@github/copilot-sdk 1.0.23-preview.2 → 1.0.23-preview.4

package/README.md

@@ -1207,6 +1207,23 @@ const session = await client.createSession({
 
 See [Custom skills](../docs/features/skills.md#skill-providers-experimental) for limits and details.
 
+#### Supporting files (experimental)
+
+To give a provider skill supporting files, such as scripts, references,
+templates, and assets, set its descriptor's `directory` to the absolute path of
+the folder that holds them:
+
+```typescript
+{
+    name: "release-notes",
+    description: "Writes release notes in the team's format.",
+    directory: "/srv/skills/release-notes",
+}
+```
+
+When the skill is activated, the runtime lists the folder's files for the model.
+See [Supporting files](../docs/features/skills.md#supporting-files-experimental) for details.
+
 ### Multiple Sessions
 
 ```typescript

package/dist/cjs/cliVersion.js

@@ -22,7 +22,7 @@ __export(cliVersion_exports, {
   COPILOT_CLI_VERSION: () => COPILOT_CLI_VERSION
 });
 module.exports = __toCommonJS(cliVersion_exports);
-const COPILOT_CLI_VERSION = "1.0.99-2";
+const COPILOT_CLI_VERSION = "1.0.100-0";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/cjs/generated/rpc.js

@@ -281,6 +281,81 @@ function createServerRpc(connection) {
       listTokenPriceUnits: async (params) => connection.sendRequest("models.listTokenPriceUnits", params)
     },
     /** @experimental */
+    azureMl: {
+      /**
+       * Lists eligible Azure ML local models and redacted warnings before a chat session exists.
+       *
+       * @param params Lists models eligible for local use before a chat session exists.
+       *
+       * @returns Eligible models and redacted validation warnings.
+       */
+      catalog: async (params) => connection.sendRequest("azureMl.catalog", params),
+      /**
+       * Revalidates the newest eligible version of one Azure ML model family.
+       *
+       * @param params Selects an Azure ML model family.
+       *
+       * @returns Eligible Azure ML model version and its provider metadata.
+       */
+      latest: async (params) => connection.sendRequest("azureMl.latest", params),
+      /**
+       * Resolves immutable artifact facts without returning signed access URLs.
+       *
+       * @param params Selects an immutable model version.
+       *
+       * @returns Resolved artifact facts without signed download URLs.
+       */
+      resolve: async (params) => connection.sendRequest("azureMl.resolve", params),
+      /**
+       * Downloads and verifies a connection-owned model version, returning only after placement and manifest publication.
+       *
+       * @param params Downloads a model version to its configured local library.
+       *
+       * @returns Completed and verified Azure ML model files.
+       */
+      download: async (params) => connection.sendRequest("azureMl.download", params),
+      /**
+       * Acquires a connection-owned model-family mutation lease across transfer, activation, registration, and cleanup.
+       *
+       * @param params Identifies a family in the server's Azure ML model library.
+       *
+       * @returns Opaque handle to a connection-owned family mutation interval.
+       */
+      acquireFamily: async (params) => connection.sendRequest("azureMl.acquireFamily", params),
+      /**
+       * Releases a connection-owned family lease after its active download and cleanup operations complete.
+       *
+       * @param params Releases a family mutation interval owned by this SDK connection.
+       *
+       * @returns Empty acknowledgement for a completed host lifecycle operation.
+       */
+      releaseFamily: async (params) => connection.sendRequest("azureMl.releaseFamily", params),
+      /**
+       * Returns progress for an active download owned by this connection, or null after completion.
+       *
+       * @param params Selects an active connection-owned download.
+       *
+       * @returns Active Azure ML download progress or null.
+       */
+      status: async (params) => connection.sendRequest("azureMl.status", params),
+      /**
+       * Cancels a connection-owned download; the download call reports terminal cleanup separately.
+       *
+       * @param params Selects an active connection-owned download.
+       *
+       * @returns Whether an active connection-owned transfer accepted cancellation.
+       */
+      cancel: async (params) => connection.sendRequest("azureMl.cancel", params),
+      /**
+       * Discards an inactive model version under the server-owned Azure ML library.
+       *
+       * @param params Selects an inactive Azure ML version for cleanup.
+       *
+       * @returns Empty acknowledgement for a completed host lifecycle operation.
+       */
+      discard: async (params) => connection.sendRequest("azureMl.discard", params)
+    },
+    /** @experimental */
     contentExclusion: {
       /**
        * Validates candidate content-exclusion policies and returns them normalized, without starting a session. This runs the same parser the runtime's own policy enforcement uses, so a host cannot accept a policy set the runtime would later reject, nor reject one it would have honored. Call it when policies arrive from outside the runtime — a command-line flag, a configuration file, a host's own settings — and must be checked before a session exists to apply them to. A malformed document fails with a message prefixed `Invalid JSON: `; a well-formed document that violates the policy schema fails with the offending field paths.
@@ -2964,9 +3039,9 @@ function createSessionRpc(connection, sessionId) {
       /** @experimental */
       oauth: {
         /**
-         * Resolves a pending MCP OAuth request with a host-provided token or cancellation. The pending request is emitted as mcp.oauth_required with the data necessary to authorize the request.
+         * Resolves a pending MCP OAuth request with a host-provided token, cancellation, or a noninteractive runtime refresh handoff when the request advertises runtimeRefreshSupported. Acceptance resolves the host response, not credential installation, reconnect, or the original tool invocation.
          *
-         * @param params Pending MCP OAuth request ID and host-provided token or cancellation response.
+         * @param params Pending MCP OAuth request ID and host token, cancellation, or advertised runtime refresh response.
          *
          * @returns Indicates whether the pending MCP OAuth response was accepted.
