@openclaw/copilot 2026.7.1 → 2026.7.2-beta.1

package/README.md

@@ -14,13 +14,11 @@ The harness claims the canonical subscription `github-copilot` provider plus
 custom BYOK provider entries that the Copilot SDK can represent. Manifest-owned
 native provider ids stay with their owning runtimes. The harness is opt-in only:
 selection requires explicit `agentRuntime.id: "copilot"` on a model or provider
-entry; `auto` never picks it. PI remains the default embedded runtime.
+entry; `auto` never picks it. OpenClaw remains the default embedded runtime.
 
 See [GitHub Copilot agent runtime](../../docs/plugins/copilot.md) for
 configuration, the doctor contract, transcript mirroring, compaction, side
 questions, replay, and the supported-surface contract.
-See [qa/copilot-capabilities.md](../../qa/copilot-capabilities.md)
-for the SDK capability inventory the harness is pinned to.
 
 ## Package
 

package/dist/{attempt-D6MSc00N.js → attempt-BxxMpQmE.js}

@@ -1,29 +1,12 @@
-import { a as resolveCopilotAuth, i as createCopilotByokAuth, n as resolveCopilotProvider, r as createCopilotByokProxy } from "./harness-BQhGzc1Z.js";
-import { applyEmbeddedAttemptToolsAllow, awaitAgentEndSideEffects, buildAgentHarnessUserInputAnswers, buildAgentHookContextChannelFields, buildEmbeddedAttemptToolRunContext, clearActiveEmbeddedRun, deliverAgentHarnessUserInputPrompt, detectAndLoadAgentHarnessPromptImages, embeddedAgentLog, extractToolErrorMessage, getModelProviderRequestTransport, getPluginToolMeta, isSubagentSessionKey, isToolResultError, resolveAgentHarnessBeforePromptBuildResult, resolveAttemptFsWorkspaceOnly, resolveAttemptSpawnWorkspaceDir, resolveBootstrapContextForRun, resolveCompactionTimeoutMs, resolveEmbeddedAttemptToolConstructionPlan, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, resolveUserPath, runAgentEndSideEffects, runAgentHarnessAfterCompactionHook, runAgentHarnessAfterToolCallHook, runAgentHarnessBeforeCompactionHook, runAgentHarnessBeforeMessageWriteHook, runAgentHarnessLlmInputHook, runAgentHarnessLlmOutputHook, sanitizeToolResult, setActiveEmbeddedRun } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { a as resolveCopilotAuth, i as createCopilotByokAuth, n as resolveCopilotProvider, r as createCopilotByokProxy } from "./harness-DnbBZBdi.js";
+import { applyEmbeddedAttemptToolsAllow, awaitAgentEndSideEffects, buildAgentHarnessUserInputAnswers, buildAgentHookContextChannelFields, buildEmbeddedAttemptToolRunContext, clearActiveEmbeddedRun, deliverAgentHarnessUserInputPrompt, detectAndLoadAgentHarnessPromptImages, embeddedAgentLog, extractToolErrorMessage, getModelProviderRequestTransport, getPluginToolMeta, isHostScopedAgentToolActive, isSubagentSessionKey, isToolResultError, resolveAgentHarnessBeforePromptBuildResult, resolveAttemptFsWorkspaceOnly, resolveAttemptSpawnWorkspaceDir, resolveBootstrapContextForRun, resolveCompactionTimeoutMs, resolveEmbeddedAttemptToolConstructionPlan, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, resolveUserPath, runAgentEndSideEffects, runAgentHarnessAfterCompactionHook, runAgentHarnessAfterToolCallHook, runAgentHarnessBeforeCompactionHook, runAgentHarnessBeforeMessageWriteHook, runAgentHarnessLlmInputHook, runAgentHarnessLlmOutputHook, sanitizeToolResult, setActiveEmbeddedRun } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { createHash } from "node:crypto";
 import path from "node:path";
 import fsp from "node:fs/promises";
-import { publishSessionTranscriptUpdateByIdentity, withSessionTranscriptWriteLock } from "openclaw/plugin-sdk/session-transcript-runtime";
+import { withSessionTranscriptWriteLock } from "openclaw/plugin-sdk/session-transcript-runtime";
 import { createAgentHarnessTaskRuntime } from "openclaw/plugin-sdk/agent-harness-task-runtime";
+import { convertMcpCallToolResult } from "@github/copilot-sdk";
 import { createAgentHarnessToolSurfaceRuntime } from "openclaw/plugin-sdk/agent-harness-tool-runtime";
-//#region extensions/copilot/src/compaction-bridge.ts
-/**
-* Shape an `InfiniteSessionConfig` for `SessionConfig.infiniteSessions`.
