@github/copilot-sdk 1.0.23-preview.0 → 1.0.23-preview.2

package/dist/generated/rpc.d.ts

@@ -91,7 +91,27 @@ export type AuthEnumerateQuery = {
      * Account-collection query variant discriminator.
      */
     kind: "providers";
+} | {
+    provider: LoginProviderKind;
+    /**
+     * Account-collection query variant discriminator.
+     */
+    kind: "loginAccounts";
 };
+/**
+ * A provider a consumer may interactively sign in with.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LoginProviderKind".
+ */
+/** @experimental */
+export type LoginProviderKind = 
+/** OAuth github.com sign-in via the browser (web loopback + PKCE). */
+"githubDotCom"
+/** A GitHub Enterprise Cloud account — a GitHub account on a non-github.com host, e.g. *.ghe.com; the host is supplied interactively through the neutral input-required step. */
+ | "proxima"
+/** Microsoft Entra sign-in that derives a GitHub (EMU) credential. */
+ | "entra";
 /**
  * Selects which typed accounts datum to read.
  *
@@ -380,21 +400,28 @@ export type AuthEnumerateValue = {
      * Enumerated account-collection variant discriminator.
      */
     kind: "providers";
+} | {
+    /**
+     * Cached base identities reusable by the selected login provider, active first.
+     */
+    items: AuthLoginIdentity[];
+    /**
+     * Enumerated account-collection variant discriminator.
+     */
+    kind: "loginAccounts";
 };
 /**
- * A provider a consumer may interactively sign in with.
+ * How an interactive provider login should choose its base identity.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "LoginProviderKind".
+ * via the `definition` "AuthLoginMode".
  */
 /** @experimental */
-export type LoginProviderKind = 
-/** OAuth github.com sign-in via the browser (web loopback + PKCE). */
-"githubDotCom"
-/** A GitHub Enterprise Cloud account — a GitHub account on a non-github.com host, e.g. *.ghe.com; the host is supplied interactively through the neutral input-required step. */
- | "proxima"
-/** Microsoft Entra sign-in that derives a GitHub (EMU) credential. */
- | "entra";
+export type AuthLoginMode = 
+/** Use normal provider behavior, optionally pinned to accountId. */
+"default"
+/** Explicitly ask the provider to present its account-selection UI instead of serving from a retained identity. */
+ | "selectAccount";
 /**
  * One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra).
  *
@@ -965,7 +992,9 @@ export type CatalogCapability =
 /** Understands `installability`, the reviewable `installPlan` and the optional materialisation `handle` on Agent Plugin candidates, and the verified Agent Plugin installation APIs plugins.planInstall and plugins.applyInstall, and Agent Plugin plans from catalog.planInstallFromReference. Requires agent-plugin-discovery; without it, plugin candidates are unchanged. Advertised only by runtimes with the plugin installer linked; acquisition may still be refused as feature-disabled per selected session. */
  | "agent-plugin-confirmed-installation"
 /** Understands catalog.planInstallFromReference, which plans installing whatever resource an Agent Finder materialisation reference pins. It plans only kinds whose installation capability the caller also requires: skill-confirmed-installation for Skills, agent-plugin-confirmed-installation for Agent Plugins. Advertised only by runtimes with the Skill installation engine linked. */
- | "catalog-reference-installation";
+ | "catalog-reference-installation"
+/** Understands catalog.getSavedFeed and catalog.getGeneratedFeed, which retrieve a saved or generated feed with entries projected exactly like catalog.search candidates. Requires catalog-search-credential-required; add catalog-search-session-bound to bind the retrieval to a selected session. */
+ | "catalog-feeds";
 /**
  * Bounded extensible wire-feature identifier. Known values are described by `CatalogCapability`; newer callers may send future identifiers so an older runtime can return a typed negotiation refusal instead of failing schema validation. Capability negotiation establishes contract understanding, while each operation's result separately reports runtime availability.
  *
@@ -990,6 +1019,52 @@ export type CatalogContractViolationReason =
  | "duplicate-identity"
 /** A result declared no media type, or one this contract does not model. */
  | "unknown-media-type";
+/**
+ * Discriminator for an available feed entry
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogFeedAvailableStatus".
+ */
+/** @experimental */
+export type CatalogFeedAvailableStatus = "available";
+/**
+ * One feed entry, in its feed position. Only available entries carry a candidate.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogFeedEntry".
+ */
+/** @experimental */
+export type CatalogFeedEntry = CatalogFeedAvailableEntry | CatalogFeedUnavailableEntry | CatalogFeedFilteredEntry;
+/**
+ * Discriminator for an unavailable feed entry
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogFeedUnavailableStatus".
+ */
+/** @experimental */
+export type CatalogFeedUnavailableStatus = "unavailable";
+/**
+ * Why a feed entry cannot be presented
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogFeedUnavailableReason".
+ */
+/** @experimental */
+export type CatalogFeedUnavailableReason = 
+/** The identifier no longer resolves to a resource. */
+"not-found"
+/** The resource is of a kind this caller did not negotiate or this runtime does not support. */
+ | "unsupported-kind"
+/** The resource failed the same validation catalog.search applies, or repeats an earlier entry. */
+ | "invalid-resource";
+/**
+ * Discriminator for a feed entry filtered by trust tier
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogFeedFilteredStatus".
