@github/copilot-sdk 1.0.25 → 1.0.26

package/dist/generated/session-events.d.ts

@@ -9,7 +9,7 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
 /**
  * Union of all session event variants emitted by the Copilot CLI runtime.
  */
-export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | AutopilotStoppedEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | IndexedSearchEvent | WarningEvent | ModelChangeEvent | ModelDeselectedEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ProviderQuotaObservationEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | PermissionRecoveryEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolShellOutputEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | PermissionAssentDetectedEvent | PermissionContextualAuthorizationEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpOauthRecoveryCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedPluginProgressEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | HumanResponseRecordedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | WorkflowRunUpdatedEvent | WorkflowRunStartedEvent | WorkflowRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerToolsLoadedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
+export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | AutopilotStoppedEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | IndexedSearchEvent | WarningEvent | ModelChangeEvent | ModelDeselectedEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ProviderQuotaObservationEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | PermissionRecoveryEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolShellOutputEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | InstructionUpdateEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | PermissionAssentDetectedEvent | PermissionContextualAuthorizationEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpOauthRecoveryCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedPluginProgressEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | HumanResponseRecordedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | WorkflowRunUpdatedEvent | WorkflowRunStartedEvent | WorkflowRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerToolsLoadedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
 /**
  * Extensible routing preference for the virtual `auto` model. New identifiers must be advertised and enabled by the provider. `fast` is an integrator-only latency preset.
  */
@@ -1078,6 +1078,40 @@ export type SystemMessageRole =
 "system"
 /** Developer instruction message. */
  | "developer";
+/**
+ * Authority responsible for an instruction update
+ */
+export type InstructionUpdateAuthority = 
+/** The runtime generated the instruction. */
+"runtime"
+/** The SDK host supplied the instruction. */
+ | "host"
+/** Managed policy supplied the instruction. */
+ | "managedPolicy";
+/**
+ * Earliest legal insertion boundary for an instruction update
+ */
+export type InstructionUpdateBoundary = 
+/** Insert after the current tool-result run and before the next model request. */
+"afterToolResults"
+/** Insert immediately before the next model request at a provider-legal boundary. */
+ | "nextModelRequest";
+/**
+ * Deterministic behavior when the active provider cannot represent the requested update
+ */
+export type InstructionUpdateFallback = 
+/** Rebuild the leading system prompt rather than silently dropping the update. */
+"rebuildSystemPrompt"
+/** Reject the update without changing authoritative instructions. */
+ | "reject";
+/**
+ * How long an instruction update remains authoritative
+ */
+export type InstructionUpdateLifetime = 
+/** Persists in event order across replay, resume, rewind, fork, and compaction. */
+"persistent"
+/** Applies only to the current turn and is not restored from durable history. */
+ | "turn";
 /**
  * Structured metadata identifying what triggered this notification
  */
@@ -2740,6 +2774,10 @@ export interface ModeNoticeDeliveredData {
      * Model-visible transition notice persisted for a mid-turn delivery
      */
     content?: string;
+    /**
+     * Whether the model-visible transition notice was persisted separately as an instruction.update event
+     */
+    instructionUpdatePersisted?: boolean;
     mode: SessionMode;
 }
 /**
@@ -4553,6 +4591,10 @@ export interface FusionRouteFailedData {
      * Concrete model selected as the deterministic fallback.
      */
     fallbackModel: string;
+    /**
+     * Identifier of the HydraFusion turn whose routing failed; its fallback phase runs under the same id. Absent on events written before it was recorded.
+     */
+    fusionId?: string;
     /**
      * HydraFusion routing policy requested for the turn.
      */
@@ -9112,6 +9154,53 @@ export interface SystemMessageMetadata {
         [k: string]: JsonValue | undefined;
     };
 }
+/**
+ * Session event "instruction.update". An authoritative developer-instruction update. Event order defines instruction order. Persistent updates are durable and restore across replay, resume, rewind, fork, and compaction; turn-scoped updates must be emitted with ephemeral=true and are never restored.
+ */
+export interface InstructionUpdateEvent {
+    /**
+     * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
+     */
+    agentId?: string;
+    data: InstructionUpdateData;
+    /**
+     * When true, the event is transient and not persisted to the session event log on disk
+     */
+    ephemeral?: boolean;
+    /**
+     * Unique event identifier (UUID v4), generated when the event is emitted
+     */
+    id: string;
+    /**
+     * ID of the chronologically preceding event in the session, forming a linked chain. Null for the first event.
+     */
+    parentId: string | null;
+    /**
+     * ISO 8601 timestamp when the event was created
+     */
+    timestamp: string;
+    /**
+     * Type discriminator. Always "instruction.update".
+     */
+    type: "instruction.update";
+}
+/**
+ * An authoritative developer-instruction update. Event order defines instruction order. Persistent updates are durable and restore across replay, resume, rewind, fork, and compaction; turn-scoped updates must be emitted with ephemeral=true and are never restored.
