@github/copilot-sdk 1.0.0-beta.8 → 1.0.0

package/dist/generated/rpc.d.ts

@@ -3,7 +3,7 @@
  * Generated from: api.schema.json
  */
 import type { MessageConnection } from "vscode-jsonrpc/node.js";
-import type { AbortReason, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, McpServerSource, McpServerStatus, PermissionPromptRequest, PermissionRule, ReasoningSummary, SessionEvent, SessionMode, ShutdownType, SkillSource, UserToolSessionApproval } from "./session-events.js";
+import type { AbortReason, Attachment, ContextTier, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, McpServerSource, McpServerStatus, PermissionPromptRequest, PermissionRule, ReasoningSummary, SessionEvent, SessionMode, ShutdownType, SkillSource, UserToolSessionApproval } from "./session-events.js";
 /**
  * Where the agent definition was loaded from
  *
@@ -24,6 +24,136 @@ export type AgentInfoSource =
  | "plugin"
 /** Agent built into the Copilot runtime. */
  | "builtin";
+/**
+ * Process kind tag for the registry entry
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistryLiveTargetEntryKind".
+ */
+/** @experimental */
+export type AgentRegistryLiveTargetEntryKind = 
+/** Interactive Copilot CLI exposing a UI server (legacy/normal CLI process) */
+"ui-server"
+/** Headless `--server --managed-server` child spawned by a controller */
+ | "managed-server";
+/**
+ * Coarse lifecycle status of the foreground session
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistryLiveTargetEntryStatus".
+ */
+/** @experimental */
+export type AgentRegistryLiveTargetEntryStatus = 
+/** Session is actively processing a turn */
+"working"
+/** Session is idle, waiting for input */
+ | "waiting"
+/** Last turn completed successfully */
+ | "done"
+/** Session needs user attention (see attentionKind for the specific reason) */
+ | "attention";
+/**
+ * Kind of attention required when status === "attention". Meaningful only when status === "attention".
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistryLiveTargetEntryAttentionKind".
+ */
+/** @experimental */
+export type AgentRegistryLiveTargetEntryAttentionKind = 
+/** Session is blocked on an unrecoverable error */
+"error"
+/** Session is waiting for a tool-permission decision */
+ | "permission"
+/** Session is waiting for the user to approve or reject a plan */
+ | "exit_plan"
+/** Session is waiting on an elicitation prompt */
+ | "elicitation"
+/** Session is waiting for free-form user input */
+ | "user_input";
+/**
+ * How the most recent turn ended (clean vs aborted). Lets the renderer distinguish done from done_cancelled.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistryLiveTargetEntryLastTerminalEvent".
+ */
+/** @experimental */
+export type AgentRegistryLiveTargetEntryLastTerminalEvent = 
+/** Last turn ended cleanly (model returned a final assistant message) */
+"turn_end"
+/** Last turn was aborted (e.g. user interrupted) */
+ | "abort";
+/**
+ * Categorized reason for log-open failure
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistryLogCaptureOpenErrorReason".
+ */
+/** @experimental */
+export type AgentRegistryLogCaptureOpenErrorReason = 
+/** Filesystem permission denied opening the log file */
+"permission"
+/** No space left on device */
+ | "disk_full"
+/** Other / uncategorized open failure */
+ | "other";
+/**
+ * Permission posture for the new session. 'yolo' requires the controller-local session to currently be in allow-all mode.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistrySpawnPermissionMode".
+ */
+/** @experimental */
+export type AgentRegistrySpawnPermissionMode = 
+/** Standard permission posture (prompts for each request) */
+"default"
+/** Full allow-all (requires the controller-local session to currently be in allow-all mode) */
+ | "yolo";
+/**
+ * Outcome of an agentRegistry.spawn call.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistrySpawnResult".
+ */
+/** @experimental */
+export type AgentRegistrySpawnResult = AgentRegistrySpawnSpawned | AgentRegistrySpawnError | AgentRegistrySpawnRegistryTimeout | AgentRegistrySpawnValidationError;
+/**
+ * Categorized reason for the rejection. Low-cardinality enum so telemetry can aggregate by reason without leaking raw paths or agent/model names.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistrySpawnValidationErrorReason".
+ */
+/** @experimental */
+export type AgentRegistrySpawnValidationErrorReason = 
+/** Provided cwd does not exist on disk */
+"cwd-not-found"
+/** Provided cwd exists but is not a directory */
+ | "cwd-not-directory"
+/** Session name failed validateSessionName */
+ | "invalid-name"
+/** Requested agent name was not found in builtin or custom agents */
+ | "unknown-agent"
+/** Requested model is not available to this session */
+ | "unknown-model"
+/** Caller asked for permissionMode='yolo' but the controller is not currently in allow-all mode */
+ | "yolo-not-allowed";
+/**
+ * Which parameter field was invalid. Omitted when the rejection is not field-specific.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistrySpawnValidationErrorField".
+ */
+/** @experimental */
+export type AgentRegistrySpawnValidationErrorField = 
+/** The cwd parameter */
+"cwd"
+/** The session name parameter */
+ | "name"
+/** The agentName parameter */
+ | "agentName"
+/** The model parameter */
+ | "model"
+/** The permissionMode parameter */
+ | "permissionMode";
 /**
  * The new auth credentials to install on the session. When omitted or `undefined`, the call is a no-op and the session's existing credentials are preserved. The runtime stores the value verbatim and uses it for outbound model/API requests; it does NOT re-validate or re-fetch the associated Copilot user response. Several variants carry secret material; treat this method's params as containing secrets at rest and in transit.
  *
@@ -260,7 +390,7 @@ export type FilterMapping = {
  * via the `definition` "InstalledPluginSource".
  */
 /** @experimental */
-export type InstalledPluginSource = string | InstalledPluginSourceGithub | InstalledPluginSourceUrl | InstalledPluginSourceLocal;
+export type InstalledPluginSource = string | InstalledPluginSourceGitHub | InstalledPluginSourceUrl | InstalledPluginSourceLocal;
 /**
  * Category of instruction source — used for merge logic
  *
@@ -429,23 +559,12 @@ export type McpAppsSetHostContextDetailsPlatform =
  */
 export type McpServerConfig = McpServerConfigStdio | McpServerConfigHttp;
 /**
- * OIDC token configuration. When truthy, a token is automatically gathered.
+ * Set to `true` to use defaults, or provide an object with additional auth or OIDC settings.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "McpServerConfigStdioOidc".
+ * via the `definition` "McpServerAuthConfig".
  */
-export type McpServerConfigStdioOidc = boolean | {
-    [k: string]: unknown | undefined;
-};
-/**
- * Authentication configuration for this server.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "McpServerConfigStdioAuth".
