@github/copilot-sdk 1.0.21 → 1.0.22-preview.1

package/README.md

@@ -375,11 +375,13 @@ Create a new conversation session.
 - `workingDirectory?: string` - Working directory for the session (default: runtime process cwd).
 - `refreshCustomInstructions?: boolean` - Invalidates the process-wide custom-instruction discovery cache before creating this session, so instruction-file edits made in the same runtime are read again. Defaults to `false` (cache reuse). Other sessions in this runtime may observe updated instructions on later turns or discovery. This does not watch files or enable disabled instruction loading. Available on `SessionConfig`, not `ResumeSessionConfig`.
 - `enableSessionStore?: boolean` - Enables the cross-session store for search and retrieval across sessions. When unset in `"copilot-cli"` mode, the runtime default applies (enabled). In `"empty"` mode, defaults to disabled.
+- `enableGitHubCacheStore?: boolean` - Requests the read-only GitHub cache store (`github-cache-store` capability) on create or resume. The runtime registers the `github_sql` tool only when its `GITHUB_CACHE_STORE` feature flag is also on. Defaults to disabled in every mode.
 - `gitHubTokenProvider?: GitHubTokenProvider` - Acquires rotating, session-scoped GitHub tokens. Token results require a positive `expiresIn` value in seconds remaining when the callback completes; production tokens typically last eight hours. Cannot be combined with `gitHubToken`.
 - `provider?: ProviderConfig` - Custom API provider configuration (BYOK - Bring Your Own Key). See [Custom Providers](#custom-providers) section.
 - `onPermissionRequest?: PermissionHandler` - Optional handler called before each tool execution to approve or deny it. When omitted, permission requests are emitted as events and left pending for manual resolution. `approveAll` approves requests when managed settings are disabled and throws when `enableManagedSettings` is true. Custom handlers can inspect `managedApprovalRequired` for human-facing confirmation logic. See [Permission Handling](#permission-handling) section.
 - `onUserInputRequest?: UserInputHandler` - Handler for legacy question-and-answer requests from the agent. Enables the legacy `ask_user` tool. See [User Input Requests](#user-input-requests) section.
 - `askUserVariant?: "legacy" | "elicitation"` - Selects the model-facing `ask_user` tool shape when creating or cold-resuming a session. Defaults to `"legacy"`; use `"elicitation"` with `onElicitationRequest`.
+- `interactiveUser?: boolean` - Declares that a person types this session's messages, as in an editor chat panel. Enables the runtime's user-message analysis telemetry for user-authored messages; automated messages stay excluded. Defaults to `false`. Ignored for cloud sessions. Re-supply it when cold-resuming a session; it is ignored when resuming a session that is already active.
 - `onElicitationRequest?: ElicitationHandler` - Handler for elicitation requests dispatched by the server. Enables this client to present form-based UI dialogs on behalf of the agent or other session participants. See [Elicitation Requests](#elicitation-requests) section.
 - `hooks?: SessionHooks` - Hook handlers for session lifecycle events. See [Session Hooks](#session-hooks) section.
 - `skillProvider?: SkillProvider` - **Experimental.** Serves skills from host storage instead of skill directories. Not persisted; pass it again on resume. See [Skill providers](#skill-providers-experimental).

package/dist/cjs/cliVersion.js

@@ -22,7 +22,7 @@ __export(cliVersion_exports, {
   COPILOT_CLI_VERSION: () => COPILOT_CLI_VERSION
 });
 module.exports = __toCommonJS(cliVersion_exports);
-const COPILOT_CLI_VERSION = "1.0.97";
+const COPILOT_CLI_VERSION = "1.0.98-1";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/cjs/client.js

