@github/copilot-sdk-win32-x64 1.0.15-preview.0 → 1.0.15-preview.1

package/schemas/api.schema.json

@@ -3386,8 +3386,15 @@
               "description": "Optional Auto routing preference to stage atomically with selecting `auto`. Pass null to return to provider-default Auto routing. This field is rejected when `modelId` is not `auto`."
             },
             "reasoningEffort": {
-              "type": "string",
-              "description": "Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. \"none\" disables reasoning. When omitted, no effort override is applied."
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. \"none\" disables reasoning. Pass null to clear any session effort override and fall back to the model's default. When omitted, the session's current effort is kept."
             },
             "reasoningSummary": {
               "$ref": "#/definitions/ReasoningSummary",
@@ -6593,6 +6600,359 @@
         }
       }
     },
+    "connectors": {
+      "getCapabilities": {
+        "rpcMethod": "session.connectors.getCapabilities",
+        "description": "Returns feature availability and bounded polling limits for the EXPERIMENTAL session connector API. This method never performs a Connector service request.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            }
+          },
+          "required": [
+            "sessionId"
+          ],
+          "additionalProperties": false,
+          "description": "Identifies the target session."
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorCapabilities",
+          "description": "Feature detection and hard polling limits for the EXPERIMENTAL session connector API."
+        },
+        "stability": "experimental"
+      },
+      "getStatus": {
+        "rpcMethod": "session.connectors.getStatus",
+        "description": "Returns authoritative session Connector state from current availability, pinned account selection, cached catalog, and live MCP projection without performing a Connector service request.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            }
+          },
+          "required": [
+            "sessionId"
+          ],
+          "additionalProperties": false,
+          "description": "Identifies the target session."
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorStatus",
+          "description": "Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included."
+        },
+        "stability": "experimental"
+      },
+      "list": {
+        "rpcMethod": "session.connectors.list",
+        "description": "Returns the cached Connector catalog for the pinned opaque account selection, fetching it only when this session has no cached catalog.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "accountId": {
+              "type": "string",
+              "description": "Opaque account selection ID previously returned by an account discovery API."
+            }
+          },
+          "required": [
+            "sessionId",
+            "accountId"
+          ],
+          "additionalProperties": false,
+          "description": "Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.",
+          "title": "ConnectorAccountRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorCatalogResult",
+          "description": "Validated Connector catalog snapshot cached by the session."
+        },
+        "stability": "experimental"
+      },
+      "refresh": {
+        "rpcMethod": "session.connectors.refresh",
+        "description": "Refreshes and validates the Connector catalog for the pinned opaque account selection.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "accountId": {
+              "type": "string",
+              "description": "Opaque account selection ID previously returned by an account discovery API."
+            }
+          },
+          "required": [
+            "sessionId",
+            "accountId"
+          ],
+          "additionalProperties": false,
+          "description": "Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.",
+          "title": "ConnectorAccountRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorCatalogResult",
+          "description": "Validated Connector catalog snapshot cached by the session."
+        },
+        "stability": "experimental"
+      },
+      "connect": {
+        "rpcMethod": "session.connectors.connect",
+        "description": "Initiates an idempotent Connector connection request without opening a browser. Returns connected when the service is immediately authoritative, consent_required with a validated URL, or pending with an opaque continuation ID.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "accountId": {
+              "type": "string",
+              "description": "Opaque account selection ID. It must match the account already pinned to the session, if any."
+            },
+            "connectorName": {
+              "type": "string",
+              "description": "Canonical Connector name from the current catalog."
+            }
+          },
+          "required": [
+            "sessionId",
+            "accountId",
+            "connectorName"
+          ],
+          "additionalProperties": false,
+          "description": "Selects one Connector and the pinned host-owned account used for its service and MCP authorization.",
+          "title": "ConnectorConnectRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorConnectResult",
+          "description": "Typed result of initiating or continuing a Connector connection."
+        },
+        "stability": "experimental"
+      },
+      "reconnect": {
+        "rpcMethod": "session.connectors.reconnect",
+        "description": "Re-initiates an idempotent Connector connection request without browser or UI effects, with the same typed outcomes as connect.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "accountId": {
+              "type": "string",
+              "description": "Opaque account selection ID. It must match the account already pinned to the session, if any."
+            },
+            "connectorName": {
+              "type": "string",
+              "description": "Canonical Connector name from the current catalog."
+            }
+          },
+          "required": [
+            "sessionId",
+            "accountId",
+            "connectorName"
+          ],
+          "additionalProperties": false,
+          "description": "Selects one Connector and the pinned host-owned account used for its service and MCP authorization.",
+          "title": "ConnectorConnectRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorConnectResult",
+          "description": "Typed result of initiating or continuing a Connector connection."
+        },
+        "stability": "experimental"
+      },
+      "continueConnection": {
+        "rpcMethod": "session.connectors.continueConnection",
+        "description": "Continues a pending Connector connection with caller-supplied attempt, interval, and deadline bounds. The runtime never opens the returned consent URL.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "continuationId": {
+              "type": "string",
+              "description": "Opaque continuation ID returned by connect, reconnect, or an earlier continuation."
+            },
+            "maxAttempts": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 60,
+              "description": "Maximum catalog requests made by this call. Must be between one and the capability limit."
+            },
+            "pollIntervalMs": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 30000,
+              "description": "Delay in milliseconds between attempts. Must not exceed the capability limit."
+            },
+            "deadlineMs": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 300000,
+              "description": "Maximum wall-clock duration in milliseconds for this call. Must be between one and the capability limit."
