@github/copilot-sdk 1.0.29-preview.1 → 1.0.29-preview.3

package/dist/generated/rpc.js

@@ -813,9 +813,17 @@ function createServerRpc(connection) {
        *
        * @param params A bounded catalog search. Both the query length and the result count are capped by the schema so a caller cannot request an unbounded scan.
        *
-       * @returns Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
+       * @returns Outcome of catalog.search or catalog.recommend: either bounded inert candidates, or one typed refusal. Never a partial success.
        */
       search: async (params) => connection.sendRequest("catalog.search", params),
+      /**
+       * Requests the initial page of at most ten official-product recommendations for a complete task and product, bound to an existing attached local session. Requires catalog-recommend, catalog-search-session-bound and catalog-search-credential-required. Uses the selected GitHub.com user credential on the fixed Agent Finder recommendations route; successful capability negotiation does not establish service acceptance. Returns the existing inert catalog candidates and retained install references with the typed catalog refusal union. No anonymous retry, unfiltered search fallback or continuation is performed. Server-owned product approvals establish provenance, not task suitability. Read-only: nothing is installed, configured or persisted.
+       *
+       * @param params Initial-page official-product recommendations for a complete task. The runtime fixes recommendationPolicy to official-product and pageSize to 10; callers cannot override the policy, request pagination or fall back to search.
+       *
+       * @returns Outcome of catalog.search or catalog.recommend: either bounded inert candidates, or one typed refusal. Never a partial success.
+       */
+      recommend: async (params) => connection.sendRequest("catalog.recommend", params),
       /**
        * Retrieves one saved feed by its opaque ID, optionally filtered by trust tier. Requires catalog-feeds and catalog-search-credential-required, and uses the same authority, credential policy, optional session binding and candidate projection as catalog.search, so available entries are the same inert candidates, with the same installability, handles and display metadata, and install through the same confirmed flows. Entries keep the feed's order; an entry the runtime cannot present is returned as unavailable with a reason rather than failing the feed. No anonymous retry. Read-only: nothing is installed, configured, or persisted.
        *
@@ -2146,6 +2154,49 @@ function createInternalServerRpc(connection) {
 }
 function createSessionRpc(connection, sessionId) {
   return {
+    /** @experimental */
+    management: {
+      /**
+       * Updates opt-in session management policy live. Enabling the master enables all tools before applying individual overrides. Opt-in is scoped to the session's configuration directory.
+       *
+       * @param params Updates the session's live policy without changing persistent host settings.
+       *
+       * @returns Opt-in policy for local session management.
+       */
+      configure: async (params) => connection.sendRequest("session.management.configure", { ...params, sessionId }),
+      /**
+       * Lists other live, opted-in sessions in the same configuration directory. Requires the list tool to be enabled.
+       *
+       * @param params Lists opted-in local peers. The caller is omitted.
+       *
+       * @returns Eligible live peers reported by their owning runtimes.
+       */
+      list: async (params) => connection.sendRequest("session.management.list", { ...params, sessionId }),
+      /**
+       * Injects peer text into an opted-in session. Wakes an idle agent and safely queues delivery to a busy agent. Acceptance does not imply an answer or completed task.
+       *
+       * @param params Sends peer text, never human approval, to another opted-in session.
+       *
+       * @returns Acceptance is not a completed turn or a reply.
+       */
+      message: async (params) => connection.sendRequest("session.management.message", { ...params, sessionId }),
+      /**
+       * Asks the owning host to create and supervise a separate session, preserving permissions and model restrictions. Omitted model, reasoning effort, context tier and cwd inherit the caller's current values; explicit overrides use normal model validation and workspace trust. Records durable creation lineage before delivering the initial task as peer text. Returns the new session ID, not task completion. Requires the create tool and a host creation handler.
+       *
+       * @param params Requests a separate session. Omitted launch options inherit the caller's current configuration.
+       *
+       * @returns Identifies a session owned and supervised by the creating host.
+       */
+      create: async (params) => connection.sendRequest("session.management.create", { ...params, sessionId }),
+      /**
+       * Closes a live opted-in session created by the caller or one of its descendants, preserving saved history and leaving descendants open. Requires the close capability to be enabled. Self, ancestors, siblings and unrelated sessions cannot be closed.
+       *
+       * @param params Closes one live opted-in descendant without deleting its saved history or closing its children.
+       *
+       * @returns Completion of the existing non-deleting close lifecycle.
+       */
+      close: async (params) => connection.sendRequest("session.management.close", { ...params, sessionId })
+    },
     /** @experimental */
     providers: {
       /**
@@ -2783,7 +2834,13 @@ function createSessionRpc(connection, sessionId) {
        *
        * @returns Canonical runtime state for the session's current autopilot objective.
        */
-      getState: async () => connection.sendRequest("session.autopilotObjective.getState", { sessionId })
+      getState: async () => connection.sendRequest("session.autopilotObjective.getState", { sessionId }),
+      /**
+       * Sets whether completing or pausing this session's objective preserves autopilot mode. This in-memory preference defaults to false and must be reapplied when attaching a client.
