@github/copilot-sdk 1.0.0-beta.10 → 1.0.0-beta.12

package/README.md

@@ -2,8 +2,6 @@
 
 TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC.
 
-> **Note:** This SDK is in public preview and may change in breaking ways.
-
 ## Installation
 
 ```bash
@@ -57,7 +55,7 @@ await session.disconnect();
 await client.stop();
 ```
 
-Sessions also support `Symbol.asyncDispose` for use with [`await using`](https://github.com/tc39/proposal-explicit-resource-management) (TypeScript 5.2+/Node.js 18.0+):
+Sessions also support `Symbol.asyncDispose` for use with [`await using`](https://github.com/tc39/proposal-explicit-resource-management) (TypeScript 5.2+ / Node.js 20+):
 
 ```typescript
 await using session = await client.createSession({
@@ -82,14 +80,20 @@ new CopilotClient(options?: CopilotClientOptions)
 - `connection?: RuntimeConnection` - How to connect to the Copilot runtime. Construct via the factory functions on `RuntimeConnection`:
     - `RuntimeConnection.forStdio({ path?, args? })` (default) — spawn the runtime and communicate over its stdin/stdout.
     - `RuntimeConnection.forTcp({ port?, connectionToken?, path?, args? })` — spawn the runtime as a TCP server.
-    - `RuntimeConnection.forUri(url, { connectionToken? })` — connect to an already-running runtime (mutually exclusive with `gitHubToken`/`useLoggedInUser`).
-- `cwd?: string` - Working directory for the runtime process (default: current process cwd).
+    - `RuntimeConnection.forUri(url, { connectionToken? })` — connect to an already-running runtime (mutually exclusive with `gitHubToken`/`useLoggedInUser`). There is no top-level `cliUrl` shortcut; use this factory for URL-based connections.
+- `mode?: "empty" | "copilot-cli"` - Defaulting strategy. Use `"empty"` for multi-user server mode; defaults to `"copilot-cli"`.
+- `workingDirectory?: string` - Working directory for the runtime process (default: current process cwd).
 - `baseDirectory?: string` - Base directory for Copilot data (session state, config, etc.). Sets `COPILOT_HOME` on the spawned runtime. When not set, the runtime defaults to `~/.copilot`. Ignored when connecting via `RuntimeConnection.forUri`.
-- `logLevel?: string` - Log level. When omitted, the runtime uses its own default (currently `"info"`).
+- `logLevel?: "none" | "error" | "warning" | "info" | "debug" | "all"` - Log level. When omitted, the runtime uses its own default (currently `"info"`).
+- `env?: Record<string, string | undefined>` - Environment variables for the runtime process. When omitted, inherits `process.env`.
 - `gitHubToken?: string` - GitHub token for authentication. When provided, takes priority over other auth methods.
 - `useLoggedInUser?: boolean` - Whether to use logged-in user for authentication (default: true, but false when `gitHubToken` is provided). Cannot be used with `RuntimeConnection.forUri`.
+- `onListModels?: () => Promise<ModelInfo[]> | ModelInfo[]` - Optional model-list provider, useful when using a custom provider.
 - `telemetry?: TelemetryConfig` - OpenTelemetry configuration for the runtime process. Providing this object enables telemetry — no separate flag needed. See [Telemetry](#telemetry) below.
 - `onGetTraceContext?: TraceContextProvider` - Advanced: callback for linking your application's own OpenTelemetry spans into the same distributed trace as the runtime's spans. Not needed for normal telemetry collection. See [Telemetry](#telemetry) below.
+- `sessionFs?: SessionFsConfig` - Custom session filesystem provider.
+- `sessionIdleTimeoutSeconds?: number` - Server-wide idle timeout for sessions in seconds. Ignored when connecting via `RuntimeConnection.forUri`.
+- `enableRemoteSessions?: boolean` - Enable Mission Control remote session support. Ignored when connecting via `RuntimeConnection.forUri`.
 
 #### Methods
 
@@ -163,7 +167,7 @@ Get the ID of the session currently displayed in the TUI. Only available when co
 
 Request the TUI to switch to displaying the specified session. Only available in TUI+server mode.
 
-##### `on(eventType: SessionLifecycleEventType, handler): () => void`
+##### `onLifecycle(eventType: SessionLifecycleEventType, handler): () => void`
 
 Subscribe to a specific session lifecycle event type. Returns an unsubscribe function.
 
@@ -173,7 +177,7 @@ const unsubscribe = client.onLifecycle("session.foreground", (event) => {
 });
 ```
 
-##### `on(handler: SessionLifecycleHandler): () => void`
+##### `onLifecycle(handler: SessionLifecycleHandler): () => void`
 
 Subscribe to all session lifecycle events. Returns an unsubscribe function.
 

package/dist/cjs/client.js

@@ -782,6 +782,7 @@ class CopilotClient {
         clientName: config.clientName,
         reasoningEffort: config.reasoningEffort,
         reasoningSummary: config.reasoningSummary,
+        contextTier: config.contextTier,
         tools: config.tools?.map((tool) => ({
           name: tool.name,
           description: tool.description,
@@ -792,6 +793,7 @@ class CopilotClient {
         canvases: config.canvases?.map((canvas) => canvas.declaration),
         requestCanvasRenderer: config.requestCanvasRenderer,
         requestExtensions: config.requestExtensions,
+        extensionSdkPath: config.extensionSdkPath,
         extensionInfo: config.extensionInfo,
         commands: config.commands?.map((cmd) => ({
           name: cmd.name,
@@ -943,6 +945,7 @@ class CopilotClient {
         model: config.model,
         reasoningEffort: config.reasoningEffort,
         reasoningSummary: config.reasoningSummary,
+        contextTier: config.contextTier,
         systemMessage: wireSystemMessage,
         availableTools: toolFilterOptions.availableTools,
         excludedTools: toolFilterOptions.excludedTools,
@@ -958,6 +961,7 @@ class CopilotClient {
         canvases: config.canvases?.map((canvas) => canvas.declaration),
         requestCanvasRenderer: config.requestCanvasRenderer,
         requestExtensions: config.requestExtensions,
+        extensionSdkPath: config.extensionSdkPath,
         extensionInfo: config.extensionInfo,
         commands: config.commands?.map((cmd) => ({
           name: cmd.name,
@@ -997,7 +1001,7 @@ class CopilotClient {
         instructionDirectories: config.instructionDirectories,
         disabledSkills: config.disabledSkills,
         infiniteSessions: config.infiniteSessions,
-        suppressResumeEvent: config.suppressResumeEvent,
+        disableResume: config.suppressResumeEvent,
         continuePendingWork: config.continuePendingWork,
         gitHubToken: config.gitHubToken,
         remoteSession: config.remoteSession,

