@github/copilot-sdk-darwin-x64 1.0.13-preview.6 → 1.0.13

package/schemas/api.schema.json

@@ -666,6 +666,15 @@
           "description": "Validated device-managed settings discovered before a session exists."
         },
         "stability": "experimental"
+      },
+      "clearCache": {
+        "rpcMethod": "managedSettings.clearCache",
+        "description": "Force-refreshes enterprise managed settings for every account: wipes the persistent server-policy cache (the whole `<cacheHome>/managed-settings` directory) and drops this runtime process's in-memory retained server policy. It does not itself fetch policy — the effect is that the next time a session resolves managed settings for an account, that resolution re-fetches the account's org policy from the network instead of serving a cached response. Note that `managedSettings.read` returns only device/MDM settings and never triggers the account server-policy fetch, so a host implementing \"sync account policy\" should start a fresh session resolution rather than treat a subsequent `managedSettings.read` as the refreshed org policy. Mirrors the invalidation a sign-out performs, broadened from the one signing-out account to all of them; device/MDM layers describe the machine, not the account, and are left untouched. Rejects if the on-disk cache cannot be removed.",
+        "params": null,
+        "result": {
+          "type": "null"
+        },
+        "stability": "experimental"
       }
     },
     "runtime": {
@@ -2612,7 +2621,7 @@
     "model": {
       "getCurrent": {
         "rpcMethod": "session.model.getCurrent",
-        "description": "Gets the currently selected model for the session.",
+        "description": "Gets the session's authoritative model snapshot, including the committed Auto preference and any newer unclaimed Auto preference waiting for a future user turn.",
         "params": {
           "type": "object",
           "properties": {
@@ -2629,7 +2638,7 @@
         },
         "result": {
           "$ref": "#/definitions/CurrentModel",
-          "description": "The currently selected model, reasoning effort, and context tier for the session. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume."
+          "description": "The session's authoritative model snapshot. Auto preference fields are configuration for the virtual `auto` model and do not change the selected model identifier. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume."
         },
         "stability": "experimental"
       },
@@ -2647,6 +2656,18 @@
               "type": "string",
               "description": "Model selection id to switch to, as returned by `list`. A bare id (e.g. `claude-sonnet-4.6`) names a Copilot (CAPI) model; a provider-qualified id (`provider/id`, e.g. `acme/claude-sonnet`) targets a registry BYOK model."
             },
+            "autoTier": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/AutoTier",
+                  "description": "Routing preference used when the session model is `auto`."
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Optional Auto routing preference to stage atomically with selecting `auto`. Pass null to return to provider-default Auto routing. This field is rejected when `modelId` is not `auto`."
+            },
             "reasoningEffort": {
               "type": "string",
               "description": "Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. \"none\" disables reasoning. When omitted, no effort override is applied."
@@ -2715,6 +2736,48 @@
         },
         "stability": "experimental"
       },
+      "switchAutoTier": {
+        "rpcMethod": "session.model.switchAutoTier",
+        "description": "Requests an Auto preference change without changing the session's selected model. The latest unclaimed request wins; the runtime commits it only after a later prompt using the `auto` model mints a usable model and token pair. A `pending` response confirms that the request was accepted, not that it committed. Observe eventual success through `session.model_change`, failure through the ephemeral `session.auto_tier_switch_failed` event, or current unclaimed state through `session.model.getCurrent`.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "autoTier": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/AutoTier",
+                  "description": "Routing preference used when the session model is `auto`."
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Auto preference to activate when a future user turn using the `auto` model safely mints a replacement model and token pair. Pass null to return to provider-default Auto routing."
+            },
+            "source": {
+              "$ref": "#/definitions/ModelChangeSource",
+              "description": "Origin to record on the effective `session.model_change` event. Defaults to `sdk` when omitted."
+            }
+          },
+          "required": [
+            "sessionId",
+            "autoTier"
+          ],
+          "additionalProperties": false,
+          "description": "An Auto preference request for the session. This updates Auto configuration only; it does not change the selected model to `auto`.",
+          "title": "ModelSwitchAutoTierRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/ModelSwitchAutoTierResult",
+          "description": "Immediate acknowledgement and Auto preference snapshot after a switch request. This result never implies that a pending preference committed."
+        },
+        "stability": "experimental"
+      },
       "applyStartupOverlay": {
         "rpcMethod": "session.model.applyStartupOverlay",
         "description": "Resolves and applies organization-managed and repository model overlays.",
@@ -3600,6 +3663,31 @@
         "stability": "experimental"
       }
     },
+    "autopilotObjective": {
+      "getState": {
+        "rpcMethod": "session.autopilotObjective.getState",
+        "description": "Reads the current canonical autopilot objective state for this session.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            }
+          },
+          "required": [
+            "sessionId"
+          ],
+          "additionalProperties": false,
+          "description": "Identifies the target session."
+        },
+        "result": {
+          "$ref": "#/definitions/AutopilotObjectiveGetStateResult",
+          "description": "Canonical runtime state for the session's current autopilot objective."