+            }
+          },
+          "required": [
+            "sessionId",
+            "continuationId",
+            "maxAttempts",
+            "pollIntervalMs",
+            "deadlineMs"
+          ],
+          "additionalProperties": false,
+          "description": "Explicitly bounded continuation of a pending Connector connection.",
+          "title": "ConnectorContinueRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorConnectResult",
+          "description": "Typed result of initiating or continuing a Connector connection."
+        },
+        "stability": "experimental"
+      },
+      "disconnect": {
+        "rpcMethod": "session.connectors.disconnect",
+        "description": "Disconnects one Connector for the pinned opaque account selection, refreshes the authoritative catalog, and removes its session-owned MCP projection.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "accountId": {
+              "type": "string",
+              "description": "Opaque account selection ID. It must match the account already pinned to the session, if any."
+            },
+            "connectorName": {
+              "type": "string",
+              "description": "Canonical Connector name from the current catalog."
+            }
+          },
+          "required": [
+            "sessionId",
+            "accountId",
+            "connectorName"
+          ],
+          "additionalProperties": false,
+          "description": "Selects one Connector and the pinned host-owned account used for its service and MCP authorization.",
+          "title": "ConnectorConnectRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorDisconnectResult",
+          "description": "Authoritative result after disconnect and MCP reconciliation."
+        },
+        "stability": "experimental"
+      },
+      "reconcile": {
+        "rpcMethod": "session.connectors.reconcile",
+        "description": "Reconciles the authoritative cached or freshly requested Connector catalog into the session Connector MCP projection and returns live status.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "accountId": {
+              "type": "string",
+              "description": "Opaque account selection ID. It must match the account already pinned to the session, if any."
+            },
+            "refreshCatalog": {
+              "type": "boolean",
+              "description": "When true, refresh the catalog before reconciling. A disabled Connector API performs no service request."
+            }
+          },
+          "required": [
+            "sessionId",
+            "accountId"
+          ],
+          "additionalProperties": false,
+          "description": "Requests authoritative Connector-to-MCP reconciliation for the pinned account.",
+          "title": "ConnectorReconcileRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorStatus",
+          "description": "Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included."
+        },
+        "stability": "experimental"
+      },
+      "reconcileForStartup": {
+        "rpcMethod": "session.connectors.reconcileForStartup",
+        "description": "Reconciles the authoritative Connector catalog into the session MCP projection during startup with a bounded deadline and fail-closed cleanup.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "accountId": {
+              "type": "string",
+              "description": "Opaque account selection ID previously returned by an account discovery API."
+            }
+          },
+          "required": [
+            "sessionId",
+            "accountId"
+          ],
+          "additionalProperties": false,
+          "description": "Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.",
+          "title": "ConnectorAccountRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorStatus",
+          "description": "Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included."
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "withdrawProjection": {
+        "rpcMethod": "session.connectors.withdrawProjection",
+        "description": "Removes the runtime-owned Connector MCP projection without changing service-side connections.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            }
+          },
+          "required": [
+            "sessionId"
+          ],
+          "additionalProperties": false,
+          "description": "Identifies the target session."
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorStatus",
+          "description": "Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included."
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      }
+    },
     "managedSettings": {
       "get": {
         "rpcMethod": "session.managedSettings.get",
@@ -7084,6 +7444,47 @@
           "description": "The selectable model entries synthesized for the models added by this call."
         },
         "stability": "experimental"
+      },
+      "sync": {
+        "rpcMethod": "session.provider.sync",
+        "description": "Atomically updates the session's BYOK provider and model registry by applying the supplied snapshot, replacing existing entries, updating models, or removing entries absent from the snapshot.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "providers": {
+              "type": "array",
+              "items": {
+                "$ref": "#/definitions/NamedProviderConfig",
+                "description": "External SDK input for a named custom model provider. Ingested by the native protocol boundary before host dispatch."
+              },
+              "description": "Named BYOK provider connection snapshot. Providers absent from this list are removed."
+            },
+            "models": {
+              "type": "array",
+              "items": {
+                "$ref": "#/definitions/ProviderModelConfig",
+                "description": "A BYOK model definition referencing a named provider."
+              },
+              "description": "BYOK model definition snapshot. Models absent from this list are removed."
+            }
+          },
+          "required": [
+            "sessionId"
+          ],
+          "additionalProperties": false,
+          "description": "Authoritative BYOK provider and model registry snapshot to apply atomically to the session.",
+          "title": "ProviderSyncRequest",
+          "stability": "experimental"
+        },
+        "result": {
+          "$ref": "#/definitions/ProviderSyncResult",
+          "description": "The selectable model entries and selection ids synthesized for the synchronized BYOK models."
+        },
+        "stability": "experimental"
       }
     },
     "options": {
@@ -7239,6 +7640,13 @@
               },
               "description": "Additional directories to search for skills."
             },
+            "ignoredSkillsLocations": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "description": "Skill scan directories and descendants excluded from discovery. Supports `~`-relative paths."
+            },
             "includedBuiltinSkills": {
               "anyOf": [
                 {
@@ -8843,7 +9251,7 @@
       },
       "resetSessionApprovals": {
         "rpcMethod": "session.permissions.resetSessionApprovals",
-        "description": "Clears session-scoped tool permission approvals.",
+        "description": "Clears session-scoped tool approvals and, for full resets, exact session-approved paths.",
         "params": {
           "type": "object",
           "properties": {
@@ -8853,14 +9261,14 @@
             },
             "includeLocation": {
               "type": "boolean",
-              "description": "Whether location-scoped approvals are cleared too. Defaults to `true`."
+              "description": "Whether location-scoped approvals and exact session-approved paths are cleared too. Defaults to `true`."
