@github/copilot-sdk 1.0.17-preview.0 → 1.0.17-preview.10

package/dist/generated/rpc.d.ts

@@ -15,7 +15,7 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
  * via the `definition` "AuthInfo".
  */
 /** @experimental */
-export type AuthInfo = HMACAuthInfo | EnvAuthInfo | TokenAuthInfo | TokenProviderAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
+export type AuthInfo = HMACAuthInfo | EnvAuthInfo | TokenAuthInfo | TokenProviderAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | AccountAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
 /**
  * The provider kind stamped on a signed-in account.
  *
@@ -383,6 +383,8 @@ export type AuthInfoType =
  | "env"
 /** Authentication from an interactive user sign-in. */
  | "user"
+/** Authentication from a selected provider-owned account, without a GitHub credential. */
+ | "account"
 /** Authentication delegated to the GitHub CLI. */
  | "gh-cli"
 /** Authentication from an API key credential. */
@@ -445,17 +447,19 @@ export type AuthLoginStep = {
     kind: "error";
 };
 /**
- * Terminal disposition of a login persistence attempt.
+ * Disposition of a login attempt, including pending user decisions.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AuthLoginResultStatus".
  */
 /** @experimental */
 export type AuthLoginResultStatus = 
-/** The credential was persisted and the account is signed in. */
+/** The credential was persisted and the selected account is signed in. */
 "completed"
 /** Persistence needs explicit consent to store the token in plaintext. */
  | "needs-plaintext-consent"
+/** Credentials are saved; select an account using a returned selectionId as advance input to complete sign-in. */
+ | "needs-account-selection"
 /** The user declined plaintext persistence. */
  | "declined";
 /**
@@ -467,6 +471,7 @@ export type AuthLoginResultStatus =
 /** @experimental */
 export type AuthReadValue = {
     account?: AccountStatus;
+    authInfo?: AuthIdentity;
     /**
      * Account read-datum variant discriminator.
      */
@@ -1358,6 +1363,20 @@ export type ConnectorMcpStatus =
  | "disabled"
 /** The Connector currently has no live server configuration. */
  | "not_configured";
+/**
+ * Availability.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryAvailability".
+ */
+/** @experimental */
+export type ConnectorDiscoveryAvailability = 
+/** Enabled. */
+"enabled"
+/** Disabled. */
+ | "disabled"
+/** Unavailable. */
+ | "unavailable";
 /**
  * Session account selection, or null.
  *
@@ -1394,6 +1413,44 @@ export type ContentFilterMode =
  | "markdown"
 /** Remove characters that can hide directives. */
  | "hidden_characters";
+/**
+ * Component of session customization discovery.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CustomizationReloadSubsystem".
+ */
+/** @experimental */
+export type CustomizationReloadSubsystem = 
+/** Repository metadata and working-directory context. */
+"repositoryContext"
+/** Session instructions and their cached dynamic context. */
+ | "instructions"
+/** Discovered plugin configuration. */
+ | "plugins"
+/** Configured session and plugin hooks. */
+ | "hooks"
+/** Discovered skills. */
+ | "skills"
+/** Discovered custom agents. */
+ | "agents"
+/** Loaded MCP server configuration. */
+ | "mcp"
+/** Configured session extensions. */
+ | "extensions" | (string & {});
+/**
+ * Result of reloading a customization component.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CustomizationReloadStatus".
+ */
+/** @experimental */
+export type CustomizationReloadStatus = 
+/** The component was refreshed successfully. */
+"reloaded"
+/** The component was not configured, loaded, or eligible for refresh. */
+ | "skipped"
+/** The component could not be refreshed; other components may still reload. */
+ | "failed" | (string & {});
 /**
  * Source category for a collected debug bundle entry.
  *
@@ -1700,57 +1757,45 @@ export type DiscoveredMcpServerType =
 /** Server is backed by an in-memory runtime implementation. */
  | "memory";
 /**
- * Indicates whether the command was accepted into the local execution queue.
+ * Kind of component that supplied a provider adapter or row. Attribution does not confer authority.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EnqueueCommandResult".
+ * via the `definition` "ModelProviderProvenanceSource".
  */
 /** @experimental */
-export type EnqueueCommandResult = AcceptedEnqueueCommandResult | UnsupportedEnqueueCommandResult;
+export type ModelProviderProvenanceSource = 
+/** Built into the runtime. */
+"builtIn"
+/** Derived from existing user configuration. */
+ | "configured"
+/** Supplied by an extension. */
+ | "extension"
+/** Supplied by another trusted contributor. */
+ | "custom";
 /**
- * How far OneAuth may go to acquire the requested token.
+ * Typed outcome for a provider operation.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EntraTokenInteraction".
+ * via the `definition` "ModelProviderOperationOutcomeCode".
  */
 /** @experimental */
-export type EntraTokenInteraction = 
-/** Acquire the token without any user interaction, failing if interaction would be required. */
-"silent"
-/** Allow interactive acquisition, prompting the user only when a cached or silent token is unavailable. */
- | "interactive"
-/** Always prompt interactively, bypassing any cached or silently-refreshable token. */
- | "force-interactive";
+export type ModelProviderOperationOutcomeCode = 
+/** The operation completed successfully; an empty inventory is valid. */
+"success"
+/** The provider or instance is absent during discovery, status, or model listing. Distinct from a successful empty inventory. */
+ | "absent"
+/** The provider is configured or expected but could not be reached. */
+ | "unreachable"
+/** The operation failed for a reason other than absence or reachability. */
+ | "failed";
 /**
- * Result of a OneAuth token acquisition.
+ * Indicates whether the command was accepted into the local execution queue.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EntraTokenAcquireResult".
+ * via the `definition` "EnqueueCommandResult".
  */
 /** @experimental */
-export type EntraTokenAcquireResult = {
-    /**
-     * Opaque access token.
-     */
-    accessToken: string;
-    /**
-     * Expiry as milliseconds since Unix epoch, when supplied by OneAuth.
-     */
-    expiresOnTimestamp?: number;
-    /**
-     * Opaque OneAuth account id, when supplied by the broker.
-     */
-    accountId?: string;
-    /**
-     * OneAuth token acquisition outcome discriminator.
-     */
-    status: "ok";
-} | {
-    /**
-     * OneAuth token acquisition outcome discriminator.
-     */
-    status: "interaction-required";
-};
+export type EnqueueCommandResult = AcceptedEnqueueCommandResult | UnsupportedEnqueueCommandResult;
 /**
  * GitHub Mission Control compute kind.
  *
@@ -1945,6 +1990,14 @@ export type GitHubTokenAcquireResult = {
      */
     kind: "cancelled";
 };
+/**
+ * Source for direct repo installs (when marketplace is empty)
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPluginSource".
+ */
+/** @experimental */
+export type InstalledPluginSource = string | InstalledPluginSourceGitHub | InstalledPluginSourceUrl | InstalledPluginSourceLocal;
 /**
  * Optional compaction parameters.
  *
@@ -2412,14 +2465,6 @@ export type InstallationDecision =
  | "decline"
 /** The user cancelled the pending decision without granting consent. */
  | "cancel";
-/**
- * Source for direct repo installs (when marketplace is empty)
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSource".
- */
-/** @experimental */
-export type InstalledPluginSource = string | InstalledPluginSourceGitHub | InstalledPluginSourceUrl | InstalledPluginSourceLocal;
 /**
  * Which tier this target belongs to
  *
@@ -3289,6 +3334,18 @@ export type McpServerCardEmbeddedKind = "embedded";
  */
 /** @experimental */
 export type McpPlanInstallResult = McpPlanInstallPlanned | CatalogNegotiationRefusedError | CatalogHandleRejectedError | CatalogInvalidRequestError | CatalogAuthenticationRequiredError | CatalogPolicyRejectedError | CatalogNetworkFailureError | CatalogUnsafeRetrievalError | CatalogMalformedCardError | CatalogContractViolationError | CatalogUnavailableTransportError | CatalogNotInstallableError | CatalogUnavailableError;
+/**
+ * The sender role of an MCP prompt message.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpPromptRole".
+ */
+/** @experimental */
+export type McpPromptRole = 
+/** A message from the user. */
+"user"
+/** A message from the assistant. */
+ | "assistant";
 /**
  * MCP server configuration (stdio, remote HTTP/SSE, or in-process)
  *
@@ -3344,15 +3401,15 @@ export type SessionContextAttribution = {
      */
     modelSource: string;
     /**
-     * Maximum prompt tokens the resolved model accepts — the denominator for a `##k/###k` context-usage display. Mirrors `SessionContextInfo.promptTokenLimit`.
+     * Effective input budget after reserving requested output against the combined context ceiling. Mirrors `SessionContextInfo.promptTokenLimit`.
      */
     promptTokenLimit: number;
     /**
-     * Prompt limit plus the model's output reserve: the full context window `categories.freeSpace` and `categories.buffer` are measured against. Mirrors `SessionContextInfo.limit`.
+     * Advertised prompt allowance for the selected context tier: the denominator for context-usage displays and capacity for `categories.freeSpace` and `categories.buffer`. Mirrors `SessionContextInfo.limit`.
      */
     limit: number;
     /**
-     * Output reserve plus the tokens past the buffer-exhaustion blocking threshold. Mirrors `SessionContextInfo.bufferTokens`.
+     * Output reservation overlapping the displayed prompt allowance plus the tokens past the effective input budget's buffer-exhaustion blocking threshold. Mirrors `SessionContextInfo.bufferTokens`.
      */
     bufferTokens: number;
     /**
@@ -3388,7 +3445,7 @@ export type SessionContextAttribution = {
          */
         freeSpace: number;
         /**
-         * Output reserve plus post-blocking-threshold buffer.
+         * Overlapping output reservation plus post-blocking-threshold buffer.
          */
         buffer: number;
     };
@@ -3466,7 +3523,7 @@ export type SessionContextInfo = {
      */
     totalTokens: number;
     /**
-     * Maximum prompt tokens allowed by the model (or DEFAULT_TOKEN_LIMIT if unspecified)
+     * Effective input budget: the selected tier's prompt allowance bounded by the combined context ceiling minus the requested output allowance. Uses DEFAULT_TOKEN_LIMIT when limits are unspecified.
      */
     promptTokenLimit: number;
     /**
@@ -3474,11 +3531,11 @@ export type SessionContextInfo = {
      */
     compactionThreshold: number;
     /**
-     * Prompt token limit plus the model's full output token limit.
+     * Advertised prompt allowance for the selected context tier, without adding output tokens. The denominator for context-usage displays.
      */
     limit: number;
     /**
-     * Output reserve plus tokens after the buffer-exhaustion blocking threshold (default 95%)
+     * Output reservation overlapping the displayed prompt allowance plus tokens after the effective input budget's buffer-exhaustion blocking threshold (default 95%).
      */
     bufferTokens: number;
 } | null;
@@ -3592,17 +3649,49 @@ export type ModelListRequest = {
     skipCache?: boolean;
 };
 /**
- * Whether the requested preference was already effective or was accepted for later transactional activation.
+ * When the runtime may run an adapter without an explicit user action.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelSwitchAutoTierStatus".
+ * via the `definition` "ModelProviderAutomaticDiscoveryMode".
  */
 /** @experimental */
-export type ModelSwitchAutoTierStatus = 
-/** The requested preference is already effective. No activation is pending for it, although this request may have cancelled an earlier unclaimed preference reported in `supersededAutoTier`. */
-"unchanged"
-/** The request was accepted but has not committed. A later user turn using the `auto` model must mint and validate the replacement before it becomes effective. */
- | "pending";
+export type ModelProviderAutomaticDiscoveryMode = 
+/** The adapter declares that automatic discovery is safe when the other policy fields are satisfied. */
+"automatic"
+/** The adapter may refresh instances the user already configured, but must not scan for new instances automatically. */
+ | "configuredOnly"
+/** The adapter must run only after an explicit user action. */
+ | "explicit";
+/**
+ * Network reach an adapter may use during discovery.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderDiscoveryNetworkScope".
+ */
+/** @experimental */
+export type ModelProviderDiscoveryNetworkScope = 
+/** Discovery does not contact a network service. */
+"none"
+/** Discovery is limited to loopback addresses on the local machine. */
+ | "loopbackOnly"
+/** Discovery contacts only endpoints the user already configured. */
+ | "configuredEndpointOnly"
+/** Discovery may scan or contact the local network. */
+ | "localNetwork"
+/** Discovery may contact remote internet services. */
+ | "internet";
+/**
+ * Whether a planned configuration entry is new or already present in the session registry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderConfigurationDisposition".
+ */
+/** @experimental */
+export type ModelProviderConfigurationDisposition = 
+/** No matching entry is registered; the caller should add the entry. */
+"create"
+/** An equivalent entry is already registered; the caller should reuse it rather than adding a duplicate. */
+ | "alreadyConfigured";
 /**
  * Provider type. Defaults to "openai" for generic OpenAI-compatible APIs.
  *
@@ -3641,6 +3730,110 @@ export type ProviderConfigTransport =
 "http"
 /** WebSocket transport. */
  | "websockets";
+/**
+ * The product serving the model, reported in telemetry as `model_provider`.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderConfigModelProvider".
+ */
+/** @experimental */
+export type ProviderConfigModelProvider = 
+/** OpenAI API. */
+"openai"
+/** Anthropic API. */
+ | "anthropic"
+/** Azure OpenAI Service. */
+ | "azure_openai"
+/** Ollama. */
+ | "ollama"
+/** LM Studio. */
+ | "lm_studio"
+/** Foundry Local. */
+ | "foundry_local"
+/** llama.cpp server. */
+ | "llama_cpp";
+/** @experimental */
+export type ProtocolSystemMessageConfig = ProtocolSystemMessageAppendConfig | ProtocolSystemMessageReplaceConfig | ProtocolSystemMessageCustomizeConfig;
+/** @experimental */
+export type ProtocolAppendMode = "append";
+/** @experimental */
+export type ProtocolReplaceMode = "replace";
+/** @experimental */
+export type ProtocolCustomizeMode = "customize";
+/** @experimental */
+export type ProtocolSectionOverride = (ProtocolStaticSectionOverride | ProtocolMarkerSectionOverride) | undefined;
+/** @experimental */
+export type ProtocolStaticSectionAction = 
+/** Replace the section content. */
+"replace"
+/** Remove the section content. */
+ | "remove"
+/** Append content to the section. */
+ | "append"
+/** Prepend content to the section. */
+ | "prepend";
+/** @experimental */
+export type ProtocolMarkerSectionOverride = {
+    /**
+     * Section override action discriminator.
