@github/copilot-sdk-win32-x64 1.0.17-preview.7 → 1.0.17-preview.9

package/copilot-sdk/extension.js

@@ -4690,21 +4690,15 @@ function createServerRpc(connection) {
       /** @experimental */
       settings: {
         /**
-         * Drops this runtime process's in-memory user settings cache so the next settings read observes disk.
-         */
-        reload: async () => connection.sendRequest("user.settings.reload", {}),
-        /**
-         * Lists every known user setting (settings.json overlaid with the legacy config.json, config.json wins), each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
+         * Lists every known user setting from settings.json, each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
          *
-         * @returns Per-key metadata for every known user setting (settings.json overlaid with the legacy config.json, config.json wins), including settings left at their default. Excludes repository- and enterprise-managed overrides.
+         * @returns Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
          */
         get: async () => connection.sendRequest("user.settings.get", {}),
         /**
-         * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed. Returns the keys whose new value is shadowed by a legacy config.json entry (config.json wins on read), which the runtime leaves in place — such writes do not take effect until the legacy value is removed.
+         * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed.
          *
          * @param params Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.
-         *
-         * @returns Outcome of writing user settings.
          */
         set: async (params) => connection.sendRequest("user.settings.set", params)
       }
@@ -5131,6 +5125,29 @@ function createInternalServerRpc(connection) {
       customAgentInitialModelDecision: async (params) => connection.sendRequest("agents.customAgentInitialModelDecision", params)
     },
     /** @experimental */
+    globalState: {
+      /**
+       * Reads the host's machine-wide state: which plugins are installed and the one-off flags and timestamps that record what the user has already been shown or migrated. This is the state that outlives a single session and a single workspace, so a host reads it to decide whether to run a first-launch step, offer an onboarding prompt, or skip one it has already completed. The stored credentials are deliberately not part of this result; a caller that needs an authenticated identity asks the account methods for it instead. Reading is non-destructive and every field is optional, because a fresh install has recorded nothing yet.
+       *
+       * @returns The host's machine-wide state. Every field is optional because a fresh install has recorded nothing yet, so a reader must treat an absent field as `not yet`, never as a negative answer. Stored credentials are deliberately absent from this shape.
+       */
+      load: async () => connection.sendRequest("globalState.load", {}),
+      /**
+       * Reads the host's machine-wide state exactly as `globalState.load` does, but from a caller-supplied configuration directory instead of the one the server resolved for itself. Use this when a consumer scopes a session to its own Copilot home — the SDK's per-session `configDir` override — so the state read matches the directory that session actually uses. An absent or empty `configDir` resolves the server's own home, making this identical to `globalState.load`. The stored credentials are omitted here for the same reason they are omitted from `globalState.load`: a caller that needs an authenticated identity asks the account methods instead, so pointing this at another directory cannot be used to read the credentials kept in it.
+       *
+       * @param params Selects the configuration directory whose machine-wide state to read.
+       *
+       * @returns The host's machine-wide state. Every field is optional because a fresh install has recorded nothing yet, so a reader must treat an absent field as `not yet`, never as a negative answer. Stored credentials are deliberately absent from this shape.
+       */
+      loadForConfigDir: async (params) => connection.sendRequest("globalState.loadForConfigDir", params),
+      /**
+       * Records one top-level key in the host's machine-wide state, the counterpart to `globalState.load`. A host calls this to remember that it has shown an onboarding step, asked a one-off question, or completed a migration, so the next run can skip it. Only the named key is replaced and the rest of the document is preserved, which lets two writers record different flags without overwriting each other; passing no value removes the key instead. Only the keys a host records itself are writable: `appInstallNudgeResponded`, `appTipShown`, `askedSetupTerminals`, `autoFeedbackLastPromptedAt`, `firstLaunchAt`, `recentModelIds`, `sandboxCredentialProxyCaDeclined` and `sandboxOnboardingShown`. Every other key is refused, including `installedPlugins`, the stored credentials, `trustedFolders`, the staff flags and the signed-in accounts. Plugin enablement must use the plugin APIs, which apply repository and managed-policy checks.
+       *
+       * @param params A single top-level key to record in the host's machine-wide state. The write replaces only that key and leaves the rest of the document untouched, so two writers recording different one-off flags do not overwrite each other. The stored credential keys cannot be written through this method.
+       */
+      writeKey: async (params) => connection.sendRequest("globalState.writeKey", params)
+    },
+    /** @experimental */
     gitHubRepository: {
       /**
        * Resolves the GitHub repository that owns a working-tree path by reading the selected git remote configured for it, preferring `origin`. Returns a null `repository` when the path is inside a git working tree but that selected remote does not resolve to a GitHub host. Fails when the path is not inside a git working tree at all, so a caller can tell 'not a repository' apart from 'a repository with no GitHub remote'.

