@github/copilot-sdk 1.0.23-preview.3 → 1.0.23-preview.5

package/README.md

@@ -1207,6 +1207,23 @@ const session = await client.createSession({
 
 See [Custom skills](../docs/features/skills.md#skill-providers-experimental) for limits and details.
 
+#### Supporting files (experimental)
+
+To give a provider skill supporting files, such as scripts, references,
+templates, and assets, set its descriptor's `directory` to the absolute path of
+the folder that holds them:
+
+```typescript
+{
+    name: "release-notes",
+    description: "Writes release notes in the team's format.",
+    directory: "/srv/skills/release-notes",
+}
+```
+
+When the skill is activated, the runtime lists the folder's files for the model.
+See [Supporting files](../docs/features/skills.md#supporting-files-experimental) for details.
+
 ### Multiple Sessions
 
 ```typescript

package/dist/cjs/cliVersion.js

@@ -22,7 +22,7 @@ __export(cliVersion_exports, {
   COPILOT_CLI_VERSION: () => COPILOT_CLI_VERSION
 });
 module.exports = __toCommonJS(cliVersion_exports);
-const COPILOT_CLI_VERSION = "1.0.99-3";
+const COPILOT_CLI_VERSION = "1.0.100-1";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/cjs/generated/rpc.js

@@ -281,6 +281,81 @@ function createServerRpc(connection) {
       listTokenPriceUnits: async (params) => connection.sendRequest("models.listTokenPriceUnits", params)
     },
     /** @experimental */
+    azureMl: {
+      /**
+       * Lists eligible Azure ML local models and redacted warnings before a chat session exists.
+       *
+       * @param params Lists models eligible for local use before a chat session exists.
+       *
+       * @returns Eligible models and redacted validation warnings.
+       */
+      catalog: async (params) => connection.sendRequest("azureMl.catalog", params),
+      /**
+       * Revalidates the newest eligible version of one Azure ML model family.
+       *
+       * @param params Selects an Azure ML model family.
+       *
+       * @returns Eligible Azure ML model version and its provider metadata.
+       */
+      latest: async (params) => connection.sendRequest("azureMl.latest", params),
+      /**
+       * Resolves immutable artifact facts without returning signed access URLs.
+       *
+       * @param params Selects an immutable model version.
+       *
+       * @returns Resolved artifact facts without signed download URLs.
+       */
+      resolve: async (params) => connection.sendRequest("azureMl.resolve", params),
+      /**
+       * Downloads and verifies a connection-owned model version, returning only after placement and manifest publication.
+       *
+       * @param params Downloads a model version to its configured local library.
+       *
+       * @returns Completed and verified Azure ML model files.
+       */
+      download: async (params) => connection.sendRequest("azureMl.download", params),
+      /**
+       * Acquires a connection-owned model-family mutation lease across transfer, activation, registration, and cleanup.
+       *
+       * @param params Identifies a family in the server's Azure ML model library.
+       *
+       * @returns Opaque handle to a connection-owned family mutation interval.
+       */
+      acquireFamily: async (params) => connection.sendRequest("azureMl.acquireFamily", params),
+      /**
+       * Releases a connection-owned family lease after its active download and cleanup operations complete.
+       *
+       * @param params Releases a family mutation interval owned by this SDK connection.
+       *
+       * @returns Empty acknowledgement for a completed host lifecycle operation.
+       */
+      releaseFamily: async (params) => connection.sendRequest("azureMl.releaseFamily", params),
+      /**
+       * Returns progress for an active download owned by this connection, or null after completion.
+       *
+       * @param params Selects an active connection-owned download.
+       *
+       * @returns Active Azure ML download progress or null.
+       */
+      status: async (params) => connection.sendRequest("azureMl.status", params),
+      /**
+       * Cancels a connection-owned download; the download call reports terminal cleanup separately.
+       *
+       * @param params Selects an active connection-owned download.
+       *
+       * @returns Whether an active connection-owned transfer accepted cancellation.
+       */
+      cancel: async (params) => connection.sendRequest("azureMl.cancel", params),
+      /**
+       * Discards an inactive model version under the server-owned Azure ML library.
+       *
+       * @param params Selects an inactive Azure ML version for cleanup.
+       *
+       * @returns Empty acknowledgement for a completed host lifecycle operation.
+       */
+      discard: async (params) => connection.sendRequest("azureMl.discard", params)
+    },
+    /** @experimental */
     contentExclusion: {
       /**
        * Validates candidate content-exclusion policies and returns them normalized, without starting a session. This runs the same parser the runtime's own policy enforcement uses, so a host cannot accept a policy set the runtime would later reject, nor reject one it would have honored. Call it when policies arrive from outside the runtime — a command-line flag, a configuration file, a host's own settings — and must be checked before a session exists to apply them to. A malformed document fails with a message prefixed `Invalid JSON: `; a well-formed document that violates the policy schema fails with the offending field paths.
@@ -2964,9 +3039,9 @@ function createSessionRpc(connection, sessionId) {
       /** @experimental */
       oauth: {
         /**
-         * Resolves a pending MCP OAuth request with a host-provided token or cancellation. The pending request is emitted as mcp.oauth_required with the data necessary to authorize the request.