+     */
+    action: "transform";
+} | {
+    /**
+     * Section override action discriminator.
+     */
+    action: "preserve";
+};
+/**
+ * Provider family. Matches the `type` field of a BYOK provider config.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderEndpointType".
+ */
+/** @experimental */
+export type ProviderEndpointType = 
+/** OpenAI-compatible endpoint (use the OpenAI client library). */
+"openai"
+/** Azure OpenAI endpoint (use the OpenAI client library with the Azure base URL). */
+ | "azure"
+/** Anthropic endpoint (use the Anthropic client library). */
+ | "anthropic";
+/**
+ * Wire API to be used, when required for the provider type.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderEndpointWireApi".
+ */
+/** @experimental */
+export type ProviderEndpointWireApi = 
+/** Classic chat-completions request shape. */
+"completions"
+/** Newer responses request shape. */
+ | "responses";
+/**
+ * Transport to be used for provider requests.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderEndpointTransport".
+ */
+/** @experimental */
+export type ProviderEndpointTransport = 
+/** HTTP request/streaming transport. */
+"http"
+/** WebSocket transport. */
+ | "websockets";
+/**
+ * Whether the requested preference was already effective or was accepted for later transactional activation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelSwitchAutoTierStatus".
+ */
+/** @experimental */
+export type ModelSwitchAutoTierStatus = 
+/** The requested preference is already effective. No activation is pending for it, although this request may have cancelled an earlier unclaimed preference reported in `supersededAutoTier`. */
+"unchanged"
+/** The request was accepted but has not committed. A later user turn using the `auto` model must mint and validate the replacement before it becomes effective. */
+ | "pending";
 /**
  * Allowed values for the `OptionsUpdateAdditionalContentExclusionPolicyScope` enumeration.
  *
@@ -3898,10 +4091,6 @@ export type PluginsReloadRequest = {
      */
     deferRepoHooks?: boolean;
 };
-/** @experimental */
-export type ProtocolAppendMode = "append";
-/** @experimental */
-export type ProtocolCustomizeMode = "customize";
 /**
  * Controls whether the runtime may defer loading an external tool definition.
  *
@@ -3914,72 +4103,6 @@ export type ProtocolExternalToolDefer =
 "auto"
 /** The runtime must include the tool without deferring it. */
  | "never";
-/** @experimental */
-export type ProtocolMarkerSectionOverride = {
-    /**
-     * Section override action discriminator.
-     */
-    action: "transform";
-} | {
-    /**
-     * Section override action discriminator.
-     */
-    action: "preserve";
-};
-/** @experimental */
-export type ProtocolReplaceMode = "replace";
-/** @experimental */
-export type ProtocolSectionOverride = ProtocolStaticSectionOverride | ProtocolMarkerSectionOverride;
-/** @experimental */
-export type ProtocolStaticSectionAction = 
-/** Replace the section content. */
-"replace"
-/** Remove the section content. */
- | "remove"
-/** Append content to the section. */
- | "append"
-/** Prepend content to the section. */
- | "prepend";
-/** @experimental */
-export type ProtocolSystemMessageConfig = ProtocolSystemMessageAppendConfig | ProtocolSystemMessageReplaceConfig | ProtocolSystemMessageCustomizeConfig;
-/**
- * Provider family. Matches the `type` field of a BYOK provider config.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderEndpointType".
- */
-/** @experimental */
-export type ProviderEndpointType = 
-/** OpenAI-compatible endpoint (use the OpenAI client library). */
-"openai"
-/** Azure OpenAI endpoint (use the OpenAI client library with the Azure base URL). */
- | "azure"
-/** Anthropic endpoint (use the Anthropic client library). */
- | "anthropic";
-/**
- * Wire API to be used, when required for the provider type.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderEndpointWireApi".
- */
-/** @experimental */
-export type ProviderEndpointWireApi = 
-/** Classic chat-completions request shape. */
-"completions"
-/** Newer responses request shape. */
- | "responses";
-/**
- * Transport to be used for provider requests.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderEndpointTransport".
- */
-/** @experimental */
-export type ProviderEndpointTransport = 
-/** HTTP request/streaming transport. */
-"http"
-/** WebSocket transport. */
- | "websockets";
 /**
  * Optional model identifier to scope the endpoint snapshot to.
  *
@@ -4144,13 +4267,29 @@ export type SandboxConfigSource =
 /** A repository policy selected the sandbox state. */
  | "repository_policy";
 /**
- * Extensible identifier of a sandbox policy feature whose availability varies between hosts. A plain string, so an older client decodes a name added by a newer runtime; ignore names you do not recognize. Known values: `network` — sandboxed commands can reach the network (`network.allowOutbound`, on by default); on Linux this needs the tooling for Bubblewrap's private network namespace, such as slirp4netns. `network_filtering` — host rules and the sandbox proxy (`network.allowedHosts`, `network.blockedHosts`, `network.proxy`); on Linux this needs the same tooling as `network`; on Windows it needs a version with Process Security Environment 1.1 host-loopback support, and a policy that uses it must also set `network.allowLocalNetwork`, because Windows reaches the local proxy only together with private-network access. `denied_paths` — native enforcement of `filesystem.deniedPaths`; on Windows this needs a version whose sandbox contract reports denied-path support. `shell` — shell commands inside the sandbox: bash on macOS and Linux, PowerShell on Windows. `filesystem_enumeration` — enumerate-only filesystem grants, which PowerShell's drive roots use on Windows; this needs a version with Process Security Environment 1.1 filesystem enumeration support. Without it, sandboxed PowerShell still runs, but `Get-Location` may report the drive root, `Set-Location` may fail, and relative paths may resolve against the drive root; the session also receives a `session.warning` with `warningType` `sandbox`. Other platforms always report it.
+ * Extensible identifier of a sandbox policy feature whose availability varies between hosts. A plain string, so an older client decodes a name added by a newer runtime; ignore names you do not recognize. Known values: `network` — sandboxed commands can reach the network (`network.allowOutbound`, on by default); on Linux this needs the tooling for Bubblewrap's private network namespace, such as slirp4netns. `network_filtering` — host rules and the sandbox proxy (`network.allowedHosts`, `network.blockedHosts`, `network.proxy`); on Linux this needs the same tooling as `network`; on Windows it needs Process Security Environment 1.1 host-loopback support or MXC's PSEC 1.0-only proxy-loopback compatibility capability, and a policy that uses it must also set `network.allowLocalNetwork`, because Windows reaches the local proxy only together with private-network access. Compatibility applies only to an explicit identity-less runtime proxy, not general host-loopback access, and other policy restrictions still apply. `denied_paths` — native enforcement of `filesystem.deniedPaths`; on Windows this needs a version whose sandbox contract reports denied-path support. `shell` — shell commands inside the sandbox: bash on macOS and Linux, PowerShell on Windows. `filesystem_enumeration` — enumerate-only filesystem grants, which PowerShell's drive roots use on Windows; this needs a version with Process Security Environment 1.1 filesystem enumeration support. Without it, sandboxed PowerShell still runs, but `Get-Location` may report the drive root, `Set-Location` may fail, and relative paths may resolve against the drive root; the session also receives a `session.warning` with `warningType` `sandbox`. Other platforms always report it.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SandboxHostCapabilityName".
  */
 /** @experimental */
 export type SandboxHostCapabilityName = string;
+/**
+ * State of the persistent certificate authority of the sandbox credential proxy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxyCaState".
+ */
+/** @experimental */
+export type SandboxProxyCaState = 
+/** This platform has no supported OS trust store. The proxy uses a per-process certificate bundle. */
+"unsupported"
+/** OS trust does not include the certificate authority, or none is stored. */
+ | "notInstalled"
+/** OS trust includes the stored certificate authority. */
+ | "installed"
+/** The runtime could not read the certificate authority or the OS trust store. */
+ | "error";
 /**
  * A session-scoped sandbox transition applied while handling a slash command
  *
@@ -4630,7 +4769,7 @@ export type SessionsClientMetadataEntry = {
  * via the `definition` "SettableAuthInfo".
  */
 /** @experimental */
-export type SettableAuthInfo = HMACAuthInfo | EnvAuthInfo | SettableTokenAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
+export type SettableAuthInfo = HMACAuthInfo | EnvAuthInfo | SettableTokenAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | AccountAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
 /**
  * Rust-owned settings predicates exposed across the SDK boundary. Raw feature-flag names are intentionally not part of the contract.
  *
@@ -6286,29 +6425,50 @@ export interface UserAuthInfo {
     copilotUser?: CopilotUserResponse;
 }
 /**
- * Authentication-info input variant for GitHub CLI credentials, carrying host, login, and the `gh auth token` value.
+ * An interactive account whose model provider owns its credentials. It carries no GitHub credential.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "GhCliAuthInfo".
+ * via the `definition` "AccountAuthInfo".
  */
 /** @experimental */
-export interface GhCliAuthInfo {
+export interface AccountAuthInfo {
     /**
-     * Authentication via the `gh` CLI's saved credentials.
+     * Provider-owned account authentication.
      */
-    type: "gh-cli";
+    type: "account";
     /**
-     * Authentication host.
+     * Host coordinate owned by the account's model provider.
      */
     host: string;
     /**
-     * User login as reported by `gh auth status`.
+     * Login identifying the provider-owned account.
      */
     login: string;
-    /**
-     * The token returned by `gh auth token`. Treat as a secret.
-     */
-    token: string;
+}
+/**
+ * Authentication-info input variant for GitHub CLI credentials, carrying host, login, and the `gh auth token` value.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GhCliAuthInfo".
+ */
+/** @experimental */
+export interface GhCliAuthInfo {
+    /**
+     * Authentication via the `gh` CLI's saved credentials.
+     */
+    type: "gh-cli";
+    /**
+     * Authentication host.
+     */
+    host: string;
+    /**
+     * User login as reported by `gh auth status`.
+     */
+    login: string;
+    /**
+     * The token returned by `gh auth token`. Treat as a secret.
+     */
+    token: string;
     copilotUser?: CopilotUserResponse;
 }
 /**
@@ -7001,6 +7161,28 @@ export interface AuthIdentityMetadata {
      */
     login: string;
 }
+/**
+ * A credential-free account choice after sign-in.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AuthLoginAccount".
+ */
+/** @experimental */
+export interface AuthLoginAccount {
+    /**
+     * Opaque identifier supplied to the next login step to select this account.
+     */
+    selectionId: string;
+    /**
+     * Host coordinate owned by the selected account's provider.
+     */
+    host: string;
+    /**
+     * Human-readable login for the account choice.
+     */
+    login: string;
+    kind: AccountKind;
+}
 /**
  * Advance an in-flight login flow, optionally fulfilling an input-required step.
  *
@@ -7043,7 +7225,7 @@ export interface AuthLoginBegun {
     step: AuthLoginStep;
 }
 /**
- * Terminal result of an interactive login flow.
+ * Result of an interactive login flow. Pending consent or account selection is not terminal.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AuthLoginResultDto".
@@ -7059,6 +7241,10 @@ export interface AuthLoginResultDto {
      * Login that was signed in, when completed.
      */
     login?: string;
+    /**
+     * Available accounts when sign-in is awaiting account selection, ordered with Microsoft 365 first.
+     */
+    accounts?: AuthLoginAccount[];
 }
 /**
  * Cancel an in-flight login flow.
@@ -7205,6 +7391,74 @@ export interface AutopilotObjectiveState {
     creditCountNanoAiu: string;
     creditLimit?: AutopilotObjectiveCreditLimit;
 }
+/**
+ * A server-advertised routing preference. Identifiers and execution types are extensible.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AutoTierDescriptor".
+ */
+/** @experimental */
+export interface AutoTierDescriptor {
+    /**
+     * Opaque routing identifier transmitted unchanged to the provider.
+     */
+    id: string;
+    /**
+     * Human-readable label, not a routing identifier.
+     */
+    displayName: string;
+    /**
+     * Description displayed beside the preference.
+     */
+    description: string;
+    /**
+     * Execution kind; this client supports `auto` preferences on the Auto model.
+     */
+    type: string;
+    status: AutoTierStatus;
+}
+/**
+ * Availability of a server-advertised routing preference.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AutoTierStatus".
+ */
+/** @experimental */
+export interface AutoTierStatus {
+    /**
+     * Whether the provider permits selecting this preference.
+     */
+    enabled: boolean;
+    /**
+     * Extensible machine-readable unavailability reason.
+     */
+    reason?: string;
+    /**
+     * Human-readable explanation of availability.
+     */
+    message?: string;
+}
+/**
+ * Account-bound discovery metadata for the virtual `auto` model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AutoTierMetadata".
+ */
+/** @experimental */
+export interface AutoTierMetadata {
+    /**
+     * Provider-default preference, used only when no explicit preference exists.
+     */
+    defaultTier: string;
+    /**
+     * Routing preferences in the server's presentation order.
+     */
+    tiers: AutoTierDescriptor[];
+    /**
+     * Provider that supplied this metadata, when the catalog is provider-attributed.
+     */
+    providerId?: string;
+}
 /**
  * The running runtime's complete catalog of well-known built-in model IDs, including supported models and additional IDs with built-in metadata.
  *
@@ -9288,6 +9542,146 @@ export interface ConnectorDisconnectResult {
     disconnected: boolean;
     status: ConnectorStatus;
 }
+/**
+ * Eligible account.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryAccount".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryAccount {
+    /**
+     * Opaque account ID.
+     */
+    accountId: string;
+    authInfo: ConnectorDiscoveryAuthInfo;
+}
+/**
+ * Account metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryAuthInfo".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryAuthInfo {
+    type: AuthInfoType;
+    /**
+     * Host.
+     */
+    host: string;
+    /**
+     * Login.
+     */
+    login: string;
+}
+/**
+ * Eligible accounts.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryAccountList".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryAccountList {
+    availability: ConnectorDiscoveryAvailability;
+    /**
+     * Eligible accounts.
+     */
+    accounts: ConnectorDiscoveryAccount[];
+}
+/**
+ * Selected account.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryAccountRequest".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryAccountRequest {
+    /**
+     * Opaque account ID.
+     */
+    accountId: string;
+}
+/**
+ * Feature availability.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryCapabilities".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryCapabilities {
+    /**
+     * API version.
+     */
+    apiVersion: number;
+    availability: ConnectorDiscoveryAvailability;
+    /**
+     * Whether accounts are selected by opaque ID.