package/copilot-sdk/generated/rpc.d.ts

@@ -471,6 +471,7 @@ export type AuthLoginResultStatus =
 /** @experimental */
 export type AuthReadValue = {
     account?: AccountStatus;
+    authInfo?: AuthIdentity;
     /**
      * Account read-datum variant discriminator.
      */
@@ -1989,6 +1990,14 @@ export type GitHubTokenAcquireResult = {
      */
     kind: "cancelled";
 };
+/**
+ * Source for direct repo installs (when marketplace is empty)
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPluginSource".
+ */
+/** @experimental */
+export type InstalledPluginSource = string | InstalledPluginSourceGitHub | InstalledPluginSourceUrl | InstalledPluginSourceLocal;
 /**
  * Optional compaction parameters.
  *
@@ -2456,14 +2465,6 @@ export type InstallationDecision =
  | "decline"
 /** The user cancelled the pending decision without granting consent. */
  | "cancel";
-/**
- * Source for direct repo installs (when marketplace is empty)
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSource".
- */
-/** @experimental */
-export type InstalledPluginSource = string | InstalledPluginSourceGitHub | InstalledPluginSourceUrl | InstalledPluginSourceLocal;
 /**
  * Which tier this target belongs to
  *
@@ -3400,15 +3401,15 @@ export type SessionContextAttribution = {
      */
     modelSource: string;
     /**
-     * Maximum prompt tokens the resolved model accepts — the denominator for a `##k/###k` context-usage display. Mirrors `SessionContextInfo.promptTokenLimit`.
+     * Effective input budget after reserving requested output against the combined context ceiling. Mirrors `SessionContextInfo.promptTokenLimit`.
      */
     promptTokenLimit: number;
     /**
-     * Prompt limit plus the model's output reserve: the full context window `categories.freeSpace` and `categories.buffer` are measured against. Mirrors `SessionContextInfo.limit`.
+     * Advertised prompt allowance for the selected context tier: the denominator for context-usage displays and capacity for `categories.freeSpace` and `categories.buffer`. Mirrors `SessionContextInfo.limit`.
      */
     limit: number;
     /**
-     * Output reserve plus the tokens past the buffer-exhaustion blocking threshold. Mirrors `SessionContextInfo.bufferTokens`.
+     * Output reservation overlapping the displayed prompt allowance plus the tokens past the effective input budget's buffer-exhaustion blocking threshold. Mirrors `SessionContextInfo.bufferTokens`.
      */
     bufferTokens: number;
     /**
@@ -3444,7 +3445,7 @@ export type SessionContextAttribution = {
          */
         freeSpace: number;
         /**
-         * Output reserve plus post-blocking-threshold buffer.
+         * Overlapping output reservation plus post-blocking-threshold buffer.
          */
         buffer: number;
     };
@@ -3522,7 +3523,7 @@ export type SessionContextInfo = {
      */
     totalTokens: number;
     /**
-     * Maximum prompt tokens allowed by the model (or DEFAULT_TOKEN_LIMIT if unspecified)
+     * Effective input budget: the selected tier's prompt allowance bounded by the combined context ceiling minus the requested output allowance. Uses DEFAULT_TOKEN_LIMIT when limits are unspecified.
      */
     promptTokenLimit: number;
     /**
@@ -3530,11 +3531,11 @@ export type SessionContextInfo = {
      */
     compactionThreshold: number;
     /**
-     * Prompt token limit plus the model's full output token limit.
+     * Advertised prompt allowance for the selected context tier, without adding output tokens. The denominator for context-usage displays.
      */
     limit: number;
     /**
-     * Output reserve plus tokens after the buffer-exhaustion blocking threshold (default 95%)
+     * Output reservation overlapping the displayed prompt allowance plus tokens after the effective input budget's buffer-exhaustion blocking threshold (default 95%).
      */
     bufferTokens: number;
 } | null;
@@ -11445,6 +11446,123 @@ export interface GitHubTokenAcquireRequest {
     sessionId?: string;
     reason: GitHubTokenAcquireReason;
 }
+/**
+ * Installed plugin record from global state, with marketplace, version, install time, enabled state, cache path, and source.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPlugin".
+ */
+/** @experimental */
+export interface InstalledPlugin {
+    /**
+     * Plugin name
+     */
+    name: string;
+    /**
+     * Marketplace the plugin came from (empty string for direct repo installs)
+     */
+    marketplace: string;
+    /**
+     * Version installed (if available)
+     */
+    version?: string;
+    /**
+     * Installation timestamp
+     */
+    installed_at: string;
+    /**
+     * Whether the plugin is currently enabled
+     */
+    enabled: boolean;
+    /**
+     * Path where the plugin is cached locally
+     */
+    cache_path?: string;
+    source?: InstalledPluginSource;
+    /**
+     * Per-plugin source fingerprint (a SHA-256 hash of the plugin's catalog source spec plus its resolved source subtree — NOT a Git commit SHA) captured at marketplace install/update time. Auto-update compares it against the freshly recomputed fingerprint to detect a content change that does not bump the version. Absent for pre-existing installs and for direct (non-marketplace) installs.
+     */
+    source_sha?: string;
+    /**
+     * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — those synthesized at session start for a directory/local marketplace, whose cache_path points at the real plugin directory on disk rather than a copy under the installed-plugins cache. Its presence is what marks a record as live, and no record carrying it is ever written to the persisted installedPlugins key.
+     */
+    installed_from?: string;
+}
+/**
+ * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref or full commit SHA, and optional subpath.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPluginSourceGitHub".
+ */
+/** @experimental */
+export interface InstalledPluginSourceGitHub {
+    /**
+     * Constant value. Always "github".
+     */
+    source: "github";
+    /**
+     * GitHub repository in `owner/repo` form.
+     */
+    repo: string;
+    /**
+     * Optional Git ref to resolve.
+     */
+    ref?: string;
+    /**
+     * Optional full 40-character hexadecimal commit SHA.
+     */
+    sha?: string;
+    /**
+     * Optional repository-relative path to the plugin.
+     */
+    path?: string;
+}
+/**
+ * Source descriptor for a direct URL plugin install, with URL, optional ref or full commit SHA, and optional subpath.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPluginSourceUrl".
+ */
+/** @experimental */
+export interface InstalledPluginSourceUrl {
+    /**
+     * Constant value. Always "url".
+     */
+    source: "url";
+    /**
+     * URL of the plugin source.
+     */
+    url: string;
+    /**
+     * Optional Git ref to resolve.
+     */
+    ref?: string;
+    /**
+     * Optional full 40-character hexadecimal commit SHA.
+     */
+    sha?: string;
+    /**
+     * Optional source-relative path to the plugin.
+     */
+    path?: string;
+}
+/**
+ * Source descriptor for a direct local plugin install, with a local filesystem path.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPluginSourceLocal".
+ */
+/** @experimental */
+export interface InstalledPluginSourceLocal {
+    /**
+     * Constant value. Always "local".
+     */
+    source: "local";
+    /**
+     * Local filesystem path to the plugin.
+     */
+    path: string;
+}
 /**
  * Pending external tool call request ID, with the tool result or an error describing why it failed.
  *
@@ -12743,123 +12861,6 @@ export interface InstallationConfirmationResponse {
     reviewFingerprint: string;
     decision: InstallationDecision;
 }
-/**
- * Installed plugin record from global state, with marketplace, version, install time, enabled state, cache path, and source.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPlugin".
- */
-/** @experimental */
-export interface InstalledPlugin {
-    /**
-     * Plugin name
-     */
-    name: string;
-    /**
-     * Marketplace the plugin came from (empty string for direct repo installs)
-     */
-    marketplace: string;
-    /**
-     * Version installed (if available)