+ */
+/** @experimental */
+export type CatalogFeedFilteredStatus = "filtered";
 /**
  * Which kind of opaque handle was presented
  *
@@ -1055,7 +1130,11 @@ export type CatalogInvalidRequestField =
 /** The opaque selection reference was missing or malformed. */
  | "selectionRef"
 /** The terminal selection outcome was missing or unsupported. */
- | "outcome";
+ | "outcome"
+/** The saved feed ID, or the generated feed strategy or key, was missing or malformed. */
+ | "feed"
+/** The trust tier filter was empty, repeated a tier or named an unknown tier. */
+ | "trustTiers";
 /**
  * How a card failed validation
  *
@@ -1204,6 +1283,12 @@ export type CatalogReferenceInstallationFailureReason =
  | "unsupported-resource"
 /** The resource's entrypoint could not be retrieved or verified. */
  | "entrypoint-unavailable"
+/** GitHub rate limited retrieval from the pinned public source. Retry after retryAfterSeconds when present. */
+ | "source-rate-limited"
+/** No GitHub sign-in or credential is available, so the caller must sign in. */
+ | "no-credential"
+/** Agent Finder refused the GitHub credential (HTTP 401, or a 403 without rate-limit evidence); the caller must sign in again. */
+ | "credential-rejected"
 /** The Skill entrypoint is not a valid Skill. */
  | "invalid-skill"
 /** The plugin manifest is not a valid plugin manifest, or the bundle has another manifest that would take precedence over the reviewed one. */
@@ -1235,6 +1320,10 @@ export type CatalogReferenceInstallationOutcome = {
     kind: "plugin-install-planned";
 } | {
     reason: CatalogReferenceInstallationFailureReason;
+    /**
+     * Whole seconds GitHub asked the caller to wait, present only with source-rate-limited.
+     */
+    retryAfterSeconds?: number;
     /**
      * Reference planning outcome discriminator naming the planned kind.
      */
@@ -1380,11 +1469,28 @@ export type PluginInstallationReview = {
      * when this exceeds 262144 UTF-8 bytes; it is never truncated.
      */
     manifestContent: string;
+    /**
+     * MCP servers the verified files declare, exactly as an install of these files loads
+     * them. Omitted when the plugin declares none.
+     */
+    mcpServers?: PluginInstallationMcpServerReview[];
     /**
      * Exact reviewed Agent Plugin installation action.
      */
     action: "install";
 };
+/**
+ * How a reviewed plugin's MCP server is reached.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PluginInstallationMcpTransport".
+ */
+/** @experimental */
+export type PluginInstallationMcpTransport = 
+/** An HTTP or SSE server reached over the network, which may ask the user to sign in. */
+"remote"
+/** A command the plugin runs on this machine. */
+ | "local";
 /**
  * Planning result for a materialisation reference with the honoured contract, or a typed refusal.
  *
@@ -1399,25 +1505,15 @@ export type CatalogReferenceInstallationResult = {
     kind: "outcome";
     outcome: CatalogReferenceInstallationOutcome;
     negotiated: CatalogNegotiatedContract;
-} | CatalogNegotiationRefusedError | CatalogInvalidRequestError;
+} | CatalogNegotiationRefusedError | CatalogInvalidRequestError | CatalogNetworkFailureError;
 /**
- * Relationship of the backend-reported count to the complete query result set.
+ * Outcome of catalog.getGeneratedFeed: the feed with its entries, or one typed refusal. An entry that cannot be presented never fails the feed.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogSearchTotalCountRelation".
+ * via the `definition` "CatalogResourceGeneratedFeedResult".
  */
 /** @experimental */
-export type CatalogSearchTotalCountRelation = 
-/** No exact/full-query or lower-bound guarantee is available. */
-"unknown";
-/**
- * Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogSearchResult".
- */
-/** @experimental */
-export type CatalogSearchResult = CatalogSearchSucceeded | CatalogNegotiationRefusedError | CatalogUnsupportedKindError | CatalogInvalidRequestError | CatalogAuthenticationRequiredError | CatalogPolicyRejectedError | CatalogNetworkFailureError | CatalogUnsafeRetrievalError | CatalogMalformedCardError | CatalogContractViolationError | CatalogUnavailableError;
+export type CatalogResourceGeneratedFeedResult = CatalogGetGeneratedFeedSucceeded | CatalogNegotiationRefusedError | CatalogInvalidRequestError | CatalogAuthenticationRequiredError | CatalogPolicyRejectedError | CatalogNetworkFailureError | CatalogUnsafeRetrievalError | CatalogMalformedCardError | CatalogUnavailableError;
 /**
  * Which hardened-fetch control refused a retrieval
  *
@@ -1455,7 +1551,35 @@ export type CatalogUnavailableReason =
 /** No catalog authority is configured for this runtime. */
  | "authority-not-configured"
 /** The surface is disabled by policy on this runtime. */
- | "disabled-by-policy";
+ | "disabled-by-policy"
+/** The requested saved feed, or generated feed strategy or key, does not exist. */
+ | "feed-not-found";
+/**
+ * Outcome of catalog.getSavedFeed: the feed with its entries, or one typed refusal. An entry that cannot be presented never fails the feed.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogResourceSavedFeedResult".
+ */
+/** @experimental */
+export type CatalogResourceSavedFeedResult = CatalogGetSavedFeedSucceeded | CatalogNegotiationRefusedError | CatalogInvalidRequestError | CatalogAuthenticationRequiredError | CatalogPolicyRejectedError | CatalogNetworkFailureError | CatalogUnsafeRetrievalError | CatalogMalformedCardError | CatalogUnavailableError;
+/**
+ * Relationship of the backend-reported count to the complete query result set.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSearchTotalCountRelation".
+ */
+/** @experimental */
+export type CatalogSearchTotalCountRelation = 
+/** No exact/full-query or lower-bound guarantee is available. */
+"unknown";
+/**
+ * Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSearchResult".
