@github/copilot-sdk-win32-x64 1.0.15-preview.0 → 1.0.15-preview.2

package/copilot-sdk/generated/rpc.d.ts

@@ -3,7 +3,7 @@
  * Generated from: api.schema.json
  */
 import type { MessageConnection } from "vscode-jsonrpc/node.js";
-import type { AbortReason, AgentModelPolicy, Attachment, AutoTier, ContextTier, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, McpOauthHttpResponse, McpOauthWWWAuthenticateParams, McpServerMetadata, McpServerSource, McpServerStatus, ModelChangeSource, PermissionDecisionSource, PermissionMode, PermissionPromptRequest, PermissionRule, ReasoningSummary, RemediationAction, SessionEvent, SessionLimitsConfig, SessionMode, ShutdownType, SkillSource, TaskCompleteData, TaskCompletionOutcome, UserToolSessionApproval, Verbosity } from "./session-events.js";
+import type { AbortReason, AgentModelPolicy, Attachment, AutoTier, ContextTier, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, IndexedSearchState, ManagedSettingsResolvedData, McpOauthHttpResponse, McpOauthWWWAuthenticateParams, McpServerMetadata, McpServerSource, McpServerStatus, ModelChangeSource, PermissionDecisionSource, PermissionMode, PermissionPromptRequest, PermissionRule, ReasoningSummary, RemediationAction, SessionEvent, SessionLimitsConfig, SessionMode, ShutdownType, SkillSource, TaskCompleteData, TaskCompletionOutcome, UserToolSessionApproval, Verbosity } from "./session-events.js";
 /** A value that can be represented losslessly on the SDK JSON wire. */
 export type JsonValue = null | boolean | number | string | JsonValue[] | {
     [key: string]: JsonValue;
@@ -38,8 +38,10 @@ export type AdaptiveThinkingSupport =
 "unsupported"
 /** The model accepts adaptive thinking but also accepts thinking.type='enabled' */
  | "optional"
-/** The model only accepts adaptive thinking and rejects thinking.type='enabled' with HTTP 400 (e.g. opus-4.7/4.8) */
- | "required";
+/** The model defaults to adaptive thinking and rejects thinking.type='enabled' with HTTP 400, but still accepts thinking.type='disabled' (e.g. opus-4.7/4.8/5, sonnet-5) */
+ | "required"
+/** The model accepts only thinking.type='adaptive'; 'enabled', 'disabled', and an omitted thinking block all fail with HTTP 400 (e.g. fable, mythos) */
+ | "adaptive_only";
 /**
  * Which tier this directory belongs to
  *
@@ -150,7 +152,7 @@ export type AgentRegistryLiveTargetEntryLastTerminalEvent =
 /** Last turn was aborted (e.g. user interrupted) */
  | "abort";
 /**
- * Categorized reason for log-open failure
+ * Categorized reason no canonical process log could be opened
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AgentRegistryLogCaptureOpenErrorReason".
@@ -324,13 +326,53 @@ export type CardDigestAlgorithm = "sha256-rfc8785";
 /** @experimental */
 export type CardDigestValue = string;
 /**
- * Where a candidate's card came from. Exactly one of a URL or embedded data: the union has no variant carrying both, and no variant carrying neither, so the rule holds structurally rather than by validation.
+ * Discriminator for an Agent Plugin candidate
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogCandidateSource".
+ * via the `definition` "CatalogAgentPluginCandidateKind".
  */
 /** @experimental */
-export type CatalogCandidateSource = CatalogCandidateSourceUrl | CatalogCandidateSourceEmbedded;
+export type CatalogAgentPluginCandidateKind = "plugin";
+/**
+ * Canonical Agent Plugin media type
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginMediaType".
+ */
+/** @experimental */
+export type CatalogAgentPluginMediaType = 
+/** A GitHub Copilot Agent Plugin descriptor. */
+"application/vnd.github.copilot-plugin";
+/**
+ * Canonical catalogue resource identity. The runtime rewrites accepted urn:ai and urn:air identifiers to urn:air, lowercases the authority, and preserves the remaining resource components.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogResourceIdentity".
+ */
+/** @experimental */
+export type CatalogResourceIdentity = string;
+/**
+ * Bounded source-declared resource version, preserved exactly after validation and never inferred.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogResourceVersion".
+ */
+/** @experimental */
+export type CatalogResourceVersion = string;
+/**
+ * Explicit Agent Plugin compatibility declared by exact catalog tags. Clients must not infer these values from display text or other metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginCompatibilityTag".
+ */
+/** @experimental */
+export type CatalogAgentPluginCompatibilityTag = 
+/** The plugin contributes at least one GitHub Copilot Canvas. */
+"canvas"
+/** The plugin depends on Canvas for its intended functionality. */
+ | "canvas-only"
+/** The plugin targets GitHub Copilot. */
+ | "github-copilot";
 /**
  * A versioned, bounded trust observation carried unchanged with a catalog candidate and its private handle context. Current observations require a recognised T1/T2 tier; every non-current state structurally forbids a tier. Eligibility remains `unknown` while Agent Finder supplies no exposure decision, and states absent from its current wire are never inferred from age, relevance, popularity, or a tier transition.
  *
@@ -449,6 +491,38 @@ export type CatalogTrustSnapshotUnsupportedStatus =
 export type CatalogTrustSnapshotMalformedStatus = 
 /** The trust field was empty, unbounded, or had the wrong JSON type. */
 "malformed";
+/**
+ * Discriminator for an AI skill candidate
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAiSkillCandidateKind".
+ */
+/** @experimental */
+export type CatalogAiSkillCandidateKind = "ai-skill";
+/**
+ * Canonical AI skill media type
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAiSkillMediaType".
+ */
+/** @experimental */
+export type CatalogAiSkillMediaType = "application/ai-skill";
+/**
+ * Typed non-installable state for an AI skill candidate
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAiSkillInstallability".
+ */
+/** @experimental */
+export type CatalogAiSkillInstallability = "not-installable-kind";
+/**
+ * Where a candidate's card came from. Exactly one of a URL or embedded data: the union has no variant carrying both, and no variant carrying neither, so the rule holds structurally rather than by validation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogCandidateSource".
+ */
+/** @experimental */
+export type CatalogCandidateSource = CatalogCandidateSourceUrl | CatalogCandidateSourceEmbedded;
 /**
  * Why the catalog authority did not accept the caller's identity
  *
@@ -464,13 +538,21 @@ export type CatalogAuthenticationRequiredReason =
 /** A credential was presented and the authority refused it, for example because it was revoked, malformed, or issued for another audience. Refreshing the same rejected credential is not useful; the caller must sign in again. */
  | "credential-rejected";
 /**
- * One inert catalog result, represented as an MCP server or discovery-only AI skill variant so kind, media type, provenance, and installability cannot contradict each other.
+ * One inert catalog result, represented as an MCP server, discovery-only AI skill, or opt-in Agent Plugin variant so kind, media type, provenance, and available operations cannot contradict each other.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "CatalogCandidate".
  */
 /** @experimental */
-export type CatalogCandidate = CatalogMcpServerCandidate | CatalogAiSkillCandidate;
+export type CatalogCandidate = CatalogMcpServerCandidate | CatalogAiSkillCandidate | CatalogAgentPluginCandidate;
+/**
+ * Discriminator for an MCP server candidate
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogMcpServerCandidateKind".
+ */
+/** @experimental */
+export type CatalogMcpServerCandidateKind = "mcp-server";
 /**
  * JSON MCP card media type accepted for install planning
  *
@@ -506,7 +588,9 @@ export type CatalogCandidateKind =
 /** An MCP server, which can be planned for installation. */
 "mcp-server"
 /** An AI skill, which is discoverable but not installable through this surface. */
- | "ai-skill";
+ | "ai-skill"
+/** An inert Agent Plugin candidate, available only when explicitly requested. */
+ | "plugin";
 /**
  * A wire feature a caller can require of the catalog surface, negotiated per request. A grant means the runtime understands the feature's contract, not that the deployment has enabled the operation; typed unavailable results report availability separately.
  *
@@ -521,12 +605,20 @@ export type CatalogCapability =
  | "legacy-mcp-server-card"
 /** Understands `application/ai-skill` candidates as discovery-only and typed non-installable. */
  | "ai-skill-discovery"
+/** Understands opt-in `application/vnd.github.copilot-plugin` candidates and their typed identity, version, source, and compatibility fields. */
+ | "agent-plugin-discovery"
 /** Understands side-effect-free MCP install-plan requests, results, and plan handles; `planning-unavailable` separately reports that planning is not enabled. */
  | "mcp-install-planning"
 /** Understands plans that enumerate every eligible transport rather than a single preferred one. */
  | "multiple-transport-choice"
+/** Understands explicit numbered navigation and authority-reported pagination metadata with opaque tokens. Advertised and granted only when requested. */
+ | "catalog-search-pagination"
 /** Understands versioned candidate trust snapshots. Protocol-3 callers must require this capability before the runtime adds the optional snapshot field. */
- | "trust-snapshot";
+ | "trust-snapshot"
+/** Understands exact candidate selection through model-safe opaque references and host-only candidate-handle hand-off. */
+ | "catalog-selection"
+/** Requires an eligible credential for the selected GitHub.com account before search egress and prohibits client-side anonymous retry, including after HTTP 401 or 403. The credential is scoped to the fixed catalog authority without redirect forwarding. Neither a grant nor successful response proves that the authority accepted the identity or selected a particular backend. Preserve this requirement on every page and retry; callers omitting it retain optional authentication. */
+ | "catalog-search-credential-required";
 /**
  * Bounded extensible wire-feature identifier. Known values are described by `CatalogCapability`; newer callers may send future identifiers so an older runtime can return a typed negotiation refusal instead of failing schema validation. Capability negotiation establishes contract understanding, while each operation's result separately reports runtime availability.
  *
@@ -547,7 +639,7 @@ export type CatalogContractViolationReason =
 "both-url-and-data"
 /** A result carried neither a URL nor embedded data, when exactly one is required. */
  | "neither-url-nor-data"
-/** Two results claimed the same normalised identity. */
+/** Two results claimed the same collision key: normalised identity for existing kinds, or normalised identity and declared version for Agent Plugins. */
  | "duplicate-identity"
 /** A result declared no media type, or one this contract does not model. */
  | "unknown-media-type";
@@ -562,7 +654,9 @@ export type CatalogHandleType =
 /** A search candidate handle. */
 "candidate"
 /** An install plan handle. */
- | "plan";
+ | "plan"
+/** A model-safe reference to one retained search candidate. */
+ | "selection";
 /**
  * Why a presented handle was rejected
  *
@@ -571,16 +665,20 @@ export type CatalogHandleType =
  */
 /** @experimental */
 export type CatalogHandleRejectionReason = 
-/** The handle is unparseable, unknown, or was issued for a different operation. */
+/** The handle is unparseable or unknown. */
 "invalid"
 /** The handle's time to live has elapsed. */
  | "stale"
 /** The handle has already been used, and handles are single-use. */
  | "replayed"
-/** The handle was issued by a different runtime instance. */
- | "foreign";
+/** The handle was issued by a different runtime instance or session. */
+ | "foreign"
+/** The handle was issued for another catalog operation. */
+ | "wrong-kind"
+/** The supplied search identifier does not match the retained candidate. */
+ | "search-mismatch";
 /**
- * Which request field was rejected before any work was done
+ * Which request field was rejected locally or by the catalog authority
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "CatalogInvalidRequestField".
@@ -600,7 +698,15 @@ export type CatalogInvalidRequestField =
 /** The supplied card was missing its media type, URL, or data. */
  | "card"
 /** The requested configuration scope is not one this runtime writes. */
- | "scope";
+ | "scope"
+/** The pagination token or target was invalid, or the authority rejected the continuation. Repeat the search without page. */
+ | "page"
+/** The locally owned session identifier was missing or malformed. */
+ | "sessionId"
+/** The opaque selection reference was missing or malformed. */
+ | "selectionRef"
+/** The terminal selection outcome was missing or unsupported. */
+ | "outcome";
 /**
  * How a card failed validation
  *
@@ -632,7 +738,9 @@ export type CatalogMediaType =
 /** The legacy MCP server card media type, accepted for compatibility. */
  | "application/mcp-server+json"
 /** An AI skill card. Representable and searchable, but typed non-installable. */
- | "application/ai-skill";
+ | "application/ai-skill"
+/** An inert Agent Plugin descriptor. */
+ | "application/vnd.github.copilot-plugin";
 /**
  * Why capability and protocol-version negotiation refused a caller
  *
@@ -705,6 +813,16 @@ export type McpPlanPolicySource =
  | "registry-policy"
 /** Local trust settings evaluated the server. */
  | "local-trust";
+/**
+ * Relationship of the backend-reported count to the complete query result set.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSearchTotalCountRelation".
+ */
+/** @experimental */
+export type CatalogSearchTotalCountRelation = 
+/** No exact/full-query or lower-bound guarantee is available. */
+"unknown";
 /**
  * Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
  *
@@ -745,10 +863,36 @@ export type CatalogUnavailableReason =
 "search-unavailable"
 /** Install planning is not wired up on this runtime build. */
  | "planning-unavailable"
+/** Exact candidate selection is not available in this session or runtime. */
+ | "selection-unavailable"
 /** No catalog authority is configured for this runtime. */
  | "authority-not-configured"
 /** The surface is disabled by policy on this runtime. */
  | "disabled-by-policy";
+/**
+ * Terminal outcome declared for a retained catalog selection group
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionDecision".
+ */
+/** @experimental */
+export type CatalogSelectionDecision = 
+/** Choose the candidate named by selectionRef. */
+"selected"
+/** Explicitly decline every candidate in the search. */
+ | "declined"
+/** Cancel the selection interaction without choosing a candidate. */
+ | "cancelled"
+/** Declare that the host's live interaction deadline elapsed while the reference remained valid. */
+ | "timed-out";
+/**
+ * Typed outcome of catalog.select. Only the selected host result carries a fresh candidate handle; the model-facing projection removes both that handle and searchId.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionResult".
+ */
+/** @experimental */
+export type CatalogSelectionResult = CatalogSelectionSelected | CatalogSelectionDeclined | CatalogSelectionCancelled | CatalogSelectionTimedOut | CatalogSelectionInvalid | CatalogSelectionStale | CatalogSelectionReplayed | CatalogSelectionForeign | CatalogSelectionWrongKind | CatalogNegotiationRefusedError | CatalogInvalidRequestError | CatalogUnavailableError;
 /**
  * Why no usable transport could be offered
  *
@@ -854,6 +998,106 @@ export type ConnectedRemoteSessionMetadataKind =
 "remote-session"
 /** GitHub Copilot coding agent session. */
  | "coding-agent";
+/**
+ * Stable OAuth scope whose absence prevents Connector management.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorAuthorizationScope".
+ */
+/** @experimental */
+export type ConnectorAuthorizationScope = 
+/** Allows Copilot to manage Connector connections and use their tools. */
+"write_plugin_gateway_connections";
+/**
+ * Availability of the EXPERIMENTAL session connector API.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorAvailability".
+ */
+/** @experimental */
+export type ConnectorAvailability = 
+/** The resolved Connector feature is enabled and Connector requests are permitted. */
+"enabled"
+/** The resolved Connector feature is off. No Connector service request is made while disabled. */
+ | "disabled"
+/** The session has no eligible host-owned GitHub account or does not support local Connector projection. */
+ | "unavailable";
+/**
+ * Authoritative service connection state for one Connector.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorCatalogStatus".
+ */
+/** @experimental */
+export type ConnectorCatalogStatus = 
+/** The Connector is available but not connected. */
+"not_connected"
+/** The Connector service is still completing connection or consent. */
+ | "pending"
+/** The Connector is connected and may contribute MCP servers. */
+ | "connected"
+/** The Connector service reports an unusable connection. */
+ | "error"
+/** The service returned a future or unrecognized state. */
+ | "unknown";
+/**
+ * Typed result of initiating or continuing a Connector connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorConnectResult".
+ */
+/** @experimental */
+export type ConnectorConnectResult = {
+    /**
+     * The service is connected and the session MCP graph was reconciled.
+     */
+    kind: "connected";
+    status: ConnectorStatus;
+} | {
+    /**
+     * Host-owned consent is required before bounded continuation can complete.
+     */
+    kind: "consent_required";
+    /**
+     * Validated HTTPS consent URL. The runtime does not open it.
+     */
+    consentUrl: string;
+    /**
+     * Opaque ID accepted by continueConnection.
+     */
+    continuationId: string;
+} | {
+    /**
+     * The service is still completing the connection without a consent URL.
+     */
+    kind: "pending";
+    /**
+     * Opaque ID accepted by continueConnection.
+     */
+    continuationId: string;
+};
+/**
+ * Live MCP status of one Connector-owned runtime server.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorMcpStatus".
+ */
+/** @experimental */
+export type ConnectorMcpStatus = 
+/** The server is connected and its tools are available. */
+"connected"
+/** The server connection is still being established. */
+ | "pending"
+/** The server requires refreshed GitHub authorization. */
+ | "needs_auth"
+/** The server failed to connect or initialize. */
+ | "failed"
+/** The server is intentionally stopped, including when managed policy blocks it. */
+ | "stopped"
+/** The server is configured but explicitly disabled. */
+ | "disabled"
+/** The Connector currently has no live server configuration. */
+ | "not_configured";
 /**
  * Closed set of public task kinds a connection can negotiate.
  *
@@ -899,7 +1143,7 @@ export type DebugCollectLogsSource =
 /** Caller-provided diagnostic entry. */
  | "additional";
 /**
- * Destination for the redacted debug bundle.
+ * Destination for the session debug bundle.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "DebugCollectLogsDestination".
@@ -920,7 +1164,7 @@ export type DebugCollectLogsDestination = {
     kind: "archive";
 } | {
     /**
-     * Directory where redacted files should be staged. The directory is created if needed.
+     * Directory where files should be staged. The directory is created if needed.
      */
     outputDirectory: string;
     /**
@@ -951,7 +1195,9 @@ export type DebugCollectLogsRedaction =
 /** Redact the file as plain UTF-8 log text. */
 "plain-text"
 /** Redact each non-empty line as a session event JSON object, falling back to plain-text redaction for malformed lines. */
- | "events-jsonl";
+ | "events-jsonl"
+/** No redaction is applied. The caller must ensure any necessary redaction is performed before this call. */
+ | "none";
 /**
  * Destination kind that was written.
