@github/copilot-sdk 1.0.15-preview.1 → 1.0.15-preview.3

package/README.md

@@ -18,11 +18,6 @@ The checked-in `copilotCliVersion` in `package.json` and compiled metadata in
 `src/cliVersion.ts` use a development placeholder. The public SDK snapshot
 replaces both with the CLI version published for that snapshot.
 
-Do not change these pins for runtime-repository development. If they contain
-`0.0.0-dev`, use the same-checkout runtime; release snapshot export owns replacing
-development placeholders with a published CLI version. See
-[checkout preparation](../CONTRIBUTING.md#testing-an-unreleased-runtime-api).
-
 `npm run pack:release` builds the main package and all platform packages. Set
 `COPILOT_CLI_DOWNLOAD_BASE_URL` to use a release mirror while packaging.
 Release workflows instead set `COPILOT_SDK_RUNTIME_PACKAGE_DIR` to a directory
@@ -44,11 +39,7 @@ npm install @github/copilot-sdk
 
 ## Run the Sample
 
-Try the interactive chat sample from the SDK root (`src/sdk` when nested).
-In the runtime repository, first run `pnpm run build:cli` from the runtime root
-to prepare the same-checkout executable, then return to `src/sdk`.
-Building the Node SDK alone does not build the runtime. For dependency
-prerequisites, see [development setup](#development).
+Try the interactive chat sample (from the repo root):
 
 ```bash
 cd nodejs
@@ -172,6 +163,7 @@ Create a new conversation session.
 - `systemMessage?: SystemMessageConfig` - System message customization (see below)
 - `infiniteSessions?: InfiniteSessionConfig` - Configure automatic context compaction (see below)
 - `workingDirectory?: string` - Working directory for the session (default: runtime process cwd).
+- `refreshCustomInstructions?: boolean` - Invalidates the process-wide custom-instruction discovery cache before creating this session, so instruction-file edits made in the same runtime are read again. Defaults to `false` (cache reuse). Other sessions in this runtime may observe updated instructions on later turns or discovery. This does not watch files or enable disabled instruction loading. Available on `SessionConfig`, not `ResumeSessionConfig`.
 - `enableSessionStore?: boolean` - Enables the cross-session store for search and retrieval across sessions. When unset in `"copilot-cli"` mode, the runtime default applies (enabled). In `"empty"` mode, defaults to disabled.
 - `gitHubTokenProvider?: GitHubTokenProvider` - Acquires rotating, session-scoped GitHub tokens. Token results require a positive `expiresIn` value in seconds remaining when the callback completes; production tokens typically last eight hours. Cannot be combined with `gitHubToken`.
 - `provider?: ProviderConfig` - Custom API provider configuration (BYOK - Bring Your Own Key). See [Custom Providers](#custom-providers) section.
@@ -309,6 +301,7 @@ Source is independent of delivery mode. Leaving it unset preserves the existing
 ##### `sendAndWait(options: MessageOptions, timeout?: number): Promise<AssistantMessageEvent | undefined>`
 
 Send a message and wait until the session becomes idle.
+Sub-agent events are still delivered to listeners, but do not complete the wait or supply its reply.
 
 **Options:**
 
@@ -1288,28 +1281,19 @@ try {
 
 ## Development
 
-Follow [SDK development setup](../CONTRIBUTING.md#developing-an-sdk) first,
-including the harness and corrections-script dependencies. From the SDK root
-(`src/sdk` in the runtime repository, or the standalone repository root):
+From the repository root:
 
 ```bash
-npm run build:nodejs
-npm run test:nodejs
-npm run check:nodejs
+cd test/harness
+npm ci
 ```
 
-In the runtime layout, these build/test commands refresh the projection and
-prepare the checked-out runtime for tests. For focused unit tests after
-installing Node dependencies:
-
 ```bash
-npm --prefix nodejs run test:unit
+cd nodejs
+npm ci
+npm test
 ```
 
-For native Vitest selectors on E2Es, use the
-[prepared-runtime instructions](../CONTRIBUTING.md#testing-an-unreleased-runtime-api);
-the SDK facade does not forward selectors.
-
 ## License
 
 MIT

package/dist/cjs/cliVersion.js

@@ -22,7 +22,7 @@ __export(cliVersion_exports, {
   COPILOT_CLI_VERSION: () => COPILOT_CLI_VERSION
 });
 module.exports = __toCommonJS(cliVersion_exports);
-const COPILOT_CLI_VERSION = "1.0.89-0";
+const COPILOT_CLI_VERSION = "1.0.89-3";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/cjs/client.js

@@ -1237,6 +1237,7 @@ class CopilotClient {
         includeSubAgentStreamingEvents: config.includeSubAgentStreamingEvents ?? true,
         ...this.onGitHubTelemetry != null ? { enableGitHubTelemetryForwarding: true } : {},
         mcpServers: toWireMcpServers(config.mcpServers),
+        ...config.diagnostics !== void 0 ? { diagnostics: config.diagnostics } : {},
         mcpOAuthTokenStorage: config.mcpOAuthTokenStorage,
         authClientIdMetadataUrl: config.authClientIdMetadataUrl,
         envValueMode: "direct",
@@ -1246,6 +1247,7 @@ class CopilotClient {
         agent: config.agent,
         configDir: config.configDirectory,
         enableConfigDiscovery: config.enableConfigDiscovery,
+        refreshCustomInstructions: config.refreshCustomInstructions,
         skipEmbeddingRetrieval: config.skipEmbeddingRetrieval,
         embeddingCacheStorage: config.embeddingCacheStorage,
         organizationCustomInstructions: config.organizationCustomInstructions,
@@ -1488,6 +1490,7 @@ class CopilotClient {
         includeSubAgentStreamingEvents: config.includeSubAgentStreamingEvents ?? true,
         ...this.onGitHubTelemetry != null ? { enableGitHubTelemetryForwarding: true } : {},
         mcpServers: toWireMcpServers(config.mcpServers),
+        ...config.diagnostics !== void 0 ? { diagnostics: config.diagnostics } : {},
         mcpOAuthTokenStorage: config.mcpOAuthTokenStorage,
         authClientIdMetadataUrl: config.authClientIdMetadataUrl,
         envValueMode: "direct",

package/dist/cjs/generated/rpc.js

@@ -67,6 +67,15 @@ function createServerRpc(connection) {
       getBuiltInCatalog: async () => connection.sendRequest("models.getBuiltInCatalog", {})
     },
     /** @experimental */
+    sandbox: {
+      /**
+       * Reports whether the host running this runtime can run the command sandbox, without starting a session or spawning a sandboxed command.