+ */
+/** @experimental */
+export type CatalogSearchResult = CatalogSearchSucceeded | CatalogNegotiationRefusedError | CatalogUnsupportedKindError | CatalogInvalidRequestError | CatalogAuthenticationRequiredError | CatalogPolicyRejectedError | CatalogNetworkFailureError | CatalogUnsafeRetrievalError | CatalogMalformedCardError | CatalogContractViolationError | CatalogUnavailableError;
 /**
  * Terminal outcome declared for a retained catalog selection group
  *
@@ -2433,6 +2557,30 @@ export type HostExitReason =
  | "ownerDisconnected"
 /** The runtime is shutting down. */
  | "runtimeShutdown";
+/**
+ * A supported image-service operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ImageToolModelOperation".
+ */
+/** @experimental */
+export type ImageToolModelOperation = 
+/** Generate an image from a text prompt. */
+"generate"
+/** Generate or edit an image using explicitly selected image inputs. */
+ | "edit";
+/**
+ * Account availability of the runtime image model. Discovery errors are returned as errors, not converted to unavailable.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ImageToolModelAvailability".
+ */
+/** @experimental */
+export type ImageToolModelAvailability = 
+/** The account has access to a supported image operation. */
+"available"
+/** The runtime default is not available to this account; enabling the tool cannot grant access. */
+ | "unavailable";
 /**
  * Only resource kinds with an implemented installation engine have a review variant.
  *
@@ -2801,6 +2949,22 @@ export type SessionLogLevel =
  | "warning"
 /** Error message describing a failure. */
  | "error";
+/**
+ * Administrator-configured Ensemble preference, independent of execution support.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedEnsembleTier".
+ */
+/** @experimental */
+export type ManagedEnsembleTier = 
+/** Balance efficiency and intelligence. */
+"balance"
+/** Prefer higher intelligence. */
+ | "high"
+/** Prefer maximum intelligence. */
+ | "max"
+/** Leave tier selection unmanaged without falling back to legacy Auto policy. */
+ | "unmanaged";
 /** @experimental */
 export type ManagedPermissionOperation = {
     /**
@@ -4390,6 +4554,12 @@ export type PluginInstallationFailureReason =
  | "payload-unavailable"
 /** The acquired files no longer match the reviewed descriptor. */
  | "payload-mismatch"
+/** GitHub rate limited retrieval from the pinned public source; nothing was installed. Retry after retryAfterSeconds when present. */
+ | "source-rate-limited"
+/** No GitHub sign-in or credential is available, so the caller must sign in. */
+ | "no-credential"
+/** Agent Finder refused the GitHub credential (HTTP 401, or a 403 without rate-limit evidence); the caller must sign in again. */
+ | "credential-rejected"
 /** Plugin installation storage or admission is busy. */
  | "busy"
 /** A plugin with the same name or install location already exists. */
@@ -4411,6 +4581,10 @@ export type PluginInstallationManagementOutcome = {
     kind: "install-planned";
 } | {
     reason: PluginInstallationFailureReason;
+    /**
+     * Whole seconds GitHub asked the caller to wait, present only with source-rate-limited.
+     */
+    retryAfterSeconds?: number;
     /**
      * Agent Plugin installation management outcome discriminator.
      */
@@ -4430,7 +4604,7 @@ export type PluginInstallationManagementResult = {
     kind: "outcome";
     outcome: PluginInstallationManagementOutcome;
     negotiated: CatalogNegotiatedContract;
-} | CatalogNegotiationRefusedError | CatalogInvalidRequestError;
+} | CatalogNegotiationRefusedError | CatalogInvalidRequestError | CatalogNetworkFailureError;
 /**
  * Terminal verified Agent Plugin installation result.
  *
@@ -4468,6 +4642,10 @@ export type PluginInstallationOutcome = {
      * Present once an operation has been allocated.
      */
     operationId?: string;
+    /**
+     * Whole seconds GitHub asked the caller to wait, present only with source-rate-limited.
+     */
+    retryAfterSeconds?: number;
     /**
      * Terminal Agent Plugin installation outcome discriminator.
      */
@@ -4487,7 +4665,7 @@ export type PluginInstallationResult = {
     kind: "outcome";
     outcome: PluginInstallationOutcome;
     negotiated: CatalogNegotiatedContract;
-} | CatalogNegotiationRefusedError | CatalogInvalidRequestError;
+} | CatalogNegotiationRefusedError | CatalogInvalidRequestError | CatalogNetworkFailureError;
 /**
  * Where completed plugin content was staged before atomic promotion.
  *
@@ -5406,6 +5584,12 @@ export type SkillInstallationFailureReason =
  | "payload-unavailable"
 /** The acquired payload no longer matches the reviewed descriptor. */
  | "payload-mismatch"
+/** GitHub rate limited retrieval from the pinned public source; nothing was installed. Retry after retryAfterSeconds when present. Reported only to callers that require catalog-reference-installation; others receive payload-unavailable. */
+ | "source-rate-limited"
+/** No GitHub sign-in or credential is available, so the caller must sign in. Reported only to callers that require catalog-reference-installation; others receive policy-context-unavailable. */
+ | "no-credential"
+/** Agent Finder refused the GitHub credential (HTTP 401, or a 403 without rate-limit evidence); the caller must sign in again. Reported only to callers that require catalog-reference-installation; others receive descriptor-unavailable. */
+ | "credential-rejected"
 /** The retained Skill source changed after planning. */
  | "source-changed"
 /** The selected runtime cannot inspect or control the requested lifecycle operation. */
@@ -5492,6 +5676,10 @@ export type SkillInstallationManagementOutcome = {
     kind: "enabled-changed";
 } | {
     reason: SkillInstallationFailureReason;
+    /**
+     * Whole seconds GitHub asked the caller to wait, present only with source-rate-limited.
+     */
+    retryAfterSeconds?: number;
     /**
      * Skill installation management outcome discriminator.
