You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
ClientMode::Empty should provide the same deny-by-default, explicit-opt-in behavior for runtime-bundled skills that it provides for other built-in capabilities. Now that the runtime protocol exposes includedBuiltinSkills, this change applies that policy in the fail-closed post-create and post-resume options patch.
The behavior is consistent across Node.js, Python, Go, .NET, Java, and Rust:
Empty mode defaults includedBuiltinSkills to [].
A caller-provided built-in skill allowlist overrides that default on create and resume.
Custom skills remain independently available through enableSkills and skillDirectories.
Copilot CLI mode omits the field unless the caller explicitly supplies it.
Session cleanup remains fail-closed when the options patch fails.
Focused tests cover default isolation, explicit allowlists on create and resume, custom skill opt-in, wire serialization, and Copilot CLI omission/pass-through. The skills and multi-tenancy documentation describe the deny-by-default behavior.
This is the SDK side of https://github.com/github/copilot-agent-runtime/pull/16774, defaulting
includedBuiltinSkillsto empty whenClientMode::Emptyis specified while preserving an explicit caller allowlist.Related to https://github.com/github/copilot-sdk-internal/issues/237
Summary
ClientMode::Emptyshould provide the same deny-by-default, explicit-opt-in behavior for runtime-bundled skills that it provides for other built-in capabilities. Now that the runtime protocol exposesincludedBuiltinSkills, this change applies that policy in the fail-closed post-create and post-resume options patch.The behavior is consistent across Node.js, Python, Go, .NET, Java, and Rust:
includedBuiltinSkillsto[].enableSkillsandskillDirectories.Focused tests cover default isolation, explicit allowlists on create and resume, custom skill opt-in, wire serialization, and Copilot CLI omission/pass-through. The skills and multi-tenancy documentation describe the deny-by-default behavior.
Validation