+        },
+        "stability": "experimental"
+      }
+    },
     "completions": {
       "getTriggerCharacters": {
         "rpcMethod": "session.completions.getTriggerCharacters",
@@ -3963,6 +4051,102 @@
         },
         "stability": "experimental"
       },
+      "register": {
+        "rpcMethod": "session.tasks.register",
+        "description": "Registers a client-owned task, or reclaims an orphaned task belonging to the same extension principal.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "type": {
+              "$ref": "#/definitions/TaskClientType",
+              "const": "client",
+              "description": "Task kind"
+            },
+            "clientTaskId": {
+              "type": "string",
+              "description": "Owner-scoped idempotency key used for registration and reclaim"
+            },
+            "description": {
+              "type": "string",
+              "description": "Human-readable description of the external work"
+            },
+            "displayName": {
+              "type": "string",
+              "description": "Optional short display name for the external work"
+            },
+            "cancellable": {
+              "type": "boolean",
+              "description": "Whether the owner supports runtime cancellation requests"
+            },
+            "expectedSequence": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "Expected current sequence for idempotent registration or orphan reclaim"
+            }
+          },
+          "required": [
+            "sessionId",
+            "type",
+            "clientTaskId",
+            "description",
+            "cancellable"
+          ],
+          "additionalProperties": false,
+          "description": "Registers or reclaims a client-owned task.",
+          "title": "TasksRegisterRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/TasksRegisterResult",
+          "description": "Result of registering or reclaiming a client-owned task."
+        },
+        "stability": "experimental"
+      },
+      "update": {
+        "rpcMethod": "session.tasks.update",
+        "description": "Publishes generic progress or a terminal outcome for a client-owned task.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "id": {
+              "type": "string",
+              "description": "Canonical runtime-generated task identifier"
+            },
+            "sequence": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "Owner update sequence to apply"
+            },
+            "update": {
+              "$ref": "#/definitions/TaskClientUpdate",
+              "description": "Progress or terminal update payload"
+            }
+          },
+          "required": [
+            "sessionId",
+            "id",
+            "sequence",
+            "update"
+          ],
+          "additionalProperties": false,
+          "description": "Updates a client-owned task.",
+          "title": "TasksUpdateRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/TasksUpdateResult",
+          "description": "Result of publishing a client-owned task update."
+        },
+        "stability": "experimental"
+      },
       "refresh": {
         "rpcMethod": "session.tasks.refresh",
         "description": "Refreshes metadata for any detached background shells the runtime knows about.",
@@ -9972,6 +10156,53 @@
         "stability": "experimental"
       }
     },
+    "tasks": {
+      "cancel": {
+        "rpcMethod": "tasks.cancel",
+        "description": "Asks the client currently bound to a client-owned session task to confirm that its external work stopped.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Session that owns the client task"
+            },
+            "id": {
+              "type": "string",
+              "description": "Canonical runtime-generated task identifier"
+            },
+            "clientTaskId": {
+              "type": "string",
+              "description": "Owner-scoped task key included for correlation"
+            },
+            "cancellationId": {
+              "type": "string",
+              "description": "Opaque identifier shared by coalesced cancellation callers"
+            },
+            "reason": {
+              "$ref": "#/definitions/ClientTaskCancelReason",
+              "description": "Reason the runtime requests cancellation"
+            }
+          },
+          "required": [
+            "sessionId",
+            "id",
+            "clientTaskId",
+            "cancellationId",
+            "reason"
+          ],
+          "additionalProperties": false,
+          "description": "Runtime-to-owner cancellation request for a client-owned task.",
+          "title": "ClientTaskCancelRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/ClientTaskCancelResult",
+          "description": "Whether the client authoritatively confirmed its external work stopped."
+        },
+        "stability": "experimental"
+      }
+    },
     "sessionFs": {
       "readFile": {
         "rpcMethod": "sessionFs.readFile",
@@ -12686,6 +12917,125 @@
       "description": "Validation errors from the most recent authentication attempt.",
       "title": "AuthValidationErrors"
     },
+    "AutopilotObjectiveCreditLimit": {
+      "type": "object",
+      "properties": {
+        "credits": {
+          "type": "number",
+          "description": "Configured AI-credit cap, when one is set."
+        },
+        "creditsUsed": {
+          "type": "number",
+          "description": "Window consumption in fractional AI credits, for display."
+        },
+        "creditsUsedNanoAiu": {
+          "type": "string",
+          "pattern": "^[0-9]+$",
+          "description": "Exact window consumption in non-negative integer nano-AIU, encoded as a decimal string."
+        }
+      },
+      "required": [
+        "creditsUsed",
+        "creditsUsedNanoAiu"
+      ],
+      "additionalProperties": false,
+      "description": "Current per-window credit limit and consumption for an autopilot objective.",
+      "title": "AutopilotObjectiveCreditLimit",
+      "stability": "experimental"
+    },
+    "AutopilotObjectiveGetStateResult": {
+      "type": "object",
+      "properties": {
+        "state": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/AutopilotObjectiveState",
+              "description": "Public, persistence-independent projection of an autopilot objective."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Current objective state, or `null` when the session has no objective."
+        }
+      },
+      "required": [
+        "state"
+      ],
+      "additionalProperties": false,
+      "description": "Canonical runtime state for the session's current autopilot objective.",
+      "title": "AutopilotObjectiveGetStateResult",
+      "stability": "experimental"
+    },
+    "AutopilotObjectiveState": {
+      "type": "object",
+      "properties": {
+        "id": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 9007199254740991,
+          "description": "Session-local objective identifier."
+        },
+        "objective": {
+          "type": "string",
+          "description": "User-provided objective text."
+        },
+        "status": {
+          "$ref": "#/definitions/AutopilotObjectiveStatus",
+          "description": "Current normalized lifecycle status."
+        },
+        "turnCount": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 9007199254740991,
+          "description": "Number of objective turns started."
+        },
+        "pauseReason": {
+          "type": "string",
+          "description": "Optional reason the objective is paused."
+        },
+        "completionSummary": {
+          "type": "string",
+          "description": "Optional summary recorded when the objective completed."