package/dist/cjs/extension.js

@@ -35,8 +35,10 @@ async function joinSession(config = {}) {
     );
   }
   const client = new import_client.CopilotClient({ _internalConnection: { kind: "parent-process" } });
+  const { extensionSdkPath: _stripped, ...rest } = config;
+  void _stripped;
   return client.resumeSession(sessionId, {
-    ...config,
+    ...rest,
     onPermissionRequest: config.onPermissionRequest ?? import_types.defaultJoinSessionPermissionHandler,
     suppressResumeEvent: config.suppressResumeEvent ?? true
   });

package/dist/cjs/generated/rpc.js

@@ -152,6 +152,12 @@ function createServerRpc(connection) {
         reload: async () => connection.sendRequest("user.settings.reload", {})
       }
     },
+    runtime: {
+      /**
+       * Gracefully shuts down an SDK-owned runtime. The response is sent only after cleanup completes; callers may then terminate the owned runtime process.
+       */
+      shutdown: async () => connection.sendRequest("runtime.shutdown", {})
+    },
     sessionFs: {
       /**
        * Registers an SDK client as the session filesystem provider.
@@ -438,7 +444,7 @@ function createSessionRpc(connection, sessionId) {
       /**
        * Gets the currently selected model for the session.
        *
-       * @returns The currently selected model and reasoning effort for the session.
+       * @returns The currently selected model, reasoning effort, and context tier for the session. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume.
        */
       getCurrent: async () => connection.sendRequest("session.model.getCurrent", { sessionId }),
       /**
@@ -918,7 +924,13 @@ function createSessionRpc(connection, sessionId) {
       /**
        * Reloads extension definitions and processes for the session.
        */
-      reload: async () => connection.sendRequest("session.extensions.reload", { sessionId })
+      reload: async () => connection.sendRequest("session.extensions.reload", { sessionId }),
+      /**
+       * Push attachments into the next user-message turn from an extension. The host should surface them as composer pills and forward them via the next session.send call. Callable only by extension-owned connections.
+       *
+       * @param params Parameters for session.extensions.sendAttachmentsToMessage.
+       */
+      sendAttachmentsToMessage: async (params) => connection.sendRequest("session.extensions.sendAttachmentsToMessage", { sessionId, ...params })
     },
     /** @experimental */
     tools: {

package/dist/client.js

@@ -768,6 +768,7 @@ class CopilotClient {
         clientName: config.clientName,
         reasoningEffort: config.reasoningEffort,
         reasoningSummary: config.reasoningSummary,
+        contextTier: config.contextTier,
         tools: config.tools?.map((tool) => ({
           name: tool.name,
           description: tool.description,
@@ -778,6 +779,7 @@ class CopilotClient {
         canvases: config.canvases?.map((canvas) => canvas.declaration),
         requestCanvasRenderer: config.requestCanvasRenderer,
         requestExtensions: config.requestExtensions,
+        extensionSdkPath: config.extensionSdkPath,
         extensionInfo: config.extensionInfo,
         commands: config.commands?.map((cmd) => ({
           name: cmd.name,
@@ -929,6 +931,7 @@ class CopilotClient {
         model: config.model,
         reasoningEffort: config.reasoningEffort,
         reasoningSummary: config.reasoningSummary,
+        contextTier: config.contextTier,
         systemMessage: wireSystemMessage,
         availableTools: toolFilterOptions.availableTools,
         excludedTools: toolFilterOptions.excludedTools,
@@ -944,6 +947,7 @@ class CopilotClient {
         canvases: config.canvases?.map((canvas) => canvas.declaration),
         requestCanvasRenderer: config.requestCanvasRenderer,
         requestExtensions: config.requestExtensions,
+        extensionSdkPath: config.extensionSdkPath,
         extensionInfo: config.extensionInfo,
         commands: config.commands?.map((cmd) => ({
           name: cmd.name,
@@ -983,7 +987,7 @@ class CopilotClient {
         instructionDirectories: config.instructionDirectories,
         disabledSkills: config.disabledSkills,
         infiniteSessions: config.infiniteSessions,
-        suppressResumeEvent: config.suppressResumeEvent,
+        disableResume: config.suppressResumeEvent,
         continuePendingWork: config.continuePendingWork,
         gitHubToken: config.gitHubToken,
         remoteSession: config.remoteSession,

package/dist/extension.d.ts

@@ -1,7 +1,7 @@
 import type { CopilotSession } from "./session.js";
 import { type ExtensionInfo, type PermissionHandler, type ResumeSessionConfig } from "./types.js";
 export { Canvas, CanvasError, createCanvas, type CanvasAction, type CanvasDeclaration, type CanvasHostContext, type CanvasJsonSchema, type CanvasOptions, } from "./canvas.js";
-export type JoinSessionConfig = Omit<ResumeSessionConfig, "onPermissionRequest"> & {
+export type JoinSessionConfig = Omit<ResumeSessionConfig, "onPermissionRequest" | "extensionSdkPath"> & {
     onPermissionRequest?: PermissionHandler;
 };
 export type { ExtensionInfo };

package/dist/extension.js

@@ -15,8 +15,10 @@ async function joinSession(config = {}) {
     );
   }
   const client = new CopilotClient({ _internalConnection: { kind: "parent-process" } });
+  const { extensionSdkPath: _stripped, ...rest } = config;
+  void _stripped;
   return client.resumeSession(sessionId, {
-    ...config,
+    ...rest,
     onPermissionRequest: config.onPermissionRequest ?? defaultJoinSessionPermissionHandler,
     suppressResumeEvent: config.suppressResumeEvent ?? true
   });

