chore(sdk-pin): promote github-copilot-sdk to 1.0.0 (GA) (#71)

Move the SDK pin from 1.0.0b10 (shipped in provider v2.3.0) to the 1.0.0
final release. GA is the first published, non-prerelease build of the
1.0.0 line; pinning to it removes the prerelease-resolution footgun for
downstream installs (no --pre needed) and gives the provider a supported,
stable pin of record.

The import-time SDK floor stays at >=1.0.0b10, the minimum where the
MinimalMode kwargs first exist; only the exact pin and the user-facing
version strings move to ==1.0.0. The MinimalMode wire shape is unchanged.

Two items follow from adopting the GA surface:

- Classify session.extensions.attachments_pushed as no-emit. The GA
  surface adds this extension event; MinimalMode disables the extension
  surface, so it is unreachable and carries no kernel-domain mapping.
  This matches the disposition the block already records for sibling
  extension events, kept explicit rather than left to the implicit drop.
- Broaden the live malformed-token test to also accept AuthenticationError.
  Under GA a malformed token is rejected server-side as a 401 and surfaces
  as AuthenticationError; the test still asserts no files leak to default
  paths.

Quality: ruff: 0 errors | pyright: 0 errors | pytest (linux/py3.14): 1372 passed | pytest (win32/py3.13): 1369 passed | total coverage: 98%

Co-authored-by: HDMowri <HDMowri@users.noreply.github.com>

Author: HDMowri

README.md

@@ -127,7 +127,7 @@ amplifier provider models github-copilot
 
 ## Supported Models
 
-Models are discovered dynamically from the SDK at runtime — the list reflects your GitHub Copilot plan. The tables below show the current public set as of SDK 1.0.0b10; run `amplifier provider models github-copilot` for the live list.
+Models are discovered dynamically from the SDK at runtime — the list reflects your GitHub Copilot plan. The tables below show the current public set as of SDK 1.0.0; run `amplifier provider models github-copilot` for the live list.
 
 **Routing:**
 
@@ -509,7 +509,7 @@ Running `amplifier init` before authentication:
 ## Dependencies
 
 - `amplifier-core` (provided by Amplifier runtime, not installed separately)
-- `github-copilot-sdk==1.0.0b10`
+- `github-copilot-sdk==1.0.0`
 - `pyyaml>=6.0`
 
 > **Note:** `github-copilot-sdk` is installed automatically when you install or initialize

amplifier_module_provider_github_copilot/__init__.py

@@ -62,7 +62,7 @@ def _check_sdk_version(version_str: str) -> None:
     reinstall message instead of a deferred ``TypeError``.
 
     The floor is the symbol-availability minimum (``>=1.0.0b10``); the
-    exact pyproject pin (``==1.0.0b10``) is enforced separately by
+    exact pyproject pin (``==1.0.0``) is enforced separately by
     ``tests/_sdk_version_gate.py``. Earlier 1.x betas lack required
     MinimalMode kwargs and are rejected here at import time.
 
@@ -76,8 +76,8 @@ def _check_sdk_version(version_str: str) -> None:
         raise ImportError(
             f"github-copilot-sdk=={version_str} is below the symbol-availability "
             "floor (>=1.0.0b10 required; MinimalMode MUST:7-15 kwargs added at b10). "
-            "Pinned target: ==1.0.0b10 (pyproject.toml). "
-            "Reinstall with: pip install 'github-copilot-sdk==1.0.0b10' "
+            "Pinned target: ==1.0.0 (pyproject.toml). "
+            "Reinstall with: pip install 'github-copilot-sdk==1.0.0' "
             f"or: amplifier provider install --force {PROVIDER_ID}"
         )
 
