@github/copilot-sdk 1.0.15 → 1.0.16

package/dist/generated/rpc.d.ts

@@ -1743,6 +1743,24 @@ export type EntraTokenAcquireResult = {
      */
     status: "interaction-required";
 };
+/**
+ * GitHub Mission Control compute kind.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnvironmentKind".
+ */
+/** @experimental */
+export type EnvironmentKind = 
+/** A user-managed environment on a local machine. */
+"user-local"
+/** A user-managed environment in a GitHub Codespace. */
+ | "user-codespace"
+/** A GitHub-managed environment backed by GitHub Actions. */
+ | "managed-actions"
+/** A GitHub-managed sandbox environment. */
+ | "managed-sandbox"
+/** A GitHub-managed cloud coding agent environment. */
+ | "managed-cca";
 /**
  * Either '*' to receive all event types, or a non-empty list of event types to receive
  *
@@ -2022,6 +2040,16 @@ export type HistoryRewindOutcome =
  | "checkpoint-cleanup-failed"
 /** Files and conversation were rewound, but obsolete file snapshots could not be removed; only conversation-and-files rewinds produce this. */
  | "snapshot-prune-failed";
+/** @experimental */
+export type HostExitReason = 
+/** The owner requested disposal. */
+"disposed"
+/** The hosting task or its SDK transport exited; this does not mean the runtime process exited. */
+ | "exited"
+/** The owning SDK connection disconnected. */
+ | "ownerDisconnected"
+/** The runtime is shutting down. */
+ | "runtimeShutdown";
 /**
  * Only resource kinds with an implemented installation engine have a review variant.
  *
@@ -3648,7 +3676,7 @@ export type OptionsUpdateToolFilterPrecedence =
  * via the `definition` "PermissionDecision".
  */
 /** @experimental */
-export type PermissionDecision = PermissionDecisionApproveOnce | PermissionDecisionApproveForSession | PermissionDecisionApproveForLocation | PermissionDecisionApprovePermanently | PermissionDecisionReject | PermissionDecisionUserNotAvailable | PermissionDecisionApproved | PermissionDecisionApprovedForSession | PermissionDecisionApprovedForLocation | PermissionDecisionCancelled | PermissionDecisionDeniedByRules | PermissionDecisionDeniedNoApprovalRuleAndCouldNotRequestFromUser | PermissionDecisionDeniedInteractivelyByUser | PermissionDecisionDeniedByContentExclusionPolicy | PermissionDecisionDeniedByPermissionRequestHook;
+export type PermissionDecision = PermissionDecisionApproveOnce | PermissionDecisionApproveForSession | PermissionDecisionApproveReadOnlyForSession | PermissionDecisionApproveForLocation | PermissionDecisionApprovePermanently | PermissionDecisionReject | PermissionDecisionUserNotAvailable | PermissionDecisionApproved | PermissionDecisionApprovedForSession | PermissionDecisionApprovedForLocation | PermissionDecisionCancelled | PermissionDecisionDeniedByRules | PermissionDecisionDeniedNoApprovalRuleAndCouldNotRequestFromUser | PermissionDecisionDeniedInteractivelyByUser | PermissionDecisionDeniedByContentExclusionPolicy | PermissionDecisionDeniedByPermissionRequestHook;
 /**
  * Session-scoped approval to remember (tool prompts only; omitted for path/url prompts)
  *
@@ -4060,7 +4088,7 @@ export type ResponseFormat = {
     type: "json_schema";
 };
 /**
- * Origin of the sandbox choice supplied by the host. Settings-derived origins let managed policy floor the host preference; do not tag explicit session overrides as settings-derived.
+ * Origin of the sandbox choice supplied by the host. This value describes preference or session intent; it does not authorize bypassing managed policy.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SandboxConfigSource".
@@ -4073,7 +4101,7 @@ export type SandboxConfigSource =
  | "user_enabled"
 /** The user's persisted settings disabled the sandbox. */
  | "user_disabled"
-/** A command-line flag selected the sandbox state for this session. */
+/** An explicit session-scoped choice selected the sandbox state, such as a command-line flag. */
  | "session_flag"
 /** The user disabled the sandbox for the current session. */
  | "session_disabled"
@@ -9866,6 +9894,148 @@ export interface EntraTokenAcquireRequest {
      */
     accessTokenToRenew?: string;
 }
+/**
+ * Hosting capabilities and session capacity advertised by an environment.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnvironmentCapabilities".
+ */
+/** @experimental */
+export interface EnvironmentCapabilities {
+    /**
+     * Advertised Agent Host Protocol version.
+     */
+    ahpVersion?: string;
+    /**
+     * Feature identifiers advertised by the environment.