package/dist/generated/rpc.d.ts

@@ -3,7 +3,7 @@
  * Generated from: api.schema.json
  */
 import type { MessageConnection } from "vscode-jsonrpc/node.js";
-import type { AbortReason, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, McpServerSource, McpServerStatus, PermissionPromptRequest, PermissionRule, ReasoningSummary, SessionEvent, SessionMode, ShutdownType, SkillSource, UserToolSessionApproval } from "./session-events.js";
+import type { AbortReason, Attachment, ContextTier, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, McpServerSource, McpServerStatus, PermissionPromptRequest, PermissionRule, ReasoningSummary, SessionEvent, SessionMode, ShutdownType, SkillSource, UserToolSessionApproval } from "./session-events.js";
 /**
  * Where the agent definition was loaded from
  *
@@ -390,7 +390,7 @@ export type FilterMapping = {
  * via the `definition` "InstalledPluginSource".
  */
 /** @experimental */
-export type InstalledPluginSource = string | InstalledPluginSourceGithub | InstalledPluginSourceUrl | InstalledPluginSourceLocal;
+export type InstalledPluginSource = string | InstalledPluginSourceGitHub | InstalledPluginSourceUrl | InstalledPluginSourceLocal;
 /**
  * Category of instruction source — used for merge logic
  *
@@ -654,7 +654,7 @@ export type SessionContextInfo = {
      */
     compactionThreshold: number;
     /**
-     * Total context limit for /context display. promptTokenLimit + min(32k or 64k, outputTokenLimit) depending on model.
+     * Total context limit for /context display: promptTokenLimit + outputTokenLimit (the model's full max_output_tokens reserved on top of the prompt budget).
      */
     limit: number;
     /**
@@ -865,6 +865,28 @@ export type PermissionsSetApproveAllSource =
  | "autopilot_confirmation"
 /** Allow-all was enabled through an RPC caller. */
  | "rpc";
+/**
+ * Schema for the `PushAttachment` type.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachment".
+ */
+/** @experimental */
+export type PushAttachment = PushAttachmentFile | PushAttachmentDirectory | PushAttachmentSelection | PushAttachmentGitHubReference | PushAttachmentBlob | ExtensionContextPushInput;
+/**
+ * Type of GitHub reference
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentGitHubReferenceType".
+ */
+/** @experimental */
+export type PushAttachmentGitHubReferenceType = 
+/** GitHub issue reference. */
+"issue"
+/** GitHub pull request reference. */
+ | "pr"
+/** GitHub discussion reference. */
+ | "discussion";
 /**
  * Whether this item is a queued user message or a queued slash command / model change
  *
@@ -907,28 +929,6 @@ export type SendAgentMode =
  | "autopilot"
 /** The agent is in shell-focused UI mode. */
  | "shell";
-/**
- * A user message attachment — a file, directory, code selection, blob, or GitHub reference
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachment".
- */
-/** @experimental */
-export type SendAttachment = SendAttachmentFile | SendAttachmentDirectory | SendAttachmentSelection | SendAttachmentGithubReference | SendAttachmentBlob;
-/**
- * Type of GitHub reference
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentGithubReferenceType".
- */
-/** @experimental */
-export type SendAttachmentGithubReferenceType = 
-/** GitHub issue reference. */
-"issue"
-/** GitHub pull request reference. */
- | "pr"
-/** GitHub discussion reference. */
- | "discussion";
 /**
  * How to deliver the message. `enqueue` (default) appends to the message queue. `immediate` interjects during an in-progress turn.
  *
@@ -1009,7 +1009,7 @@ export type SessionFsSqliteQueryType =
  * via the `definition` "SessionInstalledPluginSource".
  */
 /** @experimental */
-export type SessionInstalledPluginSource = string | SessionInstalledPluginSourceGithub | SessionInstalledPluginSourceUrl | SessionInstalledPluginSourceLocal;
+export type SessionInstalledPluginSource = string | SessionInstalledPluginSourceGitHub | SessionInstalledPluginSourceUrl | SessionInstalledPluginSourceLocal;
 /**
  * Public-facing workspace metadata for this session, or null if the session has no associated workspace. Excludes runtime-internal fields (GitHub IDs, summary count, internal flags).
  *
@@ -2652,7 +2652,7 @@ export interface ConnectRemoteSessionParams {
     sessionId: string;
 }
 /**
- * The currently selected model and reasoning effort for the session.
+ * The currently selected model, reasoning effort, and context tier for the session. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "CurrentModel".
@@ -2667,6 +2667,7 @@ export interface CurrentModel {
      * Reasoning effort level currently applied to the active model, when one is set. Reads `Session.getReasoningEffort()` synchronously after `getSelectedModel()` resolves so the two values are reported as a snapshot.
      */
     reasoningEffort?: string;
+    contextTier?: ContextTier;
 }
 /**
  * Lightweight metadata for a currently initialized session tool
@@ -2875,6 +2876,29 @@ export interface Extension {
      */
     pid?: number;
 }
+/**
+ * Slim input shape for extension_context attachments; identity fields are runtime-derived.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ExtensionContextPushInput".
+ */
+/** @experimental */
+export interface ExtensionContextPushInput {
+    /**
+     * Attachment type discriminator
+     */
+    type: "extension_context";
+    /**
+     * Human-readable composer pill label
+     */
+    title: string;
+    /**
+     * Caller-supplied JSON payload (required, may be null but not undefined)
+     */
+    payload: {
+        [k: string]: unknown | undefined;
+    };
+}
 /**
  * Extensions discovered for the session, with their current status.
  *
@@ -3411,13 +3435,13 @@ export interface InstalledPlugin {
     source?: InstalledPluginSource;
 }
 /**
- * Schema for the `InstalledPluginSourceGithub` type.
+ * Schema for the `InstalledPluginSourceGitHub` type.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSourceGithub".
+ * via the `definition` "InstalledPluginSourceGitHub".
  */
 /** @experimental */
-export interface InstalledPluginSourceGithub {
+export interface InstalledPluginSourceGitHub {
     /**
      * Constant value. Always "github".
      */
@@ -4599,7 +4623,7 @@ export interface ModelBillingTokenPrices {
      */
     batchSize?: number;
     /**
-     * Maximum context window tokens for the default tier
+     * Prompt token budget (max_prompt_tokens) for the default tier. The total context window is this value plus the model's max_output_tokens.
      */
     contextMax?: number;
     longContext?: ModelBillingTokenPricesLongContext;
@@ -4624,7 +4648,7 @@ export interface ModelBillingTokenPricesLongContext {