          */

package/dist/cjs/session.js

@@ -1057,7 +1057,7 @@ class CopilotSession {
   async _executeMcpAuthAndRespond(request) {
     try {
       const result = await this.mcpAuthHandler(request, { sessionId: this.sessionId });
-      const response = result && "accessToken" in result ? { kind: "token", ...result } : { kind: "cancelled" };
+      const response = result && "kind" in result && result.kind === "cancelled" ? { kind: "cancelled" } : result && "accessToken" in result && typeof result.accessToken === "string" && result.accessToken.length > 0 ? { ...result, kind: "token" } : result && "kind" in result && result.kind === "runtimeRefresh" && request.runtimeRefreshSupported === true ? { kind: "runtimeRefresh" } : { kind: "cancelled" };
       await this.rpc.mcp.oauth.handlePendingRequest({
         requestId: request.requestId,
         result: response

package/dist/cliVersion.d.ts

@@ -1,2 +1,2 @@
-export declare const COPILOT_CLI_VERSION = "1.0.99-2";
+export declare const COPILOT_CLI_VERSION = "1.0.100-0";
 export declare const COPILOT_CLI_USE_NPM_PACKAGE = false;

package/dist/cliVersion.js

@@ -1,4 +1,4 @@
-const COPILOT_CLI_VERSION = "1.0.99-2";
+const COPILOT_CLI_VERSION = "1.0.100-0";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 export {
   COPILOT_CLI_USE_NPM_PACKAGE,

package/dist/generated/rpc.d.ts

@@ -541,6 +541,46 @@ export type AutopilotObjectiveStatus =
  | "paused"
 /** The objective completed. */
  | "completed";
+/**
+ * Whether an active connection-owned transfer accepted cancellation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCancelResult".
+ */
+/** @experimental */
+export type AzureMlCancelResult = boolean;
+/**
+ * How catalog discovery handles a recent sign-in failure.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCatalogRetryMode".
+ */
+/** @experimental */
+export type AzureMlCatalogRetryMode = 
+/** Reuse a recent failure for automatic background discovery. */
+"background"
+/** Retry sign-in after an explicit refresh. */
+ | "explicit";
+/**
+ * Registry that owns an Azure ML model version.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlRegistry".
+ */
+/** @experimental */
+export type AzureMlRegistry = 
+/** Public Azure ML model registry. */
+"azureml"
+/** Microsoft staff development registry. */
+ | "azureml-dev";
+/**
+ * Active Azure ML download progress or null.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlStatusResult".
+ */
+/** @experimental */
+export type AzureMlStatusResult = AzureMlDownloadStatus | null;
 /**
  * Root JSON Schema type for a built-in tool input.
  *
@@ -994,7 +1034,9 @@ export type CatalogCapability =
 /** Understands catalog.planInstallFromReference, which plans installing whatever resource an Agent Finder materialisation reference pins. It plans only kinds whose installation capability the caller also requires: skill-confirmed-installation for Skills, agent-plugin-confirmed-installation for Agent Plugins. Advertised only by runtimes with the Skill installation engine linked. */
  | "catalog-reference-installation"
 /** Understands catalog.getSavedFeed and catalog.getGeneratedFeed, which retrieve a saved or generated feed with entries projected exactly like catalog.search candidates. Requires catalog-search-credential-required; add catalog-search-session-bound to bind the retrieval to a selected session. */
- | "catalog-feeds";
+ | "catalog-feeds"
+/** Understands the optional `categories` filter on catalog.search, which the runtime forwards to the catalog authority. Required to send the filter, so an older runtime refuses the request instead of silently returning unfiltered results. */
+ | "catalog-search-categories";
 /**
  * Bounded extensible wire-feature identifier. Known values are described by `CatalogCapability`; newer callers may send future identifiers so an older runtime can return a typed negotiation refusal instead of failing schema validation. Capability negotiation establishes contract understanding, while each operation's result separately reports runtime availability.
  *
@@ -1134,7 +1176,9 @@ export type CatalogInvalidRequestField =
 /** The saved feed ID, or the generated feed strategy or key, was missing or malformed. */
  | "feed"
 /** The trust tier filter was empty, repeated a tier or named an unknown tier. */
- | "trustTiers";
+ | "trustTiers"
+/** The category filter was empty, too long, repeated a category or contained a value that is not a lowercase slug. */
+ | "categories";
 /**
  * How a card failed validation
  *
@@ -3644,6 +3688,11 @@ export type McpOauthPendingRequestResponse = {
      * OAuth response variant discriminator.
      */
     kind: "cancelled";
+} | {
+    /**
+     * OAuth response variant discriminator.
+     */
+    kind: "runtimeRefresh";
 };
 /**
  * OAuth grant type override for this login.
@@ -8265,6 +8314,399 @@ export interface AutoTierMetadata {
      */
     providerId?: string;
 }
+/**
+ * Lists models eligible for local use before a chat session exists.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCatalogRequest".
+ */
+/** @experimental */
+export interface AzureMlCatalogRequest {
+    /**
+     * Ask for the staff registry; the server also verifies its own authenticated identity.
+     */
+    includeDev: boolean;
+    /**
+     * An explicit user refresh retries a cached sign-in failure.
+     */
+    retryMode?: AzureMlCatalogRetryMode | null;
+}
+/**
+ * Eligible models and redacted validation warnings.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCatalogResult".
+ */
+/** @experimental */
+export interface AzureMlCatalogResult {
+    /**
+     * Model versions suitable for local use.
+     */
+    models: AzureMlModel[];
+    /**
+     * Skipped model and catalog errors without sensitive access details.
+     */
+    warnings: AzureMlCatalogWarning[];
+}
+/**
+ * Eligible Azure ML model version and its provider metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlModel".
+ */
+/** @experimental */
+export interface AzureMlModel {
+    registry: AzureMlRegistry;
+    /**
+     * Stable model-family name.
