@github/copilot-sdk 1.0.29 → 1.0.30-preview.0

package/dist/generated/rpc.d.ts

@@ -2172,6 +2172,211 @@ export type DebugCollectLogsResultKind =
 "archive"
 /** A directory containing the collected files was written. */
  | "directory";
+/**
+ * The answer to one question. Probabilities are normalized the same way for every backend.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionAnswer".
+ */
+/** @experimental */
+export type DecisionAnswer = {
+    /**
+     * Name of the question this answers.
+     */
+    name: string;
+    /**
+     * Probability, from 0 to 1, that the answer is yes.
+     */
+    probability: number;
+    /**
+     * Answered question kind discriminator.
+     */
+    kind: "boolean";
+} | {
+    /**
+     * Name of the question this answers.
+     */
+    name: string;
+    /**
+     * Value of the most probable option. On a tie, the tied option listed first.
+     */
+    value: string;
+    /**
+     * True when another option has exactly the same probability as `value`. Check this, not only `confidence`.
+     */
+    tied: boolean;
+    /**
+     * How peaked the distribution is: `(p_max - 1/n) / (1 - 1/n)`. Not a probability of being correct.
+     */
+    confidence: number;
+    /**
+     * The backend's own confidence, which may use a different formula. Diagnostic only.
+     */
+    vendorConfidence?: number;
+    /**
+     * Probability of every option, in request order, summing to 1.
+     */
+    probabilities: DecisionOptionProbability[];
+    /**
+     * Answered question kind discriminator.
+     */
+    kind: "choice";
+} | {
+    /**
+     * Name of the question this answers.
+     */
+    name: string;
+    /**
+     * Expected level position: the sum of each level's zero-based position times its probability.
+     */
+    score: number;
+    /**
+     * Label of the most probable level. On a tie, the lower level.
+     */
+    level: string;
+    /**
+     * How peaked the distribution is: `(p_max - 1/n) / (1 - 1/n)`. Not a probability of being correct.
+     */
+    confidence: number;
+    /**
+     * The backend's own confidence, which may use a different formula. Diagnostic only.
+     */
+    vendorConfidence?: number;
+    /**
+     * Probability of every level, from lowest to highest, summing to 1.
+     */
+    probabilities: DecisionLevelProbability[];
+    /**
+     * Answered question kind discriminator.
+     */
+    kind: "score";
+} | {
+    /**
+     * Name of the question that was refused.
+     */
+    name: string;
+    /**
+     * Answered question kind discriminator.
+     */
+    kind: "refused";
+};
+/**
+ * Context shared by every question in a request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionContext".
+ */
+/** @experimental */
+export type DecisionContext = {
+    /**
+     * The text the questions are about.
+     */
+    text: string;
+    /**
+     * Context format discriminator.
+     */
+    kind: "text";
+} | {
+    /**
+     * A JSON object, or an array of JSON objects. Other JSON values are rejected with `invalidRequest`.
+     */
+    value: JsonValue;
+    /**
+     * Context format discriminator.
+     */
+    kind: "json";
+};
+/**
+ * Why a decisions request failed.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionErrorKind".
+ */
+/** @experimental */
+export type DecisionErrorKind = 
+/** The decisions feature is disabled for this runtime. */
+"notEnabled"
+/** No usable decision model: unknown id, not entitled, or rejected by the backend. */
+ | "noModel"
+/** No account, or the backend rejected its credential. */
+ | "unauthenticated"
+/** The request is malformed or breaks a limit other than size. */
+ | "invalidRequest"
+/** The request is over a size limit. */
+ | "tooLarge"
+/** The backend answered with something that breaks the answer rules. */
+ | "upstreamProtocol"
+/** The backend is rate limiting this account. */
+ | "rateLimited"
+/** The deadline passed. */
+ | "timeout"
+/** The backend could not be reached or failed. */
+ | "unavailable"
+/** Too many decisions requests are already running or waiting on this connection. */
+ | "overloaded";
+/**
+ * One question for the decision model to answer about the context.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionQuestion".
+ */
+/** @experimental */
+export type DecisionQuestion = {
+    /**
+     * Caller-chosen name, unique within the request, that identifies this question's answer. Never sent to the model.
+     */
+    name: string;
+    /**
+     * The yes/no question.
+     */
+    instructions: string;
+    /**
+     * Optional description of when the answer is yes.
+     */
+    whenTrue?: string;
+    /**
+     * Optional description of when the answer is no.
+     */
+    whenFalse?: string;
+    /**
+     * Question kind discriminator.
+     */
+    kind: "boolean";
+} | {
+    /**
+     * Caller-chosen name, unique within the request, that identifies this question's answer. Never sent to the model.
+     */
+    name: string;
+    /**
+     * The question whose answer is one of `options`.
+     */
+    instructions: string;
+    /**
+     * Candidate answers. Values must be unique identifiers; the model reads both value and description.
+     */
+    options: DecisionOption[];
+    /**
+     * Question kind discriminator.
+     */
+    kind: "choice";
+} | {
+    /**
+     * Caller-chosen name, unique within the request, that identifies this question's answer. Never sent to the model.
+     */
+    name: string;
+    /**
+     * The question whose answer is a rating on `levels`.
+     */
+    instructions: string;
+    /**
+     * Scale levels from lowest to highest. A level's zero-based position is its numeric value.
+     */
+    levels: DecisionLevel[];
+    /**
+     * Question kind discriminator.
+     */
+    kind: "score";
+};
 /**
  * Whether the supplied diagnostic cursor remained within the retained buffer window.
  *
@@ -3379,30 +3584,6 @@ export type InstructionSourceLocation =
  | "working-directory"
 /** Instructions live in plugin-provided configuration. */
  | "plugin";
-/**
- * Selects whether Kerberos credentials come from native lookup with a client fallback, or only from the client.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "KerberosAuthMode".
- */
-/** @experimental */
-export type KerberosAuthMode = 
-/** Use the callback only when native credential lookup fails. */
-"fallback"
-/** Always use the callback without native credential lookup. */
- | "always";
-/**
- * Selects which traffic a client's Kerberos callback authenticates.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "KerberosAuthScope".
- */
-/** @experimental */
-export type KerberosAuthScope = 
-/** Authenticate only requests made for this connection's sessions. */
-"connection"
-/** Also authenticate the runtime's shared background traffic. Only one connection at a time may claim this scope. */
- | "runtime";
 /**
  * Transport the runtime would otherwise use for this request. `http` (the default when absent) covers plain HTTP and SSE responses; `websocket` indicates a full-duplex message channel where each body chunk maps to one WebSocket message and the `binary` flag distinguishes text from binary frames. The SDK consumer uses this to decide whether to service the request with an HTTP client or a WebSocket client. It is the one piece of request metadata the consumer cannot reliably infer from the URL or headers alone.
  *
@@ -4143,6 +4324,18 @@ export type McpToolUiVisibility =
 "model"
 /** An MCP App view may call the tool. */
  | "app";
+/**
+ * OAuth grant type override for this login.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpOauthLoginGrantType".
