@github/copilot-sdk 1.0.23-preview.0 → 1.0.23-preview.2

package/README.md

@@ -128,11 +128,13 @@ await using host = await client.startAhpHost({
             ...config,
             onPermissionRequest: approveAll,
             systemMessage: { mode: "append", content: "Use the app's greeting tool." },
-            tools: [defineTool("greeting", {
-                description: "Get the application's greeting",
-                parameters: { type: "object", properties: {} },
-                handler: () => "Hello from the application!",
-            })],
+            tools: [
+                defineTool("greeting", {
+                    description: "Get the application's greeting",
+                    parameters: { type: "object", properties: {} },
+                    handler: () => "Hello from the application!",
+                }),
+            ],
         });
     },
     onSessionReleased: async (originalSession) => {
@@ -1353,6 +1355,8 @@ Inbound trace context from the CLI is available on the `ToolInvocation` object p
 
 An `onPermissionRequest` handler is optional when you create or resume a session. When provided, it is called before the agent executes each tool (file writes, shell commands, custom tools, etc.) and returns a decision. When omitted, permission requests are emitted as events and left pending for the consumer to resolve with the pending permission RPC.
 
+Callbacks receive optional derived prompt context as `invocation.promptRequest`. The raw request's `managedApprovalRequired` remains managed-policy provenance and enforces one-shot restrictions. Only derived `commands`, `read`, `write`, `url`, and `workflow` prompts can clear the human requirement after Assisted approval; for missing or other prompt kinds, keep the raw marker authoritative.
+
 ### Approve All (simplest)
 
 Use the built-in `approveAll` helper when managed settings are disabled:

package/dist/cjs/cliVersion.js

@@ -22,7 +22,7 @@ __export(cliVersion_exports, {
   COPILOT_CLI_VERSION: () => COPILOT_CLI_VERSION
 });
 module.exports = __toCommonJS(cliVersion_exports);
-const COPILOT_CLI_VERSION = "1.0.99-0";
+const COPILOT_CLI_VERSION = "1.0.99-2";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/cjs/generated/rpc.js

@@ -761,6 +761,22 @@ function createServerRpc(connection) {
        * @returns Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
        */
       search: async (params) => connection.sendRequest("catalog.search", params),
+      /**
+       * Retrieves one saved feed by its opaque ID, optionally filtered by trust tier. Requires catalog-feeds and catalog-search-credential-required, and uses the same authority, credential policy, optional session binding and candidate projection as catalog.search, so available entries are the same inert candidates, with the same installability, handles and display metadata, and install through the same confirmed flows. Entries keep the feed's order; an entry the runtime cannot present is returned as unavailable with a reason rather than failing the feed. No anonymous retry. Read-only: nothing is installed, configured, or persisted.
+       *
+       * @param params Retrieves one saved feed by its opaque ID. Requires catalog-feeds and catalog-search-credential-required; add catalog-search-session-bound with policySessionId to retain the selected session's authority for installation, exactly as for catalog.search.
+       *
+       * @returns Outcome of catalog.getSavedFeed: the feed with its entries, or one typed refusal. An entry that cannot be presented never fails the feed.
+       */
+      getSavedFeed: async (params) => connection.sendRequest("catalog.getSavedFeed", params),
+      /**
+       * Retrieves one generated feed by strategy and key, such as telemetry/popular, optionally filtered by trust tier. Requires catalog-feeds and catalog-search-credential-required, and uses the same authority, credential policy, optional session binding and candidate projection as catalog.search, so available entries are the same inert candidates, with the same installability, handles and display metadata, and install through the same confirmed flows. Entries keep the feed's order; an entry the runtime cannot present is returned as unavailable with a reason rather than failing the feed. No anonymous retry. Read-only: nothing is installed, configured, or persisted.
+       *
+       * @param params Retrieves one generated feed, computed on every request, by strategy and key, such as `telemetry` and `popular`. Requires catalog-feeds and catalog-search-credential-required; add catalog-search-session-bound with policySessionId to retain the selected session's authority for installation, exactly as for catalog.search.
+       *
+       * @returns Outcome of catalog.getGeneratedFeed: the feed with its entries, or one typed refusal. An entry that cannot be presented never fails the feed.
+       */
+      getGeneratedFeed: async (params) => connection.sendRequest("catalog.getGeneratedFeed", params),
       /**
        * Terminates one retained catalog selection group. A selected outcome returns the native host a fresh single-use candidate handle plus the original searchId for a later explicit mcp.planInstall call; non-selected outcomes release the group without producing a planning input. Candidate state, cards, URLs, credentials and private identifiers remain inside the runtime. The model-facing catalog_select tool projects the result separately and never exposes the candidate handle or searchId.
        *
@@ -2156,7 +2172,7 @@ function createSessionRpc(connection, sessionId) {
         /**
          * Begin an interactive login flow for a provider kind (dispatch is kind-only) and return its opaque flow id and first step.
          *
-         * @param params Begin an interactive login flow for a provider kind. Dispatch is kind-only.
+         * @param params Begin an interactive login flow for a provider kind, optionally reusing a cached base identity or explicitly requesting provider account selection.
          *
          * @returns A started login flow: its opaque id and first step.
          */
@@ -2755,6 +2771,14 @@ function createSessionRpc(connection, sessionId) {
        * @returns Progress information for the task, or null when no task with that ID is tracked.
        */
       getProgress: async (params) => connection.sendRequest("session.tasks.getProgress", { ...params, sessionId }),
+      /**
+       * Reads a detached shell task's output after a cursor, optionally waiting for new output or for the shell to finish.
+       *
+       * @param params Detached shell task to read output from, with an optional cursor and long-poll wait. waitMs defaults to zero (maximum 30000).
+       *
+       * @returns Output a detached shell task wrote after the request cursor, with the cursor for the next read.
+       */
+      readOutput: async (params) => connection.sendRequest("session.tasks.readOutput", { ...params, sessionId }),
       /**
        * Returns the first sync-waiting task that can currently be promoted to background mode.
        *