+         * Resolves a pending MCP OAuth request with a host-provided token, cancellation, or a noninteractive runtime refresh handoff when the request advertises runtimeRefreshSupported. Acceptance resolves the host response, not credential installation, reconnect, or the original tool invocation.
          *
-         * @param params Pending MCP OAuth request ID and host-provided token or cancellation response.
+         * @param params Pending MCP OAuth request ID and host token, cancellation, or advertised runtime refresh response.
          *
          * @returns Indicates whether the pending MCP OAuth response was accepted.
          */

package/dist/cjs/session.js

@@ -1057,7 +1057,7 @@ class CopilotSession {
   async _executeMcpAuthAndRespond(request) {
     try {
       const result = await this.mcpAuthHandler(request, { sessionId: this.sessionId });
-      const response = result && "accessToken" in result ? { kind: "token", ...result } : { kind: "cancelled" };
+      const response = result && "kind" in result && result.kind === "cancelled" ? { kind: "cancelled" } : result && "accessToken" in result && typeof result.accessToken === "string" && result.accessToken.length > 0 ? { ...result, kind: "token" } : result && "kind" in result && result.kind === "runtimeRefresh" && request.runtimeRefreshSupported === true ? { kind: "runtimeRefresh" } : { kind: "cancelled" };
       await this.rpc.mcp.oauth.handlePendingRequest({
         requestId: request.requestId,
         result: response

package/dist/cliVersion.d.ts

@@ -1,2 +1,2 @@
-export declare const COPILOT_CLI_VERSION = "1.0.99-3";
+export declare const COPILOT_CLI_VERSION = "1.0.100-1";
 export declare const COPILOT_CLI_USE_NPM_PACKAGE = false;

package/dist/cliVersion.js

@@ -1,4 +1,4 @@
-const COPILOT_CLI_VERSION = "1.0.99-3";
+const COPILOT_CLI_VERSION = "1.0.100-1";
 const COPILOT_CLI_USE_NPM_PACKAGE = false;
 export {
   COPILOT_CLI_USE_NPM_PACKAGE,

package/dist/generated/rpc.d.ts

@@ -541,6 +541,46 @@ export type AutopilotObjectiveStatus =
  | "paused"
 /** The objective completed. */
  | "completed";
+/**
+ * Whether an active connection-owned transfer accepted cancellation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCancelResult".
+ */
+/** @experimental */
+export type AzureMlCancelResult = boolean;
+/**
+ * How catalog discovery handles a recent sign-in failure.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCatalogRetryMode".
+ */
+/** @experimental */
+export type AzureMlCatalogRetryMode = 
+/** Reuse a recent failure for automatic background discovery. */
+"background"
+/** Retry sign-in after an explicit refresh. */
+ | "explicit";
+/**
+ * Registry that owns an Azure ML model version.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlRegistry".
+ */
+/** @experimental */
+export type AzureMlRegistry = 
+/** Public Azure ML model registry. */
+"azureml"
+/** Microsoft staff development registry. */
+ | "azureml-dev";
+/**
+ * Active Azure ML download progress or null.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlStatusResult".
+ */
+/** @experimental */
+export type AzureMlStatusResult = AzureMlDownloadStatus | null;
 /**
  * Root JSON Schema type for a built-in tool input.
  *
@@ -3648,6 +3688,11 @@ export type McpOauthPendingRequestResponse = {
      * OAuth response variant discriminator.
      */
     kind: "cancelled";
+} | {
+    /**
+     * OAuth response variant discriminator.
+     */
+    kind: "runtimeRefresh";
 };
 /**
  * OAuth grant type override for this login.
@@ -8269,6 +8314,399 @@ export interface AutoTierMetadata {
      */
     providerId?: string;
 }
+/**
+ * Lists models eligible for local use before a chat session exists.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCatalogRequest".
+ */
+/** @experimental */
+export interface AzureMlCatalogRequest {
+    /**
+     * Ask for the staff registry; the server also verifies its own authenticated identity.
+     */
+    includeDev: boolean;
+    /**
+     * An explicit user refresh retries a cached sign-in failure.
+     */
+    retryMode?: AzureMlCatalogRetryMode | null;
+}
+/**
+ * Eligible models and redacted validation warnings.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCatalogResult".
+ */
+/** @experimental */
+export interface AzureMlCatalogResult {
+    /**
+     * Model versions suitable for local use.
+     */
+    models: AzureMlModel[];
+    /**
+     * Skipped model and catalog errors without sensitive access details.
+     */
+    warnings: AzureMlCatalogWarning[];
+}
+/**
+ * Eligible Azure ML model version and its provider metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlModel".
+ */
+/** @experimental */
+export interface AzureMlModel {
+    registry: AzureMlRegistry;
+    /**
+     * Stable model-family name.
+     */
+    name: string;
+    /**
+     * Exact published model version.
+     */
+    version: string;
+    profile: AzureMlProfile;
+    /**
+     * Provider metadata retained for registration.