+       *
+       * @param params Client-resolved preference for retaining autopilot mode after objective completion or pause.
+       */
+      setStayInAutopilot: async (params) => connection.sendRequest("session.autopilotObjective.setStayInAutopilot", { ...params, sessionId })
     },
     /** @experimental */
     completions: {
@@ -3523,6 +3580,12 @@ function createSessionRpc(connection, sessionId) {
        * @returns The selectable model entries and selection ids synthesized for the synchronized BYOK models.
        */
       sync: async (params) => connection.sendRequest("session.provider.sync", { ...params, sessionId }),
+      /**
+       * Returns credential-free provider configuration status for the selected model. This does not validate provider credentials or contact the provider.
+       *
+       * @returns Credential-free provider configuration status for the selected model.
+       */
+      getStatus: async () => connection.sendRequest("session.provider.getStatus", { sessionId }),
       /**
        * Withdraws named host-managed models from the session's BYOK registry, leaving every other entry untouched. The scoped counterpart to `provider.sync`: a snapshot can only describe entries the caller knows about, so using it to remove one model silently withdraws rows registered by another source, such as a plugin calling `provider.add` at runtime. Naming what to remove leaves unrelated entries alone. Selection ids that are not registered are ignored, so withdrawal is idempotent. A provider is removed only when one of the withdrawn models was the last entry referencing it; a provider that simply has no models, which is the normal state while its rows are supplied by catalog discovery, is left in place.
        *
@@ -3863,6 +3926,12 @@ function createSessionRpc(connection, sessionId) {
        * @returns Current permission mode.
        */
       getMode: async () => connection.sendRequest("session.permissions.getMode", { sessionId }),
+      /**
+       * Returns the approval modes currently available under the session's feature and managed permission policy. This read does not change permissions; mutations must still check their authoritative result because policy may change.
+       *
+       * @returns Available permission modes, derived from current session policy.
+       */
+      getCapabilities: async () => connection.sendRequest("session.permissions.getCapabilities", { sessionId }),
       /**
        * Adds or removes session-scoped or location-scoped permission rules.
        *

package/dist/generated/session-events.d.ts

@@ -730,7 +730,7 @@ export type UserMessageAgentMode =
 /**
  * A user message attachment — a file, directory, code selection, blob, GitHub reference, GitHub-anchored pointer, or extension-supplied context payload
  */
-export type Attachment = AttachmentFile | AttachmentDirectory | AttachmentSelection | AttachmentGitHubReference | AttachmentGitHubCommit | AttachmentGitHubRelease | AttachmentGitHubActionsJob | AttachmentGitHubRepository | AttachmentGitHubFileDiff | AttachmentGitHubTreeComparison | AttachmentGitHubUrl | AttachmentGitHubFile | AttachmentGitHubSnippet | AttachmentBlob | AttachmentExtensionContext;
+export type Attachment = AttachmentFile | AttachmentDirectory | AttachmentSelection | AttachmentGitHubReference | AttachmentGitHubCommit | AttachmentGitHubRelease | AttachmentGitHubActionsJob | AttachmentGitHubRepository | AttachmentGitHubFileDiff | AttachmentGitHubTreeComparison | AttachmentGitHubUrl | AttachmentGitHubFile | AttachmentGitHubSnippet | AttachmentBlob | AttachmentExtensionContext | AttachmentSessionReference;
 /**
  * Why the binary data is absent: it exceeded the inline size limit, or its asset was unavailable
  */
@@ -6349,6 +6349,28 @@ export interface AttachmentExtensionContext {
      */
     type: "extension_context";
 }
+/**
+ * An ID-bound reference to an eligible live session. Supplies identity context only, without sending a message, reading history, or granting permission.
+ */
+/** @experimental */
+export interface AttachmentSessionReference {
+    /**
+     * User-visible mention label captured when the reference was selected.
+     */
+    displayName?: string;
+    /**
+     * Character offset of the selected mention in the displayed prompt.
+     */
+    mentionIndex?: number;
+    /**
+     * Stable identity of the selected session, never resolved from its title.
+     */
+    sessionId: string;
+    /**
+     * Attachment type discriminator.