+        },
+        "creditCountNanoAiu": {
+          "type": "string",
+          "pattern": "^[0-9]+$",
+          "description": "Exact lifetime AI-credit consumption in non-negative integer nano-AIU, encoded as a decimal string."
+        },
+        "creditLimit": {
+          "$ref": "#/definitions/AutopilotObjectiveCreditLimit",
+          "description": "Current per-window consumption and optional cap, when a credit-tracking window is present."
+        }
+      },
+      "required": [
+        "id",
+        "objective",
+        "status",
+        "turnCount",
+        "creditCountNanoAiu"
+      ],
+      "additionalProperties": false,
+      "description": "Public, persistence-independent projection of an autopilot objective.",
+      "title": "AutopilotObjectiveState",
+      "stability": "experimental"
+    },
+    "AutopilotObjectiveStatus": {
+      "type": "string",
+      "enum": [
+        "active",
+        "paused",
+        "completed"
+      ],
+      "description": "Current normalized autopilot objective lifecycle status.",
+      "title": "AutopilotObjectiveStatus",
+      "x-enumDescriptions": {
+        "active": "The objective is actively running.",
+        "paused": "The objective is paused and may be resumed.",
+        "completed": "The objective completed."
+      },
+      "stability": "experimental"
+    },
     "AutoTier": {
       "type": "string",
       "enum": [
@@ -13311,7 +13661,7 @@
       "properties": {
         "autoTier": {
           "$ref": "#/definitions/AutoTier",
-          "description": "Routing preference used when the session model is `auto`. The runtime persists the preference across cold resume. When omitted, the default routing behavior is used. Resuming an already-resident session cannot change its preference."
+          "description": "Routing preference for sessions whose model is `auto`. On create or cold resume, this establishes the preference sent as `tier` on CAPI `/auto` requests; when omitted on cold resume, the runtime restores the last committed preference. On resident resume, a different value requests a safe switch after resume succeeds and cannot change an in-flight turn. Successful switches are persisted for later cold resume. When no preference is supplied or restored, CAPI default routing is used."
         },
         "enableWebSocketResponses": {
           "type": "boolean",
@@ -14501,6 +14851,70 @@
       "description": "The request asked for a candidate kind this runtime does not serve.",
       "title": "CatalogUnsupportedKindError"
     },
+    "ClientTaskCancelReason": {
+      "type": "string",
+      "enum": [
+        "cancel_requested",
+        "session_shutdown"
+      ],
+      "description": "Why the runtime requests client-task cancellation.",
+      "title": "ClientTaskCancelReason",
+      "x-enumDescriptions": {
+        "cancel_requested": "A caller requested task cancellation.",
+        "session_shutdown": "The session is shutting down."
+      }
+    },
+    "ClientTaskCancelRequest": {
+      "type": "object",
+      "properties": {
+        "sessionId": {
+          "type": "string",
+          "description": "Session that owns the client task"
+        },
+        "id": {
+          "type": "string",
+          "description": "Canonical runtime-generated task identifier"
+        },
+        "clientTaskId": {
+          "type": "string",
+          "description": "Owner-scoped task key included for correlation"
+        },
+        "cancellationId": {
+          "type": "string",
+          "description": "Opaque identifier shared by coalesced cancellation callers"
+        },
+        "reason": {
+          "$ref": "#/definitions/ClientTaskCancelReason",
+          "description": "Reason the runtime requests cancellation"
+        }
+      },
+      "required": [
+        "sessionId",
+        "id",
+        "clientTaskId",
+        "cancellationId",
+        "reason"
+      ],
+      "additionalProperties": false,
+      "description": "Runtime-to-owner cancellation request for a client-owned task.",
+      "title": "ClientTaskCancelRequest",
+      "stability": "experimental"
+    },
+    "ClientTaskCancelResult": {
+      "type": "object",
+      "properties": {
+        "cancelled": {
+          "type": "boolean",
+          "description": "True only when the owner confirms that external work stopped before responding"
+        }
+      },
+      "required": [
+        "cancelled"
+      ],
+      "additionalProperties": false,
+      "description": "Whether the client authoritatively confirmed its external work stopped.",
+      "title": "ClientTaskCancelResult"
+    },
     "CommandList": {
       "type": "object",
       "properties": {
@@ -14937,6 +15351,14 @@
           "$ref": "#/definitions/ConnectClientInfo",
           "description": "Identity of the integrating host. Optional; omit it to keep the default attribution."
         },
+        "supportedTaskKinds": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/TaskKind",
+            "description": "Closed set of public task kinds a connection can negotiate."
+          },
+          "description": "Task kinds this connection can decode when observing session tasks. Omit to retain agent and shell compatibility."
+        },
         "token": {
           "type": "string",
           "description": "Connection token; required when the server was started with COPILOT_CONNECTION_TOKEN"
@@ -14963,6 +15385,14 @@
         "version": {
           "type": "string",
           "description": "Server package version"
+        },
+        "taskKinds": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/TaskKind",
+            "description": "Closed set of public task kinds a connection can negotiate."
+          },
+          "description": "Task kinds the server may return to this connection."
         }
       },
       "required": [
@@ -15616,10 +16046,38 @@
         "contextTier": {
           "$ref": "#/definitions/ContextTier",
           "description": "Context tier for models that support multiple context-window sizes."
+        },
+        "autoTier": {
+          "$ref": "#/definitions/AutoTier",
+          "description": "Auto preference currently committed for the session. This can remain available while another model is selected so a later switch to `auto` can reuse it."
+        },
+        "pendingAutoTier": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/AutoTier",
+              "description": "Routing preference used when the session model is `auto`."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Latest unclaimed Auto preference waiting for a future user turn. Null means the pending request is returning to provider-default routing."
