Expose managed approval requirement on permission requests

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 18f1bbc1-6001-43e2-b293-724505087f6a

Author: joshspicer

nodejs/src/types.ts

@@ -1097,9 +1097,15 @@ export type SystemMessageConfig =
  * discriminated union from the runtime schema — switch on `kind` to
  * access the variant-specific fields (e.g. shell `commands`, write
  * `fileName`/`diff`, mcp `toolName`/`args`).
+ *
+ * `managedApprovalRequired` indicates that managed policy requires an explicit
+ * user decision. Hosts should bypass automatic approval and present their
+ * normal confirmation UI.
  */
-export type { PermissionRequest } from "./generated/session-events.js";
-import type { PermissionRequest } from "./generated/session-events.js";
+import type { PermissionRequest as GeneratedPermissionRequest } from "./generated/session-events.js";
+export type PermissionRequest = GeneratedPermissionRequest & {
+    readonly managedApprovalRequired?: boolean;
+};
 
 import type { PermissionDecisionRequest } from "./generated/rpc.js";
 

nodejs/test/session-event-types.test.ts

@@ -18,6 +18,7 @@ import { describe, expect, it } from "vitest";
 import type {
     // The aggregate union; must still resolve via the package root.
     SessionEvent,
+    PermissionRequest,
 
     // *Data payload types from the v0.3.0 generated session-event schema.
     AssistantMessageData,
@@ -103,6 +104,17 @@ describe("Session event type exports (#1156)", () => {
         expect(data.turnId).toBe("turn-1");
     });
 
+    it("exposes whether managed policy requires explicit user approval", () => {
+        const request: PermissionRequest = {
+            kind: "read",
+            path: "/workspace/file.txt",
+            intention: "Read a file",
+            managedApprovalRequired: true,
+        };
+
+        expect(request.managedApprovalRequired).toBe(true);
+    });
+
     it("wraps ToolExecutionStartData inside the exported ToolExecutionStartEvent", () => {
         const event: ToolExecutionStartEvent = {
             id: "evt-1",