+     */
+    type: "session_reference";
+}
 /**
  * Session event "pending_messages.modified". Empty payload; the event signals that the pending message queue has changed
  */

package/dist/index.d.ts

@@ -13,5 +13,5 @@ export { defineWorkflow, WorkflowResumeError, isWorkflowRunTerminal } from "./wo
 export { Canvas, CanvasError, createCanvas, type CanvasAction, type CanvasDeclaration, type CanvasHostContext, type CanvasHostContextCapabilities, type CanvasJsonSchema, type CanvasOptions, } from "./canvas.js";
 export { defineTool, approveAll, createAttributedPermissionResult, convertMcpCallToolResult, createSessionFsAdapter, CopilotRequestHandler, CopilotWebSocketHandler, CopilotWebSocketCloseStatus, CopilotWebSocketForwarder, SessionFsSqliteTransactionFailure, SessionFsWriteFailure, SYSTEM_MESSAGE_SECTIONS, } from "./types.js";
 export type * from "./generated/session-events.js";
-export type { AskUserVariant, CommandContext, CommandDefinition, CommandHandler, CanvasProviderIdentity, CloudSessionOptions, CloudSessionRepository, AuthIdentityMetadata, AuthInfoType, ConnectorAccountRequest, ConnectorAvailability, ConnectorCapabilities, ConnectorCatalogEntry, ConnectorCatalogResult, ConnectorCatalogStatus, ConnectorConnectRequest, ConnectorConnectResult, ConnectorContinueRequest, ConnectorDisconnectResult, ConnectorMcpStatus, ConnectorReconcileRequest, ConnectorRuntimeStatus, ConnectorSessionAccount, ConnectorSessionAccountResult, ConnectorStatus, AutoModeSwitchHandler, AutoModeSwitchRequest, AutoModeSwitchResponse, AgentStopHandler, AgentStopHookInput, AgentStopHookOutput, SubagentStartHandler, SubagentStartHookInput, SubagentStartHookOutput, SubagentStopHandler, SubagentStopHookInput, SubagentStopHookOutput, UserPromptTransformedHandler, UserPromptTransformedHookInput, UserPromptTransformedHookOutput, CopilotClientInfo, CopilotClientMode, CopilotClientOptions, EntraAuthConfig, EntraAuthOptions, EntraTokenProvider, EntraTokenProviderArgs, EntraTokenProviderResult, InstallationConfirmationHandler, InstallationConfirmationRequest, InstallationConfirmationResponse, InstallationDecision, InstallationReview, McpInstallationReview, CopilotExpAssignmentResponse, StdioRuntimeConnection, InProcessRuntimeConnection, TcpRuntimeConnection, UriRuntimeConnection, ChildProcessRuntimeConnection, CustomAgentConfig, ElicitationFieldValue, ElicitationHandler, ElicitationParams, ElicitationContext, ElicitationResult, ElicitationSchema, ElicitationSchemaField, ExpConfigEntry, ExpFlagValue, ExitPlanModeHandler, ExitPlanModeRequest, ExitPlanModeResult, ExtensionLaunchProfile, ExtensionLaunchProvider, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, ExtensionInfo, KerberosAuthAcquireRequest, KerberosAuthConfig, KerberosAuthMode, KerberosAuthScope, ForegroundSessionInfo, GetAuthStatusResponse, GetStatusResponse, HostDiagnostics, HostErrorReportingStatus, GitHubMcpToolConfig, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTokenProvider, GitHubTokenProviderArgs, GitHubTokenProviderResult, InfiniteSessionConfig, LargeToolOutputConfig, MemoryConfiguration, UiInputOptions, MCPStdioServerConfig, MCPHTTPServerConfig, MCPServerConfig, DefaultAgentConfig, BearerTokenProvider, ExtensionContextAttachment, MessageOptions, ResponseSchema, MessageSource, ManagedSettings, ManagedSettingsPermissions, ModelBilling, ModelBillingTokenPrices, ModelBillingTokenPricesLongContext, AutoTier, CapiSessionOptions, CurrentModel, ModelSwitchAutoTierResult, ModelSwitchAutoTierStatus, ModelCapabilities, ModelCapabilitiesOverride, ModelInfo, ModelPolicy, NamedProviderConfig, PermissionHandler, PermissionRequest, PermissionRequestedData, PermissionRequestedEvent, PermissionRequestResult, AttributedPermissionResult, PermissionDecisionContext, PermissionDecisionOutcome, PermissionDecisionSource, PermissionDecisionSurface, PermissionResponseCapability, ProviderConfig, ProviderConfigModelProvider, ProviderModelConfig, ProviderTokenArgs, RemoteSessionMode, SandboxConfigSource, ResumeSessionConfig, TranscriptRecovery, SectionOverride, SectionOverrideAction, SectionTransformFn, SessionCapabilities, SessionConfig, SessionConfigBase, WorkingDirectoryTrust, SessionEvent, SessionEventHandler, SessionEventPayload, SessionEventType, SessionLifecycleEvent, SessionLifecycleEventMetadata, SessionLifecycleEventType, SessionLifecycleHandler, SessionHooks, SessionCreatedEvent, SessionDeletedEvent, SessionUpdatedEvent, SessionForegroundEvent, SessionBackgroundEvent, SessionContext, SessionListFilter, SessionMetadata, SessionUiApi, SessionFsConfig, SessionFsProvider, SessionFsByteRange, SessionFsFileInfo, SessionFsSqliteQueryResult, SessionFsSqliteQueryType, SessionFsSqliteProvider, SessionFsSqliteStatement, SessionFsSqliteTransactionErrorClass, SkillProvider, SkillProviderCallOptions, SkillProviderDescriptor, CopilotRequestContext, SystemMessageAppendConfig, SystemMessageConfig, SystemMessageCustomizeConfig, SystemMessageReplaceConfig, SystemMessageSection, TelemetryConfig, TraceContext, TraceContextProvider, Tool, ToolHandler, ToolInvocation, ToolNamespace, CurrentToolMetadata, ToolTelemetry, ToolResultObject, ToolSearchConfig, ImageGenerationConfig, TypedSessionEventHandler, TypedSessionLifecycleHandler, ZodSchema, } from "./types.js";
+export type { AskUserVariant, CommandContext, CommandDefinition, CommandHandler, CanvasProviderIdentity, CloudSessionOptions, CloudSessionRepository, AuthIdentityMetadata, AuthInfoType, ConnectorAccountRequest, ConnectorAvailability, ConnectorCapabilities, ConnectorCatalogEntry, ConnectorCatalogResult, ConnectorCatalogStatus, ConnectorConnectRequest, ConnectorConnectResult, ConnectorContinueRequest, ConnectorDisconnectResult, ConnectorMcpStatus, ConnectorReconcileRequest, ConnectorRuntimeStatus, ConnectorSessionAccount, ConnectorSessionAccountResult, ConnectorStatus, AutoModeSwitchHandler, AutoModeSwitchRequest, AutoModeSwitchResponse, AgentStopHandler, AgentStopHookInput, AgentStopHookOutput, SubagentStartHandler, SubagentStartHookInput, SubagentStartHookOutput, SubagentStopHandler, SubagentStopHookInput, SubagentStopHookOutput, UserPromptTransformedHandler, UserPromptTransformedHookInput, UserPromptTransformedHookOutput, CopilotClientInfo, CopilotClientMode, CopilotClientOptions, EntraAuthConfig, EntraAuthOptions, EntraTokenProvider, EntraTokenProviderArgs, EntraTokenProviderResult, InstallationConfirmationHandler, InstallationConfirmationRequest, InstallationConfirmationResponse, InstallationDecision, InstallationReview, McpInstallationReview, CopilotExpAssignmentResponse, StdioRuntimeConnection, InProcessRuntimeConnection, TcpRuntimeConnection, UriRuntimeConnection, ChildProcessRuntimeConnection, CustomAgentConfig, ElicitationFieldValue, ElicitationHandler, ElicitationParams, ElicitationContext, ElicitationResult, ElicitationSchema, ElicitationSchemaField, ExpConfigEntry, ExpFlagValue, ExitPlanModeHandler, ExitPlanModeRequest, ExitPlanModeResult, ExtensionLaunchProfile, ExtensionLaunchProvider, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, ExtensionInfo, KerberosAuthAcquireRequest, KerberosAuthConfig, KerberosAuthMode, KerberosAuthScope, ForegroundSessionInfo, GetAuthStatusResponse, GetStatusResponse, HostDiagnostics, HostErrorReportingStatus, GitHubMcpToolConfig, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTokenProvider, GitHubTokenProviderArgs, GitHubTokenProviderResult, InfiniteSessionConfig, LargeToolOutputConfig, MemoryConfiguration, UiInputOptions, MCPStdioServerConfig, MCPHTTPServerConfig, MCPServerConfig, DefaultAgentConfig, BearerTokenProvider, ExtensionContextAttachment, MessageOptions, ResponseSchema, MessageSource, ManagedSettings, ManagedSettingsPermissions, ModelBilling, ModelBillingTokenPrices, ModelBillingTokenPricesLongContext, AutoTier, CapiSessionOptions, CurrentModel, ModelSwitchAutoTierResult, ModelSwitchAutoTierStatus, ModelCapabilities, ModelCapabilitiesOverride, ModelInfo, ModelPolicy, NamedProviderConfig, PermissionHandler, PermissionRequest, PermissionRequestedData, PermissionRequestedEvent, PermissionRequestResult, AttributedPermissionResult, PermissionDecisionContext, PermissionDecisionOutcome, PermissionDecisionSource, PermissionDecisionSurface, PermissionResponseCapability, ProviderConfig, ProviderConfigModelProvider, ProviderModelConfig, ProviderTokenArgs, RemoteSessionMode, SandboxConfigSource, ResumeSessionConfig, TranscriptRecovery, SectionOverride, SectionOverrideAction, SectionTransformFn, SessionCapabilities, SessionConfig, SessionConfigBase