- */
-export type McpServerConfigStdioAuth = boolean | {
-    [k: string]: unknown | undefined;
-};
+export type McpServerAuthConfig = boolean | McpServerAuthConfigRedirectPort;
 /**
  * Remote transport type. Defaults to "http" when omitted.
  *
@@ -457,15 +576,6 @@ export type McpServerConfigHttpType =
 "http"
 /** Server-Sent Events transport. */
  | "sse";
-/**
- * OIDC token configuration. When truthy, a token is automatically gathered.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "McpServerConfigHttpOidc".
- */
-export type McpServerConfigHttpOidc = boolean | {
-    [k: string]: unknown | undefined;
-};
 /**
  * OAuth grant type to use when authenticating to the remote MCP server.
  *
@@ -527,6 +637,10 @@ export type SessionContextInfo = {
      * Tokens consumed by tool definitions sent to the model (excludes deferred tools)
      */
     toolDefinitionsTokens: number;
+    /**
+     * Tokens consumed by MCP tool definitions (subset of toolDefinitionsTokens, excludes deferred tools)
+     */
+    mcpToolsTokens: number;
     /**
      * Sum of system, conversation and tool-definition tokens
      */
@@ -540,7 +654,7 @@ export type SessionContextInfo = {
      */
     compactionThreshold: number;
     /**
-     * Total context limit for /context display. promptTokenLimit + min(32k or 64k, outputTokenLimit) depending on model.
+     * Total context limit for /context display: promptTokenLimit + outputTokenLimit (the model's full max_output_tokens reserved on top of the prompt budget).
      */
     limit: number;
     /**
@@ -639,6 +753,18 @@ export type OptionsUpdateEnvValueMode =
 "direct"
 /** Resolve MCP server environment values from host-side references. */
  | "indirect";
+/**
+ * Controls how availableTools (allowlist) and excludedTools (denylist) combine when both are set.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "OptionsUpdateToolFilterPrecedence".
+ */
+/** @experimental */
+export type OptionsUpdateToolFilterPrecedence = 
+/** If availableTools is set, it is the only constraint that applies (excludedTools is ignored). Preserves CLI / pre-existing client behavior. Default. */
+"available"
+/** A tool is enabled if and only if it matches the allowlist (or the allowlist is unset) AND it does not match the denylist. Makes 'all except X' expressible by combining the two lists. */
+ | "excluded";
 /**
  * The client's response to the pending permission prompt
  *
@@ -707,6 +833,22 @@ export type PermissionsModifyRulesScope =
 "session"
 /** Persist the rule change for this project location. */
  | "location";
+/**
+ * Optional source for allow-all telemetry. Defaults to `rpc` when omitted for SDK callers.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PermissionsSetAllowAllSource".
+ */
+/** @experimental */
+export type PermissionsSetAllowAllSource = 
+/** Allow-all was enabled from a CLI command-line flag. */
+"cli_flag"
+/** Allow-all was enabled by a slash command. */
+ | "slash_command"
+/** Allow-all was enabled by confirming autopilot behavior. */
+ | "autopilot_confirmation"
+/** Allow-all was enabled through an RPC caller. */
+ | "rpc";
 /**
  * Optional source for allow-all telemetry. Defaults to `rpc` when omitted for SDK callers.
  *
@@ -723,6 +865,28 @@ export type PermissionsSetApproveAllSource =
  | "autopilot_confirmation"
 /** Allow-all was enabled through an RPC caller. */
  | "rpc";
+/**
+ * Schema for the `PushAttachment` type.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachment".
+ */
+/** @experimental */
+export type PushAttachment = PushAttachmentFile | PushAttachmentDirectory | PushAttachmentSelection | PushAttachmentGitHubReference | PushAttachmentBlob | ExtensionContextPushInput;
+/**
+ * Type of GitHub reference
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentGitHubReferenceType".
+ */
+/** @experimental */
+export type PushAttachmentGitHubReferenceType = 
+/** GitHub issue reference. */
+"issue"
+/** GitHub pull request reference. */
+ | "pr"
+/** GitHub discussion reference. */
+ | "discussion";
 /**
  * Whether this item is a queued user message or a queued slash command / model change
  *
@@ -765,28 +929,6 @@ export type SendAgentMode =
  | "autopilot"
 /** The agent is in shell-focused UI mode. */
  | "shell";
-/**
- * A user message attachment — a file, directory, code selection, blob, or GitHub reference
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachment".
- */
-/** @experimental */
-export type SendAttachment = SendAttachmentFile | SendAttachmentDirectory | SendAttachmentSelection | SendAttachmentGithubReference | SendAttachmentBlob;
-/**
- * Type of GitHub reference
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentGithubReferenceType".
- */
-/** @experimental */
-export type SendAttachmentGithubReferenceType = 
-/** GitHub issue reference. */
-"issue"
-/** GitHub pull request reference. */
- | "pr"
-/** GitHub discussion reference. */
- | "discussion";
 /**
  * How to deliver the message. `enqueue` (default) appends to the message queue. `immediate` interjects during an in-progress turn.
  *
@@ -867,7 +1009,7 @@ export type SessionFsSqliteQueryType =
  * via the `definition` "SessionInstalledPluginSource".
  */
 /** @experimental */
-export type SessionInstalledPluginSource = string | SessionInstalledPluginSourceGithub | SessionInstalledPluginSourceUrl | SessionInstalledPluginSourceLocal;
+export type SessionInstalledPluginSource = string | SessionInstalledPluginSourceGitHub | SessionInstalledPluginSourceUrl | SessionInstalledPluginSourceLocal;
 /**
  * Public-facing workspace metadata for this session, or null if the session has no associated workspace. Excludes runtime-internal fields (GitHub IDs, summary count, internal flags).
  *
@@ -1297,6 +1439,204 @@ export interface AgentList {
      */
     agents: AgentInfo[];
 }
+/**
+ * Full registry entry for the spawned child. Lets the controller call `handleLiveTargetSelected(entry)` directly without re-reading the registry (avoids a TOCTOU window).
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistryLiveTargetEntry".
