@github/copilot-sdk 1.0.17-unstable.37553872417.gc9f6176 → 1.0.18-preview.0

package/dist/generated/rpc.d.ts

@@ -15,7 +15,7 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
  * via the `definition` "AuthInfo".
  */
 /** @experimental */
-export type AuthInfo = HMACAuthInfo | EnvAuthInfo | TokenAuthInfo | TokenProviderAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
+export type AuthInfo = HMACAuthInfo | EnvAuthInfo | TokenAuthInfo | TokenProviderAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | AccountAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
 /**
  * The provider kind stamped on a signed-in account.
  *
@@ -383,6 +383,8 @@ export type AuthInfoType =
  | "env"
 /** Authentication from an interactive user sign-in. */
  | "user"
+/** Authentication from a selected provider-owned account, without a GitHub credential. */
+ | "account"
 /** Authentication delegated to the GitHub CLI. */
  | "gh-cli"
 /** Authentication from an API key credential. */
@@ -445,17 +447,19 @@ export type AuthLoginStep = {
     kind: "error";
 };
 /**
- * Terminal disposition of a login persistence attempt.
+ * Disposition of a login attempt, including pending user decisions.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AuthLoginResultStatus".
  */
 /** @experimental */
 export type AuthLoginResultStatus = 
-/** The credential was persisted and the account is signed in. */
+/** The credential was persisted and the selected account is signed in. */
 "completed"
 /** Persistence needs explicit consent to store the token in plaintext. */
  | "needs-plaintext-consent"
+/** Credentials are saved; select an account using a returned selectionId as advance input to complete sign-in. */
+ | "needs-account-selection"
 /** The user declined plaintext persistence. */
  | "declined";
 /**
@@ -467,6 +471,7 @@ export type AuthLoginResultStatus =
 /** @experimental */
 export type AuthReadValue = {
     account?: AccountStatus;
+    authInfo?: AuthIdentity;
     /**
      * Account read-datum variant discriminator.
      */
@@ -1358,6 +1363,20 @@ export type ConnectorMcpStatus =
  | "disabled"
 /** The Connector currently has no live server configuration. */
  | "not_configured";
+/**
+ * Availability.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryAvailability".
+ */
+/** @experimental */
+export type ConnectorDiscoveryAvailability = 
+/** Enabled. */
+"enabled"
+/** Disabled. */
+ | "disabled"
+/** Unavailable. */
+ | "unavailable";
 /**
  * Session account selection, or null.
  *
@@ -1971,6 +1990,14 @@ export type GitHubTokenAcquireResult = {
      */
     kind: "cancelled";
 };
+/**
+ * Source for direct repo installs (when marketplace is empty)
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPluginSource".
+ */
+/** @experimental */
+export type InstalledPluginSource = string | InstalledPluginSourceGitHub | InstalledPluginSourceUrl | InstalledPluginSourceLocal;
 /**
  * Optional compaction parameters.
  *
@@ -2438,14 +2465,6 @@ export type InstallationDecision =
  | "decline"
 /** The user cancelled the pending decision without granting consent. */
  | "cancel";
-/**
- * Source for direct repo installs (when marketplace is empty)
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSource".
- */
-/** @experimental */
-export type InstalledPluginSource = string | InstalledPluginSourceGitHub | InstalledPluginSourceUrl | InstalledPluginSourceLocal;
 /**
  * Which tier this target belongs to
  *
@@ -3382,15 +3401,15 @@ export type SessionContextAttribution = {
      */
     modelSource: string;
     /**
-     * Maximum prompt tokens the resolved model accepts — the denominator for a `##k/###k` context-usage display. Mirrors `SessionContextInfo.promptTokenLimit`.
+     * Effective input budget after reserving requested output against the combined context ceiling. Mirrors `SessionContextInfo.promptTokenLimit`.
      */
     promptTokenLimit: number;
     /**
-     * Prompt limit plus the model's output reserve: the full context window `categories.freeSpace` and `categories.buffer` are measured against. Mirrors `SessionContextInfo.limit`.
+     * Advertised prompt allowance for the selected context tier: the denominator for context-usage displays and capacity for `categories.freeSpace` and `categories.buffer`. Mirrors `SessionContextInfo.limit`.
      */
     limit: number;
     /**
-     * Output reserve plus the tokens past the buffer-exhaustion blocking threshold. Mirrors `SessionContextInfo.bufferTokens`.
+     * Output reservation overlapping the displayed prompt allowance plus the tokens past the effective input budget's buffer-exhaustion blocking threshold. Mirrors `SessionContextInfo.bufferTokens`.
      */
     bufferTokens: number;
     /**
@@ -3426,7 +3445,7 @@ export type SessionContextAttribution = {
          */
         freeSpace: number;
         /**
-         * Output reserve plus post-blocking-threshold buffer.
+         * Overlapping output reservation plus post-blocking-threshold buffer.
          */
         buffer: number;
     };
@@ -3504,7 +3523,7 @@ export type SessionContextInfo = {
      */
     totalTokens: number;
     /**
-     * Maximum prompt tokens allowed by the model (or DEFAULT_TOKEN_LIMIT if unspecified)
+     * Effective input budget: the selected tier's prompt allowance bounded by the combined context ceiling minus the requested output allowance. Uses DEFAULT_TOKEN_LIMIT when limits are unspecified.
      */
     promptTokenLimit: number;
     /**
@@ -3512,11 +3531,11 @@ export type SessionContextInfo = {
      */
     compactionThreshold: number;
     /**
-     * Prompt token limit plus the model's full output token limit.
+     * Advertised prompt allowance for the selected context tier, without adding output tokens. The denominator for context-usage displays.
      */
     limit: number;
     /**
-     * Output reserve plus tokens after the buffer-exhaustion blocking threshold (default 95%)
+     * Output reservation overlapping the displayed prompt allowance plus tokens after the effective input budget's buffer-exhaustion blocking threshold (default 95%).