+     */
+    features: string[];
+    /**
+     * Maximum session capacity, when advertised.
+     */
+    maxSessions?: number;
+    /**
+     * Current session count, when advertised.
+     */
+    currentSessions?: number;
+}
+/**
+ * Identify a user-managed Mission Control environment to delete.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnvironmentsDeleteRequest".
+ */
+/** @experimental */
+export interface EnvironmentsDeleteRequest {
+    /**
+     * User-managed environment to delete. GitHub-managed environments cannot be deleted.
+     */
+    environmentId: string;
+}
+/**
+ * Acknowledgement that the requested environment was deleted.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnvironmentsDeleteResult".
+ */
+/** @experimental */
+export interface EnvironmentsDeleteResult {
+}
+/**
+ * Identify a Mission Control environment to retrieve.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnvironmentsGetRequest".
+ */
+/** @experimental */
+export interface EnvironmentsGetRequest {
+    /**
+     * Identifier assigned by Mission Control.
+     */
+    environmentId: string;
+}
+/**
+ * Safe discovery information for the requested environment.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnvironmentsGetResult".
+ */
+/** @experimental */
+export interface EnvironmentsGetResult {
+    environment: GitHubEnvironment;
+}
+/**
+ * Safe discovery information. Host-side relay bootstrap credentials are never included.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GitHubEnvironment".
+ */
+/** @experimental */
+export interface GitHubEnvironment {
+    /**
+     * Identifier assigned by Mission Control.
+     */
+    id: string;
+    /**
+     * Human-readable environment name.
+     */
+    name: string;
+    kind: EnvironmentKind;
+    /**
+     * Open-ended operational status vocabulary.
+     */
+    status: string;
+    capabilities?: EnvironmentCapabilities;
+    /**
+     * Identifier of the environment owner.
+     */
+    ownerId?: string;
+    /**
+     * Owner category reported by Mission Control.
+     */
+    ownerType?: string;
+    /**
+     * Organization identifier, when the environment belongs to an organization.
+     */
+    orgId?: string;
+    /**
+     * Discovery labels attached to the environment.
+     */
+    labels?: {
+        [k: string]: string | undefined;
+    };
+    /**
+     * Timestamp of the last heartbeat received by Mission Control.
+     */
+    lastHeartbeatAt?: string;
+}
+/**
+ * Optional discovery filters supported by GitHub Mission Control.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnvironmentsListRequest".
+ */
+/** @experimental */
+export interface EnvironmentsListRequest {
+    kind?: EnvironmentKind;
+    /**
+     * Operational status, such as online, offline, degraded, waking, or draining.
+     */
+    status?: string;
+}
+/**
+ * Environments visible to the authenticated caller and matching the supplied filters.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnvironmentsListResult".
+ */
+/** @experimental */
+export interface EnvironmentsListResult {
+    /**
+     * Safe discovery records without relay bootstrap credentials.
+     */
+    environments: GitHubEnvironment[];
+}
 /**
  * Cursor, batch size, and optional long-poll/filter parameters for reading session events.
  *
@@ -11008,6 +11178,394 @@ export interface HooksDiscoverResult {
      */
     errors: string[];
 }
+/**
+ * Normalized listener settings delivered only to the supervised hosting participant.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostConfiguration".
+ */
+/** @experimental */
+export interface HostConfiguration {
+    localServer?: HostLocalServerConfiguration;
+    githubEnvironment?: HostGitHubEnvironmentOptions;
+    /**
+     * Whether session materialization is delegated to the owning application.
+     */
+    sessionFactory: boolean;
+    /**
+     * Whether app-owned durable sessions are resumed by the owning application.
+     */
+    resumeFactory: boolean;
+}
+/**
+ * Normalized local WebSocket listener settings.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostLocalServerConfiguration".
+ */
+/** @experimental */
+export interface HostLocalServerConfiguration {
+    /**
+     * Hostname or IP address to bind.
+     */
+    hostname: string;
+    /**
+     * Port to bind, with zero requesting OS allocation.
+     */
+    port: number;
+    /**
+     * Secret connection token, absent when authentication is disabled.
+     */
+    token?: string;
+    /**
+     * Whether the listener requires token authentication.
+     */
+    requireConnectionToken: boolean;
+}
+/**
+ * GitHub Mission Control registration options. The compute ID is application-owned and stable.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostGitHubEnvironmentOptions".
+ */
+/** @experimental */
+export interface HostGitHubEnvironmentOptions {
+    /**
+     * Human-readable environment display name.
+     */
+    name: string;
+    /**
+     * Stable application installation identity, reused across host restarts.
+     */
+    computeId: string;
+}
+/**
+ * Stops a connection-owned listener and joins its teardown.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostDisposeRequest".
