@github/copilot-sdk-win32-x64 1.0.17-preview.2 → 1.0.17-preview.4

package/copilot-sdk/generated/rpc.d.ts

@@ -1394,6 +1394,44 @@ export type ContentFilterMode =
  | "markdown"
 /** Remove characters that can hide directives. */
  | "hidden_characters";
+/**
+ * Component of session customization discovery.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CustomizationReloadSubsystem".
+ */
+/** @experimental */
+export type CustomizationReloadSubsystem = 
+/** Repository metadata and working-directory context. */
+"repositoryContext"
+/** Session instructions and their cached dynamic context. */
+ | "instructions"
+/** Discovered plugin configuration. */
+ | "plugins"
+/** Configured session and plugin hooks. */
+ | "hooks"
+/** Discovered skills. */
+ | "skills"
+/** Discovered custom agents. */
+ | "agents"
+/** Loaded MCP server configuration. */
+ | "mcp"
+/** Configured session extensions. */
+ | "extensions" | (string & {});
+/**
+ * Result of reloading a customization component.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CustomizationReloadStatus".
+ */
+/** @experimental */
+export type CustomizationReloadStatus = 
+/** The component was refreshed successfully. */
+"reloaded"
+/** The component was not configured, loaded, or eligible for refresh. */
+ | "skipped"
+/** The component could not be refreshed; other components may still reload. */
+ | "failed" | (string & {});
 /**
  * Source category for a collected debug bundle entry.
  *
@@ -1700,57 +1738,45 @@ export type DiscoveredMcpServerType =
 /** Server is backed by an in-memory runtime implementation. */
  | "memory";
 /**
- * Indicates whether the command was accepted into the local execution queue.
+ * Kind of component that supplied a provider adapter or row. Attribution does not confer authority.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EnqueueCommandResult".
+ * via the `definition` "ModelProviderProvenanceSource".
  */
 /** @experimental */
-export type EnqueueCommandResult = AcceptedEnqueueCommandResult | UnsupportedEnqueueCommandResult;
+export type ModelProviderProvenanceSource = 
+/** Built into the runtime. */
+"builtIn"
+/** Derived from existing user configuration. */
+ | "configured"
+/** Supplied by an extension. */
+ | "extension"
+/** Supplied by another trusted contributor. */
+ | "custom";
 /**
- * How far OneAuth may go to acquire the requested token.
+ * Typed outcome for a provider operation.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EntraTokenInteraction".
+ * via the `definition` "ModelProviderOperationOutcomeCode".
  */
 /** @experimental */
-export type EntraTokenInteraction = 
-/** Acquire the token without any user interaction, failing if interaction would be required. */
-"silent"
-/** Allow interactive acquisition, prompting the user only when a cached or silent token is unavailable. */
- | "interactive"
-/** Always prompt interactively, bypassing any cached or silently-refreshable token. */
- | "force-interactive";
+export type ModelProviderOperationOutcomeCode = 
+/** The operation completed successfully; an empty inventory is valid. */
+"success"
+/** The provider or instance is absent during discovery, status, or model listing. Distinct from a successful empty inventory. */
+ | "absent"
+/** The provider is configured or expected but could not be reached. */
+ | "unreachable"
+/** The operation failed for a reason other than absence or reachability. */
+ | "failed";
 /**
- * Result of a OneAuth token acquisition.
+ * Indicates whether the command was accepted into the local execution queue.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EntraTokenAcquireResult".
+ * via the `definition` "EnqueueCommandResult".
  */
 /** @experimental */
-export type EntraTokenAcquireResult = {
-    /**
-     * Opaque access token.
-     */
-    accessToken: string;
-    /**
-     * Expiry as milliseconds since Unix epoch, when supplied by OneAuth.
-     */
-    expiresOnTimestamp?: number;
-    /**
-     * Opaque OneAuth account id, when supplied by the broker.
-     */
-    accountId?: string;
-    /**
-     * OneAuth token acquisition outcome discriminator.
-     */
-    status: "ok";
-} | {
-    /**
-     * OneAuth token acquisition outcome discriminator.
-     */
-    status: "interaction-required";
-};
+export type EnqueueCommandResult = AcceptedEnqueueCommandResult | UnsupportedEnqueueCommandResult;
 /**
  * GitHub Mission Control compute kind.
  *
@@ -3604,17 +3630,49 @@ export type ModelListRequest = {
     skipCache?: boolean;
 };
 /**
- * Whether the requested preference was already effective or was accepted for later transactional activation.
+ * When the runtime may run an adapter without an explicit user action.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelSwitchAutoTierStatus".
+ * via the `definition` "ModelProviderAutomaticDiscoveryMode".
  */
 /** @experimental */
-export type ModelSwitchAutoTierStatus = 
-/** The requested preference is already effective. No activation is pending for it, although this request may have cancelled an earlier unclaimed preference reported in `supersededAutoTier`. */
-"unchanged"
-/** The request was accepted but has not committed. A later user turn using the `auto` model must mint and validate the replacement before it becomes effective. */
- | "pending";
+export type ModelProviderAutomaticDiscoveryMode = 
+/** The adapter declares that automatic discovery is safe when the other policy fields are satisfied. */
+"automatic"
+/** The adapter may refresh instances the user already configured, but must not scan for new instances automatically. */
+ | "configuredOnly"
+/** The adapter must run only after an explicit user action. */
+ | "explicit";
+/**
+ * Network reach an adapter may use during discovery.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderDiscoveryNetworkScope".
+ */
+/** @experimental */
+export type ModelProviderDiscoveryNetworkScope = 
+/** Discovery does not contact a network service. */
+"none"
+/** Discovery is limited to loopback addresses on the local machine. */
+ | "loopbackOnly"
+/** Discovery contacts only endpoints the user already configured. */
+ | "configuredEndpointOnly"
+/** Discovery may scan or contact the local network. */
+ | "localNetwork"
+/** Discovery may contact remote internet services. */
+ | "internet";
+/**
+ * Whether a planned configuration entry is new or already present in the session registry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderConfigurationDisposition".
+ */
+/** @experimental */
+export type ModelProviderConfigurationDisposition = 
+/** No matching entry is registered; the caller should add the entry. */
+"create"
+/** An equivalent entry is already registered; the caller should reuse it rather than adding a duplicate. */
+ | "alreadyConfigured";
 /**
  * Provider type. Defaults to "openai" for generic OpenAI-compatible APIs.
  *
@@ -3653,6 +3711,110 @@ export type ProviderConfigTransport =
 "http"
 /** WebSocket transport. */
  | "websockets";
+/**
+ * The product serving the model, reported in telemetry as `model_provider`.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderConfigModelProvider".
