@github/copilot-sdk 1.0.29-preview.0 → 1.0.29-preview.10

package/dist/generated/rpc.d.ts

@@ -130,7 +130,7 @@ export type AuthEnumerateQuery = {
  */
 /** @experimental */
 export type LoginProviderKind = 
-/** OAuth github.com sign-in via the browser (web loopback + PKCE). */
+/** OAuth github.com sign-in, in the browser (web loopback + PKCE) or by device code — see the login method. */
 "githubDotCom"
 /** A GitHub Enterprise Cloud account — a GitHub account on a non-github.com host, e.g. *.ghe.com; the host is supplied interactively through the neutral input-required step. */
  | "proxima"
@@ -438,6 +438,18 @@ export type AuthEnumerateValue = {
      */
     kind: "loginAccounts";
 };
+/**
+ * How an interactive GitHub login is authorized.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AuthLoginMethod".
+ */
+/** @experimental */
+export type AuthLoginMethod = 
+/** Browser authorization with a loopback callback; the flow surfaces an `open-url` step. */
+"web"
+/** OAuth device authorization; the flow surfaces a `device-code` step with a one-time code, for terminals whose browser cannot reach a loopback callback. */
+ | "device-code";
 /**
  * How an interactive provider login should choose its base identity.
  *
@@ -451,7 +463,7 @@ export type AuthLoginMode =
 /** Explicitly ask the provider to present its account-selection UI instead of serving from a retained identity. */
  | "selectAccount";
 /**
- * One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra).
+ * One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra). A device-code flow surfaces its one-time code as `device-code`; the consumer shows the code, may open the verification URI, and calls advance, which resolves once the user has authorized the device.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AuthLoginStep".
@@ -503,6 +515,27 @@ export type AuthLoginStep = {
      * Login flow step variant discriminator.
      */
     kind: "error";
+} | {
+    /**
+     * One-time code the user enters at the verification URI.
+     */
+    userCode: string;
+    /**
+     * Page where the user enters the one-time code (consumer-driven browser-open).
+     */
+    verificationUri: string;
+    /**
+     * Seconds until the one-time code expires, measured from when this step was produced. Consumers can show a countdown or pick their own timeout instead of blocking until the provider rejects the code.
+     */
+    expiresIn: number;
+    /**
+     * Minimum seconds between authorization polls required by the provider. The runtime performs the polling itself for the duration of the single `advance` call, so this is informational (for example to drive a progress indicator); repeating `advance` is rejected as already advancing.
+     */
+    interval: number;
+    /**
+     * Login flow step variant discriminator.
+     */
+    kind: "device-code";
 };
 /**
  * Disposition of a login attempt, including pending user decisions.
@@ -1081,6 +1114,8 @@ export type CatalogCapability =
  | "catalog-search-credential-required"
 /** Captures the exact existing native session, account, host and connection for authenticated catalogue search, selection and planning. Requires catalog-search-credential-required; does not grant installation or create a session. */
  | "catalog-search-session-bound"
+/** Understands initial-page official-product recommendations for a full task and product with fixed pageSize 10. Requires session-bound, credential-required catalogue support. No anonymous retry, broad-search fallback or continuation. Authentication uses the selected GitHub.com user credential; successful capability negotiation does not establish service acceptance. */
+ | "catalog-recommend"
 /** Understands effect-free preparation, exact human-confirmed apply and owned removal for fully resolved personal remote MCP choices without supplied inputs or configured secrets. Advertised only when the real producer and lower owned admission are linked; requires original connection and bound session authority for new work. */
  | "mcp-confirmed-remote-installation"
 /** Extends mcp-confirmed-remote-installation to declared non-secret header and URL values and receipt-owned header secrets for personal remote MCP choices. Requires mcp-confirmed-remote-installation and bound session authority. Secret values are written only to the reviewed backend after confirmation and are never returned; package and stdio choices remain unsupported. Advertised only when owned secret effects and owned secret activation are linked. */
@@ -1211,6 +1246,8 @@ export type CatalogInvalidRequestField =
 "policySessionId"
 /** The search query was empty or longer than permitted. */
  | "query"
+/** The requested recommendation product was missing, blank or longer than permitted. */
+ | "product"
 /** The requested result count fell outside its permitted range. */
  | "limit"
 /** The requested candidate kinds were empty or contained a duplicate. */
@@ -1714,7 +1751,7 @@ export type CatalogSearchTotalCountRelation =
 /** No exact/full-query or lower-bound guarantee is available. */
 "unknown";
 /**
- * Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
+ * Outcome of catalog.search or catalog.recommend: either bounded inert candidates, or one typed refusal. Never a partial success.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "CatalogSearchResult".
@@ -5701,6 +5738,18 @@ export type SessionLimitPredictionUnavailableReason =
  */
 /** @experimental */
 export type SessionListEntry = LocalSessionMetadataValue | RemoteSessionMetadataValue;
+/**
+ * Peer boundary evaluated in the process hosting the native session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementScope".
+ */
+/** @experimental */
+export type SessionManagementScope = 
+/** Eligible local peers sharing the resolved configuration directory. */
+"all"
+/** Only peers hosted in this native runtime process. */
+ | "in-process";
 /**
  * Public-facing workspace metadata for this session, or null if the session has no associated workspace. Excludes runtime-internal fields (GitHub IDs, summary count, internal flags).
