@github/copilot-sdk 1.0.14 → 1.0.15-preview.1

package/dist/generated/rpc.d.ts

@@ -3,7 +3,7 @@
  * Generated from: api.schema.json
  */
 import type { MessageConnection } from "vscode-jsonrpc/node.js";
-import type { AbortReason, AgentModelPolicy, Attachment, AutoTier, ContextTier, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, McpOauthHttpResponse, McpOauthWWWAuthenticateParams, McpServerMetadata, McpServerSource, McpServerStatus, ModelChangeSource, PermissionDecisionSource, PermissionMode, PermissionPromptRequest, PermissionRule, ReasoningSummary, RemediationAction, SessionEvent, SessionLimitsConfig, SessionMode, ShutdownType, SkillSource, TaskCompleteData, TaskCompletionOutcome, UserToolSessionApproval, Verbosity } from "./session-events.js";
+import type { AbortReason, AgentModelPolicy, Attachment, AutoTier, ContextTier, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, IndexedSearchState, ManagedSettingsResolvedData, McpOauthHttpResponse, McpOauthWWWAuthenticateParams, McpServerMetadata, McpServerSource, McpServerStatus, ModelChangeSource, PermissionDecisionSource, PermissionMode, PermissionPromptRequest, PermissionRule, ReasoningSummary, RemediationAction, SessionEvent, SessionLimitsConfig, SessionMode, ShutdownType, SkillSource, TaskCompleteData, TaskCompletionOutcome, UserToolSessionApproval, Verbosity } from "./session-events.js";
 /** A value that can be represented losslessly on the SDK JSON wire. */
 export type JsonValue = null | boolean | number | string | JsonValue[] | {
     [key: string]: JsonValue;
@@ -152,7 +152,7 @@ export type AgentRegistryLiveTargetEntryLastTerminalEvent =
 /** Last turn was aborted (e.g. user interrupted) */
  | "abort";
 /**
- * Categorized reason for log-open failure
+ * Categorized reason no canonical process log could be opened
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AgentRegistryLogCaptureOpenErrorReason".
@@ -326,13 +326,53 @@ export type CardDigestAlgorithm = "sha256-rfc8785";
 /** @experimental */
 export type CardDigestValue = string;
 /**
- * Where a candidate's card came from. Exactly one of a URL or embedded data: the union has no variant carrying both, and no variant carrying neither, so the rule holds structurally rather than by validation.
+ * Discriminator for an Agent Plugin candidate
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogCandidateSource".
+ * via the `definition` "CatalogAgentPluginCandidateKind".
  */
 /** @experimental */
-export type CatalogCandidateSource = CatalogCandidateSourceUrl | CatalogCandidateSourceEmbedded;
+export type CatalogAgentPluginCandidateKind = "plugin";
+/**
+ * Canonical Agent Plugin media type
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginMediaType".
+ */
+/** @experimental */
+export type CatalogAgentPluginMediaType = 
+/** A GitHub Copilot Agent Plugin descriptor. */
+"application/vnd.github.copilot-plugin";
+/**
+ * Canonical catalogue resource identity. The runtime rewrites accepted urn:ai and urn:air identifiers to urn:air, lowercases the authority, and preserves the remaining resource components.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogResourceIdentity".
+ */
+/** @experimental */
+export type CatalogResourceIdentity = string;
+/**
+ * Bounded source-declared resource version, preserved exactly after validation and never inferred.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogResourceVersion".
+ */
+/** @experimental */
+export type CatalogResourceVersion = string;
+/**
+ * Explicit Agent Plugin compatibility declared by exact catalog tags. Clients must not infer these values from display text or other metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAgentPluginCompatibilityTag".
+ */
+/** @experimental */
+export type CatalogAgentPluginCompatibilityTag = 
+/** The plugin contributes at least one GitHub Copilot Canvas. */
+"canvas"
+/** The plugin depends on Canvas for its intended functionality. */
+ | "canvas-only"
+/** The plugin targets GitHub Copilot. */
+ | "github-copilot";
 /**
  * A versioned, bounded trust observation carried unchanged with a catalog candidate and its private handle context. Current observations require a recognised T1/T2 tier; every non-current state structurally forbids a tier. Eligibility remains `unknown` while Agent Finder supplies no exposure decision, and states absent from its current wire are never inferred from age, relevance, popularity, or a tier transition.
  *
@@ -451,6 +491,38 @@ export type CatalogTrustSnapshotUnsupportedStatus =
 export type CatalogTrustSnapshotMalformedStatus = 
 /** The trust field was empty, unbounded, or had the wrong JSON type. */
 "malformed";
+/**
+ * Discriminator for an AI skill candidate
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAiSkillCandidateKind".
+ */
+/** @experimental */
+export type CatalogAiSkillCandidateKind = "ai-skill";
+/**
+ * Canonical AI skill media type
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAiSkillMediaType".
+ */
+/** @experimental */
+export type CatalogAiSkillMediaType = "application/ai-skill";
+/**
+ * Typed non-installable state for an AI skill candidate
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAiSkillInstallability".
+ */
+/** @experimental */
+export type CatalogAiSkillInstallability = "not-installable-kind";
+/**
+ * Where a candidate's card came from. Exactly one of a URL or embedded data: the union has no variant carrying both, and no variant carrying neither, so the rule holds structurally rather than by validation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogCandidateSource".
+ */
+/** @experimental */
+export type CatalogCandidateSource = CatalogCandidateSourceUrl | CatalogCandidateSourceEmbedded;
 /**
  * Why the catalog authority did not accept the caller's identity
  *
@@ -466,13 +538,21 @@ export type CatalogAuthenticationRequiredReason =
 /** A credential was presented and the authority refused it, for example because it was revoked, malformed, or issued for another audience. Refreshing the same rejected credential is not useful; the caller must sign in again. */
  | "credential-rejected";
 /**
- * One inert catalog result, represented as an MCP server or discovery-only AI skill variant so kind, media type, provenance, and installability cannot contradict each other.
+ * One inert catalog result, represented as an MCP server, discovery-only AI skill, or opt-in Agent Plugin variant so kind, media type, provenance, and available operations cannot contradict each other.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "CatalogCandidate".
  */
 /** @experimental */
-export type CatalogCandidate = CatalogMcpServerCandidate | CatalogAiSkillCandidate;
+export type CatalogCandidate = CatalogMcpServerCandidate | CatalogAiSkillCandidate | CatalogAgentPluginCandidate;
+/**
+ * Discriminator for an MCP server candidate
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogMcpServerCandidateKind".
+ */
+/** @experimental */
+export type CatalogMcpServerCandidateKind = "mcp-server";
 /**
  * JSON MCP card media type accepted for install planning
  *
@@ -508,7 +588,9 @@ export type CatalogCandidateKind =
 /** An MCP server, which can be planned for installation. */
 "mcp-server"
 /** An AI skill, which is discoverable but not installable through this surface. */
- | "ai-skill";
+ | "ai-skill"
+/** An inert Agent Plugin candidate, available only when explicitly requested. */
+ | "plugin";
 /**
  * A wire feature a caller can require of the catalog surface, negotiated per request. A grant means the runtime understands the feature's contract, not that the deployment has enabled the operation; typed unavailable results report availability separately.
  *
@@ -523,12 +605,20 @@ export type CatalogCapability =
  | "legacy-mcp-server-card"
 /** Understands `application/ai-skill` candidates as discovery-only and typed non-installable. */
  | "ai-skill-discovery"
+/** Understands opt-in `application/vnd.github.copilot-plugin` candidates and their typed identity, version, source, and compatibility fields. */
+ | "agent-plugin-discovery"
 /** Understands side-effect-free MCP install-plan requests, results, and plan handles; `planning-unavailable` separately reports that planning is not enabled. */
  | "mcp-install-planning"
 /** Understands plans that enumerate every eligible transport rather than a single preferred one. */
  | "multiple-transport-choice"
+/** Understands explicit numbered navigation and authority-reported pagination metadata with opaque tokens. Advertised and granted only when requested. */
+ | "catalog-search-pagination"
 /** Understands versioned candidate trust snapshots. Protocol-3 callers must require this capability before the runtime adds the optional snapshot field. */
- | "trust-snapshot";
+ | "trust-snapshot"
+/** Understands exact candidate selection through model-safe opaque references and host-only candidate-handle hand-off. */
+ | "catalog-selection"
+/** Requires an eligible credential for the selected GitHub.com account before search egress and prohibits client-side anonymous retry, including after HTTP 401 or 403. The credential is scoped to the fixed catalog authority without redirect forwarding. Neither a grant nor successful response proves that the authority accepted the identity or selected a particular backend. Preserve this requirement on every page and retry; callers omitting it retain optional authentication. */
+ | "catalog-search-credential-required";
 /**
  * Bounded extensible wire-feature identifier. Known values are described by `CatalogCapability`; newer callers may send future identifiers so an older runtime can return a typed negotiation refusal instead of failing schema validation. Capability negotiation establishes contract understanding, while each operation's result separately reports runtime availability.
  *
@@ -549,7 +639,7 @@ export type CatalogContractViolationReason =
 "both-url-and-data"
 /** A result carried neither a URL nor embedded data, when exactly one is required. */
  | "neither-url-nor-data"
-/** Two results claimed the same normalised identity. */
+/** Two results claimed the same collision key: normalised identity for existing kinds, or normalised identity and declared version for Agent Plugins. */
  | "duplicate-identity"
 /** A result declared no media type, or one this contract does not model. */
  | "unknown-media-type";
@@ -564,7 +654,9 @@ export type CatalogHandleType =
 /** A search candidate handle. */
 "candidate"
 /** An install plan handle. */
- | "plan";
+ | "plan"
+/** A model-safe reference to one retained search candidate. */
+ | "selection";
 /**
  * Why a presented handle was rejected
  *
@@ -573,16 +665,20 @@ export type CatalogHandleType =
  */
 /** @experimental */
 export type CatalogHandleRejectionReason = 
-/** The handle is unparseable, unknown, or was issued for a different operation. */
+/** The handle is unparseable or unknown. */
 "invalid"
 /** The handle's time to live has elapsed. */
  | "stale"
 /** The handle has already been used, and handles are single-use. */
  | "replayed"
-/** The handle was issued by a different runtime instance. */
- | "foreign";
+/** The handle was issued by a different runtime instance or session. */
+ | "foreign"
+/** The handle was issued for another catalog operation. */
+ | "wrong-kind"
+/** The supplied search identifier does not match the retained candidate. */
+ | "search-mismatch";
 /**
- * Which request field was rejected before any work was done
+ * Which request field was rejected locally or by the catalog authority
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "CatalogInvalidRequestField".
@@ -602,7 +698,15 @@ export type CatalogInvalidRequestField =
 /** The supplied card was missing its media type, URL, or data. */
  | "card"
 /** The requested configuration scope is not one this runtime writes. */
- | "scope";
+ | "scope"
+/** The pagination token or target was invalid, or the authority rejected the continuation. Repeat the search without page. */
+ | "page"
+/** The locally owned session identifier was missing or malformed. */
+ | "sessionId"
+/** The opaque selection reference was missing or malformed. */
+ | "selectionRef"
+/** The terminal selection outcome was missing or unsupported. */
+ | "outcome";
 /**
  * How a card failed validation
  *
@@ -634,7 +738,9 @@ export type CatalogMediaType =
 /** The legacy MCP server card media type, accepted for compatibility. */
  | "application/mcp-server+json"
 /** An AI skill card. Representable and searchable, but typed non-installable. */
- | "application/ai-skill";
+ | "application/ai-skill"
+/** An inert Agent Plugin descriptor. */
+ | "application/vnd.github.copilot-plugin";
 /**
  * Why capability and protocol-version negotiation refused a caller
  *
@@ -707,6 +813,16 @@ export type McpPlanPolicySource =
  | "registry-policy"
 /** Local trust settings evaluated the server. */
  | "local-trust";
+/**
+ * Relationship of the backend-reported count to the complete query result set.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSearchTotalCountRelation".
+ */
+/** @experimental */
+export type CatalogSearchTotalCountRelation = 
+/** No exact/full-query or lower-bound guarantee is available. */
+"unknown";
 /**
  * Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
  *
@@ -747,10 +863,36 @@ export type CatalogUnavailableReason =
 "search-unavailable"
 /** Install planning is not wired up on this runtime build. */
  | "planning-unavailable"
+/** Exact candidate selection is not available in this session or runtime. */
+ | "selection-unavailable"
 /** No catalog authority is configured for this runtime. */
  | "authority-not-configured"
 /** The surface is disabled by policy on this runtime. */
  | "disabled-by-policy";
+/**
+ * Terminal outcome declared for a retained catalog selection group
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionDecision".
+ */
+/** @experimental */
+export type CatalogSelectionDecision = 
+/** Choose the candidate named by selectionRef. */
+"selected"
+/** Explicitly decline every candidate in the search. */
+ | "declined"
+/** Cancel the selection interaction without choosing a candidate. */
+ | "cancelled"
+/** Declare that the host's live interaction deadline elapsed while the reference remained valid. */
+ | "timed-out";
+/**
+ * Typed outcome of catalog.select. Only the selected host result carries a fresh candidate handle; the model-facing projection removes both that handle and searchId.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionResult".
+ */
+/** @experimental */
+export type CatalogSelectionResult = CatalogSelectionSelected | CatalogSelectionDeclined | CatalogSelectionCancelled | CatalogSelectionTimedOut | CatalogSelectionInvalid | CatalogSelectionStale | CatalogSelectionReplayed | CatalogSelectionForeign | CatalogSelectionWrongKind | CatalogNegotiationRefusedError | CatalogInvalidRequestError | CatalogUnavailableError;
 /**
  * Why no usable transport could be offered
  *
@@ -856,6 +998,106 @@ export type ConnectedRemoteSessionMetadataKind =
 "remote-session"
 /** GitHub Copilot coding agent session. */
  | "coding-agent";
+/**
+ * Stable OAuth scope whose absence prevents Connector management.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorAuthorizationScope".
+ */
+/** @experimental */
+export type ConnectorAuthorizationScope = 
+/** Allows Copilot to manage Connector connections and use their tools. */
+"write_plugin_gateway_connections";
+/**
+ * Availability of the EXPERIMENTAL session connector API.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorAvailability".
+ */
+/** @experimental */
+export type ConnectorAvailability = 
+/** The resolved Connector feature is enabled and Connector requests are permitted. */
+"enabled"
+/** The resolved Connector feature is off. No Connector service request is made while disabled. */
+ | "disabled"
+/** The session has no eligible host-owned GitHub account or does not support local Connector projection. */
+ | "unavailable";
+/**
+ * Authoritative service connection state for one Connector.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorCatalogStatus".
+ */
+/** @experimental */
+export type ConnectorCatalogStatus = 
+/** The Connector is available but not connected. */
+"not_connected"
+/** The Connector service is still completing connection or consent. */
+ | "pending"
+/** The Connector is connected and may contribute MCP servers. */
+ | "connected"
+/** The Connector service reports an unusable connection. */
+ | "error"
+/** The service returned a future or unrecognized state. */
+ | "unknown";
+/**
+ * Typed result of initiating or continuing a Connector connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorConnectResult".
+ */
+/** @experimental */
+export type ConnectorConnectResult = {
+    /**
+     * The service is connected and the session MCP graph was reconciled.
+     */
+    kind: "connected";
+    status: ConnectorStatus;
+} | {
+    /**
+     * Host-owned consent is required before bounded continuation can complete.
+     */
+    kind: "consent_required";
+    /**
+     * Validated HTTPS consent URL. The runtime does not open it.
+     */
+    consentUrl: string;
+    /**
+     * Opaque ID accepted by continueConnection.
+     */
+    continuationId: string;
+} | {
+    /**
+     * The service is still completing the connection without a consent URL.
+     */
+    kind: "pending";
+    /**
+     * Opaque ID accepted by continueConnection.