-     */
-    version?: string;
-    /**
-     * Installation timestamp
-     */
-    installed_at: string;
-    /**
-     * Whether the plugin is currently enabled
-     */
-    enabled: boolean;
-    /**
-     * Path where the plugin is cached locally
-     */
-    cache_path?: string;
-    source?: InstalledPluginSource;
-    /**
-     * Per-plugin source fingerprint (a SHA-256 hash of the plugin's catalog source spec plus its resolved source subtree — NOT a Git commit SHA) captured at marketplace install/update time. Auto-update compares it against the freshly recomputed fingerprint to detect a content change that does not bump the version. Absent for pre-existing installs and for direct (non-marketplace) installs.
-     */
-    source_sha?: string;
-    /**
-     * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — those synthesized at session start for a directory/local marketplace, whose cache_path points at the real plugin directory on disk rather than a copy under the installed-plugins cache. Its presence is what marks a record as live, and no record carrying it is ever written to the persisted installedPlugins key.
-     */
-    installed_from?: string;
-}
-/**
- * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref or full commit SHA, and optional subpath.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSourceGitHub".
- */
-/** @experimental */
-export interface InstalledPluginSourceGitHub {
-    /**
-     * Constant value. Always "github".
-     */
-    source: "github";
-    /**
-     * GitHub repository in `owner/repo` form.
-     */
-    repo: string;
-    /**
-     * Optional Git ref to resolve.
-     */
-    ref?: string;
-    /**
-     * Optional full 40-character hexadecimal commit SHA.
-     */
-    sha?: string;
-    /**
-     * Optional repository-relative path to the plugin.
-     */
-    path?: string;
-}
-/**
- * Source descriptor for a direct URL plugin install, with URL, optional ref or full commit SHA, and optional subpath.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSourceUrl".
- */
-/** @experimental */
-export interface InstalledPluginSourceUrl {
-    /**
-     * Constant value. Always "url".
-     */
-    source: "url";
-    /**
-     * URL of the plugin source.
-     */
-    url: string;
-    /**
-     * Optional Git ref to resolve.
-     */
-    ref?: string;
-    /**
-     * Optional full 40-character hexadecimal commit SHA.
-     */
-    sha?: string;
-    /**
-     * Optional source-relative path to the plugin.
-     */
-    path?: string;
-}
-/**
- * Source descriptor for a direct local plugin install, with a local filesystem path.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSourceLocal".
- */
-/** @experimental */
-export interface InstalledPluginSourceLocal {
-    /**
-     * Constant value. Always "local".
-     */
-    source: "local";
-    /**
-     * Local filesystem path to the plugin.
-     */
-    path: string;
-}
 /**
  * Information about an installed plugin tracked in global state.
  *
@@ -16031,6 +16032,10 @@ export interface McpServer {
     name: string;
     status: McpServerStatus;
     source?: McpServerSource;
+    /**
+     * Configured URL for an HTTP/SSE server, regardless of configuration source. Omitted for local and in-memory servers.
+     */
+    url?: string;
     /**
      * Plugin name that provided this server, when source is plugin.
      */
@@ -16231,11 +16236,11 @@ export interface MetadataContextHeaviestMessagesResult {
 /** @experimental */
 export interface MetadataContextInfoRequest {
     /**
-     * Maximum prompt tokens allowed by the target model. Pass 0 to use the runtime default.
+     * Advertised prompt allowance. Pass 0 to resolve the selected model and context tier from the session.
      */
     promptTokenLimit: number;
     /**
-     * Maximum output tokens allowed by the target model. Pass 0 if unknown.
+     * Requested output allowance to reserve against the combined context ceiling. Pass 0 to resolve the session's request cap, falling back to the model's advertised output limit.
      */
     outputTokenLimit: number;
     /**
@@ -16474,6 +16479,10 @@ export interface Model {
     metadata?: {
         [k: string]: JsonValue | undefined;
     };
+    /**
+     * Model vendor as the Copilot API reports it, for example "Anthropic" or "Azure OpenAI". Open vocabulary, passed through unchanged. It can name the vendor that serves the model instead of the one that built it, or a label that is not a vendor, such as "Experimental". Absent when the Copilot API reports no vendor.
+     */
+    vendor?: string;
     policy?: ModelPolicy;
     billing?: ModelBilling;
     /**
@@ -23177,6 +23186,10 @@ export interface SessionManagedPermissions {
      * Permission rules that allow matching operations unless another managed source, deny, or ask rule restricts them.
      */
     allow?: string[];
+    /**
+     * Closed-world host boundary expressed as `Domain(hostname)`, `Domain(IP)`, or `Domain(*.example.com)` rules. Schemes, ports, paths, queries, and fragments are rejected because every network request must be enforceable at host-level egress. Multiple managed sources intersect their lists; an empty list denies all hosts.
+     */
+    limitTo?: string[];
 }
 /**
  * Managed settings an SDK host may inject at session startup. Only permissions are accepted in this initial contract.
@@ -27997,7 +28010,7 @@ export interface UserSettingMetadata {
     isDefault: boolean;
 }
 /**
- * Per-key metadata for every known user setting (settings.json overlaid with the legacy config.json, config.json wins), including settings left at their default. Excludes repository- and enterprise-managed overrides.
+ * Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "UserSettingsGetResult".
@@ -28024,19 +28037,6 @@ export interface UserSettingsSetRequest {
      */
     settings: JsonValue;
 }
-/**
- * Outcome of writing user settings.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "UserSettingsSetResult".
- */
-/** @experimental */
-export interface UserSettingsSetResult {
-    /**
-     * Top-level keys whose write landed in settings.json but is shadowed by a value still present in the legacy config.json (config.json wins on read). The write does not take effect until the legacy value is removed.
-     */
-    shadowedKeys: string[];
-}
 /**
  * Current sharing status and shareable GitHub URL for a session.
  *
@@ -30713,23 +30713,17 @@ export declare function createServerRpc(connection: MessageConnection): {
         /** @experimental */
         settings: {
             /**
-             * Drops this runtime process's in-memory user settings cache so the next settings read observes disk.
-             */
-            reload: () => Promise<void>;
-            /**
-             * Lists every known user setting (settings.json overlaid with the legacy config.json, config.json wins), each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
+             * Lists every known user setting from settings.json, each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
              *
-             * @returns Per-key metadata for every known user setting (settings.json overlaid with the legacy config.json, config.json wins), including settings left at their default. Excludes repository- and enterprise-managed overrides.
+             * @returns Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
              */
             get: () => Promise<UserSettingsGetResult>;
             /**
-             * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed. Returns the keys whose new value is shadowed by a legacy config.json entry (config.json wins on read), which the runtime leaves in place — such writes do not take effect until the legacy value is removed.
+             * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed.
              *
              * @param params Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.
-             *
-             * @returns Outcome of writing user settings.
              */
-            set: (params: UserSettingsSetRequest) => Promise<UserSettingsSetResult>;
+            set: (params: UserSettingsSetRequest) => Promise<void>;
         };
     };
     /** @experimental */