+        },
+        "activatingAutoTier": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/AutoTier",
+              "description": "Routing preference used when the session model is `auto`."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Auto preference currently claimed by an in-progress activation. Null means the activation is returning to provider-default routing."
         }
       },
       "additionalProperties": false,
-      "description": "The currently selected model, reasoning effort, and context tier for the session. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume.",
+      "description": "The session's authoritative model snapshot. Auto preference fields are configuration for the virtual `auto` model and do not change the selected model identifier. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume.",
       "title": "CurrentModel"
     },
     "CurrentToolMetadata": {
@@ -21612,6 +22070,10 @@
           "minLength": 1,
           "pattern": "^[^\\x00-\\x1f/\\x7f-\\x9f}]+(?:\\/[^\\x00-\\x1f/\\x7f-\\x9f}]+)*$",
           "description": "Name of the MCP server to remove"
+        },
+        "authClientIdMetadataUrl": {
+          "type": "string",
+          "description": "OAuth Client ID Metadata Document URL whose persisted credentials should also be removed."
         }
       },
       "required": [
@@ -23899,6 +24361,10 @@
         "error": {
           "type": "string",
           "description": "Error message if the server failed to connect"
+        },
+        "serverMetadata": {
+          "$ref": "#/definitions/McpServerMetadata",
+          "description": "Server-advertised metadata for a connected server. Omitted when no live connection metadata is available, including while pending or when failed, disabled, stopped, or not configured."
         }
       },
       "required": [
@@ -24555,6 +25021,24 @@
       "description": "MCP servers configured for the session, with their connection status and host-level state.",
       "title": "McpServerList"
     },
+    "McpServerMetadata": {
+      "type": "object",
+      "properties": {
+        "instructions": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "Non-empty natural-language guidance for using the server, or null when the server omitted instructions or advertised an empty string."
+        }
+      },
+      "required": [
+        "instructions"
+      ],
+      "additionalProperties": false,
+      "description": "Server-advertised metadata learned through modern discovery or legacy initialization.",
+      "title": "McpServerMetadata"
+    },
     "McpServerNeedsAuthInfo": {
       "type": "object",
       "properties": {
@@ -25129,6 +25613,13 @@
           "$ref": "#/definitions/ModelCapabilities",
           "description": "Model capabilities and limits"
         },
+        "metadata": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "Provider-supplied model metadata. Keys and JSON-compatible values are preserved unchanged. This is factual metadata published by the model provider; it carries no picker or UX semantics."
+        },
         "policy": {
           "$ref": "#/definitions/ModelPolicy",
           "description": "Policy state (if applicable)"
@@ -25832,6 +26323,104 @@
       "description": "Optional opaque account selection or compatibility GitHub token used to list models.",
       "title": "ModelsListRequest"
     },
+    "ModelSwitchAutoTierRequest": {
+      "type": "object",
+      "properties": {
+        "autoTier": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/AutoTier",
+              "description": "Routing preference used when the session model is `auto`."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Auto preference to activate when a future user turn using the `auto` model safely mints a replacement model and token pair. Pass null to return to provider-default Auto routing."
+        },
+        "source": {
+          "$ref": "#/definitions/ModelChangeSource",
+          "description": "Origin to record on the effective `session.model_change` event. Defaults to `sdk` when omitted."
+        }
+      },
+      "required": [
+        "autoTier"
+      ],
+      "additionalProperties": false,
+      "description": "An Auto preference request for the session. This updates Auto configuration only; it does not change the selected model to `auto`.",
+      "title": "ModelSwitchAutoTierRequest",
+      "stability": "experimental"
+    },
+    "ModelSwitchAutoTierResult": {
+      "type": "object",
+      "properties": {
+        "status": {
+          "$ref": "#/definitions/ModelSwitchAutoTierStatus",
+          "description": "Immediate request status. `pending` means accepted but not committed."
+        },
+        "effectiveAutoTier": {
+          "$ref": "#/definitions/AutoTier",
+          "description": "Auto preference currently committed for the session."
+        },
+        "pendingAutoTier": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/AutoTier",
+              "description": "Routing preference used when the session model is `auto`."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Latest unclaimed Auto preference waiting for a future user turn."
+        },
+        "activatingAutoTier": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/AutoTier",
+              "description": "Routing preference used when the session model is `auto`."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Auto preference currently claimed by an in-progress activation. Null means the activation is returning to provider-default routing."
+        },
+        "supersededAutoTier": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/AutoTier",
+              "description": "Routing preference used when the session model is `auto`."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Earlier unclaimed preference replaced by this request. This can be present with either status, including when selecting the effective preference cancels pending work."
+        }
+      },
+      "required": [
+        "status"
+      ],
+      "additionalProperties": false,
+      "description": "Immediate acknowledgement and Auto preference snapshot after a switch request. This result never implies that a pending preference committed.",
+      "title": "ModelSwitchAutoTierResult",
+      "stability": "experimental"
+    },
+    "ModelSwitchAutoTierStatus": {
+      "type": "string",
+      "enum": [
+        "unchanged",
+        "pending"
+      ],
+      "description": "Whether the requested preference was already effective or was accepted for later transactional activation.",
+      "title": "ModelSwitchAutoTierStatus",
+      "x-enumDescriptions": {
+        "unchanged": "The requested preference is already effective. No activation is pending for it, although this request may have cancelled an earlier unclaimed preference reported in `supersededAutoTier`.",
+        "pending": "The request was accepted but has not committed. A later user turn using the `auto` model must mint and validate the replacement before it becomes effective."
