@github/copilot-sdk-win32-x64 1.0.17-preview.4 → 1.0.17-preview.6

package/schemas/api.schema.json

@@ -1044,6 +1044,82 @@
           "description": "Canonical locations where custom agents can be created so the runtime will recognize them."
         },
         "stability": "experimental"
+      },
+      "getBuiltins": {
+        "rpcMethod": "agents.getBuiltins",
+        "description": "Lists the agents this runtime ships, by name. A consumer separating shipped agents from ones the user or a plugin authored should compare against these names rather than against `AgentInfo.source`: an authored agent may carry the `builtin` source while not being one of these, and the runtime treats the two as separate questions. `disableableNames` is the subset a user may turn off, which a client needs to decide whether to offer a toggle. `yamlBasedNames` is the subset backed by a shipped YAML definition, which a client needs before asking the runtime to load one.",
+        "params": null,
+        "result": {
+          "$ref": "#/definitions/AgentsGetBuiltinsResult",
+          "description": "The agents this runtime ships, named so a consumer can tell them apart from authored ones.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "getAvailableBuiltins": {
+        "rpcMethod": "agents.getAvailableBuiltins",
+        "description": "Lists the shipped agents a client should offer right now, filtered by the feature flags it passes. `getBuiltins` names every agent the runtime knows about; some of those are gated, so a client rendering a picker wants this narrower list together with the description to show beside each name.",
+        "params": {
+          "$ref": "#/definitions/AgentsGetAvailableBuiltinsRequest",
+          "description": "The feature flags to evaluate shipped agents against.",
+          "visibility": "internal"
+        },
+        "result": {
+          "$ref": "#/definitions/AgentsGetAvailableBuiltinsResult",
+          "description": "The shipped agents available under the requested flags.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "getBuiltinDefinition": {
+        "rpcMethod": "agents.getBuiltinDefinition",
+        "description": "Loads one shipped agent's YAML definition, for a client that needs what the agent declares rather than only its name. `getBuiltins` reports which names have a definition to load: a name outside its `yamlBasedNames` is special-cased in code and has none. The definition crosses as its own JSON rather than as contract-typed fields, because the runtime parses it with the agent schema's tolerant shape and re-typing it here would drop the keys that shape accepts and this one does not. The projected `__nativeCustomAgent` view the runtime derives is included, so a caller reading the declared model and a caller rendering the agent see the same definition.",
+        "params": {
+          "$ref": "#/definitions/AgentsGetBuiltinDefinitionRequest",
+          "description": "The shipped agent whose definition to load.",
+          "visibility": "internal"
+        },
+        "result": {
+          "$ref": "#/definitions/AgentsGetBuiltinDefinitionResult",
+          "description": "One shipped agent's definition.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "getBuiltinListingDefinition": {
+        "rpcMethod": "agents.getBuiltinListingDefinition",
+        "description": "Projects one shipped agent the way a picker lists it, reading only the metadata at the head of the definition file and stopping before the prompt body. `getBuiltinDefinition` answers the whole definition instead, so a client listing every shipped agent should prefer this one: the cost of a listing grows with the number of agents, and the prompt body is the part a listing never shows. The two also differ in shape. This returns the projected custom agent on its own, whereas `getBuiltinDefinition` returns the authored definition with that projection nested under `__nativeCustomAgent`.",
+        "params": {
+          "$ref": "#/definitions/AgentsGetBuiltinListingDefinitionRequest",
+          "description": "The shipped agent whose listing entry to load.",
+          "visibility": "internal"
+        },
+        "result": {
+          "$ref": "#/definitions/AgentsGetBuiltinListingDefinitionResult",
+          "description": "One shipped agent, projected for a listing.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "customAgentInitialModelDecision": {
+        "rpcMethod": "agents.customAgentInitialModelDecision",
+        "description": "Resolves the model a custom agent asks for against the models actually available, and answers both the model to switch to and the warning a user should see when the agent's preference cannot be met. A custom agent may name several acceptable models in preference order, so the decision is a match rather than a lookup, and an agent whose preference is unavailable is a normal outcome that produces a warning rather than an error. A host must call this rather than pick the first available name itself, because the preference order and the wording of the warning are what keep one installation's agent selection the same as another's.",
+        "params": {
+          "$ref": "#/definitions/AgentsCustomAgentInitialModelDecisionParams",
+          "description": "The models a custom agent asks for, and the models actually available.",
+          "visibility": "internal"
+        },
+        "result": {
+          "$ref": "#/definitions/AgentsCustomAgentInitialModelDecisionResult",
+          "description": "The model to switch to, and the warning to show when the agent's preference could not be met.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
       }
     },
     "instructions": {
@@ -1122,6 +1198,119 @@
         }
       }
     },
+    "gitHubRepository": {
+      "atPath": {
+        "rpcMethod": "gitHubRepository.atPath",
+        "description": "Resolves the GitHub repository that owns a working-tree path by reading the selected git remote configured for it, preferring `origin`. Returns a null `repository` when the path is inside a git working tree but that selected remote does not resolve to a GitHub host. Fails when the path is not inside a git working tree at all, so a caller can tell 'not a repository' apart from 'a repository with no GitHub remote'.",
+        "params": {
+          "$ref": "#/definitions/GitHubRepositoryAtPathRequest",
+          "description": "Working-tree path whose owning GitHub repository should be resolved.",
+          "visibility": "internal"
+        },
+        "result": {
+          "$ref": "#/definitions/GitHubRepositoryAtPathResult",
+          "description": "The GitHub repository that owns the requested path, when the selected remote (`origin`, else the first) is on a GitHub host.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      }
+    },
+    "gitHubOwners": {
+      "nextRequestId": {
+        "rpcMethod": "gitHubOwners.nextRequestId",
+        "description": "Registers a cancellable owner listing and returns its request id. Separate from `gitHubOwners.list` so the id exists before the listing starts: a caller that abandons the listing the moment it begins would otherwise have nothing to name in `gitHubOwners.cancel`. The id serves one listing only. Long-abandoned unused ids can be released by later allocations.",
+        "params": null,
+        "result": {
+          "$ref": "#/definitions/GitHubOwnersRequestIdResult",
+          "description": "A freshly registered request id. Registering it before the listing starts is what lets a cancel that races the request still find the owner listing slot. The id serves one listing only. Long-abandoned unused ids can be released by later allocations.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "list": {
+        "rpcMethod": "gitHubOwners.list",
+        "description": "Lists the logins the authenticated user may act as — their own account first, then the organizations they belong to — by asking the GitHub API under the supplied credential. No credential travels in the request: `authInfo` selects one the runtime already holds, and the runtime resolves the token and the GitHub host from it. A failure the caller should render arrives as `message`; one it should raise arrives as `throwError`.",
+        "params": {
+          "$ref": "#/definitions/GitHubOwnersListRequest",
+          "description": "Credential to list owners under, and the request id that makes the listing cancellable.",
+          "visibility": "internal"
+        },
+        "result": {
+          "$ref": "#/definitions/GitHubOwnersListResult",
+          "description": "Outcome of an owner listing. Exactly one of `owners` and `message` is present, except that `throwError` reports a failure the caller is expected to raise rather than render.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "cancel": {
+        "rpcMethod": "gitHubOwners.cancel",