      */
     bufferTokens: number;
 } | null;
@@ -4248,7 +4267,7 @@ export type SandboxConfigSource =
 /** A repository policy selected the sandbox state. */
  | "repository_policy";
 /**
- * Extensible identifier of a sandbox policy feature whose availability varies between hosts. A plain string, so an older client decodes a name added by a newer runtime; ignore names you do not recognize. Known values: `network` — sandboxed commands can reach the network (`network.allowOutbound`, on by default); on Linux this needs the tooling for Bubblewrap's private network namespace, such as slirp4netns. `network_filtering` — host rules and the sandbox proxy (`network.allowedHosts`, `network.blockedHosts`, `network.proxy`); on Linux this needs the same tooling as `network`; on Windows it needs a version with Process Security Environment 1.1 host-loopback support, and a policy that uses it must also set `network.allowLocalNetwork`, because Windows reaches the local proxy only together with private-network access. `denied_paths` — native enforcement of `filesystem.deniedPaths`; on Windows this needs a version whose sandbox contract reports denied-path support. `shell` — shell commands inside the sandbox: bash on macOS and Linux, PowerShell on Windows. `filesystem_enumeration` — enumerate-only filesystem grants, which PowerShell's drive roots use on Windows; this needs a version with Process Security Environment 1.1 filesystem enumeration support. Without it, sandboxed PowerShell still runs, but `Get-Location` may report the drive root, `Set-Location` may fail, and relative paths may resolve against the drive root; the session also receives a `session.warning` with `warningType` `sandbox`. Other platforms always report it.
+ * Extensible identifier of a sandbox policy feature whose availability varies between hosts. A plain string, so an older client decodes a name added by a newer runtime; ignore names you do not recognize. Known values: `network` — sandboxed commands can reach the network (`network.allowOutbound`, on by default); on Linux this needs the tooling for Bubblewrap's private network namespace, such as slirp4netns. `network_filtering` — host rules and the sandbox proxy (`network.allowedHosts`, `network.blockedHosts`, `network.proxy`); on Linux this needs the same tooling as `network`; on Windows it needs Process Security Environment 1.1 host-loopback support or MXC's PSEC 1.0-only proxy-loopback compatibility capability, and a policy that uses it must also set `network.allowLocalNetwork`, because Windows reaches the local proxy only together with private-network access. Compatibility applies only to an explicit identity-less runtime proxy, not general host-loopback access, and other policy restrictions still apply. `denied_paths` — native enforcement of `filesystem.deniedPaths`; on Windows this needs a version whose sandbox contract reports denied-path support. `shell` — shell commands inside the sandbox: bash on macOS and Linux, PowerShell on Windows. `filesystem_enumeration` — enumerate-only filesystem grants, which PowerShell's drive roots use on Windows; this needs a version with Process Security Environment 1.1 filesystem enumeration support. Without it, sandboxed PowerShell still runs, but `Get-Location` may report the drive root, `Set-Location` may fail, and relative paths may resolve against the drive root; the session also receives a `session.warning` with `warningType` `sandbox`. Other platforms always report it.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SandboxHostCapabilityName".
@@ -4750,7 +4769,7 @@ export type SessionsClientMetadataEntry = {
  * via the `definition` "SettableAuthInfo".
  */
 /** @experimental */
-export type SettableAuthInfo = HMACAuthInfo | EnvAuthInfo | SettableTokenAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
+export type SettableAuthInfo = HMACAuthInfo | EnvAuthInfo | SettableTokenAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | AccountAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
 /**
  * Rust-owned settings predicates exposed across the SDK boundary. Raw feature-flag names are intentionally not part of the contract.
  *
@@ -6405,6 +6424,27 @@ export interface UserAuthInfo {
     login: string;
     copilotUser?: CopilotUserResponse;
 }
+/**
+ * An interactive account whose model provider owns its credentials. It carries no GitHub credential.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AccountAuthInfo".
+ */
+/** @experimental */
+export interface AccountAuthInfo {
+    /**
+     * Provider-owned account authentication.
+     */
+    type: "account";
+    /**
+     * Host coordinate owned by the account's model provider.
+     */
+    host: string;
+    /**
+     * Login identifying the provider-owned account.
+     */
+    login: string;
+}
 /**
  * Authentication-info input variant for GitHub CLI credentials, carrying host, login, and the `gh auth token` value.
  *
@@ -7121,6 +7161,28 @@ export interface AuthIdentityMetadata {
      */
     login: string;
 }
+/**
+ * A credential-free account choice after sign-in.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AuthLoginAccount".
+ */
+/** @experimental */
+export interface AuthLoginAccount {
+    /**
+     * Opaque identifier supplied to the next login step to select this account.
+     */
+    selectionId: string;
+    /**
+     * Host coordinate owned by the selected account's provider.
+     */
+    host: string;
+    /**
+     * Human-readable login for the account choice.
+     */
+    login: string;
+    kind: AccountKind;
+}
 /**
  * Advance an in-flight login flow, optionally fulfilling an input-required step.
  *
@@ -7163,7 +7225,7 @@ export interface AuthLoginBegun {
     step: AuthLoginStep;
 }
 /**
- * Terminal result of an interactive login flow.
+ * Result of an interactive login flow. Pending consent or account selection is not terminal.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AuthLoginResultDto".
@@ -7179,6 +7241,10 @@ export interface AuthLoginResultDto {
      * Login that was signed in, when completed.
      */
     login?: string;
+    /**
+     * Available accounts when sign-in is awaiting account selection, ordered with Microsoft 365 first.
+     */
+    accounts?: AuthLoginAccount[];
 }
 /**
  * Cancel an in-flight login flow.
@@ -7325,6 +7391,74 @@ export interface AutopilotObjectiveState {
     creditCountNanoAiu: string;
     creditLimit?: AutopilotObjectiveCreditLimit;
 }
+/**
+ * A server-advertised routing preference. Identifiers and execution types are extensible.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AutoTierDescriptor".