+ */
+/** @experimental */
+export type McpOauthLoginGrantType = 
+/** Interactive browser-based OAuth flow using an authorization code, typically with PKCE. */
+"authorization_code"
+/** Headless OAuth flow where a confidential client authenticates directly with a client secret. */
+ | "client_credentials";
 /**
  * Host response to the pending OAuth request.
  *
@@ -4178,18 +4371,6 @@ export type McpOauthPendingRequestResponse = {
      */
     kind: "runtimeRefresh";
 };
-/**
- * OAuth grant type override for this login.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "McpOauthLoginGrantType".
- */
-/** @experimental */
-export type McpOauthLoginGrantType = 
-/** Interactive browser-based OAuth flow using an authorization code, typically with PKCE. */
-"authorization_code"
-/** Headless OAuth flow where a confidential client authenticates directly with a client secret. */
- | "client_credentials";
 /**
  * Outcome of starting the original prepared owned login.
  *
@@ -4860,6 +5041,18 @@ export type TokenPriceUnit =
 "ai_credits"
 /** Prices are quoted in nano-AIU; divide by 1,000,000,000 to get AI Credits. */
  | "nano_aiu";
+/**
+ * Selects which traffic a client's network callbacks serve.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "NetworkScope".
+ */
+/** @experimental */
+export type NetworkScope = 
+/** Serve only requests made for this connection and its sessions. */
+"connection"
+/** Also serve the runtime's shared background traffic. Only one connection at a time may claim this scope. */
+ | "runtime";
 /**
  * Allowed values for the `OptionsUpdateAdditionalContentExclusionPolicyScope` enumeration.
  *
@@ -5486,7 +5679,7 @@ export type SandboxConfigSource =
 /** A repository policy selected the sandbox state. */
  | "repository_policy";
 /**
- * Extensible identifier of a sandbox policy feature whose availability varies between hosts. A plain string, so an older client decodes a name added by a newer runtime; ignore names you do not recognize. Known values: `network` — sandboxed commands can reach the network (`network.allowOutbound`, on by default); on Linux this needs the tooling for Bubblewrap's private network namespace, such as slirp4netns. `network_filtering` — host rules and the sandbox proxy (`network.allowedHosts`, `network.blockedHosts`, `network.proxy`); on Linux this needs the same tooling as `network`; on Windows it needs Process Security Environment 1.1 host-loopback support or MXC's PSEC 1.0-only proxy-loopback compatibility capability, and a policy that uses it must also set `network.allowLocalNetwork`, because Windows reaches the local proxy only together with private-network access. Compatibility applies only to an explicit identity-less runtime proxy, not general host-loopback access, and other policy restrictions still apply. `denied_paths` — native enforcement of `filesystem.deniedPaths`; on Windows this needs a version whose sandbox contract reports denied-path support. `shell` — shell commands inside the sandbox: bash on macOS and Linux, PowerShell on Windows. `filesystem_enumeration` — enumerate-only filesystem grants, which PowerShell's drive roots use on Windows; this needs a version with Process Security Environment 1.1 filesystem enumeration support. Without it, sandboxed PowerShell still runs, but `Get-Location` may report the drive root, `Set-Location` may fail, and relative paths may resolve against the drive root; the session also receives a `session.warning` with `warningType` `sandbox`. Other platforms always report it.
+ * Extensible identifier of a sandbox policy feature whose availability varies between hosts. A plain string, so an older client decodes a name added by a newer runtime; ignore names you do not recognize. Known values: `network` — sandboxed commands can reach the network (`network.allowOutbound`, on by default); on Linux this needs the tooling for Bubblewrap's private network namespace, such as slirp4netns. `network_filtering` — host rules and the sandbox proxy (`network.allowedHosts`, `network.blockedHosts`, `network.proxy`); on Linux this needs the same tooling as `network`; on Windows it needs Process Security Environment 1.1 host-loopback support or MXC's PSEC 1.0-only proxy-loopback compatibility capability, and a policy that uses it must also set `network.allowLocalNetwork`, because Windows reaches the local proxy only together with private-network access. Compatibility applies only to an explicit identity-less runtime proxy, not general host-loopback access, and other policy restrictions still apply. `denied_paths` — native enforcement of `filesystem.deniedPaths`; on Windows this needs a version whose sandbox contract reports denied-path support. `shell` — shell commands inside the sandbox: bash on macOS and Linux, PowerShell on Windows. `filesystem_enumeration` — enumerate-only filesystem grants, which PowerShell's drive roots and `filesystem.enumeratePaths` use on Windows; this needs a version with Process Security Environment 1.1 filesystem enumeration support. Without it, sandboxed PowerShell still runs, but `Get-Location` may report the drive root, `Set-Location` may fail, and relative paths may resolve against the drive root; the session also receives a `session.warning` with `warningType` `sandbox`. `filesystem.enumeratePaths` entries are ignored. Other platforms always report it.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SandboxHostCapabilityName".
@@ -5943,6 +6136,23 @@ export type SessionsOpenProgressStatus =
 "in-progress"
 /** The step has completed successfully. */
  | "complete";
+/**
+ * GitHub marketplace source supplied by Team customizations.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "TeamPluginMarketplaceSource".
+ */
+/** @experimental */
+export type TeamPluginMarketplaceSource = {
+    /**
+     * Marketplace source discriminator. Currently only github is supported.
+     */
+    source: "github";
+    /**
+     * GitHub repository in owner/name form.
+     */
+    repo: string;
+};
 /**
  * Copilot plan tier used by the session quota projection.
  *
@@ -6918,6 +7128,21 @@ export type UISessionLimitsExhaustedResponseAction =
  | "unset"
 /** Leave the limit unchanged and cancel the blocked model request. */
  | "cancel";
+/**
+ * Optional recovery-aware enrollment for an in-process Auto-switch handler.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UIRegisterDirectAutoModeSwitchHandlerRequest".
+ */
+/** @experimental */
+export type UIRegisterDirectAutoModeSwitchHandlerRequest = {
+    [k: string]: unknown | undefined;
+} | {
+    /**
+     * Opt into active-request Auto recovery before starting a turn. Attach the handler separately, show the failure reason, and return the user's choice for the originating live session. Require a positive acknowledgment in the registration result. Dismiss offers on auto_mode_recovery_consent.completed and on session resume or disconnect. Omitted or false preserves legacy rate-limit switching.
+     */
+    autoModeRecovery?: boolean;
+};
 /**
  * Execution-critical workflow storage operation.
  *
@@ -7265,6 +7490,30 @@ export type SessionGitHubAuthLogoutResult = boolean;
  */
 /** @experimental */
 export type SessionGitHubAuthLogoutUserResult = boolean;
+/**
+ * Whether the credential operation succeeded.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionMcpOauthHasValidTokensResult".
+ */
+/** @experimental */
+export type SessionMcpOauthHasValidTokensResult = boolean;
+/**
+ * Whether the credential operation succeeded.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionMcpOauthTryRefreshTokensResult".
+ */
+/** @experimental */
+export type SessionMcpOauthTryRefreshTokensResult = boolean;
+/**
+ * The selected owner's OAuth credential key.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionMcpOauthStoreKeyResult".
+ */
+/** @experimental */
+export type SessionMcpOauthStoreKeyResult = string;
 /**
  * Pending warnings returned and cleared by session.quota.takeWarnings.
  *
@@ -13692,6 +13941,289 @@ export interface DebugCollectLogsSkippedEntry {
      */
     reason: string;
 }
+/**
+ * Probability of one choice option.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionOptionProbability".
+ */
+/** @experimental */
+export interface DecisionOptionProbability {
+    /**
+     * Option value.
+     */
+    value: string;
+    /**
+     * Probability from 0 to 1.
+     */
+    probability: number;
+}
+/**
+ * Probability of one score level.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionLevelProbability".
+ */
+/** @experimental */
+export interface DecisionLevelProbability {
+    /**
+     * Level label.
+     */
+    label: string;
+    /**
+     * Probability from 0 to 1.
+     */
+    probability: number;
+}
+/**
+ * `data` of a JSON-RPC error returned by a `decisions.*` method.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionErrorData".
+ */
+/** @experimental */
+export interface DecisionErrorData {
+    /**
+     * Error category to branch on.
+     */
+    kind: DecisionErrorKind;
+    /**
+     * Every limit or rule the request broke, for `invalidRequest` and `tooLarge`.
+     */
+    violations?: DecisionViolation[];
+    /**
+     * HTTP status the backend returned, when the error came from it.
+     */
+    statusCode?: number;
+    /**
+     * How long to wait before retrying, for `rateLimited`.
+     */
+    retryAfterMs?: number;
+}
+/**
+ * One rule or limit a request broke.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionViolation".
+ */
+/** @experimental */
+export interface DecisionViolation {
+    /**
+     * Where in the request, for example `questions[2].options`.
+     */
+    path: string;
+    /**
+     * Stable rule identifier, for example `minOptions` or `requestBytes`.
+     */
+    rule: string;
+    /**
+     * The value the request had, when numeric.
+     */
+    actual?: number;
+    /**
+     * The limit it broke, when numeric.
+     */
+    limit?: number;
+}
+/**
+ * One level of a score question's scale.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionLevel".
+ */
+/** @experimental */
+export interface DecisionLevel {
+    /**
+     * Short, unique name of the level, such as `Low`.
+     */
+    label: string;
+    /**
+     * When this level applies.
+     */
+    description: string;
+}
+/**
+ * One callable decision model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionModelInfo".
+ */
+/** @experimental */
+export interface DecisionModelInfo {
+    /**
+     * Model id to pass as `model` to `decisions.ask`.
+     */
+    id: string;
+    /**
+     * Display name.
+     */
+    name: string;
+    /**
+     * Whether `decisions.ask` uses this model when `model` is omitted.
+     */
+    isDefault: boolean;
+    /**
+     * Effective limits callers can rely on: the stricter of the backend's and the runtime's.
+     */
+    limits: DecisionModelLimits;
+    /**
+     * Whether the backend can refuse individual questions.
+     */
+    supportsRefusals: boolean;
+}
+/**
+ * Request limits for one decision model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionModelLimits".
+ */
+/** @experimental */
+export interface DecisionModelLimits {
+    /**
+     * Maximum questions per request.
+     */
+    maxQuestions: number;
+    /**
+     * Minimum options per choice question.
+     */
+    minOptions: number;
+    /**
+     * Maximum options per choice question.
+     */
+    maxOptions: number;
+    /**
+     * Minimum levels per score question.
+     */
+    minLevels: number;
+    /**
+     * Maximum levels per score question.
+     */
+    maxLevels: number;
+    /**
+     * Maximum size of the serialized request, in bytes.
+     */
+    maxRequestBytes: number;
+    /**
+     * Maximum nesting depth of JSON context.
+     */
+    maxJsonDepth: number;
+    /**
+     * Token budget for the context plus any one question, when the model has one.
+     */
+    contextPlusQuestionTokens?: number;
+}
+/**
+ * One candidate answer to a choice question.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionOption".
+ */
+/** @experimental */
+export interface DecisionOption {
+    /**
+     * Identifier returned when the model picks this option. Letters, digits and `._:/@-`, 1-64 characters. The model reads it, so it must not hold anything the caller would not put in the context.
+     */
+    value: string;
+    /**
+     * When this option applies.
+     */
+    description: string;
+}
+/**
+ * One request to a decision model: shared context plus the questions to answer about it.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionsAskRequest".
+ */
+/** @experimental */
+export interface DecisionsAskRequest {
+    /**
+     * Opaque account identifier returned by `account.getAllUsers`. When omitted, the current account is used.
+     */
+    selectionId?: string;
+    /**
+     * GitHub token to ask as. When provided, it is used instead of the current account or `selectionId`.
+     */
+    gitHubToken?: string;
+    /**
+     * Decision model id from `models.list` `decisionModels`. When omitted, the runtime uses its default decision model for the account.
+     */
+    model?: string;
+    /**
+     * Shared context every question sees. The runtime never truncates it; an oversized request fails with `tooLarge`.
+     */
+    context: DecisionContext;
+    /**
+     * Questions to answer about the context. Names must be unique; answers come back in the same order.
+     */
+    questions: DecisionQuestion[];
+    /**
+     * End-to-end deadline in milliseconds, covering credential resolution, queueing, the model call and parsing. Defaults to 5000; allowed range 250-30000.
+     */
+    timeoutMs?: number;
+    /**
+     * Static identifier of the calling feature, used only for telemetry and never sent to the model, for example `vscode.chat.route`. Unrecognized values are reported as `other`.
+     */
+    purpose?: string;
+}
+/**
+ * The decision model's answers.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionsAskResult".
+ */
+/** @experimental */
+export interface DecisionsAskResult {
+    /**
+     * Decision model id that answered; valid as `model` in a later request.
+     */
+    model: string;
+    /**
+     * Model name the backend reported, when it differs from `model`. Informational only.
+     */
+    upstreamModel?: string;
+    /**
+     * One answer per question, in request order.
+     */
+    answers: DecisionAnswer[];
+    /**
+     * Token usage, when the backend reports it.
+     */
+    usage?: DecisionUsage;
+    /**
+     * Milliseconds from receiving the request to producing the result.
+     */
+    latencyMs: number;
+}
+/**
+ * Token usage the backend reported for one request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "DecisionUsage".
+ */
+/** @experimental */
+export interface DecisionUsage {
+    /**
+     * Input tokens, including cached and cache-write tokens.
+     */
+    inputTokens: number;
+    /**
+     * Input tokens served from the backend's prompt cache, when reported.
+     */
+    cachedInputTokens?: number;
+    /**
+     * Input tokens written to the backend's prompt cache, when reported.
+     */
+    cacheWriteTokens?: number;
+    /**
+     * Output tokens, including reasoning tokens.
+     */
+    outputTokens: number;
+    /**
+     * Reasoning tokens, when reported.