+     */
+    metadata: JsonValue;
+}
+/**
+ * Validated local runtime requirements for an Azure ML model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlProfile".
+ */
+/** @experimental */
+export interface AzureMlProfile {
+    /**
+     * Sanitized model-picker display label.
+     */
+    displayName: string;
+    /**
+     * Published download size, when available.
+     */
+    downloadBytes?: number | null;
+    /**
+     * Peak disk use during installation, when available.
+     */
+    peakDiskBytes?: number | null;
+    /**
+     * Recommended graphics memory, when available.
+     */
+    recommendedVramBytes?: number | null;
+    /**
+     * Maximum input tokens accepted by the model.
+     */
+    maxPromptTokens: number;
+    /**
+     * Maximum context window accepted by the model.
+     */
+    maxContextWindowTokens: number;
+    /**
+     * Maximum output tokens produced by the model.
+     */
+    maxOutputTokens: number;
+    /**
+     * Whether the model supports tool calls.
+     */
+    supportsToolCalls: boolean;
+    /**
+     * Validated local runtime configuration.
+     */
+    serveOptions: JsonValue;
+    /**
+     * Published license, when available.
+     */
+    license?: AzureMlLicense | null;
+}
+/**
+ * License published with an eligible Azure ML model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlLicense".
+ */
+/** @experimental */
+export interface AzureMlLicense {
+    /**
+     * Bounded display label for the model license.
+     */
+    name: string;
+}
+/**
+ * Redacted warning for a skipped model or registry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCatalogWarning".
+ */
+/** @experimental */
+export interface AzureMlCatalogWarning {
+    registry: AzureMlRegistry;
+    /**
+     * Model family, or `catalog` for registry-wide errors.
+     */
+    modelName: string;
+    /**
+     * Version, if one was available.
+     */
+    version?: string | null;
+    /**
+     * Safe reason without signed access details.
+     */
+    kind: string;
+}
+/**
+ * Selects an inactive Azure ML version for cleanup.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDiscardRequest".
+ */
+/** @experimental */
+export interface AzureMlDiscardRequest {
+    /**
+     * Version directory under this server's Azure ML library.
+     */
+    destination: string;
+    /**
+     * Optional connection-owned lease that spans the caller's complete family mutation.
+     */
+    leaseId?: string | null;
+}
+/**
+ * Selects an active connection-owned download.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDownloadIdRequest".
+ */
+/** @experimental */
+export interface AzureMlDownloadIdRequest {
+    /**
+     * Identifier supplied when this connection started the download.
+     */
+    requestId: string;
+}
+/**
+ * Downloads a model version to its configured local library.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDownloadRequest".
+ */
+/** @experimental */
+export interface AzureMlDownloadRequest {
+    /**
+     * Unique request identifier for progress and explicit cancellation.
+     */
+    requestId: string;
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+    /**
+     * Exact published version.
+     */
+    version: string;
+    /**
+     * Version directory under this server's Azure ML library.
+     */
+    destination: string;
+    /**
+     * Optional connection-owned lease that spans the caller's complete family mutation.
+     */
+    leaseId?: string | null;
+}
+/**
+ * Completed and verified Azure ML model files.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDownloadResult".
+ */
+/** @experimental */
+export interface AzureMlDownloadResult {
+    /**
+     * Installed GGUF path.
+     */
+    primaryPath: string;
+    /**
+     * Published manifest path.
+     */
+    manifestPath: string;
+    /**
+     * Exact bytes across the model version.
+     */
+    totalBytes: number;
+    /**
+     * Whether all prior verified files were reused.
+     */
+    reused: boolean;
+    /**
+     * Validated local runtime settings.
+     */
+    serveOptions: JsonValue;
+    /**
+     * Maximum supported local concurrency.
+     */
+    maxConcurrent: number;
+    /**
+     * Installed companion file paths.
+     */
+    extraFiles: string[];
+    /**
+     * Transient transfer failures retried during this run.
+     */
+    totalFailures?: number | null;
+    /**
+     * Bytes received over the network during this run, including discarded bytes.
+     */
+    receivedBytes?: number | null;
+    /**
+     * Whether a partial from a prior run continued after the server accepted its range.
+     */
+    resumed?: boolean | null;
+}
+/**
+ * Progress and retry facts for one active download.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDownloadStatus".
+ */
+/** @experimental */
+export interface AzureMlDownloadStatus {
+    /**
+     * Current transfer phase.
+     */
+    phase: string;
+    /**
+     * Bytes completed across all files.
+     */
+    completedBytes: number;
+    /**
+     * Exact bytes expected across all files.
+     */
+    totalBytes: number;
+    /**
+     * Next retry attempt, if the transfer is retrying.
+     */
+    retryAttempt?: number | null;
+    /**
+     * Configured retry limit, if the transfer is retrying.
+     */
+    maxAttempts?: number | null;
+    /**
+     * Redacted failure reason, if the transfer is retrying.
+     */
+    retryReason?: string | null;
+    /**
+     * Planned delay before retry, if the transfer is retrying.
