@github/copilot-sdk 1.0.17-preview.1 → 1.0.17-preview.10

package/dist/generated/session-events.d.ts

@@ -9,9 +9,9 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
 /**
  * Union of all session event variants emitted by the Copilot CLI runtime.
  */
-export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | IndexedSearchEvent | WarningEvent | ModelChangeEvent | ModelDeselectedEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | PermissionRecoveryEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | PermissionAssentDetectedEvent | PermissionContextualAuthorizationEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | WorkflowRunUpdatedEvent | WorkflowRunStartedEvent | WorkflowRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
+export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | IndexedSearchEvent | WarningEvent | ModelChangeEvent | ModelDeselectedEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | PermissionRecoveryEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolShellOutputEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | PermissionAssentDetectedEvent | PermissionContextualAuthorizationEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | HumanResponseRecordedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | WorkflowRunUpdatedEvent | WorkflowRunStartedEvent | WorkflowRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
 /**
- * Routing preference used when the session model is `auto`. `fast` is an integrator-only latency preset and is not a first-party GitHub Copilot product preference.
+ * Extensible routing preference for the virtual `auto` model. New identifiers must be advertised and enabled by the provider. `fast` is an integrator-only latency preset.
  */
 export type AutoTier = 
 /** Optimize for efficiency. */
@@ -21,7 +21,7 @@ export type AutoTier =
 /** Optimize for intelligence. */
  | "intelligence"
 /** Integrator-only preset that optimizes for latency. */
- | "fast";
+ | "fast" | (string & {});
 /**
  * Hosting platform type of the repository (github or ado)
  */
@@ -308,7 +308,7 @@ export type ModelDeselectedReason =
 /** A host-managed provider snapshot no longer publishes the selected model. */
 "provider_withdrawn";
 /**
- * Auto preferences that Copilot API can recommend.
+ * Enabled Auto preferences that Copilot API can recommend.
  */
 export type RecommendedAutoTier = 
 /** Optimize for efficiency. */
@@ -316,7 +316,7 @@ export type RecommendedAutoTier =
 /** Balance efficiency and intelligence. */
  | "balance"
 /** Optimize for intelligence. */
- | "intelligence";
+ | "intelligence" | (string & {});
 /**
  * Terminal reason an Auto preference activation failed.
  */
@@ -740,7 +740,7 @@ export type AbortReason =
 /** Autopilot stopped the run because the active objective reached its user-set --max-ai-credits limit. */
  | "autopilot_credit_limit";
 /**
- * Configuration source: user, workspace, plugin, builtin, or managed
+ * Configuration source: user, workspace, plugin, builtin, managed, or account
  */
 export type McpServerSource = 
 /** Server configured in the user's global MCP configuration. */
@@ -752,7 +752,9 @@ export type McpServerSource =
 /** Server bundled with the runtime. */
  | "builtin"
 /** Server supplied by a trusted host-managed catalog. */
- | "managed";
+ | "managed"
+/** Server contributed by a signed-in account; enablement and organization policy still apply. */
+ | "account";
 /**
  * Transport mechanism: stdio, http, sse (deprecated), or memory (in-process MCP server)
  */
@@ -773,6 +775,27 @@ export type ToolExecutionStartToolDescriptionMetaUIVisibility =
 "model"
 /** Tool is callable by the MCP App view (iframe) via session.mcp.apps.callTool */
  | "app";
+/**
+ * Shell output source. Terminal output has no separate stdout/stderr attribution.
+ */
+export type ToolShellOutputStream = 
+/** Output from the shell command's standard output stream. This is the default when stream is omitted. */
+"stdout"
+/** Output from the shell command's standard error stream. */
+ | "stderr"
+/** Inherently merged output that cannot be attributed separately to stdout or stderr. */
+ | "terminal";
+/**
+ * Kind of file mutation committed by a built-in editing tool.
+ */
+/** @experimental */
+export type ToolExecutionCompleteFileEditKind = 
+/** A file was created. */
+"create"
+/** A file was written by an edit operation. */
+ | "edit"
+/** A file was deleted. */
+ | "delete" | (string & {});
 /**
  * A model-facing binary result as persisted: full inline data, a size-omitted marker, or a deduplicated asset reference
  */
@@ -1215,6 +1238,92 @@ export type ExitPlanModeAction =
  | "autopilot"
 /** Exit plan mode and continue with parallel autonomous workers. */
  | "autopilot_fleet";
+/**
+ * Controlled provenance for a typed runtime response. Only `human_response`, minted by a trusted direct-interaction ingress, is human authorization evidence.