  *
@@ -5874,7 +5923,7 @@ export type SessionsOpenProgressStep =
 "load-session"
 /** Validating that the local repository matches the remote session's repository. */
  | "validate-repo"
-/** Checking the local working tree for uncommitted changes that would block the handoff. */
+/** Checking the local working tree for uncommitted changes, which stay in place and are carried onto the checked-out branch. */
  | "check-changes"
 /** Checking out the branch associated with the remote session in the local working tree. */
  | "checkout-branch"
@@ -8232,6 +8281,10 @@ export interface AgentGetCurrentResult {
  */
 /** @experimental */
 export interface AgentInfo {
+    /**
+     * Opaque identity of the plugin owning this agent. Matches plugins.list().plugins[].id on the same runtime host. Compare the complete value without parsing it. Omitted for non-plugin agents.
+     */
+    pluginId?: string;
     /**
      * Name of the agent. Use `id` as the stable selection identifier.
      */
@@ -8716,7 +8769,7 @@ export interface AgentsDiscoverRequest {
      */
     agentDirectories?: string[];
     /**
-     * Optional list of project directory paths to scan for project-scoped agents. When omitted or empty, only user/plugin/remote-independent agents are returned (no project scan).
+     * Optional list of project directory paths to scan for project-scoped agents. When omitted or empty, no project is scanned: user-level and globally enabled plugin agents are still returned, but agents of a plugin enabled only in a repository's settings are not.
      */
     projectPaths?: string[];
     /**
@@ -8955,6 +9008,10 @@ export interface AuthLoginBeginRequest {
      * The provider kind to sign in with.
      */
     kind: LoginProviderKind;
+    /**
+     * How to authorize: `web` (default) or `device-code`. Device code is offered for `githubDotCom` and `proxima`; `proxima` still asks for its host through `input-required` first.
+     */
+    method?: AuthLoginMethod;
     /**
      * Neutral identity-selection intent. Omitted is equivalent to default.
      */
@@ -9170,6 +9227,19 @@ export interface AutopilotObjectiveState {
      */
     creditLimit?: AutopilotObjectiveCreditLimit;
 }
+/**
+ * Client-resolved preference for retaining autopilot mode after objective completion or pause.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AutopilotObjectiveSetStayInAutopilotRequest".
+ */
+/** @experimental */
+export interface AutopilotObjectiveSetStayInAutopilotRequest {
+    /**
+     * Whether an objective's requested return to interactive mode is suppressed.
+     */
+    value: boolean;
+}
 /** @experimental */
 export interface AutopilotOptions {
     /**
@@ -10264,6 +10334,23 @@ export interface CanvasProviderUnregisterRequest {
      */
     connectionId: string;
 }
+/**
+ * Closes a canvas through its original owned or attached session namespace.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CanvasSourceCloseRequest".
+ */
+/** @experimental */
+export interface CanvasSourceCloseRequest {
+    /**
+     * Open canvas instance identifier
+     */
+    instanceId: string;
+    /**
+     * Exact authenticated local attachment identifier. Omit for the SDK connection's owned session.
+     */
+    attachId?: number | null;
+}
 /**
  * Options scoped to the built-in CAPI (Copilot API) provider.
  *
@@ -11484,6 +11571,31 @@ export interface CatalogPolicyRejectedError {
      */
     message: string;
 }
+/**
+ * Initial-page official-product recommendations for a complete task. The runtime fixes recommendationPolicy to official-product and pageSize to 10; callers cannot override the policy, request pagination or fall back to search.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CatalogRecommendRequest".
+ */
+/** @experimental */
+export interface CatalogRecommendRequest {
+    /**
+     * Required contract, including catalog-recommend, catalog-search-session-bound and catalog-search-credential-required.
+     */
+    contract: CatalogClientContract;
+    /**
+     * Existing attached local session whose account, host and connection own the candidate references. Never creates or resumes a session.
+     */
+    policySessionId: string;
+    /**
+     * Full original task, including action, account, output and host requirements. Forwarded without trimming or rewriting and excluded from telemetry.
+     */
+    query: string;
+    /**
+     * Requested product. Agent Finder resolves aliases and applies its versioned official-product approvals before limiting results.
+     */
+    product: string;
+}
 /**
  * A computed Skill install plan. Nothing has been applied.
  *
@@ -13756,6 +13868,10 @@ export interface DiscoveredExtension {
  */
 /** @experimental */
 export interface DiscoveredExtensionPlugin {
+    /**
+     * Opaque identity of the owning plugin. Matches plugins.list().plugins[].id on the same runtime host. Compare the complete value without parsing it. May be absent on older runtimes.
+     */
+    id?: string;
     /**
      * Installed plugin name
      */
@@ -13840,6 +13956,14 @@ export interface DiscoveredHook {
      * Durable content hash used by hook enablement. Identical actions may intentionally share this key. Omitted when changing the user's disabled-hooks setting cannot change the action's current server-discovered state, including managed-policy hooks, session-start prompt actions, actions suppressed by disable-all settings, and projectless plugin actions that require project-directory expansion.
      */
     disableKey?: string;
+    /**
+     * File URI of the document defining this action on the selected runtime host, not the command or script it executes. Inline hooks point to their containing settings document or plugin manifest. Omitted for sources without a backing file, such as registry policy.