@@ -1375,6 +1375,7 @@ class CopilotClient {
         enableFileHooks: config.enableFileHooks,
         enableHostGitOperations: config.enableHostGitOperations,
         enableSessionStore: config.enableSessionStore,
+        enableGitHubCacheStore: config.enableGitHubCacheStore,
         enableSkills: config.enableSkills,
         skillDirectories: config.skillDirectories,
         ...config.skillProvider ? { hasSkillProvider: true } : {},
@@ -1394,6 +1395,7 @@ class CopilotClient {
         expAssignments: config.expAssignments,
         enableManagedSettings: config.enableManagedSettings,
         enforceManagedModelDefaults: config.enforceManagedModelDefaults,
+        interactiveUser: config.interactiveUser,
         managedSettings: config.managedSettings
       });
       const {
@@ -1633,6 +1635,7 @@ class CopilotClient {
         enableFileHooks: config.enableFileHooks,
         enableHostGitOperations: config.enableHostGitOperations,
         enableSessionStore: config.enableSessionStore,
+        enableGitHubCacheStore: config.enableGitHubCacheStore,
         enableSkills: config.enableSkills,
         streaming: config.streaming,
         includeSubAgentStreamingEvents: config.includeSubAgentStreamingEvents ?? true,
@@ -1666,6 +1669,7 @@ class CopilotClient {
         expAssignments: config.expAssignments,
         enableManagedSettings: config.enableManagedSettings,
         enforceManagedModelDefaults: config.enforceManagedModelDefaults,
+        interactiveUser: config.interactiveUser,
         managedSettings: config.managedSettings,
         ...extensionOptions?.requestedEnvironmentVariables ? {
           requestedEnvironmentVariables: extensionOptions.requestedEnvironmentVariables

package/dist/cjs/generated/rpc.js

@@ -265,6 +265,17 @@ function createServerRpc(connection) {
       getBuiltInCatalog: async () => connection.sendRequest("models.getBuiltInCatalog", {})
     },
     /** @experimental */
+    contentExclusion: {
+      /**
+       * Validates candidate content-exclusion policies and returns them normalized, without starting a session. This runs the same parser the runtime's own policy enforcement uses, so a host cannot accept a policy set the runtime would later reject, nor reject one it would have honored. Call it when policies arrive from outside the runtime — a command-line flag, a configuration file, a host's own settings — and must be checked before a session exists to apply them to. A malformed document fails with a message prefixed `Invalid JSON: `; a well-formed document that violates the policy schema fails with the offending field paths.
+       *
+       * @param params Candidate content-exclusion policies to validate, as the raw JSON text a host received. The text is supplied unparsed so that a syntax error and a schema violation are both reported by the runtime's own validator rather than by the caller's JSON parser.
+       *
+       * @returns The accepted policies, parsed and normalized. A rejected input is reported as an error rather than in this result.
+       */
+      validatePolicies: async (params) => connection.sendRequest("contentExclusion.validatePolicies", params)
+    },
+    /** @experimental */
     tools: {
       /**
        * Lists built-in tools available for a model.
@@ -504,6 +515,14 @@ function createServerRpc(connection) {
        * @returns Skill installation management result with the honoured contract, or a typed refusal.
        */
       planInstall: async (params) => connection.sendRequest("skills.planInstall", params),
+      /**
+       * Plans installation of the Skill pinned by an Agent Finder materialisation reference without writing files. The runtime retrieves the descriptor only from its fixed Agent Finder authority and applies the same verification as skills.planInstall; the review shows only verified data. Apply the returned plan with skills.applyInstall.
+       *
+       * @param params Side-effect-free planning of one Skill from a materialisation reference rather than a search candidate.
+       *
+       * @returns Skill installation management result with the honoured contract, or a typed refusal.
+       */
+      planInstallFromReference: async (params) => connection.sendRequest("skills.planInstallFromReference", params),
       /**
        * Consumes one verified Skill installation plan, requests explicit human consent through installations.confirm on the original connection, then revalidates and installs the Skill disabled.
        *

package/dist/cjs/session.js

@@ -75,6 +75,20 @@ function deserializeHookInput(raw) {
     ...stop_hook_active === void 0 ? {} : { stopHookActive: stop_hook_active }
   };
 }
+function normalizeHookError(hookType, input) {
+  if (hookType !== "errorOccurred" && hookType !== "sessionEnd") {
+    return input;
+  }
+  if (!input || typeof input !== "object" || !("error" in input)) {
+    return input;
+  }
+  const { error } = input;
+  if (!error || typeof error !== "object" || Array.isArray(error)) {
+    return input;
+  }
+  const { message } = error;
+  return { ...input, error: typeof message === "string" ? message : JSON.stringify(error) };
+}
 function isOpenCanvasInstance(value) {
   if (!value || typeof value !== "object") {
     return false;
@@ -1793,7 +1807,7 @@ class CopilotSession {
     if (!this.hooks) {
       return void 0;
     }
-    const normalized = deserializeHookInput(input);
+    const normalized = normalizeHookError(hookType, deserializeHookInput(input));
     const handlerMap = {
       preToolUse: this.hooks.onPreToolUse,
       preMcpToolCall: this.hooks.onPreMcpToolCall,

