Version-matched request-construction source/provenance for Copilot CLI 1.0.110 #5455

Subject: Version-matched request-construction source/provenance for Copilot CLI 1.0.110

For the authorized Copilot CLI maintainer/source custodian:

Could you provide a bounded readable source excerpt or build-linked specification for the primary CAPI GET /meta request producer in @github/copilot 1.0.110, buildMetadata.gitCommit label 26f54676?

Artifact matching information:

• cli-main.js SHA256: f5f298153cbd09f02f312ff728c4dad77f8aaa2f837a8230d2c067639270efb7.
• Retained package metadata identifies linux-x64 runtime.node SHA256 a25a53af25891fd5403b59f50ead29130f0d75e98a298a7467f02519ef292a79; please confirm that build linkage. This digest is metadata-derived, not a fresh binary measurement.

We need only the method/path selection, normalized header-name construction, required/optional/configuration branches (including the source of x-client-machine-id, without its value), serialization, and error propagation into model-catalog RPC. Please identify the JS-to-native boundary and corresponding native constructor. A matching cli-main.js.map is useful only insofar as it resolves that boundary; a generic latest-version header list is insufficient.

Relevant cli-main.js zero-based UTF-8 byte locations are ModelListHandle 6179096, modelResolverResolveSelectedModelNative 6179475, modelCliHeadlessConfiguration 6194249 and session.model.list 2306545. These locate consumers/call sites, not an established producer.

Please include the full source revision/build mapping or authenticated release provenance linking the supplied material to these artifacts, content hashes where available, and applicable license/reuse terms. The short build label alone is not full commit provenance.

No live header values, tokens, credentials, account details, traffic captures, private logs/paths or diagnostic execution are requested. A public, version-pinned reference or narrow authorized excerpt is sufficient. If matching material cannot be supplied, please say so; no broader source disclosure is requested.