+     */
+    opaqueAccountSelection: boolean;
+    /**
+     * Whether results are cached.
+     */
+    conditionalCache: boolean;
+}
+/**
+ * Entry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryCatalogEntry".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryCatalogEntry {
+    /**
+     * Name.
+     */
+    name: string;
+    /**
+     * Display name.
+     */
+    displayName: string;
+    /**
+     * Description.
+     */
+    description?: string;
+    /**
+     * Logo.
+     */
+    logo?: string;
+    /**
+     * Tier.
+     */
+    tier?: string;
+    /**
+     * Release tag.
+     */
+    releaseTag?: string;
+    status: ConnectorCatalogStatus;
+}
+/**
+ * Entries for the selected account.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryCatalogResult".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryCatalogResult {
+    /**
+     * Opaque account ID.
+     */
+    accountId: string;
+    /**
+     * Revision.
+     */
+    revision: number;
+    /**
+     * Refresh time in Unix epoch milliseconds.
+     */
+    refreshedAtMs: number;
+    /**
+     * Entries.
+     */
+    connectors: ConnectorDiscoveryCatalogEntry[];
+}
 /**
  * Requests authoritative Connector-to-MCP reconciliation for the pinned account.
  *
@@ -9420,6 +9814,10 @@ export interface CurrentModel {
      * Currently active model identifier
      */
     modelId?: string;
+    /**
+     * Captured base model to restore when leaving plan mode. Omitted outside plan mode or when no plan override has captured a base model. Persistent agent model requirements apply to this model rather than the temporary plan model.
+     */
+    planBaseModelId?: string;
     /**
      * Reasoning effort level currently applied to the active model, when one is set. Reads `Session.getReasoningEffort()` synchronously after `getSelectedModel()` resolves so the two values are reported as a snapshot.
      */
@@ -9474,6 +9872,42 @@ export interface CurrentToolMetadata {
      */
     deferLoading?: boolean;
 }
+/**
+ * Result of one customization reload component.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CustomizationReloadOutcome".
+ */
+/** @experimental */
+export interface CustomizationReloadOutcome {
+    subsystem: CustomizationReloadSubsystem;
+    status: CustomizationReloadStatus;
+    /**
+     * Reason for a skipped component or description of a failure, when available
+     */
+    detail?: string | null;
+}
+/**
+ * Results of reloading discovered session customizations. Inspect outcomes for reloaded, skipped, or failed subsystems; a rejection may follow partial mutation. Changes to the model-facing prompt and tools apply on the next turn.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CustomizationsReloadResult".
+ */
+/** @experimental */
+export interface CustomizationsReloadResult {
+    /**
+     * Warnings from skill discovery
+     */
+    warnings: string[];
+    /**
+     * Errors from any component that could not be refreshed
+     */
+    errors: string[];
+    /**
+     * Outcome of each component in reload order; a skipped component was not configured or loaded
+     */
+    outcomes: CustomizationReloadOutcome[];
+}
 /**
  * A file included in the session debug bundle.
  *
@@ -9925,98 +10359,290 @@ export interface McpSourcePlugin {
     version?: string;
 }
 /**
- * Slash-prefixed command string to enqueue for FIFO processing.
+ * A model offered for agent conversations. Missing capability metadata does not disqualify a candidate. Models known to be incompatible, such as embedding-only models, are excluded by the adapter.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EnqueueCommandParams".
+ * via the `definition` "DiscoveredModel".
  */
 /** @experimental */
-export interface EnqueueCommandParams {
+export interface DiscoveredModel {
     /**
-     * Slash-prefixed command string to enqueue, e.g. '/compact' or '/model gpt-4'. Queued FIFO with any in-flight items; if the session is idle, processing kicks off immediately.
+     * Provider-native model identifier.
      */
-    command: string;
+    id: string;
     /**
-     * Optional user-facing text for the queue row. The command string is shown when omitted.
+     * Provider-reported display name.
      */
-    displayText?: string | null;
-}
-/** @experimental */
-export interface UnsupportedEnqueueCommandResult {
+    name?: string;
+    provenance: ModelProviderProvenance;
     /**
-     * False because the target session does not support local command queueing (e.g. remote sessions).
+     * Provider-reported artifact digest.
      */
-    queued: false;
+    digest?: string;
     /**
-     * Legacy null queue ID accepted for compatibility with older runtimes.
+     * Provider-reported last-modified timestamp.
      */
-    queueId?: null;
+    modifiedAt?: string;
+    /**
+     * Provider-reported artifact size in bytes.
+     */
+    sizeBytes?: number;
+    details: ModelArtifactDetails;
+    capabilities: ModelCapabilities;
+    /**
+     * Non-fatal warnings encountered while enriching this model.
+     */
+    warnings: ModelProviderWarning[];
 }
 /**
- * OneAuth token request supplied by a trusted host application.
+ * Attribution for the adapter that produced a provider row.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EntraTokenAcquireRequest".
+ * via the `definition` "ModelProviderProvenance".
  */
 /** @experimental */
-export interface EntraTokenAcquireRequest {
+export interface ModelProviderProvenance {
     /**
-     * Public client application id.
+     * Stable opaque adapter identity from the effective catalog. Treat this as a whole identifier, not a parseable owner or kind.
      */
-    clientId: string;
+    adapterId: string;
     /**
-     * Tenant id or tenant selector, such as common or organizations.
+     * Descriptive provider family that produced this row; not a routing key.
      */
-    tenantId: string;
+    providerKind: string;
+    source: ModelProviderProvenanceSource;
     /**
-     * Broker redirect URI registered for the client. Required: the OneAuth broker validates a non-empty, registered redirect URI for the public client (MSAL broker registration), so this is not a browser-flow vestige and cannot be omitted.
-     */
-    redirectUri: string;
-    /**
-     * Exact delegated scopes to request.
-     *
-     * @minItems 1
+     * Stable contributor identifier when the adapter has an owner outside the runtime. Independent of the contribution mechanism and not a routing key.
      */
-    scopes: [string, ...string[]];
-    interaction: EntraTokenInteraction;
+    ownerId?: string;
     /**
-     * Previously rejected token that OneAuth must bypass during renewal.
+     * Human-readable contributor name, not the adapter display name.
      */
-    accessTokenToRenew?: string;
+    ownerDisplayName?: string;
 }
 /**
- * Hosting capabilities and session capacity advertised by an environment.
+ * Provider-reported model artifact metadata.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EnvironmentCapabilities".
+ * via the `definition` "ModelArtifactDetails".
  */
 /** @experimental */
-export interface EnvironmentCapabilities {
+export interface ModelArtifactDetails {
     /**
-     * Advertised Agent Host Protocol version.
+     * Artifact format, such as `gguf`.
      */
-    ahpVersion?: string;
+    format?: string;
     /**
-     * Feature identifiers advertised by the environment.
+     * Primary model family.
      */
-    features: string[];
+    family?: string;
     /**
-     * Maximum session capacity, when advertised.
+     * Provider-reported model families.
      */
-    maxSessions?: number;
+    families?: string[];
     /**
-     * Current session count, when advertised.
+     * Provider-reported parameter count label.
      */
-    currentSessions?: number;
+    parameterSize?: string;
+    /**
+     * Provider-reported quantization label.
+     */
+    quantization?: string;
+    /**
+     * Provider-reported model architecture.
+     */
+    architecture?: string;
+    /**
+     * Provider-reported tokenizer.
+     */
+    tokenizer?: string;
 }
 /**
- * Identify a user-managed Mission Control environment to delete.
+ * Model capabilities and limits
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "EnvironmentsDeleteRequest".
+ * via the `definition` "ModelCapabilities".
  */
 /** @experimental */
-export interface EnvironmentsDeleteRequest {
+export interface ModelCapabilities {
+    supports?: ModelCapabilitiesSupports;
+    limits?: ModelCapabilitiesLimits;
+}
+/**
+ * Feature flags indicating what the model supports
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelCapabilitiesSupports".
+ */
+/** @experimental */
+export interface ModelCapabilitiesSupports {
+    /**
+     * Whether the model supports provider-native thinking. Independent of configurable reasoning effort; omission means unknown.
+     */
+    thinking?: boolean;
+    /**
+     * Whether this model supports vision/image input
+     */
+    vision?: boolean;
+    /**
+     * Whether this model supports canonical tool calling
+     */
+    toolCalls?: boolean;
+    /**
+     * Whether this model supports reasoning effort configuration
+     */
+    reasoningEffort?: boolean;
+    adaptive_thinking?: AdaptiveThinkingSupport;
+}
+/**
+ * Token limits for prompts, outputs, and context window
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelCapabilitiesLimits".
+ */
+/** @experimental */
+export interface ModelCapabilitiesLimits {
+    /**
+     * Maximum number of prompt/input tokens
+     */
+    max_prompt_tokens?: number;
+    /**
+     * Maximum number of output/completion tokens
+     */
+    max_output_tokens?: number;
+    /**
+     * Maximum total context window size in tokens
+     */
+    max_context_window_tokens?: number;
+    vision?: ModelCapabilitiesLimitsVision;
+}
+/**
+ * Vision-specific limits
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelCapabilitiesLimitsVision".
+ */
+/** @experimental */
+export interface ModelCapabilitiesLimitsVision {
+    /**
+     * MIME types the model accepts
+     */
+    supported_media_types: string[];
+    /**
+     * Maximum number of images per prompt
+     */
+    max_prompt_images: number;
+    /**
+     * Maximum image size in bytes
+     */
+    max_prompt_image_size: number;
+}
+/**
+ * A non-fatal provider observation warning.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderWarning".
+ */
+/** @experimental */
+export interface ModelProviderWarning {
+    /**
+     * Machine-readable warning code.
+     */
+    code: string;
+    /**
+     * Human-readable warning message.
+     */
+    message: string;
+}
+/**
+ * Models offered for agent conversations by one provider instance. Adapters exclude known-incompatible models, but retain candidates with unknown capabilities. Listing does not guarantee compatibility.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DiscoveredModelList".
+ */
+/** @experimental */
+export interface DiscoveredModelList {
+    outcome: ModelProviderOperationOutcome;
+    /**
+     * Provider-native models in provider order.
+     */
+    models: DiscoveredModel[];
+}
+/**
+ * Typed provider-operation outcome. Use the code for control flow and the optional message for display.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderOperationOutcome".
+ */
+/** @experimental */
+export interface ModelProviderOperationOutcome {
+    code: ModelProviderOperationOutcomeCode;
+    /**
+     * Human-readable detail for non-success outcomes.
+     */
+    message?: string;
+}
+/**
+ * Slash-prefixed command string to enqueue for FIFO processing.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnqueueCommandParams".
+ */
+/** @experimental */
+export interface EnqueueCommandParams {
+    /**
+     * Slash-prefixed command string to enqueue, e.g. '/compact' or '/model gpt-4'. Queued FIFO with any in-flight items; if the session is idle, processing kicks off immediately.
+     */
+    command: string;
+    /**
+     * Optional user-facing text for the queue row. The command string is shown when omitted.
+     */
+    displayText?: string | null;
+}
+/** @experimental */
+export interface UnsupportedEnqueueCommandResult {
+    /**
+     * False because the target session does not support local command queueing (e.g. remote sessions).
+     */
+    queued: false;
+    /**
+     * Legacy null queue ID accepted for compatibility with older runtimes.
+     */
+    queueId?: null;
+}
+/**
+ * Hosting capabilities and session capacity advertised by an environment.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnvironmentCapabilities".
+ */
+/** @experimental */
+export interface EnvironmentCapabilities {
+    /**
+     * Advertised Agent Host Protocol version.
+     */
+    ahpVersion?: string;
+    /**
+     * Feature identifiers advertised by the environment.
+     */
+    features: string[];
+    /**
+     * Maximum session capacity, when advertised.
+     */
+    maxSessions?: number;
+    /**
+     * Current session count, when advertised.
+     */
+    currentSessions?: number;
+}
+/**
+ * Identify a user-managed Mission Control environment to delete.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "EnvironmentsDeleteRequest".
+ */
+/** @experimental */
+export interface EnvironmentsDeleteRequest {
     /**
      * User-managed environment to delete. GitHub-managed environments cannot be deleted.
      */
@@ -10718,6 +11344,27 @@ export interface FolderTrustCheckResult {
      */
     trusted: boolean;
 }
+/**
+ * Owner, name, and host of a GitHub repository, as resolved from a git remote URL.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GitHubRepositoryIdentity".
+ */
+/** @experimental */
+export interface GitHubRepositoryIdentity {
+    /**
+     * Repository owner login (user or organization).
+     */
+    owner: string;
+    /**
+     * Repository name, without the owner prefix or the `.git` suffix.
+     */
+    name: string;
+    /**
+     * Host the remote points at, for example `github.com` or a GitHub Enterprise hostname.
+     */
+    host: string;
+}
 /**
  * Client environment metadata describing the process that produced a telemetry event.
  *
@@ -10868,57 +11515,174 @@ export interface GitHubTokenAcquireRequest {
     reason: GitHubTokenAcquireReason;
 }
 /**
- * Pending external tool call request ID, with the tool result or an error describing why it failed.
+ * Installed plugin record from global state, with marketplace, version, install time, enabled state, cache path, and source.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "HandlePendingToolCallRequest".
+ * via the `definition` "InstalledPlugin".
  */
 /** @experimental */
-export interface HandlePendingToolCallRequest {
+export interface InstalledPlugin {
     /**
-     * Request ID of the pending tool call
+     * Plugin name
      */
-    requestId: string;
-    result?: ExternalToolResult;
+    name: string;
     /**
-     * Error message if the tool call failed
+     * Marketplace the plugin came from (empty string for direct repo installs)
      */
-    error?: string;
-}
-/**
- * Indicates whether the external tool call result was handled successfully.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "HandlePendingToolCallResult".
- */
-/** @experimental */
-export interface HandlePendingToolCallResult {
+    marketplace: string;
     /**
-     * Whether the tool call result was handled successfully
+     * Version installed (if available)
      */
-    success: boolean;
+    version?: string;
+    /**
+     * Installation timestamp
+     */
+    installed_at: string;
+    /**
+     * Whether the plugin is currently enabled
+     */
+    enabled: boolean;
+    /**
+     * Path where the plugin is cached locally
+     */
+    cache_path?: string;
+    source?: InstalledPluginSource;
+    /**
+     * Per-plugin source fingerprint (a SHA-256 hash of the plugin's catalog source spec plus its resolved source subtree — NOT a Git commit SHA) captured at marketplace install/update time. Auto-update compares it against the freshly recomputed fingerprint to detect a content change that does not bump the version. Absent for pre-existing installs and for direct (non-marketplace) installs.