+ */
+export type HumanResponseActor = 
+/** A built-in trusted client submitted the response after direct human interaction. */
+"human_response"
+/** A host or SDK automation submitted the response without direct human interaction. */
+ | "host_automation"
+/** The response came through a legacy or otherwise unattributed ingress. */
+ | "unknown";
+/**
+ * Exact runtime-owned question or reviewed plan paired with the typed response that settled it.
+ */
+export type HumanResponseRecordedResponse = {
+    /**
+     * Exact answer content accepted from the user.
+     */
+    content: {
+        [k: string]: ElicitationCompletedContent | undefined;
+    };
+    /**
+     * Exact question displayed to the user.
+     */
+    message: string;
+    requestedSchema: ElicitationRequestedSchema;
+    /**
+     * Runtime-owned response kind discriminator.
+     */
+    responseKind: "ask_user";
+} | {
+    /**
+     * Whether the displayed request allowed a free-form answer.
+     */
+    allowFreeform?: boolean;
+    /**
+     * Exact selected or free-form answer submitted by the user.
+     */
+    answer: string;
+    /**
+     * Exact choices displayed to the user, when the request offered choices.
+     */
+    choices?: string[];
+    /**
+     * Exact question displayed to the user.
+     */
+    question: string;
+    /**
+     * Runtime-owned response kind discriminator.
+     */
+    responseKind: "user_input";
+    /**
+     * Whether the answer was typed as free-form text rather than selected from the displayed choices.
+     */
+    wasFreeform: boolean;
+} | {
+    /**
+     * Actions offered by the plan review UI.
+     */
+    actions: ExitPlanModeAction[];
+    /**
+     * Whether the user approved the reviewed plan.
+     */
+    approved: boolean;
+    /**
+     * Whether the selected response requested edit auto-approval.
+     */
+    autoApproveEdits?: boolean;
+    /**
+     * Exact feedback submitted with the plan decision, when present.
+     */
+    feedback?: string;
+    /**
+     * Exact full plan content available from the review UI.
+     */
+    planContent: string;
+    recommendedAction: ExitPlanModeAction;
+    /**
+     * Runtime-owned response kind discriminator.
+     */
+    responseKind: "exit_plan_mode";
+    selectedAction?: ExitPlanModeAction;
+    /**
+     * Exact plan summary displayed to the user.
+     */
+    summary: string;
+};
 /**
  * Terminal status a workflow run committed. A settled run is never `pending` or `running`, so those two members of the run-status domain are deliberately absent.
  */
@@ -1271,7 +1380,7 @@ export type McpServerStatus =
  | "pending"
 /** The server is configured but disabled. */
  | "disabled"
-/** The server was intentionally stopped and can be restarted on demand when policy permits; a server quarantined by restrictive managed policy stays stopped and cannot be restarted until the policy allows it. */
+/** The server is not running: it may not have started yet, may have been explicitly stopped, or may be quarantined by restrictive managed policy. It can be restarted on demand when policy permits. */
  | "stopped"
 /** The server is not configured for this session. */
  | "not_configured";
@@ -1360,6 +1469,10 @@ export interface StartData {
      * Reasoning effort level used for model calls, if applicable (e.g. "none", "low", "medium", "high", "xhigh", "max")
      */
     reasoningEffort?: string;
+    /**
+     * Model that owns effort embedded in an authored model selection. Omitted for independent reasoning-effort overrides and legacy events.
+     */
+    reasoningEffortModel?: string;
     reasoningSummary?: ReasoningSummary;
     /**
      * Whether this session supports remote steering via GitHub
@@ -1512,6 +1625,10 @@ export interface ResumeData {
      * Reasoning effort level used for model calls, if applicable (e.g. "none", "low", "medium", "high", "xhigh", "max")
      */
     reasoningEffort?: string;
+    /**
+     * Model that owns effort embedded in an authored model selection. Omitted for independent reasoning-effort overrides and legacy events.
+     */
+    reasoningEffortModel?: string;
     reasoningSummary?: ReasoningSummary;
     /**
      * Whether this session supports remote steering via GitHub
@@ -2114,6 +2231,10 @@ export interface ModelChangeData {
      * Reasoning effort level after the model change, if applicable
      */
     reasoningEffort?: string | null;
+    /**
+     * Model that owns effort embedded in an authored model selection. Omitted for independent reasoning-effort overrides and legacy events.