+      },
+      "stability": "experimental"
+    },
     "ModelSwitchConfirmation": {
       "type": "object",
       "properties": {
@@ -25862,6 +26451,18 @@
           "type": "string",
           "description": "Model selection id to switch to, as returned by `list`. A bare id (e.g. `claude-sonnet-4.6`) names a Copilot (CAPI) model; a provider-qualified id (`provider/id`, e.g. `acme/claude-sonnet`) targets a registry BYOK model."
         },
+        "autoTier": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/AutoTier",
+              "description": "Routing preference used when the session model is `auto`."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Optional Auto routing preference to stage atomically with selecting `auto`. Pass null to return to provider-default Auto routing. This field is rejected when `modelId` is not `auto`."
+        },
         "reasoningEffort": {
           "type": "string",
           "description": "Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. \"none\" disables reasoning. When omitted, no effort override is applied."
@@ -25960,6 +26561,10 @@
             "type": "string"
           },
           "description": "Deprecation warnings associated with the selected model or options."
+        },
+        "modelState": {
+          "$ref": "#/definitions/CurrentModel",
+          "description": "Authoritative model and Auto preference state after an immediate switch. For deferred switches this remains the current state until the queued change drains."
         }
       },
       "required": [],
@@ -28986,6 +29591,10 @@
           "type": "integer",
           "description": "Number of skills discovered and installed from the plugin"
         },
+        "stagingMode": {
+          "$ref": "#/definitions/PluginInstallStagingMode",
+          "description": "Where the completed plugin tree was staged before atomic promotion"
+        },
         "postInstallMessage": {
           "type": "string",
           "description": "Optional post-install message provided by the plugin (e.g. setup instructions)"
@@ -29003,6 +29612,19 @@
       "description": "Result of installing a plugin.",
       "title": "PluginInstallResult"
     },
+    "PluginInstallStagingMode": {
+      "type": "string",
+      "enum": [
+        "external",
+        "destination_sibling"
+      ],
+      "description": "Where completed plugin content was staged before atomic promotion.",
+      "title": "PluginInstallStagingMode",
+      "x-enumDescriptions": {
+        "external": "A sibling of the installed-plugins root, outside the recursively watched tree.",
+        "destination_sibling": "A sibling of the destination plugin directory, used when external staging is unavailable."
+      }
+    },
     "PluginList": {
       "type": "object",
       "properties": {
@@ -31227,6 +31849,25 @@
       "title": "ReleaseEventInterestParams",
       "stability": "experimental"
     },
+    "RemediationAction": {
+      "type": "string",
+      "enum": [
+        "sign_in",
+        "switch_account",
+        "show_account",
+        "review_sandbox_policy",
+        "allow_sandbox_outbound"
+      ],
+      "description": "What the user must do to recover from a failure, named as an action rather than as one client's affordance. The runtime cannot know which affordance a client offers — a slash command, a settings pane, a link — so the accompanying message stays host-agnostic and each client renders its own copy from this value. Absent when the runtime knows of no action the user can take.",
+      "title": "RemediationAction",
+      "x-enumDescriptions": {
+        "sign_in": "Authenticate again with the Copilot backend. The current credential is absent, expired, or rejected.",
+        "switch_account": "Authenticate as a different account. The current account exists but lacks access to the requested resource.",
+        "show_account": "Inspect which account is currently authenticated before deciding what to change.",
+        "review_sandbox_policy": "Review or widen the sandbox policy. The blocked path or host is named by the accompanying message or by the tool result the action arrived with.",
+        "allow_sandbox_outbound": "Permit outbound network access in the sandbox policy."
+      }
+    },
     "RemoteControlConfig": {
       "type": "object",
       "properties": {
@@ -31759,6 +32400,28 @@
           "type": "boolean",
           "description": "Whether to auto-add the current working directory to readwritePaths. Default: true."
         },
+        "sandboxMcpServers": {
+          "type": "boolean",
+          "description": "Whether MCP servers the session launches are confined by the sandbox. Only an explicit `false` opts out; doing so also lets remote-MCP egress leave the sandbox, so the flag and `enabled` are always read together. Ignored while `enabled` is false. Default: true (enabled by default; set to false to opt out)."
+        },
+        "sandboxLspServers": {
+          "type": "boolean",
+          "description": "Whether language servers the session launches are confined by the sandbox. Only an explicit `false` opts out. Ignored while `enabled` is false. Default: true (enabled by default; set to false to opt out)."
+        },
+        "allowBypass": {
+          "type": "boolean",
+          "description": "Whether the agent may request that an individual command run outside the sandbox, which the host then approves or denies through the usual permission flow. A host capability flag rather than part of the policy: it is stripped from the effective spawn policy and only has an effect while `enabled` is true. Fail-closed, unlike the opt-out flags on this object: omitting it offers no bypass. Default: false (opt-in)."
+        },
+        "managedMcpRoutingLocked": {
+          "type": "boolean",
+          "description": "Set by the runtime when a managed policy forced `sandboxMcpServers` on and took the local opt-out away. Provenance rather than policy: it lets a sandbox startup failure point at the administrator instead of a setting the next managed merge would override, and it is ignored when comparing two configs for change. Only the managed merge may set it; a caller-supplied value is stripped.",
+          "visibility": "internal"
+        },
+        "managedLspRoutingLocked": {
+          "type": "boolean",
+          "description": "The `sandboxLspServers` counterpart of `managedMcpRoutingLocked`.",
+          "visibility": "internal"
+        },
         "auth": {
           "$ref": "#/definitions/SandboxConfigAuth",
           "description": "Credential-injection capability flags."
@@ -34603,6 +35266,10 @@
           "type": "string",
           "description": "Identifier of the client driving the session."