+     */
+    continuationId: string;
+};
+/**
+ * Live MCP status of one Connector-owned runtime server.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorMcpStatus".
+ */
+/** @experimental */
+export type ConnectorMcpStatus = 
+/** The server is connected and its tools are available. */
+"connected"
+/** The server connection is still being established. */
+ | "pending"
+/** The server requires refreshed GitHub authorization. */
+ | "needs_auth"
+/** The server failed to connect or initialize. */
+ | "failed"
+/** The server is intentionally stopped, including when managed policy blocks it. */
+ | "stopped"
+/** The server is configured but explicitly disabled. */
+ | "disabled"
+/** The Connector currently has no live server configuration. */
+ | "not_configured";
 /**
  * Closed set of public task kinds a connection can negotiate.
  *
@@ -1068,6 +1310,14 @@ export type DiscoveredMcpServerType =
  | "sse"
 /** Server is backed by an in-memory runtime implementation. */
  | "memory";
+/**
+ * Indicates whether the command was accepted into the local execution queue.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnqueueCommandResult".
+ */
+/** @experimental */
+export type EnqueueCommandResult = AcceptedEnqueueCommandResult | UnsupportedEnqueueCommandResult;
 /**
  * Either '*' to receive all event types, or a non-empty list of event types to receive
  *
@@ -3994,72 +4244,275 @@ export type UISessionLimitsExhaustedResponseAction =
 /** Leave the limit unchanged and cancel the blocked model request. */
  | "cancel";
 /**
- * Type of change represented by this file diff.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspaceDiffFileChangeType".
- */
-/** @experimental */
-export type WorkspaceDiffFileChangeType = 
-/** The file was added. */
-"added"
-/** The file was modified. */
- | "modified"
-/** The file was deleted. */
- | "deleted"
-/** The file was renamed. */
- | "renamed";
-/**
- * Diff mode requested by the client.
+ * Execution-critical workflow storage operation.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspaceDiffMode".
+ * via the `definition` "WorkflowDurableOperation".
  */
 /** @experimental */
-export type WorkspaceDiffMode = 
-/** Return staged, unstaged, and untracked working tree changes. */
-"unstaged"
-/** Return changes compared with the default branch. */
- | "branch"
-/** Return the cumulative diff of files Copilot changed this session (used in non-git workspaces). */
- | "session";
+export type WorkflowDurableOperation = 
+/** Creating the durable run and declared phases. */
+"createRun"
+/** Persisting the transition to running. */
+ | "markRunStarted"
+/** Persisting the terminal run envelope. */
+ | "finishRun"
+/** Persisting subagent admission accounting. */
+ | "reserveAgent"
+/** Rolling back an uncommitted subagent admission. */
+ | "releaseAgent"
+/** Persisting an idempotent model-usage charge. */
+ | "chargeCredit"
+/** Persisting active execution time. */
+ | "addElapsed"
+/** Reading the authoritative AI-credit total. */
+ | "reconcileCreditTotal"
+/** Reading a journal entry without treating storage failure as a cache miss. */
+ | "journalGet"
+/** Persisting a journal entry before reporting success. */
+ | "journalPut"
+/** Renewing the durable owner lease that proves this process still owns the run. */
+ | "refreshLease";
 /**
- * Allowed values for the `WorkspacesWorkspaceDetailsHostType` enumeration.
+ * Current or terminal state of a workflow run.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkspacesWorkspaceDetailsHostType".
+ * via the `definition` "WorkflowRunStatus".
  */
 /** @experimental */
-export type WorkspacesWorkspaceDetailsHostType = 
-/** Workspace repository is hosted on GitHub. */
-"github"
-/** Workspace repository is hosted on Azure DevOps. */
- | "ado";
+export type WorkflowRunStatus = 
+/** The run was minted and is awaiting approval. */
+"pending"
+/** The run is executing. */
+ | "running"
+/** The run completed successfully. */
+ | "completed"
+/** The run was interrupted while resource budget remained. */
+ | "halted"
+/** The current attempt stopped intentionally and the run may be resumed. */
+ | "paused"
+/** The run was cancelled before completion. */
+ | "cancelled"
+/** The workflow body failed or reached a cumulative resource ceiling. */
+ | "error";
 /**
- * List of all authenticated users
+ * Machine-readable workflow run failure.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "AccountGetAllUsersResult".
+ * via the `definition` "WorkflowRunFailure".
  */
 /** @experimental */
-export type AccountGetAllUsersResult = AccountAllUsers[];
+export type WorkflowRunFailure = {
+    kind: WorkflowRunFailureKind;
+    /**
+     * Approved effective ceiling that was reached.
+     */
+    value: number;
+    /**
+     * Suggested larger ceiling when the runtime can derive one safely.
+     */
+    suggestedValue?: number;
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Workflow failure variant discriminator.
+     */
+    type: "workflow_limit_reached";
+} | {
+    /**
+     * Workflow run identifier whose changed limits were declined.
+     */
+    runId: string;
+    /**
+     * Human-readable reason the resume did not proceed.
+     */
+    reason: string;
+    /**
+     * Workflow failure variant discriminator.
+     */
+    type: "workflow_resume_declined";
+} | {
+    /**
+     * Stable failure code.
+     */
+    code: string;
+    operation: WorkflowDurableOperation;
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Workflow failure variant discriminator.
+     */
+    type: "workflow_durable_failure";
+} | {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Confirmed usage in nano-AIU, representing the floor of what the run spent.
+     */
+    drainedNanoAiu: number;
+    /**
+     * Workflow failure variant discriminator.
+     */
+    type: "workflow_accounting_incomplete";
+} | {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Workflow failure variant discriminator.
+     */
+    type: "workflow_provider_disconnected";
+};
 /**
- * The number of running background agents (task-registry agents) that were cancelled.
+ * Cumulative resource ceiling that stopped a workflow run.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionCancelAllBackgroundAgentsResult".
+ * via the `definition` "WorkflowRunFailureKind".
  */
 /** @experimental */
-export type SessionCancelAllBackgroundAgentsResult = number;
+export type WorkflowRunFailureKind = 
+/** The run admitted the approved maximum total number of subagents. */
+"maxTotalSubagents"
+/** The run reached the approved accumulated active-execution time in seconds. */
+ | "timeoutSeconds"
+/** The run's settled subagent model usage exceeded the approved AI-credit ceiling, or no headroom remained for another subagent. */
+ | "maxAiCredits";
 /**
- * Authentication accounts available to the internal session host.
+ * Durable metadata describing who initiated a workflow pause.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionGitHubAuthGetAllAuthAvailableResult".
+ * via the `definition` "WorkflowPauseInfo".
  */
 /** @experimental */
-export type SessionGitHubAuthGetAllAuthAvailableResult = SessionAuthStatus[];
-/**
+export type WorkflowPauseInfo = {
+    /**
+     * Workflow pause initiator discriminator.
+     */
+    type: "user";
+} | {
+    /**
+     * Stable author-defined checkpoint key that initiated the pause.
+     */
+    key: string;
+    /**
+     * Workflow pause initiator discriminator.
+     */
+    type: "checkpoint";
+};
+/**
+ * Kind of workflow progress line.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowLogLineKind".
+ */
+/** @experimental */
+export type WorkflowLogLineKind = 
+/** A narrator log line. */
+"log"
+/** A named workflow phase marker. */
+ | "phase";
+/**
+ * Action the runtime selected for a durable workflow pause checkpoint.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowPauseCheckpointAction".
+ */
+/** @experimental */
+export type WorkflowPauseCheckpointAction = 
+/** The checkpoint was committed by a prior paused attempt, so execution may continue. */
+"continue"
+/** This attempt claimed the checkpoint and must cooperatively stop. */
+ | "pause";
+/**
+ * Derived lifecycle state of a workflow phase.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowPhaseStatus".
+ */
+/** @experimental */
+export type WorkflowPhaseStatus = 
+/** The phase has not been entered yet. */
+"pending"
+/** The phase is currently entered and accumulating active time. */
+ | "active"
+/** The phase was entered and has since been closed. */
+ | "completed"
+/** The phase was never entered because a later phase was entered or the run reached a terminal state. */
+ | "skipped";
+/**
+ * Type of change represented by this file diff.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspaceDiffFileChangeType".
+ */
+/** @experimental */
+export type WorkspaceDiffFileChangeType = 
+/** The file was added. */
+"added"
+/** The file was modified. */
+ | "modified"
+/** The file was deleted. */
+ | "deleted"
+/** The file was renamed. */
+ | "renamed";
+/**
+ * Diff mode requested by the client.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspaceDiffMode".
+ */
+/** @experimental */
+export type WorkspaceDiffMode = 
+/** Return staged, unstaged, and untracked working tree changes. */
+"unstaged"
+/** Return changes compared with the default branch. */
+ | "branch"
+/** Return the cumulative diff of files Copilot changed this session (used in non-git workspaces). */
+ | "session";
+/**
+ * Allowed values for the `WorkspacesWorkspaceDetailsHostType` enumeration.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesWorkspaceDetailsHostType".
+ */
+/** @experimental */
+export type WorkspacesWorkspaceDetailsHostType = 
+/** Workspace repository is hosted on GitHub. */
+"github"
+/** Workspace repository is hosted on Azure DevOps. */
+ | "ado";
+/**
+ * List of all authenticated users
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AccountGetAllUsersResult".
+ */
+/** @experimental */
+export type AccountGetAllUsersResult = AccountAllUsers[];
+/**
+ * The number of running background agents (task-registry agents) that were cancelled.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionCancelAllBackgroundAgentsResult".
+ */
+/** @experimental */
+export type SessionCancelAllBackgroundAgentsResult = number;
+/**
+ * Authentication accounts available to the internal session host.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionGitHubAuthGetAllAuthAvailableResult".
+ */
+/** @experimental */
+export type SessionGitHubAuthGetAllAuthAvailableResult = SessionAuthStatus[];
+/**
  * Whether the current authentication was logged out.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
@@ -4102,6 +4555,17 @@ export interface AbortResult {
      */
     error?: string;
 }
+/** @experimental */
+export interface AcceptedEnqueueCommandResult {
+    /**
+     * True because the command was accepted into the local execution queue.
+     */
+    queued: true;
+    /**
+     * Stable opaque ID of the queued command.
+     */
+    queueId: string;
+}
 /**
  * Authenticated account entry returned by `account.getAllUsers`.
  *
@@ -4212,6 +4676,15 @@ export interface CopilotUserResponse {
             [k: string]: unknown | undefined;
         } | string) | null;
     } | null)[]) | null;
+    /**
+     * Enterprises that provide the user's Copilot license; malformed entries are normalized to null or ID-less shapes.
+     */
+    enterprise_list?: ({
+        /**
+         * JavaScript-safe numeric database ID of the enterprise.
+         */
+        id?: number;
+    } | null)[] | null;
     /**
      * Whether the Codex agent is enabled for the user.
      */
@@ -4845,7 +5318,7 @@ export interface AgentGetCurrentResult {
     agent?: AgentInfo | null;
 }
 /**
- * Agent metadata, including identifiers, display details, source, tools, model, models, MCP servers, skills, and file path.
+ * Agent metadata, including identifiers, display details, source, tools, model, models, reasoning effort, MCP servers, skills, and file path.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AgentInfo".
@@ -4894,6 +5367,10 @@ export interface AgentInfo {
      */
     models?: string[];
     modelPolicy?: AgentModelPolicy;
+    /**
+     * Authored reasoning effort for this agent. Applied on selection to models that support it; omitted means no authored preference.
+     */
+    reasoningEffort?: string;
     /**
      * MCP server configurations attached to this agent, keyed by server name. Server config shape mirrors the MCP `mcpServers` schema.
      *
@@ -4990,7 +5467,7 @@ export interface AgentRegistryLiveTargetEntry {
     lastSeenMs: number;
 }
 /**
- * Per-spawn log-capture outcome; populated from spawnLiveTarget.
+ * Canonical process-log discovery outcome; populated from spawnLiveTarget.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AgentRegistryLogCapture".
@@ -4998,15 +5475,15 @@ export interface AgentRegistryLiveTargetEntry {
 /** @experimental */
 export interface AgentRegistryLogCapture {
     /**
-     * Whether per-spawn log capture is on (false when env-disabled or open failed)
+     * Whether a canonical process log was discovered for this managed spawn
      */
     enabled: boolean;
     /**
-     * Absolute path to the per-spawn log file (only set when enabled)
+     * Absolute path to the managed spawn's process-<timestamp>-<pid>.log file (only set when enabled)
      */
     path?: string;
     /**
-     * Human-readable open failure message (only set when enabled === false AND the env-disable opt-out was NOT used)
+     * Why no canonical process log could be opened for this managed spawn (set only when enabled is false)
      */
     openError?: string;
     openErrorReason?: AgentRegistryLogCaptureOpenErrorReason;
@@ -5849,33 +6326,17 @@ export interface CardDigest {
     value: CardDigestValue;
 }
 /**
- * An inert AI skill catalog result. AI skills are discovery-only and cannot be represented as installable through this surface.
+ * An inert Agent Plugin catalog result. Its canonical catalog identity, declared version, repository source claim, and explicit compatibility tags are safe to correlate, while its descriptor, URL, raw data, and installed-plugin state remain runtime-private. This contract-only variant does not mint or expose a candidate handle.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogAiSkillCandidate".
+ * via the `definition` "CatalogAgentPluginCandidate".
  */
 /** @experimental */
-export interface CatalogAiSkillCandidate {
-    /**
-     * Opaque, runtime-instance scoped, TTL-bound, single-use handle for this candidate. Carries no readable information and is rejected when stale, replayed, or presented to a different runtime instance. Never logged.
-     */
-    handle: string;
-    /**
-     * ISO 8601 timestamp after which the handle is stale and will be rejected.
-     */
-    handleExpiresAt: string;
-    /**
-     * Discriminator: this candidate describes an AI skill
-     */
-    kind: "ai-skill";
-    /**
-     * Media type of the underlying AI skill card
-     */
-    mediaType: "application/ai-skill";
-    /**
-     * AI skills are discovery-only and cannot be installed through this surface
-     */
-    installability: "not-installable-kind";
+export interface CatalogAgentPluginCandidate {
+    kind: CatalogAgentPluginCandidateKind;
+    mediaType: CatalogAgentPluginMediaType;
+    identity: CatalogResourceIdentity;
+    version?: CatalogResourceVersion;
     /**
      * Display name taken verbatim from the card. Inert untrusted text.
      */
@@ -5888,48 +6349,43 @@ export interface CatalogAiSkillCandidate {
      * Publisher taken verbatim from the card. Inert untrusted text.
      */
     publisher?: string;
-    source: CatalogCandidateSource;
-    provenance: CatalogAiSkillCandidateProvenance;
+    source: CatalogPluginRepositorySource;
+    /**
+     * Explicit validated compatibility tags, in canonical order. An empty list means the source declared no recognised compatibility; clients must not infer compatibility from other fields. `canvas-only` requires both `canvas` and `github-copilot`.
+     *
+     * @maxItems 3
+     */
+    compatibilityTags: ({
+        [k: string]: unknown | undefined;
+    } & []) | [CatalogAgentPluginCompatibilityTag] | [CatalogAgentPluginCompatibilityTag, CatalogAgentPluginCompatibilityTag] | [CatalogAgentPluginCompatibilityTag, CatalogAgentPluginCompatibilityTag, CatalogAgentPluginCompatibilityTag];
+    provenance: CatalogAgentPluginCandidateProvenance;
     trust?: CatalogTrustSnapshot;
 }
 /**
- * Candidate whose card is retrieved from a URL through the runtime's hardened fetch boundary.
+ * Syntactically validated GitHub repository provenance declared by catalog metadata. This is a source claim rather than proof that the descriptor URL resolves to the repository.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogCandidateSourceUrl".
+ * via the `definition` "CatalogPluginRepositorySource".