             }
           },
           "required": [
             "sessionId"
           ],
           "additionalProperties": false,
-          "description": "Clears session-scoped tool permission approvals, and optionally the location-scoped ones.",
+          "description": "Clears session-scoped tool approvals and optionally clears location-scoped approvals and exact session-approved paths.",
           "title": "PermissionsResetSessionApprovalsRequest",
           "stability": "experimental"
         },
@@ -8903,7 +9311,7 @@
       "paths": {
         "list": {
           "rpcMethod": "session.permissions.paths.list",
-          "description": "Returns the session's allowed directories and primary working directory.",
+          "description": "Returns the session's recursive directory grants, exact session-approved paths, and primary working directory.",
           "params": {
             "type": "object",
             "properties": {
@@ -8916,13 +9324,13 @@
               "sessionId"
             ],
             "additionalProperties": false,
-            "description": "No parameters; returns the session's allow-listed directories.",
+            "description": "No parameters; returns the session's recursive directory grants and exact session-approved paths.",
             "title": "PermissionsPathsListRequest",
             "stability": "experimental"
           },
           "result": {
             "$ref": "#/definitions/PermissionPathsList",
-            "description": "Snapshot of the session's allow-listed directories and primary working directory."
+            "description": "Snapshot of the session's recursive directory grants, exact session-approved paths, and primary working directory."
           },
           "stability": "experimental"
         },
@@ -12419,7 +12827,7 @@
     "gitHubTelemetry": {
       "event": {
         "rpcMethod": "gitHubTelemetry.event",
-        "description": "Forwards a single GitHub telemetry event to a host connection that opted into telemetry forwarding during the `server.connect` handshake. Opted-in connections receive every event the runtime emits after the handshake — across all sessions, plus sessionless events (for example, `server.sendTelemetry` calls with no session id).",
+        "description": "Forwards a single GitHub telemetry event to a host connection that opted into telemetry forwarding during the `server.connect` handshake. Opted-in connections receive their runtime host's events across all its sessions, its sessionless events (for example, `server.sendTelemetry`), and explicitly process-wide events. Events owned by another independently embedded runtime host are not forwarded to this connection.",
         "params": {
           "$ref": "#/definitions/GitHubTelemetryNotification",
           "description": "Payload for a `gitHubTelemetry.event` notification: a single GitHub telemetry event the runtime forwards to a host connection that opted into telemetry forwarding during the `server.connect` handshake."
@@ -12497,6 +12905,25 @@
       "description": "Result of aborting the current turn",
       "title": "AbortResult"
     },
+    "AcceptedEnqueueCommandResult": {
+      "type": "object",
+      "properties": {
+        "queued": {
+          "type": "boolean",
+          "const": true,
+          "description": "True because the command was accepted into the local execution queue."
+        },
+        "queueId": {
+          "type": "string",
+          "description": "Stable opaque ID of the queued command."
+        }
+      },
+      "required": [
+        "queued",
+        "queueId"
+      ],
+      "additionalProperties": false
+    },
     "AccountAllUsers": {
       "type": "object",
       "properties": {
@@ -12866,6 +13293,10 @@
           "$ref": "#/definitions/AgentModelPolicy",
           "description": "Whether authored models are preferences or required constraints."
         },
+        "reasoningEffort": {
+          "type": "string",
+          "description": "Authored reasoning effort for this agent. Applied on selection to models that support it; omitted means no authored preference."
+        },
         "mcpServers": {
           "type": "object",
           "additionalProperties": {
@@ -12893,7 +13324,7 @@
         "id"
       ],
       "additionalProperties": false,
-      "description": "Agent metadata, including identifiers, display details, source, tools, model, models, MCP servers, skills, and file path.",
+      "description": "Agent metadata, including identifiers, display details, source, tools, model, models, reasoning effort, MCP servers, skills, and file path.",
       "title": "AgentInfo"
     },
     "AgentInfoSource": {
@@ -12924,7 +13355,7 @@
           "type": "array",
           "items": {
             "$ref": "#/definitions/AgentInfo",
-            "description": "Agent metadata, including identifiers, display details, source, tools, model, models, MCP servers, skills, and file path."
+            "description": "Agent metadata, including identifiers, display details, source, tools, model, models, reasoning effort, MCP servers, skills, and file path."
           },
           "description": "Available agents"
         }
@@ -13135,26 +13566,26 @@
       "properties": {
         "enabled": {
           "type": "boolean",
-          "description": "Whether per-spawn log capture is on (false when env-disabled or open failed)"
+          "description": "Whether a canonical process log was discovered for this managed spawn"
         },
         "path": {
           "type": "string",
-          "description": "Absolute path to the per-spawn log file (only set when enabled)"
+          "description": "Absolute path to the managed spawn's process-<timestamp>-<pid>.log file (only set when enabled)"
         },
         "openError": {
           "type": "string",
-          "description": "Human-readable open failure message (only set when enabled === false AND the env-disable opt-out was NOT used)"
+          "description": "Why no canonical process log could be opened for this managed spawn (set only when enabled is false)"
         },
         "openErrorReason": {
           "$ref": "#/definitions/AgentRegistryLogCaptureOpenErrorReason",
-          "description": "Categorized reason for log-open failure"
+          "description": "Categorized reason no canonical process log could be opened (set only when enabled is false)"
         }
       },
       "required": [
         "enabled"
       ],
       "additionalProperties": false,
-      "description": "Per-spawn log-capture outcome; populated from spawnLiveTarget.",
+      "description": "Canonical process-log discovery outcome; populated from spawnLiveTarget.",
       "title": "AgentRegistryLogCapture"
     },
     "AgentRegistryLogCaptureOpenErrorReason": {
@@ -13164,7 +13595,7 @@
         "disk_full",
         "other"
       ],
-      "description": "Categorized reason for log-open failure",
+      "description": "Categorized reason no canonical process log could be opened",
       "title": "AgentRegistryLogCaptureOpenErrorReason",
       "x-enumDescriptions": {
         "permission": "Filesystem permission denied opening the log file",
@@ -13402,7 +13833,7 @@
           "type": "array",
           "items": {
             "$ref": "#/definitions/AgentInfo",
-            "description": "Agent metadata, including identifiers, display details, source, tools, model, models, MCP servers, skills, and file path."
