Expose managed approval requirement on permission requests

[joshspicer]

Why

Enterprise-managed permission ask rules must be answered by a person. SDK hosts need to distinguish those requests from ordinary permission prompts that client settings may auto-approve.

This is the public SDK contract for:

• runtime implementation: https://github.com/github/copilot-agent-runtime/pull/13312
• VS Code host integration: Agent Host: Require confirmation for managed permission asks microsoft/vscode#327383

The initial runtime scope supports managed Shell, Read, Edit, and URL selectors. Tool and MCP selectors are deferred.

What

Adds optional managedApprovalRequired metadata to the public TypeScript PermissionRequest type.

When true, hosts should bypass automatic approval and present their normal confirmation UI. The runtime remains authoritative for the managed verdict and approve-once-only behavior; the flag is request metadata, not an administrator setting.

The field is overlaid at the hand-authored public type boundary because the runtime schema change has not shipped in a published CLI package yet. This avoids committing unrelated generated-schema drift. A later normal schema regeneration can absorb the field into generated bindings without changing the public TypeScript shape.

Validation

• npm run build
• npm run typecheck
• npm test -- session-event-types.test.ts — 5 passed
• npm run format:check
• npm run lint — 0 errors; 3 pre-existing warnings in unrelated tests
• linked runtime + SDK + VS Code manual validation confirmed managed asks reach client UI and repeated asks do not persist approval

[Copilot]

Pull request overview

Exposes managed approval requirements to TypeScript permission handlers.

Changes:

• Adds optional managedApprovalRequired metadata.
• Adds package-root type coverage.

Show a summary per file

File	Description
nodejs/src/types.ts	Overlays managed approval metadata onto permission requests.
nodejs/test/session-event-types.test.ts	Verifies the field is publicly importable.

Review details

• Files reviewed: 2/2 changed files
• Comments generated: 3
• Review effort level: Medium

[Copilot]

Review details

Comments suppressed due to low confidence (1)

nodejs/src/types.ts:1108

• This overlay only updates the standalone type and PermissionHandler; the public SessionEvent/PermissionRequestedData types still come from the generated schema, where permissionRequest lacks this property. Consequently, an event-only host (the documented path when onPermissionRequest is omitted) cannot compile event.data.permissionRequest.managedApprovalRequired even though the runtime sends it. Please overlay the permission.requested event payload as well so every public permission-request surface exposes the metadata.

export type PermissionRequest = GeneratedPermissionRequest & {
    readonly managedApprovalRequired?: boolean;
};

• Files reviewed: 2/2 changed files
• Comments generated: 0 new
• Review effort level: Medium