+     */
+    definitionFileUri?: string;
+    /**
+     * Opaque identity of the plugin owning this action. Matches plugins.list().plugins[].id and MCP effectiveSource.plugin.id on the same runtime host. Compare the complete value without parsing it. Omitted for non-plugin hooks.
+     */
+    pluginId?: string;
 }
 /**
  * MCP server discovered by `mcp.discover`, with config source, optional plugin source, transport type, and enabled state.
@@ -15065,6 +15189,40 @@ export interface FolderTrustCheckResult {
      */
     trusted: boolean;
 }
+/**
+ * A pre-resolved address for a GitHub request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GitHubFetchPinnedAddress".
+ */
+/** @experimental */
+export interface GitHubFetchPinnedAddress {
+    /**
+     * Address the network transport must use.
+     */
+    address: string;
+}
+/**
+ * Proxy environment for one authenticated GitHub request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GitHubFetchProxyEnvironment".
+ */
+/** @experimental */
+export interface GitHubFetchProxyEnvironment {
+    /**
+     * Proxy for HTTP requests.
+     */
+    httpProxy?: string;
+    /**
+     * Proxy for HTTPS requests.
+     */
+    httpsProxy?: string;
+    /**
+     * Hosts that bypass the proxy.
+     */
+    noProxy?: string;
+}
 /**
  * Owner, name, and host of a GitHub repository, as resolved from a git remote URL.
  *
@@ -15708,6 +15866,39 @@ export interface HistorySkippedFileRestore {
      */
     reason: HistoryFileRestoreSkipReason;
 }
+/**
+ * Compaction settings for this session. Each call replaces the previous settings: an omitted field returns to its default. Settings live in memory until the session ends; re-apply them after resuming a session in a new process.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistorySetCompactionConfigRequest".
+ */
+/** @experimental */
+export interface HistorySetCompactionConfigRequest {
+    /**
+     * Model that summarizes this session's conversation when it compacts,
+     * instead of the session's own model. Applies only when both are Copilot
+     * models the session may use; for a BYOK or provider session, or a model
+     * the session's catalog or allowed-model policy rejects, compaction
+     * summarizes on the session's model. Takes precedence over any runtime
+     * experiment that picks a compaction model. Blank values are ignored.
+     */
+    model?: string;
+    /**
+     * Summarization instruction sent as the final user message of a
+     * compaction request, replacing the built-in prompt entirely; the caller
+     * owns the summary's format. `/compact` focus instructions and a note that
+     * tools are unavailable are appended to it. Blank values are ignored.
+     */
+    prompt?: string;
+    /**
+     * Reasoning effort for compaction requests: one of `none`, `minimal`,
+     * `low`, `medium`, `high`, `xhigh` or `max`. Applies when the model that
+     * summarizes supports it; otherwise the request keeps its usual effort.
+     * Takes precedence over any runtime experiment that adjusts compaction
+     * reasoning effort. Any other value is rejected.
+     */
+    reasoningEffort?: string;
+}
 /**
  * Markdown summary of the conversation context (empty when not available).
  *
@@ -16960,6 +17151,10 @@ export interface InstalledPluginInfo {
      * Whether the plugin is currently enabled for new sessions
      */
     enabled: boolean;
+    /**
+     * Absolute local directory containing this plugin's installed content, including disabled installations. Absent when the runtime has no resolved content directory. This is the plugin root, not its marketplace directory; clients must not forward it back as an additional plugin.
+     */
+    rootPath?: string;
     /**
      * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — a plugin belonging to a directory/local marketplace, which is loaded from its real directory on every pass instead of a copy under the installed-plugins cache. Its presence is what marks a listed plugin as live: such a plugin is always present on disk, so `enabled` is its only meaningful state and it is never "not installed".
      */
@@ -16992,6 +17187,10 @@ export interface InstalledPluginInfo {
      * HTTPS URL of the plugin's icon on raw.githubusercontent.com, retained from the catalogue entry it was installed from. Untrusted external content: load it without credentials. Present only for a direct install pinned to one GitHub commit whose catalogue entry had an icon.
      */
     iconUrl?: string;
+    /**
+     * Opaque plugin identity in this runtime's inventory. Matches MCP effectiveSource.plugin.id for the same plugin. Stable across enablement changes, updates and restarts while the installation source is unchanged; not a cross-host identifier or a mutation argument. Compare the complete value without parsing it. May be absent on older runtimes.
+     */
+    id?: string;
 }
 /**
  * The GitHub repository and commit an installed plugin is pinned to.
@@ -17115,6 +17314,10 @@ export interface InstructionsGetSourcesResult {
  */
 /** @experimental */
 export interface InstructionSource {
+    /**
+     * Opaque identity of the plugin owning this instruction source. Matches plugins.list().plugins[].id on the same runtime host. Compare the complete value without parsing it. Omitted for non-plugin sources.
+     */
+    pluginId?: string;
     /**
      * Unique identifier for this source (used for toggling)
      */
@@ -17503,7 +17706,7 @@ export interface LocalSessionMetadataValue {
      */
     name?: string;
     /**
-     * Runtime client name that created/last resumed this session
+     * Runtime client name that created this session
      */
     clientName?: string;
     /**
@@ -17522,6 +17725,10 @@ export interface LocalSessionMetadataValue {
      * GitHub task ID, when this local session is bound to one. Only present for local sessions exported to remote control.
