@github/copilot-sdk 0.3.0-preview.1 → 1.0.0-beta.1

package/dist/generated/rpc.js

@@ -36,8 +36,14 @@ function createServerRpc(connection) {
     }
   };
 }
+function createInternalServerRpc(connection) {
+  return {
+    connect: async (params) => connection.sendRequest("connect", params)
+  };
+}
 function createSessionRpc(connection, sessionId) {
   return {
+    suspend: async () => connection.sendRequest("session.suspend", { sessionId }),
     auth: {
       getStatus: async () => connection.sendRequest("session.auth.getStatus", { sessionId })
     },
@@ -80,6 +86,14 @@ function createSessionRpc(connection, sessionId) {
       reload: async () => connection.sendRequest("session.agent.reload", { sessionId })
     },
     /** @experimental */
+    tasks: {
+      startAgent: async (params) => connection.sendRequest("session.tasks.startAgent", { sessionId, ...params }),
+      list: async () => connection.sendRequest("session.tasks.list", { sessionId }),
+      promoteToBackground: async (params) => connection.sendRequest("session.tasks.promoteToBackground", { sessionId, ...params }),
+      cancel: async (params) => connection.sendRequest("session.tasks.cancel", { sessionId, ...params }),
+      remove: async (params) => connection.sendRequest("session.tasks.remove", { sessionId, ...params })
+    },
+    /** @experimental */
     skills: {
       list: async () => connection.sendRequest("session.skills.list", { sessionId }),
       enable: async (params) => connection.sendRequest("session.skills.enable", { sessionId, ...params }),
@@ -192,6 +206,7 @@ function registerClientSessionApiHandlers(connection, getHandlers) {
   });
 }
 export {
+  createInternalServerRpc,
   createServerRpc,
   createSessionRpc,
   registerClientSessionApiHandlers

package/dist/generated/session-events.d.ts

@@ -2,7 +2,7 @@
  * AUTO-GENERATED FILE - DO NOT EDIT
  * Generated from: session-events.schema.json
  */
-export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | InfoEvent | WarningEvent | ModelChangeEvent | ModeChangedEvent | PlanChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | ContextChangedEvent | UsageInfoEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantUsageEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | ExtensionsLoadedEvent;
+export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | InfoEvent | WarningEvent | ModelChangeEvent | ModeChangedEvent | PlanChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | ContextChangedEvent | UsageInfoEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantUsageEvent | ModelCallFailureEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | ExtensionsLoadedEvent;
 /**
  * Hosting platform type of the repository (github or ado)
  */
@@ -39,6 +39,10 @@ export type UserMessageAttachmentGithubReferenceType = "issue" | "pr" | "discuss
  * Tool call type: "function" for standard tool calls, "custom" for grammar-based tool calls. Defaults to "function" when absent.
  */
 export type AssistantMessageToolRequestType = "function" | "custom";
+/**
+ * Where the failed model call originated
+ */
+export type ModelCallFailureSource = "top_level" | "subagent" | "mcp_sampling";
 /**
  * A content block within a tool result, which may be text, terminal output, image, audio, or a resource
  */
@@ -58,7 +62,7 @@ export type SystemMessageRole = "system" | "developer";
 /**
  * Structured metadata identifying what triggered this notification
  */
-export type SystemNotification = SystemNotificationAgentCompleted | SystemNotificationAgentIdle | SystemNotificationNewInboxMessage | SystemNotificationShellCompleted | SystemNotificationShellDetachedCompleted;
+export type SystemNotification = SystemNotificationAgentCompleted | SystemNotificationAgentIdle | SystemNotificationNewInboxMessage | SystemNotificationShellCompleted | SystemNotificationShellDetachedCompleted | SystemNotificationInstructionDiscovered;
 /**
  * Whether the agent completed successfully or failed
  */
@@ -92,9 +96,13 @@ export type PermissionPromptRequestMemoryDirection = "upvote" | "downvote";
  */
 export type PermissionPromptRequestPathAccessKind = "read" | "shell" | "write";
 /**
- * The outcome of the permission request
+ * The result of the permission request
+ */
+export type PermissionResult = PermissionApproved | PermissionApprovedForSession | PermissionApprovedForLocation | PermissionCancelled | PermissionDeniedByRules | PermissionDeniedNoApprovalRuleAndCouldNotRequestFromUser | PermissionDeniedInteractivelyByUser | PermissionDeniedByContentExclusionPolicy | PermissionDeniedByPermissionRequestHook;
+/**
+ * The approval to add as a session-scoped rule
  */
-export type PermissionCompletedKind = "approved" | "approved-for-session" | "approved-for-location" | "denied-by-rules" | "denied-no-approval-rule-and-could-not-request-from-user" | "denied-interactively-by-user" | "denied-by-content-exclusion-policy" | "denied-by-permission-request-hook";
+export type UserToolSessionApproval = UserToolSessionApprovalCommands | UserToolSessionApprovalRead | UserToolSessionApprovalWrite | UserToolSessionApprovalMcp | UserToolSessionApprovalMemory | UserToolSessionApprovalCustomTool;
 /**
  * Elicitation mode; "form" for structured input, "url" for browser-based. Defaults to "form" when absent.