+     */
+    reasoningTokens?: number;
+}
 /**
  * MCP-specific detail for a source-discriminated diagnostic entry.
  *
@@ -17131,6 +17663,10 @@ export interface InstallationConfirmationResponse {
  */
 /** @experimental */
 export interface InstalledPluginInfo {
+    /**
+     * Soft assignment from effective managed settings. This is not a mandatory enabled-state restriction.
+     */
+    assignment?: ManagedPluginAssignment;
     /**
      * Plugin name
      */
@@ -17192,6 +17728,23 @@ export interface InstalledPluginInfo {
      */
     id?: string;
 }
+/**
+ * An optional plugin default from managed settings. Explicit user choices override this default.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ManagedPluginAssignment".
+ */
+/** @experimental */
+export interface ManagedPluginAssignment {
+    /**
+     * Assignment state. The runtime currently supports defaultEnabled.
+     */
+    state: string;
+    /**
+     * Administrator-provided explanation from the same winning policy entry as the state.
+     */
+    reason?: string;
+}
 /**
  * The GitHub repository and commit an installed plugin is pinned to.
  *
@@ -17410,49 +17963,6 @@ export interface JsonSchemaResponseFormat {
      */
     strict?: boolean;
 }
-/**
- * Requests a fresh initial SPNEGO token for a Kerberos service principal.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "KerberosAuthAcquireRequest".
- */
-/** @experimental */
-export interface KerberosAuthAcquireRequest {
-    /**
-     * Service principal in the platform-independent `service/host` form, optionally followed by `@REALM`.
-     */
-    spn: string;
-}
-/**
- * Client credentials for a single authentication exchange.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "KerberosAuthAcquireResult".
- */
-/** @experimental */
-export interface KerberosAuthAcquireResult {
-    /**
-     * Base64 initial SPNEGO token without the Negotiate prefix; omitted when unavailable. Never log or persist it.
-     */
-    token?: string;
-}
-/**
- * Registers the calling SDK connection's Kerberos credential provider.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "KerberosAuthSetProviderRequest".
- */
-/** @experimental */
-export interface KerberosAuthSetProviderRequest {
-    /**
-     * Native lookup fallback or exclusive client callback.
-     */
-    mode: KerberosAuthMode;
-    /**
-     * Traffic the callback authenticates; defaults to `connection`.
-     */
-    scope?: KerberosAuthScope;
-}
 /**
  * HTTP headers as a map from lowercased header name to a list of values. Multi-valued headers (e.g. Set-Cookie) preserve all values.
  *
@@ -17805,6 +18315,144 @@ export interface LogResult {
      */
     eventId: string;
 }
+/**
+ * A project configuration that the tolerant loader could not use.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspConfigurationProblem".
+ */
+/** @experimental */
+export interface LspConfigurationProblem {
+    /**
+     * Configuration file path.
+     */
+    path: string;
+    /**
+     * Configuration read or validation failure.
+     */
+    error: string;
+}
+/**
+ * Runtime-owned configuration inventory and configuration diagnostics.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspConfigurationSnapshot".
+ */
+/** @experimental */
+export interface LspConfigurationSnapshot {
+    /**
+     * Effective servers in merge order.
+     */
+    configs: LspServerSummary[];
+    /**
+     * User entries, including entries disabled by project configuration.
+     */
+    userServers: LspServerSummary[];
+    /**
+     * Effective plugin entries.
+     */
+    pluginServers: LspServerSummary[];
+    /**
+     * Project entries, including disabled entries absent from the effective set.
+     */
+    projectServers: LspServerSummary[];
+    /**
+     * User configuration file path.
+     */
+    userConfigPath: string;
+    /**
+     * Nearest project configuration file path.
+     */
+    projectConfigPath?: string;
+    /**
+     * User configuration read or validation failure.
+     */
+    userConfigError?: string;
+    /**
+     * Project files rejected by the loader.
+     */
+    projectProblems: LspConfigurationProblem[];
+    /**
+     * Failure to inspect project configuration.
+     */
+    projectInspectionError?: string;
+    /**
+     * Identifiers disabled through the user toggle list.
+     */
+    userDisabledServers: string[];
+    /**
+     * Configuration loader diagnostics.
+     */
+    warnings: string[];
+    /**
+     * Plugin configuration diagnostics.
+     */
+    pluginWarnings: string[];
+}
+/**
+ * One language server in the runtime's configuration inventory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspServerSummary".
+ */
+/** @experimental */
+export interface LspServerSummary {
+    /**
+     * Configured server identifier.
+     */
+    id: string;
+    /**
+     * File suffixes handled by the server.
+     */
+    fileExtensions: {
+        [k: string]: string | undefined;
+    };
+    /**
+     * Project root relative to the repository root.
+     */
+    rootUri?: string;
+    /**
+     * Request deadline in milliseconds.
+     */
+    requestTimeoutMs?: number;
+    /**
+     * Protocol initialization deadline in milliseconds.
+     */
+    initializationTimeoutMs?: number;
+    /**
+     * Process startup deadline in milliseconds.
+     */
+    spawnTimeoutMs?: number;
+    /**
+     * Warmup deadline in milliseconds.
+     */
+    warmupTimeoutMs?: number;
+    /**
+     * Plugin that supplies the server, when applicable.
+     */
+    sourcePlugin?: string;
+    /**
+     * Whether the effective configuration disables this entry.
+     */
+    disabled: boolean;
+    /**
+     * Platform-selected launch script for a user entry.
+     */
+    launchDescription?: string;
+}
+/**
+ * Parameters for a process-wide, read-only language-server inventory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspGlobalConfigurationRequest".
+ */
+/** @experimental */
+export interface LspGlobalConfigurationRequest {
+    /**
+     * Absolute working directory used for project and plugin discovery.
+     */
+    workingDirectory: string;
+}
 /**
  * Parameters for (re)loading the merged LSP configuration set.
  *
@@ -17826,6 +18474,124 @@ export interface LspInitializeRequest {
      */
     force?: boolean;
 }
+/**
+ * Process exit information from a startup probe.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspProbeExitStatus".
+ */
+/** @experimental */
+export interface LspProbeExitStatus {
+    /**
+     * Exit code, or null when the process ended through a signal.
+     */
+    code: number | null;
+    /**
+     * Termination signal, or null for a normal exit.
+     */
+    signal: string | null;
+    /**
+     * Failure to observe the child process.
+     */
+    error?: string;
+}
+/**
+ * A server selected for a startup probe.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspProbeRequest".
+ */
+/** @experimental */
+export interface LspProbeRequest {
+    /**
+     * Configured server identifier.
+     */
+    serverId: string;
+}
+/**
+ * Result of a language-server startup probe.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspProbeResult".
+ */
+/** @experimental */
+export interface LspProbeResult {
+    /**
+     * Runtime selection outcome: started, disabled, missing, or unavailable.
+     */
+    status: string;
+    /**
+     * Effective server identifiers, used when the requested server is absent.
+     */
+    availableServers: string[];
+    /**
+     * Child process identifier, or null when no process identifier exists.
+     */
+    pid: number | null;
+    /**
+     * Time spent on process startup, in milliseconds.