package/dist/cliVersion.d.ts

@@ -1,2 +1,2 @@
-export declare const COPILOT_CLI_VERSION = "1.0.97";
+export declare const COPILOT_CLI_VERSION = "1.0.98-1";
 export declare const COPILOT_CLI_USE_NPM_PACKAGE = false;

package/dist/cliVersion.js

@@ -1,4 +1,4 @@
-const COPILOT_CLI_VERSION = "1.0.97";
+const COPILOT_CLI_VERSION = "1.0.98-1";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 export {
   COPILOT_CLI_USE_NPM_PACKAGE,

package/dist/client.js

@@ -1355,6 +1355,7 @@ class CopilotClient {
         enableFileHooks: config.enableFileHooks,
         enableHostGitOperations: config.enableHostGitOperations,
         enableSessionStore: config.enableSessionStore,
+        enableGitHubCacheStore: config.enableGitHubCacheStore,
         enableSkills: config.enableSkills,
         skillDirectories: config.skillDirectories,
         ...config.skillProvider ? { hasSkillProvider: true } : {},
@@ -1374,6 +1375,7 @@ class CopilotClient {
         expAssignments: config.expAssignments,
         enableManagedSettings: config.enableManagedSettings,
         enforceManagedModelDefaults: config.enforceManagedModelDefaults,
+        interactiveUser: config.interactiveUser,
         managedSettings: config.managedSettings
       });
       const {
@@ -1613,6 +1615,7 @@ class CopilotClient {
         enableFileHooks: config.enableFileHooks,
         enableHostGitOperations: config.enableHostGitOperations,
         enableSessionStore: config.enableSessionStore,
+        enableGitHubCacheStore: config.enableGitHubCacheStore,
         enableSkills: config.enableSkills,
         streaming: config.streaming,
         includeSubAgentStreamingEvents: config.includeSubAgentStreamingEvents ?? true,
@@ -1646,6 +1649,7 @@ class CopilotClient {
         expAssignments: config.expAssignments,
         enableManagedSettings: config.enableManagedSettings,
         enforceManagedModelDefaults: config.enforceManagedModelDefaults,
+        interactiveUser: config.interactiveUser,
         managedSettings: config.managedSettings,
         ...extensionOptions?.requestedEnvironmentVariables ? {
           requestedEnvironmentVariables: extensionOptions.requestedEnvironmentVariables

