@github/copilot-sdk 1.0.19-preview.3 → 1.0.20-preview.0

package/README.md

@@ -1377,6 +1377,36 @@ const session = await client.createSession({
 });
 ```
 
+### Managed network policy for client-owned browsers
+
+Obtain a reusable `permissionsContext` from
+`client.rpc.managedSettings.resolve({ selectionId })` for account and device
+policy, or `session.rpc.managedSettings.get()` for the session's retained policy,
+including SDK injection and policy-helper rules. Omit `selectionId` for the current
+account, or device policy only when signed out. Resolution uses the managed-policy
+cache and can fetch server policy; keep it off latency-critical startup paths.
+Older runtimes may omit `permissionsContext`. Treat an absent context as unsupported
+evaluation, not unmanaged policy; do not navigate without a policy decision.
+
+Call `client.rpc.managedSettings.permissions.evaluate({ context: permissionsContext, operations: [{ kind: "url", url: "https://docs.example.com/guide" }] })`.
+This is pure, sessionless evaluation: it performs no policy discovery, I/O,
+prompting, or sandbox changes. Reuse an in-memory context for repeated checks and
+refresh it when managed policy changes. Retain the runtime-owned `permissions`
+object verbatim rather than rebuilding it from the flattened settings display.
+
+The result is `{ results: [{ operation, verdict }], failClosed }`, with one entry per
+input operation in the same order. `deny` blocks navigation, `ask` requires approval,
+`allow` approves under managed policy, and `unmanaged` leaves the consumer's normal
+permission flow in effect. A check never prompts or grants a saved approval.
+Invalid URLs reject the batch. Unknown policy rejects or returns `failClosed: true`
+with all URLs denied; do not navigate on an error.
+
+Check every navigation, redirect, and new-window destination before opening it.
+These APIs evaluate managed permission rules only: they do not replace browser
+security checks, user permissions, or sandbox policy. `permissions.limitTo` neither
+enables the sandbox nor changes `sandbox.userPolicy.network`; configure sandbox
+network restrictions explicitly.
+
 ### Permission Result Kinds
 
 The handler must return one of the `PermissionDecision` shapes (or `{ kind: "no-result" }`). Approval scopes are present-tense — they describe the decision to apply, not the outcome reported back on session events:

package/dist/cjs/cliVersion.js

@@ -22,7 +22,7 @@ __export(cliVersion_exports, {
   COPILOT_CLI_VERSION: () => COPILOT_CLI_VERSION
 });
 module.exports = __toCommonJS(cliVersion_exports);
-const COPILOT_CLI_VERSION = "1.0.95-3";
+const COPILOT_CLI_VERSION = "1.0.96-0";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/cjs/client.js

@@ -2455,6 +2455,7 @@ stderr: ${stderrOutput}`
   /** Starts the in-process FFI runtime with SDK-managed typed options. */
   async startInProcessFfi() {
     const explicitEntrypoint = this.resolvedEnv.COPILOT_CLI_PATH;
+    const cliLoginSyncIntegrationId = this.resolvedEnv.GITHUB_COPILOT_INTEGRATION_ID?.trim() || void 0;
     let runtimeLibrary;
     if (explicitEntrypoint) {
       const entrypointDirectory = (0, import_node_path.dirname)((0, import_node_path.resolve)(explicitEntrypoint));
@@ -2466,7 +2467,8 @@ stderr: ${stderrOutput}`
         "runtime.node"
       );
     } else {
-      runtimeLibrary = (0, import_node_path.join)((0, import_node_path.dirname)(await getBundledRuntimePath()), "runtime.node");
+      const bundledRuntimePath = await getBundledRuntimePath();
+      runtimeLibrary = (0, import_node_path.join)((0, import_node_path.dirname)(bundledRuntimePath), "runtime.node");
     }
     const { FfiRuntimeHost } = await import("./ffiRuntimeHost.js");
     const environment = {};
@@ -2495,6 +2497,9 @@ stderr: ${stderrOutput}`
     if (this.options.enableRemoteSessions) {
       args.push("--remote");
     }
+    if (cliLoginSyncIntegrationId) {
+      args.push(`--cli-login-sync-integration-id=${cliLoginSyncIntegrationId}`);
+    }
     const host = FfiRuntimeHost.create(runtimeLibrary, explicitEntrypoint, environment, args);
     this.ffiHost = host;
     await host.start();

package/dist/cjs/generated/rpc.js

@@ -707,6 +707,17 @@ function createServerRpc(connection) {
        * @returns Effective enterprise managed settings for an account, resolved without a session.