+     */
+    spawnTimeMs: number;
+    /**
+     * Child exit observed during the startup window.
+     */
+    immediateExit?: LspProbeExitStatus;
+    /**
+     * Whether the runtime confined the probe in the session sandbox.
+     */
+    sandboxed: boolean;
+}
+/**
+ * A persistent user-level server toggle.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspSetEnabledRequest".
+ */
+/** @experimental */
+export interface LspSetEnabledRequest {
+    /**
+     * Configured server identifier.
+     */
+    serverId: string;
+    /**
+     * True to remove the user-level disable override.
+     */
+    enabled: boolean;
+}
+/**
+ * A server whose warmup failed.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspWarmupError".
+ */
+/** @experimental */
+export interface LspWarmupError {
+    /**
+     * Configured server identifier.
+     */
+    serverId: string;
+    /**
+     * Server startup failure.
+     */
+    error: string;
+}
+/**
+ * The servers retained by the session after warmup.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspWarmupResult".
+ */
+/** @experimental */
+export interface LspWarmupResult {
+    /**
+     * Successfully acquired server identifiers.
+     */
+    servers: string[];
+    /**
+     * Individual server startup failures.
+     */
+    errors: LspWarmupError[];
+}
 /**
  * Organization-specific information that clients surface to end users. Informational only; the runtime does not enforce it.
  *
@@ -18338,6 +19104,10 @@ export interface MarketplacePluginInfo {
      * Short description from the marketplace catalog, when present
      */
     description?: string;
+    /**
+     * Soft assignment from effective managed settings for this marketplace entry.
+     */
+    assignment?: ManagedPluginAssignment;
 }
 /**
  * Registered marketplace summary.
@@ -21042,6 +21812,35 @@ export interface MemoryConfiguration {
      */
     mode?: MemoryMode;
 }
+/**
+ * A memory the agent stored after validation, secret filtering and approval.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "MemoryStoreRequest".
+ */
+/** @experimental */
+export interface MemoryStoreRequest {
+    /**
+     * Target session identifier
+     */
+    sessionId: string;
+    /**
+     * Short topic the memory is about.
+     */
+    subject: string;
+    /**
+     * The fact to remember.
+     */
+    fact: string;
+    /**
+     * Sources supporting the fact, such as file paths with line numbers or a quotation of the user.
+     */
+    citations: string;
+    /**
+     * Why the agent considers the fact worth remembering.
+     */
+    reason: string;
+}
 /**
  * Per-source attribution breakdown for the session's current context window, or null if uninitialized.
  *
@@ -21828,6 +22627,14 @@ export interface ModelList {
      * The runtime's default image model, separate from conversation models, with its availability for the resolved account. The default is reported even when unavailable; clients choose whether to display it. These entries must not be selected as chat models. Absent on runtimes that do not expose this catalog.
      */
     imageModels?: ImageToolModel[];
+    /**
+     * Decision models the resolved account can call with `decisions.ask`, separate from conversation models, with each model's effective limits. Absent when the `DECISIONS_API` feature flag is off or the runtime does not expose this catalog; empty when the account has none. These entries must not be selected as chat models.
+     *
+     * @experimental
+     *
+     * @experimental
+     */
+    decisionModels?: DecisionModelInfo[];
 }
 /** @experimental */
 export interface ModelPickerPersistenceRequest {
@@ -22440,7 +23247,7 @@ export interface ModelSetReasoningEffortRequest {
     reasoningEffort: string;
 }
 /**
- * Update the session's reasoning effort without changing the selected model. Use `switchTo` instead when you also need to change the model. The runtime stores the effort on the session and applies it to subsequent turns.
+ * Update the session's reasoning effort without changing the selected model. Use `switchTo` instead when you also need to change the model. The runtime applies the effort to the next new model request, including tool continuations, without changing retries of an already-started request.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "ModelSetReasoningEffortResult".
@@ -22467,6 +23274,48 @@ export interface ModelsListRequest {
      */
     streamerMode?: boolean;
 }
+/**
+ * Options for a host's startup model admission check.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelStartupAdmissionRequest".
+ */
+/** @experimental */
+export interface ModelStartupAdmissionRequest {
+    /**
+     * Claims the session's one-time enablement prompt only when its catalog is ready.
+     */
+    claimEnablement?: boolean;
+}
+/**
+ * A cached startup model snapshot and an optional one-time enablement prompt. This check never resolves credentials or fetches a catalog.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelStartupAdmissionResult".
+ */
+/** @experimental */
+export interface ModelStartupAdmissionResult {
+    /**
+     * The selected model, when the session has one.
+     */
+    selectedModel?: string;
+    /**
+     * Whether the session already has a resolved Copilot catalog.
+     */
+    catalogReady: boolean;
+    /**
+     * Whether the cached selected model currently requires enablement.
+     */
+    requiresEnablement: boolean;
+    /**
+     * Whether this call consumed the session's startup enablement claim.
+     */
+    claimedEnablement: boolean;
+    /**
+     * The selected model to enable, only for the first successful prompt claim.
+     */
+    modelToEnable?: string;
+}
 /**
  * An Auto preference request for the session. This updates Auto configuration only; it does not change the selected model to `auto`.
  *
@@ -22855,6 +23704,97 @@ export interface NameSetRequest {
      */
     name: string;
 }
+/**
+ * Registers the Negotiate authentication callback, which then supplies the Kerberos tokens instead of native credential lookup.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "NetworkAuthenticateNegotiateOptions".
+ */
+/** @experimental */
+export interface NetworkAuthenticateNegotiateOptions {
+}
+/**
+ * Requests a fresh initial SPNEGO token for a Kerberos service principal.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "NetworkAuthenticateNegotiateRequest".
+ */
+/** @experimental */
+export interface NetworkAuthenticateNegotiateRequest {
+    /**
+     * Service principal in the platform-independent `service/host` form, optionally followed by `@REALM`.
+     */
+    spn: string;
+}
+/**
+ * Client credentials for a single Negotiate authentication exchange.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "NetworkAuthenticateNegotiateResult".
+ */
+/** @experimental */
+export interface NetworkAuthenticateNegotiateResult {
+    /**
+     * Base64 initial SPNEGO token without the Negotiate prefix; omitted when unavailable. Never log or persist it.
+     */
+    token?: string;
+}
+/**
+ * Registers the proxy resolution callback, which then decides the proxies for every request the runtime would otherwise route by ambient proxy settings, or leaves a request to that routing.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "NetworkResolveProxyOptions".
+ */
+/** @experimental */
+export interface NetworkResolveProxyOptions {
+}
+/**
+ * Requests the proxies for a request target.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "NetworkResolveProxyRequest".
+ */
+/** @experimental */
+export interface NetworkResolveProxyRequest {
+    /**
+     * Request target as a PAC script sees it: without credentials or fragment, and for `https` and `wss` also without path and query.
+     */
+    url: string;
+}
+/**
+ * Proxies for a request target, in the order to try them.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "NetworkResolveProxyResult".