+        "description": "Abandons an owner listing started with the given request id. Answers `canceled: true` while a listing with that id is running. Answers `canceled: false` when the id was never registered, was registered but not used, was released after being abandoned, or its listing has ended. Canceling an unused id releases it, and a later `list` with that id is refused. The cancel acts only on owner listings and never reaches another request of the host.",
+        "params": {
+          "$ref": "#/definitions/GitHubOwnersCancelRequest",
+          "description": "The owner listing to abandon.",
+          "visibility": "internal"
+        },
+        "result": {
+          "$ref": "#/definitions/GitHubOwnersCancelResult",
+          "description": "Whether the id named a running owner listing.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      }
+    },
+    "git": {
+      "currentBranchRemote": {
+        "rpcMethod": "git.currentBranchRemote",
+        "description": "Reads the remote that the branch checked out in a working tree tracks, as `branch.<name>.remote` configures it. Reports `origin` rather than failing whenever there is no tracking configuration to read — on a detached HEAD, on a branch with no upstream, or when git itself fails — because a caller asking which remote to talk to needs an answer it can act on, not an error. Marked internal because it exists to carry a CLI call site off the napi boundary onto the SDK contract; it is migration plumbing, not a surface consumers are meant to depend on.",
+        "params": {
+          "$ref": "#/definitions/GitCwdRequest",
+          "description": "Working-tree path a git query applies to.",
+          "visibility": "internal"
+        },
+        "result": {
+          "$ref": "#/definitions/GitCurrentBranchRemoteResult",
+          "description": "The remote the checked-out branch tracks.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "workingDirectoryContext": {
+        "rpcMethod": "git.workingDirectoryContext",
+        "description": "Collects the repository context of a working directory in one call: working tree root, repository identifier and host, current branch, and the HEAD and base commits. Every repository field is omitted when the path is not inside a git working tree, and the requested path is echoed back as `cwd`. The answer is the same `SessionWorkingDirectoryContext` that `session.metadata.recordContextChange` accepts, so a caller polling for a context change can forward the result unchanged. Marked internal because it exists to carry a CLI call site off the napi boundary onto the SDK contract; it is migration plumbing, not a surface consumers are meant to depend on. It can become public once an SDK consumer needs to derive session context from a directory itself.",
+        "params": {
+          "$ref": "#/definitions/GitCwdRequest",
+          "description": "Working-tree path a git query applies to.",
+          "visibility": "internal"
+        },
+        "result": {
+          "$ref": "#/definitions/SessionWorkingDirectoryContext",
+          "description": "Updated working directory and git context. Emitted as the new payload of `session.context_changed`."
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "reposFromRemotes": {
+        "rpcMethod": "git.reposFromRemotes",
+        "description": "Lists the GitHub repositories a working tree's remotes point at, one entry per distinct repository, so a caller can resolve a base and head repository without parsing remote URLs itself. When several remotes name the same repository, only the first is listed, and the entry keeps that remote name. Remotes pointing at no GitHub host are left out, so an empty list means the tree reaches GitHub through no remote. Failing to read the remotes is reported as an error rather than as an empty list, because the two mean different things to a caller. Marked internal because it exists to carry a CLI call site off the napi boundary onto the SDK contract; it is migration plumbing, not a surface consumers are meant to depend on.",
+        "params": {
+          "$ref": "#/definitions/GitReposFromRemotesRequest",
+          "description": "Git working tree whose GitHub remotes should be listed.",
+          "visibility": "internal"
+        },
+        "result": {
+          "$ref": "#/definitions/GitReposFromRemotesResult",
+          "description": "The GitHub repositories a working tree's remotes point at.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      }
+    },
     "managedSettings": {
       "read": {
         "rpcMethod": "managedSettings.read",
@@ -1544,6 +1733,48 @@
         },
         "stability": "experimental"
       },
+      "createWorkspace": {
+        "rpcMethod": "sessions.createWorkspace",
+        "description": "Creates the workspace record for a session that has not been opened yet. A host that hands a session off to another application — writing the record and then launching that application against the session ID — needs the record on disk before any session exists to carry it, which the session-scoped workspace methods cannot do. Replaces any existing record and resets the checkpoint index. When writing to the local filesystem, a stored `fork_count` survives on disk. Returns the record it built, so a surviving stored `fork_count` can differ from the answer.",
+        "params": {
+          "$ref": "#/definitions/SessionsCreateWorkspaceRequest",
+          "description": "Identity, state location and starting context for a workspace record."
+        },
+        "result": {
+          "$ref": "#/definitions/SessionsCreateWorkspaceResult",
+          "description": "The workspace record that was written."
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "loadWorkspace": {
+        "rpcMethod": "sessions.loadWorkspace",
+        "description": "Reads a session's workspace record straight from disk, without opening the session. Resuming by session ID has to know where the session lives before it can connect, so the lookup cannot come from the session-scoped workspace methods, which resolve their location from a live session's context. Returns no record when the file is absent.",
+        "params": {
+          "$ref": "#/definitions/SessionsLoadWorkspaceRequest",
+          "description": "Where the session's state lives, as a root directory and the session ID under it."
+        },
+        "result": {
+          "$ref": "#/definitions/SessionsLoadWorkspaceResult",
+          "description": "The workspace record on disk, omitted when the session has none."
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "updateWorkspaceFields": {
+        "rpcMethod": "sessions.updateWorkspaceFields",
+        "description": "Merges fields into a session's workspace record on disk, creating the record when it is absent. The counterpart to `sessions.loadWorkspace`, for the same before-the-session-exists case. It preserves stored workspace-schema fields the request does not supply, does not preserve stored keys outside the workspace schema, and never replaces a stored `fork_count`.",
+        "params": {
+          "$ref": "#/definitions/SessionsUpdateWorkspaceFieldsRequest",
+          "description": "Where the session's state lives, plus workspace-schema fields to merge into its workspace record. Stored keys outside the schema are not preserved, and a stored `fork_count` is never replaced."
+        },
+        "result": {
+          "$ref": "#/definitions/SessionsUpdateWorkspaceFieldsResult",
+          "description": "The merge completed. The record carries the supplied workspace-schema fields, but a stored `fork_count` stays."
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
       "reloadPluginHooks": {
         "rpcMethod": "sessions.reloadPluginHooks",
         "description": "Reloads user, plugin, and (optionally) repo hooks on the active session.",
@@ -1688,6 +1919,54 @@
         },
         "stability": "experimental"
       }
+    },
+    "connectors": {
+      "getCapabilities": {
+        "rpcMethod": "connectors.getCapabilities",
+        "description": "Returns feature availability.",
+        "params": null,
+        "result": {
+          "$ref": "#/definitions/ConnectorDiscoveryCapabilities",
+          "description": "Feature availability."
+        },
+        "stability": "experimental"
+      },
+      "getAccounts": {
+        "rpcMethod": "connectors.getAccounts",
+        "description": "Returns eligible accounts.",
+        "params": null,
+        "result": {
+          "$ref": "#/definitions/ConnectorDiscoveryAccountList",
+          "description": "Eligible accounts."
+        },
+        "stability": "experimental"
+      },
+      "list": {
+        "rpcMethod": "connectors.list",
+        "description": "Lists entries for the selected account.",
+        "params": {
+          "$ref": "#/definitions/ConnectorDiscoveryAccountRequest",
+          "description": "Selected account."
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorDiscoveryCatalogResult",
+          "description": "Entries for the selected account."
