@github/copilot-sdk 1.0.12-unstable.0 → 1.0.13-preview.1

package/dist/cjs/client.js

@@ -988,7 +988,8 @@ class CopilotClient {
    *
    * In empty mode, defaults the four overridable feature flags to safe values
    * (caller values from `config` win). `installedPlugins=[]` is unconditional
-   * in empty mode — apps that need custom plugins should switch modes.
+   * in empty mode. `includedBuiltinSkills` defaults to `[]`, but callers can
+   * explicitly allow selected runtime-bundled skills.
    */
   async updateSessionOptionsForMode(session, config) {
     const patch = {};
@@ -998,6 +999,7 @@ class CopilotClient {
       patch.coauthorEnabled = config.coauthorEnabled ?? false;
       patch.manageScheduleEnabled = config.manageScheduleEnabled ?? false;
       patch.installedPlugins = [];
+      patch.includedBuiltinSkills = config.includedBuiltinSkills ?? [];
     } else {
       if (config.skipCustomInstructions !== void 0)
         patch.skipCustomInstructions = config.skipCustomInstructions;
@@ -1007,6 +1009,8 @@ class CopilotClient {
         patch.coauthorEnabled = config.coauthorEnabled;
       if (config.manageScheduleEnabled !== void 0)
         patch.manageScheduleEnabled = config.manageScheduleEnabled;
+      if (config.includedBuiltinSkills !== void 0)
+        patch.includedBuiltinSkills = config.includedBuiltinSkills;
     }
     if (Object.keys(patch).length === 0) {
       return;

package/dist/cjs/generated/rpc.js

@@ -2837,6 +2837,11 @@ function registerClientGlobalApiHandlers(connection, handlers) {
     if (!handler) return;
     await handler.event(params);
   });
+  connection.onRequest("gitHubToken.getToken", async (params) => {
+    const handler = handlers.gitHubToken;
+    if (!handler) throw new Error("No gitHubToken client-global handler registered");
+    return handler.getToken(params);
+  });
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/cjs/index.js

@@ -27,6 +27,7 @@ __export(index_exports, {
   CopilotWebSocketCloseStatus: () => import_types2.CopilotWebSocketCloseStatus,
   CopilotWebSocketForwarder: () => import_types2.CopilotWebSocketForwarder,
   CopilotWebSocketHandler: () => import_types2.CopilotWebSocketHandler,
+  DisableBypassPermissionsModes: () => import_types.DisableBypassPermissionsModes,
   FactoryResumeError: () => import_factory.FactoryResumeError,
   RuntimeConnection: () => import_types.RuntimeConnection,
   SYSTEM_MESSAGE_SECTIONS: () => import_types2.SYSTEM_MESSAGE_SECTIONS,
@@ -60,6 +61,7 @@ var import_types2 = require("./types.js");
   CopilotWebSocketCloseStatus,
   CopilotWebSocketForwarder,
   CopilotWebSocketHandler,
+  DisableBypassPermissionsModes,
   FactoryResumeError,
   RuntimeConnection,
   SYSTEM_MESSAGE_SECTIONS,

package/dist/cjs/types.js

@@ -22,6 +22,7 @@ __export(types_exports, {
   CopilotWebSocketCloseStatus: () => import_copilotRequestHandler.CopilotWebSocketCloseStatus,
   CopilotWebSocketForwarder: () => import_copilotRequestHandler.CopilotWebSocketForwarder,
   CopilotWebSocketHandler: () => import_copilotRequestHandler.CopilotWebSocketHandler,
+  DisableBypassPermissionsModes: () => DisableBypassPermissionsModes,
   RuntimeConnection: () => RuntimeConnection,
   SYSTEM_MESSAGE_SECTIONS: () => SYSTEM_MESSAGE_SECTIONS,
   SessionFsSqliteTransactionFailure: () => import_sessionFsProvider2.SessionFsSqliteTransactionFailure,
@@ -165,12 +166,19 @@ const approveAll = (request, invocation) => {
 const defaultJoinSessionPermissionHandler = () => ({
   kind: "no-result"
 });
+const DisableBypassPermissionsModes = {
+  /** Turn off bypass-permissions mode entirely. */
+  Disable: "disable",
+  /** Permit automatic bypass but block full allow-all. */
+  AllowAutoOnly: "allow-auto-only"
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   CopilotRequestHandler,
   CopilotWebSocketCloseStatus,
   CopilotWebSocketForwarder,
   CopilotWebSocketHandler,
+  DisableBypassPermissionsModes,
   RuntimeConnection,
   SYSTEM_MESSAGE_SECTIONS,
   SessionFsSqliteTransactionFailure,