+ */
+export interface InstructionUpdateData {
+    authority: InstructionUpdateAuthority;
+    boundary: InstructionUpdateBoundary;
+    /**
+     * Authoritative instruction text. Empty or whitespace-only content is rejected.
+     */
+    content: string;
+    fallback: InstructionUpdateFallback;
+    lifetime: InstructionUpdateLifetime;
+    /**
+     * Optional stable source name for diagnostics and future host-authored updates.
+     */
+    name?: string;
+}
 /**
  * Session event "system.notification". System-generated notification for runtime events like background task completion
  */

package/dist/host.d.ts

@@ -1,8 +1,39 @@
 import type { HostExitedNotification, HostPublishSessionResult, HostUnpublishSessionResult, HostListSessionsResult, HostLocalServerOptions, HostGitHubEnvironmentOptions } from "./generated/rpc.js";
 import type { CopilotSession } from "./session.js";
 import type { SessionConfig, ResumeSessionConfig } from "./types.js";
+/** Verified host admission identity, independent of inference authentication. @experimental */
+export type AhpSessionAuthentication = {
+    mode: "github";
+    identity: string;
+} | {
+    mode: "custom";
+    identity: string;
+} | {
+    mode: "none";
+};
+/** Explicit host-wide admission policy. @experimental */
+export type AhpHostAuthentication = {
+    mode: "github";
+} | {
+    mode: "none";
+} | {
+    mode: "custom";
+    /** Stable owner identity. Every accepted credential must match exactly. */
+    requireIdentity: string;
+    /** Receives a decrypted admission token, never used as an inference credential. */
+    authenticate: (request: {
+        token: string;
+        signal: AbortSignal;
+    }) => Promise<{
+        identity: string;
+        /** Required future RFC3339 expiration, enforced by the host. */
+        expiresAt: string;
+    } | null>;
+};
 /** Host-selected defaults for a fresh application-owned session. @experimental */
 export interface AhpSessionCreateRequest {
+    /** Trusted admission context supplied by the host, not by the connecting client. */
+    authentication: AhpSessionAuthentication;
     /** Pass these settings to createSession, adding your prompt, tools and callbacks. */
     config: Omit<SessionConfig, "onPermissionRequest">;
     /** Aborted when participation ends, including timeout or owner disconnection. */
@@ -10,6 +41,8 @@ export interface AhpSessionCreateRequest {
 }
 /** Host-selected settings for resuming a durable application-owned AHP session. @experimental */
 export interface AhpSessionResumeRequest {
+    /** Trusted admission context under the application's current host policy. */
+    authentication: AhpSessionAuthentication;
     sessionId: string;
     /** Pass to resumeSession, adding application tools, hooks and callbacks. */
     config: Omit<ResumeSessionConfig, "onPermissionRequest">;
@@ -30,12 +63,16 @@ export type AhpHostExit = HostExitedNotification;
  * @experimental
  */
 export interface AhpHostOptions {
+    /** Required even in copilot-cli client mode. Anonymous access must be explicitly selected. */
+    authentication: AhpHostAuthentication;
     /** Stable catalog identity; must agree with githubEnvironment.computeId when both are supplied. */
     computeId?: string;
     /** Enable a local WebSocket listener; an empty object selects loopback defaults. */
     localServer?: HostLocalServerOptions;
-    /** Register a Mission Control environment and enable remote WPS connections. */
+    /** Register a Mission Control environment and enable remote WPS connections; requires github authentication. */
     githubEnvironment?: HostGitHubEnvironmentOptions;
+    /** Remote creation admission, independent of factories. Omitted means denied. */
+    allowCreatingNewSessions?: boolean;
     /** Called at most once when hosting ends, not on runtime process death. Local, never serialized. */
     onExit?: (exit: AhpHostExit) => void;
     /**
@@ -73,6 +110,7 @@ export declare class AhpHost {
     private readonly publishHostSession;
     private readonly listHostSessions;
     private readonly unpublishHostSession;
+    private readonly updateCreationPolicy;
     readonly hostId: string;
     /** Local WebSocket URL. Absent when only the GitHub environment is enabled. */
     readonly url: string | undefined;
@@ -84,6 +122,8 @@ export declare class AhpHost {