+        },
+        "stability": "experimental"
+      },
+      "refresh": {
+        "rpcMethod": "connectors.refresh",
+        "description": "Refreshes entries for the selected account.",
+        "params": {
+          "$ref": "#/definitions/ConnectorDiscoveryAccountRequest",
+          "description": "Selected account."
+        },
+        "result": {
+          "$ref": "#/definitions/ConnectorDiscoveryCatalogResult",
+          "description": "Entries for the selected account."
+        },
+        "stability": "experimental"
+      }
     }
   },
   "session": {
@@ -5822,9 +6101,46 @@
       }
     },
     "mcp": {
+      "setConnectedIdeInfo": {
+        "rpcMethod": "session.mcp.setConnectedIdeInfo",
+        "description": "Records the IDE the host is connected to, so the agent's system prompt can name it and its workspace folder. Null or an omitted `ide` clears the recorded value, which is how a host reports that it is disconnected; there is no separate clear method. Both `ideName` and `workspaceFolder` are required together, because half a state cannot be attributed to a project.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            },
+            "ide": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/SessionConnectedIdeInfo",
+                  "description": "The IDE a host is connected to, as reported to the session."
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "The connected IDE. Null or omitted clears the recorded IDE, which is how a host reports that it is disconnected."
+            }
+          },
+          "required": [
+            "sessionId"
+          ],
+          "additionalProperties": false,
+          "description": "Records which IDE the host is connected to, or clears it.",
+          "title": "SessionMcpSetConnectedIdeInfoParams",
+          "stability": "experimental"
+        },
+        "result": {
+          "type": "null"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
       "list": {
         "rpcMethod": "session.mcp.list",
-        "description": "Lists MCP servers configured for the session, their connection status, and host-level state. The host-level state (disabled/filtered servers, failed/needs-auth/pending connections, mcp3p policy, full config) is empty/zero when no MCP host has been initialized for the session.",
+        "description": "Lists materialized MCP servers and their connection status. Cache misses may start and wait for MCP servers.",
         "params": {
           "type": "object",
           "properties": {
@@ -5845,6 +6161,29 @@
         },
         "stability": "experimental"
       },
+      "listConfigured": {
+        "rpcMethod": "session.mcp.listConfigured",
+        "description": "Lists effective MCP configuration without starting, restarting, authenticating, or waiting for servers. An optional live observation is from an already materialized matching server; this is not a readiness guarantee.",
+        "params": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "description": "Target session identifier"
+            }
+          },
+          "required": [
+            "sessionId"
+          ],
+          "additionalProperties": false,
+          "description": "Identifies the target session."
+        },
+        "result": {
+          "$ref": "#/definitions/McpConfiguredServerList",
+          "description": "Effective MCP configuration with optional live observations from matching already materialized servers."
+        },
+        "stability": "experimental"
+      },
       "listTools": {
         "rpcMethod": "session.mcp.listTools",
         "description": "Lists the tools exposed by a connected MCP server on this session's host. This performs a live `tools/list` request. Tool UI metadata is returned independently of whether MCP Apps rendering is enabled for the session.",
@@ -12734,7 +13073,7 @@
         },
         "result": {
           "$ref": "#/definitions/SkillProviderReadResult",
-          "description": "Complete text-only SKILL.md content returned by an SDK session's skill provider. Related files and assets are not supported.",
+          "description": "Text-only SKILL.md content returned by an SDK session's skill provider. YAML frontmatter is optional: fields it omits come from the catalog descriptor, fields it declares must match the descriptor, and `allowed-tools` is read only from frontmatter. Related files and assets are not supported.",
           "visibility": "internal"
         },
         "stability": "experimental",
@@ -13895,6 +14234,32 @@
       "description": "Authenticated account entry returned by `account.getAllUsers`.",
       "title": "AccountAllUsers"
     },
+    "AccountAuthInfo": {
+      "type": "object",
+      "properties": {
+        "type": {
+          "type": "string",
+          "const": "account",
+          "description": "Provider-owned account authentication."
+        },
+        "host": {
+          "type": "string",
+          "description": "Host coordinate owned by the account's model provider."
+        },
+        "login": {
+          "type": "string",
+          "description": "Login identifying the provider-owned account."
+        }
+      },
+      "required": [
+        "type",
+        "host",
+        "login"
+      ],
+      "additionalProperties": false,
+      "description": "An interactive account whose model provider owns its credentials. It carries no GitHub credential.",
+      "title": "AccountAuthInfo"
+    },
     "AccountGetCurrentAuthResult": {
       "type": "object",
       "properties": {
@@ -14902,6 +15267,48 @@
       "description": "Custom agents available to the session after reloading definitions from disk.",
       "title": "AgentReloadResult"
     },
+    "AgentsCustomAgentInitialModelDecisionParams": {
+      "type": "object",
+      "properties": {
+        "agentModelsJson": {
+          "type": "string",
+          "description": "The agent's declared `model:` entry, serialized. A single name or an ordered list of acceptable names."
+        },
+        "availableModelsJson": {
+          "type": "string",
+          "description": "The models available to this session, serialized in the shape the model list carries."
+        }
+      },
+      "required": [
+        "agentModelsJson",
+        "availableModelsJson"
+      ],
+      "additionalProperties": false,
+      "description": "The models a custom agent asks for, and the models actually available.",
+      "title": "AgentsCustomAgentInitialModelDecisionParams",
+      "visibility": "internal"
+    },
+    "AgentsCustomAgentInitialModelDecisionResult": {
+      "type": "object",
+      "properties": {
+        "targetModel": {
+          "type": "string",
+          "description": "The first available model that matches the agent's preferences. Absent when none of the requested models is available."
+        },
+        "reasoningEffort": {
+          "type": "string",
+          "description": "The reasoning effort attached to the selected model preference. Absent when that preference does not specify an effort."
+        },
+        "warning": {
+          "type": "string",
+          "description": "What to tell the user about an unmet preference. Absent when the preference was met. A warning with no `targetModel` means the agent's models are all unavailable."
+        }
+      },
+      "additionalProperties": false,
+      "description": "The model to switch to, and the warning to show when the agent's preference could not be met.",
+      "title": "AgentsCustomAgentInitialModelDecisionResult",
+      "visibility": "internal"
+    },
     "AgentsDiscoverRequest": {
       "type": "object",
       "properties": {
@@ -14973,6 +15380,172 @@
       "title": "AgentSetPromptRequest",
       "stability": "experimental"
     },
+    "AgentsGetAvailableBuiltinsRequest": {
+      "type": "object",
+      "properties": {
+        "featureFlags": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {},
+              "additionalProperties": true
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Feature flag values keyed by name, evaluated with the runtime's truthiness rules. Omit or pass null for no flags."
+        },
+        "overrides": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {},
+              "additionalProperties": true
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Flag overrides keyed by name. A null entry uses the corresponding base flag; false explicitly disables it. Omit or pass null for no overrides."
+        },
+        "context": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "The surface asking, which gates agents that only apply to one client. Omit or pass null to apply no client filter."
+        }
+      },
+      "additionalProperties": false,
+      "description": "The feature flags to evaluate shipped agents against.",
+      "title": "AgentsGetAvailableBuiltinsRequest",
+      "visibility": "internal"
+    },
+    "AgentsGetAvailableBuiltinsResult": {
+      "type": "object",
+      "properties": {
+        "agents": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/BuiltinAgentSummary",
+            "description": "A shipped agent, named and described.",
+            "visibility": "internal"
+          },
+          "description": "Available shipped agents, in the runtime's own order."