+ */
+/** @experimental */
+export type ProviderConfigModelProvider = 
+/** OpenAI API. */
+"openai"
+/** Anthropic API. */
+ | "anthropic"
+/** Azure OpenAI Service. */
+ | "azure_openai"
+/** Ollama. */
+ | "ollama"
+/** LM Studio. */
+ | "lm_studio"
+/** Foundry Local. */
+ | "foundry_local"
+/** llama.cpp server. */
+ | "llama_cpp";
+/** @experimental */
+export type ProtocolSystemMessageConfig = ProtocolSystemMessageAppendConfig | ProtocolSystemMessageReplaceConfig | ProtocolSystemMessageCustomizeConfig;
+/** @experimental */
+export type ProtocolAppendMode = "append";
+/** @experimental */
+export type ProtocolReplaceMode = "replace";
+/** @experimental */
+export type ProtocolCustomizeMode = "customize";
+/** @experimental */
+export type ProtocolSectionOverride = (ProtocolStaticSectionOverride | ProtocolMarkerSectionOverride) | undefined;
+/** @experimental */
+export type ProtocolStaticSectionAction = 
+/** Replace the section content. */
+"replace"
+/** Remove the section content. */
+ | "remove"
+/** Append content to the section. */
+ | "append"
+/** Prepend content to the section. */
+ | "prepend";
+/** @experimental */
+export type ProtocolMarkerSectionOverride = {
+    /**
+     * Section override action discriminator.
+     */
+    action: "transform";
+} | {
+    /**
+     * Section override action discriminator.
+     */
+    action: "preserve";
+};
+/**
+ * Provider family. Matches the `type` field of a BYOK provider config.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderEndpointType".
+ */
+/** @experimental */
+export type ProviderEndpointType = 
+/** OpenAI-compatible endpoint (use the OpenAI client library). */
+"openai"
+/** Azure OpenAI endpoint (use the OpenAI client library with the Azure base URL). */
+ | "azure"
+/** Anthropic endpoint (use the Anthropic client library). */
+ | "anthropic";
+/**
+ * Wire API to be used, when required for the provider type.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderEndpointWireApi".
+ */
+/** @experimental */
+export type ProviderEndpointWireApi = 
+/** Classic chat-completions request shape. */
+"completions"
+/** Newer responses request shape. */
+ | "responses";
+/**
+ * Transport to be used for provider requests.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderEndpointTransport".
+ */
+/** @experimental */
+export type ProviderEndpointTransport = 
+/** HTTP request/streaming transport. */
+"http"
+/** WebSocket transport. */
+ | "websockets";
+/**
+ * Whether the requested preference was already effective or was accepted for later transactional activation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelSwitchAutoTierStatus".
+ */
+/** @experimental */
+export type ModelSwitchAutoTierStatus = 
+/** The requested preference is already effective. No activation is pending for it, although this request may have cancelled an earlier unclaimed preference reported in `supersededAutoTier`. */
+"unchanged"
+/** The request was accepted but has not committed. A later user turn using the `auto` model must mint and validate the replacement before it becomes effective. */
+ | "pending";
 /**
  * Allowed values for the `OptionsUpdateAdditionalContentExclusionPolicyScope` enumeration.
  *
@@ -3910,10 +4072,6 @@ export type PluginsReloadRequest = {
      */
     deferRepoHooks?: boolean;
 };
-/** @experimental */
-export type ProtocolAppendMode = "append";
-/** @experimental */
-export type ProtocolCustomizeMode = "customize";
 /**
  * Controls whether the runtime may defer loading an external tool definition.
  *
@@ -3926,72 +4084,6 @@ export type ProtocolExternalToolDefer =
 "auto"
 /** The runtime must include the tool without deferring it. */
  | "never";
-/** @experimental */
-export type ProtocolMarkerSectionOverride = {
-    /**
-     * Section override action discriminator.
-     */
-    action: "transform";
-} | {
-    /**
-     * Section override action discriminator.
-     */
-    action: "preserve";
-};
-/** @experimental */
-export type ProtocolReplaceMode = "replace";
-/** @experimental */
-export type ProtocolSectionOverride = ProtocolStaticSectionOverride | ProtocolMarkerSectionOverride;
-/** @experimental */
-export type ProtocolStaticSectionAction = 
-/** Replace the section content. */
-"replace"
-/** Remove the section content. */
- | "remove"
-/** Append content to the section. */
- | "append"
-/** Prepend content to the section. */
- | "prepend";
-/** @experimental */
-export type ProtocolSystemMessageConfig = ProtocolSystemMessageAppendConfig | ProtocolSystemMessageReplaceConfig | ProtocolSystemMessageCustomizeConfig;
-/**
- * Provider family. Matches the `type` field of a BYOK provider config.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderEndpointType".
- */
-/** @experimental */
-export type ProviderEndpointType = 
-/** OpenAI-compatible endpoint (use the OpenAI client library). */
-"openai"
-/** Azure OpenAI endpoint (use the OpenAI client library with the Azure base URL). */
- | "azure"
-/** Anthropic endpoint (use the Anthropic client library). */
- | "anthropic";
-/**
- * Wire API to be used, when required for the provider type.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderEndpointWireApi".
- */
-/** @experimental */
-export type ProviderEndpointWireApi = 
-/** Classic chat-completions request shape. */
-"completions"
-/** Newer responses request shape. */
- | "responses";
-/**
- * Transport to be used for provider requests.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderEndpointTransport".
- */
-/** @experimental */
-export type ProviderEndpointTransport = 
-/** HTTP request/streaming transport. */
-"http"
-/** WebSocket transport. */
- | "websockets";
 /**
  * Optional model identifier to scope the endpoint snapshot to.
  *
@@ -4163,6 +4255,22 @@ export type SandboxConfigSource =
  */
 /** @experimental */
 export type SandboxHostCapabilityName = string;
+/**
+ * State of the persistent certificate authority of the sandbox credential proxy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxyCaState".
+ */
+/** @experimental */
+export type SandboxProxyCaState = 
+/** This platform has no supported OS trust store. The proxy uses a per-process certificate bundle. */
+"unsupported"
+/** OS trust does not include the certificate authority, or none is stored. */
+ | "notInstalled"
+/** OS trust includes the stored certificate authority. */
+ | "installed"
+/** The runtime could not read the certificate authority or the OS trust store. */
+ | "error";
 /**
  * A session-scoped sandbox transition applied while handling a slash command
  *
@@ -9432,6 +9540,10 @@ export interface CurrentModel {
      * Currently active model identifier
      */
     modelId?: string;
+    /**
+     * Captured base model to restore when leaving plan mode. Omitted outside plan mode or when no plan override has captured a base model. Persistent agent model requirements apply to this model rather than the temporary plan model.
+     */
+    planBaseModelId?: string;
     /**
      * Reasoning effort level currently applied to the active model, when one is set. Reads `Session.getReasoningEffort()` synchronously after `getSelectedModel()` resolves so the two values are reported as a snapshot.
      */
@@ -9486,6 +9598,42 @@ export interface CurrentToolMetadata {
      */
     deferLoading?: boolean;
 }
+/**
+ * Result of one customization reload component.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CustomizationReloadOutcome".
+ */
+/** @experimental */
+export interface CustomizationReloadOutcome {
+    subsystem: CustomizationReloadSubsystem;
+    status: CustomizationReloadStatus;
+    /**
+     * Reason for a skipped component or description of a failure, when available
+     */
+    detail?: string | null;
+}
+/**
+ * Results of reloading discovered session customizations. Inspect outcomes for reloaded, skipped, or failed subsystems; a rejection may follow partial mutation. Changes to the model-facing prompt and tools apply on the next turn.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CustomizationsReloadResult".