+ */
+/** @experimental */
+export interface AgentRegistryLiveTargetEntry {
+    /**
+     * Registry entry schema version (1 = ui-server, 2 = managed-server)
+     */
+    schemaVersion: number;
+    kind: AgentRegistryLiveTargetEntryKind;
+    /**
+     * Operating-system pid of the process owning this entry
+     */
+    pid: number;
+    /**
+     * Bind host for the entry's JSON-RPC server
+     */
+    host: string;
+    /**
+     * TCP port the entry's JSON-RPC server is listening on
+     */
+    port: number;
+    /**
+     * Session ID of the foreground session for this entry
+     */
+    sessionId?: string;
+    /**
+     * Friendly session name (when set)
+     */
+    sessionName?: string;
+    /**
+     * Working directory of the session (when known)
+     */
+    cwd?: string;
+    /**
+     * Git branch of the session (when known)
+     */
+    branch?: string;
+    /**
+     * Model identifier currently selected for the session
+     */
+    model?: string;
+    status?: AgentRegistryLiveTargetEntryStatus;
+    attentionKind?: AgentRegistryLiveTargetEntryAttentionKind;
+    /**
+     * Monotonic per-publisher revision counter incremented on every status update. Lets watchers detect transient flips.
+     */
+    statusRevision?: number;
+    lastTerminalEvent?: AgentRegistryLiveTargetEntryLastTerminalEvent;
+    /**
+     * ISO 8601 timestamp captured at registration
+     */
+    startedAt: string;
+    /**
+     * Copilot CLI version that wrote the entry
+     */
+    copilotVersion: string;
+    /**
+     * Wall-clock milliseconds since the watcher last observed this entry (heartbeat freshness)
+     */
+    lastSeenMs: number;
+}
+/**
+ * Per-spawn log-capture outcome; populated from spawnLiveTarget.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistryLogCapture".
+ */
+/** @experimental */
+export interface AgentRegistryLogCapture {
+    /**
+     * Whether per-spawn log capture is on (false when env-disabled or open failed)
+     */
+    enabled: boolean;
+    /**
+     * Absolute path to the per-spawn log file (only set when enabled)
+     */
+    path?: string;
+    /**
+     * Human-readable open failure message (only set when enabled === false AND the env-disable opt-out was NOT used)
+     */
+    openError?: string;
+    openErrorReason?: AgentRegistryLogCaptureOpenErrorReason;
+}
+/**
+ * `child_process.spawn` itself failed before the child entered the registry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistrySpawnError".
+ */
+/** @experimental */
+export interface AgentRegistrySpawnError {
+    /**
+     * Discriminator: child_process.spawn itself failed
+     */
+    kind: "spawn-error";
+    /**
+     * Human-readable error message
+     */
+    message: string;
+    /**
+     * Underlying errno code (e.g. ENOENT, EACCES) when available
+     */
+    code?: string;
+}
+/**
+ * Spawn succeeded but the child did not publish a matching managed-server entry within the timeout.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistrySpawnRegistryTimeout".
+ */
+/** @experimental */
+export interface AgentRegistrySpawnRegistryTimeout {
+    /**
+     * Discriminator: spawn succeeded but child never registered
+     */
+    kind: "registry-timeout";
+    /**
+     * Process ID of the orphaned child (so the caller can offer 'kill the pid' guidance)
+     */
+    childPid: number;
+    logCapture?: AgentRegistryLogCapture;
+}
+/**
+ * Inputs to spawn a managed-server child via the controller's spawn delegate.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistrySpawnRequest".
+ */
+/** @experimental */
+export interface AgentRegistrySpawnRequest {
+    /**
+     * Working directory for the spawned child (must be an existing directory)
+     */
+    cwd: string;
+    /**
+     * Custom or built-in agent name (e.g. 'explore'). When omitted, the child uses its own default.
+     */
+    agentName?: string;
+    /**
+     * Model identifier to apply to the new session
+     */
+    model?: string;
+    /**
+     * Friendly session name. Must satisfy validateSessionName: non-empty, no leading/trailing whitespace, <=100 chars, no control chars, no double quotes.
+     */
+    name?: string;
+    permissionMode?: AgentRegistrySpawnPermissionMode;
+    /**
+     * Optional first user message. Forwarded to the caller (the CLI's spawn wrapper sends it post-attach via the standard LocalRpcSession.send path).
+     */
+    initialPrompt?: string;
+}
+/**
+ * Managed-server child was spawned and registered successfully.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistrySpawnSpawned".
+ */
+/** @experimental */
+export interface AgentRegistrySpawnSpawned {
+    /**
+     * Discriminator: managed-server child spawned successfully
+     */
+    kind: "spawned";
+    entry: AgentRegistryLiveTargetEntry;
+    /**
+     * Whether the delegate already sent the initial prompt. Always omitted in the current wiring: the controller sends the prompt post-attach via the standard LocalRpcSession.send path.
+     */
+    initialPromptSent?: boolean;
+    /**
+     * If the delegate attempted to send the initial prompt and failed, the categorized error message.
+     */
+    initialPromptError?: string;
+    logCapture?: AgentRegistryLogCapture;
+}
+/**
+ * Synchronous pre-validation rejected the spawn request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentRegistrySpawnValidationError".
+ */
+/** @experimental */
+export interface AgentRegistrySpawnValidationError {
+    /**
+     * Discriminator: synchronous pre-validation rejected the request
+     */
+    kind: "validation-error";
+    reason: AgentRegistrySpawnValidationErrorReason;
+    field?: AgentRegistrySpawnValidationErrorField;
+    /**
+     * Human-readable explanation; safe to surface in the UI banner. Never logged to unrestricted telemetry.
+     */
+    message: string;
+}
 /**
  * Custom agents available to the session after reloading definitions from disk.
  *
@@ -1333,6 +1673,36 @@ export interface AgentSelectRequest {
 export interface AgentSelectResult {
     agent: AgentInfo;
 }
+/**
+ * Indicates whether the operation succeeded and reports the post-mutation state.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AllowAllPermissionSetResult".
+ */
+/** @experimental */
+export interface AllowAllPermissionSetResult {
+    /**
+     * Whether the operation succeeded
+     */
+    success: boolean;
+    /**
+     * Authoritative allow-all state after the mutation
+     */
+    enabled: boolean;
+}
+/**
+ * Current full allow-all permission state.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AllowAllPermissionState".
+ */
+/** @experimental */
+export interface AllowAllPermissionState {
+    /**
+     * Whether full allow-all permissions are currently active
+     */
+    enabled: boolean;
+}
 /**
  * Schema for the `ApiKeyAuthInfo` type.
  *
@@ -1675,73 +2045,73 @@ export interface CanvasJsonSchema {
     [k: string]: unknown | undefined;
 }
 /**
- * Canvas close parameters.
+ * Canvas action invocation parameters.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CanvasCloseRequest".
+ * via the `definition` "CanvasActionInvokeRequest".