  *
@@ -962,7 +1208,7 @@ export type DebugCollectLogsRedaction =
 export type DebugCollectLogsResultKind = 
 /** A .tgz archive was written. */
 "archive"
-/** A directory containing redacted files was written. */
+/** A directory containing the collected files was written. */
  | "directory";
 /**
  * Persisted extension discovery source
@@ -1064,6 +1310,14 @@ export type DiscoveredMcpServerType =
  | "sse"
 /** Server is backed by an in-memory runtime implementation. */
  | "memory";
+/**
+ * Indicates whether the command was accepted into the local execution queue.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnqueueCommandResult".
+ */
+/** @experimental */
+export type EnqueueCommandResult = AcceptedEnqueueCommandResult | UnsupportedEnqueueCommandResult;
 /**
  * Either '*' to receive all event types, or a non-empty list of event types to receive
  *
@@ -1860,6 +2114,10 @@ export type McpHeadersHandlePendingHeadersRefreshRequest = {
     headers: {
         [k: string]: string | undefined;
     };
+    /**
+     * Optional lifetime in milliseconds for these returned headers. The runtime clamps its configured cache lifetime to this value.
+     */
+    ttlMs?: number;
     /**
      * Headers-refresh response variant discriminator.
      */
@@ -1869,6 +2127,15 @@ export type McpHeadersHandlePendingHeadersRefreshRequest = {
      * Headers-refresh response variant discriminator.
      */
     kind: "none";
+} | {
+    /**
+     * Host credential broker failure, denial, or revocation reason.
+     */
+    message: string;
+    /**
+     * Headers-refresh response variant discriminator.
+     */
+    kind: "error";
 };
 /**
  * One eligible way to run the server, represented as a tagged package or remote variant so package identity and endpoint states cannot contradict the install method.
@@ -2696,6 +2963,8 @@ export type PermissionModeSource =
  | "autopilot_confirmation"
 /** The mode was set at startup by the `defaultPermissionMode` user setting. */
  | "user_setting"
+/** The mode was set at startup by authenticated organization targeting. */
+ | "organization_targeting"
 /** The mode was set through an RPC caller. */
  | "rpc";
 /**
@@ -2783,6 +3052,10 @@ export type PluginsReloadRequest = {
      */
     deferRepoHooks?: boolean;
 };
+/** @experimental */
+export type ProtocolAppendMode = "append";
+/** @experimental */
+export type ProtocolCustomizeMode = "customize";
 /**
  * Controls whether the runtime may defer loading an external tool definition.
  *
@@ -2795,6 +3068,34 @@ export type ProtocolExternalToolDefer =
 "auto"
 /** The runtime must include the tool without deferring it. */
  | "never";
+/** @experimental */
+export type ProtocolMarkerSectionOverride = {
+    /**
+     * Section override action discriminator.
+     */
+    action: "transform";
+} | {
+    /**
+     * Section override action discriminator.
+     */
+    action: "preserve";
+};
+/** @experimental */
+export type ProtocolReplaceMode = "replace";
+/** @experimental */
+export type ProtocolSectionOverride = ProtocolStaticSectionOverride | ProtocolMarkerSectionOverride;
+/** @experimental */
+export type ProtocolStaticSectionAction = 
+/** Replace the section content. */
+"replace"
+/** Remove the section content. */
+ | "remove"
+/** Append content to the section. */
+ | "append"
+/** Prepend content to the section. */
+ | "prepend";
+/** @experimental */
+export type ProtocolSystemMessageConfig = ProtocolSystemMessageAppendConfig | ProtocolSystemMessageReplaceConfig | ProtocolSystemMessageCustomizeConfig;
 /**
  * Provider family. Matches the `type` field of a BYOK provider config.
  *
@@ -2960,6 +3261,32 @@ export type RemoteSessionMetadataTaskType =
 "cca"
 /** CLI remote task. */
  | "cli";
+/**
+ * Provider-native structured output format. JSON Schema is forwarded without rewriting or validating the schema or the generated output.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ResponseFormat".
+ */
+/** @experimental */
+export type ResponseFormat = {
+    jsonSchema: JsonSchemaResponseFormat;
+    /**
+     * Output format discriminator. Currently only json_schema is supported.
+     */
+    type: "json_schema";
+};
+/**
+ * A session-scoped sandbox transition applied while handling a slash command
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxSessionChange".
+ */
+/** @experimental */
+export type SandboxSessionChange = 
+/** The sandbox is off for the rest of this session; nothing was persisted and a new session starts from managed policy. */
+"disabled"
+/** A previous session-scoped opt-out was cleared and the sandbox is enforced again. */
+ | "restored";
 /**
  * Current authentication information, or null when no authentication is active.
  *
@@ -3917,81 +4244,284 @@ export type UISessionLimitsExhaustedResponseAction =
 /** Leave the limit unchanged and cancel the blocked model request. */
  | "cancel";
 /**
- * Type of change represented by this file diff.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspaceDiffFileChangeType".
- */
-/** @experimental */
-export type WorkspaceDiffFileChangeType = 
-/** The file was added. */
-"added"
-/** The file was modified. */
- | "modified"
-/** The file was deleted. */
- | "deleted"
-/** The file was renamed. */
- | "renamed";
-/**
- * Diff mode requested by the client.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspaceDiffMode".
- */
-/** @experimental */
-export type WorkspaceDiffMode = 
-/** Return staged, unstaged, and untracked working tree changes. */
-"unstaged"
-/** Return changes compared with the default branch. */
- | "branch"
-/** Return the cumulative diff of files Copilot changed this session (used in non-git workspaces). */
- | "session";
-/**
- * Allowed values for the `WorkspacesWorkspaceDetailsHostType` enumeration.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspacesWorkspaceDetailsHostType".
- */
-/** @experimental */
-export type WorkspacesWorkspaceDetailsHostType = 
-/** Workspace repository is hosted on GitHub. */
-"github"
-/** Workspace repository is hosted on Azure DevOps. */
- | "ado";
-/**
- * List of all authenticated users
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "AccountGetAllUsersResult".
- */
-/** @experimental */
-export type AccountGetAllUsersResult = AccountAllUsers[];
-/**
- * The number of running background agents (task-registry agents) that were cancelled.
+ * Execution-critical workflow storage operation.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionCancelAllBackgroundAgentsResult".
+ * via the `definition` "WorkflowDurableOperation".
  */
 /** @experimental */
-export type SessionCancelAllBackgroundAgentsResult = number;
+export type WorkflowDurableOperation = 
+/** Creating the durable run and declared phases. */
+"createRun"
+/** Persisting the transition to running. */
+ | "markRunStarted"
+/** Persisting the terminal run envelope. */
+ | "finishRun"
+/** Persisting subagent admission accounting. */
+ | "reserveAgent"
+/** Rolling back an uncommitted subagent admission. */
+ | "releaseAgent"
+/** Persisting an idempotent model-usage charge. */
+ | "chargeCredit"
+/** Persisting active execution time. */
+ | "addElapsed"
+/** Reading the authoritative AI-credit total. */
+ | "reconcileCreditTotal"
+/** Reading a journal entry without treating storage failure as a cache miss. */
+ | "journalGet"
+/** Persisting a journal entry before reporting success. */
+ | "journalPut"
+/** Renewing the durable owner lease that proves this process still owns the run. */
+ | "refreshLease";
 /**
- * Authentication accounts available to the internal session host.
+ * Current or terminal state of a workflow run.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionGitHubAuthGetAllAuthAvailableResult".
+ * via the `definition` "WorkflowRunStatus".
  */
 /** @experimental */
-export type SessionGitHubAuthGetAllAuthAvailableResult = SessionAuthStatus[];
+export type WorkflowRunStatus = 
+/** The run was minted and is awaiting approval. */
+"pending"
+/** The run is executing. */
+ | "running"
+/** The run completed successfully. */
+ | "completed"
+/** The run was interrupted while resource budget remained. */
+ | "halted"
+/** The current attempt stopped intentionally and the run may be resumed. */
+ | "paused"
+/** The run was cancelled before completion. */
+ | "cancelled"
+/** The workflow body failed or reached a cumulative resource ceiling. */
+ | "error";
 /**
- * Whether the current authentication was logged out.
+ * Machine-readable workflow run failure.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionGitHubAuthLogoutResult".
+ * via the `definition` "WorkflowRunFailure".
  */
 /** @experimental */
-export type SessionGitHubAuthLogoutResult = boolean;
-/**
- * Whether the requested authentication was logged out.
+export type WorkflowRunFailure = {
+    kind: WorkflowRunFailureKind;
+    /**
+     * Approved effective ceiling that was reached.
+     */
+    value: number;
+    /**
+     * Suggested larger ceiling when the runtime can derive one safely.
+     */
+    suggestedValue?: number;
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Workflow failure variant discriminator.
+     */
+    type: "workflow_limit_reached";
+} | {
+    /**
+     * Workflow run identifier whose changed limits were declined.
+     */
+    runId: string;
+    /**
+     * Human-readable reason the resume did not proceed.
+     */
+    reason: string;
+    /**
+     * Workflow failure variant discriminator.
+     */
+    type: "workflow_resume_declined";
+} | {
+    /**
+     * Stable failure code.
+     */
+    code: string;
+    operation: WorkflowDurableOperation;
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Workflow failure variant discriminator.
+     */
+    type: "workflow_durable_failure";
+} | {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Confirmed usage in nano-AIU, representing the floor of what the run spent.
+     */
+    drainedNanoAiu: number;
+    /**
+     * Workflow failure variant discriminator.
+     */
+    type: "workflow_accounting_incomplete";
+} | {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Workflow failure variant discriminator.
+     */
+    type: "workflow_provider_disconnected";
+};
+/**
+ * Cumulative resource ceiling that stopped a workflow run.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunFailureKind".
+ */
+/** @experimental */
+export type WorkflowRunFailureKind = 
+/** The run admitted the approved maximum total number of subagents. */
+"maxTotalSubagents"
+/** The run reached the approved accumulated active-execution time in seconds. */
+ | "timeoutSeconds"
+/** The run's settled subagent model usage exceeded the approved AI-credit ceiling, or no headroom remained for another subagent. */
+ | "maxAiCredits";
+/**
+ * Durable metadata describing who initiated a workflow pause.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowPauseInfo".
+ */
+/** @experimental */
+export type WorkflowPauseInfo = {
+    /**
+     * Workflow pause initiator discriminator.
+     */
+    type: "user";
+} | {
+    /**
+     * Stable author-defined checkpoint key that initiated the pause.
+     */
+    key: string;
+    /**
+     * Workflow pause initiator discriminator.
+     */
+    type: "checkpoint";
+};
+/**
+ * Kind of workflow progress line.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowLogLineKind".
+ */
+/** @experimental */
+export type WorkflowLogLineKind = 
+/** A narrator log line. */
+"log"
+/** A named workflow phase marker. */
+ | "phase";
+/**
+ * Action the runtime selected for a durable workflow pause checkpoint.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowPauseCheckpointAction".
+ */
+/** @experimental */
+export type WorkflowPauseCheckpointAction = 
+/** The checkpoint was committed by a prior paused attempt, so execution may continue. */
+"continue"
+/** This attempt claimed the checkpoint and must cooperatively stop. */
+ | "pause";
+/**
+ * Derived lifecycle state of a workflow phase.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowPhaseStatus".
+ */
+/** @experimental */
+export type WorkflowPhaseStatus = 
+/** The phase has not been entered yet. */
+"pending"
+/** The phase is currently entered and accumulating active time. */
+ | "active"
+/** The phase was entered and has since been closed. */
+ | "completed"
+/** The phase was never entered because a later phase was entered or the run reached a terminal state. */
+ | "skipped";
+/**
+ * Type of change represented by this file diff.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspaceDiffFileChangeType".
+ */
+/** @experimental */
+export type WorkspaceDiffFileChangeType = 
+/** The file was added. */
+"added"
+/** The file was modified. */
+ | "modified"
+/** The file was deleted. */
+ | "deleted"
+/** The file was renamed. */
+ | "renamed";
+/**
+ * Diff mode requested by the client.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspaceDiffMode".
+ */
+/** @experimental */
+export type WorkspaceDiffMode = 
+/** Return staged, unstaged, and untracked working tree changes. */
+"unstaged"
+/** Return changes compared with the default branch. */
+ | "branch"
+/** Return the cumulative diff of files Copilot changed this session (used in non-git workspaces). */
+ | "session";
+/**
+ * Allowed values for the `WorkspacesWorkspaceDetailsHostType` enumeration.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesWorkspaceDetailsHostType".
+ */
+/** @experimental */
+export type WorkspacesWorkspaceDetailsHostType = 
+/** Workspace repository is hosted on GitHub. */
+"github"
+/** Workspace repository is hosted on Azure DevOps. */
+ | "ado";
+/**
+ * List of all authenticated users
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AccountGetAllUsersResult".
+ */
+/** @experimental */
+export type AccountGetAllUsersResult = AccountAllUsers[];
+/**
+ * The number of running background agents (task-registry agents) that were cancelled.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionCancelAllBackgroundAgentsResult".
+ */
+/** @experimental */
+export type SessionCancelAllBackgroundAgentsResult = number;
+/**
+ * Authentication accounts available to the internal session host.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionGitHubAuthGetAllAuthAvailableResult".
+ */
+/** @experimental */
+export type SessionGitHubAuthGetAllAuthAvailableResult = SessionAuthStatus[];
+/**
+ * Whether the current authentication was logged out.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionGitHubAuthLogoutResult".
+ */
+/** @experimental */
+export type SessionGitHubAuthLogoutResult = boolean;
+/**
+ * Whether the requested authentication was logged out.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SessionGitHubAuthLogoutUserResult".
@@ -4025,6 +4555,17 @@ export interface AbortResult {
      */
     error?: string;
 }
+/** @experimental */
+export interface AcceptedEnqueueCommandResult {
+    /**
+     * True because the command was accepted into the local execution queue.
+     */
+    queued: true;
+    /**
+     * Stable opaque ID of the queued command.
+     */
+    queueId: string;
+}
 /**
  * Authenticated account entry returned by `account.getAllUsers`.
  *
@@ -4135,6 +4676,15 @@ export interface CopilotUserResponse {
             [k: string]: unknown | undefined;
         } | string) | null;
     } | null)[]) | null;
+    /**
+     * Enterprises that provide the user's Copilot license; malformed entries are normalized to null or ID-less shapes.
+     */
+    enterprise_list?: ({
+        /**
+         * JavaScript-safe numeric database ID of the enterprise.
+         */
+        id?: number;
+    } | null)[] | null;
     /**
      * Whether the Codex agent is enabled for the user.
      */
@@ -4768,7 +5318,7 @@ export interface AgentGetCurrentResult {
     agent?: AgentInfo | null;
 }
 /**
- * Agent metadata, including identifiers, display details, source, tools, model, models, MCP servers, skills, and file path.
+ * Agent metadata, including identifiers, display details, source, tools, model, models, reasoning effort, MCP servers, skills, and file path.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AgentInfo".
@@ -4817,6 +5367,10 @@ export interface AgentInfo {
      */
     models?: string[];
     modelPolicy?: AgentModelPolicy;
+    /**
+     * Authored reasoning effort for this agent. Applied on selection to models that support it; omitted means no authored preference.
+     */
+    reasoningEffort?: string;
     /**
      * MCP server configurations attached to this agent, keyed by server name. Server config shape mirrors the MCP `mcpServers` schema.
      *
@@ -4913,7 +5467,7 @@ export interface AgentRegistryLiveTargetEntry {
     lastSeenMs: number;
 }
 /**
- * Per-spawn log-capture outcome; populated from spawnLiveTarget.
+ * Canonical process-log discovery outcome; populated from spawnLiveTarget.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AgentRegistryLogCapture".
@@ -4921,15 +5475,15 @@ export interface AgentRegistryLiveTargetEntry {
 /** @experimental */
 export interface AgentRegistryLogCapture {
     /**
-     * Whether per-spawn log capture is on (false when env-disabled or open failed)
+     * Whether a canonical process log was discovered for this managed spawn
      */
     enabled: boolean;
     /**
-     * Absolute path to the per-spawn log file (only set when enabled)
+     * Absolute path to the managed spawn's process-<timestamp>-<pid>.log file (only set when enabled)
      */
     path?: string;
     /**
-     * Human-readable open failure message (only set when enabled === false AND the env-disable opt-out was NOT used)
+     * Why no canonical process log could be opened for this managed spawn (set only when enabled is false)
      */
     openError?: string;
     openErrorReason?: AgentRegistryLogCaptureOpenErrorReason;
@@ -5772,33 +6326,17 @@ export interface CardDigest {
     value: CardDigestValue;
 }
 /**
- * An inert AI skill catalog result. AI skills are discovery-only and cannot be represented as installable through this surface.
+ * An inert Agent Plugin catalog result. Its canonical catalog identity, declared version, repository source claim, and explicit compatibility tags are safe to correlate, while its descriptor, URL, raw data, and installed-plugin state remain runtime-private. This contract-only variant does not mint or expose a candidate handle.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogAiSkillCandidate".
+ * via the `definition` "CatalogAgentPluginCandidate".
  */
 /** @experimental */
-export interface CatalogAiSkillCandidate {
-    /**
-     * Opaque, runtime-instance scoped, TTL-bound, single-use handle for this candidate. Carries no readable information and is rejected when stale, replayed, or presented to a different runtime instance. Never logged.
-     */
-    handle: string;
-    /**
-     * ISO 8601 timestamp after which the handle is stale and will be rejected.
-     */
-    handleExpiresAt: string;
-    /**
-     * Discriminator: this candidate describes an AI skill
-     */
-    kind: "ai-skill";
-    /**
-     * Media type of the underlying AI skill card
-     */
-    mediaType: "application/ai-skill";
-    /**
-     * AI skills are discovery-only and cannot be installed through this surface
-     */
-    installability: "not-installable-kind";
+export interface CatalogAgentPluginCandidate {
+    kind: CatalogAgentPluginCandidateKind;
+    mediaType: CatalogAgentPluginMediaType;
+    identity: CatalogResourceIdentity;
+    version?: CatalogResourceVersion;
     /**
      * Display name taken verbatim from the card. Inert untrusted text.