+       *
+       * @returns Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
+       */
+      getHostSupport: async () => connection.sendRequest("sandbox.getHostSupport", {})
+    },
+    /** @experimental */
     tools: {
       /**
        * Lists built-in tools available for a model.
@@ -1425,7 +1434,20 @@ function createSessionRpc(connection, sessionId) {
        *
        * @returns Instruction sources loaded for the session, in merge order.
        */
-      getSources: async () => connection.sendRequest("session.instructions.getSources", { sessionId })
+      getSources: async () => connection.sendRequest("session.instructions.getSources", { sessionId }),
+      /**
+       * Invalidates cached custom-instruction discovery so subsequent turns and source reads observe instruction files currently on disk.
+       */
+      reload: async () => connection.sendRequest("session.instructions.reload", { sessionId })
+    },
+    /** @experimental */
+    customizations: {
+      /**
+       * Reloads all repository and user customizations for the active session: instructions, plugins and their MCP servers and hooks, custom agents, extensions, and skills. Returns diagnostics from the final skill reload.
+       *
+       * @returns Diagnostics from reloading skill definitions, with warnings and errors as separate lists.
+       */
+      reload: async () => connection.sendRequest("session.customizations.reload", { sessionId })
     },
     /** @experimental */
     fleet: {
@@ -1835,6 +1857,25 @@ function createSessionRpc(connection, sessionId) {
       }
     },
     /** @experimental */
+    diagnostics: {
+      /**
+       * Patches configured session diagnostic sources without restarting their producers. Setting a source level to off clears its retained diagnostics and invalidates cursors selecting that source.
+       *
+       * @param params Patch session diagnostic thresholds for explicitly supplied sources.
+       *
+       * @returns Per-source session diagnostics configuration.
+       */
+      configure: async (params) => connection.sendRequest("session.diagnostics.configure", { sessionId, ...params }),
+      /**
+       * Reads a bounded batch of retained session diagnostics for the selected sources. Records are never consumed and each reader advances independently through its opaque cursor.
+       *
+       * @param params Cursor-based request for session diagnostics. The default limit is 100 (maximum 500); the default waitMs is zero (maximum 30000).
+       *
+       * @returns One cursor-addressed page of retained session diagnostics.
+       */
+      read: async (params) => connection.sendRequest("session.diagnostics.read", { sessionId, ...params })
+    },
+    /** @experimental */
     connectors: {
       /**
        * Returns feature availability and bounded polling limits for the EXPERIMENTAL session connector API. This method never performs a Connector service request.
@@ -2714,11 +2755,11 @@ function createSessionRpc(connection, sessionId) {
        */
       updateText: async (params) => connection.sendRequest("session.queue.updateText", { sessionId, ...params }),
       /**
-       * Atomically withdraws an unchanged, unconsumed user message from the local queued or steering lane. A client retaining the original draft may restore it only when removed is true. Does not interrupt the running turn.
+       * Atomically withdraws an unchanged user message of a local session: from the queued or steering lane while unconsumed, or from the running turn it started while the model has not answered it and nothing the user sent after it is pending. Withdrawing from the running turn interrupts that turn and removes its events from history. A client retaining the original draft may restore it only when removed is true.
        *
-       * @param params Conditional withdrawal of a single user message, before the runtime claims it for delivery.
+       * @param params Conditional withdrawal of a single user message, from its queue or from the running turn it started.
        *
-       * @returns Result of removing a queued item.
+       * @returns Result of withdrawing a user message.
        */
       withdrawMessage: async (params) => connection.sendRequest("session.queue.withdrawMessage", { sessionId, ...params }),
       /**

package/dist/cjs/session.js

@@ -838,6 +838,7 @@ class CopilotSession {
     });
     let lastAssistantMessage;
     const unsubscribe = this.on((event) => {
+      if (event.agentId) return;
       if (event.type === "assistant.message") {
         lastAssistantMessage = event;
       } else if (event.type === "session.idle" && event.data.mode !== "autopilot") {

package/dist/cliVersion.d.ts

@@ -1,2 +1,2 @@
-export declare const COPILOT_CLI_VERSION = "1.0.89-0";
+export declare const COPILOT_CLI_VERSION = "1.0.89-3";
 export declare const COPILOT_CLI_USE_NPM_PACKAGE = false;

package/dist/cliVersion.js

@@ -1,4 +1,4 @@
-const COPILOT_CLI_VERSION = "1.0.89-0";
+const COPILOT_CLI_VERSION = "1.0.89-3";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 export {
   COPILOT_CLI_USE_NPM_PACKAGE,

package/dist/client.js

@@ -1215,6 +1215,7 @@ class CopilotClient {
         includeSubAgentStreamingEvents: config.includeSubAgentStreamingEvents ?? true,
         ...this.onGitHubTelemetry != null ? { enableGitHubTelemetryForwarding: true } : {},
         mcpServers: toWireMcpServers(config.mcpServers),
+        ...config.diagnostics !== void 0 ? { diagnostics: config.diagnostics } : {},
         mcpOAuthTokenStorage: config.mcpOAuthTokenStorage,
         authClientIdMetadataUrl: config.authClientIdMetadataUrl,
         envValueMode: "direct",
@@ -1224,6 +1225,7 @@ class CopilotClient {
         agent: config.agent,
         configDir: config.configDirectory,
         enableConfigDiscovery: config.enableConfigDiscovery,
+        refreshCustomInstructions: config.refreshCustomInstructions,
         skipEmbeddingRetrieval: config.skipEmbeddingRetrieval,
         embeddingCacheStorage: config.embeddingCacheStorage,
         organizationCustomInstructions: config.organizationCustomInstructions,
@@ -1466,6 +1468,7 @@ class CopilotClient {
         includeSubAgentStreamingEvents: config.includeSubAgentStreamingEvents ?? true,
         ...this.onGitHubTelemetry != null ? { enableGitHubTelemetryForwarding: true } : {},
         mcpServers: toWireMcpServers(config.mcpServers),
+        ...config.diagnostics !== void 0 ? { diagnostics: config.diagnostics } : {},
         mcpOAuthTokenStorage: config.mcpOAuthTokenStorage,
         authClientIdMetadataUrl: config.authClientIdMetadataUrl,
         envValueMode: "direct",

package/dist/generated/rpc.d.ts

@@ -1210,6 +1210,127 @@ export type DebugCollectLogsResultKind =
 "archive"
 /** A directory containing the collected files was written. */
  | "directory";
+/**
+ * Whether the supplied diagnostic cursor remained within the retained buffer window.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiagnosticCursorStatus".
