@github/copilot-sdk 1.0.23-preview.0 → 1.0.23-preview.1

package/README.md

@@ -128,11 +128,13 @@ await using host = await client.startAhpHost({
             ...config,
             onPermissionRequest: approveAll,
             systemMessage: { mode: "append", content: "Use the app's greeting tool." },
-            tools: [defineTool("greeting", {
-                description: "Get the application's greeting",
-                parameters: { type: "object", properties: {} },
-                handler: () => "Hello from the application!",
-            })],
+            tools: [
+                defineTool("greeting", {
+                    description: "Get the application's greeting",
+                    parameters: { type: "object", properties: {} },
+                    handler: () => "Hello from the application!",
+                }),
+            ],
         });
     },
     onSessionReleased: async (originalSession) => {
@@ -1353,6 +1355,8 @@ Inbound trace context from the CLI is available on the `ToolInvocation` object p
 
 An `onPermissionRequest` handler is optional when you create or resume a session. When provided, it is called before the agent executes each tool (file writes, shell commands, custom tools, etc.) and returns a decision. When omitted, permission requests are emitted as events and left pending for the consumer to resolve with the pending permission RPC.
 
+Callbacks receive optional derived prompt context as `invocation.promptRequest`. The raw request's `managedApprovalRequired` remains managed-policy provenance and enforces one-shot restrictions. Only derived `commands`, `read`, `write`, `url`, and `workflow` prompts can clear the human requirement after Assisted approval; for missing or other prompt kinds, keep the raw marker authoritative.
+
 ### Approve All (simplest)
 
 Use the built-in `approveAll` helper when managed settings are disabled:

package/dist/cjs/cliVersion.js

@@ -22,7 +22,7 @@ __export(cliVersion_exports, {
   COPILOT_CLI_VERSION: () => COPILOT_CLI_VERSION
 });
 module.exports = __toCommonJS(cliVersion_exports);
-const COPILOT_CLI_VERSION = "1.0.99-0";
+const COPILOT_CLI_VERSION = "1.0.99-1";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/cjs/generated/rpc.js

@@ -2156,7 +2156,7 @@ function createSessionRpc(connection, sessionId) {
         /**
          * Begin an interactive login flow for a provider kind (dispatch is kind-only) and return its opaque flow id and first step.
          *
-         * @param params Begin an interactive login flow for a provider kind. Dispatch is kind-only.
+         * @param params Begin an interactive login flow for a provider kind, optionally reusing a cached base identity or explicitly requesting provider account selection.
          *
          * @returns A started login flow: its opaque id and first step.
          */

package/dist/cjs/session.js

@@ -843,12 +843,12 @@ class CopilotSession {
         }
       }
     } else if (event.type === "permission.requested") {
-      const { requestId, permissionRequest, resolvedByHook } = event.data;
+      const { requestId, permissionRequest, promptRequest, resolvedByHook } = event.data;
       if (resolvedByHook) {
         return;
       }
       if (this.permissionHandler) {
-        void this._executePermissionAndRespond(requestId, permissionRequest);
+        void this._executePermissionAndRespond(requestId, permissionRequest, promptRequest);
       }
     } else if (event.type === "mcp.oauth_required") {
       const data = event.data;
@@ -1007,12 +1007,14 @@ class CopilotSession {
    * Executes a permission handler and sends the result back via RPC.
    * @internal
    */
-  async _executePermissionAndRespond(requestId, permissionRequest) {
+  async _executePermissionAndRespond(requestId, permissionRequest, promptRequest) {
     try {
-      const handlerResult = await this.permissionHandler(permissionRequest, {
+      const invocation = {
         sessionId: this.sessionId,
-        managedSettingsEnabled: this.managedSettingsEnabled
-      });
+        managedSettingsEnabled: this.managedSettingsEnabled,
+        ...promptRequest === void 0 ? {} : { promptRequest }
+      };
+      const handlerResult = await this.permissionHandler(permissionRequest, invocation);
       const isAttributed = (0, import_types.isAttributedPermissionResult)(handlerResult);
       const result = isAttributed ? handlerResult.result : handlerResult;
       const decisionContext = isAttributed ? handlerResult.decisionContext : void 0;

package/dist/cliVersion.d.ts

@@ -1,2 +1,2 @@
-export declare const COPILOT_CLI_VERSION = "1.0.99-0";
+export declare const COPILOT_CLI_VERSION = "1.0.99-1";
 export declare const COPILOT_CLI_USE_NPM_PACKAGE = false;