+ */
+/** @experimental */
+export interface HostDisposeRequest {
+    /**
+     * Listener UUID. Unknown or successfully stopped IDs are harmless.
+     */
+    hostId: string;
+}
+/**
+ * Empty acknowledgement for a completed host lifecycle operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostEmptyResult".
+ */
+/** @experimental */
+export interface HostEmptyResult {
+}
+/**
+ * Private credentials delivered only to a runtime-owned Mission Control hosting participant.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostEnvironmentCredentials".
+ */
+/** @experimental */
+export interface HostEnvironmentCredentials {
+    /**
+     * Current bearer token for the authenticated GitHub identity.
+     */
+    token: string;
+    /**
+     * Hostname of the authenticated GitHub service.
+     */
+    githubHost: string;
+    /**
+     * GitHub API base URL for the authenticated service.
+     */
+    githubApiUrl: string;
+    /**
+     * Mission Control API origin for environment registration and management.
+     */
+    missionControlUrl: string;
+}
+/**
+ * Reports a supervised listener's hosting-task termination and cleanup outcome.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostExitedNotification".
+ */
+/** @experimental */
+export interface HostExitedNotification {
+    /**
+     * Listener UUID.
+     */
+    hostId: string;
+    reason: HostExitReason;
+    /**
+     * Process exit status when available; absent for in-process listener tasks.
+     */
+    exitCode?: number | null;
+    /**
+     * Explicit startup or teardown failure, when present.
+     */
+    error?: string | null;
+}
+/**
+ * Local WebSocket transport options.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostLocalServerOptions".
+ */
+/** @experimental */
+export interface HostLocalServerOptions {
+    /**
+     * Listener hostname. Defaults to 127.0.0.1; explicit non-loopback binds are allowed.
+     */
+    hostname?: string;
+    /**
+     * Listener port. Omitted or zero requests an OS-allocated port.
+     */
+    port?: number;
+    /**
+     * Nonempty connection token. Generated randomly when required and omitted.
+     */
+    token?: string;
+    /**
+     * Require token authentication (default true). Cannot be false with a token.
+     */
+    requireConnectionToken?: boolean;
+}
+/**
+ * Publishes a resident session attached to the listener's owning connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostPublishSessionRequest".
+ */
+/** @experimental */
+export interface HostPublishSessionRequest {
+    /**
+     * Listener UUID returned by host.start.
+     */
+    hostId: string;
+    /**
+     * Canonical runtime session ID attached to the listener's owning connection.
+     */
+    sessionId: string;
+}
+/**
+ * The existing runtime identity and its resource on the listener.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostPublishSessionResult".
+ */
+/** @experimental */
+export interface HostPublishSessionResult {
+    /**
+     * Canonical runtime ID of the published session.
+     */
+    sessionId: string;
+    /**
+     * AHP resource URI for the session on this listener.
+     */
+    sessionUri: string;
+}
+/**
+ * Readiness reported by the supervised hosting participant on its own SDK connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostReadyRequest".
+ */
+/** @experimental */
+export interface HostReadyRequest {
+    /**
+     * Actual bound WebSocket URL.
+     */
+    address?: string;
+    /**
+     * Configured secret token, absent when authentication is disabled.
+     */
+    token?: string;
+    /**
+     * Registered environment ID, reported only once the relay transport is connected.
+     */
+    environmentId?: string;
+}
+/**
+ * Listener-scoped registration, not a copy or durable adoption of a session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostRegisterSessionRequest".
+ */
+/** @experimental */
+export interface HostRegisterSessionRequest {
+    /**
+     * Canonical ID of the existing resident runtime session.
+     */
+    sessionId: string;
+    /**
+     * Absolute working directory of the resident session.
+     */
+    workingDirectory: string;
+    /**
+     * Additional directories already granted to the resident session.
+     */
+    additionalDirectories?: string[];
+    /**
+     * Current display title of the resident session, when available.
+     */
+    title?: string;
+    /**
+     * Session creation time in milliseconds since the Unix epoch, when available.
+     */
+    createdAtUnixMs?: number;
+    /**
+     * Last session modification time in milliseconds since the Unix epoch, when available.
+     */
+    modifiedAtUnixMs?: number;
+}
+/**
+ * Application callback routed over its existing SDK connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostSessionCreateCallback".
+ */
+/** @experimental */
+export interface HostSessionCreateCallback {
+    /**
+     * Listener UUID identifying the owning application's host.
+     */
+    hostId: string;
+    /**
+     * Unique identity of the session participation being requested.
+     */
+    handoffId: string;
+    /**
+     * Resume an app-owned durable session instead of creating a new session.