  */
 /** @experimental */
-export interface CanvasCloseRequest {
+export interface CanvasActionInvokeRequest {
     /**
      * Open canvas instance identifier
      */
     instanceId: string;
+    /**
+     * Action name to invoke
+     */
+    actionName: string;
+    /**
+     * Action input
+     */
+    input?: {
+        [k: string]: unknown | undefined;
+    };
 }
 /**
- * Host context supplied by the runtime.
+ * Provider-supplied action result.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CanvasHostContext".
+ * via the `definition` "CanvasActionInvokeResult".
  */
 /** @experimental */
-export interface CanvasHostContext {
-    capabilities?: CanvasHostContextCapabilities;
+export interface CanvasActionInvokeResult {
+    [k: string]: unknown | undefined;
 }
 /**
- * Host capabilities
+ * Canvas close parameters.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CanvasHostContextCapabilities".
+ * via the `definition` "CanvasCloseRequest".
  */
 /** @experimental */
-export interface CanvasHostContextCapabilities {
+export interface CanvasCloseRequest {
     /**
-     * Whether canvas rendering is supported
+     * Open canvas instance identifier
      */
-    canvases?: boolean;
+    instanceId: string;
 }
 /**
- * Canvas action invocation parameters.
+ * Host context supplied by the runtime.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CanvasInvokeActionRequest".
+ * via the `definition` "CanvasHostContext".
  */
-/** @experimental */
-export interface CanvasInvokeActionRequest {
-    /**
-     * Open canvas instance identifier
-     */
-    instanceId: string;
-    /**
-     * Action name to invoke
-     */
-    actionName: string;
-    /**
-     * Action input
-     */
-    input?: {
-        [k: string]: unknown | undefined;
-    };
+/** @experimental */
+export interface CanvasHostContext {
+    capabilities?: CanvasHostContextCapabilities;
 }
 /**
- * Provider-supplied action result.
+ * Host capabilities
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CanvasInvokeActionResult".
+ * via the `definition` "CanvasHostContextCapabilities".
  */
 /** @experimental */
-export interface CanvasInvokeActionResult {
-    [k: string]: unknown | undefined;
+export interface CanvasHostContextCapabilities {
+    /**
+     * Whether canvas rendering is supported
+     */
+    canvases?: boolean;
 }
 /**
  * Declared canvases available in this session.
@@ -1903,6 +2273,20 @@ export interface CanvasProviderCloseRequest {
      */
     instanceId: string;
     host?: CanvasHostContext;
+    session?: CanvasSessionContext;
+}
+/**
+ * Session context supplied by the runtime.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CanvasSessionContext".
+ */
+/** @experimental */
+export interface CanvasSessionContext {
+    /**
+     * Active session working directory, when known.
+     */
+    workingDirectory?: string;
 }
 /**
  * Canvas action invocation parameters sent to the provider.
@@ -1939,6 +2323,7 @@ export interface CanvasProviderInvokeActionRequest {
         [k: string]: unknown | undefined;
     };
     host?: CanvasHostContext;
+    session?: CanvasSessionContext;
 }
 /**
  * Canvas open parameters sent to the provider.
@@ -1971,6 +2356,7 @@ export interface CanvasProviderOpenRequest {
         [k: string]: unknown | undefined;
     };
     host?: CanvasHostContext;
+    session?: CanvasSessionContext;
 }
 /**
  * Canvas open result returned by the provider.
@@ -2266,7 +2652,7 @@ export interface ConnectRemoteSessionParams {
     sessionId: string;
 }
 /**
- * The currently selected model and reasoning effort for the session.
+ * The currently selected model, reasoning effort, and context tier for the session. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "CurrentModel".
@@ -2281,6 +2667,46 @@ export interface CurrentModel {
      * Reasoning effort level currently applied to the active model, when one is set. Reads `Session.getReasoningEffort()` synchronously after `getSelectedModel()` resolves so the two values are reported as a snapshot.
      */
     reasoningEffort?: string;
+    contextTier?: ContextTier;
+}
+/**
+ * Lightweight metadata for a currently initialized session tool
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CurrentToolMetadata".
+ */
+/** @experimental */
+export interface CurrentToolMetadata {
+    /**
+     * Model-facing tool name
+     */
+    name: string;
+    /**
+     * Optional MCP/config namespaced tool name
+     */
+    namespacedName?: string;
+    /**
+     * MCP server name for MCP-backed tools
+     */
+    mcpServerName?: string;
+    /**
+     * Raw MCP tool name for MCP-backed tools
+     */
+    mcpToolName?: string;
+    /**
+     * Tool description
+     */
+    description: string;
+    /**
+     * JSON Schema for tool input
+     */
+    input_schema?: {
+        [k: string]: unknown | undefined;
+    };
+    /**
+     * Whether the tool is loaded on demand via tool search
+     */
+    deferLoading?: boolean;
 }
 /**
  * Schema for the `DiscoveredMcpServer` type.
@@ -2450,6 +2876,29 @@ export interface Extension {
      */
     pid?: number;
 }
+/**
+ * Slim input shape for extension_context attachments; identity fields are runtime-derived.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ExtensionContextPushInput".
+ */
+/** @experimental */
+export interface ExtensionContextPushInput {
+    /**
+     * Attachment type discriminator
+     */
+    type: "extension_context";
+    /**
+     * Human-readable composer pill label
+     */
+    title: string;
+    /**
+     * Caller-supplied JSON payload (required, may be null but not undefined)
+     */
+    payload: {
+        [k: string]: unknown | undefined;
+    };
+}
 /**
  * Extensions discovered for the session, with their current status.
  *
@@ -2986,13 +3435,13 @@ export interface InstalledPlugin {
     source?: InstalledPluginSource;
 }
 /**
- * Schema for the `InstalledPluginSourceGithub` type.
+ * Schema for the `InstalledPluginSourceGitHub` type.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSourceGithub".
+ * via the `definition` "InstalledPluginSourceGitHub".
  */
 /** @experimental */
-export interface InstalledPluginSourceGithub {
+export interface InstalledPluginSourceGitHub {
     /**
      * Constant value. Always "github".
      */
@@ -3474,8 +3923,8 @@ export interface McpServerConfigStdio {
      * Timeout in milliseconds for tool calls to this server.
      */
     timeout?: number;
-    oidc?: McpServerConfigStdioOidc;
-    auth?: McpServerConfigStdioAuth;
+    oidc?: McpServerAuthConfig;
+    auth?: McpServerAuthConfig;
     /**
      * Executable command used to start the Stdio MCP server process.
      */
@@ -3495,6 +3944,19 @@ export interface McpServerConfigStdio {
         [k: string]: string | undefined;
     };
 }
+/**
+ * Authentication settings with optional redirect port configuration.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpServerAuthConfigRedirectPort".
+ */
+export interface McpServerAuthConfigRedirectPort {
+    /**
+     * Fixed port for the OAuth redirect callback server.
+     */
+    redirectPort?: number;
+    [k: string]: unknown | undefined;
+}
 /**
  * Remote MCP server configuration accessed over HTTP or SSE.
  *
@@ -3516,8 +3978,8 @@ export interface McpServerConfigHttp {
      * Timeout in milliseconds for tool calls to this server.
      */
     timeout?: number;
-    oidc?: McpServerConfigHttpOidc;
-    auth?: McpServerConfigHttpAuth;
+    oidc?: McpServerAuthConfig;
+    auth?: McpServerAuthConfig;
     /**
      * URL of the remote MCP server endpoint.
      */
@@ -3538,19 +4000,6 @@ export interface McpServerConfigHttp {
     oauthPublicClient?: boolean;
     oauthGrantType?: McpServerConfigHttpOauthGrantType;
 }
-/**
- * Additional authentication configuration for this server.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "McpServerConfigHttpAuth".
- */
-export interface McpServerConfigHttpAuth {
-    /**
-     * Fixed port for the OAuth redirect callback server.
-     */
-    redirectPort?: number;
-    [k: string]: unknown | undefined;
-}
 /**
  * MCP server names to disable for new sessions.
  *
@@ -4174,7 +4623,7 @@ export interface ModelBillingTokenPrices {
      */
     batchSize?: number;
     /**
-     * Maximum context window tokens for the default tier
+     * Prompt token budget (max_prompt_tokens) for the default tier. The total context window is this value plus the model's max_output_tokens.
      */
     contextMax?: number;
     longContext?: ModelBillingTokenPricesLongContext;
@@ -4199,7 +4648,7 @@ export interface ModelBillingTokenPricesLongContext {
      */
     cachePrice?: number;
     /**
-     * Maximum context window tokens for the long context tier
+     * Prompt token budget (max_prompt_tokens) for the long context tier. The total context window is this value plus the model's max_output_tokens.
      */
     contextMax?: number;
 }
@@ -4286,6 +4735,19 @@ export interface ModelList {
      */
     models: Model[];
 }
+/**
+ * Optional listing options.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelListRequest".
+ */
+/** @experimental */
+export interface ModelListRequest {
+    /**
+     * If true, bypasses the per-session model list cache and re-fetches from CAPI.
+     */
+    skipCache?: boolean;
+}
 /**
  * Reasoning effort level to apply to the currently selected model.
  *
@@ -4319,7 +4781,7 @@ export interface ModelsListRequest {
     gitHubToken?: string;
 }
 /**
- * Target model identifier and optional reasoning effort, summary, and capability overrides.
+ * Target model identifier and optional reasoning effort, summary, capability overrides, and context tier.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "ModelSwitchToRequest".
@@ -4336,6 +4798,7 @@ export interface ModelSwitchToRequest {
     reasoningEffort?: string;
     reasoningSummary?: ReasoningSummary;
     modelCapabilities?: ModelCapabilitiesOverride;
+    contextTier?: ContextTier;
 }
 /**
  * The model identifier active on the session after the switch.
@@ -5491,6 +5954,14 @@ export interface PermissionsFolderTrustAddTrustedResult {
      */
     success: boolean;
 }
+/**
+ * No parameters.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PermissionsGetAllowAllRequest".
+ */
+export interface PermissionsGetAllowAllRequest {
+}
 /**
  * Indicates whether the operation succeeded.
  *
@@ -5615,6 +6086,20 @@ export interface PermissionsResetSessionApprovalsResult {
      */
     success: boolean;
 }
+/**
+ * Whether to enable full allow-all permissions for the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PermissionsSetAllowAllRequest".
+ */
+/** @experimental */
+export interface PermissionsSetAllowAllRequest {
+    /**
+     * Whether to enable full allow-all permissions
+     */
+    enabled: boolean;
+    source?: PermissionsSetAllowAllSource;
+}
 /**
  * Allow-all toggle for tool permission requests, with an optional telemetry source.
  *
@@ -5792,11 +6277,197 @@ export interface Plugin {
  * via the `definition` "PluginList".
  */
 /** @experimental */
-export interface PluginList {
+export interface PluginList {
+    /**
+     * Installed plugins
+     */
+    plugins: Plugin[];
+}
+/**
+ * File attachment
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentFile".
+ */
+/** @experimental */
+export interface PushAttachmentFile {
+    /**
+     * Attachment type discriminator
+     */
+    type: "file";
+    /**
+     * Absolute file path
+     */
+    path: string;
+    /**
+     * User-facing display name for the attachment
+     */
+    displayName: string;
+    lineRange?: PushAttachmentFileLineRange;
+}
+/**
+ * Optional line range to scope the attachment to a specific section of the file
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentFileLineRange".
+ */
+/** @experimental */
+export interface PushAttachmentFileLineRange {
+    /**
+     * Start line number (1-based)
+     */
+    start: number;
+    /**
+     * End line number (1-based, inclusive)
+     */
+    end: number;
+}
+/**
+ * Directory attachment
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentDirectory".
+ */
+/** @experimental */
+export interface PushAttachmentDirectory {
+    /**
+     * Attachment type discriminator
+     */
+    type: "directory";
+    /**
+     * Absolute directory path
+     */
+    path: string;
+    /**
+     * User-facing display name for the attachment
+     */
+    displayName: string;
+}
+/**
+ * Code selection attachment from an editor
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentSelection".
+ */
+/** @experimental */
+export interface PushAttachmentSelection {
+    /**
+     * Attachment type discriminator
+     */
+    type: "selection";
+    /**
+     * Absolute path to the file containing the selection
+     */
+    filePath: string;
+    /**
+     * User-facing display name for the selection
+     */
+    displayName: string;
+    /**
+     * The selected text content
+     */
+    text: string;
+    selection: PushAttachmentSelectionDetails;
+}
+/**
+ * Position range of the selection within the file
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentSelectionDetails".
+ */
+/** @experimental */
+export interface PushAttachmentSelectionDetails {
+    start: PushAttachmentSelectionDetailsStart;
+    end: PushAttachmentSelectionDetailsEnd;
+}
+/**
+ * Start position of the selection
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentSelectionDetailsStart".
+ */
+/** @experimental */
+export interface PushAttachmentSelectionDetailsStart {
+    /**
+     * Start line number (0-based)
+     */
+    line: number;
+    /**
+     * Start character offset within the line (0-based)
+     */
+    character: number;
+}
+/**
+ * End position of the selection
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentSelectionDetailsEnd".