      */
     cachePrice?: number;
     /**
-     * Maximum context window tokens for the long context tier
+     * Prompt token budget (max_prompt_tokens) for the long context tier. The total context window is this value plus the model's max_output_tokens.
      */
     contextMax?: number;
 }
@@ -4774,12 +4798,7 @@ export interface ModelSwitchToRequest {
     reasoningEffort?: string;
     reasoningSummary?: ReasoningSummary;
     modelCapabilities?: ModelCapabilitiesOverride;
-    /**
-     * Explicit context tier for the selected model. `"default"` / `"long_context"` pin the tier; `null` clears any previous explicit choice; `undefined` leaves the existing tier untouched.
-     */
-    contextTier?: "default"
-    /** Pin the session to the long-context tier when supported. */
-     | "long_context" | null;
+    contextTier?: ContextTier;
 }
 /**
  * The model identifier active on the session after the switch.
@@ -6264,6 +6283,192 @@ export interface PluginList {
      */
     plugins: Plugin[];
 }
+/**
+ * File attachment
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentFile".
+ */
+/** @experimental */
+export interface PushAttachmentFile {
+    /**
+     * Attachment type discriminator
+     */
+    type: "file";
+    /**
+     * Absolute file path
+     */
+    path: string;
+    /**
+     * User-facing display name for the attachment
+     */
+    displayName: string;
+    lineRange?: PushAttachmentFileLineRange;
+}
+/**
+ * Optional line range to scope the attachment to a specific section of the file
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentFileLineRange".
+ */
+/** @experimental */
+export interface PushAttachmentFileLineRange {
+    /**
+     * Start line number (1-based)
+     */
+    start: number;
+    /**
+     * End line number (1-based, inclusive)
+     */
+    end: number;
+}
+/**
+ * Directory attachment
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentDirectory".
+ */
+/** @experimental */
+export interface PushAttachmentDirectory {
+    /**
+     * Attachment type discriminator
+     */
+    type: "directory";
+    /**
+     * Absolute directory path
+     */
+    path: string;
+    /**
+     * User-facing display name for the attachment
+     */
+    displayName: string;
+}
+/**
+ * Code selection attachment from an editor
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentSelection".
+ */
+/** @experimental */
+export interface PushAttachmentSelection {
+    /**
+     * Attachment type discriminator
+     */
+    type: "selection";
+    /**
+     * Absolute path to the file containing the selection
+     */
+    filePath: string;
+    /**
+     * User-facing display name for the selection
+     */
+    displayName: string;
+    /**
+     * The selected text content
+     */
+    text: string;
+    selection: PushAttachmentSelectionDetails;
+}
+/**
+ * Position range of the selection within the file
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentSelectionDetails".
+ */
+/** @experimental */
+export interface PushAttachmentSelectionDetails {
+    start: PushAttachmentSelectionDetailsStart;
+    end: PushAttachmentSelectionDetailsEnd;
+}
+/**
+ * Start position of the selection
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentSelectionDetailsStart".
+ */
+/** @experimental */
+export interface PushAttachmentSelectionDetailsStart {
+    /**
+     * Start line number (0-based)
+     */
+    line: number;
+    /**
+     * Start character offset within the line (0-based)
+     */
+    character: number;
+}
+/**
+ * End position of the selection
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentSelectionDetailsEnd".
+ */
+/** @experimental */
+export interface PushAttachmentSelectionDetailsEnd {
+    /**
+     * End line number (0-based)
+     */
+    line: number;
+    /**
+     * End character offset within the line (0-based)
+     */
+    character: number;
+}
+/**
+ * GitHub issue, pull request, or discussion reference
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentGitHubReference".
+ */
+/** @experimental */
+export interface PushAttachmentGitHubReference {
+    /**
+     * Attachment type discriminator
+     */
+    type: "github_reference";
+    /**
+     * Issue, pull request, or discussion number
+     */
+    number: number;
+    /**
+     * Title of the referenced item
+     */
+    title: string;
+    referenceType: PushAttachmentGitHubReferenceType;
+    /**
+     * Current state of the referenced item (e.g., open, closed, merged)
+     */
+    state: string;
+    /**
+     * URL to the referenced item on GitHub
+     */
+    url: string;
+}
+/**
+ * Blob attachment with inline base64-encoded data
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentBlob".
+ */
+/** @experimental */
+export interface PushAttachmentBlob {
+    /**
+     * Attachment type discriminator
+     */
+    type: "blob";
+    /**
+     * Base64-encoded content
+     */
+    data: string;
+    /**
+     * MIME type of the inline data
+     */
+    mimeType: string;
+    /**
+     * User-facing display name for the attachment
+     */
+    displayName?: string;
+}
 /**
  * Schema for the `QueuePendingItems` type.
  *
@@ -6504,190 +6709,21 @@ export interface SecretsAddFilterValuesResult {
     ok: true;
 }
 /**
- * File attachment
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentFile".
- */
-/** @experimental */
-export interface SendAttachmentFile {
-    /**
-     * Attachment type discriminator
-     */
-    type: "file";
-    /**
-     * Absolute file path
-     */
-    path: string;
-    /**
-     * User-facing display name for the attachment
-     */
-    displayName: string;
-    lineRange?: SendAttachmentFileLineRange;
-}
-/**
- * Optional line range to scope the attachment to a specific section of the file
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentFileLineRange".
- */
-/** @experimental */
-export interface SendAttachmentFileLineRange {
-    /**
-     * Start line number (1-based)
-     */
-    start: number;
-    /**
-     * End line number (1-based, inclusive)
-     */
-    end: number;
-}
-/**
- * Directory attachment
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentDirectory".
- */
-/** @experimental */
-export interface SendAttachmentDirectory {
-    /**
-     * Attachment type discriminator
-     */
-    type: "directory";
-    /**
-     * Absolute directory path
-     */
-    path: string;
-    /**
-     * User-facing display name for the attachment
-     */
-    displayName: string;
-}
-/**
- * Code selection attachment from an editor
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentSelection".
- */