+     */
+    name: string;
+    /**
+     * Exact published model version.
+     */
+    version: string;
+    profile: AzureMlProfile;
+    /**
+     * Provider metadata retained for registration.
+     */
+    metadata: JsonValue;
+}
+/**
+ * Validated local runtime requirements for an Azure ML model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlProfile".
+ */
+/** @experimental */
+export interface AzureMlProfile {
+    /**
+     * Sanitized model-picker display label.
+     */
+    displayName: string;
+    /**
+     * Published download size, when available.
+     */
+    downloadBytes?: number | null;
+    /**
+     * Peak disk use during installation, when available.
+     */
+    peakDiskBytes?: number | null;
+    /**
+     * Recommended graphics memory, when available.
+     */
+    recommendedVramBytes?: number | null;
+    /**
+     * Maximum input tokens accepted by the model.
+     */
+    maxPromptTokens: number;
+    /**
+     * Maximum context window accepted by the model.
+     */
+    maxContextWindowTokens: number;
+    /**
+     * Maximum output tokens produced by the model.
+     */
+    maxOutputTokens: number;
+    /**
+     * Whether the model supports tool calls.
+     */
+    supportsToolCalls: boolean;
+    /**
+     * Validated local runtime configuration.
+     */
+    serveOptions: JsonValue;
+    /**
+     * Published license, when available.
+     */
+    license?: AzureMlLicense | null;
+}
+/**
+ * License published with an eligible Azure ML model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlLicense".
+ */
+/** @experimental */
+export interface AzureMlLicense {
+    /**
+     * Bounded display label for the model license.
+     */
+    name: string;
+}
+/**
+ * Redacted warning for a skipped model or registry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCatalogWarning".
+ */
+/** @experimental */
+export interface AzureMlCatalogWarning {
+    registry: AzureMlRegistry;
+    /**
+     * Model family, or `catalog` for registry-wide errors.
+     */
+    modelName: string;
+    /**
+     * Version, if one was available.
+     */
+    version?: string | null;
+    /**
+     * Safe reason without signed access details.
+     */
+    kind: string;
+}
+/**
+ * Selects an inactive Azure ML version for cleanup.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDiscardRequest".
+ */
+/** @experimental */
+export interface AzureMlDiscardRequest {
+    /**
+     * Version directory under this server's Azure ML library.
+     */
+    destination: string;
+    /**
+     * Optional connection-owned lease that spans the caller's complete family mutation.
+     */
+    leaseId?: string | null;
+}
+/**
+ * Selects an active connection-owned download.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDownloadIdRequest".
+ */
+/** @experimental */
+export interface AzureMlDownloadIdRequest {
+    /**
+     * Identifier supplied when this connection started the download.
+     */
+    requestId: string;
+}
+/**
+ * Downloads a model version to its configured local library.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDownloadRequest".
+ */
+/** @experimental */
+export interface AzureMlDownloadRequest {
+    /**
+     * Unique request identifier for progress and explicit cancellation.
+     */
+    requestId: string;
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+    /**
+     * Exact published version.
+     */
+    version: string;
+    /**
+     * Version directory under this server's Azure ML library.
+     */
+    destination: string;
+    /**
+     * Optional connection-owned lease that spans the caller's complete family mutation.
+     */
+    leaseId?: string | null;
+}
+/**
+ * Completed and verified Azure ML model files.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDownloadResult".
+ */
+/** @experimental */
+export interface AzureMlDownloadResult {
+    /**
+     * Installed GGUF path.
+     */
+    primaryPath: string;
+    /**
+     * Published manifest path.
+     */
+    manifestPath: string;
+    /**
+     * Exact bytes across the model version.
+     */
+    totalBytes: number;
+    /**
+     * Whether all prior verified files were reused.
+     */
+    reused: boolean;
+    /**
+     * Validated local runtime settings.
+     */
+    serveOptions: JsonValue;
+    /**
+     * Maximum supported local concurrency.
+     */
+    maxConcurrent: number;
+    /**
+     * Installed companion file paths.
+     */
+    extraFiles: string[];
+    /**
+     * Transient transfer failures retried during this run.
+     */
+    totalFailures?: number | null;
+    /**
+     * Bytes received over the network during this run, including discarded bytes.
+     */
+    receivedBytes?: number | null;
+    /**
+     * Whether a partial from a prior run continued after the server accepted its range.
+     */
+    resumed?: boolean | null;
+}
+/**
+ * Progress and retry facts for one active download.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDownloadStatus".
+ */
+/** @experimental */
+export interface AzureMlDownloadStatus {
+    /**
+     * Current transfer phase.
+     */
+    phase: string;
+    /**
+     * Bytes completed across all files.
+     */
+    completedBytes: number;
+    /**
+     * Exact bytes expected across all files.
+     */
+    totalBytes: number;
+    /**
+     * Next retry attempt, if the transfer is retrying.
+     */
+    retryAttempt?: number | null;
+    /**
+     * Configured retry limit, if the transfer is retrying.
+     */
+    maxAttempts?: number | null;
+    /**
+     * Redacted failure reason, if the transfer is retrying.
+     */
+    retryReason?: string | null;
+    /**
+     * Planned delay before retry, if the transfer is retrying.
+     */
+    retryDelayMs?: number | null;
+}
+/**
+ * Opaque handle to a connection-owned family mutation interval.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlFamilyLeaseResult".
+ */
+/** @experimental */
+export interface AzureMlFamilyLeaseResult {
+    /**
+     * Server-generated handle, valid only on the originating SDK connection.
+     */
+    leaseId: string;
+}
+/**
+ * Releases a family mutation interval owned by this SDK connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlFamilyReleaseRequest".
+ */
+/** @experimental */
+export interface AzureMlFamilyReleaseRequest {
+    /**
+     * Server-generated handle from `azureMl.acquireFamily`.