+     */
+    retryDelayMs?: number | null;
+}
+/**
+ * Opaque handle to a connection-owned family mutation interval.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlFamilyLeaseResult".
+ */
+/** @experimental */
+export interface AzureMlFamilyLeaseResult {
+    /**
+     * Server-generated handle, valid only on the originating SDK connection.
+     */
+    leaseId: string;
+}
+/**
+ * Releases a family mutation interval owned by this SDK connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlFamilyReleaseRequest".
+ */
+/** @experimental */
+export interface AzureMlFamilyReleaseRequest {
+    /**
+     * Server-generated handle from `azureMl.acquireFamily`.
+     */
+    leaseId: string;
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+}
+/**
+ * Identifies a family in the server's Azure ML model library.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlFamilyRequest".
+ */
+/** @experimental */
+export interface AzureMlFamilyRequest {
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+}
+/**
+ * Selects an Azure ML model family.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlLatestRequest".
+ */
+/** @experimental */
+export interface AzureMlLatestRequest {
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+}
+/**
+ * Selects an immutable model version.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlResolveRequest".
+ */
+/** @experimental */
+export interface AzureMlResolveRequest {
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+    /**
+     * Exact published version.
+     */
+    version: string;
+}
+/**
+ * Resolved artifact facts without signed download URLs.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlResolveResult".
+ */
+/** @experimental */
+export interface AzureMlResolveResult {
+    /**
+     * Exact bytes across all files in this version.
+     */
+    totalBytes: number;
+    /**
+     * GGUF path relative to the version directory.
+     */
+    primaryPath: string;
+    /**
+     * Other paths relative to the version directory.
+     */
+    extraFiles: string[];
+    /**
+     * Validated local runtime settings.
+     */
+    serveOptions: JsonValue;
+    /**
+     * Maximum supported local concurrency.
+     */
+    maxConcurrent: number;
+}
 /**
  * The running runtime's complete catalog of well-known built-in model IDs, including supported models and additional IDs with built-in metadata.
  *
@@ -12322,6 +12760,10 @@ export interface EnvironmentsListResult {
      * Safe discovery records without relay bootstrap credentials.
      */
     environments: GitHubEnvironment[];
+    /**
+     * Server-requested minimum delay before automatically listing again, in milliseconds.
+     */
+    retryAfterMs?: number;
 }
 /**
  * Cursor, batch size, and optional long-poll/filter parameters for reading session events.
@@ -16296,6 +16738,10 @@ export interface McpConfiguredServerState {
      * Observed connection error, when the materialized server failed.
      */
     error?: string;
+    /**
+     * Whether the server's current connection has loaded its tool list (from tools/list or a cached snapshot). A connected server without loaded tools is still loading them; the change is signalled by session.mcp_server_tools_loaded. Absent when the runtime does not report it.
+     */
+    toolsLoaded?: boolean;
 }
 /**
  * Effective MCP configuration with optional live observations from matching already materialized servers.
@@ -16887,7 +17333,7 @@ export interface McpOauthCompleteRequest {
     callbackUrl: string;
 }
 /**
- * Pending MCP OAuth request ID and host-provided token or cancellation response.
+ * Pending MCP OAuth request ID and host token, cancellation, or advertised runtime refresh response.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "McpOauthHandlePendingRequest".
@@ -27985,6 +28431,10 @@ export interface SkillProviderDescriptor {
      * Optional freeform argument hint used by slash-command catalogs.
      */
     argumentHint?: string;
+    /**
+     * Absolute path to the folder that holds the skill's supporting files (scripts, references, templates, assets), in the session's path conventions: the host OS for local disk, or the registered SessionFs conventions. When the skill is activated the runtime lists the folder's files for the model through the session's filesystem, with the same rules as a file-based skill's folder; it never reads or copies them. On local disk the folder becomes a read-only skill root, like a configured skill directory. It is not shown in skill catalogs.
+     */
+    directory?: string;
 }
 /**
  * Skill names to mark as disabled in global configuration, replacing any previous list.
@@ -32474,6 +32924,118 @@ export interface ModelsListTokenPriceUnitsRequest {
      */
     gitHubToken?: string;
 }
+/**
+ * Eligible Azure ML model version and its provider metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlLatestResult".
+ */
+/** @experimental */
+export interface AzureMlLatestResult {
+    registry: AzureMlRegistry;
+    /**
+     * Stable model-family name.
+     */
+    name: string;
+    /**
+     * Exact published model version.
+     */
+    version: string;
+    profile: AzureMlProfile;
+    /**
+     * Provider metadata retained for registration.
+     */
+    metadata: JsonValue;
+}
+/**
+ * Opaque handle to a connection-owned family mutation interval.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlAcquireFamilyResult".
+ */
+/** @experimental */
+export interface AzureMlAcquireFamilyResult {
+    /**
+     * Server-generated handle, valid only on the originating SDK connection.
+     */
+    leaseId: string;
+}
+/**
+ * Identifies a family in the server's Azure ML model library.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlAcquireFamilyRequest".
