@github/copilot-sdk 1.0.20 → 1.0.21-preview.0

package/dist/generated/rpc.js

@@ -362,6 +362,25 @@ function createServerRpc(connection) {
       disable: async (params) => connection.sendRequest("extensions.disable", params)
     },
     /** @experimental */
+    instructions: {
+      /**
+       * Discovers instruction sources across user, repository, and plugin sources.
+       *
+       * @param params Optional project paths to include in instruction discovery.
+       *
+       * @returns Instruction sources discovered across user, repository, and plugin sources.
+       */
+      discover: async (params) => connection.sendRequest("instructions.discover", params),
+      /**
+       * Returns the canonical files and directories where a client may create custom instructions that the runtime will recognize, including ones that do not exist yet. Repository targets become active once created.
+       *
+       * @param params Optional project paths to include when enumerating instruction discovery targets.
+       *
+       * @returns Canonical files and directories where custom instructions can be created so the runtime will recognize them.
+       */
+      getDiscoveryPaths: async (params) => connection.sendRequest("instructions.getDiscoveryPaths", params)
+    },
+    /** @experimental */
     skills: {
       /**
        * Plans installation of a verified Agent Finder Skill candidate without writing files. The returned review is safe to present to a user and installing always leaves the Skill disabled until separately enabled.
@@ -614,25 +633,6 @@ function createServerRpc(connection) {
       getDiscoveryPaths: async (params) => connection.sendRequest("agents.getDiscoveryPaths", params)
     },
     /** @experimental */
-    instructions: {
-      /**
-       * Discovers instruction sources across user, repository, and plugin sources.
-       *
-       * @param params Optional project paths to include in instruction discovery.
-       *
-       * @returns Instruction sources discovered across user, repository, and plugin sources.
-       */
-      discover: async (params) => connection.sendRequest("instructions.discover", params),
-      /**
-       * Returns the canonical files and directories where a client may create custom instructions that the runtime will recognize, including ones that do not exist yet. Repository targets become active once created.
-       *
-       * @param params Optional project paths to include when enumerating instruction discovery targets.
-       *
-       * @returns Canonical files and directories where custom instructions can be created so the runtime will recognize them.
-       */
-      getDiscoveryPaths: async (params) => connection.sendRequest("instructions.getDiscoveryPaths", params)
-    },
-    /** @experimental */
     commands: {
       /**
        * Lists the well-known built-in slash commands that work as the first message in a new session (e.g. /plan, /env), without requiring an active session. Commands that depend on session state, authentication, or a synced session are omitted.
@@ -1051,6 +1051,39 @@ function createInternalServerRpc(connection) {
      */
     connect: async (params) => connection.sendRequest("connect", params),
     /** @experimental */
+    account: {
+      /**
+       * Renders the sign-in banner and the one-line account description the runtime uses for an authentication identity. The runtime words these in several places for its own callers, so a host that announces a sign-in or an account switch should render them from here rather than composing its own, which would let the two spellings drift apart.
+       *
+       * @param params The authentication identity whose shared wording should be rendered.
+       *
+       * @returns The wording the runtime uses for an authentication identity.
+       */
+      describeAuthInfo: async (params) => connection.sendRequest("account.describeAuthInfo", params),
+      /**
+       * Reports whether the supplied identity can create gists. Gists are unavailable on GitHub Enterprise Cloud with data residency, and to Enterprise Managed Users on github.com, so a host that offers gist actions should hide or disable them when this reports no support.
+       *
+       * @param params The authentication identity whose gist support should be reported.
+       *
+       * @returns Whether the identity can create gists, and why not when it cannot.
+       */
+      getGistSupport: async (params) => connection.sendRequest("account.getGistSupport", params),
+      /**
+       * Resolves a path on the identity's GitHub host into an absolute URL, so a host can link to settings or documentation on the enterprise instance the user is signed in to rather than to github.com. Falls back to the public host when no identity is supplied.
+       *
+       * @param params A path to resolve against the GitHub host an identity is signed in to.
+       *
+       * @returns An absolute URL on the identity's GitHub host.
+       */
+      getWebUrl: async (params) => connection.sendRequest("account.getWebUrl", params),
+      /**
+       * Names the environment variable supplying a classic personal access token, if one is set. A classic token cannot be upgraded in place, so a host that finds one should tell the user which variable to unset rather than starting an interactive sign-in that the variable would override.