+            "description": "Agent metadata, including identifiers, display details, source, tools, model, models, reasoning effort, MCP servers, skills, and file path."
           },
           "description": "Reloaded custom agents"
         }
@@ -15655,7 +16086,8 @@
         "multiple-transport-choice",
         "catalog-search-pagination",
         "trust-snapshot",
-        "catalog-selection"
+        "catalog-selection",
+        "catalog-search-credential-required"
       ],
       "description": "A wire feature a caller can require of the catalog surface, negotiated per request. A grant means the runtime understands the feature's contract, not that the deployment has enabled the operation; typed unavailable results report availability separately.",
       "title": "CatalogCapability",
@@ -15668,7 +16100,8 @@
         "multiple-transport-choice": "Understands plans that enumerate every eligible transport rather than a single preferred one.",
         "catalog-search-pagination": "Understands explicit numbered navigation and authority-reported pagination metadata with opaque tokens. Advertised and granted only when requested.",
         "trust-snapshot": "Understands versioned candidate trust snapshots. Protocol-3 callers must require this capability before the runtime adds the optional snapshot field.",
-        "catalog-selection": "Understands exact candidate selection through model-safe opaque references and host-only candidate-handle hand-off."
+        "catalog-selection": "Understands exact candidate selection through model-safe opaque references and host-only candidate-handle hand-off.",
+        "catalog-search-credential-required": "Requires an eligible credential for the selected GitHub.com account before search egress and prohibits client-side anonymous retry, including after HTTP 401 or 403. The credential is scoped to the fixed catalog authority without redirect forwarding. Neither a grant nor successful response proves that the authority accepted the identity or selected a particular backend. Preserve this requirement on every page and retry; callers omitting it retain optional authentication."
       }
     },
     "CatalogCapabilityId": {
@@ -17960,6 +18393,484 @@
       "description": "Repository associated with the connected remote session.",
       "title": "ConnectedRemoteSessionMetadataRepository"
     },
+    "ConnectorAccountRequest": {
+      "type": "object",
+      "properties": {
+        "accountId": {
+          "type": "string",
+          "description": "Opaque account selection ID previously returned by an account discovery API."
+        }
+      },
+      "required": [
+        "accountId"
+      ],
+      "additionalProperties": false,
+      "description": "Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.",
+      "title": "ConnectorAccountRequest",
+      "stability": "experimental"
+    },
+    "ConnectorAuthorizationRequirement": {
+      "type": "object",
+      "properties": {
+        "accountId": {
+          "type": "string",
+          "description": "Exact opaque account selection that made the Connector request."
+        },
+        "scope": {
+          "$ref": "#/definitions/ConnectorAuthorizationScope",
+          "description": "Stable OAuth scope the selected account must grant."
+        }
+      },
+      "required": [
+        "accountId",
+        "scope"
+      ],
+      "additionalProperties": false,
+      "description": "Account-targeted authorization update required by the Connector service. The account ID is an opaque host routing identifier; no credential is included.",
+      "title": "ConnectorAuthorizationRequirement",
+      "stability": "experimental"
+    },
+    "ConnectorAuthorizationScope": {
+      "type": "string",
+      "enum": [
+        "write_plugin_gateway_connections"
+      ],
+      "description": "Stable OAuth scope whose absence prevents Connector management.",
+      "title": "ConnectorAuthorizationScope",
+      "x-enumDescriptions": {
+        "write_plugin_gateway_connections": "Allows Copilot to manage Connector connections and use their tools."
+      },
+      "stability": "experimental"
+    },
+    "ConnectorAvailability": {
+      "type": "string",
+      "enum": [
+        "enabled",
+        "disabled",
+        "unavailable"
+      ],
+      "description": "Availability of the EXPERIMENTAL session connector API.",
+      "title": "ConnectorAvailability",
+      "x-enumDescriptions": {
+        "enabled": "The resolved Connector feature is enabled and Connector requests are permitted.",
+        "disabled": "The resolved Connector feature is off. No Connector service request is made while disabled.",
+        "unavailable": "The session has no eligible host-owned GitHub account or does not support local Connector projection."
+      },
+      "stability": "experimental"
+    },
+    "ConnectorCapabilities": {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Connector API contract version."
+        },
+        "availability": {
+          "$ref": "#/definitions/ConnectorAvailability",
+          "description": "Current session availability. Disabled availability is reported without making a Connector request."
+        },
+        "consentContinuation": {
+          "type": "boolean",
+          "description": "Whether connect and reconnect can return an opaque continuation for bounded consent polling."
+        },
+        "opaqueAccountSelection": {
+          "type": "boolean",
+          "description": "Whether callers select a host-owned GitHub account through an opaque selection ID rather than supplying a provider token."
+        },
+        "maxPollAttempts": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Maximum accepted polling attempts for one continuation call."
+        },
+        "maxPollIntervalMs": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Maximum accepted delay in milliseconds between polling attempts."
+        },
+        "maxDeadlineMs": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Maximum accepted wall-clock deadline in milliseconds for one continuation call."
+        }
+      },
+      "required": [
+        "apiVersion",
+        "availability",
+        "consentContinuation",
+        "opaqueAccountSelection",
+        "maxPollAttempts",
+        "maxPollIntervalMs",
+        "maxDeadlineMs"
+      ],
+      "additionalProperties": false,
+      "description": "Feature detection and hard polling limits for the EXPERIMENTAL session connector API.",
+      "title": "ConnectorCapabilities",
+      "stability": "experimental"
+    },
+    "ConnectorCatalogEntry": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "Canonical Connector name used by lifecycle methods."