  */
 /** @experimental */
-export interface CatalogCandidateSourceUrl {
-    /**
-     * Discriminator: the card is URL-backed, and carries no embedded data
-     */
-    kind: "url";
+export interface CatalogPluginRepositorySource {
     /**
-     * Card URL as advertised. Inert untrusted data: the runtime retrieves it only through its own hardened boundary, and it is never logged.
+     * Canonical lowercase owner/repository name derived from metadata.sourceSet.
      */
-    url: string;
-}
-/**
- * Candidate whose card reference arrived inline. The document and its content-derived properties stay behind the runtime boundary.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogCandidateSourceEmbedded".
- */
-/** @experimental */
-export interface CatalogCandidateSourceEmbedded {
+    repository: string;
     /**
-     * Discriminator: the card is embedded, and carries no URL
+     * Case-preserving safe relative POSIX path derived from metadata.repoPath.
      */
-    kind: "embedded";
+    path: string;
 }
 /**
- * Where and when an AI skill catalog reference was observed. Discovery provenance deliberately carries no content digest because search does not establish the exact validated content a later plan will bind.
+ * Where and when an Agent Plugin catalog reference was observed. Discovery provenance deliberately carries no descriptor URL, raw data, candidate handle, or content digest.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogAiSkillCandidateProvenance".
+ * via the `definition` "CatalogAgentPluginCandidateProvenance".
  */
 /** @experimental */
-export interface CatalogAiSkillCandidateProvenance {
+export interface CatalogAgentPluginCandidateProvenance {
     /**
      * Host of the catalog authority that advertised the reference, without path, query, or credentials. Inert untrusted data.
      */
@@ -5938,10 +6394,7 @@ export interface CatalogAiSkillCandidateProvenance {
      * ISO 8601 timestamp at which the runtime observed the catalog reference. This is not a retrieval or validation timestamp.
      */
     observedAt: string;
-    /**
-     * Media type advertised for the referenced AI skill card
-     */
-    mediaType: "application/ai-skill";
+    mediaType: CatalogAgentPluginMediaType;
 }
 /**
  * A recognised current Agent Finder T1 or T2 trust tier.
@@ -6049,6 +6502,89 @@ export interface CatalogTrustSnapshotMalformed {
     eligibility: CatalogTrustEligibility;
     provenance: CatalogTrustProvenance;
 }
+/**
+ * An inert AI skill catalog result. AI skills are discovery-only and cannot be represented as installable through this surface.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAiSkillCandidate".
+ */
+/** @experimental */
+export interface CatalogAiSkillCandidate {
+    /**
+     * Opaque, runtime-instance scoped, TTL-bound, single-use handle for this candidate. Carries no readable information and is rejected when stale, replayed, or presented to a different runtime instance. Never logged.
+     */
+    handle: string;
+    /**
+     * ISO 8601 timestamp after which the handle is stale and will be rejected.
+     */
+    handleExpiresAt: string;
+    kind: CatalogAiSkillCandidateKind;
+    mediaType: CatalogAiSkillMediaType;
+    installability: CatalogAiSkillInstallability;
+    /**
+     * Display name taken verbatim from the card. Inert untrusted text.
+     */
+    displayName: string;
+    /**
+     * Description taken verbatim from the card. Inert untrusted text.
+     */
+    description?: string;
+    /**
+     * Publisher taken verbatim from the card. Inert untrusted text.
+     */
+    publisher?: string;
+    source: CatalogCandidateSource;
+    provenance: CatalogAiSkillCandidateProvenance;
+    trust?: CatalogTrustSnapshot;
+}
+/**
+ * Candidate whose card is retrieved from a URL through the runtime's hardened fetch boundary.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogCandidateSourceUrl".
+ */
+/** @experimental */
+export interface CatalogCandidateSourceUrl {
+    /**
+     * Discriminator: the card is URL-backed, and carries no embedded data
+     */
+    kind: "url";
+    /**
+     * Card URL as advertised. Inert untrusted data: the runtime retrieves it only through its own hardened boundary, and it is never logged.
+     */
+    url: string;
+}
+/**
+ * Candidate whose card reference arrived inline. The document and its content-derived properties stay behind the runtime boundary.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogCandidateSourceEmbedded".
+ */
+/** @experimental */
+export interface CatalogCandidateSourceEmbedded {
+    /**
+     * Discriminator: the card is embedded, and carries no URL
+     */
+    kind: "embedded";
+}
+/**
+ * Where and when an AI skill catalog reference was observed. Discovery provenance deliberately carries no content digest because search does not establish the exact validated content a later plan will bind.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogAiSkillCandidateProvenance".
+ */
+/** @experimental */
+export interface CatalogAiSkillCandidateProvenance {
+    /**
+     * Host of the catalog authority that advertised the reference, without path, query, or credentials. Inert untrusted data.
+     */
+    authority: string;
+    /**
+     * ISO 8601 timestamp at which the runtime observed the catalog reference. This is not a retrieval or validation timestamp.
+     */
+    observedAt: string;
+    mediaType: CatalogAiSkillMediaType;
+}
 /**
  * An optional catalog authentication exchange did not establish the caller's identity. Anonymous search remains supported; this refusal is reserved for an operation that cannot continue after the attempted exchange. It is distinct from `policy-rejected` and from a network failure, and the reason identifies the recovery action.
  *
@@ -6083,10 +6619,7 @@ export interface CatalogMcpServerCandidate {
      * ISO 8601 timestamp after which the handle is stale and will be rejected.
      */
     handleExpiresAt: string;
-    /**
-     * Discriminator: this candidate describes an MCP server
-     */
-    kind: "mcp-server";
+    kind: CatalogMcpServerCandidateKind;
     mediaType: McpServerCardMediaType;
     installability: CatalogMcpServerInstallability;
     /**
@@ -6180,7 +6713,7 @@ export interface CatalogHandleRejectedError {
     message: string;
 }
 /**
- * The request was rejected before any work was done, because a bounded field fell outside its permitted range or a required field was unusable.
+ * The request was rejected because a bounded field fell outside its permitted range or a required field was unusable. Pagination may also be rejected by the authority after a continuation request; repeat the search without page.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "CatalogInvalidRequestError".
@@ -6229,7 +6762,7 @@ export interface CatalogNegotiatedContract {
      */
     runtimeProtocolVersion: number;
     /**
-     * Wire features the runtime understood for this operation. Always a superset of the caller's required features, because any shortfall is a refusal instead. Operation availability remains a separate typed result.
+     * Wire features the runtime understood for this operation. Includes the five original catalog capabilities and only explicitly requested supported additions, in supported order without duplicates. Capabilities that introduce new success-union variants or operations are therefore included only when explicitly required, preserving older protocol-v3 clients. Always a superset of the caller's required features, because any shortfall is a refusal instead. Operation availability remains a separate typed result.
      */
     grantedCapabilities: CatalogCapability[];
 }
@@ -6334,13 +6867,68 @@ export interface CatalogPolicyRejectedError {
     message: string;
 }
 /**
- * A bounded catalog search. Both the query length and the result count are capped by the schema so a caller cannot request an unbounded scan.
+ * An explicit numbered-page request. The SDK treats the token as opaque; only the runtime decodes it and changes its targetPage. Authority validation binds navigation to the original search. No snapshot stability or token TTL is promised.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogSearchRequest".
+ * via the `definition` "CatalogSearchPage".
  */
 /** @experimental */
-export interface CatalogSearchRequest {
+export interface CatalogSearchPage {
+    /**
+     * Opaque authority-issued pagination token from an earlier response. Never decode, modify or log it in an SDK consumer.
+     */
+    token: string;
+    /**
+     * Requested one-based page. Must not exceed either the token's signed pageCount or the navigation window ceil(1000 / pageSize). Repeat the search without page to discover newly available pages beyond that signed pageCount.
+     */
+    number: number;
+}
+/**
+ * Authority-reported navigation metadata, returned only to callers requiring catalog-search-pagination and only when a supported token is present. Tokenless first-page and continuation responses omit this object; no counts are inferred from candidates. The opaque token may be retained for previous or numbered navigation even when hasNextPage is false.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSearchPagination".
+ */
+/** @experimental */
+export interface CatalogSearchPagination {
+    /**
+     * Opaque authority-issued pagination token. Only the runtime decodes it or changes targetPage; SDK consumers must not decode, modify or log it. It has no runtime-created expiry or cache.
+     */
+    token: string;
+    /**
+     * One-based page returned by the authority.
+     */
+    currentPage: number;
+    /**
+     * Page size bound to the search, equal to the effective request limit.
+     */
+    pageSize: number;
+    /**
+     * Backend-reported count for this response, not the number of returned candidates. Its relationship to the full query result set is unknown.
+     */
+    totalCount: number;
+    totalCountRelation: CatalogSearchTotalCountRelation;
+    /**
+     * Backend-reported page count, which may exceed maxPage. Present pagination metadata always describes a multi-page result; zero- and single-page responses omit pagination. Navigation targets must also be within the signed pageCount carried by the supplied token.
+     */
+    pageCount: number;
+    /**
+     * Navigation window ceiling ceil(1000 / pageSize), not the number of existing pages. Legal targets must not exceed this ceiling or the token's signed pageCount.
+     */
+    maxPage: number;
+    /**
+     * Whether the authority token advertises a valid next target within the navigation window. Not inferred from token presence, truncated, or currentPage being less than pageCount.
+     */
+    hasNextPage: boolean;
+}
+/**
+ * A bounded catalog search. Both the query length and the result count are capped by the schema so a caller cannot request an unbounded scan.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSearchRequest".
+ */
+/** @experimental */
+export interface CatalogSearchRequest {
     contract: CatalogClientContract;
     /**
      * Free-text search query. Persisted as tool input for session continuity, but omitted from telemetry.
@@ -6351,15 +6939,16 @@ export interface CatalogSearchRequest {
      */
     limit?: number;
     /**
-     * Restrict results to these candidate kinds. When omitted, every kind the runtime supports is searched.
+     * Restrict results to these candidate kinds. Agent Plugins are opt-in and require the `agent-plugin-discovery` capability so protocol-v3 clients generated before that variant cannot receive an unknown result; when omitted, the backwards-compatible MCP server and AI skill kinds are searched.
      *
      * @minItems 1
-     * @maxItems 2
+     * @maxItems 3
      */
-    kinds?: [CatalogCandidateKind] | [CatalogCandidateKind, CatalogCandidateKind];
+    kinds?: [CatalogCandidateKind] | [CatalogCandidateKind, CatalogCandidateKind] | [CatalogCandidateKind, CatalogCandidateKind, CatalogCandidateKind];
+    page?: CatalogSearchPage;
 }
 /**
- * A completed catalog search: inert candidate summaries, each carrying a single-use handle.
+ * A completed catalog search containing inert candidate summaries. MCP server and AI skill variants carry a single-use handle; the Agent Plugin variant is handleless.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "CatalogSearchSucceeded".
@@ -6381,10 +6970,11 @@ export interface CatalogSearchSucceeded {
      */
     candidates: CatalogCandidate[];
     /**
-     * Whether further matches existed beyond the requested limit.
+     * Legacy indication that the authority returned a page token. Preserved for compatibility; this is not a has-next-page indicator. Use pagination.hasNextPage when pagination metadata is present.
      */
     truncated: boolean;
     negotiated: CatalogNegotiatedContract;
+    pagination?: CatalogSearchPagination;
 }
 /**
  * The request asked for a candidate kind this runtime does not serve.
@@ -6447,6 +7037,182 @@ export interface CatalogUnavailableError {
      */
     message: string;
 }
+/**
+ * The caller cancelled the selection interaction and the retained search state was released.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionCancelled".
+ */
+/** @experimental */
+export interface CatalogSelectionCancelled {
+    /**
+     * Discriminator: selection was cancelled
+     */
+    kind: "cancelled";
+    /**
+     * The search identifier privately bound to the released selection group.
+     */
+    searchId: string;
+}
+/**
+ * The caller explicitly declined every candidate and the retained search state was released.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionDeclined".
+ */
+/** @experimental */
+export interface CatalogSelectionDeclined {
+    /**
+     * Discriminator: the candidates were declined
+     */
+    kind: "declined";
+    /**
+     * The search identifier privately bound to the released selection group.
+     */
+    searchId: string;
+}
+/**
+ * The selection reference belongs to another runtime instance or session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionForeign".
+ */
+/** @experimental */
+export interface CatalogSelectionForeign {
+    /**
+     * Discriminator for this typed selection rejection
+     */
+    kind: "foreign";
+    /**
+     * Human-readable explanation safe to surface. Never contains the presented reference or private candidate state.
+     */
+    message: string;
+}
+/**
+ * The selection reference was malformed or unknown.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionInvalid".
+ */
+/** @experimental */
+export interface CatalogSelectionInvalid {
+    /**
+     * Discriminator for this typed selection rejection
+     */
+    kind: "invalid";
+    /**
+     * Human-readable explanation safe to surface. Never contains the presented reference or private candidate state.
+     */
+    message: string;
+}
+/**
+ * The selection group was already terminated or its pending host hand-off was already claimed.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionReplayed".
+ */
+/** @experimental */
+export interface CatalogSelectionReplayed {
+    /**
+     * Discriminator for this typed selection rejection
+     */
+    kind: "replayed";
+    /**
+     * Human-readable explanation safe to surface. Never contains the presented reference or private candidate state.
+     */
+    message: string;
+}
+/**
+ * Terminates one retained catalog selection group through an opaque reference previously returned by the model-safe search projection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionRequest".
+ */
+/** @experimental */
+export interface CatalogSelectionRequest {
+    contract: CatalogClientContract;
+    /**
+     * Locally owned root session whose retained search state is being resolved.
+     */
+    sessionId: string;
+    /**
+     * Opaque runtime-instance scoped reference to one visible candidate. For a non-selected outcome, any candidate reference from the same search closes that search's retained group.
+     */
+    selectionRef: string;
+    outcome: CatalogSelectionDecision;
+}
+/**
+ * The chosen candidate was transferred into a fresh bounded single-use handle for a later explicit planning request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionSelected".
+ */
+/** @experimental */
+export interface CatalogSelectionSelected {
+    /**
+     * Discriminator: one candidate was selected
+     */
+    kind: "selected";
+    /**
+     * Fresh single-use candidate handle accepted by mcp.planInstall. Returned only to the native host and never included in model-tool output.
+     */
+    candidateHandle: string;
+    /**
+     * The exact search identifier privately bound to the selected candidate.
+     */
+    searchId: string;
+}
+/**
+ * The host declared that its live selection interaction timed out, and the retained search state was released.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionTimedOut".
+ */
+/** @experimental */
+export interface CatalogSelectionTimedOut {
+    /**
+     * Discriminator: the host's live interaction timed out
+     */
+    kind: "timed-out";
+    /**
+     * The search identifier privately bound to the released selection group.
+     */
+    searchId: string;
+}
+/**
+ * The runtime-enforced selection reference lifetime elapsed before the request arrived.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionStale".
+ */
+/** @experimental */
+export interface CatalogSelectionStale {
+    /**
+     * Discriminator for this typed selection rejection
+     */
+    kind: "stale";
+    /**
+     * Human-readable explanation safe to surface. Never contains the presented reference or private candidate state.
+     */
+    message: string;
+}
+/**
+ * The presented opaque handle was issued for another catalog operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSelectionWrongKind".
+ */
+/** @experimental */
+export interface CatalogSelectionWrongKind {
+    /**
+     * Discriminator for this typed selection rejection
+     */
+    kind: "wrong-kind";
+    /**
+     * Human-readable explanation safe to surface. Never contains the presented reference or private candidate state.
+     */
+    message: string;
+}
 /**
  * No transport this runtime can use is available for the requested server.
  *
@@ -6882,187 +7648,414 @@ export interface ConnectedRemoteSessionMetadataRepository {
     branch: string;
 }
 /**
- * Remote session connection parameters.
+ * Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ConnectRemoteSessionParams".
+ * via the `definition` "ConnectorAccountRequest".