      */
     mcTaskId?: string;
+    /**
+     * Runtime client name that most recently ran this session: the client that created it, or a client that resumed it and then ran it. Resuming a session only to observe it does not change this. Omitted when unknown, such as for sessions persisted before this field existed.
+     */
+    lastClientName?: string;
 }
 /**
  * Pre-resolved working-directory context for session startup.
@@ -17740,6 +17947,43 @@ export interface ManagedPluginRetryEntry {
      */
     error?: string;
 }
+/**
+ * An opted-in local session, reported by its live owner.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedSessionInfo".
+ */
+/** @experimental */
+export interface ManagedSessionInfo {
+    /**
+     * Live peer's session identifier.
+     */
+    sessionId: string;
+    /**
+     * Human-readable peer name.
+     */
+    name: string;
+    /**
+     * Peer's current working directory.
+     */
+    cwd: string;
+    /**
+     * Peer's local session-state directory containing events.jsonl, when known.
+     */
+    sessionStatePath?: string;
+    /**
+     * Either idle or busy. A busy session may still accept messages.
+     */
+    state: string;
+    /**
+     * Peer's selected model, when known.
+     */
+    model?: string;
+    /**
+     * The session that created this root through session management, if any.
+     */
+    parentSessionId?: string;
+}
 /**
  * Lock state and provenance of one managed setting.
  *
@@ -18123,6 +18367,10 @@ export interface MarketplaceInfo {
      * Whether the managed marketplace currently resolved into the runtime marketplace registry. Set to false when the desired managed entry is retained for governance visibility after loading or reconciliation failed.
      */
     available?: boolean;
+    /**
+     * True when the signed-in account's GitHub Team provides this marketplace and no user, repository, or default entry of the same name exists. Team marketplaces are not persisted, so they cannot be removed.
+     */
+    team?: boolean;
 }
 /**
  * All registered marketplaces, including built-in defaults.
@@ -18269,6 +18517,12 @@ export interface McpAppsCallToolRequest {
     arguments?: {
         [k: string]: JsonValue | undefined;
     };
+    /**
+     * MCP tools/call request metadata, forwarded separately from tool arguments. Host-owned progress tokens and protocol metadata take precedence.
+     */
+    _meta?: {
+        [k: string]: JsonValue | undefined;
+    };
     /**
      * **Required.** Server whose ui:// view issued the request. Per SEP-1865 ('callable by the app from this server only'), the call is rejected when this differs from `serverName`, and rejected outright when missing.
      */
@@ -23901,6 +24155,24 @@ export interface PermissionRulesSet {
      */
     denied: PermissionRule[];
 }
+/**
+ * Available permission modes, derived from current session policy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PermissionsCapabilities".
+ */
+/** @experimental */
+export interface PermissionsCapabilities {
+    /**
+     * Whether LLM-assisted approval is enabled for this session.
+     */
+    assistedApproval: boolean;
+    /**
+     * Whether managed policy currently permits unconditional approval.
+     * Stays true while managed policy is still resolving.
+     */
+    bypassPermissions: boolean;
+}
 /**
  * No parameters.
  *
@@ -24048,7 +24320,7 @@ export interface PermissionsConfigureParams {
      */
     authenticatedAuthority?: AuthenticatedAuthorityUpdate;
     /**
-     * Declares whether this connection's registered permission handler applies non-human host policy to the tools this connection registered. When true, unattended Assisted Autopilot sends permission requests for those tools to the handler before runtime Assisted Approval or unattended fallback can settle them. All other requests, including shell commands, file access, URLs, and tools registered by other connections or extensions, keep runtime settlement. Managed policy and other runtime enforcement still take precedence. Only the session's owning non-extension connection may set this field. The declaration ends when that connection detaches or the session is resumed, so hosts must reapply it after resume. Omit to leave unchanged; false clears it. Without a declaration, registered handlers are not consulted during unattended Assisted Autopilot. Remote sessions are not supported.
+     * Declares whether this connection's registered permission handler applies non-human host policy to the tools and canvases this connection registered. When true, unattended Assisted Autopilot sends permission requests for those tools, and `open_canvas` and `invoke_canvas_action` requests whose target canvas this connection registered, to the handler before runtime Assisted Approval or unattended fallback can settle them. All other requests, including shell commands, file access, URLs, and tools or canvases registered by other connections or extensions, keep runtime settlement. Managed policy and other runtime enforcement still take precedence. Only the session's owning non-extension connection may set this field. The declaration ends when that connection detaches or the session is resumed, so hosts must reapply it after resume. Omit to leave unchanged; false clears it. Without a declaration, registered handlers are not consulted during unattended Assisted Autopilot. Remote sessions are not supported.
      */
     hostPolicyPermissionHandler?: boolean;
 }
@@ -24602,6 +24874,10 @@ export interface Plugin {
      * Opaque stable identity for a direct plugin source.
      */
     directSourceId?: string;
+    /**
+     * Absolute local directory containing this plugin's resolved content, including disabled installations. Absent when no content directory is resolved. This is the plugin root, not its marketplace directory; clients must not forward it back as an additional plugin.
+     */
+    rootPath?: string;
     /**
      * Absolute marketplace directory for a live plugin.
      */
@@ -24622,6 +24898,10 @@ export interface Plugin {
      * Whether this managed desired plugin has an installed or live record.