      */
@@ -5811,48 +6349,43 @@ export interface CatalogAiSkillCandidate {
      * Publisher taken verbatim from the card. Inert untrusted text.
      */
     publisher?: string;
-    source: CatalogCandidateSource;
-    provenance: CatalogAiSkillCandidateProvenance;
+    source: CatalogPluginRepositorySource;
+    /**
+     * Explicit validated compatibility tags, in canonical order. An empty list means the source declared no recognised compatibility; clients must not infer compatibility from other fields. `canvas-only` requires both `canvas` and `github-copilot`.
+     *
+     * @maxItems 3
+     */
+    compatibilityTags: ({
+        [k: string]: unknown | undefined;
+    } & []) | [CatalogAgentPluginCompatibilityTag] | [CatalogAgentPluginCompatibilityTag, CatalogAgentPluginCompatibilityTag] | [CatalogAgentPluginCompatibilityTag, CatalogAgentPluginCompatibilityTag, CatalogAgentPluginCompatibilityTag];
+    provenance: CatalogAgentPluginCandidateProvenance;
     trust?: CatalogTrustSnapshot;
 }
 /**
- * Candidate whose card is retrieved from a URL through the runtime's hardened fetch boundary.
+ * Syntactically validated GitHub repository provenance declared by catalog metadata. This is a source claim rather than proof that the descriptor URL resolves to the repository.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogCandidateSourceUrl".
+ * via the `definition` "CatalogPluginRepositorySource".
  */
 /** @experimental */
-export interface CatalogCandidateSourceUrl {
+export interface CatalogPluginRepositorySource {
     /**
-     * Discriminator: the card is URL-backed, and carries no embedded data
-     */
-    kind: "url";
-    /**
-     * Card URL as advertised. Inert untrusted data: the runtime retrieves it only through its own hardened boundary, and it is never logged.
+     * Canonical lowercase owner/repository name derived from metadata.sourceSet.
      */
-    url: string;
-}
-/**
- * Candidate whose card reference arrived inline. The document and its content-derived properties stay behind the runtime boundary.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogCandidateSourceEmbedded".
- */
-/** @experimental */
-export interface CatalogCandidateSourceEmbedded {
+    repository: string;
     /**
-     * Discriminator: the card is embedded, and carries no URL
+     * Case-preserving safe relative POSIX path derived from metadata.repoPath.
      */
-    kind: "embedded";
+    path: string;
 }
 /**
- * Where and when an AI skill catalog reference was observed. Discovery provenance deliberately carries no content digest because search does not establish the exact validated content a later plan will bind.
+ * Where and when an Agent Plugin catalog reference was observed. Discovery provenance deliberately carries no descriptor URL, raw data, candidate handle, or content digest.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogAiSkillCandidateProvenance".
+ * via the `definition` "CatalogAgentPluginCandidateProvenance".
  */
 /** @experimental */
-export interface CatalogAiSkillCandidateProvenance {
+export interface CatalogAgentPluginCandidateProvenance {
     /**
      * Host of the catalog authority that advertised the reference, without path, query, or credentials. Inert untrusted data.
      */
@@ -5861,10 +6394,7 @@ export interface CatalogAiSkillCandidateProvenance {
      * ISO 8601 timestamp at which the runtime observed the catalog reference. This is not a retrieval or validation timestamp.
      */
     observedAt: string;
-    /**
-     * Media type advertised for the referenced AI skill card
-     */
-    mediaType: "application/ai-skill";
+    mediaType: CatalogAgentPluginMediaType;
 }
 /**
  * A recognised current Agent Finder T1 or T2 trust tier.
@@ -5973,17 +6503,100 @@ export interface CatalogTrustSnapshotMalformed {
     provenance: CatalogTrustProvenance;
 }
 /**
- * An optional catalog authentication exchange did not establish the caller's identity. Anonymous search remains supported; this refusal is reserved for an operation that cannot continue after the attempted exchange. It is distinct from `policy-rejected` and from a network failure, and the reason identifies the recovery action.
+ * An inert AI skill catalog result. AI skills are discovery-only and cannot be represented as installable through this surface.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogAuthenticationRequiredError".
+ * via the `definition` "CatalogAiSkillCandidate".
  */
 /** @experimental */
-export interface CatalogAuthenticationRequiredError {
+export interface CatalogAiSkillCandidate {
     /**
-     * Discriminator: the caller is not authenticated
+     * Opaque, runtime-instance scoped, TTL-bound, single-use handle for this candidate. Carries no readable information and is rejected when stale, replayed, or presented to a different runtime instance. Never logged.
      */
-    kind: "authentication-required";
+    handle: string;
+    /**
+     * ISO 8601 timestamp after which the handle is stale and will be rejected.
+     */
+    handleExpiresAt: string;
+    kind: CatalogAiSkillCandidateKind;
+    mediaType: CatalogAiSkillMediaType;
+    installability: CatalogAiSkillInstallability;
+    /**
+     * Display name taken verbatim from the card. Inert untrusted text.
+     */
+    displayName: string;
+    /**
+     * Description taken verbatim from the card. Inert untrusted text.
+     */
+    description?: string;
+    /**
+     * Publisher taken verbatim from the card. Inert untrusted text.
+     */
+    publisher?: string;
+    source: CatalogCandidateSource;
+    provenance: CatalogAiSkillCandidateProvenance;
+    trust?: CatalogTrustSnapshot;
+}
+/**
+ * Candidate whose card is retrieved from a URL through the runtime's hardened fetch boundary.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogCandidateSourceUrl".
+ */
+/** @experimental */
+export interface CatalogCandidateSourceUrl {
+    /**
+     * Discriminator: the card is URL-backed, and carries no embedded data
+     */
+    kind: "url";
+    /**
+     * Card URL as advertised. Inert untrusted data: the runtime retrieves it only through its own hardened boundary, and it is never logged.
+     */
+    url: string;
+}
+/**
+ * Candidate whose card reference arrived inline. The document and its content-derived properties stay behind the runtime boundary.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogCandidateSourceEmbedded".
+ */
+/** @experimental */
+export interface CatalogCandidateSourceEmbedded {
+    /**
+     * Discriminator: the card is embedded, and carries no URL
+     */
+    kind: "embedded";
+}
+/**
+ * Where and when an AI skill catalog reference was observed. Discovery provenance deliberately carries no content digest because search does not establish the exact validated content a later plan will bind.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAiSkillCandidateProvenance".
+ */
+/** @experimental */
+export interface CatalogAiSkillCandidateProvenance {
+    /**
+     * Host of the catalog authority that advertised the reference, without path, query, or credentials. Inert untrusted data.
+     */
+    authority: string;
+    /**
+     * ISO 8601 timestamp at which the runtime observed the catalog reference. This is not a retrieval or validation timestamp.
+     */
+    observedAt: string;
+    mediaType: CatalogAiSkillMediaType;
+}
+/**
+ * An optional catalog authentication exchange did not establish the caller's identity. Anonymous search remains supported; this refusal is reserved for an operation that cannot continue after the attempted exchange. It is distinct from `policy-rejected` and from a network failure, and the reason identifies the recovery action.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAuthenticationRequiredError".
+ */
+/** @experimental */
+export interface CatalogAuthenticationRequiredError {
+    /**
+     * Discriminator: the caller is not authenticated
+     */
+    kind: "authentication-required";
     reason: CatalogAuthenticationRequiredReason;
     /**
      * Human-readable explanation, safe to surface. Never contains a credential or token, nor a query, URL, handle, or secret.
@@ -6006,10 +6619,7 @@ export interface CatalogMcpServerCandidate {
      * ISO 8601 timestamp after which the handle is stale and will be rejected.
      */
     handleExpiresAt: string;
-    /**
-     * Discriminator: this candidate describes an MCP server
-     */
-    kind: "mcp-server";
+    kind: CatalogMcpServerCandidateKind;
     mediaType: McpServerCardMediaType;
     installability: CatalogMcpServerInstallability;
     /**
@@ -6103,7 +6713,7 @@ export interface CatalogHandleRejectedError {
     message: string;
 }
 /**
- * The request was rejected before any work was done, because a bounded field fell outside its permitted range or a required field was unusable.
+ * The request was rejected because a bounded field fell outside its permitted range or a required field was unusable. Pagination may also be rejected by the authority after a continuation request; repeat the search without page.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "CatalogInvalidRequestError".
@@ -6152,7 +6762,7 @@ export interface CatalogNegotiatedContract {
      */
     runtimeProtocolVersion: number;
     /**
-     * Wire features the runtime understood for this operation. Always a superset of the caller's required features, because any shortfall is a refusal instead. Operation availability remains a separate typed result.
+     * Wire features the runtime understood for this operation. Includes the five original catalog capabilities and only explicitly requested supported additions, in supported order without duplicates. Capabilities that introduce new success-union variants or operations are therefore included only when explicitly required, preserving older protocol-v3 clients. Always a superset of the caller's required features, because any shortfall is a refusal instead. Operation availability remains a separate typed result.
      */
     grantedCapabilities: CatalogCapability[];
 }
@@ -6256,6 +6866,61 @@ export interface CatalogPolicyRejectedError {
      */
     message: string;
 }
+/**
+ * An explicit numbered-page request. The SDK treats the token as opaque; only the runtime decodes it and changes its targetPage. Authority validation binds navigation to the original search. No snapshot stability or token TTL is promised.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSearchPage".
+ */
+/** @experimental */
+export interface CatalogSearchPage {
+    /**
+     * Opaque authority-issued pagination token from an earlier response. Never decode, modify or log it in an SDK consumer.
+     */
+    token: string;
+    /**
+     * Requested one-based page. Must not exceed either the token's signed pageCount or the navigation window ceil(1000 / pageSize). Repeat the search without page to discover newly available pages beyond that signed pageCount.
+     */
+    number: number;
+}
+/**
+ * Authority-reported navigation metadata, returned only to callers requiring catalog-search-pagination and only when a supported token is present. Tokenless first-page and continuation responses omit this object; no counts are inferred from candidates. The opaque token may be retained for previous or numbered navigation even when hasNextPage is false.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSearchPagination".
+ */
+/** @experimental */
+export interface CatalogSearchPagination {
+    /**
+     * Opaque authority-issued pagination token. Only the runtime decodes it or changes targetPage; SDK consumers must not decode, modify or log it. It has no runtime-created expiry or cache.
+     */
+    token: string;
+    /**
+     * One-based page returned by the authority.
+     */
+    currentPage: number;
+    /**
+     * Page size bound to the search, equal to the effective request limit.
+     */
+    pageSize: number;
+    /**
+     * Backend-reported count for this response, not the number of returned candidates. Its relationship to the full query result set is unknown.
+     */
+    totalCount: number;
+    totalCountRelation: CatalogSearchTotalCountRelation;
+    /**
+     * Backend-reported page count, which may exceed maxPage. Present pagination metadata always describes a multi-page result; zero- and single-page responses omit pagination. Navigation targets must also be within the signed pageCount carried by the supplied token.
+     */
+    pageCount: number;
+    /**
+     * Navigation window ceiling ceil(1000 / pageSize), not the number of existing pages. Legal targets must not exceed this ceiling or the token's signed pageCount.
+     */
+    maxPage: number;
+    /**
+     * Whether the authority token advertises a valid next target within the navigation window. Not inferred from token presence, truncated, or currentPage being less than pageCount.
+     */
+    hasNextPage: boolean;
+}
 /**
  * A bounded catalog search. Both the query length and the result count are capped by the schema so a caller cannot request an unbounded scan.
  *
@@ -6274,15 +6939,16 @@ export interface CatalogSearchRequest {
      */
     limit?: number;
     /**
-     * Restrict results to these candidate kinds. When omitted, every kind the runtime supports is searched.
+     * Restrict results to these candidate kinds. Agent Plugins are opt-in and require the `agent-plugin-discovery` capability so protocol-v3 clients generated before that variant cannot receive an unknown result; when omitted, the backwards-compatible MCP server and AI skill kinds are searched.
      *
      * @minItems 1
-     * @maxItems 2
+     * @maxItems 3
      */
-    kinds?: [CatalogCandidateKind] | [CatalogCandidateKind, CatalogCandidateKind];
+    kinds?: [CatalogCandidateKind] | [CatalogCandidateKind, CatalogCandidateKind] | [CatalogCandidateKind, CatalogCandidateKind, CatalogCandidateKind];
+    page?: CatalogSearchPage;
 }
 /**
- * A completed catalog search: inert candidate summaries, each carrying a single-use handle.
+ * A completed catalog search containing inert candidate summaries. MCP server and AI skill variants carry a single-use handle; the Agent Plugin variant is handleless.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "CatalogSearchSucceeded".
@@ -6304,10 +6970,11 @@ export interface CatalogSearchSucceeded {
      */
     candidates: CatalogCandidate[];
     /**
-     * Whether further matches existed beyond the requested limit.
+     * Legacy indication that the authority returned a page token. Preserved for compatibility; this is not a has-next-page indicator. Use pagination.hasNextPage when pagination metadata is present.
      */
     truncated: boolean;
     negotiated: CatalogNegotiatedContract;
+    pagination?: CatalogSearchPagination;
 }
 /**
  * The request asked for a candidate kind this runtime does not serve.
@@ -6370,6 +7037,182 @@ export interface CatalogUnavailableError {
      */
     message: string;
 }
+/**
+ * The caller cancelled the selection interaction and the retained search state was released.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionCancelled".
+ */
+/** @experimental */
+export interface CatalogSelectionCancelled {
+    /**
+     * Discriminator: selection was cancelled
+     */
+    kind: "cancelled";
+    /**
+     * The search identifier privately bound to the released selection group.
+     */
+    searchId: string;
+}
+/**
+ * The caller explicitly declined every candidate and the retained search state was released.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionDeclined".
+ */
+/** @experimental */
+export interface CatalogSelectionDeclined {
+    /**
+     * Discriminator: the candidates were declined
+     */
+    kind: "declined";
+    /**
+     * The search identifier privately bound to the released selection group.
+     */
+    searchId: string;
+}
+/**
+ * The selection reference belongs to another runtime instance or session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionForeign".
+ */
+/** @experimental */
+export interface CatalogSelectionForeign {
+    /**
+     * Discriminator for this typed selection rejection
+     */
+    kind: "foreign";
+    /**
+     * Human-readable explanation safe to surface. Never contains the presented reference or private candidate state.
+     */
+    message: string;
+}
+/**
+ * The selection reference was malformed or unknown.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionInvalid".
+ */
+/** @experimental */
+export interface CatalogSelectionInvalid {
+    /**
+     * Discriminator for this typed selection rejection
+     */
+    kind: "invalid";
+    /**
+     * Human-readable explanation safe to surface. Never contains the presented reference or private candidate state.
+     */
+    message: string;
+}
+/**
+ * The selection group was already terminated or its pending host hand-off was already claimed.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionReplayed".
+ */
+/** @experimental */
+export interface CatalogSelectionReplayed {
+    /**
+     * Discriminator for this typed selection rejection
+     */
+    kind: "replayed";
+    /**
+     * Human-readable explanation safe to surface. Never contains the presented reference or private candidate state.
+     */
+    message: string;
+}
+/**
+ * Terminates one retained catalog selection group through an opaque reference previously returned by the model-safe search projection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionRequest".
+ */
+/** @experimental */
+export interface CatalogSelectionRequest {
+    contract: CatalogClientContract;
+    /**
+     * Locally owned root session whose retained search state is being resolved.
+     */
+    sessionId: string;
+    /**
+     * Opaque runtime-instance scoped reference to one visible candidate. For a non-selected outcome, any candidate reference from the same search closes that search's retained group.
+     */
+    selectionRef: string;
+    outcome: CatalogSelectionDecision;
+}
+/**
+ * The chosen candidate was transferred into a fresh bounded single-use handle for a later explicit planning request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionSelected".
+ */
+/** @experimental */
+export interface CatalogSelectionSelected {
+    /**
+     * Discriminator: one candidate was selected
+     */
+    kind: "selected";
+    /**
+     * Fresh single-use candidate handle accepted by mcp.planInstall. Returned only to the native host and never included in model-tool output.
+     */
+    candidateHandle: string;
+    /**
+     * The exact search identifier privately bound to the selected candidate.
+     */
+    searchId: string;
+}
+/**
+ * The host declared that its live selection interaction timed out, and the retained search state was released.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionTimedOut".
+ */
+/** @experimental */
+export interface CatalogSelectionTimedOut {
+    /**
+     * Discriminator: the host's live interaction timed out
+     */
+    kind: "timed-out";
+    /**
+     * The search identifier privately bound to the released selection group.
+     */
+    searchId: string;
+}
+/**
+ * The runtime-enforced selection reference lifetime elapsed before the request arrived.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionStale".
+ */
+/** @experimental */
+export interface CatalogSelectionStale {
+    /**
+     * Discriminator for this typed selection rejection
+     */
+    kind: "stale";
+    /**
+     * Human-readable explanation safe to surface. Never contains the presented reference or private candidate state.
+     */
+    message: string;
+}
+/**
+ * The presented opaque handle was issued for another catalog operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionWrongKind".
+ */
+/** @experimental */
+export interface CatalogSelectionWrongKind {
+    /**
+     * Discriminator for this typed selection rejection
+     */
+    kind: "wrong-kind";
+    /**
+     * Human-readable explanation safe to surface. Never contains the presented reference or private candidate state.
+     */
+    message: string;
+}
 /**
  * No transport this runtime can use is available for the requested server.
  *
@@ -6805,50 +7648,277 @@ export interface ConnectedRemoteSessionMetadataRepository {
     branch: string;
 }
 /**
- * Remote session connection parameters.
+ * Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ConnectRemoteSessionParams".
+ * via the `definition` "ConnectorAccountRequest".
  */
 /** @experimental */
-export interface ConnectRemoteSessionParams {
+export interface ConnectorAccountRequest {
     /**
-     * Session ID to connect to.
+     * Opaque account selection ID previously returned by an account discovery API.
      */
-    sessionId: string;
+    accountId: string;
 }
 /**
- * Local file system absolute paths within the session working directory to check against its content-exclusion policy.