  */
@@ -253,6 +261,10 @@ export interface ResumeData {
      */
     alreadyInUse?: boolean;
     context?: WorkingDirectoryContext;
+    /**
+     * When true, tool calls and permission requests left in flight by the previous session lifetime remain pending after resume and the agentic loop awaits their results. User sends are queued behind the pending work until all such requests reach a terminal state. When false (the default), any such tool calls and permission requests are immediately marked as interrupted on resume.
+     */
+    continuePendingWork?: boolean;
     /**
      * Total number of persisted events in the session at the time of resume
      */
@@ -273,6 +285,10 @@ export interface ResumeData {
      * Model currently selected at resume time
      */
     selectedModel?: string;
+    /**
+     * True when this resume attached to a session that the runtime already had running in-memory (for example, an extension joining a session another client was actively driving). False (or omitted) for cold resumes — the runtime had to reconstitute the session from its persisted event log.
+     */
+    sessionWasActive?: boolean;
 }
 export interface RemoteSteerableChangedEvent {
     /**
@@ -335,6 +351,14 @@ export interface ErrorEvent {
  * Error details for timeline display including message and optional diagnostic information
  */
 export interface ErrorData {
+    /**
+     * Only set on `errorType: "rate_limit"`. When `true`, the runtime will follow this error with an `auto_mode_switch.requested` event (or silently switch if `continueOnAutoMode` is enabled). UI clients can use this flag to suppress duplicate rendering of the rate-limit error when they show their own auto-mode-switch prompt.
+     */
+    eligibleForAutoSwitch?: boolean;
+    /**
+     * Fine-grained error code from the upstream provider, when available. For `errorType: "rate_limit"`, this is one of the `RateLimitErrorCode` values (e.g., `"user_weekly_rate_limited"`, `"user_global_rate_limited"`, `"rate_limited"`, `"user_model_rate_limited"`, `"integration_rate_limited"`).
+     */
+    errorCode?: string;
     /**
      * Category of error (e.g., "authentication", "authorization", "quota", "rate_limit", "context_limit", "query")
      */
@@ -456,6 +480,10 @@ export interface InfoData {
      * Human-readable informational message for display in the timeline
      */
     message: string;
+    /**
+     * Optional actionable tip displayed with this message
+     */
+    tip?: string;
     /**
      * Optional URL associated with this message that the user can open in a browser
      */
@@ -530,6 +558,10 @@ export interface ModelChangeEvent {
  * Model change details including previous and new model identifiers
  */
 export interface ModelChangeData {
+    /**
+     * Reason the change happened, when not user-initiated. Currently `"rate_limit_auto_switch"` for changes triggered by the auto-mode-switch rate-limit recovery path. UI clients can use this to render contextual copy.
