@github/copilot-sdk 1.0.15-preview.0 → 1.0.15-preview.1

package/dist/generated/rpc.d.ts

@@ -152,7 +152,7 @@ export type AgentRegistryLiveTargetEntryLastTerminalEvent =
 /** Last turn was aborted (e.g. user interrupted) */
  | "abort";
 /**
- * Categorized reason for log-open failure
+ * Categorized reason no canonical process log could be opened
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AgentRegistryLogCaptureOpenErrorReason".
@@ -616,7 +616,9 @@ export type CatalogCapability =
 /** Understands versioned candidate trust snapshots. Protocol-3 callers must require this capability before the runtime adds the optional snapshot field. */
  | "trust-snapshot"
 /** Understands exact candidate selection through model-safe opaque references and host-only candidate-handle hand-off. */
- | "catalog-selection";
+ | "catalog-selection"
+/** Requires an eligible credential for the selected GitHub.com account before search egress and prohibits client-side anonymous retry, including after HTTP 401 or 403. The credential is scoped to the fixed catalog authority without redirect forwarding. Neither a grant nor successful response proves that the authority accepted the identity or selected a particular backend. Preserve this requirement on every page and retry; callers omitting it retain optional authentication. */
+ | "catalog-search-credential-required";
 /**
  * Bounded extensible wire-feature identifier. Known values are described by `CatalogCapability`; newer callers may send future identifiers so an older runtime can return a typed negotiation refusal instead of failing schema validation. Capability negotiation establishes contract understanding, while each operation's result separately reports runtime availability.
  *
@@ -996,6 +998,106 @@ export type ConnectedRemoteSessionMetadataKind =
 "remote-session"
 /** GitHub Copilot coding agent session. */
  | "coding-agent";
+/**
+ * Stable OAuth scope whose absence prevents Connector management.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorAuthorizationScope".
+ */
+/** @experimental */
+export type ConnectorAuthorizationScope = 
+/** Allows Copilot to manage Connector connections and use their tools. */
+"write_plugin_gateway_connections";
+/**
+ * Availability of the EXPERIMENTAL session connector API.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorAvailability".
+ */
+/** @experimental */
+export type ConnectorAvailability = 
+/** The resolved Connector feature is enabled and Connector requests are permitted. */
+"enabled"
+/** The resolved Connector feature is off. No Connector service request is made while disabled. */
+ | "disabled"
+/** The session has no eligible host-owned GitHub account or does not support local Connector projection. */
+ | "unavailable";
+/**
+ * Authoritative service connection state for one Connector.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorCatalogStatus".
+ */
+/** @experimental */
+export type ConnectorCatalogStatus = 
+/** The Connector is available but not connected. */
+"not_connected"
+/** The Connector service is still completing connection or consent. */
+ | "pending"
+/** The Connector is connected and may contribute MCP servers. */
+ | "connected"
+/** The Connector service reports an unusable connection. */
+ | "error"
+/** The service returned a future or unrecognized state. */
+ | "unknown";
+/**
+ * Typed result of initiating or continuing a Connector connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorConnectResult".
+ */
+/** @experimental */
+export type ConnectorConnectResult = {
+    /**
+     * The service is connected and the session MCP graph was reconciled.
+     */
+    kind: "connected";
+    status: ConnectorStatus;
+} | {
+    /**
+     * Host-owned consent is required before bounded continuation can complete.
+     */
+    kind: "consent_required";
+    /**
+     * Validated HTTPS consent URL. The runtime does not open it.
+     */
+    consentUrl: string;
+    /**
+     * Opaque ID accepted by continueConnection.
+     */
+    continuationId: string;
+} | {
+    /**
+     * The service is still completing the connection without a consent URL.
+     */
+    kind: "pending";
+    /**
+     * Opaque ID accepted by continueConnection.
+     */
+    continuationId: string;
+};
+/**
+ * Live MCP status of one Connector-owned runtime server.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorMcpStatus".