+     */
+    leaseId: string;
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+}
+/**
+ * Identifies a family in the server's Azure ML model library.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlFamilyRequest".
+ */
+/** @experimental */
+export interface AzureMlFamilyRequest {
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+}
+/**
+ * Selects an Azure ML model family.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlLatestRequest".
+ */
+/** @experimental */
+export interface AzureMlLatestRequest {
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+}
+/**
+ * Selects an immutable model version.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlResolveRequest".
+ */
+/** @experimental */
+export interface AzureMlResolveRequest {
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+    /**
+     * Exact published version.
+     */
+    version: string;
+}
+/**
+ * Resolved artifact facts without signed download URLs.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlResolveResult".
+ */
+/** @experimental */
+export interface AzureMlResolveResult {
+    /**
+     * Exact bytes across all files in this version.
+     */
+    totalBytes: number;
+    /**
+     * GGUF path relative to the version directory.
+     */
+    primaryPath: string;
+    /**
+     * Other paths relative to the version directory.
+     */
+    extraFiles: string[];
+    /**
+     * Validated local runtime settings.
+     */
+    serveOptions: JsonValue;
+    /**
+     * Maximum supported local concurrency.
+     */
+    maxConcurrent: number;
+}
 /**
  * The running runtime's complete catalog of well-known built-in model IDs, including supported models and additional IDs with built-in metadata.
  *
@@ -10172,6 +10614,13 @@ export interface CatalogSearchRequest {
      * @maxItems 3
      */
     kinds?: [CatalogCandidateKind] | [CatalogCandidateKind, CatalogCandidateKind] | [CatalogCandidateKind, CatalogCandidateKind, CatalogCandidateKind];
+    /**
+     * Restrict results to resources in at least one of these server-defined workflow categories, such as `design` or `test`. Requires the `catalog-search-categories` capability. Each value is a lowercase slug; the known set is not exhaustive, and a category the server does not recognise matches nothing. Omit to search every category.
+     *
+     * @minItems 1
+     * @maxItems 10
+     */
+    categories?: [string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string];
     page?: CatalogSearchPage;
 }
 /**
@@ -16285,6 +16734,10 @@ export interface McpConfiguredServerState {
      * Observed connection error, when the materialized server failed.
      */
     error?: string;
+    /**
+     * Whether the server's current connection has loaded its tool list (from tools/list or a cached snapshot). A connected server without loaded tools is still loading them; the change is signalled by session.mcp_server_tools_loaded. Absent when the runtime does not report it.
+     */
+    toolsLoaded?: boolean;
 }
 /**
  * Effective MCP configuration with optional live observations from matching already materialized servers.
@@ -16876,7 +17329,7 @@ export interface McpOauthCompleteRequest {
     callbackUrl: string;
 }
 /**
- * Pending MCP OAuth request ID and host-provided token or cancellation response.
+ * Pending MCP OAuth request ID and host token, cancellation, or advertised runtime refresh response.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "McpOauthHandlePendingRequest".
@@ -25779,6 +26232,10 @@ export interface SessionOpenOptions {
      * @experimental
      */
     additionalContentExclusionPolicies?: SessionOpenOptionsAdditionalContentExclusionPolicy[];
+    /**
+     * Live gate for repository-origin file hooks, including the primary repository, trusted repository-configured roots, and accepted startup additional directories (including CLI --add-dir). False suppresses these hooks; explicit hookDirectories and SDK callbacks are independent. Additional-root eligibility and the DISABLE_ADDITIONAL_DIRECTORY_HOOKS escape hatch are captured at create/cold resume, not expanded by later grants or feature-flag changes. Discovery uses containing Git roots, so supply only trusted repositories: commands and prompts need no further approval. Policy, hook-disable settings, and sandbox rules still apply. Provider-backed sessions skip repository hooks with a warning on omission, skip silently on false, and reject explicit true.
+     */
+    enableFileHooks?: boolean;
     memory?: MemoryConfiguration;
     /**
      * Capabilities enabled for this session.
@@ -27970,6 +28427,10 @@ export interface SkillProviderDescriptor {
      * Optional freeform argument hint used by slash-command catalogs.
      */
     argumentHint?: string;
+    /**
+     * Absolute path to the folder that holds the skill's supporting files (scripts, references, templates, assets), in the session's path conventions: the host OS for local disk, or the registered SessionFs conventions. When the skill is activated the runtime lists the folder's files for the model through the session's filesystem, with the same rules as a file-based skill's folder; it never reads or copies them. On local disk the folder becomes a read-only skill root, like a configured skill directory. It is not shown in skill catalogs.
+     */
+    directory?: string;
 }
 /**
  * Skill names to mark as disabled in global configuration, replacing any previous list.
@@ -32459,6 +32920,118 @@ export interface ModelsListTokenPriceUnitsRequest {
      */
     gitHubToken?: string;
 }
+/**
+ * Eligible Azure ML model version and its provider metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlLatestResult".
+ */
+/** @experimental */
+export interface AzureMlLatestResult {
+    registry: AzureMlRegistry;
+    /**
+     * Stable model-family name.
+     */
+    name: string;
+    /**
+     * Exact published model version.
+     */
+    version: string;
+    profile: AzureMlProfile;
+    /**
+     * Provider metadata retained for registration.
+     */
+    metadata: JsonValue;
+}
+/**
+ * Opaque handle to a connection-owned family mutation interval.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlAcquireFamilyResult".
+ */
+/** @experimental */
+export interface AzureMlAcquireFamilyResult {
+    /**
+     * Server-generated handle, valid only on the originating SDK connection.
+     */
+    leaseId: string;
+}
+/**
+ * Identifies a family in the server's Azure ML model library.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlAcquireFamilyRequest".