+ */
+/** @experimental */
+export interface CustomizationsReloadResult {
+    /**
+     * Warnings from skill discovery
+     */
+    warnings: string[];
+    /**
+     * Errors from any component that could not be refreshed
+     */
+    errors: string[];
+    /**
+     * Outcome of each component in reload order; a skipped component was not configured or loaded
+     */
+    outcomes: CustomizationReloadOutcome[];
+}
 /**
  * A file included in the session debug bundle.
  *
@@ -9937,64 +10085,256 @@ export interface McpSourcePlugin {
     version?: string;
 }
 /**
- * Slash-prefixed command string to enqueue for FIFO processing.
+ * A model offered for agent conversations. Missing capability metadata does not disqualify a candidate. Models known to be incompatible, such as embedding-only models, are excluded by the adapter.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EnqueueCommandParams".
+ * via the `definition` "DiscoveredModel".
  */
 /** @experimental */
-export interface EnqueueCommandParams {
+export interface DiscoveredModel {
     /**
-     * Slash-prefixed command string to enqueue, e.g. '/compact' or '/model gpt-4'. Queued FIFO with any in-flight items; if the session is idle, processing kicks off immediately.
+     * Provider-native model identifier.
      */
-    command: string;
+    id: string;
     /**
-     * Optional user-facing text for the queue row. The command string is shown when omitted.
+     * Provider-reported display name.
      */
-    displayText?: string | null;
-}
-/** @experimental */
-export interface UnsupportedEnqueueCommandResult {
+    name?: string;
+    provenance: ModelProviderProvenance;
     /**
-     * False because the target session does not support local command queueing (e.g. remote sessions).
+     * Provider-reported artifact digest.
      */
-    queued: false;
+    digest?: string;
     /**
-     * Legacy null queue ID accepted for compatibility with older runtimes.
+     * Provider-reported last-modified timestamp.
      */
-    queueId?: null;
-}
+    modifiedAt?: string;
+    /**
+     * Provider-reported artifact size in bytes.
+     */
+    sizeBytes?: number;
+    details: ModelArtifactDetails;
+    capabilities: ModelCapabilities;
+    /**
+     * Non-fatal warnings encountered while enriching this model.
+     */
+    warnings: ModelProviderWarning[];
+}
 /**
- * OneAuth token request supplied by a trusted host application.
+ * Attribution for the adapter that produced a provider row.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EntraTokenAcquireRequest".
+ * via the `definition` "ModelProviderProvenance".
  */
 /** @experimental */
-export interface EntraTokenAcquireRequest {
+export interface ModelProviderProvenance {
     /**
-     * Public client application id.
+     * Stable opaque adapter identity from the effective catalog. Treat this as a whole identifier, not a parseable owner or kind.
      */
-    clientId: string;
+    adapterId: string;
     /**
-     * Tenant id or tenant selector, such as common or organizations.
+     * Descriptive provider family that produced this row; not a routing key.
      */
-    tenantId: string;
+    providerKind: string;
+    source: ModelProviderProvenanceSource;
     /**
-     * Broker redirect URI registered for the client. Required: the OneAuth broker validates a non-empty, registered redirect URI for the public client (MSAL broker registration), so this is not a browser-flow vestige and cannot be omitted.
+     * Stable contributor identifier when the adapter has an owner outside the runtime. Independent of the contribution mechanism and not a routing key.
      */
-    redirectUri: string;
+    ownerId?: string;
     /**
-     * Exact delegated scopes to request.
-     *
-     * @minItems 1
+     * Human-readable contributor name, not the adapter display name.
+     */
+    ownerDisplayName?: string;
+}
+/**
+ * Provider-reported model artifact metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelArtifactDetails".
+ */
+/** @experimental */
+export interface ModelArtifactDetails {
+    /**
+     * Artifact format, such as `gguf`.
+     */
+    format?: string;
+    /**
+     * Primary model family.
+     */
+    family?: string;
+    /**
+     * Provider-reported model families.
+     */
+    families?: string[];
+    /**
+     * Provider-reported parameter count label.
+     */
+    parameterSize?: string;
+    /**
+     * Provider-reported quantization label.
+     */
+    quantization?: string;
+    /**
+     * Provider-reported model architecture.
+     */
+    architecture?: string;
+    /**
+     * Provider-reported tokenizer.
+     */
+    tokenizer?: string;
+}
+/**
+ * Model capabilities and limits
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelCapabilities".
+ */
+/** @experimental */
+export interface ModelCapabilities {
+    supports?: ModelCapabilitiesSupports;
+    limits?: ModelCapabilitiesLimits;
+}
+/**
+ * Feature flags indicating what the model supports
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelCapabilitiesSupports".
+ */
+/** @experimental */
+export interface ModelCapabilitiesSupports {
+    /**
+     * Whether the model supports provider-native thinking. Independent of configurable reasoning effort; omission means unknown.
+     */
+    thinking?: boolean;
+    /**
+     * Whether this model supports vision/image input
+     */
+    vision?: boolean;
+    /**
+     * Whether this model supports canonical tool calling
+     */
+    toolCalls?: boolean;
+    /**
+     * Whether this model supports reasoning effort configuration
+     */
+    reasoningEffort?: boolean;
+    adaptive_thinking?: AdaptiveThinkingSupport;
+}
+/**
+ * Token limits for prompts, outputs, and context window
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelCapabilitiesLimits".
+ */
+/** @experimental */
+export interface ModelCapabilitiesLimits {
+    /**
+     * Maximum number of prompt/input tokens
+     */
+    max_prompt_tokens?: number;
+    /**
+     * Maximum number of output/completion tokens
+     */
+    max_output_tokens?: number;
+    /**
+     * Maximum total context window size in tokens
+     */
+    max_context_window_tokens?: number;
+    vision?: ModelCapabilitiesLimitsVision;
+}
+/**
+ * Vision-specific limits
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelCapabilitiesLimitsVision".
+ */
+/** @experimental */
+export interface ModelCapabilitiesLimitsVision {
+    /**
+     * MIME types the model accepts
+     */
+    supported_media_types: string[];
+    /**
+     * Maximum number of images per prompt
+     */
+    max_prompt_images: number;
+    /**
+     * Maximum image size in bytes
+     */
+    max_prompt_image_size: number;
+}
+/**
+ * A non-fatal provider observation warning.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderWarning".
+ */
+/** @experimental */
+export interface ModelProviderWarning {
+    /**
+     * Machine-readable warning code.
+     */
+    code: string;
+    /**
+     * Human-readable warning message.
+     */
+    message: string;
+}
+/**
+ * Models offered for agent conversations by one provider instance. Adapters exclude known-incompatible models, but retain candidates with unknown capabilities. Listing does not guarantee compatibility.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiscoveredModelList".
+ */
+/** @experimental */
+export interface DiscoveredModelList {
+    outcome: ModelProviderOperationOutcome;
+    /**
+     * Provider-native models in provider order.
      */
-    scopes: [string, ...string[]];
-    interaction: EntraTokenInteraction;
+    models: DiscoveredModel[];
+}
+/**
+ * Typed provider-operation outcome. Use the code for control flow and the optional message for display.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderOperationOutcome".