      */
     installed?: boolean;
+    /**
+     * Opaque plugin identity in this runtime's inventory. Matches global inventory id and MCP effectiveSource.plugin.id for the same plugin. Stable across enablement changes, updates and restarts while the source is unchanged. Session-only plugin identities are scoped to their session; not a cross-host identifier or a mutation argument. Compare the complete value without parsing it. May be absent on older runtimes.
+     */
+    id?: string;
 }
 /**
  * Applies exactly one retained verified Agent Plugin installation plan.
@@ -24709,6 +24989,10 @@ export interface PluginInstallResult {
      * Set when the install path is deprecated (e.g. direct repo / URL / local installs). Callers should surface this to end users.
      */
     deprecationWarning?: string;
+    /**
+     * Report-and-ignore warnings raised while reading the plugin's manifest, such as a field the manifest's schema does not define and the loader therefore ignored. Callers should surface these to end users: a plugin whose skills sit behind an ignored field otherwise installs, lists, and contributes nothing, with no signal to its author. Absent when the manifest raised none.
+     */
+    warnings?: string[];
 }
 /**
  * Plugins installed for the session, with their enabled state and version metadata.
@@ -24781,7 +25065,7 @@ export interface PluginsBuiltinSetRequest {
 /** @experimental */
 export interface PluginsDisableRequest {
     /**
-     * Plugin names or "plugin@marketplace" specs to disable. Unknown names are ignored. Non-marketplace direct installs cannot be disabled via this API; uninstall them instead. Plugin-owned MCP servers are stopped in active sessions immediately; other plugin contributions remain available until each session reloads plugins.
+     * Plugin names, "plugin@marketplace" specs, or opaque directSourceId values from inventory to disable. Use directSourceId to distinguish same-named direct installations. Unknown targets and session-only plugin-directory mounts are ignored. Direct-install decisions persist on the installation record. Plugin-owned MCP servers are stopped in active sessions immediately; other plugin contributions remain available until each session reloads plugins.
      */
     names: string[];
     /**
@@ -24798,7 +25082,7 @@ export interface PluginsDisableRequest {
 /** @experimental */
 export interface PluginsEnableRequest {
     /**
-     * Plugin names or "plugin@marketplace" specs to enable. Unknown names are ignored. Non-marketplace direct installs are always enabled and cannot be toggled via this API.
+     * Plugin names, "plugin@marketplace" specs, or opaque directSourceId values from inventory to enable. Use directSourceId to distinguish same-named direct installations. Unknown targets and session-only plugin-directory mounts are ignored. Direct-install decisions persist on the installation record; active sessions must reload plugins to load newly enabled contributions.
      */
     names: string[];
     /**
@@ -25286,6 +25570,19 @@ export interface ProviderSessionToken {
      */
     expiresAt?: string;
 }
+/**
+ * Credential-free provider configuration status for the selected model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderStatus".
+ */
+/** @experimental */
+export interface ProviderStatus {
+    /**
+     * Whether the selected model uses a custom provider instead of requiring GitHub authentication.
+     */
+    hasCustomProvider: boolean;
+}
 /**
  * Authoritative BYOK provider and model registry snapshot to apply atomically to the session.
  *
@@ -27905,6 +28202,10 @@ export interface ServerInstructionSourceList {
  */
 /** @experimental */
 export interface ServerSkill {
+    /**
+     * Opaque identity of the plugin owning this skill. Matches plugins.list().plugins[].id on the same runtime host. Compare the complete value without parsing it. Omitted for non-plugin skills.
+     */
+    pluginId?: string;
     /**
      * Unique identifier for the skill
      */
@@ -29063,6 +29364,282 @@ export interface SessionManagedSettings {
      */
     permissions?: SessionManagedPermissions;
 }
+/**
+ * Closes one live opted-in descendant without deleting its saved history or closing its children.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementCloseRequest".
+ */
+/** @experimental */
+export interface SessionManagementCloseRequest {
+    /**
+     * Live created descendant whose owning host should close it.
+     */
+    targetSessionId: string;
+}
+/**
+ * Completion of the existing non-deleting close lifecycle.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementCloseResult".
+ */
+/** @experimental */
+export interface SessionManagementCloseResult {
+    /**
+     * True after the owning host has completed the existing session-close lifecycle.
+     */
+    closed: boolean;
+}
+/**
+ * Updates the session's live policy without changing persistent host settings.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementConfigureRequest".
+ */
+/** @experimental */
+export interface SessionManagementConfigureRequest {
+    /**
+     * Expected workspace for host activation. Required when enabling an interactive CLI session.
+     */
+    cwd?: string;
+    /**
+     * Enabling resets all session management operations to enabled, then applies overrides.
+     */
+    enabled?: boolean;
+    /**
+     * Peer boundary. Preserved when the master switch changes.
+     */
+    scope?: SessionManagementScope;
+    /**
+     * Individual tool overrides, applied after the master switch.
+     */
+    tools?: SessionManagementToolOverrides;
+    /**
+     * Bind creation to this SDK connection's sessionManagement.create callback.
+     */
+    hasCreateHandler?: boolean;
+}
+/**
+ * Per-operation overrides for an enabled session management policy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementToolOverrides".
+ */
+/** @experimental */
+export interface SessionManagementToolOverrides {
+    /**
+     * Allow discovering eligible peer sessions.