+     */
+    cause?: string;
     /**
      * Newly selected model identifier
      */
@@ -871,6 +903,12 @@ export interface ShutdownData {
      * System message token count at shutdown
      */
     systemTokens?: number;
+    /**
+     * Session-wide per-token-type accumulated token counts
+     */
+    tokenDetails?: {
+        [k: string]: ShutdownTokenDetail;
+    };
     /**
      * Tool definitions token count at shutdown
      */
@@ -879,6 +917,10 @@ export interface ShutdownData {
      * Cumulative time spent in API calls during the session, in milliseconds
      */
     totalApiDurationMs: number;
+    /**
+     * Session-wide accumulated nano-AI units cost
+     */
+    totalNanoAiu?: number;
     /**
      * Total number of premium API requests used during the session
      */
@@ -903,6 +945,16 @@ export interface ShutdownCodeChanges {
 }
 export interface ShutdownModelMetric {
     requests: ShutdownModelMetricRequests;
+    /**
+     * Token count details per type
+     */
+    tokenDetails?: {
+        [k: string]: ShutdownModelMetricTokenDetail;
+    };
+    /**
+     * Accumulated nano-AI units cost for this model
+     */
+    totalNanoAiu?: number;
     usage: ShutdownModelMetricUsage;
 }
 /**
@@ -918,6 +970,12 @@ export interface ShutdownModelMetricRequests {
      */
     count: number;
 }
+export interface ShutdownModelMetricTokenDetail {
+    /**
+     * Accumulated token count for this token type
+     */
+    tokenCount: number;
+}
 /**
  * Token usage breakdown
  */
@@ -943,6 +1001,12 @@ export interface ShutdownModelMetricUsage {
      */
     reasoningTokens?: number;
 }
+export interface ShutdownTokenDetail {
+    /**
+     * Accumulated token count for this token type
+     */
+    tokenCount: number;
+}
 export interface ContextChangedEvent {
     /**
      * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
@@ -1187,7 +1251,7 @@ export interface CompactionCompleteCompactionTokensUsedCopilotUsage {
      */
     tokenDetails: CompactionCompleteCompactionTokensUsedCopilotUsageTokenDetail[];
     /**
-     * Total cost in nano-AIU (AI Units) for this request
+     * Total cost in nano-AI units for this request
      */
     totalNanoAiu: number;
 }
@@ -1291,6 +1355,10 @@ export interface UserMessageData {
      * Path-backed native document attachments that stayed on the tagged_files path flow because native upload would exceed the request size limit
      */
     nativeDocumentPathFallbackPaths?: string[];
+    /**
+     * Parent agent task ID for background telemetry correlated to this user turn
+     */
+    parentAgentTaskId?: string;
     /**
      * Origin of this message, used for timeline filtering (e.g., "skill-pdf" for skill-injected messages that should be hidden from the user)
      */
@@ -1721,6 +1789,10 @@ export interface AssistantMessageData {
      * Tool invocations requested by the assistant in this message
      */
     toolRequests?: AssistantMessageToolRequest[];
+    /**
+     * Identifier for the agent loop turn that produced this message, matching the corresponding assistant.turn_start event
+     */
+    turnId?: string;
 }
 /**
  * A tool invocation request from the assistant
@@ -1754,6 +1826,40 @@ export interface AssistantMessageToolRequest {
     toolTitle?: string;
     type?: AssistantMessageToolRequestType;
 }
+export interface AssistantMessageStartEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: AssistantMessageStartData;
+    ephemeral: true;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    type: "assistant.message_start";
+}
+/**
+ * Streaming assistant message start metadata
+ */
+export interface AssistantMessageStartData {
+    /**
+     * Message ID this start event belongs to, matching subsequent deltas and assistant.message
+     */
+    messageId: string;
+    /**
+     * Generation phase this message belongs to for phased-output models
+     */
+    phase?: string;
+}
 export interface AssistantMessageDeltaEvent {
     /**
      * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
@@ -1929,7 +2035,7 @@ export interface AssistantUsageCopilotUsage {
      */
     tokenDetails: AssistantUsageCopilotUsageTokenDetail[];
     /**
-     * Total cost in nano-AIU (AI Units) for this request
+     * Total cost in nano-AI units for this request
      */
     totalNanoAiu: number;
 }
@@ -1988,6 +2094,61 @@ export interface AssistantUsageQuotaSnapshot {
      */
     usedRequests: number;
 }
+export interface ModelCallFailureEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: ModelCallFailureData;
+    ephemeral: true;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    type: "model.call_failure";
+}
+/**
+ * Failed LLM API call metadata for telemetry
+ */
+export interface ModelCallFailureData {
+    /**