-* Returns `undefined` when no fields were supplied so callers can
-* spread conditionally and let the SDK apply its own defaults
-* (`enabled: true`, background 0.80, buffer 0.95). Any explicitly-set
-* value (including `enabled: false` to disable infinite sessions) is
-* preserved.
-*/
-function createInfiniteSessionConfig(options) {
-	if (!options) return;
-	const result = {};
-	if (options.enabled !== void 0) result.enabled = options.enabled;
-	if (options.backgroundCompactionThreshold !== void 0) result.backgroundCompactionThreshold = options.backgroundCompactionThreshold;
-	if (options.bufferExhaustionThreshold !== void 0) result.bufferExhaustionThreshold = options.bufferExhaustionThreshold;
-	return Object.keys(result).length > 0 ? result : void 0;
-}
-//#endregion
 //#region extensions/copilot/src/dual-write-transcripts.ts
 /**
 * Mirrors the AgentMessages produced by the copilot agent runtime into the
@@ -98,9 +81,8 @@ function buildMirrorDedupeIdentity(message) {
 async function mirrorCopilotTranscript(params) {
 	const messages = params.messages.filter((message) => message.role === "user" || message.role === "assistant" || message.role === "toolResult");
 	if (messages.length === 0) return;
-	const transcriptTarget = resolveCopilotMirrorTranscriptTarget(params);
-	if (await withSessionTranscriptWriteLock({
-		...transcriptTarget,
+	await withCopilotMirrorTranscriptWriteLock({
+		...resolveCopilotMirrorTranscriptTarget(params),
 		config: params.config
 	}, async (transcript) => {
 		let didAppendMessage = false;
@@ -130,22 +112,24 @@ async function mirrorCopilotTranscript(params) {
 			didAppendMessage = true;
 			if (idempotencyKey) existingIdempotencyKeys.add(idempotencyKey);
 		}
+		if (didAppendMessage) await transcript.publishUpdate(params.sessionKey ? { sessionKey: params.sessionKey } : void 0);
 		return didAppendMessage;
-	})) await publishSessionTranscriptUpdateByIdentity({
-		...transcriptTarget,
-		update: params.sessionKey ? { sessionKey: params.sessionKey } : void 0
 	});
 }
 function resolveCopilotMirrorTranscriptTarget(params) {
-	const sessionFile = params.sessionFile.trim();
-	if (!sessionFile) throw new Error("Copilot transcript mirror requires a sessionFile target");
+	const sessionKey = params.sessionKey?.trim();
+	const storePath = params.storePath?.trim();
+	if (!sessionKey || !storePath) throw new Error("Copilot transcript mirror requires a runtime session identity");
 	return {
 		...params.agentId ? { agentId: params.agentId } : {},
-		sessionFile,
 		sessionId: params.sessionId,
-		sessionKey: params.sessionKey ?? ""
+		sessionKey,
+		storePath
 	};
 }
+function withCopilotMirrorTranscriptWriteLock(params, run) {
+	return withSessionTranscriptWriteLock(params, run);
+}
 function readTranscriptIdempotencyKeys(events) {
 	const keys = /* @__PURE__ */ new Set();
 	for (const event of events) {
@@ -223,7 +207,7 @@ function attachEventBridge(session, options) {
 	let usage;
 	let streamError;
 	const toolMetas = [];
-	const toolNamesByCallId = /* @__PURE__ */ new Map();
+	const toolMetaIndexByCallId = /* @__PURE__ */ new Map();
 	let startedCount = 0;
 	let completedCount = 0;
 	let activeCompactionCount = 0;
@@ -244,7 +228,7 @@ function attachEventBridge(session, options) {
 	const unsubscribeFns = [];
 	registerListener(session, unsubscribeFns, "assistant.message_delta", (event) => {
 		if (!isRootSessionEvent(event)) return;
-		const messageId = readString$2(event.data.messageId) ?? "assistant-message";
+		const messageId = readString$1(event.data.messageId) ?? "assistant-message";