+ */
+/** @experimental */
+export interface AzureMlAcquireFamilyRequest {
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+}
+/**
+ * Empty acknowledgement for a completed host lifecycle operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlReleaseFamilyResult".
+ */
+/** @experimental */
+export interface AzureMlReleaseFamilyResult {
+}
+/**
+ * Releases a family mutation interval owned by this SDK connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlReleaseFamilyRequest".
+ */
+/** @experimental */
+export interface AzureMlReleaseFamilyRequest {
+    /**
+     * Server-generated handle from `azureMl.acquireFamily`.
+     */
+    leaseId: string;
+    registry: AzureMlRegistry;
+    /**
+     * Exact model-family name.
+     */
+    name: string;
+}
+/**
+ * Selects an active connection-owned download.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlStatusRequest".
+ */
+/** @experimental */
+export interface AzureMlStatusRequest {
+    /**
+     * Identifier supplied when this connection started the download.
+     */
+    requestId: string;
+}
+/**
+ * Selects an active connection-owned download.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlCancelRequest".
+ */
+/** @experimental */
+export interface AzureMlCancelRequest {
+    /**
+     * Identifier supplied when this connection started the download.
+     */
+    requestId: string;
+}
+/**
+ * Empty acknowledgement for a completed host lifecycle operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AzureMlDiscardResult".
+ */
+/** @experimental */
+export interface AzureMlDiscardResult {
+}
 /** @experimental */
 export interface SessionWorkflowPauseAtCheckpointResult {
     action: WorkflowPauseCheckpointAction;
@@ -33254,6 +33816,81 @@ export declare function createServerRpc(connection: MessageConnection): {
         listTokenPriceUnits: (params?: ModelsListTokenPriceUnitsRequest) => Promise<ModelTokenPriceUnitList>;
     };
     /** @experimental */
+    azureMl: {
+        /**
+         * Lists eligible Azure ML local models and redacted warnings before a chat session exists.
+         *
+         * @param params Lists models eligible for local use before a chat session exists.
+         *
+         * @returns Eligible models and redacted validation warnings.
+         */
+        catalog: (params: AzureMlCatalogRequest) => Promise<AzureMlCatalogResult>;
+        /**
+         * Revalidates the newest eligible version of one Azure ML model family.
+         *
+         * @param params Selects an Azure ML model family.
+         *
+         * @returns Eligible Azure ML model version and its provider metadata.
+         */
+        latest: (params: AzureMlLatestRequest) => Promise<AzureMlLatestResult>;
+        /**
+         * Resolves immutable artifact facts without returning signed access URLs.
+         *
+         * @param params Selects an immutable model version.
+         *
+         * @returns Resolved artifact facts without signed download URLs.
+         */
+        resolve: (params: AzureMlResolveRequest) => Promise<AzureMlResolveResult>;
+        /**
+         * Downloads and verifies a connection-owned model version, returning only after placement and manifest publication.
+         *
+         * @param params Downloads a model version to its configured local library.
+         *
+         * @returns Completed and verified Azure ML model files.
+         */
+        download: (params: AzureMlDownloadRequest) => Promise<AzureMlDownloadResult>;
+        /**
+         * Acquires a connection-owned model-family mutation lease across transfer, activation, registration, and cleanup.
+         *
+         * @param params Identifies a family in the server's Azure ML model library.
+         *
+         * @returns Opaque handle to a connection-owned family mutation interval.
+         */
+        acquireFamily: (params: AzureMlAcquireFamilyRequest) => Promise<AzureMlAcquireFamilyResult>;
+        /**
+         * Releases a connection-owned family lease after its active download and cleanup operations complete.
+         *
+         * @param params Releases a family mutation interval owned by this SDK connection.
+         *
+         * @returns Empty acknowledgement for a completed host lifecycle operation.
+         */
+        releaseFamily: (params: AzureMlReleaseFamilyRequest) => Promise<AzureMlReleaseFamilyResult>;
+        /**
+         * Returns progress for an active download owned by this connection, or null after completion.
+         *
+         * @param params Selects an active connection-owned download.
+         *
+         * @returns Active Azure ML download progress or null.
+         */
+        status: (params: AzureMlStatusRequest) => Promise<AzureMlStatusResult>;
+        /**
+         * Cancels a connection-owned download; the download call reports terminal cleanup separately.
+         *
+         * @param params Selects an active connection-owned download.
+         *
+         * @returns Whether an active connection-owned transfer accepted cancellation.
+         */
+        cancel: (params: AzureMlCancelRequest) => Promise<AzureMlCancelResult>;
+        /**
+         * Discards an inactive model version under the server-owned Azure ML library.
+         *
+         * @param params Selects an inactive Azure ML version for cleanup.
+         *
+         * @returns Empty acknowledgement for a completed host lifecycle operation.