      */
@@ -5635,6 +5823,10 @@ export type SkillInstallationOutcome = {
      * Present once an operation has been allocated.
      */
     operationId?: string;
+    /**
+     * Whole seconds GitHub asked the caller to wait, present only with source-rate-limited.
+     */
+    retryAfterSeconds?: number;
     /**
      * Terminal Skill installation outcome discriminator.
      */
@@ -5654,7 +5846,7 @@ export type SkillInstallationManagementResult = {
     kind: "outcome";
     outcome: SkillInstallationManagementOutcome;
     negotiated: CatalogNegotiatedContract;
-} | CatalogNegotiationRefusedError | CatalogInvalidRequestError;
+} | CatalogNegotiationRefusedError | CatalogInvalidRequestError | CatalogNetworkFailureError;
 /**
  * Skill installation result with the honoured contract, or a typed request/negotiation refusal.
  *
@@ -5669,7 +5861,7 @@ export type SkillInstallationResult = {
     kind: "outcome";
     outcome: SkillInstallationOutcome;
     negotiated: CatalogNegotiatedContract;
-} | CatalogNegotiationRefusedError | CatalogInvalidRequestError;
+} | CatalogNegotiationRefusedError | CatalogInvalidRequestError | CatalogNetworkFailureError;
 /**
  * Result of invoking the slash command (text output, prompt to send to the agent, completion, or subcommand selection).
  *
@@ -7731,6 +7923,27 @@ export interface ProviderDescriptor {
      */
     available: boolean;
 }
+/**
+ * A cached base identity a provider can reuse for login without asking the user to choose an account again.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AuthLoginIdentity".
+ */
+/** @experimental */
+export interface AuthLoginIdentity {
+    /**
+     * Opaque provider-owned identity id. Pass it back to accounts.login.begin; consumers must not parse it.
+     */
+    accountId: string;
+    /**
+     * Human-readable sign-in label owned by the runtime.
+     */
+    label: string;
+    /**
+     * Whether this base identity owns the session's active derived account.
+     */
+    active: boolean;
+}
 /**
  * Credential-free identity metadata.
  *
@@ -7789,7 +8002,7 @@ export interface AuthLoginAdvanceRequest {
     input?: string;
 }
 /**
- * Begin an interactive login flow for a provider kind. Dispatch is kind-only.
+ * Begin an interactive login flow for a provider kind, optionally reusing a cached base identity or explicitly requesting provider account selection.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AuthLoginBeginRequest".
@@ -7797,6 +8010,11 @@ export interface AuthLoginAdvanceRequest {
 /** @experimental */
 export interface AuthLoginBeginRequest {
     kind: LoginProviderKind;
+    mode?: AuthLoginMode;
+    /**
+     * Opaque cached base identity id returned by accounts.enumerate loginAccounts. Valid only with default mode; consumers must not parse it.
+     */
+    accountId?: string;
 }
 /**
  * A started login flow: its opaque id and first step.
@@ -8597,7 +8815,7 @@ export interface CatalogAgentPluginCandidate {
      * Publisher taken verbatim from the card. Inert untrusted text.
      */
     publisher?: string;
-    source: CatalogPluginRepositorySource;
+    source?: CatalogPluginRepositorySource;
     /**
      * Explicit validated compatibility tags, in canonical order. An empty list means the source declared no recognised compatibility; clients must not infer compatibility from other fields. `canvas-only` requires both `canvas` and `github-copilot`.
      *
@@ -8652,9 +8870,9 @@ export interface CatalogPluginRepositorySource {
      */
     repository: string;
     /**
-     * Case-preserving safe relative POSIX path derived from metadata.repoPath.
+     * Case-preserving safe relative POSIX path derived from metadata.repoPath. Absent when the catalog declared sourceSet without repoPath, meaning the plugin is at the repository root; only callers that require agent-plugin-confirmed-installation receive such a source.
      */
-    path: string;
+    path?: string;
 }
 /**
  * What installing an Agent Plugin would do, for the user to review and confirm. Provisional: the catalogue install data it is built from is not final.
@@ -8672,20 +8890,18 @@ export interface CatalogAgentPluginInstallPlan {
      */
     sources: [CatalogAgentPluginInstallSource] | [CatalogAgentPluginInstallSource, CatalogAgentPluginInstallSource] | [CatalogAgentPluginInstallSource, CatalogAgentPluginInstallSource, CatalogAgentPluginInstallSource];
     /**
-     * The plugin's name, as named in its marketplace or manifest.
+     * The plugin's name, as named in its marketplace or manifest. Omitted from a materialisation-only plan, whose sources are only `materialization`: the verified manifests supply the name in the plugins.planInstall review.
      */
-    pluginName: string;
+    pluginName?: string;
     version?: CatalogResourceVersion;
     /**
      * Exact full commit ID to install, in lowercase hex. Always present when the plan has a repository source; a plan with a marketplace source carries at least one of version and commit.
      */
     commit?: string;
     /**
-     * Components the plugin contributes, in canonical order.
-     *
-     * @minItems 1
+     * Components the plugin contributes, in canonical order. Empty only in a materialisation-only plan, where the verified manifests list them in the plugins.planInstall review.
      */
-    components: [CatalogAgentPluginComponent, ...CatalogAgentPluginComponent[]];
+    components: CatalogAgentPluginComponent[];
     /**
      * Canvas IDs the plugin contributes. Non-empty exactly when components include `canvas`.
      */
@@ -9104,6 +9320,215 @@ export interface CatalogContractViolationError {
      */
     message: string;
 }
+/**
+ * An entry whose resource resolves and is presented as the same candidate catalog.search would return.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogFeedAvailableEntry".
+ */
+/** @experimental */
+export interface CatalogFeedAvailableEntry {
+    status: CatalogFeedAvailableStatus;
+    /**
+     * The entry's resource identifier as saved in the feed.