package/dist/cliVersion.js

@@ -1,4 +1,4 @@
-const COPILOT_CLI_VERSION = "1.0.99-0";
+const COPILOT_CLI_VERSION = "1.0.99-1";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 export {
   COPILOT_CLI_USE_NPM_PACKAGE,

package/dist/generated/rpc.d.ts

@@ -91,7 +91,27 @@ export type AuthEnumerateQuery = {
      * Account-collection query variant discriminator.
      */
     kind: "providers";
+} | {
+    provider: LoginProviderKind;
+    /**
+     * Account-collection query variant discriminator.
+     */
+    kind: "loginAccounts";
 };
+/**
+ * A provider a consumer may interactively sign in with.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LoginProviderKind".
+ */
+/** @experimental */
+export type LoginProviderKind = 
+/** OAuth github.com sign-in via the browser (web loopback + PKCE). */
+"githubDotCom"
+/** A GitHub Enterprise Cloud account — a GitHub account on a non-github.com host, e.g. *.ghe.com; the host is supplied interactively through the neutral input-required step. */
+ | "proxima"
+/** Microsoft Entra sign-in that derives a GitHub (EMU) credential. */
+ | "entra";
 /**
  * Selects which typed accounts datum to read.
  *
@@ -380,21 +400,28 @@ export type AuthEnumerateValue = {
      * Enumerated account-collection variant discriminator.
      */
     kind: "providers";
+} | {
+    /**
+     * Cached base identities reusable by the selected login provider, active first.
+     */
+    items: AuthLoginIdentity[];
+    /**
+     * Enumerated account-collection variant discriminator.
+     */
+    kind: "loginAccounts";
 };
 /**
- * A provider a consumer may interactively sign in with.
+ * How an interactive provider login should choose its base identity.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "LoginProviderKind".
+ * via the `definition` "AuthLoginMode".
  */
 /** @experimental */
-export type LoginProviderKind = 
-/** OAuth github.com sign-in via the browser (web loopback + PKCE). */
-"githubDotCom"
-/** A GitHub Enterprise Cloud account — a GitHub account on a non-github.com host, e.g. *.ghe.com; the host is supplied interactively through the neutral input-required step. */
- | "proxima"
-/** Microsoft Entra sign-in that derives a GitHub (EMU) credential. */
- | "entra";
+export type AuthLoginMode = 
+/** Use normal provider behavior, optionally pinned to accountId. */
+"default"
+/** Explicitly ask the provider to present its account-selection UI instead of serving from a retained identity. */
+ | "selectAccount";
 /**
  * One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra).
  *
@@ -2433,6 +2460,30 @@ export type HostExitReason =
  | "ownerDisconnected"
 /** The runtime is shutting down. */
  | "runtimeShutdown";
+/**
+ * A supported image-service operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ImageToolModelOperation".
+ */
+/** @experimental */
+export type ImageToolModelOperation = 
+/** Generate an image from a text prompt. */
+"generate"
+/** Generate or edit an image using explicitly selected image inputs. */
+ | "edit";
+/**
+ * Account availability of the runtime image model. Discovery errors are returned as errors, not converted to unavailable.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ImageToolModelAvailability".
+ */
+/** @experimental */
+export type ImageToolModelAvailability = 
+/** The account has access to a supported image operation. */
+"available"
+/** The runtime default is not available to this account; enabling the tool cannot grant access. */
+ | "unavailable";
 /**
  * Only resource kinds with an implemented installation engine have a review variant.
  *
@@ -7731,6 +7782,27 @@ export interface ProviderDescriptor {
      */
     available: boolean;
 }
+/**
+ * A cached base identity a provider can reuse for login without asking the user to choose an account again.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AuthLoginIdentity".
+ */
+/** @experimental */
+export interface AuthLoginIdentity {
+    /**
+     * Opaque provider-owned identity id. Pass it back to accounts.login.begin; consumers must not parse it.
+     */
+    accountId: string;
+    /**
+     * Human-readable sign-in label owned by the runtime.
+     */
+    label: string;
+    /**
+     * Whether this base identity owns the session's active derived account.
+     */
+    active: boolean;
+}
 /**
  * Credential-free identity metadata.
  *
@@ -7789,7 +7861,7 @@ export interface AuthLoginAdvanceRequest {
     input?: string;
 }
 /**
- * Begin an interactive login flow for a provider kind. Dispatch is kind-only.
+ * Begin an interactive login flow for a provider kind, optionally reusing a cached base identity or explicitly requesting provider account selection.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AuthLoginBeginRequest".