     readonly pid: number | undefined;
     /** Ask the runtime to stop the listener and await its cleanup, on every call. */
     dispose(): Promise<void>;
+    /** Change subsequent remote admissions without disconnecting clients; admitted creation may finish. */
+    setAllowCreatingNewSessions(allowed: boolean): Promise<void>;
     /** Publish an attached application session into the durable compute-scoped host catalog. */
     publishSession(sessionId: string): Promise<HostPublishSessionResult>;
     /**

package/dist/host.js

@@ -1,10 +1,11 @@
 class AhpHost {
   /** @internal */
-  constructor(info, disposeHost, publishHostSession, listHostSessions, unpublishHostSession) {
+  constructor(info, disposeHost, publishHostSession, listHostSessions, unpublishHostSession, updateCreationPolicy) {
     this.disposeHost = disposeHost;
     this.publishHostSession = publishHostSession;
     this.listHostSessions = listHostSessions;
     this.unpublishHostSession = unpublishHostSession;
+    this.updateCreationPolicy = updateCreationPolicy;
     this.hostId = info.hostId;
     this.url = info.url;
     this.environmentId = info.environmentId;
@@ -15,6 +16,7 @@ class AhpHost {
   publishHostSession;
   listHostSessions;
   unpublishHostSession;
+  updateCreationPolicy;
   hostId;
   /** Local WebSocket URL. Absent when only the GitHub environment is enabled. */
   url;
@@ -28,6 +30,10 @@ class AhpHost {
   dispose() {
     return this.disposeHost();
   }
+  /** Change subsequent remote admissions without disconnecting clients; admitted creation may finish. */
+  setAllowCreatingNewSessions(allowed) {
+    return this.updateCreationPolicy(allowed);
+  }
   /** Publish an attached application session into the durable compute-scoped host catalog. */
   publishSession(sessionId) {
     return this.publishHostSession(sessionId);

package/dist/index.d.ts

@@ -5,7 +5,7 @@
  */
 export { CopilotClient } from "./client.js";
 export type { HostLocalServerOptions, HostGitHubEnvironmentOptions, ModelGetReasoningSummariesRequest, ModelGetReasoningSummariesResult, SandboxConfig, AutopilotOptions, } from "./generated/rpc.js";
-export { AhpHost, type AhpHostExit, type AhpHostOptions, type AhpSessionCreateRequest, type AhpSessionResumeRequest, } from "./host.js";
+export { AhpHost, type AhpHostExit, type AhpHostOptions, type AhpHostAuthentication, type AhpSessionAuthentication, type AhpSessionCreateRequest, type AhpSessionResumeRequest, } from "./host.js";
 export { DisableBypassPermissionsModes, RuntimeConnection } from "./types.js";
 export { BuiltInTools, ToolSet } from "./toolSet.js";
 export { CopilotSession, type AssistantMessageEvent } from "./session.js";
@@ -13,5 +13,5 @@ export { defineWorkflow, WorkflowResumeError, isWorkflowRunTerminal } from "./wo
 export { Canvas, CanvasError, createCanvas, type CanvasAction, type CanvasDeclaration, type CanvasHostContext, type CanvasHostContextCapabilities, type CanvasJsonSchema, type CanvasOptions, } from "./canvas.js";
 export { defineTool, approveAll, createAttributedPermissionResult, convertMcpCallToolResult, createSessionFsAdapter, CopilotRequestHandler, CopilotWebSocketHandler, CopilotWebSocketCloseStatus, CopilotWebSocketForwarder, SessionFsSqliteTransactionFailure, SessionFsWriteFailure, SYSTEM_MESSAGE_SECTIONS, } from "./types.js";
 export type * from "./generated/session-events.js";
-export type { AskUserVariant, CommandContext, CommandDefinition, CommandHandler, CanvasProviderIdentity, CloudSessionOptions, CloudSessionRepository, AuthIdentityMetadata, AuthInfoType, ConnectorAccountRequest, ConnectorAvailability, ConnectorCapabilities, ConnectorCatalogEntry, ConnectorCatalogResult, ConnectorCatalogStatus, ConnectorConnectRequest, ConnectorConnectResult, ConnectorContinueRequest, ConnectorDisconnectResult, ConnectorMcpStatus, ConnectorReconcileRequest, ConnectorRuntimeStatus, ConnectorSessionAccount, ConnectorSessionAccountResult, ConnectorStatus, AutoModeSwitchHandler, AutoModeSwitchRequest, AutoModeSwitchResponse, AgentStopHandler, AgentStopHookInput, AgentStopHookOutput, SubagentStartHandler, SubagentStartHookInput, SubagentStartHookOutput, SubagentStopHandler, SubagentStopHookInput, SubagentStopHookOutput, UserPromptTransformedHandler, UserPromptTransformedHookInput, UserPromptTransformedHookOutput, CopilotClientInfo, CopilotClientMode, CopilotClientOptions, InstallationConfirmationHandler, InstallationConfirmationRequest, InstallationConfirmationResponse, InstallationDecision, InstallationReview, McpInstallationReview, CopilotExpAssignmentResponse, StdioRuntimeConnection, InProcessRuntimeConnection, TcpRuntimeConnection, UriRuntimeConnection, ChildProcessRuntimeConnection, CustomAgentConfig, ElicitationFieldValue, ElicitationHandler, ElicitationParams, ElicitationContext, ElicitationResult, ElicitationSchema, ElicitationSchemaField, ExpConfigEntry, ExpFlagValue, ExitPlanModeHandler, ExitPlanModeRequest, ExitPlanModeResult, ExtensionLaunchProfile, ExtensionLaunchProvider, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, ExtensionInfo, ForegroundSessionInfo, GetAuthStatusResponse, GetStatusResponse, GitHubMcpToolConfig, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTokenProvider, GitHubTokenProviderArgs, GitHubTokenProviderResult, InfiniteSessionConfig, LargeToolOutputConfig, MemoryConfiguration, UiInputOptions, MCPStdioServerConfig, MCPHTTPServerConfig, MCPServerConfig, DefaultAgentConfig, BearerTokenProvider, ExtensionContextAttachment, MessageOptions, ResponseSchema, MessageSource, ManagedSettings, ManagedSettingsPermissions, ModelBilling, ModelBillingTokenPrices, ModelBillingTokenPricesLongContext, AutoTier, CapiSessionOptions, CurrentModel, ModelSwitchAutoTierResult, ModelSwitchAutoTierStatus, ModelCapabilities, ModelCapabilitiesOverride, ModelInfo, ModelPolicy, NamedProviderConfig, PermissionHandler, PermissionRequest, PermissionRequestedData, PermissionRequestedEvent, PermissionRequestResult, AttributedPermissionResult, PermissionDecisionContext, PermissionDecisionOutcome, PermissionDecisionSource, PermissionDecisionSurface, PermissionResponseCapability, ProviderConfig, ProviderConfigModelProvider, ProviderModelConfig, ProviderTokenArgs, RemoteSessionMode, SandboxConfigSource, ResumeSessionConfig, TranscriptRecovery, SectionOverride, SectionOverrideAction, SectionTransformFn, SessionCapabilities, SessionConfig, SessionConfigBase, WorkingDirectoryTrust, SessionEvent, SessionEventHandler, SessionEventPayload, SessionEventType, SessionLifecycleEvent, SessionLifecycleEventMetadata, SessionLifecycleEventType, SessionLifecycleHandler, SessionHooks, SessionCreatedEvent, SessionDeletedEvent, SessionUpdatedEvent, SessionForegroundEvent, SessionBackgroundEvent, SessionContext, SessionListFilter, SessionMetadata, SessionUiApi, SessionFsConfig, SessionFsProvider, SessionFsFileInfo, SessionFsSqliteQueryResult, SessionFsSqliteQueryType, SessionFsSqliteProvider, SessionFsSqliteStatement, SessionFsSqliteTransactionErrorClass, SkillProvider, SkillProviderCallOptions, SkillProviderDescriptor, CopilotRequestContext, SystemMessageAppendConfig, SystemMessageConfig, SystemMessageCustomizeConfig, SystemMessageReplaceConfig, SystemMessageSection, TelemetryConfig, TraceContext, TraceContextProvider, Tool, ToolHandler, ToolInvocation, ToolNamespace, CurrentToolMetadata, ToolTelemetry, ToolResultObject, ToolSearchConfig, ImageGenerationConfig, TypedSessionEventHandler, TypedSessionLifecycleHandler, ZodSchema, } from "./types.js";
+export type { AskUserVariant, CommandContext, CommandDefinition, CommandHandler, CanvasProviderIdentity, CloudSessionOptions, CloudSessionRepository, AuthIdentityMetadata, AuthInfoType, ConnectorAccountRequest, ConnectorAvailability, ConnectorCapabilities, ConnectorCatalogEntry, ConnectorCatalogResult, ConnectorCatalogStatus, ConnectorConnectRequest, ConnectorConnectResult, ConnectorContinueRequest, ConnectorDisconnectResult, ConnectorMcpStatus, ConnectorReconcileRequest, ConnectorRuntimeStatus, ConnectorSessionAccount, ConnectorSessionAccountResult, ConnectorStatus, AutoModeSwitchHandler, AutoModeSwitchRequest, AutoModeSwitchResponse, AgentStopHandler, AgentStopHookInput, AgentStopHookOutput, SubagentStartHandler, SubagentStartHookInput, SubagentStartHookOutput, SubagentStopHandler, SubagentStopHookInput, SubagentStopHookOutput, UserPromptTransformedHandler, UserPromptTransformedHookInput, UserPromptTransformedHookOutput, CopilotClientInfo, CopilotClientMode, CopilotClientOptions, EntraAuthConfig, InstallationConfirmationHandler, InstallationConfirmationRequest, InstallationConfirmationResponse, InstallationDecision, InstallationReview, McpInstallationReview, CopilotExpAssignmentResponse, StdioRuntimeConnection, InProcessRuntimeConnection, TcpRuntimeConnection, UriRuntimeConnection, ChildProcessRuntimeConnection, CustomAgentConfig, ElicitationFieldValue, ElicitationHandler, ElicitationParams, ElicitationContext, ElicitationResult, ElicitationSchema, ElicitationSchemaField, ExpConfigEntry, ExpFlagValue, ExitPlanModeHandler, ExitPlanModeRequest, ExitPlanModeResult, ExtensionLaunchProfile, ExtensionLaunchProvider, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, ExtensionInfo, ForegroundSessionInfo, GetAuthStatusResponse, GetStatusResponse, GitHubMcpToolConfig, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTokenProvider, GitHubTokenProviderArgs, GitHubTokenProviderResult, InfiniteSessionConfig, LargeToolOutputConfig, MemoryConfiguration, UiInputOptions, MCPStdioServerConfig, MCPHTTPServerConfig, MCPServerConfig, DefaultAgentConfig, BearerTokenProvider, ExtensionContextAttachment, MessageOptions, ResponseSchema, MessageSource, ManagedSettings, ManagedSettingsPermissions, ModelBilling, ModelBillingTokenPrices, ModelBillingTokenPricesLongContext, AutoTier, CapiSessionOptions, CurrentModel, ModelSwitchAutoTierResult, ModelSwitchAutoTierStatus, ModelCapabilities, ModelCapabilitiesOverride, ModelInfo, ModelPolicy, NamedProviderConfig, PermissionHandler, PermissionRequest, PermissionRequestedData, PermissionRequestedEvent, PermissionRequestResult, AttributedPermissionResult, PermissionDecisionContext, PermissionDecisionOutcome, PermissionDecisionSource, PermissionDecisionSurface, PermissionResponseCapability, ProviderConfig, ProviderConfigModelProvider, ProviderModelConfig, ProviderTokenArgs, RemoteSessionMode, SandboxConfigSource, ResumeSessionConfig, TranscriptRecovery, SectionOverride, SectionOverrideAction, SectionTransformFn, SessionCapabilities, SessionConfig, SessionConfigBase, WorkingDirectoryTrust, SessionEvent, SessionEventHandler, SessionEventPayload, SessionEventType, SessionLifecycleEvent, SessionLifecycleEventMetadata, SessionLifecycleEventType, SessionLifecycleHandler, SessionHooks, SessionCreatedEvent, SessionDeletedEvent, SessionUpdatedEvent, SessionForegroundEvent, SessionBackgroundEvent, SessionContext, SessionListFilter, SessionMetadata, SessionUiApi, SessionFsConfig, SessionFsProvider, SessionFsFileInfo, SessionFsSqliteQueryResult, SessionFsSqliteQueryType, SessionFsSqliteProvider, SessionFsSqliteStatement, SessionFsSqliteTransactionErrorClass, SkillProvider, SkillProviderCallOptions, SkillProviderDescriptor, CopilotRequestContext, SystemMessageAppendConfig, SystemMessageConfig, SystemMessageCustomizeConfig, SystemMessageReplaceConfig, SystemMessageSection, TelemetryConfig, TraceContext, TraceContextProvider, Tool, ToolHandler, ToolInvocation, ToolNamespace, CurrentToolMetadata, ToolTelemetry, ToolResultObject, ToolSearchConfig, ImageGenerationConfig, TypedSessionEventHandler, TypedSessionLifecycleHandler, ZodSchema, } from "./types.js";
 export type { JsonValue, WorkflowRunOptions, WorkflowResumeOptions, WorkflowLimitOverrides, WorkflowResumeErrorCode, SessionWorkflowApi, WorkflowAgentOptions, WorkflowContext, WorkflowDefinition, WorkflowHandle, WorkflowJsonSchema, WorkflowLimits, WorkflowMeta, WorkflowPipelineStage, WorkflowStepOptions, WorkflowRunResult, WorkflowRunStatus, WorkflowRunSummary, WorkflowListRunsOptions, WorkflowRunsPage, WorkflowRunDetail, WorkflowProgressPage, WorkflowProgressLine, WorkflowPhaseObservation, WorkflowPhaseStatus, WorkflowAgentSummary, } from "./workflow.js";

package/dist/session.d.ts

@@ -71,6 +71,7 @@ export declare class CopilotSession {
     private disconnected;
     private readonly pendingResponseWaits;
     private readonly pendingStructuredWaits;
+    private completionRpcUnsupported;
     private disconnecting;
     private onDisconnected?;
     /**
@@ -143,14 +144,15 @@ export declare class CopilotSession {
      */
     send(prompt: string): Promise<string>;
     send(options: MessageOptions): Promise<string>;
+    private sendMessage;
+    private createSendParams;
     /**
      * Sends a message and waits for its response to complete.
      *
-     * This is a convenience method that combines {@link send} with waiting for
-     * non-Autopilot `session.idle` or the request-correlated `session.autopilot_stopped`
-     * event. Autopilot completion does not wait for or stop attached shells.
-     * Use this when you want to block until the
-     * assistant has finished processing the message.