+ * Account-targeted authorization update required by the Connector service. The account ID is an opaque host routing identifier; no credential is included.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ContentExclusionCheckPathsRequest".
+ * via the `definition` "ConnectorAuthorizationRequirement".
  */
 /** @experimental */
-export interface ContentExclusionCheckPathsRequest {
+export interface ConnectorAuthorizationRequirement {
     /**
-     * Local file system absolute paths within the session working directory to check. Results are returned in the same order, including duplicates.
+     * Exact opaque account selection that made the Connector request.
      */
-    paths: string[];
+    accountId: string;
+    scope: ConnectorAuthorizationScope;
 }
 /**
- * Batch content-exclusion result. Callers must fail closed when policy evaluation is unavailable.
+ * Feature detection and hard polling limits for the EXPERIMENTAL session connector API.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ContentExclusionCheckPathsResult".
+ * via the `definition` "ConnectorCapabilities".
  */
 /** @experimental */
-export interface ContentExclusionCheckPathsResult {
+export interface ConnectorCapabilities {
     /**
-     * Whether the session's policy service was available for the complete batch. When false, checks is empty and callers must treat every requested path as excluded.
+     * Connector API contract version.
      */
-    available: boolean;
+    apiVersion: number;
+    availability: ConnectorAvailability;
     /**
-     * Per-path decisions in request order. Empty when available is false.
+     * Whether connect and reconnect can return an opaque continuation for bounded consent polling.
      */
-    checks: ContentExclusionPathCheck[];
+    consentContinuation: boolean;
+    /**
+     * Whether callers select a host-owned GitHub account through an opaque selection ID rather than supplying a provider token.
+     */
+    opaqueAccountSelection: boolean;
+    /**
+     * Maximum accepted polling attempts for one continuation call.
+     */
+    maxPollAttempts: number;
+    /**
+     * Maximum accepted delay in milliseconds between polling attempts.
+     */
+    maxPollIntervalMs: number;
+    /**
+     * Maximum accepted wall-clock deadline in milliseconds for one continuation call.
+     */
+    maxDeadlineMs: number;
 }
 /**
- * Content-exclusion decision for one requested path.
+ * Credential-free Connector catalog entry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorCatalogEntry".
+ */
+/** @experimental */
+export interface ConnectorCatalogEntry {
+    /**
+     * Canonical Connector name used by lifecycle methods.
+     */
+    name: string;
+    /**
+     * Untrusted display label from the service.
+     */
+    displayName: string;
+    /**
+     * Untrusted service description, when present.
+     */
+    description?: string;
+    status: ConnectorCatalogStatus;
+    /**
+     * Opaque stable runtime IDs currently projected into the session for this Connector.
+     */
+    runtimeServerIds: string[];
+}
+/**
+ * Validated Connector catalog snapshot cached by the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorCatalogResult".
+ */
+/** @experimental */
+export interface ConnectorCatalogResult {
+    /**
+     * Monotonically increasing session-local catalog revision.
+     */
+    revision: number;
+    /**
+     * Unix epoch milliseconds when this snapshot was accepted.
+     */
+    refreshedAtMs: number;
+    /**
+     * Validated catalog entries in service order.
+     */
+    connectors: ConnectorCatalogEntry[];
+}
+/**
+ * Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorConnectRequest".
+ */
+/** @experimental */
+export interface ConnectorConnectRequest {
+    /**
+     * Opaque account selection ID. It must match the account already pinned to the session, if any.
+     */
+    accountId: string;
+    /**
+     * Canonical Connector name from the current catalog.
+     */
+    connectorName: string;
+}
+/**
+ * Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorStatus".
+ */
+/** @experimental */
+export interface ConnectorStatus {
+    /**
+     * Connector API contract version.
+     */
+    apiVersion: number;
+    availability: ConnectorAvailability;
+    /**
+     * Opaque account selection pinned to this session, when one has been selected.
+     */
+    accountId?: string;
+    catalog?: ConnectorCatalogResult;
+    authorizationRequirement?: ConnectorAuthorizationRequirement;
+    /**
+     * Live MCP status for every Connector-owned runtime server.
+     */
+    runtimeServers: ConnectorRuntimeStatus[];
+    /**
+     * Number of active opaque connection continuations.
+     */
+    pendingConnections: number;
+}
+/**
+ * Live status of one session-owned MCP projection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorRuntimeStatus".
+ */
+/** @experimental */
+export interface ConnectorRuntimeStatus {
+    /**
+     * Opaque runtime server ID.
+     */
+    runtimeServerId: string;
+    /**
+     * Canonical Connector name that owns this server.
+     */
+    connectorName: string;
+    status: ConnectorMcpStatus;
+}
+/**
+ * Explicitly bounded continuation of a pending Connector connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorContinueRequest".
+ */
+/** @experimental */
+export interface ConnectorContinueRequest {
+    /**
+     * Opaque continuation ID returned by connect, reconnect, or an earlier continuation.
+     */
+    continuationId: string;
+    /**
+     * Maximum catalog requests made by this call. Must be between one and the capability limit.
+     */
+    maxAttempts: number;
+    /**
+     * Delay in milliseconds between attempts. Must not exceed the capability limit.
+     */
+    pollIntervalMs: number;
+    /**
+     * Maximum wall-clock duration in milliseconds for this call. Must be between one and the capability limit.
+     */
+    deadlineMs: number;
+}
+/**
+ * Authoritative result after disconnect and MCP reconciliation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDisconnectResult".
+ */
+/** @experimental */
+export interface ConnectorDisconnectResult {
+    /**
+     * Whether the service accepted the idempotent disconnect.
+     */
+    disconnected: boolean;
+    status: ConnectorStatus;
+}
+/**
+ * Requests authoritative Connector-to-MCP reconciliation for the pinned account.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorReconcileRequest".
+ */
+/** @experimental */
+export interface ConnectorReconcileRequest {
+    /**
+     * Opaque account selection ID. It must match the account already pinned to the session, if any.
+     */
+    accountId: string;
+    /**
+     * When true, refresh the catalog before reconciling. A disabled Connector API performs no service request.
+     */
+    refreshCatalog?: boolean;
+}
+/**
+ * Remote session connection parameters.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectRemoteSessionParams".
+ */
+/** @experimental */
+export interface ConnectRemoteSessionParams {
+    /**
+     * Session ID to connect to.
+     */
+    sessionId: string;
+}
+/**
+ * Local file system absolute paths within the session working directory to check against its content-exclusion policy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ContentExclusionCheckPathsRequest".
+ */
+/** @experimental */
+export interface ContentExclusionCheckPathsRequest {
+    /**
+     * Local file system absolute paths within the session working directory to check. Results are returned in the same order, including duplicates.
+     */
+    paths: string[];
+}
+/**
+ * Batch content-exclusion result. Callers must fail closed when policy evaluation is unavailable.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ContentExclusionCheckPathsResult".
+ */
+/** @experimental */
+export interface ContentExclusionCheckPathsResult {
+    /**
+     * Whether the session's policy service was available for the complete batch. When false, checks is empty and callers must treat every requested path as excluded.
+     */
+    available: boolean;
+    /**
+     * Per-path decisions in request order. Empty when available is false.
+     */
+    checks: ContentExclusionPathCheck[];
+}
+/**
+ * Content-exclusion decision for one requested path.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "ContentExclusionPathCheck".
@@ -6956,7 +8026,7 @@ export interface CurrentToolMetadata {
     deferLoading?: boolean;
 }
 /**
- * A file included in the redacted debug bundle.
+ * A file included in the session debug bundle.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "DebugCollectLogsCollectedEntry".
@@ -7034,7 +8104,7 @@ export interface DebugCollectLogsInclude {
     previousProcessLogLimit?: number;
 }
 /**
- * Options for collecting a redacted session debug bundle.
+ * Options for collecting a session debug bundle with configurable redaction.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "DebugCollectLogsRequest".
@@ -7049,7 +8119,7 @@ export interface DebugCollectLogsRequest {
     additionalEntries?: DebugCollectLogsEntry[];
 }
 /**
- * Result of collecting a redacted debug bundle.
+ * Result of collecting a session debug bundle.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "DebugCollectLogsResult".
@@ -7062,7 +8132,7 @@ export interface DebugCollectLogsResult {
      */
     path: string;
     /**
-     * Files included in the redacted bundle.
+     * Files included in the bundle.
      */
     entries: DebugCollectLogsCollectedEntry[];
     /**
@@ -7308,18 +8378,16 @@ export interface EnqueueCommandParams {
      */
     displayText?: string | null;
 }
-/**
- * Indicates whether the command was accepted into the local execution queue.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EnqueueCommandResult".
- */
 /** @experimental */
-export interface EnqueueCommandResult {
+export interface UnsupportedEnqueueCommandResult {
     /**
-     * True when the command was accepted into the local execution queue. False when the call targets a session that does not support local command queueing (e.g. remote sessions).
+     * False because the target session does not support local command queueing (e.g. remote sessions).
      */
-    queued: boolean;
+    queued: false;
+    /**
+     * Legacy null queue ID accepted for compatibility with older runtimes.
+     */
+    queueId?: null;
 }
 /**
  * Cursor, batch size, and optional long-poll/filter parameters for reading session events.
@@ -9575,6 +10643,22 @@ export interface InstalledPluginInfo {
      * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — a plugin belonging to a directory/local marketplace, which is loaded from its real directory on every pass instead of a copy under the installed-plugins cache. Its presence is what marks a listed plugin as live: such a plugin is always present on disk, so `enabled` is its only meaningful state and it is never "not installed".
      */
     installedFrom?: string;
+    /**
+     * Runtime-reported plugin provenance. Currently set to "builtin" only for plugins registered through the trusted host built-in boundary; absent for installed, marketplace, direct, and live plugins.
+     */
+    source?: string;
+    /**
+     * Whether enterprise managed settings control this plugin's enabled state.
+     */
+    managed?: boolean;
+    /**
+     * The enabled state required by enterprise managed settings, when this plugin spec is managed.
+     */
+    managedDesiredEnabled?: boolean;
+    /**
+     * Whether the managed desired plugin currently has an installed or live record. Set to false for a managed desired entry retained in the listing after installation or reconciliation failed.
+     */
+    installed?: boolean;
 }
 /**
  * Canonical file or directory where custom instructions can be discovered or created, with location, kind, preference, and project path.
@@ -9728,6 +10812,31 @@ export interface InterruptMainTurnResult {
      */
     interrupted: boolean;
 }
+/**
+ * A JSON Schema output contract. OpenAI receives the name, description, schema and strict setting; Anthropic receives the schema in output_config.format and always uses its native strict enforcement.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "JsonSchemaResponseFormat".
+ */
+/** @experimental */
+export interface JsonSchemaResponseFormat {
+    /**
+     * Name of the output schema, subject to the provider's naming restrictions.
+     */
+    name: string;
+    /**
+     * JSON Schema passed unchanged to the inference provider. Schemas larger than 32 MiB when JSON-encoded are rejected before admission, using the runtime's existing request-size ceiling. This is not a guarantee that the entire model request fits. Supported keywords and schema restrictions are determined by the provider.
+     */
+    schema: JsonValue;
+    /**
+     * Optional description passed to OpenAI providers.
+     */
+    description?: string;
+    /**
+     * Optional strict enforcement setting for OpenAI providers. Omitted uses the provider default. Anthropic always enforces its supported schema subset.
+     */
+    strict?: boolean;
+}
 /**
  * HTTP headers as a map from lowercased header name to a list of values. Multi-valued headers (e.g. Set-Cookie) preserve all values.
  *
@@ -10076,6 +11185,35 @@ export interface LspInitializeRequest {
      */
     force?: boolean;
 }
+/**
+ * Non-secret host-managed HTTP MCP server configuration. The containing map key is the stable managed identity; credentials are supplied dynamically by the host.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedMcpServerConfig".
+ */
+/** @experimental */
+export interface ManagedMcpServerConfig {
+    /**
+     * Human-readable catalog display name.
+     */
+    displayName: string;
+    /**
+     * Hosted MCP streamable HTTP endpoint.
+     */
+    url: string;
+    /**
+     * Tools to include. Defaults to all tools when omitted.
+     */
+    tools?: string[];
+    /**
+     * Timeout in milliseconds for tool discovery and tool calls.
+     */
+    timeout?: number;
+    /**
+     * Maximum dynamic-header cache lifetime in milliseconds.
+     */
+    headersRefreshTtlMs?: number;
+}
 /**
  * Validated device-managed settings discovered before a session exists.
  *
@@ -10156,6 +11294,14 @@ export interface MarketplaceInfo {
      * True when this is a default marketplace shipped with the runtime. Defaults are not removable.
      */
     isDefault?: boolean;
+    /**
+     * Whether enterprise managed settings provide and control this marketplace entry.
+     */
+    managed?: boolean;
+    /**
+     * Whether the managed marketplace currently resolved into the runtime marketplace registry. Set to false when the desired managed entry is retained for governance visibility after loading or reconciliation failed.
+     */
+    available?: boolean;
 }
 /**
  * All registered marketplaces, including built-in defaults.
@@ -10572,6 +11718,10 @@ export interface McpServerConfigStdio {
      * Timeout in milliseconds for tool discovery and tool calls.
      */
     timeout?: number;
+    /**
+     * Milliseconds this server may spend connecting before the CLI warns that it is taking longer than expected. Presentation only: it does not change how long the connection is allowed to take.
+     */
+    slowConnectionThresholdMs?: number;
     oidc?: McpServerAuthConfig;
     auth?: McpServerAuthConfig;
     deferTools?: McpServerConfigDeferTools;
@@ -10693,6 +11843,10 @@ export interface McpServerConfigHttp {
      * Timeout in milliseconds for tool discovery and tool calls.
      */
     timeout?: number;
+    /**
+     * Milliseconds this server may spend connecting before the CLI warns that it is taking longer than expected. Presentation only: it does not change how long the connection is allowed to take.
+     */
+    slowConnectionThresholdMs?: number;
     oidc?: McpServerAuthConfig;
     auth?: McpServerAuthConfig;
     deferTools?: McpServerConfigDeferTools;
@@ -11117,7 +12271,7 @@ export interface McpInstallPlan {
     target: McpPlanTarget;
     policy: McpPlanPolicyResult;
     /**
-     * The configuration changes installing would make, described rather than serialised, so the mutable configuration payload stays behind the runtime boundary.
+     * Alternative configuration changes, with exactly one entry for each transportChoices entry in the same order. Only the entry for the subsequently selected transport applies; these are not cumulative writes. Payloads remain behind the runtime boundary.
      */
     configurationChanges: McpPlanConfigurationChange[];
     /**
@@ -11125,7 +12279,7 @@ export interface McpInstallPlan {
      */
     reloadRequired: boolean;
     /**
-     * Whether the plan cannot be applied without further input, because a required value has no default or a secret must be supplied.
+     * True only when every eligible transport choice needs additional values or secrets. False means at least one choice needs no additional configuration, not that every choice is ready. A later apply operation must validate the selected choice's own inputs, secrets and policy after explicit confirmation.
      */
     requiresInteractiveConfiguration: boolean;
 }
@@ -11357,7 +12511,7 @@ export interface McpPlanPolicyResult {
     reason?: string;
 }
 /**
- * One change applying the plan would make, described rather than serialised so the configuration payload stays behind the runtime boundary.
+ * The configuration-change alternative for the transportChoices entry at the same index. Only the selected alternative is applied; entries are not cumulative. The payload stays behind the runtime boundary.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "McpPlanConfigurationChange".
@@ -11641,7 +12795,7 @@ export interface McpPlanInstallSourceCandidate {
      */
     candidateHandle: string;
     /**
-     * The runtime- or authority-minted `searchId` returned with the search that produced this candidate. A search implementation binds it to private candidate-handle context; a planning implementation must verify that context before returning a plan. The unavailable planning implementation in this contract layer validates presence but does not claim the verification has occurred. It identifies a search rather than a person and must never be joined with user identity to re-identify anyone.
+     * The runtime- or authority-minted `searchId` returned with the search that produced this candidate. Planning verifies the private correlation and atomically consumes a matching candidate before downstream work, including attempts that subsequently fail or report unavailable. A mismatched search does not consume the candidate. It identifies a search rather than a person and must never be joined with user identity to re-identify anyone.
      */
     searchId: string;
 }
@@ -12033,6 +13187,10 @@ export interface McpServer {
      * Plugin version that provided this server, when source is plugin.
      */
     sourcePluginVersion?: string;
+    /**
+     * Human-readable display name supplied by a managed server catalog.
+     */
+    displayName?: string;
     /**
      * Error message if the server failed to connect
      */
@@ -12491,6 +13649,10 @@ export interface ModelCapabilitiesSupports {
      * Whether this model supports vision/image input
      */
     vision?: boolean;
+    /**
+     * Whether this model supports canonical tool calling
+     */
+    toolCalls?: boolean;
     /**
      * Whether this model supports reasoning effort configuration
      */
@@ -12743,6 +13905,7 @@ export interface ModelApplyStartupOverlayRequest {
      * Startup default model from the enterprise policy helper, when configured. Weakest of the managed sources: it applies only when neither device nor server policy names a model, and an explicit user selection still wins.
      */
     policyHelperModel?: string;
+    autoTier?: AutoTier;
     /**
      * Model selected by repository settings, when configured.
      */
@@ -12791,6 +13954,10 @@ export interface ModelCapabilitiesOverrideSupports {
      * Whether this model supports vision/image input
      */
     vision?: boolean;
+    /**
+     * Whether this model supports canonical tool calling
+     */
+    toolCalls?: boolean;
     /**
      * Whether this model supports reasoning effort configuration
      */
@@ -13030,9 +14197,9 @@ export interface ModelSwitchToRequest {
      */
     autoTier?: AutoTier | null;
     /**
-     * Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. "none" disables reasoning. When omitted, no effort override is applied.
+     * Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. "none" disables reasoning. Pass null to clear any session effort override and fall back to the model's default. When omitted, the session's current effort is kept.
      */
-    reasoningEffort?: string;
+    reasoningEffort?: string | null;
     reasoningSummary?: ReasoningSummary;
     verbosity?: Verbosity;
     modelCapabilities?: ModelCapabilitiesOverride;
@@ -13072,6 +14239,10 @@ export interface ModelSwitchToRequest {
  */
 /** @experimental */
 export interface ModelSwitchToResult {
+    /**
+     * Stable queue item identifier when this request was enqueued. Remains present if the item drains before the response is returned.