+ */
+/** @experimental */
+export interface PushAttachmentSelectionDetailsEnd {
+    /**
+     * End line number (0-based)
+     */
+    line: number;
+    /**
+     * End character offset within the line (0-based)
+     */
+    character: number;
+}
+/**
+ * GitHub issue, pull request, or discussion reference
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentGitHubReference".
+ */
+/** @experimental */
+export interface PushAttachmentGitHubReference {
+    /**
+     * Attachment type discriminator
+     */
+    type: "github_reference";
+    /**
+     * Issue, pull request, or discussion number
+     */
+    number: number;
+    /**
+     * Title of the referenced item
+     */
+    title: string;
+    referenceType: PushAttachmentGitHubReferenceType;
+    /**
+     * Current state of the referenced item (e.g., open, closed, merged)
+     */
+    state: string;
+    /**
+     * URL to the referenced item on GitHub
+     */
+    url: string;
+}
+/**
+ * Blob attachment with inline base64-encoded data
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PushAttachmentBlob".
+ */
+/** @experimental */
+export interface PushAttachmentBlob {
     /**
-     * Installed plugins
+     * Attachment type discriminator
      */
-    plugins: Plugin[];
+    type: "blob";
+    /**
+     * Base64-encoded content
+     */
+    data: string;
+    /**
+     * MIME type of the inline data
+     */
+    mimeType: string;
+    /**
+     * User-facing display name for the attachment
+     */
+    displayName?: string;
 }
 /**
  * Schema for the `QueuePendingItems` type.
@@ -6038,190 +6709,21 @@ export interface SecretsAddFilterValuesResult {
     ok: true;
 }
 /**
- * File attachment
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentFile".
- */
-/** @experimental */
-export interface SendAttachmentFile {
-    /**
-     * Attachment type discriminator
-     */
-    type: "file";
-    /**
-     * Absolute file path
-     */
-    path: string;
-    /**
-     * User-facing display name for the attachment
-     */
-    displayName: string;
-    lineRange?: SendAttachmentFileLineRange;
-}
-/**
- * Optional line range to scope the attachment to a specific section of the file
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentFileLineRange".
- */
-/** @experimental */
-export interface SendAttachmentFileLineRange {
-    /**
-     * Start line number (1-based)
-     */
-    start: number;
-    /**
-     * End line number (1-based, inclusive)
-     */
-    end: number;
-}
-/**
- * Directory attachment
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentDirectory".
- */
-/** @experimental */
-export interface SendAttachmentDirectory {
-    /**
-     * Attachment type discriminator
-     */
-    type: "directory";
-    /**
-     * Absolute directory path
-     */
-    path: string;
-    /**
-     * User-facing display name for the attachment
-     */
-    displayName: string;
-}
-/**
- * Code selection attachment from an editor
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentSelection".
- */
-/** @experimental */
-export interface SendAttachmentSelection {
-    /**
-     * Attachment type discriminator
-     */
-    type: "selection";
-    /**
-     * Absolute path to the file containing the selection
-     */
-    filePath: string;
-    /**
-     * User-facing display name for the selection
-     */
-    displayName: string;
-    /**
-     * The selected text content
-     */
-    text: string;
-    selection: SendAttachmentSelectionDetails;
-}
-/**
- * Position range of the selection within the file
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentSelectionDetails".
- */
-/** @experimental */
-export interface SendAttachmentSelectionDetails {
-    start: SendAttachmentSelectionDetailsStart;
-    end: SendAttachmentSelectionDetailsEnd;
-}
-/**
- * Start position of the selection
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentSelectionDetailsStart".
- */
-/** @experimental */
-export interface SendAttachmentSelectionDetailsStart {
-    /**
-     * Start line number (0-based)
-     */
-    line: number;
-    /**
-     * Start character offset within the line (0-based)
-     */
-    character: number;
-}
-/**
- * End position of the selection
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentSelectionDetailsEnd".
- */
-/** @experimental */
-export interface SendAttachmentSelectionDetailsEnd {
-    /**
-     * End line number (0-based)
-     */
-    line: number;
-    /**
-     * End character offset within the line (0-based)
-     */
-    character: number;
-}
-/**
- * GitHub issue, pull request, or discussion reference
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentGithubReference".
- */
-/** @experimental */
-export interface SendAttachmentGithubReference {
-    /**
-     * Attachment type discriminator
-     */
-    type: "github_reference";
-    /**
-     * Issue, pull request, or discussion number
-     */
-    number: number;
-    /**
-     * Title of the referenced item
-     */
-    title: string;
-    referenceType: SendAttachmentGithubReferenceType;
-    /**
-     * Current state of the referenced item (e.g., open, closed, merged)
-     */
-    state: string;
-    /**
-     * URL to the referenced item on GitHub
-     */
-    url: string;
-}
-/**
- * Blob attachment with inline base64-encoded data
+ * Parameters for session.extensions.sendAttachmentsToMessage.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAttachmentBlob".
+ * via the `definition` "SendAttachmentsToMessageParams".
  */
 /** @experimental */
-export interface SendAttachmentBlob {
-    /**
-     * Attachment type discriminator
-     */
-    type: "blob";
-    /**
-     * Base64-encoded content
-     */
-    data: string;
+export interface SendAttachmentsToMessageParams {
     /**
-     * MIME type of the inline data
+     * Optional canvas instance binding the push for provenance. When supplied, the runtime resolves the canvas, verifies it is owned by the calling extension, and stamps canvasId/instanceId onto each extension_context entry. When omitted, no resolution runs and those fields stay unset on the attachment.
      */
-    mimeType: string;
+    instanceId?: string;
     /**
-     * User-facing display name for the attachment
+     * Attachments to push into the next user-message turn. extension_context entries take the slim shape; standard variants take their full AttachmentSchema shape.
      */
-    displayName?: string;
+    attachments: PushAttachment[];
 }
 /**
  * Parameters for sending a user message to the session
@@ -6242,7 +6744,7 @@ export interface SendRequest {
     /**
      * Optional attachments (files, directories, selections, blobs, GitHub references) to include with the message
      */
-    attachments?: SendAttachment[];
+    attachments?: Attachment[];
     mode?: SendMode;
     /**
      * If true, adds the message to the front of the queue instead of the end
@@ -6446,10 +6948,18 @@ export interface SessionMetadata {
      * Optional human-friendly name set via /rename
      */
     name?: string;
+    /**
+     * Runtime client name that created/last resumed this session
+     */
+    clientName?: string;
     /**
      * True for remote (GitHub) sessions; false for local
      */
     isRemote: boolean;
+    /**
+     * True for detached maintenance sessions that should be hidden from normal resume lists.