-/** @experimental */
-export interface SendAttachmentSelection {
-    /**
-     * Attachment type discriminator
-     */
-    type: "selection";
-    /**
-     * Absolute path to the file containing the selection
-     */
-    filePath: string;
-    /**
-     * User-facing display name for the selection
-     */
-    displayName: string;
-    /**
-     * The selected text content
-     */
-    text: string;
-    selection: SendAttachmentSelectionDetails;
-}
-/**
- * Position range of the selection within the file
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentSelectionDetails".
- */
-/** @experimental */
-export interface SendAttachmentSelectionDetails {
-    start: SendAttachmentSelectionDetailsStart;
-    end: SendAttachmentSelectionDetailsEnd;
-}
-/**
- * Start position of the selection
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentSelectionDetailsStart".
- */
-/** @experimental */
-export interface SendAttachmentSelectionDetailsStart {
-    /**
-     * Start line number (0-based)
-     */
-    line: number;
-    /**
-     * Start character offset within the line (0-based)
-     */
-    character: number;
-}
-/**
- * End position of the selection
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentSelectionDetailsEnd".
- */
-/** @experimental */
-export interface SendAttachmentSelectionDetailsEnd {
-    /**
-     * End line number (0-based)
-     */
-    line: number;
-    /**
-     * End character offset within the line (0-based)
-     */
-    character: number;
-}
-/**
- * GitHub issue, pull request, or discussion reference
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentGithubReference".
- */
-/** @experimental */
-export interface SendAttachmentGithubReference {
-    /**
-     * Attachment type discriminator
-     */
-    type: "github_reference";
-    /**
-     * Issue, pull request, or discussion number
-     */
-    number: number;
-    /**
-     * Title of the referenced item
-     */
-    title: string;
-    referenceType: SendAttachmentGithubReferenceType;
-    /**
-     * Current state of the referenced item (e.g., open, closed, merged)
-     */
-    state: string;
-    /**
-     * URL to the referenced item on GitHub
-     */
-    url: string;
-}
-/**
- * Blob attachment with inline base64-encoded data
+ * Parameters for session.extensions.sendAttachmentsToMessage.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentBlob".
+ * via the `definition` "SendAttachmentsToMessageParams".
  */
 /** @experimental */
-export interface SendAttachmentBlob {
-    /**
-     * Attachment type discriminator
-     */
-    type: "blob";
+export interface SendAttachmentsToMessageParams {
     /**
-     * Base64-encoded content
+     * Optional canvas instance binding the push for provenance. When supplied, the runtime resolves the canvas, verifies it is owned by the calling extension, and stamps canvasId/instanceId onto each extension_context entry. When omitted, no resolution runs and those fields stay unset on the attachment.
      */
-    data: string;
+    instanceId?: string;
     /**
-     * MIME type of the inline data
+     * Attachments to push into the next user-message turn. extension_context entries take the slim shape; standard variants take their full AttachmentSchema shape.
      */
-    mimeType: string;
-    /**
-     * User-facing display name for the attachment
-     */
-    displayName?: string;
+    attachments: PushAttachment[];
 }
 /**
  * Parameters for sending a user message to the session
@@ -6708,7 +6744,7 @@ export interface SendRequest {
     /**
      * Optional attachments (files, directories, selections, blobs, GitHub references) to include with the message
      */
-    attachments?: SendAttachment[];
+    attachments?: Attachment[];
     mode?: SendMode;
     /**
      * If true, adds the message to the front of the queue instead of the end
@@ -7391,13 +7427,13 @@ export interface SessionInstalledPlugin {
     source?: SessionInstalledPluginSource;
 }
 /**
- * Schema for the `SessionInstalledPluginSourceGithub` type.
+ * Schema for the `SessionInstalledPluginSourceGitHub` type.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionInstalledPluginSourceGithub".
+ * via the `definition` "SessionInstalledPluginSourceGitHub".
  */
 /** @experimental */
-export interface SessionInstalledPluginSourceGithub {
+export interface SessionInstalledPluginSourceGitHub {
     /**
      * Constant value. Always "github".
      */
@@ -8127,6 +8163,10 @@ export interface SessionUpdateOptionsParams {
      * Whether to default custom agents to local-only execution.
      */
     customAgentsLocalOnly?: boolean;
+    /**
+     * When true, the selected custom agent's prompt is not injected into the user message (skill context is still injected). Used by automation triggers where the agent prompt is already in the problem statement.
+     */
+    suppressCustomAgentPrompt?: boolean;
     /**
      * Whether to skip loading custom instruction sources.
      */
@@ -10189,6 +10229,12 @@ export declare function createServerRpc(connection: MessageConnection): {
             reload: () => Promise<void>;
         };
     };
+    runtime: {
+        /**
+         * Gracefully shuts down an SDK-owned runtime. The response is sent only after cleanup completes; callers may then terminate the owned runtime process.
+         */
+        shutdown: () => Promise<void>;
+    };
     sessionFs: {
         /**
          * Registers an SDK client as the session filesystem provider.
@@ -10462,7 +10508,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         /**
          * Gets the currently selected model for the session.
          *
-         * @returns The currently selected model and reasoning effort for the session.
+         * @returns The currently selected model, reasoning effort, and context tier for the session. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume.
          */
         getCurrent: () => Promise<CurrentModel>;
         /**
@@ -10943,6 +10989,12 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * Reloads extension definitions and processes for the session.
          */
         reload: () => Promise<void>;
+        /**
+         * Push attachments into the next user-message turn from an extension. The host should surface them as composer pills and forward them via the next session.send call. Callable only by extension-owned connections.
+         *
+         * @param params Parameters for session.extensions.sendAttachmentsToMessage.
+         */
+        sendAttachmentsToMessage: (params: SendAttachmentsToMessageParams) => Promise<void>;
     };
     /** @experimental */
     tools: {