+     */
+    resume?: boolean;
+    /**
+     * Host-selected SDK creation or resume settings, without executable callbacks or tools.
+     */
+    config: {
+        [k: string]: unknown | undefined;
+    };
+}
+/**
+ * One application-owned session handoff, requested by the supervised hosting participant.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostSessionCreateRequest".
+ */
+/** @experimental */
+export interface HostSessionCreateRequest {
+    /**
+     * Unique identity for this participation, independent of the session lifetime.
+     */
+    handoffId: string;
+    /**
+     * Resume an app-owned durable session instead of creating a new session.
+     */
+    resume?: boolean;
+    /**
+     * Host-selected SDK creation or resume settings, without executable callbacks or tools.
+     */
+    config: {
+        [k: string]: unknown | undefined;
+    };
+}
+/**
+ * The resident session the application has materialized on its own connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostSessionCreateResult".
+ */
+/** @experimental */
+export interface HostSessionCreateResult {
+    /**
+     * Runtime session UUID materialized on the application's SDK connection.
+     */
+    sessionId: string;
+}
+/**
+ * Releases the original application session object retained for one handoff.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostSessionReleasedNotification".
+ */
+/** @experimental */
+export interface HostSessionReleasedNotification {
+    /**
+     * Listener UUID whose application session participation ended.
+     */
+    hostId: string;
+    /**
+     * Identity of the handoff retaining the original application session object.
+     */
+    handoffId: string;
+}
+/**
+ * Ends one participation, not the application's session lifetime.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostSessionReleaseRequest".
+ */
+/** @experimental */
+export interface HostSessionReleaseRequest {
+    /**
+     * Identity of the participation to release without destroying the session.
+     */
+    handoffId: string;
+}
+/**
+ * Starts a supervised AHP host with at least one explicitly selected transport.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostStartRequest".
+ */
+/** @experimental */
+export interface HostStartRequest {
+    /**
+     * Caller-generated UUID identifying this connection-owned listener.
+     */
+    hostId: string;
+    localServer?: HostLocalServerOptions;
+    githubEnvironment?: HostGitHubEnvironmentOptions;
+    /**
+     * Ask the owning SDK application to materialize AHP sessions.
+     */
+    sessionFactory?: boolean;
+    /**
+     * Ask the owning application to resume its durable AHP sessions.
+     */
+    resumeFactory?: boolean;
+}
+/**
+ * Listener readiness, returned only after binding and the supervised participant's SDK handshake.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostStartResult".
+ */
+/** @experimental */
+export interface HostStartResult {
+    /**
+     * Caller-generated listener UUID.
+     */
+    hostId: string;
+    /**
+     * Actual bound WebSocket URL, including the allocated port.
+     */
+    url?: string;
+    /**
+     * Secret connection token, absent when authentication is disabled.
+     */
+    token?: string;
+    /**
+     * GitHub Mission Control environment ID, present when its relay transport is ready.
+     */
+    environmentId?: string;
+    /**
+     * Separate host process ID, when provided by a legacy runtime. Absent for in-process listeners.
+     */
+    pid?: number;
+}
 /**
  * Catalogue identity retained from a bound candidate or plan at installation time.
  *
@@ -15940,21 +16498,40 @@ export interface PermissionDecisionApproveForSessionApprovalExtensionPermissionA
  * via the `definition` "PermissionDecisionApproveForSessionApprovalExtensionEnvAccess".
  */
 /** @experimental */
-export interface PermissionDecisionApproveForSessionApprovalExtensionEnvAccess {
-    /**
-     * Approval covering an extension's request to read sensitive environment variables.
-     */
-    kind: "extension-env-access";
+export interface PermissionDecisionApproveForSessionApprovalExtensionEnvAccess {
+    /**
+     * Approval covering an extension's request to read sensitive environment variables.
+     */
+    kind: "extension-env-access";
+    /**
+     * Extension name.
+     */
+    extensionName: string;
+    /**
+     * Names of the sensitive environment variables this approval covers. Values are never persisted.
+     *
+     * @minItems 1
+     */
+    environmentVariables: [string, ...string[]];
+}
+/**
+ * Approve file-tool read access to specific directories for this logical session, including continuation or resume.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PermissionDecisionApproveReadOnlyForSession".
+ */
+/** @experimental */
+export interface PermissionDecisionApproveReadOnlyForSession {
     /**
-     * Extension name.
+     * Approve read-only file-tool directory access for this session
      */
-    extensionName: string;
+    kind: "approve-read-only-for-session";
     /**
-     * Names of the sensitive environment variables this approval covers. Values are never persisted.