+ */
+/** @experimental */
+export type ConnectorMcpStatus = 
+/** The server is connected and its tools are available. */
+"connected"
+/** The server connection is still being established. */
+ | "pending"
+/** The server requires refreshed GitHub authorization. */
+ | "needs_auth"
+/** The server failed to connect or initialize. */
+ | "failed"
+/** The server is intentionally stopped, including when managed policy blocks it. */
+ | "stopped"
+/** The server is configured but explicitly disabled. */
+ | "disabled"
+/** The Connector currently has no live server configuration. */
+ | "not_configured";
 /**
  * Closed set of public task kinds a connection can negotiate.
  *
@@ -1208,6 +1310,14 @@ export type DiscoveredMcpServerType =
  | "sse"
 /** Server is backed by an in-memory runtime implementation. */
  | "memory";
+/**
+ * Indicates whether the command was accepted into the local execution queue.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnqueueCommandResult".
+ */
+/** @experimental */
+export type EnqueueCommandResult = AcceptedEnqueueCommandResult | UnsupportedEnqueueCommandResult;
 /**
  * Either '*' to receive all event types, or a non-empty list of event types to receive
  *
@@ -4445,6 +4555,17 @@ export interface AbortResult {
      */
     error?: string;
 }
+/** @experimental */
+export interface AcceptedEnqueueCommandResult {
+    /**
+     * True because the command was accepted into the local execution queue.
+     */
+    queued: true;
+    /**
+     * Stable opaque ID of the queued command.
+     */
+    queueId: string;
+}
 /**
  * Authenticated account entry returned by `account.getAllUsers`.
  *
@@ -4555,6 +4676,15 @@ export interface CopilotUserResponse {
             [k: string]: unknown | undefined;
         } | string) | null;
     } | null)[]) | null;
+    /**
+     * Enterprises that provide the user's Copilot license; malformed entries are normalized to null or ID-less shapes.
+     */
+    enterprise_list?: ({
+        /**
+         * JavaScript-safe numeric database ID of the enterprise.
+         */
+        id?: number;
+    } | null)[] | null;
     /**
      * Whether the Codex agent is enabled for the user.
      */
@@ -4618,15 +4748,6 @@ export interface CopilotUserResponse {
      * Whether CLI remote control is enabled for the user.
      */
     cli_remote_control_enabled?: boolean;
-    /**
-     * Enterprises that provide the user's Copilot license, each with a stable numeric ID.
-     */
-    enterprise_list?: {
-        /**
-         * Numeric database ID of the enterprise.
-         */
-        id: number;
-    }[];
 }
 /**
  * Endpoint URLs from the raw Copilot `/copilot_internal/v2/token` user-response passthrough.
@@ -5197,7 +5318,7 @@ export interface AgentGetCurrentResult {
     agent?: AgentInfo | null;
 }
 /**
- * Agent metadata, including identifiers, display details, source, tools, model, models, MCP servers, skills, and file path.
+ * Agent metadata, including identifiers, display details, source, tools, model, models, reasoning effort, MCP servers, skills, and file path.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AgentInfo".
@@ -5246,6 +5367,10 @@ export interface AgentInfo {
      */
     models?: string[];
     modelPolicy?: AgentModelPolicy;
+    /**
+     * Authored reasoning effort for this agent. Applied on selection to models that support it; omitted means no authored preference.
+     */
+    reasoningEffort?: string;
     /**
      * MCP server configurations attached to this agent, keyed by server name. Server config shape mirrors the MCP `mcpServers` schema.
      *
@@ -5342,7 +5467,7 @@ export interface AgentRegistryLiveTargetEntry {
     lastSeenMs: number;
 }
 /**
- * Per-spawn log-capture outcome; populated from spawnLiveTarget.
+ * Canonical process-log discovery outcome; populated from spawnLiveTarget.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AgentRegistryLogCapture".
@@ -5350,15 +5475,15 @@ export interface AgentRegistryLiveTargetEntry {
 /** @experimental */
 export interface AgentRegistryLogCapture {
     /**
-     * Whether per-spawn log capture is on (false when env-disabled or open failed)
+     * Whether a canonical process log was discovered for this managed spawn
      */
     enabled: boolean;
     /**
-     * Absolute path to the per-spawn log file (only set when enabled)
+     * Absolute path to the managed spawn's process-<timestamp>-<pid>.log file (only set when enabled)
      */
     path?: string;
     /**
-     * Human-readable open failure message (only set when enabled === false AND the env-disable opt-out was NOT used)
+     * Why no canonical process log could be opened for this managed spawn (set only when enabled is false)
      */
     openError?: string;
     openErrorReason?: AgentRegistryLogCaptureOpenErrorReason;
@@ -7522,6 +7647,233 @@ export interface ConnectedRemoteSessionMetadataRepository {
      */
     branch: string;
 }
+/**
+ * Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorAccountRequest".