         },
+        "authClientIdMetadataUrl": {
+          "type": "string",
+          "description": "OAuth Client ID Metadata Document URL used by this host for MCP authorization."
+        },
         "clientKind": {
           "type": "string",
           "description": "Structured client kind used for runtime behavior gates."
@@ -38198,6 +38865,10 @@
         "url": {
           "type": "string",
           "description": "Optional URL associated with the timeline entry."
+        },
+        "remediation": {
+          "$ref": "#/definitions/RemediationAction",
+          "description": "What the user must do to recover, when the entry reports a failure the runtime knows an action for. The `text` never names a client affordance, so a client that offers one renders it from this value."
         }
       },
       "required": [
@@ -38422,6 +39093,426 @@
       "description": "Progress snapshot for an agent task, with recent activity lines and optional latest intent.",
       "title": "TaskAgentProgress"
     },
+    "TaskClientActiveStatus": {
+      "type": "string",
+      "enum": [
+        "running",
+        "idle"
+      ],
+      "description": "Active status a client owner may publish with a progress update.",
+      "title": "TaskClientActiveStatus",
+      "x-enumDescriptions": {
+        "running": "The external owner is actively working.",
+        "idle": "The external owner is connected but waiting."
+      }
+    },
+    "TaskClientExecutionMode": {
+      "type": "string",
+      "enum": [
+        "background"
+      ],
+      "description": "Client-owned tasks always execute outside the runtime in background mode.",
+      "title": "TaskClientExecutionMode"
+    },
+    "TaskClientInfo": {
+      "type": "object",
+      "properties": {
+        "type": {
+          "$ref": "#/definitions/TaskClientType",
+          "const": "client",
+          "description": "Task kind"
+        },
+        "id": {
+          "type": "string",
+          "description": "Canonical runtime-generated task identifier"
+        },
+        "clientTaskId": {
+          "type": "string",
+          "description": "Owner-scoped registration and reclaim key"
+        },
+        "displayName": {
+          "type": "string",
+          "description": "Optional task display name"
+        },
+        "description": {
+          "type": "string",
+          "description": "Task description"
+        },
+        "status": {
+          "$ref": "#/definitions/TaskClientStatus",
+          "description": "Client task lifecycle status"
+        },
+        "owner": {
+          "$ref": "#/definitions/TaskClientOwner",
+          "description": "Public attribution and presence for the task owner"
+        },
+        "startedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp when the task started"
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of the latest accepted lifecycle change"
+        },
+        "completedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp when the task reached a terminal status"
+        },
+        "activeTimeMs": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Accumulated active execution time in milliseconds"
+        },
+        "activeStartedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp when the current active segment started"
+        },
+        "idleSince": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp when the connected owner entered idle status"
+        },
+        "orphanedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of the most recent orphan transition"
+        },
+        "reclaimedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of the most recent successful reclaim"
+        },
+        "executionMode": {
+          "$ref": "#/definitions/TaskClientExecutionMode",
+          "description": "Execution mode, which is always background for client-owned tasks"
+        },
+        "canCancel": {
+          "type": "boolean",
+          "description": "Whether the currently bound owner can receive a cancellation request"
+        },
+        "sequence": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Sequence number of the latest accepted owner update"
+        },
+        "result": {
+          "description": "Opaque successful terminal result supplied by the task owner",
+          "x-opaque-json": true
+        },
+        "error": {
+          "type": "string",
+          "description": "Human-readable terminal failure message"
+        },
+        "errorCode": {
+          "type": "string",
+          "description": "Optional owner-supplied terminal failure code"
+        },
+        "cancellationReason": {
+          "type": "string",
+          "description": "Human-readable reason for terminal cancellation"
+        }
+      },
+      "required": [
+        "type",
+        "id",
+        "clientTaskId",
+        "description",
+        "status",
+        "owner",
+        "startedAt",
+        "updatedAt",
+        "activeTimeMs",
+        "executionMode",
+        "canCancel",
+        "sequence"
+      ],
+      "additionalProperties": false,
+      "description": "Tracked client-owned task metadata.",
+      "title": "TaskClientInfo"
+    },
+    "TaskClientOwner": {
+      "type": "object",
+      "properties": {
+        "participantId": {
+          "type": "string",
+          "description": "Opaque session-scoped participant identity"
+        },
+        "joinId": {
+          "type": "string",
+          "description": "Opaque identity of the currently or most recently bound session join"
+        },
+        "kind": {
+          "$ref": "#/definitions/TaskClientOwnerKind",
+          "description": "Class of the task owner"
+        },
+        "displayName": {
+          "type": "string",
+          "description": "Display-only owner name"
+        },
+        "source": {
+          "type": "string",
+          "description": "Display-only owner source"
+        },
+        "presence": {
+          "$ref": "#/definitions/TaskClientOwnerPresence",
+          "description": "Whether this task's bound join is currently connected"
+        },
+        "disconnectedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp when the bound join disconnected"
+        }
+      },
+      "required": [
+        "participantId",
+        "joinId",
+        "kind",
+        "presence"
+      ],
+      "additionalProperties": false,
+      "description": "Public owner attribution for a client-owned task. Identifiers are opaque and never authorize requests.",
+      "title": "TaskClientOwner"
+    },
+    "TaskClientOwnerKind": {
+      "type": "string",
+      "enum": [
+        "extension",
+        "sdk"
+      ],
+      "description": "Connection class owning a client task.",
+      "title": "TaskClientOwnerKind",
+      "x-enumDescriptions": {
+        "extension": "A discovered extension connection owns the task.",
+        "sdk": "A generic SDK connection owns the task."