+ */
+/** @experimental */
+export type DiagnosticCursorStatus = 
+/** The cursor is valid for the current retained window. */
+"ok"
+/** The cursor no longer addresses retained records; reading resumes at the oldest retained record. */
+ | "expired";
+/**
+ * One retained session-scoped diagnostic record. Potentially content-bearing diagnostic data is opt-in and must not be exported automatically as telemetry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiagnosticEntry".
+ */
+/** @experimental */
+export type DiagnosticEntry = {
+    /**
+     * UTC RFC 3339 timestamp captured at the diagnostic source.
+     */
+    timestamp: string;
+    level: DiagnosticSeverity;
+    /**
+     * Agent identifier for a subagent host. Omitted for the root agent.
+     */
+    agentId?: string;
+    /**
+     * Human-readable diagnostic summary.
+     */
+    message: string;
+    /**
+     * Whether message or data was truncated to the record-size bound.
+     */
+    truncated?: boolean;
+    /**
+     * Original byte count when a known-size message or data value was truncated.
+     */
+    originalBytes?: number;
+    details: McpDiagnosticDetails;
+    /**
+     * Diagnostic source identifying the typed details payload.
+     */
+    source: "mcp";
+};
+/**
+ * Severity of an emitted diagnostic record.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiagnosticSeverity".
+ */
+/** @experimental */
+export type DiagnosticSeverity = 
+/** Failure that prevented or interrupted communication. */
+"error"
+/** A recoverable warning or server standard-error output. */
+ | "warning"
+/** Lifecycle transition. */
+ | "info"
+/** Protocol-frame or launch diagnostic. */
+ | "debug"
+/** HTTP metadata diagnostic. */
+ | "trace";
+/**
+ * Category for an MCP diagnostic record.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpDiagnosticKind".
+ */
+/** @experimental */
+export type McpDiagnosticKind = 
+/** Connection lifecycle transition or failure. */
+"lifecycle"
+/** JSON-RPC protocol frame. */
+ | "protocol"
+/** HTTP request or response metadata. */
+ | "http"
+/** Local MCP server standard-error output. */
+ | "stderr";
+/**
+ * Direction of an observed MCP protocol frame.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpDiagnosticDirection".
+ */
+/** @experimental */
+export type McpDiagnosticDirection = 
+/** Frame emitted by the Copilot MCP client. */
+"client-to-server"
+/** Frame received from the MCP server. */
+ | "server-to-client";
+/**
+ * Session-scoped diagnostic threshold. Capture is disabled by default and is never persisted with the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiagnosticLogLevel".
+ */
+/** @experimental */
+export type DiagnosticLogLevel = 
+/** Disable capture and clear retained diagnostics. */
+"off"
+/** Capture failures only. */
+ | "error"
+/** Capture failures, warnings, and stderr. */
+ | "warning"
+/** Capture lifecycle diagnostics. */
+ | "info"
+/** Capture protocol frames and launch diagnostics. */
+ | "debug"
+/** Capture HTTP metadata in addition to debug diagnostics. */
+ | "trace";
+/**
+ * A supported diagnostic source.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiagnosticSource".
+ */
+/** @experimental */
+export type DiagnosticSource = "mcp";
 /**
  * Persisted extension discovery source
  *
@@ -3275,6 +3396,14 @@ export type ResponseFormat = {
      */
     type: "json_schema";
 };
+/**
+ * Extensible identifier of a sandbox policy feature whose availability varies between hosts. A plain string, so an older client decodes a name added by a newer runtime; ignore names you do not recognize. Known values: `network` — sandboxed commands can reach the network (`network.allowOutbound`, on by default); on Linux this needs the tooling for Bubblewrap's private network namespace, such as slirp4netns. `network_filtering` — host rules and the sandbox proxy (`network.allowedHosts`, `network.blockedHosts`, `network.proxy`); on Linux this needs the same tooling as `network`; on Windows it needs a version with Process Security Environment 1.1 host-loopback support, and a policy that uses it must also set `network.allowLocalNetwork`, because Windows reaches the local proxy only together with private-network access. `denied_paths` — native enforcement of `filesystem.deniedPaths`; on Windows this needs a version whose sandbox contract reports denied-path support. `shell` — shell commands inside the sandbox: bash on macOS and Linux, PowerShell on Windows; on Windows this needs a version with Process Security Environment 1.1 filesystem enumeration support.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxHostCapabilityName".
+ */
+/** @experimental */
+export type SandboxHostCapabilityName = string;
 /**
  * A session-scoped sandbox transition applied while handling a slash command
  *
@@ -8161,6 +8290,120 @@ export interface DebugCollectLogsSkippedEntry {
      */
     reason: string;
 }
+/**
+ * MCP-specific detail for a source-discriminated diagnostic entry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpDiagnosticDetails".
+ */
+/** @experimental */
+export interface McpDiagnosticDetails {
+    kind: McpDiagnosticKind;
+    /**
+     * Configured MCP server name.
+     */
+    serverName: string;
+    /**
+     * Fresh identifier for the MCP connection attempt, including failed starts.
+     */
+    connectionId: string;
+    direction?: McpDiagnosticDirection;
+    /**
+     * Serialized diagnostic detail. Protocol and HTTP records use JSON when detail is present.
+     */
+    data?: string;
+}
+/**
+ * Per-source session diagnostics configuration.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiagnosticsConfiguration".
+ */
+/** @experimental */
+export interface DiagnosticsConfiguration {
+    sources: DiagnosticSourcesConfiguration;
+}
+/**
+ * Typed diagnostic source configuration. At least one source is required by diagnostics configuration methods.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiagnosticSourcesConfiguration".
+ */
+/** @experimental */
+export interface DiagnosticSourcesConfiguration {
+    mcp?: McpDiagnosticSourceConfiguration;
+}
+/**
+ * MCP diagnostic source configuration.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpDiagnosticSourceConfiguration".
+ */
+/** @experimental */
+export interface McpDiagnosticSourceConfiguration {
+    level: DiagnosticLogLevel;
+}
+/**
+ * Patch session diagnostic thresholds for explicitly supplied sources.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiagnosticsConfigureRequest".
+ */
+/** @experimental */
+export interface DiagnosticsConfigureRequest {
+    sources: DiagnosticSourcesConfiguration;
+}
+/**
+ * Cursor-based request for session diagnostics. The default limit is 100 (maximum 500); the default waitMs is zero (maximum 30000).
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiagnosticsReadRequest".