+       *
+       * @returns The environment variable supplying a classic personal access token, when one is set.
+       */
+      getTokenEnvVar: async () => connection.sendRequest("account.getTokenEnvVar", {})
+    },
+    /** @experimental */
     mcp: {
       /** @experimental */
       registry: {
@@ -1077,6 +1110,12 @@ function createInternalServerRpc(connection) {
          */
         cancel: async (params) => connection.sendRequest("mcp.registry.cancel", params)
       },
+      /**
+       * Lists the MCP servers the runtime supplies itself, so a host that disables the built-ins wholesale suppresses exactly the set the runtime would otherwise add. The names are fixed for a build and depend on no configuration, session or account.
+       *
+       * @returns Names of the MCP servers the runtime supplies itself.
+       */
+      listBuiltinServerNames: async () => connection.sendRequest("mcp.listBuiltinServerNames", {}),
       /**
        * Reports whether the gh-replaceable GitHub MCP tools may be clipped for a session, which a host feeds back as the `excludeGhReplaceableTools` build option. The tools are redundant only when the session can reach a shell *and* the host has the `gh` that would replace them, so both halves are decided here. The shell half runs the platform shell tool through the runtime's own tool-filter matcher, so entry forms like `builtin:bash` and `builtin:*` behave exactly as they do when a session builds its tool catalog. The host half probes for `gh`, and is skipped entirely when the filters already rule the shell out. Host presence alone is not enough: a session restricted to, say, `view` would otherwise lose the built-in issue-read fallback while having no shell to replace it with. The answer describes the host the runtime runs on, so it is never forwarded to a remote engine.
        *
@@ -1087,6 +1126,27 @@ function createInternalServerRpc(connection) {
       shouldExcludeGitHubTools: async (params) => connection.sendRequest("mcp.shouldExcludeGitHubTools", params)
     },
     /** @experimental */
+    instructions: {
+      /**
+       * Returns the prompt the `init` command runs to author repository instructions. A host offering its own initialize action sends this text so the instructions it produces match the ones the CLI produces. The text is fixed for a build and depends on no configuration, session or repository.
+       *
+       * @returns The prompt the init command runs.
+       */
+      getInitPrompt: async () => connection.sendRequest("instructions.getInitPrompt", {}),
+      /**
+       * Discovers the instruction sources for one caller-named location and returns them in the order the runtime applies them. `discover` answers for a set of project paths and derives the rest of its scope itself; this one instead takes every argument from the caller — the extra directories to scan and whether to descend into nested instruction files — and honors them as given. It also includes instruction directories from trusted repository settings, matching native repository discovery. Use it when the caller knows its own scope and no session exists to derive that scope from, such as a host reporting how many instruction files a directory contributes before any session starts. Marked internal because it exists to carry a CLI call site off the napi boundary onto the SDK contract; it is migration plumbing, not a surface consumers are meant to depend on.
+       *
+       * @param params Explicit discovery arguments for one location, supplied by the caller rather than derived from a session.
+       *
+       * @returns Instruction sources discovered across user, repository, and plugin sources.
+       */
+      discoverRepoSources: async (params) => connection.sendRequest("instructions.discoverRepoSources", params),
+      /**
+       * Drops the runtime's in-memory cache of discovered custom instructions so the next discovery reads them from disk again. A host calls this after it changes instruction files, or after it trusts a folder whose instructions an earlier discovery skipped, so that a session started afterwards sees the current files instead of a cached earlier answer. The call performs no I/O of its own and removes nothing from disk; it only invalidates, so the cost lands on the next discovery.         Returns once the cache is clear, which is what lets a caller order a session start after it. Marked internal because it exists to carry a CLI call site off the napi boundary onto the SDK contract; it is migration plumbing, not a surface consumers are meant to depend on.
+       */
+      clearCache: async () => connection.sendRequest("instructions.clearCache", {})
+    },
+    /** @experimental */
     agents: {
       /**
        * Lists the agents this runtime ships, by name. A consumer separating shipped agents from ones the user or a plugin authored should compare against these names rather than against `AgentInfo.source`: an authored agent may carry the `builtin` source while not being one of these, and the runtime treats the two as separate questions. `disableableNames` is the subset a user may turn off, which a client needs to decide whether to offer a toggle. `yamlBasedNames` is the subset backed by a shipped YAML definition, which a client needs before asking the runtime to load one.
