the named MCP server.",
+      "title": "McpPromptsListResult"
+    },
     "McpRegisterExternalClientRequest": {
       "type": "object",
       "properties": {
@@ -45603,7 +46060,7 @@
         "command"
       ],
       "additionalProperties": false,
-      "description": "Shell command to run, with optional working directory and timeout in milliseconds.",
+      "description": "Shell command to run, with optional working directory and timeout in milliseconds. Spawn failures return an RPC error.",
       "title": "ShellExecRequest",
       "stability": "experimental"
     },
@@ -45612,14 +46069,14 @@
       "properties": {
         "processId": {
           "type": "string",
-          "description": "Unique identifier for tracking streamed output"
+          "description": "Identifier usable with shell.kill while the process is running"
         }
       },
       "required": [
         "processId"
       ],
       "additionalProperties": false,
-      "description": "Identifier of the spawned process, used to correlate streamed output and exit notifications.",
+      "description": "Identifier of the spawned shell process, usable with shell.kill while the process is running.",
       "title": "ShellExecResult"
     },
     "ShellExecuteUserRequestedRequest": {

package/schemas/session-events.schema.json

@@ -3070,6 +3070,10 @@
           "type": "string",
           "description": "Server-provided reason for falling back, when available"
         },
+        "selectionReason": {
+          "type": "string",
+          "description": "Short human-readable sentence from the routing service explaining why this model was chosen, for display alongside the model. Present only when the service supplied one: it is omitted for on-device selections, when the service did not provide an explanation, and when a replayed decision made no routing call. The text is display-only and drawn from a fixed catalogue; several distinct routing categories share identical wording, so it cannot be used to recover the category or keyed on programmatically."
+        },
         "stickyOverride": {
           "type": "boolean",
           "description": "Whether a sticky model choice overrode the router result"
@@ -15725,6 +15729,15 @@
           "description": "Raw names of tools redefined since the prior call, restricted because a tool name can be user-authored",
           "visibility": "internal"
         },
+        "toolsRedefinedParts": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "default": [],
+          "description": "Changed definition parts of redefined tools, as `tool:part` entries; property-level parts only for telemetry-safe tools, whose other names are hashed",
+          "visibility": "internal"
+        },
         "toolsReordered": {
           "type": "boolean",
           "default": false,
@@ -22097,6 +22110,11 @@
         "progressMessage": {
           "type": "string",
           "description": "Human-readable progress status message (e.g., from an MCP server)"
+        },
+        "structuredContent": {
+          "description": "Client-only structured progress metadata. Not model-facing tool output.",
+          "x-opaque-json": true,
+          "stability": "experimental"
         }
       },
       "required": [