package/dist/generated/rpc.js

@@ -126,6 +126,12 @@ function createServerRpc(connection) {
         reload: async () => connection.sendRequest("user.settings.reload", {})
       }
     },
+    runtime: {
+      /**
+       * Gracefully shuts down an SDK-owned runtime. The response is sent only after cleanup completes; callers may then terminate the owned runtime process.
+       */
+      shutdown: async () => connection.sendRequest("runtime.shutdown", {})
+    },
     sessionFs: {
       /**
        * Registers an SDK client as the session filesystem provider.
@@ -412,7 +418,7 @@ function createSessionRpc(connection, sessionId) {
       /**
        * Gets the currently selected model for the session.
        *
-       * @returns The currently selected model and reasoning effort for the session.
+       * @returns The currently selected model, reasoning effort, and context tier for the session. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume.
        */
       getCurrent: async () => connection.sendRequest("session.model.getCurrent", { sessionId }),
       /**
@@ -892,7 +898,13 @@ function createSessionRpc(connection, sessionId) {
       /**
        * Reloads extension definitions and processes for the session.
        */
-      reload: async () => connection.sendRequest("session.extensions.reload", { sessionId })
+      reload: async () => connection.sendRequest("session.extensions.reload", { sessionId }),
+      /**
+       * Push attachments into the next user-message turn from an extension. The host should surface them as composer pills and forward them via the next session.send call. Callable only by extension-owned connections.
+       *
+       * @param params Parameters for session.extensions.sendAttachmentsToMessage.
+       */
+      sendAttachmentsToMessage: async (params) => connection.sendRequest("session.extensions.sendAttachmentsToMessage", { sessionId, ...params })
     },
     /** @experimental */
     tools: {