  */
 /** @experimental */
-export interface ConnectRemoteSessionParams {
+export interface ConnectorAccountRequest {
     /**
-     * Session ID to connect to.
+     * Opaque account selection ID previously returned by an account discovery API.
      */
-    sessionId: string;
+    accountId: string;
 }
 /**
- * Local file system absolute paths within the session working directory to check against its content-exclusion policy.
+ * Account-targeted authorization update required by the Connector service. The account ID is an opaque host routing identifier; no credential is included.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ContentExclusionCheckPathsRequest".
+ * via the `definition` "ConnectorAuthorizationRequirement".
  */
 /** @experimental */
-export interface ContentExclusionCheckPathsRequest {
+export interface ConnectorAuthorizationRequirement {
     /**
-     * Local file system absolute paths within the session working directory to check. Results are returned in the same order, including duplicates.
+     * Exact opaque account selection that made the Connector request.
      */
-    paths: string[];
+    accountId: string;
+    scope: ConnectorAuthorizationScope;
 }
 /**
- * Batch content-exclusion result. Callers must fail closed when policy evaluation is unavailable.
+ * Feature detection and hard polling limits for the EXPERIMENTAL session connector API.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ContentExclusionCheckPathsResult".
+ * via the `definition` "ConnectorCapabilities".
  */
 /** @experimental */
-export interface ContentExclusionCheckPathsResult {
+export interface ConnectorCapabilities {
     /**
-     * Whether the session's policy service was available for the complete batch. When false, checks is empty and callers must treat every requested path as excluded.
+     * Connector API contract version.
      */
-    available: boolean;
+    apiVersion: number;
+    availability: ConnectorAvailability;
     /**
-     * Per-path decisions in request order. Empty when available is false.
+     * Whether connect and reconnect can return an opaque continuation for bounded consent polling.
      */
-    checks: ContentExclusionPathCheck[];
-}
-/**
- * Content-exclusion decision for one requested path.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ContentExclusionPathCheck".
- */
-/** @experimental */
-export interface ContentExclusionPathCheck {
+    consentContinuation: boolean;
     /**
-     * The path supplied by the caller.
+     * Whether callers select a host-owned GitHub account through an opaque selection ID rather than supplying a provider token.
      */
-    path: string;
+    opaqueAccountSelection: boolean;
     /**
-     * Whether the session's complete content-exclusion policy excludes the path.
+     * Maximum accepted polling attempts for one continuation call.
      */
-    excluded: boolean;
+    maxPollAttempts: number;
+    /**
+     * Maximum accepted delay in milliseconds between polling attempts.
+     */
+    maxPollIntervalMs: number;
+    /**
+     * Maximum accepted wall-clock deadline in milliseconds for one continuation call.
+     */
+    maxDeadlineMs: number;
 }
 /**
- * A single large message currently in context.
+ * Credential-free Connector catalog entry.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ContextHeaviestMessage".
+ * via the `definition` "ConnectorCatalogEntry".
  */
 /** @experimental */
-export interface ContextHeaviestMessage {
+export interface ConnectorCatalogEntry {
     /**
-     * Stable identifier for this message within the snapshot.
+     * Canonical Connector name used by lifecycle methods.
      */
-    id: string;
+    name: string;
     /**
-     * Human-readable source label, e.g. `tool: bash` or `skill: tmux`. Presentation-only.
+     * Untrusted display label from the service.
      */
-    label: string;
+    displayName: string;
     /**
-     * Role of the chat message (`user`, `assistant`, or `tool`).
+     * Untrusted service description, when present.
      */
-    role: string;
+    description?: string;
+    status: ConnectorCatalogStatus;
     /**
-     * Token count currently in context for this individual message.
+     * Opaque stable runtime IDs currently projected into the session for this Connector.
      */
-    tokens: number;
+    runtimeServerIds: string[];
 }
 /**
- * The session's authoritative model snapshot. Auto preference fields are configuration for the virtual `auto` model and do not change the selected model identifier. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume.
+ * Validated Connector catalog snapshot cached by the session.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CurrentModel".
+ * via the `definition` "ConnectorCatalogResult".
  */
 /** @experimental */
-export interface CurrentModel {
-    /**
-     * Currently active model identifier
-     */
-    modelId?: string;
+export interface ConnectorCatalogResult {
     /**
-     * Reasoning effort level currently applied to the active model, when one is set. Reads `Session.getReasoningEffort()` synchronously after `getSelectedModel()` resolves so the two values are reported as a snapshot.
+     * Monotonically increasing session-local catalog revision.
      */
-    reasoningEffort?: string;
-    contextTier?: ContextTier;
-    autoTier?: AutoTier;
+    revision: number;
     /**
-     * Latest unclaimed Auto preference waiting for a future user turn. Null means the pending request is returning to provider-default routing.
+     * Unix epoch milliseconds when this snapshot was accepted.
      */
-    pendingAutoTier?: AutoTier | null;
+    refreshedAtMs: number;
     /**
-     * Auto preference currently claimed by an in-progress activation. Null means the activation is returning to provider-default routing.
+     * Validated catalog entries in service order.
      */
-    activatingAutoTier?: AutoTier | null;
+    connectors: ConnectorCatalogEntry[];
 }
 /**
- * Lightweight metadata for a currently initialized session tool
+ * Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CurrentToolMetadata".
+ * via the `definition` "ConnectorConnectRequest".
  */
 /** @experimental */
-export interface CurrentToolMetadata {
-    /**
-     * Model-facing tool name
-     */
-    name: string;
+export interface ConnectorConnectRequest {
     /**
-     * Optional MCP/config namespaced tool name
+     * Opaque account selection ID. It must match the account already pinned to the session, if any.
      */
-    namespacedName?: string;
+    accountId: string;
     /**
-     * MCP server name for MCP-backed tools
+     * Canonical Connector name from the current catalog.
      */
-    mcpServerName?: string;
+    connectorName: string;
+}
+/**
+ * Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorStatus".
+ */
+/** @experimental */
+export interface ConnectorStatus {
     /**
-     * Raw MCP tool name for MCP-backed tools
+     * Connector API contract version.
      */
-    mcpToolName?: string;
+    apiVersion: number;
+    availability: ConnectorAvailability;
     /**
-     * Tool description
+     * Opaque account selection pinned to this session, when one has been selected.
      */
-    description: string;
+    accountId?: string;
+    catalog?: ConnectorCatalogResult;
+    authorizationRequirement?: ConnectorAuthorizationRequirement;
     /**
-     * JSON Schema for tool input
+     * Live MCP status for every Connector-owned runtime server.
      */
-    input_schema?: {
-        [k: string]: JsonValue | undefined;
-    };
+    runtimeServers: ConnectorRuntimeStatus[];
     /**
-     * Whether the tool is loaded on demand via tool search
+     * Number of active opaque connection continuations.
      */
-    deferLoading?: boolean;
+    pendingConnections: number;
 }
 /**
- * A file included in the session debug bundle.
+ * Live status of one session-owned MCP projection.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "DebugCollectLogsCollectedEntry".
+ * via the `definition` "ConnectorRuntimeStatus".
  */
 /** @experimental */
-export interface DebugCollectLogsCollectedEntry {
+export interface ConnectorRuntimeStatus {
     /**
-     * Relative path of the file in the staged bundle/archive.
+     * Opaque runtime server ID.
      */
-    bundlePath: string;
-    source: DebugCollectLogsSource;
+    runtimeServerId: string;
     /**
-     * Redacted output size in bytes.
+     * Canonical Connector name that owns this server.
      */
-    sizeBytes: number;
+    connectorName: string;
+    status: ConnectorMcpStatus;
 }
 /**
- * A caller-provided server-local file or directory to include in the debug bundle.
+ * Explicitly bounded continuation of a pending Connector connection.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "DebugCollectLogsEntry".
+ * via the `definition` "ConnectorContinueRequest".
  */
 /** @experimental */
-export interface DebugCollectLogsEntry {
-    kind: DebugCollectLogsEntryKind;
+export interface ConnectorContinueRequest {
     /**
-     * Server-local source path to read.
+     * Opaque continuation ID returned by connect, reconnect, or an earlier continuation.
      */
-    path: string;
+    continuationId: string;
+    /**
+     * Maximum catalog requests made by this call. Must be between one and the capability limit.
+     */
+    maxAttempts: number;
+    /**
+     * Delay in milliseconds between attempts. Must not exceed the capability limit.
+     */
+    pollIntervalMs: number;
+    /**
+     * Maximum wall-clock duration in milliseconds for this call. Must be between one and the capability limit.
+     */
+    deadlineMs: number;
+}
+/**
+ * Authoritative result after disconnect and MCP reconciliation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDisconnectResult".
+ */
+/** @experimental */
+export interface ConnectorDisconnectResult {
+    /**
+     * Whether the service accepted the idempotent disconnect.
+     */
+    disconnected: boolean;
+    status: ConnectorStatus;
+}
+/**
+ * Requests authoritative Connector-to-MCP reconciliation for the pinned account.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorReconcileRequest".
+ */
+/** @experimental */
+export interface ConnectorReconcileRequest {
+    /**
+     * Opaque account selection ID. It must match the account already pinned to the session, if any.
+     */
+    accountId: string;
+    /**
+     * When true, refresh the catalog before reconciling. A disabled Connector API performs no service request.
+     */
+    refreshCatalog?: boolean;
+}
+/**
+ * Remote session connection parameters.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectRemoteSessionParams".
+ */
+/** @experimental */
+export interface ConnectRemoteSessionParams {
+    /**
+     * Session ID to connect to.
+     */
+    sessionId: string;
+}
+/**
+ * Local file system absolute paths within the session working directory to check against its content-exclusion policy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ContentExclusionCheckPathsRequest".
+ */
+/** @experimental */
+export interface ContentExclusionCheckPathsRequest {
+    /**
+     * Local file system absolute paths within the session working directory to check. Results are returned in the same order, including duplicates.
+     */
+    paths: string[];
+}
+/**
+ * Batch content-exclusion result. Callers must fail closed when policy evaluation is unavailable.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ContentExclusionCheckPathsResult".
+ */
+/** @experimental */
+export interface ContentExclusionCheckPathsResult {
+    /**
+     * Whether the session's policy service was available for the complete batch. When false, checks is empty and callers must treat every requested path as excluded.
+     */
+    available: boolean;
+    /**
+     * Per-path decisions in request order. Empty when available is false.
+     */
+    checks: ContentExclusionPathCheck[];
+}
+/**
+ * Content-exclusion decision for one requested path.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ContentExclusionPathCheck".
+ */
+/** @experimental */
+export interface ContentExclusionPathCheck {
+    /**
+     * The path supplied by the caller.
+     */
+    path: string;
+    /**
+     * Whether the session's complete content-exclusion policy excludes the path.
+     */
+    excluded: boolean;
+}
+/**
+ * A single large message currently in context.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ContextHeaviestMessage".
+ */
+/** @experimental */
+export interface ContextHeaviestMessage {
+    /**
+     * Stable identifier for this message within the snapshot.
+     */
+    id: string;
+    /**
+     * Human-readable source label, e.g. `tool: bash` or `skill: tmux`. Presentation-only.
+     */
+    label: string;
+    /**
+     * Role of the chat message (`user`, `assistant`, or `tool`).
+     */
+    role: string;
+    /**
+     * Token count currently in context for this individual message.
+     */
+    tokens: number;
+}
+/**
+ * The session's authoritative model snapshot. Auto preference fields are configuration for the virtual `auto` model and do not change the selected model identifier. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CurrentModel".
+ */
+/** @experimental */
+export interface CurrentModel {
+    /**
+     * Currently active model identifier
+     */
+    modelId?: string;
+    /**
+     * Reasoning effort level currently applied to the active model, when one is set. Reads `Session.getReasoningEffort()` synchronously after `getSelectedModel()` resolves so the two values are reported as a snapshot.
+     */
+    reasoningEffort?: string;
+    contextTier?: ContextTier;
+    autoTier?: AutoTier;
+    /**
+     * Latest unclaimed Auto preference waiting for a future user turn. Null means the pending request is returning to provider-default routing.
+     */
+    pendingAutoTier?: AutoTier | null;
+    /**
+     * Auto preference currently claimed by an in-progress activation. Null means the activation is returning to provider-default routing.
+     */
+    activatingAutoTier?: AutoTier | null;
+}
+/**
+ * Lightweight metadata for a currently initialized session tool
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CurrentToolMetadata".
+ */
+/** @experimental */
+export interface CurrentToolMetadata {
+    /**
+     * Model-facing tool name
+     */
+    name: string;
+    /**
+     * Optional MCP/config namespaced tool name
+     */
+    namespacedName?: string;
+    /**
+     * MCP server name for MCP-backed tools
+     */
+    mcpServerName?: string;
+    /**
+     * Raw MCP tool name for MCP-backed tools
+     */
+    mcpToolName?: string;
+    /**
+     * Tool description
+     */
+    description: string;
+    /**
+     * JSON Schema for tool input
+     */
+    input_schema?: {
+        [k: string]: JsonValue | undefined;
+    };
+    /**
+     * Whether the tool is loaded on demand via tool search
+     */
+    deferLoading?: boolean;
+}
+/**
+ * A file included in the session debug bundle.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DebugCollectLogsCollectedEntry".
+ */
+/** @experimental */
+export interface DebugCollectLogsCollectedEntry {
+    /**
+     * Relative path of the file in the staged bundle/archive.
+     */
+    bundlePath: string;
+    source: DebugCollectLogsSource;
+    /**
+     * Redacted output size in bytes.
+     */
+    sizeBytes: number;
+}
+/**
+ * A caller-provided server-local file or directory to include in the debug bundle.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DebugCollectLogsEntry".
+ */
+/** @experimental */
+export interface DebugCollectLogsEntry {
+    kind: DebugCollectLogsEntryKind;
+    /**
+     * Server-local source path to read.
+     */
+    path: string;
     /**
      * Relative path to use inside the staged bundle/archive.
      */
@@ -7385,18 +8378,16 @@ export interface EnqueueCommandParams {
      */
     displayText?: string | null;
 }
-/**
- * Indicates whether the command was accepted into the local execution queue.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EnqueueCommandResult".
- */
 /** @experimental */
-export interface EnqueueCommandResult {
+export interface UnsupportedEnqueueCommandResult {
     /**
-     * True when the command was accepted into the local execution queue. False when the call targets a session that does not support local command queueing (e.g. remote sessions).
+     * False because the target session does not support local command queueing (e.g. remote sessions).
      */
-    queued: boolean;
+    queued: false;
+    /**
+     * Legacy null queue ID accepted for compatibility with older runtimes.
+     */
+    queueId?: null;
 }
 /**
  * Cursor, batch size, and optional long-poll/filter parameters for reading session events.
@@ -9656,6 +10647,18 @@ export interface InstalledPluginInfo {
      * Runtime-reported plugin provenance. Currently set to "builtin" only for plugins registered through the trusted host built-in boundary; absent for installed, marketplace, direct, and live plugins.
      */
     source?: string;
+    /**
+     * Whether enterprise managed settings control this plugin's enabled state.
+     */
+    managed?: boolean;
+    /**
+     * The enabled state required by enterprise managed settings, when this plugin spec is managed.
+     */
+    managedDesiredEnabled?: boolean;
+    /**
+     * Whether the managed desired plugin currently has an installed or live record. Set to false for a managed desired entry retained in the listing after installation or reconciliation failed.
+     */
+    installed?: boolean;
 }
 /**
  * Canonical file or directory where custom instructions can be discovered or created, with location, kind, preference, and project path.
@@ -10291,6 +11294,14 @@ export interface MarketplaceInfo {
      * True when this is a default marketplace shipped with the runtime. Defaults are not removable.
      */
     isDefault?: boolean;
+    /**
+     * Whether enterprise managed settings provide and control this marketplace entry.
+     */
+    managed?: boolean;
+    /**
+     * Whether the managed marketplace currently resolved into the runtime marketplace registry. Set to false when the desired managed entry is retained for governance visibility after loading or reconciliation failed.