+ */
+/** @experimental */
+export interface ConnectorAccountRequest {
+    /**
+     * Opaque account selection ID previously returned by an account discovery API.
+     */
+    accountId: string;
+}
+/**
+ * Account-targeted authorization update required by the Connector service. The account ID is an opaque host routing identifier; no credential is included.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorAuthorizationRequirement".
+ */
+/** @experimental */
+export interface ConnectorAuthorizationRequirement {
+    /**
+     * Exact opaque account selection that made the Connector request.
+     */
+    accountId: string;
+    scope: ConnectorAuthorizationScope;
+}
+/**
+ * Feature detection and hard polling limits for the EXPERIMENTAL session connector API.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorCapabilities".
+ */
+/** @experimental */
+export interface ConnectorCapabilities {
+    /**
+     * Connector API contract version.
+     */
+    apiVersion: number;
+    availability: ConnectorAvailability;
+    /**
+     * Whether connect and reconnect can return an opaque continuation for bounded consent polling.
+     */
+    consentContinuation: boolean;
+    /**
+     * Whether callers select a host-owned GitHub account through an opaque selection ID rather than supplying a provider token.
+     */
+    opaqueAccountSelection: boolean;
+    /**
+     * Maximum accepted polling attempts for one continuation call.
+     */
+    maxPollAttempts: number;
+    /**
+     * Maximum accepted delay in milliseconds between polling attempts.
+     */
+    maxPollIntervalMs: number;
+    /**
+     * Maximum accepted wall-clock deadline in milliseconds for one continuation call.
+     */
+    maxDeadlineMs: number;
+}
+/**
+ * Credential-free Connector catalog entry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorCatalogEntry".
+ */
+/** @experimental */
+export interface ConnectorCatalogEntry {
+    /**
+     * Canonical Connector name used by lifecycle methods.
+     */
+    name: string;
+    /**
+     * Untrusted display label from the service.
+     */
+    displayName: string;
+    /**
+     * Untrusted service description, when present.
+     */
+    description?: string;
+    status: ConnectorCatalogStatus;
+    /**
+     * Opaque stable runtime IDs currently projected into the session for this Connector.
+     */
+    runtimeServerIds: string[];
+}
+/**
+ * Validated Connector catalog snapshot cached by the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorCatalogResult".
+ */
+/** @experimental */
+export interface ConnectorCatalogResult {
+    /**
+     * Monotonically increasing session-local catalog revision.
+     */
+    revision: number;
+    /**
+     * Unix epoch milliseconds when this snapshot was accepted.
+     */
+    refreshedAtMs: number;
+    /**
+     * Validated catalog entries in service order.
+     */
+    connectors: ConnectorCatalogEntry[];
+}
+/**
+ * Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorConnectRequest".
+ */
+/** @experimental */
+export interface ConnectorConnectRequest {
+    /**
+     * Opaque account selection ID. It must match the account already pinned to the session, if any.
+     */
+    accountId: string;
+    /**
+     * Canonical Connector name from the current catalog.
+     */
+    connectorName: string;
+}
+/**
+ * Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorStatus".
+ */
+/** @experimental */
+export interface ConnectorStatus {
+    /**
+     * Connector API contract version.
+     */
+    apiVersion: number;
+    availability: ConnectorAvailability;
+    /**
+     * Opaque account selection pinned to this session, when one has been selected.
+     */
+    accountId?: string;
+    catalog?: ConnectorCatalogResult;
+    authorizationRequirement?: ConnectorAuthorizationRequirement;
+    /**
+     * Live MCP status for every Connector-owned runtime server.
+     */
+    runtimeServers: ConnectorRuntimeStatus[];
+    /**
+     * Number of active opaque connection continuations.