+     */
+    source_sha?: string;
+    /**
+     * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — those synthesized at session start for a directory/local marketplace, whose cache_path points at the real plugin directory on disk rather than a copy under the installed-plugins cache. Its presence is what marks a record as live, and no record carrying it is ever written to the persisted installedPlugins key.
+     */
+    installed_from?: string;
 }
 /**
- * Indicates whether an in-progress manual compaction was aborted.
+ * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref or full commit SHA, and optional subpath.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "HistoryAbortManualCompactionResult".
+ * via the `definition` "InstalledPluginSourceGitHub".
  */
 /** @experimental */
-export interface HistoryAbortManualCompactionResult {
+export interface InstalledPluginSourceGitHub {
     /**
-     * Whether an in-progress manual compaction was aborted. False when no manual compaction was running, when its abort controller was already aborted, or when the session is remote.
+     * Constant value. Always "github".
      */
-    aborted: boolean;
+    source: "github";
+    /**
+     * GitHub repository in `owner/repo` form.
+     */
+    repo: string;
+    /**
+     * Optional Git ref to resolve.
+     */
+    ref?: string;
+    /**
+     * Optional full 40-character hexadecimal commit SHA.
+     */
+    sha?: string;
+    /**
+     * Optional repository-relative path to the plugin.
+     */
+    path?: string;
 }
 /**
- * Indicates whether an in-progress background compaction was cancelled.
+ * Source descriptor for a direct URL plugin install, with URL, optional ref or full commit SHA, and optional subpath.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "HistoryCancelBackgroundCompactionResult".
+ * via the `definition` "InstalledPluginSourceUrl".
  */
 /** @experimental */
-export interface HistoryCancelBackgroundCompactionResult {
+export interface InstalledPluginSourceUrl {
+    /**
+     * Constant value. Always "url".
+     */
+    source: "url";
+    /**
+     * URL of the plugin source.
+     */
+    url: string;
+    /**
+     * Optional Git ref to resolve.
+     */
+    ref?: string;
+    /**
+     * Optional full 40-character hexadecimal commit SHA.
+     */
+    sha?: string;
+    /**
+     * Optional source-relative path to the plugin.
+     */
+    path?: string;
+}
+/**
+ * Source descriptor for a direct local plugin install, with a local filesystem path.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPluginSourceLocal".
+ */
+/** @experimental */
+export interface InstalledPluginSourceLocal {
+    /**
+     * Constant value. Always "local".
+     */
+    source: "local";
+    /**
+     * Local filesystem path to the plugin.
+     */
+    path: string;
+}
+/**
+ * Pending external tool call request ID, with the tool result or an error describing why it failed.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HandlePendingToolCallRequest".
+ */
+/** @experimental */
+export interface HandlePendingToolCallRequest {
+    /**
+     * Request ID of the pending tool call
+     */
+    requestId: string;
+    result?: ExternalToolResult;
+    /**
+     * Error message if the tool call failed
+     */
+    error?: string;
+}
+/**
+ * Indicates whether the external tool call result was handled successfully.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HandlePendingToolCallResult".
+ */
+/** @experimental */
+export interface HandlePendingToolCallResult {
+    /**
+     * Whether the tool call result was handled successfully
+     */
+    success: boolean;
+}
+/**
+ * Indicates whether an in-progress manual compaction was aborted.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryAbortManualCompactionResult".
+ */
+/** @experimental */
+export interface HistoryAbortManualCompactionResult {
+    /**
+     * Whether an in-progress manual compaction was aborted. False when no manual compaction was running, when its abort controller was already aborted, or when the session is remote.
+     */
+    aborted: boolean;
+}
+/**
+ * Indicates whether an in-progress background compaction was cancelled.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryCancelBackgroundCompactionResult".
+ */
+/** @experimental */
+export interface HistoryCancelBackgroundCompactionResult {
     /**
      * Whether an in-progress background compaction was cancelled. False when no compaction was running, when the session is remote, or when the underlying processor was unavailable.
      */
@@ -12165,123 +12929,6 @@ export interface InstallationConfirmationResponse {
     reviewFingerprint: string;
     decision: InstallationDecision;
 }
-/**
- * Installed plugin record from global state, with marketplace, version, install time, enabled state, cache path, and source.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPlugin".
- */
-/** @experimental */
-export interface InstalledPlugin {
-    /**
-     * Plugin name
-     */
-    name: string;
-    /**
-     * Marketplace the plugin came from (empty string for direct repo installs)
-     */
-    marketplace: string;
-    /**
-     * Version installed (if available)
-     */
-    version?: string;
-    /**
-     * Installation timestamp
-     */
-    installed_at: string;
-    /**
-     * Whether the plugin is currently enabled
-     */
-    enabled: boolean;
-    /**
-     * Path where the plugin is cached locally
-     */
-    cache_path?: string;
-    source?: InstalledPluginSource;
-    /**
-     * Per-plugin source fingerprint (a SHA-256 hash of the plugin's catalog source spec plus its resolved source subtree — NOT a Git commit SHA) captured at marketplace install/update time. Auto-update compares it against the freshly recomputed fingerprint to detect a content change that does not bump the version. Absent for pre-existing installs and for direct (non-marketplace) installs.
-     */
-    source_sha?: string;
-    /**
-     * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — those synthesized at session start for a directory/local marketplace, whose cache_path points at the real plugin directory on disk rather than a copy under the installed-plugins cache. Its presence is what marks a record as live, and no record carrying it is ever written to the persisted installedPlugins key.
-     */
-    installed_from?: string;
-}
-/**
- * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref or full commit SHA, and optional subpath.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSourceGitHub".
- */
-/** @experimental */
-export interface InstalledPluginSourceGitHub {
-    /**
-     * Constant value. Always "github".
-     */
-    source: "github";
-    /**
-     * GitHub repository in `owner/repo` form.
-     */
-    repo: string;
-    /**
-     * Optional Git ref to resolve.
-     */
-    ref?: string;
-    /**
-     * Optional full 40-character hexadecimal commit SHA.
-     */
-    sha?: string;
-    /**
-     * Optional repository-relative path to the plugin.
-     */
-    path?: string;
-}
-/**
- * Source descriptor for a direct URL plugin install, with URL, optional ref or full commit SHA, and optional subpath.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSourceUrl".
- */
-/** @experimental */
-export interface InstalledPluginSourceUrl {
-    /**
-     * Constant value. Always "url".
-     */
-    source: "url";
-    /**
-     * URL of the plugin source.
-     */
-    url: string;
-    /**
-     * Optional Git ref to resolve.
-     */
-    ref?: string;
-    /**
-     * Optional full 40-character hexadecimal commit SHA.
-     */
-    sha?: string;
-    /**
-     * Optional source-relative path to the plugin.
-     */
-    path?: string;
-}
-/**
- * Source descriptor for a direct local plugin install, with a local filesystem path.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSourceLocal".
- */
-/** @experimental */
-export interface InstalledPluginSourceLocal {
-    /**
-     * Constant value. Always "local".
-     */
-    source: "local";
-    /**
-     * Local filesystem path to the plugin.
-     */
-    path: string;
-}
 /**
  * Information about an installed plugin tracked in global state.
  *
@@ -13916,6 +14563,64 @@ export interface McpConfigUpdateRequest {
     name: string;
     config: McpSerializableServerConfig;
 }
+/**
+ * Effective MCP configuration entry. Configuration enablement is distinct from the optional live observation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpConfiguredServer".
+ */
+/** @experimental */
+export interface McpConfiguredServer {
+    /**
+     * Server name (config key)
+     */
+    name: string;
+    /**
+     * Whether this configured server is enabled after session configuration and policy filtering.
+     */
+    enabled: boolean;
+    source?: McpServerSource;
+    /**
+     * Plugin name that provided this server, when source is plugin.
+     */
+    sourcePlugin?: string;
+    /**
+     * Plugin version that provided this server, when source is plugin.
+     */
+    sourcePluginVersion?: string;
+    /**
+     * Human-readable display name supplied by configuration.
+     */
+    displayName?: string;
+    live?: McpConfiguredServerState;
+}
+/**
+ * Observational state for a matching already materialized MCP server.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpConfiguredServerState".
+ */
+/** @experimental */
+export interface McpConfiguredServerState {
+    status: McpServerStatus;
+    /**
+     * Observed connection error, when the materialized server failed.
+     */
+    error?: string;
+}
+/**
+ * Effective MCP configuration with optional live observations from matching already materialized servers.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpConfiguredServerList".
+ */
+/** @experimental */
+export interface McpConfiguredServerList {
+    /**
+     * Effective configured MCP servers.
+     */
+    servers: McpConfiguredServer[];
+}
 /**
  * Result of configuring GitHub MCP.
  *
@@ -14476,17 +15181,34 @@ export interface McpOauthCancelLoginResult {
     cancelled: boolean;
 }
 /**
- * Pending MCP OAuth request ID and host-provided token or cancellation response.
+ * Host-delivered callback for a runtime-managed MCP OAuth login.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "McpOauthHandlePendingRequest".
+ * via the `definition` "McpOauthCompleteRequest".
  */
 /** @experimental */
-export interface McpOauthHandlePendingRequest {
+export interface McpOauthCompleteRequest {
     /**
-     * OAuth request identifier from the mcp.oauth_required event
+     * Opaque identifier returned by session.mcp.oauth.login for the pending external callback.
      */
-    requestId: string;
+    authorizationId: string;
+    /**
+     * Full externally visible HTTPS callback URL received by the host, including the authorization response query parameters. Applications behind a reverse proxy must reconstruct the public URL rather than passing an internal proxy URL.
+     */
+    callbackUrl: string;
+}
+/**
+ * Pending MCP OAuth request ID and host-provided token or cancellation response.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpOauthHandlePendingRequest".
+ */
+/** @experimental */
+export interface McpOauthHandlePendingRequest {
+    /**
+     * OAuth request identifier from the mcp.oauth_required event
+     */
+    requestId: string;
     result: McpOauthPendingRequestResponse;
 }
 /**
@@ -14503,7 +15225,7 @@ export interface McpOauthHandlePendingResult {
     success: boolean;
 }
 /**
- * Remote MCP server name and optional overrides controlling reauthentication, OAuth client display name, callback success-page copy, and static OAuth client selection.
+ * Remote MCP server name and optional overrides controlling reauthentication, OAuth client display name, callback handling, and static OAuth client selection.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "McpOauthLoginRequest".
@@ -14539,6 +15261,10 @@ export interface McpOauthLoginRequest {
      */
     publicClient?: boolean;
     grantType?: McpOauthLoginGrantType;
+    /**
+     * Optional externally visible HTTPS redirect URI for a host-managed callback endpoint. When supplied, the runtime still owns discovery, PKCE, token exchange, persistence, and reconnect, but does not bind a loopback listener or terminate HTTPS. The URI must not contain query parameters or a fragment and must be registered for the selected CIMD, DCR, or static OAuth client.
+     */
+    redirectUri?: string;
     /**
      * Required for owned login. Consumes the exact prepareLogin handle once.
      * Set forceReauth and display options during preparation, not consumption.
@@ -14563,9 +15289,13 @@ export interface McpOauthLoginResult {
     loginId?: string;
     status?: McpOwnedOauthLoginStatus;
     /**
-     * URL the caller should open in a browser to complete OAuth. Omitted when cached tokens were still valid and no browser interaction was needed — the server is already reconnected in that case. When present, the runtime starts the callback listener before returning and continues the flow in the background; completion is signaled via session.mcp_server_status_changed.
+     * URL the caller should open in a browser to complete OAuth. Omitted when cached tokens were still valid and no browser interaction was needed — the server is already reconnected in that case. For the default loopback flow, the runtime starts its listener before returning. With redirectUri, the host receives the callback and completes it through session.mcp.oauth.complete. The runtime continues the flow in the background and signals completion via session.mcp_server_status_changed.
      */
     authorizationUrl?: string;
+    /**
+     * Opaque authorization identifier returned only for a host-managed redirect URI. The runtime also sends it as the OAuth state value, so the callback endpoint can read state and pass it with the full callback URL to session.mcp.oauth.complete.
+     */
+    authorizationId?: string;
 }
 /**
  * Effect-free preparation bound to the existing local session, requester and installation, with frozen options.
@@ -14798,6 +15528,235 @@ export interface McpPrepareInstallRequest {
     source: McpServerCardReference;
     secretStorage: McpInstallationSecretStorage;
 }
+/**
+ * An MCP prompt descriptor. Server-provided non-standard fields are exposed under `additionalProperties`.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpPrompt".
+ */
+/** @experimental */
+export interface McpPrompt {
+    /**
+     * The programmatic name of the prompt
+     */
+    name: string;
+    /**
+     * Human-readable display title
+     */
+    title?: string;
+    /**
+     * Description of what this prompt provides
+     */
+    description?: string;
+    /**
+     * Arguments accepted by the prompt
+     */
+    arguments?: McpPromptArgument[];
+    /**
+     * Icons associated with this prompt
+     */
+    icons?: McpPromptIcon[];
+    /**
+     * Prompt-level metadata
+     */
+    _meta?: {
+        [k: string]: JsonValue | undefined;
+    };
+    /**
+     * Server-provided non-standard descriptor fields
+     */
+    additionalProperties?: {
+        [k: string]: JsonValue | undefined;
+    };
+}
+/**
+ * An argument accepted by an MCP prompt.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpPromptArgument".
+ */
+/** @experimental */
+export interface McpPromptArgument {
+    /**
+     * Name of the argument
+     */
+    name: string;
+    /**
+     * Description of the argument
+     */
+    description?: string;
+    /**
+     * Whether the argument is required; omission is distinct from false
+     */
+    required?: boolean;
+    /**
+     * Argument-level metadata
+     */
+    _meta?: {
+        [k: string]: JsonValue | undefined;
+    };
+    /**
+     * Server-provided non-standard argument fields
+     */
+    additionalProperties?: {
+        [k: string]: JsonValue | undefined;
+    };
+}
+/**
+ * An MCP prompt icon with standard size hints and preserved non-standard fields.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpPromptIcon".