+     */
+    isDetached?: boolean;
     context?: SessionContext;
     /**
      * GitHub task ID, when this local session is bound to one. Only present for local sessions exported to remote control.
@@ -6917,13 +7427,13 @@ export interface SessionInstalledPlugin {
     source?: SessionInstalledPluginSource;
 }
 /**
- * Schema for the `SessionInstalledPluginSourceGithub` type.
+ * Schema for the `SessionInstalledPluginSourceGitHub` type.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionInstalledPluginSourceGithub".
+ * via the `definition` "SessionInstalledPluginSourceGitHub".
  */
 /** @experimental */
-export interface SessionInstalledPluginSourceGithub {
+export interface SessionInstalledPluginSourceGitHub {
     /**
      * Constant value. Always "github".
      */
@@ -7053,6 +7563,10 @@ export interface SessionMetadataSnapshot {
      * User-provided name supplied at session construction (via `--name`), if any. Immutable after construction.
      */
     initialName?: string;
+    /**
+     * Runtime client name associated with the session (telemetry identifier).
+     */
+    clientName?: string;
     remoteMetadata?: MetadataSnapshotRemoteMetadata;
     /**
      * Short human-readable summary of the session, if known. Omitted when no summary has been generated.
@@ -7072,6 +7586,25 @@ export interface SessionMetadataSnapshot {
      */
     workspace?: WorkspaceSummary | null;
 }
+/**
+ * The list of models available to this session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionModelList".
+ */
+/** @experimental */
+export interface SessionModelList {
+    /**
+     * Available models, ordered with the most preferred default first.
+     */
+    list: unknown[];
+    /**
+     * Per-quota snapshots returned alongside the model list, keyed by quota type.
+     */
+    quotaSnapshots?: {
+        [k: string]: unknown | undefined;
+    };
+}
 /**
  * Outcome of the prune operation: deleted IDs, dry-run candidates, skipped IDs, total bytes freed, and the dry-run flag.
  *
@@ -7379,7 +7912,7 @@ export interface SessionSizes {
     };
 }
 /**
- * Optional metadata-load limit and context filter applied to the returned sessions.
+ * Optional metadata-load limit and filters applied to the returned sessions.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SessionsListRequest".
@@ -7391,6 +7924,10 @@ export interface SessionsListRequest {
      */
     metadataLimit?: number;
     filter?: SessionListFilter;
+    /**
+     * When true, include detached maintenance sessions. Defaults to false for user-facing session lists.
+     */
+    includeDetached?: boolean;
 }
 /**
  * Active session ID whose deferred repo-level hooks should be loaded.
@@ -7580,6 +8117,7 @@ export interface SessionUpdateOptionsParams {
      * Denylist of tool names for this session.
      */
     excludedTools?: string[];
+    toolFilterPrecedence?: OptionsUpdateToolFilterPrecedence;
     /**
      * Whether shell-script safety heuristics are enabled.
      */
@@ -7625,6 +8163,10 @@ export interface SessionUpdateOptionsParams {
      * Whether to default custom agents to local-only execution.
      */
     customAgentsLocalOnly?: boolean;
+    /**
+     * When true, the selected custom agent's prompt is not injected into the user message (skill context is still injected). Used by automation triggers where the agent prompt is already in the problem statement.
+     */
+    suppressCustomAgentPrompt?: boolean;
     /**
      * Whether to skip loading custom instruction sources.
      */
@@ -7683,6 +8225,30 @@ export interface SessionUpdateOptionsParams {
      * Whether to expose the `manage_schedule` tool to the agent. The runtime always owns the per-session schedule registry; this flag only controls tool exposure (typically gated to staff users).
      */
     manageScheduleEnabled?: boolean;
+    /**
+     * Whether to skip embedding retrieval pipeline initialization and execution.
+     */
+    skipEmbeddingRetrieval?: boolean;
+    /**
+     * Organization-level custom instructions to inject into the system prompt.
+     */
+    organizationCustomInstructions?: string;
+    /**
+     * Whether to enable loading of `.github/hooks/` filesystem hooks. Separate from the SDK callback hook mechanism.
+     */
+    enableFileHooks?: boolean;
+    /**
+     * Whether to enable host git operations (context resolution, child repo scanning, git info in system prompt).
+     */
+    enableHostGitOperations?: boolean;
+    /**
+     * Whether to enable cross-session store writes and reads.
+     */
+    enableSessionStore?: boolean;
+    /**
+     * Whether to enable skill directory scanning and loading. Falls back to enableConfigDiscovery when unset.
+     */
+    enableSkills?: boolean;
 }
 /**
  * Indicates whether the session options patch was applied successfully.
@@ -8532,6 +9098,19 @@ export interface ToolList {
      */
     tools: Tool[];
 }
+/**
+ * Current lightweight tool metadata snapshot for the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ToolsGetCurrentMetadataResult".
+ */
+/** @experimental */
+export interface ToolsGetCurrentMetadataResult {
+    /**
+     * Current tool metadata, or null when tools have not been initialized yet
+     */
+    tools: CurrentToolMetadata[] | null;
+}
 /**
  * Resolve, build, and validate the runtime tool list for this session. Subagent sessions and consumer flows that need an initialized tool set before `send` invoke this. Default base-class implementation is a no-op for sessions that don't support tool validation.
  *
@@ -9366,6 +9945,7 @@ export interface WorkspacesGetWorkspaceResult {
         host_type?: WorkspacesWorkspaceDetailsHostType;
         branch?: string;
         name?: string;
+        client_name?: string;
         user_named?: boolean;
         summary_count?: number;
         created_at?: string;
@@ -9609,6 +10189,10 @@ export declare function createServerRpc(connection: MessageConnection): {
              * @param params MCP server names to disable for new sessions.
              */
             disable: (params: McpConfigDisableRequest) => Promise<void>;
+            /**
+             * Drops this runtime process's in-memory MCP server-definition cache so the next MCP config read observes disk.
+             */
+            reload: () => Promise<void>;
         };
         /**
          * Discovers MCP servers from user, workspace, plugin, and builtin sources.
@@ -9637,6 +10221,20 @@ export declare function createServerRpc(connection: MessageConnection): {
          */
         discover: (params: SkillsDiscoverRequest) => Promise<ServerSkillList>;
     };
+    user: {
+        settings: {
+            /**
+             * Drops this runtime process's in-memory user settings cache so the next settings read observes disk.
+             */
+            reload: () => Promise<void>;
+        };
+    };
+    runtime: {
+        /**
+         * Gracefully shuts down an SDK-owned runtime. The response is sent only after cleanup completes; callers may then terminate the owned runtime process.