package/copilot-sdk/generated/session-events.d.ts

@@ -740,7 +740,7 @@ export type AbortReason =
 /** Autopilot stopped the run because the active objective reached its user-set --max-ai-credits limit. */
  | "autopilot_credit_limit";
 /**
- * Configuration source: user, workspace, plugin, builtin, or managed
+ * Configuration source: user, workspace, plugin, builtin, managed, or account
  */
 export type McpServerSource = 
 /** Server configured in the user's global MCP configuration. */
@@ -752,7 +752,9 @@ export type McpServerSource =
 /** Server bundled with the runtime. */
  | "builtin"
 /** Server supplied by a trusted host-managed catalog. */
- | "managed";
+ | "managed"
+/** Server contributed by a signed-in account; enablement and organization policy still apply. */
+ | "account";
 /**
  * Transport mechanism: stdio, http, sse (deprecated), or memory (in-process MCP server)
  */

package/copilot-sdk/index.js

@@ -4690,21 +4690,15 @@ function createServerRpc(connection) {
       /** @experimental */
       settings: {
         /**
-         * Drops this runtime process's in-memory user settings cache so the next settings read observes disk.
-         */
-        reload: async () => connection.sendRequest("user.settings.reload", {}),
-        /**
-         * Lists every known user setting (settings.json overlaid with the legacy config.json, config.json wins), each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
+         * Lists every known user setting from settings.json, each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
          *
-         * @returns Per-key metadata for every known user setting (settings.json overlaid with the legacy config.json, config.json wins), including settings left at their default. Excludes repository- and enterprise-managed overrides.
+         * @returns Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
          */
         get: async () => connection.sendRequest("user.settings.get", {}),
         /**
-         * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed. Returns the keys whose new value is shadowed by a legacy config.json entry (config.json wins on read), which the runtime leaves in place — such writes do not take effect until the legacy value is removed.
+         * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed.
          *
          * @param params Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.
-         *
-         * @returns Outcome of writing user settings.
          */
         set: async (params) => connection.sendRequest("user.settings.set", params)
       }
@@ -5131,6 +5125,29 @@ function createInternalServerRpc(connection) {
       customAgentInitialModelDecision: async (params) => connection.sendRequest("agents.customAgentInitialModelDecision", params)
     },
     /** @experimental */
+    globalState: {
+      /**
+       * Reads the host's machine-wide state: which plugins are installed and the one-off flags and timestamps that record what the user has already been shown or migrated. This is the state that outlives a single session and a single workspace, so a host reads it to decide whether to run a first-launch step, offer an onboarding prompt, or skip one it has already completed. The stored credentials are deliberately not part of this result; a caller that needs an authenticated identity asks the account methods for it instead. Reading is non-destructive and every field is optional, because a fresh install has recorded nothing yet.
+       *
+       * @returns The host's machine-wide state. Every field is optional because a fresh install has recorded nothing yet, so a reader must treat an absent field as `not yet`, never as a negative answer. Stored credentials are deliberately absent from this shape.
+       */
+      load: async () => connection.sendRequest("globalState.load", {}),
+      /**
+       * Reads the host's machine-wide state exactly as `globalState.load` does, but from a caller-supplied configuration directory instead of the one the server resolved for itself. Use this when a consumer scopes a session to its own Copilot home — the SDK's per-session `configDir` override — so the state read matches the directory that session actually uses. An absent or empty `configDir` resolves the server's own home, making this identical to `globalState.load`. The stored credentials are omitted here for the same reason they are omitted from `globalState.load`: a caller that needs an authenticated identity asks the account methods instead, so pointing this at another directory cannot be used to read the credentials kept in it.
+       *
+       * @param params Selects the configuration directory whose machine-wide state to read.
+       *
+       * @returns The host's machine-wide state. Every field is optional because a fresh install has recorded nothing yet, so a reader must treat an absent field as `not yet`, never as a negative answer. Stored credentials are deliberately absent from this shape.
+       */
+      loadForConfigDir: async (params) => connection.sendRequest("globalState.loadForConfigDir", params),
+      /**
+       * Records one top-level key in the host's machine-wide state, the counterpart to `globalState.load`. A host calls this to remember that it has shown an onboarding step, asked a one-off question, or completed a migration, so the next run can skip it. Only the named key is replaced and the rest of the document is preserved, which lets two writers record different flags without overwriting each other; passing no value removes the key instead. Only the keys a host records itself are writable: `appInstallNudgeResponded`, `appTipShown`, `askedSetupTerminals`, `autoFeedbackLastPromptedAt`, `firstLaunchAt`, `recentModelIds`, `sandboxCredentialProxyCaDeclined` and `sandboxOnboardingShown`. Every other key is refused, including `installedPlugins`, the stored credentials, `trustedFolders`, the staff flags and the signed-in accounts. Plugin enablement must use the plugin APIs, which apply repository and managed-policy checks.
+       *
+       * @param params A single top-level key to record in the host's machine-wide state. The write replaces only that key and leaves the rest of the document untouched, so two writers recording different one-off flags do not overwrite each other. The stored credential keys cannot be written through this method.
+       */
+      writeKey: async (params) => connection.sendRequest("globalState.writeKey", params)
+    },
+    /** @experimental */
     gitHubRepository: {
       /**
        * Resolves the GitHub repository that owns a working-tree path by reading the selected git remote configured for it, preferring `origin`. Returns a null `repository` when the path is inside a git working tree but that selected remote does not resolve to a GitHub host. Fails when the path is not inside a git working tree at all, so a caller can tell 'not a repository' apart from 'a repository with no GitHub remote'.

