@github/copilot-sdk 1.0.14-preview.0 → 1.0.14-unstable.35049111350.g7f86a90

package/dist/generated/rpc.d.ts

@@ -38,8 +38,10 @@ export type AdaptiveThinkingSupport =
 "unsupported"
 /** The model accepts adaptive thinking but also accepts thinking.type='enabled' */
  | "optional"
-/** The model only accepts adaptive thinking and rejects thinking.type='enabled' with HTTP 400 (e.g. opus-4.7/4.8) */
- | "required";
+/** The model defaults to adaptive thinking and rejects thinking.type='enabled' with HTTP 400, but still accepts thinking.type='disabled' (e.g. opus-4.7/4.8/5, sonnet-5) */
+ | "required"
+/** The model accepts only thinking.type='adaptive'; 'enabled', 'disabled', and an omitted thinking block all fail with HTTP 400 (e.g. fable, mythos) */
+ | "adaptive_only";
 /**
  * Which tier this directory belongs to
  *
@@ -899,7 +901,7 @@ export type DebugCollectLogsSource =
 /** Caller-provided diagnostic entry. */
  | "additional";
 /**
- * Destination for the redacted debug bundle.
+ * Destination for the session debug bundle.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "DebugCollectLogsDestination".
@@ -920,7 +922,7 @@ export type DebugCollectLogsDestination = {
     kind: "archive";
 } | {
     /**
-     * Directory where redacted files should be staged. The directory is created if needed.
+     * Directory where files should be staged. The directory is created if needed.
      */
     outputDirectory: string;
     /**
@@ -951,7 +953,9 @@ export type DebugCollectLogsRedaction =
 /** Redact the file as plain UTF-8 log text. */
 "plain-text"
 /** Redact each non-empty line as a session event JSON object, falling back to plain-text redaction for malformed lines. */
- | "events-jsonl";
+ | "events-jsonl"
+/** No redaction is applied. The caller must ensure any necessary redaction is performed before this call. */
+ | "none";
 /**
  * Destination kind that was written.
  *
@@ -962,7 +966,7 @@ export type DebugCollectLogsRedaction =
 export type DebugCollectLogsResultKind = 
 /** A .tgz archive was written. */
 "archive"
-/** A directory containing redacted files was written. */
+/** A directory containing the collected files was written. */
  | "directory";
 /**
  * Persisted extension discovery source
@@ -1860,6 +1864,10 @@ export type McpHeadersHandlePendingHeadersRefreshRequest = {
     headers: {
         [k: string]: string | undefined;
     };
+    /**
+     * Optional lifetime in milliseconds for these returned headers. The runtime clamps its configured cache lifetime to this value.
+     */
+    ttlMs?: number;
     /**
      * Headers-refresh response variant discriminator.
      */
@@ -1869,6 +1877,15 @@ export type McpHeadersHandlePendingHeadersRefreshRequest = {
      * Headers-refresh response variant discriminator.
      */
     kind: "none";
+} | {
+    /**
+     * Host credential broker failure, denial, or revocation reason.
+     */
+    message: string;
+    /**
+     * Headers-refresh response variant discriminator.
+     */
+    kind: "error";
 };
 /**
  * One eligible way to run the server, represented as a tagged package or remote variant so package identity and endpoint states cannot contradict the install method.
@@ -2696,6 +2713,8 @@ export type PermissionModeSource =
  | "autopilot_confirmation"
 /** The mode was set at startup by the `defaultPermissionMode` user setting. */
  | "user_setting"
+/** The mode was set at startup by authenticated organization targeting. */
+ | "organization_targeting"
 /** The mode was set through an RPC caller. */
  | "rpc";
 /**
@@ -2783,6 +2802,10 @@ export type PluginsReloadRequest = {
      */
     deferRepoHooks?: boolean;
 };
+/** @experimental */
+export type ProtocolAppendMode = "append";
+/** @experimental */
+export type ProtocolCustomizeMode = "customize";
 /**
  * Controls whether the runtime may defer loading an external tool definition.