package/dist/generated/rpc.d.ts

@@ -622,6 +622,80 @@ export type CatalogAgentPluginCompatibilityTag =
  | "canvas-only"
 /** The plugin targets GitHub Copilot. */
  | "github-copilot";
+/**
+ * Typed installability state for an Agent Plugin candidate
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginInstallability".
+ */
+/** @experimental */
+export type CatalogAgentPluginInstallability = 
+/** The candidate carries complete, verified install data and the selected session may install it. Its install plan is present. */
+"installable"
+/** The catalogue supplied no complete, verified install data, so no install target is offered. */
+ | "install-data-unavailable"
+/** Plugin installation is understood but disabled for the selected session. */
+ | "feature-disabled"
+/** Reserved for plugin formats this runtime cannot install. Every format surfaced today installs through a marketplace. */
+ | "not-installable-kind";
+/**
+ * One place an Agent Plugin can install from: Agent Finder's materialisation, a marketplace, or a GitHub repository. Each variant carries only its own fields.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginInstallSource".
+ */
+/** @experimental */
+export type CatalogAgentPluginInstallSource = CatalogAgentPluginMaterializationSource | CatalogAgentPluginMarketplaceSource | CatalogAgentPluginRepositorySource;
+/**
+ * Discriminator for a materialisation install source
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginMaterializationSourceKind".
+ */
+/** @experimental */
+export type CatalogAgentPluginMaterializationSourceKind = 
+/** Install from Agent Finder's verified materialisation. */
+"materialization";
+/**
+ * Discriminator for a marketplace install source
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginMarketplaceSourceKind".
+ */
+/** @experimental */
+export type CatalogAgentPluginMarketplaceSourceKind = "marketplace";
+/**
+ * Discriminator for a repository install source
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginRepositorySourceKind".
+ */
+/** @experimental */
+export type CatalogAgentPluginRepositorySourceKind = "repository";
+/**
+ * A kind of component an Agent Plugin contributes
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginComponent".
+ */
+/** @experimental */
+export type CatalogAgentPluginComponent = 
+/** Custom agents. */
+"agent"
+/** Slash commands. */
+ | "command"
+/** Skills. */
+ | "skill"
+/** Hooks. */
+ | "hook"
+/** Bundled MCP servers. */
+ | "mcp-server"
+/** Bundled LSP servers. */
+ | "lsp-server"
+/** Extensions. */
+ | "extension"
+/** Canvases. */
+ | "canvas";
 /**
  * A versioned, bounded trust observation carried unchanged with a catalog candidate and its private handle context. Current observations require a recognised T1/T2 tier; every non-current state structurally forbids a tier. Eligibility remains `unknown` while Agent Finder supplies no exposure decision, and states absent from its current wire are never inferred from age, relevance, popularity, or a tier transition.
  *
@@ -887,7 +961,11 @@ export type CatalogCapability =
 /** Extends mcp-confirmed-remote-installation to declared non-secret header and URL values and receipt-owned header secrets for personal remote MCP choices. Requires mcp-confirmed-remote-installation and bound session authority. Secret values are written only to the reviewed backend after confirmation and are never returned; package and stdio choices remain unsupported. Advertised only when owned secret effects and owned secret activation are linked. */
  | "mcp-configured-remote-installation"
 /** Understands verified Agent Finder Skill install, uninstall, recovery and installation-scoped enablement APIs. Advertised only by runtimes with the Skill installation engine linked; acquisition may still be refused as feature-disabled per selected session. */
- | "skill-confirmed-installation";
+ | "skill-confirmed-installation"
+/** Understands `installability` and the reviewable `installPlan` on Agent Plugin candidates. Requires agent-plugin-discovery; without it, plugin candidates are unchanged. A plugin is installable only with complete, verified catalogue install data, and may still be reported as feature-disabled per selected session. */
+ | "agent-plugin-confirmed-installation"
+/** Extends skill-confirmed-installation to planning from an Agent Finder materialisation reference through skills.planInstallFromReference, and to its distinct reference failure reasons. Requires skill-confirmed-installation. Advertised only by runtimes with the Skill installation engine linked. */
+ | "skill-reference-installation";
 /**
  * Bounded extensible wire-feature identifier. Known values are described by `CatalogCapability`; newer callers may send future identifiers so an older runtime can return a typed negotiation refusal instead of failing schema validation. Capability negotiation establishes contract understanding, while each operation's result separately reports runtime availability.
  *
@@ -4394,6 +4472,8 @@ export type SessionCapability =
  | "elicitation"
 /** Cross-session history tools and session-store SQL prompt/tool metadata. */
  | "session-store"
+/** Read-only GitHub cache SQL tool (github_sql). */
+ | "github-cache-store"
 /** MCP Apps UI passthrough. */
  | "mcp-apps"
 /** Host-provided canvas rendering support. */
@@ -5029,7 +5109,17 @@ export type SkillInstallationFailureReason =
 /** Installed Skill files no longer match ownership evidence. */
  | "configuration-modified"
 /** A storage operation failed; inspect durable state before retrying. */
- | "write-failed";
+ | "write-failed"
+/** The materialisation reference is malformed or uses an unsupported schema version. Returned only to callers that require skill-reference-installation. */
+ | "invalid-reference"
+/** Agent Finder has no materialisation for the referenced resource revision (HTTP 404). Returned only to callers that require skill-reference-installation. */
+ | "descriptor-not-found"
+/** Agent Finder withdrew the referenced resource revision (HTTP 410). Returned only to callers that require skill-reference-installation. */
+ | "descriptor-withdrawn"
+/** The retrieved descriptor does not match the referenced descriptor or bundle digest. Returned only to callers that require skill-reference-installation. */
+ | "digest-mismatch"