+         */
+        discard: (params: AzureMlDiscardRequest) => Promise<AzureMlDiscardResult>;
+    };
+    /** @experimental */
     contentExclusion: {
         /**
          * Validates candidate content-exclusion policies and returns them normalized, without starting a session. This runs the same parser the runtime's own policy enforcement uses, so a host cannot accept a policy set the runtime would later reject, nor reject one it would have honored. Call it when policies arrive from outside the runtime — a command-line flag, a configuration file, a host's own settings — and must be checked before a session exists to apply them to. A malformed document fails with a message prefixed `Invalid JSON: `; a well-formed document that violates the policy schema fails with the offending field paths.
@@ -35059,9 +35696,9 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         /** @experimental */
         oauth: {
             /**
-             * Resolves a pending MCP OAuth request with a host-provided token or cancellation. The pending request is emitted as mcp.oauth_required with the data necessary to authorize the request.
+             * Resolves a pending MCP OAuth request with a host-provided token, cancellation, or a noninteractive runtime refresh handoff when the request advertises runtimeRefreshSupported. Acceptance resolves the host response, not credential installation, reconnect, or the original tool invocation.
              *
-             * @param params Pending MCP OAuth request ID and host-provided token or cancellation response.
+             * @param params Pending MCP OAuth request ID and host token, cancellation, or advertised runtime refresh response.
              *
              * @returns Indicates whether the pending MCP OAuth response was accepted.
              */

package/dist/generated/rpc.js

@@ -253,6 +253,81 @@ function createServerRpc(connection) {
       listTokenPriceUnits: async (params) => connection.sendRequest("models.listTokenPriceUnits", params)
     },
     /** @experimental */
+    azureMl: {
+      /**
+       * Lists eligible Azure ML local models and redacted warnings before a chat session exists.
+       *
+       * @param params Lists models eligible for local use before a chat session exists.
+       *
+       * @returns Eligible models and redacted validation warnings.
+       */
+      catalog: async (params) => connection.sendRequest("azureMl.catalog", params),
+      /**
+       * Revalidates the newest eligible version of one Azure ML model family.
+       *
+       * @param params Selects an Azure ML model family.
+       *
+       * @returns Eligible Azure ML model version and its provider metadata.
+       */
+      latest: async (params) => connection.sendRequest("azureMl.latest", params),
+      /**
+       * Resolves immutable artifact facts without returning signed access URLs.
+       *
+       * @param params Selects an immutable model version.
+       *
+       * @returns Resolved artifact facts without signed download URLs.
+       */
+      resolve: async (params) => connection.sendRequest("azureMl.resolve", params),
+      /**
+       * Downloads and verifies a connection-owned model version, returning only after placement and manifest publication.
+       *
+       * @param params Downloads a model version to its configured local library.
+       *
+       * @returns Completed and verified Azure ML model files.
+       */
+      download: async (params) => connection.sendRequest("azureMl.download", params),
+      /**
+       * Acquires a connection-owned model-family mutation lease across transfer, activation, registration, and cleanup.
+       *
+       * @param params Identifies a family in the server's Azure ML model library.
+       *
+       * @returns Opaque handle to a connection-owned family mutation interval.
+       */
+      acquireFamily: async (params) => connection.sendRequest("azureMl.acquireFamily", params),
+      /**
+       * Releases a connection-owned family lease after its active download and cleanup operations complete.
+       *
+       * @param params Releases a family mutation interval owned by this SDK connection.
+       *
+       * @returns Empty acknowledgement for a completed host lifecycle operation.
+       */
+      releaseFamily: async (params) => connection.sendRequest("azureMl.releaseFamily", params),
+      /**
+       * Returns progress for an active download owned by this connection, or null after completion.
+       *
+       * @param params Selects an active connection-owned download.
+       *
+       * @returns Active Azure ML download progress or null.
+       */
+      status: async (params) => connection.sendRequest("azureMl.status", params),
+      /**
+       * Cancels a connection-owned download; the download call reports terminal cleanup separately.
+       *
+       * @param params Selects an active connection-owned download.
+       *
+       * @returns Whether an active connection-owned transfer accepted cancellation.
+       */
+      cancel: async (params) => connection.sendRequest("azureMl.cancel", params),
+      /**
+       * Discards an inactive model version under the server-owned Azure ML library.
+       *
+       * @param params Selects an inactive Azure ML version for cleanup.
+       *
+       * @returns Empty acknowledgement for a completed host lifecycle operation.
+       */
+      discard: async (params) => connection.sendRequest("azureMl.discard", params)
+    },
+    /** @experimental */
     contentExclusion: {
       /**
        * Validates candidate content-exclusion policies and returns them normalized, without starting a session. This runs the same parser the runtime's own policy enforcement uses, so a host cannot accept a policy set the runtime would later reject, nor reject one it would have honored. Call it when policies arrive from outside the runtime — a command-line flag, a configuration file, a host's own settings — and must be checked before a session exists to apply them to. A malformed document fails with a message prefixed `Invalid JSON: `; a well-formed document that violates the policy schema fails with the offending field paths.
@@ -2936,9 +3011,9 @@ function createSessionRpc(connection, sessionId) {
       /** @experimental */
       oauth: {
         /**
-         * Resolves a pending MCP OAuth request with a host-provided token or cancellation. The pending request is emitted as mcp.oauth_required with the data necessary to authorize the request.