+ */
+/** @experimental */
+export interface AutoTierDescriptor {
+    /**
+     * Opaque routing identifier transmitted unchanged to the provider.
+     */
+    id: string;
+    /**
+     * Human-readable label, not a routing identifier.
+     */
+    displayName: string;
+    /**
+     * Description displayed beside the preference.
+     */
+    description: string;
+    /**
+     * Execution kind; this client supports `auto` preferences on the Auto model.
+     */
+    type: string;
+    status: AutoTierStatus;
+}
+/**
+ * Availability of a server-advertised routing preference.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AutoTierStatus".
+ */
+/** @experimental */
+export interface AutoTierStatus {
+    /**
+     * Whether the provider permits selecting this preference.
+     */
+    enabled: boolean;
+    /**
+     * Extensible machine-readable unavailability reason.
+     */
+    reason?: string;
+    /**
+     * Human-readable explanation of availability.
+     */
+    message?: string;
+}
+/**
+ * Account-bound discovery metadata for the virtual `auto` model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AutoTierMetadata".
+ */
+/** @experimental */
+export interface AutoTierMetadata {
+    /**
+     * Provider-default preference, used only when no explicit preference exists.
+     */
+    defaultTier: string;
+    /**
+     * Routing preferences in the server's presentation order.
+     */
+    tiers: AutoTierDescriptor[];
+    /**
+     * Provider that supplied this metadata, when the catalog is provider-attributed.
+     */
+    providerId?: string;
+}
 /**
  * The running runtime's complete catalog of well-known built-in model IDs, including supported models and additional IDs with built-in metadata.
  *
@@ -9408,6 +9542,146 @@ export interface ConnectorDisconnectResult {
     disconnected: boolean;
     status: ConnectorStatus;
 }
+/**
+ * Eligible account.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryAccount".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryAccount {
+    /**
+     * Opaque account ID.
+     */
+    accountId: string;
+    authInfo: ConnectorDiscoveryAuthInfo;
+}
+/**
+ * Account metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryAuthInfo".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryAuthInfo {
+    type: AuthInfoType;
+    /**
+     * Host.
+     */
+    host: string;
+    /**
+     * Login.
+     */
+    login: string;
+}
+/**
+ * Eligible accounts.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryAccountList".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryAccountList {
+    availability: ConnectorDiscoveryAvailability;
+    /**
+     * Eligible accounts.
+     */
+    accounts: ConnectorDiscoveryAccount[];
+}
+/**
+ * Selected account.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryAccountRequest".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryAccountRequest {
+    /**
+     * Opaque account ID.
+     */
+    accountId: string;
+}
+/**
+ * Feature availability.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryCapabilities".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryCapabilities {
+    /**
+     * API version.
+     */
+    apiVersion: number;
+    availability: ConnectorDiscoveryAvailability;
+    /**
+     * Whether accounts are selected by opaque ID.
+     */
+    opaqueAccountSelection: boolean;
+    /**
+     * Whether results are cached.
+     */
+    conditionalCache: boolean;
+}
+/**
+ * Entry.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryCatalogEntry".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryCatalogEntry {
+    /**
+     * Name.
+     */
+    name: string;
+    /**
+     * Display name.
+     */
+    displayName: string;
+    /**
+     * Description.
+     */
+    description?: string;
+    /**
+     * Logo.
+     */
+    logo?: string;
+    /**
+     * Tier.
+     */
+    tier?: string;
+    /**
+     * Release tag.
+     */
+    releaseTag?: string;
+    status: ConnectorCatalogStatus;
+}
+/**
+ * Entries for the selected account.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ConnectorDiscoveryCatalogResult".
+ */
+/** @experimental */
+export interface ConnectorDiscoveryCatalogResult {
+    /**
+     * Opaque account ID.
+     */
+    accountId: string;
+    /**
+     * Revision.
+     */
+    revision: number;
+    /**
+     * Refresh time in Unix epoch milliseconds.
+     */
+    refreshedAtMs: number;
+    /**
+     * Entries.
+     */
+    connectors: ConnectorDiscoveryCatalogEntry[];
+}
 /**
  * Requests authoritative Connector-to-MCP reconciliation for the pinned account.
  *
@@ -11070,6 +11344,27 @@ export interface FolderTrustCheckResult {
      */
     trusted: boolean;
 }
+/**
+ * Owner, name, and host of a GitHub repository, as resolved from a git remote URL.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GitHubRepositoryIdentity".
+ */
+/** @experimental */
+export interface GitHubRepositoryIdentity {
+    /**
+     * Repository owner login (user or organization).
+     */
+    owner: string;
+    /**
+     * Repository name, without the owner prefix or the `.git` suffix.
+     */
+    name: string;
+    /**
+     * Host the remote points at, for example `github.com` or a GitHub Enterprise hostname.
+     */
+    host: string;
+}
 /**
  * Client environment metadata describing the process that produced a telemetry event.
  *
@@ -11219,6 +11514,123 @@ export interface GitHubTokenAcquireRequest {
     sessionId?: string;
     reason: GitHubTokenAcquireReason;
 }
+/**
+ * Installed plugin record from global state, with marketplace, version, install time, enabled state, cache path, and source.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPlugin".
+ */
+/** @experimental */
+export interface InstalledPlugin {
+    /**
+     * Plugin name
+     */
+    name: string;
+    /**
+     * Marketplace the plugin came from (empty string for direct repo installs)
+     */
+    marketplace: string;
+    /**
+     * Version installed (if available)
+     */
+    version?: string;
+    /**
+     * Installation timestamp
+     */
+    installed_at: string;
+    /**
+     * Whether the plugin is currently enabled
+     */
+    enabled: boolean;
+    /**
+     * Path where the plugin is cached locally
+     */
+    cache_path?: string;
+    source?: InstalledPluginSource;
+    /**
+     * Per-plugin source fingerprint (a SHA-256 hash of the plugin's catalog source spec plus its resolved source subtree — NOT a Git commit SHA) captured at marketplace install/update time. Auto-update compares it against the freshly recomputed fingerprint to detect a content change that does not bump the version. Absent for pre-existing installs and for direct (non-marketplace) installs.