+     */
+    identifier: string;
+    candidate: CatalogCandidate;
+}
+/**
+ * An entry that cannot be presented, kept in its position so clients decide how to render it.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogFeedUnavailableEntry".
+ */
+/** @experimental */
+export interface CatalogFeedUnavailableEntry {
+    status: CatalogFeedUnavailableStatus;
+    /**
+     * The entry's resource identifier as saved in the feed.
+     */
+    identifier: string;
+    reason: CatalogFeedUnavailableReason;
+}
+/**
+ * An entry whose resource resolves but is not in one of the requested trust tiers.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogFeedFilteredEntry".
+ */
+/** @experimental */
+export interface CatalogFeedFilteredEntry {
+    status: CatalogFeedFilteredStatus;
+    /**
+     * The entry's resource identifier as saved in the feed.
+     */
+    identifier: string;
+}
+/**
+ * A generated feed's identity. It has no version; generatedAt is its only freshness signal.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogGeneratedFeedDescription".
+ */
+/** @experimental */
+export interface CatalogGeneratedFeedDescription {
+    /**
+     * Generation strategy that was requested.
+     */
+    strategy: string;
+    /**
+     * Feed key that was requested.
+     */
+    key: string;
+    /**
+     * When the feed was computed, as reported by the authority. Omitted when the authority reports no valid timestamp.
+     */
+    generatedAt?: string;
+}
+/**
+ * Retrieves one generated feed, computed on every request, by strategy and key, such as `telemetry` and `popular`. Requires catalog-feeds and catalog-search-credential-required; add catalog-search-session-bound with policySessionId to retain the selected session's authority for installation, exactly as for catalog.search.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogGetGeneratedFeedRequest".
+ */
+/** @experimental */
+export interface CatalogGetGeneratedFeedRequest {
+    contract: CatalogClientContract;
+    /**
+     * Select an existing attached local session. Requires authenticated, session-bound catalogue support.
+     * The runtime never creates, resumes or reconfigures a session to honour this selector.
+     */
+    policySessionId?: string;
+    /**
+     * Generation strategy, such as `telemetry`.
+     */
+    strategy: string;
+    /**
+     * Feed key within the strategy, such as `popular`.
+     */
+    key: string;
+    /**
+     * Accept only resources currently assessed at one of these trust tiers. Entries whose resource is in another tier, or has none, are returned as filtered in their original position. Omit for an unfiltered feed.
+     *
+     * @minItems 1
+     * @maxItems 2
+     */
+    trustTiers?: [CatalogTrustTier] | [CatalogTrustTier, CatalogTrustTier];
+}
+/**
+ * A retrieved generated feed. Entries keep the feed's order and are never more than 100.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogGetGeneratedFeedSucceeded".
+ */
+/** @experimental */
+export interface CatalogGetGeneratedFeedSucceeded {
+    /**
+     * Discriminator: the feed was retrieved
+     */
+    kind: "succeeded";
+    /**
+     * Runtime-issued identifier for this retrieval, with the same meaning as a catalog.search searchId, so a plan can be tied to the feed that produced its candidate. Derived from no user, account, device or feed data.
+     */
+    searchId: string;
+    feed: CatalogGeneratedFeedDescription;
+    /**
+     * Feed entries in the feed's order.
+     *
+     * @maxItems 100
+     */
+    entries: CatalogFeedEntry[];
+    negotiated: CatalogNegotiatedContract;
+}
+/**
+ * The protocol version and capability set the runtime actually honoured for a successful catalog operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogNegotiatedContract".
+ */
+/** @experimental */
+export interface CatalogNegotiatedContract {
+    /**
+     * Protocol version of the runtime that served the request.
+     */
+    runtimeProtocolVersion: number;
+    /**
+     * Wire features the runtime understood for this operation. Includes the five original catalog capabilities and only explicitly requested supported additions, in supported order without duplicates. Capabilities that introduce new success-union variants or operations are therefore included only when explicitly required, preserving older protocol-v3 clients. Always a superset of the caller's required features, because any shortfall is a refusal instead. Operation availability remains a separate typed result.
+     */
+    grantedCapabilities: CatalogCapability[];
+}
+/**
+ * Retrieves one saved feed by its opaque ID. Requires catalog-feeds and catalog-search-credential-required; add catalog-search-session-bound with policySessionId to retain the selected session's authority for installation, exactly as for catalog.search.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogGetSavedFeedRequest".
+ */
+/** @experimental */
+export interface CatalogGetSavedFeedRequest {
+    contract: CatalogClientContract;
+    /**
+     * Select an existing attached local session. Requires authenticated, session-bound catalogue support.
+     * The runtime never creates, resumes or reconfigures a session to honour this selector.
+     */
+    policySessionId?: string;
+    /**
+     * Opaque saved feed ID. Treat it as an indivisible string.
+     */
+    feedId: string;
+    /**
+     * Accept only resources currently assessed at one of these trust tiers. Entries whose resource is in another tier, or has none, are returned as filtered in their original position. Omit for an unfiltered feed.
+     *
+     * @minItems 1
+     * @maxItems 2
+     */
+    trustTiers?: [CatalogTrustTier] | [CatalogTrustTier, CatalogTrustTier];
+}
+/**
+ * A retrieved saved feed. Entries keep the feed's order and are never more than 100.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogGetSavedFeedSucceeded".
+ */
+/** @experimental */
+export interface CatalogGetSavedFeedSucceeded {
+    /**
+     * Discriminator: the feed was retrieved
+     */
+    kind: "succeeded";
+    /**
+     * Runtime-issued identifier for this retrieval, with the same meaning as a catalog.search searchId, so a plan can be tied to the feed that produced its candidate. Derived from no user, account, device or feed data.