+/** The referenced resource is not a Skill. Returned only to callers that require skill-reference-installation. */
+ | "unsupported-resource";
 /**
  * Management outcome for verified Skill inventory, planning and removal.
  *
@@ -8214,6 +8304,8 @@ export interface CatalogAgentPluginCandidate {
     compatibilityTags: ({
         [k: string]: unknown | undefined;
     } & []) | [CatalogAgentPluginCompatibilityTag] | [CatalogAgentPluginCompatibilityTag, CatalogAgentPluginCompatibilityTag] | [CatalogAgentPluginCompatibilityTag, CatalogAgentPluginCompatibilityTag, CatalogAgentPluginCompatibilityTag];
+    installability?: CatalogAgentPluginInstallability;
+    installPlan?: CatalogAgentPluginInstallPlan;
     provenance: CatalogAgentPluginCandidateProvenance;
     trust?: CatalogTrustSnapshot;
 }
@@ -8234,6 +8326,99 @@ export interface CatalogPluginRepositorySource {
      */
     path: string;
 }
+/**
+ * What installing an Agent Plugin would do, for the user to review and confirm. Provisional: the catalogue install data it is built from is not final.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginInstallPlan".
+ */
+/** @experimental */
+export interface CatalogAgentPluginInstallPlan {
+    /**
+     * Every valid install source, in preference order: materialization, then marketplace, then repository. Each kind appears at most once.
+     *
+     * @minItems 1
+     * @maxItems 3
+     */
+    sources: [CatalogAgentPluginInstallSource] | [CatalogAgentPluginInstallSource, CatalogAgentPluginInstallSource] | [CatalogAgentPluginInstallSource, CatalogAgentPluginInstallSource, CatalogAgentPluginInstallSource];
+    /**
+     * The plugin's name, as named in its marketplace or manifest.
+     */
+    pluginName: string;
+    version?: CatalogResourceVersion;
+    /**
+     * Exact full commit ID to install, in lowercase hex. Always present when the plan has a repository source; a plan with a marketplace source carries at least one of version and commit.
+     */
+    commit?: string;
+    /**
+     * Components the plugin contributes, in canonical order.
+     *
+     * @minItems 1
+     */
+    components: [CatalogAgentPluginComponent, ...CatalogAgentPluginComponent[]];
+    /**
+     * Canvas IDs the plugin contributes. Non-empty exactly when components include `canvas`.
+     */
+    canvasIds: string[];
+    /**
+     * Extension IDs the plugin contributes. Non-empty exactly when components include `extension`.
+     */
+    extensionIds: string[];
+    /**
+     * MCP servers the plugin depends on but does not bundle.
+     */
+    mcpDependencies: string[];
+    /**
+     * Connectors the plugin depends on.
+     */
+    connectorDependencies: string[];
+}
+/**
+ * Agent Finder's verified materialisation of the plugin. Present only when the candidate carries a complete materialisation reference; the reference itself stays runtime-private.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginMaterializationSource".
+ */
+/** @experimental */
+export interface CatalogAgentPluginMaterializationSource {
+    kind: CatalogAgentPluginMaterializationSourceKind;
+}
+/**
+ * A plugin marketplace named by verified catalogue install data, installed as `pluginName@name`.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginMarketplaceSource".
+ */
+/** @experimental */
+export interface CatalogAgentPluginMarketplaceSource {
+    kind: CatalogAgentPluginMarketplaceSourceKind;
+    /**
+     * Marketplace name.
+     */
+    name: string;
+    /**
+     * Canonical lowercase GitHub owner/repository hosting the marketplace.
+     */
+    repository: string;
+}
+/**
+ * A GitHub repository holding the plugin, installed directly as `owner/repo[:path]` at the plan's commit, without a marketplace.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginRepositorySource".
+ */
+/** @experimental */
+export interface CatalogAgentPluginRepositorySource {
+    kind: CatalogAgentPluginRepositorySourceKind;
+    /**
+     * Canonical lowercase GitHub owner/repository holding the plugin.
+     */
+    repository: string;
+    /**
+     * Relative POSIX path of the plugin directory in the repository. Omitted when the plugin is at the repository root.
+     */
+    path?: string;
+}
 /**
  * Where and when an Agent Plugin catalog reference was observed. Discovery provenance deliberately carries no descriptor URL, raw data, candidate handle, or content digest.
  *
@@ -8605,6 +8790,39 @@ export interface CatalogMalformedCardError {
      */
     message: string;
 }
+/**
+ * An Agent Finder materialisation reference pinning one exact resource revision.
+ *
+ * It carries no origin or URL: the runtime always builds the descriptor URL on its fixed Agent
+ * Finder authority. It carries no display data either; every reviewed field comes from the
+ * verified descriptor and Skill files.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogMaterializationReference".
+ */
+/** @experimental */
+export interface CatalogMaterializationReference {
+    /**
+     * Agent Finder resource identifier, a positive decimal integer.
+     */
+    resourceId: string;
+    /**
+     * Agent Finder materialisation revision identifier, a positive decimal integer. This is not a Git commit.
+     */
+    revisionId: string;
+    /**
+     * Materialisation descriptor schema version, currently `1.0.0`.
+     */
+    schemaVersion: string;
+    /**
+     * Expected `sha256:<lowercase hex>` digest of the canonical descriptor.
+     */
+    descriptorDigest: string;
+    /**
+     * Expected `sha256:<lowercase hex>` digest of the descriptor's bundle manifest.
+     */
+    bundleDigest: string;
+}
 /**
  * The protocol version and capability set the runtime actually honoured for a successful catalog operation.
  *
@@ -9973,6 +10191,32 @@ export interface ContentExclusionPathCheck {
      */
     excluded: boolean;
 }
+/**
+ * Candidate content-exclusion policies to validate, as the raw JSON text a host received. The text is supplied unparsed so that a syntax error and a schema violation are both reported by the runtime's own validator rather than by the caller's JSON parser.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ContentExclusionValidatePoliciesRequest".
+ */
+/** @experimental */
+export interface ContentExclusionValidatePoliciesRequest {
+    /**
+     * Unparsed JSON text expected to hold an array of content-exclusion policies.
+     */
+    policiesJson: string;
+}
+/**