+ */
+/** @experimental */
+export interface NetworkResolveProxyResult {
+    /**
+     * PAC-style proxy list such as `PROXY proxy.example:8080; HTTPS proxy.example:443; DIRECT`, as returned by a PAC script or Electron's `session.resolveProxy`; `DIRECT` connects directly. Omitted, null or empty leaves the request to the runtime's own proxy resolution, as if no callback were registered: proxy environment variables, `NO_PROXY`, then the operating system's proxy settings and PAC. Entry types the runtime doesn't support, such as SOCKS and QUIC, are skipped.
+     */
+    proxy?: string;
+}
+/**
+ * Registers the calling SDK connection's network callbacks, replacing any previous registration.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "NetworkSetProviderRequest".
+ */
+/** @experimental */
+export interface NetworkSetProviderRequest {
+    /**
+     * Traffic the callbacks serve; defaults to `connection`.
+     */
+    scope?: NetworkScope;
+    /**
+     * Present when the client answers `network.resolveProxy`.
+     */
+    resolveProxy?: NetworkResolveProxyOptions;
+    /**
+     * Present when the client answers `network.authenticateNegotiate`.
+     */
+    authenticateNegotiate?: NetworkAuthenticateNegotiateOptions;
+}
 /**
  * Content-exclusion policy supplied to `session.options.update`, with rules, last-updated data, and scope.
  *
@@ -24854,6 +25794,10 @@ export interface PlanUpdateRequest {
  */
 /** @experimental */
 export interface Plugin {
+    /**
+     * Soft assignment from effective managed settings. This does not mark the plugin as hard-managed.
+     */
+    assignment?: ManagedPluginAssignment;
     /**
      * Plugin name
      */
@@ -27266,6 +28210,10 @@ export interface SandboxConfigUserPolicyFilesystem {
      * Paths explicitly denied.
      */
     deniedPaths?: string[];
+    /**
+     * Paths granted enumerate-only access: sandboxed commands can list these directories without reading the files in them. Honored only on Windows hosts with the `filesystem_enumeration` capability; ignored elsewhere. An entry at or under a read-only, read-write, or denied path is ignored, so it never narrows a grant or reopens a denial.
+     */
+    enumeratePaths?: string[];
 }
 /**
  * Network rules to merge into the base policy.
@@ -27538,7 +28486,7 @@ export interface SandboxGrantPathForRequestResult {
 /** @experimental */
 export interface SandboxHostCapability {
     /**
-     * The policy feature, as an extensible string: ignore names you do not recognize. Known values: `network` (sandboxed commands can reach the network; on Linux this needs the tooling for Bubblewrap's private network namespace, such as slirp4netns), `network_filtering` (host rules and the sandbox proxy; on Linux this needs the same tooling as `network`; on Windows it needs Process Security Environment 1.1 host-loopback support or MXC's PSEC 1.0-only proxy-loopback compatibility capability, and a policy that uses it must also set `network.allowLocalNetwork`; compatibility applies only to an explicit identity-less runtime proxy, not general host-loopback access, and other policy restrictions still apply), `denied_paths` (native enforcement of `filesystem.deniedPaths`), `shell` (shell commands inside the sandbox), and `filesystem_enumeration` (enumerate-only filesystem grants; on Windows this needs Process Security Environment 1.1 filesystem enumeration support, and without it sandboxed PowerShell still runs but cannot resolve its current location; other platforms always report it).
+     * The policy feature, as an extensible string: ignore names you do not recognize. Known values: `network` (sandboxed commands can reach the network; on Linux this needs the tooling for Bubblewrap's private network namespace, such as slirp4netns), `network_filtering` (host rules and the sandbox proxy; on Linux this needs the same tooling as `network`; on Windows it needs Process Security Environment 1.1 host-loopback support or MXC's PSEC 1.0-only proxy-loopback compatibility capability, and a policy that uses it must also set `network.allowLocalNetwork`; compatibility applies only to an explicit identity-less runtime proxy, not general host-loopback access, and other policy restrictions still apply), `denied_paths` (native enforcement of `filesystem.deniedPaths`), `shell` (shell commands inside the sandbox), and `filesystem_enumeration` (enumerate-only filesystem grants: PowerShell's drive roots and `filesystem.enumeratePaths`; on Windows this needs Process Security Environment 1.1 filesystem enumeration support, and without it sandboxed PowerShell still runs but cannot resolve its current location, and `filesystem.enumeratePaths` entries are ignored; other platforms always report it).
      */
     name: SandboxHostCapabilityName;
     /**
@@ -28053,6 +29001,10 @@ export interface SendMessagesRequest {
      * W3C Trace Context tracestate header for distributed tracing
      */
     tracestate?: string;
+    /**
+     * Opaque caller-chosen ID for the turn this batch starts. The runtime copies it unchanged into `params._meta["com.github.copilot/turnId"]` on every MCP `tools/call` the agent makes while serving that turn, including calls from sub-agents it spawns and from Autopilot continuations of it. Visible user steering (`mode: "immediate"`) that a running turn consumes hands it to a successor turn: the steering's value replaces the running turn's from the next model call onward, and steering without one clears it. System and hidden steering leave it unchanged. A turn started without one, including one the runtime starts itself, carries no turn ID. The `user.message` event for each message the send delivers echoes it as `clientTurnId` when the message is consumed, and is persisted like other events; the value stamped on MCP calls is held in memory only and is not restored on resume.
+     */
+    clientTurnId?: string;
     /**
      * If true, await completion of the agentic loop for this turn before returning. Defaults to false (fire-and-forget). When true, the result still contains the same `messageIds`; the caller can rely on the agent having processed the messages before the call resolves. Transport-dependent tail semantics: on a LOCAL (in-process) session the wait additionally blocks until the completed turn's event tail has been dispatched to this session's in-process subscribers, so a subsequent read of subscriber state already reflects the turn; on a REMOTE session the wait resolves once the loop completes and mirrored delivery follows over the wire. Callers that need the stronger local guarantee on remote sessions should await the event stream explicitly.
      */
@@ -28129,6 +29081,10 @@ export interface SendRequest {
      * W3C Trace Context tracestate header for distributed tracing
      */
     tracestate?: string;
+    /**
+     * Opaque caller-chosen ID for the turn this message starts. The runtime copies it unchanged into `params._meta["com.github.copilot/turnId"]` on every MCP `tools/call` the agent makes while serving that turn, including calls from sub-agents it spawns and from Autopilot continuations of it. Visible user steering (`mode: "immediate"`) that a running turn consumes hands it to a successor turn: the steering's value replaces the running turn's from the next model call onward, and steering without one clears it. System and hidden steering leave it unchanged. A turn started without one, including one the runtime starts itself, carries no turn ID. The `user.message` event for each message the send delivers echoes it as `clientTurnId` when the message is consumed, and is persisted like other events; the value stamped on MCP calls is held in memory only and is not restored on resume.