 		const delta = event.data.deltaContent;
 		if (!delta) return;
 		const entry = ensureMessageAccumulator(messagesById, messageOrder, messageId);
@@ -267,7 +251,7 @@ function attachEventBridge(session, options) {
 	});
 	registerListener(session, unsubscribeFns, "assistant.reasoning_delta", (event) => {
 		if (!isRootSessionEvent(event)) return;
-		const reasoningId = readString$2(event.data.reasoningId) ?? "assistant-reasoning";
+		const reasoningId = readString$1(event.data.reasoningId) ?? "assistant-reasoning";
 		const delta = event.data.deltaContent;
 		if (!delta) return;
 		if (!reasoningById.has(reasoningId)) {
@@ -288,17 +272,19 @@ function attachEventBridge(session, options) {
 	});
 	registerListener(session, unsubscribeFns, "tool.execution_start", (event) => {
 		if (isRootSessionEvent(event)) startedCount += 1;
-		toolNamesByCallId.set(event.data.toolCallId, event.data.toolName);
+		toolMetaIndexByCallId.set(event.data.toolCallId, toolMetas.length);
 		toolMetas.push({ toolName: event.data.toolName });
 	});
 	registerListener(session, unsubscribeFns, "tool.execution_complete", (event) => {
 		if (isRootSessionEvent(event)) completedCount += 1;
-		const toolName = toolNamesByCallId.get(event.data.toolCallId);
+		const toolMetaIndex = toolMetaIndexByCallId.get(event.data.toolCallId);
+		const toolName = toolMetaIndex === void 0 ? void 0 : toolMetas[toolMetaIndex]?.toolName;
 		const meta = event.data.success ? event.data.result?.detailedContent ?? event.data.result?.content : event.data.error?.message;
-		if (toolName) toolMetas.push({
-			meta,
-			toolName
-		});
+		if (toolName && toolMetaIndex !== void 0) toolMetas[toolMetaIndex] = {
+			...meta ? { meta } : {},
+			toolName,
+			...event.data.success ? {} : { isError: true }
+		};
 	});
 	registerListener(session, unsubscribeFns, "session.plan_changed", (event) => {
 		enqueueAgentEvent({
@@ -364,6 +350,9 @@ function attachEventBridge(session, options) {
 		enqueueCompactionCallback(options.onCompactionStart);
 	});
 	registerListener(session, unsubscribeFns, "session.compaction_complete", (event) => {
+		if (event.data.success) try {
+			options.onContextCompacted?.();
+		} catch {}
 		if (!isRootCompactionEvent(event)) return;
 		activeCompactionCount = Math.max(0, activeCompactionCount - 1);
 		enqueueCompactionCallback(() => options.onCompactionComplete?.({
@@ -553,7 +542,7 @@ function joinReasoning(order, reasoningById) {
 function splitPlanText(text) {
 	return (text ?? "").split(/\r?\n/).map((line) => line.trim().replace(/^[-*]\s+/, "")).filter((line) => line.length > 0);
 }
-function readString$2(value) {
+function readString$1(value) {
 	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 function registerListener(session, unsubscribeFns, eventType, handler) {
@@ -1113,9 +1102,12 @@ function buildOpenClawCodingToolsOptions(input, toolPlan, toolSurfaceRuntime) {
 			elevated: a.bashElevated
 		},
 		messageProvider: a.messageProvider ?? a.messageChannel,
+		chatType: a.chatType,
 		agentAccountId: a.agentAccountId,
 		messageTo: a.messageTo,
 		messageThreadId: a.messageThreadId,
+		nativeChannelId: a.chatId,
+		messageActionTurnCapability: a.messageActionTurnCapability,
 		groupId: a.groupId,
 		groupChannel: a.groupChannel,
 		groupSpace: a.groupSpace,
@@ -1164,6 +1156,7 @@ function buildOpenClawCodingToolsOptions(input, toolPlan, toolSurfaceRuntime) {
 		enableHeartbeatTool: a.enableHeartbeatTool,
 		forceHeartbeatTool: a.forceHeartbeatTool,