        */
       resolve: async (params) => connection.sendRequest("managedSettings.resolve", params),
+      /** @experimental */
+      permissions: {
+        /**
+         * Pure, sessionless evaluation of operations against a supplied permissionsContext. Performs no policy discovery, I/O, prompting, navigation, permission grants, or sandbox changes. Obtain the context from managedSettings.resolve or session.managedSettings.get, or reuse an in-memory context. Results preserve input order and duplicates. Consumers must block deny, obtain approval for ask, and use their normal permission flow for unmanaged. Unknown policy returns failClosed with every operation denied. This is not a substitute for user permissions or other security controls.
+         *
+         * @param params Managed policy context and ordered operations for pure, sessionless evaluation.
+         *
+         * @returns Ordered managed permission verdicts and the supplied policy's fail-closed posture.
+         */
+        evaluate: async (params) => connection.sendRequest("managedSettings.permissions.evaluate", params)
+      },
       /**
        * Returns the managed-settings authoring JSON schema with descriptive `x-composition` annotations aligned with the shared settings-engine vocabulary. These annotations are not a complete runtime composition contract: model, effortLevel, and contextTier remain coupled. Use `managedSettings.compose` for the runtime's effective result. Performs no I/O.
        *

package/dist/cliVersion.d.ts

@@ -1,2 +1,2 @@
-export declare const COPILOT_CLI_VERSION = "1.0.95-3";
+export declare const COPILOT_CLI_VERSION = "1.0.96-0";
 export declare const COPILOT_CLI_USE_NPM_PACKAGE = false;

package/dist/cliVersion.js

@@ -1,4 +1,4 @@
-const COPILOT_CLI_VERSION = "1.0.95-3";
+const COPILOT_CLI_VERSION = "1.0.96-0";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 export {
   COPILOT_CLI_USE_NPM_PACKAGE,

package/dist/client.js

@@ -2435,6 +2435,7 @@ stderr: ${stderrOutput}`
   /** Starts the in-process FFI runtime with SDK-managed typed options. */
   async startInProcessFfi() {
     const explicitEntrypoint = this.resolvedEnv.COPILOT_CLI_PATH;
+    const cliLoginSyncIntegrationId = this.resolvedEnv.GITHUB_COPILOT_INTEGRATION_ID?.trim() || void 0;
     let runtimeLibrary;
     if (explicitEntrypoint) {
       const entrypointDirectory = dirname(resolve(explicitEntrypoint));
@@ -2446,7 +2447,8 @@ stderr: ${stderrOutput}`
         "runtime.node"
       );
     } else {
-      runtimeLibrary = join(dirname(await getBundledRuntimePath()), "runtime.node");
+      const bundledRuntimePath = await getBundledRuntimePath();
+      runtimeLibrary = join(dirname(bundledRuntimePath), "runtime.node");
     }
     const { FfiRuntimeHost } = await import("./ffiRuntimeHost.js");
     const environment = {};
@@ -2475,6 +2477,9 @@ stderr: ${stderrOutput}`
     if (this.options.enableRemoteSessions) {
       args.push("--remote");
     }
+    if (cliLoginSyncIntegrationId) {
+      args.push(`--cli-login-sync-integration-id=${cliLoginSyncIntegrationId}`);
+    }
     const host = FfiRuntimeHost.create(runtimeLibrary, explicitEntrypoint, environment, args);
     this.ffiHost = host;
     await host.start();

package/dist/generated/rpc.d.ts

@@ -3,7 +3,7 @@
  * Generated from: api.schema.json
  */
 import type { MessageConnection } from "vscode-jsonrpc/node.js";
-import type { AbortReason, AgentModelPolicy, Attachment, AutoTier, ContextTier, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, IndexedSearchState, ManagedSettingsResolvedData, McpOauthHttpResponse, McpOauthWWWAuthenticateParams, McpServerMetadata, McpServerSource, McpServerStatus, ModelChangeSource, ModelProviderKind, ModelProviderRef, PermissionDecisionSource, PermissionMode, PermissionPromptRequest, PermissionRule, ProviderQuotaState, ReasoningSummary, RemediationAction, SessionEvent, SessionLimitsConfig, SessionMode, ShutdownType, SkillSource, TaskCompleteData, TaskCompletionOutcome, UsageGetMetricsResult, UserToolSessionApproval, Verbosity } from "./session-events.js";