+     */
+    pendingConnections: number;
+}
+/**
+ * Live status of one session-owned MCP projection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorRuntimeStatus".
+ */
+/** @experimental */
+export interface ConnectorRuntimeStatus {
+    /**
+     * Opaque runtime server ID.
+     */
+    runtimeServerId: string;
+    /**
+     * Canonical Connector name that owns this server.
+     */
+    connectorName: string;
+    status: ConnectorMcpStatus;
+}
+/**
+ * Explicitly bounded continuation of a pending Connector connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorContinueRequest".
+ */
+/** @experimental */
+export interface ConnectorContinueRequest {
+    /**
+     * Opaque continuation ID returned by connect, reconnect, or an earlier continuation.
+     */
+    continuationId: string;
+    /**
+     * Maximum catalog requests made by this call. Must be between one and the capability limit.
+     */
+    maxAttempts: number;
+    /**
+     * Delay in milliseconds between attempts. Must not exceed the capability limit.
+     */
+    pollIntervalMs: number;
+    /**
+     * Maximum wall-clock duration in milliseconds for this call. Must be between one and the capability limit.
+     */
+    deadlineMs: number;
+}
+/**
+ * Authoritative result after disconnect and MCP reconciliation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDisconnectResult".
+ */
+/** @experimental */
+export interface ConnectorDisconnectResult {
+    /**
+     * Whether the service accepted the idempotent disconnect.
+     */
+    disconnected: boolean;
+    status: ConnectorStatus;
+}
+/**
+ * Requests authoritative Connector-to-MCP reconciliation for the pinned account.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorReconcileRequest".
+ */
+/** @experimental */
+export interface ConnectorReconcileRequest {
+    /**
+     * Opaque account selection ID. It must match the account already pinned to the session, if any.
+     */
+    accountId: string;
+    /**
+     * When true, refresh the catalog before reconciling. A disabled Connector API performs no service request.
+     */
+    refreshCatalog?: boolean;
+}
 /**
  * Remote session connection parameters.
  *
@@ -8026,18 +8378,16 @@ export interface EnqueueCommandParams {
      */
     displayText?: string | null;
 }
-/**
- * Indicates whether the command was accepted into the local execution queue.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EnqueueCommandResult".
- */
 /** @experimental */
-export interface EnqueueCommandResult {
+export interface UnsupportedEnqueueCommandResult {
     /**
-     * True when the command was accepted into the local execution queue. False when the call targets a session that does not support local command queueing (e.g. remote sessions).
+     * False because the target session does not support local command queueing (e.g. remote sessions).
      */
-    queued: boolean;
+    queued: false;
+    /**
+     * Legacy null queue ID accepted for compatibility with older runtimes.
+     */
+    queueId?: null;
 }
 /**
  * Cursor, batch size, and optional long-poll/filter parameters for reading session events.
@@ -13299,6 +13649,10 @@ export interface ModelCapabilitiesSupports {
      * Whether this model supports vision/image input
      */
     vision?: boolean;
+    /**
+     * Whether this model supports canonical tool calling
+     */
+    toolCalls?: boolean;
     /**
      * Whether this model supports reasoning effort configuration
      */
@@ -13600,6 +13954,10 @@ export interface ModelCapabilitiesOverrideSupports {
      * Whether this model supports vision/image input
      */
     vision?: boolean;
+    /**
+     * Whether this model supports canonical tool calling
+     */
+    toolCalls?: boolean;
     /**
      * Whether this model supports reasoning effort configuration
      */
@@ -13839,9 +14197,9 @@ export interface ModelSwitchToRequest {
      */
     autoTier?: AutoTier | null;
     /**
-     * Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. "none" disables reasoning. When omitted, no effort override is applied.
+     * Reasoning effort level to use for the model. CAPI values are model-defined and validated against the selected model; BYOK providers may define additional values. "none" disables reasoning. Pass null to clear any session effort override and fall back to the model's default. When omitted, the session's current effort is kept.