package/dist/client.d.ts

@@ -198,7 +198,8 @@ export declare class CopilotClient {
      *
      * In empty mode, defaults the four overridable feature flags to safe values
      * (caller values from `config` win). `installedPlugins=[]` is unconditional
-     * in empty mode — apps that need custom plugins should switch modes.
+     * in empty mode. `includedBuiltinSkills` defaults to `[]`, but callers can
+     * explicitly allow selected runtime-bundled skills.
      */
     private updateSessionOptionsForMode;
     createSession(config: SessionConfig): Promise<CopilotSession>;

package/dist/client.js

@@ -965,7 +965,8 @@ class CopilotClient {
    *
    * In empty mode, defaults the four overridable feature flags to safe values
    * (caller values from `config` win). `installedPlugins=[]` is unconditional
-   * in empty mode — apps that need custom plugins should switch modes.
+   * in empty mode. `includedBuiltinSkills` defaults to `[]`, but callers can
+   * explicitly allow selected runtime-bundled skills.
    */
   async updateSessionOptionsForMode(session, config) {
     const patch = {};
@@ -975,6 +976,7 @@ class CopilotClient {
       patch.coauthorEnabled = config.coauthorEnabled ?? false;
       patch.manageScheduleEnabled = config.manageScheduleEnabled ?? false;
       patch.installedPlugins = [];
+      patch.includedBuiltinSkills = config.includedBuiltinSkills ?? [];
     } else {
       if (config.skipCustomInstructions !== void 0)
         patch.skipCustomInstructions = config.skipCustomInstructions;
@@ -984,6 +986,8 @@ class CopilotClient {
         patch.coauthorEnabled = config.coauthorEnabled;
       if (config.manageScheduleEnabled !== void 0)
         patch.manageScheduleEnabled = config.manageScheduleEnabled;
+      if (config.includedBuiltinSkills !== void 0)
+        patch.includedBuiltinSkills = config.includedBuiltinSkills;
     }
     if (Object.keys(patch).length === 0) {
       return;