@@ -7797,6 +7869,11 @@ export interface AuthLoginAdvanceRequest {
 /** @experimental */
 export interface AuthLoginBeginRequest {
     kind: LoginProviderKind;
+    mode?: AuthLoginMode;
+    /**
+     * Opaque cached base identity id returned by accounts.enumerate loginAccounts. Valid only with default mode; consumers must not parse it.
+     */
+    accountId?: string;
 }
 /**
  * A started login flow: its opaque id and first step.
@@ -13668,6 +13745,62 @@ export interface HostUnregisterSessionRequest {
      */
     sessionId: string;
 }
+/**
+ * The runtime-selected image model and its account availability. Availability is independent of per-session image-generation enablement and does not override session policy or permissions.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ImageToolModel".
+ */
+/** @experimental */
+export interface ImageToolModel {
+    /**
+     * Image model identifier selected by the runtime.
+     */
+    id: string;
+    /**
+     * Human-readable model name, supplied by the runtime when unavailable from the catalog.
+     */
+    name: string;
+    /**
+     * Image operations supported by the model's available versioned endpoints.
+     */
+    supportedOperations: ImageToolModelOperation[];
+    /**
+     * Whether this is the model the runtime currently uses for its native image tool.
+     */
+    isDefault: boolean;
+    availability: ImageToolModelAvailability;
+    pricing?: ImageToolModelPricing;
+}
+/**
+ * Default-tier text and image token prices reported for an image model, in AI credits per billing batch. Missing rates remain absent; these are not per-image quotes or actual billed usage.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ImageToolModelPricing".
+ */
+/** @experimental */
+export interface ImageToolModelPricing {
+    /**
+     * Number of tokens per billing batch.
+     */
+    batchSize: number;
+    /**
+     * AI credits per batch of text-input tokens, including a reported zero.
+     */
+    textInputPrice?: number;
+    /**
+     * AI credits per batch of text-output tokens, not generated image tokens.
+     */
+    textOutputPrice?: number;
+    /**
+     * Distinct AI credits per batch of image-input tokens, when reported, including zero.
+     */
+    imageInputPrice?: number;
+    /**
+     * Distinct AI credits per batch of image-output tokens, when reported, including zero.
+     */
+    imageOutputPrice?: number;
+}
 /**
  * One connection-owned, expiring request for a trusted host's explicit user decision.
  *
@@ -18132,6 +18265,10 @@ export interface ModelList {
      */
     models: Model[];
     auto?: AutoTierMetadata;
+    /**
+     * The runtime's default image model, separate from conversation models, with its availability for the resolved account. The default is reported even when unavailable; clients choose whether to display it. These entries must not be selected as chat models. Absent on runtimes that do not expose this catalog.
+     */
+    imageModels?: ImageToolModel[];
 }
 /** @experimental */
 export interface ModelPickerPersistenceRequest {
@@ -21257,6 +21394,19 @@ export interface ProtocolExternalToolDefinition {
         [k: string]: JsonValue | undefined;
     };
 }
+/**
+ * Opt into native CAPI image generation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProtocolImageGenerationOptions".
+ */
+/** @experimental */
+export interface ProtocolImageGenerationOptions {
+    /**
+     * Disabled by default for SDK sessions. CAPI model access and permissions still apply.
+     */
+    enabled?: boolean;
+}
 /**
  * BYOK providers and/or models to add to the session's registry at runtime. Both fields are optional; provide providers, models, or both.
  *
@@ -26839,6 +26989,7 @@ export interface SessionTelemetryEngagement {
  */
 /** @experimental */
 export interface SessionUpdateOptionsParams {
+    imageGeneration?: ProtocolImageGenerationOptions;
     /**
      * The model ID to use for assistant turns.
      */
@@ -33649,7 +33800,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
             /**
              * Begin an interactive login flow for a provider kind (dispatch is kind-only) and return its opaque flow id and first step.
              *
-             * @param params Begin an interactive login flow for a provider kind. Dispatch is kind-only.
+             * @param params Begin an interactive login flow for a provider kind, optionally reusing a cached base identity or explicitly requesting provider account selection.
              *
              * @returns A started login flow: its opaque id and first step.
              */