@@ -1151,6 +1211,129 @@ function createInternalServerRpc(connection) {
       writeKey: async (params) => connection.sendRequest("globalState.writeKey", params)
     },
     /** @experimental */
+    user: {
+      /** @experimental */
+      settings: {
+        /**
+         * Resolves the on-disk locations of the settings files this runtime reads, so a consumer can show or open them. The user path is the same file `user.settings.get`, `user.settings.load`, and `user.settings.set` operate on. Supply `repoRoot` to also resolve that repository's checked-in and local settings paths. A path is reported whether or not the file exists.
+         *
+         * @param params Selects which settings file paths to resolve.
+         *
+         * @returns On-disk locations of the settings files this runtime reads. A path is reported whether or not the file exists.
+         */
+        getPaths: async (params) => connection.sendRequest("user.settings.getPaths", params),
+        /**
+         * Lists the top-level user-setting keys by who is allowed to govern them: `repo` keys a repository may override through `.github/copilot/settings.json`, `claudeRepo` keys a repository may override through a Claude-compatible config, and `managed` keys an enterprise policy may fix. The lists are static for a given runtime build and fail closed: a key absent from a list cannot be governed that way.
+         *
+         * @returns Top-level user-setting keys grouped by who may govern them.
+         */
+        listGovernanceKeys: async () => connection.sendRequest("user.settings.listGovernanceKeys", {}),
+        /**
+         * Atomically edits one canonical user setting inside its settings-file lock. Reads, canonicalizes touched aliases, applies the edit, validates the resulting top-level setting and writes before releasing the lock. An explicit autoUpdatesChannel set completes the staff migration in the same transaction. Only a malformed existing file returns `invalid`; refused keys, invalid values and I/O errors reject the call.
+         *
+         * @param params One atomic edit of a canonical setting in settings.json.
+         *
+         * @returns Outcome of an atomic user or repository settings edit.
+         */
+        edit: async (params) => connection.sendRequest("user.settings.edit", params),
+        /**
+         * Rewrites legacy and snake_case setting names in a settings object to their canonical spelling. A caller editing settings.json must normalize before writing: a legacy key left in place survives the write, is re-normalized on the next load, and silently shadows the canonical value the write just stored.
+         *
+         * @param params Settings object whose key names should be canonicalized.
+         *
+         * @returns Settings object with canonical key names.
+         */
+        normalize: async (params) => connection.sendRequest("user.settings.normalize", params),
+        /**
+         * Diagnoses a set of already-loaded settings layers, reporting each key that will not take effect and why. Settings load tolerantly so that one bad key does not stop a session from starting; this method surfaces what was dropped so a caller can report it instead of silently ignoring the user's intent. Takes the layers as given rather than reading them, so a caller can diagnose exactly the content it is showing, including unsaved edits. Never echoes a setting's value, because a value may be a token or another secret. Marked internal because it exists to carry a CLI call site off the native addon, not to serve a consumer-facing need; it becomes public once an SDK consumer needs to inspect settings health itself.
+         *
+         * @param params The settings layers to diagnose.
+         *
+         * @returns The settings that will not take effect across the given layers.
+         */
+        diagnoseProblems: async (params) => connection.sendRequest("user.settings.diagnoseProblems", params),
+        /**
+         * Validates one top-level setting subtree and writes just that key to settings.json as a single step. Doing both here closes the race a caller cannot close itself: between a separate preflight read and the write, the file may change. Rewriting only the touched key keeps legacy siblings out of settings.json. Answers a status rather than failing, so a validation problem and a write problem stay distinguishable.
+         *
+         * @param params A single top-level setting subtree to validate and write.
+         *
+         * @returns Outcome of validating and writing one top-level setting subtree.
+         */
+        applyTopKey: async (params) => connection.sendRequest("user.settings.applyTopKey", params),
+        /**
+         * Replaces the user settings file's entire content in one write. A key absent from `settings` is removed, which is what distinguishes this from `user.settings.set`: that one merges, so it can never clear a key the caller has dropped. For a caller saving the result of a raw edit, a merge would silently resurrect every key the user deleted. Records the same one-time mutation marks a per-key write records, so a setting the user has now chosen explicitly stops being migrated for them.
+         *
+         * @param params The whole content to store in the user settings file.