+ */
+/** @experimental */
+export interface ModelProviderOperationOutcome {
+    code: ModelProviderOperationOutcomeCode;
+    /**
+     * Human-readable detail for non-success outcomes.
+     */
+    message?: string;
+}
+/**
+ * Slash-prefixed command string to enqueue for FIFO processing.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnqueueCommandParams".
+ */
+/** @experimental */
+export interface EnqueueCommandParams {
+    /**
+     * Slash-prefixed command string to enqueue, e.g. '/compact' or '/model gpt-4'. Queued FIFO with any in-flight items; if the session is idle, processing kicks off immediately.
+     */
+    command: string;
+    /**
+     * Optional user-facing text for the queue row. The command string is shown when omitted.
+     */
+    displayText?: string | null;
+}
+/** @experimental */
+export interface UnsupportedEnqueueCommandResult {
+    /**
+     * False because the target session does not support local command queueing (e.g. remote sessions).
+     */
+    queued: false;
     /**
-     * Previously rejected token that OneAuth must bypass during renewal.
+     * Legacy null queue ID accepted for compatibility with older runtimes.
      */
-    accessTokenToRenew?: string;
+    queueId?: null;
 }
 /**
  * Hosting capabilities and session capacity advertised by an environment.
@@ -15877,82 +16217,6 @@ export interface Model {
     warningMessages?: ModelMessage[];
     provider?: ModelProviderRef;
 }
-/**
- * Model capabilities and limits
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelCapabilities".
- */
-/** @experimental */
-export interface ModelCapabilities {
-    supports?: ModelCapabilitiesSupports;
-    limits?: ModelCapabilitiesLimits;
-}
-/**
- * Feature flags indicating what the model supports
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelCapabilitiesSupports".
- */
-/** @experimental */
-export interface ModelCapabilitiesSupports {
-    /**
-     * Whether this model supports vision/image input
-     */
-    vision?: boolean;
-    /**
-     * Whether this model supports canonical tool calling
-     */
-    toolCalls?: boolean;
-    /**
-     * Whether this model supports reasoning effort configuration
-     */
-    reasoningEffort?: boolean;
-    adaptive_thinking?: AdaptiveThinkingSupport;
-}
-/**
- * Token limits for prompts, outputs, and context window
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelCapabilitiesLimits".
- */
-/** @experimental */
-export interface ModelCapabilitiesLimits {
-    /**
-     * Maximum number of prompt/input tokens
-     */
-    max_prompt_tokens?: number;
-    /**
-     * Maximum number of output/completion tokens
-     */
-    max_output_tokens?: number;
-    /**
-     * Maximum total context window size in tokens
-     */
-    max_context_window_tokens?: number;
-    vision?: ModelCapabilitiesLimitsVision;
-}
-/**
- * Vision-specific limits
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelCapabilitiesLimitsVision".
- */
-/** @experimental */
-export interface ModelCapabilitiesLimitsVision {
-    /**
-     * MIME types the model accepts
-     */
-    supported_media_types: string[];
-    /**
-     * Maximum number of images per prompt
-     */
-    max_prompt_images: number;
-    /**
-     * Maximum image size in bytes
-     */
-    max_prompt_image_size: number;
-}
 /**
  * Policy state (if applicable)
  *
@@ -16331,35 +16595,437 @@ export interface ModelPickerSettingsContext {
     environment: {};
 }
 /**
- * One model provider available to the session — the model analog of the account `ProviderDescriptor`. Opaque id/label/kind plus a stable ordering; central code never branches on kind.
+ * Normalized model-provider adapter definitions available to the session, not discovered instances.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelProviderDescriptor".
+ * via the `definition` "ModelProviderAdapterCatalog".
  */
 /** @experimental */
-export interface ModelProviderDescriptor {
-    kind: ModelProviderKind;
-    /**
-     * Opaque, stable provider id, stamped onto every model this provider returns.
-     */
-    id: string;
-    /**
-     * Human-readable menu label, owned by the runtime so every consumer renders identical text.
-     */
-    label: string;
+export interface ModelProviderAdapterCatalog {
     /**
-     * Stable ordering key for presenting providers in a deterministic sequence.
+     * Available provider adapters ordered by adapterId.
      */
-    ordering: number;
+    providers: ModelProviderAdapterDescriptor[];
 }
 /**
- * Host-supplied exact model selection IDs to allow for this running session. CAPI IDs are intersected with repository `.github/allowed_models.txt` policy; provider-qualified IDs remain exempt from repository-only policy but are restricted by this host list. Omit or pass null to clear the host restriction; an explicit empty or disjoint list is rejected. Validation and pre-selection fallback failures preserve the previous restriction. Failures after a fallback selection commits retain the new restriction and selected model; callers should inspect current session state after such an error.
+ * A normalized model-provider adapter in the session's effective catalog.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelSetAllowedModelsRequest".
+ * via the `definition` "ModelProviderAdapterDescriptor".
  */
 /** @experimental */
-export interface ModelSetAllowedModelsRequest {
+export interface ModelProviderAdapterDescriptor {
+    /**
+     * Stable opaque identity for routing to this adapter. Unique in the effective catalog, independent of live registration generations.
+     */
+    adapterId: string;
+    /**
+     * Descriptive provider family, such as `ollama`. Different adapters may have the same family; use adapterId for routing.
+     */
+    providerKind: string;
+    /**
+     * Human-readable provider name.
+     */
+    displayName: string;
+    provenance: ModelProviderAttribution;
+    automaticDiscovery: ModelProviderAutomaticDiscoveryPolicy;
+    /**
+     * Operations supported by this provider adapter.
+     */
+    operations: ModelProviderAdapterOperationDescriptor[];
+}
+/**
+ * Contributor attribution, independent of routing identity and authorization.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderAttribution".
+ */
+/** @experimental */
+export interface ModelProviderAttribution {
+    source: ModelProviderProvenanceSource;
+    /**
+     * Stable contributor identifier. Required and nonblank for extension and custom sources; optional for built-in and configured sources. Does not grant authority.
+     */
+    ownerId?: string;
+    /**
+     * Human-readable contributor name, not the adapter display name.
+     */
+    ownerDisplayName?: string;
+}
+/**
+ * Adapter-declared policy that tells clients whether discovery may run automatically.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderAutomaticDiscoveryPolicy".
+ */
+/** @experimental */
+export interface ModelProviderAutomaticDiscoveryPolicy {
+    mode: ModelProviderAutomaticDiscoveryMode;
+    networkScope: ModelProviderDiscoveryNetworkScope;
+    /**
+     * True when discovery requires non-null caller input. Omission or null is rejected before adapter execution. When false, omitted or null input selects adapter defaults without schema validation.
+     */
+    requiresInput: boolean;
+    /**
+     * True when the adapter must be enabled by a trusted owner, such as a trusted extension, before automatic discovery may run.
+     */
+    requiresTrust: boolean;
+}
+/**
+ * An operation supported by a model-provider adapter.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderAdapterOperationDescriptor".
+ */
+/** @experimental */
+export interface ModelProviderAdapterOperationDescriptor {
+    /**
+     * Supported operation name: `discover`, `getStatus`, or `models.list`. Unknown names and duplicate declarations are rejected.