package/dist/generated/rpc.js

@@ -2128,7 +2128,7 @@ function createSessionRpc(connection, sessionId) {
         /**
          * Begin an interactive login flow for a provider kind (dispatch is kind-only) and return its opaque flow id and first step.
          *
-         * @param params Begin an interactive login flow for a provider kind. Dispatch is kind-only.
+         * @param params Begin an interactive login flow for a provider kind, optionally reusing a cached base identity or explicitly requesting provider account selection.
          *
          * @returns A started login flow: its opaque id and first step.
          */

package/dist/generated/session-events.d.ts

@@ -3907,6 +3907,10 @@ export interface CompactionStartEvent {
  * Context window breakdown at the start of LLM-powered conversation compaction
  */
 export interface CompactionStartData {
+    /**
+     * Identifier shared with the matching compaction completion event
+     */
+    compactionAttemptId?: string;
     /**
      * Token count from non-system messages (user, assistant, tool) at compaction start
      */
@@ -3919,10 +3923,18 @@ export interface CompactionStartData {
      * Model identifier used for compaction, when known
      */
     model?: string;
+    /**
+     * Destination model for a model-switch compaction when it differs from the compacting model
+     */
+    switchTargetModel?: string;
     /**
      * Token count from system message(s) at compaction start
      */
     systemTokens?: number;
+    /**
+     * Destination prompt-token budget when it differs from the effective compaction token limit
+     */
+    targetPromptTokenLimit?: number;
     /**
      * Model context window token limit the compaction is targeting, when known
      */
@@ -3979,6 +3991,10 @@ export interface CompactionCompleteData {
      * File path where the checkpoint was stored
      */
     checkpointPath?: string;
+    /**
+     * Identifier shared with the matching compaction start event
+     */
+    compactionAttemptId?: string;
     compactionTokensUsed?: CompactionCompleteCompactionTokensUsed;
     /**
      * Token count from non-system messages (user, assistant, tool) after compaction
@@ -3992,10 +4008,30 @@ export interface CompactionCompleteData {
      * Error message if compaction failed
      */
     error?: string;
+    /**
+     * Bounded reason for a typed failed outcome. Unknown future values are preserved.
+     */
+    failureReason?: string;
+    /**
+     * Model identifier at admission when routing later changed to the reported compaction model
+     */
+    initialModel?: string;
     /**
      * Number of messages removed during compaction
      */
     messagesRemoved?: number;
+    /**
+     * Model identifier used for compaction when provider usage does not already supply it
+     */
+    model?: string;
+    /**
+     * Typed terminal outcome for this observed compaction completion. Unknown future values are preserved.
+     */
+    outcome?: string;
+    /**
+     * Bounded reason for an expected non-application outcome such as cancellation or no applicable history. Unknown future values are preserved.
+     */
+    outcomeReason?: string;
     /**
      * Total tokens in conversation after compaction
      */
@@ -4029,10 +4065,22 @@ export interface CompactionCompleteData {
      * LLM-generated summary of the compacted conversation history
      */
     summaryContent?: string;
+    /**
+     * Destination model for a model-switch compaction when it differs from the compacting model
+     */
+    switchTargetModel?: string;
     /**
      * Token count from system message(s) after compaction
      */
     systemTokens?: number;
+    /**
+     * Destination prompt-token budget when it differs from the effective compaction token limit
+     */
+    targetPromptTokenLimit?: number;
+    /**
+     * Open accounting-basis identifier for trustworthy paired pre/post token measurements. The current runtime emits local_full_context_estimate.
+     */
+    tokenAccountingBasis?: string;
     /**
      * Model context window token limit the compaction was targeting, when known
      */
@@ -7559,6 +7607,12 @@ export interface ToolExecutionCompleteData {
     toolTelemetry?: {
         [k: string]: JsonValue | undefined;
     };
+    /**
+     * Provider-reported usage of a separately metered runtime-owned tool operation, independent of the conversation model. Present on success or failure when usage is known. Experimental.
+     *
+     * @experimental
+     */
+    toolUsage?: ToolExecutionUsage;
     /**
      * Identifier for the agent loop turn this tool was invoked in, matching the corresponding assistant.turn_start event
      */
@@ -8071,6 +8125,50 @@ export interface ToolExecutionCompleteToolDescriptionMetaUI {
      */
     visibility?: ToolExecutionCompleteToolDescriptionMetaUIVisibility[];
 }
+/**
+ * Authoritative usage reported by a separately metered runtime-owned tool operation. May be present on a failed tool when the service reported usage before local result processing failed. Missing token counts or billing mean unavailable, not zero.
+ */
+/** @experimental */
+export interface ToolExecutionUsage {
+    accounting?: UsageAccountingIdentity;
+    copilotUsage?: AssistantUsageCopilotUsage;
+    /**
+     * Total provider-reported input tokens across all modalities.
+     */
+    inputTokens?: number;
+    inputTokensDetails?: ToolExecutionUsageTokenDetails;
+    /**
+     * Requested model for the tool operation, independent of the conversation model. Not a provider-confirmed serving model.
+     */
+    model: string;
+    /**
+     * Total provider-reported output tokens across all modalities.
+     */
+    outputTokens?: number;
+    outputTokensDetails?: ToolExecutionUsageTokenDetails;
+    provider?: ModelProviderRef;
+    /**
+     * Runtime-generated identifier for this metered operation. Deduplicates repeated delivery or replay; not an upstream billing identifier.
+     */
+    requestId: string;
+    /**
+     * Provider-reported sum of input and output tokens.
+     */
+    totalTokens?: number;
+}
+/**
+ * Provider-reported image and text token counts, which are subsets of the corresponding total rather than additional tokens.
+ */
+export interface ToolExecutionUsageTokenDetails {
+    /**
+     * Image tokens included in the corresponding input or output total.
+     */
+    imageTokens: number;
+    /**
+     * Text tokens included in the corresponding input or output total.
+     */
+    textTokens: number;
+}
 /**
  * Session event "tool_search.activated". Persisted generic client-side tool activations restored when a session resumes.
  */