package/dist/generated/rpc.d.ts

@@ -15,7 +15,7 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
  * via the `definition` "AuthInfo".
  */
 /** @experimental */
-export type AuthInfo = HMACAuthInfo | EnvAuthInfo | TokenAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
+export type AuthInfo = HMACAuthInfo | EnvAuthInfo | TokenAuthInfo | TokenProviderAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
 /**
  * User to log out
  *
@@ -241,6 +241,8 @@ export type AuthInfoType =
  | "api-key"
 /** Authentication from a GitHub token. */
  | "token"
+/** Authentication from an SDK GitHub token callback. */
+ | "token-provider"
 /** Authentication from a Copilot API token. */
  | "copilot-api-token";
 /**
@@ -1126,6 +1128,48 @@ export type FactoryPhaseStatus =
 export type FilterMapping = {
     [k: string]: ContentFilterMode;
 } | ContentFilterMode;
+/**
+ * Why the runtime is requesting a GitHub credential.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GitHubTokenAcquireReason".
+ */
+/** @experimental */
+export type GitHubTokenAcquireReason = 
+/** The runtime is acquiring the registration's first credential. */
+"initial"
+/** The runtime is replacing a credential that is approaching expiry. */
+ | "refresh";
+/**
+ * SDK host response to a GitHub credential request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GitHubTokenAcquireResult".
+ */
+/** @experimental */
+export type GitHubTokenAcquireResult = {
+    /**
+     * GitHub access token acquired by the SDK host.
+     */
+    accessToken: string;
+    /**
+     * OAuth token type. Defaults to bearer when omitted.
+     */
+    tokenType?: string;
+    /**
+     * Remaining token lifetime in seconds when callback execution completes. It must exceed the one-hour preflight refresh threshold.
+     */
+    expiresIn: number;
+    /**
+     * GitHub credential response variant discriminator.
+     */
+    kind: "token";
+} | {
+    /**
+     * GitHub credential response variant discriminator.
+     */
+    kind: "cancelled";
+};
 /**
  * Optional compaction parameters.
  *
@@ -1734,7 +1778,7 @@ export type McpOauthPendingRequestResponse = {
      */
     accessToken: string;
     /**
-     * OAuth token type. Defaults to Bearer when omitted.
+     * OAuth token type. Defaults to bearer when omitted.
      */
     tokenType?: string;
     /**
@@ -3017,6 +3061,14 @@ export type SessionsOpenProgressStatus =
 "in-progress"
 /** The step has completed successfully. */
  | "complete";
+/**
+ * Authentication credentials accepted by session.gitHubAuth.setCredentials. Session-owned token-provider identities cannot be installed through this method.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SettableAuthInfo".
+ */
+/** @experimental */
+export type SettableAuthInfo = HMACAuthInfo | EnvAuthInfo | SettableTokenAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
 /**
  * Rust-owned settings predicates exposed across the SDK boundary. Raw feature-flag names are intentionally not part of the contract.
  *
@@ -3911,6 +3963,32 @@ export interface TokenAuthInfo {
      * The token value itself. Treat as a secret.
      */
     token: string;
+    /**
+     * Opaque native GitHub credential registration backing this token identity, when applicable.
+     */
+    registrationId?: string;
+    copilotUser?: CopilotUserResponse;
+}
+/**
+ * Authentication-info variant backed by an SDK GitHub token callback. It carries routing metadata but never a plaintext token.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "TokenProviderAuthInfo".
+ */
+/** @experimental */
+export interface TokenProviderAuthInfo {
+    /**
+     * SDK callback-backed GitHub token authentication.
+     */
+    type: "token-provider";
+    /**
+     * Authentication host.
+     */
+    host: string;
+    /**
+     * Opaque SDK callback registration identifier.
+     */
+    registrationId: string;
     copilotUser?: CopilotUserResponse;
 }
 /**
@@ -4554,6 +4632,10 @@ export interface AuthIdentity {
      * Name of the environment variable that supplied the credential, when applicable
      */
     envVar?: string;
+    /**