+        }
+      },
+      "required": [
+        "agents"
+      ],
+      "additionalProperties": false,
+      "description": "The shipped agents available under the requested flags.",
+      "title": "AgentsGetAvailableBuiltinsResult",
+      "visibility": "internal"
+    },
+    "AgentsGetBuiltinDefinitionRequest": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "The agent name, which must be one of `getBuiltins`'s `yamlBasedNames`. A name outside that list is special-cased in code and has no definition, and is reported as an error rather than as an empty definition."
+        }
+      },
+      "required": [
+        "name"
+      ],
+      "additionalProperties": false,
+      "description": "The shipped agent whose definition to load.",
+      "title": "AgentsGetBuiltinDefinitionRequest",
+      "visibility": "internal"
+    },
+    "AgentsGetBuiltinDefinitionResult": {
+      "type": "object",
+      "properties": {
+        "definitionJson": {
+          "type": "string",
+          "description": "The agent's definition, serialized as JSON. It carries the authored keys plus the runtime's projected `__nativeCustomAgent` view of the same agent. It is a string rather than an object because the runtime parses it with the agent schema's tolerant shape, which accepts keys this contract does not name."
+        }
+      },
+      "required": [
+        "definitionJson"
+      ],
+      "additionalProperties": false,
+      "description": "One shipped agent's definition.",
+      "title": "AgentsGetBuiltinDefinitionResult",
+      "visibility": "internal"
+    },
+    "AgentsGetBuiltinListingDefinitionRequest": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "The agent name, taken from `getAvailableBuiltins`. Unlike `getBuiltinDefinition`, the agent that `getBuiltins` reports as special-cased rather than YAML-based is answered here too, from its in-code definition."
+        }
+      },
+      "required": [
+        "name"
+      ],
+      "additionalProperties": false,
+      "description": "The shipped agent whose listing entry to load.",
+      "title": "AgentsGetBuiltinListingDefinitionRequest",
+      "visibility": "internal"
+    },
+    "AgentsGetBuiltinListingDefinitionResult": {
+      "type": "object",
+      "properties": {
+        "definitionJson": {
+          "type": "string",
+          "description": "The agent projected as a custom agent, serialized as JSON. It is a string rather than an object for the same reason as `getBuiltinDefinition`: the runtime parses the underlying definition with the agent schema's tolerant shape, which accepts keys this contract does not name."
+        }
+      },
+      "required": [
+        "definitionJson"
+      ],
+      "additionalProperties": false,
+      "description": "One shipped agent, projected for a listing.",
+      "title": "AgentsGetBuiltinListingDefinitionResult",
+      "visibility": "internal"
+    },
+    "AgentsGetBuiltinsResult": {
+      "type": "object",
+      "properties": {
+        "names": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Every agent name this runtime ships."
+        },
+        "disableableNames": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "The subset of `names` a user is allowed to turn off. A shipped agent outside this list is always active and a client should not offer a toggle for it."
+        },
+        "yamlBasedNames": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "The subset of `names` defined by a shipped YAML definition. The remainder are special-cased in code and have no definition to load."
+        }
+      },
+      "required": [
+        "names",
+        "disableableNames",
+        "yamlBasedNames"
+      ],
+      "additionalProperties": false,
+      "description": "The agents this runtime ships, named so a consumer can tell them apart from authored ones.",
+      "title": "AgentsGetBuiltinsResult",
+      "visibility": "internal"
+    },
     "AgentsGetDiscoveryPathsRequest": {
       "type": "object",
       "properties": {
@@ -15967,6 +16540,10 @@
           "$ref": "#/definitions/UserAuthInfo",
           "description": "Authentication-info variant for OAuth user auth, with host and login; the token remains in the runtime secret store."
         },
+        {
+          "$ref": "#/definitions/AccountAuthInfo",
+          "description": "An interactive account whose model provider owns its credentials. It carries no GitHub credential."
+        },
         {
           "$ref": "#/definitions/GhCliAuthInfo",
           "description": "Authentication-info input variant for GitHub CLI credentials, carrying host, login, and the `gh auth token` value."
@@ -15985,6 +16562,7 @@
         "hmac",
         "env",
         "user",
+        "account",
         "gh-cli",
         "api-key",
         "token",
@@ -15997,6 +16575,7 @@
         "hmac": "Authentication provided by a GitHub App HMAC credential.",
         "env": "Authentication resolved from environment-provided credentials.",
         "user": "Authentication from an interactive user sign-in.",
+        "account": "Authentication from a selected provider-owned account, without a GitHub credential.",
         "gh-cli": "Authentication delegated to the GitHub CLI.",
         "api-key": "Authentication from an API key credential.",
         "token": "Authentication from a GitHub token.",
@@ -16004,6 +16583,37 @@
         "copilot-api-token": "Authentication from a Copilot API token."
       }
     },
+    "AuthLoginAccount": {
+      "type": "object",
+      "properties": {
+        "selectionId": {
+          "type": "string",
+          "description": "Opaque identifier supplied to the next login step to select this account."
+        },
+        "host": {
+          "type": "string",
+          "description": "Host coordinate owned by the selected account's provider."
+        },
+        "login": {
+          "type": "string",
+          "description": "Human-readable login for the account choice."
+        },
+        "kind": {
+          "$ref": "#/definitions/AccountKind",
+          "description": "Provider kind that owns this account choice."
+        }
+      },
+      "required": [
+        "selectionId",
+        "host",
+        "login",
+        "kind"
+      ],
+      "additionalProperties": false,
+      "description": "A credential-free account choice after sign-in.",
+      "title": "AuthLoginAccount",
+      "stability": "experimental"
+    },
     "AuthLoginAdvanceRequest": {
       "type": "object",
       "properties": {
@@ -16082,7 +16692,7 @@
       "properties": {
         "status": {
           "$ref": "#/definitions/AuthLoginResultStatus",
-          "description": "Terminal disposition of the login."
+          "description": "Current disposition of the login, including pending user decisions."
         },
         "host": {
           "type": "string",
@@ -16092,13 +16702,22 @@
         "login": {
           "type": "string",
           "description": "Login that was signed in, when completed."
+        },
+        "accounts": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/AuthLoginAccount",
+            "description": "A credential-free account choice after sign-in."
+          },
+          "description": "Available accounts when sign-in is awaiting account selection, ordered with Microsoft 365 first.",
+          "x-copilot-sdk-append-last": true
         }
       },
       "required": [
         "status"
       ],
       "additionalProperties": false,
-      "description": "Terminal result of an interactive login flow.",
+      "description": "Result of an interactive login flow. Pending consent or account selection is not terminal.",
       "title": "AuthLoginResultDto",
       "stability": "experimental"
     },
@@ -16107,13 +16726,15 @@
       "enum": [
         "completed",
         "needs-plaintext-consent",
+        "needs-account-selection",
         "declined"
       ],
-      "description": "Terminal disposition of a login persistence attempt.",
+      "description": "Disposition of a login attempt, including pending user decisions.",
       "title": "AuthLoginResultStatus",
       "x-enumDescriptions": {
-        "completed": "The credential was persisted and the account is signed in.",
+        "completed": "The credential was persisted and the selected account is signed in.",
         "needs-plaintext-consent": "Persistence needs explicit consent to store the token in plaintext.",
+        "needs-account-selection": "Credentials are saved; select an account using a returned selectionId as advance input to complete sign-in.",
         "declined": "The user declined plaintext persistence."