+     * Canonical directories covered by the read-only grant
      *
      * @minItems 1
      */
-    environmentVariables: [string, ...string[]];
+    directories: [string, ...string[]];
 }
 /**
  * Permission-decision request variant to approve and persist a permission for a project location, with approval details and location key.
@@ -18032,6 +18609,40 @@ export interface ProviderTokenAcquireResult {
      */
     token: string;
 }
+/**
+ * Host-managed model selection ids to withdraw from the session's BYOK registry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderWithdrawRequest".
+ */
+/** @experimental */
+export interface ProviderWithdrawRequest {
+    /**
+     * Provider-qualified selection ids to withdraw. Ids that are not registered are ignored, so withdrawal is idempotent. A provider left with no models referencing it is removed too.
+     */
+    models: string[];
+}
+/**
+ * What the withdrawal actually removed from the registry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderWithdrawResult".
+ */
+/** @experimental */
+export interface ProviderWithdrawResult {
+    /**
+     * Selection ids that were registered and are now withdrawn. Excludes requested ids that were not present.
+     */
+    withdrawn: string[];
+    /**
+     * Providers removed because one of the withdrawn models was the last entry referencing them. A provider that merely has no models is not removed.
+     */
+    providersRemoved: string[];
+    /**
+     * True when withdrawal removed the selected host-managed model, leaving the session with no explicit selection, so ordinary model resolution picks the session default. Withdrawal never promotes a surviving model in its place: the choice of which model to use stays with the user.
+     */
+    modelDeselected?: boolean;
+}
 /**
  * File attachment
  *
@@ -19392,6 +20003,7 @@ export interface SandboxConfig {
      */
     allowBypass?: boolean;
     auth?: SandboxConfigAuth;
+    credentials?: SandboxCredentialsConfig;
     /**
      * Whether to auto-grant read access to tool directories discovered on PATH and in toolchain environment variables (GOROOT, JAVA_HOME, VIRTUAL_ENV, and similar), and to common developer-tool caches, config, and toolchains. Writable grants cover scratch caches, the Unix GitHub CLI cache, and Cargo's registry, git store, and lock/tracker files. A relocated CARGO_HOME gets the same narrow split: registry and git are read-write; bin is read-only; the home root, config.toml, and credentials.toml stay ungranted. Set to false to disable every grant listed above; user-installed toolchains and caches then need explicit userPolicy.filesystem readonlyPaths and readwritePaths entries. The working directory (see addCurrentWorkingDirectory), temporary storage, session log paths, and system locations follow their own rules and stay granted. Default: true (enabled by default; set to false to opt out).
      */
@@ -19527,14 +20139,42 @@ export interface SandboxConfigUserPolicyExperimentalSeatbelt {
 /** @experimental */
 export interface SandboxConfigAuth {
     /**
-     * Whether to inject git credentials as an `http.<url>.extraheader` so authenticated HTTPS git works inside the sandbox without the shell-based credential helper the sandbox blocks. github.com is served by the Copilot token; every other forge (Azure DevOps, GitHub Enterprise Server, GitLab, ...) by a credential the host resolves from the user's own helper before the sandbox is applied. Default: false (opt-in).
+     * Whether to authenticate sandboxed HTTPS git through the local masking proxy. The child receives a fake `http.<url>.extraheader`; the real Authorization header is substituted only at its original HTTPS host, port, and repository path scope. github.com uses the Copilot token; other forges use credentials resolved from the user's own helper on the host. Default: false (opt-in).
      */
     git?: boolean;
     /**
-     * Whether to export `GH_TOKEN` so the `gh` CLI authenticates inside the sandbox without the OS keyring the sandbox blocks. Default: false (opt-in).
+     * Whether to authenticate sandboxed gh through the local masking proxy. The child receives a fake GH_TOKEN; its real value is substituted only at github.com, api.github.com and uploads.github.com (github.com because gh repo clone authenticates git through gh auth git-credential). The repository's GitHub account takes precedence over the Copilot login. Default: false (opt-in).
      */
     gh?: boolean;
 }
+/**
+ * Whole-value environment credential masking for sandboxed children.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxCredentialsConfig".
+ */
+/** @experimental */
+export interface SandboxCredentialsConfig {
+    /**
+     * Environment variable names and their HTTPS injection destinations. Absent variables stay absent. No real values or sentinels are stored in this map.
+     */
+    envVars: {
+        [k: string]: SandboxMaskedEnvVar | undefined;
+    };
+}
+/**
+ * Destinations authorized to receive one masked environment credential.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxMaskedEnvVar".
+ */
+/** @experimental */
+export interface SandboxMaskedEnvVar {
+    /**
+     * Nonempty list of HTTPS injection hostnames or *.example.com patterns. Bare * is not accepted. These grants never override the sandbox network policy. Values in plaintext HTTP requests, URLs, bodies, encoded credentials, and signed requests are not substituted.