+     */
+    available?: boolean;
 }
 /**
  * All registered marketplaces, including built-in defaults.
@@ -10707,6 +11718,10 @@ export interface McpServerConfigStdio {
      * Timeout in milliseconds for tool discovery and tool calls.
      */
     timeout?: number;
+    /**
+     * Milliseconds this server may spend connecting before the CLI warns that it is taking longer than expected. Presentation only: it does not change how long the connection is allowed to take.
+     */
+    slowConnectionThresholdMs?: number;
     oidc?: McpServerAuthConfig;
     auth?: McpServerAuthConfig;
     deferTools?: McpServerConfigDeferTools;
@@ -10828,6 +11843,10 @@ export interface McpServerConfigHttp {
      * Timeout in milliseconds for tool discovery and tool calls.
      */
     timeout?: number;
+    /**
+     * Milliseconds this server may spend connecting before the CLI warns that it is taking longer than expected. Presentation only: it does not change how long the connection is allowed to take.
+     */
+    slowConnectionThresholdMs?: number;
     oidc?: McpServerAuthConfig;
     auth?: McpServerAuthConfig;
     deferTools?: McpServerConfigDeferTools;
@@ -11252,7 +12271,7 @@ export interface McpInstallPlan {
     target: McpPlanTarget;
     policy: McpPlanPolicyResult;
     /**
-     * The configuration changes installing would make, described rather than serialised, so the mutable configuration payload stays behind the runtime boundary.
+     * Alternative configuration changes, with exactly one entry for each transportChoices entry in the same order. Only the entry for the subsequently selected transport applies; these are not cumulative writes. Payloads remain behind the runtime boundary.
      */
     configurationChanges: McpPlanConfigurationChange[];
     /**
@@ -11260,7 +12279,7 @@ export interface McpInstallPlan {
      */
     reloadRequired: boolean;
     /**
-     * Whether the plan cannot be applied without further input, because a required value has no default or a secret must be supplied.
+     * True only when every eligible transport choice needs additional values or secrets. False means at least one choice needs no additional configuration, not that every choice is ready. A later apply operation must validate the selected choice's own inputs, secrets and policy after explicit confirmation.
      */
     requiresInteractiveConfiguration: boolean;
 }
@@ -11492,7 +12511,7 @@ export interface McpPlanPolicyResult {
     reason?: string;
 }
 /**
- * One change applying the plan would make, described rather than serialised so the configuration payload stays behind the runtime boundary.
+ * The configuration-change alternative for the transportChoices entry at the same index. Only the selected alternative is applied; entries are not cumulative. The payload stays behind the runtime boundary.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "McpPlanConfigurationChange".
@@ -11776,7 +12795,7 @@ export interface McpPlanInstallSourceCandidate {
      */
     candidateHandle: string;
     /**
-     * The runtime- or authority-minted `searchId` returned with the search that produced this candidate. A search implementation binds it to private candidate-handle context; a planning implementation must verify that context before returning a plan. The unavailable planning implementation in this contract layer validates presence but does not claim the verification has occurred. It identifies a search rather than a person and must never be joined with user identity to re-identify anyone.
+     * The runtime- or authority-minted `searchId` returned with the search that produced this candidate. Planning verifies the private correlation and atomically consumes a matching candidate before downstream work, including attempts that subsequently fail or report unavailable. A mismatched search does not consume the candidate. It identifies a search rather than a person and must never be joined with user identity to re-identify anyone.
      */
     searchId: string;
 }
@@ -12630,6 +13649,10 @@ export interface ModelCapabilitiesSupports {
      * Whether this model supports vision/image input
      */
     vision?: boolean;
+    /**
+     * Whether this model supports canonical tool calling
+     */
+    toolCalls?: boolean;
     /**
      * Whether this model supports reasoning effort configuration
      */
@@ -12882,6 +13905,7 @@ export interface ModelApplyStartupOverlayRequest {
      * Startup default model from the enterprise policy helper, when configured. Weakest of the managed sources: it applies only when neither device nor server policy names a model, and an explicit user selection still wins.
      */
     policyHelperModel?: string;
+    autoTier?: AutoTier;
     /**
      * Model selected by repository settings, when configured.
      */
@@ -12930,6 +13954,10 @@ export interface ModelCapabilitiesOverrideSupports {
      * Whether this model supports vision/image input
      */
     vision?: boolean;
+    /**
+     * Whether this model supports canonical tool calling
+     */
+    toolCalls?: boolean;
     /**
      * Whether this model supports reasoning effort configuration
      */
@@ -13169,9 +14197,9 @@ export interface ModelSwitchToRequest {
      */
     autoTier?: AutoTier | null;
     /**
-     * Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. "none" disables reasoning. When omitted, no effort override is applied.
+     * Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. "none" disables reasoning. Pass null to clear any session effort override and fall back to the model's default. When omitted, the session's current effort is kept.
      */
-    reasoningEffort?: string;
+    reasoningEffort?: string | null;
     reasoningSummary?: ReasoningSummary;
     verbosity?: Verbosity;
     modelCapabilities?: ModelCapabilitiesOverride;
@@ -13211,6 +14239,10 @@ export interface ModelSwitchToRequest {
  */
 /** @experimental */
 export interface ModelSwitchToResult {
+    /**
+     * Stable queue item identifier when this request was enqueued. Remains present if the item drains before the response is returned.
+     */
+    queueId?: string;
     /**
      * Currently active model identifier after the switch
      */
@@ -13519,6 +14551,10 @@ export interface PendingPermissionRequest {
      */
     requestId: string;
     request: PermissionPromptRequest;
+    /**
+     * Permission-recovery episode that authorized this request to surface for interactive attention
+     */
+    recoveryEpisodeId?: string;
 }
 /**
  * List of pending permission requests reconstructed from event history.
@@ -14520,7 +15556,7 @@ export interface PermissionPathsConfig {
     workspacePath?: string;
 }
 /**
- * Snapshot of the session's allow-listed directories and primary working directory.
+ * Snapshot of the session's recursive directory grants, exact session-approved paths, and primary working directory.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "PermissionPathsList".
@@ -14531,6 +15567,10 @@ export interface PermissionPathsList {
      * All directories currently allowed for tool access on this session.
      */
     directories: string[];
+    /**
+     * Exact paths approved for this session without recursively allowing their descendants.
+     */
+    sessionApprovedPaths?: string[];
     /**
      * The primary working directory for this session.
      */
@@ -14836,7 +15876,7 @@ export interface PermissionsPathsAddResult {
     success: boolean;
 }
 /**
- * No parameters; returns the session's allow-listed directories.
+ * No parameters; returns the session's recursive directory grants and exact session-approved paths.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "PermissionsPathsListRequest".
@@ -14867,7 +15907,7 @@ export interface PermissionsPathsUpdatePrimaryResult {
 export interface PermissionsPendingRequestsRequest {
 }
 /**
- * Clears session-scoped tool permission approvals, and optionally the location-scoped ones.
+ * Clears session-scoped tool approvals and optionally clears location-scoped approvals and exact session-approved paths.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "PermissionsResetSessionApprovalsRequest".
@@ -14875,7 +15915,7 @@ export interface PermissionsPendingRequestsRequest {
 /** @experimental */
 export interface PermissionsResetSessionApprovalsRequest {
     /**
-     * Whether location-scoped approvals are cleared too. Defaults to `true`.
+     * Whether location-scoped approvals and exact session-approved paths are cleared too. Defaults to `true`.
      */
     includeLocation?: boolean;
 }
@@ -15168,21 +16208,45 @@ export interface Plugin {
      * Whether the plugin is currently enabled
      */
     enabled: boolean;
-}
-/**
- * Result of installing a plugin.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "PluginInstallResult".
- */
-/** @experimental */
-export interface PluginInstallResult {
-    plugin: InstalledPluginInfo;
     /**
-     * Number of skills discovered and installed from the plugin
+     * Opaque stable identity for a direct plugin source.
      */
-    skillsInstalled: number;
-    stagingMode?: PluginInstallStagingMode;
+    directSourceId?: string;
+    /**
+     * Absolute marketplace directory for a live plugin.
+     */
+    installedFrom?: string;
+    /**
+     * Runtime plugin provenance, such as "builtin".
+     */
+    source?: string;
+    /**
+     * Whether enterprise managed settings control this plugin.
+     */
+    managed?: boolean;
+    /**
+     * Enabled state required by enterprise managed settings.
+     */
+    managedDesiredEnabled?: boolean;
+    /**
+     * Whether this managed desired plugin has an installed or live record.
+     */
+    installed?: boolean;
+}
+/**
+ * Result of installing a plugin.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PluginInstallResult".
+ */
+/** @experimental */
+export interface PluginInstallResult {
+    plugin: InstalledPluginInfo;
+    /**
+     * Number of skills discovered and installed from the plugin
+     */
+    skillsInstalled: number;
+    stagingMode?: PluginInstallStagingMode;
     /**
      * Optional post-install message provided by the plugin (e.g. setup instructions)
      */
@@ -15523,6 +16587,10 @@ export interface SystemMessageBlock {
      * Whether the block is static and may be cached independently of dynamic prompt content.
      */
     isStatic?: boolean;
+    /**
+     * Whether providers with explicit prompt caching should place a cache breakpoint after this block.
+     */
+    cacheBreakpoint?: boolean;
 }
 /** @experimental */
 export interface ProtocolSystemMessageCustomizeConfig {
@@ -15597,6 +16665,12 @@ export interface ProviderModelConfig {
     maxOutputTokens?: number;
     capabilities?: ModelCapabilitiesOverride;
     systemMessage?: ProtocolSystemMessageConfig;
+    /**
+     * Provider-published model metadata, preserved verbatim as the public Model.metadata object.
+     */
+    metadata?: {
+        [k: string]: JsonValue | undefined;
+    };
 }
 /**
  * The selectable model entries synthesized for the models added by this call.
@@ -15723,6 +16797,44 @@ export interface ProviderSessionToken {
      */
     expiresAt?: string;
 }
+/**
+ * Authoritative BYOK provider and model registry snapshot to apply atomically to the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderSyncRequest".
+ */
+/** @experimental */
+export interface ProviderSyncRequest {
+    /**
+     * Named BYOK provider connection snapshot. Providers absent from this list are removed.
+     */
+    providers?: NamedProviderConfig[];
+    /**
+     * BYOK model definition snapshot. Models absent from this list are removed.
+     */
+    models?: ProviderModelConfig[];
+}
+/**
+ * The selectable model entries and selection ids synthesized for the synchronized BYOK models.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderSyncResult".
+ */
+/** @experimental */
+export interface ProviderSyncResult {
+    /**
+     * Synthesized selectable model entries for the synchronized BYOK models.
+     */
+    models: JsonValue[];
+    /**
+     * Provider-qualified model selection ids present after synchronization.
+     */
+    selectionIds: string[];
+    /**
+     * True when synchronization withdrew the selected host-managed model, leaving the session with no explicit selection, so ordinary model resolution picks the session default. Synchronization never promotes a surviving host model in its place: publishing a model offers it, and the choice of which model to use stays with the user.
+     */
+    modelDeselected?: boolean;
+}
 /**
  * Asks the SDK client to acquire a bearer token for a BYOK provider whose config set `hasBearerTokenProvider: true`. Issued by the runtime before each outbound model request; the runtime does no caching, so this is sent once per request.
  *
@@ -16212,6 +17324,36 @@ export interface PushAttachmentBlob {
      */
     displayName?: string;
 }
+/**
+ * Append to one pending steering message without changing its identity or delivery position.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueAppendSteeringRequest".
+ */
+/** @experimental */
+export interface QueueAppendSteeringRequest {
+    /**
+     * Message identity returned by send, not the queue item id. Only unclaimed user steering messages are eligible.
+     */
+    messageId: string;
+    /**
+     * Expected current prompt, including any previous appends. The runtime applies plan-mode normalization before comparing and refuses a changed message.
+     */
+    expectedPrompt: string;
+    agentMode: SendAgentMode;
+    /**
+     * Text to append after a blank line.
+     */
+    prompt: string;
+    /**
+     * Display text to append to the existing preview after a blank line.
+     */
+    displayPrompt: string;
+    /**
+     * Attachments to add after the message's existing attachments. An empty list preserves the existing attachments.
+     */
+    attachments: Attachment[];
+}
 /**
  * Inputs for starting a deferred-idle drain.
  *
@@ -16590,6 +17732,10 @@ export interface QueueSetDrainPausedRequest {
  */
 /** @experimental */
 export interface QueueSnapshotResult {
+    /**
+     * Queue item identifier of a model switch that has been dequeued but not yet applied.
+     */
+    inFlightModelChangeId?: string;
     /**
      * User-facing pending items in FIFO order.
      */
@@ -16641,6 +17787,23 @@ export interface QueueUpdateTextResult {
      */
     updated: boolean;
 }
+/**
+ * Conditional withdrawal of a single user message, before the runtime claims it for delivery.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueWithdrawMessageRequest".
+ */
+/** @experimental */
+export interface QueueWithdrawMessageRequest {
+    /**
+     * Message identity returned by send, not the queue item id. Batch messages are not eligible.
+     */
+    messageId: string;
+    /**
+     * The prompt originally sent. A message edited since submission is not withdrawn, so an obsolete draft cannot replace the edit.
+     */
+    expectedPrompt: string;
+}
 /**
  * Event type to register consumer interest for, used by runtime gating logic.
  *
@@ -18134,7 +19297,7 @@ export interface SessionFsSetProviderCapabilities {
     sqlite?: boolean;
 }
 /**
- * Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider.
+ * Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider. A registered provider is authoritative for path interpretation and filesystem facts used by workspace permission validation. Paths are interpreted lexically; home-relative paths (`~` and `~/...`) and Windows drive-relative paths such as `C:foo` are unsupported. Until provider-side canonicalization is supported, providers must not expose symlinks inside allowed roots that escape those roots.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SessionFsSetProviderRequest".
@@ -18142,7 +19305,7 @@ export interface SessionFsSetProviderCapabilities {
 /** @experimental */
 export interface SessionFsSetProviderRequest {
     /**
-     * Initial working directory for sessions
+     * Absolute initial working directory for sessions. Registering the provider establishes this path as the root of its virtual namespace; the runtime does not require the provider to materialize or stat it before creating a session.
      */
     initialCwd: string;
     /**
@@ -18612,7 +19775,7 @@ export interface SessionLoadDeferredRepoHooksResult {
 /** @experimental */
 export interface SessionManagedPermissions {
     /**
-     * When set to `disable`, prevents bypass/allow-all permission modes. `allow-auto-only` blocks full allow-all but permits advisory auto-approval. Any other value is accepted rather than failing the session, but is enforced as `disable`: the key is only present to restrict something, so a mode this runtime cannot interpret fails closed to the most restrictive one it knows. Omit the key entirely to impose no restriction.
+     * When set to `disable`, prevents bypass/allow-all permission modes. Advisory auto-approval remains available because normal prompt paths stay active. Any other value is accepted rather than failing the session, but is enforced as `disable`: the key is only present to restrict something, so a mode this runtime cannot interpret fails closed to the most restrictive one it knows. Omit the key entirely to impose no restriction.
      */
     disableBypassPermissionsMode?: string;
     /**
@@ -18696,6 +19859,7 @@ export interface SessionMetadataSnapshot {
      * Current session limits, or null when no limits are active
      */
     sessionLimits: SessionLimitsConfig | null;
+    indexedSearch?: IndexedSearchState;
     /**
      * Public-facing workspace metadata for this session, or null if the session has no associated workspace. Excludes runtime-internal fields (GitHub IDs, summary count, internal flags).
      */
@@ -18903,6 +20067,10 @@ export interface SessionOpenOptions {
      * Additional directories to search for skills.
      */
     skillDirectories?: string[];
+    /**
+     * Skill scan directories and descendants excluded from discovery. Supports `~`-relative paths.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * Whether skill loading is enabled. When omitted, an SDK skill provider enables skills by default.