+ * The accepted policies, parsed and normalized. A rejected input is reported as an error rather than in this result.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ContentExclusionValidatePoliciesResult".
+ */
+/** @experimental */
+export interface ContentExclusionValidatePoliciesResult {
+    /**
+     * Validated policy objects in input order. Raw JSON preserves every field returned by the runtime's policy parser.
+     */
+    policies: JsonValue[];
+}
 /**
  * A single large message currently in context.
  *
@@ -24113,6 +24357,10 @@ export interface SessionOpenOptions {
      */
     enforceManagedModelDefaults?: boolean;
     managedSettings?: SessionManagedSettings;
+    /**
+     * Declares that a human drives this session's conversation, enabling user-message analysis (sentiment, task completion criteria, and task analytics) for user-authored messages. Automated messages remain excluded. Defaults to false for SDK sessions. Applied when the session is created or loaded from storage; ignored when resuming a session that is already active, and for cloud sessions.
+     */
+    interactiveUser?: boolean;
     /**
      * Opt in to capturing file changes for session rewind and session diff. Capture cannot reconstruct changes made before it was enabled. On create it starts capture from the first turn. It is also honored on resume: for a session that already has tracked prior turns, tracking continues automatically even if this is omitted; passing it on resume additionally enables tracking for an eligible session that has no prior root turn yet. Resuming a session whose prior root turns were never tracked has no restorable baseline, so tracking stays disabled for it and rewind reports file change tracking as unavailable; the resume itself still succeeds, so sessions that predate tracking remain loadable. The opt-in is only rejected when the session can never track (a subagent session, or one without local session storage). It is intentionally absent from the mutable options update because enabling it after edits have occurred would create an incomplete, misleading baseline. Subagents share the parent session's capture store and are not tracked as separate rewind points: a file a subagent writes is attributed to whichever root user turn was open when the capture was staged, just before the tool body ran. A turn cannot open while a staged capture is still in flight, so a subagent tool that staged under the spawning turn stays attributed to it however late the write lands, while a capture it stages after the user's next message belongs to that later turn. Attribution decides which turn's rewind point counts and file preview include that write; it does not narrow which rewinds revert it, because a rewind restores every capture from the selected turn onward, so the earlier spawning turn reverts it as well.
      */
@@ -26495,6 +26743,21 @@ export interface SkillList {
      */
     skills: Skill[];
 }
+/**
+ * Side-effect-free planning of one Skill from a materialisation reference rather than a search candidate.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SkillPlanInstallFromReferenceRequest".
+ */
+/** @experimental */
+export interface SkillPlanInstallFromReferenceRequest {
+    contract: CatalogClientContract;
+    reference: CatalogMaterializationReference;
+    /**
+     * Existing local session attached to this connection.
+     */
+    policySessionId: string;
+}
 /**
  * Side-effect-free planning of one verified Agent Finder Skill candidate.
  *
@@ -31735,6 +31998,17 @@ export declare function createServerRpc(connection: MessageConnection): {
         getBuiltInCatalog: () => Promise<BuiltInModelCatalog>;
     };
     /** @experimental */
+    contentExclusion: {
+        /**
+         * Validates candidate content-exclusion policies and returns them normalized, without starting a session. This runs the same parser the runtime's own policy enforcement uses, so a host cannot accept a policy set the runtime would later reject, nor reject one it would have honored. Call it when policies arrive from outside the runtime — a command-line flag, a configuration file, a host's own settings — and must be checked before a session exists to apply them to. A malformed document fails with a message prefixed `Invalid JSON: `; a well-formed document that violates the policy schema fails with the offending field paths.
+         *
+         * @param params Candidate content-exclusion policies to validate, as the raw JSON text a host received. The text is supplied unparsed so that a syntax error and a schema violation are both reported by the runtime's own validator rather than by the caller's JSON parser.
+         *
+         * @returns The accepted policies, parsed and normalized. A rejected input is reported as an error rather than in this result.
+         */
+        validatePolicies: (params: ContentExclusionValidatePoliciesRequest) => Promise<ContentExclusionValidatePoliciesResult>;
+    };
+    /** @experimental */
     tools: {
         /**
          * Lists built-in tools available for a model.
@@ -31974,6 +32248,14 @@ export declare function createServerRpc(connection: MessageConnection): {
          * @returns Skill installation management result with the honoured contract, or a typed refusal.
          */
         planInstall: (params: SkillPlanInstallRequest) => Promise<SkillInstallationManagementResult>;
+        /**
+         * Plans installation of the Skill pinned by an Agent Finder materialisation reference without writing files. The runtime retrieves the descriptor only from its fixed Agent Finder authority and applies the same verification as skills.planInstall; the review shows only verified data. Apply the returned plan with skills.applyInstall.
+         *
+         * @param params Side-effect-free planning of one Skill from a materialisation reference rather than a search candidate.
+         *
+         * @returns Skill installation management result with the honoured contract, or a typed refusal.
+         */
+        planInstallFromReference: (params: SkillPlanInstallFromReferenceRequest) => Promise<SkillInstallationManagementResult>;
         /**
          * Consumes one verified Skill installation plan, requests explicit human consent through installations.confirm on the original connection, then revalidates and installs the Skill disabled.
          *