+        },
+        "displayName": {
+          "type": "string",
+          "description": "Untrusted display label from the service."
+        },
+        "description": {
+          "type": "string",
+          "description": "Untrusted service description, when present."
+        },
+        "status": {
+          "$ref": "#/definitions/ConnectorCatalogStatus",
+          "description": "Current authoritative service connection state."
+        },
+        "runtimeServerIds": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Opaque stable runtime IDs currently projected into the session for this Connector."
+        }
+      },
+      "required": [
+        "name",
+        "displayName",
+        "status",
+        "runtimeServerIds"
+      ],
+      "additionalProperties": false,
+      "description": "Credential-free Connector catalog entry.",
+      "title": "ConnectorCatalogEntry",
+      "stability": "experimental"
+    },
+    "ConnectorCatalogResult": {
+      "type": "object",
+      "properties": {
+        "revision": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Monotonically increasing session-local catalog revision."
+        },
+        "refreshedAtMs": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Unix epoch milliseconds when this snapshot was accepted."
+        },
+        "connectors": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/ConnectorCatalogEntry",
+            "description": "Credential-free Connector catalog entry."
+          },
+          "description": "Validated catalog entries in service order."
+        }
+      },
+      "required": [
+        "revision",
+        "refreshedAtMs",
+        "connectors"
+      ],
+      "additionalProperties": false,
+      "description": "Validated Connector catalog snapshot cached by the session.",
+      "title": "ConnectorCatalogResult",
+      "stability": "experimental"
+    },
+    "ConnectorCatalogStatus": {
+      "type": "string",
+      "enum": [
+        "not_connected",
+        "pending",
+        "connected",
+        "error",
+        "unknown"
+      ],
+      "description": "Authoritative service connection state for one Connector.",
+      "title": "ConnectorCatalogStatus",
+      "x-enumDescriptions": {
+        "not_connected": "The Connector is available but not connected.",
+        "pending": "The Connector service is still completing connection or consent.",
+        "connected": "The Connector is connected and may contribute MCP servers.",
+        "error": "The Connector service reports an unusable connection.",
+        "unknown": "The service returned a future or unrecognized state."
+      },
+      "stability": "experimental"
+    },
+    "ConnectorConnectRequest": {
+      "type": "object",
+      "properties": {
+        "accountId": {
+          "type": "string",
+          "description": "Opaque account selection ID. It must match the account already pinned to the session, if any."
+        },
+        "connectorName": {
+          "type": "string",
+          "description": "Canonical Connector name from the current catalog."
+        }
+      },
+      "required": [
+        "accountId",
+        "connectorName"
+      ],
+      "additionalProperties": false,
+      "description": "Selects one Connector and the pinned host-owned account used for its service and MCP authorization.",
+      "title": "ConnectorConnectRequest",
+      "stability": "experimental"
+    },
+    "ConnectorConnectResult": {
+      "anyOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "connected",
+              "description": "The service is connected and the session MCP graph was reconciled."
+            },
+            "status": {
+              "$ref": "#/definitions/ConnectorStatus",
+              "description": "Fresh authoritative Connector state after MCP reconciliation."
+            }
+          },
+          "required": [
+            "kind",
+            "status"
+          ],
+          "additionalProperties": false,
+          "description": "The service is connected and the session MCP graph was reconciled.",
+          "stability": "experimental"
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "consent_required",
+              "description": "Host-owned consent is required before bounded continuation can complete."
+            },
+            "consentUrl": {
+              "type": "string",
+              "description": "Validated HTTPS consent URL. The runtime does not open it."
+            },
+            "continuationId": {
+              "type": "string",
+              "description": "Opaque ID accepted by continueConnection."
+            }
+          },
+          "required": [
+            "kind",
+            "consentUrl",
+            "continuationId"
+          ],
+          "additionalProperties": false,
+          "description": "Host-owned consent is required before bounded continuation can complete.",
+          "stability": "experimental"
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "pending",
+              "description": "The service is still completing the connection without a consent URL."
+            },
+            "continuationId": {
+              "type": "string",
+              "description": "Opaque ID accepted by continueConnection."
+            }
+          },
+          "required": [
+            "kind",
+            "continuationId"
+          ],
+          "additionalProperties": false,
+          "description": "The service is still completing the connection without a consent URL.",
+          "stability": "experimental"
+        }
+      ],
+      "description": "Typed result of initiating or continuing a Connector connection.",
+      "title": "ConnectorConnectResult",
+      "stability": "experimental"
+    },
+    "ConnectorContinueRequest": {
+      "type": "object",
+      "properties": {
+        "continuationId": {
+          "type": "string",
+          "description": "Opaque continuation ID returned by connect, reconnect, or an earlier continuation."
+        },
+        "maxAttempts": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 60,
+          "description": "Maximum catalog requests made by this call. Must be between one and the capability limit."
+        },
+        "pollIntervalMs": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 30000,
+          "description": "Delay in milliseconds between attempts. Must not exceed the capability limit."
+        },
+        "deadlineMs": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 300000,
+          "description": "Maximum wall-clock duration in milliseconds for this call. Must be between one and the capability limit."
+        }
+      },
+      "required": [
+        "continuationId",
+        "maxAttempts",
+        "pollIntervalMs",
+        "deadlineMs"
+      ],
+      "additionalProperties": false,
+      "description": "Explicitly bounded continuation of a pending Connector connection.",
+      "title": "ConnectorContinueRequest",
+      "stability": "experimental"
+    },
+    "ConnectorDisconnectResult": {
+      "type": "object",
+      "properties": {
+        "disconnected": {
+          "type": "boolean",
+          "description": "Whether the service accepted the idempotent disconnect."