+      }
+    },
+    "TaskClientOwnerPresence": {
+      "type": "string",
+      "enum": [
+        "connected",
+        "disconnected"
+      ],
+      "description": "Presence of the task's bound join.",
+      "title": "TaskClientOwnerPresence",
+      "x-enumDescriptions": {
+        "connected": "The bound session join is connected.",
+        "disconnected": "The bound session join is disconnected."
+      }
+    },
+    "TaskClientProgress": {
+      "type": "object",
+      "properties": {
+        "type": {
+          "$ref": "#/definitions/TaskClientType",
+          "const": "client",
+          "description": "Progress kind"
+        },
+        "status": {
+          "$ref": "#/definitions/TaskClientStatus",
+          "description": "Current client task lifecycle status"
+        },
+        "sequence": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Sequence number of the latest accepted owner update"
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of the latest accepted lifecycle change"
+        },
+        "phase": {
+          "type": "string",
+          "description": "Current owner-defined progress phase"
+        },
+        "percentage": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100,
+          "description": "Current completion percentage from zero through one hundred"
+        },
+        "lastMessage": {
+          "type": "string",
+          "description": "Most recent nonempty progress message"
+        },
+        "recentActivity": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/TaskProgressLine",
+            "description": "Timestamped display line for task progress output or recent agent activity."
+          },
+          "description": "Recent server-timestamped progress messages"
+        }
+      },
+      "required": [
+        "type",
+        "status",
+        "sequence",
+        "updatedAt",
+        "recentActivity"
+      ],
+      "additionalProperties": false,
+      "description": "Generic progress for a client-owned task.",
+      "title": "TaskClientProgress"
+    },
+    "TaskClientStatus": {
+      "type": "string",
+      "enum": [
+        "running",
+        "idle",
+        "completed",
+        "failed",
+        "cancelled",
+        "orphaned"
+      ],
+      "description": "Lifecycle status of a client-owned task.",
+      "title": "TaskClientStatus",
+      "x-enumDescriptions": {
+        "running": "The external owner is actively working.",
+        "idle": "The external owner is connected but waiting.",
+        "completed": "The owner reported successful completion.",
+        "failed": "The owner reported failure.",
+        "cancelled": "The owner reported or confirmed cancellation.",
+        "orphaned": "The bound owner join disappeared; external executor state is unknown."
+      }
+    },
+    "TaskClientType": {
+      "type": "string",
+      "enum": [
+        "client"
+      ],
+      "description": "Discriminator for a client-owned task.",
+      "title": "TaskClientType"
+    },
+    "TaskClientUpdate": {
+      "anyOf": [
+        {
+          "type": "object",
+          "properties": {
+            "status": {
+              "$ref": "#/definitions/TaskClientActiveStatus",
+              "description": "Optional active status transition"
+            },
+            "message": {
+              "type": "string",
+              "description": "Optional progress message appended to recent activity when nonempty"
+            },
+            "phase": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Optional progress phase; null clears the current phase"
+            },
+            "percentage": {
+              "anyOf": [
+                {
+                  "type": "number"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Optional completion percentage; null clears the current percentage"
+            },
+            "kind": {
+              "type": "string",
+              "const": "progress",
+              "description": "Client task update variant discriminator."
+            }
+          },
+          "required": [
+            "kind"
+          ],
+          "additionalProperties": false,
+          "description": "Publishes nonterminal progress for a running or idle client task."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "message": {
+              "type": "string",
+              "description": "Optional final progress message"
+            },
+            "result": {
+              "description": "Optional opaque successful terminal result",
+              "x-opaque-json": true
+            },
+            "kind": {
+              "type": "string",
+              "const": "completed",
+              "description": "Client task update variant discriminator."
+            }
+          },
+          "required": [
+            "kind"
+          ],
+          "additionalProperties": false,
+          "description": "Reports successful terminal completion."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "message": {
+              "type": "string",
+              "description": "Optional final progress message"
+            },
+            "error": {
+              "type": "string",
+              "description": "Human-readable terminal failure message"
+            },
+            "code": {
+              "type": "string",
+              "description": "Optional owner-supplied terminal failure code"
+            },
+            "kind": {
+              "type": "string",
+              "const": "failed",
+              "description": "Client task update variant discriminator."
+            }
+          },
+          "required": [
+            "kind",
+            "error"
+          ],
+          "additionalProperties": false,
+          "description": "Reports terminal failure."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "message": {
+              "type": "string",
+              "description": "Optional final progress message"
+            },
+            "reason": {
+              "type": "string",
+              "description": "Optional human-readable cancellation reason"
+            },
+            "kind": {
+              "type": "string",
+              "const": "cancelled",
+              "description": "Client task update variant discriminator."
+            }
+          },
+          "required": [
+            "kind"
+          ],
+          "additionalProperties": false,
+          "description": "Reports terminal cancellation after external work stopped."
+        }
+      ],
+      "description": "Progress or terminal update for a client-owned task.",
+      "title": "TaskClientUpdate"
+    },
     "TaskCompleteData": {
       "type": "object",
       "properties": {
@@ -38522,14 +39613,33 @@
           "$ref": "#/definitions/TaskAgentInfo",
           "description": "Tracked background agent task metadata, including IDs, status, timing, agent type, prompt, model, result, and latest response."
         },
+        {
+          "$ref": "#/definitions/TaskClientInfo",
+          "description": "Tracked client-owned task metadata."
+        },
         {
           "$ref": "#/definitions/TaskShellInfo",
           "description": "Tracked shell task metadata, including ID, command, status, timing, attachment/execution mode, log path, and PID."