+ */
+/** @experimental */
+export interface DiagnosticsReadRequest {
+    /**
+     * Nonempty selection of sources to read. Each source may be listed once.
+     */
+    sources: DiagnosticSource[];
+    /**
+     * Opaque cursor returned by an earlier read. Omit to start at the oldest retained record.
+     */
+    cursor?: string;
+    /**
+     * Maximum number of records to return, from 1 through 500. Omit for 100.
+     */
+    max?: number;
+    /**
+     * Maximum time in milliseconds to wait for a new record, from 0 through 30000.
+     */
+    waitMs?: number;
+}
+/**
+ * One cursor-addressed page of retained session diagnostics.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiagnosticsReadResult".
+ */
+/** @experimental */
+export interface DiagnosticsReadResult {
+    /**
+     * Retained records beginning at the requested cursor.
+     */
+    entries: DiagnosticEntry[];
+    /**
+     * Opaque cursor for the next independent read.
+     */
+    cursor: string;
+    cursorStatus: DiagnosticCursorStatus;
+    /**
+     * Number of records lost before this page when known. Omitted when a buffer generation change makes the count unknowable.
+     */
+    droppedCount?: number;
+    /**
+     * Whether additional retained records follow this page.
+     */
+    hasMore: boolean;
+}
 /**
  * Discovered extension metadata and persistent enablement state.
  *
@@ -11909,6 +12152,10 @@ export interface McpServerConfigHttp {
      * OAuth client ID for a pre-registered remote MCP OAuth client.
      */
     oauthClientId?: string;
+    /**
+     * Non-empty array of valid RFC 6749 scope-token strings to request for the statically configured OAuth client when the server challenge omits scope or provides an empty scope. Requires a non-empty oauthClientId. These scopes take precedence over protected-resource metadata.
+     */
+    oauthScopes?: string[];
     /**
      * Whether the configured OAuth client is public and does not require a client secret.
      */
@@ -17624,6 +17871,10 @@ export interface QueuePendingItems {
      */
     displayText: string;
     agentMode: SendAgentMode;
+    /**
+     * Optional source tag associated with this pending queue entry. This is an open string, not authenticated authorship. In particular, `user` does not prove that a person typed the message. If the source is absent or unrecognized, consumers must not infer human or agent authorship and should handle the entry neutrally. Consumers should tolerate future source values.
+     */
+    source?: string;
 }
 /**
  * Snapshot of the session's pending queued items and immediate-steering messages.
@@ -17645,6 +17896,10 @@ export interface QueuePendingItemsResult {
      * How many leading entries of `steeringMessages` have already been folded into the running turn (and so have an emitted `user.message`), as opposed to still waiting for one. Absent for hosts that do not distinguish the two.
      */
     inFlightSteeringCount?: number;
+    /**
+     * ID of the running turn's user message while the model has not answered it, so `withdrawMessage` can still take it back once nothing sent after it is pending. A message leaves `items` when its turn starts, before its `user.message` is recorded; this tells that message apart from one that was removed. Absent when no turn prompt can be taken back.
+     */
+    withdrawableTurnMessageId?: string;
 }
 /**
  * Parameters for removing a queued item by stable id.
@@ -17788,7 +18043,7 @@ export interface QueueUpdateTextResult {
     updated: boolean;
 }
 /**
- * Conditional withdrawal of a single user message, before the runtime claims it for delivery.
+ * Conditional withdrawal of a single user message, from its queue or from the running turn it started.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "QueueWithdrawMessageRequest".
@@ -17804,6 +18059,23 @@ export interface QueueWithdrawMessageRequest {
      */
     expectedPrompt: string;
 }
+/**
+ * Result of withdrawing a user message.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueWithdrawMessageResult".
+ */
+/** @experimental */
+export interface QueueWithdrawMessageResult {
+    /**
+     * True when the message left the queue or, for a running turn, history.
+     */
+    removed: boolean;
+    /**
+     * True when the running turn was interrupted to withdraw the message. With removed false, the turn was interrupted but its events could not be removed, for example because the model answered first, so the message stays in the interrupted turn.
+     */
+    interrupted: boolean;
+}
 /**
  * Event type to register consumer interest for, used by runtime gating logic.
  *
@@ -18395,6 +18667,45 @@ export interface SandboxEnforcementStatus {
      */
     reason?: string;
 }
+/**
+ * Whether this host can run one sandbox policy feature. A session whose effective policy uses an unsupported feature fails each sandboxed command with `reason`.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxHostCapability".
+ */
+/** @experimental */
+export interface SandboxHostCapability {
+    name: SandboxHostCapabilityName;
+    /**
+     * Whether this host can run the feature.
+     */
+    supported: boolean;
+    /**
+     * Human-readable reason and remedy when the feature is unsupported, such as a package to install or an OS update. Present only when `supported` is false.
+     */
+    reason?: string;
+}
+/**
+ * Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxHostSupport".
+ */
+/** @experimental */
+export interface SandboxHostSupport {
+    /**
+     * Whether a process-containment backend is usable on this host: Seatbelt on macOS, Bubblewrap on Linux, or ProcessContainer on Windows.
+     */
+    supported: boolean;
+    /**
+     * Human-readable reason the sandbox cannot run on this host. Present only when `supported` is false.
+     */
+    reason?: string;
+    /**
+     * Sandbox policy features whose availability varies between hosts that can run the backend. Empty when `supported` is false, because no feature can run without a backend. Later runtimes can add entries; ignore an entry whose `name` you do not recognize.
+     */
+    capabilities: SandboxHostCapability[];
+}
 /**
  * Register an absolute-time scheduled prompt.
  *
@@ -26040,6 +26351,15 @@ export declare function createServerRpc(connection: MessageConnection): {
         getBuiltInCatalog: () => Promise<BuiltInModelCatalog>;
     };
     /** @experimental */
+    sandbox: {
+        /**
+         * Reports whether the host running this runtime can run the command sandbox, without starting a session or spawning a sandboxed command.
+         *
+         * @returns Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
+         */
+        getHostSupport: () => Promise<SandboxHostSupport>;
+    };
+    /** @experimental */
     tools: {
         /**
          * Lists built-in tools available for a model.
@@ -27329,6 +27649,19 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Instruction sources loaded for the session, in merge order.
          */
         getSources: () => Promise<InstructionsGetSourcesResult>;
+        /**
+         * Invalidates cached custom-instruction discovery so subsequent turns and source reads observe instruction files currently on disk.
+         */
+        reload: () => Promise<void>;
+    };
+    /** @experimental */
+    customizations: {
+        /**
+         * Reloads all repository and user customizations for the active session: instructions, plugins and their MCP servers and hooks, custom agents, extensions, and skills. Returns diagnostics from the final skill reload.