+     * Opaque SDK GitHub credential registration backing this identity. Routing metadata only; never a credential.
+     */
+    registrationId?: string;
     copilotUser?: CopilotUserResponse;
 }
 /**
@@ -7966,6 +8048,28 @@ export interface GitHubTelemetryNotification {
     restricted: boolean;
     event: GitHubTelemetryEvent;
 }
+/**
+ * Asks the SDK client to acquire a GitHub access token from an opaque callback registration.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GitHubTokenAcquireRequest".
+ */
+/** @experimental */
+export interface GitHubTokenAcquireRequest {
+    /**
+     * Opaque identifier generated by the SDK for this callback registration.
+     */
+    registrationId: string;
+    /**
+     * Effective GitHub host for which the callback must return a token.
+     */
+    host: string;
+    /**
+     * Session receiving the token. Absent only before a cloud session has been assigned its id.
+     */
+    sessionId?: string;
+    reason: GitHubTokenAcquireReason;
+}
 /**
  * Pending external tool call request ID, with the tool result or an error describing why it failed.
  *
@@ -17385,6 +17489,10 @@ export interface SessionOpenOptions {
      * Additional directories to search for skills.
      */
     skillDirectories?: string[];
+    /**
+     * Built-in skill names to include in this session. When specified, only these runtime-bundled skills are available. Skills from other sources with the same name remain available.
+     */
+    includedBuiltinSkills?: string[];
     /**
      * Skill IDs disabled for this session.
      */
@@ -17926,7 +18034,29 @@ export interface SessionsEnrichMetadataRequest {
  */
 /** @experimental */
 export interface SessionSetCredentialsParams {
-    credentials?: AuthInfo;
+    credentials?: SettableAuthInfo;
+}
+/**
+ * Token authentication accepted by session.gitHubAuth.setCredentials.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SettableTokenAuthInfo".
+ */
+/** @experimental */
+export interface SettableTokenAuthInfo {
+    /**
+     * SDK-side token authentication; the host configured the token directly via the SDK.
+     */
+    type: "token";
+    /**
+     * Authentication host.
+     */
+    host: string;
+    /**
+     * The token value itself. Treat as a secret.
+     */
+    token: string;
+    copilotUser?: CopilotUserResponse;
 }
 /**
  * Indicates whether the credential update succeeded.
@@ -18749,6 +18879,10 @@ export interface SessionUpdateOptionsParams {
      * Additional directories to search for skills.
      */
     skillDirectories?: string[];
+    /**
+     * Built-in skill names to include in this session. When specified, only these runtime-bundled skills are available. Skills from other sources with the same name remain available. Set to null to remove the allowlist restriction.
+     */
+    includedBuiltinSkills?: string[] | null;
     /**
      * Skill IDs that should be excluded from this session.
      */
@@ -24388,11 +24522,24 @@ export interface GitHubTelemetryHandler {
      */
     event(params: GitHubTelemetryNotification): Promise<void>;
 }
+/** Handler for `gitHubToken` client global API methods. */
+/** @experimental */
+export interface GitHubTokenHandler {
+    /**
+     * Asks the SDK client to mint a GitHub access token for a session whose configuration supplied a GitHub token provider. The runtime acquires the initial token during bootstrap and refreshes it during expiry preflight when one hour or less remains.
+     *
+     * @param params Asks the SDK client to acquire a GitHub access token from an opaque callback registration.
+     *
+     * @returns SDK host response to a GitHub credential request.
+     */
+    getToken(params: GitHubTokenAcquireRequest): Promise<GitHubTokenAcquireResult>;
+}
 /** All client global API handler groups. */
 export interface ClientGlobalApiHandlers {
     extensionLaunchProvider?: ExtensionLaunchProviderHandler;
     llmInference?: LlmInferenceHandler;
     gitHubTelemetry?: GitHubTelemetryHandler;
+    gitHubToken?: GitHubTokenHandler;
 }
 /**
  * Register client global API handlers on a JSON-RPC connection.