+     * Supported local runtimes correlate completion and the response with this
+     * message. Unsupported runtimes retain the legacy non-Autopilot `session.idle`
+     * or request-correlated `session.autopilot_stopped` wait. Autopilot completion
+     * does not wait for or stop attached shells.
      *
      * Events are still delivered to handlers registered via {@link on} while waiting.
      * Sub-agent events with a non-empty `agentId` do not complete the wait or supply its reply.
@@ -160,10 +162,10 @@ export declare class CopilotSession {
      *
      * @param options - The message options including the prompt and optional attachments
      * @param timeout - Timeout in milliseconds (default: 60000). Controls how long to wait; does not abort in-flight agent work.
-     * @returns A promise that resolves with the final assistant message on completion,
+     * @returns A promise that resolves with this message's final assistant response,
      *          or undefined if no assistant message was received
      * @throws Error if the run is aborted before completion
-     * @throws Error if the timeout is reached before response completion
+     * @throws Error if the timeout is reached before completion
      * @throws Error if the session has been disconnected or the connection fails
      *
      * @example
@@ -176,6 +178,7 @@ export declare class CopilotSession {
     sendAndWait(prompt: string, timeout?: number): Promise<AssistantMessageEvent | undefined>;
     sendAndWait<TResult>(options: MessageOptions | string, responseSchema: ResponseSchema<TResult>, timeout?: number): Promise<TResult>;
     sendAndWait(options: MessageOptions, timeout?: number): Promise<AssistantMessageEvent | undefined>;
+    private sendWithCompletion;
     private sendAndWaitForStructuredMessage;
     private assertConnected;
     /**

package/dist/session.js

@@ -1,5 +1,10 @@
 import { AsyncLocalStorage } from "node:async_hooks";
-import { ConnectionError, ErrorCodes, ResponseError } from "vscode-jsonrpc/node.js";
+import {
+  CancellationTokenSource,
+  ConnectionError,
+  ErrorCodes,
+  ResponseError
+} from "vscode-jsonrpc/node.js";
 import { createInternalSessionRpc, createSessionRpc } from "./generated/rpc.js";
 import { CanvasError } from "./canvas.js";
 import { getTraceContext } from "./telemetry.js";
@@ -293,6 +298,7 @@ class CopilotSession {
   disconnected = false;
   pendingResponseWaits = /* @__PURE__ */ new Set();
   pendingStructuredWaits = /* @__PURE__ */ new Set();
+  completionRpcUnsupported = false;
   disconnecting = false;
   onDisconnected;
   /** @internal Client session API handlers, populated by CopilotClient during create/resume. */
@@ -494,9 +500,22 @@ class CopilotSession {
   }
   async send(optionsOrPrompt) {
     const options = typeof optionsOrPrompt === "string" ? { prompt: optionsOrPrompt } : optionsOrPrompt;
+    return this.sendMessage(options);
+  }
+  async sendMessage(options, cancelled) {
+    const message = await this.createSendParams(options);
+    if (cancelled?.()) {
+      throw new Error("Completion wait cancelled");
+    }
     const response = await this.connection.sendRequest("session.send", {
-      ...await getTraceContext(this.traceContextProvider),
       sessionId: this.sessionId,
+      ...message
+    });
+    return response.messageId;
+  }
+  async createSendParams(options) {
+    return {
+      ...await getTraceContext(this.traceContextProvider),
       prompt: options.prompt,
       source: options.source,
       displayPrompt: options.displayPrompt,
@@ -514,8 +533,7 @@ class CopilotSession {
           }
         }
       } : {}
-    });
-    return response.messageId;
+    };
   }
   async sendAndWait(optionsOrPrompt, schemaOrTimeout, timeout) {
     const options = typeof optionsOrPrompt === "string" ? { prompt: optionsOrPrompt } : optionsOrPrompt;
@@ -536,10 +554,39 @@ class CopilotSession {
         "Structured output cannot be requested on an immediate steering message."
       );
     }
+    const startedAt = Date.now();
+    const completion = await this.sendWithCompletion(
+      typedSchema ? { ...options, responseSchema: typedSchema } : options,
+      effectiveTimeout
+    );
+    if (completion !== void 0) {
+      const message = completion.response;
+      if (message !== void 0 && (message.type !== "assistant.message" || message.agentId)) {
+        throw new Error("The runtime returned a non-assistant response.");
+      }
+      if (typedSchema || options.responseSchema) {
+        if (completion.aborted) {
+          throw new Error(
+            "The requested run was aborted before a structured result was completed."
+          );
+        }
+        if (!message || message.data.toolRequests?.length || !message.data.content.trim()) {
+          throw new Error(
+            "The requested run completed without a structured assistant response."