 		authProfileStore: a.toolAuthProfileStore ?? a.authProfileStore,
+		computerContextEpoch: input.computerContextEpoch,
 		onToolOutcome: a.onToolOutcome,
 		onYield: (message) => {
 			try {
@@ -1249,7 +1242,7 @@ function convertOpenClawToolToSdkTool(sourceTool, ctx) {
 		} catch (error) {
 			return failureResult(preparedArgs, invocation, startedAt, `[copilot-tool-bridge] tool '${sourceTool.name}' failed: ${toError$1(error).message}`, error);
 		}
-		const sdkResult = agentToolResultToSdk(result);
+		const sdkResult = convertMcpCallToolResult({ content: result.content });
 		const sanitizedResult = sanitizeToolResult(result);
 		const resultIsError = sdkResult.resultType === "failure" || isToolResultError(sanitizedResult);
 		const resultError = resultIsError ? extractToolErrorMessage(sanitizedResult) : void 0;
@@ -1331,51 +1324,6 @@ async function executeCatalogTool(input, params) {
 function toToolStartArgs(args) {
 	return args && typeof args === "object" && !Array.isArray(args) ? args : { value: args };
 }
-function agentToolResultToSdk(result) {
-	const content = result?.content;
-	if (content == null) return createSuccessResult("");
-	if (!Array.isArray(content)) return createUnsupportedContentFailure(typeof content);
-	const textParts = [];
-	const binaryResults = [];
-	for (const block of content) {
-		if (!block || typeof block !== "object") return createUnsupportedContentFailure(typeof block);
-		const kind = readString$1(block.type);
-		if (kind === "text") {
-			const text = readString$1(block.text, { allowEmpty: true });
-			if (text === void 0) return createUnsupportedContentFailure(kind);
-			textParts.push(text);
-			continue;
-		}
-		if (kind === "image") {
-			const base64Data = readString$1(block.data);
-			const mimeType = readString$1(block.mimeType);
-			if (!base64Data || !mimeType) return createUnsupportedContentFailure(kind);
-			binaryResults.push({
-				base64Data,
-				data: base64Data,
-				mimeType,
-				type: "image"
-			});
-			continue;
-		}
-		return createUnsupportedContentFailure(kind ?? typeof block);
-	}
-	return {
-		...binaryResults.length > 0 ? { binaryResultsForLlm: binaryResults } : {},
-		resultType: "success",
-		textResultForLlm: textParts.join("\n")
-	};
-}
-function createUnsupportedContentFailure(kind) {
-	const message = `[copilot-tool-bridge] unsupported AgentToolResult content shape: ${kind}`;
-	return createFailureResult(message, new Error(message));
-}
-function createSuccessResult(textResultForLlm) {
-	return {
-		resultType: "success",
-		textResultForLlm
-	};
-}
 function createFailureResult(message, error) {
 	return {
 		error: toError$1(error).message,
@@ -1449,10 +1397,6 @@ function findDuplicateToolNames(sourceTools) {
 	}
 	return [...counts.entries()].filter(([, count]) => count > 1).map(([name]) => name).toSorted();
 }
-function readString$1(value, options = {}) {
-	if (typeof value !== "string") return;
-	if (options.allowEmpty || value.length > 0) return value;
-}
 function toError$1(error) {
 	return error instanceof Error ? error : new Error(String(error));
 }
@@ -1622,9 +1566,9 @@ async function resolveCopilotWorkspaceBootstrapContext(params) {
 * (`src/agents/pi-embedded-runner/run/attempt.ts:603`). Files whose
 * resolved relative path escapes the source workspace (parent
 * traversal or absolute) are left untouched so we never pretend a
-* file lives inside the sandbox when it does not. Exported for unit
-* tests; intentionally local to the Copilot extension (codex keeps
-* similar helpers extension-local rather than importing from PI).