+        },
+        "status": {
+          "$ref": "#/definitions/ConnectorStatus",
+          "description": "Fresh authoritative session state after removing Connector-owned MCP servers."
+        }
+      },
+      "required": [
+        "disconnected",
+        "status"
+      ],
+      "additionalProperties": false,
+      "description": "Authoritative result after disconnect and MCP reconciliation.",
+      "title": "ConnectorDisconnectResult",
+      "stability": "experimental"
+    },
+    "ConnectorMcpStatus": {
+      "type": "string",
+      "enum": [
+        "connected",
+        "pending",
+        "needs_auth",
+        "failed",
+        "stopped",
+        "disabled",
+        "not_configured"
+      ],
+      "description": "Live MCP status of one Connector-owned runtime server.",
+      "title": "ConnectorMcpStatus",
+      "x-enumDescriptions": {
+        "connected": "The server is connected and its tools are available.",
+        "pending": "The server connection is still being established.",
+        "needs_auth": "The server requires refreshed GitHub authorization.",
+        "failed": "The server failed to connect or initialize.",
+        "stopped": "The server is intentionally stopped, including when managed policy blocks it.",
+        "disabled": "The server is configured but explicitly disabled.",
+        "not_configured": "The Connector currently has no live server configuration."
+      },
+      "stability": "experimental"
+    },
+    "ConnectorReconcileRequest": {
+      "type": "object",
+      "properties": {
+        "accountId": {
+          "type": "string",
+          "description": "Opaque account selection ID. It must match the account already pinned to the session, if any."
+        },
+        "refreshCatalog": {
+          "type": "boolean",
+          "description": "When true, refresh the catalog before reconciling. A disabled Connector API performs no service request."
+        }
+      },
+      "required": [
+        "accountId"
+      ],
+      "additionalProperties": false,
+      "description": "Requests authoritative Connector-to-MCP reconciliation for the pinned account.",
+      "title": "ConnectorReconcileRequest",
+      "stability": "experimental"
+    },
+    "ConnectorRuntimeStatus": {
+      "type": "object",
+      "properties": {
+        "runtimeServerId": {
+          "type": "string",
+          "description": "Opaque runtime server ID."
+        },
+        "connectorName": {
+          "type": "string",
+          "description": "Canonical Connector name that owns this server."
+        },
+        "status": {
+          "$ref": "#/definitions/ConnectorMcpStatus",
+          "description": "Current live MCP host status."
+        }
+      },
+      "required": [
+        "runtimeServerId",
+        "connectorName",
+        "status"
+      ],
+      "additionalProperties": false,
+      "description": "Live status of one session-owned MCP projection.",
+      "title": "ConnectorRuntimeStatus",
+      "stability": "experimental"
+    },
+    "ConnectorStatus": {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Connector API contract version."
+        },
+        "availability": {
+          "$ref": "#/definitions/ConnectorAvailability",
+          "description": "Current feature and session availability."
+        },
+        "accountId": {
+          "type": "string",
+          "description": "Opaque account selection pinned to this session, when one has been selected."
+        },
+        "catalog": {
+          "$ref": "#/definitions/ConnectorCatalogResult",
+          "description": "Latest validated catalog snapshot, when available."
+        },
+        "authorizationRequirement": {
+          "$ref": "#/definitions/ConnectorAuthorizationRequirement",
+          "description": "Exact selected account and stable scope requiring an authorization update, when proven by the Connector service."
+        },
+        "runtimeServers": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/ConnectorRuntimeStatus",
+            "description": "Live status of one session-owned MCP projection."
+          },
+          "description": "Live MCP status for every Connector-owned runtime server."
+        },
+        "pendingConnections": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Number of active opaque connection continuations."
+        }
+      },
+      "required": [
+        "apiVersion",
+        "availability",
+        "runtimeServers",
+        "pendingConnections"
+      ],
+      "additionalProperties": false,
+      "description": "Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.",
+      "title": "ConnectorStatus",
+      "stability": "experimental"
+    },
     "ConnectRemoteSessionParams": {
       "type": "object",
       "properties": {
@@ -17980,7 +18891,7 @@
       "properties": {
         "enableGitHubTelemetryForwarding": {
           "type": "boolean",
-          "description": "Opt this connection in to GitHub telemetry forwarding for its lifetime. When set, the runtime forwards every internal telemetry event it emits — across all sessions, plus sessionless events — to this connection over the `gitHubTelemetry.event` notification. Regular events are also written to the runtime's normal GitHub/CTS path (dual-write); host-only compatibility events are forward-only and intentionally skip that path. Intended for first-party hosts that re-emit the events into their own telemetry stores. Both unrestricted and restricted events are forwarded, each tagged with a `restricted` discriminator; a backstop drops restricted events when restricted telemetry is disabled — using the process-global gate for ordinary events and an explicit session-scoped decision for host-only events."
+          "description": "Opt this connection in to GitHub telemetry forwarding for its lifetime. When set, the runtime forwards this host's telemetry across all its sessions, its sessionless events, and explicitly process-wide events over the `gitHubTelemetry.event` notification. Connections intentionally sharing one server receive that server's events; independently embedded runtime hosts do not receive each other's host-owned events. Regular events are also written to the runtime's normal GitHub/CTS path (dual-write); host-only compatibility events are forward-only and intentionally skip that path. Intended for first-party hosts that re-emit the events into their own telemetry stores. Both unrestricted and restricted events are forwarded, each tagged with a `restricted` discriminator; a backstop drops restricted events when restricted telemetry is disabled — using the process-global gate for ordinary events and an explicit session-scoped decision for host-only events."