+import type { AbortReason, AgentModelPolicy, Attachment, AutoTier, ContextTier, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, IndexedSearchState, ManagedPermissionsContext, ManagedSettingsResolvedData, McpOauthHttpResponse, McpOauthWWWAuthenticateParams, McpServerMetadata, McpServerSource, McpServerStatus, ModelChangeSource, ModelProviderKind, ModelProviderRef, PermissionDecisionSource, PermissionMode, PermissionPromptRequest, PermissionRule, ProviderQuotaState, ReasoningSummary, RemediationAction, SessionEvent, SessionLimitsConfig, SessionMode, ShutdownType, SkillSource, TaskCompleteData, TaskCompletionOutcome, UsageGetMetricsResult, UserToolSessionApproval, Verbosity } from "./session-events.js";
 /** A value that can be represented losslessly on the SDK JSON wire. */
 export type JsonValue = null | boolean | number | string | JsonValue[] | {
     [key: string]: JsonValue;
@@ -2569,6 +2569,33 @@ export type SessionLogLevel =
  | "warning"
 /** Error message describing a failure. */
  | "error";
+/** @experimental */
+export type ManagedPermissionOperation = {
+    /**
+     * Absolute HTTP(S) URL with a host. Invalid URLs reject the entire evaluation batch.
+     */
+    url: string;
+    /**
+     * Operation to evaluate. Currently only url is supported.
+     */
+    kind: "url";
+};
+/**
+ * Managed-policy verdict only: deny blocks the URL, ask requires approval, allow approves under managed policy, and unmanaged leaves the normal consumer permission flow in effect. No verdict bypasses other security controls.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedPermissionVerdict".
+ */
+/** @experimental */
+export type ManagedPermissionVerdict = 
+/** Managed policy prohibits the operation; do not offer approval. */
+"deny"
+/** Managed policy requires the consumer to obtain approval. */
+ | "ask"
+/** Managed policy allows the operation, subject to other security controls. */
+ | "allow"
+/** Managed policy does not decide the operation; use the consumer's normal permission flow. */
+ | "unmanaged";
 /**
  * What retrying did for one plugin required by managed settings.
  *
@@ -6721,6 +6748,10 @@ export interface AccountStatus {
      */
     login: string;
     kind: AccountKind;
+    /**
+     * Human-readable credential source used to authenticate this account, such as `gh` or `GITHUB_TOKEN`.
+     */
+    authSource?: string;
     /**
      * Opaque id of the account this one was derived from (e.g. an EMU account's base Entra identity); absent for a root account. Matches the base identity account's selectionId, forming the derivation edge.
      */
@@ -13666,6 +13697,42 @@ export interface ManagedMcpServerConfig {
      */
     headersRefreshTtlMs?: number;
 }
+/** @experimental */
+export interface ManagedPermissionEvaluation {
+    operation: ManagedPermissionOperation;
+    verdict: ManagedPermissionVerdict;
+}
+/**
+ * Managed policy context and ordered operations for pure, sessionless evaluation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedPermissionsEvaluateRequest".
+ */
+/** @experimental */
+export interface ManagedPermissionsEvaluateRequest {
+    context: ManagedPermissionsContext;
+    /**
+     * Operations to evaluate, preserving input order and duplicates. An empty batch is valid.
+     */
+    operations: ManagedPermissionOperation[];
+}
+/**
+ * Ordered managed permission verdicts and the supplied policy's fail-closed posture.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedPermissionsEvaluateResult".
+ */
+/** @experimental */
+export interface ManagedPermissionsEvaluateResult {
+    /**
+     * One verdict per input operation, in the same order, including duplicates.
+     */
+    results: ManagedPermissionEvaluation[];
+    /**
+     * Managed permission policy could not be determined; every operation is denied.
+     */
+    failClosed: boolean;
+}
 /**
  * Retry outcome for one plugin required by managed settings.
  *
@@ -13863,6 +13930,7 @@ export interface ManagedSettingsResolveRequest {
  */
 /** @experimental */
 export interface ManagedSettingsResolveResult {
+    permissionsContext?: ManagedPermissionsContext;
     /**
      * Printable opaque identity of the account the settings were resolved for, suitable for comparison and storage, not an account selectionId. Absent when no account was available, in which case only device policy is reported.