package/dist/session.js

@@ -825,12 +825,12 @@ class CopilotSession {
         }
       }
     } else if (event.type === "permission.requested") {
-      const { requestId, permissionRequest, resolvedByHook } = event.data;
+      const { requestId, permissionRequest, promptRequest, resolvedByHook } = event.data;
       if (resolvedByHook) {
         return;
       }
       if (this.permissionHandler) {
-        void this._executePermissionAndRespond(requestId, permissionRequest);
+        void this._executePermissionAndRespond(requestId, permissionRequest, promptRequest);
       }
     } else if (event.type === "mcp.oauth_required") {
       const data = event.data;
@@ -989,12 +989,14 @@ class CopilotSession {
    * Executes a permission handler and sends the result back via RPC.
    * @internal
    */
-  async _executePermissionAndRespond(requestId, permissionRequest) {
+  async _executePermissionAndRespond(requestId, permissionRequest, promptRequest) {
     try {
-      const handlerResult = await this.permissionHandler(permissionRequest, {
+      const invocation = {
         sessionId: this.sessionId,
-        managedSettingsEnabled: this.managedSettingsEnabled
-      });
+        managedSettingsEnabled: this.managedSettingsEnabled,
+        ...promptRequest === void 0 ? {} : { promptRequest }
+      };
+      const handlerResult = await this.permissionHandler(permissionRequest, invocation);
       const isAttributed = isAttributedPermissionResult(handlerResult);
       const result = isAttributed ? handlerResult.result : handlerResult;
       const decisionContext = isAttributed ? handlerResult.decisionContext : void 0;