+ */
+/** @experimental */
+export interface McpPromptIcon {
+    /**
+     * Icon URI
+     */
+    src: string;
+    /**
+     * Icon MIME type, when known
+     */
+    mimeType?: string;
+    /**
+     * Icon sizes, such as `48x48` or `any`
+     */
+    sizes?: string[];
+    /**
+     * Theme hint for this icon
+     */
+    theme?: string;
+    /**
+     * Server-provided non-standard icon fields
+     */
+    additionalProperties?: {
+        [k: string]: JsonValue | undefined;
+    };
+}
+/**
+ * An MCP prompt message with opaque JSON content preserved without flattening or content-type filtering.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpPromptMessage".
+ */
+/** @experimental */
+export interface McpPromptMessage {
+    role: McpPromptRole;
+    /**
+     * The original MCP content block, including nested metadata and unfamiliar content types
+     */
+    content: JsonValue;
+    /**
+     * Message-level metadata
+     */
+    _meta?: {
+        [k: string]: JsonValue | undefined;
+    };
+    /**
+     * Server-provided non-standard message fields
+     */
+    additionalProperties?: {
+        [k: string]: JsonValue | undefined;
+    };
+}
+/**
+ * MCP server, prompt name, and optional string-valued arguments.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpPromptsGetRequest".
+ */
+/** @experimental */
+export interface McpPromptsGetRequest {
+    /**
+     * Name of the MCP server hosting the prompt
+     */
+    serverName: string;
+    /**
+     * The programmatic name of the prompt
+     */
+    promptName: string;
+    /**
+     * String-valued arguments to pass to the prompt
+     */
+    arguments?: {
+        [k: string]: string | undefined;
+    };
+}
+/**
+ * Prompt messages returned by the MCP server without sending them to the model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpPromptsGetResult".
+ */
+/** @experimental */
+export interface McpPromptsGetResult {
+    /**
+     * Description of the prompt
+     */
+    description?: string;
+    /**
+     * Ordered prompt messages
+     */
+    messages: McpPromptMessage[];
+    /**
+     * MCP result metadata
+     */
+    _meta?: {
+        [k: string]: JsonValue | undefined;
+    };
+    /**
+     * Server-provided non-standard result fields
+     */
+    additionalProperties?: {
+        [k: string]: JsonValue | undefined;
+    };
+}
+/**
+ * MCP server whose prompts to enumerate.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpPromptsListRequest".
+ */
+/** @experimental */
+export interface McpPromptsListRequest {
+    /**
+     * Name of the MCP server whose prompts to enumerate
+     */
+    serverName: string;
+    /**
+     * Opaque MCP pagination cursor from a prior `nextCursor` value
+     */
+    cursor?: string;
+}
+/**
+ * One page of prompts advertised by the named MCP server.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpPromptsListResult".
+ */
+/** @experimental */
+export interface McpPromptsListResult {
+    /**
+     * Prompts advertised by the server
+     */
+    prompts: McpPrompt[];
+    /**
+     * Opaque cursor for the next page, if the server has more prompts
+     */
+    nextCursor?: string;
+    /**
+     * MCP result metadata
+     */
+    _meta?: {
+        [k: string]: JsonValue | undefined;
+    };
+    /**
+     * Server-provided non-standard result fields
+     */
+    additionalProperties?: {
+        [k: string]: JsonValue | undefined;
+    };
+}
 /**
  * Indicates whether the auto-managed `github` MCP server was removed (false when nothing to remove).
  *
@@ -15141,6 +16100,10 @@ export interface McpServer {
     name: string;
     status: McpServerStatus;
     source?: McpServerSource;
+    /**
+     * Configured URL for an HTTP/SSE server, regardless of configuration source. Omitted for local and in-memory servers.
+     */
+    url?: string;
     /**
      * Plugin name that provided this server, when source is plugin.
      */
@@ -15341,11 +16304,11 @@ export interface MetadataContextHeaviestMessagesResult {
 /** @experimental */
 export interface MetadataContextInfoRequest {
     /**
-     * Maximum prompt tokens allowed by the target model. Pass 0 to use the runtime default.
+     * Advertised prompt allowance. Pass 0 to resolve the selected model and context tier from the session.
      */
     promptTokenLimit: number;
     /**
-     * Maximum output tokens allowed by the target model. Pass 0 if unknown.
+     * Requested output allowance to reserve against the combined context ceiling. Pass 0 to resolve the session's request cap, falling back to the model's advertised output limit.
      */
     outputTokenLimit: number;
     /**
@@ -15584,6 +16547,10 @@ export interface Model {
     metadata?: {
         [k: string]: JsonValue | undefined;
     };
+    /**
+     * Model vendor as the Copilot API reports it, for example "Anthropic" or "Azure OpenAI". Open vocabulary, passed through unchanged. It can name the vendor that serves the model instead of the one that built it, or a label that is not a vendor, such as "Experimental". Absent when the Copilot API reports no vendor.
+     */
+    vendor?: string;
     policy?: ModelPolicy;
     billing?: ModelBilling;
     /**
@@ -15612,133 +16579,57 @@ export interface Model {
     provider?: ModelProviderRef;
 }
 /**
- * Model capabilities and limits
+ * Policy state (if applicable)
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelCapabilities".
+ * via the `definition` "ModelPolicy".
  */
 /** @experimental */
-export interface ModelCapabilities {
-    supports?: ModelCapabilitiesSupports;
-    limits?: ModelCapabilitiesLimits;
+export interface ModelPolicy {
+    state: ModelPolicyState;
+    /**
+     * Usage terms or conditions for this model
+     */
+    terms?: string;
 }
 /**
- * Feature flags indicating what the model supports
+ * Billing information
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelCapabilitiesSupports".
+ * via the `definition` "ModelBilling".
  */
 /** @experimental */
-export interface ModelCapabilitiesSupports {
-    /**
-     * Whether this model supports vision/image input
-     */
-    vision?: boolean;
+export interface ModelBilling {
     /**
-     * Whether this model supports canonical tool calling
+     * Billing cost multiplier relative to the base rate
      */
-    toolCalls?: boolean;
+    multiplier?: number;
+    tokenPrices?: ModelBillingTokenPrices;
     /**
-     * Whether this model supports reasoning effort configuration
+     * Whole-number percentage discount (0-100) applied to usage billed through this model. Populated for the synthetic `auto` model, where requests routed by auto-mode are billed at a reduced rate; absent for concrete models.
      */
-    reasoningEffort?: boolean;
-    adaptive_thinking?: AdaptiveThinkingSupport;
+    discountPercent?: number;
+    promo?: ModelBillingPromo;
 }
 /**
- * Token limits for prompts, outputs, and context window
+ * Token-level pricing information for this model
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelCapabilitiesLimits".
+ * via the `definition` "ModelBillingTokenPrices".
  */
 /** @experimental */
-export interface ModelCapabilitiesLimits {
+export interface ModelBillingTokenPrices {
     /**
-     * Maximum number of prompt/input tokens
+     * AI Credits cost per billing batch of input tokens
      */
-    max_prompt_tokens?: number;
+    inputPrice?: number;
     /**
-     * Maximum number of output/completion tokens
+     * AI Credits cost per billing batch of output tokens
      */
-    max_output_tokens?: number;
+    outputPrice?: number;
     /**
-     * Maximum total context window size in tokens
-     */
-    max_context_window_tokens?: number;
-    vision?: ModelCapabilitiesLimitsVision;
-}
-/**
- * Vision-specific limits
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelCapabilitiesLimitsVision".
- */
-/** @experimental */
-export interface ModelCapabilitiesLimitsVision {
-    /**
-     * MIME types the model accepts
-     */
-    supported_media_types: string[];
-    /**
-     * Maximum number of images per prompt
-     */
-    max_prompt_images: number;
-    /**
-     * Maximum image size in bytes
-     */
-    max_prompt_image_size: number;
-}
-/**
- * Policy state (if applicable)
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelPolicy".
- */
-/** @experimental */
-export interface ModelPolicy {
-    state: ModelPolicyState;
-    /**
-     * Usage terms or conditions for this model
-     */
-    terms?: string;
-}
-/**
- * Billing information
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelBilling".
- */
-/** @experimental */
-export interface ModelBilling {
-    /**
-     * Billing cost multiplier relative to the base rate
-     */
-    multiplier?: number;
-    tokenPrices?: ModelBillingTokenPrices;
-    /**
-     * Whole-number percentage discount (0-100) applied to usage billed through this model. Populated for the synthetic `auto` model, where requests routed by auto-mode are billed at a reduced rate; absent for concrete models.
-     */
-    discountPercent?: number;
-    promo?: ModelBillingPromo;
-}
-/**
- * Token-level pricing information for this model
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelBillingTokenPrices".
- */
-/** @experimental */
-export interface ModelBillingTokenPrices {
-    /**
-     * AI Credits cost per billing batch of input tokens
-     */
-    inputPrice?: number;
-    /**
-     * AI Credits cost per billing batch of output tokens
-     */
-    outputPrice?: number;
-    /**
-     * @deprecated
-     * Use cacheReadPrice instead. AI Credits cost per billing batch of cached tokens
+     * @deprecated
+     * Use cacheReadPrice instead. AI Credits cost per billing batch of cached tokens
      */
     cachePrice?: number;
     /**
@@ -16044,47 +16935,449 @@ export interface ModelPickerPersistenceRequest {
     contextTierExplicit?: boolean;
 }
 /**
- * Filesystem and environment context used to resolve model-picker settings.
+ * Filesystem and environment context used to resolve model-picker settings.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelPickerSettingsContext".
+ */
+/** @experimental */
+export interface ModelPickerSettingsContext {
+    /**
+     * Optional Copilot configuration directory containing persisted settings.
+     */
+    configDir?: string;
+    /**
+     * User home directory used when resolving persisted settings.
+     */
+    homeDirectory: string;
+    /**
+     * Environment variables consulted while resolving model-picker settings.
+     */
+    environment: {};
+}
+/**
+ * Normalized model-provider adapter definitions available to the session, not discovered instances.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderAdapterCatalog".
+ */
+/** @experimental */
+export interface ModelProviderAdapterCatalog {
+    /**
+     * Available provider adapters ordered by adapterId.
+     */
+    providers: ModelProviderAdapterDescriptor[];
+}
+/**
+ * A normalized model-provider adapter in the session's effective catalog.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderAdapterDescriptor".
+ */
+/** @experimental */
+export interface ModelProviderAdapterDescriptor {
+    /**
+     * Stable opaque identity for routing to this adapter. Unique in the effective catalog, independent of live registration generations.
+     */
+    adapterId: string;
+    /**
+     * Descriptive provider family, such as `ollama`. Different adapters may have the same family; use adapterId for routing.
+     */
+    providerKind: string;
+    /**
+     * Human-readable provider name.
+     */
+    displayName: string;
+    provenance: ModelProviderAttribution;
+    automaticDiscovery: ModelProviderAutomaticDiscoveryPolicy;
+    /**
+     * Operations supported by this provider adapter.
+     */
+    operations: ModelProviderAdapterOperationDescriptor[];
+}
+/**
+ * Contributor attribution, independent of routing identity and authorization.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderAttribution".
+ */
+/** @experimental */
+export interface ModelProviderAttribution {
+    source: ModelProviderProvenanceSource;
+    /**
+     * Stable contributor identifier. Required and nonblank for extension and custom sources; optional for built-in and configured sources. Does not grant authority.
+     */
+    ownerId?: string;
+    /**
+     * Human-readable contributor name, not the adapter display name.
+     */
+    ownerDisplayName?: string;
+}
+/**
+ * Adapter-declared policy that tells clients whether discovery may run automatically.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderAutomaticDiscoveryPolicy".
+ */
+/** @experimental */
+export interface ModelProviderAutomaticDiscoveryPolicy {
+    mode: ModelProviderAutomaticDiscoveryMode;
+    networkScope: ModelProviderDiscoveryNetworkScope;
+    /**
+     * True when discovery requires non-null caller input. Omission or null is rejected before adapter execution. When false, omitted or null input selects adapter defaults without schema validation.
+     */
+    requiresInput: boolean;
+    /**
+     * True when the adapter must be enabled by a trusted owner, such as a trusted extension, before automatic discovery may run.
+     */
+    requiresTrust: boolean;
+}
+/**
+ * An operation supported by a model-provider adapter.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderAdapterOperationDescriptor".
+ */
+/** @experimental */
+export interface ModelProviderAdapterOperationDescriptor {
+    /**
+     * Supported operation name: `discover`, `getStatus`, or `models.list`. Unknown names and duplicate declarations are rejected.
+     */
+    name: string;
+    /**
+     * Optional self-contained JSON Schema Draft 7 for non-null discovery input. Only supported on discover. No external references are resolved. Omitted or null input selects defaults when requiresInput is false. Without a schema, the adapter validates supplied input.
+     */
+    inputSchema?: JsonValue;
+}
+/**
+ * Provider configuration prepared from a discovered model. Preparing a plan changes nothing: it neither registers the model with the session nor writes durable configuration. To apply it, pass `provider` and `model` to `session.provider.add`, omitting whichever the dispositions report as already configured.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderConfigurationPlan".
+ */
+/** @experimental */
+export interface ModelProviderConfigurationPlan {
+    provider: NamedProviderConfig;
+    model: ProviderModelConfig;
+    /**
+     * Provider-qualified selection id (`provider/id`) to pass to `switchTo` once the plan is applied.
+     */
+    selectionId: string;
+    providerDisposition: ModelProviderConfigurationDisposition;
+    modelDisposition: ModelProviderConfigurationDisposition;
+    /**
+     * Non-fatal warnings carried over from the discovered model, such as capabilities the provider did not report.
+     */
+    warnings: ModelProviderWarning[];
+}
+/**
+ * External SDK input for a named custom model provider. Ingested by the native protocol boundary before host dispatch.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "NamedProviderConfig".
+ */
+/** @experimental */
+export interface NamedProviderConfig {
+    /**
+     * Unique provider name used to qualify model selection IDs.
+     */
+    name: string;
+    type?: ProviderConfigType;
+    wireApi?: ProviderConfigWireApi;
+    transport?: ProviderConfigTransport;
+    /**
+     * Base URL for provider API requests.
+     */
+    baseUrl: string;
+    /**
+     * Static API key used to authenticate provider requests.
+     */
+    apiKey?: string;
+    /**
+     * Static bearer token used to authenticate provider requests.
+     */
+    bearerToken?: string;
+    azure?: ProviderConfigAzure;
+    /**
+     * Additional HTTP headers included with provider requests.