+     */
+    queueId?: string;
     /**
      * Currently active model identifier after the switch
      */
@@ -13380,6 +14551,10 @@ export interface PendingPermissionRequest {
      */
     requestId: string;
     request: PermissionPromptRequest;
+    /**
+     * Permission-recovery episode that authorized this request to surface for interactive attention
+     */
+    recoveryEpisodeId?: string;
 }
 /**
  * List of pending permission requests reconstructed from event history.
@@ -14381,7 +15556,7 @@ export interface PermissionPathsConfig {
     workspacePath?: string;
 }
 /**
- * Snapshot of the session's allow-listed directories and primary working directory.
+ * Snapshot of the session's recursive directory grants, exact session-approved paths, and primary working directory.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "PermissionPathsList".
@@ -14392,6 +15567,10 @@ export interface PermissionPathsList {
      * All directories currently allowed for tool access on this session.
      */
     directories: string[];
+    /**
+     * Exact paths approved for this session without recursively allowing their descendants.
+     */
+    sessionApprovedPaths?: string[];
     /**
      * The primary working directory for this session.
      */
@@ -14697,7 +15876,7 @@ export interface PermissionsPathsAddResult {
     success: boolean;
 }
 /**
- * No parameters; returns the session's allow-listed directories.
+ * No parameters; returns the session's recursive directory grants and exact session-approved paths.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "PermissionsPathsListRequest".
@@ -14728,7 +15907,7 @@ export interface PermissionsPathsUpdatePrimaryResult {
 export interface PermissionsPendingRequestsRequest {
 }
 /**
- * Clears session-scoped tool permission approvals, and optionally the location-scoped ones.
+ * Clears session-scoped tool approvals and optionally clears location-scoped approvals and exact session-approved paths.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "PermissionsResetSessionApprovalsRequest".
@@ -14736,7 +15915,7 @@ export interface PermissionsPendingRequestsRequest {
 /** @experimental */
 export interface PermissionsResetSessionApprovalsRequest {
     /**
-     * Whether location-scoped approvals are cleared too. Defaults to `true`.
+     * Whether location-scoped approvals and exact session-approved paths are cleared too. Defaults to `true`.
      */
     includeLocation?: boolean;
 }
@@ -15029,6 +16208,30 @@ export interface Plugin {
      * Whether the plugin is currently enabled
      */
     enabled: boolean;
+    /**
+     * Opaque stable identity for a direct plugin source.
+     */
+    directSourceId?: string;
+    /**
+     * Absolute marketplace directory for a live plugin.
+     */
+    installedFrom?: string;
+    /**
+     * Runtime plugin provenance, such as "builtin".
+     */
+    source?: string;
+    /**
+     * Whether enterprise managed settings control this plugin.
+     */
+    managed?: boolean;
+    /**
+     * Enabled state required by enterprise managed settings.
+     */
+    managedDesiredEnabled?: boolean;
+    /**
+     * Whether this managed desired plugin has an installed or live record.
+     */
+    installed?: boolean;
 }
 /**
  * Result of installing a plugin.
@@ -15346,35 +16549,92 @@ export interface ProtocolExternalToolDefinition {
         [k: string]: JsonValue | undefined;
     };
 }
-/**
- * BYOK providers and/or models to add to the session's registry at runtime. Both fields are optional; provide providers, models, or both.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderAddRequest".
- */
 /** @experimental */
-export interface ProviderAddRequest {
+export interface ProtocolStaticSectionOverride {
+    action: ProtocolStaticSectionAction;
     /**
-     * Named BYOK provider connections to register, additive to any providers already in the registry. Each name must be unique across the registry and must not contain '/'.
+     * Optional content used by replace, append, and prepend operations.
      */
-    providers?: NamedProviderConfig[];
+    content?: string;
+}
+/** @experimental */
+export interface ProtocolSystemMessageAppendConfig {
+    mode?: ProtocolAppendMode;
     /**
-     * BYOK model definitions to register. Each must reference a provider that is already registered or included in this same call. Selection ids (`provider/id`) must be unique across the registry.
+     * Text appended to the standard system prompt.
      */
-    models?: ProviderModelConfig[];
+    content?: string;
 }
-/**
- * A BYOK model definition referencing a named provider.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderModelConfig".
- */
 /** @experimental */
-export interface ProviderModelConfig {
+export interface ProtocolSystemMessageReplaceConfig {
+    mode: ProtocolReplaceMode;
     /**
-     * Provider-local model id, unique within its provider. The session-wide selection id (shown in the model list and passed to switchTo) is the provider-qualified `provider/id`.
+     * Complete replacement system-message text.
      */
-    id: string;
+    content: string;
+    /**
+     * Optional structured blocks corresponding to the replacement content.
+     */
+    contentBlocks?: SystemMessageBlock[];
+}
+/** @experimental */
+export interface SystemMessageBlock {
+    /**
+     * Text content for this system-message block.
+     */
+    content: string;
+    /**
+     * Whether the block is static and may be cached independently of dynamic prompt content.
+     */
+    isStatic?: boolean;
+    /**
+     * Whether providers with explicit prompt caching should place a cache breakpoint after this block.
+     */
+    cacheBreakpoint?: boolean;
+}
+/** @experimental */
+export interface ProtocolSystemMessageCustomizeConfig {
+    mode: ProtocolCustomizeMode;
+    /**
+     * Named standard-prompt section overrides.
+     */
+    sections?: {
+        [k: string]: ProtocolSectionOverride;
+    };
+    /**
+     * Text appended after the customized sections.
+     */
+    content?: string;
+}
+/**
+ * BYOK providers and/or models to add to the session's registry at runtime. Both fields are optional; provide providers, models, or both.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderAddRequest".
+ */
+/** @experimental */
+export interface ProviderAddRequest {
+    /**
+     * Named BYOK provider connections to register, additive to any providers already in the registry. Each name must be unique across the registry and must not contain '/'.
+     */
+    providers?: NamedProviderConfig[];
+    /**
+     * BYOK model definitions to register. Each must reference a provider that is already registered or included in this same call. Selection ids (`provider/id`) must be unique across the registry.
+     */
+    models?: ProviderModelConfig[];
+}
+/**
+ * A BYOK model definition referencing a named provider.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderModelConfig".
+ */
+/** @experimental */
+export interface ProviderModelConfig {
+    /**
+     * Provider-local model id, unique within its provider. The session-wide selection id (shown in the model list and passed to switchTo) is the provider-qualified `provider/id`.
+     */
+    id: string;
     /**
      * Name of the configured provider that serves this model.
      */
@@ -15404,6 +16664,13 @@ export interface ProviderModelConfig {
      */
     maxOutputTokens?: number;
     capabilities?: ModelCapabilitiesOverride;
+    systemMessage?: ProtocolSystemMessageConfig;
+    /**
+     * Provider-published model metadata, preserved verbatim as the public Model.metadata object.
+     */
+    metadata?: {
+        [k: string]: JsonValue | undefined;
+    };
 }
 /**
  * The selectable model entries synthesized for the models added by this call.
@@ -15530,6 +16797,44 @@ export interface ProviderSessionToken {
      */
     expiresAt?: string;
 }
+/**
+ * Authoritative BYOK provider and model registry snapshot to apply atomically to the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderSyncRequest".
+ */
+/** @experimental */
+export interface ProviderSyncRequest {
+    /**
+     * Named BYOK provider connection snapshot. Providers absent from this list are removed.
+     */
+    providers?: NamedProviderConfig[];
+    /**
+     * BYOK model definition snapshot. Models absent from this list are removed.
+     */
+    models?: ProviderModelConfig[];
+}
+/**
+ * The selectable model entries and selection ids synthesized for the synchronized BYOK models.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderSyncResult".
+ */
+/** @experimental */
+export interface ProviderSyncResult {
+    /**
+     * Synthesized selectable model entries for the synchronized BYOK models.
+     */
+    models: JsonValue[];
+    /**
+     * Provider-qualified model selection ids present after synchronization.
+     */
+    selectionIds: string[];
+    /**
+     * True when synchronization withdrew the selected host-managed model, leaving the session with no explicit selection, so ordinary model resolution picks the session default. Synchronization never promotes a surviving host model in its place: publishing a model offers it, and the choice of which model to use stays with the user.
+     */
+    modelDeselected?: boolean;
+}
 /**
  * Asks the SDK client to acquire a bearer token for a BYOK provider whose config set `hasBearerTokenProvider: true`. Issued by the runtime before each outbound model request; the runtime does no caching, so this is sent once per request.
  *
@@ -16019,6 +17324,36 @@ export interface PushAttachmentBlob {
      */
     displayName?: string;
 }
+/**
+ * Append to one pending steering message without changing its identity or delivery position.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueAppendSteeringRequest".
+ */
+/** @experimental */
+export interface QueueAppendSteeringRequest {
+    /**
+     * Message identity returned by send, not the queue item id. Only unclaimed user steering messages are eligible.
+     */
+    messageId: string;
+    /**
+     * Expected current prompt, including any previous appends. The runtime applies plan-mode normalization before comparing and refuses a changed message.
+     */
+    expectedPrompt: string;
+    agentMode: SendAgentMode;
+    /**
+     * Text to append after a blank line.
+     */
+    prompt: string;
+    /**
+     * Display text to append to the existing preview after a blank line.
+     */
+    displayPrompt: string;
+    /**
+     * Attachments to add after the message's existing attachments. An empty list preserves the existing attachments.
+     */
+    attachments: Attachment[];
+}
 /**
  * Inputs for starting a deferred-idle drain.
  *
@@ -16397,6 +17732,10 @@ export interface QueueSetDrainPausedRequest {
  */
 /** @experimental */
 export interface QueueSnapshotResult {
+    /**
+     * Queue item identifier of a model switch that has been dequeued but not yet applied.
+     */
+    inFlightModelChangeId?: string;
     /**
      * User-facing pending items in FIFO order.
      */
@@ -16448,6 +17787,23 @@ export interface QueueUpdateTextResult {
      */
     updated: boolean;
 }
+/**
+ * Conditional withdrawal of a single user message, before the runtime claims it for delivery.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueWithdrawMessageRequest".
+ */
+/** @experimental */
+export interface QueueWithdrawMessageRequest {
+    /**
+     * Message identity returned by send, not the queue item id. Batch messages are not eligible.
+     */
+    messageId: string;
+    /**
+     * The prompt originally sent. A message edited since submission is not withdrawn, so an obsolete draft cannot replace the edit.
+     */
+    expectedPrompt: string;
+}
 /**
  * Event type to register consumer interest for, used by runtime gating logic.
  *
@@ -16474,15 +17830,6 @@ export interface RegisterEventInterestResult {
      */
     handle: string;
 }
-/**
- * Optional registration options.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionsRegisterExtensionToolsOnSessionOptions".
- */
-/** @experimental */
-export interface SessionsRegisterExtensionToolsOnSessionOptions {
-}
 /**
  * Opaque handle previously returned by `registerInterest` to release.
  *
@@ -16904,6 +18251,14 @@ export interface SandboxConfigUserPolicyFilesystem {
  */
 /** @experimental */
 export interface SandboxConfigUserPolicyNetwork {
+    /**
+     * Hosts allowed through the built-in sandbox proxy. A non-empty list denies unmatched hosts; an absent or empty list allows all hosts not blocked. Supports exact hostnames, IP addresses, and *.example.com for strict subdomains. Host rules do not override the outbound or local-network toggles.
+     */
+    allowedHosts?: string[];
+    /**
+     * Hosts denied by the built-in sandbox proxy. Deny rules take precedence over allowedHosts. A domain also denies all its subdomains. IP addresses match exactly; *.example.com matches strict subdomains, and * denies every host.
+     */
+    blockedHosts?: string[];
     /**
      * Whether outbound network traffic is allowed at all.
      */
@@ -17342,7 +18697,7 @@ export interface SendMessageItem {
 /** @experimental */
 export interface SendMessagesRequest {
     /**
-     * The user messages to append to the conversation, in order. May be empty, in which case a single turn runs over the existing history with no new user message.
+     * The user messages to append to the conversation, in order, before running one agent loop. When the batch starts a run, its final message is the primary initiating message; earlier messages provide context, not separate runs or replies. May be empty, in which case a single turn runs over the existing history with no new user message or originatingMessageId.
      */
     messages: SendMessageItem[];
     mode?: SendMode;
@@ -17357,6 +18712,7 @@ export interface SendMessagesRequest {
     requestHeaders?: {
         [k: string]: string | undefined;
     };
+    responseFormat?: ResponseFormat;
     /**
      * W3C Trace Context traceparent header for distributed tracing of this agent turn
      */
@@ -17379,7 +18735,7 @@ export interface SendMessagesRequest {
 /** @experimental */
 export interface SendMessagesResult {
     /**
-     * Unique identifiers assigned to the messages, one per provided message in order. Empty when no messages were provided.
+     * Unique identifiers assigned to the messages, one per provided message in order. For a batch that starts a run, assistant messages use the final ID as originatingMessageId throughout that run, including tool iterations and stop-hook corrections. Immediate steering does not replace the active run's origin. Empty when no messages were provided; that run has no originatingMessageId.
      */
     messageIds: string[];
 }
@@ -17423,6 +18779,7 @@ export interface SendRequest {
     requestHeaders?: {
         [k: string]: string | undefined;
     };
+    responseFormat?: ResponseFormat;
     /**
      * W3C Trace Context traceparent header for distributed tracing of this agent turn
      */
@@ -17940,7 +19297,7 @@ export interface SessionFsSetProviderCapabilities {
     sqlite?: boolean;
 }
 /**
- * Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider.
+ * Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider. A registered provider is authoritative for path interpretation and filesystem facts used by workspace permission validation. Paths are interpreted lexically; home-relative paths (`~` and `~/...`) and Windows drive-relative paths such as `C:foo` are unsupported. Until provider-side canonicalization is supported, providers must not expose symlinks inside allowed roots that escape those roots.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SessionFsSetProviderRequest".
@@ -17948,7 +19305,7 @@ export interface SessionFsSetProviderCapabilities {
 /** @experimental */
 export interface SessionFsSetProviderRequest {
     /**
-     * Initial working directory for sessions
+     * Absolute initial working directory for sessions. Registering the provider establishes this path as the root of its virtual namespace; the runtime does not require the provider to materialize or stat it before creating a session.
      */
     initialCwd: string;
     /**
@@ -18418,7 +19775,7 @@ export interface SessionLoadDeferredRepoHooksResult {
 /** @experimental */
 export interface SessionManagedPermissions {
     /**
-     * When set to `disable`, prevents bypass/allow-all permission modes. `allow-auto-only` blocks full allow-all but permits advisory auto-approval. Any other value is accepted rather than failing the session, but is enforced as `disable`: the key is only present to restrict something, so a mode this runtime cannot interpret fails closed to the most restrictive one it knows. Omit the key entirely to impose no restriction.
+     * When set to `disable`, prevents bypass/allow-all permission modes. Advisory auto-approval remains available because normal prompt paths stay active. Any other value is accepted rather than failing the session, but is enforced as `disable`: the key is only present to restrict something, so a mode this runtime cannot interpret fails closed to the most restrictive one it knows. Omit the key entirely to impose no restriction.
      */
     disableBypassPermissionsMode?: string;
     /**
@@ -18502,6 +19859,7 @@ export interface SessionMetadataSnapshot {
      * Current session limits, or null when no limits are active
      */
     sessionLimits: SessionLimitsConfig | null;
+    indexedSearch?: IndexedSearchState;
     /**
      * Public-facing workspace metadata for this session, or null if the session has no associated workspace. Excludes runtime-internal fields (GitHub IDs, summary count, internal flags).
      */
@@ -18591,7 +19949,7 @@ export interface SessionOpenOptions {
      */
     integrationId?: string;
     /**
-     * Opt-in: self-fetch and enforce enterprise managed settings at session bootstrap.
+     * Opt-in: self-fetch and enforce enterprise managed settings, including managed hook policies, at session bootstrap.
      */
     enableManagedSettings?: boolean;
     managedSettings?: SessionManagedSettings;
@@ -18693,6 +20051,14 @@ export interface SessionOpenOptions {
      * MCP server names disabled for this session. Disabled servers are not started or authenticated on create or cold resume.
      */
     disabledMcpServers?: string[];
+    /**
+     * Non-secret host-managed HTTP MCP servers keyed by stable managed identity. Managed provenance is runtime-established from this separate field and credentials are supplied through dynamic-header refresh.
+     *
+     * @experimental
+     */
+    managedMcpServers?: {
+        [k: string]: ManagedMcpServerConfig;
+    };
     /**
      * Whether to include instructions from every MCP server in the system prompt instead of only allowlisted servers.
      */
@@ -18701,6 +20067,10 @@ export interface SessionOpenOptions {
      * Additional directories to search for skills.
      */
     skillDirectories?: string[];
+    /**
+     * Skill scan directories and descendants excluded from discovery. Supports `~`-relative paths.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * Whether skill loading is enabled. When omitted, an SDK skill provider enables skills by default.
      */
@@ -19126,6 +20496,45 @@ export interface SessionsOpenProgress {
      */
     message?: string;
 }
+/**
+ * Plugin names (or specs) to disable in the session's authoritative working directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionPluginsDisableRequest".
+ */
+/** @experimental */
+export interface SessionPluginsDisableRequest {
+    /**
+     * Plugin names or "plugin@marketplace" specs to disable. Unknown names are ignored. Non-marketplace direct installs cannot be disabled via this API; uninstall them instead. Plugin-owned MCP servers are stopped in active sessions immediately; other plugin contributions remain available until each session reloads plugins.
+     */
+    names: string[];
+}
+/**
+ * Plugin names (or specs) to enable in the session's authoritative working directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionPluginsEnableRequest".
+ */
+/** @experimental */
+export interface SessionPluginsEnableRequest {
+    /**
+     * Plugin names or "plugin@marketplace" specs to enable. Unknown names are ignored. Non-marketplace direct installs are always enabled and cannot be toggled via this API.
+     */
+    names: string[];
+}
+/**
+ * Plugin source resolved relative to the session's authoritative working directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionPluginsInstallRequest".