, WorkingDirectoryTrust, SessionEvent, SessionEventHandler, SessionEventPayload, SessionEventType, SessionLifecycleEvent, SessionLifecycleEventMetadata, SessionLifecycleEventType, SessionLifecycleHandler, SessionHooks, SessionCreatedEvent, SessionDeletedEvent, SessionUpdatedEvent, SessionForegroundEvent, SessionBackgroundEvent, SessionContext, SessionListFilter, SessionMetadata, SessionUiApi, SessionFsConfig, SessionFsProvider, SessionFsByteRange, SessionFsFileInfo, SessionFsSqliteQueryResult, SessionFsSqliteQueryType, SessionFsSqliteProvider, SessionFsSqliteStatement, SessionFsSqliteTransactionErrorClass, SkillProvider, SessionCreationHandler, ManagedSessionInfo, SessionManagementCloseRequest, SessionManagementCloseResult, SessionManagementConfigureRequest, SessionManagementCreateHostRequest, SessionManagementCreateRequest, SessionManagementCreateResult, SessionManagementListRequest, SessionManagementListResult, SessionManagementMessageRequest, SessionManagementMessageResult, SessionManagementPolicy, SessionManagementScope, SessionManagementToolOverrides, SkillProviderCallOptions, SkillProviderDescriptor, CopilotRequestContext, SystemMessageAppendConfig, SystemMessageConfig, SystemMessageCustomizeConfig, SystemMessageReplaceConfig, SystemMessageSection, TelemetryConfig, TraceContext, TraceContextProvider, Tool, ToolHandler, ToolInvocation, ToolNamespace, CurrentToolMetadata, ToolTelemetry, ToolResultObject, ToolSearchConfig, ImageGenerationConfig, TypedSessionEventHandler, TypedSessionLifecycleHandler, ZodSchema, } from "./types.js";
 export type { JsonValue, WorkflowRunOptions, WorkflowResumeOptions, WorkflowLimitOverrides, WorkflowResumeErrorCode, SessionWorkflowApi, WorkflowAgentOptions, WorkflowContext, WorkflowDefinition, WorkflowHandle, WorkflowJsonSchema, WorkflowLimits, WorkflowMeta, WorkflowPipelineStage, WorkflowStepOptions, WorkflowRunResult, WorkflowRunStatus, WorkflowRunSummary, WorkflowListRunsOptions, WorkflowRunsPage, WorkflowRunDetail, WorkflowProgressPage, WorkflowProgressLine, WorkflowPhaseObservation, WorkflowPhaseStatus, WorkflowAgentContextObservation, WorkflowAgentModelObservation, WorkflowAgentReasoningEffortObservation, WorkflowAgentSummary, } from "./workflow.js";

package/dist/session.d.ts

@@ -1,7 +1,7 @@
 import { createSessionRpc } from "./generated/rpc.js";
-import type { ModelSwitchAutoTierResult } from "./generated/rpc.js";
+import type { ModelSwitchAutoTierResult, SessionManagementPolicy } from "./generated/rpc.js";
 import type { OpenCanvasInstance } from "./generated/rpc.js";
-import type { MessageOptions, ResponseSchema, ContextTier, ReasoningEffort, ReasoningSummary, AutoTier, ModelCapabilitiesOverride, SessionCapabilities, SessionConfig, SessionEvent, SessionEventHandler, SessionEventType, SessionUiApi, TranscriptRecovery, TypedSessionEventHandler } from "./types.js";
+import type { MessageOptions, ResponseSchema, ContextTier, ReasoningEffort, ReasoningSummary, AutoTier, ModelCapabilitiesOverride, SessionCapabilities, SessionConfig, SessionEvent, SessionEventHandler, SessionEventType, SessionUiApi, SessionCreationHandler, TranscriptRecovery, TypedSessionEventHandler } from "./types.js";
 import { type SessionWorkflowApi } from "./workflow.js";
 /** Assistant message event - the final response from the assistant. */
 export type AssistantMessageEvent = Extract<SessionEvent, {
@@ -48,6 +48,7 @@ export declare class CopilotSession {
     /** Settles once every earlier `setTools` call has finished. */
     private setToolsQueue;
     private pendingExternalTools;
+    private pendingSessionCreations;
     private canvases;
     private bearerTokenProviders;
     private commandHandlers;
@@ -60,6 +61,7 @@ export declare class CopilotSession {
     private exitPlanModeHandler?;
     private autoModeSwitchHandler?;
     private skillProvider?;
+    private sessionCreationHandler?;
     private hooks?;
     private transformCallbacks?;
     private _rpc;
@@ -244,6 +246,11 @@ export declare class CopilotSession {
     private _confirm;
     private _select;
     private _input;
+    /**
+     * Registers the host's creation callback without enabling the tool group.
+     * Enable it separately with `session.rpc.management.configure({ enabled: true })`.
+     */
+    setSessionCreationHandler(handler?: SessionCreationHandler): Promise<SessionManagementPolicy>;
     private requireSkillProvider;
     /**
      * Runs a provider call with an abort signal tied to the runtime's request

package/dist/session.js

@@ -157,6 +157,11 @@ class WorkflowProgressBuffer {
     if (this.closed) {
       throw new Error("Cannot log after the workflow run has settled");
     }
+    if (typeof text !== "string") {
+      throw new TypeError(
+        `${kind}() expects a string; got ${text === null ? "null" : typeof text}.`
+      );
+    }
     this.pending.push({ seq: this.nextSeq++, kind, text });
     this.scheduleFlush();
   }
@@ -284,6 +289,7 @@ class CopilotSession {
   /** Settles once every earlier `setTools` call has finished. */
   setToolsQueue = Promise.resolve();
   pendingExternalTools = /* @__PURE__ */ new Map();
+  pendingSessionCreations = /* @__PURE__ */ new Set();
   canvases = /* @__PURE__ */ new Map();
   bearerTokenProviders = /* @__PURE__ */ new Map();
   commandHandlers = /* @__PURE__ */ new Map();
@@ -296,6 +302,7 @@ class CopilotSession {
   exitPlanModeHandler;
   autoModeSwitchHandler;
   skillProvider;
+  sessionCreationHandler;
   hooks;
   transformCallbacks;
   _rpc = null;
@@ -883,6 +890,10 @@ class CopilotSession {
       controller.abort();
     }
     this.pendingExternalTools.clear();
+    for (const controller of this.pendingSessionCreations) {
+      controller.abort();
+    }
+    this.pendingSessionCreations.clear();
     this.eventHandlers.clear();
     this.typedEventHandlers.clear();
     this.toolHandlers.clear();
@@ -893,6 +904,7 @@ class CopilotSession {
     this.exitPlanModeHandler = void 0;
     this.autoModeSwitchHandler = void 0;
     this.skillProvider = void 0;
+    this.sessionCreationHandler = void 0;
     this.hooks = void 0;
     this.traceContextProvider = void 0;
     this.bearerTokenProviders.clear();
@@ -1562,6 +1574,7 @@ class CopilotSession {
           assertWorkflowResult(result);
           return { result };
         } finally {
+          controller.abort(new DOMException("Workflow run has settled", "AbortError"));
           try {
             await progress.close();
           } finally {
@@ -1856,6 +1869,41 @@ class CopilotSession {
     this.assertConnected();
     this.skillProvider = provider;
   }
+  /**
+   * Registers the host's creation callback without enabling the tool group.
+   * Enable it separately with `session.rpc.management.configure({ enabled: true })`.
+   */
+  async setSessionCreationHandler(handler) {
+    this.assertConnected();
+    const previous = this.sessionCreationHandler;
+    this.sessionCreationHandler = handler;
+    try {
+      return await this.rpc.management.configure({ hasCreateHandler: handler !== void 0 });
+    } catch (error) {
+      if (this.sessionCreationHandler === handler) this.sessionCreationHandler = previous;
+      throw error;
+    }
+  }
+  /** @internal */
+  async _handleSessionManagementCreate(request, token) {
+    this.assertConnected();
+    const handler = this.sessionCreationHandler;
+    if (!handler || request.parentSessionId !== this.sessionId || request.sessionId !== this.sessionId) {
+      throw new Error("Session creation handler is unavailable");
+    }
+    const controller = new AbortController();
+    this.pendingSessionCreations.add(controller);
+    const subscription = token.onCancellationRequested(() => controller.abort());
+    if (token.isCancellationRequested) controller.abort();
+    try {
+      return await handler(request, { signal: controller.signal });
+    } catch {
+      throw new Error("Session creation callback failed");
+    } finally {
+      subscription.dispose();
+      this.pendingSessionCreations.delete(controller);
+    }
+  }
   /**
    * Handles a `skillProvider.list` request from the runtime.
    *

package/dist/types.d.ts

@@ -9,13 +9,23 @@ export type { InstallationConfirmationHandler } from "./installationConfirmation
 import type { AgentModelPolicy, AttachmentExtensionContext as GeneratedExtensionContextAttachment, AutoTier, ModelProviderRef, PermissionRequest as GeneratedPermissionRequest, PermissionRequestedData as GeneratedPermissionRequestedData, PermissionRequestedEvent as GeneratedPermissionRequestedEvent, ReasoningSummary, SessionLimitsConfig, SessionEvent as GeneratedSessionEvent } from "./generated/session-events.js";
 import type { CopilotSession } from "./session.js";
 import type { JsonValue } from "./workflow.js";
-import type { ExtensionLaunchProviderHandler as GeneratedExtensionLaunchProvider, AutopilotOptions, GitHubTokenAcquireRequest, GitHubTokenAcquireResult, GitHubTelemetryNotification, HostDiagnostics, ModelBillingTokenPrices, DiagnosticsConfiguration, OpenCanvasInstance, ProtocolExternalToolNamespace, CurrentToolMetadata, KerberosAuthAcquireRequest, KerberosAuthMode, KerberosAuthScope, SandboxConfig } from "./generated/rpc.js";
+import type { ExtensionLaunchProviderHandler as GeneratedExtensionLaunchProvider, AutopilotOptions, GitHubTokenAcquireRequest, GitHubTokenAcquireResult, GitHubTelemetryNotification, HostDiagnostics, ModelBillingTokenPrices, DiagnosticsConfiguration, OpenCanvasInstance, ProtocolExternalToolNamespace, CurrentToolMetadata, KerberosAuthAcquireRequest, KerberosAuthMode, KerberosAuthScope, SandboxConfig, SessionManagementCreateHostRequest, SessionManagementCreateResult } from "./generated/rpc.js";
 import type { ToolSet } from "./toolSet.js";
 export type { KerberosAuthAcquireRequest, KerberosAuthMode, KerberosAuthScope, } from "./generated/rpc.js";
 export type { RemoteSessionMode } from "./generated/rpc.js";
 export type { AutopilotOptions } from "./generated/rpc.js";
 export type { CurrentToolMetadata } from "./generated/rpc.js";
 export type { SandboxConfig, SandboxConfigSource } from "./generated/rpc.js";
+export type { ManagedSessionInfo, SessionManagementCloseRequest, SessionManagementCloseResult, SessionManagementConfigureRequest, SessionManagementCreateHostRequest, SessionManagementCreateRequest, SessionManagementCreateResult, SessionManagementListRequest, SessionManagementListResult, SessionManagementMessageRequest, SessionManagementMessageResult, SessionManagementPolicy, SessionManagementScope, SessionManagementToolOverrides, } from "./generated/rpc.js";
+/**
+ * Creates and supervises a separate session for this session's management tools.