package/dist/generated/rpc.js

@@ -237,6 +237,17 @@ function createServerRpc(connection) {
       getBuiltInCatalog: async () => connection.sendRequest("models.getBuiltInCatalog", {})
     },
     /** @experimental */
+    contentExclusion: {
+      /**
+       * Validates candidate content-exclusion policies and returns them normalized, without starting a session. This runs the same parser the runtime's own policy enforcement uses, so a host cannot accept a policy set the runtime would later reject, nor reject one it would have honored. Call it when policies arrive from outside the runtime — a command-line flag, a configuration file, a host's own settings — and must be checked before a session exists to apply them to. A malformed document fails with a message prefixed `Invalid JSON: `; a well-formed document that violates the policy schema fails with the offending field paths.
+       *
+       * @param params Candidate content-exclusion policies to validate, as the raw JSON text a host received. The text is supplied unparsed so that a syntax error and a schema violation are both reported by the runtime's own validator rather than by the caller's JSON parser.
+       *
+       * @returns The accepted policies, parsed and normalized. A rejected input is reported as an error rather than in this result.
+       */
+      validatePolicies: async (params) => connection.sendRequest("contentExclusion.validatePolicies", params)
+    },
+    /** @experimental */
     tools: {
       /**
        * Lists built-in tools available for a model.
@@ -476,6 +487,14 @@ function createServerRpc(connection) {
        * @returns Skill installation management result with the honoured contract, or a typed refusal.
        */
       planInstall: async (params) => connection.sendRequest("skills.planInstall", params),
+      /**
+       * Plans installation of the Skill pinned by an Agent Finder materialisation reference without writing files. The runtime retrieves the descriptor only from its fixed Agent Finder authority and applies the same verification as skills.planInstall; the review shows only verified data. Apply the returned plan with skills.applyInstall.
+       *
+       * @param params Side-effect-free planning of one Skill from a materialisation reference rather than a search candidate.
+       *
+       * @returns Skill installation management result with the honoured contract, or a typed refusal.
+       */
+      planInstallFromReference: async (params) => connection.sendRequest("skills.planInstallFromReference", params),
       /**
        * Consumes one verified Skill installation plan, requests explicit human consent through installations.confirm on the original connection, then revalidates and installs the Skill disabled.
        *

package/dist/session.js

@@ -57,6 +57,20 @@ function deserializeHookInput(raw) {
     ...stop_hook_active === void 0 ? {} : { stopHookActive: stop_hook_active }
   };
 }
+function normalizeHookError(hookType, input) {
+  if (hookType !== "errorOccurred" && hookType !== "sessionEnd") {
+    return input;
+  }
+  if (!input || typeof input !== "object" || !("error" in input)) {
+    return input;
+  }
+  const { error } = input;
+  if (!error || typeof error !== "object" || Array.isArray(error)) {
+    return input;
+  }
+  const { message } = error;
+  return { ...input, error: typeof message === "string" ? message : JSON.stringify(error) };
+}
 function isOpenCanvasInstance(value) {
   if (!value || typeof value !== "object") {
     return false;
@@ -1775,7 +1789,7 @@ class CopilotSession {
     if (!this.hooks) {
       return void 0;
     }
-    const normalized = deserializeHookInput(input);
+    const normalized = normalizeHookError(hookType, deserializeHookInput(input));
     const handlerMap = {
       preToolUse: this.hooks.onPreToolUse,
       preMcpToolCall: this.hooks.onPreMcpToolCall,