+     */
+    list?: boolean;
+    /**
+     * Allow requesting an independent session from the owning host.
+     */
+    create?: boolean;
+    /**
+     * Allow delivering peer text to another eligible session.
+     */
+    message?: boolean;
+    /**
+     * Allow closing this session's live created descendants.
+     */
+    close?: boolean;
+}
+/**
+ * Host callback. The host owns workspace records, UI, approval routing and cleanup.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementCreateHostRequest".
+ */
+/** @experimental */
+export interface SessionManagementCreateHostRequest {
+    /**
+     * Target session identifier
+     */
+    sessionId: string;
+    /**
+     * The originating session; the host must not escalate its permissions.
+     */
+    parentSessionId: string;
+    /**
+     * Runtime-allocated identity. The host must create a fresh session with this exact ID.
+     */
+    newSessionId: string;
+    /**
+     * The new session must use this workspace and configuration directory.
+     */
+    cwd: string;
+    /**
+     * Parent's resolved configuration directory, which the host must preserve.
+     */
+    configDir: string;
+    /**
+     * Must not be broadened by the creating host.
+     */
+    permissionMode: PermissionMode;
+    /**
+     * Effective model to apply when creating the child.
+     */
+    model?: string;
+    /**
+     * Provider owning the effective model, when specified.
+     */
+    providerId?: string;
+    /**
+     * Effective reasoning effort, when specified.
+     */
+    reasoningEffort?: string;
+    /**
+     * Effective model-supported context tier, when specified.
+     */
+    contextTier?: ContextTier;
+    /**
+     * The host must preserve the parent's current model restrictions.
+     */
+    allowedModels?: string[];
+    /**
+     * Optional short name supplied for the independent session.
+     */
+    name?: string;
+}
+/**
+ * Requests a separate session. Omitted launch options inherit the caller's current configuration.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementCreateRequest".
+ */
+/** @experimental */
+export interface SessionManagementCreateRequest {
+    /**
+     * Initial task, delivered as peer text after successful creation.
+     */
+    prompt: string;
+    /**
+     * Optional short name for the independent session.
+     */
+    name?: string;
+    /**
+     * Absolute working directory. Defaults to the parent's current directory.
+     */
+    cwd?: string;
+    /**
+     * Optional model override; omission uses the parent's current model.
+     */
+    model?: string;
+    /**
+     * Optional effort supported by the selected model.
+     */
+    reasoningEffort?: string;
+    /**
+     * Uses the selected model's supported default or long-context tier, not an arbitrary token count.
+     */
+    contextTier?: ContextTier;
+}
+/**
+ * Identifies a session owned and supervised by the creating host.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementCreateResult".
+ */
+/** @experimental */
+export interface SessionManagementCreateResult {
+    /**
+     * Runtime-allocated identifier of the newly created session.
+     */
+    sessionId: string;
+}
+/**
+ * Lists opted-in local peers. The caller is omitted.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementListRequest".
+ */
+/** @experimental */
+export interface SessionManagementListRequest {
+    /**
+     * Optional exact working-directory filter.
+     */
+    cwd?: string;
+}
+/**
+ * Eligible live peers reported by their owning runtimes.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementListResult".
+ */
+/** @experimental */
+export interface SessionManagementListResult {
+    /**
+     * Matching peers, excluding the caller.
+     */
+    sessions: ManagedSessionInfo[];
+}
+/**
+ * Sends peer text, never human approval, to another opted-in session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementMessageRequest".
+ */
+/** @experimental */
+export interface SessionManagementMessageRequest {
+    /**
+     * Eligible live peer that should receive the message.
+     */
+    targetSessionId: string;
+    /**
+     * Nonempty UTF-8 text, at most 16 KiB.
+     */
+    message: string;
+}
+/**
+ * Acceptance is not a completed turn or a reply.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementMessageResult".
+ */
+/** @experimental */
+export interface SessionManagementMessageResult {
+    /**
+     * True when the destination has accepted the peer message.
+     */
+    accepted: boolean;
+    /**
+     * Destination title captured by the receiving runtime at message admission.
+     */
+    targetSessionName?: string;
+}
+/**
+ * Opt-in policy for local session management.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionManagementPolicy".
+ */
+/** @experimental */
+export interface SessionManagementPolicy {
+    /**
+     * Master switch. Off by default.
+     */
+    enabled: boolean;
+    /**
+     * Discovery and direct access boundary. Defaults to all eligible local peers.
+     */
+    scope: SessionManagementScope;
+    /**
+     * Allow listing opted-in sessions in this configuration directory.
+     */
+    list: boolean;
+    /**
+     * Allow requesting a new session from the owning host.
+     */
+    create: boolean;
+    /**
+     * Allow sending a peer message to another opted-in session.
+     */
+    message: boolean;
+    /**
+     * Allow closing sessions created by this session or its descendants. On by default.
+     */
+    close: boolean;
+}
 /**
  * Records which IDE the host is connected to, or clears it.
  *
@@ -29938,7 +30515,7 @@ export interface SessionsOpenProgress {
 /** @experimental */
 export interface SessionPluginsDisableRequest {
     /**
-     * Plugin names or "plugin@marketplace" specs to disable. Unknown names are ignored. Non-marketplace direct installs cannot be disabled via this API; uninstall them instead. Plugin-owned MCP servers are stopped in active sessions immediately; other plugin contributions remain available until each session reloads plugins.