+ */
+/** @experimental */
+export interface AzureMlAcquireFamilyRequest {
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+}
+/**
+ * Empty acknowledgement for a completed host lifecycle operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlReleaseFamilyResult".
+ */
+/** @experimental */
+export interface AzureMlReleaseFamilyResult {
+}
+/**
+ * Releases a family mutation interval owned by this SDK connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlReleaseFamilyRequest".
+ */
+/** @experimental */
+export interface AzureMlReleaseFamilyRequest {
+    /**
+     * Server-generated handle from `azureMl.acquireFamily`.
+     */
+    leaseId: string;
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+}
+/**
+ * Selects an active connection-owned download.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlStatusRequest".
+ */
+/** @experimental */
+export interface AzureMlStatusRequest {
+    /**
+     * Identifier supplied when this connection started the download.
+     */
+    requestId: string;
+}
+/**
+ * Selects an active connection-owned download.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCancelRequest".
+ */
+/** @experimental */
+export interface AzureMlCancelRequest {
+    /**
+     * Identifier supplied when this connection started the download.
+     */
+    requestId: string;
+}
+/**
+ * Empty acknowledgement for a completed host lifecycle operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDiscardResult".
+ */
+/** @experimental */
+export interface AzureMlDiscardResult {
+}
 /** @experimental */
 export interface SessionWorkflowPauseAtCheckpointResult {
     action: WorkflowPauseCheckpointAction;
@@ -33239,6 +33812,81 @@ export declare function createServerRpc(connection: MessageConnection): {
         listTokenPriceUnits: (params?: ModelsListTokenPriceUnitsRequest) => Promise<ModelTokenPriceUnitList>;
     };
     /** @experimental */
+    azureMl: {
+        /**
+         * Lists eligible Azure ML local models and redacted warnings before a chat session exists.
+         *
+         * @param params Lists models eligible for local use before a chat session exists.
+         *
+         * @returns Eligible models and redacted validation warnings.
+         */
+        catalog: (params: AzureMlCatalogRequest) => Promise<AzureMlCatalogResult>;
+        /**
+         * Revalidates the newest eligible version of one Azure ML model family.
+         *
+         * @param params Selects an Azure ML model family.
+         *
+         * @returns Eligible Azure ML model version and its provider metadata.
+         */
+        latest: (params: AzureMlLatestRequest) => Promise<AzureMlLatestResult>;
+        /**
+         * Resolves immutable artifact facts without returning signed access URLs.
+         *
+         * @param params Selects an immutable model version.
+         *
+         * @returns Resolved artifact facts without signed download URLs.
+         */
+        resolve: (params: AzureMlResolveRequest) => Promise<AzureMlResolveResult>;
+        /**
+         * Downloads and verifies a connection-owned model version, returning only after placement and manifest publication.
+         *
+         * @param params Downloads a model version to its configured local library.
+         *
+         * @returns Completed and verified Azure ML model files.
+         */
+        download: (params: AzureMlDownloadRequest) => Promise<AzureMlDownloadResult>;
+        /**
+         * Acquires a connection-owned model-family mutation lease across transfer, activation, registration, and cleanup.
+         *
+         * @param params Identifies a family in the server's Azure ML model library.
+         *
+         * @returns Opaque handle to a connection-owned family mutation interval.
+         */
+        acquireFamily: (params: AzureMlAcquireFamilyRequest) => Promise<AzureMlAcquireFamilyResult>;
+        /**
+         * Releases a connection-owned family lease after its active download and cleanup operations complete.
+         *
+         * @param params Releases a family mutation interval owned by this SDK connection.
+         *
+         * @returns Empty acknowledgement for a completed host lifecycle operation.
+         */
+        releaseFamily: (params: AzureMlReleaseFamilyRequest) => Promise<AzureMlReleaseFamilyResult>;
+        /**
+         * Returns progress for an active download owned by this connection, or null after completion.
+         *
+         * @param params Selects an active connection-owned download.
+         *
+         * @returns Active Azure ML download progress or null.
+         */
+        status: (params: AzureMlStatusRequest) => Promise<AzureMlStatusResult>;
+        /**
+         * Cancels a connection-owned download; the download call reports terminal cleanup separately.
+         *
+         * @param params Selects an active connection-owned download.
+         *
+         * @returns Whether an active connection-owned transfer accepted cancellation.
+         */
+        cancel: (params: AzureMlCancelRequest) => Promise<AzureMlCancelResult>;
+        /**
+         * Discards an inactive model version under the server-owned Azure ML library.
+         *
+         * @param params Selects an inactive Azure ML version for cleanup.
+         *
+         * @returns Empty acknowledgement for a completed host lifecycle operation.
+         */
+        discard: (params: AzureMlDiscardRequest) => Promise<AzureMlDiscardResult>;
+    };
+    /** @experimental */
     contentExclusion: {
         /**
          * Validates candidate content-exclusion policies and returns them normalized, without starting a session. This runs the same parser the runtime's own policy enforcement uses, so a host cannot accept a policy set the runtime would later reject, nor reject one it would have honored. Call it when policies arrive from outside the runtime — a command-line flag, a configuration file, a host's own settings — and must be checked before a session exists to apply them to. A malformed document fails with a message prefixed `Invalid JSON: `; a well-formed document that violates the policy schema fails with the offending field paths.
@@ -35044,9 +35692,9 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         /** @experimental */
         oauth: {
             /**
-             * Resolves a pending MCP OAuth request with a host-provided token or cancellation. The pending request is emitted as mcp.oauth_required with the data necessary to authorize the request.
+             * Resolves a pending MCP OAuth request with a host-provided token, cancellation, or a noninteractive runtime refresh handoff when the request advertises runtimeRefreshSupported. Acceptance resolves the host response, not credential installation, reconnect, or the original tool invocation.