      */
-    reasoningEffort?: string;
+    reasoningEffort?: string | null;
     reasoningSummary?: ReasoningSummary;
     verbosity?: Verbosity;
     modelCapabilities?: ModelCapabilitiesOverride;
@@ -15198,7 +15556,7 @@ export interface PermissionPathsConfig {
     workspacePath?: string;
 }
 /**
- * Snapshot of the session's allow-listed directories and primary working directory.
+ * Snapshot of the session's recursive directory grants, exact session-approved paths, and primary working directory.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "PermissionPathsList".
@@ -15209,6 +15567,10 @@ export interface PermissionPathsList {
      * All directories currently allowed for tool access on this session.
      */
     directories: string[];
+    /**
+     * Exact paths approved for this session without recursively allowing their descendants.
+     */
+    sessionApprovedPaths?: string[];
     /**
      * The primary working directory for this session.
      */
@@ -15514,7 +15876,7 @@ export interface PermissionsPathsAddResult {
     success: boolean;
 }
 /**
- * No parameters; returns the session's allow-listed directories.
+ * No parameters; returns the session's recursive directory grants and exact session-approved paths.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "PermissionsPathsListRequest".
@@ -15545,7 +15907,7 @@ export interface PermissionsPathsUpdatePrimaryResult {
 export interface PermissionsPendingRequestsRequest {
 }
 /**
- * Clears session-scoped tool permission approvals, and optionally the location-scoped ones.
+ * Clears session-scoped tool approvals and optionally clears location-scoped approvals and exact session-approved paths.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "PermissionsResetSessionApprovalsRequest".
@@ -15553,7 +15915,7 @@ export interface PermissionsPendingRequestsRequest {
 /** @experimental */
 export interface PermissionsResetSessionApprovalsRequest {
     /**
-     * Whether location-scoped approvals are cleared too. Defaults to `true`.
+     * Whether location-scoped approvals and exact session-approved paths are cleared too. Defaults to `true`.
      */
     includeLocation?: boolean;
 }
@@ -16225,6 +16587,10 @@ export interface SystemMessageBlock {
      * Whether the block is static and may be cached independently of dynamic prompt content.
      */
     isStatic?: boolean;
+    /**
+     * Whether providers with explicit prompt caching should place a cache breakpoint after this block.
+     */
+    cacheBreakpoint?: boolean;
 }
 /** @experimental */
 export interface ProtocolSystemMessageCustomizeConfig {
@@ -16299,6 +16665,12 @@ export interface ProviderModelConfig {
     maxOutputTokens?: number;
     capabilities?: ModelCapabilitiesOverride;
     systemMessage?: ProtocolSystemMessageConfig;
+    /**
+     * Provider-published model metadata, preserved verbatim as the public Model.metadata object.
+     */
+    metadata?: {
+        [k: string]: JsonValue | undefined;
+    };
 }
 /**
  * The selectable model entries synthesized for the models added by this call.
@@ -16425,6 +16797,44 @@ export interface ProviderSessionToken {
      */
     expiresAt?: string;
 }
+/**
+ * Authoritative BYOK provider and model registry snapshot to apply atomically to the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderSyncRequest".
+ */
+/** @experimental */
+export interface ProviderSyncRequest {
+    /**
+     * Named BYOK provider connection snapshot. Providers absent from this list are removed.
+     */
+    providers?: NamedProviderConfig[];
+    /**
+     * BYOK model definition snapshot. Models absent from this list are removed.
+     */
+    models?: ProviderModelConfig[];
+}
+/**
+ * The selectable model entries and selection ids synthesized for the synchronized BYOK models.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderSyncResult".
+ */
+/** @experimental */
+export interface ProviderSyncResult {
+    /**
+     * Synthesized selectable model entries for the synchronized BYOK models.
+     */
+    models: JsonValue[];
+    /**
+     * Provider-qualified model selection ids present after synchronization.
+     */
+    selectionIds: string[];
+    /**
+     * True when synchronization withdrew the selected host-managed model, leaving the session with no explicit selection, so ordinary model resolution picks the session default. Synchronization never promotes a surviving host model in its place: publishing a model offers it, and the choice of which model to use stays with the user.
+     */
+    modelDeselected?: boolean;
+}
 /**
  * Asks the SDK client to acquire a bearer token for a BYOK provider whose config set `hasBearerTokenProvider: true`. Issued by the runtime before each outbound model request; the runtime does no caching, so this is sent once per request.