package/dist/generated/session-events.d.ts

@@ -5,7 +5,7 @@
 /**
  * Union of all session event variants emitted by the Copilot CLI runtime.
  */
-export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | AutopilotObjectiveChangedEvent | InfoEvent | WarningEvent | ModelChangeEvent | ModeChangedEvent | PermissionsChangedEvent | PlanChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | ContextChangedEvent | UsageInfoEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantUsageEvent | ModelCallFailureEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | CustomNotificationEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | McpAppToolCallCompleteEvent;
+export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | AutopilotObjectiveChangedEvent | InfoEvent | WarningEvent | ModelChangeEvent | ModeChangedEvent | PermissionsChangedEvent | PlanChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | ContextChangedEvent | UsageInfoEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantUsageEvent | ModelCallFailureEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | CustomNotificationEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
 /**
  * Hosting platform type of the repository (github or ado)
  */
@@ -14,6 +14,14 @@ export type WorkingDirectoryContextHostType =
 "github"
 /** Repository is hosted on Azure DevOps. */
  | "ado";
+/**
+ * Allowed values for the `ContextTier` enumeration.
+ */
+export type ContextTier = 
+/** Default context tier with standard context window size. */
+"default"
+/** Extended context tier with a larger context window. */
+ | "long_context";
 /**
  * Reasoning summary mode used for model calls, if applicable (e.g. "none", "concise", "detailed")
  */
@@ -103,13 +111,13 @@ export type UserMessageAgentMode =
 /** The agent is in shell-focused UI mode. */
  | "shell";
 /**
- * A user message attachment — a file, directory, code selection, blob, or GitHub reference
+ * A user message attachment — a file, directory, code selection, blob, GitHub reference, or extension-supplied context payload
  */
-export type UserMessageAttachment = UserMessageAttachmentFile | UserMessageAttachmentDirectory | UserMessageAttachmentSelection | UserMessageAttachmentGithubReference | UserMessageAttachmentBlob;
+export type Attachment = AttachmentFile | AttachmentDirectory | AttachmentSelection | AttachmentGitHubReference | AttachmentBlob | AttachmentExtensionContext;
 /**
  * Type of GitHub reference
  */
-export type UserMessageAttachmentGithubReferenceType = 
+export type AttachmentGitHubReferenceType = 
 /** GitHub issue reference. */
 "issue"
 /** GitHub pull request reference. */
@@ -430,9 +438,7 @@ export interface StartData {
     /**
      * Context tier selected at session creation time for models with tiered context pricing; null when no tier is selected (e.g., non-tiered model)
      */
-    contextTier?: "default"
-    /** Extended context tier with a larger context window. */
-     | "long_context" | null;
+    contextTier?: ContextTier | null;
     /**
      * Version string of the Copilot application
      */
@@ -547,9 +553,7 @@ export interface ResumeData {
     /**
      * Context tier currently selected at resume time; null when no tier is active
      */
-    contextTier?: "default"
-    /** Extended context tier with a larger context window. */
-     | "long_context" | null;
+    contextTier?: ContextTier | null;
     /**
      * When true, tool calls and permission requests left in flight by the previous session lifetime remain pending after resume and the agentic loop awaits their results. User sends are queued behind the pending work until all such requests reach a terminal state. When false (the default), any such tool calls and permission requests are immediately marked as interrupted on resume.
      */
@@ -1042,9 +1046,7 @@ export interface ModelChangeData {
     /**
      * Context tier after the model change; null explicitly clears a previously selected tier
      */
-    contextTier?: "default"
-    /** Extended context tier with a larger context window. */
-     | "long_context" | null;
+    contextTier?: ContextTier | null;
     /**
      * Newly selected model identifier
      */
@@ -1958,7 +1960,7 @@ export interface UserMessageData {
     /**
      * Files, selections, or GitHub references attached to the message
      */
-    attachments?: UserMessageAttachment[];
+    attachments?: Attachment[];
     /**
      * The user's message text as displayed in the timeline
      */
@@ -1995,12 +1997,12 @@ export interface UserMessageData {
 /**
  * File attachment
  */
-export interface UserMessageAttachmentFile {
+export interface AttachmentFile {
     /**
      * User-facing display name for the attachment
      */
     displayName: string;
-    lineRange?: UserMessageAttachmentFileLineRange;
+    lineRange?: AttachmentFileLineRange;
     /**
      * Absolute file path
      */
@@ -2013,7 +2015,7 @@ export interface UserMessageAttachmentFile {
 /**
  * Optional line range to scope the attachment to a specific section of the file
  */
-export interface UserMessageAttachmentFileLineRange {
+export interface AttachmentFileLineRange {
     /**
      * End line number (1-based, inclusive)
      */
@@ -2026,7 +2028,7 @@ export interface UserMessageAttachmentFileLineRange {
 /**
  * Directory attachment
  */
-export interface UserMessageAttachmentDirectory {
+export interface AttachmentDirectory {
     /**
      * User-facing display name for the attachment
      */
@@ -2043,7 +2045,7 @@ export interface UserMessageAttachmentDirectory {
 /**
  * Code selection attachment from an editor
  */
-export interface UserMessageAttachmentSelection {
+export interface AttachmentSelection {
     /**
      * User-facing display name for the selection
      */
@@ -2052,7 +2054,7 @@ export interface UserMessageAttachmentSelection {
      * Absolute path to the file containing the selection
      */
     filePath: string;
-    selection: UserMessageAttachmentSelectionDetails;
+    selection: AttachmentSelectionDetails;
     /**
      * The selected text content
      */
@@ -2065,14 +2067,14 @@ export interface UserMessageAttachmentSelection {
 /**
  * Position range of the selection within the file
  */
-export interface UserMessageAttachmentSelectionDetails {
-    end: UserMessageAttachmentSelectionDetailsEnd;
-    start: UserMessageAttachmentSelectionDetailsStart;
+export interface AttachmentSelectionDetails {
+    end: AttachmentSelectionDetailsEnd;
+    start: AttachmentSelectionDetailsStart;
 }
 /**
  * End position of the selection
  */
-export interface UserMessageAttachmentSelectionDetailsEnd {
+export interface AttachmentSelectionDetailsEnd {
     /**
      * End character offset within the line (0-based)
      */
@@ -2085,7 +2087,7 @@ export interface UserMessageAttachmentSelectionDetailsEnd {
 /**
  * Start position of the selection
  */
-export interface UserMessageAttachmentSelectionDetailsStart {
+export interface AttachmentSelectionDetailsStart {
     /**
      * Start character offset within the line (0-based)
      */
@@ -2098,12 +2100,12 @@ export interface UserMessageAttachmentSelectionDetailsStart {
 /**
  * GitHub issue, pull request, or discussion reference
  */
-export interface UserMessageAttachmentGithubReference {
+export interface AttachmentGitHubReference {
     /**
      * Issue, pull request, or discussion number
      */
     number: number;
-    referenceType: UserMessageAttachmentGithubReferenceType;
+    referenceType: AttachmentGitHubReferenceType;
     /**
      * Current state of the referenced item (e.g., open, closed, merged)
      */
@@ -2124,7 +2126,7 @@ export interface UserMessageAttachmentGithubReference {
 /**
  * Blob attachment with inline base64-encoded data
  */
-export interface UserMessageAttachmentBlob {
+export interface AttachmentBlob {
     /**
      * Base64-encoded content
      */
@@ -2142,6 +2144,41 @@ export interface UserMessageAttachmentBlob {
      */
     type: "blob";
 }
+/**
+ * Structured context contributed by an extension. Composer pills displayed in the host are forwarded back through session.send.attachments, then rendered into the model prompt as an <extension_context> XML block.
+ */
+export interface AttachmentExtensionContext {
+    /**
+     * Provider-local canvas identifier when the push was bound to a canvas instance
+     */
+    canvasId?: string;
+    /**
+     * ISO 8601 timestamp captured by the runtime when the push was accepted
+     */
+    capturedAt: string;
+    /**
+     * Owning extension identifier. Runtime-derived from the caller's connection when produced via session.extensions.sendAttachmentsToMessage; preserved verbatim on subsequent transports.
+     */
+    extensionId: string;
+    /**
+     * Open canvas instance identifier when the push was bound to a canvas instance
+     */
+    instanceId?: string;
+    /**
+     * Caller-supplied JSON payload
+     */
+    payload?: {
+        [k: string]: unknown | undefined;
+    };
+    /**
+     * Human-readable composer pill label
+     */
+    title: string;
+    /**
+     * Attachment type discriminator
+     */
+    type: "extension_context";
+}
 /**
  * Session event "pending_messages.modified". Empty payload; the event signals that the pending message queue has changed
  */
@@ -2983,6 +3020,10 @@ export interface ToolExecutionStartData {
      * Original tool name on the MCP server, when the tool is an MCP tool
      */
     mcpToolName?: string;
+    /**
+     * Model identifier that generated this tool call
+     */
+    model?: string;
     /**
      * @deprecated
      * Tool call ID of the parent tool invocation when this event originates from a sub-agent
@@ -6658,6 +6699,45 @@ export interface CanvasRegistryChangedCanvasAction {
      */
     name: string;
 }
+/**
+ * Session event "session.extensions.attachments_pushed".
+ */
+export interface ExtensionsAttachmentsPushedEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: ExtensionsAttachmentsPushedData;
+    /**
+     * Always true for events that are transient and not persisted to the session event log on disk.
+     */
+    ephemeral: true;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "session.extensions.attachments_pushed".
+     */
+    type: "session.extensions.attachments_pushed";
+}
+/**
+ * Schema for the `ExtensionsAttachmentsPushedData` type.
+ */
+export interface ExtensionsAttachmentsPushedData {
+    /**
+     * Attachments contributed by an extension; the host should surface these as composer pills and forward them via the next session.send call.
+     */
+    attachments: Attachment[];
+}
 /**
  * Session event "mcp_app.tool_call_complete". MCP App view called a tool on a connected MCP server (SEP-1865)
  */