+ */
+/** @experimental */
+export interface SessionPluginsInstallRequest {
+    /**
+     * Plugin install spec. Accepts the same forms as the CLI: "plugin@marketplace" (marketplace install), "owner/repo" or "owner/repo:subpath" (GitHub direct), an http/https/ssh URL, or a local path. Direct (non-marketplace) installs are deprecated and will produce a deprecationWarning in the result.
+     */
+    source: string;
+}
 /**
  * Outcome of the prune operation: deleted IDs, dry-run candidates, skipped IDs, total bytes freed, and the dry-run flag.
  *
@@ -20142,6 +21551,10 @@ export interface SessionUpdateOptionsParams {
      * Additional directories to search for skills.
      */
     skillDirectories?: string[];
+    /**
+     * Skill scan directories and descendants excluded from discovery. Supports `~`-relative paths.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * Built-in skill names to include in this session. When specified, only these runtime-bundled skills are available. Skills from other sources with the same name remain available. Set to null to remove the allowlist restriction.
      */
@@ -20387,6 +21800,10 @@ export interface ShutdownRequest {
      * Optional human-readable reason. Typically the message of the error that triggered shutdown when type is 'error'.
      */
     reason?: string;
+    /**
+     * Dispatch deferred sessionEnd hooks in the background with their full per-hook timeoutSec instead of awaiting them under the short shared shutdown budget. Set this when the host process keeps running after the session closes (for example the CLI's /clear), so a slow hook neither blocks the close nor is aborted. Hooks still detached when the process later exits are terminated with it. Defaults to false.
+     */
+    detachSessionEndHooks?: boolean;
 }
 /**
  * Skill metadata available to a session, with name, description, source, enabled/invocable state, path, plugin, and argument hint.
@@ -20566,6 +21983,10 @@ export interface SkillsDiscoverRequest {
      * Optional list of additional skill directory paths to include
      */
     skillDirectories?: string[];
+    /**
+     * Optional skill scan paths to exclude from discovery.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * When true, omit skills from the host's global sources (personal, custom, plugin, and built-in), returning only project-scoped skills. For multitenant deployments.
      */
@@ -20596,6 +22017,10 @@ export interface SkillsGetDiscoveryPathsRequest {
      * Optional list of project directory paths. When omitted or empty, only personal and custom directories are returned.
      */
     projectPaths?: string[];
+    /**
+     * Optional skill scan paths to exclude from discovery.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * When true, omit the host's personal and custom skill directories, leaving only project directories. For multitenant deployments.
      */
@@ -20776,6 +22201,7 @@ export interface SlashCommandTextResult {
      * True when the invocation mutated user runtime settings; consumers caching settings should refresh
      */
     runtimeSettingsChanged?: boolean;
+    sandboxSessionChange?: SandboxSessionChange;
 }
 /**
  * Slash-command invocation result asking the client to present subcommand options for a parent command.
@@ -21668,6 +23094,12 @@ export interface Tool {
      * Optional instructions for how to use this tool effectively
      */
     instructions?: string;
+    /**
+     * Telemetry-safety policy for the tool name and input names, not input values. Treat omitted metadata as unsafe.
+     *
+     * @experimental
+     */
+    safeForTelemetry?: BuiltinToolSafeForTelemetry;
 }
 /**
  * Built-in tools available for the requested model, with their parameters and instructions.
@@ -22924,113 +24356,1076 @@ export interface VisibilitySetResult {
     shareUrl?: string;
 }
 /**
- * A single changed file and its unified diff.
+ * Parameters for cooperatively aborting a workflow body.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspaceDiffFileChange".
+ * via the `definition` "WorkflowAbortRequest".
  */
 /** @experimental */
-export interface WorkspaceDiffFileChange {
-    /**
-     * Path to the changed file, relative to the workspace root when the file lives under it. A file changed outside the workspace root keeps a `../`-relative path, or an absolute path when no relative path exists (for example a different Windows drive).
-     */
-    path: string;
+export interface WorkflowAbortRequest {
     /**
-     * Unified diff content for the file. Empty when the diff was truncated.
+     * Target session identifier
      */
-    diff: string;
-    changeType: WorkspaceDiffFileChangeType;
+    sessionId: string;
     /**
-     * Original file path for renamed files.
+     * Workflow run identifier.
      */
-    oldPath?: string;
+    runId: string;
     /**
-     * Whether the diff content was omitted because it exceeded the per-file size limit.
+     * Opaque token identifying the execution attempt to abort.
      */
-    isTruncated?: boolean;
+    executionToken: string;
 }
 /**
- * Workspace diff result for the requested mode.
+ * Acknowledgement that a workflow request was accepted.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspaceDiffResult".
+ * via the `definition` "WorkflowAckResult".
  */
 /** @experimental */
-export interface WorkspaceDiffResult {
-    requestedMode: WorkspaceDiffMode;
-    mode: WorkspaceDiffMode;
-    /**
-     * Changed files and their unified diffs.
-     */
-    changes: WorkspaceDiffFileChange[];
-    /**
-     * Default branch used for a branch diff, when branch mode was requested.
-     */
-    baseBranch?: string;
-    /**
-     * Whether the requested diff fell back to unstaged changes, either because branch diff failed or session diff was unavailable.
-     */
-    isFallback: boolean;
-    unavailableReason?: HistoryRewindUnavailableReason;
+export interface WorkflowAckResult {
 }
 /**
- * Compaction summary checkpoint to persist.
+ * Options for one workflow-scoped subagent call.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspacesAddSummaryRequest".
+ * via the `definition` "WorkflowAgentOptions".
  */
 /** @experimental */
-export interface WorkspacesAddSummaryRequest {
+export interface WorkflowAgentOptions {
     /**
-     * Summary title shown in checkpoint listings.
+     * Optional label distinguishing otherwise identical memoized agent calls.
      */
-    title: string;
+    label?: string;
     /**
-     * Markdown summary content to persist.
+     * Optional JSON Schema for structured agent output.
      */
-    content: string;
+    schema?: JsonValue;
+    /**
+     * Optional model identifier for the subagent.
+     */
+    model?: string;
+    /**
+     * Optional reasoning effort override for the subagent.
+     */
+    reasoningEffort?: string;
+    contextTier?: ContextTier;
+    /**
+     * Optional built-in or custom agent name whose definition configures the subagent.
+     */
+    agent?: string;
 }
 /**
- * Persisted summary metadata and refreshed workspace metadata.
+ * Parameters for one workflow-scoped subagent call.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspacesAddSummaryResult".
+ * via the `definition` "WorkflowAgentRequest".
  */
 /** @experimental */
-export interface WorkspacesAddSummaryResult {
+export interface WorkflowAgentRequest {
     /**
-     * Metadata for the persisted summary.
+     * Workflow run identifier that owns the subagent.
      */
-    summary?: {};
+    workflowRunId: string;
     /**
-     * Refreshed metadata for the containing workspace.
+     * Opaque token identifying the current workflow execution attempt.
      */
-    workspace?: {};
-    [k: string]: unknown | undefined;
+    executionToken: string;
+    /**
+     * Prompt to send to the subagent.
+     */
+    prompt: string;
+    opts: WorkflowAgentOptions;
 }
 /**
- * Whether the autopilot objective file exists.
+ * Result of one workflow-scoped subagent call.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspacesAutopilotObjectiveExistsResult".
+ * via the `definition` "WorkflowAgentResult".
  */
 /** @experimental */
-export interface WorkspacesAutopilotObjectiveExistsResult {
+export interface WorkflowAgentResult {
     /**
-     * True when the objective file exists.
+     * Agent result, omitted when the agent produced no result.
      */
-    exists: boolean;
+    result?: JsonValue;
 }
 /**
- * Workspace checkpoint metadata with assigned number, human-readable title, and checkpoint filename.
+ * Prompt-safe durable identity and live status for a direct workflow agent.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspacesCheckpoints".
+ * via the `definition` "WorkflowAgentSummary".
  */
 /** @experimental */
-export interface WorkspacesCheckpoints {
+export interface WorkflowAgentSummary {
     /**
-     * Checkpoint number assigned by the workspace manager
+     * Stable direct-agent identifier.
+     */
+    agentId: string;
+    /**
+     * Tool-call identifier that launched the agent.
+     */
+    toolCallId: string;
+    /**
+     * Owning workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Phase identifier active when the agent was launched, or null.
+     */
+    phaseId: string | null;
+    /**
+     * Friendly, non-unique name intended for display
+     */
+    label: string;
+    /**
+     * Friendly, non-unique name intended for display
+     */
+    displayName?: string;
+    /**
+     * Registered agent type.
+     */
+    agentType: string;
+    /**
+     * Current durable or live agent status.
+     */
+    status: string;
+    /**
+     * Model requested when the agent was launched.
+     */
+    requestedModel?: string;
+    /**
+     * Concrete model resolved for the agent.
+     */
+    resolvedModel?: string;
+    /**
+     * Epoch milliseconds when the agent started.
+     */
+    startedAt?: number;
+    /**
+     * Epoch milliseconds when the agent completed.
+     */
+    completedAt?: number;
+    /**
+     * Accumulated active agent time in milliseconds.
+     */
+    activeMs: number;
+    /**
+     * Prompt-safe live activity text.
+     */
+    activity?: string;
+}
+/**
+ * Parameters for cancelling a workflow run.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowCancelRequest".
+ */
+/** @experimental */
+export interface WorkflowCancelRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+}
+/**
+ * Current workflow phase identity.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowCurrentPhase".
+ */
+/** @experimental */
+export interface WorkflowCurrentPhase {
+    /**
+     * Current phase identifier.
+     */
+    id: string;
+    /**
+     * Zero-based declared phase ordinal, or null for an undeclared phase.
+     */
+    ordinal: number | null;
+}
+/**
+ * Declared or approved workflow resource ceilings.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowDeclaredLimits".
+ */
+/** @experimental */
+export interface WorkflowDeclaredLimits {
+    /**
+     * Maximum concurrently active subagents.
+     */
+    maxConcurrentSubagents?: number;
+    /**
+     * Maximum total subagents spawned by the run.
+     */
+    maxTotalSubagents?: number;
+    /**
+     * Maximum accumulated active execution time in seconds.
+     */
+    timeoutSeconds?: number;
+    /**
+     * Maximum AI credits consumed by subagents and descendants.
+     */
+    maxAiCredits?: number;
+}
+/**
+ * Parameters sent to the owning extension to execute a workflow closure.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowExecuteRequest".
+ */
+/** @experimental */
+export interface WorkflowExecuteRequest {
+    /**
+     * Target session identifier
+     */
+    sessionId: string;
+    /**
+     * Registered workflow name.
+     */
+    name: string;
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying this workflow execution attempt.
+     */
+    executionToken: string;
+    /**
+     * Workflow input value.
+     */
+    args: JsonValue;
+}
+/**
+ * Result returned by an extension workflow closure.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowExecuteResult".
+ */
+/** @experimental */
+export interface WorkflowExecuteResult {
+    /**
+     * Workflow result value.
+     */
+    result?: JsonValue;
+}
+/**
+ * Parameters for paging workflow progress.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowGetRunProgressRequest".
+ */
+/** @experimental */
+export interface WorkflowGetRunProgressRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Optional phase identifier used to scope records and cursors.
+     */
+    phaseId?: string;
+    /**
+     * Exclusive forward cursor.
+     */
+    afterSeq?: number;
+    /**
+     * Exclusive backward cursor.
+     */
+    beforeSeq?: number;
+    /**
+     * Maximum records to return. Defaults to 200 and is capped at 500.
+     */
+    limit?: number;
+}
+/**
+ * Parameters for retrieving a workflow run.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowGetRunRequest".
+ */
+/** @experimental */
+export interface WorkflowGetRunRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+}
+/**
+ * Parameters for reading a workflow journal entry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowJournalGetRequest".
+ */
+/** @experimental */
+export interface WorkflowJournalGetRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying the current workflow execution attempt.
+     */
+    executionToken: string;
+    /**
+     * Namespaced journal key.
+     */
+    key: string;
+}
+/**
+ * Result of reading a workflow journal entry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowJournalGetResult".
+ */
+/** @experimental */
+export interface WorkflowJournalGetResult {
+    /**
+     * Whether the journal contained the requested key.
+     */
+    hit: boolean;
+    /**
+     * Cached JSON result. The hit field distinguishes a cached JSON null from a miss.
+     */
+    resultJson?: JsonValue;
+}
+/**
+ * Parameters for storing a workflow journal entry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowJournalPutRequest".
+ */
+/** @experimental */
+export interface WorkflowJournalPutRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying the current workflow execution attempt.
+     */
+    executionToken: string;
+    /**
+     * Namespaced journal key.
+     */
+    key: string;
+    /**
+     * JSON result to memoize.
+     */
+    resultJson: JsonValue;
+}
+/**
+ * Parameters for paging workflow runs.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowListRunsRequest".
+ */
+/** @experimental */
+export interface WorkflowListRunsRequest {
+    /**
+     * Exclusive forward cursor.
+     */
+    afterSeq?: number;
+    /**
+     * Exclusive backward cursor.
+     */
+    beforeSeq?: number;
+    /**
+     * Maximum terminal runs to return. Defaults to 200 and is capped at 500.
+     */
+    limit?: number;
+}
+/**
+ * A page of workflow runs in durable creation order.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowListRunsResult".
+ */
+/** @experimental */
+export interface WorkflowListRunsResult {
+    /**
+     * Workflow run summaries in durable creation order.
+     */
+    runs: WorkflowRunSummary[];
+    /**
+     * Oldest terminal-run cursor in this page, or null when the terminal window is empty.
+     */
+    oldestSeq?: number | null;
+    /**
+     * Newest terminal-run cursor in this page, or null when the terminal window is empty.
+     */
+    newestSeq?: number | null;
+    /**
+     * Whether terminal runs newer than this page exist.
+     */
+    hasMoreNewer?: boolean;
+    /**
+     * Number of terminal runs older than this page.
+     */
+    omittedOlder?: number;
+}
+/**
+ * Durable workflow run summary with read-time live overlays.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunSummary".
+ */
+/** @experimental */
+export interface WorkflowRunSummary {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Registered workflow name.
+     */
+    workflowName: string;
+    /**
+     * Human-readable workflow description.
+     */
+    description: string;
+    status: WorkflowRunStatus;
+    /**
+     * Monotonic durable run revision.
+     */
+    revision: number;
+    /**
+     * Epoch milliseconds when the run was created.
+     */
+    createdAt: number;
+    /**
+     * Epoch milliseconds when execution first started, or null before start.
+     */
+    startedAt: number | null;
+    /**
+     * Epoch milliseconds when the durable run was last updated.
+     */
+    updatedAt: number;
+    /**
+     * Epoch milliseconds when the run completed, or null while nonterminal.
+     */
+    completedAt: number | null;
+    /**
+     * Current phase identity, or null before any phase is entered.
+     */
+    currentPhase: WorkflowCurrentPhase | null;
+    /**
+     * Number of phases declared by the workflow.
+     */
+    declaredPhaseCount: number;
+    /**
+     * Number of direct workflow agents currently live.
+     */
+    liveAgentCount: number;
+    /**
+     * Total direct workflow agents spawned across all attempts.
+     */
+    totalSpawnedAgentCount: number;
+    consumed: WorkflowRunConsumed;
+    declaredLimits: WorkflowDeclaredLimits;
+    /**
+     * Approved effective resource ceilings, or null until approved.
+     */
+    approved: WorkflowDeclaredLimits | null;
+    /**
+     * Epoch milliseconds when this live-overlay snapshot was observed.
+     */
+    observedAt: number;
+    /**
+     * Epoch milliseconds when the current active segment started, or null while inactive.
+     */
+    activeSegmentStartedAt: number | null;
+    /**
+     * Terminal run outcome, or null while nonterminal.
+     */
+    terminal: WorkflowRunTerminal | null;
+    /**
+     * Whether the durable run state currently passes runtime resume eligibility checks.
+     */
+    canResume: boolean;
+}
+/**
+ * Durable workflow resource consumption.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunConsumed".
+ */
+/** @experimental */
+export interface WorkflowRunConsumed {
+    /**
+     * Accumulated active execution time in milliseconds.
+     */
+    activeMs: number;
+    /**
+     * Total subagents spawned by the run.
+     */
+    subagents: number;
+    /**
+     * AI usage consumed by the run in nano-AIU.
+     */
+    nanoAiu: number;
+}
+/**
+ * Prompt-safe terminal workflow outcome.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunTerminal".
+ */
+/** @experimental */
+export interface WorkflowRunTerminal {
+    /**
+     * Human-readable terminal reason.
+     */
+    reason?: string;
+    failure?: WorkflowRunFailure;
+    /**
+     * Human-readable terminal error.
+     */
+    error?: string;
+    /**
+     * Prompt-safe preview of the completed result.
+     */
+    resultPreview?: string;
+    /**
+     * Pause initiator metadata, or null when the run did not pause.
+     */
+    pauseInfo: WorkflowPauseInfo | null;
+}
+/**
+ * One ordered workflow progress line.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowLogLine".
+ */
+/** @experimental */
+export interface WorkflowLogLine {
+    /**
+     * Monotonic sequence number within the workflow run.
+     */
+    seq: number;
+    kind: WorkflowLogLineKind;
+    /**
+     * Progress text.
+     */
+    text: string;
+}
+/**
+ * Parameters for recording workflow progress.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowLogRequest".
+ */
+/** @experimental */
+export interface WorkflowLogRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying the current workflow execution attempt.
+     */
+    executionToken: string;
+    /**
+     * Ordered progress lines to append.
+     */
+    lines: WorkflowLogLine[];
+}
+/**
+ * Parameters for an owned durable pause checkpoint.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowPauseCheckpointRequest".
+ */
+/** @experimental */
+export interface WorkflowPauseCheckpointRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying the execution attempt that reached the checkpoint.
+     */
+    executionToken: string;
+    /**
+     * Stable author-defined checkpoint key.
+     */
+    key: string;
+}
+/** @experimental */
+export interface WorkflowPauseCheckpointResult {
+    action: WorkflowPauseCheckpointAction;
+}
+/**
+ * Parameters for pausing a running workflow.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowPauseRequest".