+     * Plugin names, "plugin@marketplace" specs, or opaque directSourceId values from inventory to disable. Use directSourceId to distinguish same-named direct installations. This persists user-level enablement, not a session-only override. Unknown targets and session-only plugin-directory mounts are ignored. Plugin-owned MCP servers are stopped in active sessions immediately; other plugin contributions remain available until each session reloads plugins.
      */
     names: string[];
 }
@@ -29951,7 +30528,7 @@ export interface SessionPluginsDisableRequest {
 /** @experimental */
 export interface SessionPluginsEnableRequest {
     /**
-     * Plugin names or "plugin@marketplace" specs to enable. Unknown names are ignored. Non-marketplace direct installs are always enabled and cannot be toggled via this API.
+     * Plugin names, "plugin@marketplace" specs, or opaque directSourceId values from inventory to enable. Use directSourceId to distinguish same-named direct installations. This persists user-level enablement, not a session-only override. Unknown targets and session-only plugin-directory mounts are ignored; active sessions must reload plugins to load newly enabled contributions.
      */
     names: string[];
 }
@@ -31659,6 +32236,10 @@ export interface ShutdownRequest {
  */
 /** @experimental */
 export interface Skill {
+    /**
+     * Opaque identity of the plugin owning this skill. Matches plugins.list().plugins[].id on the same runtime host. Compare the complete value without parsing it. Omitted for non-plugin skills.
+     */
+    pluginId?: string;
     /**
      * Unique identifier for the skill
      */
@@ -36548,7 +37129,7 @@ export interface WorkspacesStatFileResult {
 /** @experimental */
 export interface WorkspacesTruncateSummariesRequest {
     /**
-     * Number of newest summaries to keep.
+     * Highest checkpoint number to keep. Checkpoints 1 through keepCount (the oldest) are kept and every later checkpoint is deleted; 0 deletes all.
      */
     keepCount: number;
 }
@@ -38445,9 +39026,17 @@ export declare function createServerRpc(connection: MessageConnection): {
          *
          * @param params A bounded catalog search. Both the query length and the result count are capped by the schema so a caller cannot request an unbounded scan.
          *
-         * @returns Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
+         * @returns Outcome of catalog.search or catalog.recommend: either bounded inert candidates, or one typed refusal. Never a partial success.
          */
         search: (params: CatalogSearchRequest) => Promise<CatalogSearchResult>;
+        /**
+         * Requests the initial page of at most ten official-product recommendations for a complete task and product, bound to an existing attached local session. Requires catalog-recommend, catalog-search-session-bound and catalog-search-credential-required. Uses the selected GitHub.com user credential on the fixed Agent Finder recommendations route; successful capability negotiation does not establish service acceptance. Returns the existing inert catalog candidates and retained install references with the typed catalog refusal union. No anonymous retry, unfiltered search fallback or continuation is performed. Server-owned product approvals establish provenance, not task suitability. Read-only: nothing is installed, configured or persisted.
+         *
+         * @param params Initial-page official-product recommendations for a complete task. The runtime fixes recommendationPolicy to official-product and pageSize to 10; callers cannot override the policy, request pagination or fall back to search.
+         *
+         * @returns Outcome of catalog.search or catalog.recommend: either bounded inert candidates, or one typed refusal. Never a partial success.
+         */
+        recommend: (params: CatalogRecommendRequest) => Promise<CatalogSearchResult>;
         /**
          * Retrieves one saved feed by its opaque ID, optionally filtered by trust tier. Requires catalog-feeds and catalog-search-credential-required, and uses the same authority, credential policy, optional session binding and candidate projection as catalog.search, so available entries are the same inert candidates, with the same installability, handles and display metadata, and install through the same confirmed flows. Entries keep the feed's order; an entry the runtime cannot present is returned as unavailable with a reason rather than failing the feed. No anonymous retry. Read-only: nothing is installed, configured, or persisted.
          *
@@ -38805,6 +39394,49 @@ export declare function createServerRpc(connection: MessageConnection): {
 };
 /** Create typed session-scoped RPC methods. */
 export declare function createSessionRpc(connection: MessageConnection, sessionId: string): {
+    /** @experimental */
+    management: {
+        /**
+         * Updates opt-in session management policy live. Enabling the master enables all tools before applying individual overrides. Opt-in is scoped to the session's configuration directory.
+         *
+         * @param params Updates the session's live policy without changing persistent host settings.
+         *
+         * @returns Opt-in policy for local session management.
+         */
+        configure: (params: SessionManagementConfigureRequest) => Promise<SessionManagementPolicy>;
+        /**
+         * Lists other live, opted-in sessions in the same configuration directory. Requires the list tool to be enabled.
+         *
+         * @param params Lists opted-in local peers. The caller is omitted.
+         *
+         * @returns Eligible live peers reported by their owning runtimes.
+         */
+        list: (params: SessionManagementListRequest) => Promise<SessionManagementListResult>;
+        /**
+         * Injects peer text into an opted-in session. Wakes an idle agent and safely queues delivery to a busy agent. Acceptance does not imply an answer or completed task.
+         *
+         * @param params Sends peer text, never human approval, to another opted-in session.
+         *
+         * @returns Acceptance is not a completed turn or a reply.