       },
       "stability": "experimental"
@@ -16191,7 +16812,7 @@
           "properties": {
             "result": {
               "$ref": "#/definitions/AuthLoginResultDto",
-              "description": "The terminal login result."
+              "description": "Login result. When status is needs-plaintext-consent or needs-account-selection, advance with the user's decision to continue."
             },
             "kind": {
               "type": "string",
@@ -16632,6 +17253,27 @@
         "fast": "Integrator-only preset that optimizes for latency."
       }
     },
+    "BuiltinAgentSummary": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "The agent name, as it appears in `getBuiltins`."
+        },
+        "description": {
+          "type": "string",
+          "description": "One-line description of what the agent does."
+        }
+      },
+      "required": [
+        "name",
+        "description"
+      ],
+      "additionalProperties": false,
+      "description": "A shipped agent, named and described.",
+      "title": "BuiltinAgentSummary",
+      "visibility": "internal"
+    },
     "BuiltInModelCatalog": {
       "type": "object",
       "properties": {
@@ -20455,6 +21097,226 @@
       "title": "ConnectorDisconnectResult",
       "stability": "experimental"
     },
+    "ConnectorDiscoveryAccount": {
+      "type": "object",
+      "properties": {
+        "accountId": {
+          "type": "string",
+          "description": "Opaque account ID."
+        },
+        "authInfo": {
+          "$ref": "#/definitions/ConnectorDiscoveryAuthInfo",
+          "description": "Account metadata."
+        }
+      },
+      "required": [
+        "accountId",
+        "authInfo"
+      ],
+      "additionalProperties": false,
+      "description": "Eligible account.",
+      "title": "ConnectorDiscoveryAccount",
+      "stability": "experimental"
+    },
+    "ConnectorDiscoveryAccountList": {
+      "type": "object",
+      "properties": {
+        "availability": {
+          "$ref": "#/definitions/ConnectorDiscoveryAvailability",
+          "description": "Availability."
+        },
+        "accounts": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/ConnectorDiscoveryAccount",
+            "description": "Eligible account."
+          },
+          "description": "Eligible accounts."
+        }
+      },
+      "required": [
+        "availability",
+        "accounts"
+      ],
+      "additionalProperties": false,
+      "description": "Eligible accounts.",
+      "title": "ConnectorDiscoveryAccountList",
+      "stability": "experimental"
+    },
+    "ConnectorDiscoveryAccountRequest": {
+      "type": "object",
+      "properties": {
+        "accountId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 2048,
+          "pattern": "^\\S+$",
+          "description": "Opaque account ID."
+        }
+      },
+      "required": [
+        "accountId"
+      ],
+      "additionalProperties": false,
+      "description": "Selected account.",
+      "title": "ConnectorDiscoveryAccountRequest",
+      "stability": "experimental"
+    },
+    "ConnectorDiscoveryAuthInfo": {
+      "type": "object",
+      "properties": {
+        "type": {
+          "$ref": "#/definitions/AuthInfoType",
+          "description": "Authentication type."
+        },
+        "host": {
+          "type": "string",
+          "description": "Host."
+        },
+        "login": {
+          "type": "string",
+          "description": "Login."
+        }
+      },
+      "required": [
+        "type",
+        "host",
+        "login"
+      ],
+      "additionalProperties": false,
+      "description": "Account metadata.",
+      "title": "ConnectorDiscoveryAuthInfo",
+      "stability": "experimental"
+    },
+    "ConnectorDiscoveryAvailability": {
+      "type": "string",
+      "enum": [
+        "enabled",
+        "disabled",
+        "unavailable"
+      ],
+      "description": "Availability.",
+      "title": "ConnectorDiscoveryAvailability",
+      "x-enumDescriptions": {
+        "enabled": "Enabled.",
+        "disabled": "Disabled.",
+        "unavailable": "Unavailable."
+      },
+      "stability": "experimental"
+    },
+    "ConnectorDiscoveryCapabilities": {
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "API version."
+        },
+        "availability": {
+          "$ref": "#/definitions/ConnectorDiscoveryAvailability",
+          "description": "Availability."
+        },
+        "opaqueAccountSelection": {
+          "type": "boolean",
+          "description": "Whether accounts are selected by opaque ID."
+        },
+        "conditionalCache": {
+          "type": "boolean",
+          "description": "Whether results are cached."
+        }
+      },
+      "required": [
+        "apiVersion",
+        "availability",
+        "opaqueAccountSelection",
+        "conditionalCache"
+      ],
+      "additionalProperties": false,
+      "description": "Feature availability.",
+      "title": "ConnectorDiscoveryCapabilities",
+      "stability": "experimental"
+    },
+    "ConnectorDiscoveryCatalogEntry": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "Name."
+        },
+        "displayName": {
+          "type": "string",
+          "description": "Display name."
+        },
+        "description": {
+          "type": "string",
+          "description": "Description."
+        },
+        "logo": {
+          "type": "string",
+          "description": "Logo."
+        },
+        "tier": {
+          "type": "string",
+          "description": "Tier."
+        },
+        "releaseTag": {
+          "type": "string",
+          "description": "Release tag."
+        },
+        "status": {
+          "$ref": "#/definitions/ConnectorCatalogStatus",
+          "description": "Status."
+        }
+      },
+      "required": [
+        "name",
+        "displayName",
+        "status"
+      ],
+      "additionalProperties": false,
+      "description": "Entry.",
+      "title": "ConnectorDiscoveryCatalogEntry",
+      "stability": "experimental"
+    },
+    "ConnectorDiscoveryCatalogResult": {
+      "type": "object",
+      "properties": {
+        "accountId": {
+          "type": "string",
+          "description": "Opaque account ID."
+        },
+        "revision": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 9007199254740991,
+          "description": "Revision."
+        },
+        "refreshedAtMs": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 9007199254740991,
+          "description": "Refresh time in Unix epoch milliseconds."
+        },
+        "connectors": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/ConnectorDiscoveryCatalogEntry",
+            "description": "Entry."
+          },
+          "description": "Entries."
+        }
+      },
+      "required": [
+        "accountId",
+        "revision",
+        "refreshedAtMs",
+        "connectors"
+      ],
+      "additionalProperties": false,
+      "description": "Entries for the selected account.",
+      "title": "ConnectorDiscoveryCatalogResult",
+      "stability": "experimental"
+    },
     "ConnectorMcpStatus": {
       "type": "string",
       "enum": [
@@ -23714,6 +24576,40 @@
       "description": "Authentication-info input variant for GitHub CLI credentials, carrying host, login, and the `gh auth token` value.",
       "title": "GhCliAuthInfo"
     },
+    "GitCurrentBranchRemoteResult": {
+      "type": "object",
+      "properties": {
+        "remote": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Name of the tracked remote. Reports `origin` whenever the working tree has no tracking configuration to read, including on a detached HEAD, so this is never null and never empty."
+        }
+      },
+      "required": [
+        "remote"
+      ],
+      "additionalProperties": false,
+      "description": "The remote the checked-out branch tracks.",
+      "title": "GitCurrentBranchRemoteResult",
+      "visibility": "internal"
+    },
+    "GitCwdRequest": {
+      "type": "object",
+      "properties": {
+        "cwd": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Absolute path to a directory inside the git working tree to query."