+         * Resolves a pending MCP OAuth request with a host-provided token, cancellation, or a noninteractive runtime refresh handoff when the request advertises runtimeRefreshSupported. Acceptance resolves the host response, not credential installation, reconnect, or the original tool invocation.
          *
-         * @param params Pending MCP OAuth request ID and host-provided token or cancellation response.
+         * @param params Pending MCP OAuth request ID and host token, cancellation, or advertised runtime refresh response.
          *
          * @returns Indicates whether the pending MCP OAuth response was accepted.
          */

package/dist/generated/session-events.d.ts

@@ -9,7 +9,7 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
 /**
  * Union of all session event variants emitted by the Copilot CLI runtime.
  */
-export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | IndexedSearchEvent | WarningEvent | ModelChangeEvent | ModelDeselectedEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ProviderQuotaObservationEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | PermissionRecoveryEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolShellOutputEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | PermissionAssentDetectedEvent | PermissionContextualAuthorizationEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedPluginProgressEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | HumanResponseRecordedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | WorkflowRunUpdatedEvent | WorkflowRunStartedEvent | WorkflowRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
+export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | IndexedSearchEvent | WarningEvent | ModelChangeEvent | ModelDeselectedEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ProviderQuotaObservationEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | PermissionRecoveryEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolShellOutputEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | PermissionAssentDetectedEvent | PermissionContextualAuthorizationEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpOauthRecoveryCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedPluginProgressEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | HumanResponseRecordedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | WorkflowRunUpdatedEvent | WorkflowRunStartedEvent | WorkflowRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerToolsLoadedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
 /**
  * Extensible routing preference for the virtual `auto` model. New identifiers must be advertised and enabled by the provider. `fast` is an integrator-only latency preset.
  */
@@ -1288,6 +1288,16 @@ export type McpOauthCompletionOutcome =
 "token"
 /** The request completed without an OAuth provider. */
  | "cancelled";
+/**
+ * Terminal outcome of the original authorization reservation, including reconnect
+ */
+export type McpOauthRecoveryCompletedOutcome = 
+/** Credentials were renewed and the server reconnected. */
+"succeeded"
+/** The recovery was cancelled before it completed. */
+ | "cancelled"
+/** Credential renewal or reconnect failed, or the server was dropped. */
+ | "failed";
 /**
  * Why dynamic headers are being requested.
  */
@@ -11638,6 +11648,10 @@ export interface McpOauthRequiredData {
      * Raw OAuth protected-resource metadata document fetched for the MCP server, if available
      */
     resourceMetadata?: string;
+    /**
+     * Whether this Refresh request accepts kind runtimeRefresh to continue noninteractive grant renewal within its original authorization reservation. Missing or false means unsupported; the host must retain its legacy response behavior.
+     */
+    runtimeRefreshSupported?: boolean;
     /**
      * Display name of the MCP server that requires OAuth
      */
@@ -11761,6 +11775,50 @@ export interface McpOauthCompletedData {
      */
     requestId: string;
 }
+/**
+ * Session event "mcp.oauth_recovery_completed". Terminal outcome of a runtime-owned MCP OAuth recovery accepted through a runtimeRefresh handoff
+ */
+export interface McpOauthRecoveryCompletedEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: McpOauthRecoveryCompletedData;
+    /**
+     * When true, the event is transient and not persisted to the session event log on disk
+     */
+    ephemeral?: boolean;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "mcp.oauth_recovery_completed".
+     */
+    type: "mcp.oauth_recovery_completed";
+}
+/**
+ * Terminal outcome of a runtime-owned MCP OAuth recovery accepted through a runtimeRefresh handoff
+ */
+export interface McpOauthRecoveryCompletedData {
+    outcome: McpOauthRecoveryCompletedOutcome;
+    /**
+     * Request ID of the MCP OAuth request whose runtimeRefresh handoff was accepted
+     */
+    requestId: string;
+    /**
+     * Name of the MCP server whose authorization recovery completed
+     */
+    serverName: string;
+}
 /**
  * Session event "mcp.headers_refresh_required". Dynamic headers refresh request for a remote MCP server
  */
@@ -13453,6 +13511,49 @@ export interface McpServerStatusChangedData {
     serverName: string;
     status: McpServerStatus;
 }
+/**
+ * Session event "session.mcp_server_tools_loaded". Payload of `session.mcp_server_tools_loaded`, emitted once per connection when an MCP server's tools first become available from tools/list or a cached snapshot. A connected server is still loading tools if this event has not fired since the server last left connected; it can precede connected when the tools come from a cached snapshot.
+ */
+export interface McpServerToolsLoadedEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: McpServerToolsLoadedData;
+    /**
+     * Always true for events that are transient and not persisted to the session event log on disk.
+     */
+    ephemeral: true;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "session.mcp_server_tools_loaded".
+     */
+    type: "session.mcp_server_tools_loaded";
+}
+/**
+ * Payload of `session.mcp_server_tools_loaded`, emitted once per connection when an MCP server's tools first become available from tools/list or a cached snapshot. A connected server is still loading tools if this event has not fired since the server last left connected; it can precede connected when the tools come from a cached snapshot.