+ */
+/** @experimental */
+export interface WorkflowPauseRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+}
+/**
+ * Durable lifecycle and timing for one workflow phase.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowPhaseObservation".
+ */
+/** @experimental */
+export interface WorkflowPhaseObservation {
+    /**
+     * Phase identifier.
+     */
+    id: string;
+    /**
+     * Zero-based declared phase ordinal, or null for an undeclared phase.
+     */
+    ordinal: number | null;
+    /**
+     * Human-readable phase title.
+     */
+    title: string;
+    /**
+     * Optional human-readable phase detail.
+     */
+    detail?: string;
+    status: WorkflowPhaseStatus;
+    /**
+     * Most recent run attempt that entered this phase, or `0` if the phase has never been entered.
+     */
+    lastEnteredRunAttempt: number;
+    /**
+     * Number of times execution entered this phase.
+     */
+    entryCount: number;
+    /**
+     * Epoch milliseconds when this phase first started; for a skipped phase, the synthetic skip timestamp (equal to `completedAt`).
+     */
+    startedAt?: number;
+    /**
+     * Epoch milliseconds when this phase completed; for a skipped phase, the synthetic skip timestamp (equal to `startedAt`).
+     */
+    completedAt?: number;
+    /**
+     * Completed active time accumulated by this phase in milliseconds.
+     */
+    accumulatedActiveMs: number;
+    /**
+     * Current live active time for this phase in milliseconds.
+     */
+    currentActiveMs: number;
+    /**
+     * Total direct agents associated with this phase.
+     */
+    totalAgentCount: number;
+    /**
+     * Direct agents in this phase that are currently live.
+     */
+    liveAgentCount: number;
+}
+/**
+ * One durable workflow progress record.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowProgressLine".
+ */
+/** @experimental */
+export interface WorkflowProgressLine {
+    /**
+     * Global monotonic sequence number within the run.
+     */
+    seq: number;
+    /**
+     * Resume attempt that emitted this record.
+     */
+    attempt: number;
+    /**
+     * Phase active when the record was emitted, or null before any phase.
+     */
+    phaseId: string | null;
+    /**
+     * Epoch milliseconds when the record was persisted.
+     */
+    recordedAt: number;
+    kind: WorkflowLogLineKind;
+    /**
+     * Prompt-safe progress text.
+     */
+    text: string;
+}
+/**
+ * A bidirectional page of workflow progress.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowProgressPage".
+ */
+/** @experimental */
+export interface WorkflowProgressPage {
+    /**
+     * Progress records in sequence order.
+     */
+    records: WorkflowProgressLine[];
+    /**
+     * Oldest sequence number in this page, or null when empty.
+     */
+    oldestSeq: number | null;
+    /**
+     * Newest sequence number in this page, or null when empty.
+     */
+    newestSeq: number | null;
+    /**
+     * Whether progress records older than this page exist.
+     */
+    hasMoreOlder: boolean;
+    /**
+     * Whether progress records newer than this page exist.
+     */
+    hasMoreNewer: boolean;
+    /**
+     * Run revision reflected by this page.
+     */
+    revision: number;
+}
+/**
+ * Parameters for resuming a workflow run from its persisted identity.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowResumeRequest".
+ */
+/** @experimental */
+export interface WorkflowResumeRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    limits?: WorkflowRunLimits;
+    /**
+     * Whether to notify the originating session when the workflow completes.
+     */
+    notifyOnComplete?: boolean;
+    /**
+     * Whether to emit workflow phase names to the session transcript.
+     */
+    logPhaseNames?: boolean;
+}
+/**
+ * Wire-only per-invocation workflow resource ceiling overrides.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunLimits".
+ */
+/** @experimental */
+export interface WorkflowRunLimits {
+    /**
+     * Maximum number of workflow subagents that may run concurrently.
+     */
+    maxConcurrentSubagents?: number | null;
+    /**
+     * Maximum total number of workflow subagents that may be admitted.
+     */
+    maxTotalSubagents?: number | null;
+    /**
+     * Maximum accumulated active-execution time in seconds. Active execution includes the entire extension body, subprocess waits, queued-agent waits, and sleeps; time between resumed attempts is not counted.
+     */
+    timeoutSeconds?: number | null;
+    /**
+     * Maximum AI credits consumed by workflow subagents and their descendants. The post-paid ceiling is soft: parallel turns can settle beyond it before the run stops.
+     */
+    maxAiCredits?: number | null;
+}
+/**
+ * Resolved persisted workflow identity and resumed run envelope.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowResumeResult".
+ */
+/** @experimental */
+export interface WorkflowResumeResult {
+    /**
+     * Persisted workflow name resolved for the resumed run.
+     */
+    workflowName: string;
+    run: WorkflowRunResult;
+}
+/**
+ * Complete current or terminal workflow run envelope.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunResult".
+ */
+/** @experimental */
+export interface WorkflowRunResult {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * One-based execution attempt represented by this envelope. Absent before the first attempt starts or when returned by an older runtime.
+     */
+    attempt?: number;
+    status: WorkflowRunStatus;
+    /**
+     * Completed workflow result.
+     */
+    result?: JsonValue;
+    /**
+     * Error message for an errored run.
+     */
+    error?: string;
+    failure?: WorkflowRunFailure;
+    /**
+     * Reason for a halted or cancelled run.
+     */
+    reason?: string;
+    /**
+     * Partial journal and progress snapshot for a halted, cancelled, or errored run.
+     */
+    snapshot?: JsonValue;
+    pauseInfo?: WorkflowPauseInfo;
+}
+/**
+ * Full workflow run observability detail.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunDetail".
+ */
+/** @experimental */
+export interface WorkflowRunDetail {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Registered workflow name.
+     */
+    workflowName: string;
+    /**
+     * Human-readable workflow description.
+     */
+    description: string;
+    status: WorkflowRunStatus;
+    /**
+     * Monotonic durable run revision.
+     */
+    revision: number;
+    /**
+     * Epoch milliseconds when the run was created.
+     */
+    createdAt: number;
+    /**
+     * Epoch milliseconds when execution first started, or null before start.
+     */
+    startedAt: number | null;
+    /**
+     * Epoch milliseconds when the durable run was last updated.
+     */
+    updatedAt: number;
+    /**
+     * Epoch milliseconds when the run completed, or null while nonterminal.
+     */
+    completedAt: number | null;
+    /**
+     * Current phase identity, or null before any phase is entered.
+     */
+    currentPhase: WorkflowCurrentPhase | null;
+    /**
+     * Number of phases declared by the workflow.
+     */
+    declaredPhaseCount: number;
+    /**
+     * Number of direct workflow agents currently live.
+     */
+    liveAgentCount: number;
+    /**
+     * Total direct workflow agents spawned across all attempts.
+     */
+    totalSpawnedAgentCount: number;
+    consumed: WorkflowRunConsumed;
+    declaredLimits: WorkflowDeclaredLimits;
+    /**
+     * Approved effective resource ceilings, or null until approved.
+     */
+    approved: WorkflowDeclaredLimits | null;
+    /**
+     * Epoch milliseconds when this live-overlay snapshot was observed.
+     */
+    observedAt: number;
+    /**
+     * Epoch milliseconds when the current active segment started, or null while inactive.
+     */
+    activeSegmentStartedAt: number | null;
+    /**
+     * Terminal run outcome, or null while nonterminal.
+     */
+    terminal: WorkflowRunTerminal | null;
+    /**
+     * Whether the durable run state currently passes runtime resume eligibility checks.
+     */
+    canResume: boolean;
+    /**
+     * Lifecycle and timing observations for each workflow phase.
+     */
+    phases: WorkflowPhaseObservation[];
+    /**
+     * Durable identities and live statuses for direct workflow agents.
+     */
+    agents: WorkflowAgentSummary[];
+    progress: WorkflowProgressPage;
+}
+/**
+ * Options controlling workflow invocation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunOptions".
+ */
+/** @experimental */
+export interface WorkflowRunOptions {
+    limits?: WorkflowRunLimits;
+    /**
+     * Whether to notify the originating session when the workflow completes.
+     */
+    notifyOnComplete?: boolean;
+    /**
+     * Whether to emit workflow phase names to the session transcript.
+     */
+    logPhaseNames?: boolean;
+    /**
+     * Run identifier whose journal and progress should seed this resumed run.
+     */
+    resumeFromRunId?: string;
+}
+/**
+ * Parameters for invoking a registered workflow.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunRequest".
+ */
+/** @experimental */
+export interface WorkflowRunRequest {
+    /**
+     * Registered workflow name.
+     */
+    name: string;
+    /**
+     * Workflow input value.
+     */
+    args: JsonValue;
+    options?: WorkflowRunOptions;
+}
+/**
+ * A single changed file and its unified diff.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspaceDiffFileChange".
+ */
+/** @experimental */
+export interface WorkspaceDiffFileChange {
+    /**
+     * Path to the changed file, relative to the workspace root when the file lives under it. A file changed outside the workspace root keeps a `../`-relative path, or an absolute path when no relative path exists (for example a different Windows drive).
+     */
+    path: string;
+    /**
+     * Unified diff content for the file. Empty when the diff was truncated.
+     */
+    diff: string;
+    changeType: WorkspaceDiffFileChangeType;
+    /**
+     * Original file path for renamed files.
+     */
+    oldPath?: string;
+    /**
+     * Whether the diff content was omitted because it exceeded the per-file size limit.
+     */
+    isTruncated?: boolean;
+}
+/**
+ * Workspace diff result for the requested mode.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspaceDiffResult".
+ */
+/** @experimental */
+export interface WorkspaceDiffResult {
+    requestedMode: WorkspaceDiffMode;
+    mode: WorkspaceDiffMode;
+    /**
+     * Changed files and their unified diffs.
+     */
+    changes: WorkspaceDiffFileChange[];
+    /**
+     * Default branch used for a branch diff, when branch mode was requested.
+     */
+    baseBranch?: string;
+    /**
+     * Whether the requested diff fell back to unstaged changes, either because branch diff failed or session diff was unavailable.
+     */
+    isFallback: boolean;
+    unavailableReason?: HistoryRewindUnavailableReason;
+}
+/**
+ * Compaction summary checkpoint to persist.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesAddSummaryRequest".
+ */
+/** @experimental */
+export interface WorkspacesAddSummaryRequest {
+    /**
+     * Summary title shown in checkpoint listings.
+     */
+    title: string;
+    /**
+     * Markdown summary content to persist.
+     */
+    content: string;
+}
+/**
+ * Persisted summary metadata and refreshed workspace metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesAddSummaryResult".
+ */
+/** @experimental */
+export interface WorkspacesAddSummaryResult {
+    /**
+     * Metadata for the persisted summary.
+     */
+    summary?: {};
+    /**
+     * Refreshed metadata for the containing workspace.
+     */
+    workspace?: {};
+    [k: string]: unknown | undefined;
+}
+/**
+ * Whether the autopilot objective file exists.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesAutopilotObjectiveExistsResult".
+ */
+/** @experimental */
+export interface WorkspacesAutopilotObjectiveExistsResult {
+    /**
+     * True when the objective file exists.
+     */
+    exists: boolean;
+}
+/**
+ * Workspace checkpoint metadata with assigned number, human-readable title, and checkpoint filename.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesCheckpoints".
+ */
+/** @experimental */
+export interface WorkspacesCheckpoints {
+    /**
+     * Checkpoint number assigned by the workspace manager
      */
     number: number;
     /**
@@ -23042,6 +25437,23 @@ export interface WorkspacesCheckpoints {
      */
     filename: string;
 }
+/**
+ * Directory to create within the session workspace files directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesCreateDirectoryRequest".
+ */
+/** @experimental */
+export interface WorkspacesCreateDirectoryRequest {
+    /**
+     * Slash-separated relative path within the workspace files directory
+     */
+    path: string;
+    /**
+     * Whether to create missing parent directories. Defaults to false.
+     */
+    recursive?: boolean;
+}
 /**
  * Relative path and UTF-8 content for the workspace file to create or overwrite.
  *
@@ -23051,7 +25463,7 @@ export interface WorkspacesCheckpoints {
 /** @experimental */
 export interface WorkspacesCreateFileRequest {
     /**
-     * Relative path within the workspace files directory
+     * Slash-separated relative path within the workspace files directory
      */
     path: string;
     /**
@@ -23204,7 +25616,7 @@ export interface WorkspacesListCheckpointsResult {
 /** @experimental */
 export interface WorkspacesListFilesResult {
     /**
-     * Relative file paths in the workspace files directory
+     * Slash-separated relative file paths in the workspace files directory
      */
     files: string[];
 }
@@ -23256,7 +25668,7 @@ export interface WorkspacesReadCheckpointResult {
 /** @experimental */
 export interface WorkspacesReadFileRequest {
     /**
-     * Relative path within the workspace files directory
+     * Slash-separated relative path within the workspace files directory
      */
     path: string;
 }
@@ -23273,6 +25685,44 @@ export interface WorkspacesReadFileResult {
      */
     content: string;
 }
+/**
+ * File or directory to remove from the session workspace files directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesRemovePathRequest".
+ */
+/** @experimental */
+export interface WorkspacesRemovePathRequest {
+    /**
+     * Slash-separated relative path within the workspace files directory
+     */
+    path: string;
+    /**
+     * Whether to remove directory contents recursively. Defaults to false.
+     */
+    recursive?: boolean;
+    /**
+     * Whether a missing path should be treated as success. Defaults to false.
+     */
+    force?: boolean;
+}
+/**
+ * Source and destination paths for a rename within the session workspace files directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesRenamePathRequest".
+ */
+/** @experimental */
+export interface WorkspacesRenamePathRequest {
+    /**
+     * Slash-separated source path relative to the workspace files directory
+     */
+    source: string;
+    /**
+     * Slash-separated destination path relative to the workspace files directory
+     */
+    destination: string;
+}
 /**
  * Pasted content to save as a UTF-8 file in the session workspace.
  *
@@ -23312,6 +25762,48 @@ export interface WorkspacesSaveLargePasteResult {
         sizeBytes: number;
     } | null;
 }
+/**
+ * Relative path of the workspace file or directory to inspect.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesStatFileRequest".
+ */
+/** @experimental */
+export interface WorkspacesStatFileRequest {
+    /**
+     * Slash-separated relative path within the workspace files directory
+     */
+    path: string;
+}
+/**
+ * Filesystem metadata for a path in the session workspace files directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesStatFileResult".
+ */
+/** @experimental */
+export interface WorkspacesStatFileResult {
+    /**
+     * Whether the path identifies a regular file
+     */
+    isFile: boolean;
+    /**
+     * Whether the path identifies a directory
+     */
+    isDirectory: boolean;
+    /**
+     * Size in bytes
+     */
+    size: number;
+    /**
+     * Last modification time in Unix epoch milliseconds
+     */
+    mtimeMs: number;
+    /**
+     * Creation time in Unix epoch milliseconds
+     */
+    birthtimeMs: number;
+}
 /**
  * Rollback point for local workspace summaries.
  *
@@ -23373,6 +25865,10 @@ export interface SessionFactoryPauseAtCheckpointResult {
     action: FactoryPauseCheckpointAction;
 }
 /** @experimental */
+export interface SessionWorkflowPauseAtCheckpointResult {
+    action: WorkflowPauseCheckpointAction;
+}
+/** @experimental */
 export interface SessionModelListRequest {
     /**
      * If true, bypasses the per-session model list cache and re-fetches from CAPI.
@@ -23401,6 +25897,13 @@ export interface SessionMcpAppsCallToolResult {
     [k: string]: JsonValue | undefined;
 }
 /** @experimental */
+export interface SessionPluginsMarketplacesRefreshRequest {
+    /**
+     * Marketplace name to refresh. When omitted, every registered marketplace is refreshed.
+     */
+    name?: string;
+}
+/** @experimental */
 export interface SessionPluginsReloadRequest {
     /**
      * Reload MCP server connections after refreshing plugins. Defaults to true.
@@ -23696,6 +26199,14 @@ export declare function createServerRpc(connection: MessageConnection): {
          * @returns Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
          */
         search: (params: CatalogSearchRequest) => Promise<CatalogSearchResult>;
+        /**
+         * Terminates one retained catalog selection group. A selected outcome returns the native host a fresh single-use candidate handle plus the original searchId for a later explicit mcp.planInstall call; non-selected outcomes release the group without producing a planning input. Candidate state, cards, URLs, credentials and private identifiers remain inside the runtime. The model-facing catalog_select tool projects the result separately and never exposes the candidate handle or searchId.
+         *
+         * @param params Terminates one retained catalog selection group through an opaque reference previously returned by the model-safe search projection.
+         *
+         * @returns Typed outcome of catalog.select. Only the selected host result carries a fresh candidate handle; the model-facing projection removes both that handle and searchId.
+         */
+        select: (params: CatalogSelectionRequest) => Promise<CatalogSelectionResult>;
     };
     /** @experimental */
     plugins: {
@@ -23926,7 +26437,7 @@ export declare function createServerRpc(connection: MessageConnection): {
         /**
          * Registers an SDK client as the session filesystem provider.
          *
-         * @param params Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider.
+         * @param params Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider. A registered provider is authoritative for path interpretation and filesystem facts used by workspace permission validation. Paths are interpreted lexically; home-relative paths (`~` and `~/...`) and Windows drive-relative paths such as `C:foo` are unsupported. Until provider-side canonicalization is supported, providers must not expose symlinks inside allowed roots that escape those roots.
          *
          * @returns Indicates whether the calling client was registered as the session filesystem provider.
          */
@@ -24269,11 +26780,11 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
     /** @experimental */
     debug: {
         /**
-         * Collects a redacted session debug log bundle into a local archive or staging directory. The runtime includes session-owned logs by default and accepts caller-provided diagnostic entries so host applications can add their own files without changing this API shape.
+         * Collects a session debug log bundle into a local archive or staging directory. Logs are redacted by default; redaction can be configured per caller-provided diagnostic entry. The runtime includes session-owned logs by default and accepts caller-provided diagnostic entries so host applications can add their own files without changing this API shape.
          *
-         * @param params Options for collecting a redacted session debug bundle.
+         * @param params Options for collecting a session debug bundle with configurable redaction.
          *
-         * @returns Result of collecting a redacted debug bundle.
+         * @returns Result of collecting a session debug bundle.