+     */
+    reasoningEffortModel?: string;
     reasoningSummary?: ReasoningSummary;
     source?: ModelChangeSource;
     verbosity?: Verbosity;
@@ -5506,6 +5627,10 @@ export interface AssistantMessageReasoningBlocks {
      * Provider-native reasoning items or content blocks preserved verbatim, in order. A single response can carry several, and provider signatures or identifiers may depend on their exact content and ordering.
      */
     blocks?: JsonValue[];
+    /**
+     * Anthropic Messages assistant block ordering preserved when the legacy reasoning-only representation cannot reproduce it exactly. Thinking and text blocks remain verbatim; tool-use entries retain identity and a payload fingerprint when later signed reasoning depends on them, and are hydrated from the message's tool requests during replay.
+     */
+    orderedBlocks?: JsonValue[];
     /**
      * Model provider that produced these reasoning blocks.
      */
@@ -5804,6 +5929,10 @@ export interface AssistantUsageData {
      */
     apiCallId?: string;
     apiEndpoint?: AssistantUsageApiEndpoint;
+    /**
+     * Where the bring-your-own-key model runs and who manages it: "local_managed" (on the device, managed by Copilot), "local_user" (on the device, managed by the user), or "remote_user" (off the device, managed by the user). Absent for Copilot-served models.
+     */
+    byokKind?: string;
     /**
      * Updated prompt-cache expiration for this model call. Present only when the call establishes or refreshes known cache state.
      */
@@ -5877,6 +6006,10 @@ export interface AssistantUsageData {
      * Model identifier used for this API call
      */
     model: string;
+    /**
+     * Fixed-set provider family serving the bring-your-own-key model (for example "openai", "anthropic", "azure_openai", "ollama", "llama_cpp", or "other"). Never the caller-supplied provider name. Absent for Copilot-served models.
+     */
+    modelProvider?: string;
     /**
      * Number of output tokens produced
      */
@@ -5999,6 +6132,10 @@ export interface ModelCallFailureData {
     apiCallId?: string;
     apiEndpoint?: AssistantUsageApiEndpoint;
     badRequestKind?: ModelCallFailureBadRequestKind;
+    /**
+     * Where the bring-your-own-key model for the failed call runs and who manages it: "local_managed" (on the device, managed by Copilot), "local_user" (on the device, managed by the user), or "remote_user" (off the device, managed by the user). Absent for Copilot-served models.
+     */
+    byokKind?: string;
     /**
      * Duration of the failed API call in milliseconds
      */
@@ -6050,6 +6187,10 @@ export interface ModelCallFailureData {
      * Model identifier used for the failed API call
      */
     model?: string;
+    /**
+     * Fixed-set provider family serving the bring-your-own-key model for the failed call (for example "openai", "anthropic", "azure_openai", "ollama", "llama_cpp", or "other"). Never the caller-supplied provider name. Absent for Copilot-served models.
+     */
+    modelProvider?: string;
     /**
      * Parent task tool call ID when this failed model call belongs to a sub-agent
      */
@@ -6062,6 +6203,10 @@ export interface ModelCallFailureData {
      * Reasoning effort level used for the failed model call, if applicable
      */
     reasoningEffort?: string;
+    /**
+     * Serialized (uncompressed) byte length of the failed request body. A content-free size signal.
+     */
+    requestBodyBytes?: number;
     requestFingerprint?: ModelCallFailureRequestFingerprint;
     /**
      * Per-request treatment/eligibility signal returned by the Copilot API in the `X-GitHub-Copilot-Request-TE` response header for the associated model call; `false` when the header was absent or unparseable.
@@ -6397,7 +6542,8 @@ export interface ToolExecutionStartToolDescriptionMetaUI {
     visibility?: ToolExecutionStartToolDescriptionMetaUIVisibility[];
 }
 /**
- * Session event "tool.execution_partial_result". Streaming tool execution output for incremental result display
+ * @deprecated
+ * Session event "tool.execution_partial_result". Deprecated merged replacement snapshot of shell output. Use tool.shell_output for append-only, stream-tagged output instead.