      */
@@ -29991,6 +30059,37 @@ export interface HostGetConfigurationResult {
 /** @experimental */
 export interface HostReadyResult {
 }
+/**
+ * Ordered managed permission verdicts and the supplied policy's fail-closed posture.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedSettingsPermissionsEvaluateResult".
+ */
+/** @experimental */
+export interface ManagedSettingsPermissionsEvaluateResult {
+    /**
+     * One verdict per input operation, in the same order, including duplicates.
+     */
+    results: ManagedPermissionEvaluation[];
+    /**
+     * Managed permission policy could not be determined; every operation is denied.
+     */
+    failClosed: boolean;
+}
+/**
+ * Managed policy context and ordered operations for pure, sessionless evaluation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedSettingsPermissionsEvaluateRequest".
+ */
+/** @experimental */
+export interface ManagedSettingsPermissionsEvaluateRequest {
+    context: ManagedPermissionsContext;
+    /**
+     * Operations to evaluate, preserving input order and duplicates. An empty batch is valid.
+     */
+    operations: ManagedPermissionOperation[];
+}
 /** @experimental */
 export interface SessionWorkflowPauseAtCheckpointResult {
     action: WorkflowPauseCheckpointAction;
@@ -31184,6 +31283,17 @@ export declare function createServerRpc(connection: MessageConnection): {
          * @returns Effective enterprise managed settings for an account, resolved without a session.
          */
         resolve: (params: ManagedSettingsResolveRequest) => Promise<ManagedSettingsResolveResult>;
+        /** @experimental */
+        permissions: {
+            /**
+             * Pure, sessionless evaluation of operations against a supplied permissionsContext. Performs no policy discovery, I/O, prompting, navigation, permission grants, or sandbox changes. Obtain the context from managedSettings.resolve or session.managedSettings.get, or reuse an in-memory context. Results preserve input order and duplicates. Consumers must block deny, obtain approval for ask, and use their normal permission flow for unmanaged. Unknown policy returns failClosed with every operation denied. This is not a substitute for user permissions or other security controls.
+             *
+             * @param params Managed policy context and ordered operations for pure, sessionless evaluation.
+             *
+             * @returns Ordered managed permission verdicts and the supplied policy's fail-closed posture.
+             */
+            evaluate: (params: ManagedSettingsPermissionsEvaluateRequest) => Promise<ManagedSettingsPermissionsEvaluateResult>;
+        };
         /**
          * Returns the managed-settings authoring JSON schema with descriptive `x-composition` annotations aligned with the shared settings-engine vocabulary. These annotations are not a complete runtime composition contract: model, effortLevel, and contextTier remain coupled. Use `managedSettings.compose` for the runtime's effective result. Performs no I/O.
          *

package/dist/generated/rpc.js

@@ -679,6 +679,17 @@ function createServerRpc(connection) {
        * @returns Effective enterprise managed settings for an account, resolved without a session.
        */
       resolve: async (params) => connection.sendRequest("managedSettings.resolve", params),
+      /** @experimental */
+      permissions: {
+        /**
+         * Pure, sessionless evaluation of operations against a supplied permissionsContext. Performs no policy discovery, I/O, prompting, navigation, permission grants, or sandbox changes. Obtain the context from managedSettings.resolve or session.managedSettings.get, or reuse an in-memory context. Results preserve input order and duplicates. Consumers must block deny, obtain approval for ask, and use their normal permission flow for unmanaged. Unknown policy returns failClosed with every operation denied. This is not a substitute for user permissions or other security controls.
+         *
+         * @param params Managed policy context and ordered operations for pure, sessionless evaluation.
+         *
+         * @returns Ordered managed permission verdicts and the supplied policy's fail-closed posture.
+         */
+        evaluate: async (params) => connection.sendRequest("managedSettings.permissions.evaluate", params)
+      },
       /**
        * Returns the managed-settings authoring JSON schema with descriptive `x-composition` annotations aligned with the shared settings-engine vocabulary. These annotations are not a complete runtime composition contract: model, effortLevel, and contextTier remain coupled. Use `managedSettings.compose` for the runtime's effective result. Performs no I/O.
        *

package/dist/generated/session-events.d.ts

@@ -435,6 +435,38 @@ export type ProviderQuotaCapacityState =
  | "unknown"
 /** Client-only compatibility placeholder when acquisitionStatus is unavailable or failed; not an observed service verdict. */
  | "unavailable";
+/**
+ * Identity scope of a monthly usage reading.