+         *
+         * @returns Diagnostics from reloading skill definitions, with warnings and errors as separate lists.
+         */
+        reload: () => Promise<SkillsLoadDiagnostics>;
     };
     /** @experimental */
     fleet: {
@@ -27738,6 +28071,25 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         };
     };
     /** @experimental */
+    diagnostics: {
+        /**
+         * Patches configured session diagnostic sources without restarting their producers. Setting a source level to off clears its retained diagnostics and invalidates cursors selecting that source.
+         *
+         * @param params Patch session diagnostic thresholds for explicitly supplied sources.
+         *
+         * @returns Per-source session diagnostics configuration.
+         */
+        configure: (params: DiagnosticsConfigureRequest) => Promise<DiagnosticsConfiguration>;
+        /**
+         * Reads a bounded batch of retained session diagnostics for the selected sources. Records are never consumed and each reader advances independently through its opaque cursor.
+         *
+         * @param params Cursor-based request for session diagnostics. The default limit is 100 (maximum 500); the default waitMs is zero (maximum 30000).
+         *
+         * @returns One cursor-addressed page of retained session diagnostics.
+         */
+        read: (params: DiagnosticsReadRequest) => Promise<DiagnosticsReadResult>;
+    };
+    /** @experimental */
     connectors: {
         /**
          * Returns feature availability and bounded polling limits for the EXPERIMENTAL session connector API. This method never performs a Connector service request.
@@ -28617,13 +28969,13 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          */
         updateText: (params: QueueUpdateTextRequest) => Promise<QueueUpdateTextResult>;
         /**
-         * Atomically withdraws an unchanged, unconsumed user message from the local queued or steering lane. A client retaining the original draft may restore it only when removed is true. Does not interrupt the running turn.
+         * Atomically withdraws an unchanged user message of a local session: from the queued or steering lane while unconsumed, or from the running turn it started while the model has not answered it and nothing the user sent after it is pending. Withdrawing from the running turn interrupts that turn and removes its events from history. A client retaining the original draft may restore it only when removed is true.
          *
-         * @param params Conditional withdrawal of a single user message, before the runtime claims it for delivery.
+         * @param params Conditional withdrawal of a single user message, from its queue or from the running turn it started.
          *
-         * @returns Result of removing a queued item.
+         * @returns Result of withdrawing a user message.
          */
-        withdrawMessage: (params: QueueWithdrawMessageRequest) => Promise<QueueRemoveAtResult>;
+        withdrawMessage: (params: QueueWithdrawMessageRequest) => Promise<QueueWithdrawMessageResult>;
         /**
          * Atomically appends text and attachments to an unchanged, unconsumed local steering message. Returns updated=false if delivery or withdrawal already claimed the message.
          *

package/dist/generated/rpc.js

@@ -39,6 +39,15 @@ function createServerRpc(connection) {
       getBuiltInCatalog: async () => connection.sendRequest("models.getBuiltInCatalog", {})
     },
     /** @experimental */
+    sandbox: {
+      /**
+       * Reports whether the host running this runtime can run the command sandbox, without starting a session or spawning a sandboxed command.
+       *
+       * @returns Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
+       */
+      getHostSupport: async () => connection.sendRequest("sandbox.getHostSupport", {})
+    },
+    /** @experimental */
     tools: {
       /**
        * Lists built-in tools available for a model.
@@ -1397,7 +1406,20 @@ function createSessionRpc(connection, sessionId) {
        *
        * @returns Instruction sources loaded for the session, in merge order.
        */
-      getSources: async () => connection.sendRequest("session.instructions.getSources", { sessionId })
+      getSources: async () => connection.sendRequest("session.instructions.getSources", { sessionId }),
+      /**
+       * Invalidates cached custom-instruction discovery so subsequent turns and source reads observe instruction files currently on disk.
+       */
+      reload: async () => connection.sendRequest("session.instructions.reload", { sessionId })
+    },
+    /** @experimental */
+    customizations: {
+      /**
+       * Reloads all repository and user customizations for the active session: instructions, plugins and their MCP servers and hooks, custom agents, extensions, and skills. Returns diagnostics from the final skill reload.
+       *
+       * @returns Diagnostics from reloading skill definitions, with warnings and errors as separate lists.
+       */
+      reload: async () => connection.sendRequest("session.customizations.reload", { sessionId })
     },
     /** @experimental */
     fleet: {
@@ -1807,6 +1829,25 @@ function createSessionRpc(connection, sessionId) {
       }
     },
     /** @experimental */
+    diagnostics: {
+      /**
+       * Patches configured session diagnostic sources without restarting their producers. Setting a source level to off clears its retained diagnostics and invalidates cursors selecting that source.
+       *
+       * @param params Patch session diagnostic thresholds for explicitly supplied sources.
+       *
+       * @returns Per-source session diagnostics configuration.
+       */
+      configure: async (params) => connection.sendRequest("session.diagnostics.configure", { sessionId, ...params }),
+      /**
+       * Reads a bounded batch of retained session diagnostics for the selected sources. Records are never consumed and each reader advances independently through its opaque cursor.
+       *
+       * @param params Cursor-based request for session diagnostics. The default limit is 100 (maximum 500); the default waitMs is zero (maximum 30000).
+       *
+       * @returns One cursor-addressed page of retained session diagnostics.
+       */
+      read: async (params) => connection.sendRequest("session.diagnostics.read", { sessionId, ...params })
+    },
+    /** @experimental */
     connectors: {
       /**
        * Returns feature availability and bounded polling limits for the EXPERIMENTAL session connector API. This method never performs a Connector service request.
@@ -2686,11 +2727,11 @@ function createSessionRpc(connection, sessionId) {
        */
       updateText: async (params) => connection.sendRequest("session.queue.updateText", { sessionId, ...params }),
       /**
-       * Atomically withdraws an unchanged, unconsumed user message from the local queued or steering lane. A client retaining the original draft may restore it only when removed is true. Does not interrupt the running turn.
+       * Atomically withdraws an unchanged user message of a local session: from the queued or steering lane while unconsumed, or from the running turn it started while the model has not answered it and nothing the user sent after it is pending. Withdrawing from the running turn interrupts that turn and removes its events from history. A client retaining the original draft may restore it only when removed is true.
        *
-       * @param params Conditional withdrawal of a single user message, before the runtime claims it for delivery.
+       * @param params Conditional withdrawal of a single user message, from its queue or from the running turn it started.