+* file lives inside the sandbox when it does not. Intentionally local
+* to the Copilot extension (codex keeps similar helpers extension-local
+* rather than importing from PI).
 */
 function remapCopilotBootstrapContextFiles(params) {
 	if (params.sourceWorkspaceDir === params.targetWorkspaceDir) return params.files;
@@ -1801,6 +1745,7 @@ async function runCopilotAttempt(params, deps) {
 	const attemptStartedAt = now();
 	const input = params;
 	const createToolBridge = deps.createToolBridge ?? createCopilotToolBridge;
+	const ringZeroSystemAgentRun = (deps.isHostScopedToolActive?.("openclaw") ?? isHostScopedAgentToolActive("openclaw")) && isSystemAgentOnlyToolAllowlist(input.toolsAllow);
 	const messages = getMessagesSnapshotInput(input);
 	const modelRef = resolveModelRef(input);
 	const resolvedWorkspaceForSandbox = readResolvedAttemptPath(input.workspaceDir) ?? readResolvedAttemptPath(input.cwd);
@@ -1963,6 +1908,7 @@ async function runCopilotAttempt(params, deps) {
 	const cleanupByokProxy = byokProxy?.close;
 	const sessionProvider = byokProxy?.provider ?? poolAcquire.provider;
 	const sessionRef = { current: void 0 };
+	const computerContextEpoch = { value: 0 };
 	try {
 		let sdkTools;
 		try {
@@ -1980,6 +1926,7 @@ async function runCopilotAttempt(params, deps) {
 				spawnWorkspaceDir: sandboxAwareSpawnWorkspaceDir,
 				abortSignal: params.abortSignal,
 				attemptParams: input,
+				computerContextEpoch,
 				sessionRef,
 				onYieldDetected: () => {
 					yieldDetected = true;
@@ -2054,8 +2001,14 @@ async function runCopilotAttempt(params, deps) {
 			signal: params.abortSignal
 		});
 		userInputBridgeRef = userInputBridge;
-		const sessionConfig = createSessionConfig(attemptInput, modelRef.id, sdkTools, poolAcquire.auth, sessionProvider, promptBuild.developerInstructions || void 0, effectiveWorkspaceDir, effectiveCwd, userInputBridge.onUserInputRequest, hasNativePromptHook ? { onUserPromptSubmitted: ({ additionalContext, prompt }) => emitLlmInput(prompt, additionalContext) } : void 0);
-		const compactionSessionConfig = byokProxy ? createSessionConfig(attemptInput, modelRef.id, sdkTools, poolAcquire.auth, poolAcquire.provider, promptBuild.developerInstructions || void 0, effectiveWorkspaceDir, effectiveCwd, userInputBridge.onUserInputRequest, hasNativePromptHook ? { onUserPromptSubmitted: ({ additionalContext, prompt }) => emitLlmInput(prompt, additionalContext) } : void 0) : sessionConfig;
+		const sessionConfig = createSessionConfig(attemptInput, modelRef.id, sdkTools, poolAcquire.auth, sessionProvider, promptBuild.developerInstructions || void 0, effectiveWorkspaceDir, effectiveCwd, userInputBridge.onUserInputRequest, {
+			hooksBridgeOptions: hasNativePromptHook ? { onUserPromptSubmitted: ({ additionalContext, prompt }) => emitLlmInput(prompt, additionalContext) } : void 0,
+			includeAskUser: !ringZeroSystemAgentRun
+		});