+     */
+    source_sha?: string;
+    /**
+     * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — those synthesized at session start for a directory/local marketplace, whose cache_path points at the real plugin directory on disk rather than a copy under the installed-plugins cache. Its presence is what marks a record as live, and no record carrying it is ever written to the persisted installedPlugins key.
+     */
+    installed_from?: string;
+}
+/**
+ * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref or full commit SHA, and optional subpath.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPluginSourceGitHub".
+ */
+/** @experimental */
+export interface InstalledPluginSourceGitHub {
+    /**
+     * Constant value. Always "github".
+     */
+    source: "github";
+    /**
+     * GitHub repository in `owner/repo` form.
+     */
+    repo: string;
+    /**
+     * Optional Git ref to resolve.
+     */
+    ref?: string;
+    /**
+     * Optional full 40-character hexadecimal commit SHA.
+     */
+    sha?: string;
+    /**
+     * Optional repository-relative path to the plugin.
+     */
+    path?: string;
+}
+/**
+ * Source descriptor for a direct URL plugin install, with URL, optional ref or full commit SHA, and optional subpath.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPluginSourceUrl".
+ */
+/** @experimental */
+export interface InstalledPluginSourceUrl {
+    /**
+     * Constant value. Always "url".
+     */
+    source: "url";
+    /**
+     * URL of the plugin source.
+     */
+    url: string;
+    /**
+     * Optional Git ref to resolve.
+     */
+    ref?: string;
+    /**
+     * Optional full 40-character hexadecimal commit SHA.
+     */
+    sha?: string;
+    /**
+     * Optional source-relative path to the plugin.
+     */
+    path?: string;
+}
+/**
+ * Source descriptor for a direct local plugin install, with a local filesystem path.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPluginSourceLocal".
+ */
+/** @experimental */
+export interface InstalledPluginSourceLocal {
+    /**
+     * Constant value. Always "local".
+     */
+    source: "local";
+    /**
+     * Local filesystem path to the plugin.
+     */
+    path: string;
+}
 /**
  * Pending external tool call request ID, with the tool result or an error describing why it failed.
  *
@@ -12472,167 +12884,50 @@ export interface SkillInstallationFileReview {
  * via the `definition` "SkillInstallationSummary".
  */
 /** @experimental */
-export interface SkillInstallationSummary {
-    /**
-     * Exact durable installation receipt identity.
-     */
-    installationId: string;
-    /**
-     * Operation that installed this Skill.
-     */
-    operationId: string;
-    /**
-     * Skill invocation name.
-     */
-    name: string;
-    target: SkillInstallationLocation;
-    /**
-     * Persisted enablement requested for this installation.
-     */
-    configuredEnabled: boolean;
-    sessionState: SkillInstallationSessionState;
-    source: SkillInstallationSource;
-    catalogue: InstallationCatalogueIdentity;
-    /**
-     * ISO 8601 wall-clock installation time.
-     */
-    installedAt: string;
-    ownershipState: SkillInstallationOwnershipState;
-}
-/**
- * A response is meaningful only on the connection and request that issued its challenge.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstallationConfirmationResponse".
- */
-/** @experimental */
-export interface InstallationConfirmationResponse {
-    /**
-     * Exact challenge from the request.
-     */
-    confirmationId: string;
-    /**
-     * Exact review commitment from the request.
-     */
-    reviewFingerprint: string;
-    decision: InstallationDecision;
-}
-/**
- * Installed plugin record from global state, with marketplace, version, install time, enabled state, cache path, and source.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPlugin".
- */
-/** @experimental */
-export interface InstalledPlugin {
-    /**
-     * Plugin name
-     */
-    name: string;
-    /**
-     * Marketplace the plugin came from (empty string for direct repo installs)
-     */
-    marketplace: string;
-    /**
-     * Version installed (if available)
-     */
-    version?: string;
-    /**
-     * Installation timestamp
-     */
-    installed_at: string;
-    /**
-     * Whether the plugin is currently enabled
-     */
-    enabled: boolean;
-    /**
-     * Path where the plugin is cached locally
-     */
-    cache_path?: string;
-    source?: InstalledPluginSource;
-    /**
-     * Per-plugin source fingerprint (a SHA-256 hash of the plugin's catalog source spec plus its resolved source subtree — NOT a Git commit SHA) captured at marketplace install/update time. Auto-update compares it against the freshly recomputed fingerprint to detect a content change that does not bump the version. Absent for pre-existing installs and for direct (non-marketplace) installs.
-     */
-    source_sha?: string;
-    /**
-     * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — those synthesized at session start for a directory/local marketplace, whose cache_path points at the real plugin directory on disk rather than a copy under the installed-plugins cache. Its presence is what marks a record as live, and no record carrying it is ever written to the persisted installedPlugins key.
-     */
-    installed_from?: string;
-}
-/**
- * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref or full commit SHA, and optional subpath.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSourceGitHub".
- */
-/** @experimental */
-export interface InstalledPluginSourceGitHub {
-    /**
-     * Constant value. Always "github".
-     */
-    source: "github";
-    /**
-     * GitHub repository in `owner/repo` form.
-     */
-    repo: string;
-    /**
-     * Optional Git ref to resolve.
-     */
-    ref?: string;
-    /**
-     * Optional full 40-character hexadecimal commit SHA.
-     */
-    sha?: string;
-    /**
-     * Optional repository-relative path to the plugin.
-     */
-    path?: string;
-}
-/**
- * Source descriptor for a direct URL plugin install, with URL, optional ref or full commit SHA, and optional subpath.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSourceUrl".