+     */
+    clientTurnId?: string;
     /**
      * If true, await completion of the agentic loop for this message before returning. Defaults to false (fire-and-forget). When true, the result still contains the same `messageId`; the caller can rely on the agent having processed the message before the call resolves. Transport-dependent tail semantics: on a LOCAL (in-process) session the wait additionally blocks until the completed turn's event tail has been dispatched to this session's in-process subscribers, so a subsequent read of subscriber state already reflects the turn; on a REMOTE session the wait resolves once the loop completes and mirrored delivery follows over the wire. Callers that need the stronger local guarantee on remote sessions should await the event stream explicitly.
      */
@@ -30054,6 +31010,10 @@ export interface SessionOpenOptions {
      * @experimental
      */
     enableCitations?: boolean;
+    /**
+     * Whether the model may request multiple tool calls per response. Defaults to true. False sends a provider hint, not an execution guarantee: all returned calls are still handled and handlers may run concurrently. Re-supply on cold resume.
+     */
+    allowMultipleToolCalls?: boolean;
     /**
      * Override URL for the Copilot API endpoint.
      */
@@ -30506,6 +31466,50 @@ export interface SessionsOpenProgress {
      */
     message?: string;
 }
+/**
+ * Soft plugin defaults for this session, without persistent user preferences or hard policy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionPluginDefaults".
+ */
+/** @experimental */
+export interface SessionPluginDefaults {
+    /**
+     * Opaque revision of the defaults, assignment reasons, and Team marketplaces.
+     */
+    generation: string;
+    /**
+     * Plugin specs mapped to soft enablement defaults. Managed defaultEnabled assignments override Team defaults for the same spec.
+     */
+    defaultEnabledPlugins: {
+        [k: string]: boolean | undefined;
+    };
+    /**
+     * Team-only defaults for hosts that retain activation inputs. Managed assignments are read live by the runtime resolver and must not be retained as Team defaults.
+     */
+    teamDefaultEnabledPlugins: {
+        [k: string]: boolean | undefined;
+    };
+    /**
+     * Team marketplace definitions available only as best-effort installation fallbacks.
+     */
+    extraKnownMarketplaces: {
+        [k: string]: TeamPluginMarketplace | undefined;
+    };
+}
+/**
+ * A Team marketplace fallback. Explicit marketplace configuration takes precedence.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "TeamPluginMarketplace".
+ */
+/** @experimental */
+export interface TeamPluginMarketplace {
+    /**
+     * Validated GitHub repository source for the marketplace.
+     */
+    source: TeamPluginMarketplaceSource;
+}
 /**
  * Plugin names (or specs) to disable in the session's authoritative working directory.
  *
@@ -31233,6 +32237,10 @@ export interface SessionsFindByPrefixRequest {
      * UUID prefix (>=7 hex chars, <36 chars). Returns the unique session ID, or undefined when there is no match or the prefix matches multiple sessions.
      */
     prefix: string;
+    /**
+     * Configuration directory containing the session state. Omitted to use the server's configured home.
+     */
+    configDir?: string;
 }
 /**
  * Session ID matching the prefix, omitted when no unique match exists.
@@ -34853,7 +35861,7 @@ export interface UIUserInputResponse {
     wasFreeform: boolean;
 }
 /**
- * Register an in-process handler for `auto_mode_switch.requested` events. The caller still attaches the actual listener via the standard event-subscription mechanism; this registration solely tells the server bridge to skip its own dispatch (so a remote client doesn't race the in-process handler for the same requestId).
+ * Registers an in-process Auto-switch responder and suppresses server-bridge dispatch to avoid competing responders for the same requestId. When requested, also enrolls the responder for active-request Auto recovery and acknowledges support. Attach the actual listener separately through standard event subscriptions before starting a turn, and release the handle when the responder is removed.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "UIRegisterDirectAutoModeSwitchHandlerResult".
@@ -34864,6 +35872,10 @@ export interface UIRegisterDirectAutoModeSwitchHandlerResult {
      * Opaque handle representing the registration. Pass this same handle to `unregisterDirectAutoModeSwitchHandler` when the in-process handler is no longer active. Multiple registrations are reference-counted; the server bridge will only dispatch auto-mode-switch requests when no handles are active.
      */
     handle: string;
+    /**
+     * Positive acknowledgment of recovery-aware enrollment. Absence on an older runtime means recovery is unsupported.
+     */
+    autoModeRecovery?: boolean;
 }
 /**
  * Identifies one runtime-owned native action for an in-process SDK UI dispatcher.
@@ -35433,6 +36445,35 @@ export interface UserSettingsWriteAllRequest {
      */
     settings: JsonValue;
 }
+/**
+ * A raw top-level setting edit with explicit read-failure behavior.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "UserSettingsWriteKeyRequest".
+ */
+/** @experimental */
+export interface UserSettingsWriteKeyRequest {
+    /**
+     * The top-level setting to write without canonicalizing legacy siblings.
+     */
+    key: string;
+    /**
+     * Optional host paths and environment. Omit to use the server's settings home.
+     */
+    context?: UserSettingsHostContext;
+    /**
+     * The value to store. Explicit null is retained. Pass null when deleting.
+     */
+    value: JsonValue | null;
+    /**
+     * Remove the key instead of writing it. Defaults to false.
+     */
+    delete?: boolean;
+    /**
+     * Refuse to replace an unreadable or invalid file. Defaults to false.
+     */
+    refuseOnReadFailure?: boolean;
+}
 /**
  * Current sharing status and shareable GitHub URL for a session.
  *
@@ -37638,24 +38679,82 @@ export interface AgentRegistryRemoveEntryRequest {
      */
     pid: number;
 }
+/**
+ * Runtime-owned configuration inventory and configuration diagnostics.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspListResult".
+ */
 /** @experimental */
-export interface SessionWorkflowPauseAtCheckpointResult {
+export interface LspListResult {
     /**
-     * Whether this execution attempt must pause or may continue.
+     * Effective servers in merge order.
      */
-    action: WorkflowPauseCheckpointAction;
+    configs: LspServerSummary[];
+    /**
+     * User entries, including entries disabled by project configuration.
+     */
+    userServers: LspServerSummary[];
+    /**
+     * Effective plugin entries.
+     */
+    pluginServers: LspServerSummary[];
+    /**
+     * Project entries, including disabled entries absent from the effective set.
+     */
+    projectServers: LspServerSummary[];
+    /**
+     * User configuration file path.
+     */
+    userConfigPath: string;
+    /**
+     * Nearest project configuration file path.
+     */
+    projectConfigPath?: string;
+    /**
+     * User configuration read or validation failure.
+     */
+    userConfigError?: string;
+    /**
+     * Project files rejected by the loader.
+     */
+    projectProblems: LspConfigurationProblem[];
+    /**
+     * Failure to inspect project configuration.
+     */
+    projectInspectionError?: string;
+    /**
+     * Identifiers disabled through the user toggle list.
+     */
+    userDisabledServers: string[];
+    /**
+     * Configuration loader diagnostics.
+     */
+    warnings: string[];
+    /**
+     * Plugin configuration diagnostics.
+     */
+    pluginWarnings: string[];
 }
+/**
+ * Parameters for a process-wide, read-only language-server inventory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "LspListRequest".