+         */
+        shutdown: () => Promise<void>;
+    };
     sessionFs: {
         /**
          * Registers an SDK client as the session filesystem provider.
@@ -9668,7 +10266,7 @@ export declare function createServerRpc(connection: MessageConnection): {
         /**
          * Lists persisted sessions, optionally filtered by working-directory context.
          *
-         * @param params Optional metadata-load limit and context filter applied to the returned sessions.
+         * @param params Optional metadata-load limit and filters applied to the returned sessions.
          *
          * @returns Persisted sessions matching the filter, ordered most-recently-modified first.
          */
@@ -9800,6 +10398,17 @@ export declare function createServerRpc(connection: MessageConnection): {
          */
         setAdditionalPlugins: (params: SessionsSetAdditionalPluginsRequest) => Promise<SessionsSetAdditionalPluginsResult>;
     };
+    /** @experimental */
+    agentRegistry: {
+        /**
+         * Spawns a managed-server child with the supplied configuration and returns a discriminated-union result. The caller (typically the CLI controller) is responsible for attaching to the spawned child and sending any follow-up prompt. When the controller-local spawn gate is closed the server returns JSON-RPC MethodNotFound.
+         *
+         * @param params Inputs to spawn a managed-server child via the controller's spawn delegate.
+         *
+         * @returns Outcome of an agentRegistry.spawn call.
+         */
+        spawn: (params: AgentRegistrySpawnRequest) => Promise<AgentRegistrySpawnResult>;
+    };
 };
 /** Create typed session-scoped RPC methods. */
 export declare function createSessionRpc(connection: MessageConnection, sessionId: string): {
@@ -9882,27 +10491,30 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @param params Canvas close parameters.
          */
         close: (params: CanvasCloseRequest) => Promise<void>;
-        /**
-         * Invokes an action on an open canvas instance.
-         *
-         * @param params Canvas action invocation parameters.
-         *
-         * @returns Canvas action invocation result.
-         */
-        invokeAction: (params: CanvasInvokeActionRequest) => Promise<CanvasInvokeActionResult>;
+        /** @experimental */
+        action: {
+            /**
+             * Invokes an action on an open canvas instance.
+             *
+             * @param params Canvas action invocation parameters.
+             *
+             * @returns Canvas action invocation result.
+             */
+            invoke: (params: CanvasActionInvokeRequest) => Promise<CanvasActionInvokeResult>;
+        };
     };
     /** @experimental */
     model: {
         /**
          * Gets the currently selected model for the session.
          *
-         * @returns The currently selected model and reasoning effort for the session.
+         * @returns The currently selected model, reasoning effort, and context tier for the session. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume.
          */
         getCurrent: () => Promise<CurrentModel>;
         /**
          * Switches the session to a model and optional reasoning configuration.
          *
-         * @param params Target model identifier and optional reasoning effort, summary, and capability overrides.
+         * @param params Target model identifier and optional reasoning effort, summary, capability overrides, and context tier.
          *
          * @returns The model identifier active on the session after the switch.
          */
@@ -9915,6 +10527,14 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Update the session's reasoning effort without changing the selected model. Use `switchTo` instead when you also need to change the model. The runtime stores the effort on the session and applies it to subsequent turns.
          */
         setReasoningEffort: (params: ModelSetReasoningEffortRequest) => Promise<ModelSetReasoningEffortResult>;
+        /**
+         * Lists models available to this session using its own auth and integration context. Connected hosts (CLI TUI, GitHub App) should call this through the session client so remote sessions return the remote CLI's available models rather than the caller's.
+         *
+         * @param params Optional listing options.
+         *
+         * @returns The list of models available to this session.
+         */
+        list: (params?: ModelListRequest) => Promise<SessionModelList>;
     };
     /** @experimental */
     mode: {
@@ -10369,6 +10989,12 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * Reloads extension definitions and processes for the session.
          */
         reload: () => Promise<void>;
+        /**
+         * Push attachments into the next user-message turn from an extension. The host should surface them as composer pills and forward them via the next session.send call. Callable only by extension-owned connections.
+         *
+         * @param params Parameters for session.extensions.sendAttachmentsToMessage.
+         */
+        sendAttachmentsToMessage: (params: SendAttachmentsToMessageParams) => Promise<void>;
     };
     /** @experimental */
     tools: {
@@ -10386,6 +11012,12 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Resolve, build, and validate the runtime tool list for this session. Subagent sessions and consumer flows that need an initialized tool set before `send` invoke this. Default base-class implementation is a no-op for sessions that don't support tool validation.
          */
         initializeAndValidate: () => Promise<ToolsInitializeAndValidateResult>;
+        /**
+         * Returns lightweight metadata for the session's currently initialized tools.
+         *
+         * @returns Current lightweight tool metadata snapshot for the session.
+         */
+        getCurrentMetadata: () => Promise<ToolsGetCurrentMetadataResult>;
     };
     /** @experimental */
     commands: {
@@ -10544,6 +11176,20 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Indicates whether the operation succeeded.
          */
         setApproveAll: (params: PermissionsSetApproveAllRequest) => Promise<PermissionsSetApproveAllResult>;
+        /**
+         * Enables or disables full allow-all permissions (tools, paths, and URLs) for the session. Used by attach-mode clients (e.g. LocalRpcSession's `/allow-all` forwarder) to flip the target session's permission state. Unlike `setApproveAll`, this swaps in the unrestricted path and URL managers and emits `session.permissions_changed` on transition. The result returns the authoritative post-mutation state so callers can update their local mirrors without racing the `session.permissions_changed` notification on the same wire.
+         *
+         * @param params Whether to enable full allow-all permissions for the session.
+         *
+         * @returns Indicates whether the operation succeeded and reports the post-mutation state.
+         */
+        setAllowAll: (params: PermissionsSetAllowAllRequest) => Promise<AllowAllPermissionSetResult>;
+        /**
+         * Returns whether full allow-all permissions are currently active for the session.
+         *
+         * @returns Current full allow-all permission state.
+         */
+        getAllowAll: () => Promise<AllowAllPermissionState>;
         /**
          * Adds or removes session-scoped or location-scoped permission rules.
          *
@@ -11012,7 +11658,7 @@ export interface CanvasHandler {
      *
      * @returns Provider-supplied action result.
      */
-    invokeAction(params: CanvasProviderInvokeActionRequest): Promise<CanvasInvokeActionResult>;
+    invoke(params: CanvasProviderInvokeActionRequest): Promise<CanvasActionInvokeResult>;
 }
 /** All client session API handler groups. */
 export interface ClientSessionApiHandlers {