+        }
+      },
+      "required": [
+        "cwd"
+      ],
+      "additionalProperties": false,
+      "description": "Working-tree path a git query applies to.",
+      "title": "GitCwdRequest",
+      "visibility": "internal"
+    },
     "GitHubEnvironment": {
       "type": "object",
       "properties": {
@@ -23769,6 +24665,134 @@
       ],
       "description": "Safe discovery information. Host-side relay bootstrap credentials are never included."
     },
+    "GitHubOwnerOption": {
+      "type": "object",
+      "properties": {
+        "login": {
+          "type": "string",
+          "description": "The owner's GitHub login."
+        },
+        "type": {
+          "type": "string",
+          "description": "Which kind of owner this is. The authenticated user's own account is always reported as `user`."
+        }
+      },
+      "required": [
+        "login",
+        "type"
+      ],
+      "additionalProperties": false,
+      "description": "A GitHub login the authenticated user may act as: their own account, or an organization they belong to.",
+      "title": "GitHubOwnerOption",
+      "visibility": "internal"
+    },
+    "GitHubOwnersCancelRequest": {
+      "type": "object",
+      "properties": {
+        "requestId": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Request id the listing was started with."
+        }
+      },
+      "required": [
+        "requestId"
+      ],
+      "additionalProperties": false,
+      "description": "The owner listing to abandon.",
+      "title": "GitHubOwnersCancelRequest",
+      "visibility": "internal",
+      "stability": "experimental"
+    },
+    "GitHubOwnersCancelResult": {
+      "type": "object",
+      "properties": {
+        "canceled": {
+          "type": "boolean",
+          "description": "True when a listing with the id was running and the cancel stopped it. False when the id was never registered, was registered but unused, was released after being abandoned, or its listing had ended. An unused id is released and cannot start a later listing."
+        }
+      },
+      "required": [
+        "canceled"
+      ],
+      "additionalProperties": false,
+      "description": "Whether the id named a running owner listing.",
+      "title": "GitHubOwnersCancelResult",
+      "visibility": "internal",
+      "stability": "experimental"
+    },
+    "GitHubOwnersListRequest": {
+      "type": "object",
+      "properties": {
+        "requestId": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Request id from `gitHubOwners.nextRequestId`. An id that was never registered, canceled before use, released after being abandoned, or already used is refused rather than silently running uncancellable."
+        },
+        "authInfo": {
+          "description": "The credential the listing runs under, carried opaquely because its shape is the host's own and the runtime only resolves a token and a GitHub host from it. No credential travels: this selects one the runtime already holds.",
+          "x-opaque-json": true
+        }
+      },
+      "required": [
+        "requestId",
+        "authInfo"
+      ],
+      "additionalProperties": false,
+      "description": "Credential to list owners under, and the request id that makes the listing cancellable.",
+      "title": "GitHubOwnersListRequest",
+      "visibility": "internal",
+      "stability": "experimental"
+    },
+    "GitHubOwnersListResult": {
+      "type": "object",
+      "properties": {
+        "owners": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/GitHubOwnerOption",
+            "description": "A GitHub login the authenticated user may act as: their own account, or an organization they belong to.",
+            "visibility": "internal"
+          },
+          "description": "The owners, on success: the authenticated user first, then the organizations they belong to."
+        },
+        "message": {
+          "type": "string",
+          "description": "Why no owners could be listed, phrased for a user. Present when the listing failed in a way the caller should render rather than raise."
+        },
+        "warning": {
+          "type": "string",
+          "description": "A line the caller should log. Present only alongside `message`, and only for failures worth recording."
+        },
+        "throwError": {
+          "type": "string",
+          "description": "A malformed request or an unreadable credential, which the caller raises instead of rendering. Kept a field rather than a dispatch error so it stays distinct from `message`, which the caller renders."
+        }
+      },
+      "additionalProperties": false,
+      "description": "Outcome of an owner listing. Exactly one of `owners` and `message` is present, except that `throwError` reports a failure the caller is expected to raise rather than render.",
+      "title": "GitHubOwnersListResult",
+      "visibility": "internal",
+      "stability": "experimental"
+    },
+    "GitHubOwnersRequestIdResult": {
+      "type": "object",
+      "properties": {
+        "requestId": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Request id to pass to `gitHubOwners.list` and, to abandon it, `gitHubOwners.cancel`."
+        }
+      },
+      "required": [
+        "requestId"
+      ],
+      "additionalProperties": false,
+      "description": "A freshly registered request id. Registering it before the listing starts is what lets a cancel that races the request still find the owner listing slot. The id serves one listing only. Long-abandoned unused ids can be released by later allocations.",
+      "title": "GitHubOwnersRequestIdResult",
+      "visibility": "internal",
+      "stability": "experimental"
+    },
     "GitHubRepoRef": {
       "type": "object",
       "properties": {
@@ -23794,6 +24818,70 @@
       "description": "Pointer to a GitHub repository.",
       "title": "GitHubRepoRef"
     },
+    "GitHubRepositoryAtPathRequest": {
+      "type": "object",
+      "properties": {
+        "path": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Absolute path to a directory inside the git working tree to resolve."
+        }
+      },
+      "required": [
+        "path"
+      ],
+      "additionalProperties": false,
+      "description": "Working-tree path whose owning GitHub repository should be resolved.",
+      "title": "GitHubRepositoryAtPathRequest",
+      "visibility": "internal"
+    },
+    "GitHubRepositoryAtPathResult": {
+      "type": "object",
+      "properties": {
+        "repository": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/GitHubRepositoryIdentity",
+              "description": "Owner, name, and host of a GitHub repository, as resolved from a git remote URL."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Resolved repository identity, or null when the selected remote resolves to no GitHub host."
+        }
+      },
+      "additionalProperties": false,
+      "description": "The GitHub repository that owns the requested path, when the selected remote (`origin`, else the first) is on a GitHub host.",
+      "title": "GitHubRepositoryAtPathResult",
+      "visibility": "internal"
+    },
+    "GitHubRepositoryIdentity": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "Repository owner login (user or organization)."
+        },
+        "name": {
+          "type": "string",
+          "description": "Repository name, without the owner prefix or the `.git` suffix."
+        },
+        "host": {
+          "type": "string",
+          "description": "Host the remote points at, for example `github.com` or a GitHub Enterprise hostname."
+        }
+      },
+      "required": [
+        "owner",
+        "name",
+        "host"
+      ],
+      "additionalProperties": false,
+      "description": "Owner, name, and host of a GitHub repository, as resolved from a git remote URL.",
+      "title": "GitHubRepositoryIdentity"
+    },
     "GitHubTelemetryClientInfo": {
       "type": "object",
       "properties": {
@@ -24038,6 +25126,75 @@
       "title": "GitHubTokenAcquireResult",
       "stability": "experimental"
     },
+    "GitRemoteRepository": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "Account or organization owning the repository."
+        },
+        "name": {
+          "type": "string",
+          "description": "Repository name, without the owner."
+        },
+        "host": {
+          "type": "string",
+          "description": "GitHub host serving the repository, which is not `github.com` for a GitHub Enterprise remote."
+        },
+        "remoteName": {
+          "type": "string",
+          "description": "Name of the first remote that produced this distinct repository entry, such as `origin` or `upstream`."
+        }
+      },
+      "required": [
+        "owner",
+        "name",
+        "host",
+        "remoteName"
+      ],
+      "additionalProperties": false,
+      "description": "A GitHub repository one of a working tree's remotes points at.",
+      "title": "GitRemoteRepository",
+      "visibility": "internal"
+    },
+    "GitReposFromRemotesRequest": {
+      "type": "object",
+      "properties": {
+        "gitRoot": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Absolute path to the root of the git working tree."