         },
         "clientInfo": {
           "$ref": "#/definitions/ConnectClientInfo",
@@ -18321,6 +19232,36 @@
           ],
           "description": "Organizations the user belongs to, each with an optional ID, login, and display name."
         },
+        "enterprise_list": {
+          "anyOf": [
+            {
+              "type": "array",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "object",
+                    "properties": {
+                      "id": {
+                        "type": "integer",
+                        "minimum": 0,
+                        "maximum": 9007199254740991,
+                        "description": "JavaScript-safe numeric database ID of the enterprise."
+                      }
+                    },
+                    "additionalProperties": false
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              }
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Enterprises that provide the user's Copilot license; malformed entries are normalized to null or ID-less shapes."
+        },
         "codex_agent_enabled": {
           "type": "boolean",
           "description": "Whether the Codex agent is enabled for the user."
@@ -18400,24 +19341,6 @@
         "cli_remote_control_enabled": {
           "type": "boolean",
           "description": "Whether CLI remote control is enabled for the user."
-        },
-        "enterprise_list": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "properties": {
-              "id": {
-                "type": "integer",
-                "minimum": 0,
-                "description": "Numeric database ID of the enterprise."
-              }
-            },
-            "required": [
-              "id"
-            ],
-            "additionalProperties": false
-          },
-          "description": "Enterprises that provide the user's Copilot license, each with a stable numeric ID."
         }
       },
       "additionalProperties": false,
@@ -19442,17 +20365,14 @@
       "stability": "experimental"
     },
     "EnqueueCommandResult": {
-      "type": "object",
-      "properties": {
-        "queued": {
-          "type": "boolean",
-          "description": "True when the command was accepted into the local execution queue. False when the call targets a session that does not support local command queueing (e.g. remote sessions)."
+      "anyOf": [
+        {
+          "$ref": "#/definitions/AcceptedEnqueueCommandResult"
+        },
+        {
+          "$ref": "#/definitions/UnsupportedEnqueueCommandResult"
         }
-      },
-      "required": [
-        "queued"
       ],
-      "additionalProperties": false,
       "description": "Indicates whether the command was accepted into the local execution queue.",
       "title": "EnqueueCommandResult"
     },
@@ -29239,6 +30159,10 @@
           "type": "boolean",
           "description": "Whether this model supports vision/image input"
         },
+        "toolCalls": {
+          "type": "boolean",
+          "description": "Whether this model supports canonical tool calling"
+        },
         "reasoningEffort": {
           "type": "boolean",
           "description": "Whether this model supports reasoning effort configuration"
@@ -29259,6 +30183,10 @@
           "type": "boolean",
           "description": "Whether this model supports vision/image input"
         },
+        "toolCalls": {
+          "type": "boolean",
+          "description": "Whether this model supports canonical tool calling"
+        },
         "reasoningEffort": {
           "type": "boolean",
           "description": "Whether this model supports reasoning effort configuration"
@@ -29725,8 +30653,15 @@
           "description": "Optional Auto routing preference to stage atomically with selecting `auto`. Pass null to return to provider-default Auto routing. This field is rejected when `modelId` is not `auto`."
         },
         "reasoningEffort": {
-          "type": "string",
-          "description": "Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. \"none\" disables reasoning. When omitted, no effort override is applied."
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. \"none\" disables reasoning. Pass null to clear any session effort override and fall back to the model's default. When omitted, the session's current effort is kept."
         },
         "reasoningSummary": {
           "$ref": "#/definitions/ReasoningSummary",
@@ -31674,6 +32609,14 @@
           },
           "description": "All directories currently allowed for tool access on this session."
         },
+        "sessionApprovedPaths": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "default": [],
+          "description": "Exact paths approved for this session without recursively allowing their descendants."
+        },
         "primary": {
           "type": "string",
           "description": "The primary working directory for this session."
@@ -31684,7 +32627,7 @@
         "primary"
       ],
       "additionalProperties": false,
-      "description": "Snapshot of the session's allow-listed directories and primary working directory.",
+      "description": "Snapshot of the session's recursive directory grants, exact session-approved paths, and primary working directory.",
       "title": "PermissionPathsList"
     },
     "PermissionPathsUpdatePrimaryParams": {
@@ -32620,7 +33563,7 @@
       "type": "object",
       "properties": {},
       "additionalProperties": false,
-      "description": "No parameters; returns the session's allow-listed directories.",
+      "description": "No parameters; returns the session's recursive directory grants and exact session-approved paths.",
       "title": "PermissionsPathsListRequest",
       "stability": "experimental"
     },
@@ -32652,11 +33595,11 @@
       "properties": {
         "includeLocation": {
           "type": "boolean",
-          "description": "Whether location-scoped approvals are cleared too. Defaults to `true`."
+          "description": "Whether location-scoped approvals and exact session-approved paths are cleared too. Defaults to `true`."
         }
       },
       "additionalProperties": false,
-      "description": "Clears session-scoped tool permission approvals, and optionally the location-scoped ones.",
+      "description": "Clears session-scoped tool approvals and optionally clears location-scoped approvals and exact session-approved paths.",
       "title": "PermissionsResetSessionApprovalsRequest",
       "stability": "experimental"
     },
@@ -34043,6 +34986,13 @@
         "systemMessage": {
           "$ref": "#/definitions/ProtocolSystemMessageConfig",
           "description": "System-message configuration used when the runtime builds the standard prompt for this provider-qualified model, including general-purpose subagents. It uses the same object hierarchy as session-level systemMessage configuration, except transform actions are rejected because the current callback protocol is not model-scoped. When present, it overrides the session-wide configuration on those prompt paths. Selected custom-agent and specialized-subagent prompts remain authoritative."