+     * Completion ID from the model provider (e.g., chatcmpl-abc123)
+     */
+    apiCallId?: string;
+    /**
+     * Duration of the failed API call in milliseconds
+     */
+    durationMs?: number;
+    /**
+     * Raw provider/runtime error message for restricted telemetry
+     */
+    errorMessage?: string;
+    /**
+     * What initiated this API call (e.g., "sub-agent", "mcp-sampling"); absent for user-initiated calls
+     */
+    initiator?: string;
+    /**
+     * Model identifier used for the failed API call
+     */
+    model?: string;
+    /**
+     * GitHub request tracing ID (x-github-request-id header) for server-side log correlation
+     */
+    providerCallId?: string;
+    source: ModelCallFailureSource;
+    /**
+     * HTTP status code from the failed request
+     */
+    statusCode?: number;
+}
 export interface AbortEvent {
     /**
      * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
@@ -2119,6 +2280,10 @@ export interface ToolExecutionStartData {
      * Name of the tool being executed
      */
     toolName: string;
+    /**
+     * Identifier for the agent loop turn this tool was invoked in, matching the corresponding assistant.turn_start event
+     */
+    turnId?: string;
 }
 export interface ToolExecutionPartialResultEvent {
     /**
@@ -2249,6 +2414,10 @@ export interface ToolExecutionCompleteData {
     toolTelemetry?: {
         [k: string]: unknown;
     };
+    /**
+     * Identifier for the agent loop turn this tool was invoked in, matching the corresponding assistant.turn_start event
+     */
+    turnId?: string;
 }
 /**
  * Error details when the tool execution failed
@@ -2968,7 +3137,7 @@ export interface SystemNotificationNewInboxMessage {
      */
     senderName: string;
     /**
-     * Category of the sender (e.g., ambient-agent, plugin, hook)
+     * Category of the sender (e.g., sidekick-agent, plugin, hook)
      */
     senderType: string;
     /**
@@ -3003,13 +3172,35 @@ export interface SystemNotificationShellDetachedCompleted {
     shellId: string;
     type: "shell_detached_completed";
 }
+export interface SystemNotificationInstructionDiscovered {
+    /**
+     * Human-readable label for the timeline (e.g., 'AGENTS.md from packages/billing/')
+     */
+    description?: string;
+    /**
+     * Relative path to the discovered instruction file
+     */
+    sourcePath: string;
+    /**
+     * Path of the file access that triggered discovery
+     */
+    triggerFile: string;
+    /**
+     * Tool command that triggered discovery (currently always 'view')
+     */
+    triggerTool: string;
+    type: "instruction_discovered";
+}
 export interface PermissionRequestedEvent {
     /**
      * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
      */
     agentId?: string;
     data: PermissionRequestedData;
-    ephemeral: true;
+    /**
+     * When true, the event is transient and not persisted to the session event log on disk
+     */
+    ephemeral?: boolean;
     /**
      * Unique event identifier (UUID v4), generated when the event is emitted
      */
@@ -3538,7 +3729,10 @@ export interface PermissionCompletedEvent {
      */
     agentId?: string;
     data: PermissionCompletedData;
-    ephemeral: true;
+    /**
+     * When true, the event is transient and not persisted to the session event log on disk
+     */
+    ephemeral?: boolean;
     /**
      * Unique event identifier (UUID v4), generated when the event is emitted
      */
@@ -3561,17 +3755,165 @@ export interface PermissionCompletedData {
      * Request ID of the resolved permission request; clients should dismiss any UI for this request
      */
     requestId: string;
-    result: PermissionCompletedResult;
+    result: PermissionResult;
     /**
      * Optional tool call ID associated with this permission prompt; clients may use it to correlate UI created from tool-scoped prompts
      */
     toolCallId?: string;
 }
-/**
- * The result of the permission request
- */
-export interface PermissionCompletedResult {
-    kind: PermissionCompletedKind;
+export interface PermissionApproved {
+    /**
+     * The permission request was approved
+     */
+    kind: "approved";
+}
+export interface PermissionApprovedForSession {
+    approval: UserToolSessionApproval;
+    /**
+     * Approved and remembered for the rest of the session
+     */
+    kind: "approved-for-session";
+}
+export interface UserToolSessionApprovalCommands {
+    /**
+     * Command identifiers approved by the user
+     */
+    commandIdentifiers: string[];
+    /**
+     * Command approval kind
+     */
+    kind: "commands";
+}
+export interface UserToolSessionApprovalRead {
+    /**
+     * Read approval kind
+     */
+    kind: "read";
+}
+export interface UserToolSessionApprovalWrite {