  *
@@ -2795,6 +2818,34 @@ export type ProtocolExternalToolDefer =
 "auto"
 /** The runtime must include the tool without deferring it. */
  | "never";
+/** @experimental */
+export type ProtocolMarkerSectionOverride = {
+    /**
+     * Section override action discriminator.
+     */
+    action: "transform";
+} | {
+    /**
+     * Section override action discriminator.
+     */
+    action: "preserve";
+};
+/** @experimental */
+export type ProtocolReplaceMode = "replace";
+/** @experimental */
+export type ProtocolSectionOverride = ProtocolStaticSectionOverride | ProtocolMarkerSectionOverride;
+/** @experimental */
+export type ProtocolStaticSectionAction = 
+/** Replace the section content. */
+"replace"
+/** Remove the section content. */
+ | "remove"
+/** Append content to the section. */
+ | "append"
+/** Prepend content to the section. */
+ | "prepend";
+/** @experimental */
+export type ProtocolSystemMessageConfig = ProtocolSystemMessageAppendConfig | ProtocolSystemMessageReplaceConfig | ProtocolSystemMessageCustomizeConfig;
 /**
  * Provider family. Matches the `type` field of a BYOK provider config.
  *
@@ -2960,6 +3011,32 @@ export type RemoteSessionMetadataTaskType =
 "cca"
 /** CLI remote task. */
  | "cli";
+/**
+ * Provider-native structured output format. JSON Schema is forwarded without rewriting or validating the schema or the generated output.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ResponseFormat".
+ */
+/** @experimental */
+export type ResponseFormat = {
+    jsonSchema: JsonSchemaResponseFormat;
+    /**
+     * Output format discriminator. Currently only json_schema is supported.
+     */
+    type: "json_schema";
+};
+/**
+ * A session-scoped sandbox transition applied while handling a slash command
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxSessionChange".
+ */
+/** @experimental */
+export type SandboxSessionChange = 
+/** The sandbox is off for the rest of this session; nothing was persisted and a new session starts from managed policy. */
+"disabled"
+/** A previous session-scoped opt-out was cleared and the sandbox is enforced again. */
+ | "restored";
 /**
  * Current authentication information, or null when no authentication is active.
  *
@@ -6956,7 +7033,7 @@ export interface CurrentToolMetadata {
     deferLoading?: boolean;
 }
 /**
- * A file included in the redacted debug bundle.
+ * A file included in the session debug bundle.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "DebugCollectLogsCollectedEntry".
@@ -7034,7 +7111,7 @@ export interface DebugCollectLogsInclude {
     previousProcessLogLimit?: number;
 }
 /**
- * Options for collecting a redacted session debug bundle.
+ * Options for collecting a session debug bundle with configurable redaction.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "DebugCollectLogsRequest".
@@ -7049,7 +7126,7 @@ export interface DebugCollectLogsRequest {
     additionalEntries?: DebugCollectLogsEntry[];
 }
 /**
- * Result of collecting a redacted debug bundle.
+ * Result of collecting a session debug bundle.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "DebugCollectLogsResult".
@@ -7062,7 +7139,7 @@ export interface DebugCollectLogsResult {
      */
     path: string;
     /**
-     * Files included in the redacted bundle.
+     * Files included in the bundle.
      */
     entries: DebugCollectLogsCollectedEntry[];
     /**
@@ -9575,6 +9652,10 @@ export interface InstalledPluginInfo {
      * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — a plugin belonging to a directory/local marketplace, which is loaded from its real directory on every pass instead of a copy under the installed-plugins cache. Its presence is what marks a listed plugin as live: such a plugin is always present on disk, so `enabled` is its only meaningful state and it is never "not installed".
      */
     installedFrom?: string;
+    /**
+     * Runtime-reported plugin provenance. Currently set to "builtin" only for plugins registered through the trusted host built-in boundary; absent for installed, marketplace, direct, and live plugins.