+		const compactionSessionConfig = byokProxy ? createSessionConfig(attemptInput, modelRef.id, sdkTools, poolAcquire.auth, poolAcquire.provider, promptBuild.developerInstructions || void 0, effectiveWorkspaceDir, effectiveCwd, userInputBridge.onUserInputRequest, {
+			hooksBridgeOptions: hasNativePromptHook ? { onUserPromptSubmitted: ({ additionalContext, prompt }) => emitLlmInput(prompt, additionalContext) } : void 0,
+			includeAskUser: !ringZeroSystemAgentRun
+		}) : sessionConfig;
 		const replayDecision = decideReplayAction({
 			sdkSessionId: input.initialReplayState?.sdkSessionId,
 			replayInvalid: input.initialReplayState?.replayInvalid
@@ -2088,6 +2041,11 @@ async function runCopilotAttempt(params, deps) {
 			onAssistantDelta: input.onAssistantDelta,
 			onAgentEvent: input.onAgentEvent,
 			onNativeSubagentEvent: (event) => nativeSubagentTaskMirror?.handleEvent(event),
+			onContextCompacted: () => {
+				computerContextEpoch.value += 1;
+				delete computerContextEpoch.frameToolCallId;
+				delete computerContextEpoch.frameImageIdentity;
+			},
 			onCompactionStart: async () => {
 				const sessionFile = readString(input.sessionFile);
 				if (!sessionFile) return;
@@ -2245,20 +2203,21 @@ async function runCopilotAttempt(params, deps) {
 		...syntheticUser ? [syntheticUser] : [],
 		...taggedLastAssistant ? [taggedLastAssistant] : []
 	];
-	const sessionFileForMirror = readString(input.sessionFile);
 	const openClawSessionIdForMirror = readString(input.sessionId);
+	const openClawSessionKeyForMirror = readString(input.sessionKey);
+	const openClawStorePathForMirror = readString(input.sessionTarget?.storePath);
 	const mirrorScopeSessionId = sessionIdUsed ?? openClawSessionIdForMirror;
-	if (sessionFileForMirror && openClawSessionIdForMirror && messagesSnapshot.length > 0) {
+	if (openClawSessionIdForMirror && openClawSessionKeyForMirror && openClawStorePathForMirror && messagesSnapshot.length > 0) {
 		const taggedMessages = messagesSnapshot.map((message, index) => {
 			if (message.role !== "user" && message.role !== "assistant" && message.role !== "toolResult") return message;
 			if (hasMirrorIdentity(message)) return message;
 			return attachCopilotMirrorIdentity(message, `${sdkSessionId ?? mirrorScopeSessionId ?? "attempt"}:${message.role}:${index}`);
 		});
 		await dualWriteCopilotTranscriptBestEffort({
-			sessionFile: sessionFileForMirror,
 			sessionId: openClawSessionIdForMirror,
-			sessionKey: readString(input.sessionKey),
+			sessionKey: openClawSessionKeyForMirror,
 			agentId: readString(input.agentId),
+			storePath: openClawStorePathForMirror,
 			messages: taggedMessages,
 			idempotencyScope: mirrorScopeSessionId ? `copilot:${mirrorScopeSessionId}` : void 0,
 			config: input.config
@@ -2364,10 +2323,9 @@ function createPromptError(code, message, cause) {
 	if (cause !== void 0) error.cause = cause;
 	return error;
 }
-function createSessionConfig(params, sdkModelId, sdkTools, resolvedAuth, resolvedProvider, systemMessageContent, effectiveWorkspaceDir, effectiveCwd, onUserInputRequest, hooksBridgeOptions) {