  */
 export interface ToolExecutionPartialResultEvent {
     /**
@@ -6427,11 +6573,12 @@ export interface ToolExecutionPartialResultEvent {
     type: "tool.execution_partial_result";
 }
 /**
- * Streaming tool execution output for incremental result display
+ * @deprecated
+ * Deprecated merged replacement snapshot of shell output. Use tool.shell_output for append-only, stream-tagged output instead.
  */
 export interface ToolExecutionPartialData {
     /**
-     * Incremental output chunk from the running tool
+     * Merged replacement snapshot from the running shell, not an append-only chunk
      */
     partialOutput: string;
     /**
@@ -6439,6 +6586,54 @@ export interface ToolExecutionPartialData {
      */
     toolCallId: string;
 }
+/**
+ * Session event "tool.shell_output". Live, append-only shell output. Not persisted or replayed to late subscribers. Text is decoded and redacted per chunk; chunks need not contain complete lines.
+ */
+export interface ToolShellOutputEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: ToolShellOutputData;
+    /**
+     * Always true for events that are transient and not persisted to the session event log on disk.
+     */
+    ephemeral: true;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "tool.shell_output".
+     */
+    type: "tool.shell_output";
+}
+/**
+ * Live, append-only shell output. Not persisted or replayed to late subscribers. Text is decoded and redacted per chunk; chunks need not contain complete lines.
+ */
+export interface ToolShellOutputData {
+    /**
+     * Zero-based publication sequence across all output streams for this tool call. Not a byte offset or an OS write-order guarantee.
+     */
+    sequence: number;
+    stream?: ToolShellOutputStream;
+    /**
+     * New output to append, without synthetic shell-result markers or stream-switch separators
+     */
+    text: string;
+    /**
+     * Tool call ID that owns this shell output
+     */
+    toolCallId: string;
+}
 /**
  * Session event "tool.execution_progress". Tool execution progress notification with status message
  */
@@ -6523,6 +6718,12 @@ export interface ToolExecutionCompleteEvent {
  */
 export interface ToolExecutionCompleteData {
     error?: ToolExecutionCompleteError;
+    /**
+     * Experimental. File mutations actually committed by a built-in file editing tool, in execution order. Present on successful edits and on partial failures when earlier mutations were committed. Paths are absolute in the session filesystem namespace.
+     *
+     * @experimental
+     */
+    fileEdits?: ToolExecutionCompleteFileEdit[];
     /**
      * Experimental HydraFusion attribution for this tool completion.
      *
@@ -6601,6 +6802,17 @@ export interface ToolExecutionCompleteError {
     message: string;
     remediation?: RemediationAction;
 }
+/**
+ * A file mutation that was actually committed by a built-in file editing tool.
+ */
+/** @experimental */
+export interface ToolExecutionCompleteFileEdit {
+    kind: ToolExecutionCompleteFileEditKind;
+    /**
+     * Absolute path in the session filesystem namespace.
+     */
+    path: string;
+}
 /**
  * Tool execution result on success
  */
@@ -8646,6 +8858,8 @@ export interface PermissionApprovalEvaluation {
      | "action-too-long"
     /** The script path was not authorized for inspection. */
      | "path-not-authorized"
+    /** A code source was excluded from review by content exclusion policy. */
+     | "content-excluded"
     /** The script working directory was invalid. */
      | "invalid-working-directory"
     /** The script snapshot could not be read. */
@@ -8670,6 +8884,18 @@ export interface PermissionApprovalEvaluation {
      | "unreviewable-script-invocation"
     /** The script argument binding could not be reviewed. */
      | "argument-binding-unreviewable"
+    /** The shell command could not be analyzed for execution evidence. */
+     | "unsupported-command-shape"
+    /** The shell command used a code source that cannot be bound for review. */
+     | "unsupported-source"
+    /** The shell command used a code source computed at run time. */
+     | "dynamic-source"
+    /** The shell command referenced more code sources than can be reviewed. */
+     | "too-many-sources"
+    /** A code-bearing executable could not be inspected. */
+     | "executable-unavailable"
+    /** A code-bearing executable exceeded the binding size limit. */
+     | "executable-too-large"
     /** The script review metadata was malformed. */
      | "malformed-script-action-review"
     /** The script snapshot manifest was malformed. */
@@ -11663,6 +11889,51 @@ export interface ExitPlanModeCompletedData {
     requestId: string;
     selectedAction?: ExitPlanModeAction;
 }
+/**
+ * Session event "human_response.recorded". Durable request-correlated evidence for a typed response to a runtime-owned question or plan review.