+         */
+        writeAll: async (params) => connection.sendRequest("user.settings.writeAll", params),
+        /**
+         * Merges a partial object into one top-level user setting, re-reading the stored value inside this runtime process's settings.json write lock so that concurrent writers in this process to different sub-fields of the same key do not clobber each other. Unlike `user.settings.set`, which replaces a key's whole value with what the caller last read, this keeps sub-fields the caller did not name when both the stored value and supplied value are objects; otherwise the supplied value replaces the stored value. Use it whenever two independent surfaces own different sub-fields of one setting. Returns the key's stored value after the write, in `value`.
+         *
+         * @param params Names the user setting to merge into, and the partial object to merge.
+         *
+         * @returns The stored value of the user setting after the merge.
+         */
+        update: async (params) => connection.sendRequest("user.settings.update", params),
+        /**
+         * Reads settings.json as stored for a caller that is about to edit it. Unlike `user.settings.get`, this returns file values rather than per-key metadata and defaults. Reports `missing` for an absent file and `invalid` when the existing file will not parse. Retired config.json and extensionless files are not read.
+         *
+         * @returns Contents of settings.json as stored, for a caller about to rewrite it.
+         */
+        loadForEdit: async () => connection.sendRequest("user.settings.loadForEdit", {}),
+        /**
+         * Validates one top-level setting subtree without writing it, reporting each problem with the path it applies to. Scoped to a single top-level key on purpose: validating the whole file would reject an edit whenever an unrelated pre-existing field is malformed, locking the user out of the very tool that could fix it.
+         *
+         * @param params A single top-level setting subtree to validate.
+         *
+         * @returns Outcome of validating one top-level setting subtree.
+         */
+        validate: async (params) => connection.sendRequest("user.settings.validate", params)
+      }
+    },
+    /** @experimental */
+    featureFlags: {
+      /**
+       * Lists every feature flag this runtime declares, with the population each one is declared for, its experimental description, and the online-experiment flag it maps to. This is the static catalog: it describes how each flag is defined, not whether it is on for anyone. Use `featureFlags.resolve` for static values with caller overrides, not active runtime values or experiment assignments.
+       *
+       * @returns Every feature flag this runtime declares, with the shape each one was declared with.
+       */
+      listMetadata: async () => connection.sendRequest("featureFlags.listMetadata", {}),
+      /**
+       * Computes static feature flags from the supplied population and overrides without changing runtime state or verifying audience membership. Starts from declared availability, then applies direct feature-flag environment values, user settings, and explicit `flagOverrides`. It does not apply `COPILOT_EXP_*` experiment assignments, authenticated startup gates, or active runtime state. Settings include `enabledFeatureFlags`, the legacy `feature_flags.enabled` list, and supported convenience settings. Supply `baseFlags` to use an existing flag set instead of declared availability. Omit `isStaffGitHub` or `isStaffMicrosoft` when membership was never recorded: a legacy staff account then counts as both populations.
+       *
+       * @param params Caller population and overrides for static feature-flag resolution, independent of experiment assignments and active runtime state.
+       *
+       * @returns The resolved feature flags, keyed by flag name.
+       */
+      resolve: async (params) => connection.sendRequest("featureFlags.resolve", params)
+    },
+    /** @experimental */
+    repo: {
+      /** @experimental */
+      settings: {
+        /**
+         * Reads one repository settings file without settings normalization or layering. The existing JSONC parser accepts comments and trailing commas and applies its prototype-safety rules. Missing or blank files return an empty valid config. Invalid files return an empty config with invalid=true; other read failures reject.
+         *
+         * @param params Which repository settings file to read.
+         *
+         * @returns Parsed repository settings without normalization or layering.
+         */
+        readRaw: async (params) => connection.sendRequest("repo.settings.readRaw", params),
+        /**
+         * Writes or removes one allowed top-level repository setting through the existing validator and file lock. Preserves unrelated stored keys. Invalid keys, values, existing documents, and I/O errors reject without replacing the file. Deletion requires delete=true; otherwise value must be present.
+         *
+         * @param params One key to write or remove in a repository settings file.
+         */
+        writeKey: async (params) => connection.sendRequest("repo.settings.writeKey", params),
+        /**
+         * Replaces the repository-overridable settings in one locked write. Allowed keys present in settings are validated and written; allowed keys absent from settings are removed. Other input keys are ignored, and unknown keys already stored in the file remain unchanged. Invalid values or an invalid existing file reject without a partial write.