        *
-       * @returns Result of removing a queued item.
+       * @returns Result of withdrawing a user message.
        */
       withdrawMessage: async (params) => connection.sendRequest("session.queue.withdrawMessage", { sessionId, ...params }),
       /**

package/dist/generated/session-events.d.ts

@@ -2684,12 +2684,16 @@ export interface SnapshotRewindEvent {
  * Session rewind details including target event and count of removed events
  */
 export interface SnapshotRewindData {
+    /**
+     * The removed events, starting with `upToEventId`. Later events not listed were kept, such as a background agent's events that interleaved with a withdrawn turn
+     */
+    eventIds?: string[];
     /**
      * Number of events that were removed by the rewind
      */
     eventsRemoved: number;
     /**
-     * Event ID that was rewound to; this event and all after it were removed
+     * First removed event. Without `eventIds`, it and every event after it were removed
      */
     upToEventId: string;
 }
@@ -3317,7 +3321,7 @@ export interface CompactionCompleteCompactionTokensUsedCopilotUsageTokenDetail {
     tokenType: string;
 }
 /**
- * Original request-level and effective conversation reasoning effort for a Responses history boundary
+ * Original request-level and effective conversation reasoning effort for a provider history boundary; the historical type name is retained for compatibility
  */
 export interface ResponsesReasoning {
     /**
@@ -3703,6 +3707,12 @@ export interface FusionResolvedData {
      * Stable identifier for the resolved HydraFusion turn.
      */
     fusionId: string;
+    /**
+     * Short human-readable summary of the selected workflow, suitable for immediate client display after routing. May be absent in older durable events; omit the explanation or derive one from pattern and phasePlan. Display text, not a stable machine-readable value.
+     *
+     * @experimental
+     */
+    hint?: string;
     /**
      * Version of the executable model universe used for selection.
      */
@@ -5379,6 +5389,10 @@ export interface FusionAttribution {
      * Stable identifier for the HydraFusion turn that produced the event.
      */
     fusionId: string;
+    /**
+     * Whether this model request consumed a user steering message rather than only internal Fusion work.
+     */
+    hasUserSteering?: boolean;
     /**
      * HydraFusion orchestration pattern selected for the turn.
      */
@@ -10360,6 +10374,10 @@ export interface McpOauthRequiredStaticClientConfig {
      * Whether this is a public OAuth client
      */
     publicClient?: boolean;
+    /**
+     * Configured OAuth scope string used when the server challenge omits scope or provides an empty scope
+     */
+    scope?: string;
 }
 /**
  * OAuth WWW-Authenticate parameters parsed from an MCP auth challenge

package/dist/index.d.ts

@@ -12,6 +12,6 @@ export { defineWorkflow, WorkflowResumeError, isWorkflowRunTerminal } from "./wo
 export { Canvas, CanvasError, createCanvas, type CanvasAction, type CanvasDeclaration, type CanvasHostContext, type CanvasHostContextCapabilities, type CanvasJsonSchema, type CanvasOptions, } from "./canvas.js";
 export { defineTool, approveAll, createAttributedPermissionResult, convertMcpCallToolResult, createSessionFsAdapter, CopilotRequestHandler, CopilotWebSocketHandler, CopilotWebSocketCloseStatus, CopilotWebSocketForwarder, SessionFsSqliteTransactionFailure, SYSTEM_MESSAGE_SECTIONS, } from "./types.js";
 export type * from "./generated/session-events.js";
-export type { AskUserVariant, CommandContext, CommandDefinition, CommandHandler, CanvasProviderIdentity, CloudSessionOptions, CloudSessionRepository, AutoModeSwitchHandler, AutoModeSwitchRequest, AutoModeSwitchResponse, AgentStopHandler, AgentStopHookInput, AgentStopHookOutput, UserPromptTransformedHandler, UserPromptTransformedHookInput, UserPromptTransformedHookOutput, CopilotClientInfo, CopilotClientMode, CopilotClientOptions, CopilotExpAssignmentResponse, StdioRuntimeConnection, InProcessRuntimeConnection, TcpRuntimeConnection, UriRuntimeConnection, ChildProcessRuntimeConnection, CustomAgentConfig, ElicitationFieldValue, ElicitationHandler, ElicitationParams, ElicitationContext, ElicitationResult, ElicitationSchema, ElicitationSchemaField, ExpConfigEntry, ExpFlagValue, ExitPlanModeHandler, ExitPlanModeRequest, ExitPlanModeResult, ExtensionLaunchProfile, ExtensionLaunchProvider, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, ExtensionInfo, ForegroundSessionInfo, GetAuthStatusResponse, GetStatusResponse, GitHubMcpToolConfig, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTokenProvider, GitHubTokenProviderArgs, GitHubTokenProviderResult, InfiniteSessionConfig, LargeToolOutputConfig, MemoryConfiguration, UiInputOptions, FactoryLimits, FactoryMeta, MCPStdioServerConfig, MCPHTTPServerConfig, MCPServerConfig, DefaultAgentConfig, BearerTokenProvider, ExtensionContextAttachment, MessageOptions, ResponseSchema, MessageSource, ManagedSettings, ManagedSettingsPermissions, ModelBilling, ModelBillingTokenPrices, ModelBillingTokenPricesLongContext, AutoTier, CapiSessionOptions, CurrentModel, ModelSwitchAutoTierResult, ModelSwitchAutoTierStatus, ModelCapabilities, ModelCapabilitiesOverride, ModelInfo, ModelPolicy, NamedProviderConfig, PermissionHandler, PermissionRequest, PermissionRequestedData, PermissionRequestedEvent, PermissionRequestResult, AttributedPermissionResult, PermissionDecisionContext, PermissionDecisionOutcome, PermissionDecisionSource, PermissionDecisionSurface, PermissionResponseCapability, ProviderConfig, ProviderModelConfig, ProviderTokenArgs, RemoteSessionMode, ResumeSessionConfig, SectionOverride, SectionOverrideAction, SectionTransformFn, SessionCapabilities, SessionConfig, SessionConfigBase, SessionEvent, SessionEventHandler, SessionEventPayload