+ */
+export interface HumanResponseRecordedEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: HumanResponseRecordedData;
+    /**
+     * When true, the event is transient and not persisted to the session event log on disk
+     */
+    ephemeral?: boolean;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "human_response.recorded".
+     */
+    type: "human_response.recorded";
+}
+/**
+ * Durable request-correlated evidence for a typed response to a runtime-owned question or plan review.
+ */
+export interface HumanResponseRecordedData {
+    actor: HumanResponseActor;
+    /**
+     * Request ID of the runtime-owned question or plan review.
+     */
+    requestId: string;
+    response: HumanResponseRecordedResponse;
+    /**
+     * Tool call ID that opened the request, when present.
+     */
+    toolCallId?: string;
+}
 /**
  * Session event "session.tools_updated". Payload of `session.tools_updated` identifying the model whose resolved tools were updated.
  */

package/dist/index.d.ts

@@ -11,7 +11,7 @@ export { BuiltInTools, ToolSet } from "./toolSet.js";
 export { CopilotSession, type AssistantMessageEvent } from "./session.js";
 export { defineWorkflow, WorkflowResumeError, isWorkflowRunTerminal } from "./workflow.js";
 export { Canvas, CanvasError, createCanvas, type CanvasAction, type CanvasDeclaration, type CanvasHostContext, type CanvasHostContextCapabilities, type CanvasJsonSchema, type CanvasOptions, } from "./canvas.js";
-export { defineTool, approveAll, createAttributedPermissionResult, convertMcpCallToolResult, createSessionFsAdapter, CopilotRequestHandler, CopilotWebSocketHandler, CopilotWebSocketCloseStatus, CopilotWebSocketForwarder, SessionFsSqliteTransactionFailure, SYSTEM_MESSAGE_SECTIONS, } from "./types.js";
+export { defineTool, approveAll, createAttributedPermissionResult, convertMcpCallToolResult, createSessionFsAdapter, CopilotRequestHandler, CopilotWebSocketHandler, CopilotWebSocketCloseStatus, CopilotWebSocketForwarder, SessionFsSqliteTransactionFailure, SessionFsWriteFailure, SYSTEM_MESSAGE_SECTIONS, } from "./types.js";
 export type * from "./generated/session-events.js";
-export type { AskUserVariant, CommandContext, CommandDefinition, CommandHandler, CanvasProviderIdentity, CloudSessionOptions, CloudSessionRepository, AuthIdentityMetadata, AuthInfoType, ConnectorAccountRequest, ConnectorAvailability, ConnectorCapabilities, ConnectorCatalogEntry, ConnectorCatalogResult, ConnectorCatalogStatus, ConnectorConnectRequest, ConnectorConnectResult, ConnectorContinueRequest, ConnectorDisconnectResult, ConnectorMcpStatus, ConnectorReconcileRequest, ConnectorRuntimeStatus, ConnectorSessionAccount, ConnectorSessionAccountResult, ConnectorStatus, AutoModeSwitchHandler, AutoModeSwitchRequest, AutoModeSwitchResponse, AgentStopHandler, AgentStopHookInput, AgentStopHookOutput, UserPromptTransformedHandler, UserPromptTransformedHookInput, UserPromptTransformedHookOutput, CopilotClientInfo, CopilotClientMode, CopilotClientOptions, InstallationConfirmationHandler, InstallationConfirmationRequest, InstallationConfirmationResponse, InstallationDecision, InstallationReview, McpInstallationReview, CopilotExpAssignmentResponse, StdioRuntimeConnection, InProcessRuntimeConnection, TcpRuntimeConnection, UriRuntimeConnection, ChildProcessRuntimeConnection, CustomAgentConfig, ElicitationFieldValue, ElicitationHandler, ElicitationParams, ElicitationContext, ElicitationResult, ElicitationSchema, ElicitationSchemaField, ExpConfigEntry, ExpFlagValue, ExitPlanModeHandler, ExitPlanModeRequest, ExitPlanModeResult, ExtensionLaunchProfile, ExtensionLaunchProvider, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, ExtensionInfo, ForegroundSessionInfo, GetAuthStatusResponse, GetStatusResponse, GitHubMcpToolConfig, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTokenProvider, GitHubTokenProviderArgs, GitHubTokenProviderResult, InfiniteSessionConfig, LargeToolOutputConfig, MemoryConfiguration, UiInputOptions, MCPStdioServerConfig, MCPHTTPServerConfig, MCPServerConfig, DefaultAgentConfig, BearerTokenProvider, ExtensionContextAttachment, MessageOptions, ResponseSchema, MessageSource, ManagedSettings, ManagedSettingsPermissions, ModelBilling, ModelBillingTokenPrices, ModelBillingTokenPricesLongContext, AutoTier, CapiSessionOptions, CurrentModel, ModelSwitchAutoTierResult, ModelSwitchAutoTierStatus, ModelCapabilities, ModelCapabilitiesOverride, ModelInfo, ModelPolicy, NamedProviderConfig, PermissionHandler, PermissionRequest, PermissionRequestedData, PermissionRequestedEvent, PermissionRequestResult, AttributedPermissionResult, PermissionDecisionContext, PermissionDecisionOutcome, PermissionDecisionSource, PermissionDecisionSurface, PermissionResponseCapability, ProviderConfig, ProviderModelConfig, ProviderTokenArgs, RemoteSessionMode, SandboxConfigSource, ResumeSessionConfig, TranscriptRecovery, SectionOverride, SectionOverrideAction, SectionTransformFn, SessionCapabilities, SessionConfig, SessionConfigBase, SessionEvent, SessionEventHandler, SessionEventPayload, SessionEventType, SessionLifecycleEvent, SessionLifecycleEventMetadata, SessionLifecycleEventType, SessionLifecycleHandler, SessionHooks, SessionCreatedEvent, SessionDeletedEvent, SessionUpdatedEvent, SessionForegroundEvent, SessionBackgroundEvent, SessionContext, SessionListFilter, SessionMetadata, SessionUiApi, SessionFsConfig, SessionFsProvider, SessionFsFileInfo, SessionFsSqliteQueryResult, SessionFsSqliteQueryType, SessionFsSqliteProvider, SessionFsSqliteStatement, SessionFsSqliteTransactionErrorClass, CopilotRequestContext, SystemMessageAppendConfig, SystemMessageConfig, SystemMessageCustomizeConfig, SystemMessageReplaceConfig, SystemMessageSection, TelemetryConfig, TraceContext, TraceContextProvider, Tool, ToolHandler, ToolInvocation, CurrentToolMetadata, ToolTelemetry, ToolResultObject, ToolSearchConfig, TypedSessionEventHandler, TypedSessionLifecycleHandler, ZodSchema, } from "./types.js";
+export type { AskUserVariant, CommandContext, CommandDefinition, CommandHandler, CanvasProviderIdentity, CloudSessionOptions, CloudSessionRepository, AuthIdentityMetadata, AuthInfoType, ConnectorAccountRequest, ConnectorAvailability, ConnectorCapabilities, ConnectorCatalogEntry, ConnectorCatalogResult, ConnectorCatalogStatus, ConnectorConnectRequest, ConnectorConnectResult, ConnectorContinueRequest, ConnectorDisconnectResult, ConnectorMcpStatus, ConnectorReconcileRequest, ConnectorRuntimeStatus, ConnectorSessionAccount, ConnectorSessionAccountResult, ConnectorStatus, AutoModeSwitchHandler, AutoModeSwitchRequest, AutoModeSwitchResponse, AgentStopHandler, AgentStopHookInput, AgentStopHookOutput, SubagentStartHandler, SubagentStartHookInput, SubagentStartHookOutput, SubagentStopHandler, SubagentStopHookInput, SubagentStopHookOutput, UserPromptTransformedHandler, UserPromptTransformedHookInput, UserPromptTransformedHookOutput, CopilotClientInfo, CopilotClientMode, CopilotClientOptions, InstallationConfirmationHandler, InstallationConfirmationRequest, InstallationConfirmationResponse, InstallationDecision, InstallationReview, McpInstallationReview, CopilotExpAssignmentResponse, StdioRuntimeConnection, InProcessRuntimeConnection, TcpRuntimeConnection, UriRuntimeConnection, ChildProcessRuntimeConnection, CustomAgentConfig, ElicitationFieldValue, ElicitationHandler, ElicitationParams, ElicitationContext, ElicitationResult, ElicitationSchema, ElicitationSchemaField, ExpConfigEntry, ExpFlagValue, ExitPlanModeHandler, ExitPlanModeRequest, ExitPlanModeResult, ExtensionLaunchProfile, ExtensionLaunchProvider, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, ExtensionInfo, ForegroundSessionInfo, GetAuthStatusResponse, GetStatusResponse, GitHubMcpToolConfig, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTokenProvider, GitHubTokenProviderArgs, GitHubTokenProviderResult, InfiniteSessionConfig, LargeToolOutputConfig, MemoryConfiguration, UiInputOptions, MCPStdioServerConfig, MCPHTTPServerConfig, MCPServerConfig, DefaultAgentConfig, BearerTokenProvider, ExtensionContextAttachment, MessageOptions, ResponseSchema, MessageSource, ManagedSettings, ManagedSettingsPermissions, ModelBilling, ModelBillingTokenPrices, ModelBillingTokenPricesLongContext, AutoTier, CapiSessionOptions, CurrentModel, ModelSwitchAutoTierResult, ModelSwitchAutoTierStatus, ModelCapabilities, ModelCapabilitiesOverride, ModelInfo, ModelPolicy, NamedProviderConfig, PermissionHandler, PermissionRequest, PermissionRequestedData, PermissionRequestedEvent, PermissionRequestResult, AttributedPermissionResult, PermissionDecisionContext, PermissionDecisionOutcome, PermissionDecisionSource, PermissionDecisionSurface, PermissionResponseCapability, ProviderConfig, ProviderConfigModelProvider, ProviderModelConfig, ProviderTokenArgs, RemoteSessionMode, SandboxConfigSource, ResumeSessionConfig, TranscriptRecovery, SectionOverride, SectionOverrideAction, SectionTransformFn, SessionCapabilities, SessionConfig, SessionConfigBase, SessionEvent, SessionEventHandler, SessionEventPayload, SessionEventType, SessionLifecycleEvent, SessionLifecycleEventMetadata, SessionLifecycleEventType, SessionLifecycleHandler, SessionHooks, SessionCreatedEvent, SessionDeletedEvent, SessionUpdatedEvent, SessionForegroundEvent, SessionBackgroundEvent, SessionContext, SessionListFilter, SessionMetadata, SessionUiApi, SessionFsConfig, SessionFsProvider, SessionFsFileInfo, SessionFsSqliteQueryResult, SessionFsSqliteQueryType, SessionFsSqliteProvider, SessionFsSqliteStatement, SessionFsSqliteTransactionErrorClass, SkillProvider, SkillProviderCallOptions, SkillProviderDescriptor, CopilotRequestContext, SystemMessageAppendConfig, SystemMessageConfig, SystemMessageCustomizeConfig, SystemMessageReplaceConfig, SystemMessageSection, TelemetryConfig, TraceContext, TraceContextProvider, Tool, ToolHandler, ToolInvocation, CurrentToolMetadata, ToolTelemetry, ToolResultObject, ToolSearchConfig, TypedSessionEventHandler, TypedSessionLifecycleHandler, ZodSchema, } from "./types.js";
 export type { JsonValue, WorkflowRunOptions, WorkflowResumeOptions, WorkflowLimitOverrides, WorkflowResumeErrorCode, SessionWorkflowApi, WorkflowAgentOptions, WorkflowContext, WorkflowDefinition, WorkflowHandle, WorkflowJsonSchema, WorkflowLimits, WorkflowMeta, WorkflowPipelineStage, WorkflowStepOptions, WorkflowRunResult, WorkflowRunStatus, WorkflowRunSummary, WorkflowListRunsOptions, WorkflowRunsPage, WorkflowRunDetail, WorkflowProgressPage, WorkflowProgressLine, WorkflowPhaseObservation, WorkflowPhaseStatus, WorkflowAgentSummary, } from "./workflow.js";

package/dist/index.js

@@ -22,6 +22,7 @@ import {
   CopilotWebSocketCloseStatus,
   CopilotWebSocketForwarder,
   SessionFsSqliteTransactionFailure,
+  SessionFsWriteFailure,
   SYSTEM_MESSAGE_SECTIONS
 } from "./types.js";
 export {
@@ -39,6 +40,7 @@ export {
   RuntimeConnection,
   SYSTEM_MESSAGE_SECTIONS,
   SessionFsSqliteTransactionFailure,
+  SessionFsWriteFailure,
   ToolSet,
   WorkflowResumeError,
   approveAll,

package/dist/runtimeArtifacts.js

@@ -30,6 +30,7 @@ const EXCLUDED_TOP_LEVEL = /* @__PURE__ */ new Set([
   "app.js",
   "assets",
   "changelog.json",
+  "cli-main.js",
   "copilot",
   "copilot.exe",
   "foundry-local-sdk",

package/dist/session.d.ts

@@ -1,7 +1,7 @@
 import { createSessionRpc } from "./generated/rpc.js";
 import type { ModelSwitchAutoTierResult } from "./generated/rpc.js";
 import type { OpenCanvasInstance } from "./generated/rpc.js";
-import type { MessageOptions, ResponseSchema, ContextTier, ReasoningEffort, ReasoningSummary, AutoTier, ModelCapabilitiesOverride, SessionCapabilities, SessionEvent, SessionEventHandler, SessionEventType, SessionUiApi, TranscriptRecovery, TypedSessionEventHandler } from "./types.js";