+     */
+    searchId: string;
+    feed: CatalogSavedFeedDescription;
+    /**
+     * Feed entries in the feed's order.
+     *
+     * @maxItems 100
+     */
+    entries: CatalogFeedEntry[];
+    negotiated: CatalogNegotiatedContract;
+}
+/**
+ * A saved feed's identity. Its version changes only when the feed's definition is replaced, not when a referenced resource changes.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogSavedFeedDescription".
+ */
+/** @experimental */
+export interface CatalogSavedFeedDescription {
+    /**
+     * Opaque feed ID.
+     */
+    id: string;
+    /**
+     * Feed name as saved by its creator. Inert untrusted text.
+     */
+    name: string;
+    /**
+     * Version of the saved feed definition.
+     */
+    version: number;
+}
 /**
  * A presented handle was not accepted. Handles are runtime-instance scoped, TTL-bound, and single-use, so each way of failing is reported distinctly.
  *
@@ -9193,23 +9618,6 @@ export interface CatalogMaterializationReference {
      */
     bundleDigest: string;
 }
-/**
- * The protocol version and capability set the runtime actually honoured for a successful catalog operation.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogNegotiatedContract".
- */
-/** @experimental */
-export interface CatalogNegotiatedContract {
-    /**
-     * Protocol version of the runtime that served the request.
-     */
-    runtimeProtocolVersion: number;
-    /**
-     * Wire features the runtime understood for this operation. Includes the five original catalog capabilities and only explicitly requested supported additions, in supported order without duplicates. Capabilities that introduce new success-union variants or operations are therefore included only when explicitly required, preserving older protocol-v3 clients. Always a superset of the caller's required features, because any shortfall is a refusal instead. Operation availability remains a separate typed result.
-     */
-    grantedCapabilities: CatalogCapability[];
-}
 /**
  * The caller's protocol version or required capabilities cannot be honoured. Returned instead of a partial or ambiguous success.
  *
@@ -9384,6 +9792,12 @@ export interface InstallationCatalogueIdentity {
      */
     source: string;
     trustAtInstall?: CatalogTrustSnapshot;
+    /**
+     * HTTPS URL of the resource's icon on raw.githubusercontent.com, retained from the catalogue
+     * candidate. Untrusted external content: load it without credentials. Omitted when the
+     * candidate had none.
+     */
+    iconUrl?: string;
 }
 /**
  * Source identity retained from Agent Finder and the pinned GitHub descriptor.
@@ -9620,6 +10034,60 @@ export interface PluginInstallationFileReview {
      */
     digest: string;
 }
+/**
+ * One MCP server a reviewed plugin declares.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PluginInstallationMcpServerReview".
+ */
+/** @experimental */
+export interface PluginInstallationMcpServerReview {
+    /**
+     * Server name as the plugin declares it.
+     */
+    name: string;
+    transport: PluginInstallationMcpTransport;
+    /**
+     * Host of a remote server's URL.
+     */
+    host?: string;
+}
+/**
+ * Retrieval was refused by the runtime's hardened fetch boundary before any request left the process, or before a redirect was followed.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogUnsafeRetrievalError".
+ */
+/** @experimental */
+export interface CatalogUnsafeRetrievalError {
+    /**
+     * Discriminator: retrieval was refused as unsafe
+     */
+    kind: "unsafe-retrieval";
+    reason: CatalogUnsafeRetrievalReason;
+    /**
+     * Human-readable explanation, safe to surface. Never contains the refused URL, nor a query, handle, or secret.
+     */
+    message: string;
+}
+/**
+ * The operation is not available on this runtime. Distinct from a network failure: nothing was attempted.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogUnavailableError".
+ */
+/** @experimental */
+export interface CatalogUnavailableError {
+    /**
+     * Discriminator: the operation is not available
+     */
+    kind: "unavailable";
+    reason: CatalogUnavailableReason;
+    /**
+     * Human-readable explanation, safe to surface. Never contains a query, URL, handle, or secret.
+     */
+    message: string;
+}
 /**
  * An explicit numbered-page request. SDK consumers treat the token as opaque. For bound search, the runtime unwraps an expiring owner-bound reference to the private authority token; only the runtime changes the authority token's targetPage. Legacy unbound navigation keeps its authority-issued token semantics. No snapshot stability is promised.
  *
@@ -9760,42 +10228,6 @@ export interface CatalogUnsupportedKindError {
      */
     message: string;
 }
-/**
- * Retrieval was refused by the runtime's hardened fetch boundary before any request left the process, or before a redirect was followed.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogUnsafeRetrievalError".
- */
-/** @experimental */
-export interface CatalogUnsafeRetrievalError {
-    /**
-     * Discriminator: retrieval was refused as unsafe
-     */
-    kind: "unsafe-retrieval";
-    reason: CatalogUnsafeRetrievalReason;
-    /**
-     * Human-readable explanation, safe to surface. Never contains the refused URL, nor a query, handle, or secret.
-     */
-    message: string;
-}
-/**
- * The operation is not available on this runtime. Distinct from a network failure: nothing was attempted.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CatalogUnavailableError".
- */
-/** @experimental */
-export interface CatalogUnavailableError {
-    /**
-     * Discriminator: the operation is not available
-     */
-    kind: "unavailable";
-    reason: CatalogUnavailableReason;
-    /**
-     * Human-readable explanation, safe to surface. Never contains a query, URL, handle, or secret.
-     */
-    message: string;
-}
 /**
  * The caller cancelled the selection interaction and the retained search state was released.