package/copilot-sdk/types.d.ts

@@ -1882,6 +1882,13 @@ export interface ManagedSettingsPermissions {
      * (across managed layers) must admit an operation for it to be allowed.
      */
     allow?: string[];
+    /**
+     * Closed-world host boundary expressed as `Domain(hostname)`, `Domain(IP)`,
+     * or `Domain(*.example.com)` rules. Schemes, ports, paths, queries, and
+     * fragments are rejected. Multiple managed layers intersect their lists;
+     * an empty list denies all hosts.
+     */
+    limitTo?: string[];
 }
 /**
  * Host-injected enterprise managed settings. The first supported contract is

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@github/copilot-sdk-win32-x64",
-    "version": "1.0.17-preview.7",
+    "version": "1.0.17-preview.9",
     "description": "Platform runtime for @github/copilot-sdk (win32-x64)",
     "repository": {
         "type": "git",

package/prebuilds/win32-x64/runtime.node

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/prebuilds/win32-x64/runtime.node
-size: 108745504 bytes
-sha256: 3104e26c4a6b91f92bc75983090af9c5f827f3e5570438962665e67c2a47937e
+size: 109761472 bytes
+sha256: 28fe3b090845ba54e414841407a824b1f361fd3787e378da3956e849f5c15a67

package/schemas/api.schema.json

@@ -1150,6 +1150,50 @@
         "stability": "experimental"
       }
     },
+    "globalState": {
+      "load": {
+        "rpcMethod": "globalState.load",
+        "description": "Reads the host's machine-wide state: which plugins are installed and the one-off flags and timestamps that record what the user has already been shown or migrated. This is the state that outlives a single session and a single workspace, so a host reads it to decide whether to run a first-launch step, offer an onboarding prompt, or skip one it has already completed. The stored credentials are deliberately not part of this result; a caller that needs an authenticated identity asks the account methods for it instead. Reading is non-destructive and every field is optional, because a fresh install has recorded nothing yet.",
+        "params": null,
+        "result": {
+          "$ref": "#/definitions/GlobalStateLoadResult",
+          "description": "The host's machine-wide state. Every field is optional because a fresh install has recorded nothing yet, so a reader must treat an absent field as `not yet`, never as a negative answer. Stored credentials are deliberately absent from this shape.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "loadForConfigDir": {
+        "rpcMethod": "globalState.loadForConfigDir",
+        "description": "Reads the host's machine-wide state exactly as `globalState.load` does, but from a caller-supplied configuration directory instead of the one the server resolved for itself. Use this when a consumer scopes a session to its own Copilot home — the SDK's per-session `configDir` override — so the state read matches the directory that session actually uses. An absent or empty `configDir` resolves the server's own home, making this identical to `globalState.load`. The stored credentials are omitted here for the same reason they are omitted from `globalState.load`: a caller that needs an authenticated identity asks the account methods instead, so pointing this at another directory cannot be used to read the credentials kept in it.",
+        "params": {
+          "$ref": "#/definitions/GlobalStateLoadForConfigDirRequest",
+          "description": "Selects the configuration directory whose machine-wide state to read.",
+          "visibility": "internal"
+        },
+        "result": {
+          "$ref": "#/definitions/GlobalStateLoadResult",
+          "description": "The host's machine-wide state. Every field is optional because a fresh install has recorded nothing yet, so a reader must treat an absent field as `not yet`, never as a negative answer. Stored credentials are deliberately absent from this shape.",
+          "visibility": "internal"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      },
+      "writeKey": {
+        "rpcMethod": "globalState.writeKey",
+        "description": "Records one top-level key in the host's machine-wide state, the counterpart to `globalState.load`. A host calls this to remember that it has shown an onboarding step, asked a one-off question, or completed a migration, so the next run can skip it. Only the named key is replaced and the rest of the document is preserved, which lets two writers record different flags without overwriting each other; passing no value removes the key instead. Only the keys a host records itself are writable: `appInstallNudgeResponded`, `appTipShown`, `askedSetupTerminals`, `autoFeedbackLastPromptedAt`, `firstLaunchAt`, `recentModelIds`, `sandboxCredentialProxyCaDeclined` and `sandboxOnboardingShown`. Every other key is refused, including `installedPlugins`, the stored credentials, `trustedFolders`, the staff flags and the signed-in accounts. Plugin enablement must use the plugin APIs, which apply repository and managed-policy checks.",
+        "params": {
+          "$ref": "#/definitions/GlobalStateWriteKeyRequest",
+          "description": "A single top-level key to record in the host's machine-wide state. The write replaces only that key and leaves the rest of the document untouched, so two writers recording different one-off flags do not overwrite each other. The stored credential keys cannot be written through this method.",
+          "visibility": "internal"
+        },
+        "result": {
+          "type": "null"
+        },
+        "stability": "experimental",
+        "visibility": "internal"
+      }
+    },
     "commands": {
       "list": {
         "rpcMethod": "commands.list",
@@ -1164,35 +1208,25 @@
     },
     "user": {
       "settings": {
-        "reload": {
-          "rpcMethod": "user.settings.reload",
-          "description": "Drops this runtime process's in-memory user settings cache so the next settings read observes disk.",
-          "params": null,
-          "result": {
-            "type": "null"
-          },
-          "stability": "experimental"
-        },
         "get": {
           "rpcMethod": "user.settings.get",
-          "description": "Lists every known user setting (settings.json overlaid with the legacy config.json, config.json wins), each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.",
+          "description": "Lists every known user setting from settings.json, each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.",
           "params": null,
           "result": {
             "$ref": "#/definitions/UserSettingsGetResult",