- */
-/** @experimental */
-export interface InstalledPluginSourceUrl {
+export interface SkillInstallationSummary {
     /**
-     * Constant value. Always "url".
+     * Exact durable installation receipt identity.
      */
-    source: "url";
+    installationId: string;
     /**
-     * URL of the plugin source.
+     * Operation that installed this Skill.
      */
-    url: string;
+    operationId: string;
     /**
-     * Optional Git ref to resolve.
+     * Skill invocation name.
      */
-    ref?: string;
+    name: string;
+    target: SkillInstallationLocation;
     /**
-     * Optional full 40-character hexadecimal commit SHA.
+     * Persisted enablement requested for this installation.
      */
-    sha?: string;
+    configuredEnabled: boolean;
+    sessionState: SkillInstallationSessionState;
+    source: SkillInstallationSource;
+    catalogue: InstallationCatalogueIdentity;
     /**
-     * Optional source-relative path to the plugin.
+     * ISO 8601 wall-clock installation time.
      */
-    path?: string;
+    installedAt: string;
+    ownershipState: SkillInstallationOwnershipState;
 }
 /**
- * Source descriptor for a direct local plugin install, with a local filesystem path.
+ * A response is meaningful only on the connection and request that issued its challenge.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "InstalledPluginSourceLocal".
+ * via the `definition` "InstallationConfirmationResponse".
  */
 /** @experimental */
-export interface InstalledPluginSourceLocal {
+export interface InstallationConfirmationResponse {
     /**
-     * Constant value. Always "local".
+     * Exact challenge from the request.
      */
-    source: "local";
+    confirmationId: string;
     /**
-     * Local filesystem path to the plugin.
+     * Exact review commitment from the request.
      */
-    path: string;
+    reviewFingerprint: string;
+    decision: InstallationDecision;
 }
 /**
  * Information about an installed plugin tracked in global state.
@@ -13253,6 +13548,10 @@ export interface ManagedSettingMeta {
      * Channel that supplied this scalar value, matching a `layers[].source`: `device`, `server`, or `policyHelper`. These scalar defaults select one winning channel, not a mixed source. Treat unknown values as additional channels; more may be added.
      */
     source: string;
+    /**
+     * Original managed value when the runtime adjusted it to a supported effective value. Omitted when no adjustment was needed.
+     */
+    requested?: string;
 }
 /**
  * One candidate channel; absent settings represents a channel that delivered no document.
@@ -13310,10 +13609,15 @@ export interface ManagedSettingsComposeResult {
 /** @experimental */
 export interface ManagedSettingsValues {
     /**
-     * Managed default model identifier, as configured. New sessions start with it; it can name a model the account cannot use, so hosts match it against the listed models.
+     * Managed default model identifier. When model availability was resolved, aliases and family names are projected to a concrete available model ID; otherwise the configured value is returned.
      */
     model?: string;
     autoTier?: AutoTier;
+    /**
+     * Managed reasoning-effort default for the managed concrete model. The runtime clamps it to an entitled effort when model availability is known.
+     */
+    effortLevel?: string;
+    contextTier?: ContextTier;
 }
 /**
  * Per-key lock state and provenance for `ManagedSettingsValues`, with the same field names. Producers emit each typed key in values and meta together; both outer objects are omitted when no typed key is set.
@@ -13325,6 +13629,8 @@ export interface ManagedSettingsValues {
 export interface ManagedSettingsMeta {
     model?: ManagedSettingMeta;
     autoTier?: ManagedSettingMeta;
+    effortLevel?: ManagedSettingMeta;
+    contextTier?: ManagedSettingMeta;
 }
 /**
  * One managed-settings channel and the document it delivered.
@@ -13392,6 +13698,10 @@ export interface ManagedSettingsResolveRequest {
      * Embedding client identity for server policy requests, as in session creation. Omit for the CLI identity.
      */
     clientName?: string;
+    /**
+     * Working directory used to run an organization policy helper. When omitted, sessionless resolution does not run the helper.
+     */
+    workingDirectory?: string;
 }
 /**
  * Effective enterprise managed settings for an account, resolved without a session.
@@ -14268,6 +14578,64 @@ export interface McpConfigUpdateRequest {
     name: string;
     config: McpSerializableServerConfig;
 }
+/**
+ * Effective MCP configuration entry. Configuration enablement is distinct from the optional live observation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpConfiguredServer".
+ */
+/** @experimental */
+export interface McpConfiguredServer {
+    /**
+     * Server name (config key)
+     */
+    name: string;
+    /**
+     * Whether this configured server is enabled after session configuration and policy filtering.
+     */
+    enabled: boolean;
+    source?: McpServerSource;
+    /**
+     * Plugin name that provided this server, when source is plugin.
+     */
+    sourcePlugin?: string;
+    /**
+     * Plugin version that provided this server, when source is plugin.
+     */
+    sourcePluginVersion?: string;
+    /**
+     * Human-readable display name supplied by configuration.
+     */
+    displayName?: string;
+    live?: McpConfiguredServerState;
+}
+/**
+ * Observational state for a matching already materialized MCP server.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpConfiguredServerState".
+ */
+/** @experimental */
+export interface McpConfiguredServerState {
+    status: McpServerStatus;
+    /**
+     * Observed connection error, when the materialized server failed.
+     */
+    error?: string;
+}
+/**
+ * Effective MCP configuration with optional live observations from matching already materialized servers.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpConfiguredServerList".
+ */
+/** @experimental */
+export interface McpConfiguredServerList {
+    /**
+     * Effective configured MCP servers.
+     */
+    servers: McpConfiguredServer[];
+}
 /**
  * Result of configuring GitHub MCP.
  *
@@ -15747,6 +16115,10 @@ export interface McpServer {
     name: string;
     status: McpServerStatus;
     source?: McpServerSource;
+    /**
+     * Configured URL for an HTTP/SSE server, regardless of configuration source. Omitted for local and in-memory servers.