package/dist/types.d.ts

@@ -1135,6 +1135,12 @@ export type AutoModeSwitchHandler = (request: AutoModeSwitchRequest, invocation:
  * Base interface for all hook inputs
  */
 export interface BaseHookInput {
+    /** Subagent actor ID, absent for root hooks and older runtimes. */
+    agentId?: string;
+    /** Subagent type, when known by the runtime. */
+    agentType?: string;
+    /** Immediate parent actor ID, when available. */
+    parentAgentId?: string;
     /** The runtime session ID associated with the hook. Child tool hooks use
      * the child session ID; sub-agent lifecycle hooks use the parent session ID,
      * matching `invocation.sessionId`. */
@@ -2531,6 +2537,13 @@ export interface SessionConfigBase {
      * conflicting session options. Overridable managed defaults remain mutable.
      */
     enforceManagedModelDefaults?: boolean;
+    /**
+     * Declares that a human drives this session's conversation, enabling
+     * user-message analysis telemetry for user-authored messages. Automated
+     * messages remain excluded. Defaults to false for SDK sessions; ignored
+     * for cloud sessions and when resuming a session that is already active.
+     */
+    interactiveUser?: boolean;
     /**
      * Host-injected enterprise managed settings for this session.
      *
@@ -2596,6 +2609,13 @@ export interface SessionConfigBase {
      * read from the shared session store.
      */
     enableSessionStore?: boolean;
+    /**
+     * When true, requests the read-only GitHub cache store for this session
+     * (the `github-cache-store` capability). The runtime registers the
+     * `github_sql` tool only when its `GITHUB_CACHE_STORE` feature flag is
+     * also on. Defaults to disabled.
+     */
+    enableGitHubCacheStore?: boolean;
     /**
      * When true, enables skill loading (including builtin skills and discovered
      * skill directories). When false, no skills are loaded regardless of

package/package.json

@@ -5,8 +5,8 @@
         "url": "https://github.com/github/copilot-agent-runtime.git",
         "directory": "src/sdk/nodejs"
     },
-    "version": "1.0.21",
-    "copilotCliVersion": "1.0.97",
+    "version": "1.0.22-preview.1",
+    "copilotCliVersion": "1.0.98-1",
     "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
     "main": "./dist/cjs/index.js",
     "types": "./dist/index.d.ts",
@@ -103,18 +103,18 @@
         "README.md"
     ],
     "copilotRuntime": {
-        "sourceSha": "0ce88c5486a1e6a9c08b8ed708aa86abc9af25cf",
-        "version": "1.0.97",
+        "sourceSha": "536a1e5082059b18d4258467104a1cdb7fabd92b",
+        "version": "1.0.98-1",
         "visibility": "public"
     },
     "optionalDependencies": {
-        "@github/copilot-sdk-darwin-arm64": "1.0.21",
-        "@github/copilot-sdk-darwin-x64": "1.0.21",
-        "@github/copilot-sdk-linux-arm64": "1.0.21",
-        "@github/copilot-sdk-linux-x64": "1.0.21",
-        "@github/copilot-sdk-linuxmusl-arm64": "1.0.21",
-        "@github/copilot-sdk-linuxmusl-x64": "1.0.21",
-        "@github/copilot-sdk-win32-arm64": "1.0.21",
-        "@github/copilot-sdk-win32-x64": "1.0.21"
+        "@github/copilot-sdk-darwin-arm64": "1.0.22-preview.1",
+        "@github/copilot-sdk-darwin-x64": "1.0.22-preview.1",
+        "@github/copilot-sdk-linux-arm64": "1.0.22-preview.1",
+        "@github/copilot-sdk-linux-x64": "1.0.22-preview.1",
+        "@github/copilot-sdk-linuxmusl-arm64": "1.0.22-preview.1",
+        "@github/copilot-sdk-linuxmusl-x64": "1.0.22-preview.1",
+        "@github/copilot-sdk-win32-arm64": "1.0.22-preview.1",
+        "@github/copilot-sdk-win32-x64": "1.0.22-preview.1"
     }
 }