-            "description": "Per-key metadata for every known user setting (settings.json overlaid with the legacy config.json, config.json wins), including settings left at their default. Excludes repository- and enterprise-managed overrides."
+            "description": "Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides."
           },
           "stability": "experimental"
         },
         "set": {
           "rpcMethod": "user.settings.set",
-          "description": "Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed. Returns the keys whose new value is shadowed by a legacy config.json entry (config.json wins on read), which the runtime leaves in place — such writes do not take effect until the legacy value is removed.",
+          "description": "Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed.",
           "params": {
             "$ref": "#/definitions/UserSettingsSetRequest",
             "description": "Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed."
           },
           "result": {
-            "$ref": "#/definitions/UserSettingsSetResult",
-            "description": "Outcome of writing user settings."
+            "type": "null"
           },
           "stability": "experimental"
         }
@@ -11054,12 +11088,12 @@
             "promptTokenLimit": {
               "type": "integer",
               "minimum": 0,
-              "description": "Maximum prompt tokens allowed by the target model. Pass 0 to use the runtime default."
+              "description": "Advertised prompt allowance. Pass 0 to resolve the selected model and context tier from the session."
             },
             "outputTokenLimit": {
               "type": "integer",
               "minimum": 0,
-              "description": "Maximum output tokens allowed by the target model. Pass 0 if unknown."
+              "description": "Requested output allowance to reserve against the combined context ceiling. Pass 0 to resolve the session's request cap, falling back to the model's advertised output limit."
             },
             "selectedModel": {
               "type": "string",
@@ -16905,6 +16939,11 @@
               "$ref": "#/definitions/AccountStatus",
               "description": "The active account, or absent when not logged in."
             },
+            "authInfo": {
+              "$ref": "#/definitions/AuthIdentity",
+              "description": "Credential-free identity metadata for the active account, including resolved Copilot user information when available.",
+              "x-copilot-sdk-append-last": true
+            },
             "kind": {
               "type": "string",
               "const": "activeAccount",
@@ -25195,6 +25234,152 @@
       "title": "GitReposFromRemotesResult",
       "visibility": "internal"
     },
+    "GlobalStateLoadForConfigDirRequest": {
+      "type": "object",
+      "properties": {
+        "configDir": {
+          "type": "string",
+          "description": "Copilot configuration directory to read the state document from, taking precedence over the server's own `COPILOT_HOME` and default home. Omit it, or pass an empty string, to read the directory the server resolved for itself."
+        }
+      },
+      "additionalProperties": false,
+      "description": "Selects the configuration directory whose machine-wide state to read.",
+      "title": "GlobalStateLoadForConfigDirRequest",
+      "visibility": "internal"
+    },
+    "GlobalStateLoadResult": {
+      "type": "object",
+      "properties": {
+        "installedPlugins": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/InstalledPlugin",
+            "description": "Installed plugin record from global state, with marketplace, version, install time, enabled state, cache path, and source."
+          },
+          "description": "Plugins installed on this machine."
+        },
+        "recentModelIds": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Models the user selected recently, most recent first."
+        },
+        "firstLaunchAt": {
+          "type": "string",
+          "description": "When the host first ran on this machine."
+        },
+        "askedSetupTerminals": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Terminals the user has already been asked to set up, so the host does not ask twice."
+        },
+        "suppressInitFolders": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Folders where the user declined the init prompt, so it stays hidden there."
+        },
+        "sandboxOnboardingShown": {
+          "type": "boolean",
+          "description": "Whether the sandbox onboarding has been shown."
+        },
+        "sandboxCredentialProxyCaDeclined": {
+          "type": "boolean",
+          "description": "Whether the user declined to trust the sandbox credential proxy CA."
+        },
+        "appTipShown": {
+          "type": "boolean",
+          "description": "Whether the app tip has been shown."
+        },
+        "reasoningSummariesCleanupDone": {
+          "type": "boolean",
+          "description": "Whether the one-off cleanup of stored reasoning summaries has run."
+        },
+        "lastLoggedInUser": {
+          "$ref": "#/definitions/LoggedInUser",
+          "description": "Account used for the most recent sign-in."
+        },
+        "loggedInUsers": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/LoggedInUser",
+            "description": "An account the host has signed in to, identified by the server it lives on and the login it uses there. The same person can appear more than once when they use both github.com and an Enterprise server.",
+            "visibility": "internal"
+          },
+          "description": "Every account the host has signed in to on this machine."
+        },
+        "staff": {
+          "type": "boolean",
+          "description": "Whether the user is a GitHub or Microsoft staff member, which unlocks internal-only behavior."
+        },
+        "staffGithub": {
+          "type": "boolean",
+          "description": "Whether the user was recognized as GitHub staff."
+        },
+        "staffMicrosoft": {
+          "type": "boolean",
+          "description": "Whether the user was recognized as Microsoft staff."
+        },
+        "staffModelResetAt": {
+          "type": "string",
+          "description": "When the staff-only model reset last ran."
+        },
+        "staffLogLevelMigrationAt": {
+          "type": "string",
+          "description": "When the staff-only log level migration last ran."
+        },
+        "staffUpdateChannelMigrationAt": {
+          "type": "string",
+          "description": "When the staff-only update channel migration last ran."