+     */
+    url?: string;
     /**
      * Plugin name that provided this server, when source is plugin.
      */
@@ -15947,11 +16319,11 @@ export interface MetadataContextHeaviestMessagesResult {
 /** @experimental */
 export interface MetadataContextInfoRequest {
     /**
-     * Maximum prompt tokens allowed by the target model. Pass 0 to use the runtime default.
+     * Advertised prompt allowance. Pass 0 to resolve the selected model and context tier from the session.
      */
     promptTokenLimit: number;
     /**
-     * Maximum output tokens allowed by the target model. Pass 0 if unknown.
+     * Requested output allowance to reserve against the combined context ceiling. Pass 0 to resolve the session's request cap, falling back to the model's advertised output limit.
      */
     outputTokenLimit: number;
     /**
@@ -16190,6 +16562,10 @@ export interface Model {
     metadata?: {
         [k: string]: JsonValue | undefined;
     };
+    /**
+     * Model vendor as the Copilot API reports it, for example "Anthropic" or "Azure OpenAI". Open vocabulary, passed through unchanged. It can name the vendor that serves the model instead of the one that built it, or a label that is not a vendor, such as "Experimental". Absent when the Copilot API reports no vendor.
+     */
+    vendor?: string;
     policy?: ModelPolicy;
     billing?: ModelBilling;
     /**
@@ -22045,6 +22421,23 @@ export interface SessionBulkDeleteResult {
         [k: string]: number | undefined;
     };
 }
+/**
+ * The IDE a host is connected to, as reported to the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionConnectedIdeInfo".
+ */
+/** @experimental */
+export interface SessionConnectedIdeInfo {
+    /**
+     * Display name of the connected IDE, for example `VS Code`.
+     */
+    ideName: string;
+    /**
+     * Absolute path of the workspace folder the IDE has open.
+     */
+    workspaceFolder: string;
+}
 /**
  * The enriched metadata records, with summary and context fields backfilled where available. Sessions confirmed empty and unnamed are omitted.
  *
@@ -22864,6 +23257,10 @@ export interface SessionManagedPermissions {
      * When set to `disable`, prevents bypass/allow-all permission modes. Advisory auto-approval remains available because normal prompt paths stay active. Any other value is accepted rather than failing the session, but is enforced as `disable`: the key is only present to restrict something, so a mode this runtime cannot interpret fails closed to the most restrictive one it knows. Omit the key entirely to impose no restriction.
      */
     disableBypassPermissionsMode?: string;
+    /**
+     * When true, prevents Assisted Permissions from being activated. An actively Assisted session falls back to Manual Approval while the policy is in force. Omit the key or set it to false to impose no restriction.
+     */
+    disableAssistedPermissionsMode?: boolean;
     /**
      * Permission rules that block matching operations. Deny has highest precedence.
      */
@@ -22876,6 +23273,10 @@ export interface SessionManagedPermissions {
      * Permission rules that allow matching operations unless another managed source, deny, or ask rule restricts them.
      */
     allow?: string[];
+    /**
+     * Closed-world host boundary expressed as `Domain(hostname)`, `Domain(IP)`, or `Domain(*.example.com)` rules. Schemes, ports, paths, queries, and fragments are rejected because every network request must be enforceable at host-level egress. Multiple managed sources intersect their lists; an empty list denies all hosts.
+     */
+    limitTo?: string[];
 }
 /**
  * Managed settings an SDK host may inject at session startup. Only permissions are accepted in this initial contract.
@@ -22887,6 +23288,19 @@ export interface SessionManagedPermissions {
 export interface SessionManagedSettings {
     permissions?: SessionManagedPermissions;
 }
+/**
+ * Records which IDE the host is connected to, or clears it.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionMcpSetConnectedIdeInfoParams".
+ */
+/** @experimental */
+export interface SessionMcpSetConnectedIdeInfoParams {
+    /**
+     * The connected IDE. Null or omitted clears the recorded IDE, which is how a host reports that it is disconnected.
+     */
+    ide?: SessionConnectedIdeInfo | null;
+}
 /**
  * Point-in-time snapshot of slow-changing session identifier and state fields
  *
@@ -22977,6 +23391,7 @@ export interface SessionModelList {
     quotaSnapshots?: {
         [k: string]: JsonValue | undefined;
     };
+    auto?: AutoTierMetadata;
 }
 /**
  * Cost-category metadata for a CAPI model.
@@ -23042,6 +23457,10 @@ export interface SessionOpenOptions {
      * Opt-in: self-fetch and enforce enterprise managed settings, including managed hook policies, at session bootstrap.
      */
     enableManagedSettings?: boolean;
+    /**
+     * Opt in to enforcing non-overridable managed model controls on session model, Auto-tier, reasoning-effort, and context-tier changes. Managed defaults still apply when omitted; this option only turns conflicting changes into errors.
+     */
+    enforceManagedModelDefaults?: boolean;
     managedSettings?: SessionManagedSettings;
     /**
      * Opt in to capturing file changes for session rewind and session diff. Capture cannot reconstruct changes made before it was enabled. On create it starts capture from the first turn. It is also honored on resume: for a session that already has tracked prior turns, tracking continues automatically even if this is omitted; passing it on resume additionally enables tracking for an eligible session that has no prior root turn yet. Resuming a session whose prior root turns were never tracked has no restorable baseline, so tracking stays disabled for it and rewind reports file change tracking as unavailable; the resume itself still succeeds, so sessions that predate tracking remain loadable. The opt-in is only rejected when the session can never track (a subagent session, or one without local session storage). It is intentionally absent from the mutable options update because enabling it after edits have occurred would create an incomplete, misleading baseline. Subagents share the parent session's capture store and are not tracked as separate rewind points: a file a subagent writes is attributed to whichever root user turn was open when the capture was staged, just before the tool body ran. A turn cannot open while a staged capture is still in flight, so a subagent tool that staged under the spawning turn stays attributed to it however late the write lands, while a capture it stages after the user's next message belongs to that later turn. Attribution decides which turn's rewind point counts and file preview include that write; it does not narrow which rewinds revert it, because a rewind restores every capture from the selected turn onward, so the earlier spawning turn reverts it as well.