package/dist/generated/rpc.js

@@ -2809,6 +2809,11 @@ function registerClientGlobalApiHandlers(connection, handlers) {
     if (!handler) return;
     await handler.event(params);
   });
+  connection.onRequest("gitHubToken.getToken", async (params) => {
+    const handler = handlers.gitHubToken;
+    if (!handler) throw new Error("No gitHubToken client-global handler registered");
+    return handler.getToken(params);
+  });
 }
 export {
   createInternalServerRpc,

package/dist/generated/session-events.d.ts

@@ -3608,6 +3608,7 @@ export interface AssistantMessageData {
      * Generation phase for phased-output models (e.g., thinking vs. response phases)
      */
     phase?: string;
+    reasoningBlocks?: AssistantMessageReasoningBlocks;
     /**
      * Opaque/encrypted extended thinking data from Anthropic models. Session-bound and stripped on resume.
      */
@@ -3770,6 +3771,20 @@ export interface CitationLocationBlock {
      */
     type: "block";
 }
+/**
+ * Neutral provider-tagged reasoning content blocks preserved verbatim for round-tripping
+ */
+/** @experimental */
+export interface AssistantMessageReasoningBlocks {
+    /**
+     * Provider-native reasoning content blocks (e.g. Anthropic `thinking` / `redacted_thinking`) preserved verbatim, in order. A single response can carry several, each signed over the content preceding it, so dropping or reordering any of them invalidates the rest.
+     */
+    blocks?: JsonValue[];
+    /**
+     * Model provider that produced these reasoning blocks.
+     */
+    provider: string;
+}
 /**
  * Neutral provider-tagged server-side tool-use payload (tool search, advisor) for verbatim round-tripping
  */
@@ -5474,10 +5489,30 @@ export interface SubagentCompletedData {
      * Whether the sub-agent was torn down by cancellation - its own abort, or an ancestor being killed - instead of finishing its work. Cancellation is not a failure, so the run still reports completion; this distinguishes a torn-down sub-agent from one that ran to the end.
      */
     cancelled?: boolean;
+    /**
+     * Whether the first model actually dispatched matched the user's configured preference
+     */
+    configuredModelMatchesActual?: boolean;
+    /**
+     * Concrete model the user configured for this sub-agent via `/subagents`, when present
+     */
+    configuredModelPreference?: string;
     /**
      * Wall-clock duration of the sub-agent execution in milliseconds
      */
     durationMs?: number;
+    /**
+     * Whether the explicit task-call model matched the user's configured preference
+     */
+    explicitModelMatchesPreference?: boolean;
+    /**
+     * Explicit model supplied by the parent agent on the task call, when present
+     */
+    explicitModelOverride?: string;
+    /**
+     * First model for which the sub-agent started an inference request, when one was dispatched
+     */
+    firstDispatchedModel?: string;
     /**
      * Model used by the sub-agent
      */
@@ -5537,6 +5572,14 @@ export interface SubagentFailedData {
      * Internal name of the sub-agent
      */
     agentName: string;
+    /**
+     * Whether the first model actually dispatched matched the user's configured preference
+     */
+    configuredModelMatchesActual?: boolean;
+    /**
+     * Concrete model the user configured for this sub-agent via `/subagents`, when present
+     */
+    configuredModelPreference?: string;
     /**
      * Wall-clock duration of the sub-agent execution in milliseconds
      */
@@ -5545,6 +5588,18 @@ export interface SubagentFailedData {
      * Error message describing why the sub-agent failed
      */
     error: string;
+    /**
+     * Whether the explicit task-call model matched the user's configured preference
+     */
+    explicitModelMatchesPreference?: boolean;
+    /**
+     * Explicit model supplied by the parent agent on the task call, when present
+     */
+    explicitModelOverride?: string;
+    /**
+     * First model for which the sub-agent started an inference request, when one was dispatched
+     */
+    firstDispatchedModel?: string;
     /**
      * Model selected for the sub-agent, when known
      */
@@ -8787,6 +8842,10 @@ export interface ManagedSettingsResolvedData {
      * Whether at least two managed sources supplied permission allowlists, so enforcement intersects them and the flattened settings payload omits `permissions.allow`.
      */
     permissionsAllowIntersected?: boolean;
+    /**
+     * Whether the effective sandbox policy forces the sandbox on *only* because managed policy could not be determined, rather than because the policy requires it. Lets clients tell a user whose `--no-sandbox` was overridden that the sandbox stayed on as a fail-closed fallback, instead of attributing it to an administrator who set no such policy.
+     */
+    sandboxEnabledByUndeterminedPolicy?: boolean;
     /**
      * Whether the server (account/org) managed-settings layer was present
      */

package/dist/index.d.ts

@@ -4,7 +4,7 @@
  * JSON-RPC based SDK for programmatic control of GitHub Copilot CLI
  */
 export { CopilotClient } from "./client.js";
-export { RuntimeConnection } from "./types.js";
+export { DisableBypassPermissionsModes, RuntimeConnection } from "./types.js";
 export { BuiltInTools, ToolSet } from "./toolSet.js";
 export { CopilotSession, type AssistantMessageEvent } from "./session.js";
 export { defineFactory, FactoryResumeError, isFactoryRunTerminal } from "./factory.js";

package/dist/index.js

@@ -1,5 +1,5 @@
 import { CopilotClient } from "./client.js";
-import { RuntimeConnection } from "./types.js";
+import { DisableBypassPermissionsModes, RuntimeConnection } from "./types.js";
 import { BuiltInTools, ToolSet } from "./toolSet.js";
 import { CopilotSession } from "./session.js";
 import { defineFactory, FactoryResumeError, isFactoryRunTerminal } from "./factory.js";
@@ -31,6 +31,7 @@ export {
   CopilotWebSocketCloseStatus,
   CopilotWebSocketForwarder,
   CopilotWebSocketHandler,
+  DisableBypassPermissionsModes,
   FactoryResumeError,
   RuntimeConnection,
   SYSTEM_MESSAGE_SECTIONS,