+        },
+        "trustedFolders": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Folders the user has marked as trusted."
+        },
+        "appInstallNudgeResponded": {
+          "type": "boolean",
+          "description": "Whether the user has answered the prompt suggesting they install the desktop app."
+        },
+        "autoFeedbackLastPromptedAt": {
+          "type": "string",
+          "description": "When the Auto-feedback hint was last shown, as an ISO 8601 timestamp. It enforces the once-per-day cap for non-staff users across restarts."
+        }
+      },
+      "description": "The host's machine-wide state. Every field is optional because a fresh install has recorded nothing yet, so a reader must treat an absent field as `not yet`, never as a negative answer. Stored credentials are deliberately absent from this shape.",
+      "title": "GlobalStateLoadResult",
+      "visibility": "internal"
+    },
+    "GlobalStateWriteKeyRequest": {
+      "type": "object",
+      "properties": {
+        "configDir": {
+          "type": "string",
+          "description": "Copilot configuration directory to write the state document in, taking precedence over the server's own `COPILOT_HOME` and default home. Omit it, or pass an empty string, to write the directory the server resolved for itself. Mirrors `globalState.loadForConfigDir`, so a caller can read and write the same directory."
+        },
+        "key": {
+          "type": "string",
+          "description": "Top-level key to write, named as it appears in the result of `globalState.load`. It must be one of the writable keys that `globalState.writeKey` lists."
+        },
+        "value": {
+          "description": "Value to store for the key. Omit it, or pass null, to remove the key instead.",
+          "x-opaque-json": true
+        }
+      },
+      "required": [
+        "key"
+      ],
+      "additionalProperties": false,
+      "description": "A single top-level key to record in the host's machine-wide state. The write replaces only that key and leaves the rest of the document untouched, so two writers recording different one-off flags do not overwrite each other. The stored credential keys cannot be written through this method.",
+      "title": "GlobalStateWriteKeyRequest",
+      "visibility": "internal"
+    },
     "HandlePendingToolCallRequest": {
       "type": "object",
       "properties": {
@@ -27442,6 +27627,35 @@
       "description": "Persisted local session metadata, including identifiers, timestamps, summary/name, client, context, detached state, and task ID.",
       "title": "LocalSessionMetadataValue"
     },
+    "LoggedInUser": {
+      "type": "object",
+      "properties": {
+        "host": {
+          "type": "string",
+          "description": "Host the account belongs to, such as `github.com` or an Enterprise server."
+        },
+        "login": {
+          "type": "string",
+          "description": "Account login on that host."
+        },
+        "kind": {
+          "type": "string",
+          "description": "Account kind, when the host recorded one. Consumers must tolerate new strings."
+        },
+        "derivedFrom": {
+          "type": "string",
+          "description": "Source account this account was derived from, when one was recorded."
+        }
+      },
+      "required": [
+        "host",
+        "login"
+      ],
+      "additionalProperties": false,
+      "description": "An account the host has signed in to, identified by the server it lives on and the login it uses there. The same person can appear more than once when they use both github.com and an Enterprise server.",
+      "title": "LoggedInUser",
+      "visibility": "internal"
+    },
     "LoginProviderKind": {
       "type": "string",
       "enum": [
@@ -32889,6 +33103,10 @@
           "$ref": "#/definitions/McpServerSource",
           "description": "Configuration source: user, workspace, plugin, builtin, or managed"
         },
+        "url": {
+          "type": "string",
+          "description": "Configured URL for an HTTP/SSE server, regardless of configuration source. Omitted for local and in-memory servers."
+        },
         "sourcePlugin": {
           "type": "string",
           "description": "Plugin name that provided this server, when source is plugin."
@@ -33662,16 +33880,18 @@
         "workspace",
         "plugin",
         "builtin",
-        "managed"
+        "managed",
+        "account"
       ],
-      "description": "Configuration source: user, workspace, plugin, builtin, or managed",
+      "description": "Configuration source: user, workspace, plugin, builtin, managed, or account",
       "title": "McpServerSource",
       "x-enumDescriptions": {
         "user": "Server configured in the user's global MCP configuration.",
         "workspace": "Server configured by the current workspace.",
         "plugin": "Server contributed by an installed plugin.",
         "builtin": "Server bundled with the runtime.",
-        "managed": "Server supplied by a trusted host-managed catalog."
+        "managed": "Server supplied by a trusted host-managed catalog.",
+        "account": "Server contributed by a signed-in account; enablement and organization policy still apply."
       }
     },
     "McpServerStatus": {
@@ -34114,12 +34334,12 @@
         "promptTokenLimit": {
           "type": "integer",
           "minimum": 0,
-          "description": "Maximum prompt tokens allowed by the target model. Pass 0 to use the runtime default."
+          "description": "Advertised prompt allowance. Pass 0 to resolve the selected model and context tier from the session."
         },
         "outputTokenLimit": {
           "type": "integer",
           "minimum": 0,
-          "description": "Maximum output tokens allowed by the target model. Pass 0 if unknown."
+          "description": "Requested output allowance to reserve against the combined context ceiling. Pass 0 to resolve the session's request cap, falling back to the model's advertised output limit."
         },
         "selectedModel": {
           "type": "string",
@@ -34395,6 +34615,10 @@
           },
           "description": "Provider-supplied model metadata. Keys and JSON-compatible values are preserved unchanged. This is factual metadata published by the model provider; it carries no picker or UX semantics."
         },
+        "vendor": {
+          "type": "string",
+          "description": "Model vendor as the Copilot API reports it, for example \"Anthropic\" or \"Azure OpenAI\". Open vocabulary, passed through unchanged. It can name the vendor that serves the model instead of the one that built it, or a label that is not a vendor, such as \"Experimental\". Absent when the Copilot API reports no vendor."