  *
@@ -19657,6 +20067,10 @@ export interface SessionOpenOptions {
      * Additional directories to search for skills.
      */
     skillDirectories?: string[];
+    /**
+     * Skill scan directories and descendants excluded from discovery. Supports `~`-relative paths.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * Whether skill loading is enabled. When omitted, an SDK skill provider enables skills by default.
      */
@@ -21137,6 +21551,10 @@ export interface SessionUpdateOptionsParams {
      * Additional directories to search for skills.
      */
     skillDirectories?: string[];
+    /**
+     * Skill scan directories and descendants excluded from discovery. Supports `~`-relative paths.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * Built-in skill names to include in this session. When specified, only these runtime-bundled skills are available. Skills from other sources with the same name remain available. Set to null to remove the allowlist restriction.
      */
@@ -21565,6 +21983,10 @@ export interface SkillsDiscoverRequest {
      * Optional list of additional skill directory paths to include
      */
     skillDirectories?: string[];
+    /**
+     * Optional skill scan paths to exclude from discovery.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * When true, omit skills from the host's global sources (personal, custom, plugin, and built-in), returning only project-scoped skills. For multitenant deployments.
      */
@@ -21595,6 +22017,10 @@ export interface SkillsGetDiscoveryPathsRequest {
      * Optional list of project directory paths. When omitted or empty, only personal and custom directories are returned.
      */
     projectPaths?: string[];
+    /**
+     * Optional skill scan paths to exclude from discovery.
+     */
+    ignoredSkillsLocations?: string[];
     /**
      * When true, omit the host's personal and custom skill directories, leaving only project directories. For multitenant deployments.
      */
@@ -22668,6 +23094,12 @@ export interface Tool {
      * Optional instructions for how to use this tool effectively
      */
     instructions?: string;
+    /**
+     * Telemetry-safety policy for the tool name and input names, not input values. Treat omitted metadata as unsafe.
+     *
+     * @experimental
+     */
+    safeForTelemetry?: BuiltinToolSafeForTelemetry;
 }
 /**
  * Built-in tools available for the requested model, with their parameters and instructions.
@@ -27306,6 +27738,77 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         };
     };
     /** @experimental */
+    connectors: {
+        /**
+         * Returns feature availability and bounded polling limits for the EXPERIMENTAL session connector API. This method never performs a Connector service request.
+         *
+         * @returns Feature detection and hard polling limits for the EXPERIMENTAL session connector API.
+         */
+        getCapabilities: () => Promise<ConnectorCapabilities>;
+        /**
+         * Returns authoritative session Connector state from current availability, pinned account selection, cached catalog, and live MCP projection without performing a Connector service request.
+         *
+         * @returns Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+         */
+        getStatus: () => Promise<ConnectorStatus>;
+        /**
+         * Returns the cached Connector catalog for the pinned opaque account selection, fetching it only when this session has no cached catalog.
+         *
+         * @param params Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
+         *
+         * @returns Validated Connector catalog snapshot cached by the session.
+         */
+        list: (params: ConnectorAccountRequest) => Promise<ConnectorCatalogResult>;
+        /**
+         * Refreshes and validates the Connector catalog for the pinned opaque account selection.
+         *
+         * @param params Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
+         *
+         * @returns Validated Connector catalog snapshot cached by the session.
+         */
+        refresh: (params: ConnectorAccountRequest) => Promise<ConnectorCatalogResult>;
+        /**
+         * Initiates an idempotent Connector connection request without opening a browser. Returns connected when the service is immediately authoritative, consent_required with a validated URL, or pending with an opaque continuation ID.
+         *
+         * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+         *
+         * @returns Typed result of initiating or continuing a Connector connection.
+         */
+        connect: (params: ConnectorConnectRequest) => Promise<ConnectorConnectResult>;
+        /**
+         * Re-initiates an idempotent Connector connection request without browser or UI effects, with the same typed outcomes as connect.
+         *
+         * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+         *
+         * @returns Typed result of initiating or continuing a Connector connection.