+          );
+        }
+        return typedSchema ? typedSchema.parse(JSON.parse(message.data.content)) : message;
+      }
+      if (completion.aborted) {
+        throw new Error("The requested run was aborted before completion.");
+      }
+      return message;
+    }
+    const remainingTimeout = Math.max(0, effectiveTimeout - (Date.now() - startedAt));
     if (typedSchema || options.responseSchema) {
       const message = await this.sendAndWaitForStructuredMessage(
         typedSchema ? { ...options, responseSchema: typedSchema } : options,
-        effectiveTimeout
+        remainingTimeout
       );
       if (typedSchema) {
         if (!message) {
@@ -609,14 +656,8 @@ class CopilotSession {
     };
     this.pendingResponseWaits.add(fail);
     let timeoutId;
+    let waiting = true;
     try {
-      messageId = await this.send(options);
-      admitted = true;
-      for (const event of buffered) {
-        if (event instanceof Error) fail(event);
-        else observe(event);
-      }
-      buffered.length = 0;
       const timeoutPromise = new Promise((_, reject) => {
         timeoutId = setTimeout(
           () => reject(
@@ -624,15 +665,28 @@ class CopilotSession {
               `Timeout after ${effectiveTimeout}ms waiting for response completion`
             )
           ),
-          effectiveTimeout
+          remainingTimeout
         );
       });
-      const outcome = await Promise.race([outcomePromise, timeoutPromise]);
+      const outcome = await Promise.race([
+        this.sendMessage(options, () => !waiting).then((id) => {
+          messageId = id;
+          admitted = true;
+          for (const event of buffered) {
+            if (event instanceof Error) fail(event);
+            else observe(event);
+          }
+          buffered.length = 0;
+          return outcomePromise;
+        }),
+        timeoutPromise
+      ]);
       if (outcome.kind === "error") {
         throw outcome.error;
       }
       return outcome.message;
     } finally {
+      waiting = false;
       if (timeoutId !== void 0) {
         clearTimeout(timeoutId);
       }
@@ -641,6 +695,81 @@ class CopilotSession {
       this.pendingResponseWaits.delete(fail);
     }
   }
+  async sendWithCompletion(options, timeout) {
+    if (this.completionRpcUnsupported) return void 0;
+    if (this.disconnected) throw new Error("Session is disconnected");
+    const cancellation = new CancellationTokenSource();
+    const dispatched = /* @__PURE__ */ new Set();
+    let completionEventId;
+    let resolveDispatched;
+    const dispatchCompleted = new Promise((resolve) => {
+      resolveDispatched = resolve;
+    });
+    const unsubscribe = this.on((event) => {
+      if (event.agentId || event.type !== "session.idle" && event.type !== "session.autopilot_stopped" && event.type !== "session.error") {
+        return;
+      }
+      dispatched.add(event.id);
+      if (event.id === completionEventId) resolveDispatched();
+    });
+    const drain = async (id) => {
+      if (id && !dispatched.has(id)) {
+        completionEventId = id;
+        await dispatchCompleted;
+      }
+    };
+    let fail;
+    const stopped = new Promise((_, reject) => {
+      fail = reject;
+    });
+    this.pendingResponseWaits.add(fail);
+    const timer = setTimeout(
+      () => fail(new Error(`Timeout after ${timeout}ms waiting for session.idle`)),
+      timeout
+    );
+    const operation = async () => {
+      try {
+        const message = await this.createSendParams(options);
+        if (cancellation.token.isCancellationRequested) {
+          throw new Error("Completion wait cancelled");
+        }
+        const result = await this.connection.sendRequest(
+          "session.sendAndWait",
+          {
+            sessionId: this.sessionId,
+            ...message
+          },
+          cancellation.token
+        );
+        await drain(result.completionEventId);
+        return result;
+      } catch (error) {
+        if (error instanceof ResponseError && error.code === ErrorCodes.MethodNotFound) {
+          this.completionRpcUnsupported = true;
+          return void 0;
+        }
+        if (error instanceof ResponseError && typeof error.data === "object" && error.data !== null) {
+          if ("stack" in error.data && typeof error.data.stack === "string") {
+            error.stack = error.data.stack;
+          }
+          if ("completionEventId" in error.data && typeof error.data.completionEventId === "string") {
+            await drain(error.data.completionEventId);
+          }
+        }
+        throw error;
+      }
+    };
+    try {
+      return await Promise.race([operation(), stopped]);
+    } finally {
+      clearTimeout(timer);
+      unsubscribe();
+      this.pendingResponseWaits.delete(fail);
+      resolveDispatched();
+      cancellation.cancel();
+      cancellation.dispose();
+    }
+  }
   async sendAndWaitForStructuredMessage(options, timeout) {
     if (this.disconnected) {