      */
@@ -19328,6 +20496,45 @@ export interface SessionsOpenProgress {
      */
     message?: string;
 }
+/**
+ * Plugin names (or specs) to disable in the session's authoritative working directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionPluginsDisableRequest".
+ */
+/** @experimental */
+export interface SessionPluginsDisableRequest {
+    /**
+     * Plugin names or "plugin@marketplace" specs to disable. Unknown names are ignored. Non-marketplace direct installs cannot be disabled via this API; uninstall them instead. Plugin-owned MCP servers are stopped in active sessions immediately; other plugin contributions remain available until each session reloads plugins.
+     */
+    names: string[];
+}
+/**
+ * Plugin names (or specs) to enable in the session's authoritative working directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionPluginsEnableRequest".
+ */
+/** @experimental */
+export interface SessionPluginsEnableRequest {
+    /**
+     * Plugin names or "plugin@marketplace" specs to enable. Unknown names are ignored. Non-marketplace direct installs are always enabled and cannot be toggled via this API.
+     */
+    names: string[];
+}
+/**
+ * Plugin source resolved relative to the session's authoritative working directory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionPluginsInstallRequest".
+ */
+/** @experimental */
+export interface SessionPluginsInstallRequest {
+    /**
+     * Plugin install spec. Accepts the same forms as the CLI: "plugin@marketplace" (marketplace install), "owner/repo" or "owner/repo:subpath" (GitHub direct), an http/https/ssh URL, or a local path. Direct (non-marketplace) installs are deprecated and will produce a deprecationWarning in the result.
+     */
+    source: string;
+}
 /**
  * Outcome of the prune operation: deleted IDs, dry-run candidates, skipped IDs, total bytes freed, and the dry-run flag.
  *
@@ -20344,6 +21551,10 @@ export interface SessionUpdateOptionsParams {
      * Additional directories to search for skills.
      */
     skillDirectories?: string[];
+    /**
+     * Skill scan directories and descendants excluded from discovery. Supports `~`-relative paths.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * Built-in skill names to include in this session. When specified, only these runtime-bundled skills are available. Skills from other sources with the same name remain available. Set to null to remove the allowlist restriction.
      */
@@ -20772,6 +21983,10 @@ export interface SkillsDiscoverRequest {
      * Optional list of additional skill directory paths to include
      */
     skillDirectories?: string[];
+    /**
+     * Optional skill scan paths to exclude from discovery.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * When true, omit skills from the host's global sources (personal, custom, plugin, and built-in), returning only project-scoped skills. For multitenant deployments.
      */
@@ -20802,6 +22017,10 @@ export interface SkillsGetDiscoveryPathsRequest {
      * Optional list of project directory paths. When omitted or empty, only personal and custom directories are returned.
      */
     projectPaths?: string[];
+    /**
+     * Optional skill scan paths to exclude from discovery.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * When true, omit the host's personal and custom skill directories, leaving only project directories. For multitenant deployments.
      */
@@ -21875,6 +23094,12 @@ export interface Tool {
      * Optional instructions for how to use this tool effectively
      */
     instructions?: string;
+    /**
+     * Telemetry-safety policy for the tool name and input names, not input values. Treat omitted metadata as unsafe.
+     *
+     * @experimental
+     */
+    safeForTelemetry?: BuiltinToolSafeForTelemetry;
 }
 /**
  * Built-in tools available for the requested model, with their parameters and instructions.
@@ -23052,83 +24277,1046 @@ export interface UserSettingMetadata {
 /** @experimental */
 export interface UserSettingsGetResult {
     /**
-     * Every known user setting keyed by setting name, each with its effective value, default, and whether it is at the default.
+     * Every known user setting keyed by setting name, each with its effective value, default, and whether it is at the default.
+     */
+    settings: {
+        [k: string]: UserSettingMetadata;
+    };
+}
+/**
+ * Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsSetRequest".
+ */
+/** @experimental */
+export interface UserSettingsSetRequest {
+    /**
+     * Partial user settings to write, as a free-form object keyed by setting name
+     */
+    settings: JsonValue;
+}
+/**
+ * Outcome of writing user settings.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsSetResult".
+ */
+/** @experimental */
+export interface UserSettingsSetResult {
+    /**
+     * Top-level keys whose write landed in settings.json but is shadowed by a value still present in the legacy config.json (config.json wins on read). The write does not take effect until the legacy value is removed.
+     */
+    shadowedKeys: string[];
+}
+/**
+ * Current sharing status and shareable GitHub URL for a session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "VisibilityGetResult".
+ */
+/** @experimental */
+export interface VisibilityGetResult {
+    /**
+     * Whether the session has been synced to Mission Control (i.e. has a GitHub task). When false, the session cannot be shared and `status`/`shareUrl` are absent.
+     */
+    synced: boolean;
+    status?: SessionVisibilityStatus;
+    /**
+     * Shareable GitHub URL for the session. Present when the session is synced and the URL can be resolved.
+     */
+    shareUrl?: string;
+}
+/**
+ * Desired sharing status for the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "VisibilitySetRequest".
+ */
+/** @experimental */
+export interface VisibilitySetRequest {
+    status: SessionVisibilityStatus;
+}
+/**
+ * Effective sharing status and shareable GitHub URL after updating session visibility.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "VisibilitySetResult".
+ */
+/** @experimental */
+export interface VisibilitySetResult {
+    /**
+     * Whether the session has been synced to Mission Control (i.e. has a GitHub task). When false, the visibility change could not be applied and `status`/`shareUrl` are absent.
+     */
+    synced: boolean;
+    status?: SessionVisibilityStatus;
+    /**
+     * Shareable GitHub URL for the session. Present when the session is synced and the URL can be resolved.
+     */
+    shareUrl?: string;
+}
+/**
+ * Parameters for cooperatively aborting a workflow body.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAbortRequest".
+ */
+/** @experimental */
+export interface WorkflowAbortRequest {
+    /**
+     * Target session identifier
+     */
+    sessionId: string;
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying the execution attempt to abort.
+     */
+    executionToken: string;
+}
+/**
+ * Acknowledgement that a workflow request was accepted.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAckResult".
+ */
+/** @experimental */
+export interface WorkflowAckResult {
+}
+/**
+ * Options for one workflow-scoped subagent call.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAgentOptions".
+ */
+/** @experimental */
+export interface WorkflowAgentOptions {
+    /**
+     * Optional label distinguishing otherwise identical memoized agent calls.
+     */
+    label?: string;
+    /**
+     * Optional JSON Schema for structured agent output.
+     */
+    schema?: JsonValue;
+    /**
+     * Optional model identifier for the subagent.
+     */
+    model?: string;
+    /**
+     * Optional reasoning effort override for the subagent.
+     */
+    reasoningEffort?: string;
+    contextTier?: ContextTier;
+    /**
+     * Optional built-in or custom agent name whose definition configures the subagent.
+     */
+    agent?: string;
+}
+/**
+ * Parameters for one workflow-scoped subagent call.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAgentRequest".
+ */
+/** @experimental */
+export interface WorkflowAgentRequest {
+    /**
+     * Workflow run identifier that owns the subagent.
+     */
+    workflowRunId: string;
+    /**
+     * Opaque token identifying the current workflow execution attempt.
+     */
+    executionToken: string;
+    /**
+     * Prompt to send to the subagent.
+     */
+    prompt: string;
+    opts: WorkflowAgentOptions;
+}
+/**
+ * Result of one workflow-scoped subagent call.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAgentResult".
+ */
+/** @experimental */
+export interface WorkflowAgentResult {
+    /**
+     * Agent result, omitted when the agent produced no result.
+     */
+    result?: JsonValue;
+}
+/**
+ * Prompt-safe durable identity and live status for a direct workflow agent.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAgentSummary".
+ */
+/** @experimental */
+export interface WorkflowAgentSummary {
+    /**
+     * Stable direct-agent identifier.
+     */
+    agentId: string;
+    /**
+     * Tool-call identifier that launched the agent.
+     */
+    toolCallId: string;
+    /**
+     * Owning workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Phase identifier active when the agent was launched, or null.
+     */
+    phaseId: string | null;
+    /**
+     * Friendly, non-unique name intended for display
+     */
+    label: string;
+    /**
+     * Friendly, non-unique name intended for display
+     */
+    displayName?: string;
+    /**
+     * Registered agent type.
+     */
+    agentType: string;
+    /**
+     * Current durable or live agent status.
+     */
+    status: string;
+    /**
+     * Model requested when the agent was launched.
+     */
+    requestedModel?: string;
+    /**
+     * Concrete model resolved for the agent.
+     */
+    resolvedModel?: string;
+    /**
+     * Epoch milliseconds when the agent started.
+     */
+    startedAt?: number;
+    /**
+     * Epoch milliseconds when the agent completed.
+     */
+    completedAt?: number;
+    /**
+     * Accumulated active agent time in milliseconds.
+     */
+    activeMs: number;
+    /**
+     * Prompt-safe live activity text.
+     */
+    activity?: string;
+}
+/**
+ * Parameters for cancelling a workflow run.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowCancelRequest".
+ */
+/** @experimental */
+export interface WorkflowCancelRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+}
+/**
+ * Current workflow phase identity.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowCurrentPhase".
+ */
+/** @experimental */
+export interface WorkflowCurrentPhase {
+    /**
+     * Current phase identifier.
+     */
+    id: string;
+    /**
+     * Zero-based declared phase ordinal, or null for an undeclared phase.
+     */
+    ordinal: number | null;
+}
+/**
+ * Declared or approved workflow resource ceilings.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowDeclaredLimits".
+ */
+/** @experimental */
+export interface WorkflowDeclaredLimits {
+    /**
+     * Maximum concurrently active subagents.
+     */
+    maxConcurrentSubagents?: number;
+    /**
+     * Maximum total subagents spawned by the run.
+     */
+    maxTotalSubagents?: number;
+    /**
+     * Maximum accumulated active execution time in seconds.
+     */
+    timeoutSeconds?: number;
+    /**
+     * Maximum AI credits consumed by subagents and descendants.
+     */
+    maxAiCredits?: number;
+}
+/**
+ * Parameters sent to the owning extension to execute a workflow closure.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowExecuteRequest".
+ */
+/** @experimental */
+export interface WorkflowExecuteRequest {
+    /**
+     * Target session identifier
+     */
+    sessionId: string;
+    /**
+     * Registered workflow name.
+     */
+    name: string;
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying this workflow execution attempt.
+     */
+    executionToken: string;
+    /**
+     * Workflow input value.
+     */
+    args: JsonValue;
+}
+/**
+ * Result returned by an extension workflow closure.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowExecuteResult".
+ */
+/** @experimental */
+export interface WorkflowExecuteResult {
+    /**
+     * Workflow result value.
+     */
+    result?: JsonValue;
+}
+/**
+ * Parameters for paging workflow progress.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowGetRunProgressRequest".
+ */
+/** @experimental */
+export interface WorkflowGetRunProgressRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Optional phase identifier used to scope records and cursors.
+     */
+    phaseId?: string;
+    /**
+     * Exclusive forward cursor.
+     */
+    afterSeq?: number;
+    /**
+     * Exclusive backward cursor.
+     */
+    beforeSeq?: number;
+    /**
+     * Maximum records to return. Defaults to 200 and is capped at 500.
+     */
+    limit?: number;
+}
+/**
+ * Parameters for retrieving a workflow run.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowGetRunRequest".
+ */
+/** @experimental */
+export interface WorkflowGetRunRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+}
+/**
+ * Parameters for reading a workflow journal entry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowJournalGetRequest".
+ */
+/** @experimental */
+export interface WorkflowJournalGetRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying the current workflow execution attempt.
+     */
+    executionToken: string;
+    /**
+     * Namespaced journal key.
+     */
+    key: string;
+}
+/**
+ * Result of reading a workflow journal entry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowJournalGetResult".
+ */
+/** @experimental */
+export interface WorkflowJournalGetResult {
+    /**
+     * Whether the journal contained the requested key.
+     */
+    hit: boolean;
+    /**
+     * Cached JSON result. The hit field distinguishes a cached JSON null from a miss.
+     */
+    resultJson?: JsonValue;
+}
+/**
+ * Parameters for storing a workflow journal entry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowJournalPutRequest".
+ */
+/** @experimental */
+export interface WorkflowJournalPutRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying the current workflow execution attempt.
+     */
+    executionToken: string;
+    /**
+     * Namespaced journal key.
+     */
+    key: string;
+    /**
+     * JSON result to memoize.
+     */
+    resultJson: JsonValue;
+}
+/**
+ * Parameters for paging workflow runs.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowListRunsRequest".
+ */
+/** @experimental */
+export interface WorkflowListRunsRequest {
+    /**
+     * Exclusive forward cursor.
+     */
+    afterSeq?: number;
+    /**
+     * Exclusive backward cursor.
+     */
+    beforeSeq?: number;
+    /**
+     * Maximum terminal runs to return. Defaults to 200 and is capped at 500.
+     */
+    limit?: number;
+}
+/**
+ * A page of workflow runs in durable creation order.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowListRunsResult".
+ */
+/** @experimental */
+export interface WorkflowListRunsResult {
+    /**
+     * Workflow run summaries in durable creation order.
+     */
+    runs: WorkflowRunSummary[];
+    /**
+     * Oldest terminal-run cursor in this page, or null when the terminal window is empty.
+     */
+    oldestSeq?: number | null;
+    /**
+     * Newest terminal-run cursor in this page, or null when the terminal window is empty.
+     */
+    newestSeq?: number | null;
+    /**
+     * Whether terminal runs newer than this page exist.
+     */
+    hasMoreNewer?: boolean;
+    /**
+     * Number of terminal runs older than this page.
+     */
+    omittedOlder?: number;
+}
+/**
+ * Durable workflow run summary with read-time live overlays.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunSummary".
+ */
+/** @experimental */
+export interface WorkflowRunSummary {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Registered workflow name.
+     */
+    workflowName: string;
+    /**
+     * Human-readable workflow description.
+     */
+    description: string;
+    status: WorkflowRunStatus;
+    /**
+     * Monotonic durable run revision.
+     */
+    revision: number;
+    /**
+     * Epoch milliseconds when the run was created.
+     */
+    createdAt: number;
+    /**
+     * Epoch milliseconds when execution first started, or null before start.
+     */
+    startedAt: number | null;
+    /**
+     * Epoch milliseconds when the durable run was last updated.
+     */
+    updatedAt: number;
+    /**
+     * Epoch milliseconds when the run completed, or null while nonterminal.
+     */
+    completedAt: number | null;
+    /**
+     * Current phase identity, or null before any phase is entered.
+     */
+    currentPhase: WorkflowCurrentPhase | null;
+    /**
+     * Number of phases declared by the workflow.
+     */
+    declaredPhaseCount: number;
+    /**
+     * Number of direct workflow agents currently live.
+     */
+    liveAgentCount: number;
+    /**
+     * Total direct workflow agents spawned across all attempts.
+     */
+    totalSpawnedAgentCount: number;
+    consumed: WorkflowRunConsumed;
+    declaredLimits: WorkflowDeclaredLimits;
+    /**
+     * Approved effective resource ceilings, or null until approved.
+     */
+    approved: WorkflowDeclaredLimits | null;
+    /**
+     * Epoch milliseconds when this live-overlay snapshot was observed.
+     */
+    observedAt: number;
+    /**
+     * Epoch milliseconds when the current active segment started, or null while inactive.
+     */
+    activeSegmentStartedAt: number | null;
+    /**
+     * Terminal run outcome, or null while nonterminal.
+     */
+    terminal: WorkflowRunTerminal | null;
+    /**
+     * Whether the durable run state currently passes runtime resume eligibility checks.
+     */
+    canResume: boolean;
+}
+/**
+ * Durable workflow resource consumption.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunConsumed".
+ */
+/** @experimental */
+export interface WorkflowRunConsumed {
+    /**
+     * Accumulated active execution time in milliseconds.