+ * Use newSessionId as the child's exact identity and apply the requested launch
+ * options and permission ceiling. Route approvals independently, retain the new
+ * session, and dispose it with the host. Do not copy the parent's conversation.
+ */
+export type SessionCreationHandler = (request: SessionManagementCreateHostRequest, options: {
+    signal: AbortSignal;
+}) => SessionManagementCreateResult | Promise<SessionManagementCreateResult>;
 export type { AuthIdentityMetadata, AuthInfoType, ConnectorAccountRequest, ConnectorAvailability, ConnectorCapabilities, ConnectorCatalogEntry, ConnectorCatalogResult, ConnectorCatalogStatus, ConnectorConnectRequest, ConnectorConnectResult, ConnectorContinueRequest, ConnectorDisconnectResult, ConnectorMcpStatus, ConnectorReconcileRequest, ConnectorRuntimeStatus, ConnectorSessionAccount, ConnectorSessionAccountResult, ConnectorStatus, ExtensionLaunchProfile, ExtensionLaunchProviderResolveRequest, ExtensionLaunchProviderResolveResult, GitHubTokenAcquireReason, GitHubTokenAcquireResult, GitHubTelemetryNotification, GitHubTelemetryEvent, GitHubTelemetryClientInfo, HostDiagnostics, HostErrorReportingStatus, InstallationConfirmationRequest, InstallationConfirmationResponse, InstallationDecision, InstallationReview, McpInstallationReview, } from "./generated/rpc.js";
 /**
  * Arguments passed to a session's {@link GitHubTokenProvider}.
@@ -1182,6 +1192,12 @@ export interface UserInputRequest {
      * @default true
      */
     allowFreeform?: boolean;
+    /**
+     * Runtime ID of the pending `user_input.requested` request. Pass it as `requestId`
+     * to answer this exact request through the session's UI RPCs. Absent when the
+     * runtime predates this field.
+     */
+    requestId?: string;
 }
 /**
  * Response to a user input request
@@ -1214,6 +1230,12 @@ export interface ExitPlanModeRequest {
     actions: string[];
     /** The action recommended by the runtime. */
     recommendedAction: string;
+    /**
+     * Runtime ID of the pending `exit_plan_mode.requested` request. Pass it as
+     * `requestId` to answer this exact request through the session's UI RPCs. Absent
+     * when the runtime predates this field.
+     */
+    requestId?: string;
 }
 /**
  * Response to an exit-plan-mode request.
@@ -1855,9 +1877,10 @@ export interface LargeToolOutputConfig {
     outputDirectory?: string;
 }
 /**
- * Valid reasoning effort levels for models that support it.
+ * Model-defined reasoning effort for models that support it.
+ * Use client.listModels() to discover supported values; BYOK providers can define additional levels.
  */
-export type ReasoningEffort = "low" | "medium" | "high" | "xhigh" | "max";
+export type ReasoningEffort = string;
 /**
  * Context window tier for the session. "long_context" pins the session to the
  * long-context tier when the selected model supports it.

package/docs/examples.md

@@ -198,7 +198,7 @@ Use `session.send()` to programmatically inject a new user message.