+     */
+    name: string;
+    /**
+     * Optional self-contained JSON Schema Draft 7 for non-null discovery input. Only supported on discover. No external references are resolved. Omitted or null input selects defaults when requiresInput is false. Without a schema, the adapter validates supplied input.
+     */
+    inputSchema?: JsonValue;
+}
+/**
+ * Provider configuration prepared from a discovered model. Preparing a plan changes nothing: it neither registers the model with the session nor writes durable configuration. To apply it, pass `provider` and `model` to `session.provider.add`, omitting whichever the dispositions report as already configured.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderConfigurationPlan".
+ */
+/** @experimental */
+export interface ModelProviderConfigurationPlan {
+    provider: NamedProviderConfig;
+    model: ProviderModelConfig;
+    /**
+     * Provider-qualified selection id (`provider/id`) to pass to `switchTo` once the plan is applied.
+     */
+    selectionId: string;
+    providerDisposition: ModelProviderConfigurationDisposition;
+    modelDisposition: ModelProviderConfigurationDisposition;
+    /**
+     * Non-fatal warnings carried over from the discovered model, such as capabilities the provider did not report.
+     */
+    warnings: ModelProviderWarning[];
+}
+/**
+ * External SDK input for a named custom model provider. Ingested by the native protocol boundary before host dispatch.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "NamedProviderConfig".
+ */
+/** @experimental */
+export interface NamedProviderConfig {
+    /**
+     * Unique provider name used to qualify model selection IDs.
+     */
+    name: string;
+    type?: ProviderConfigType;
+    wireApi?: ProviderConfigWireApi;
+    transport?: ProviderConfigTransport;
+    /**
+     * Base URL for provider API requests.
+     */
+    baseUrl: string;
+    /**
+     * Static API key used to authenticate provider requests.
+     */
+    apiKey?: string;
+    /**
+     * Static bearer token used to authenticate provider requests.
+     */
+    bearerToken?: string;
+    azure?: ProviderConfigAzure;
+    /**
+     * Additional HTTP headers included with provider requests.
+     */
+    headers?: {
+        [k: string]: string | undefined;
+    };
+    modelProvider?: ProviderConfigModelProvider;
+    /**
+     * Whether the host supplies bearer tokens dynamically.
+     */
+    hasBearerTokenProvider?: boolean;
+}
+/**
+ * Azure-specific provider options.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderConfigAzure".
+ */
+/** @experimental */
+export interface ProviderConfigAzure {
+    /**
+     * API version. When set, uses the versioned deployment route. When omitted, uses the GA versionless v1 route.
+     */
+    apiVersion?: string;
+}
+/**
+ * A BYOK model definition referencing a named provider.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderModelConfig".
+ */
+/** @experimental */
+export interface ProviderModelConfig {
+    /**
+     * Provider-local model id, unique within its provider. The session-wide selection id (shown in the model list and passed to switchTo) is the provider-qualified `provider/id`.
+     */
+    id: string;
+    /**
+     * Name of the configured provider that serves this model.
+     */
+    provider: string;
+    /**
+     * The model name sent to the provider API for inference. Defaults to `id`.
+     */
+    wireModel?: string;
+    /**
+     * Well-known base model id used for behavior/capability/config lookup. Defaults to `id`.
+     */
+    modelId?: string;
+    /**
+     * Display name for model pickers. Defaults to the provider-qualified selection id (`provider/id`).
+     */
+    name?: string;
+    /**
+     * Maximum prompt/input tokens for the model.
+     */
+    maxPromptTokens?: number;
+    /**
+     * Maximum context window tokens for the model.
+     */
+    maxContextWindowTokens?: number;
+    /**
+     * Maximum output tokens for the model.
+     */
+    maxOutputTokens?: number;
+    capabilities?: ModelCapabilitiesOverride;
+    systemMessage?: ProtocolSystemMessageConfig;
+    /**
+     * Provider-published model metadata, preserved verbatim as the public Model.metadata object.
+     */
+    metadata?: {
+        [k: string]: JsonValue | undefined;
+    };
+}
+/** @experimental */
+export interface ProtocolSystemMessageAppendConfig {
+    mode?: ProtocolAppendMode;
+    /**
+     * Text appended to the standard system prompt.
+     */
+    content?: string;
+}
+/** @experimental */
+export interface ProtocolSystemMessageReplaceConfig {
+    mode: ProtocolReplaceMode;
+    /**
+     * Complete replacement system-message text.
+     */
+    content: string;
+    /**
+     * Optional structured blocks corresponding to the replacement content.
+     */
+    contentBlocks?: SystemMessageBlock[];
+}
+/** @experimental */
+export interface SystemMessageBlock {
+    /**
+     * Text content for this system-message block.
+     */
+    content: string;
+    /**
+     * Whether the block is static and may be cached independently of dynamic prompt content.
+     */
+    isStatic?: boolean;
+    /**
+     * Whether providers with explicit prompt caching should place a cache breakpoint after this block.
+     */
+    cacheBreakpoint?: boolean;
+}
+/** @experimental */
+export interface ProtocolSystemMessageCustomizeConfig {
+    mode: ProtocolCustomizeMode;
+    /**
+     * Named standard-prompt section overrides.
+     */
+    sections?: {
+        [k: string]: ProtocolSectionOverride | undefined;
+    };
+    /**
+     * Text appended after the customized sections.
+     */
+    content?: string;
+}
+/** @experimental */
+export interface ProtocolStaticSectionOverride {
+    action: ProtocolStaticSectionAction;
+    /**
+     * Optional content used by replace, append, and prepend operations.
+     */
+    content?: string;
+}
+/**
+ * One model provider available to the session — the model analog of the account `ProviderDescriptor`. Opaque id/label/kind plus a stable ordering; central code never branches on kind.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderDescriptor".
+ */
+/** @experimental */
+export interface ModelProviderDescriptor {
+    kind: ModelProviderKind;
+    /**
+     * Opaque, stable provider id, stamped onto every model this provider returns.
+     */
+    id: string;
+    /**
+     * Human-readable menu label, owned by the runtime so every consumer renders identical text.
+     */
+    label: string;
+    /**
+     * Stable ordering key for presenting providers in a deterministic sequence.
+     */
+    ordering: number;
+}
+/**
+ * Provider discovery parameters.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderDiscoverRequest".
+ */
+/** @experimental */
+export interface ModelProviderDiscoverRequest {
+    /**
+     * Opaque adapter identity returned by `session.providers.getCatalog`.
+     */
+    adapterId: string;
+    /**
+     * Provider-specific JSON input. Omission or null selects adapter defaults unless requiresInput is true. Non-null input is validated against the advertised Draft 7 schema when present; otherwise validation belongs to the adapter.
+     */
+    input?: JsonValue;
+}
+/**
+ * Provider instances found by a discovery operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderDiscoverResult".
+ */
+/** @experimental */
+export interface ModelProviderDiscoverResult {
+    outcome: ModelProviderOperationOutcome;
+    /**
+     * Discovered provider instances. Empty when passive default discovery finds no reachable provider.