+        }
+      },
+      "required": [
+        "gitRoot"
+      ],
+      "additionalProperties": false,
+      "description": "Git working tree whose GitHub remotes should be listed.",
+      "title": "GitReposFromRemotesRequest",
+      "visibility": "internal"
+    },
+    "GitReposFromRemotesResult": {
+      "type": "object",
+      "properties": {
+        "repositories": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/GitRemoteRepository",
+            "description": "A GitHub repository one of a working tree's remotes points at.",
+            "visibility": "internal"
+          },
+          "description": "One entry per distinct GitHub repository, in the order git reports the first remote for each repository. Empty when no remote points at a GitHub host, which a caller should read as `not connected to GitHub`. Failing to read the remotes is an error, not an empty list."
+        }
+      },
+      "required": [
+        "repositories"
+      ],
+      "additionalProperties": false,
+      "description": "The GitHub repositories a working tree's remotes point at.",
+      "title": "GitReposFromRemotesResult",
+      "visibility": "internal"
+    },
     "HandlePendingToolCallRequest": {
       "type": "object",
       "properties": {
@@ -27751,6 +28908,89 @@
       "description": "MCP server name and replacement configuration to write to user configuration.",
       "title": "McpConfigUpdateRequest"
     },
+    "McpConfiguredServer": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^[^\\x00-\\x1f/\\x7f-\\x9f}]+(?:\\/[^\\x00-\\x1f/\\x7f-\\x9f}]+)*$",
+          "description": "Server name (config key)"
+        },
+        "enabled": {
+          "type": "boolean",
+          "description": "Whether this configured server is enabled after session configuration and policy filtering."
+        },
+        "source": {
+          "$ref": "#/definitions/McpServerSource",
+          "description": "Configuration provenance: user, workspace, plugin, builtin, or managed."
+        },
+        "sourcePlugin": {
+          "type": "string",
+          "description": "Plugin name that provided this server, when source is plugin."
+        },
+        "sourcePluginVersion": {
+          "type": "string",
+          "description": "Plugin version that provided this server, when source is plugin."
+        },
+        "displayName": {
+          "type": "string",
+          "description": "Human-readable display name supplied by configuration."
+        },
+        "live": {
+          "$ref": "#/definitions/McpConfiguredServerState",
+          "description": "Observed state from an already materialized matching server. Omitted when no live graph has this configured server; it never determines configuration enablement."
+        }
+      },
+      "required": [
+        "name",
+        "enabled"
+      ],
+      "additionalProperties": false,
+      "description": "Effective MCP configuration entry. Configuration enablement is distinct from the optional live observation.",
+      "title": "McpConfiguredServer",
+      "stability": "experimental"
+    },
+    "McpConfiguredServerList": {
+      "type": "object",
+      "properties": {
+        "servers": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/McpConfiguredServer",
+            "description": "Effective MCP configuration entry. Configuration enablement is distinct from the optional live observation."
+          },
+          "description": "Effective configured MCP servers."
+        }
+      },
+      "required": [
+        "servers"
+      ],
+      "additionalProperties": false,
+      "description": "Effective MCP configuration with optional live observations from matching already materialized servers.",
+      "title": "McpConfiguredServerList",
+      "stability": "experimental"
+    },
+    "McpConfiguredServerState": {
+      "type": "object",
+      "properties": {
+        "status": {
+          "$ref": "#/definitions/McpServerStatus",
+          "description": "Observed connection status. This is not a configuration or readiness guarantee."
+        },
+        "error": {
+          "type": "string",
+          "description": "Observed connection error, when the materialized server failed."
+        }
+      },
+      "required": [
+        "status"
+      ],
+      "additionalProperties": false,
+      "description": "Observational state for a matching already materialized MCP server.",
+      "title": "McpConfiguredServerState",
+      "stability": "experimental"
+    },
     "McpConfigureGitHubRequest": {
       "type": "object",
       "properties": {
@@ -42817,6 +44057,27 @@
       "description": "A single host-driven completion. Accepting an item replaces `[rangeStart, rangeEnd)` (UTF-16 code units) in the composer with `insertText`; when the range is absent, the active token around the cursor is replaced.",
       "title": "SessionCompletionItem"
     },
+    "SessionConnectedIdeInfo": {
+      "type": "object",
+      "properties": {
+        "ideName": {
+          "type": "string",
+          "description": "Display name of the connected IDE, for example `VS Code`."
+        },
+        "workspaceFolder": {
+          "type": "string",
+          "description": "Absolute path of the workspace folder the IDE has open."
+        }
+      },
+      "required": [
+        "ideName",
+        "workspaceFolder"
+      ],
+      "additionalProperties": false,
+      "description": "The IDE a host is connected to, as reported to the session.",
+      "title": "SessionConnectedIdeInfo",
+      "stability": "experimental"
+    },
     "SessionContext": {
       "type": "object",
       "properties": {
@@ -44406,6 +45667,27 @@
       "description": "Managed settings an SDK host may inject at session startup. Only permissions are accepted in this initial contract.",
       "title": "SessionManagedSettings"
     },
+    "SessionMcpSetConnectedIdeInfoParams": {
+      "type": "object",
+      "properties": {
+        "ide": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SessionConnectedIdeInfo",
+              "description": "The IDE a host is connected to, as reported to the session."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "The connected IDE. Null or omitted clears the recorded IDE, which is how a host reports that it is disconnected."
+        }
+      },
+      "additionalProperties": false,
+      "description": "Records which IDE the host is connected to, or clears it.",
+      "title": "SessionMcpSetConnectedIdeInfoParams",
+      "stability": "experimental"
+    },
     "SessionMetadataSnapshot": {
       "type": "object",
       "properties": {
@@ -45458,6 +46740,54 @@
       "description": "Closes a session: emits shutdown, flushes pending events to disk, releases the in-use lock, disposes the active session. Idempotent: succeeds even if the session is not currently active.",
       "title": "SessionsCloseResult"
     },
+    "SessionsCreateWorkspaceRequest": {
+      "type": "object",
+      "properties": {
+        "sessionId": {
+          "type": "string",
+          "description": "Session ID the workspace record belongs to"
+        },
+        "sessionStatePath": {
+          "type": "string",
+          "description": "Directory the session's state is written under when no session filesystem provider is configured. Ignored when a provider is configured; the provider's session state path is used instead."
+        },
+        "convention": {
+          "type": "string",
+          "description": "`windows` (any letter case) selects Windows path rules. Any other value selects POSIX path rules."
+        },
+        "context": {
+          "$ref": "#/definitions/SessionWorkingDirectoryContextWithClient",
+          "description": "Starting working-directory context. The record keeps `cwd`, `gitRoot`, `repository`, `hostType`, `branch`, and `clientName`. Other fields, including `repositoryHost`, `headCommit`, and `baseCommit`, are ignored. `hostType` must be `github` or `ado`."