+ */
+export type ProviderMonthlyUsageScope = 
+/** Consumption of the authenticated user within the parent observation's service and returned cycle. */
+"user"
+/** The service did not establish a recognized usage scope. */
+ | "unknown";
+/**
+ * Availability of a service's monthly consumption reading.
+ */
+export type ProviderMonthlyUsageState = 
+/** The service reported a usable consumption reading, including an explicit zero. */
+"available"
+/** The service found no usage policy; no consumption amount is known. */
+ | "no_policy"
+/** The read failed or its data could not be used; consumption is unknown. */
+ | "unavailable"
+/** The service reported an unrecognized usage state. */
+ | "unknown";
+/**
+ * Units explicitly reported by a quota provider.
+ */
+export type ProviderQuotaUnit = 
+/** AI credits, not tokens or currency. */
+"ai_credits"
+/** Requests charged against an entitlement. */
+ | "requests"
+/** Model tokens. */
+ | "tokens"
+/** The observation does not establish a quantity unit. */
+ | "unknown";
 /**
  * Timing and purpose of a provider quota observation.
  */
@@ -453,18 +485,6 @@ export type ProviderQuotaQuantityKind =
  | "advisory_balance"
 /** No quantity measurement, as with admission-only response headers. */
  | "none";
-/**
- * Units explicitly reported by a quota provider.
- */
-export type ProviderQuotaUnit = 
-/** AI credits, not tokens or currency. */
-"ai_credits"
-/** Requests charged against an entitlement. */
- | "requests"
-/** Model tokens. */
- | "tokens"
-/** The observation does not establish a quantity unit. */
- | "unknown";
 /**
  * What initiated a conversation compaction
  */
@@ -764,6 +784,16 @@ export type AssistantUsageApiEndpoint =
  | "/responses"
 /** WebSocket Responses API endpoint. */
  | "ws:/responses";
+/**
+ * Content-Encoding applied to the request body sent on the wire
+ */
+export type ModelCallRequestBodyEncoding = 
+/** The request body was sent uncompressed (including every WebSocket request). */
+"identity"
+/** The request body was sent gzip-compressed. */
+ | "gzip"
+/** The request body was sent zstd-compressed. */
+ | "zstd";
 /**
  * Transport used for a successful model call
  */
@@ -772,6 +802,34 @@ export type AssistantUsageTransport =
 "http"
 /** WebSocket transport. */
  | "websocket";
+/**
+ * Normalized cause of the WebSocket failure that triggered the HTTP fallback
+ */
+export type ModelCallWebSocketFallbackErrorKind = 
+/** DNS resolution of the WebSocket host failed. */
+"dns"
+/** The TLS handshake or a TLS record failed. */
+ | "tls"
+/** A WebSocket connect or read timed out. */
+ | "timeout"
+/** The peer refused the TCP connection. */
+ | "connection_refused"
+/** The connection was reset, aborted, or ended mid-stream without a close. */
+ | "connection_reset"
+/** The peer closed the WebSocket. */
+ | "closed_by_peer"
+/** The runtime closed the WebSocket itself. */
+ | "closed_locally"
+/** The socket was already closed before it was used. */
+ | "not_connected"
+/** The upgrade or request was rejected with an HTTP status. */
+ | "http_status"
+/** A WebSocket protocol violation or an undecodable frame. */
+ | "protocol"
+/** The WebSocket request could not be built. */
+ | "configuration"
+/** A failure that maps onto none of the other kinds. */
+ | "other";
 /**
  * Why a WebSocket-capable model call was carried by the HTTP fallback
  */
@@ -3569,6 +3627,7 @@ export interface ProviderQuotaState {
      * HTTP status from acquisition, when available.
      */
     httpStatus?: number;
+    monthlyUsage?: ProviderMonthlyUsage;
     observationKind?: ProviderQuotaObservationKind;
     /**
      * When the runtime observed this reading, not a charge timestamp or guarantee that consumption has settled.
@@ -3643,6 +3702,31 @@ export interface ProviderQuotaBudgetMetadata {
      */
     usageAllowedWhenExhausted: boolean;
 }
+/**
+ * An authoritative monthly usage reading for the observation's provider, account, and service.