package/dist/session.d.ts

@@ -1,6 +1,6 @@
 import { createSessionRpc } from "./generated/rpc.js";
 import type { OpenCanvasInstance } from "./generated/rpc.js";
-import type { MessageOptions, ReasoningEffort, ReasoningSummary, ModelCapabilitiesOverride, SessionCapabilities, SessionEvent, SessionEventHandler, SessionEventType, SessionUiApi, TypedSessionEventHandler } from "./types.js";
+import type { MessageOptions, ContextTier, ReasoningEffort, ReasoningSummary, ModelCapabilitiesOverride, SessionCapabilities, SessionEvent, SessionEventHandler, SessionEventType, SessionUiApi, TypedSessionEventHandler } from "./types.js";
 /** Assistant message event - the final response from the assistant. */
 export type AssistantMessageEvent = Extract<SessionEvent, {
     type: "assistant.message";
@@ -264,6 +264,7 @@ export declare class CopilotSession {
     setModel(model: string, options?: {
         reasoningEffort?: ReasoningEffort;
         reasoningSummary?: ReasoningSummary;
+        contextTier?: ContextTier;
         modelCapabilities?: ModelCapabilitiesOverride;
     }): Promise<void>;
     /**

package/dist/types.d.ts

@@ -1226,6 +1226,11 @@ export interface LargeToolOutputConfig {
  * Valid reasoning effort levels for models that support it.
  */
 export type ReasoningEffort = "low" | "medium" | "high" | "xhigh";
+/**
+ * Context window tier for the session. "long_context" pins the session to the
+ * long-context tier when the selected model supports it.
+ */
+export type ContextTier = "default" | "long_context";
 /**
  * Stable extension identity for session participants that provide canvases.
  */
@@ -1261,6 +1266,11 @@ export interface SessionConfigBase {
      * Use "none" to suppress summary output regardless of whether reasoning is enabled.
      */
     reasoningSummary?: ReasoningSummary;
+    /**
+     * Context window tier for models that support it. Use "long_context" to pin
+     * the session to the long-context tier; omit or use "default" otherwise.
+     */
+    contextTier?: ContextTier;
     /** Per-property overrides for model capabilities, deep-merged over runtime defaults. */
     modelCapabilities?: ModelCapabilitiesOverride;
     /**
@@ -1314,6 +1324,19 @@ export interface SessionConfigBase {
      * stay clean.
      */
     requestExtensions?: boolean;
+    /**
+     * Optional override path to a `copilot-sdk/` folder to inject into
+     * extension subprocesses for this session in place of the bundled SDK.
+     * When unset or invalid (missing folder or missing `index.js` /
+     * `extension.js`), the runtime falls back to the bundled SDK without
+     * throwing. Takes precedence over any server-level default.
+     *
+     * Only honored on session create and resume — extensions joining via
+     * `joinSession` cannot override the SDK path, because the extension
+     * subprocess has already been forked by the host with the SDK the host
+     * chose. `JoinSessionConfig` omits this field for that reason.
+     */
+    extensionSdkPath?: string;
     /**
      * Stable extension identity for canvas providers on this connection. When
      * set, the runtime uses `${source}:${name}` as the agent-facing extension

package/docs/examples.md

@@ -158,7 +158,7 @@ Hooks intercept and modify behavior at key lifecycle points. Register them in th
 | `onPreToolUse`          | Before a tool executes                   | Tool args, permission decision, add context |
 | `onPostToolUse`         | After a tool executes successfully       | Tool result, add context                    |
 | `onPostToolUseFailure`  | After a tool execution returns a failure | Add hidden guidance to the model            |
-| `onSessionStart`        | Session starts or resumes                | Add context, modify config                  |
+| `onSessionStart`        | Session starts or resumes                | Add context                                 |
 | `onSessionEnd`          | Session ends                             | Cleanup actions, summary                    |
 | `onErrorOccurred`       | An error occurs                          | Error handling strategy (retry/skip/abort)  |
 
@@ -415,7 +415,7 @@ session.on("assistant.message", (event) => {
 | Event Type                  | Description                                      | Key Data Fields                                        |
 | --------------------------- | ------------------------------------------------ | ------------------------------------------------------ |
 | `assistant.message`         | Agent's final response                           | `content`, `messageId`, `toolRequests`                 |
-| `assistant.streaming_delta` | Token-by-token streaming (ephemeral)             | `totalResponseSizeBytes`                               |
+| `assistant.message_delta`   | Message content chunks (ephemeral)               | `deltaContent`                                         |
 | `tool.execution_start`      | A tool is about to run                           | `toolCallId`, `toolName`, `arguments`                  |
 | `tool.execution_complete`   | A tool finished running                          | `toolCallId`, `toolName`, `success`, `result`, `error` |
 | `user.message`              | User sent a message                              | `content`, `attachments`, `source`                     |
@@ -629,8 +629,11 @@ const session = await joinSession({
         onPreToolUse: async (input) => {
             if (input.toolName === "bash") {
                 const cmd = String(input.toolArgs?.command || "");
-                if (/rm\\s+-rf\\s+\\/ / i.test(cmd) || /Remove-Item\\s+.*-Recurse/i.test(cmd)) {
-                    return { permissionDecision: "deny" };
+                if (/rm\\s+-rf\\s+\//i.test(cmd) || /Remove-Item\\s+.*-Recurse/i.test(cmd)) {
+                    return {
+                        permissionDecision: "deny",
+                        permissionDecisionReason: "Destructive commands are not allowed.",
+                    };
                 }
             }
         },

package/package.json

@@ -4,7 +4,7 @@
     "type": "git",
     "url": "https://github.com/github/copilot-sdk.git"
   },
-  "version": "1.0.0-beta.10",
+  "version": "1.0.0-beta.12",
   "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
   "main": "./dist/cjs/index.js",
   "types": "./dist/index.d.ts",
@@ -44,7 +44,7 @@
     "generate": "cd ../scripts/codegen && npm run generate",
     "update:protocol-version": "tsx scripts/update-protocol-version.ts",
     "prepublishOnly": "npm run build",
-    "package": "npm run clean && npm run build && node scripts/set-version.js && npm pack && npm version 0.1.0 --no-git-tag-version --allow-same-version"
+    "package": "npm run clean && npm run build && node scripts/set-version.js && npm pack && npm version 0.0.0-dev --no-git-tag-version --allow-same-version"
   },
   "keywords": [
     "github",
@@ -56,7 +56,7 @@
   "author": "GitHub",
   "license": "MIT",
   "dependencies": {
-    "@github/copilot": "^1.0.56-1",
+    "@github/copilot": "^1.0.57",
     "vscode-jsonrpc": "^8.2.1",
     "zod": "^4.3.6"
   },