, SessionEventType, SessionLifecycleEvent, SessionLifecycleEventMetadata, SessionLifecycleEventType, SessionLifecycleHandler, SessionHooks, SessionCreatedEvent, SessionDeletedEvent, SessionUpdatedEvent, SessionForegroundEvent, SessionBackgroundEvent, SessionContext, SessionListFilter, SessionMetadata, SessionUiApi, SessionFsConfig, SessionFsProvider, SessionFsFileInfo, SessionFsSqliteQueryResult, SessionFsSqliteQueryType, SessionFsSqliteProvider, SessionFsSqliteStatement, SessionFsSqliteTransactionErrorClass, CopilotRequestContext, SystemMessageAppendConfig, SystemMessageConfig, SystemMessageCustomizeConfig, SystemMessageReplaceConfig, SystemMessageSection, TelemetryConfig, TraceContext, TraceContextProvider, Tool, ToolHandler, ToolInvocation, CurrentToolMetadata, ToolTelemetry, ToolResultObject, ToolSearchConfig, TypedSessionEventHandler, TypedSessionLifecycleHandler, ZodSchema, } from "./types.js";
+export type { AskUserVariant, CommandContext, CommandDefinition, CommandHandler, CanvasProviderIdentity, CloudSessionOptions, CloudSessionRepository, ConnectorAccountRequest, ConnectorAvailability, ConnectorCapabilities, ConnectorCatalogEntry, ConnectorCatalogResult, ConnectorCatalogStatus, ConnectorConnectRequest, ConnectorConnectResult, ConnectorContinueRequest, ConnectorDisconnectResult, ConnectorMcpStatus, ConnectorReconcileRequest, ConnectorRuntimeStatus, ConnectorStatus, AutoModeSwitchHandler, AutoModeSwitchRequest, AutoModeSwitchResponse, AgentStopHandler, AgentStopHookInput, AgentStopHookOutput, UserPromptTransformedHandler, UserPromptTransformedHookInput, UserPromptTransformedHookOutput, CopilotClientInfo, CopilotClientMode, CopilotClientOptions, CopilotExpAssignmentResponse, StdioRuntimeConnection, InProcessRuntimeConnection, TcpRuntimeConnection, UriRuntimeConnection, ChildProcessRuntimeConnection, CustomAgentConfig, ElicitationFieldValue, ElicitationHandler, ElicitationParams, ElicitationContext, ElicitationResult, ElicitationSchema, ElicitationSchemaField, ExpConfigEntry, ExpFlagValue, ExitPlanModeHandler, ExitPlanModeRequest, ExitPlanModeResult, ExtensionLaunchProfile, ExtensionLaunchProvider, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, ExtensionInfo, ForegroundSessionInfo, GetAuthStatusResponse, GetStatusResponse, GitHubMcpToolConfig, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTokenProvider, GitHubTokenProviderArgs, GitHubTokenProviderResult, InfiniteSessionConfig, LargeToolOutputConfig, MemoryConfiguration, UiInputOptions, FactoryLimits, FactoryMeta, MCPStdioServerConfig, MCPHTTPServerConfig, MCPServerConfig, DefaultAgentConfig, BearerTokenProvider, ExtensionContextAttachment, MessageOptions, ResponseSchema, MessageSource, ManagedSettings, ManagedSettingsPermissions, ModelBilling, ModelBillingTokenPrices, ModelBillingTokenPricesLongContext, AutoTier, CapiSessionOptions, CurrentModel, ModelSwitchAutoTierResult, ModelSwitchAutoTierStatus, ModelCapabilities, ModelCapabilitiesOverride, ModelInfo, ModelPolicy, NamedProviderConfig, PermissionHandler, PermissionRequest, PermissionRequestedData, PermissionRequestedEvent, PermissionRequestResult, AttributedPermissionResult, PermissionDecisionContext, PermissionDecisionOutcome, PermissionDecisionSource, PermissionDecisionSurface, PermissionResponseCapability, ProviderConfig, ProviderModelConfig, ProviderTokenArgs, RemoteSessionMode, ResumeSessionConfig, SectionOverride, SectionOverrideAction, SectionTransformFn, SessionCapabilities, SessionConfig, SessionConfigBase, SessionEvent, SessionEventHandler, SessionEventPayload, SessionEventType, SessionLifecycleEvent, SessionLifecycleEventMetadata, SessionLifecycleEventType, SessionLifecycleHandler, SessionHooks, SessionCreatedEvent, SessionDeletedEvent, SessionUpdatedEvent, SessionForegroundEvent, SessionBackgroundEvent, SessionContext, SessionListFilter, SessionMetadata, SessionUiApi, SessionFsConfig, SessionFsProvider, SessionFsFileInfo, SessionFsSqliteQueryResult, SessionFsSqliteQueryType, SessionFsSqliteProvider, SessionFsSqliteStatement, SessionFsSqliteTransactionErrorClass, CopilotRequestContext, SystemMessageAppendConfig, SystemMessageConfig, SystemMessageCustomizeConfig, SystemMessageReplaceConfig, SystemMessageSection, TelemetryConfig, TraceContext, TraceContextProvider, Tool, ToolHandler, ToolInvocation, CurrentToolMetadata, ToolTelemetry, ToolResultObject, ToolSearchConfig, TypedSessionEventHandler, TypedSessionLifecycleHandler, ZodSchema, } from "./types.js";
 export type { RunOptions, ResumeOptions, FactoryLimitOverrides, FactoryResumeErrorCode, SessionFactoryApi, FactoryAgentOptions, FactoryContext, FactoryDefinition, FactoryHandle, FactoryJsonSchema, JsonValue, FactoryPipelineStage, FactoryStepOptions, FactoryRunResult, FactoryRunStatus, FactoryRunSummary, FactoryListRunsOptions, FactoryRunsPage, FactoryRunDetail, FactoryProgressPage, FactoryProgressLine, FactoryPhaseObservation, FactoryPhaseStatus, FactoryAgentSummary, } from "./factory.js";
 export type { WorkflowRunOptions, WorkflowResumeOptions, WorkflowLimitOverrides, WorkflowResumeErrorCode, SessionWorkflowApi, WorkflowAgentOptions, WorkflowContext, WorkflowDefinition, WorkflowHandle, WorkflowJsonSchema, WorkflowLimits, WorkflowMeta, WorkflowPipelineStage, WorkflowStepOptions, WorkflowRunResult, WorkflowRunStatus, WorkflowRunSummary, WorkflowListRunsOptions, WorkflowRunsPage, WorkflowRunDetail, WorkflowProgressPage, WorkflowProgressLine, WorkflowPhaseObservation, WorkflowPhaseStatus, WorkflowAgentSummary, } from "./workflow.js";

package/dist/session.d.ts

@@ -167,6 +167,7 @@ export declare class CopilotSession {
      * assistant has finished processing the message.
      *
      * Events are still delivered to handlers registered via {@link on} while waiting.
+     * Sub-agent events with a non-empty `agentId` do not complete the wait or supply its reply.