+     */
+    instances: ModelProviderInstance[];
+}
+/**
+ * A normalized model-provider instance discovered by the runtime.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderInstance".
+ */
+/** @experimental */
+export interface ModelProviderInstance {
+    reference: ModelProviderInstanceReference;
+    /**
+     * Human-readable instance name.
+     */
+    displayName: string;
+    provenance: ModelProviderProvenance;
+    /**
+     * Inference API endpoint when the provider exposes one separately from its management endpoint.
+     */
+    inferenceEndpoint?: string;
+    inferenceType?: ProviderEndpointType;
+    inferenceWireApi?: ProviderEndpointWireApi;
+    inferenceTransport?: ProviderEndpointTransport;
+}
+/**
+ * Serializable reference to a discovered provider instance.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderInstanceReference".
+ */
+/** @experimental */
+export interface ModelProviderInstanceReference {
+    /**
+     * Stable opaque identity of the adapter that owns this reference. Must be present in the target session's effective catalog.
+     */
+    adapterId: string;
+    /**
+     * Descriptive provider family. Must match the selected adapter; not a routing key.
+     */
+    providerKind: string;
+    /**
+     * Stable instance identifier derived by the provider adapter, such as `ollama:{normalizedEndpoint}`.
+     */
+    id: string;
+    /**
+     * Absolute provider management URI. The adapter validates normalization, supported schemes, and permission to access it against its bound configuration; a reference does not grant authority.
+     */
+    managementEndpoint: string;
+}
+/**
+ * Provider status request parameters.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderGetStatusRequest".
+ */
+/** @experimental */
+export interface ModelProviderGetStatusRequest {
+    instance: ModelProviderInstanceReference;
+}
+/**
+ * Provider model inventory request parameters.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderModelsListRequest".
+ */
+/** @experimental */
+export interface ModelProviderModelsListRequest {
+    instance: ModelProviderInstanceReference;
+}
+/**
+ * A discovered instance and one of its models to translate into provider configuration. Pass back the instance and model as returned by `session.providers.discover` and `session.providers.models.list`.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderPrepareConfigurationRequest".
+ */
+/** @experimental */
+export interface ModelProviderPrepareConfigurationRequest {
+    instance: ModelProviderInstance;
+    model: DiscoveredModel;
+}
+/**
+ * Current health information for a provider instance.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderStatus".
+ */
+/** @experimental */
+export interface ModelProviderStatus {
+    outcome: ModelProviderOperationOutcome;
+    instance: ModelProviderInstance;
+    /**
+     * Open provider status value, such as `healthy`, `unreachable`, or `notInstalled`.
+     */
+    status: string;
+    /**
+     * Provider-reported version.
+     */
+    version?: string;
+}
+/**
+ * Host-supplied exact model selection IDs to allow for this running session. CAPI IDs are intersected with repository `.github/allowed_models.txt` policy; provider-qualified IDs remain exempt from repository-only policy but are restricted by this host list. Omit or pass null to clear the host restriction; an explicit empty or disjoint list is rejected. Validation and pre-selection fallback failures preserve the previous restriction. Failures after a fallback selection commits retain the new restriction and selected model; callers should inspect current session state after such an error.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelSetAllowedModelsRequest".
+ */
+/** @experimental */
+export interface ModelSetAllowedModelsRequest {
     /**
      * Exact model IDs to permit, or null to clear the host restriction.
      */
@@ -16655,78 +17321,26 @@ export interface ModeSetResult {
      */
     deprecationWarnings?: string[];
     /**
-     * Whether the host must defer implementing the requested mode change.
-     */
-    deferImplementation?: boolean;
-    /**
-     * Whether the host should arm an interactive continuation after the mode change.
-     */
-    armInteractiveContinuation?: boolean;
-}
-/**
- * Result of moving in-flight MCP loading to the background.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "MoveMcpLoadingToBackgroundResult".
- */
-/** @experimental */
-export interface MoveMcpLoadingToBackgroundResult {
-    /**
-     * Whether an in-flight MCP load was moved to the background, releasing turns that were waiting on it. False when no MCP load was in flight or the waiting turns had already been released.
-     */
-    movedToBackground: boolean;
-}
-/**
- * External SDK input for a named custom model provider. Ingested by the native protocol boundary before host dispatch.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "NamedProviderConfig".
- */
-/** @experimental */
-export interface NamedProviderConfig {
-    /**
-     * Unique provider name used to qualify model selection IDs.
-     */
-    name: string;
-    type?: ProviderConfigType;
-    wireApi?: ProviderConfigWireApi;
-    transport?: ProviderConfigTransport;
-    /**
-     * Base URL for provider API requests.
-     */
-    baseUrl: string;
-    /**
-     * Static API key used to authenticate provider requests.
-     */
-    apiKey?: string;
-    /**
-     * Static bearer token used to authenticate provider requests.
-     */
-    bearerToken?: string;
-    azure?: ProviderConfigAzure;
-    /**
-     * Additional HTTP headers included with provider requests.
-     */
-    headers?: {
-        [k: string]: string | undefined;
-    };
+     * Whether the host must defer implementing the requested mode change.
+     */
+    deferImplementation?: boolean;
     /**
-     * Whether the host supplies bearer tokens dynamically.
+     * Whether the host should arm an interactive continuation after the mode change.
      */
-    hasBearerTokenProvider?: boolean;
+    armInteractiveContinuation?: boolean;
 }
 /**
- * Azure-specific provider options.
+ * Result of moving in-flight MCP loading to the background.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderConfigAzure".
+ * via the `definition` "MoveMcpLoadingToBackgroundResult".
  */
 /** @experimental */
-export interface ProviderConfigAzure {
+export interface MoveMcpLoadingToBackgroundResult {
     /**
-     * API version. When set, uses the versioned deployment route. When omitted, uses the GA versionless v1 route.
+     * Whether an in-flight MCP load was moved to the background, releasing turns that were waiting on it. False when no MCP load was in flight or the waiting turns had already been released.
      */
-    apiVersion?: string;
+    movedToBackground: boolean;
 }
 /**
  * The session's friendly name, or null when not yet set.
@@ -18867,63 +19481,6 @@ export interface ProtocolExternalToolDefinition {
         [k: string]: JsonValue | undefined;
     };
 }
-/** @experimental */
-export interface ProtocolStaticSectionOverride {
-    action: ProtocolStaticSectionAction;
-    /**
-     * Optional content used by replace, append, and prepend operations.
-     */
-    content?: string;
-}
-/** @experimental */
-export interface ProtocolSystemMessageAppendConfig {
-    mode?: ProtocolAppendMode;
-    /**
-     * Text appended to the standard system prompt.
-     */
-    content?: string;
-}
-/** @experimental */
-export interface ProtocolSystemMessageReplaceConfig {
-    mode: ProtocolReplaceMode;
-    /**
-     * Complete replacement system-message text.
-     */
-    content: string;
-    /**
-     * Optional structured blocks corresponding to the replacement content.
-     */
-    contentBlocks?: SystemMessageBlock[];
-}
-/** @experimental */
-export interface SystemMessageBlock {
-    /**
-     * Text content for this system-message block.