          */
         collectLogs: (params: DebugCollectLogsRequest) => Promise<DebugCollectLogsResult>;
     };
@@ -24420,6 +26931,108 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         };
     };
     /** @experimental */
+    workflow: {
+        /**
+         * Runs a registered dynamic workflow by name at the top level.
+         *
+         * @param params Parameters for invoking a registered workflow.
+         *
+         * @returns Complete current or terminal workflow run envelope.
+         */
+        run: (params: WorkflowRunRequest) => Promise<WorkflowRunResult>;
+        /**
+         * Resumes a dynamic workflow run using its persisted name, arguments, journal, and accounting.
+         *
+         * @param params Parameters for resuming a workflow run from its persisted identity.
+         *
+         * @returns Resolved persisted workflow identity and resumed run envelope.
+         */
+        resume: (params: WorkflowResumeRequest) => Promise<WorkflowResumeResult>;
+        /**
+         * Gets the current or settled envelope for a dynamic workflow run.
+         *
+         * @param params Parameters for retrieving a workflow run.
+         *
+         * @returns Complete current or terminal workflow run envelope.
+         */
+        getRun: (params: WorkflowGetRunRequest) => Promise<WorkflowRunResult>;
+        /**
+         * Lists durable dynamic workflow runs for this session in creation order.
+         *
+         * @param params Parameters for paging workflow runs.
+         *
+         * @returns A page of workflow runs in durable creation order.
+         */
+        listRuns: (params: WorkflowListRunsRequest) => Promise<WorkflowListRunsResult>;
+        /**
+         * Gets durable and live observability detail for one dynamic workflow run.
+         *
+         * @param params Parameters for retrieving a workflow run.
+         *
+         * @returns Full workflow run observability detail.
+         */
+        getRunDetail: (params: WorkflowGetRunRequest) => Promise<WorkflowRunDetail>;
+        /**
+         * Pages durable progress for one dynamic workflow run.
+         *
+         * @param params Parameters for paging workflow progress.
+         *
+         * @returns A bidirectional page of workflow progress.
+         */
+        getRunProgress: (params: WorkflowGetRunProgressRequest) => Promise<WorkflowProgressPage>;
+        /**
+         * Requests cancellation of a dynamic workflow run and returns its run envelope.
+         *
+         * @param params Parameters for cancelling a workflow run.
+         *
+         * @returns Complete current or terminal workflow run envelope.
+         */
+        cancel: (params: WorkflowCancelRequest) => Promise<WorkflowRunResult>;
+        /**
+         * Pauses a running dynamic workflow and returns its settled run envelope.
+         *
+         * @param params Parameters for pausing a running workflow.
+         *
+         * @returns Complete current or terminal workflow run envelope.
+         */
+        pause: (params: WorkflowPauseRequest) => Promise<WorkflowRunResult>;
+        /**
+         * Records a batch of ordered dynamic workflow progress lines.
+         *
+         * @param params Parameters for recording workflow progress.
+         *
+         * @returns Acknowledgement that a workflow request was accepted.
+         */
+        log: (params: WorkflowLogRequest) => Promise<WorkflowAckResult>;
+        /**
+         * Runs one dynamic-workflow-scoped subagent and returns its result.
+         *
+         * @param params Parameters for one workflow-scoped subagent call.
+         *
+         * @returns Result of one workflow-scoped subagent call.
+         */
+        agent: (params: WorkflowAgentRequest) => Promise<WorkflowAgentResult>;
+        /** @experimental */
+        journal: {
+            /**
+             * Reads a memoized dynamic workflow journal entry.
+             *
+             * @param params Parameters for reading a workflow journal entry.
+             *
+             * @returns Result of reading a workflow journal entry.
+             */
+            get: (params: WorkflowJournalGetRequest) => Promise<WorkflowJournalGetResult>;
+            /**
+             * Stores a memoized dynamic workflow journal entry.
+             *
+             * @param params Parameters for storing a workflow journal entry.
+             *
+             * @returns Acknowledgement that a workflow request was accepted.
+             */
+            put: (params: WorkflowJournalPutRequest) => Promise<WorkflowAckResult>;
+        };
+    };
+    /** @experimental */
     model: {
         /**
          * Gets the session's authoritative model snapshot, including the committed Auto preference and any newer unclaimed Auto preference waiting for a future user turn.
@@ -24583,6 +27196,32 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @param params Relative path and UTF-8 content for the workspace file to create or overwrite.
          */
         createFile: (params: WorkspacesCreateFileRequest) => Promise<void>;
+        /**
+         * Returns metadata for a file or directory in the session workspace files directory.
+         *
+         * @param params Relative path of the workspace file or directory to inspect.
+         *
+         * @returns Filesystem metadata for a path in the session workspace files directory.
+         */
+        statFile: (params: WorkspacesStatFileRequest) => Promise<WorkspacesStatFileResult>;
+        /**
+         * Creates a directory in the session workspace files directory.
+         *
+         * @param params Directory to create within the session workspace files directory.
+         */
+        createDirectory: (params: WorkspacesCreateDirectoryRequest) => Promise<void>;
+        /**
+         * Removes a file or directory from the session workspace files directory.
+         *
+         * @param params File or directory to remove from the session workspace files directory.
+         */
+        removePath: (params: WorkspacesRemovePathRequest) => Promise<void>;
+        /**
+         * Renames a file or directory within the session workspace files directory.
+         *
+         * @param params Source and destination paths for a rename within the session workspace files directory.
+         */
+        renamePath: (params: WorkspacesRenamePathRequest) => Promise<void>;
         /**
          * Lists workspace checkpoints in chronological order.
          *
@@ -25099,13 +27738,168 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         };
     };
     /** @experimental */
+    connectors: {
+        /**
+         * Returns feature availability and bounded polling limits for the EXPERIMENTAL session connector API. This method never performs a Connector service request.
+         *
+         * @returns Feature detection and hard polling limits for the EXPERIMENTAL session connector API.
+         */
+        getCapabilities: () => Promise<ConnectorCapabilities>;
+        /**
+         * Returns authoritative session Connector state from current availability, pinned account selection, cached catalog, and live MCP projection without performing a Connector service request.
+         *
+         * @returns Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+         */
+        getStatus: () => Promise<ConnectorStatus>;
+        /**
+         * Returns the cached Connector catalog for the pinned opaque account selection, fetching it only when this session has no cached catalog.
+         *
+         * @param params Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
+         *
+         * @returns Validated Connector catalog snapshot cached by the session.
+         */
+        list: (params: ConnectorAccountRequest) => Promise<ConnectorCatalogResult>;
+        /**
+         * Refreshes and validates the Connector catalog for the pinned opaque account selection.
+         *
+         * @param params Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
+         *
+         * @returns Validated Connector catalog snapshot cached by the session.
+         */
+        refresh: (params: ConnectorAccountRequest) => Promise<ConnectorCatalogResult>;
+        /**
+         * Initiates an idempotent Connector connection request without opening a browser. Returns connected when the service is immediately authoritative, consent_required with a validated URL, or pending with an opaque continuation ID.
+         *
+         * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+         *
+         * @returns Typed result of initiating or continuing a Connector connection.
+         */
+        connect: (params: ConnectorConnectRequest) => Promise<ConnectorConnectResult>;
+        /**
+         * Re-initiates an idempotent Connector connection request without browser or UI effects, with the same typed outcomes as connect.
+         *
+         * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+         *
+         * @returns Typed result of initiating or continuing a Connector connection.
+         */
+        reconnect: (params: ConnectorConnectRequest) => Promise<ConnectorConnectResult>;
+        /**
+         * Continues a pending Connector connection with caller-supplied attempt, interval, and deadline bounds. The runtime never opens the returned consent URL.
+         *
+         * @param params Explicitly bounded continuation of a pending Connector connection.
+         *
+         * @returns Typed result of initiating or continuing a Connector connection.
+         */
+        continueConnection: (params: ConnectorContinueRequest) => Promise<ConnectorConnectResult>;
+        /**
+         * Disconnects one Connector for the pinned opaque account selection, refreshes the authoritative catalog, and removes its session-owned MCP projection.
+         *
+         * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+         *
+         * @returns Authoritative result after disconnect and MCP reconciliation.
+         */
+        disconnect: (params: ConnectorConnectRequest) => Promise<ConnectorDisconnectResult>;
+        /**
+         * Reconciles the authoritative cached or freshly requested Connector catalog into the session Connector MCP projection and returns live status.
+         *
+         * @param params Requests authoritative Connector-to-MCP reconciliation for the pinned account.
+         *
+         * @returns Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+         */
+        reconcile: (params: ConnectorReconcileRequest) => Promise<ConnectorStatus>;
+    };
+    /** @experimental */
+    managedSettings: {
+        /**
+         * Waits for the live session's in-flight managed-settings application, then returns the retained effective snapshot used by runtime enforcement and by `session.managed_settings_resolved`. It does not perform another account, device, or server resolution, and rejects when resolution has not produced a snapshot.
+         *
+         * @returns Enterprise managed-settings resolution: the effective managed settings the session applied and which channels contributed, so SDK clients can show users what is enterprise-managed. Fires whenever managed policy is (re)applied — at session start, on resume, and on account switch. This is an ephemeral live snapshot (delivered to subscribers but not persisted to the session event log), because at session start it resolves before `session.start` is emitted. Device values take precedence over server values, then the policy helper, per ordinary key, while permissions compose restrictively across device, server, policy-helper, and SDK-client layers. The account-scoped `getManagedSettings()` API does not include session-local client injection. Marked experimental while the managed-settings surface stabilizes.
+         */
+        get: () => Promise<ManagedSettingsResolvedData>;
+    };
+    /** @experimental */
     plugins: {
         /**
-         * Lists plugins installed for the session.
+         * Lists globally installed, live, built-in, and enterprise-managed desired plugins using the live session's authoritative account, working directory, and retained managed policy.
          *
          * @returns Plugins installed for the session, with their enabled state and version metadata.
          */
         list: () => Promise<PluginList>;
+        /**
+         * Installs a plugin using the live session's authoritative account, working directory, and retained managed policy.
+         *
+         * @param params Plugin source resolved relative to the session's authoritative working directory.
+         *
+         * @returns Result of installing a plugin.
+         */
+        install: (params: SessionPluginsInstallRequest) => Promise<PluginInstallResult>;
+        /**
+         * Uninstalls a plugin when permitted by the live session's retained managed policy.
+         *
+         * @param params Name (or spec) of the plugin to uninstall.
+         */
+        uninstall: (params: PluginsUninstallRequest) => Promise<void>;
+        /**
+         * Updates an installed plugin using the live session's authoritative account, working directory, and retained managed policy.
+         *
+         * @param params Name (or spec) of the plugin to update.
+         *
+         * @returns Result of updating a single plugin.
+         */
+        update: (params: PluginsUpdateRequest) => Promise<PluginUpdateResult>;
+        /**
+         * Enables installed plugins when permitted by the live session's retained managed policy.
+         *
+         * @param params Plugin names (or specs) to enable in the session's authoritative working directory.
+         */
+        enable: (params: SessionPluginsEnableRequest) => Promise<void>;
+        /**
+         * Disables installed plugins when permitted by the live session's retained managed policy.
+         *
+         * @param params Plugin names (or specs) to disable in the session's authoritative working directory.
+         */
+        disable: (params: SessionPluginsDisableRequest) => Promise<void>;
+        /** @experimental */
+        marketplaces: {
+            /**
+             * Lists registered and enterprise-managed desired marketplaces using the live session's retained policy.
+             *
+             * @returns All registered marketplaces, including built-in defaults.
+             */
+            list: () => Promise<MarketplaceListResult>;
+            /**
+             * Adds a marketplace when permitted by the live session's retained managed policy.
+             *
+             * @param params Marketplace source and optional working directory for relative-path resolution.
+             *
+             * @returns Result of registering a new marketplace.
+             */
+            add: (params: PluginsMarketplacesAddRequest) => Promise<MarketplaceAddResult>;
+            /**
+             * Removes a marketplace when permitted by the live session's retained managed policy.
+             *
+             * @param params Name of the marketplace to remove and an optional force flag.
+             *
+             * @returns Outcome of the remove attempt, including dependent-plugin info when applicable.
+             */
+            remove: (params: PluginsMarketplacesRemoveRequest) => Promise<MarketplaceRemoveResult>;
+            /**
+             * Browses a marketplace resolved through the live session's working directory and retained managed policy.
+             *
+             * @param params Name of the marketplace whose plugin catalog to fetch.
+             *
+             * @returns Plugins advertised by the marketplace.
+             */
+            browse: (params: PluginsMarketplacesBrowseRequest) => Promise<MarketplaceBrowseResult>;
+            /**
+             * Refreshes marketplaces resolved through the live session's working directory and retained managed policy.
+             *
+             * @param params Optional marketplace name; omit to refresh all.
+             *
+             * @returns Result of refreshing one or more marketplace catalogs.
+             */
+            refresh: (params?: SessionPluginsMarketplacesRefreshRequest) => Promise<MarketplaceRefreshResult>;
+        };
         /**
          * Reloads the session's plugin set, refreshing MCP servers, custom agents, hooks, and skills cache so SDK-driven changes via `server.plugins.*` take effect immediately.
          *
@@ -25131,6 +27925,14 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns The selectable model entries synthesized for the models added by this call.
          */
         add: (params: ProviderAddRequest) => Promise<ProviderAddResult>;
+        /**
+         * Atomically updates the session's BYOK provider and model registry by applying the supplied snapshot, replacing existing entries, updating models, or removing entries absent from the snapshot.
+         *
+         * @param params Authoritative BYOK provider and model registry snapshot to apply atomically to the session.
+         *
+         * @returns The selectable model entries and selection ids synthesized for the synchronized BYOK models.
+         */
+        sync: (params: ProviderSyncRequest) => Promise<ProviderSyncResult>;
     };
     /** @experimental */
     options: {
@@ -25456,9 +28258,9 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          */
         setRequired: (params: PermissionsSetRequiredRequest) => Promise<PermissionsSetRequiredResult>;
         /**
-         * Clears session-scoped tool permission approvals.
+         * Clears session-scoped tool approvals and, for full resets, exact session-approved paths.
          *
-         * @param params Clears session-scoped tool permission approvals, and optionally the location-scoped ones.
+         * @param params Clears session-scoped tool approvals and optionally clears location-scoped approvals and exact session-approved paths.
          *
          * @returns Indicates whether the operation succeeded.
          */
@@ -25474,9 +28276,9 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         /** @experimental */
         paths: {
             /**
-             * Returns the session's allowed directories and primary working directory.
+             * Returns the session's recursive directory grants, exact session-approved paths, and primary working directory.
              *
-             * @returns Snapshot of the session's allow-listed directories and primary working directory.
+             * @returns Snapshot of the session's recursive directory grants, exact session-approved paths, and primary working directory.
              */
             list: () => Promise<PermissionPathsList>;
             /**
@@ -25814,6 +28616,22 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Result of editing a queued message.
          */
         updateText: (params: QueueUpdateTextRequest) => Promise<QueueUpdateTextResult>;
+        /**
+         * Atomically withdraws an unchanged, unconsumed user message from the local queued or steering lane. A client retaining the original draft may restore it only when removed is true. Does not interrupt the running turn.
+         *
+         * @param params Conditional withdrawal of a single user message, before the runtime claims it for delivery.
+         *
+         * @returns Result of removing a queued item.
+         */
+        withdrawMessage: (params: QueueWithdrawMessageRequest) => Promise<QueueRemoveAtResult>;
+        /**
+         * Atomically appends text and attachments to an unchanged, unconsumed local steering message. Returns updated=false if delivery or withdrawal already claimed the message.
+         *
+         * @param params Append to one pending steering message without changing its identity or delivery position.
+         *
+         * @returns Result of editing a queued message.
+         */
+        appendSteering: (params: QueueAppendSteeringRequest) => Promise<QueueUpdateTextResult>;
         /**
          * Duplicates an addressable queued item immediately after its source.
          *
@@ -25990,6 +28808,26 @@ export interface FactoryHandler {
      */
     abort(params: FactoryAbortRequest): Promise<FactoryAckResult>;
 }
+/** Handler for `workflow` client session API methods. */
+/** @experimental */
+export interface WorkflowHandler {
+    /**
+     * Asks the owning extension connection to execute a registered dynamic workflow.
+     *
+     * @param params Parameters sent to the owning extension to execute a workflow closure.
+     *
+     * @returns Result returned by an extension workflow closure.
+     */
+    execute(params: WorkflowExecuteRequest): Promise<WorkflowExecuteResult>;
+    /**
+     * Asks the owning extension connection to abort a running dynamic workflow cooperatively.
+     *
+     * @param params Parameters for cooperatively aborting a workflow body.
+     *
+     * @returns Acknowledgement that a workflow request was accepted.
+     */
+    abort(params: WorkflowAbortRequest): Promise<WorkflowAckResult>;
+}
 /** Handler for `tasks` client session API methods. */
 /** @experimental */
 export interface TasksHandler {
@@ -26140,6 +28978,7 @@ export interface CanvasHandler {
 export interface ClientSessionApiHandlers {
     providerToken?: ProviderTokenHandler;
     factory?: FactoryHandler;
+    workflow?: WorkflowHandler;
     tasks?: TasksHandler;
     sessionFs?: SessionFsHandler;
     canvas?: CanvasHandler;
@@ -26187,7 +29026,7 @@ export interface LlmInferenceHandler {
 /** @experimental */
 export interface GitHubTelemetryHandler {
     /**
-     * Forwards a single GitHub telemetry event to a host connection that opted into telemetry forwarding during the `server.connect` handshake. Opted-in connections receive every event the runtime emits after the handshake — across all sessions, plus sessionless events (for example, `server.sendTelemetry` calls with no session id).
+     * Forwards a single GitHub telemetry event to a host connection that opted into telemetry forwarding during the `server.connect` handshake. Opted-in connections receive their runtime host's events across all its sessions, its sessionless events (for example, `server.sendTelemetry`), and explicitly process-wide events. Events owned by another independently embedded runtime host are not forwarded to this connection.
      *
      * @param params Payload for a `gitHubTelemetry.event` notification: a single GitHub telemetry event the runtime forwards to a host connection that opted into telemetry forwarding during the `server.connect` handshake.
      */