              *
-             * @param params Pending MCP OAuth request ID and host-provided token or cancellation response.
+             * @param params Pending MCP OAuth request ID and host token, cancellation, or advertised runtime refresh response.
              *
              * @returns Indicates whether the pending MCP OAuth response was accepted.
              */

package/dist/generated/rpc.js

@@ -253,6 +253,81 @@ function createServerRpc(connection) {
       listTokenPriceUnits: async (params) => connection.sendRequest("models.listTokenPriceUnits", params)
     },
     /** @experimental */
+    azureMl: {
+      /**
+       * Lists eligible Azure ML local models and redacted warnings before a chat session exists.
+       *
+       * @param params Lists models eligible for local use before a chat session exists.
+       *
+       * @returns Eligible models and redacted validation warnings.
+       */
+      catalog: async (params) => connection.sendRequest("azureMl.catalog", params),
+      /**
+       * Revalidates the newest eligible version of one Azure ML model family.
+       *
+       * @param params Selects an Azure ML model family.
+       *
+       * @returns Eligible Azure ML model version and its provider metadata.
+       */
+      latest: async (params) => connection.sendRequest("azureMl.latest", params),
+      /**
+       * Resolves immutable artifact facts without returning signed access URLs.
+       *
+       * @param params Selects an immutable model version.
+       *
+       * @returns Resolved artifact facts without signed download URLs.
+       */
+      resolve: async (params) => connection.sendRequest("azureMl.resolve", params),
+      /**
+       * Downloads and verifies a connection-owned model version, returning only after placement and manifest publication.
+       *
+       * @param params Downloads a model version to its configured local library.
+       *
+       * @returns Completed and verified Azure ML model files.
+       */
+      download: async (params) => connection.sendRequest("azureMl.download", params),
+      /**
+       * Acquires a connection-owned model-family mutation lease across transfer, activation, registration, and cleanup.
+       *
+       * @param params Identifies a family in the server's Azure ML model library.
+       *
+       * @returns Opaque handle to a connection-owned family mutation interval.
+       */
+      acquireFamily: async (params) => connection.sendRequest("azureMl.acquireFamily", params),
+      /**
+       * Releases a connection-owned family lease after its active download and cleanup operations complete.
+       *
+       * @param params Releases a family mutation interval owned by this SDK connection.
+       *
+       * @returns Empty acknowledgement for a completed host lifecycle operation.
+       */
+      releaseFamily: async (params) => connection.sendRequest("azureMl.releaseFamily", params),
+      /**
+       * Returns progress for an active download owned by this connection, or null after completion.
+       *
+       * @param params Selects an active connection-owned download.
+       *
+       * @returns Active Azure ML download progress or null.
+       */
+      status: async (params) => connection.sendRequest("azureMl.status", params),
+      /**
+       * Cancels a connection-owned download; the download call reports terminal cleanup separately.
+       *
+       * @param params Selects an active connection-owned download.
+       *
+       * @returns Whether an active connection-owned transfer accepted cancellation.
+       */
+      cancel: async (params) => connection.sendRequest("azureMl.cancel", params),
+      /**
+       * Discards an inactive model version under the server-owned Azure ML library.
+       *
+       * @param params Selects an inactive Azure ML version for cleanup.
+       *
+       * @returns Empty acknowledgement for a completed host lifecycle operation.
+       */
+      discard: async (params) => connection.sendRequest("azureMl.discard", params)
+    },
+    /** @experimental */
     contentExclusion: {
       /**
        * Validates candidate content-exclusion policies and returns them normalized, without starting a session. This runs the same parser the runtime's own policy enforcement uses, so a host cannot accept a policy set the runtime would later reject, nor reject one it would have honored. Call it when policies arrive from outside the runtime — a command-line flag, a configuration file, a host's own settings — and must be checked before a session exists to apply them to. A malformed document fails with a message prefixed `Invalid JSON: `; a well-formed document that violates the policy schema fails with the offending field paths.
@@ -2936,9 +3011,9 @@ function createSessionRpc(connection, sessionId) {
       /** @experimental */
       oauth: {
         /**
-         * Resolves a pending MCP OAuth request with a host-provided token or cancellation. The pending request is emitted as mcp.oauth_required with the data necessary to authorize the request.
+         * Resolves a pending MCP OAuth request with a host-provided token, cancellation, or a noninteractive runtime refresh handoff when the request advertises runtimeRefreshSupported. Acceptance resolves the host response, not credential installation, reconnect, or the original tool invocation.
          *
-         * @param params Pending MCP OAuth request ID and host-provided token or cancellation response.
+         * @param params Pending MCP OAuth request ID and host token, cancellation, or advertised runtime refresh response.
          *
          * @returns Indicates whether the pending MCP OAuth response was accepted.
          */

package/dist/generated/session-events.d.ts

@@ -9,7 +9,7 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
 /**
  * Union of all session event variants emitted by the Copilot CLI runtime.
  */
-export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | IndexedSearchEvent | WarningEvent | ModelChangeEvent | ModelDeselectedEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ProviderQuotaObservationEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | PermissionRecoveryEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolShellOutputEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | PermissionAssentDetectedEvent | PermissionContextualAuthorizationEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedPluginProgressEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | HumanResponseRecordedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | WorkflowRunUpdatedEvent | WorkflowRunStartedEvent | WorkflowRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
+export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | IndexedSearchEvent | WarningEvent | ModelChangeEvent | ModelDeselectedEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ProviderQuotaObservationEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | PermissionRecoveryEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolShellOutputEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | PermissionAssentDetectedEvent | PermissionContextualAuthorizationEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpOauthRecoveryCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedPluginProgressEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | HumanResponseRecordedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | WorkflowRunUpdatedEvent | WorkflowRunStartedEvent | WorkflowRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerToolsLoadedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
 /**
  * Extensible routing preference for the virtual `auto` model. New identifiers must be advertised and enabled by the provider. `fast` is an integrator-only latency preset.