@@ -23721,6 +24140,90 @@ export interface SessionsCloseRequest {
 /** @experimental */
 export interface SessionsCloseResult {
 }
+/**
+ * Identity, state location and starting context for a workspace record.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsCreateWorkspaceRequest".
+ */
+/** @experimental */
+export interface SessionsCreateWorkspaceRequest {
+    /**
+     * Session ID the workspace record belongs to
+     */
+    sessionId: string;
+    /**
+     * Directory the session's state is written under when no session filesystem provider is configured. Ignored when a provider is configured; the provider's session state path is used instead.
+     */
+    sessionStatePath: string;
+    /**
+     * `windows` (any letter case) selects Windows path rules. Any other value selects POSIX path rules.
+     */
+    convention: string;
+    context?: SessionWorkingDirectoryContextWithClient;
+    /**
+     * User-supplied display name for the workspace
+     */
+    name?: string;
+}
+/**
+ * A working-directory context together with the client that produced it.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionWorkingDirectoryContextWithClient".
+ */
+/** @experimental */
+export interface SessionWorkingDirectoryContextWithClient {
+    /**
+     * Current working directory path
+     */
+    cwd: string;
+    /**
+     * Root directory of the git repository
+     */
+    gitRoot?: string;
+    /**
+     * Repository identifier derived from the git remote URL
+     */
+    repository?: string;
+    /**
+     * Hosting platform type of the repository
+     */
+    hostType?: string;
+    /**
+     * Current git branch name
+     */
+    branch?: string;
+    /**
+     * Raw host string from the git remote URL
+     */
+    repositoryHost?: string;
+    /**
+     * Head commit of the current git branch
+     */
+    headCommit?: string;
+    /**
+     * Merge-base commit SHA
+     */
+    baseCommit?: string;
+    /**
+     * Name of the client that created the session
+     */
+    clientName?: string;
+}
+/**
+ * The workspace record that was written.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsCreateWorkspaceResult".
+ */
+/** @experimental */
+export interface SessionsCreateWorkspaceResult {
+    /**
+     * The created workspace record, as JSON
+     */
+    workspaceJson: string;
+}
 /**
  * Session ID to delete from disk.
  *
@@ -24348,6 +24851,36 @@ export interface SessionsLoadDeferredRepoHooksRequest {
      */
     sessionId: string;
 }
+/**
+ * Where the session's state lives, as a root directory and the session ID under it.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsLoadWorkspaceRequest".
+ */
+/** @experimental */
+export interface SessionsLoadWorkspaceRequest {
+    /**
+     * Root directory every session's state directory sits under
+     */
+    sessionsHome: string;
+    /**
+     * Session ID naming the state directory under the sessions home. Rejected when it is absolute or contains a parent component, so it cannot escape the sessions home.
+     */
+    sessionId: string;
+}
+/**
+ * The workspace record on disk, omitted when the session has none.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsLoadWorkspaceResult".
+ */
+/** @experimental */
+export interface SessionsLoadWorkspaceResult {
+    /**
+     * The workspace record, as JSON. Omitted when the record does not exist.
+     */
+    workspaceJson?: string;
+}
 /**
  * Age threshold and optional flags controlling which old sessions are pruned (or simulated when dryRun is true).
  *
@@ -24542,6 +25075,36 @@ export interface SessionsTransferRemoteControlRequest {
      */
     expectedFromSessionId?: string;
 }
+/**
+ * Where the session's state lives, plus workspace-schema fields to merge into its workspace record. Stored keys outside the schema are not preserved, and a stored `fork_count` is never replaced.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsUpdateWorkspaceFieldsRequest".
+ */
+/** @experimental */
+export interface SessionsUpdateWorkspaceFieldsRequest {
+    /**
+     * Root directory every session's state directory sits under
+     */
+    sessionsHome: string;
+    /**
+     * Session ID naming the state directory under the sessions home. Rejected when it is absolute or contains a parent component, so it cannot escape the sessions home.
+     */
+    sessionId: string;
+    /**
+     * Workspace-schema fields to merge into the record, as a JSON object. Fields the object omits keep their stored values, except stored keys outside the schema are not preserved and a stored `fork_count` is never replaced.
+     */
+    fieldsJson: string;
+}
+/**
+ * The merge completed. The record carries the supplied workspace-schema fields, but a stored `fork_count` stays.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsUpdateWorkspaceFieldsResult".
+ */
+/** @experimental */
+export interface SessionsUpdateWorkspaceFieldsResult {
+}
 /**
  * Telemetry engagement ID for the session, when available.
  *
@@ -25143,7 +25706,7 @@ export interface SkillPlanUninstallRequest {
     policySessionId: string;
 }
 /**
- * Catalog-only metadata for one SDK-provided skill. The complete SKILL.md is fetched separately and lazily.
+ * Authoritative catalog metadata for one SDK-provided skill. The skill's SKILL.md text is fetched separately and lazily.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SkillProviderDescriptor".
@@ -27539,7 +28102,7 @@ export interface UserSettingMetadata {
     isDefault: boolean;
 }
 /**
- * Per-key metadata for every known user setting (settings.json overlaid with the legacy config.json, config.json wins), including settings left at their default. Excludes repository- and enterprise-managed overrides.
+ * Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "UserSettingsGetResult".
@@ -27566,19 +28129,6 @@ export interface UserSettingsSetRequest {
      */
     settings: JsonValue;
 }
-/**
- * Outcome of writing user settings.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "UserSettingsSetResult".
- */
-/** @experimental */
-export interface UserSettingsSetResult {
-    /**
-     * Top-level keys whose write landed in settings.json but is shadowed by a value still present in the legacy config.json (config.json wins on read). The write does not take effect until the legacy value is removed.