package/dist/cjs/session.js

@@ -843,12 +843,12 @@ class CopilotSession {
         }
       }
     } else if (event.type === "permission.requested") {
-      const { requestId, permissionRequest, resolvedByHook } = event.data;
+      const { requestId, permissionRequest, promptRequest, resolvedByHook } = event.data;
       if (resolvedByHook) {
         return;
       }
       if (this.permissionHandler) {
-        void this._executePermissionAndRespond(requestId, permissionRequest);
+        void this._executePermissionAndRespond(requestId, permissionRequest, promptRequest);
       }
     } else if (event.type === "mcp.oauth_required") {
       const data = event.data;
@@ -1007,12 +1007,14 @@ class CopilotSession {
    * Executes a permission handler and sends the result back via RPC.
    * @internal
    */
-  async _executePermissionAndRespond(requestId, permissionRequest) {
+  async _executePermissionAndRespond(requestId, permissionRequest, promptRequest) {
     try {
-      const handlerResult = await this.permissionHandler(permissionRequest, {
+      const invocation = {
         sessionId: this.sessionId,
-        managedSettingsEnabled: this.managedSettingsEnabled
-      });
+        managedSettingsEnabled: this.managedSettingsEnabled,
+        ...promptRequest === void 0 ? {} : { promptRequest }
+      };
+      const handlerResult = await this.permissionHandler(permissionRequest, invocation);
       const isAttributed = (0, import_types.isAttributedPermissionResult)(handlerResult);
       const result = isAttributed ? handlerResult.result : handlerResult;
       const decisionContext = isAttributed ? handlerResult.decisionContext : void 0;

package/dist/cliVersion.d.ts

@@ -1,2 +1,2 @@
-export declare const COPILOT_CLI_VERSION = "1.0.99-0";
+export declare const COPILOT_CLI_VERSION = "1.0.99-2";
 export declare const COPILOT_CLI_USE_NPM_PACKAGE = false;

package/dist/cliVersion.js

@@ -1,4 +1,4 @@
-const COPILOT_CLI_VERSION = "1.0.99-0";
+const COPILOT_CLI_VERSION = "1.0.99-2";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 export {
   COPILOT_CLI_USE_NPM_PACKAGE,