+         */
+        message: (params: SessionManagementMessageRequest) => Promise<SessionManagementMessageResult>;
+        /**
+         * Asks the owning host to create and supervise a separate session, preserving permissions and model restrictions. Omitted model, reasoning effort, context tier and cwd inherit the caller's current values; explicit overrides use normal model validation and workspace trust. Records durable creation lineage before delivering the initial task as peer text. Returns the new session ID, not task completion. Requires the create tool and a host creation handler.
+         *
+         * @param params Requests a separate session. Omitted launch options inherit the caller's current configuration.
+         *
+         * @returns Identifies a session owned and supervised by the creating host.
+         */
+        create: (params: SessionManagementCreateRequest) => Promise<SessionManagementCreateResult>;
+        /**
+         * Closes a live opted-in session created by the caller or one of its descendants, preserving saved history and leaving descendants open. Requires the close capability to be enabled. Self, ancestors, siblings and unrelated sessions cannot be closed.
+         *
+         * @param params Closes one live opted-in descendant without deleting its saved history or closing its children.
+         *
+         * @returns Completion of the existing non-deleting close lifecycle.
+         */
+        close: (params: SessionManagementCloseRequest) => Promise<SessionManagementCloseResult>;
+    };
     /** @experimental */
     providers: {
         /**
@@ -38988,7 +39620,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         /** @experimental */
         login: {
             /**
-             * Begin an interactive login flow for a provider kind (dispatch is kind-only) and return its opaque flow id and first step.
+             * Begin an interactive login flow for a provider kind, optionally selecting how to authorize (`method`: `web` by default, or `device-code`), and return its opaque flow id and first step.
              *
              * @param params Begin an interactive login flow for a provider kind, optionally reusing a cached base identity or explicitly requesting provider account selection.
              *
@@ -39000,7 +39632,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
              *
              * @param params Advance an in-flight login flow, optionally fulfilling an input-required step.
              *
-             * @returns One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra).
+             * @returns One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra). A device-code flow surfaces its one-time code as `device-code`; the consumer shows the code, may open the verification URI, and calls advance, which resolves once the user has authorized the device.
              */
             advance: (params: AuthLoginAdvanceRequest) => Promise<AuthLoginStep>;
             /**
@@ -39443,6 +40075,12 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Canonical runtime state for the session's current autopilot objective.
          */
         getState: () => Promise<AutopilotObjectiveGetStateResult>;
+        /**
+         * Sets whether completing or pausing this session's objective preserves autopilot mode. This in-memory preference defaults to true and must be reapplied when attaching a client.
+         *
+         * @param params Client-resolved preference for retaining autopilot mode after objective completion or pause.
+         */
+        setStayInAutopilot: (params: AutopilotObjectiveSetStayInAutopilotRequest) => Promise<void>;
     };
     /** @experimental */
     completions: {
@@ -40182,6 +40820,12 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns The selectable model entries and selection ids synthesized for the synchronized BYOK models.
          */
         sync: (params: ProviderSyncRequest) => Promise<ProviderSyncResult>;
+        /**
+         * Returns credential-free provider configuration status for the selected model. This does not validate provider credentials or contact the provider.
+         *
+         * @returns Credential-free provider configuration status for the selected model.
+         */
+        getStatus: () => Promise<ProviderStatus>;
         /**
          * Withdraws named host-managed models from the session's BYOK registry, leaving every other entry untouched. The scoped counterpart to `provider.sync`: a snapshot can only describe entries the caller knows about, so using it to remove one model silently withdraws rows registered by another source, such as a plugin calling `provider.add` at runtime. Naming what to remove leaves unrelated entries alone. Selection ids that are not registered are ignored, so withdrawal is idempotent. A provider is removed only when one of the withdrawn models was the last entry referencing it; a provider that simply has no models, which is the normal state while its rows are supplied by catalog discovery, is left in place.
          *
@@ -40522,6 +41166,12 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Current permission mode.
          */
         getMode: () => Promise<PermissionsGetModeResult>;
+        /**
+         * Returns the approval modes currently available under the session's feature and managed permission policy. This read does not change permissions; mutations must still check their authoritative result because policy may change.
+         *
+         * @returns Available permission modes, derived from current session policy.
+         */
+        getCapabilities: () => Promise<PermissionsCapabilities>;
         /**
          * Adds or removes session-scoped or location-scoped permission rules.
          *
@@ -40842,6 +41492,12 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Indicates whether an in-progress background compaction was cancelled.
          */
         cancelBackgroundCompaction: () => Promise<HistoryCancelBackgroundCompactionResult>;
+        /**
+         * Replaces this local session's compaction settings: the model, prompt and reasoning effort its automatic and manual compactions use. Each call replaces all three: an omitted field returns to its default. Settings are held in memory only, so re-apply them after resuming the session in a new process. A change applies to compactions that start afterwards, except that automatic compactions keep the model the running turn already chose for them until that turn ends; a compaction already in progress may still pick up a new reasoning effort. Rejects on a remote session.
+         *
+         * @param params Compaction settings for this session. Each call replaces the previous settings: an omitted field returns to its default. Settings live in memory until the session ends; re-apply them after resuming a session in a new process.
+         */
+        setCompactionConfig: (params: HistorySetCompactionConfigRequest) => Promise<void>;
         /**
          * Aborts any in-progress manual compaction on a local session.
          *