+     */
+    injectHosts: string[];
+}
 /**
  * Request to disable sandboxing for the current session while resolving an active sandbox-bypass permission prompt.
  *
@@ -19587,6 +20227,33 @@ export interface SandboxEnforcementStatus {
      */
     reason?: string;
 }
+/**
+ * Request to accept the sandbox path grant offered on an active sandbox escalation permission prompt.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxGrantPathForRequestRequest".
+ */
+/** @experimental */
+export interface SandboxGrantPathForRequestRequest {
+    /**
+     * Identifier of the exact pending sandbox escalation permission request whose sandboxPathGrant to accept.
+     */
+    requestId: string;
+    decisionContext?: PermissionDecisionContext;
+}
+/**
+ * Result of accepting a sandbox path grant.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxGrantPathForRequestResult".
+ */
+/** @experimental */
+export interface SandboxGrantPathForRequestResult {
+    /**
+     * Whether this call resolved the pending request and added the path to the session's sandbox policy.
+     */
+    success: boolean;
+}
 /**
  * Whether this host can run one sandbox policy feature. A session whose effective policy uses an unsupported feature fails each sandboxed command with `reason`.
  *
@@ -21277,6 +21944,11 @@ export interface SessionOpenOptions {
      */
     shellProcessFlags?: string[];
     sandboxConfig?: SandboxConfig;
+    /**
+     * Origin of the sandbox choice. Settings-derived origins (never_configured, user_enabled, user_disabled, repository_policy) let managed policy floor a host preference; explicit below-floor changes remain policy conflicts unless a session opt-out is authorized. Also used for telemetry provenance.
+     *
+     * @experimental
+     */
     sandboxConfigSource?: SandboxConfigSource;
     /**
      * Whether interactive shell sessions are logged.
@@ -22774,6 +23446,11 @@ export interface SessionUpdateOptionsParams {
      */
     shellProcessFlags?: string[];
     sandboxConfig?: SandboxConfig;
+    /**
+     * Origin of the sandbox choice. Settings-derived origins (never_configured, user_enabled, user_disabled, repository_policy) let managed policy floor a host preference; explicit below-floor changes remain policy conflicts unless a session opt-out is authorized. Also used for telemetry provenance.
+     *
+     * @experimental
+     */
     sandboxConfigSource?: SandboxConfigSource;
     /**
      * Whether interactive shell sessions are logged.
@@ -27265,6 +27942,126 @@ export interface WorkspacesWriteAutopilotObjectiveResult {
      */
     operation: string;
 }
+/**
+ * The resident session the application has materialized on its own connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostCreateSessionResult".
+ */
+/** @experimental */
+export interface HostCreateSessionResult {
+    /**
+     * Runtime session UUID materialized on the application's SDK connection.
+     */
+    sessionId: string;
+}
+/**
+ * One application-owned session handoff, requested by the supervised hosting participant.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostCreateSessionRequest".
+ */
+/** @experimental */
+export interface HostCreateSessionRequest {
+    /**
+     * Unique identity for this participation, independent of the session lifetime.
+     */
+    handoffId: string;
+    /**
+     * Resume an app-owned durable session instead of creating a new session.
+     */
+    resume?: boolean;
+    /**
+     * Host-selected SDK creation or resume settings, without executable callbacks or tools.
+     */
+    config: {
+        [k: string]: unknown | undefined;
+    };
+}
+/**
+ * Empty acknowledgement for a completed host lifecycle operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostReleaseSessionResult".
+ */
+/** @experimental */
+export interface HostReleaseSessionResult {
+}
+/**
+ * Ends one participation, not the application's session lifetime.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostReleaseSessionRequest".
+ */
+/** @experimental */
+export interface HostReleaseSessionRequest {
+    /**
+     * Identity of the participation to release without destroying the session.
+     */
+    handoffId: string;
+}
+/**
+ * Empty acknowledgement for a completed host lifecycle operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostDisposeResult".
+ */
+/** @experimental */
+export interface HostDisposeResult {
+}
+/**
+ * Private credentials delivered only to a runtime-owned Mission Control hosting participant.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostGetEnvironmentCredentialsResult".
+ */
+/** @experimental */
+export interface HostGetEnvironmentCredentialsResult {
+    /**
+     * Current bearer token for the authenticated GitHub identity.
+     */
+    token: string;
+    /**
+     * Hostname of the authenticated GitHub service.
+     */
+    githubHost: string;
+    /**
+     * GitHub API base URL for the authenticated service.
+     */
+    githubApiUrl: string;
+    /**
+     * Mission Control API origin for environment registration and management.