 ```js
 hooks: {
     onUserPromptSubmitted: async (input) => {
-        if (/\\burgent\\b/i.test(input.prompt)) {
+        if (/\burgent\b/i.test(input.prompt)) {
             // Fire-and-forget a follow-up message
             setTimeout(() => session.send({ prompt: "Please prioritize this." }), 0);
         }
@@ -217,7 +217,7 @@ hooks: {
     onPreToolUse: async (input) => {
         if (input.toolName === "bash") {
             const cmd = String(input.toolArgs?.command || "");
-            if (/rm\\s+-rf/i.test(cmd) || /Remove-Item\\s+.*-Recurse/i.test(cmd)) {
+            if (/rm\s+-rf/i.test(cmd) || /Remove-Item\s+.*-Recurse/i.test(cmd)) {
                 return {
                     permissionDecision: "deny",
                     permissionDecisionReason: "Destructive commands are not allowed.",
@@ -394,7 +394,7 @@ function copyToClipboard(text) {
 const session = await joinSession({
     hooks: {
         onUserPromptSubmitted: async (input) => {
-            if (/\\bcopy\\b/i.test(input.prompt)) {
+            if (/\bcopy\b/i.test(input.prompt)) {
                 copyNextResponse = true;
             }
         },
@@ -513,7 +513,7 @@ const debounce = new Map();
 
 watch(cwd, { recursive: true }, (eventType, filename) => {
     if (!filename || eventType !== "change") return;
-    if (filename.split(/[\\\\\\/]/).some((p) => IGNORE.has(p))) return;
+    if (filename.split(/[\\/]/).some((p) => IGNORE.has(p))) return;
 
     if (debounce.has(filename)) clearTimeout(debounce.get(filename));
     debounce.set(filename, setTimeout(() => {
@@ -524,7 +524,7 @@ watch(cwd, { recursive: true }, (eventType, filename) => {
         try { if (!statSync(fullPath).isFile()) return; } catch { return; }
         const relPath = relative(cwd, fullPath);
         session.send({
-            prompt: `The user edited \\`${relPath}\\`.`,
+            prompt: `The user edited \`${relPath}\`.`,
             attachments: [{ type: "file", path: fullPath }],
         });
     }, 500));
@@ -619,7 +619,7 @@ function openInEditor(filePath) {
 const session = await joinSession({
     hooks: {
         onUserPromptSubmitted: async (input) => {
-            if (/\\bcopy this\\b/i.test(input.prompt)) {
+            if (/\bcopy this\b/i.test(input.prompt)) {
                 copyNextResponse = true;
             }
             return {
@@ -629,7 +629,7 @@ const session = await joinSession({
         onPreToolUse: async (input) => {
             if (input.toolName === "bash") {
                 const cmd = String(input.toolArgs?.command || "");
-                if (/rm\\s+-rf\\s+\//i.test(cmd) || /Remove-Item\\s+.*-Recurse/i.test(cmd)) {
+                if (/rm\s+-rf\s+\//i.test(cmd) || /Remove-Item\s+.*-Recurse/i.test(cmd)) {
                     return {
                         permissionDecision: "deny",
                         permissionDecisionReason: "Destructive commands are not allowed.",

package/package.json

@@ -5,8 +5,8 @@
         "url": "https://github.com/github/copilot-agent-runtime.git",
         "directory": "src/sdk/nodejs"
     },
-    "version": "1.0.29-preview.1",
-    "copilotCliVersion": "1.0.106-2",
+    "version": "1.0.29-preview.3",
+    "copilotCliVersion": "1.0.106-4",
     "description": "TypeScript SDK for programmatic control of GitHub Copilot CLI via JSON-RPC",
     "main": "./dist/cjs/index.js",
     "types": "./dist/index.d.ts",
@@ -81,6 +81,7 @@
         "@types/ws": "^8.18.1",
         "@typescript-eslint/eslint-plugin": "^8.72.0",
         "@typescript-eslint/parser": "^8.72.0",
+        "@vitest/coverage-v8": "^5.0.5",
         "esbuild": "^0.28.1",
         "eslint": "^10.13.0",
         "file-entry-cache": "file:./scripts/eslint-file-cache",
@@ -114,18 +115,18 @@
         "README.md"
     ],
     "copilotRuntime": {
-        "sourceSha": "2835f5808734479cfb69a4ec70edccc2309115c4",
-        "version": "1.0.106-2",
+        "sourceSha": "54bae76dc3ced5344dc60a365e81a06c787fda53",
+        "version": "1.0.106-4",
         "visibility": "public"
     },
     "optionalDependencies": {
-        "@github/copilot-sdk-darwin-arm64": "1.0.29-preview.1",
-        "@github/copilot-sdk-darwin-x64": "1.0.29-preview.1",
-        "@github/copilot-sdk-linux-arm64": "1.0.29-preview.1",
-        "@github/copilot-sdk-linux-x64": "1.0.29-preview.1",
-        "@github/copilot-sdk-linuxmusl-arm64": "1.0.29-preview.1",
-        "@github/copilot-sdk-linuxmusl-x64": "1.0.29-preview.1",
-        "@github/copilot-sdk-win32-arm64": "1.0.29-preview.1",
-        "@github/copilot-sdk-win32-x64": "1.0.29-preview.1"
+        "@github/copilot-sdk-darwin-arm64": "1.0.29-preview.3",
+        "@github/copilot-sdk-darwin-x64": "1.0.29-preview.3",
+        "@github/copilot-sdk-linux-arm64": "1.0.29-preview.3",
+        "@github/copilot-sdk-linux-x64": "1.0.29-preview.3",
+        "@github/copilot-sdk-linuxmusl-arm64": "1.0.29-preview.3",
+        "@github/copilot-sdk-linuxmusl-x64": "1.0.29-preview.3",
+        "@github/copilot-sdk-win32-arm64": "1.0.29-preview.3",
+        "@github/copilot-sdk-win32-x64": "1.0.29-preview.3"
     }
 }