+     */
+    headers?: {
+        [k: string]: string | undefined;
+    };
+    modelProvider?: ProviderConfigModelProvider;
+    /**
+     * Whether the host supplies bearer tokens dynamically.
+     */
+    hasBearerTokenProvider?: boolean;
+}
+/**
+ * Azure-specific provider options.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderConfigAzure".
+ */
+/** @experimental */
+export interface ProviderConfigAzure {
+    /**
+     * API version. When set, uses the versioned deployment route. When omitted, uses the GA versionless v1 route.
+     */
+    apiVersion?: string;
+}
+/**
+ * A BYOK model definition referencing a named provider.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderModelConfig".
+ */
+/** @experimental */
+export interface ProviderModelConfig {
+    /**
+     * Provider-local model id, unique within its provider. The session-wide selection id (shown in the model list and passed to switchTo) is the provider-qualified `provider/id`.
+     */
+    id: string;
+    /**
+     * Name of the configured provider that serves this model.
+     */
+    provider: string;
+    /**
+     * The model name sent to the provider API for inference. Defaults to `id`.
+     */
+    wireModel?: string;
+    /**
+     * Well-known base model id used for behavior/capability/config lookup. Defaults to `id`.
+     */
+    modelId?: string;
+    /**
+     * Display name for model pickers. Defaults to the provider-qualified selection id (`provider/id`).
+     */
+    name?: string;
+    /**
+     * Maximum prompt/input tokens for the model.
+     */
+    maxPromptTokens?: number;
+    /**
+     * Maximum context window tokens for the model.
+     */
+    maxContextWindowTokens?: number;
+    /**
+     * Maximum output tokens for the model.
+     */
+    maxOutputTokens?: number;
+    capabilities?: ModelCapabilitiesOverride;
+    systemMessage?: ProtocolSystemMessageConfig;
+    /**
+     * Provider-published model metadata, preserved verbatim as the public Model.metadata object.
+     */
+    metadata?: {
+        [k: string]: JsonValue | undefined;
+    };
+}
+/** @experimental */
+export interface ProtocolSystemMessageAppendConfig {
+    mode?: ProtocolAppendMode;
+    /**
+     * Text appended to the standard system prompt.
+     */
+    content?: string;
+}
+/** @experimental */
+export interface ProtocolSystemMessageReplaceConfig {
+    mode: ProtocolReplaceMode;
+    /**
+     * Complete replacement system-message text.
+     */
+    content: string;
+    /**
+     * Optional structured blocks corresponding to the replacement content.
+     */
+    contentBlocks?: SystemMessageBlock[];
+}
+/** @experimental */
+export interface SystemMessageBlock {
+    /**
+     * Text content for this system-message block.
+     */
+    content: string;
+    /**
+     * Whether the block is static and may be cached independently of dynamic prompt content.
+     */
+    isStatic?: boolean;
+    /**
+     * Whether providers with explicit prompt caching should place a cache breakpoint after this block.
+     */
+    cacheBreakpoint?: boolean;
+}
+/** @experimental */
+export interface ProtocolSystemMessageCustomizeConfig {
+    mode: ProtocolCustomizeMode;
+    /**
+     * Named standard-prompt section overrides.
+     */
+    sections?: {
+        [k: string]: ProtocolSectionOverride | undefined;
+    };
+    /**
+     * Text appended after the customized sections.
+     */
+    content?: string;
+}
+/** @experimental */
+export interface ProtocolStaticSectionOverride {
+    action: ProtocolStaticSectionAction;
+    /**
+     * Optional content used by replace, append, and prepend operations.
+     */
+    content?: string;
+}
+/**
+ * One model provider available to the session — the model analog of the account `ProviderDescriptor`. Opaque id/label/kind plus a stable ordering; central code never branches on kind.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderDescriptor".
+ */
+/** @experimental */
+export interface ModelProviderDescriptor {
+    kind: ModelProviderKind;
+    /**
+     * Opaque, stable provider id, stamped onto every model this provider returns.
+     */
+    id: string;
+    /**
+     * Human-readable menu label, owned by the runtime so every consumer renders identical text.
+     */
+    label: string;
+    /**
+     * Stable ordering key for presenting providers in a deterministic sequence.
+     */
+    ordering: number;
+}
+/**
+ * Provider discovery parameters.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderDiscoverRequest".
+ */
+/** @experimental */
+export interface ModelProviderDiscoverRequest {
+    /**
+     * Opaque adapter identity returned by `session.providers.getCatalog`.
+     */
+    adapterId: string;
+    /**
+     * Provider-specific JSON input. Omission or null selects adapter defaults unless requiresInput is true. Non-null input is validated against the advertised Draft 7 schema when present; otherwise validation belongs to the adapter.
+     */
+    input?: JsonValue;
+}
+/**
+ * Provider instances found by a discovery operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderDiscoverResult".
+ */
+/** @experimental */
+export interface ModelProviderDiscoverResult {
+    outcome: ModelProviderOperationOutcome;
+    /**
+     * Discovered provider instances. Empty when passive default discovery finds no reachable provider.
+     */
+    instances: ModelProviderInstance[];
+}
+/**
+ * A normalized model-provider instance discovered by the runtime.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderInstance".
+ */
+/** @experimental */
+export interface ModelProviderInstance {
+    reference: ModelProviderInstanceReference;
+    /**
+     * Human-readable instance name.
+     */
+    displayName: string;
+    provenance: ModelProviderProvenance;
+    /**
+     * Inference API endpoint when the provider exposes one separately from its management endpoint.
+     */
+    inferenceEndpoint?: string;
+    inferenceType?: ProviderEndpointType;
+    inferenceWireApi?: ProviderEndpointWireApi;
+    inferenceTransport?: ProviderEndpointTransport;
+}
+/**
+ * Serializable reference to a discovered provider instance.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderInstanceReference".
+ */
+/** @experimental */
+export interface ModelProviderInstanceReference {
+    /**
+     * Stable opaque identity of the adapter that owns this reference. Must be present in the target session's effective catalog.
+     */
+    adapterId: string;
+    /**
+     * Descriptive provider family. Must match the selected adapter; not a routing key.
+     */
+    providerKind: string;
+    /**
+     * Stable instance identifier derived by the provider adapter, such as `ollama:{normalizedEndpoint}`.
+     */
+    id: string;
+    /**
+     * Absolute provider management URI. The adapter validates normalization, supported schemes, and permission to access it against its bound configuration; a reference does not grant authority.
+     */
+    managementEndpoint: string;
+}
+/**
+ * Provider status request parameters.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderGetStatusRequest".
+ */
+/** @experimental */
+export interface ModelProviderGetStatusRequest {
+    instance: ModelProviderInstanceReference;
+}
+/**
+ * Provider model inventory request parameters.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelProviderModelsListRequest".
+ */
+/** @experimental */
+export interface ModelProviderModelsListRequest {
+    instance: ModelProviderInstanceReference;
+}
+/**
+ * A discovered instance and one of its models to translate into provider configuration. Pass back the instance and model as returned by `session.providers.discover` and `session.providers.models.list`.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelPickerSettingsContext".
+ * via the `definition` "ModelProviderPrepareConfigurationRequest".
  */
 /** @experimental */
-export interface ModelPickerSettingsContext {
-    /**
-     * Optional Copilot configuration directory containing persisted settings.
-     */
-    configDir?: string;
-    /**
-     * User home directory used when resolving persisted settings.
-     */
-    homeDirectory: string;
-    /**
-     * Environment variables consulted while resolving model-picker settings.
-     */
-    environment: {};
+export interface ModelProviderPrepareConfigurationRequest {
+    instance: ModelProviderInstance;
+    model: DiscoveredModel;
 }
 /**
- * One model provider available to the session — the model analog of the account `ProviderDescriptor`. Opaque id/label/kind plus a stable ordering; central code never branches on kind.
+ * Current health information for a provider instance.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelProviderDescriptor".
+ * via the `definition` "ModelProviderStatus".
  */
 /** @experimental */
-export interface ModelProviderDescriptor {
-    kind: ModelProviderKind;
-    /**
-     * Opaque, stable provider id, stamped onto every model this provider returns.
-     */
-    id: string;
+export interface ModelProviderStatus {
+    outcome: ModelProviderOperationOutcome;
+    instance: ModelProviderInstance;
     /**
-     * Human-readable menu label, owned by the runtime so every consumer renders identical text.
+     * Open provider status value, such as `healthy`, `unreachable`, or `notInstalled`.
      */
-    label: string;
+    status: string;
     /**
-     * Stable ordering key for presenting providers in a deterministic sequence.
+     * Provider-reported version.
      */
-    ordering: number;
+    version?: string;
 }
 /**
  * Host-supplied exact model selection IDs to allow for this running session. CAPI IDs are intersected with repository `.github/allowed_models.txt` policy; provider-qualified IDs remain exempt from repository-only policy but are restricted by this host list. Omit or pass null to clear the host restriction; an explicit empty or disjoint list is rejected. Validation and pre-selection fallback failures preserve the previous restriction. Failures after a fallback selection commits retain the new restriction and selected model; callers should inspect current session state after such an error.
@@ -16410,58 +17703,6 @@ export interface MoveMcpLoadingToBackgroundResult {
      */
     movedToBackground: boolean;
 }
-/**
- * External SDK input for a named custom model provider. Ingested by the native protocol boundary before host dispatch.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "NamedProviderConfig".
- */
-/** @experimental */
-export interface NamedProviderConfig {
-    /**
-     * Unique provider name used to qualify model selection IDs.
-     */
-    name: string;
-    type?: ProviderConfigType;
-    wireApi?: ProviderConfigWireApi;
-    transport?: ProviderConfigTransport;
-    /**
-     * Base URL for provider API requests.
-     */
-    baseUrl: string;
-    /**
-     * Static API key used to authenticate provider requests.
-     */
-    apiKey?: string;
-    /**
-     * Static bearer token used to authenticate provider requests.
-     */
-    bearerToken?: string;
-    azure?: ProviderConfigAzure;
-    /**
-     * Additional HTTP headers included with provider requests.
-     */
-    headers?: {
-        [k: string]: string | undefined;
-    };
-    /**
-     * Whether the host supplies bearer tokens dynamically.
-     */
-    hasBearerTokenProvider?: boolean;
-}
-/**
- * Azure-specific provider options.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderConfigAzure".
- */
-/** @experimental */
-export interface ProviderConfigAzure {
-    /**
-     * API version. When set, uses the versioned deployment route. When omitted, uses the GA versionless v1 route.
-     */
-    apiVersion?: string;
-}
 /**
  * The session's friendly name, or null when not yet set.
  *
@@ -18601,63 +19842,6 @@ export interface ProtocolExternalToolDefinition {
         [k: string]: JsonValue | undefined;
     };
 }
-/** @experimental */
-export interface ProtocolStaticSectionOverride {
-    action: ProtocolStaticSectionAction;
-    /**
-     * Optional content used by replace, append, and prepend operations.
-     */
-    content?: string;
-}
-/** @experimental */
-export interface ProtocolSystemMessageAppendConfig {
-    mode?: ProtocolAppendMode;
-    /**
-     * Text appended to the standard system prompt.
-     */
-    content?: string;
-}
-/** @experimental */
-export interface ProtocolSystemMessageReplaceConfig {
-    mode: ProtocolReplaceMode;
-    /**
-     * Complete replacement system-message text.
-     */
-    content: string;
-    /**
-     * Optional structured blocks corresponding to the replacement content.
-     */
-    contentBlocks?: SystemMessageBlock[];
-}
-/** @experimental */
-export interface SystemMessageBlock {
-    /**
-     * Text content for this system-message block.
-     */
-    content: string;
-    /**
-     * Whether the block is static and may be cached independently of dynamic prompt content.
-     */
-    isStatic?: boolean;
-    /**
-     * Whether providers with explicit prompt caching should place a cache breakpoint after this block.
-     */
-    cacheBreakpoint?: boolean;
-}
-/** @experimental */
-export interface ProtocolSystemMessageCustomizeConfig {
-    mode: ProtocolCustomizeMode;
-    /**
-     * Named standard-prompt section overrides.
-     */
-    sections?: {
-        [k: string]: ProtocolSectionOverride;
-    };
-    /**
-     * Text appended after the customized sections.
-     */
-    content?: string;
-}
 /**
  * BYOK providers and/or models to add to the session's registry at runtime. Both fields are optional; provide providers, models, or both.
  *
@@ -18675,55 +19859,6 @@ export interface ProviderAddRequest {
      */
     models?: ProviderModelConfig[];
 }
-/**
- * A BYOK model definition referencing a named provider.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderModelConfig".
- */
-/** @experimental */
-export interface ProviderModelConfig {
-    /**
-     * Provider-local model id, unique within its provider. The session-wide selection id (shown in the model list and passed to switchTo) is the provider-qualified `provider/id`.
-     */
-    id: string;
-    /**
-     * Name of the configured provider that serves this model.
-     */
-    provider: string;
-    /**
-     * The model name sent to the provider API for inference. Defaults to `id`.
-     */
-    wireModel?: string;
-    /**
-     * Well-known base model id used for behavior/capability/config lookup. Defaults to `id`.
-     */
-    modelId?: string;
-    /**
-     * Display name for model pickers. Defaults to the provider-qualified selection id (`provider/id`).
-     */
-    name?: string;
-    /**
-     * Maximum prompt/input tokens for the model.
-     */
-    maxPromptTokens?: number;
-    /**
-     * Maximum context window tokens for the model.
-     */
-    maxContextWindowTokens?: number;
-    /**
-     * Maximum output tokens for the model.
-     */
-    maxOutputTokens?: number;
-    capabilities?: ModelCapabilitiesOverride;
-    systemMessage?: ProtocolSystemMessageConfig;
-    /**
-     * Provider-published model metadata, preserved verbatim as the public Model.metadata object.
-     */
-    metadata?: {
-        [k: string]: JsonValue | undefined;
-    };
-}
 /**
  * The selectable model entries synthesized for the models added by this call.
  *
@@ -18770,6 +19905,7 @@ export interface ProviderConfig {
      * Provider name used for model and telemetry attribution.
      */
     providerName?: string;
+    modelProvider?: ProviderConfigModelProvider;
     /**
      * The model identifier sent to the provider API for inference (the "wire" model), as opposed to modelId which is the well-known base.
      */
@@ -20601,6 +21737,47 @@ export interface SandboxHostSupport {
      */
     capabilities: SandboxHostCapability[];
 }
+/**
+ * Result of creating the persistent certificate authority of the sandbox credential proxy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxyCaCreateResult".