  */
@@ -786,6 +786,14 @@ export type AssistantUsageApiEndpoint =
  | "/responses"
 /** WebSocket Responses API endpoint. */
  | "ws:/responses";
+/**
+ * How the runtime fell back to an uncompressed request body after a compressed body was rejected
+ */
+export type ModelCallRequestBodyCompressionFallback = 
+/** A compressed body was rejected with HTTP 400 or 415 and this outcome comes from the single uncompressed resend. */
+"retried"
+/** Request body compression was already turned off for the session by an earlier rejection, so the body was sent uncompressed. */
+ | "disabled";
 /**
  * Content-Encoding applied to the request body sent on the wire
  */
@@ -1280,6 +1288,16 @@ export type McpOauthCompletionOutcome =
 "token"
 /** The request completed without an OAuth provider. */
  | "cancelled";
+/**
+ * Terminal outcome of the original authorization reservation, including reconnect
+ */
+export type McpOauthRecoveryCompletedOutcome = 
+/** Credentials were renewed and the server reconnected. */
+"succeeded"
+/** The recovery was cancelled before it completed. */
+ | "cancelled"
+/** Credential renewal or reconnect failed, or the server was dropped. */
+ | "failed";
 /**
  * Why dynamic headers are being requested.
  */
@@ -6777,6 +6795,12 @@ export interface AssistantUsageData {
      * Serialized (uncompressed) byte length of the request body, before any Content-Encoding. A content-free size signal.
      */
     requestBodyBytes?: number;
+    requestBodyCompressionFallback?: ModelCallRequestBodyCompressionFallback;
+    requestBodyCompressionFallbackFrom?: ModelCallRequestBodyEncoding;
+    /**
+     * HTTP status that rejected the compressed body before the uncompressed resend; present only when requestBodyCompressionFallback is retried
+     */
+    requestBodyCompressionRejectedStatus?: number;
     requestBodyEncoding?: ModelCallRequestBodyEncoding;
     /**
      * Byte length of the request body actually sent on the wire for the attempt that produced this outcome, after any Content-Encoding. Equals requestBodyBytes when the body was not compressed.
@@ -6988,6 +7012,12 @@ export interface ModelCallFailureData {
      * Serialized (uncompressed) byte length of the failed request body, before any Content-Encoding. A content-free size signal.
      */
     requestBodyBytes?: number;
+    requestBodyCompressionFallback?: ModelCallRequestBodyCompressionFallback;
+    requestBodyCompressionFallbackFrom?: ModelCallRequestBodyEncoding;
+    /**
+     * HTTP status that rejected the compressed body before the uncompressed resend; present only when requestBodyCompressionFallback is retried
+     */
+    requestBodyCompressionRejectedStatus?: number;
     requestBodyEncoding?: ModelCallRequestBodyEncoding;
     /**
      * Byte length of the failed request body actually sent on the wire, after any Content-Encoding. Equals requestBodyBytes when the body was not compressed.
@@ -11618,6 +11648,10 @@ export interface McpOauthRequiredData {
      * Raw OAuth protected-resource metadata document fetched for the MCP server, if available
      */
     resourceMetadata?: string;
+    /**
+     * Whether this Refresh request accepts kind runtimeRefresh to continue noninteractive grant renewal within its original authorization reservation. Missing or false means unsupported; the host must retain its legacy response behavior.
+     */
+    runtimeRefreshSupported?: boolean;
     /**
      * Display name of the MCP server that requires OAuth
      */
@@ -11741,6 +11775,50 @@ export interface McpOauthCompletedData {
      */
     requestId: string;
 }
+/**
+ * Session event "mcp.oauth_recovery_completed". Terminal outcome of a runtime-owned MCP OAuth recovery accepted through a runtimeRefresh handoff
+ */
+export interface McpOauthRecoveryCompletedEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: McpOauthRecoveryCompletedData;
+    /**
+     * When true, the event is transient and not persisted to the session event log on disk
+     */
+    ephemeral?: boolean;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "mcp.oauth_recovery_completed".
+     */
+    type: "mcp.oauth_recovery_completed";
+}
+/**
+ * Terminal outcome of a runtime-owned MCP OAuth recovery accepted through a runtimeRefresh handoff
+ */
+export interface McpOauthRecoveryCompletedData {
+    outcome: McpOauthRecoveryCompletedOutcome;
+    /**
+     * Request ID of the MCP OAuth request whose runtimeRefresh handoff was accepted
+     */
+    requestId: string;
+    /**
+     * Name of the MCP server whose authorization recovery completed
+     */
+    serverName: string;
+}
 /**
  * Session event "mcp.headers_refresh_required". Dynamic headers refresh request for a remote MCP server
  */
@@ -13433,6 +13511,49 @@ export interface McpServerStatusChangedData {
     serverName: string;
     status: McpServerStatus;
 }
+/**
+ * Session event "session.mcp_server_tools_loaded". Payload of `session.mcp_server_tools_loaded`, emitted once per connection when an MCP server's tools first become available from tools/list or a cached snapshot. A connected server is still loading tools if this event has not fired since the server last left connected; it can precede connected when the tools come from a cached snapshot.
+ */
+export interface McpServerToolsLoadedEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: McpServerToolsLoadedData;
+    /**
+     * Always true for events that are transient and not persisted to the session event log on disk.
+     */
+    ephemeral: true;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "session.mcp_server_tools_loaded".
+     */
+    type: "session.mcp_server_tools_loaded";
+}
+/**
+ * Payload of `session.mcp_server_tools_loaded`, emitted once per connection when an MCP server's tools first become available from tools/list or a cached snapshot. A connected server is still loading tools if this event has not fired since the server last left connected; it can precede connected when the tools come from a cached snapshot.