+    /**
+     * Write approval kind
+     */
+    kind: "write";
+}
+export interface UserToolSessionApprovalMcp {
+    /**
+     * MCP tool approval kind
+     */
+    kind: "mcp";
+    /**
+     * MCP server name
+     */
+    serverName: string;
+    /**
+     * Optional MCP tool name, or null for all tools on the server
+     */
+    toolName: string | null;
+}
+export interface UserToolSessionApprovalMemory {
+    /**
+     * Memory approval kind
+     */
+    kind: "memory";
+}
+export interface UserToolSessionApprovalCustomTool {
+    /**
+     * Custom tool approval kind
+     */
+    kind: "custom-tool";
+    /**
+     * Custom tool name
+     */
+    toolName: string;
+}
+export interface PermissionApprovedForLocation {
+    approval: UserToolSessionApproval;
+    /**
+     * Approved and persisted for this project location
+     */
+    kind: "approved-for-location";
+    /**
+     * The location key (git root or cwd) to persist the approval to
+     */
+    locationKey: string;
+}
+export interface PermissionCancelled {
+    /**
+     * The permission request was cancelled before a response was used
+     */
+    kind: "cancelled";
+    /**
+     * Optional explanation of why the request was cancelled
+     */
+    reason?: string;
+}
+export interface PermissionDeniedByRules {
+    /**
+     * Denied because approval rules explicitly blocked it
+     */
+    kind: "denied-by-rules";
+    /**
+     * Rules that denied the request
+     */
+    rules: PermissionRule[];
+}
+export interface PermissionRule {
+    /**
+     * Optional rule argument matched against the request
+     */
+    argument: string | null;
+    /**
+     * The rule kind, such as Shell or GitHubMCP
+     */
+    kind: string;
+}
+export interface PermissionDeniedNoApprovalRuleAndCouldNotRequestFromUser {
+    /**
+     * Denied because no approval rule matched and user confirmation was unavailable
+     */
+    kind: "denied-no-approval-rule-and-could-not-request-from-user";
+}
+export interface PermissionDeniedInteractivelyByUser {
+    /**
+     * Optional feedback from the user explaining the denial
+     */
+    feedback?: string;
+    /**
+     * Whether to force-reject the current agent turn
+     */
+    forceReject?: boolean;
+    /**
+     * Denied by the user during an interactive prompt
+     */
+    kind: "denied-interactively-by-user";
+}
+export interface PermissionDeniedByContentExclusionPolicy {
+    /**
+     * Denied by the organization's content exclusion policy
+     */
+    kind: "denied-by-content-exclusion-policy";
+    /**
+     * Human-readable explanation of why the path was excluded
+     */
+    message: string;
+    /**
+     * File path that triggered the exclusion
+     */
+    path: string;
+}
+export interface PermissionDeniedByPermissionRequestHook {
+    /**
+     * Whether to interrupt the current agent turn
+     */
+    interrupt?: boolean;
+    /**
+     * Denied by a permission request hook registered by an extension or plugin
+     */
+    kind: "denied-by-permission-request-hook";
+    /**
+     * Optional message from the hook explaining the denial
+     */
+    message?: string;
 }
 export interface UserInputRequestedEvent {
     /**
@@ -3878,6 +4220,10 @@ export interface McpOauthRequiredStaticClientConfig {
      * OAuth client ID for the server
      */
     clientId: string;
+    /**
+     * Optional non-default OAuth grant type. When set to 'client_credentials', the OAuth flow runs headlessly using the client_id + keychain-stored secret (no browser, no callback server).
+     */
+    grantType?: "client_credentials";
     /**
      * Whether this is a public OAuth client
      */
@@ -3919,7 +4265,10 @@ export interface ExternalToolRequestedEvent {
      */
     agentId?: string;
     data: ExternalToolRequestedData;
-    ephemeral: true;
+    /**
+     * When true, the event is transient and not persisted to the session event log on disk
+     */
+    ephemeral?: boolean;
     /**
      * Unique event identifier (UUID v4), generated when the event is emitted
      */
@@ -3975,7 +4324,7 @@ export interface ExternalToolCompletedEvent {
      */
     agentId?: string;
     data: ExternalToolCompletedData;
-    ephemeral: true;
+    ephemeral?: true;
     /**
      * Unique event identifier (UUID v4), generated when the event is emitted
      */
@@ -4138,6 +4487,10 @@ export interface AutoModeSwitchRequestedData {
      * Unique identifier for this request; used to respond via session.respondToAutoModeSwitch()
      */
     requestId: string;
+    /**
+     * Seconds until the rate limit resets, when known. Lets clients render a humanized reset time alongside the prompt.
+     */
+    retryAfterSeconds?: number;
 }
 export interface AutoModeSwitchCompletedEvent {
     /**