+         *
+         * @param params The complete set of repository-overridable settings to store.
+         */
+        writeAll: async (params) => connection.sendRequest("repo.settings.writeAll", params)
+      }
+    },
+    /** @experimental */
     gitHubRepository: {
       /**
        * Resolves the GitHub repository that owns a working-tree path by reading the selected git remote configured for it, preferring `origin`. Returns a null `repository` when the path is inside a git working tree but that selected remote does not resolve to a GitHub host. Fails when the path is not inside a git working tree at all, so a caller can tell 'not a repository' apart from 'a repository with no GitHub remote'.
@@ -1695,6 +1878,14 @@ function createSessionRpc(connection, sessionId) {
        * @returns Update the session's reasoning effort without changing the selected model. Use `switchTo` instead when you also need to change the model. The runtime stores the effort on the session and applies it to subsequent turns.
        */
       setReasoningEffort: async (params) => connection.sendRequest("session.model.setReasoningEffort", { ...params, sessionId }),
+      /**
+       * Computes whether the session's current model shows reasoning summaries and how a host should present them: the default Ctrl+T visibility, reasoning headers, the hidden-summaries hint, and whether a persisted `showReasoning` setting is redundant. The runtime folds in the session's model catalog, selection and reasoning-summaries experiment assignment; the host supplies only its own persisted setting and current visibility. This method reads the session's resolved model catalog rather than resolving it, so call `session.model.list` first on a session that has not listed models or run a turn; until then the result is `ready: false`. A session that resolves models without a Copilot catalog, that is a BYOK registry or an alternate provider, never caches one and stays `ready: false`.
+       *
+       * @param params Host presentation state the reasoning-summaries policy depends on.
+       *
+       * @returns Reasoning-summaries presentation policy for the session's current model.
+       */
+      getReasoningSummaries: async (params) => connection.sendRequest("session.model.getReasoningSummaries", { ...params, sessionId }),
       /**
        * Lists models available to this session using its own auth and integration context. Connected hosts (CLI TUI, GitHub App) should call this through the session client so remote sessions return the remote CLI's available models rather than the caller's.
        *

package/dist/generated/session-events.d.ts

@@ -71,7 +71,9 @@ export type RemediationAction =
 /** Review or widen the sandbox policy. The blocked path or host is named by the accompanying message or by the tool result the action arrived with. */
  | "review_sandbox_policy"
 /** Permit outbound network access in the sandbox policy. */
- | "allow_sandbox_outbound";
+ | "allow_sandbox_outbound"
+/** Discard conversation history back through the blocked request before continuing. */
+ | "rewind_conversation";
 /**
  * The session mode the agent is operating in
  */
@@ -1942,7 +1944,7 @@ export interface ErrorData {
      */
     errorCode?: string;
     /**
-     * Category of error (e.g., "authentication", "authorization", "quota", "rate_limit", "context_limit", "query")
+     * Category of error (e.g., "authentication", "authorization", "policy", "quota", "rate_limit", "context_limit", "query")
      */
     errorType: string;
     /**
@@ -1953,6 +1955,14 @@ export interface ErrorData {
      * GitHub request tracing ID (x-github-request-id header) for correlating with server-side logs
      */
     providerCallId?: string;
+    /**
+     * Sanitized provider-defined error parameter preserved from a structured upstream error envelope, when available.
+     */
+    providerErrorParam?: string;
+    /**
+     * Provider-defined error type preserved from a structured upstream error envelope, when available (for example, `invalid_request_error`).
+     */
+    providerErrorType?: string;
     remediation?: RemediationAction;
     /**
      * Copilot service request ID (x-copilot-service-request-id header) for CAPI log correlation
@@ -4071,6 +4081,10 @@ export interface CompactionCompleteCompactionTokensUsed {
      */
     outputTokens?: number;
     provider?: ModelProviderRef;
+    /**
+     * Number of model requests represented by this aggregated compaction usage
+     */
+    requestCount?: number;
 }
 /**
  * Token usage detail for a single billing category
@@ -4197,6 +4211,14 @@ export interface PermissionRecoveryData {
      */
     maxAttempts: number;
     onBlocked: PermissionRecoveryOnBlocked;
+    /**
+     * Subagent identifier that owns this recovery episode when the request was delegated through a parent permission service
+     */
+    ownerAgentId?: string;
+    /**
+     * Root or child execution-session identifier that owns this recovery episode; omitted for legacy snapshots
+     */
+    ownerSessionId?: string;
     reason: PermissionRecoveryReason;
     status: PermissionRecoveryStatus;
 }
@@ -9158,6 +9180,14 @@ export interface PermissionRequestedEvent {
  */
 export interface PermissionRequestedData {
     agentMode?: SessionMode;
+    /**
+     * Delegated agent that owns permission recovery when the owner session multiplexes remote agents. Absent otherwise.