@@ -106,7 +106,7 @@ def _parse_sdk_version(version_str: str) -> _Version:
         # SDK required; tests only run with SDK installed
         raise ImportError(
             "Required dependency 'github-copilot-sdk' is not installed. "
-            "Install with:  pip install 'github-copilot-sdk==1.0.0b10'"
+            "Install with:  pip install 'github-copilot-sdk==1.0.0'"
         ) from _e
     # Contract: sdk-boundary:Membrane:MUST:5 — fail at import time on wrong version.
     _check_sdk_version(_sdk_version)

amplifier_module_provider_github_copilot/config/data/events.yaml

@@ -156,6 +156,11 @@ event_classifications:
     # tool.execution_complete bridge; forwarding this would double-emit
     # under a different schema.
     - mcp_app.tool_call_complete
+    # SDK v1.0.0b12 — extension-SDK attachment push. MinimalMode disables the
+    # extension surface (enable_skills=False and no extension_sdk_path is ever
+    # passed), so this is unreachable; and it carries no domain value. Same
+    # disposition as session.extensions_loaded above.
+    - session.extensions.attachments_pushed
 
 finish_reason_map:
   # Values MUST be lowercase to match amplifier-core proto:

pyproject.toml

@@ -27,7 +27,11 @@ dependencies = [
     # - v1.0.0b9: on_list_models + mode kwargs (additive)
     # - v1.0.0b10: 8 new create_session kwargs + telemetry consolidation
     #   (MinimalMode:MUST:7-15)
-    "github-copilot-sdk==1.0.0b10",
+    # - v1.0.0b12: bundled CLI 1.0.57; copilot.rpc stable public shim;
+    #   one new SessionEventType (session.extensions.attachments_pushed)
+    # - v1.0.0 (GA): byte-identical Python source to b12 (bundled CLI 1.0.57);
+    #   stable release stamp — no API or behavior change vs b12
+    "github-copilot-sdk==1.0.0",
     # PyYAML for config loading
     "pyyaml>=6.0",
     # PEP 440 version parser used by the import-time SDK floor check

tests/test_behaviors.py

@@ -480,7 +480,7 @@ def test_message_format_invariants_preserved(self) -> None:
             _check_sdk_version("1.0.0b6")
         msg = str(exc_info.value)
         assert "github-copilot-sdk" in msg
-        assert "pip install 'github-copilot-sdk==1.0.0b10'" in msg
+        assert "pip install 'github-copilot-sdk==1.0.0'" in msg
         assert "amplifier provider install" in msg
 
 

tests/test_filesystem_acceptance_live.py

@@ -267,7 +267,11 @@ async def test_live_malformed_token_does_not_leak_files_to_default_paths(
     pre_amplifier = _relative_set(Path.home() / ".amplifier")
     pre_provider_home = _relative_set(isolated_home) if isolated_home.exists() else set()
 
-    from amplifier_core.llm_errors import ConfigurationError, ProviderUnavailableError
+    from amplifier_core.llm_errors import (
+        AuthenticationError,
+        ConfigurationError,
+        ProviderUnavailableError,
+    )
 
     from amplifier_module_provider_github_copilot.provider import GitHubCopilotProvider as Provider
     from amplifier_module_provider_github_copilot.sdk_adapter import client as _client_mod
@@ -278,8 +282,12 @@ async def test_live_malformed_token_does_not_leak_files_to_default_paths(
 
         # A4: complete() drives SDK subprocess startup where token validation occurs.
         # list_models() routes through fetch_and_map_models (patchable) and never
-        # reaches the SDK auth layer.
-        with pytest.raises((ProviderUnavailableError, ConfigurationError)):
+        # reaches the SDK auth layer. The bundled CLI validates the token against
+        # GitHub server-side, so a malformed token surfaces as a 401 that the error
+        # contract maps to AuthenticationError (errors.yaml: "401"/unauthorized);
+        # ProviderUnavailableError/ConfigurationError remain accepted for non-auth
+        # subprocess-startup failures.
+        with pytest.raises((AuthenticationError, ProviderUnavailableError, ConfigurationError)):
             await p.complete(  # type: ignore[arg-type]
                 {"messages": [{"role": "user", "content": "ping"}], "model": "claude-opus-4.5"},  # pyright: ignore[reportArgumentType]
                 model="claude-opus-4.5",