+        },
+        "name": {
+          "type": "string",
+          "description": "User-supplied display name for the workspace"
+        }
+      },
+      "required": [
+        "sessionId",
+        "sessionStatePath",
+        "convention"
+      ],
+      "additionalProperties": false,
+      "description": "Identity, state location and starting context for a workspace record.",
+      "title": "SessionsCreateWorkspaceRequest"
+    },
+    "SessionsCreateWorkspaceResult": {
+      "type": "object",
+      "properties": {
+        "workspaceJson": {
+          "type": "string",
+          "description": "The created workspace record, as JSON"
+        }
+      },
+      "required": [
+        "workspaceJson"
+      ],
+      "additionalProperties": false,
+      "description": "The workspace record that was written.",
+      "title": "SessionsCreateWorkspaceResult"
+    },
     "SessionsDeleteRequest": {
       "type": "object",
       "properties": {
@@ -46209,6 +47539,38 @@
       "description": "Active session ID whose deferred repo-level hooks should be loaded.",
       "title": "SessionsLoadDeferredRepoHooksRequest"
     },
+    "SessionsLoadWorkspaceRequest": {
+      "type": "object",
+      "properties": {
+        "sessionsHome": {
+          "type": "string",
+          "description": "Root directory every session's state directory sits under"
+        },
+        "sessionId": {
+          "type": "string",
+          "description": "Session ID naming the state directory under the sessions home. Rejected when it is absolute or contains a parent component, so it cannot escape the sessions home."
+        }
+      },
+      "required": [
+        "sessionsHome",
+        "sessionId"
+      ],
+      "additionalProperties": false,
+      "description": "Where the session's state lives, as a root directory and the session ID under it.",
+      "title": "SessionsLoadWorkspaceRequest"
+    },
+    "SessionsLoadWorkspaceResult": {
+      "type": "object",
+      "properties": {
+        "workspaceJson": {
+          "type": "string",
+          "description": "The workspace record, as JSON. Omitted when the record does not exist."
+        }
+      },
+      "additionalProperties": false,
+      "description": "The workspace record on disk, omitted when the session has none.",
+      "title": "SessionsLoadWorkspaceResult"
+    },
     "SessionsOpenAttach": {
       "type": "object",
       "properties": {
@@ -46754,6 +48116,38 @@
       "description": "Parameters for atomically rebinding the remote-control singleton.",
       "title": "SessionsTransferRemoteControlRequest"
     },
+    "SessionsUpdateWorkspaceFieldsRequest": {
+      "type": "object",
+      "properties": {
+        "sessionsHome": {
+          "type": "string",
+          "description": "Root directory every session's state directory sits under"
+        },
+        "sessionId": {
+          "type": "string",
+          "description": "Session ID naming the state directory under the sessions home. Rejected when it is absolute or contains a parent component, so it cannot escape the sessions home."
+        },
+        "fieldsJson": {
+          "type": "string",
+          "description": "Workspace-schema fields to merge into the record, as a JSON object. Fields the object omits keep their stored values, except stored keys outside the schema are not preserved and a stored `fork_count` is never replaced."
+        }
+      },
+      "required": [
+        "sessionsHome",
+        "sessionId",
+        "fieldsJson"
+      ],
+      "additionalProperties": false,
+      "description": "Where the session's state lives, plus workspace-schema fields to merge into its workspace record. Stored keys outside the schema are not preserved, and a stored `fork_count` is never replaced.",
+      "title": "SessionsUpdateWorkspaceFieldsRequest"
+    },
+    "SessionsUpdateWorkspaceFieldsResult": {
+      "type": "object",
+      "properties": {},
+      "additionalProperties": false,
+      "description": "The merge completed. The record carries the supplied workspace-schema fields, but a stored `fork_count` stays.",
+      "title": "SessionsUpdateWorkspaceFieldsResult"
+    },
     "SessionTelemetryEngagement": {
       "type": "object",
       "properties": {
@@ -47175,6 +48569,53 @@
         "ado": "The working directory repository is hosted on Azure DevOps."
       }
     },
+    "SessionWorkingDirectoryContextWithClient": {
+      "type": "object",
+      "properties": {
+        "cwd": {
+          "type": "string",
+          "description": "Current working directory path"
+        },
+        "gitRoot": {
+          "type": "string",
+          "description": "Root directory of the git repository"
+        },
+        "repository": {
+          "type": "string",
+          "description": "Repository identifier derived from the git remote URL"
+        },
+        "hostType": {
+          "type": "string",
+          "description": "Hosting platform type of the repository"
+        },
+        "branch": {
+          "type": "string",
+          "description": "Current git branch name"
+        },
+        "repositoryHost": {
+          "type": "string",
+          "description": "Raw host string from the git remote URL"
+        },
+        "headCommit": {
+          "type": "string",
+          "description": "Head commit of the current git branch"
+        },
+        "baseCommit": {
+          "type": "string",
+          "description": "Merge-base commit SHA"
+        },
+        "clientName": {
+          "type": "string",
+          "description": "Name of the client that created the session"
+        }
+      },
+      "required": [
+        "cwd"
+      ],
+      "additionalProperties": false,
+      "description": "A working-directory context together with the client that produced it.",
+      "title": "SessionWorkingDirectoryContextWithClient"
+    },
     "SettableAuthInfo": {
       "anyOf": [
         {
@@ -47197,6 +48638,10 @@
           "$ref": "#/definitions/UserAuthInfo",
           "description": "Authentication-info variant for OAuth user auth, with host and login; the token remains in the runtime secret store."
         },
+        {
+          "$ref": "#/definitions/AccountAuthInfo",
+          "description": "An interactive account whose model provider owns its credentials. It carries no GitHub credential."
+        },
         {
           "$ref": "#/definitions/GhCliAuthInfo",
           "description": "Authentication-info input variant for GitHub CLI credentials, carrying host, login, and the `gh auth token` value."
@@ -48829,7 +50274,7 @@
         "description"
       ],
       "additionalProperties": false,
-      "description": "Catalog-only metadata for one SDK-provided skill. The complete SKILL.md is fetched separately and lazily.",
+      "description": "Authoritative catalog metadata for one SDK-provided skill. The skill's SKILL.md text is fetched separately and lazily.",
       "title": "SkillProviderDescriptor"
     },
     "SkillProviderListResult": {
@@ -48839,7 +50284,7 @@
           "type": "array",
           "items": {
             "$ref": "#/definitions/SkillProviderDescriptor",
-            "description": "Catalog-only metadata for one SDK-provided skill. The complete SKILL.md is fetched separately and lazily."
+            "description": "Authoritative catalog metadata for one SDK-provided skill. The skill's SKILL.md text is fetched separately and lazily."
           },
           "maxItems": 1024,
           "description": "Skill descriptors in provider order. Invocation names must be unique under case-insensitive comparison."
@@ -48874,15 +50319,18 @@
       "type": "object",
       "properties": {
         "markdown": {
-          "type": "string",
-          "description": "Complete SKILL.md text. The runtime enforces a 1 MiB UTF-8 byte limit."
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "SKILL.md text, with or without YAML frontmatter, or null when the provider has no skill with the requested name. The runtime enforces a 1 MiB UTF-8 byte limit."
         }
       },
       "required": [
         "markdown"
       ],
       "additionalProperties": false,
-      "description": "Complete text-only SKILL.md content returned by an SDK session's skill provider. Related files and assets are not supported.",
+      "description": "Text-only SKILL.md content returned by an SDK session's skill provider. YAML frontmatter is optional: fields it omits come from the catalog descriptor, fields it declares must match the descriptor, and `allowed-tools` is read only from frontmatter. Related files and assets are not supported.",
       "title": "SkillProviderReadResult",
       "visibility": "internal"
     },