+        },
+        "metadata": {
+          "type": "object",
+          "additionalProperties": {
+            "x-opaque-json": true
+          },
+          "description": "Provider-published model metadata, preserved verbatim as the public Model.metadata object."
         }
       },
       "required": [
@@ -34082,6 +35032,62 @@
       "description": "Short-lived, rotating credential the caller must send on every request, in addition to `apiKey` if one is present. Omitted when the endpoint does not require one.",
       "title": "ProviderSessionToken"
     },
+    "ProviderSyncRequest": {
+      "type": "object",
+      "properties": {
+        "providers": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/NamedProviderConfig",
+            "description": "External SDK input for a named custom model provider. Ingested by the native protocol boundary before host dispatch."
+          },
+          "description": "Named BYOK provider connection snapshot. Providers absent from this list are removed."
+        },
+        "models": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/ProviderModelConfig",
+            "description": "A BYOK model definition referencing a named provider."
+          },
+          "description": "BYOK model definition snapshot. Models absent from this list are removed."
+        }
+      },
+      "additionalProperties": false,
+      "description": "Authoritative BYOK provider and model registry snapshot to apply atomically to the session.",
+      "title": "ProviderSyncRequest",
+      "stability": "experimental"
+    },
+    "ProviderSyncResult": {
+      "type": "object",
+      "properties": {
+        "models": {
+          "type": "array",
+          "items": {
+            "x-opaque-json": true
+          },
+          "description": "Synthesized selectable model entries for the synchronized BYOK models."
+        },
+        "selectionIds": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Provider-qualified model selection ids present after synchronization."
+        },
+        "modelDeselected": {
+          "type": "boolean",
+          "description": "True when synchronization withdrew the selected host-managed model, leaving the session with no explicit selection, so ordinary model resolution picks the session default. Synchronization never promotes a surviving host model in its place: publishing a model offers it, and the choice of which model to use stays with the user."
+        }
+      },
+      "required": [
+        "models",
+        "selectionIds"
+      ],
+      "additionalProperties": false,
+      "description": "The selectable model entries and selection ids synthesized for the synchronized BYOK models.",
+      "title": "ProviderSyncResult",
+      "stability": "experimental"
+    },
     "ProviderTokenAcquireRequest": {
       "type": "object",
       "properties": {
@@ -37044,7 +38050,7 @@
           "type": "array",
           "items": {
             "$ref": "#/definitions/AgentInfo",
-            "description": "Agent metadata, including identifiers, display details, source, tools, model, models, MCP servers, skills, and file path."
+            "description": "Agent metadata, including identifiers, display details, source, tools, model, models, reasoning effort, MCP servers, skills, and file path."
           },
           "description": "All discovered agents across all sources"
         }
@@ -39287,6 +40293,13 @@
           },
           "description": "Additional directories to search for skills."
         },
+        "ignoredSkillsLocations": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Skill scan directories and descendants excluded from discovery. Supports `~`-relative paths."
+        },
         "enableSkills": {
           "type": "boolean",
           "description": "Whether skill loading is enabled. When omitted, an SDK skill provider enables skills by default."
@@ -41380,6 +42393,13 @@
           },
           "description": "Additional directories to search for skills."
         },
+        "ignoredSkillsLocations": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Skill scan directories and descendants excluded from discovery. Supports `~`-relative paths."
+        },
         "includedBuiltinSkills": {
           "anyOf": [
             {
@@ -42252,6 +43272,13 @@
           },
           "description": "Optional list of additional skill directory paths to include"
         },
+        "ignoredSkillsLocations": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Optional skill scan paths to exclude from discovery."
+        },
         "excludeHostSkills": {
           "type": "boolean",
           "description": "When true, omit skills from the host's global sources (personal, custom, plugin, and built-in), returning only project-scoped skills. For multitenant deployments."
@@ -42287,6 +43314,13 @@
           },
           "description": "Optional list of project directory paths. When omitted or empty, only personal and custom directories are returned."
         },
+        "ignoredSkillsLocations": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Optional skill scan paths to exclude from discovery."
+        },
         "excludeHostSkills": {
           "type": "boolean",
           "description": "When true, omit the host's personal and custom skill directories, leaving only project directories. For multitenant deployments."
@@ -43007,6 +44041,10 @@
         "isStatic": {
           "type": "boolean",
           "description": "Whether the block is static and may be cached independently of dynamic prompt content."
+        },
+        "cacheBreakpoint": {
+          "type": "boolean",
+          "description": "Whether providers with explicit prompt caching should place a cache breakpoint after this block."
         }
       },
       "required": [
@@ -44412,6 +45450,11 @@
         "instructions": {
           "type": "string",
           "description": "Optional instructions for how to use this tool effectively"
+        },
+        "safeForTelemetry": {
+          "$ref": "#/definitions/BuiltinToolSafeForTelemetry",
+          "description": "Telemetry-safety policy for the tool name and input names, not input values. Treat omitted metadata as unsafe.",
+          "stability": "experimental"
         }
       },
       "required": [
@@ -45766,6 +46809,25 @@
       "description": "User response for a pending user-input request, with answer text and whether it was typed freeform.",
       "title": "UIUserInputResponse"
     },
+    "UnsupportedEnqueueCommandResult": {
+      "type": "object",
+      "properties": {
+        "queued": {
+          "type": "boolean",
+          "const": false,
+          "description": "False because the target session does not support local command queueing (e.g. remote sessions)."
+        },
+        "queueId": {
+          "type": "null",
+          "default": null,
+          "description": "Legacy null queue ID accepted for compatibility with older runtimes."
+        }
+      },
+      "required": [
+        "queued"
+      ],
+      "additionalProperties": false
+    },
     "UpdateSubagentSettingsRequest": {
       "type": "object",
       "properties": {