  *
@@ -13668,6 +14100,62 @@ export interface HostUnregisterSessionRequest {
      */
     sessionId: string;
 }
+/**
+ * The runtime-selected image model and its account availability. Availability is independent of per-session image-generation enablement and does not override session policy or permissions.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ImageToolModel".
+ */
+/** @experimental */
+export interface ImageToolModel {
+    /**
+     * Image model identifier selected by the runtime.
+     */
+    id: string;
+    /**
+     * Human-readable model name, supplied by the runtime when unavailable from the catalog.
+     */
+    name: string;
+    /**
+     * Image operations supported by the model's available versioned endpoints.
+     */
+    supportedOperations: ImageToolModelOperation[];
+    /**
+     * Whether this is the model the runtime currently uses for its native image tool.
+     */
+    isDefault: boolean;
+    availability: ImageToolModelAvailability;
+    pricing?: ImageToolModelPricing;
+}
+/**
+ * Default-tier text and image token prices reported for an image model, in AI credits per billing batch. Missing rates remain absent; these are not per-image quotes or actual billed usage.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ImageToolModelPricing".
+ */
+/** @experimental */
+export interface ImageToolModelPricing {
+    /**
+     * Number of tokens per billing batch.
+     */
+    batchSize: number;
+    /**
+     * AI credits per batch of text-input tokens, including a reported zero.
+     */
+    textInputPrice?: number;
+    /**
+     * AI credits per batch of text-output tokens, not generated image tokens.
+     */
+    textOutputPrice?: number;
+    /**
+     * Distinct AI credits per batch of image-input tokens, when reported, including zero.
+     */
+    imageInputPrice?: number;
+    /**
+     * Distinct AI credits per batch of image-output tokens, when reported, including zero.
+     */
+    imageOutputPrice?: number;
+}
 /**
  * One connection-owned, expiring request for a trusted host's explicit user decision.
  *
@@ -14061,6 +14549,32 @@ export interface InstalledPluginInfo {
      * Whether the managed desired plugin currently has an installed or live record. Set to false for a managed desired entry retained in the listing after installation or reconciliation failed.
      */
     installed?: boolean;
+    /**
+     * Description from the manifest of the installed copy. Present only for a direct install pinned to one GitHub commit, such as a verified install from GitHub.
+     */
+    description?: string;
+    verifiedSource?: InstalledPluginVerifiedSource;
+    /**
+     * HTTPS URL of the plugin's icon on raw.githubusercontent.com, retained from the catalogue entry it was installed from. Untrusted external content: load it without credentials. Present only for a direct install pinned to one GitHub commit whose catalogue entry had an icon.
+     */
+    iconUrl?: string;
+}
+/**
+ * The GitHub repository and commit an installed plugin is pinned to.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InstalledPluginVerifiedSource".
+ */
+/** @experimental */
+export interface InstalledPluginVerifiedSource {
+    /**
+     * GitHub repository in `owner/repo` form.
+     */
+    repository: string;
+    /**
+     * Full 40-character hexadecimal commit SHA the plugin is pinned to.
+     */
+    revision: string;
 }
 /**
  * Canonical file or directory where custom instructions can be discovered or created, with location, kind, preference, and project path.
@@ -14759,6 +15273,7 @@ export interface ManagedSettingsValues {
      */
     model?: string;
     autoTier?: AutoTier;
+    ensembleTier?: ManagedEnsembleTier;
     /**
      * Managed reasoning-effort default for the managed concrete model. The runtime clamps it to an entitled effort when model availability is known.
      */
@@ -14775,6 +15290,7 @@ export interface ManagedSettingsValues {
 export interface ManagedSettingsMeta {
     model?: ManagedSettingMeta;
     autoTier?: ManagedSettingMeta;
+    ensembleTier?: ManagedSettingMeta;
     effortLevel?: ManagedSettingMeta;
     contextTier?: ManagedSettingMeta;
 }
@@ -18132,6 +18648,10 @@ export interface ModelList {
      */
     models: Model[];
     auto?: AutoTierMetadata;
+    /**
+     * The runtime's default image model, separate from conversation models, with its availability for the resolved account. The default is reported even when unavailable; clients choose whether to display it. These entries must not be selected as chat models. Absent on runtimes that do not expose this catalog.
+     */
+    imageModels?: ImageToolModel[];
 }
 /** @experimental */
 export interface ModelPickerPersistenceRequest {
@@ -21257,6 +21777,19 @@ export interface ProtocolExternalToolDefinition {
         [k: string]: JsonValue | undefined;
     };
 }
+/**
+ * Opt into native CAPI image generation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProtocolImageGenerationOptions".
+ */
+/** @experimental */
+export interface ProtocolImageGenerationOptions {
+    /**
+     * Disabled by default for SDK sessions. CAPI model access and permissions still apply.
+     */
+    enabled?: boolean;
+}
 /**
  * BYOK providers and/or models to add to the session's registry at runtime. Both fields are optional; provide providers, models, or both.
  *
@@ -26839,6 +27372,7 @@ export interface SessionTelemetryEngagement {
  */
 /** @experimental */
 export interface SessionUpdateOptionsParams {
+    imageGeneration?: ProtocolImageGenerationOptions;
     /**
      * The model ID to use for assistant turns.
      */
@@ -28345,6 +28879,20 @@ export interface TasksGetProgressResult {
      */
     progress?: TaskProgress | null;
 }
+/**
+ * How a shell task ended, reported with the read that reaches the end of its output.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "TaskShellOutputExit".
+ */
+/** @experimental */
+export interface TaskShellOutputExit {
+    status: TaskStatus;
+    /**
+     * Process exit code, when the runtime recorded one. Absent when the shell was stopped before reporting an exit code.
+     */
+    exitCode?: number;
+}
 /**
  * The promoted task as it now exists in background mode, omitted if no promotable task was waiting.