+function createSessionConfig(params, sdkModelId, sdkTools, resolvedAuth, resolvedProvider, systemMessageContent, effectiveWorkspaceDir, effectiveCwd, onUserInputRequest, options) {
 	const permissionPolicy = params.permissionPolicy ?? rejectAllPolicy;
-	const hooks = createHooksBridge(params.hooksConfig, hooksBridgeOptions);
-	const infiniteSessions = createInfiniteSessionConfig(params.infiniteSessionConfig);
+	const hooks = createHooksBridge(params.hooksConfig, options.hooksBridgeOptions);
 	return {
 		model: sdkModelId,
 		onPermissionRequest: createPermissionBridge(permissionPolicy),
@@ -2375,10 +2333,10 @@ function createSessionConfig(params, sdkModelId, sdkTools, resolvedAuth, resolve
 		...resolvedProvider.provider ? { provider: resolvedProvider.provider } : {},
 		...hooks ? { hooks } : {},
 		...typeof params.enableSessionTelemetry === "boolean" ? { enableSessionTelemetry: params.enableSessionTelemetry } : {},
-		...infiniteSessions ? { infiniteSessions } : {},
+		...params.infiniteSessionConfig ? { infiniteSessions: params.infiniteSessionConfig } : {},
 		reasoningEffort: params.reasoningEffort,
 		tools: sdkTools,
-		availableTools: buildCopilotAvailableTools(sdkTools),
+		availableTools: buildCopilotAvailableTools(sdkTools, options.includeAskUser),
 		workingDirectory: effectiveCwd ?? effectiveWorkspaceDir ?? readResolvedAttemptPath(params.workspaceDir),
 		...effectiveWorkspaceDir && effectiveCwd && effectiveCwd !== effectiveWorkspaceDir ? { instructionDirectories: [effectiveWorkspaceDir] } : {},
 		...resolvedAuth.authMode === "gitHubToken" && resolvedAuth.gitHubToken ? { gitHubToken: resolvedAuth.gitHubToken } : {},
@@ -2388,8 +2346,13 @@ function createSessionConfig(params, sdkModelId, sdkTools, resolvedAuth, resolve
 		} } : {}
 	};
 }
-function buildCopilotAvailableTools(sdkTools) {
-	return [.../* @__PURE__ */ new Set([...sdkTools.map((tool) => tool.name), ...COPILOT_ASK_USER_AVAILABLE_TOOLS])];
+function buildCopilotAvailableTools(sdkTools, includeAskUser) {
+	const availableTools = sdkTools.map((tool) => tool.name);
+	if (includeAskUser) availableTools.push(...COPILOT_ASK_USER_AVAILABLE_TOOLS);
+	return [...new Set(availableTools)];
+}
+function isSystemAgentOnlyToolAllowlist(toolsAllow) {
+	return toolsAllow?.length === 1 && toolsAllow[0]?.trim().toLowerCase() === "openclaw";
 }
 async function createMessageOptions(params, context) {
 	const attachments = createPromptImageAttachments(await resolvePromptImages(params, context));

package/dist/doctor-contract-api.js

@@ -10,8 +10,7 @@ function normalizeCompatibilityConfig({ cfg }) {
 * Session-state ownership claim for the copilot agent runtime.
 *
 * - id / label: Identify the extension in doctor output.
-* - providerIds: The subscription Copilot providers (kept in sync
-*   with `SUPPORTED_PROVIDERS` in attempt.ts).
+* - providerIds: The subscription Copilot providers.
 * - runtimeIds: Our harness id (matches harness.ts `id` field).