+     */
+    source?: string;
 }
 /**
  * Canonical file or directory where custom instructions can be discovered or created, with location, kind, preference, and project path.
@@ -9728,6 +9809,31 @@ export interface InterruptMainTurnResult {
      */
     interrupted: boolean;
 }
+/**
+ * A JSON Schema output contract. OpenAI receives the name, description, schema and strict setting; Anthropic receives the schema in output_config.format and always uses its native strict enforcement.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "JsonSchemaResponseFormat".
+ */
+/** @experimental */
+export interface JsonSchemaResponseFormat {
+    /**
+     * Name of the output schema, subject to the provider's naming restrictions.
+     */
+    name: string;
+    /**
+     * JSON Schema passed unchanged to the inference provider. Schemas larger than 32 MiB when JSON-encoded are rejected before admission, using the runtime's existing request-size ceiling. This is not a guarantee that the entire model request fits. Supported keywords and schema restrictions are determined by the provider.
+     */
+    schema: JsonValue;
+    /**
+     * Optional description passed to OpenAI providers.
+     */
+    description?: string;
+    /**
+     * Optional strict enforcement setting for OpenAI providers. Omitted uses the provider default. Anthropic always enforces its supported schema subset.
+     */
+    strict?: boolean;
+}
 /**
  * HTTP headers as a map from lowercased header name to a list of values. Multi-valued headers (e.g. Set-Cookie) preserve all values.
  *
@@ -10076,6 +10182,35 @@ export interface LspInitializeRequest {
      */
     force?: boolean;
 }
+/**
+ * Non-secret host-managed HTTP MCP server configuration. The containing map key is the stable managed identity; credentials are supplied dynamically by the host.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedMcpServerConfig".
+ */
+/** @experimental */
+export interface ManagedMcpServerConfig {
+    /**
+     * Human-readable catalog display name.
+     */
+    displayName: string;
+    /**
+     * Hosted MCP streamable HTTP endpoint.
+     */
+    url: string;
+    /**
+     * Tools to include. Defaults to all tools when omitted.
+     */
+    tools?: string[];
+    /**
+     * Timeout in milliseconds for tool discovery and tool calls.
+     */
+    timeout?: number;
+    /**
+     * Maximum dynamic-header cache lifetime in milliseconds.
+     */
+    headersRefreshTtlMs?: number;
+}
 /**
  * Validated device-managed settings discovered before a session exists.
  *
@@ -12033,6 +12168,10 @@ export interface McpServer {
      * Plugin version that provided this server, when source is plugin.
      */
     sourcePluginVersion?: string;
+    /**
+     * Human-readable display name supplied by a managed server catalog.
+     */
+    displayName?: string;
     /**
      * Error message if the server failed to connect
      */
@@ -15346,6 +15485,59 @@ export interface ProtocolExternalToolDefinition {
         [k: string]: JsonValue | undefined;
     };
 }
+/** @experimental */
+export interface ProtocolStaticSectionOverride {
+    action: ProtocolStaticSectionAction;
+    /**
+     * Optional content used by replace, append, and prepend operations.
+     */
+    content?: string;
+}
+/** @experimental */
+export interface ProtocolSystemMessageAppendConfig {
+    mode?: ProtocolAppendMode;
+    /**
+     * Text appended to the standard system prompt.
+     */
+    content?: string;
+}
+/** @experimental */
+export interface ProtocolSystemMessageReplaceConfig {
+    mode: ProtocolReplaceMode;
+    /**
+     * Complete replacement system-message text.
+     */
+    content: string;
+    /**
+     * Optional structured blocks corresponding to the replacement content.
+     */
+    contentBlocks?: SystemMessageBlock[];
+}
+/** @experimental */
+export interface SystemMessageBlock {
+    /**
+     * Text content for this system-message block.
+     */
+    content: string;
+    /**
+     * Whether the block is static and may be cached independently of dynamic prompt content.
+     */
+    isStatic?: boolean;
+}
+/** @experimental */
+export interface ProtocolSystemMessageCustomizeConfig {
+    mode: ProtocolCustomizeMode;
+    /**
+     * Named standard-prompt section overrides.
+     */
+    sections?: {
+        [k: string]: ProtocolSectionOverride;
+    };
+    /**
+     * Text appended after the customized sections.
+     */
+    content?: string;
+}
 /**
  * BYOK providers and/or models to add to the session's registry at runtime. Both fields are optional; provide providers, models, or both.
  *
@@ -15404,6 +15596,7 @@ export interface ProviderModelConfig {
      */
     maxOutputTokens?: number;
     capabilities?: ModelCapabilitiesOverride;
+    systemMessage?: ProtocolSystemMessageConfig;
 }
 /**
  * The selectable model entries synthesized for the models added by this call.
@@ -16474,15 +16667,6 @@ export interface RegisterEventInterestResult {
      */
     handle: string;
 }
-/**
- * Optional registration options.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionsRegisterExtensionToolsOnSessionOptions".
- */
-/** @experimental */
-export interface SessionsRegisterExtensionToolsOnSessionOptions {
-}
 /**
  * Opaque handle previously returned by `registerInterest` to release.
  *
@@ -16904,6 +17088,14 @@ export interface SandboxConfigUserPolicyFilesystem {
  */
 /** @experimental */
 export interface SandboxConfigUserPolicyNetwork {
+    /**
+     * Hosts allowed through the built-in sandbox proxy. A non-empty list denies unmatched hosts; an absent or empty list allows all hosts not blocked. Supports exact hostnames, IP addresses, and *.example.com for strict subdomains. Host rules do not override the outbound or local-network toggles.
+     */
+    allowedHosts?: string[];
+    /**
+     * Hosts denied by the built-in sandbox proxy. Deny rules take precedence over allowedHosts. A domain also denies all its subdomains. IP addresses match exactly; *.example.com matches strict subdomains, and * denies every host.
+     */
+    blockedHosts?: string[];
     /**
      * Whether outbound network traffic is allowed at all.
      */
@@ -17342,7 +17534,7 @@ export interface SendMessageItem {
 /** @experimental */
 export interface SendMessagesRequest {
     /**
-     * The user messages to append to the conversation, in order. May be empty, in which case a single turn runs over the existing history with no new user message.
+     * The user messages to append to the conversation, in order, before running one agent loop. When the batch starts a run, its final message is the primary initiating message; earlier messages provide context, not separate runs or replies. May be empty, in which case a single turn runs over the existing history with no new user message or originatingMessageId.
      */
     messages: SendMessageItem[];
     mode?: SendMode;
@@ -17357,6 +17549,7 @@ export interface SendMessagesRequest {
     requestHeaders?: {
         [k: string]: string | undefined;
     };
+    responseFormat?: ResponseFormat;
     /**
      * W3C Trace Context traceparent header for distributed tracing of this agent turn
      */
@@ -17379,7 +17572,7 @@ export interface SendMessagesRequest {
 /** @experimental */
 export interface SendMessagesResult {
     /**
-     * Unique identifiers assigned to the messages, one per provided message in order. Empty when no messages were provided.
+     * Unique identifiers assigned to the messages, one per provided message in order. For a batch that starts a run, assistant messages use the final ID as originatingMessageId throughout that run, including tool iterations and stop-hook corrections. Immediate steering does not replace the active run's origin. Empty when no messages were provided; that run has no originatingMessageId.
      */
     messageIds: string[];
 }
@@ -17423,6 +17616,7 @@ export interface SendRequest {
     requestHeaders?: {
         [k: string]: string | undefined;
     };
+    responseFormat?: ResponseFormat;
     /**
      * W3C Trace Context traceparent header for distributed tracing of this agent turn
      */
@@ -18591,7 +18785,7 @@ export interface SessionOpenOptions {
      */
     integrationId?: string;
     /**
-     * Opt-in: self-fetch and enforce enterprise managed settings at session bootstrap.