       throw new Error("Session is disconnected");
@@ -690,12 +819,13 @@ class CopilotSession {
       }
     });
     this.pendingStructuredWaits.add(fail);
+    let waiting = true;
     const timer = setTimeout(
       () => fail(new Error(`Timeout after ${timeout}ms waiting for the structured response`)),
       timeout
     );
     try {
-      const sendOutcome = this.send(options).then(
+      const sendOutcome = this.sendMessage(options, () => !waiting).then(
         (id) => {
           if (!id) {
             throw new Error(
@@ -716,6 +846,7 @@ class CopilotSession {
       if (outcome.kind === "error") throw outcome.error;
       return outcome.message;
     } finally {
+      waiting = false;
       clearTimeout(timer);
       buffered.length = 0;
       unsubscribe();

package/dist/types.d.ts

@@ -9,7 +9,7 @@ export type { InstallationConfirmationHandler } from "./installationConfirmation
 import type { AgentModelPolicy, AttachmentExtensionContext as GeneratedExtensionContextAttachment, AutoTier, PermissionRequest as GeneratedPermissionRequest, PermissionRequestedData as GeneratedPermissionRequestedData, PermissionRequestedEvent as GeneratedPermissionRequestedEvent, ReasoningSummary, SessionLimitsConfig, SessionEvent as GeneratedSessionEvent } from "./generated/session-events.js";
 import type { CopilotSession } from "./session.js";
 import type { JsonValue } from "./workflow.js";
-import type { ExtensionLaunchProviderHandler as GeneratedExtensionLaunchProvider, AutopilotOptions, GitHubTokenAcquireRequest, GitHubTokenAcquireResult, GitHubTelemetryNotification, ModelBillingTokenPrices, DiagnosticsConfiguration, OpenCanvasInstance, ProtocolExternalToolNamespace, RemoteSessionMode, CurrentToolMetadata, SandboxConfig } from "./generated/rpc.js";
+import type { ExtensionLaunchProviderHandler as GeneratedExtensionLaunchProvider, AutopilotOptions, GitHubTokenAcquireRequest, GitHubTokenAcquireResult, GitHubTelemetryNotification, ModelBillingTokenPrices, DiagnosticsConfiguration, OpenCanvasInstance, ProtocolExternalToolNamespace, CurrentToolMetadata, SandboxConfig } from "./generated/rpc.js";
 import type { ToolSet } from "./toolSet.js";
 export type { RemoteSessionMode } from "./generated/rpc.js";
 export type { AutopilotOptions } from "./generated/rpc.js";
@@ -265,7 +265,14 @@ export interface CopilotClientInfo {
      */
     integrationVersion?: string;
 }
+export type EntraAuthConfig = import("./generated/rpc.js").EntraAuthConfig;
 export interface CopilotClientOptions {
+    /**
+     * Host application's Microsoft Entra registration, shared by its sessions.
+     * Required for built-in Entra sign-in and token renewal; other authentication methods remain available.
+     * @experimental
+     */
+    entra?: EntraAuthConfig;
     /**
      * How to connect to the Copilot runtime. When omitted, defaults to
      * {@link RuntimeConnection.forStdio} with the bundled runtime.
@@ -425,14 +432,6 @@ export interface CopilotClientOptions {
      * @default undefined (disabled)
      */
     sessionIdleTimeoutSeconds?: number;
-    /**
-     * Enable remote session support (Mission Control integration).
-     * When true, sessions in a GitHub repository working directory are
-     * accessible from GitHub web and mobile.
-     * Ignored when connecting to an existing runtime via {@link RuntimeConnection.forUri}.
-     * @default false
-     */
-    enableRemoteSessions?: boolean;
     /**
      * Identity of the integrating application, forwarded to the runtime on the
      * `server.connect` handshake. Declaring it lets the telemetry the runtime
@@ -680,6 +679,16 @@ export interface ImageGenerationConfig {
      * or enforce enterprise policy.
      */
     watermark?: boolean;
+    /**
+     * Experimental. Save generated and edited images under the session-state
+     * directory's `images` folder and give the model each path as a
+     * `saved_to:` line in the tool result. Defaults to true; set false to opt
+     * out. Subagents follow
+     * their parent's value unless they set their own. A failed save still
+     * returns the image. Sessions without a local session-state directory never
+     * save. Re-supply after cold resume. Does not enable image generation.
+     */
+    saveToDisk?: boolean;
 }
 /**
  * SDK-supplied override for the runtime's built-in tool-search behavior.
@@ -2718,13 +2727,6 @@ export interface SessionConfigBase {
      * `skillDirectories` or `enableConfigDiscovery` settings.
      */
     enableSkills?: boolean;
-    /**
-     * Per-session remote behavior control:
-     * - `"off"` — local only, no remote export (default)
-     * - `"export"` — export session events to GitHub without enabling remote steering
-     * - `"on"` — export to GitHub AND enable remote steering
-     */
-    remoteSession?: RemoteSessionMode;
     /**
      * Optional event handler that is registered on the session before the
      * session.create RPC is issued. This guarantees that early events emitted