         }
       ],
-      "description": "Tracked task union returned by task APIs, containing either an agent task or a shell task.",
+      "description": "Tracked task union returned by task APIs, containing an agent, client, or shell task.",
       "title": "TaskInfo"
     },
+    "TaskKind": {
+      "type": "string",
+      "enum": [
+        "agent",
+        "shell",
+        "client"
+      ],
+      "description": "Closed set of public task kinds a connection can negotiate.",
+      "title": "TaskKind",
+      "x-enumDescriptions": {
+        "agent": "Runtime-owned background agent task.",
+        "shell": "Runtime-owned shell task.",
+        "client": "Client-owned externally executed task."
+      }
+    },
     "TaskList": {
       "type": "object",
       "properties": {
@@ -38537,7 +39647,7 @@
           "type": "array",
           "items": {
             "$ref": "#/definitions/TaskInfo",
-            "description": "Tracked task union returned by task APIs, containing either an agent task or a shell task."
+            "description": "Tracked task union returned by task APIs, containing an agent, client, or shell task."
           },
           "description": "Currently tracked tasks"
         }
@@ -38552,16 +39662,16 @@
     "TaskProgress": {
       "anyOf": [
         {
-          "anyOf": [
-            {
-              "$ref": "#/definitions/TaskAgentProgress",
-              "description": "Progress snapshot for an agent task, with recent activity lines and optional latest intent."
-            },
-            {
-              "$ref": "#/definitions/TaskShellProgress",
-              "description": "Progress snapshot for a shell task, with recent stdout/stderr output and optional process ID."
-            }
-          ]
+          "$ref": "#/definitions/TaskAgentProgress",
+          "description": "Progress snapshot for an agent task, with recent activity lines and optional latest intent."
+        },
+        {
+          "$ref": "#/definitions/TaskClientProgress",
+          "description": "Generic progress for a client-owned task."
+        },
+        {
+          "$ref": "#/definitions/TaskShellProgress",
+          "description": "Progress snapshot for a shell task, with recent stdout/stderr output and optional process ID."
         },
         {
           "type": "null"
@@ -38825,6 +39935,72 @@
       "description": "Refresh metadata for any detached background shells the runtime knows about. Use after a long pause to pick up exit/output state for shells running outside the agent loop.",
       "title": "TasksRefreshResult"
     },
+    "TasksRegisterRequest": {
+      "type": "object",
+      "properties": {
+        "type": {
+          "$ref": "#/definitions/TaskClientType",
+          "const": "client",
+          "description": "Task kind"
+        },
+        "clientTaskId": {
+          "type": "string",
+          "description": "Owner-scoped idempotency key used for registration and reclaim"
+        },
+        "description": {
+          "type": "string",
+          "description": "Human-readable description of the external work"
+        },
+        "displayName": {
+          "type": "string",
+          "description": "Optional short display name for the external work"
+        },
+        "cancellable": {
+          "type": "boolean",
+          "description": "Whether the owner supports runtime cancellation requests"
+        },
+        "expectedSequence": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Expected current sequence for idempotent registration or orphan reclaim"
+        }
+      },
+      "required": [
+        "type",
+        "clientTaskId",
+        "description",
+        "cancellable"
+      ],
+      "additionalProperties": false,
+      "description": "Registers or reclaims a client-owned task.",
+      "title": "TasksRegisterRequest",
+      "stability": "experimental"
+    },
+    "TasksRegisterResult": {
+      "type": "object",
+      "properties": {
+        "task": {
+          "$ref": "#/definitions/TaskClientInfo",
+          "description": "Authoritative registered or reclaimed task"
+        },
+        "created": {
+          "type": "boolean",
+          "description": "True only when this invocation created a new task"
+        },
+        "reclaimed": {
+          "type": "boolean",
+          "description": "True only when this invocation reclaimed an orphaned task"
+        }
+      },
+      "required": [
+        "task",
+        "created",
+        "reclaimed"
+      ],
+      "additionalProperties": false,
+      "description": "Result of registering or reclaiming a client-owned task.",
+      "title": "TasksRegisterResult"
+    },
     "TasksRemoveRequest": {
       "type": "object",
       "properties": {
@@ -38968,6 +40144,58 @@
         "cancelled": "The task was cancelled before completion."
       }
     },
+    "TasksUpdateRequest": {
+      "type": "object",
+      "properties": {
+        "id": {
+          "type": "string",
+          "description": "Canonical runtime-generated task identifier"
+        },
+        "sequence": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Owner update sequence to apply"
+        },
+        "update": {
+          "$ref": "#/definitions/TaskClientUpdate",
+          "description": "Progress or terminal update payload"
+        }
+      },
+      "required": [
+        "id",
+        "sequence",
+        "update"
+      ],
+      "additionalProperties": false,
+      "description": "Updates a client-owned task.",
+      "title": "TasksUpdateRequest",
+      "stability": "experimental"
+    },
+    "TasksUpdateResult": {
+      "type": "object",
+      "properties": {
+        "task": {
+          "$ref": "#/definitions/TaskClientInfo",
+          "description": "Authoritative task after processing the update"
+        },
+        "applied": {
+          "type": "boolean",
+          "description": "Whether this invocation changed task state"
+        },
+        "duplicate": {
+          "type": "boolean",
+          "description": "Whether this invocation repeated the latest accepted update"
+        }
+      },
+      "required": [
+        "task",
+        "applied",
+        "duplicate"
+      ],
+      "additionalProperties": false,
+      "description": "Result of publishing a client-owned task update.",
+      "title": "TasksUpdateResult"
+    },
     "TasksWaitForPendingResult": {
       "type": "object",
       "properties": {},