+     * Opt-in: self-fetch and enforce enterprise managed settings, including managed hook policies, at session bootstrap.
      */
     enableManagedSettings?: boolean;
     managedSettings?: SessionManagedSettings;
@@ -18693,6 +18887,14 @@ export interface SessionOpenOptions {
      * MCP server names disabled for this session. Disabled servers are not started or authenticated on create or cold resume.
      */
     disabledMcpServers?: string[];
+    /**
+     * Non-secret host-managed HTTP MCP servers keyed by stable managed identity. Managed provenance is runtime-established from this separate field and credentials are supplied through dynamic-header refresh.
+     *
+     * @experimental
+     */
+    managedMcpServers?: {
+        [k: string]: ManagedMcpServerConfig;
+    };
     /**
      * Whether to include instructions from every MCP server in the system prompt instead of only allowlisted servers.
      */
@@ -20387,6 +20589,10 @@ export interface ShutdownRequest {
      * Optional human-readable reason. Typically the message of the error that triggered shutdown when type is 'error'.
      */
     reason?: string;
+    /**
+     * Dispatch deferred sessionEnd hooks in the background with their full per-hook timeoutSec instead of awaiting them under the short shared shutdown budget. Set this when the host process keeps running after the session closes (for example the CLI's /clear), so a slow hook neither blocks the close nor is aborted. Hooks still detached when the process later exits are terminated with it. Defaults to false.
+     */
+    detachSessionEndHooks?: boolean;
 }
 /**
  * Skill metadata available to a session, with name, description, source, enabled/invocable state, path, plugin, and argument hint.
@@ -20776,6 +20982,7 @@ export interface SlashCommandTextResult {
      * True when the invocation mutated user runtime settings; consumers caching settings should refresh
      */
     runtimeSettingsChanged?: boolean;
+    sandboxSessionChange?: SandboxSessionChange;
 }
 /**
  * Slash-command invocation result asking the client to present subcommand options for a parent command.
@@ -23042,6 +23249,23 @@ export interface WorkspacesCheckpoints {
      */
     filename: string;
 }
+/**
+ * Directory to create within the session workspace files directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesCreateDirectoryRequest".
+ */
+/** @experimental */
+export interface WorkspacesCreateDirectoryRequest {
+    /**
+     * Slash-separated relative path within the workspace files directory
+     */
+    path: string;
+    /**
+     * Whether to create missing parent directories. Defaults to false.
+     */
+    recursive?: boolean;
+}
 /**
  * Relative path and UTF-8 content for the workspace file to create or overwrite.
  *
@@ -23051,7 +23275,7 @@ export interface WorkspacesCheckpoints {
 /** @experimental */
 export interface WorkspacesCreateFileRequest {
     /**
-     * Relative path within the workspace files directory
+     * Slash-separated relative path within the workspace files directory
      */
     path: string;
     /**
@@ -23204,7 +23428,7 @@ export interface WorkspacesListCheckpointsResult {
 /** @experimental */
 export interface WorkspacesListFilesResult {
     /**
-     * Relative file paths in the workspace files directory
+     * Slash-separated relative file paths in the workspace files directory
      */
     files: string[];
 }
@@ -23256,7 +23480,7 @@ export interface WorkspacesReadCheckpointResult {
 /** @experimental */
 export interface WorkspacesReadFileRequest {
     /**
-     * Relative path within the workspace files directory
+     * Slash-separated relative path within the workspace files directory
      */
     path: string;
 }
@@ -23273,6 +23497,44 @@ export interface WorkspacesReadFileResult {
      */
     content: string;
 }
+/**
+ * File or directory to remove from the session workspace files directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesRemovePathRequest".
+ */
+/** @experimental */
+export interface WorkspacesRemovePathRequest {
+    /**
+     * Slash-separated relative path within the workspace files directory
+     */
+    path: string;
+    /**
+     * Whether to remove directory contents recursively. Defaults to false.