-     */
-    content: string;
-    /**
-     * Whether the block is static and may be cached independently of dynamic prompt content.
-     */
-    isStatic?: boolean;
-    /**
-     * Whether providers with explicit prompt caching should place a cache breakpoint after this block.
-     */
-    cacheBreakpoint?: boolean;
-}
-/** @experimental */
-export interface ProtocolSystemMessageCustomizeConfig {
-    mode: ProtocolCustomizeMode;
-    /**
-     * Named standard-prompt section overrides.
-     */
-    sections?: {
-        [k: string]: ProtocolSectionOverride;
-    };
-    /**
-     * Text appended after the customized sections.
-     */
-    content?: string;
-}
 /**
  * BYOK providers and/or models to add to the session's registry at runtime. Both fields are optional; provide providers, models, or both.
  *
@@ -18941,55 +19498,6 @@ export interface ProviderAddRequest {
      */
     models?: ProviderModelConfig[];
 }
-/**
- * A BYOK model definition referencing a named provider.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderModelConfig".
- */
-/** @experimental */
-export interface ProviderModelConfig {
-    /**
-     * Provider-local model id, unique within its provider. The session-wide selection id (shown in the model list and passed to switchTo) is the provider-qualified `provider/id`.
-     */
-    id: string;
-    /**
-     * Name of the configured provider that serves this model.
-     */
-    provider: string;
-    /**
-     * The model name sent to the provider API for inference. Defaults to `id`.
-     */
-    wireModel?: string;
-    /**
-     * Well-known base model id used for behavior/capability/config lookup. Defaults to `id`.
-     */
-    modelId?: string;
-    /**
-     * Display name for model pickers. Defaults to the provider-qualified selection id (`provider/id`).
-     */
-    name?: string;
-    /**
-     * Maximum prompt/input tokens for the model.
-     */
-    maxPromptTokens?: number;
-    /**
-     * Maximum context window tokens for the model.
-     */
-    maxContextWindowTokens?: number;
-    /**
-     * Maximum output tokens for the model.
-     */
-    maxOutputTokens?: number;
-    capabilities?: ModelCapabilitiesOverride;
-    systemMessage?: ProtocolSystemMessageConfig;
-    /**
-     * Provider-published model metadata, preserved verbatim as the public Model.metadata object.
-     */
-    metadata?: {
-        [k: string]: JsonValue | undefined;
-    };
-}
 /**
  * The selectable model entries synthesized for the models added by this call.
  *
@@ -19036,6 +19544,7 @@ export interface ProviderConfig {
      * Provider name used for model and telemetry attribution.
      */
     providerName?: string;
+    modelProvider?: ProviderConfigModelProvider;
     /**
      * The model identifier sent to the provider API for inference (the "wire" model), as opposed to modelId which is the well-known base.
      */
@@ -20867,6 +21376,47 @@ export interface SandboxHostSupport {
      */
     capabilities: SandboxHostCapability[];
 }
+/**
+ * Result of creating the persistent certificate authority of the sandbox credential proxy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxyCaCreateResult".
+ */
+/** @experimental */
+export interface SandboxProxyCaCreateResult {
+    /**
+     * Absolute path of the public certificate of the certificate authority, in PEM format.
+     */
+    certificatePath: string;
+}
+/**
+ * Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxyCaRequest".
+ */
+/** @experimental */
+export interface SandboxProxyCaRequest {
+    sandboxConfig?: SandboxConfig;
+}
+/**
+ * Status of the persistent certificate authority of the sandbox credential proxy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxyCaStatus".
+ */
+/** @experimental */
+export interface SandboxProxyCaStatus {
+    state: SandboxProxyCaState;
+    /**
+     * Human-readable reason for the state. On `installed` or `notInstalled`, present only when the certificate authority must be rotated, and then says why.
+     */
+    detail?: string;
+    /**
+     * Whether this process can add the certificate authority to OS trust without credentials from a different user. False where OS trust is unsupported, and on Windows when the process cannot elevate itself to write the machine trust store. When false, do not offer to set up the certificate authority.
+     */
+    canInstall: boolean;
+}
 /**
  * Register an absolute-time scheduled prompt.
  *
@@ -21546,6 +22096,10 @@ export interface SessionFsError {
      * Free-form detail about the error, for logging/diagnostics
      */
     message?: string;
+    /**
+     * For failed writeFile requests only: true if the provider changed the target before failing. Omit when unknown or unchanged.
+     */
+    writeChanged?: boolean;
 }
 /**
  * Path to test for existence in the client-provided session filesystem.
@@ -21678,6 +22232,37 @@ export interface SessionFsReaddirWithTypesResult {
     entries: SessionFsReaddirWithTypesEntry[];
     error?: SessionFsError;
 }
+/**
+ * Path of the binary file to read from the client-provided session filesystem.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionFsReadFileBytesRequest".
+ */
+/** @experimental */
+export interface SessionFsReadFileBytesRequest {
+    /**
+     * Target session identifier
+     */
+    sessionId: string;
+    /**
+     * Path using SessionFs conventions
+     */
+    path: string;
+}
+/**
+ * File bytes as standard base64, or a filesystem error if the read failed.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionFsReadFileBytesResult".
+ */
+/** @experimental */
+export interface SessionFsReadFileBytesResult {
+    /**
+     * Exact file bytes encoded as standard base64
+     */
+    content: string;
+    error?: SessionFsError;
+}
 /**
  * Path of the file to read from the client-provided session filesystem.
  *
@@ -21767,6 +22352,10 @@ export interface SessionFsSetProviderCapabilities {
      * Whether the provider supports SQLite query/exists operations
      */
     sqlite?: boolean;
+    /**
+     * Whether the provider supports binary reads and writes through sessionFs.readFileBytes and sessionFs.writeFileBytes
+     */
+    binary?: boolean;
 }
 /**
  * Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider. A registered provider is authoritative for path interpretation and filesystem facts used by workspace permission validation. Paths are interpreted lexically; home-relative paths (`~` and `~/...`) and Windows drive-relative paths such as `C:foo` are unsupported. Until provider-side canonicalization is supported, providers must not expose symlinks inside allowed roots that escape those roots.
@@ -21977,6 +22566,31 @@ export interface SessionFsStatResult {
     birthtime: string;
     error?: SessionFsError;
 }
+/**
+ * File path, standard-base64-encoded bytes to write, and optional mode for the client-provided session filesystem.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionFsWriteFileBytesRequest".
+ */
+/** @experimental */
+export interface SessionFsWriteFileBytesRequest {
+    /**
+     * Target session identifier
+     */
+    sessionId: string;
+    /**
+     * Path using SessionFs conventions
+     */
+    path: string;
+    /**
+     * Exact file bytes encoded as standard base64
+     */
+    content: string;
+    /**
+     * Optional POSIX-style mode for newly created files
+     */
+    mode?: number;
+}
 /**
  * File path, content to write, and optional mode for the client-provided session filesystem.
  *
@@ -29103,6 +29717,47 @@ export declare function createServerRpc(connection: MessageConnection): {
          * @returns Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
          */
         getHostSupport: () => Promise<SandboxHostSupport>;
+        /** @experimental */
+        proxyCa: {
+            /**
+             * Reports whether the persistent certificate authority of the sandbox credential proxy exists, whether OS trust includes it, and whether it must be rotated. Changes nothing.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            getStatus: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
+            /**
+             * Creates the persistent certificate authority of the sandbox credential proxy if none is stored, without changing OS trust, and returns the path of its public certificate. Keeps an existing certificate authority, even one that must be rotated. Fails where OS trust is unsupported. Trust it with sandbox.proxyCa.trust: the CLI trusts only the hosts in the saved user settings, so it refuses a certificate authority that also covers hosts from sandboxConfig.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Result of creating the persistent certificate authority of the sandbox credential proxy.
+             */
+            create: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaCreateResult>;
+            /**
+             * Replaces the persistent certificate authority of the sandbox credential proxy with a new one for the current credential hosts. If OS trust included the old one, removes it and trusts the new one, which can show an OS authentication prompt. Running sandboxed tools keep the old certificate authority until they restart.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            rotate: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
+            /**
+             * Adds the persistent certificate authority of the sandbox credential proxy to OS trust, so sandboxed clients that read only OS trust accept the proxy. Call create first. Refuses a certificate authority that is not constrained to the current credential hosts. Can show an OS authentication prompt.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            trust: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
+            /**
+             * Removes the persistent certificate authority of the sandbox credential proxy from OS trust. Keeps the stored certificate authority. Can show an OS authentication prompt. Sandboxed clients that read only OS trust then reject the proxy; clients that read the per-process certificate bundle continue to work.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            remove: () => Promise<SandboxProxyCaStatus>;
+        };
     };
     /** @experimental */
     tools: {
@@ -29918,6 +30573,50 @@ export declare function createServerRpc(connection: MessageConnection): {
 };
 /** Create typed session-scoped RPC methods. */
 export declare function createSessionRpc(connection: MessageConnection, sessionId: string): {
+    /** @experimental */
+    providers: {
+        /**
+         * Returns adapter definitions and supported operations in this session's effective provider catalog, without running discovery. Does not list provider instances or select inference models.
+         *
+         * @returns Normalized model-provider adapter definitions available to the session, not discovered instances.
+         */
+        getCatalog: () => Promise<ModelProviderAdapterCatalog>;
+        /**
+         * Discovers reachable instances using an adapter from this session's effective provider catalog and provider-specific discovery input.
+         *
+         * @param params Provider discovery parameters.
+         *
+         * @returns Provider instances found by a discovery operation.
+         */
+        discover: (params: ModelProviderDiscoverRequest) => Promise<ModelProviderDiscoverResult>;
+        /**
+         * Gets current health and version information for a discovered model-provider instance.
+         *
+         * @param params Provider status request parameters.
+         *
+         * @returns Current health information for a provider instance.
+         */
+        getStatus: (params: ModelProviderGetStatusRequest) => Promise<ModelProviderStatus>;
+        /** @experimental */
+        models: {
+            /**
+             * Lists models installed or otherwise available from a discovered model-provider instance.
+             *
+             * @param params Provider model inventory request parameters.
+             *
+             * @returns Models offered for agent conversations by one provider instance. Adapters exclude known-incompatible models, but retain candidates with unknown capabilities. Listing does not guarantee compatibility.
+             */
+            list: (params: ModelProviderModelsListRequest) => Promise<DiscoveredModelList>;
+            /**
+             * Translates a discovered model into the provider and model configuration needed to use it, and reports whether each is already registered in this session. Prepares only: it registers nothing, writes nothing, and performs no provider requests.
+             *
+             * @param params A discovered instance and one of its models to translate into provider configuration. Pass back the instance and model as returned by `session.providers.discover` and `session.providers.models.list`.
+             *
+             * @returns Provider configuration prepared from a discovered model. Preparing a plan changes nothing: it neither registers the model with the session nor writes durable configuration. To apply it, pass `provider` and `model` to `session.provider.add`, omitting whichever the dispositions report as already configured.
+             */
+            prepareConfiguration: (params: ModelProviderPrepareConfigurationRequest) => Promise<ModelProviderConfigurationPlan>;
+        };
+    };
     /**
      * Suspends the session while preserving persisted state for later resume.
      *
@@ -30525,18 +31224,20 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          */
         getSources: () => Promise<InstructionsGetSourcesResult>;
         /**
-         * Invalidates cached custom-instruction discovery so subsequent turns and source reads observe instruction files currently on disk.
+         * For local sessions, invalidates instruction discovery and the model-facing prompt, then returns freshly discovered sources. The updated prompt takes effect on the next turn. Remote sessions must reload on their agent host instead.
+         *
+         * @returns Instruction sources loaded for the session, in merge order.
          */
-        reload: () => Promise<void>;
+        reload: () => Promise<InstructionsGetSourcesResult>;
     };
     /** @experimental */
     customizations: {
         /**
-         * Reloads all repository and user customizations for the active session: instructions, plugins and their MCP servers and hooks, custom agents, extensions, and skills. Returns diagnostics from the final skill reload.
+         * For local sessions, reconciles repository context and discovered instructions, plugins, skills, agents, hooks, MCP servers, and extensions after files appear or change under the working directory. Independent component failures are returned in outcomes and errors; a rejected call can have partially applied earlier steps. Remote sessions must reload on their agent host instead. The model-facing context is rebuilt on the next turn.
          *
-         * @returns Diagnostics from reloading skill definitions, with warnings and errors as separate lists.
+         * @returns Results of reloading discovered session customizations. Inspect outcomes for reloaded, skipped, or failed subsystems; a rejection may follow partial mutation. Changes to the model-facing prompt and tools apply on the next turn.
          */
-        reload: () => Promise<SkillsLoadDiagnostics>;
+        reload: () => Promise<CustomizationsReloadResult>;
     };
     /** @experimental */
     fleet: {
@@ -32113,6 +32814,14 @@ export interface SessionFsHandler {
      * @returns File content as a UTF-8 string, or a filesystem error if the read failed.
      */
     readFile(params: SessionFsReadFileRequest): Promise<SessionFsReadFileResult>;
+    /**
+     * Reads binary file content from the client-provided session filesystem.
+     *
+     * @param params Path of the binary file to read from the client-provided session filesystem.
+     *
+     * @returns File bytes as standard base64, or a filesystem error if the read failed.
+     */
+    readFileBytes(params: SessionFsReadFileBytesRequest): Promise<SessionFsReadFileBytesResult>;
     /**
      * Writes a file in the client-provided session filesystem.
      *
@@ -32121,6 +32830,14 @@ export interface SessionFsHandler {
      * @returns Describes a filesystem error.
      */
     writeFile(params: SessionFsWriteFileRequest): Promise<SessionFsError | undefined>;
+    /**
+     * Writes binary file content to the client-provided session filesystem.
+     *
+     * @param params File path, standard-base64-encoded bytes to write, and optional mode for the client-provided session filesystem.
+     *
+     * @returns Describes a filesystem error.
+     */
+    writeFileBytes(params: SessionFsWriteFileBytesRequest): Promise<SessionFsError | undefined>;
     /**
      * Appends content to a file in the client-provided session filesystem, creating parent directories as needed.
      *