package/dist/types.d.ts

@@ -988,10 +988,11 @@ import type { PermissionDecisionRequest, PermissionDecisionContext } from "./gen
  * access the variant-specific fields (e.g. shell `commands`, write
  * `fileName`/`diff`, mcp `toolName`/`args`).
  *
- * `managedApprovalRequired` indicates that managed policy requires an explicit
- * user decision. Hosts should bypass automatic approval and present their
- * normal confirmation UI. The runtime currently emits it for managed Shell,
- * Read, Edit, and Domain selector asks.
+ * On the raw `permissionRequest`, `managedApprovalRequired` preserves managed
+ * policy provenance and one-shot restrictions. To determine whether a human
+ * response is still required, hosts should prefer
+ * `event.data.promptRequest?.managedApprovalRequired` when `promptRequest` is
+ * present, and fall back to the raw marker for older runtimes.
  */
 export type PermissionRequest = GeneratedPermissionRequest & {
     readonly managedApprovalRequired?: boolean;
@@ -1036,10 +1037,23 @@ export declare function isAttributedPermissionResult(result: PermissionRequestRe
  * permission behavior.
  */
 export declare function createAttributedPermissionResult(result: PermissionRequestResult | AttributedPermissionResult, decisionContext: PermissionDecisionContext): AttributedPermissionResult;
-export type PermissionHandler = (request: PermissionRequest, invocation: {
+/**
+ * Context supplied with a permission request callback.
+ */
+export interface PermissionHandlerInvocation {
     sessionId: string;
     managedSettingsEnabled?: boolean;
-}) => Promise<PermissionRequestResult | AttributedPermissionResult> | PermissionRequestResult | AttributedPermissionResult;
+    /**
+     * Derived user-facing prompt context when supplied by the runtime.
+     *
+     * Managed requests retain their raw `managedApprovalRequired` marker. Only
+     * standard prompt kinds (`commands`, `read`, `write`, `url`, and
+     * `workflow`) can clear that human requirement after Assisted approval.
+     * For missing or other prompt kinds, keep the raw marker authoritative.
+     */
+    promptRequest?: PermissionRequestedData["promptRequest"];
+}
+export type PermissionHandler = (request: PermissionRequest, invocation: PermissionHandlerInvocation) => Promise<PermissionRequestResult | AttributedPermissionResult> | PermissionRequestResult | AttributedPermissionResult;
 /**
  * Approves permission requests when managed settings are disabled.
  */

package/package.json

@@ -5,8 +5,8 @@
         "url": "https://github.com/github/copilot-agent-runtime.git",
         "directory": "src/sdk/nodejs"
     },
-    "version": "1.0.23-preview.0",
-    "copilotCliVersion": "1.0.99-0",
+    "version": "1.0.23-preview.1",
+    "copilotCliVersion": "1.0.99-1",
     "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
     "main": "./dist/cjs/index.js",
     "types": "./dist/index.d.ts",
@@ -81,6 +81,7 @@
         "@typescript-eslint/parser": "^8.54.0",
         "esbuild": "^0.28.1",
         "eslint": "^9.0.0",
+        "file-entry-cache": "file:./scripts/eslint-file-cache",
         "glob": "^13.0.1",
         "hpke-js": "^1.8.0",
         "json-schema": "^0.4.0",
@@ -97,6 +98,9 @@
     "engines": {
         "node": "^20.19.0 || >=22.12.0"
     },
+    "overrides": {
+        "file-entry-cache": "$file-entry-cache"
+    },
     "files": [
         "dist/**/*",
         "!dist/tsconfig.tsbuildinfo",
@@ -104,18 +108,18 @@
         "README.md"
     ],
     "copilotRuntime": {
-        "sourceSha": "1911cf98510f24398cbeeb739a76d9b12b0c74dc",
-        "version": "1.0.99-0",
+        "sourceSha": "7ea4e663f9dbacf776b91d6f8f2ff30b3a5b46eb",
+        "version": "1.0.99-1",
         "visibility": "public"
     },
     "optionalDependencies": {
-        "@github/copilot-sdk-darwin-arm64": "1.0.23-preview.0",
-        "@github/copilot-sdk-darwin-x64": "1.0.23-preview.0",
-        "@github/copilot-sdk-linux-arm64": "1.0.23-preview.0",
-        "@github/copilot-sdk-linux-x64": "1.0.23-preview.0",
-        "@github/copilot-sdk-linuxmusl-arm64": "1.0.23-preview.0",
-        "@github/copilot-sdk-linuxmusl-x64": "1.0.23-preview.0",
-        "@github/copilot-sdk-win32-arm64": "1.0.23-preview.0",
-        "@github/copilot-sdk-win32-x64": "1.0.23-preview.0"
+        "@github/copilot-sdk-darwin-arm64": "1.0.23-preview.1",
+        "@github/copilot-sdk-darwin-x64": "1.0.23-preview.1",
+        "@github/copilot-sdk-linux-arm64": "1.0.23-preview.1",
+        "@github/copilot-sdk-linux-x64": "1.0.23-preview.1",
+        "@github/copilot-sdk-linuxmusl-arm64": "1.0.23-preview.1",
+        "@github/copilot-sdk-linuxmusl-x64": "1.0.23-preview.1",
+        "@github/copilot-sdk-win32-arm64": "1.0.23-preview.1",
+        "@github/copilot-sdk-win32-x64": "1.0.23-preview.1"
     }
 }