 * - cliSessionKeys: Session keys this harness writes; doctor uses
 *   this when pruning stale CLI session state.

package/dist/{harness-BQhGzc1Z.js → harness-DnbBZBdi.js}

@@ -481,7 +481,7 @@ function resolveCopilotProvider(params) {
 	};
 }
 function isCopilotByokUnsupportedProviderError(error) {
-	return error instanceof Error && (error.message === "[copilot-attempt] BYOK requires an OpenAI-compatible or Anthropic model api and a non-empty baseUrl" || error.message === "[copilot-attempt] BYOK does not support OpenClaw provider request proxy, TLS, or private-network policy overrides" || error.message === "[copilot-attempt] BYOK endpoint is blocked by OpenClaw SSRF policy");
+	return error instanceof Error && (error.message === COPILOT_BYOK_PROVIDER_ERROR || error.message === COPILOT_BYOK_TRANSPORT_POLICY_ERROR || error.message === COPILOT_BYOK_ENDPOINT_POLICY_ERROR);
 }
 function supportsCopilotByokProviderShape(model) {
 	if (!readString(model.baseUrl) || hasUnsupportedTransportPolicy(model)) return false;
@@ -894,7 +894,7 @@ function createCopilotAgentHarness(options) {
 		async runAttempt(params) {
 			const attemptPromise = (async () => {
 				if (disposed) throw new Error("[copilot] harness has been disposed; cannot start new attempts");
-				const { resolvePoolAcquire, runCopilotAttempt } = await import("./attempt-D6MSc00N.js");
+				const { resolvePoolAcquire, runCopilotAttempt } = await import("./attempt-BxxMpQmE.js");
 				if (disposed) throw new Error("[copilot] harness was disposed while starting an attempt");
 				const pool = await getPool();
 				if (disposed) throw new Error("[copilot] harness was disposed while starting an attempt");
@@ -1010,7 +1010,7 @@ function createCopilotAgentHarness(options) {
 			};
 			const tracked = trackedSessions.get(openclawSessionId);
 			const currentCompactKey = computeSessionCompactKey(params);
-			const { resolvePoolAcquire } = await import("./attempt-D6MSc00N.js");
+			const { resolvePoolAcquire } = await import("./attempt-BxxMpQmE.js");
 			let resolvedPoolAcquire;
 			let currentAuth;
 			try {

package/dist/harness.js

@@ -1,2 +1,2 @@
-import { t as createCopilotAgentHarness } from "./harness-BQhGzc1Z.js";
+import { t as createCopilotAgentHarness } from "./harness-DnbBZBdi.js";
 export { createCopilotAgentHarness };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { t as createCopilotAgentHarness } from "./harness-BQhGzc1Z.js";
+import { t as createCopilotAgentHarness } from "./harness-DnbBZBdi.js";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/copilot/index.ts

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/copilot",
-  "version": "2026.7.1",
+  "version": "2026.7.2-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/copilot",
-      "version": "2026.7.1",
+      "version": "2026.7.2-beta.1",
       "dependencies": {
         "@github/copilot-sdk": "1.0.5"
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/copilot",
-  "version": "2026.7.1",
+  "version": "2026.7.2-beta.1",
   "description": "OpenClaw GitHub Copilot agent runtime plugin (registers a `github-copilot` AgentHarness backed by @github/copilot-sdk over JSON-RPC to the GitHub Copilot CLI)",
   "repository": {
     "type": "git",
@@ -25,10 +25,10 @@
       "minHostVersion": ">=2026.5.28"
     },
     "compat": {
-      "pluginApi": ">=2026.7.1"
+      "pluginApi": ">=2026.7.2-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.7.1",
+      "openclawVersion": "2026.7.2-beta.1",
       "bundledDist": false
     },
     "release": {
@@ -47,7 +47,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.7.1"
+    "openclaw": ">=2026.7.2-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {