@github/copilot-sdk 1.0.20 → 1.0.21-preview.1

package/dist/generated/rpc.d.ts

@@ -16,6 +16,32 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
  */
 /** @experimental */
 export type AuthInfo = HMACAuthInfo | EnvAuthInfo | TokenAuthInfo | TokenProviderAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | AccountAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
+/**
+ * Authentication type
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AuthInfoType".
+ */
+/** @experimental */
+export type AuthInfoType = 
+/** Authentication provided by a GitHub App HMAC credential. */
+"hmac"
+/** Authentication resolved from environment-provided credentials. */
+ | "env"
+/** Authentication from an interactive user sign-in. */
+ | "user"
+/** Authentication from a selected provider-owned account, without a GitHub credential. */
+ | "account"
+/** Authentication delegated to the GitHub CLI. */
+ | "gh-cli"
+/** Authentication from an API key credential. */
+ | "api-key"
+/** Authentication from a GitHub token. */
+ | "token"
+/** Authentication from an SDK GitHub token callback. */
+ | "token-provider"
+/** Authentication from a Copilot API token. */
+ | "copilot-api-token";
 /**
  * The provider kind stamped on a signed-in account.
  *
@@ -369,32 +395,6 @@ export type LoginProviderKind =
  | "proxima"
 /** Microsoft Entra sign-in that derives a GitHub (EMU) credential. */
  | "entra";
-/**
- * Authentication type
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "AuthInfoType".
- */
-/** @experimental */
-export type AuthInfoType = 
-/** Authentication provided by a GitHub App HMAC credential. */
-"hmac"
-/** Authentication resolved from environment-provided credentials. */
- | "env"
-/** Authentication from an interactive user sign-in. */
- | "user"
-/** Authentication from a selected provider-owned account, without a GitHub credential. */
- | "account"
-/** Authentication delegated to the GitHub CLI. */
- | "gh-cli"
-/** Authentication from an API key credential. */
- | "api-key"
-/** Authentication from a GitHub token. */
- | "token"
-/** Authentication from an SDK GitHub token callback. */
- | "token-provider"
-/** Authentication from a Copilot API token. */
- | "copilot-api-token";
 /**
  * One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra).
  *
@@ -5276,6 +5276,38 @@ export type SkillInstallationResult = {
  */
 /** @experimental */
 export type SlashCommandInvocationResult = SlashCommandTextResult | SlashCommandAgentPromptResult | SlashCommandCompletedResult | SlashCommandSelectSubcommandResult | SlashCommandAddTimelineEntryResult | SlashCommandShowDialogResult | SlashCommandSetModelResult | SlashCommandSetPlanModelResult;
+/**
+ * What the one-time staff log-level migration did.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "StaffLogLevelMigrationStatus".
+ */
+/** @experimental */
+export type StaffLogLevelMigrationStatus = 
+/** The account is not a staff account, so the migration does not apply and nothing was recorded. */
+"ineligible"
+/** The migration already ran; the stored completion timestamp is returned unchanged. */
+ | "current"
+/** The migration ran now. The persisted settings may have changed, so the host should adopt the returned settings when they are present. */
+ | "refreshed";
+/**
+ * What the one-time staff update-channel migration did.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "StaffUpdateChannelMigrationStatus".
+ */
+/** @experimental */
+export type StaffUpdateChannelMigrationStatus = 
+/** The account is not a staff account, so the migration does not apply and nothing was recorded. */
+"ineligible"
+/** The migration already ran within the cutoff window; the stored completion timestamp is returned unchanged. */
+ | "current"
+/** The persisted update channel was changed to stable. Only this outcome requires the host to reload its configuration. */
+ | "migrated"
+/** The persisted channel was already stable, so nothing changed, but the migration is now recorded as done. */
+ | "completed"
+/** The account is on the experimental channel, which the migration deliberately leaves alone, and the migration is recorded as done. */
+ | "excluded-experimental";
 /**
  * Subagent settings to apply, or null to clear the live session override
  *
@@ -5891,6 +5923,62 @@ export type WorkspacesWorkspaceDetailsHostType =
 "github"
 /** Workspace repository is hosted on Azure DevOps. */
  | "ado";
+/**
+ * True when this process can offer installing the sandbox credential-proxy certificate authority into OS trust.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxyCaCheckInstallationSupportResult".
+ */
+/** @experimental */
+export type SandboxProxyCaCheckInstallationSupportResult = boolean;
+/**
+ * True when the sandbox configuration uses the credential proxy and can need certificate-authority setup.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxyCaCheckRelevanceResult".
+ */
+/** @experimental */
+export type SandboxProxyCaCheckRelevanceResult = boolean;
+/**
+ * True when an OS-level sandbox can run on this host.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxCheckPlatformSupportResult".
+ */
+/** @experimental */
+export type SandboxCheckPlatformSupportResult = boolean;
+/**
+ * True when the sandbox on this host can reach host loopback directly.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxCheckWindowsHostLoopbackSupportResult".
+ */
+/** @experimental */
+export type SandboxCheckWindowsHostLoopbackSupportResult = boolean;
+/**
+ * The user-facing refusal, including the platform remedy and the documentation link.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxGetUnsupportedMessageResult".
+ */
+/** @experimental */
+export type SandboxGetUnsupportedMessageResult = string;
+/**
+ * The user-facing notice that a saved sandbox setting is inert for this session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxGetUnsupportedSettingDisabledNoticeResult".
+ */
+/** @experimental */
+export type SandboxGetUnsupportedSettingDisabledNoticeResult = string;
+/**
+ * True when the command stays available while enforcement is blocked.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxCheckEnforcementCommandResult".
+ */
+/** @experimental */
+export type SandboxCheckEnforcementCommandResult = boolean;
 /**
  * List of all authenticated users
  *
@@ -6573,6 +6661,33 @@ export interface ApiKeyAuthInfo {
     host: string;
     copilotUser?: CopilotUserResponse;
 }
+/**
+ * Credential-free authentication identity safe to expose to hosts and user interfaces.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AuthIdentity".
+ */
+/** @experimental */
+export interface AuthIdentity {
+    type: AuthInfoType;
+    /**
+     * Authentication host
+     */
+    host: string;
+    /**
+     * Authenticated login, when available
+     */
+    login?: string;
+    /**
+     * Name of the environment variable that supplied the credential, when applicable
+     */
+    envVar?: string;
+    /**
+     * Opaque SDK GitHub credential registration backing this identity. Routing metadata only; never a credential.
+     */
+    registrationId?: string;
+    copilotUser?: CopilotUserResponse;
+}
 /**
  * Current authentication state
  *
@@ -6883,6 +6998,12 @@ export interface AgentInfo {
      * Authored base prompt for the agent. Runtime prompt assembly may add dynamic context at invocation time. Omitted from `session.agent.list` unless `includePrompt` is true.
      */
     prompt?: string;
+    /**
+     * Declarative hook actions keyed by event name, executed only while this agent is active.
+     */
+    hooks?: {
+        [k: string]: JsonValue[] | undefined;
+    };
 }
 /**
  * Agents available to the session.
@@ -7116,6 +7237,10 @@ export interface AgentReloadResult {
  */
 /** @experimental */
 export interface AgentsDiscoverRequest {
+    /**
+     * Explicit discovery-only agent roots, separate from customAgents and filesystem grants. Available without ambient discovery, subject to managed/source disables. Relative paths resolve against the request's effective working directory when supplied. Null and omission are equivalent; an empty array contributes no explicit roots.
+     */
+    agentDirectories?: string[];
     /**
      * Optional list of project directory paths to scan for project-scoped agents. When omitted or empty, only user/plugin/remote-independent agents are returned (no project scan).
      */
@@ -7173,6 +7298,10 @@ export interface AgentSetPromptRequest {
  */
 /** @experimental */
 export interface AgentsGetDiscoveryPathsRequest {
+    /**
+     * Explicit discovery-only agent roots to enumerate, including configured missing directories. Relative paths resolve against the request's effective working directory when supplied. These are not filesystem grants or preferred creation targets. Null and omission are equivalent.
+     */
+    agentDirectories?: string[];
     /**
      * Optional list of project directory paths. When omitted or empty, only the user-level directory is returned.
      */
@@ -7200,33 +7329,6 @@ export interface ProviderDescriptor {
      */
     available: boolean;
 }
-/**
- * Credential-free authentication identity safe to expose to hosts and user interfaces.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "AuthIdentity".
- */
-/** @experimental */
-export interface AuthIdentity {
-    type: AuthInfoType;
-    /**
-     * Authentication host
-     */
-    host: string;
-    /**
-     * Authenticated login, when available
-     */
-    login?: string;
-    /**
-     * Name of the environment variable that supplied the credential, when applicable
-     */
-    envVar?: string;
-    /**
-     * Opaque SDK GitHub credential registration backing this identity. Routing metadata only; never a credential.
-     */
-    registrationId?: string;
-    copilotUser?: CopilotUserResponse;
-}
 /**
  * Credential-free identity metadata.
  *
@@ -12094,6 +12196,10 @@ export interface HistoryTruncateResult {
  */
 /** @experimental */
 export interface HooksDiscoverRequest {
+    /**
+     * Explicit discovery-only file-hook roots, separate from callback hooks and filesystem grants. Available without ambient discovery or repository file-hook enablement, subject to managed/hook disables. Relative paths resolve against the request's effective working directory when supplied. Null and omission are equivalent; an empty array contributes no explicit roots.
+     */
+    hookDirectories?: string[];
     /**
      * Optional project directory paths whose trusted repository and project-expanded plugin hooks should be discovered. When omitted or empty, user, managed-policy, and globally enabled installed or explicit plugin hooks are returned without project expansion.
      */
@@ -13187,6 +13293,10 @@ export interface InstructionDiscoveryPathList {
  */
 /** @experimental */
 export interface InstructionsDiscoverRequest {
+    /**
+     * Explicit discovery-only instruction roots using existing SDK instruction formats, not filesystem grants. Available without ambient discovery, subject to instruction/managed disables. Relative paths resolve against the request's effective working directory when supplied. Null and omission are equivalent; an empty array contributes no explicit roots.
+     */
+    instructionDirectories?: string[];
     /**
      * Optional list of project directory paths to scan for repository/working-directory instruction sources. When omitted or empty, only user-level and plugin instruction sources are returned (no project scan).
      */
@@ -13204,6 +13314,10 @@ export interface InstructionsDiscoverRequest {
  */
 /** @experimental */
 export interface InstructionsGetDiscoveryPathsRequest {
+    /**
+     * Explicit discovery-only instruction roots to enumerate, including configured missing directories. Relative paths resolve against the request's effective working directory when supplied. These are not filesystem grants or preferred creation targets. Null and omission are equivalent.
+     */
+    instructionDirectories?: string[];
     /**
      * Optional list of project directory paths. When omitted or empty, only the user-level targets are returned.
      */
@@ -17134,6 +17248,64 @@ export interface ModelCapabilitiesOverrideLimitsVision {
      */
     max_prompt_image_size?: number;
 }
+/**
+ * Host presentation state the reasoning-summaries policy depends on.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelGetReasoningSummariesRequest".
+ */
+/** @experimental */
+export interface ModelGetReasoningSummariesRequest {
+    /**
+     * The host's persisted `showReasoning` user setting, omitted when unset.
+     */
+    persistedShowReasoning?: boolean;
+    /**
+     * Whether the host is currently showing reasoning summaries. Defaults to false.
+     */
+    summariesVisible?: boolean;
+}
+/**
+ * Reasoning-summaries presentation policy for the session's current model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelGetReasoningSummariesResult".
+ */
+/** @experimental */
+export interface ModelGetReasoningSummariesResult {
+    /**
+     * False until the session has a model catalog and a selected model. This read never resolves the catalog itself, and the runtime emits no readiness notification, so repeating this call alone leaves `ready` false indefinitely on a session that has neither listed models nor run a turn. `session.model.list` is the prerequisite and the signal: it resolves and caches the catalog for the session, so a successful return means the next read is ready. The exception is a session that resolves models without a Copilot catalog, that is a BYOK registry or an alternate provider: `session.model.list` returns an empty list without caching a catalog, so `ready` stays false and this policy is unavailable there. While false, every model-policy field is false and `visibility` is omitted; `experimentSettled` is independent of readiness and still reports the assignment state.
+     */
+    ready: boolean;
+    /**
+     * Whether the session's reasoning-summaries experiment assignment has settled. False means this read does not wait for a pending assignment and reports the experiment-derived fields conservatively: `showHiddenHint` is false and `visibility` falls back to `persistedShowReasoning`, or is omitted when none was supplied. A host that wants the assigned answer re-reads until this is true.
+     */
+    experimentSettled: boolean;
+    /**
+     * Whether turns on this session produce reasoning summaries, honouring an explicit session reasoning-summary override.
+     */
+    sessionShowsSummaries: boolean;
+    /**
+     * Whether the selected model shows reasoning summaries by default.
+     */
+    modelDefaultShowsSummaries: boolean;
+    /**
+     * Whether the selected model emits reasoning headers.
+     */
+    showReasoningHeaders: boolean;
+    /**
+     * Default reasoning visibility, and only meaningful once `ready` is true: false when the session produces no summaries, else the persisted setting, else the experiment's default. While `ready` is true it is omitted only when all three are unavailable, that is when the session produces summaries, no `persistedShowReasoning` was supplied, and `experimentSettled` is false. While `ready` is false there is no model policy to report and this field is always omitted, so an absent value alone does not imply a pending experiment.
+     */
+    visibility?: boolean;
+    /**
+     * Whether to show the hint that reasoning summaries are hidden. Always false while `experimentSettled` is false.
+     */
+    showHiddenHint: boolean;
+    /**
+     * Whether the supplied `persistedShowReasoning` setting only restates the model default. This reports a redundancy, not a standing instruction to delete the setting: it stays true for as long as the setting and the model default agree, including for a user who later chose that value deliberately. It exists for a one-time migration of a legacy setting written before the model default made it redundant, so a host that acts on it owns the cleanup and must gate it behind its own persisted `done` marker, delete only a setting whose value still matches the one it read, and never repeat the deletion on a later launch. Under an off-by-default reasoning-summaries experiment an explicit `showReasoning: true` opt-in also reads as redundant on a summary-producing model, so an ungated host would keep deleting that opt-in and hide summaries again on every launch.
+     */
+    clearRedundantSetting: boolean;
+}
 /**
  * List of Copilot models available to the resolved user, including capabilities and billing metadata.
  *
@@ -19341,6 +19513,27 @@ export interface PermissionsConfigureResult {
      */
     success: boolean;
 }
+/**
+ * The policy questions a host asks before granting elevated permissions.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PermissionsEvaluateManagedPolicyResult".
+ */
+/** @experimental */
+export interface PermissionsEvaluateManagedPolicyResult {
+    /**
+     * True when managed policy forbids bypass-permissions mode, so allow-all style flags must not take effect.
+     */
+    bypassPermissionsDisabled: boolean;
+    /**
+     * True when a managed policy exists but this build could not determine its meaning. Hosts fail closed on it rather than assuming permission was granted.
+     */
+    policyUndetermined: boolean;
+    /**
+     * True when the managed layer supplies permission rules that the session must enforce.
+     */
+    permissionRulesActive: boolean;
+}
 /**
  * Indicates whether the operation succeeded.
  *
@@ -19612,6 +19805,44 @@ export interface PermissionUrlsSetUnrestrictedModeParams {
      */
     enabled: boolean;
 }
+/**
+ * A complete JSON snapshot to write under the runtime's per-path file lock.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PersistenceWriteRawJsonLockedRequest".
+ */
+/** @experimental */
+export interface PersistenceWriteRawJsonLockedRequest {
+    /**
+     * Absolute path of the file to replace. Parent directories are created when missing.
+     */
+    path: string;
+    /**
+     * The serialized JSON document to write. It replaces the file's contents entirely; nothing is merged.
+     */
+    dataJson: string;
+    /**
+     * Comment lines to emit above the document, for a format that tolerates them. Omit for strict JSON.
+     */
+    fileHeader?: string | null;
+}
+/**
+ * The outcome of a locked snapshot write.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PersistenceWriteRawJsonLockedResult".
+ */
+/** @experimental */
+export interface PersistenceWriteRawJsonLockedResult {
+    /**
+     * Whether the file now holds the requested contents.
+     */
+    success: boolean;
+    /**
+     * Why the write failed. Absent when `success` is true. A lock the runtime could not acquire in time reports here rather than raising.
+     */
+    error?: string | null;
+}
 /**
  * Optional message to echo back to the caller.
  *
@@ -21717,6 +21948,19 @@ export interface RemoteSessionRepository {
      */
     branch?: string;
 }
+/**
+ * The stored sandbox settings to resolve against the defaults.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxApplyDefaultsRequest".
+ */
+/** @experimental */
+export interface SandboxApplyDefaultsRequest {
+    /**
+     * The sandbox settings as stored in the settings file. An empty object resolves to the defaults alone.
+     */
+    stored: JsonValue;
+}
 /**
  * Resolved sandbox configuration.
  *
@@ -21980,6 +22224,19 @@ export interface SandboxDisableForSessionResult {
      */
     enabled: boolean;
 }
+/**
+ * The documentation URL a host cites when it declines or downgrades a sandbox setting.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxDocsUrlResult".
+ */
+/** @experimental */
+export interface SandboxDocsUrlResult {
+    /**
+     * Documentation URL describing the sandbox and the settings that control it.
+     */
+    url: string;
+}
 /**
  * Managed sandbox enforcement state for a session.
  *
@@ -22109,17 +22366,86 @@ export interface SandboxProxyCaStatus {
     canInstall: boolean;
 }
 /**
- * Register an absolute-time scheduled prompt.
+ * The stored sandbox proxy password, if one is present.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ScheduleAddAtRequest".
+ * via the `definition` "SandboxProxySecretGetResult".
  */
 /** @experimental */
-export interface ScheduleAddAtRequest {
+export interface SandboxProxySecretGetResult {
     /**
-     * Epoch milliseconds when the prompt should fire.
+     * The stored password. Absent when no entry exists in either the keychain or the on-disk fallback store.
      */
-    at: number;
+    value?: string;
+}
+/**
+ * Where this runtime keeps the sandbox proxy password.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxySecretLocation".
+ */
+/** @experimental */
+export interface SandboxProxySecretLocation {
+    /**
+     * Absolute path of the credential store holding the sandbox proxy password. The proxy password belongs to no MCP server, so it is kept in its own directory rather than in the MCP secret store.
+     */
+    configDir: string;
+    /**
+     * Identifier of the proxy password entry within that store. Derived from the configuration directory, so two Copilot homes on one machine never share an entry. Use it to recognize a `${secret:…}` reference in stored settings as this runtime's own proxy password.
+     */
+    secretId: string;
+}
+/**
+ * The sandbox proxy password to store.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxySecretSaveRequest".
+ */
+/** @experimental */
+export interface SandboxProxySecretSaveRequest {
+    /**
+     * The password to store for the sandbox proxy.
+     */
+    value: string;
+}
+/**
+ * Where the sandbox proxy password was stored.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxProxySecretSaveResult".
+ */
+/** @experimental */
+export interface SandboxProxySecretSaveResult {
+    /**
+     * Whether the OS keychain accepted the value. False means it was written to the on-disk fallback store instead, which is still readable by `sandbox.proxySecret.get`.
+     */
+    storedInKeychain: boolean;
+}
+/**
+ * The user's sandbox settings raised to the managed floor.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxResolveFlooredConfigResult".
+ */
+/** @experimental */
+export interface SandboxResolveFlooredConfigResult {
+    /**
+     * The floored sandbox config, normalized through the declared sandbox shape so only declared fields in a fixed order are present.
+     */
+    sandboxJson: JsonValue;
+}
+/**
+ * Register an absolute-time scheduled prompt.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ScheduleAddAtRequest".
+ */
+/** @experimental */
+export interface ScheduleAddAtRequest {
+    /**
+     * Epoch milliseconds when the prompt should fire.
+     */
+    at: number;
     /**
      * Prompt text to enqueue when the schedule fires.
      */
@@ -23894,15 +24220,27 @@ export interface SessionOpenOptions {
      */
     allowAllMcpServerInstructions?: boolean;
     /**
-     * Additional directories to search for skills.
+     * Explicit discovery-only skill roots, not filesystem grants. Available without enableConfigDiscovery, subject to skill/managed disables. Relative SDK paths resolve once when supplied against the request's effective workingDirectory; retained roots do not move on cwd changes. Null and omission are equivalent; [] clears only the explicit SDK contribution.
      */
     skillDirectories?: string[];
+    /**
+     * Explicit discovery-only agent roots, separate from customAgents and filesystem grants. Available without enableConfigDiscovery, subject to managed/source disables. Relative SDK paths resolve once when supplied against the request's effective workingDirectory; retained roots do not move on cwd changes. Null and omission are equivalent; [] clears only the explicit SDK contribution.
+     */
+    agentDirectories?: string[];
+    /**
+     * Explicit discovery-only instruction roots using existing SDK instruction formats, not filesystem grants. Available without enableConfigDiscovery, subject to instruction/managed disables. Relative SDK paths resolve once when supplied against the request's effective workingDirectory; retained roots do not move on cwd changes. Null and omission are equivalent; [] clears only the explicit SDK contribution.
+     */
+    instructionDirectories?: string[];
+    /**
+     * Explicit discovery-only file-hook roots, separate from callback hooks and filesystem grants. Available without enableConfigDiscovery or enableFileHooks, which controls repository-origin hooks only; hook/managed disables still apply. Relative SDK paths resolve once when supplied against the request's effective workingDirectory; retained roots do not move on cwd changes. Null and omission are equivalent; [] clears only the explicit SDK contribution.
+     */
+    hookDirectories?: string[];
     /**
      * Skill scan directories and descendants excluded from discovery. Supports `~`-relative paths.
      */
     ignoredSkillsLocations?: string[];
     /**
-     * Whether skill loading is enabled. When omitted, an SDK skill provider enables skills by default.
+     * Whether skill loading is enabled. When omitted, explicit SDK skill roots or an SDK skill provider enable skills independently of enableConfigDiscovery.
      */
     enableSkills?: boolean;
     /**
@@ -25679,9 +26017,21 @@ export interface SessionUpdateOptionsParams {
      */
     allowAllMcpServerInstructions?: boolean;
     /**
-     * Additional directories to search for skills.
+     * Explicit discovery-only skill roots, not filesystem grants. Available without enableConfigDiscovery, subject to skill/managed disables. Relative SDK paths resolve once when supplied against the request's effective workingDirectory; retained roots do not move on cwd changes. Null and omission are equivalent; [] clears only the explicit SDK contribution.
      */
     skillDirectories?: string[];
+    /**
+     * Explicit discovery-only agent roots, separate from customAgents and filesystem grants. Available without enableConfigDiscovery, subject to managed/source disables. Relative SDK paths resolve once when supplied against the request's effective workingDirectory; retained roots do not move on cwd changes. Null and omission are equivalent; [] clears only the explicit SDK contribution.
+     */
+    agentDirectories?: string[];
+    /**
+     * Explicit discovery-only instruction roots using existing SDK instruction formats, not filesystem grants. Available without enableConfigDiscovery, subject to instruction/managed disables. Relative SDK paths resolve once when supplied against the request's effective workingDirectory; retained roots do not move on cwd changes. Null and omission are equivalent; [] clears only the explicit SDK contribution.
+     */
+    instructionDirectories?: string[];
+    /**
+     * Explicit discovery-only file-hook roots, separate from callback hooks and filesystem grants. Available without enableConfigDiscovery or enableFileHooks, which controls repository-origin hooks only; hook/managed disables still apply. Relative SDK paths resolve once when supplied against the request's effective workingDirectory; retained roots do not move on cwd changes. Null and omission are equivalent; [] clears only the explicit SDK contribution.
+     */
+    hookDirectories?: string[];
     /**
      * Skill scan directories and descendants excluded from discovery. Supports `~`-relative paths.
      */
@@ -25789,7 +26139,7 @@ export interface SessionUpdateOptionsParams {
      */
     organizationCustomInstructions?: string;
     /**
-     * Whether to enable loading of `.github/hooks/` filesystem hooks. Separate from the SDK callback hook mechanism.
+     * Whether to enable repository-origin file hooks from `.github/hooks/` and trusted repository-configured roots. Does not control explicit hookDirectories or SDK callback hooks.
      */
     enableFileHooks?: boolean;
     /**
@@ -25801,7 +26151,7 @@ export interface SessionUpdateOptionsParams {
      */
     enableSessionStore?: boolean;
     /**
-     * Whether skill loading is enabled. Explicit false disables every source, including a bound SDK provider; changing the value invalidates the loaded skill snapshot. When omitted, creation falls back to enableConfigDiscovery unless an SDK skill provider is registered.
+     * Whether skill loading is enabled. Explicit false disables every source, including explicit SDK roots and a bound SDK provider; changing the value invalidates the loaded skill snapshot. When omitted, creation falls back to enableConfigDiscovery unless explicit SDK skill roots or an SDK skill provider are supplied.
      */
     enableSkills?: boolean;
     contextTier?: OptionsUpdateContextTier;
@@ -26256,7 +26606,7 @@ export interface SkillsDiscoverRequest {
      */
     projectPaths?: string[];
     /**
-     * Optional list of additional skill directory paths to include
+     * Explicit discovery-only skill roots, not filesystem grants. Available without ambient discovery, subject to skill/managed disables. Relative paths resolve against the request's effective working directory when supplied. Null and omission are equivalent; an empty array contributes no explicit roots.
      */
     skillDirectories?: string[];
     /**
@@ -26311,6 +26661,10 @@ export interface SkillSetEnabledRequest {
  */
 /** @experimental */
 export interface SkillsGetDiscoveryPathsRequest {
+    /**
+     * Explicit discovery-only skill roots to enumerate, including configured missing directories. Relative paths resolve against the request's effective working directory when supplied. These are not filesystem grants or preferred creation targets. Null and omission are equivalent.
+     */
+    skillDirectories?: string[];
     /**
      * Optional list of project directory paths. When omitted or empty, only personal and custom directories are returned.
      */
@@ -28364,220 +28718,655 @@ export interface UserSettingMetadata {
     isDefault: boolean;
 }
 /**
- * Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
+ * A single top-level setting subtree to validate and write.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "UserSettingsGetResult".
+ * via the `definition` "UserSettingsApplyTopKeyRequest".
  */
 /** @experimental */
-export interface UserSettingsGetResult {
+export interface UserSettingsApplyTopKeyRequest {
     /**
-     * Every known user setting keyed by setting name, each with its effective value, default, and whether it is at the default.
+     * Canonical path of the setting the caller is editing. Currently informational only.
      */
-    settings: {
-        [k: string]: UserSettingMetadata;
-    };
+    canonicalPath: string[];
+    /**
+     * Top-level setting name to write.
+     */
+    topKey: string;
+    /**
+     * Value to write for the whole top-level key. Omitted when `delete` is true. Explicit null is preserved and validated as null.
+     */
+    value?: JsonValue | null;
+    /**
+     * True to remove the top-level key instead of writing it.
+     */
+    delete?: boolean;
+    /**
+     * Records that the user chose an update channel explicitly, so the one-time staff channel migration stops reapplying. Honored only for the `autoUpdatesChannel` key.
+     */
+    completeStaffUpdateChannelMigration?: boolean;
 }
 /**
- * Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.
+ * Outcome of validating and writing one top-level setting subtree.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "UserSettingsSetRequest".
+ * via the `definition` "UserSettingsApplyTopKeyResult".
  */
 /** @experimental */
-export interface UserSettingsSetRequest {
+export interface UserSettingsApplyTopKeyResult {
     /**
-     * Partial user settings to write, as a free-form object keyed by setting name
+     * `ok` when the value was written, `validation-error` when it was rejected before any write, `write-error` when validation passed but the write failed.
      */
-    settings: JsonValue;
+    status: string;
+    /**
+     * Problems found, present only when `status` is `validation-error`.
+     */
+    issues?: UserSettingsValidationIssue[];
+    /**
+     * Why the write failed, present only when `status` is `write-error`.
+     */
+    error?: string | null;
 }
 /**
- * Current sharing status and shareable GitHub URL for a session.
+ * One problem found while validating a setting value.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "VisibilityGetResult".
+ * via the `definition` "UserSettingsValidationIssue".
  */
 /** @experimental */
-export interface VisibilityGetResult {
+export interface UserSettingsValidationIssue {
     /**
-     * Whether the session has been synced to Mission Control (i.e. has a GitHub task). When false, the session cannot be shared and `status`/`shareUrl` are absent.
+     * Where in the settings tree the problem sits, as object keys and array indices. The first element is the top-level key; a whole-value problem is reported as that single key.
      */
-    synced: boolean;
-    status?: SessionVisibilityStatus;
+    path: JsonValue[];
     /**
-     * Shareable GitHub URL for the session. Present when the session is synced and the URL can be resolved.
+     * Human-readable description of the problem.
      */
-    shareUrl?: string;
+    message: string;
 }
 /**
- * Desired sharing status for the session.
+ * Selects which settings file paths to resolve.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "VisibilitySetRequest".
+ * via the `definition` "UserSettingsGetPathsRequest".
  */
 /** @experimental */
-export interface VisibilitySetRequest {
-    status: SessionVisibilityStatus;
+export interface UserSettingsGetPathsRequest {
+    /**
+     * Absolute path of a repository root. Supply it to also resolve that repository's two settings file paths; omit it to resolve only the user path.
+     */
+    repoRoot?: string;
 }
 /**
- * Effective sharing status and shareable GitHub URL after updating session visibility.
+ * On-disk locations of the settings files this runtime reads. A path is reported whether or not the file exists.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "VisibilitySetResult".
+ * via the `definition` "UserSettingsGetPathsResult".
  */
 /** @experimental */
-export interface VisibilitySetResult {
+export interface UserSettingsGetPathsResult {
     /**
-     * Whether the session has been synced to Mission Control (i.e. has a GitHub task). When false, the visibility change could not be applied and `status`/`shareUrl` are absent.
+     * The user settings file: `settings.json` under the resolved Copilot home. This is the file `user.settings.get`, `user.settings.load`, and `user.settings.set` read and write.
      */
-    synced: boolean;
-    status?: SessionVisibilityStatus;
+    userSettings: string;
     /**
-     * Shareable GitHub URL for the session. Present when the session is synced and the URL can be resolved.
+     * The repository's checked-in settings file, or null when no repository root was supplied.
      */
-    shareUrl?: string;
+    repoSettings?: string | null;
+    /**
+     * The repository's local, untracked settings file, or null when no repository root was supplied.
+     */
+    repoLocalSettings?: string | null;
 }
 /**
- * Parameters for cooperatively aborting a workflow body.
+ * Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkflowAbortRequest".
+ * via the `definition` "UserSettingsGetResult".
  */
 /** @experimental */
-export interface WorkflowAbortRequest {
+export interface UserSettingsGetResult {
     /**
-     * Target session identifier
+     * Every known user setting keyed by setting name, each with its effective value, default, and whether it is at the default.
      */
-    sessionId: string;
+    settings: {
+        [k: string]: UserSettingMetadata;
+    };
+}
+/**
+ * Top-level user-setting keys grouped by who may govern them.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsGovernanceKeysResult".
+ */
+/** @experimental */
+export interface UserSettingsGovernanceKeysResult {
     /**
-     * Workflow run identifier.
+     * Top-level keys a repository may override through `.github/copilot/settings.json` or `.github/copilot/settings.local.json`.
      */
-    runId: string;
+    repo: string[];
     /**
-     * Opaque token identifying the execution attempt to abort.
+     * Top-level keys a repository may override through a Claude-compatible repository config.
      */
-    executionToken: string;
+    claudeRepo: string[];
+    /**
+     * Top-level keys an enterprise policy may fix through managed settings.
+     */
+    managed: string[];
 }
 /**
- * Acknowledgement that a workflow request was accepted.
+ * The filesystem and environment facts a user-settings file is resolved from. Passed explicitly rather than read from the runtime's own process, so a host whose configuration directory differs from its process environment resolves the file it means.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkflowAckResult".
+ * via the `definition` "UserSettingsHostContext".
  */
 /** @experimental */
-export interface WorkflowAckResult {
+export interface UserSettingsHostContext {
+    /**
+     * The Copilot configuration directory, when the host set one. Takes precedence over `COPILOT_HOME` and the home directory.
+     */
+    configDir?: string;
+    /**
+     * The user's home directory, used when neither a configuration directory nor `COPILOT_HOME` is set.
+     */
+    homeDirectory: string;
+    /**
+     * The host's environment variables. `COPILOT_HOME` is read from here, as are the variables a settings hook may expand.
+     */
+    environment: {};
 }
 /**
- * Options for one workflow-scoped subagent call.
+ * Contents of settings.json as stored, for a caller about to rewrite it.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkflowAgentOptions".
+ * via the `definition` "UserSettingsLoadForEditResult".
  */
 /** @experimental */
-export interface WorkflowAgentOptions {
+export interface UserSettingsLoadForEditResult {
     /**
-     * Optional label distinguishing otherwise identical memoized agent calls.
+     * `ok` when the file parsed, `missing` when there is no file yet, `invalid` when the file exists but will not parse.
      */
-    label?: string;
+    status: string;
     /**
-     * Optional JSON Schema for structured agent output.
+     * Parsed contents, present only when `status` is `ok`.
      */
-    schema?: JsonValue;
+    settings?: JsonValue;
+}
+/**
+ * Selects the repository whose checked-in settings to read.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsLoadRepoRequest".
+ */
+/** @experimental */
+export interface UserSettingsLoadRepoRequest {
     /**
-     * Optional model identifier for the subagent.
+     * Absolute path of the repository root whose settings to read. When this is the user's home directory, the Claude-compatible configuration is skipped, so a home-directory session does not inherit a personal config as if it were repository policy.
      */
-    model?: string;
+    repoRoot: string;
+}
+/**
+ * A repository's settings as stored, together with any diagnostic raised while reading them.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsLoadRepoResult".
+ */
+/** @experimental */
+export interface UserSettingsLoadRepoResult {
     /**
-     * Optional reasoning effort override for the subagent.
+     * The repository's settings document, keyed by setting name, with each value carried verbatim. Null when the repository declares no settings.
      */
-    reasoningEffort?: string;
-    contextTier?: ContextTier;
+    settings?: {
+        [k: string]: JsonValue | undefined;
+    } | null;
     /**
-     * Optional built-in or custom agent name whose definition configures the subagent.
+     * Why part of the document was ignored, as a single human-readable string joining every diagnostic with `; `. Null when the document loaded cleanly. The settings that did load are still reported, so a consumer should surface this and continue rather than treat it as a failure.
      */
-    agent?: string;
+    warning?: string | null;
 }
 /**
- * Parameters for one workflow-scoped subagent call.
+ * The user's stored settings, together with any diagnostic raised while reading them.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkflowAgentRequest".
+ * via the `definition` "UserSettingsLoadWithWarningResult".
  */
 /** @experimental */
-export interface WorkflowAgentRequest {
+export interface UserSettingsLoadWithWarningResult {
     /**
-     * Workflow run identifier that owns the subagent.
+     * The stored user settings document, keyed by setting name, with each value carried verbatim. Empty when the file could not be read at all.
      */
-    workflowRunId: string;
+    settings: {
+        [k: string]: JsonValue | undefined;
+    };
     /**
-     * Opaque token identifying the current workflow execution attempt.
+     * Why part of the document was ignored, phrased for display to the user. Null when the document loaded cleanly. The settings that did load are still reported, so a consumer may surface this and continue rather than treat it as a failure.
      */
-    executionToken: string;
+    warning?: string | null;
+}
+/**
+ * The user layer folded over the managed layer.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsMergeManagedAndUserResult".
+ */
+/** @experimental */
+export interface UserSettingsMergeManagedAndUserResult {
     /**
-     * Prompt to send to the subagent.
+     * The merged settings. An empty object when neither layer was supplied, so an unmanaged host with no user settings governs nothing.
      */
-    prompt: string;
-    opts: WorkflowAgentOptions;
+    settingsJson: JsonValue;
 }
 /**
- * Result of one workflow-scoped subagent call.
+ * The repository layer folded into the user layer.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkflowAgentResult".
+ * via the `definition` "UserSettingsMergeRepoValueResult".
  */
 /** @experimental */
-export interface WorkflowAgentResult {
+export interface UserSettingsMergeRepoValueResult {
     /**
-     * Agent result, omitted when the agent produced no result.
+     * The merged settings, with the per-entry managed control maps re-stamped from the runtime's ambient managed policy.
      */
-    result?: JsonValue;
+    settingsJson: JsonValue;
 }
 /**
- * Prompt-safe durable identity and live status for a direct workflow agent.
+ * Settings object whose key names should be canonicalized.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "WorkflowAgentSummary".
+ * via the `definition` "UserSettingsNormalizeRequest".
  */
 /** @experimental */
-export interface WorkflowAgentSummary {
+export interface UserSettingsNormalizeRequest {
     /**
-     * Stable direct-agent identifier.
+     * Free-form settings object, possibly using legacy or snake_case key names.
      */
-    agentId: string;
+    settings: JsonValue;
+}
+/**
+ * Settings object with canonical key names.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsNormalizeResult".
+ */
+/** @experimental */
+export interface UserSettingsNormalizeResult {
     /**
-     * Tool-call identifier that launched the agent.
+     * The same settings with every legacy or snake_case key renamed to its canonical spelling.
      */
-    toolCallId: string;
+    settings: JsonValue;
+}
+/**
+ * The on-disk location of the user's settings document.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsPathResult".
+ */
+/** @experimental */
+export interface UserSettingsPathResult {
     /**
-     * Owning workflow run identifier.
+     * Absolute path to the settings file this runtime reads and writes. Normally `settings.json` under the Copilot configuration directory; an extensionless legacy `settings` file is reported instead when it exists and `settings.json` does not.
      */
-    runId: string;
+    path: string;
+}
+/**
+ * One setting that will not take effect, and why.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsProblem".
+ */
+/** @experimental */
+export interface UserSettingsProblem {
     /**
-     * Phase identifier active when the agent was launched, or null.
+     * Stable identifier for this problem within the reported set, so a caller can track a selection across refreshes.
      */
-    phaseId: string | null;
+    id: string;
     /**
-     * Friendly, non-unique name intended for display
+     * What is wrong in machine-readable form, for a caller that wants to branch rather than display.
      */
-    label: string;
+    kind: string;
     /**
-     * Friendly, non-unique name intended for display
+     * Coarse grouping for the problem, for a caller that presents problems in sections.
      */
-    displayName?: string;
+    category: string;
+    source: UserSettingsProblemLocation;
     /**
-     * Registered agent type.
+     * The offending key as written in the file, when the problem is attributable to a single key. Absent when the whole file is at fault.
      */
-    agentType: string;
+    rawKey?: string;
     /**
-     * Current durable or live agent status.
+     * Why the setting will not take effect. Never contains the setting's value, which may be a token or another secret.
      */
-    status: string;
+    explanation: string;
+}
+/**
+ * The settings layer a problem was found in.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsProblemLocation".
+ */
+/** @experimental */
+export interface UserSettingsProblemLocation {
     /**
-     * Model requested when the agent was launched.
+     * Which layer this is: `user`, `repo`, or `local`.
      */
-    requestedModel?: string;
+    kind: string;
     /**
-     * Concrete model resolved for the agent.
+     * The caller-supplied display label for the layer.
+     */
+    label: string;
+    /**
+     * Absolute path of the file backing this layer.
+     */
+    filePath: string;
+}
+/**
+ * One already-loaded settings layer to diagnose.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsProblemSource".
+ */
+/** @experimental */
+export interface UserSettingsProblemSource {
+    /**
+     * Which layer this is: `user`, `repo`, or `local`.
+     */
+    kind: string;
+    /**
+     * Caller-chosen display label for the layer, echoed back on each problem so a caller can group by layer without re-deriving its own naming.
+     */
+    label: string;
+    /**
+     * Absolute path of the file backing this layer.
+     */
+    filePath: string;
+    /**
+     * The layer's settings exactly as loaded, unnormalized. Empty when the file is missing or failed to parse.
+     */
+    config?: {
+        [k: string]: unknown | undefined;
+    };
+    /**
+     * True when the file itself failed to parse, so its keys could not be read at all.
+     */
+    invalid?: boolean;
+}
+/**
+ * The settings layers to diagnose.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsProblemsRequest".
+ */
+/** @experimental */
+export interface UserSettingsProblemsRequest {
+    /**
+     * Layers to diagnose, in the precedence order the caller applies them.
+     */
+    sources?: UserSettingsProblemSource[];
+}
+/**
+ * The settings that will not take effect across the given layers.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsProblemsResult".
+ */
+/** @experimental */
+export interface UserSettingsProblemsResult {
+    /**
+     * Each setting that will not take effect, and why. Empty when every layer is healthy.
+     */
+    problems?: UserSettingsProblem[];
+}
+/**
+ * Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsSetRequest".
+ */
+/** @experimental */
+export interface UserSettingsSetRequest {
+    /**
+     * Partial user settings to write, as a free-form object keyed by setting name
+     */
+    settings: JsonValue;
+}
+/**
+ * A single top-level setting subtree to validate.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsValidateRequest".
+ */
+/** @experimental */
+export interface UserSettingsValidateRequest {
+    /**
+     * Top-level setting name to validate.
+     */
+    topKey: string;
+    /**
+     * Value to validate. Omitted when `delete` is true.
+     */
+    value?: JsonValue;
+    /**
+     * True to validate a removal of this key. The current settings file is not read.
+     */
+    delete?: boolean;
+}
+/**
+ * Outcome of validating one top-level setting subtree.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsValidateResult".
+ */
+/** @experimental */
+export interface UserSettingsValidateResult {
+    /**
+     * True when the subtree is valid.
+     */
+    ok: boolean;
+    /**
+     * Problems found, empty when `ok` is true.
+     */
+    issues?: UserSettingsValidationIssue[];
+}
+/**
+ * The whole content to store in the user settings file.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsWriteAllRequest".
+ */
+/** @experimental */
+export interface UserSettingsWriteAllRequest {
+    /**
+     * The settings object to store. It replaces the file's entire content, so a key absent here is removed.
+     */
+    settings: JsonValue;
+}
+/**
+ * Current sharing status and shareable GitHub URL for a session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "VisibilityGetResult".
+ */
+/** @experimental */
+export interface VisibilityGetResult {
+    /**
+     * Whether the session has been synced to Mission Control (i.e. has a GitHub task). When false, the session cannot be shared and `status`/`shareUrl` are absent.
+     */
+    synced: boolean;
+    status?: SessionVisibilityStatus;
+    /**
+     * Shareable GitHub URL for the session. Present when the session is synced and the URL can be resolved.
+     */
+    shareUrl?: string;
+}
+/**
+ * Desired sharing status for the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "VisibilitySetRequest".
+ */
+/** @experimental */
+export interface VisibilitySetRequest {
+    status: SessionVisibilityStatus;
+}
+/**
+ * Effective sharing status and shareable GitHub URL after updating session visibility.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "VisibilitySetResult".
+ */
+/** @experimental */
+export interface VisibilitySetResult {
+    /**
+     * Whether the session has been synced to Mission Control (i.e. has a GitHub task). When false, the visibility change could not be applied and `status`/`shareUrl` are absent.
+     */
+    synced: boolean;
+    status?: SessionVisibilityStatus;
+    /**
+     * Shareable GitHub URL for the session. Present when the session is synced and the URL can be resolved.
+     */
+    shareUrl?: string;
+}
+/**
+ * Parameters for cooperatively aborting a workflow body.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAbortRequest".
+ */
+/** @experimental */
+export interface WorkflowAbortRequest {
+    /**
+     * Target session identifier
+     */
+    sessionId: string;
+    /**
+     * Workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Opaque token identifying the execution attempt to abort.
+     */
+    executionToken: string;
+}
+/**
+ * Acknowledgement that a workflow request was accepted.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAckResult".
+ */
+/** @experimental */
+export interface WorkflowAckResult {
+}
+/**
+ * Options for one workflow-scoped subagent call.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAgentOptions".
+ */
+/** @experimental */
+export interface WorkflowAgentOptions {
+    /**
+     * Optional label distinguishing otherwise identical memoized agent calls.
+     */
+    label?: string;
+    /**
+     * Optional JSON Schema for structured agent output.
+     */
+    schema?: JsonValue;
+    /**
+     * Optional model identifier for the subagent.
+     */
+    model?: string;
+    /**
+     * Optional reasoning effort override for the subagent.
+     */
+    reasoningEffort?: string;
+    contextTier?: ContextTier;
+    /**
+     * Optional built-in or custom agent name whose definition configures the subagent.
+     */
+    agent?: string;
+}
+/**
+ * Parameters for one workflow-scoped subagent call.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAgentRequest".
+ */
+/** @experimental */
+export interface WorkflowAgentRequest {
+    /**
+     * Workflow run identifier that owns the subagent.
+     */
+    workflowRunId: string;
+    /**
+     * Opaque token identifying the current workflow execution attempt.
+     */
+    executionToken: string;
+    /**
+     * Prompt to send to the subagent.
+     */
+    prompt: string;
+    opts: WorkflowAgentOptions;
+}
+/**
+ * Result of one workflow-scoped subagent call.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAgentResult".
+ */
+/** @experimental */
+export interface WorkflowAgentResult {
+    /**
+     * Agent result, omitted when the agent produced no result.
+     */
+    result?: JsonValue;
+}
+/**
+ * Prompt-safe durable identity and live status for a direct workflow agent.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkflowAgentSummary".
+ */
+/** @experimental */
+export interface WorkflowAgentSummary {
+    /**
+     * Stable direct-agent identifier.
+     */
+    agentId: string;
+    /**
+     * Tool-call identifier that launched the agent.
+     */
+    toolCallId: string;
+    /**
+     * Owning workflow run identifier.
+     */
+    runId: string;
+    /**
+     * Phase identifier active when the agent was launched, or null.
+     */
+    phaseId: string | null;
+    /**
+     * Friendly, non-unique name intended for display
+     */
+    label: string;
+    /**
+     * Friendly, non-unique name intended for display
+     */
+    displayName?: string;
+    /**
+     * Registered agent type.
+     */
+    agentType: string;
+    /**
+     * Current durable or live agent status.
+     */
+    status: string;
+    /**
+     * Model requested when the agent was launched.
+     */
+    requestedModel?: string;
+    /**
+     * Concrete model resolved for the agent.
      */
     resolvedModel?: string;
     /**
@@ -29964,6 +30753,102 @@ export interface WorkspacesWriteAutopilotObjectiveResult {
      */
     operation: string;
 }
+/**
+ * The effective sandbox settings, with every unset value resolved to its default.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxSettingsApplyDefaultsResult".
+ */
+/** @experimental */
+export interface SandboxSettingsApplyDefaultsResult {
+    /**
+     * One resolved sandbox setting's value, carried verbatim.
+     */
+    [k: string]: JsonValue | undefined;
+}
+/**
+ * The stored user settings document, keyed by setting name.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsLoadForConfigDirResult".
+ */
+/** @experimental */
+export interface UserSettingsLoadForConfigDirResult {
+    /**
+     * One setting's stored value, carried verbatim.
+     */
+    [k: string]: JsonValue | undefined;
+}
+/**
+ * The effective runtime settings, keyed by setting name. Keys this runtime does not recognize are preserved rather than dropped, so a caller reading a document written by a newer runtime keeps every value.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsBuildRuntimeResult".
+ */
+/** @experimental */
+export interface UserSettingsBuildRuntimeResult {
+    /**
+     * One resolved setting's effective value, carried verbatim.
+     */
+    [k: string]: JsonValue | undefined;
+}
+/**
+ * The resolved gates, keyed by flag name.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FeatureFlagsResolveStartupGatesResult".
+ */
+/** @experimental */
+export interface FeatureFlagsResolveStartupGatesResult {
+    /**
+     * Whether the gate is on for this installation.
+     */
+    [k: string]: boolean | undefined;
+}
+/**
+ * The resolved feature flags, keyed by flag name.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FeatureFlagsResolveResult".
+ */
+/** @experimental */
+export interface FeatureFlagsResolveResult {
+    /**
+     * Whether the flag is enabled for this population.
+     */
+    [k: string]: boolean | undefined;
+}
+/**
+ * Ordered managed permission verdicts and the supplied policy's fail-closed posture.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedSettingsPermissionsEvaluateResult".
+ */
+/** @experimental */
+export interface ManagedSettingsPermissionsEvaluateResult {
+    /**
+     * One verdict per input operation, in the same order, including duplicates.
+     */
+    results: ManagedPermissionEvaluation[];
+    /**
+     * Managed permission policy could not be determined; every operation is denied.
+     */
+    failClosed: boolean;
+}
+/**
+ * Managed policy context and ordered operations for pure, sessionless evaluation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedSettingsPermissionsEvaluateRequest".
+ */
+/** @experimental */
+export interface ManagedSettingsPermissionsEvaluateRequest {
+    context: ManagedPermissionsContext;
+    /**
+     * Operations to evaluate, preserving input order and duplicates. An empty batch is valid.
+     */
+    operations: ManagedPermissionOperation[];
+}
 /**
  * The resident session the application has materialized on its own connection.
  *
@@ -30089,37 +30974,6 @@ export interface HostGetConfigurationResult {
 /** @experimental */
 export interface HostReadyResult {
 }
-/**
- * Ordered managed permission verdicts and the supplied policy's fail-closed posture.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ManagedSettingsPermissionsEvaluateResult".
- */
-/** @experimental */
-export interface ManagedSettingsPermissionsEvaluateResult {
-    /**
-     * One verdict per input operation, in the same order, including duplicates.
-     */
-    results: ManagedPermissionEvaluation[];
-    /**
-     * Managed permission policy could not be determined; every operation is denied.
-     */
-    failClosed: boolean;
-}
-/**
- * Managed policy context and ordered operations for pure, sessionless evaluation.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ManagedSettingsPermissionsEvaluateRequest".
- */
-/** @experimental */
-export interface ManagedSettingsPermissionsEvaluateRequest {
-    context: ManagedPermissionsContext;
-    /**
-     * Operations to evaluate, preserving input order and duplicates. An empty batch is valid.
-     */
-    operations: ManagedPermissionOperation[];
-}
 /** @experimental */
 export interface SessionWorkflowPauseAtCheckpointResult {
     action: WorkflowPauseCheckpointAction;
@@ -30634,6 +31488,142 @@ export interface InstallationsConfirmRequest {
 }
 /** Create typed server-scoped RPC methods (no session required). */
 export declare function createServerRpc(connection: MessageConnection): {
+    /** @experimental */
+    sandbox: {
+        /** @experimental */
+        proxyCa: {
+            /**
+             * Reports whether this runtime process can offer installing the sandbox credential-proxy certificate authority into OS trust.
+             *
+             * @returns True when this process can offer installing the sandbox credential-proxy certificate authority into OS trust.
+             */
+            checkInstallationSupport: () => Promise<SandboxProxyCaCheckInstallationSupportResult>;
+            /**
+             * Reports whether this sandbox configuration uses the credential proxy and can need certificate-authority setup.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns True when the sandbox configuration uses the credential proxy and can need certificate-authority setup.
+             */
+            checkRelevance: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaCheckRelevanceResult>;
+            /**
+             * Reports whether the persistent certificate authority of the sandbox credential proxy exists, whether OS trust includes it, and whether it must be rotated. Changes nothing.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            getStatus: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
+            /**
+             * Creates the persistent certificate authority of the sandbox credential proxy if none is stored, without changing OS trust, and returns the path of its public certificate. Keeps an existing certificate authority, even one that must be rotated. Fails where OS trust is unsupported. Trust it with sandbox.proxyCa.trust: the CLI trusts only the hosts in the saved user settings, so it refuses a certificate authority that also covers hosts from sandboxConfig.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Result of creating the persistent certificate authority of the sandbox credential proxy.
+             */
+            create: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaCreateResult>;
+            /**
+             * Replaces the persistent certificate authority of the sandbox credential proxy with a new one for the current credential hosts. If OS trust included the old one, removes it and trusts the new one, which can show an OS authentication prompt. Running sandboxed tools keep the old certificate authority until they restart.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            rotate: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
+            /**
+             * Adds the persistent certificate authority of the sandbox credential proxy to OS trust, so sandboxed clients that read only OS trust accept the proxy. Call create first. Refuses a certificate authority that is not constrained to the current credential hosts. Can show an OS authentication prompt.
+             *
+             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            trust: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
+            /**
+             * Removes the persistent certificate authority of the sandbox credential proxy from OS trust. Keeps the stored certificate authority. Can show an OS authentication prompt. Sandboxed clients that read only OS trust then reject the proxy; clients that read the per-process certificate bundle continue to work.
+             *
+             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
+             */
+            remove: () => Promise<SandboxProxyCaStatus>;
+        };
+        /**
+         * Reports whether the host running this runtime can run the command sandbox, without starting a session or spawning a sandboxed command.
+         *
+         * @returns Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
+         */
+        getHostSupport: () => Promise<SandboxHostSupport>;
+    };
+    /** @experimental */
+    user: {
+        /** @experimental */
+        settings: {
+            /**
+             * Lists every known user setting from settings.json, each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
+             *
+             * @returns Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
+             */
+            get: () => Promise<UserSettingsGetResult>;
+            /**
+             * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed.
+             *
+             * @param params Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.
+             */
+            set: (params: UserSettingsSetRequest) => Promise<void>;
+        };
+    };
+    /** @experimental */
+    managedSettings: {
+        /**
+         * Discovers device-managed settings from production MDM and managed-file sources, validates them against the runtime-owned managed-settings schema, and returns the canonical JSON without requiring a session. `managedSettings.resolve` returns the same device settings together with the account's server policy.
+         *
+         * @returns Validated device-managed settings discovered before a session exists.
+         */
+        read: () => Promise<ManagedSettingsReadResult>;
+        /**
+         * Force-refreshes enterprise managed settings for every account: wipes the persistent server-policy cache (the whole `<cacheHome>/managed-settings` directory) and drops this runtime process's in-memory retained server policy. It does not itself fetch policy — the effect is that the next time a session resolves managed settings for an account, that resolution re-fetches the account's org policy from the network instead of serving a cached response. Note that `managedSettings.read` returns only device/MDM settings and never triggers the account server-policy fetch, so a host implementing "sync account policy" should call `managedSettings.resolve` or start a fresh session resolution rather than treat a subsequent `managedSettings.read` as the refreshed org policy. Mirrors the invalidation a sign-out performs, broadened from the one signing-out account to all of them; device/MDM layers describe the machine, not the account, and are left untouched. Rejects if the on-disk cache cannot be removed.
+         */
+        clearCache: () => Promise<void>;
+        /**
+         * Resolves the effective enterprise managed settings without a session, from the device channel and, when an account is available, the account's server policy through the same per-account cache sessions use. A cached server policy less than an hour old is used without a fetch; otherwise the policy is fetched, and when the fetch fails a cached policy up to 24 hours old is used instead, unless `forceRemoteSettingsRefresh` requires a live fetch. With no account requested or signed in, it reports device policy only; signing out removes the account's cached policy. It can fetch server policy over the network when the cache is stale, so call it off latency-critical paths such as startup rather than before listing models. The policy helper is not run. `layers` lists each channel's document before merging, and `values` and `meta` carry typed effective values and their lock state for the keys typed so far.
+         *
+         * @param params Optional opaque account selection or GitHub token whose managed settings are resolved.
+         *
+         * @returns Effective enterprise managed settings for an account, resolved without a session.
+         */
+        resolve: (params: ManagedSettingsResolveRequest) => Promise<ManagedSettingsResolveResult>;
+        /** @experimental */
+        permissions: {
+            /**
+             * Pure, sessionless evaluation of operations against a supplied permissionsContext. Performs no policy discovery, I/O, prompting, navigation, permission grants, or sandbox changes. Obtain the context from managedSettings.resolve or session.managedSettings.get, or reuse an in-memory context. Results preserve input order and duplicates. Consumers must block deny, obtain approval for ask, and use their normal permission flow for unmanaged. Unknown policy returns failClosed with every operation denied. This is not a substitute for user permissions or other security controls.
+             *
+             * @param params Managed policy context and ordered operations for pure, sessionless evaluation.
+             *
+             * @returns Ordered managed permission verdicts and the supplied policy's fail-closed posture.
+             */
+            evaluate: (params: ManagedSettingsPermissionsEvaluateRequest) => Promise<ManagedSettingsPermissionsEvaluateResult>;
+        };
+        /**
+         * Returns the managed-settings authoring JSON schema with descriptive `x-composition` annotations aligned with the shared settings-engine vocabulary. These annotations are not a complete runtime composition contract: model, effortLevel, and contextTier remain coupled. Use `managedSettings.compose` for the runtime's effective result. Performs no I/O.
+         *
+         * @returns The authoring JSON schema for managed settings recognized by this runtime.
+         */
+        schema: () => Promise<ManagedSettingsSchemaResult>;
+        /**
+         * Validates a candidate managed-settings document the way the runtime validates delivered policy, without applying it. Reports errors that would reject the document, warnings for content the runtime ignores, and the canonical document it would apply. Document text nested more than 64 levels deep is rejected. Performs no I/O.
+         *
+         * @param params A candidate managed-settings document to validate without applying it.
+         *
+         * @returns Result of validating a managed-settings document.
+         */
+        validate: (params: ManagedSettingsValidateRequest) => Promise<ManagedSettingsValidateResult>;
+        /**
+         * Merges candidate managed-settings documents for the device, server, and policy-helper channels into the effective settings the runtime would enforce on this host, using the same precedence and composition rules as live resolution, without applying them. Like live resolution, a server's advisory sandbox force-enable is declined on a host that cannot run the sandbox. Does not fetch policy or read policy files, but may perform blocking OS or subprocess probes for sandbox support. Preview documents are limited to 1 MiB and 64 levels of nesting.
+         *
+         * @param params Candidate managed-settings documents to merge without applying them.
+         *
+         * @returns The effective managed settings the runtime would enforce for the given documents, in the same shape `managedSettings.resolve` returns.
+         */
+        compose: (params: ManagedSettingsComposeRequest) => Promise<ManagedSettingsComposeResult>;
+    };
     /** @experimental */
     environments: {
         /**
@@ -30735,56 +31725,6 @@ export declare function createServerRpc(connection: MessageConnection): {
         getBuiltInCatalog: () => Promise<BuiltInModelCatalog>;
     };
     /** @experimental */
-    sandbox: {
-        /**
-         * Reports whether the host running this runtime can run the command sandbox, without starting a session or spawning a sandboxed command.
-         *
-         * @returns Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
-         */
-        getHostSupport: () => Promise<SandboxHostSupport>;
-        /** @experimental */
-        proxyCa: {
-            /**
-             * Reports whether the persistent certificate authority of the sandbox credential proxy exists, whether OS trust includes it, and whether it must be rotated. Changes nothing.
-             *
-             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
-             *
-             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
-             */
-            getStatus: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
-            /**
-             * Creates the persistent certificate authority of the sandbox credential proxy if none is stored, without changing OS trust, and returns the path of its public certificate. Keeps an existing certificate authority, even one that must be rotated. Fails where OS trust is unsupported. Trust it with sandbox.proxyCa.trust: the CLI trusts only the hosts in the saved user settings, so it refuses a certificate authority that also covers hosts from sandboxConfig.
-             *
-             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
-             *
-             * @returns Result of creating the persistent certificate authority of the sandbox credential proxy.
-             */
-            create: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaCreateResult>;
-            /**
-             * Replaces the persistent certificate authority of the sandbox credential proxy with a new one for the current credential hosts. If OS trust included the old one, removes it and trusts the new one, which can show an OS authentication prompt. Running sandboxed tools keep the old certificate authority until they restart.
-             *
-             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
-             *
-             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
-             */
-            rotate: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
-            /**
-             * Adds the persistent certificate authority of the sandbox credential proxy to OS trust, so sandboxed clients that read only OS trust accept the proxy. Call create first. Refuses a certificate authority that is not constrained to the current credential hosts. Can show an OS authentication prompt.
-             *
-             * @param params Identifies the credential hosts that the persistent certificate authority of the sandbox credential proxy must cover. The runtime always adds the hosts from the saved user settings.
-             *
-             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
-             */
-            trust: (params: SandboxProxyCaRequest) => Promise<SandboxProxyCaStatus>;
-            /**
-             * Removes the persistent certificate authority of the sandbox credential proxy from OS trust. Keeps the stored certificate authority. Can show an OS authentication prompt. Sandboxed clients that read only OS trust then reject the proxy; clients that read the per-process certificate bundle continue to work.
-             *
-             * @returns Status of the persistent certificate authority of the sandbox credential proxy.
-             */
-            remove: () => Promise<SandboxProxyCaStatus>;
-        };
-    };
-    /** @experimental */
     tools: {
         /**
          * Lists built-in tools available for a model.
@@ -30996,6 +31936,25 @@ export declare function createServerRpc(connection: MessageConnection): {
         disable: (params: DiscoveredExtensionsDisableRequest) => Promise<void>;
     };
     /** @experimental */
+    instructions: {
+        /**
+         * Discovers instruction sources across user, repository, and plugin sources.
+         *
+         * @param params Optional project paths to include in instruction discovery.
+         *
+         * @returns Instruction sources discovered across user, repository, and plugin sources.
+         */
+        discover: (params: InstructionsDiscoverRequest) => Promise<ServerInstructionSourceList>;
+        /**
+         * Returns the canonical files and directories where a client may create custom instructions that the runtime will recognize, including ones that do not exist yet. Repository targets become active once created.
+         *
+         * @param params Optional project paths to include when enumerating instruction discovery targets.
+         *
+         * @returns Canonical files and directories where custom instructions can be created so the runtime will recognize them.
+         */
+        getDiscoveryPaths: (params: InstructionsGetDiscoveryPathsRequest) => Promise<InstructionDiscoveryPathList>;
+    };
+    /** @experimental */
     skills: {
         /**
          * Plans installation of a verified Agent Finder Skill candidate without writing files. The returned review is safe to present to a user and installing always leaves the Skill disabled until separately enabled.
@@ -31248,25 +32207,6 @@ export declare function createServerRpc(connection: MessageConnection): {
         getDiscoveryPaths: (params: AgentsGetDiscoveryPathsRequest) => Promise<AgentDiscoveryPathList>;
     };
     /** @experimental */
-    instructions: {
-        /**
-         * Discovers instruction sources across user, repository, and plugin sources.
-         *
-         * @param params Optional project paths to include in instruction discovery.
-         *
-         * @returns Instruction sources discovered across user, repository, and plugin sources.
-         */
-        discover: (params: InstructionsDiscoverRequest) => Promise<ServerInstructionSourceList>;
-        /**
-         * Returns the canonical files and directories where a client may create custom instructions that the runtime will recognize, including ones that do not exist yet. Repository targets become active once created.
-         *
-         * @param params Optional project paths to include when enumerating instruction discovery targets.
-         *
-         * @returns Canonical files and directories where custom instructions can be created so the runtime will recognize them.
-         */
-        getDiscoveryPaths: (params: InstructionsGetDiscoveryPathsRequest) => Promise<InstructionDiscoveryPathList>;
-    };
-    /** @experimental */
     commands: {
         /**
          * Lists the well-known built-in slash commands that work as the first message in a new session (e.g. /plan, /env), without requiring an active session. Commands that depend on session state, authentication, or a synced session are omitted.
@@ -31276,78 +32216,6 @@ export declare function createServerRpc(connection: MessageConnection): {
         list: () => Promise<CommandList>;
     };
     /** @experimental */
-    user: {
-        /** @experimental */
-        settings: {
-            /**
-             * Lists every known user setting from settings.json, each with its effective value, its default, and whether it is at the default — so settings the user has never set still appear with their default value. Does not include repository- or enterprise-managed overrides that the runtime layers on top at session time.
-             *
-             * @returns Per-key metadata for every known user setting in settings.json, including settings left at their default. Excludes repository- and enterprise-managed overrides.
-             */
-            get: () => Promise<UserSettingsGetResult>;
-            /**
-             * Writes one or more user settings to settings.json, replacing each provided top-level key. A key whose value is null is removed.
-             *
-             * @param params Partial user settings to write to settings.json. Each top-level key is written individually, replacing the existing value; a key whose value is null is removed.
-             */
-            set: (params: UserSettingsSetRequest) => Promise<void>;
-        };
-    };
-    /** @experimental */
-    managedSettings: {
-        /**
-         * Discovers device-managed settings from production MDM and managed-file sources, validates them against the runtime-owned managed-settings schema, and returns the canonical JSON without requiring a session. `managedSettings.resolve` returns the same device settings together with the account's server policy.
-         *
-         * @returns Validated device-managed settings discovered before a session exists.
-         */
-        read: () => Promise<ManagedSettingsReadResult>;
-        /**
-         * Force-refreshes enterprise managed settings for every account: wipes the persistent server-policy cache (the whole `<cacheHome>/managed-settings` directory) and drops this runtime process's in-memory retained server policy. It does not itself fetch policy — the effect is that the next time a session resolves managed settings for an account, that resolution re-fetches the account's org policy from the network instead of serving a cached response. Note that `managedSettings.read` returns only device/MDM settings and never triggers the account server-policy fetch, so a host implementing "sync account policy" should call `managedSettings.resolve` or start a fresh session resolution rather than treat a subsequent `managedSettings.read` as the refreshed org policy. Mirrors the invalidation a sign-out performs, broadened from the one signing-out account to all of them; device/MDM layers describe the machine, not the account, and are left untouched. Rejects if the on-disk cache cannot be removed.
-         */
-        clearCache: () => Promise<void>;
-        /**
-         * Resolves the effective enterprise managed settings without a session, from the device channel and, when an account is available, the account's server policy through the same per-account cache sessions use. A cached server policy less than an hour old is used without a fetch; otherwise the policy is fetched, and when the fetch fails a cached policy up to 24 hours old is used instead, unless `forceRemoteSettingsRefresh` requires a live fetch. With no account requested or signed in, it reports device policy only; signing out removes the account's cached policy. It can fetch server policy over the network when the cache is stale, so call it off latency-critical paths such as startup rather than before listing models. The policy helper is not run. `layers` lists each channel's document before merging, and `values` and `meta` carry typed effective values and their lock state for the keys typed so far.
-         *
-         * @param params Optional opaque account selection or GitHub token whose managed settings are resolved.
-         *
-         * @returns Effective enterprise managed settings for an account, resolved without a session.
-         */
-        resolve: (params: ManagedSettingsResolveRequest) => Promise<ManagedSettingsResolveResult>;
-        /** @experimental */
-        permissions: {
-            /**
-             * Pure, sessionless evaluation of operations against a supplied permissionsContext. Performs no policy discovery, I/O, prompting, navigation, permission grants, or sandbox changes. Obtain the context from managedSettings.resolve or session.managedSettings.get, or reuse an in-memory context. Results preserve input order and duplicates. Consumers must block deny, obtain approval for ask, and use their normal permission flow for unmanaged. Unknown policy returns failClosed with every operation denied. This is not a substitute for user permissions or other security controls.
-             *
-             * @param params Managed policy context and ordered operations for pure, sessionless evaluation.
-             *
-             * @returns Ordered managed permission verdicts and the supplied policy's fail-closed posture.
-             */
-            evaluate: (params: ManagedSettingsPermissionsEvaluateRequest) => Promise<ManagedSettingsPermissionsEvaluateResult>;
-        };
-        /**
-         * Returns the managed-settings authoring JSON schema with descriptive `x-composition` annotations aligned with the shared settings-engine vocabulary. These annotations are not a complete runtime composition contract: model, effortLevel, and contextTier remain coupled. Use `managedSettings.compose` for the runtime's effective result. Performs no I/O.
-         *
-         * @returns The authoring JSON schema for managed settings recognized by this runtime.
-         */
-        schema: () => Promise<ManagedSettingsSchemaResult>;
-        /**
-         * Validates a candidate managed-settings document the way the runtime validates delivered policy, without applying it. Reports errors that would reject the document, warnings for content the runtime ignores, and the canonical document it would apply. Document text nested more than 64 levels deep is rejected. Performs no I/O.
-         *
-         * @param params A candidate managed-settings document to validate without applying it.
-         *
-         * @returns Result of validating a managed-settings document.
-         */
-        validate: (params: ManagedSettingsValidateRequest) => Promise<ManagedSettingsValidateResult>;
-        /**
-         * Merges candidate managed-settings documents for the device, server, and policy-helper channels into the effective settings the runtime would enforce on this host, using the same precedence and composition rules as live resolution, without applying them. Like live resolution, a server's advisory sandbox force-enable is declined on a host that cannot run the sandbox. Does not fetch policy or read policy files, but may perform blocking OS or subprocess probes for sandbox support. Preview documents are limited to 1 MiB and 64 levels of nesting.
-         *
-         * @param params Candidate managed-settings documents to merge without applying them.
-         *
-         * @returns The effective managed settings the runtime would enforce for the given documents, in the same shape `managedSettings.resolve` returns.
-         */
-        compose: (params: ManagedSettingsComposeRequest) => Promise<ManagedSettingsComposeResult>;
-    };
-    /** @experimental */
     runtime: {
         /**
          * Gracefully shuts down an SDK-owned runtime. The response is sent only after cleanup completes; callers may then terminate the owned runtime process.
@@ -32033,6 +32901,14 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Update the session's reasoning effort without changing the selected model. Use `switchTo` instead when you also need to change the model. The runtime stores the effort on the session and applies it to subsequent turns.
          */
         setReasoningEffort: (params: ModelSetReasoningEffortRequest) => Promise<ModelSetReasoningEffortResult>;
+        /**
+         * Computes whether the session's current model shows reasoning summaries and how a host should present them: the default Ctrl+T visibility, reasoning headers, the hidden-summaries hint, and whether a persisted `showReasoning` setting is redundant. The runtime folds in the session's model catalog, selection and reasoning-summaries experiment assignment; the host supplies only its own persisted setting and current visibility. This method reads the session's resolved model catalog rather than resolving it, so call `session.model.list` first on a session that has not listed models or run a turn; until then the result is `ready: false`. A session that resolves models without a Copilot catalog, that is a BYOK registry or an alternate provider, never caches one and stays `ready: false`.
+         *
+         * @param params Host presentation state the reasoning-summaries policy depends on.
+         *
+         * @returns Reasoning-summaries presentation policy for the session's current model.
+         */
+        getReasoningSummaries: (params: ModelGetReasoningSummariesRequest) => Promise<ModelGetReasoningSummariesResult>;
         /**
          * Lists models available to this session using its own auth and integration context. Connected hosts (CLI TUI, GitHub App) should call this through the session client so remote sessions return the remote CLI's available models rather than the caller's.
          *