+         */
+        reconnect: (params: ConnectorConnectRequest) => Promise<ConnectorConnectResult>;
+        /**
+         * Continues a pending Connector connection with caller-supplied attempt, interval, and deadline bounds. The runtime never opens the returned consent URL.
+         *
+         * @param params Explicitly bounded continuation of a pending Connector connection.
+         *
+         * @returns Typed result of initiating or continuing a Connector connection.
+         */
+        continueConnection: (params: ConnectorContinueRequest) => Promise<ConnectorConnectResult>;
+        /**
+         * Disconnects one Connector for the pinned opaque account selection, refreshes the authoritative catalog, and removes its session-owned MCP projection.
+         *
+         * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+         *
+         * @returns Authoritative result after disconnect and MCP reconciliation.
+         */
+        disconnect: (params: ConnectorConnectRequest) => Promise<ConnectorDisconnectResult>;
+        /**
+         * Reconciles the authoritative cached or freshly requested Connector catalog into the session Connector MCP projection and returns live status.
+         *
+         * @param params Requests authoritative Connector-to-MCP reconciliation for the pinned account.
+         *
+         * @returns Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+         */
+        reconcile: (params: ConnectorReconcileRequest) => Promise<ConnectorStatus>;
+    };
+    /** @experimental */
     managedSettings: {
         /**
          * Waits for the live session's in-flight managed-settings application, then returns the retained effective snapshot used by runtime enforcement and by `session.managed_settings_resolved`. It does not perform another account, device, or server resolution, and rejects when resolution has not produced a snapshot.
@@ -27422,6 +27925,14 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns The selectable model entries synthesized for the models added by this call.
          */
         add: (params: ProviderAddRequest) => Promise<ProviderAddResult>;
+        /**
+         * Atomically updates the session's BYOK provider and model registry by applying the supplied snapshot, replacing existing entries, updating models, or removing entries absent from the snapshot.
+         *
+         * @param params Authoritative BYOK provider and model registry snapshot to apply atomically to the session.
+         *
+         * @returns The selectable model entries and selection ids synthesized for the synchronized BYOK models.
+         */
+        sync: (params: ProviderSyncRequest) => Promise<ProviderSyncResult>;
     };
     /** @experimental */
     options: {
@@ -27747,9 +28258,9 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          */
         setRequired: (params: PermissionsSetRequiredRequest) => Promise<PermissionsSetRequiredResult>;
         /**
-         * Clears session-scoped tool permission approvals.
+         * Clears session-scoped tool approvals and, for full resets, exact session-approved paths.
          *
-         * @param params Clears session-scoped tool permission approvals, and optionally the location-scoped ones.
+         * @param params Clears session-scoped tool approvals and optionally clears location-scoped approvals and exact session-approved paths.
          *
          * @returns Indicates whether the operation succeeded.
          */
@@ -27765,9 +28276,9 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         /** @experimental */
         paths: {
             /**
-             * Returns the session's allowed directories and primary working directory.
+             * Returns the session's recursive directory grants, exact session-approved paths, and primary working directory.
              *
-             * @returns Snapshot of the session's allow-listed directories and primary working directory.
+             * @returns Snapshot of the session's recursive directory grants, exact session-approved paths, and primary working directory.
              */
             list: () => Promise<PermissionPathsList>;
             /**
@@ -28515,7 +29026,7 @@ export interface LlmInferenceHandler {
 /** @experimental */
 export interface GitHubTelemetryHandler {
     /**
-     * Forwards a single GitHub telemetry event to a host connection that opted into telemetry forwarding during the `server.connect` handshake. Opted-in connections receive every event the runtime emits after the handshake — across all sessions, plus sessionless events (for example, `server.sendTelemetry` calls with no session id).
+     * Forwards a single GitHub telemetry event to a host connection that opted into telemetry forwarding during the `server.connect` handshake. Opted-in connections receive their runtime host's events across all its sessions, its sessionless events (for example, `server.sendTelemetry`), and explicitly process-wide events. Events owned by another independently embedded runtime host are not forwarded to this connection.
      *
      * @param params Payload for a `gitHubTelemetry.event` notification: a single GitHub telemetry event the runtime forwards to a host connection that opted into telemetry forwarding during the `server.connect` handshake.
      */