+import type { MessageOptions, ResponseSchema, ContextTier, ReasoningEffort, ReasoningSummary, AutoTier, ModelCapabilitiesOverride, SessionCapabilities, SessionEvent, SessionEventHandler, SessionEventType, SessionUiApi, Tool, TranscriptRecovery, TypedSessionEventHandler } from "./types.js";
 import { type SessionWorkflowApi } from "./workflow.js";
 /** Assistant message event - the final response from the assistant. */
 export type AssistantMessageEvent = Extract<SessionEvent, {
@@ -45,6 +45,8 @@ export declare class CopilotSession {
     private eventHandlers;
     private typedEventHandlers;
     private toolHandlers;
+    /** Settles once every earlier `setTools` call has finished. */
+    private setToolsQueue;
     private pendingExternalTools;
     private canvases;
     private bearerTokenProviders;
@@ -57,6 +59,7 @@ export declare class CopilotSession {
     private elicitationHandler?;
     private exitPlanModeHandler?;
     private autoModeSwitchHandler?;
+    private skillProvider?;
     private hooks?;
     private transformCallbacks?;
     private _rpc;
@@ -233,6 +236,12 @@ export declare class CopilotSession {
     private _confirm;
     private _select;
     private _input;
+    private requireSkillProvider;
+    /**
+     * Runs a provider call with an abort signal tied to the runtime's request
+     * cancellation. Failures are logged locally and reported generically.
+     */
+    private callSkillProvider;
     /**
      * Retrieves all events and messages from this session's history.
      *
@@ -364,6 +373,48 @@ export declare class CopilotSession {
      * ```
      */
     setAutoTier(autoTier: AutoTier | null): Promise<ModelSwitchAutoTierResult>;
+    /**
+     * Replace the tools this client supplies to the session.
+     *
+     * `tools` becomes the complete set of tools this client implements,
+     * replacing the ones it supplied when the session was created or resumed,
+     * or in an earlier call. Built-in, MCP, and plugin tools, and tools other
+     * connected clients supply, are unaffected. Pass an empty array to remove
+     * all of this client's tools.
+     *
+     * Tools are defined the same way as for `createSession`: calls to tools
+     * with a `handler` are dispatched to it, and tools without one are
+     * declaration-only. Once the runtime accepts the replacement, every tool
+     * call this session dispatches uses the new handlers; calls already
+     * running finish on their original handlers. If the runtime rejects the
+     * replacement, this rejects and the previous tools and handlers stay in
+     * place. Concurrent calls on the same session are applied one at a time,
+     * in the order they are made.
+     *
+     * The agent sees the new tools from its next model request, which can fall
+     * within a turn in progress. A model request already in flight was made
+     * with the previous tools, so the agent can still call a tool you removed.
+     * This session doesn't answer that call, and it can stay pending until the
+     * turn is aborted. If a running turn might still call a tool you remove,
+     * replace tools while the session is idle.
+     *
+     * @param tools - The complete set of tools this client supplies
+     *
+     * @experimental Wraps the experimental `session.tools.set` RPC and may change
+     * or be removed in a future release.
+     *
+     * @example
+     * ```typescript
+     * await session.setTools([
+     *     defineTool("search_issues", {
+     *         description: "Search the issues shown on the current page",
+     *         parameters: z.object({ query: z.string() }),
+     *         handler: async ({ query }) => searchIssues(query),
+     *     }),
+     * ]);
+     * ```
+     */
+    setTools(tools: Tool[]): Promise<void>;
     /**
      * Log a message to the session timeline.
      * The message appears in the session event stream and is visible to SDK consumers