package/dist/types.d.ts

@@ -1751,6 +1751,13 @@ export interface GitHubMcpToolConfig {
     enableInsidersMode?: boolean;
     disableFormDeferral?: boolean;
 }
+/** Well-known managed bypass-permissions policies. */
+export declare const DisableBypassPermissionsModes: {
+    /** Turn off bypass-permissions mode entirely. */
+    readonly Disable: "disable";
+    /** Permit automatic bypass but block full allow-all. */
+    readonly AllowAutoOnly: "allow-auto-only";
+};
 /**
  * Permissions-only managed policy injected by the host via
  * {@link SessionConfigBase.managedSettings}.
@@ -1761,11 +1768,11 @@ export interface GitHubMcpToolConfig {
  */
 export interface ManagedSettingsPermissions {
     /**
-     * When set to `"disable"`, bypass-permissions ("yolo") mode is turned off
-     * for the session. This is deny-wins: it cannot be re-enabled by any other
-     * layer.
+     * Restricts bypass-permissions mode for the session. See
+     * {@link DisableBypassPermissionsModes} for well-known values. Unknown
+     * values are forwarded so newer runtime policies fail closed.
      */
-    disableBypassPermissionsMode?: "disable";
+    disableBypassPermissionsMode?: string;
     /** Operations that must always be denied. Unioned across managed layers. */
     deny?: string[];
     /**
@@ -1944,6 +1951,12 @@ export interface SessionConfigBase {
      * a custom agent with the same name is configured.
      */
     excludedBuiltinAgents?: string[];
+    /**
+     * Built-in skill names to include in the session. In `mode: "empty"`,
+     * omitting this option excludes all runtime-bundled skills; specifying names
+     * opts those built-ins back in. Skills from other sources remain eligible.
+     */
+    includedBuiltinSkills?: string[];
     /**
      * Custom provider configuration (BYOK - Bring Your Own Key).
      * When specified, uses the provided API endpoint instead of the Copilot API.
@@ -2240,8 +2253,8 @@ export interface SessionConfigBase {
      * with the same managed-permission parser it uses for fetched policy and
      * composes it restrictively with any self-fetched (server) and
      * device-managed (MDM) layers: `deny`/`ask` rules are unioned, every
-     * declared `allow` list must admit an operation, and
-     * `disableBypassPermissionsMode: "disable"` is deny-wins.
+     * declared `allow` list must admit an operation, and bypass-mode
+     * restrictions are composed fail-closed.
      *
      * This is startup-only. It is **not** persisted: it must be re-supplied on
      * {@link CopilotClient.resumeSession | resume}, where it replaces the prior

package/dist/types.js

@@ -134,11 +134,18 @@ const approveAll = (request, invocation) => {
 const defaultJoinSessionPermissionHandler = () => ({
   kind: "no-result"
 });
+const DisableBypassPermissionsModes = {
+  /** Turn off bypass-permissions mode entirely. */
+  Disable: "disable",
+  /** Permit automatic bypass but block full allow-all. */
+  AllowAutoOnly: "allow-auto-only"
+};
 export {
   CopilotRequestHandler,
   CopilotWebSocketCloseStatus,
   CopilotWebSocketForwarder,
   CopilotWebSocketHandler,
+  DisableBypassPermissionsModes,
   RuntimeConnection,
   SYSTEM_MESSAGE_SECTIONS,
   SessionFsSqliteTransactionFailure,

package/package.json

@@ -4,7 +4,7 @@
     "type": "git",
     "url": "https://github.com/github/copilot-sdk.git"
   },
-  "version": "1.0.12-unstable.0",
+  "version": "1.0.13-preview.1",
   "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
   "main": "./dist/cjs/index.js",
   "types": "./dist/index.d.ts",
@@ -56,7 +56,7 @@
   "author": "GitHub",
   "license": "MIT",
   "dependencies": {
-    "@github/copilot": "^1.0.81-9",
+    "@github/copilot": "^1.0.81-10",
     "koffi": "^3.1.0",
     "vscode-jsonrpc": "^8.2.1",
     "zod": "^4.3.6"