+     */
+    ownerAgentId?: string;
+    /**
+     * Execution session that owns permission recovery for this request. Absent on historical events.
+     */
+    ownerSessionId?: string;
     permissionMode?: PermissionMode;
     permissionRequest: PermissionRequest;
     promptRequest?: PermissionPromptRequest;

package/dist/index.d.ts

@@ -4,7 +4,7 @@
  * JSON-RPC based SDK for programmatic control of GitHub Copilot CLI
  */
 export { CopilotClient } from "./client.js";
-export type { HostLocalServerOptions, HostGitHubEnvironmentOptions } from "./generated/rpc.js";
+export type { HostLocalServerOptions, HostGitHubEnvironmentOptions, ModelGetReasoningSummariesRequest, ModelGetReasoningSummariesResult, } from "./generated/rpc.js";
 export { AhpHost, type AhpHostExit, type AhpHostOptions, type AhpSessionCreateRequest, type AhpSessionResumeRequest, } from "./host.js";
 export { DisableBypassPermissionsModes, RuntimeConnection } from "./types.js";
 export { BuiltInTools, ToolSet } from "./toolSet.js";

package/dist/types.d.ts

@@ -1574,6 +1574,8 @@ export type MCPServerConfig = MCPStdioServerConfig | MCPHTTPServerConfig;
  * Configuration for a custom agent.
  */
 export interface CustomAgentConfig {
+    /** Declarative hook actions keyed by event name, active only for this agent. */
+    hooks?: Record<string, Record<string, unknown>[]>;
     /**
      * Unique name of the custom agent.
      */
@@ -2411,7 +2413,11 @@ export interface SessionConfigBase {
      */
     agent?: string;
     /**
-     * Directories to load skills from.
+     * Explicit discovery-only skill roots. No general filesystem access is granted.
+     * Available without `enableConfigDiscovery`; skill and managed disables still apply.
+     * Relative paths resolve once when supplied against the request's effective
+     * `workingDirectory`, and retained roots do not move when it changes.
+     * Null and omission are equivalent; `[]` clears only the explicit SDK contribution.
      */
     skillDirectories?: string[];
     /**
@@ -2430,6 +2436,25 @@ export interface SessionConfigBase {
      * or be removed in future SDK or CLI releases.
      */
     skillProvider?: SkillProvider;
+    /**
+     * Explicit discovery-only agent roots, separate from `customAgents` objects.
+     * No general filesystem access is granted. Available without `enableConfigDiscovery`;
+     * source and managed disables still apply.
+     * Relative paths resolve once when supplied against the request's effective
+     * `workingDirectory`, and retained roots do not move when it changes.
+     * Null and omission are equivalent; `[]` clears only the explicit SDK contribution.
+     */
+    agentDirectories?: string[];
+    /**
+     * Explicit discovery-only file-hook roots, separate from callback `hooks`.
+     * No general filesystem access is granted. Available without `enableConfigDiscovery`
+     * or `enableFileHooks` (which controls repository-origin hooks only);
+     * hook and managed disables still apply.
+     * Relative paths resolve once when supplied against the request's effective
+     * `workingDirectory`, and retained roots do not move when it changes.
+     * Null and omission are equivalent; `[]` clears only the explicit SDK contribution.
+     */
+    hookDirectories?: string[];
     /**
      * Local filesystem paths to Open Plugins-format directories
      * (https://open-plugins.com/) to load for this session.
@@ -2445,7 +2470,12 @@ export interface SessionConfigBase {
      */
     pluginDirectories?: string[];
     /**
-     * Additional directories to search for custom instruction files.
+     * Explicit discovery-only instruction roots using the existing SDK instruction formats.