+ */
+export interface McpServerToolsLoadedData {
+    /**
+     * Name of the MCP server whose tools loaded
+     */
+    serverName: string;
+    /**
+     * Number of tools the server listed
+     */
+    toolCount: number;
+}
 /**
  * Session event "session.mcp_server_removed". Payload of `session.mcp_server_removed` identifying an MCP server the graph no longer runs.
  */

package/dist/session.js

@@ -1039,7 +1039,7 @@ class CopilotSession {
   async _executeMcpAuthAndRespond(request) {
     try {
       const result = await this.mcpAuthHandler(request, { sessionId: this.sessionId });
-      const response = result && "accessToken" in result ? { kind: "token", ...result } : { kind: "cancelled" };
+      const response = result && "kind" in result && result.kind === "cancelled" ? { kind: "cancelled" } : result && "accessToken" in result && typeof result.accessToken === "string" && result.accessToken.length > 0 ? { ...result, kind: "token" } : result && "kind" in result && result.kind === "runtimeRefresh" && request.runtimeRefreshSupported === true ? { kind: "runtimeRefresh" } : { kind: "cancelled" };
       await this.rpc.mcp.oauth.handlePendingRequest({
         requestId: request.requestId,
         result: response

package/dist/types.d.ts

@@ -1767,6 +1767,8 @@ export interface McpAuthRequest {
     serverUrl: string;
     /** Why the runtime is requesting host-provided OAuth credentials. */
     reason: "initial" | "refresh" | "reauth" | "upscope";
+    /** Whether this Refresh request supports noninteractive runtime handoff. Missing means false. */
+    runtimeRefreshSupported?: boolean;
     /** Parsed WWW-Authenticate parameters from the MCP server. */
     wwwAuthenticateParams?: McpAuthWwwAuthenticateParams;
     /** Raw RFC 9728 protected-resource metadata JSON fetched by the runtime, if available. */
@@ -1788,12 +1790,15 @@ export interface McpAuthToken {
  *
  * Return `null`/`undefined` or `{ kind: "cancelled" }` to cancel the pending
  * OAuth request. Return `{ kind: "token", ... }` to provide host-acquired
- * OAuth token data.
+ * OAuth token data. Return `{ kind: "runtimeRefresh" }` only for a Refresh
+ * request advertising `runtimeRefreshSupported`; acceptance is not reconnect completion.
  */
 export type McpAuthResult = ({
     kind: "token";
 } & McpAuthToken) | {
     kind: "cancelled";
+} | {
+    kind: "runtimeRefresh";
 };
 /** Callback invoked when an MCP server requires OAuth and the SDK host opted in. */
 export type McpAuthHandler = (request: McpAuthRequest, context: {

package/package.json

@@ -5,8 +5,8 @@
         "url": "https://github.com/github/copilot-agent-runtime.git",
         "directory": "src/sdk/nodejs"
     },
-    "version": "1.0.23-preview.3",
-    "copilotCliVersion": "1.0.99-3",
+    "version": "1.0.23-preview.5",
+    "copilotCliVersion": "1.0.100-1",
     "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
     "main": "./dist/cjs/index.js",
     "types": "./dist/index.d.ts",
@@ -112,18 +112,18 @@
         "README.md"
     ],
     "copilotRuntime": {
-        "sourceSha": "a408f87a893e2126164b60ef936972cfca65dcf2",
-        "version": "1.0.99-3",
+        "sourceSha": "7d20899fc4c8b13a405aa621066e75a9e78e04cd",
+        "version": "1.0.100-1",
         "visibility": "public"
     },
     "optionalDependencies": {
-        "@github/copilot-sdk-darwin-arm64": "1.0.23-preview.3",
-        "@github/copilot-sdk-darwin-x64": "1.0.23-preview.3",
-        "@github/copilot-sdk-linux-arm64": "1.0.23-preview.3",
-        "@github/copilot-sdk-linux-x64": "1.0.23-preview.3",
-        "@github/copilot-sdk-linuxmusl-arm64": "1.0.23-preview.3",
-        "@github/copilot-sdk-linuxmusl-x64": "1.0.23-preview.3",
-        "@github/copilot-sdk-win32-arm64": "1.0.23-preview.3",
-        "@github/copilot-sdk-win32-x64": "1.0.23-preview.3"
+        "@github/copilot-sdk-darwin-arm64": "1.0.23-preview.5",
+        "@github/copilot-sdk-darwin-x64": "1.0.23-preview.5",
+        "@github/copilot-sdk-linux-arm64": "1.0.23-preview.5",
+        "@github/copilot-sdk-linux-x64": "1.0.23-preview.5",
+        "@github/copilot-sdk-linuxmusl-arm64": "1.0.23-preview.5",
+        "@github/copilot-sdk-linuxmusl-x64": "1.0.23-preview.5",
+        "@github/copilot-sdk-win32-arm64": "1.0.23-preview.5",
+        "@github/copilot-sdk-win32-x64": "1.0.23-preview.5"
     }
 }