+     */
+    missionControlUrl: string;
+}
+/**
+ * Normalized listener settings delivered only to the supervised hosting participant.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostGetConfigurationResult".
+ */
+/** @experimental */
+export interface HostGetConfigurationResult {
+    localServer?: HostLocalServerConfiguration;
+    githubEnvironment?: HostGitHubEnvironmentOptions;
+    /**
+     * Whether session materialization is delegated to the owning application.
+     */
+    sessionFactory: boolean;
+    /**
+     * Whether app-owned durable sessions are resumed by the owning application.
+     */
+    resumeFactory: boolean;
+}
+/**
+ * Empty acknowledgement for a completed host lifecycle operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostReadyResult".
+ */
+/** @experimental */
+export interface HostReadyResult {
+}
 /** @experimental */
 export interface SessionWorkflowPauseAtCheckpointResult {
     action: WorkflowPauseCheckpointAction;
@@ -27476,6 +28273,111 @@ export interface SessionFsSqliteExistsRequest {
      */
     sessionId: string;
 }
+/**
+ * The existing runtime identity and its resource on the listener.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostRegisterSessionResult".
+ */
+/** @experimental */
+export interface HostRegisterSessionResult {
+    /**
+     * Canonical runtime ID of the published session.
+     */
+    sessionId: string;
+    /**
+     * AHP resource URI for the session on this listener.
+     */
+    sessionUri: string;
+}
+/**
+ * The resident session the application has materialized on its own connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostMaterializeSessionResult".
+ */
+/** @experimental */
+export interface HostMaterializeSessionResult {
+    /**
+     * Runtime session UUID materialized on the application's SDK connection.
+     */
+    sessionId: string;
+}
+/**
+ * Application callback routed over its existing SDK connection.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostMaterializeSessionRequest".
+ */
+/** @experimental */
+export interface HostMaterializeSessionRequest {
+    /**
+     * Listener UUID identifying the owning application's host.
+     */
+    hostId: string;
+    /**
+     * Unique identity of the session participation being requested.
+     */
+    handoffId: string;
+    /**
+     * Resume an app-owned durable session instead of creating a new session.
+     */
+    resume?: boolean;
+    /**
+     * Host-selected SDK creation or resume settings, without executable callbacks or tools.
+     */
+    config: {
+        [k: string]: unknown | undefined;
+    };
+}
+/**
+ * Releases the original application session object retained for one handoff.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostSessionReleasedRequest".
+ */
+/** @experimental */
+export interface HostSessionReleasedRequest {
+    /**
+     * Listener UUID whose application session participation ended.
+     */
+    hostId: string;
+    /**
+     * Identity of the handoff retaining the original application session object.
+     */
+    handoffId: string;
+}
+/**
+ * Empty acknowledgement for a completed host lifecycle operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostShutdownResult".
+ */
+/** @experimental */
+export interface HostShutdownResult {
+}
+/**
+ * Reports a supervised listener's hosting-task termination and cleanup outcome.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HostExitedRequest".
+ */
+/** @experimental */
+export interface HostExitedRequest {
+    /**
+     * Listener UUID.
+     */
+    hostId: string;
+    reason: HostExitReason;
+    /**
+     * Process exit status when available; absent for in-process listener tasks.
+     */
+    exitCode?: number | null;
+    /**
+     * Explicit startup or teardown failure, when present.
+     */
+    error?: string | null;
+}
 /**
  * A response is meaningful only on the connection and request that issued its challenge.
  *
@@ -27527,6 +28429,60 @@ export interface InstallationsConfirmRequest {
 }
 /** Create typed server-scoped RPC methods (no session required). */
 export declare function createServerRpc(connection: MessageConnection): {
+    /** @experimental */
+    environments: {
+        /**
+         * Lists GitHub Mission Control environments visible to the authenticated identity. Does not require a running host and excludes host relay credentials.
+         *
+         * @param params Optional discovery filters supported by GitHub Mission Control.
+         *
+         * @returns Environments visible to the authenticated caller and matching the supplied filters.
+         */
+        list: (params: EnvironmentsListRequest) => Promise<EnvironmentsListResult>;
+        /**
+         * Gets safe discovery information for a GitHub Mission Control environment without requiring a running host.
+         *
+         * @param params Identify a Mission Control environment to retrieve.
+         *
+         * @returns Safe discovery information for the requested environment.
+         */
+        get: (params: EnvironmentsGetRequest) => Promise<EnvironmentsGetResult>;
+        /**
+         * Deletes a user-managed GitHub Mission Control environment. GitHub-managed environments cannot be deleted. Does not stop a running host, which may register again.
+         *
+         * @param params Identify a user-managed Mission Control environment to delete.