+     */
+    activeMs: number;
+    /**
+     * Total subagents spawned by the run.
+     */
+    subagents: number;
+    /**
+     * AI usage consumed by the run in nano-AIU.
+     */
+    nanoAiu: number;
+}
+/**
+ * Prompt-safe terminal workflow outcome.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunTerminal".
+ */
+/** @experimental */
+export interface WorkflowRunTerminal {
+    /**
+     * Human-readable terminal reason.
+     */
+    reason?: string;
+    failure?: WorkflowRunFailure;
+    /**
+     * Human-readable terminal error.
+     */
+    error?: string;
+    /**
+     * Prompt-safe preview of the completed result.
+     */
+    resultPreview?: string;
+    /**
+     * Pause initiator metadata, or null when the run did not pause.
+     */
+    pauseInfo: WorkflowPauseInfo | null;
+}
+/**
+ * One ordered workflow progress line.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowLogLine".
+ */
+/** @experimental */
+export interface WorkflowLogLine {
+    /**
+     * Monotonic sequence number within the workflow run.
+     */
+    seq: number;
+    kind: WorkflowLogLineKind;
+    /**
+     * Progress text.
+     */
+    text: string;
+}
+/**
+ * Parameters for recording workflow progress.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowLogRequest".
+ */
+/** @experimental */
+export interface WorkflowLogRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying the current workflow execution attempt.
+     */
+    executionToken: string;
+    /**
+     * Ordered progress lines to append.
+     */
+    lines: WorkflowLogLine[];
+}
+/**
+ * Parameters for an owned durable pause checkpoint.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowPauseCheckpointRequest".
+ */
+/** @experimental */
+export interface WorkflowPauseCheckpointRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying the execution attempt that reached the checkpoint.
+     */
+    executionToken: string;
+    /**
+     * Stable author-defined checkpoint key.
+     */
+    key: string;
+}
+/** @experimental */
+export interface WorkflowPauseCheckpointResult {
+    action: WorkflowPauseCheckpointAction;
+}
+/**
+ * Parameters for pausing a running workflow.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowPauseRequest".
+ */
+/** @experimental */
+export interface WorkflowPauseRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+}
+/**
+ * Durable lifecycle and timing for one workflow phase.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowPhaseObservation".
+ */
+/** @experimental */
+export interface WorkflowPhaseObservation {
+    /**
+     * Phase identifier.
+     */
+    id: string;
+    /**
+     * Zero-based declared phase ordinal, or null for an undeclared phase.
+     */
+    ordinal: number | null;
+    /**
+     * Human-readable phase title.
+     */
+    title: string;
+    /**
+     * Optional human-readable phase detail.
+     */
+    detail?: string;
+    status: WorkflowPhaseStatus;
+    /**
+     * Most recent run attempt that entered this phase, or `0` if the phase has never been entered.
+     */
+    lastEnteredRunAttempt: number;
+    /**
+     * Number of times execution entered this phase.
+     */
+    entryCount: number;
+    /**
+     * Epoch milliseconds when this phase first started; for a skipped phase, the synthetic skip timestamp (equal to `completedAt`).
+     */
+    startedAt?: number;
+    /**
+     * Epoch milliseconds when this phase completed; for a skipped phase, the synthetic skip timestamp (equal to `startedAt`).
+     */
+    completedAt?: number;
+    /**
+     * Completed active time accumulated by this phase in milliseconds.
+     */
+    accumulatedActiveMs: number;
+    /**
+     * Current live active time for this phase in milliseconds.
+     */
+    currentActiveMs: number;
+    /**
+     * Total direct agents associated with this phase.
+     */
+    totalAgentCount: number;
+    /**
+     * Direct agents in this phase that are currently live.
+     */
+    liveAgentCount: number;
+}
+/**
+ * One durable workflow progress record.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowProgressLine".
+ */
+/** @experimental */
+export interface WorkflowProgressLine {
+    /**
+     * Global monotonic sequence number within the run.
+     */
+    seq: number;
+    /**
+     * Resume attempt that emitted this record.
+     */
+    attempt: number;
+    /**
+     * Phase active when the record was emitted, or null before any phase.
+     */
+    phaseId: string | null;
+    /**
+     * Epoch milliseconds when the record was persisted.
+     */
+    recordedAt: number;
+    kind: WorkflowLogLineKind;
+    /**
+     * Prompt-safe progress text.
+     */
+    text: string;
+}
+/**
+ * A bidirectional page of workflow progress.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowProgressPage".
+ */
+/** @experimental */
+export interface WorkflowProgressPage {
+    /**
+     * Progress records in sequence order.
+     */
+    records: WorkflowProgressLine[];
+    /**
+     * Oldest sequence number in this page, or null when empty.
+     */
+    oldestSeq: number | null;
+    /**
+     * Newest sequence number in this page, or null when empty.
+     */
+    newestSeq: number | null;
+    /**
+     * Whether progress records older than this page exist.
+     */
+    hasMoreOlder: boolean;
+    /**
+     * Whether progress records newer than this page exist.
+     */
+    hasMoreNewer: boolean;
+    /**
+     * Run revision reflected by this page.
+     */
+    revision: number;
+}
+/**
+ * Parameters for resuming a workflow run from its persisted identity.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowResumeRequest".
+ */
+/** @experimental */
+export interface WorkflowResumeRequest {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    limits?: WorkflowRunLimits;
+    /**
+     * Whether to notify the originating session when the workflow completes.
+     */
+    notifyOnComplete?: boolean;
+    /**
+     * Whether to emit workflow phase names to the session transcript.
+     */
+    logPhaseNames?: boolean;
+}
+/**
+ * Wire-only per-invocation workflow resource ceiling overrides.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunLimits".
+ */
+/** @experimental */
+export interface WorkflowRunLimits {
+    /**
+     * Maximum number of workflow subagents that may run concurrently.
+     */
+    maxConcurrentSubagents?: number | null;
+    /**
+     * Maximum total number of workflow subagents that may be admitted.
+     */
+    maxTotalSubagents?: number | null;
+    /**
+     * Maximum accumulated active-execution time in seconds. Active execution includes the entire extension body, subprocess waits, queued-agent waits, and sleeps; time between resumed attempts is not counted.
+     */
+    timeoutSeconds?: number | null;
+    /**
+     * Maximum AI credits consumed by workflow subagents and their descendants. The post-paid ceiling is soft: parallel turns can settle beyond it before the run stops.
+     */
+    maxAiCredits?: number | null;
+}
+/**
+ * Resolved persisted workflow identity and resumed run envelope.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowResumeResult".
+ */
+/** @experimental */
+export interface WorkflowResumeResult {
+    /**
+     * Persisted workflow name resolved for the resumed run.
+     */
+    workflowName: string;
+    run: WorkflowRunResult;
+}
+/**
+ * Complete current or terminal workflow run envelope.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunResult".
+ */
+/** @experimental */
+export interface WorkflowRunResult {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * One-based execution attempt represented by this envelope. Absent before the first attempt starts or when returned by an older runtime.
+     */
+    attempt?: number;
+    status: WorkflowRunStatus;
+    /**
+     * Completed workflow result.
+     */
+    result?: JsonValue;
+    /**
+     * Error message for an errored run.
+     */
+    error?: string;
+    failure?: WorkflowRunFailure;
+    /**
+     * Reason for a halted or cancelled run.
+     */
+    reason?: string;
+    /**
+     * Partial journal and progress snapshot for a halted, cancelled, or errored run.
+     */
+    snapshot?: JsonValue;
+    pauseInfo?: WorkflowPauseInfo;
+}
+/**
+ * Full workflow run observability detail.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowRunDetail".
+ */
+/** @experimental */
+export interface WorkflowRunDetail {
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Registered workflow name.
+     */
+    workflowName: string;
+    /**
+     * Human-readable workflow description.
+     */
+    description: string;
+    status: WorkflowRunStatus;
+    /**
+     * Monotonic durable run revision.
+     */
+    revision: number;
+    /**
+     * Epoch milliseconds when the run was created.
+     */
+    createdAt: number;
+    /**
+     * Epoch milliseconds when execution first started, or null before start.
+     */
+    startedAt: number | null;
+    /**
+     * Epoch milliseconds when the durable run was last updated.
+     */
+    updatedAt: number;
+    /**
+     * Epoch milliseconds when the run completed, or null while nonterminal.
+     */
+    completedAt: number | null;
+    /**
+     * Current phase identity, or null before any phase is entered.
+     */
+    currentPhase: WorkflowCurrentPhase | null;
+    /**
+     * Number of phases declared by the workflow.
+     */
+    declaredPhaseCount: number;
+    /**
+     * Number of direct workflow agents currently live.
+     */
+    liveAgentCount: number;
+    /**
+     * Total direct workflow agents spawned across all attempts.
+     */
+    totalSpawnedAgentCount: number;
+    consumed: WorkflowRunConsumed;
+    declaredLimits: WorkflowDeclaredLimits;
+    /**
+     * Approved effective resource ceilings, or null until approved.
+     */
+    approved: WorkflowDeclaredLimits | null;
+    /**
+     * Epoch milliseconds when this live-overlay snapshot was observed.
+     */
+    observedAt: number;
+    /**
+     * Epoch milliseconds when the current active segment started, or null while inactive.
+     */
+    activeSegmentStartedAt: number | null;
+    /**
+     * Terminal run outcome, or null while nonterminal.
      */
-    settings: {
-        [k: string]: UserSettingMetadata;
-    };
-}
-/**
- * Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "UserSettingsSetRequest".
- */
-/** @experimental */
-export interface UserSettingsSetRequest {
+    terminal: WorkflowRunTerminal | null;
     /**
-     * Partial user settings to write, as a free-form object keyed by setting name
+     * Whether the durable run state currently passes runtime resume eligibility checks.
      */
-    settings: JsonValue;
-}
-/**
- * Outcome of writing user settings.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "UserSettingsSetResult".
- */
-/** @experimental */
-export interface UserSettingsSetResult {
+    canResume: boolean;
     /**
-     * Top-level keys whose write landed in settings.json but is shadowed by a value still present in the legacy config.json (config.json wins on read). The write does not take effect until the legacy value is removed.
+     * Lifecycle and timing observations for each workflow phase.
      */
-    shadowedKeys: string[];
+    phases: WorkflowPhaseObservation[];
+    /**
+     * Durable identities and live statuses for direct workflow agents.
+     */
+    agents: WorkflowAgentSummary[];
+    progress: WorkflowProgressPage;
 }
 /**
- * Current sharing status and shareable GitHub URL for a session.
+ * Options controlling workflow invocation.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "VisibilityGetResult".
+ * via the `definition` "WorkflowRunOptions".
  */
 /** @experimental */
-export interface VisibilityGetResult {
+export interface WorkflowRunOptions {
+    limits?: WorkflowRunLimits;
     /**
-     * Whether the session has been synced to Mission Control (i.e. has a GitHub task). When false, the session cannot be shared and `status`/`shareUrl` are absent.
+     * Whether to notify the originating session when the workflow completes.
      */
-    synced: boolean;
-    status?: SessionVisibilityStatus;
+    notifyOnComplete?: boolean;
     /**
-     * Shareable GitHub URL for the session. Present when the session is synced and the URL can be resolved.
+     * Whether to emit workflow phase names to the session transcript.
      */
-    shareUrl?: string;
-}
-/**
- * Desired sharing status for the session.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "VisibilitySetRequest".
- */
-/** @experimental */
-export interface VisibilitySetRequest {
-    status: SessionVisibilityStatus;
+    logPhaseNames?: boolean;
+    /**
+     * Run identifier whose journal and progress should seed this resumed run.
+     */
+    resumeFromRunId?: string;
 }
 /**
- * Effective sharing status and shareable GitHub URL after updating session visibility.
+ * Parameters for invoking a registered workflow.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "VisibilitySetResult".
+ * via the `definition` "WorkflowRunRequest".
  */
 /** @experimental */
-export interface VisibilitySetResult {
+export interface WorkflowRunRequest {
     /**
-     * Whether the session has been synced to Mission Control (i.e. has a GitHub task). When false, the visibility change could not be applied and `status`/`shareUrl` are absent.
+     * Registered workflow name.
      */
-    synced: boolean;
-    status?: SessionVisibilityStatus;
+    name: string;
     /**
-     * Shareable GitHub URL for the session. Present when the session is synced and the URL can be resolved.
+     * Workflow input value.
      */
-    shareUrl?: string;
+    args: JsonValue;
+    options?: WorkflowRunOptions;
 }
 /**
  * A single changed file and its unified diff.
@@ -23677,6 +25865,10 @@ export interface SessionFactoryPauseAtCheckpointResult {
     action: FactoryPauseCheckpointAction;
 }
 /** @experimental */
+export interface SessionWorkflowPauseAtCheckpointResult {
+    action: WorkflowPauseCheckpointAction;
+}
+/** @experimental */
 export interface SessionModelListRequest {
     /**
      * If true, bypasses the per-session model list cache and re-fetches from CAPI.
@@ -23705,6 +25897,13 @@ export interface SessionMcpAppsCallToolResult {
     [k: string]: JsonValue | undefined;
 }
 /** @experimental */
+export interface SessionPluginsMarketplacesRefreshRequest {
+    /**
+     * Marketplace name to refresh. When omitted, every registered marketplace is refreshed.
+     */
+    name?: string;
+}
+/** @experimental */
 export interface SessionPluginsReloadRequest {
     /**
      * Reload MCP server connections after refreshing plugins. Defaults to true.
@@ -24000,6 +26199,14 @@ export declare function createServerRpc(connection: MessageConnection): {
          * @returns Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
          */
         search: (params: CatalogSearchRequest) => Promise<CatalogSearchResult>;
+        /**
+         * Terminates one retained catalog selection group. A selected outcome returns the native host a fresh single-use candidate handle plus the original searchId for a later explicit mcp.planInstall call; non-selected outcomes release the group without producing a planning input. Candidate state, cards, URLs, credentials and private identifiers remain inside the runtime. The model-facing catalog_select tool projects the result separately and never exposes the candidate handle or searchId.
+         *
+         * @param params Terminates one retained catalog selection group through an opaque reference previously returned by the model-safe search projection.
+         *
+         * @returns Typed outcome of catalog.select. Only the selected host result carries a fresh candidate handle; the model-facing projection removes both that handle and searchId.
+         */
+        select: (params: CatalogSelectionRequest) => Promise<CatalogSelectionResult>;
     };
     /** @experimental */
     plugins: {
@@ -24230,7 +26437,7 @@ export declare function createServerRpc(connection: MessageConnection): {
         /**
          * Registers an SDK client as the session filesystem provider.
          *
-         * @param params Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider.
+         * @param params Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider. A registered provider is authoritative for path interpretation and filesystem facts used by workspace permission validation. Paths are interpreted lexically; home-relative paths (`~` and `~/...`) and Windows drive-relative paths such as `C:foo` are unsupported. Until provider-side canonicalization is supported, providers must not expose symlinks inside allowed roots that escape those roots.
          *
          * @returns Indicates whether the calling client was registered as the session filesystem provider.
          */
@@ -24724,6 +26931,108 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         };
     };
     /** @experimental */
+    workflow: {
+        /**
+         * Runs a registered dynamic workflow by name at the top level.
+         *
+         * @param params Parameters for invoking a registered workflow.
+         *
+         * @returns Complete current or terminal workflow run envelope.
+         */
+        run: (params: WorkflowRunRequest) => Promise<WorkflowRunResult>;
+        /**
+         * Resumes a dynamic workflow run using its persisted name, arguments, journal, and accounting.
+         *
+         * @param params Parameters for resuming a workflow run from its persisted identity.
+         *
+         * @returns Resolved persisted workflow identity and resumed run envelope.
+         */
+        resume: (params: WorkflowResumeRequest) => Promise<WorkflowResumeResult>;
+        /**
+         * Gets the current or settled envelope for a dynamic workflow run.
+         *
+         * @param params Parameters for retrieving a workflow run.
+         *
+         * @returns Complete current or terminal workflow run envelope.