+     * No general filesystem access is granted. Available without `enableConfigDiscovery`;
+     * instruction and managed disables still apply.
+     * Relative paths resolve once when supplied against the request's effective
+     * `workingDirectory`, and retained roots do not move when it changes.
+     * Null and omission are equivalent; `[]` clears only the explicit SDK contribution.
      */
     instructionDirectories?: string[];
     /**
@@ -2549,9 +2579,9 @@ export interface SessionConfigBase {
      */
     enableOnDemandInstructionDiscovery?: boolean;
     /**
-     * When true, enables loading of file-based hooks from `.github/hooks/`.
-     * This is separate from the `hooks` callback parameter which gates SDK
-     * hook event registration.
+     * When true, enables repository-origin file hooks from `.github/hooks/` and
+     * trusted repository-configured roots. Does not control explicit `hookDirectories`
+     * or the `hooks` callback parameter.
      */
     enableFileHooks?: boolean;
     /**
@@ -2608,6 +2638,14 @@ export interface SessionConfig extends SessionConfigBase {
      * Optional custom session ID. If not provided, the server generates one.
      */
     sessionId?: string;
+    /**
+     * Names the session at creation, as `session.name.set` would, and is validated the
+     * same way: non-empty, no leading or trailing whitespace, at most 100 UTF-16 units,
+     * no control characters, and no double quotes. A name also makes the session persist
+     * from the start, so it can be listed and resumed without ever running a turn.
+     * Local sessions only: cloud creation rejects it.
+     */
+    name?: string;
     /**
      * Invalidates the process-wide custom-instruction discovery cache before
      * creating this session. Use when instruction files changed in the same runtime.

package/package.json

@@ -5,8 +5,8 @@
         "url": "https://github.com/github/copilot-agent-runtime.git",
         "directory": "src/sdk/nodejs"
     },
-    "version": "1.0.20",
-    "copilotCliVersion": "1.0.96",
+    "version": "1.0.21-preview.0",
+    "copilotCliVersion": "1.0.97-0",
     "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
     "main": "./dist/cjs/index.js",
     "types": "./dist/index.d.ts",
@@ -85,13 +85,12 @@
         "json-schema": "^0.4.0",
         "json-schema-to-typescript": "^15.0.4",
         "prettier": "^3.8.1",
-        "quicktype-core": "^23.2.6",
         "rimraf": "^6.1.2",
         "semver": "^7.7.3",
         "tar": "^7.5.22",
         "tsx": "^4.20.6",
         "typescript": "^5.0.0",
-        "vitest": "^4.0.18",
+        "vitest": "^4.1.11",
         "ws": "^8.21.0"
     },
     "engines": {
@@ -104,18 +103,18 @@
         "README.md"
     ],
     "copilotRuntime": {
-        "sourceSha": "8227e3a7b5f74c8dde298fcc69dcb27a9a044a93",
-        "version": "1.0.96",
+        "sourceSha": "6daac4f9a50868027282315612487d14f6f97878",
+        "version": "1.0.97-0",
         "visibility": "public"
     },
     "optionalDependencies": {
-        "@github/copilot-sdk-darwin-arm64": "1.0.20",
-        "@github/copilot-sdk-darwin-x64": "1.0.20",
-        "@github/copilot-sdk-linux-arm64": "1.0.20",
-        "@github/copilot-sdk-linux-x64": "1.0.20",
-        "@github/copilot-sdk-linuxmusl-arm64": "1.0.20",
-        "@github/copilot-sdk-linuxmusl-x64": "1.0.20",
-        "@github/copilot-sdk-win32-arm64": "1.0.20",
-        "@github/copilot-sdk-win32-x64": "1.0.20"
+        "@github/copilot-sdk-darwin-arm64": "1.0.21-preview.0",
+        "@github/copilot-sdk-darwin-x64": "1.0.21-preview.0",
+        "@github/copilot-sdk-linux-arm64": "1.0.21-preview.0",
+        "@github/copilot-sdk-linux-x64": "1.0.21-preview.0",
+        "@github/copilot-sdk-linuxmusl-arm64": "1.0.21-preview.0",
+        "@github/copilot-sdk-linuxmusl-x64": "1.0.21-preview.0",
+        "@github/copilot-sdk-win32-arm64": "1.0.21-preview.0",
+        "@github/copilot-sdk-win32-x64": "1.0.21-preview.0"
     }
 }