+ */
+/** @experimental */
+export interface ProviderMonthlyUsage {
+    /**
+     * Nonnegative finite consumption reported by the service, preserving zero and fractions. Present only when state is available; never computed from tokens or balance differences.
+     */
+    consumedQuantity?: number;
+    /**
+     * Start of the service-reported monthly billing cycle, in UTC RFC 3339.
+     */
+    cycleStart?: string;
+    /**
+     * Service read time in UTC RFC 3339, not a ledger reconciliation watermark or confirmation of the latest inference charge.
+     */
+    queriedAt?: string;
+    /**
+     * End of the service-reported monthly billing cycle, in UTC RFC 3339.
+     */
+    resetOn?: string;
+    scope: ProviderMonthlyUsageScope;
+    state: ProviderMonthlyUsageState;
+    unit: ProviderQuotaUnit;
+}
 /**
  * Session event "session.context_changed". Updated working directory and git context after the change
  */
@@ -6614,9 +6698,14 @@ export interface AssistantUsageData {
      */
     rejectedPredictionTokens?: number;
     /**
-     * Serialized (uncompressed) byte length of the request body. A content-free size signal.
+     * Serialized (uncompressed) byte length of the request body, before any Content-Encoding. A content-free size signal.
      */
     requestBodyBytes?: number;
+    requestBodyEncoding?: ModelCallRequestBodyEncoding;
+    /**
+     * Byte length of the request body actually sent on the wire for the attempt that produced this outcome, after any Content-Encoding. Equals requestBodyBytes when the body was not compressed.
+     */
+    requestBodyWireBytes?: number;
     /**
      * Per-request treatment/eligibility signal returned by the Copilot API in the `X-GitHub-Copilot-Request-TE` response header for the associated model call; `false` when the header was absent or unparseable.
      */
@@ -6634,7 +6723,24 @@ export interface AssistantUsageData {
      * Milliseconds spent on the WebSocket attempt before falling back to HTTP
      */
     websocketFallbackAfterMs?: number;
+    /**
+     * WebSocket close code received before the HTTP fallback
+     */
+    websocketFallbackCloseCode?: number;
+    websocketFallbackErrorKind?: ModelCallWebSocketFallbackErrorKind;
     websocketFallbackReason?: ModelCallWebSocketFallbackReason;
+    /**
+     * Whether a WebSocket reconnect was attempted before falling back to HTTP
+     */
+    websocketFallbackReconnectAttempted?: boolean;
+    /**
+     * Whether the HTTP fallback started during this model call, rather than being inherited from an earlier call
+     */
+    websocketFallbackStartedThisCall?: boolean;
+    /**
+     * HTTP status of the WebSocket upgrade rejection or WebSocket API error that triggered the HTTP fallback
+     */
+    websocketFallbackStatusCode?: number;
 }
 /**
  * Ordered accounting identity assigned under the source session's emission lock.
@@ -6803,9 +6909,14 @@ export interface ModelCallFailureData {
      */
     reasoningEffort?: string;
     /**
-     * Serialized (uncompressed) byte length of the failed request body. A content-free size signal.
+     * Serialized (uncompressed) byte length of the failed request body, before any Content-Encoding. A content-free size signal.
      */
     requestBodyBytes?: number;
+    requestBodyEncoding?: ModelCallRequestBodyEncoding;
+    /**
+     * Byte length of the failed request body actually sent on the wire, after any Content-Encoding. Equals requestBodyBytes when the body was not compressed.
+     */
+    requestBodyWireBytes?: number;
     requestFingerprint?: ModelCallFailureRequestFingerprint;
     /**
      * Zero-based orchestrator retry index of the failed attempt
@@ -6829,7 +6940,24 @@ export interface ModelCallFailureData {
      * Milliseconds spent on the WebSocket attempt before falling back to HTTP
      */
     websocketFallbackAfterMs?: number;
+    /**
+     * WebSocket close code received before the HTTP fallback
+     */
+    websocketFallbackCloseCode?: number;
+    websocketFallbackErrorKind?: ModelCallWebSocketFallbackErrorKind;
     websocketFallbackReason?: ModelCallWebSocketFallbackReason;
+    /**
+     * Whether a WebSocket reconnect was attempted before falling back to HTTP
+     */
+    websocketFallbackReconnectAttempted?: boolean;
+    /**
+     * Whether the HTTP fallback started during this model call, rather than being inherited from an earlier call
+     */
+    websocketFallbackStartedThisCall?: boolean;
+    /**
+     * HTTP status of the WebSocket upgrade rejection or WebSocket API error that triggered the HTTP fallback
+     */
+    websocketFallbackStatusCode?: number;
 }
 /**
  * Content-free structural summary of the failing request for diagnosing malformed 4xx calls
@@ -12301,6 +12429,7 @@ export interface ManagedSettingsResolvedData {
      * Whether at least two managed sources supplied permission allowlists, so enforcement intersects them and the flattened settings payload omits `permissions.allow`.