+ */
+export interface McpServerToolsLoadedData {
+    /**
+     * Name of the MCP server whose tools loaded
+     */
+    serverName: string;
+    /**
+     * Number of tools the server listed
+     */
+    toolCount: number;
+}
 /**
  * Session event "session.mcp_server_removed". Payload of `session.mcp_server_removed` identifying an MCP server the graph no longer runs.
  */

package/dist/session.js

@@ -1039,7 +1039,7 @@ class CopilotSession {
   async _executeMcpAuthAndRespond(request) {
     try {
       const result = await this.mcpAuthHandler(request, { sessionId: this.sessionId });
-      const response = result && "accessToken" in result ? { kind: "token", ...result } : { kind: "cancelled" };
+      const response = result && "kind" in result && result.kind === "cancelled" ? { kind: "cancelled" } : result && "accessToken" in result && typeof result.accessToken === "string" && result.accessToken.length > 0 ? { ...result, kind: "token" } : result && "kind" in result && result.kind === "runtimeRefresh" && request.runtimeRefreshSupported === true ? { kind: "runtimeRefresh" } : { kind: "cancelled" };
       await this.rpc.mcp.oauth.handlePendingRequest({
         requestId: request.requestId,
         result: response

package/dist/types.d.ts

@@ -1767,6 +1767,8 @@ export interface McpAuthRequest {
     serverUrl: string;
     /** Why the runtime is requesting host-provided OAuth credentials. */
     reason: "initial" | "refresh" | "reauth" | "upscope";
+    /** Whether this Refresh request supports noninteractive runtime handoff. Missing means false. */
+    runtimeRefreshSupported?: boolean;
     /** Parsed WWW-Authenticate parameters from the MCP server. */
     wwwAuthenticateParams?: McpAuthWwwAuthenticateParams;
     /** Raw RFC 9728 protected-resource metadata JSON fetched by the runtime, if available. */
@@ -1788,12 +1790,15 @@ export interface McpAuthToken {
  *
  * Return `null`/`undefined` or `{ kind: "cancelled" }` to cancel the pending
  * OAuth request. Return `{ kind: "token", ... }` to provide host-acquired
- * OAuth token data.
+ * OAuth token data. Return `{ kind: "runtimeRefresh" }` only for a Refresh
+ * request advertising `runtimeRefreshSupported`; acceptance is not reconnect completion.
  */
 export type McpAuthResult = ({
     kind: "token";
 } & McpAuthToken) | {
     kind: "cancelled";
+} | {
+    kind: "runtimeRefresh";
 };
 /** Callback invoked when an MCP server requires OAuth and the SDK host opted in. */
 export type McpAuthHandler = (request: McpAuthRequest, context: {

package/package.json

@@ -5,8 +5,8 @@
         "url": "https://github.com/github/copilot-agent-runtime.git",
         "directory": "src/sdk/nodejs"
     },
-    "version": "1.0.23-preview.2",
-    "copilotCliVersion": "1.0.99-2",
+    "version": "1.0.23-preview.4",
+    "copilotCliVersion": "1.0.100-0",
     "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
     "main": "./dist/cjs/index.js",
     "types": "./dist/index.d.ts",
@@ -73,6 +73,7 @@
         "zod": "4.3.6"
     },
     "devDependencies": {
+        "@hpke/core": "^1.9.0",
         "@microsoft/agent-host-protocol-v09": "npm:@microsoft/agent-host-protocol@0.9.0",
         "@platformatic/vfs": "^0.3.0",
         "@types/node": "^25.2.0",
@@ -84,7 +85,6 @@
         "eslint": "^9.0.0",
         "file-entry-cache": "file:./scripts/eslint-file-cache",
         "glob": "^13.0.1",
-        "hpke-js": "^1.8.0",
         "json-schema": "^0.4.0",
         "json-schema-to-typescript": "^15.0.4",
         "prettier": "file:../../../third_party/build-tools/prettier-3.8.1",
@@ -112,18 +112,18 @@
         "README.md"
     ],
     "copilotRuntime": {
-        "sourceSha": "c9e96f9dbdbbce59d7e045d5abc3590136576cf7",
-        "version": "1.0.99-2",
+        "sourceSha": "f6f1d8977c6f1177d86b58a963a8f59c5238101d",
+        "version": "1.0.100-0",
         "visibility": "public"
     },
     "optionalDependencies": {
-        "@github/copilot-sdk-darwin-arm64": "1.0.23-preview.2",
-        "@github/copilot-sdk-darwin-x64": "1.0.23-preview.2",
-        "@github/copilot-sdk-linux-arm64": "1.0.23-preview.2",
-        "@github/copilot-sdk-linux-x64": "1.0.23-preview.2",
-        "@github/copilot-sdk-linuxmusl-arm64": "1.0.23-preview.2",
-        "@github/copilot-sdk-linuxmusl-x64": "1.0.23-preview.2",
-        "@github/copilot-sdk-win32-arm64": "1.0.23-preview.2",
-        "@github/copilot-sdk-win32-x64": "1.0.23-preview.2"
+        "@github/copilot-sdk-darwin-arm64": "1.0.23-preview.4",
+        "@github/copilot-sdk-darwin-x64": "1.0.23-preview.4",
+        "@github/copilot-sdk-linux-arm64": "1.0.23-preview.4",
+        "@github/copilot-sdk-linux-x64": "1.0.23-preview.4",
+        "@github/copilot-sdk-linuxmusl-arm64": "1.0.23-preview.4",
+        "@github/copilot-sdk-linuxmusl-x64": "1.0.23-preview.4",
+        "@github/copilot-sdk-win32-arm64": "1.0.23-preview.4",
+        "@github/copilot-sdk-win32-x64": "1.0.23-preview.4"
     }
 }