+         *
+         * @returns Acknowledgement that the requested environment was deleted.
+         */
+        delete: (params: EnvironmentsDeleteRequest) => Promise<EnvironmentsDeleteResult>;
+    };
+    /** @experimental */
+    host: {
+        /**
+         * Publishes an attached resident session for this listener's lifetime without copying it.
+         *
+         * @param params Publishes a resident session attached to the listener's owning connection.
+         *
+         * @returns The existing runtime identity and its resource on the listener.
+         */
+        publishSession: (params: HostPublishSessionRequest) => Promise<HostPublishSessionResult>;
+        /**
+         * Starts a connection-owned AHP host with explicit localServer and/or githubEnvironment transports as a supervised SDK participant.
+         *
+         * @param params Starts a supervised AHP host with at least one explicitly selected transport.
+         *
+         * @returns Listener readiness, returned only after binding and the supervised participant's SDK handshake.
+         */
+        start: (params: HostStartRequest) => Promise<HostStartResult>;
+        /**
+         * Stops a listener owned by this SDK connection and joins its cleanup without deleting sessions.
+         *
+         * @param params Stops a connection-owned listener and joins its teardown.
+         *
+         * @returns Empty acknowledgement for a completed host lifecycle operation.
+         */
+        dispose: (params: HostDisposeRequest) => Promise<HostDisposeResult>;
+    };
     /**
      * Checks server responsiveness and returns protocol information.
      *
@@ -28400,6 +29356,14 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Result of attempting to disable sandboxing for the current session.
          */
         disableForSession: (params: SandboxDisableForSessionRequest) => Promise<SandboxDisableForSessionResult>;
+        /**
+         * Adds the path offered by a pending sandbox escalation permission request's sandboxPathGrant to the session's sandbox policy and approves the request, so the blocked operation re-runs inside the sandbox rather than outside it. The request is rejected unless the exact request is still pending, carries a sandboxPathGrant, and the grant still takes effect under the current managed policy. Does not persist the path; hosts that store sandbox settings save it themselves.
+         *
+         * @param params Request to accept the sandbox path grant offered on an active sandbox escalation permission prompt.
+         *
+         * @returns Result of accepting a sandbox path grant.
+         */
+        grantPathForRequest: (params: SandboxGrantPathForRequestRequest) => Promise<SandboxGrantPathForRequestResult>;
     };
     /**
      * Aborts the current agent turn.
@@ -29608,6 +30572,14 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns The selectable model entries and selection ids synthesized for the synchronized BYOK models.
          */
         sync: (params: ProviderSyncRequest) => Promise<ProviderSyncResult>;
+        /**
+         * Withdraws named host-managed models from the session's BYOK registry, leaving every other entry untouched. The scoped counterpart to `provider.sync`: a snapshot can only describe entries the caller knows about, so using it to remove one model silently withdraws rows registered by another source, such as a plugin calling `provider.add` at runtime. Naming what to remove leaves unrelated entries alone. Selection ids that are not registered are ignored, so withdrawal is idempotent. A provider is removed only when one of the withdrawn models was the last entry referencing it; a provider that simply has no models, which is the normal state while its rows are supplied by catalog discovery, is left in place.
+         *
+         * @param params Host-managed model selection ids to withdraw from the session's BYOK registry.
+         *
+         * @returns What the withdrawal actually removed from the registry.
+         */
+        withdraw: (params: ProviderWithdrawRequest) => Promise<ProviderWithdrawResult>;
     };
     /** @experimental */
     options: {
@@ -30644,6 +31616,16 @@ export interface ClientSessionApiHandlers {
  * function uses `getHandlers` to resolve the session's handlers.
  */
 export declare function registerClientSessionApiHandlers(connection: MessageConnection, getHandlers: (sessionId: string) => ClientSessionApiHandlers): void;
+/** Handler for `host` client global API methods. */
+/** @experimental */
+export interface HostHandler {
+    /**
+     * Reports termination of a connection-owned host listener.
+     *
+     * @param params Reports a supervised listener's hosting-task termination and cleanup outcome.
+     */
+    exited(params: HostExitedRequest): Promise<void>;
+}
 /** Handler for `extensionLaunchProvider` client global API methods. */
 /** @experimental */
 export interface ExtensionLaunchProviderHandler {
@@ -30712,6 +31694,7 @@ export interface InstallationsHandler {
 }
 /** All client global API handler groups. */
 export interface ClientGlobalApiHandlers {
+    host?: HostHandler;
     extensionLaunchProvider?: ExtensionLaunchProviderHandler;
     llmInference?: LlmInferenceHandler;
     gitHubTelemetry?: GitHubTelemetryHandler;