-     */
-    shadowedKeys: string[];
-}
 /**
  * Current sharing status and shareable GitHub URL for a session.
  *
@@ -30255,23 +30805,17 @@ export declare function createServerRpc(connection: MessageConnection): {
         /** @experimental */
         settings: {
             /**
-             * Drops this runtime process's in-memory user settings cache so the next settings read observes disk.
-             */
-            reload: () => Promise<void>;
-            /**
-             * Lists every known user setting (settings.json overlaid with the legacy config.json, config.json wins), each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
+             * Lists every known user setting from settings.json, each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
              *
-             * @returns Per-key metadata for every known user setting (settings.json overlaid with the legacy config.json, config.json wins), including settings left at their default. Excludes repository- and enterprise-managed overrides.
+             * @returns Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
              */
             get: () => Promise<UserSettingsGetResult>;
             /**
-             * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed. Returns the keys whose new value is shadowed by a legacy config.json entry (config.json wins on read), which the runtime leaves in place — such writes do not take effect until the legacy value is removed.
+             * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed.
              *
              * @param params Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.
-             *
-             * @returns Outcome of writing user settings.
              */
-            set: (params: UserSettingsSetRequest) => Promise<UserSettingsSetResult>;
+            set: (params: UserSettingsSetRequest) => Promise<void>;
         };
     };
     /** @experimental */
@@ -30570,6 +31114,37 @@ export declare function createServerRpc(connection: MessageConnection): {
          */
         spawn: (params: AgentRegistrySpawnRequest) => Promise<AgentRegistrySpawnResult>;
     };
+    /** @experimental */
+    connectors: {
+        /**
+         * Returns feature availability.
+         *
+         * @returns Feature availability.
+         */
+        getCapabilities: () => Promise<ConnectorDiscoveryCapabilities>;
+        /**
+         * Returns eligible accounts.
+         *
+         * @returns Eligible accounts.
+         */
+        getAccounts: () => Promise<ConnectorDiscoveryAccountList>;
+        /**
+         * Lists entries for the selected account.
+         *
+         * @param params Selected account.
+         *
+         * @returns Entries for the selected account.
+         */
+        list: (params: ConnectorDiscoveryAccountRequest) => Promise<ConnectorDiscoveryCatalogResult>;
+        /**
+         * Refreshes entries for the selected account.
+         *
+         * @param params Selected account.
+         *
+         * @returns Entries for the selected account.
+         */
+        refresh: (params: ConnectorDiscoveryAccountRequest) => Promise<ConnectorDiscoveryCatalogResult>;
+    };
 };
 /** Create typed session-scoped RPC methods. */
 export declare function createSessionRpc(connection: MessageConnection, sessionId: string): {
@@ -31428,11 +32003,17 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
     /** @experimental */
     mcp: {
         /**
-         * Lists MCP servers configured for the session, their connection status, and host-level state. The host-level state (disabled/filtered servers, failed/needs-auth/pending connections, mcp3p policy, full config) is empty/zero when no MCP host has been initialized for the session.
+         * Lists materialized MCP servers and their connection status. Cache misses may start and wait for MCP servers.
          *
          * @returns MCP servers configured for the session, with their connection status and host-level state.
          */
         list: () => Promise<McpServerList>;
+        /**
+         * Lists effective MCP configuration without starting, restarting, authenticating, or waiting for servers. An optional live observation is from an already materialized matching server; this is not a readiness guarantee.
+         *
+         * @returns Effective MCP configuration with optional live observations from matching already materialized servers.
+         */
+        listConfigured: () => Promise<McpConfiguredServerList>;
         /**
          * Lists the tools exposed by a connected MCP server on this session's host. This performs a live `tools/list` request. Tool UI metadata is returned independently of whether MCP Apps rendering is enabled for the session.
          *
@@ -31946,13 +32527,13 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          */
         list: () => Promise<ExtensionList>;
         /**
-         * Enables an extension for the session.
+         * Enables an extension for the session and persists the preference when the session has a settings store. Hosts synchronizing effective membership should use extensions.reconcile instead.
          *
          * @param params Source-qualified extension identifier to enable for the session.
          */
         enable: (params: ExtensionsEnableRequest) => Promise<void>;
         /**
-         * Disables an extension for the session.
+         * Disables an extension for the session and persists the preference when the session has a settings store. Hosts synchronizing effective membership should use extensions.reconcile instead.
          *
          * @param params Source-qualified extension identifier to disable for the session.
          */
@@ -31961,6 +32542,12 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * Reloads extension definitions and processes for the session.
          */
         reload: () => Promise<void>;
+        /**
+         * Host-only reconciliation of authoritative session-effective extension membership and enablement. Refreshes runtime-owned discovery and preferences without persisting settings, installing plugins, or restarting unchanged activations. Returns ExtensionList only after required starts and process/contribution cleanup settle. Takes no caller inventory or overrides. Missing controllers, unready/incomplete discovery, unavailable workspaces, superseded inputs, and lifecycle failures are errors, not empty membership. Independently proven revocations may be applied before an error; retry converges without restarting healthy activations. Error data contains lifecycleChangesApplied and code: extension_reconciliation_host_required, extension_reconciliation_unavailable, extension_reconciliation_not_ready, extension_reconciliation_discovery_failed, extension_reconciliation_workspace_unavailable, extension_reconciliation_superseded, or extension_reconciliation_lifecycle_failed. Mark host reconciliation state applied only on success. On older runtimes, method-not-found must not fall back to global discovery and persistent extension disables.
+         *
+         * @returns Extensions discovered for the session, with their current status.
+         */
+        reconcile: () => Promise<ExtensionList>;
         /**
          * Push attachments into the next user-message turn from an extension. The host should surface them as composer pills and forward them via the next session.send call. Callable only by extension-owned connections.
          *