+ */
+/** @experimental */
+export interface SandboxProxyCaCreateResult {
+    /**
+     * Absolute path of the public certificate of the certificate authority, in PEM format.
+     */
+    certificatePath: string;
+}
+/**
+ * Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxyCaRequest".
+ */
+/** @experimental */
+export interface SandboxProxyCaRequest {
+    sandboxConfig?: SandboxConfig;
+}
+/**
+ * Status of the persistent certificate authority of the sandbox credential proxy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxyCaStatus".
+ */
+/** @experimental */
+export interface SandboxProxyCaStatus {
+    state: SandboxProxyCaState;
+    /**
+     * Human-readable reason for the state. On `installed` or `notInstalled`, present only when the certificate authority must be rotated, and then says why.
+     */
+    detail?: string;
+    /**
+     * Whether this process can add the certificate authority to OS trust without credentials from a different user. False where OS trust is unsupported, and on Windows when the process cannot elevate itself to write the machine trust store. When false, do not offer to set up the certificate authority.
+     */
+    canInstall: boolean;
+}
 /**
  * Register an absolute-time scheduled prompt.
  *
@@ -21229,6 +22406,23 @@ export interface SessionBulkDeleteResult {
         [k: string]: number | undefined;
     };
 }
+/**
+ * The IDE a host is connected to, as reported to the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionConnectedIdeInfo".
+ */
+/** @experimental */
+export interface SessionConnectedIdeInfo {
+    /**
+     * Display name of the connected IDE, for example `VS Code`.
+     */
+    ideName: string;
+    /**
+     * Absolute path of the workspace folder the IDE has open.
+     */
+    workspaceFolder: string;
+}
 /**
  * The enriched metadata records, with summary and context fields backfilled where available. Sessions confirmed empty and unnamed are omitted.
  *
@@ -21280,6 +22474,10 @@ export interface SessionFsError {
      * Free-form detail about the error, for logging/diagnostics
      */
     message?: string;
+    /**
+     * For failed writeFile requests only: true if the provider changed the target before failing. Omit when unknown or unchanged.
+     */
+    writeChanged?: boolean;
 }
 /**
  * Path to test for existence in the client-provided session filesystem.
@@ -21368,27 +22566,58 @@ export interface SessionFsReaddirResult {
     error?: SessionFsError;
 }
 /**
- * Directory entry returned by session filesystem `readdirWithTypes`, with name and entry type.
+ * Directory entry returned by session filesystem `readdirWithTypes`, with name and entry type.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionFsReaddirWithTypesEntry".
+ */
+/** @experimental */
+export interface SessionFsReaddirWithTypesEntry {
+    /**
+     * Entry name
+     */
+    name: string;
+    type: SessionFsReaddirWithTypesEntryType;
+}
+/**
+ * Directory path whose entries (with type information) should be listed from the client-provided session filesystem.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionFsReaddirWithTypesRequest".
+ */
+/** @experimental */
+export interface SessionFsReaddirWithTypesRequest {
+    /**
+     * Target session identifier
+     */
+    sessionId: string;
+    /**
+     * Path using SessionFs conventions
+     */
+    path: string;
+}
+/**
+ * Entries in the requested directory paired with file/directory type information, or a filesystem error if the read failed.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionFsReaddirWithTypesEntry".
+ * via the `definition` "SessionFsReaddirWithTypesResult".
  */
 /** @experimental */
-export interface SessionFsReaddirWithTypesEntry {
+export interface SessionFsReaddirWithTypesResult {
     /**
-     * Entry name
+     * Directory entries with type information
      */
-    name: string;
-    type: SessionFsReaddirWithTypesEntryType;
+    entries: SessionFsReaddirWithTypesEntry[];
+    error?: SessionFsError;
 }
 /**
- * Directory path whose entries (with type information) should be listed from the client-provided session filesystem.
+ * Path of the binary file to read from the client-provided session filesystem.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionFsReaddirWithTypesRequest".
+ * via the `definition` "SessionFsReadFileBytesRequest".
  */
 /** @experimental */
-export interface SessionFsReaddirWithTypesRequest {
+export interface SessionFsReadFileBytesRequest {
     /**
      * Target session identifier
      */
@@ -21399,17 +22628,17 @@ export interface SessionFsReaddirWithTypesRequest {
     path: string;
 }
 /**
- * Entries in the requested directory paired with file/directory type information, or a filesystem error if the read failed.
+ * File bytes as standard base64, or a filesystem error if the read failed.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionFsReaddirWithTypesResult".
+ * via the `definition` "SessionFsReadFileBytesResult".
  */
 /** @experimental */
-export interface SessionFsReaddirWithTypesResult {
+export interface SessionFsReadFileBytesResult {
     /**
-     * Directory entries with type information
+     * Exact file bytes encoded as standard base64
      */
-    entries: SessionFsReaddirWithTypesEntry[];
+    content: string;
     error?: SessionFsError;
 }
 /**
@@ -21501,6 +22730,10 @@ export interface SessionFsSetProviderCapabilities {
      * Whether the provider supports SQLite query/exists operations
      */
     sqlite?: boolean;
+    /**
+     * Whether the provider supports binary reads and writes through sessionFs.readFileBytes and sessionFs.writeFileBytes
+     */
+    binary?: boolean;
 }
 /**
  * Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider. A registered provider is authoritative for path interpretation and filesystem facts used by workspace permission validation. Paths are interpreted lexically; home-relative paths (`~` and `~/...`) and Windows drive-relative paths such as `C:foo` are unsupported. Until provider-side canonicalization is supported, providers must not expose symlinks inside allowed roots that escape those roots.
@@ -21711,6 +22944,31 @@ export interface SessionFsStatResult {
     birthtime: string;
     error?: SessionFsError;
 }
+/**
+ * File path, standard-base64-encoded bytes to write, and optional mode for the client-provided session filesystem.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionFsWriteFileBytesRequest".
+ */
+/** @experimental */
+export interface SessionFsWriteFileBytesRequest {
+    /**
+     * Target session identifier
+     */
+    sessionId: string;
+    /**
+     * Path using SessionFs conventions
+     */
+    path: string;
+    /**
+     * Exact file bytes encoded as standard base64
+     */
+    content: string;
+    /**
+     * Optional POSIX-style mode for newly created files
+     */
+    mode?: number;
+}
 /**
  * File path, content to write, and optional mode for the client-provided session filesystem.
  *
@@ -21996,6 +23254,10 @@ export interface SessionManagedPermissions {
      * Permission rules that allow matching operations unless another managed source, deny, or ask rule restricts them.
      */
     allow?: string[];
+    /**
+     * Closed-world host boundary expressed as `Domain(hostname)`, `Domain(IP)`, or `Domain(*.example.com)` rules. Schemes, ports, paths, queries, and fragments are rejected because every network request must be enforceable at host-level egress. Multiple managed sources intersect their lists; an empty list denies all hosts.
+     */
+    limitTo?: string[];
 }
 /**
  * Managed settings an SDK host may inject at session startup. Only permissions are accepted in this initial contract.
@@ -22007,6 +23269,19 @@ export interface SessionManagedPermissions {
 export interface SessionManagedSettings {
     permissions?: SessionManagedPermissions;
 }
+/**
+ * Records which IDE the host is connected to, or clears it.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionMcpSetConnectedIdeInfoParams".
+ */
+/** @experimental */
+export interface SessionMcpSetConnectedIdeInfoParams {
+    /**
+     * The connected IDE. Null or omitted clears the recorded IDE, which is how a host reports that it is disconnected.
+     */
+    ide?: SessionConnectedIdeInfo | null;
+}
 /**
  * Point-in-time snapshot of slow-changing session identifier and state fields
  *
@@ -22097,6 +23372,7 @@ export interface SessionModelList {
     quotaSnapshots?: {
         [k: string]: JsonValue | undefined;
     };
+    auto?: AutoTierMetadata;
 }
 /**
  * Cost-category metadata for a CAPI model.
@@ -22841,6 +24117,90 @@ export interface SessionsCloseRequest {
 /** @experimental */
 export interface SessionsCloseResult {
 }
+/**
+ * Identity, state location and starting context for a workspace record.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsCreateWorkspaceRequest".
+ */
+/** @experimental */
+export interface SessionsCreateWorkspaceRequest {
+    /**
+     * Session ID the workspace record belongs to
+     */
+    sessionId: string;
+    /**
+     * Directory the session's state is written under when no session filesystem provider is configured. Ignored when a provider is configured; the provider's session state path is used instead.
+     */
+    sessionStatePath: string;
+    /**
+     * `windows` (any letter case) selects Windows path rules. Any other value selects POSIX path rules.
+     */
+    convention: string;
+    context?: SessionWorkingDirectoryContextWithClient;
+    /**
+     * User-supplied display name for the workspace
+     */
+    name?: string;
+}
+/**
+ * A working-directory context together with the client that produced it.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionWorkingDirectoryContextWithClient".
+ */
+/** @experimental */
+export interface SessionWorkingDirectoryContextWithClient {
+    /**
+     * Current working directory path
+     */
+    cwd: string;
+    /**
+     * Root directory of the git repository
+     */
+    gitRoot?: string;
+    /**
+     * Repository identifier derived from the git remote URL
+     */
+    repository?: string;
+    /**
+     * Hosting platform type of the repository
+     */
+    hostType?: string;
+    /**
+     * Current git branch name
+     */
+    branch?: string;
+    /**
+     * Raw host string from the git remote URL
+     */
+    repositoryHost?: string;
+    /**
+     * Head commit of the current git branch
+     */
+    headCommit?: string;
+    /**
+     * Merge-base commit SHA
+     */
+    baseCommit?: string;
+    /**
+     * Name of the client that created the session
+     */
+    clientName?: string;
+}
+/**
+ * The workspace record that was written.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsCreateWorkspaceResult".
+ */
+/** @experimental */
+export interface SessionsCreateWorkspaceResult {
+    /**
+     * The created workspace record, as JSON
+     */
+    workspaceJson: string;
+}
 /**
  * Session ID to delete from disk.
  *
@@ -23468,6 +24828,36 @@ export interface SessionsLoadDeferredRepoHooksRequest {
      */
     sessionId: string;
 }
+/**
+ * Where the session's state lives, as a root directory and the session ID under it.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsLoadWorkspaceRequest".
+ */
+/** @experimental */
+export interface SessionsLoadWorkspaceRequest {
+    /**
+     * Root directory every session's state directory sits under
+     */
+    sessionsHome: string;
+    /**
+     * Session ID naming the state directory under the sessions home. Rejected when it is absolute or contains a parent component, so it cannot escape the sessions home.
+     */
+    sessionId: string;
+}
+/**
+ * The workspace record on disk, omitted when the session has none.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsLoadWorkspaceResult".
+ */
+/** @experimental */
+export interface SessionsLoadWorkspaceResult {
+    /**
+     * The workspace record, as JSON. Omitted when the record does not exist.
+     */
+    workspaceJson?: string;
+}
 /**
  * Age threshold and optional flags controlling which old sessions are pruned (or simulated when dryRun is true).
  *
@@ -23662,6 +25052,36 @@ export interface SessionsTransferRemoteControlRequest {
      */
     expectedFromSessionId?: string;
 }
+/**
+ * Where the session's state lives, plus workspace-schema fields to merge into its workspace record. Stored keys outside the schema are not preserved, and a stored `fork_count` is never replaced.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsUpdateWorkspaceFieldsRequest".
+ */
+/** @experimental */
+export interface SessionsUpdateWorkspaceFieldsRequest {
+    /**
+     * Root directory every session's state directory sits under
+     */
+    sessionsHome: string;
+    /**
+     * Session ID naming the state directory under the sessions home. Rejected when it is absolute or contains a parent component, so it cannot escape the sessions home.
+     */
+    sessionId: string;
+    /**
+     * Workspace-schema fields to merge into the record, as a JSON object. Fields the object omits keep their stored values, except stored keys outside the schema are not preserved and a stored `fork_count` is never replaced.
+     */
+    fieldsJson: string;
+}
+/**
+ * The merge completed. The record carries the supplied workspace-schema fields, but a stored `fork_count` stays.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsUpdateWorkspaceFieldsResult".
+ */
+/** @experimental */
+export interface SessionsUpdateWorkspaceFieldsResult {
+}
 /**
  * Telemetry engagement ID for the session, when available.
  *
@@ -23932,7 +25352,7 @@ export interface ShellCancelUserRequestedRequest {
     requestId: string;
 }
 /**
- * Shell command to run, with optional working directory and timeout in milliseconds.
+ * Shell command to run, with optional working directory and timeout in milliseconds. Spawn failures return an RPC error.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "ShellExecRequest".
@@ -23953,7 +25373,7 @@ export interface ShellExecRequest {
     timeout?: number;
 }
 /**
- * Identifier of the spawned process, used to correlate streamed output and exit notifications.
+ * Identifier of the spawned shell process, usable with shell.kill while the process is running.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "ShellExecResult".
@@ -23961,7 +25381,7 @@ export interface ShellExecRequest {
 /** @experimental */
 export interface ShellExecResult {
     /**
-     * Unique identifier for tracking streamed output
+     * Identifier usable with shell.kill while the process is running
      */
     processId: string;
 }
@@ -24263,7 +25683,7 @@ export interface SkillPlanUninstallRequest {
     policySessionId: string;
 }
 /**
- * Catalog-only metadata for one SDK-provided skill. The complete SKILL.md is fetched separately and lazily.
+ * Authoritative catalog metadata for one SDK-provided skill. The skill's SKILL.md text is fetched separately and lazily.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SkillProviderDescriptor".
@@ -26659,7 +28079,7 @@ export interface UserSettingMetadata {
     isDefault: boolean;
 }
 /**
- * Per-key metadata for every known user setting (settings.json overlaid with the legacy config.json, config.json wins), including settings left at their default. Excludes repository- and enterprise-managed overrides.
+ * Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "UserSettingsGetResult".
@@ -26686,19 +28106,6 @@ export interface UserSettingsSetRequest {
      */
     settings: JsonValue;
 }
-/**
- * Outcome of writing user settings.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "UserSettingsSetResult".
- */
-/** @experimental */
-export interface UserSettingsSetResult {
-    /**
-     * Top-level keys whose write landed in settings.json but is shadowed by a value still present in the legacy config.json (config.json wins on read). The write does not take effect until the legacy value is removed.