+        },
         "policy": {
           "$ref": "#/definitions/ModelPolicy",
           "description": "Policy state (if applicable)"
@@ -44130,17 +44354,17 @@
             "promptTokenLimit": {
               "type": "integer",
               "minimum": 0,
-              "description": "Maximum prompt tokens the resolved model accepts — the denominator for a `##k/###k` context-usage display. Mirrors `SessionContextInfo.promptTokenLimit`."
+              "description": "Effective input budget after reserving requested output against the combined context ceiling. Mirrors `SessionContextInfo.promptTokenLimit`."
             },
             "limit": {
               "type": "integer",
               "minimum": 0,
-              "description": "Prompt limit plus the model's output reserve: the full context window `categories.freeSpace` and `categories.buffer` are measured against. Mirrors `SessionContextInfo.limit`."
+              "description": "Advertised prompt allowance for the selected context tier: the denominator for context-usage displays and capacity for `categories.freeSpace` and `categories.buffer`. Mirrors `SessionContextInfo.limit`."
             },
             "bufferTokens": {
               "type": "integer",
               "minimum": 0,
-              "description": "Output reserve plus the tokens past the buffer-exhaustion blocking threshold. Mirrors `SessionContextInfo.bufferTokens`."
+              "description": "Output reservation overlapping the displayed prompt allowance plus the tokens past the effective input budget's buffer-exhaustion blocking threshold. Mirrors `SessionContextInfo.bufferTokens`."
             },
             "compactionThreshold": {
               "type": "integer",
@@ -44183,7 +44407,7 @@
                 "buffer": {
                   "type": "integer",
                   "minimum": 0,
-                  "description": "Output reserve plus post-blocking-threshold buffer."
+                  "description": "Overlapping output reservation plus post-blocking-threshold buffer."
                 }
               },
               "required": [
@@ -44330,7 +44554,7 @@
             "promptTokenLimit": {
               "type": "integer",
               "minimum": 0,
-              "description": "Maximum prompt tokens allowed by the model (or DEFAULT_TOKEN_LIMIT if unspecified)"
+              "description": "Effective input budget: the selected tier's prompt allowance bounded by the combined context ceiling minus the requested output allowance. Uses DEFAULT_TOKEN_LIMIT when limits are unspecified."
             },
             "compactionThreshold": {
               "type": "integer",
@@ -44340,12 +44564,12 @@
             "limit": {
               "type": "integer",
               "minimum": 0,
-              "description": "Prompt token limit plus the model's full output token limit."
+              "description": "Advertised prompt allowance for the selected context tier, without adding output tokens. The denominator for context-usage displays."
             },
             "bufferTokens": {
               "type": "integer",
               "minimum": 0,
-              "description": "Output reserve plus tokens after the buffer-exhaustion blocking threshold (default 95%)"
+              "description": "Output reservation overlapping the displayed prompt allowance plus tokens after the effective input budget's buffer-exhaustion blocking threshold (default 95%)."
             }
           },
           "required": [
@@ -45649,6 +45873,13 @@
             "type": "string"
           },
           "description": "Permission rules that allow matching operations unless another managed source, deny, or ask rule restricts them."
+        },
+        "limitTo": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Closed-world host boundary expressed as `Domain(hostname)`, `Domain(IP)`, or `Domain(*.example.com)` rules. Schemes, ports, paths, queries, and fragments are rejected because every network request must be enforceable at host-level egress. Multiple managed sources intersect their lists; an empty list denies all hosts."
         }
       },
       "additionalProperties": false,
@@ -54448,7 +54679,7 @@
         "settings"
       ],
       "additionalProperties": false,
-      "description": "Per-key metadata for every known user setting (settings.json overlaid with the legacy config.json, config.json wins), including settings left at their default. Excludes repository- and enterprise-managed overrides.",
+      "description": "Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.",
       "title": "UserSettingsGetResult"
     },
     "UserSettingsSetRequest": {
@@ -54466,24 +54697,6 @@
       "description": "Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.",
       "title": "UserSettingsSetRequest"
     },
-    "UserSettingsSetResult": {
-      "type": "object",
-      "properties": {
-        "shadowedKeys": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "Top-level keys whose write landed in settings.json but is shadowed by a value still present in the legacy config.json (config.json wins on read). The write does not take effect until the legacy value is removed."
-        }
-      },
-      "required": [
-        "shadowedKeys"
-      ],
-      "additionalProperties": false,
-      "description": "Outcome of writing user settings.",
-      "title": "UserSettingsSetResult"
-    },
     "UserToolSessionApproval": {
       "anyOf": [
         {

package/schemas/session-events.schema.json

@@ -11164,16 +11164,18 @@
         "workspace",
         "plugin",
         "builtin",
-        "managed"
+        "managed",
+        "account"
       ],
-      "description": "Configuration source: user, workspace, plugin, builtin, or managed",
+      "description": "Configuration source: user, workspace, plugin, builtin, managed, or account",
       "title": "McpServerSource",
       "x-enumDescriptions": {
         "user": "Server configured in the user's global MCP configuration.",
         "workspace": "Server configured by the current workspace.",
         "plugin": "Server contributed by an installed plugin.",
         "builtin": "Server bundled with the runtime.",
-        "managed": "Server supplied by a trusted host-managed catalog."
+        "managed": "Server supplied by a trusted host-managed catalog.",
+        "account": "Server contributed by a signed-in account; enablement and organization policy still apply."
       }
     },
     "McpServerStatus": {