      * With a schema as the second argument, returns its parsed, validated result.
      * Structured waits select only root-agent output originating from this send;
      * other queued work may delay session.idle but cannot replace the result.

package/dist/session.js

@@ -825,6 +825,7 @@ class CopilotSession {
     });
     let lastAssistantMessage;
     const unsubscribe = this.on((event) => {
+      if (event.agentId) return;
       if (event.type === "assistant.message") {
         lastAssistantMessage = event;
       } else if (event.type === "session.idle" && event.data.mode !== "autopilot") {

package/dist/types.d.ts

@@ -7,11 +7,11 @@ import type { CopilotRequestHandler } from "./copilotRequestHandler.js";
 import type { AttachmentExtensionContext as GeneratedExtensionContextAttachment, AutoTier, PermissionRequest as GeneratedPermissionRequest, PermissionRequestedData as GeneratedPermissionRequestedData, PermissionRequestedEvent as GeneratedPermissionRequestedEvent, ReasoningSummary, SessionLimitsConfig, SessionEvent as GeneratedSessionEvent } from "./generated/session-events.js";
 import type { CopilotSession } from "./session.js";
 import type { FactoryJsonSchema, JsonValue } from "./factory.js";
-import type { ExtensionLaunchProviderHandler as GeneratedExtensionLaunchProvider, GitHubTokenAcquireRequest, GitHubTokenAcquireResult, GitHubTelemetryNotification, ModelBillingTokenPrices, OpenCanvasInstance, RemoteSessionMode, CurrentToolMetadata } from "./generated/rpc.js";
+import type { ExtensionLaunchProviderHandler as GeneratedExtensionLaunchProvider, GitHubTokenAcquireRequest, GitHubTokenAcquireResult, GitHubTelemetryNotification, ModelBillingTokenPrices, DiagnosticsConfiguration, OpenCanvasInstance, RemoteSessionMode, CurrentToolMetadata } from "./generated/rpc.js";
 import type { ToolSet } from "./toolSet.js";
 export type { RemoteSessionMode } from "./generated/rpc.js";
 export type { CurrentToolMetadata } from "./generated/rpc.js";
-export type { ExtensionLaunchProfile, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, } from "./generated/rpc.js";
+export type { ConnectorAccountRequest, ConnectorAvailability, ConnectorCapabilities, ConnectorCatalogEntry, ConnectorCatalogResult, ConnectorCatalogStatus, ConnectorConnectRequest, ConnectorConnectResult, ConnectorContinueRequest, ConnectorDisconnectResult, ConnectorMcpStatus, ConnectorReconcileRequest, ConnectorRuntimeStatus, ConnectorStatus, ExtensionLaunchProfile, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, } from "./generated/rpc.js";
 /**
  * Arguments passed to a session's {@link GitHubTokenProvider}.
  *
@@ -1622,6 +1622,8 @@ export interface McpAuthStaticClientConfig {
     grantType?: "client_credentials";
     /** Whether this is a public OAuth client. */
     publicClient?: boolean;
+    /** Configured OAuth scope string used when the server challenge omits scope. */
+    scope?: string;
 }
 /** MCP OAuth request that the SDK host can satisfy with a host-acquired token. */
 export interface McpAuthRequest {
@@ -1922,6 +1924,16 @@ export interface SessionConfigBase {
      * the session to the long-context tier; omit or use "default" otherwise.
      */
     contextTier?: ContextTier;
+    /**
+     * Enables session-scoped MCP diagnostic capture at the requested level.
+     *
+     * Diagnostics are off by default. At `"debug"` and `"trace"` levels, entries
+     * can contain MCP payloads, tool arguments, paths, and server stderr. Do not
+     * upload entries as telemetry or export them without deliberate host action.
+     * Omit this option when resuming a resident session to preserve its current
+     * diagnostic level.
+     */
+    diagnostics?: DiagnosticsConfiguration;
     /** Per-property overrides for model capabilities, deep-merged over runtime defaults. */
     modelCapabilities?: ModelCapabilitiesOverride;
     /**
@@ -2465,6 +2477,14 @@ export interface SessionConfig extends SessionConfigBase {
      * Optional custom session ID. If not provided, the server generates one.
      */
     sessionId?: string;
+    /**
+     * Invalidates the process-wide custom-instruction discovery cache before
+     * creating this session. Use when instruction files changed in the same runtime.
+     * Other sessions in this runtime may observe updated instructions on later turns
+     * or discovery. This does not watch files or enable disabled instruction loading.
+     * @default false
+     */
+    refreshCustomInstructions?: boolean;
     /**
      * Creates a remote session in the cloud instead of a local session.
      * The optional repository is associated with the cloud session.

package/package.json

@@ -4,8 +4,8 @@
         "type": "git",
         "url": "https://github.com/github/copilot-sdk.git"
     },
-    "version": "1.0.15-preview.1",
-    "copilotCliVersion": "1.0.89-0",
+    "version": "1.0.15-preview.3",
+    "copilotCliVersion": "1.0.89-3",
     "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
     "main": "./dist/cjs/index.js",
     "types": "./dist/index.d.ts",
@@ -101,13 +101,13 @@
         "README.md"
     ],
     "optionalDependencies": {
-        "@github/copilot-sdk-darwin-arm64": "1.0.15-preview.1",
-        "@github/copilot-sdk-darwin-x64": "1.0.15-preview.1",
-        "@github/copilot-sdk-linux-arm64": "1.0.15-preview.1",
-        "@github/copilot-sdk-linux-x64": "1.0.15-preview.1",
-        "@github/copilot-sdk-linuxmusl-arm64": "1.0.15-preview.1",
-        "@github/copilot-sdk-linuxmusl-x64": "1.0.15-preview.1",
-        "@github/copilot-sdk-win32-arm64": "1.0.15-preview.1",
-        "@github/copilot-sdk-win32-x64": "1.0.15-preview.1"
+        "@github/copilot-sdk-darwin-arm64": "1.0.15-preview.3",
+        "@github/copilot-sdk-darwin-x64": "1.0.15-preview.3",
+        "@github/copilot-sdk-linux-arm64": "1.0.15-preview.3",
+        "@github/copilot-sdk-linux-x64": "1.0.15-preview.3",
+        "@github/copilot-sdk-linuxmusl-arm64": "1.0.15-preview.3",
+        "@github/copilot-sdk-linuxmusl-x64": "1.0.15-preview.3",
+        "@github/copilot-sdk-win32-arm64": "1.0.15-preview.3",
+        "@github/copilot-sdk-win32-x64": "1.0.15-preview.3"
     }
 }