-     */
-    shadowedKeys: string[];
-}
 /**
  * Current sharing status and shareable GitHub URL for a session.
  *
@@ -28837,6 +30244,47 @@ export declare function createServerRpc(connection: MessageConnection): {
          * @returns Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
          */
         getHostSupport: () => Promise<SandboxHostSupport>;
+        /** @experimental */
+        proxyCa: {
+            /**
+             * Reports whether the persistent certificate authority of the sandbox credential proxy exists, whether OS trust includes it, and whether it must be rotated. Changes nothing.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            getStatus: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
+            /**
+             * Creates the persistent certificate authority of the sandbox credential proxy if none is stored, without changing OS trust, and returns the path of its public certificate. Keeps an existing certificate authority, even one that must be rotated. Fails where OS trust is unsupported. Trust it with sandbox.proxyCa.trust: the CLI trusts only the hosts in the saved user settings, so it refuses a certificate authority that also covers hosts from sandboxConfig.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Result of creating the persistent certificate authority of the sandbox credential proxy.
+             */
+            create: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaCreateResult>;
+            /**
+             * Replaces the persistent certificate authority of the sandbox credential proxy with a new one for the current credential hosts. If OS trust included the old one, removes it and trusts the new one, which can show an OS authentication prompt. Running sandboxed tools keep the old certificate authority until they restart.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            rotate: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
+            /**
+             * Adds the persistent certificate authority of the sandbox credential proxy to OS trust, so sandboxed clients that read only OS trust accept the proxy. Call create first. Refuses a certificate authority that is not constrained to the current credential hosts. Can show an OS authentication prompt.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            trust: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
+            /**
+             * Removes the persistent certificate authority of the sandbox credential proxy from OS trust. Keeps the stored certificate authority. Can show an OS authentication prompt. Sandboxed clients that read only OS trust then reject the proxy; clients that read the per-process certificate bundle continue to work.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            remove: () => Promise<SandboxProxyCaStatus>;
+        };
     };
     /** @experimental */
     tools: {
@@ -29334,23 +30782,17 @@ export declare function createServerRpc(connection: MessageConnection): {
         /** @experimental */
         settings: {
             /**
-             * Drops this runtime process's in-memory user settings cache so the next settings read observes disk.
-             */
-            reload: () => Promise<void>;
-            /**
-             * Lists every known user setting (settings.json overlaid with the legacy config.json, config.json wins), each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
+             * Lists every known user setting from settings.json, each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
              *
-             * @returns Per-key metadata for every known user setting (settings.json overlaid with the legacy config.json, config.json wins), including settings left at their default. Excludes repository- and enterprise-managed overrides.
+             * @returns Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
              */
             get: () => Promise<UserSettingsGetResult>;
             /**
-             * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed. Returns the keys whose new value is shadowed by a legacy config.json entry (config.json wins on read), which the runtime leaves in place — such writes do not take effect until the legacy value is removed.
+             * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed.
              *
              * @param params Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.
-             *
-             * @returns Outcome of writing user settings.
              */
-            set: (params: UserSettingsSetRequest) => Promise<UserSettingsSetResult>;
+            set: (params: UserSettingsSetRequest) => Promise<void>;
         };
     };
     /** @experimental */
@@ -29649,9 +31091,84 @@ export declare function createServerRpc(connection: MessageConnection): {
          */
         spawn: (params: AgentRegistrySpawnRequest) => Promise<AgentRegistrySpawnResult>;
     };
+    /** @experimental */
+    connectors: {
+        /**
+         * Returns feature availability.
+         *
+         * @returns Feature availability.
+         */
+        getCapabilities: () => Promise<ConnectorDiscoveryCapabilities>;
+        /**
+         * Returns eligible accounts.
+         *
+         * @returns Eligible accounts.
+         */
+        getAccounts: () => Promise<ConnectorDiscoveryAccountList>;
+        /**
+         * Lists entries for the selected account.
+         *
+         * @param params Selected account.
+         *
+         * @returns Entries for the selected account.
+         */
+        list: (params: ConnectorDiscoveryAccountRequest) => Promise<ConnectorDiscoveryCatalogResult>;
+        /**
+         * Refreshes entries for the selected account.
+         *
+         * @param params Selected account.
+         *
+         * @returns Entries for the selected account.
+         */
+        refresh: (params: ConnectorDiscoveryAccountRequest) => Promise<ConnectorDiscoveryCatalogResult>;
+    };
 };
 /** Create typed session-scoped RPC methods. */
 export declare function createSessionRpc(connection: MessageConnection, sessionId: string): {
+    /** @experimental */
+    providers: {
+        /**
+         * Returns adapter definitions and supported operations in this session's effective provider catalog, without running discovery. Does not list provider instances or select inference models.
+         *
+         * @returns Normalized model-provider adapter definitions available to the session, not discovered instances.
+         */
+        getCatalog: () => Promise<ModelProviderAdapterCatalog>;
+        /**
+         * Discovers reachable instances using an adapter from this session's effective provider catalog and provider-specific discovery input.
+         *
+         * @param params Provider discovery parameters.
+         *
+         * @returns Provider instances found by a discovery operation.
+         */
+        discover: (params: ModelProviderDiscoverRequest) => Promise<ModelProviderDiscoverResult>;
+        /**
+         * Gets current health and version information for a discovered model-provider instance.
+         *
+         * @param params Provider status request parameters.
+         *
+         * @returns Current health information for a provider instance.
+         */
+        getStatus: (params: ModelProviderGetStatusRequest) => Promise<ModelProviderStatus>;
+        /** @experimental */
+        models: {
+            /**
+             * Lists models installed or otherwise available from a discovered model-provider instance.
+             *
+             * @param params Provider model inventory request parameters.
+             *
+             * @returns Models offered for agent conversations by one provider instance. Adapters exclude known-incompatible models, but retain candidates with unknown capabilities. Listing does not guarantee compatibility.
+             */
+            list: (params: ModelProviderModelsListRequest) => Promise<DiscoveredModelList>;
+            /**
+             * Translates a discovered model into the provider and model configuration needed to use it, and reports whether each is already registered in this session. Prepares only: it registers nothing, writes nothing, and performs no provider requests.
+             *
+             * @param params A discovered instance and one of its models to translate into provider configuration. Pass back the instance and model as returned by `session.providers.discover` and `session.providers.models.list`.
+             *
+             * @returns Provider configuration prepared from a discovered model. Preparing a plan changes nothing: it neither registers the model with the session nor writes durable configuration. To apply it, pass `provider` and `model` to `session.provider.add`, omitting whichever the dispositions report as already configured.
+             */
+            prepareConfiguration: (params: ModelProviderPrepareConfigurationRequest) => Promise<ModelProviderConfigurationPlan>;
+        };
+    };
     /**
      * Suspends the session while preserving persisted state for later resume.
      *
@@ -30259,18 +31776,20 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          */
         getSources: () => Promise<InstructionsGetSourcesResult>;
         /**
-         * Invalidates cached custom-instruction discovery so subsequent turns and source reads observe instruction files currently on disk.
+         * For local sessions, invalidates instruction discovery and the model-facing prompt, then returns freshly discovered sources. The updated prompt takes effect on the next turn. Remote sessions must reload on their agent host instead.
+         *
+         * @returns Instruction sources loaded for the session, in merge order.
          */
-        reload: () => Promise<void>;
+        reload: () => Promise<InstructionsGetSourcesResult>;
     };
     /** @experimental */
     customizations: {
         /**
-         * Reloads all repository and user customizations for the active session: instructions, plugins and their MCP servers and hooks, custom agents, extensions, and skills. Returns diagnostics from the final skill reload.
+         * For local sessions, reconciles repository context and discovered instructions, plugins, skills, agents, hooks, MCP servers, and extensions after files appear or change under the working directory. Independent component failures are returned in outcomes and errors; a rejected call can have partially applied earlier steps. Remote sessions must reload on their agent host instead. The model-facing context is rebuilt on the next turn.
          *
-         * @returns Diagnostics from reloading skill definitions, with warnings and errors as separate lists.
+         * @returns Results of reloading discovered session customizations. Inspect outcomes for reloaded, skipped, or failed subsystems; a rejection may follow partial mutation. Changes to the model-facing prompt and tools apply on the next turn.
          */
-        reload: () => Promise<SkillsLoadDiagnostics>;
+        reload: () => Promise<CustomizationsReloadResult>;
     };
     /** @experimental */
     fleet: {
@@ -30461,11 +31980,17 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
     /** @experimental */
     mcp: {
         /**
-         * Lists MCP servers configured for the session, their connection status, and host-level state. The host-level state (disabled/filtered servers, failed/needs-auth/pending connections, mcp3p policy, full config) is empty/zero when no MCP host has been initialized for the session.
+         * Lists materialized MCP servers and their connection status. Cache misses may start and wait for MCP servers.
          *
          * @returns MCP servers configured for the session, with their connection status and host-level state.
          */
         list: () => Promise<McpServerList>;
+        /**
+         * Lists effective MCP configuration without starting, restarting, authenticating, or waiting for servers. An optional live observation is from an already materialized matching server; this is not a readiness guarantee.
+         *
+         * @returns Effective MCP configuration with optional live observations from matching already materialized servers.
+         */
+        listConfigured: () => Promise<McpConfiguredServerList>;
         /**
          * Lists the tools exposed by a connected MCP server on this session's host. This performs a live `tools/list` request. Tool UI metadata is returned independently of whether MCP Apps rendering is enabled for the session.
          *
@@ -30579,11 +32104,17 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
             /**
              * Starts OAuth authentication for a remote MCP server. Owned servers require the original one-use prepareLogin handle and exact installation ID; manual servers retain the existing direct login behaviour.
              *
-             * @param params Remote MCP server name and optional overrides controlling reauthentication, OAuth client display name, callback success-page copy, and static OAuth client selection.
+             * @param params Remote MCP server name and optional overrides controlling reauthentication, OAuth client display name, callback handling, and static OAuth client selection.
              *
              * @returns OAuth authorization URL the caller should open, or empty when cached tokens already authenticated the server.
              */
             login: (params: McpOauthLoginRequest) => Promise<McpOauthLoginResult>;
+            /**
+             * Completes a runtime-managed MCP OAuth login after the authorization server redirects to a host-managed callback URL.
+             *
+             * @param params Host-delivered callback for a runtime-managed MCP OAuth login.
+             */
+            complete: (params: McpOauthCompleteRequest) => Promise<void>;
             /**
              * Passively probes a configured remote MCP server to classify whether OAuth is required or a cached/override token is accepted. Does not start OAuth, emit pending OAuth requests, or mutate MCP connection state.
              *
@@ -30694,6 +32225,25 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
              */
             listTemplates: (params: McpResourcesListTemplatesRequest) => Promise<McpResourcesListTemplatesResult>;
         };
+        /** @experimental */
+        prompts: {
+            /**
+             * Enumerate one page of prompts a connected MCP server exposes (proxies MCP `prompts/list`). Pass `cursor` to continue from a prior result's `nextCursor`.
+             *
+             * @param params MCP server whose prompts to enumerate.
+             *
+             * @returns One page of prompts advertised by the named MCP server.
+             */
+            list: (params: McpPromptsListRequest) => Promise<McpPromptsListResult>;
+            /**
+             * Get a prompt's messages from a connected MCP server (proxies MCP `prompts/get`). Content is preserved as opaque JSON. Does not send messages to the model, execute tools, or fetch referenced resources.
+             *
+             * @param params MCP server, prompt name, and optional string-valued arguments.
+             *
+             * @returns Prompt messages returned by the MCP server without sending them to the model.
+             */
+            get: (params: McpPromptsGetRequest) => Promise<McpPromptsGetResult>;
+        };
     };
     /** @experimental */
     diagnostics: {
@@ -31468,11 +33018,11 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
     /** @experimental */
     shell: {
         /**
-         * Starts a shell command and streams output through session notifications. The command runs as the leader of its own process group (POSIX) or in a dedicated job object (Windows), so a forced termination — via "shell.kill", the request timeout, or session disposal — signals that whole group/job rather than only the direct child. Two gaps are worth planning for: a command that exits on its own does not trigger that teardown, and on POSIX a descendant that moves itself into a new session or process group (for example via "setsid") leaves the signalled group, so either can leave a background process running.
+         * Starts a shell command, returning an RPC error if it cannot be spawned. The command runs as the leader of its own process group (POSIX) or in a dedicated job object (Windows), so a forced termination — via "shell.kill", the request timeout, or session disposal — signals that whole group/job rather than only the direct child. Two gaps are worth planning for: a command that exits on its own does not trigger that teardown, and on POSIX a descendant that moves itself into a new session or process group (for example via "setsid") leaves the signalled group, so either can leave a background process running.
          *
-         * @param params Shell command to run, with optional working directory and timeout in milliseconds.
+         * @param params Shell command to run, with optional working directory and timeout in milliseconds. Spawn failures return an RPC error.
          *
-         * @returns Identifier of the spawned process, used to correlate streamed output and exit notifications.
+         * @returns Identifier of the spawned shell process, usable with shell.kill while the process is running.
          */
         exec: (params: ShellExecRequest) => Promise<ShellExecResult>;
         /**
@@ -31822,6 +33372,14 @@ export interface SessionFsHandler {
      * @returns File content as a UTF-8 string, or a filesystem error if the read failed.
      */
     readFile(params: SessionFsReadFileRequest): Promise<SessionFsReadFileResult>;
+    /**
+     * Reads binary file content from the client-provided session filesystem.
+     *
+     * @param params Path of the binary file to read from the client-provided session filesystem.
+     *
+     * @returns File bytes as standard base64, or a filesystem error if the read failed.
+     */
+    readFileBytes(params: SessionFsReadFileBytesRequest): Promise<SessionFsReadFileBytesResult>;
     /**
      * Writes a file in the client-provided session filesystem.
      *
@@ -31830,6 +33388,14 @@ export interface SessionFsHandler {
      * @returns Describes a filesystem error.
      */
     writeFile(params: SessionFsWriteFileRequest): Promise<SessionFsError | undefined>;
+    /**
+     * Writes binary file content to the client-provided session filesystem.
+     *
+     * @param params File path, standard-base64-encoded bytes to write, and optional mode for the client-provided session filesystem.
+     *
+     * @returns Describes a filesystem error.
+     */
+    writeFileBytes(params: SessionFsWriteFileBytesRequest): Promise<SessionFsError | undefined>;
     /**
      * Appends content to a file in the client-provided session filesystem, creating parent directories as needed.
      *