+         */
+        getRun: (params: WorkflowGetRunRequest) => Promise<WorkflowRunResult>;
+        /**
+         * Lists durable dynamic workflow runs for this session in creation order.
+         *
+         * @param params Parameters for paging workflow runs.
+         *
+         * @returns A page of workflow runs in durable creation order.
+         */
+        listRuns: (params: WorkflowListRunsRequest) => Promise<WorkflowListRunsResult>;
+        /**
+         * Gets durable and live observability detail for one dynamic workflow run.
+         *
+         * @param params Parameters for retrieving a workflow run.
+         *
+         * @returns Full workflow run observability detail.
+         */
+        getRunDetail: (params: WorkflowGetRunRequest) => Promise<WorkflowRunDetail>;
+        /**
+         * Pages durable progress for one dynamic workflow run.
+         *
+         * @param params Parameters for paging workflow progress.
+         *
+         * @returns A bidirectional page of workflow progress.
+         */
+        getRunProgress: (params: WorkflowGetRunProgressRequest) => Promise<WorkflowProgressPage>;
+        /**
+         * Requests cancellation of a dynamic workflow run and returns its run envelope.
+         *
+         * @param params Parameters for cancelling a workflow run.
+         *
+         * @returns Complete current or terminal workflow run envelope.
+         */
+        cancel: (params: WorkflowCancelRequest) => Promise<WorkflowRunResult>;
+        /**
+         * Pauses a running dynamic workflow and returns its settled run envelope.
+         *
+         * @param params Parameters for pausing a running workflow.
+         *
+         * @returns Complete current or terminal workflow run envelope.
+         */
+        pause: (params: WorkflowPauseRequest) => Promise<WorkflowRunResult>;
+        /**
+         * Records a batch of ordered dynamic workflow progress lines.
+         *
+         * @param params Parameters for recording workflow progress.
+         *
+         * @returns Acknowledgement that a workflow request was accepted.
+         */
+        log: (params: WorkflowLogRequest) => Promise<WorkflowAckResult>;
+        /**
+         * Runs one dynamic-workflow-scoped subagent and returns its result.
+         *
+         * @param params Parameters for one workflow-scoped subagent call.
+         *
+         * @returns Result of one workflow-scoped subagent call.
+         */
+        agent: (params: WorkflowAgentRequest) => Promise<WorkflowAgentResult>;
+        /** @experimental */
+        journal: {
+            /**
+             * Reads a memoized dynamic workflow journal entry.
+             *
+             * @param params Parameters for reading a workflow journal entry.
+             *
+             * @returns Result of reading a workflow journal entry.
+             */
+            get: (params: WorkflowJournalGetRequest) => Promise<WorkflowJournalGetResult>;
+            /**
+             * Stores a memoized dynamic workflow journal entry.
+             *
+             * @param params Parameters for storing a workflow journal entry.
+             *
+             * @returns Acknowledgement that a workflow request was accepted.
+             */
+            put: (params: WorkflowJournalPutRequest) => Promise<WorkflowAckResult>;
+        };
+    };
+    /** @experimental */
     model: {
         /**
          * Gets the session's authoritative model snapshot, including the committed Auto preference and any newer unclaimed Auto preference waiting for a future user turn.
@@ -25429,13 +27738,168 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         };
     };
     /** @experimental */
+    connectors: {
+        /**
+         * Returns feature availability and bounded polling limits for the EXPERIMENTAL session connector API. This method never performs a Connector service request.
+         *
+         * @returns Feature detection and hard polling limits for the EXPERIMENTAL session connector API.
+         */
+        getCapabilities: () => Promise<ConnectorCapabilities>;
+        /**
+         * Returns authoritative session Connector state from current availability, pinned account selection, cached catalog, and live MCP projection without performing a Connector service request.
+         *
+         * @returns Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+         */
+        getStatus: () => Promise<ConnectorStatus>;
+        /**
+         * Returns the cached Connector catalog for the pinned opaque account selection, fetching it only when this session has no cached catalog.
+         *
+         * @param params Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
+         *
+         * @returns Validated Connector catalog snapshot cached by the session.
+         */
+        list: (params: ConnectorAccountRequest) => Promise<ConnectorCatalogResult>;
+        /**
+         * Refreshes and validates the Connector catalog for the pinned opaque account selection.
+         *
+         * @param params Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
+         *
+         * @returns Validated Connector catalog snapshot cached by the session.
+         */
+        refresh: (params: ConnectorAccountRequest) => Promise<ConnectorCatalogResult>;
+        /**
+         * Initiates an idempotent Connector connection request without opening a browser. Returns connected when the service is immediately authoritative, consent_required with a validated URL, or pending with an opaque continuation ID.
+         *
+         * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+         *
+         * @returns Typed result of initiating or continuing a Connector connection.
+         */
+        connect: (params: ConnectorConnectRequest) => Promise<ConnectorConnectResult>;
+        /**
+         * Re-initiates an idempotent Connector connection request without browser or UI effects, with the same typed outcomes as connect.
+         *
+         * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+         *
+         * @returns Typed result of initiating or continuing a Connector connection.
+         */
+        reconnect: (params: ConnectorConnectRequest) => Promise<ConnectorConnectResult>;
+        /**
+         * Continues a pending Connector connection with caller-supplied attempt, interval, and deadline bounds. The runtime never opens the returned consent URL.
+         *
+         * @param params Explicitly bounded continuation of a pending Connector connection.
+         *
+         * @returns Typed result of initiating or continuing a Connector connection.
+         */
+        continueConnection: (params: ConnectorContinueRequest) => Promise<ConnectorConnectResult>;
+        /**
+         * Disconnects one Connector for the pinned opaque account selection, refreshes the authoritative catalog, and removes its session-owned MCP projection.
+         *
+         * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+         *
+         * @returns Authoritative result after disconnect and MCP reconciliation.
+         */
+        disconnect: (params: ConnectorConnectRequest) => Promise<ConnectorDisconnectResult>;
+        /**
+         * Reconciles the authoritative cached or freshly requested Connector catalog into the session Connector MCP projection and returns live status.
+         *
+         * @param params Requests authoritative Connector-to-MCP reconciliation for the pinned account.
+         *
+         * @returns Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+         */
+        reconcile: (params: ConnectorReconcileRequest) => Promise<ConnectorStatus>;
+    };
+    /** @experimental */
+    managedSettings: {
+        /**
+         * Waits for the live session's in-flight managed-settings application, then returns the retained effective snapshot used by runtime enforcement and by `session.managed_settings_resolved`. It does not perform another account, device, or server resolution, and rejects when resolution has not produced a snapshot.
+         *
+         * @returns Enterprise managed-settings resolution: the effective managed settings the session applied and which channels contributed, so SDK clients can show users what is enterprise-managed. Fires whenever managed policy is (re)applied — at session start, on resume, and on account switch. This is an ephemeral live snapshot (delivered to subscribers but not persisted to the session event log), because at session start it resolves before `session.start` is emitted. Device values take precedence over server values, then the policy helper, per ordinary key, while permissions compose restrictively across device, server, policy-helper, and SDK-client layers. The account-scoped `getManagedSettings()` API does not include session-local client injection. Marked experimental while the managed-settings surface stabilizes.
+         */
+        get: () => Promise<ManagedSettingsResolvedData>;
+    };
+    /** @experimental */
     plugins: {
         /**
-         * Lists plugins installed for the session.
+         * Lists globally installed, live, built-in, and enterprise-managed desired plugins using the live session's authoritative account, working directory, and retained managed policy.
          *
          * @returns Plugins installed for the session, with their enabled state and version metadata.
          */
         list: () => Promise<PluginList>;
+        /**
+         * Installs a plugin using the live session's authoritative account, working directory, and retained managed policy.
+         *
+         * @param params Plugin source resolved relative to the session's authoritative working directory.
+         *
+         * @returns Result of installing a plugin.
+         */
+        install: (params: SessionPluginsInstallRequest) => Promise<PluginInstallResult>;
+        /**
+         * Uninstalls a plugin when permitted by the live session's retained managed policy.
+         *
+         * @param params Name (or spec) of the plugin to uninstall.
+         */
+        uninstall: (params: PluginsUninstallRequest) => Promise<void>;
+        /**
+         * Updates an installed plugin using the live session's authoritative account, working directory, and retained managed policy.
+         *
+         * @param params Name (or spec) of the plugin to update.
+         *
+         * @returns Result of updating a single plugin.
+         */
+        update: (params: PluginsUpdateRequest) => Promise<PluginUpdateResult>;
+        /**
+         * Enables installed plugins when permitted by the live session's retained managed policy.
+         *
+         * @param params Plugin names (or specs) to enable in the session's authoritative working directory.
+         */
+        enable: (params: SessionPluginsEnableRequest) => Promise<void>;
+        /**
+         * Disables installed plugins when permitted by the live session's retained managed policy.
+         *
+         * @param params Plugin names (or specs) to disable in the session's authoritative working directory.
+         */
+        disable: (params: SessionPluginsDisableRequest) => Promise<void>;
+        /** @experimental */
+        marketplaces: {
+            /**
+             * Lists registered and enterprise-managed desired marketplaces using the live session's retained policy.
+             *
+             * @returns All registered marketplaces, including built-in defaults.
+             */
+            list: () => Promise<MarketplaceListResult>;
+            /**
+             * Adds a marketplace when permitted by the live session's retained managed policy.
+             *
+             * @param params Marketplace source and optional working directory for relative-path resolution.
+             *
+             * @returns Result of registering a new marketplace.
+             */
+            add: (params: PluginsMarketplacesAddRequest) => Promise<MarketplaceAddResult>;
+            /**
+             * Removes a marketplace when permitted by the live session's retained managed policy.
+             *
+             * @param params Name of the marketplace to remove and an optional force flag.
+             *
+             * @returns Outcome of the remove attempt, including dependent-plugin info when applicable.
+             */
+            remove: (params: PluginsMarketplacesRemoveRequest) => Promise<MarketplaceRemoveResult>;
+            /**
+             * Browses a marketplace resolved through the live session's working directory and retained managed policy.
+             *
+             * @param params Name of the marketplace whose plugin catalog to fetch.
+             *
+             * @returns Plugins advertised by the marketplace.
+             */
+            browse: (params: PluginsMarketplacesBrowseRequest) => Promise<MarketplaceBrowseResult>;
+            /**
+             * Refreshes marketplaces resolved through the live session's working directory and retained managed policy.
+             *
+             * @param params Optional marketplace name; omit to refresh all.
+             *
+             * @returns Result of refreshing one or more marketplace catalogs.
+             */
+            refresh: (params?: SessionPluginsMarketplacesRefreshRequest) => Promise<MarketplaceRefreshResult>;
+        };
         /**
          * Reloads the session's plugin set, refreshing MCP servers, custom agents, hooks, and skills cache so SDK-driven changes via `server.plugins.*` take effect immediately.
          *
@@ -25461,6 +27925,14 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns The selectable model entries synthesized for the models added by this call.
          */
         add: (params: ProviderAddRequest) => Promise<ProviderAddResult>;
+        /**
+         * Atomically updates the session's BYOK provider and model registry by applying the supplied snapshot, replacing existing entries, updating models, or removing entries absent from the snapshot.
+         *
+         * @param params Authoritative BYOK provider and model registry snapshot to apply atomically to the session.
+         *
+         * @returns The selectable model entries and selection ids synthesized for the synchronized BYOK models.
+         */
+        sync: (params: ProviderSyncRequest) => Promise<ProviderSyncResult>;
     };
     /** @experimental */
     options: {
@@ -25786,9 +28258,9 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          */
         setRequired: (params: PermissionsSetRequiredRequest) => Promise<PermissionsSetRequiredResult>;
         /**
-         * Clears session-scoped tool permission approvals.
+         * Clears session-scoped tool approvals and, for full resets, exact session-approved paths.
          *
-         * @param params Clears session-scoped tool permission approvals, and optionally the location-scoped ones.
+         * @param params Clears session-scoped tool approvals and optionally clears location-scoped approvals and exact session-approved paths.
          *
          * @returns Indicates whether the operation succeeded.
          */
@@ -25804,9 +28276,9 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         /** @experimental */
         paths: {
             /**
-             * Returns the session's allowed directories and primary working directory.
+             * Returns the session's recursive directory grants, exact session-approved paths, and primary working directory.
              *
-             * @returns Snapshot of the session's allow-listed directories and primary working directory.
+             * @returns Snapshot of the session's recursive directory grants, exact session-approved paths, and primary working directory.
              */
             list: () => Promise<PermissionPathsList>;
             /**
@@ -26144,6 +28616,22 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Result of editing a queued message.
          */
         updateText: (params: QueueUpdateTextRequest) => Promise<QueueUpdateTextResult>;
+        /**
+         * Atomically withdraws an unchanged, unconsumed user message from the local queued or steering lane. A client retaining the original draft may restore it only when removed is true. Does not interrupt the running turn.
+         *
+         * @param params Conditional withdrawal of a single user message, before the runtime claims it for delivery.
+         *
+         * @returns Result of removing a queued item.
+         */
+        withdrawMessage: (params: QueueWithdrawMessageRequest) => Promise<QueueRemoveAtResult>;
+        /**
+         * Atomically appends text and attachments to an unchanged, unconsumed local steering message. Returns updated=false if delivery or withdrawal already claimed the message.
+         *
+         * @param params Append to one pending steering message without changing its identity or delivery position.
+         *
+         * @returns Result of editing a queued message.
+         */
+        appendSteering: (params: QueueAppendSteeringRequest) => Promise<QueueUpdateTextResult>;
         /**
          * Duplicates an addressable queued item immediately after its source.
          *
@@ -26320,6 +28808,26 @@ export interface FactoryHandler {
      */
     abort(params: FactoryAbortRequest): Promise<FactoryAckResult>;
 }
+/** Handler for `workflow` client session API methods. */
+/** @experimental */
+export interface WorkflowHandler {
+    /**
+     * Asks the owning extension connection to execute a registered dynamic workflow.
+     *
+     * @param params Parameters sent to the owning extension to execute a workflow closure.
+     *
+     * @returns Result returned by an extension workflow closure.
+     */
+    execute(params: WorkflowExecuteRequest): Promise<WorkflowExecuteResult>;
+    /**
+     * Asks the owning extension connection to abort a running dynamic workflow cooperatively.
+     *
+     * @param params Parameters for cooperatively aborting a workflow body.
+     *
+     * @returns Acknowledgement that a workflow request was accepted.
+     */
+    abort(params: WorkflowAbortRequest): Promise<WorkflowAckResult>;
+}
 /** Handler for `tasks` client session API methods. */
 /** @experimental */
 export interface TasksHandler {
@@ -26470,6 +28978,7 @@ export interface CanvasHandler {
 export interface ClientSessionApiHandlers {
     providerToken?: ProviderTokenHandler;
     factory?: FactoryHandler;
+    workflow?: WorkflowHandler;
     tasks?: TasksHandler;
     sessionFs?: SessionFsHandler;
     canvas?: CanvasHandler;
@@ -26517,7 +29026,7 @@ export interface LlmInferenceHandler {
 /** @experimental */
 export interface GitHubTelemetryHandler {
     /**
-     * Forwards a single GitHub telemetry event to a host connection that opted into telemetry forwarding during the `server.connect` handshake. Opted-in connections receive every event the runtime emits after the handshake — across all sessions, plus sessionless events (for example, `server.sendTelemetry` calls with no session id).
+     * Forwards a single GitHub telemetry event to a host connection that opted into telemetry forwarding during the `server.connect` handshake. Opted-in connections receive their runtime host's events across all its sessions, its sessionless events (for example, `server.sendTelemetry`), and explicitly process-wide events. Events owned by another independently embedded runtime host are not forwarded to this connection.
      *
      * @param params Payload for a `gitHubTelemetry.event` notification: a single GitHub telemetry event the runtime forwards to a host connection that opted into telemetry forwarding during the `server.connect` handshake.
      */