+     */
+    recursive?: boolean;
+    /**
+     * Whether a missing path should be treated as success. Defaults to false.
+     */
+    force?: boolean;
+}
+/**
+ * Source and destination paths for a rename within the session workspace files directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesRenamePathRequest".
+ */
+/** @experimental */
+export interface WorkspacesRenamePathRequest {
+    /**
+     * Slash-separated source path relative to the workspace files directory
+     */
+    source: string;
+    /**
+     * Slash-separated destination path relative to the workspace files directory
+     */
+    destination: string;
+}
 /**
  * Pasted content to save as a UTF-8 file in the session workspace.
  *
@@ -23312,6 +23574,48 @@ export interface WorkspacesSaveLargePasteResult {
         sizeBytes: number;
     } | null;
 }
+/**
+ * Relative path of the workspace file or directory to inspect.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesStatFileRequest".
+ */
+/** @experimental */
+export interface WorkspacesStatFileRequest {
+    /**
+     * Slash-separated relative path within the workspace files directory
+     */
+    path: string;
+}
+/**
+ * Filesystem metadata for a path in the session workspace files directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesStatFileResult".
+ */
+/** @experimental */
+export interface WorkspacesStatFileResult {
+    /**
+     * Whether the path identifies a regular file
+     */
+    isFile: boolean;
+    /**
+     * Whether the path identifies a directory
+     */
+    isDirectory: boolean;
+    /**
+     * Size in bytes
+     */
+    size: number;
+    /**
+     * Last modification time in Unix epoch milliseconds
+     */
+    mtimeMs: number;
+    /**
+     * Creation time in Unix epoch milliseconds
+     */
+    birthtimeMs: number;
+}
 /**
  * Rollback point for local workspace summaries.
  *
@@ -24269,11 +24573,11 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
     /** @experimental */
     debug: {
         /**
-         * Collects a redacted session debug log bundle into a local archive or staging directory. The runtime includes session-owned logs by default and accepts caller-provided diagnostic entries so host applications can add their own files without changing this API shape.
+         * Collects a session debug log bundle into a local archive or staging directory. Logs are redacted by default; redaction can be configured per caller-provided diagnostic entry. The runtime includes session-owned logs by default and accepts caller-provided diagnostic entries so host applications can add their own files without changing this API shape.
          *
-         * @param params Options for collecting a redacted session debug bundle.
+         * @param params Options for collecting a session debug bundle with configurable redaction.
          *
-         * @returns Result of collecting a redacted debug bundle.
+         * @returns Result of collecting a session debug bundle.
          */
         collectLogs: (params: DebugCollectLogsRequest) => Promise<DebugCollectLogsResult>;
     };
@@ -24583,6 +24887,32 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @param params Relative path and UTF-8 content for the workspace file to create or overwrite.
          */
         createFile: (params: WorkspacesCreateFileRequest) => Promise<void>;
+        /**
+         * Returns metadata for a file or directory in the session workspace files directory.
+         *
+         * @param params Relative path of the workspace file or directory to inspect.
+         *
+         * @returns Filesystem metadata for a path in the session workspace files directory.
+         */
+        statFile: (params: WorkspacesStatFileRequest) => Promise<WorkspacesStatFileResult>;
+        /**
+         * Creates a directory in the session workspace files directory.
+         *
+         * @param params Directory to create within the session workspace files directory.
+         */
+        createDirectory: (params: WorkspacesCreateDirectoryRequest) => Promise<void>;
+        /**
+         * Removes a file or directory from the session workspace files directory.
+         *
+         * @param params File or directory to remove from the session workspace files directory.
+         */
+        removePath: (params: WorkspacesRemovePathRequest) => Promise<void>;
+        /**
+         * Renames a file or directory within the session workspace files directory.
+         *
+         * @param params Source and destination paths for a rename within the session workspace files directory.
+         */
+        renamePath: (params: WorkspacesRenamePathRequest) => Promise<void>;
         /**
          * Lists workspace checkpoints in chronological order.
          *