  *
@@ -28381,6 +28929,45 @@ export interface TasksPromoteToBackgroundResult {
      */
     promoted: boolean;
 }
+/**
+ * Detached shell task to read output from, with an optional cursor and long-poll wait. waitMs defaults to zero (maximum 30000).
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "TasksReadOutputRequest".
+ */
+/** @experimental */
+export interface TasksReadOutputRequest {
+    /**
+     * Identifier of a detached shell task, as returned by tasks.list
+     */
+    id: string;
+    /**
+     * Opaque cursor returned by an earlier read of the same task. Omit to read from the beginning of the shell's output. If the output no longer reaches the cursor, for example because its log was removed, the request fails; read again without a cursor.
+     */
+    cursor?: string;
+    /**
+     * Milliseconds to wait for new output, or for the shell to finish, when the cursor is already at the end of the available output. 0 (default) returns immediately. Capped at 30000ms.
+     */
+    waitMs?: number;
+}
+/**
+ * Output a detached shell task wrote after the request cursor, with the cursor for the next read.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "TasksReadOutputResult".
+ */
+/** @experimental */
+export interface TasksReadOutputResult {
+    /**
+     * Output after the request cursor, decoded as UTF-8 and redacted. At most 64 KiB per read, so a large backlog takes several reads; the text never splits a character, and text that stops before the end of the output ends at a line break when it contains one. Empty when no new output is available. Detached shells write stdout and stderr to one output, so the text does not separate them.
+     */
+    text: string;
+    /**
+     * Opaque cursor to pass to the next read of this task. Always present, even when no output was returned.
+     */
+    cursor: string;
+    exit?: TaskShellOutputExit;
+}
 /**
  * Refresh metadata for any detached background shells the runtime knows about. Use after a long pause to pick up exit/output state for shells running outside the agent loop.
  *
@@ -33132,6 +33719,22 @@ export declare function createServerRpc(connection: MessageConnection): {
          * @returns Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
          */
         search: (params: CatalogSearchRequest) => Promise<CatalogSearchResult>;
+        /**
+         * Retrieves one saved feed by its opaque ID, optionally filtered by trust tier. Requires catalog-feeds and catalog-search-credential-required, and uses the same authority, credential policy, optional session binding and candidate projection as catalog.search, so available entries are the same inert candidates, with the same installability, handles and display metadata, and install through the same confirmed flows. Entries keep the feed's order; an entry the runtime cannot present is returned as unavailable with a reason rather than failing the feed. No anonymous retry. Read-only: nothing is installed, configured, or persisted.
+         *
+         * @param params Retrieves one saved feed by its opaque ID. Requires catalog-feeds and catalog-search-credential-required; add catalog-search-session-bound with policySessionId to retain the selected session's authority for installation, exactly as for catalog.search.
+         *
+         * @returns Outcome of catalog.getSavedFeed: the feed with its entries, or one typed refusal. An entry that cannot be presented never fails the feed.
+         */
+        getSavedFeed: (params: CatalogGetSavedFeedRequest) => Promise<CatalogResourceSavedFeedResult>;
+        /**
+         * Retrieves one generated feed by strategy and key, such as telemetry/popular, optionally filtered by trust tier. Requires catalog-feeds and catalog-search-credential-required, and uses the same authority, credential policy, optional session binding and candidate projection as catalog.search, so available entries are the same inert candidates, with the same installability, handles and display metadata, and install through the same confirmed flows. Entries keep the feed's order; an entry the runtime cannot present is returned as unavailable with a reason rather than failing the feed. No anonymous retry. Read-only: nothing is installed, configured, or persisted.
+         *
+         * @param params Retrieves one generated feed, computed on every request, by strategy and key, such as `telemetry` and `popular`. Requires catalog-feeds and catalog-search-credential-required; add catalog-search-session-bound with policySessionId to retain the selected session's authority for installation, exactly as for catalog.search.
+         *
+         * @returns Outcome of catalog.getGeneratedFeed: the feed with its entries, or one typed refusal. An entry that cannot be presented never fails the feed.
+         */
+        getGeneratedFeed: (params: CatalogGetGeneratedFeedRequest) => Promise<CatalogResourceGeneratedFeedResult>;
         /**
          * Terminates one retained catalog selection group. A selected outcome returns the native host a fresh single-use candidate handle plus the original searchId for a later explicit mcp.planInstall call; non-selected outcomes release the group without producing a planning input. Candidate state, cards, URLs, credentials and private identifiers remain inside the runtime. The model-facing catalog_select tool projects the result separately and never exposes the candidate handle or searchId.
          *
@@ -33649,7 +34252,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
             /**
              * Begin an interactive login flow for a provider kind (dispatch is kind-only) and return its opaque flow id and first step.
              *
-             * @param params Begin an interactive login flow for a provider kind. Dispatch is kind-only.
+             * @param params Begin an interactive login flow for a provider kind, optionally reusing a cached base identity or explicitly requesting provider account selection.
              *
              * @returns A started login flow: its opaque id and first step.
              */
@@ -34248,6 +34851,14 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Progress information for the task, or null when no task with that ID is tracked.
          */
         getProgress: (params: TasksGetProgressRequest) => Promise<TasksGetProgressResult>;
+        /**
+         * Reads a detached shell task's output after a cursor, optionally waiting for new output or for the shell to finish.
+         *
+         * @param params Detached shell task to read output from, with an optional cursor and long-poll wait. waitMs defaults to zero (maximum 30000).
+         *
+         * @returns Output a detached shell task wrote after the request cursor, with the cursor for the next read.
+         */
+        readOutput: (params: TasksReadOutputRequest) => Promise<TasksReadOutputResult>;
         /**
          * Returns the first sync-waiting task that can currently be promoted to background mode.
          *