      */
     permissionsAllowIntersected?: boolean;
+    permissionsContext?: ManagedPermissionsContext;
     /**
      * Whether the policy-helper managed-settings layer was present. The policy helper is the weakest channel: it fills keys no enterprise source set and can never replace one.
      */
@@ -12319,6 +12448,19 @@ export interface ManagedSettingsResolvedData {
     settings?: JsonValue;
     source: ManagedSettingsResolvedSource;
 }
+/**
+ * Reusable managed permission evaluation context. Treat permissions as runtime-owned policy data and retain it verbatim; it includes source-aware composition metadata. This is a snapshot, not a capability or approval token; only use contexts obtained from trusted policy sources.
+ */
+export interface ManagedPermissionsContext {
+    /**
+     * Policy could not be determined; evaluation must deny every operation.
+     */
+    failClosed: boolean;
+    /**
+     * Runtime-owned composed permissions object. Absent when no permission policy is configured.
+     */
+    permissions?: JsonValue;
+}
 /**
  * Session event "session.managed_settings_enforced". Runtime enforcement of enterprise managed settings: fires when the session blocks or caps a runtime action because enterprise policy governs it, so SDK clients can explain *why* an action was governed. Unlike `session.managed_settings_resolved` (which reports *what* is managed), this reports a concrete governed action — e.g. a user or host tried to turn on bypass permissions or Assisted Permissions while the corresponding policy disables it. Emitted live (not persisted to the session event log) on user/host-initiated attempts only, never for silent policy application. Marked experimental while the managed-settings surface stabilizes.
  */

package/package.json

@@ -5,8 +5,8 @@
         "url": "https://github.com/github/copilot-agent-runtime.git",
         "directory": "src/sdk/nodejs"
     },
-    "version": "1.0.19-preview.3",
-    "copilotCliVersion": "1.0.95-3",
+    "version": "1.0.20-preview.0",
+    "copilotCliVersion": "1.0.96-0",
     "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
     "main": "./dist/cjs/index.js",
     "types": "./dist/index.d.ts",
@@ -104,18 +104,18 @@
         "README.md"
     ],
     "copilotRuntime": {
-        "sourceSha": "f5ba50575c25c247798fb12ded26c48b421577ce",
-        "version": "1.0.95-3",
+        "sourceSha": "2d97cdf84e4eed006767c83f2e6dc61b07754b35",
+        "version": "1.0.96-0",
         "visibility": "public"
     },
     "optionalDependencies": {
-        "@github/copilot-sdk-darwin-arm64": "1.0.19-preview.3",
-        "@github/copilot-sdk-darwin-x64": "1.0.19-preview.3",
-        "@github/copilot-sdk-linux-arm64": "1.0.19-preview.3",
-        "@github/copilot-sdk-linux-x64": "1.0.19-preview.3",
-        "@github/copilot-sdk-linuxmusl-arm64": "1.0.19-preview.3",
-        "@github/copilot-sdk-linuxmusl-x64": "1.0.19-preview.3",
-        "@github/copilot-sdk-win32-arm64": "1.0.19-preview.3",
-        "@github/copilot-sdk-win32-x64": "1.0.19-preview.3"
+        "@github/copilot-sdk-darwin-arm64": "1.0.20-preview.0",
+        "@github/copilot-sdk-darwin-x64": "1.0.20-preview.0",
+        "@github/copilot-sdk-linux-arm64": "1.0.20-preview.0",
+        "@github/copilot-sdk-linux-x64": "1.0.20-preview.0",
+        "@github/copilot-sdk-linuxmusl-arm64": "1.0.20-preview.0",
+        "@github/copilot-sdk-linuxmusl-x64": "1.0.20-preview.0",
+        "@github/copilot-sdk-win32-arm64": "1.0.20-preview.0",
+        "@github/copilot-sdk-win32-x64": "1.0.20-preview.0"
     }
 }