+ */
 /** @experimental */
-export interface SessionModelClearStartupSeedResult {
-    cleared: boolean;
+export interface LspListRequest {
+    /**
+     * Absolute working directory used for project and plugin discovery.
+     */
+    workingDirectory: string;
 }
 /** @experimental */
-export interface SessionModelClearStartupSeedRequest {
-    expectedModel: string;
+export interface SessionWorkflowPauseAtCheckpointResult {
     /**
-     * Provider captured with the startup seed; omission matches only an unqualified seed.
+     * Whether this execution attempt must pause or may continue.
      */
-    expectedProviderId?: string;
+    action: WorkflowPauseCheckpointAction;
 }
 /** @experimental */
 export interface SessionModelListRequest {
@@ -37798,6 +38897,143 @@ export interface SessionProviderGetEndpointRequest {
      */
     modelId?: string;
 }
+/**
+ * Runtime-owned configuration inventory and configuration diagnostics.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLspListResult".
+ */
+/** @experimental */
+export interface SessionLspListResult {
+    /**
+     * Effective servers in merge order.
+     */
+    configs: LspServerSummary[];
+    /**
+     * User entries, including entries disabled by project configuration.
+     */
+    userServers: LspServerSummary[];
+    /**
+     * Effective plugin entries.
+     */
+    pluginServers: LspServerSummary[];
+    /**
+     * Project entries, including disabled entries absent from the effective set.
+     */
+    projectServers: LspServerSummary[];
+    /**
+     * User configuration file path.
+     */
+    userConfigPath: string;
+    /**
+     * Nearest project configuration file path.
+     */
+    projectConfigPath?: string;
+    /**
+     * User configuration read or validation failure.
+     */
+    userConfigError?: string;
+    /**
+     * Project files rejected by the loader.
+     */
+    projectProblems: LspConfigurationProblem[];
+    /**
+     * Failure to inspect project configuration.
+     */
+    projectInspectionError?: string;
+    /**
+     * Identifiers disabled through the user toggle list.
+     */
+    userDisabledServers: string[];
+    /**
+     * Configuration loader diagnostics.
+     */
+    warnings: string[];
+    /**
+     * Plugin configuration diagnostics.
+     */
+    pluginWarnings: string[];
+}
+/**
+ * The servers retained by the session after warmup.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLspStartResult".
+ */
+/** @experimental */
+export interface SessionLspStartResult {
+    /**
+     * Successfully acquired server identifiers.
+     */
+    servers: string[];
+    /**
+     * Individual server startup failures.
+     */
+    errors: LspWarmupError[];
+}
+/**
+ * Result of a language-server startup probe.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLspDiagnoseResult".
+ */
+/** @experimental */
+export interface SessionLspDiagnoseResult {
+    /**
+     * Runtime selection outcome: started, disabled, missing, or unavailable.
+     */
+    status: string;
+    /**
+     * Effective server identifiers, used when the requested server is absent.
+     */
+    availableServers: string[];
+    /**
+     * Child process identifier, or null when no process identifier exists.
+     */
+    pid: number | null;
+    /**
+     * Time spent on process startup, in milliseconds.
+     */
+    spawnTimeMs: number;
+    /**
+     * Child exit observed during the startup window.
+     */
+    immediateExit?: LspProbeExitStatus;
+    /**
+     * Whether the runtime confined the probe in the session sandbox.
+     */
+    sandboxed: boolean;
+}
+/**
+ * A server selected for a startup probe.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLspDiagnoseRequest".
+ */
+/** @experimental */
+export interface SessionLspDiagnoseRequest {
+    /**
+     * Configured server identifier.
+     */
+    serverId: string;
+}
+/**
+ * A persistent user-level server toggle.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLspSetRequest".
+ */
+/** @experimental */
+export interface SessionLspSetRequest {
+    /**
+     * Configured server identifier.
+     */
+    serverId: string;
+    /**
+     * True to remove the user-level disable override.
+     */
+    enabled: boolean;
+}
 /** @experimental */
 export interface SessionCommandsListRequest {
     /**
@@ -37814,6 +39050,13 @@ export interface SessionCommandsListRequest {
     includeClientCommands?: boolean;
 }
 /** @experimental */
+export interface SessionUiRegisterDirectAutoModeSwitchHandlerRequest {
+    /**
+     * Opt into active-request Auto recovery before starting a turn. Attach the handler separately, show the failure reason, and return the user's choice for the originating live session. Require a positive acknowledgment in the registration result. Dismiss offers on auto_mode_recovery_consent.completed and on session resume or disconnect. Omitted or false preserves legacy rate-limit switching.
+     */
+    autoModeRecovery?: boolean;
+}
+/** @experimental */
 export interface SessionHistoryCompactRequest {
     /**
      * Optional user-provided instructions to focus the compaction summary
@@ -37830,27 +39073,6 @@ export interface SessionHistoryCompactRequest {
      */
     tokenLimit?: number;
 }
-/**
- * Internal absolute code-change totals reported by the owning host.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionUsageSetCodeChangesRequest".
- */
-/** @experimental */
-export interface SessionUsageSetCodeChangesRequest {
-    /**
-     * Absolute added-line total, replacing the previous reading.
-     */
-    linesAdded: number;
-    /**
-     * Absolute removed-line total, replacing the previous reading.
-     */
-    linesRemoved: number;
-    /**
-     * Absolute changed-file count; omission preserves the previous count.
-     */
-    filesCount?: number;
-}
 /**
  * The incumbent session-owned quota and account projection.
  *
@@ -38474,6 +39696,17 @@ export declare function createServerRpc(connection: MessageConnection): {
         listTokenPriceUnits: (params?: ModelsListTokenPriceUnitsRequest) => Promise<ModelTokenPriceUnitList>;
     };
     /** @experimental */
+    decisions: {
+        /**
+         * Asks a decision model yes/no, pick-one, or rating questions about shared context and returns normalized probabilities. Sessionless, so a host can classify or route a request before any session exists. Requires the `DECISIONS_API` feature flag. A failed request is a JSON-RPC error whose `data` is a `DecisionErrorData`.
+         *
+         * @param params One request to a decision model: shared context plus the questions to answer about it.
+         *
+         * @returns The decision model's answers.
+         */
+        ask: (params: DecisionsAskRequest) => Promise<DecisionsAskResult>;
+    };
+    /** @experimental */
     azureMl: {
         /**
          * Lists eligible Azure ML local models and redacted warnings before a chat session exists.
@@ -39142,13 +40375,13 @@ export declare function createServerRpc(connection: MessageConnection): {
         httpResponseChunk: (params: LlmInferenceHttpResponseChunkRequest) => Promise<LlmInferenceHttpResponseChunkResult>;
     };
     /** @experimental */
-    kerberosAuth: {
+    network: {
         /**
-         * Registers the calling SDK client's Kerberos callback. The callback authenticates requests made for the client's sessions and, with `runtime` scope, the runtime's shared background traffic; only one connection may hold `runtime` scope. The registration ends when the connection closes.
+         * Registers the calling SDK client's network callbacks, replacing any previous registration. With `resolveProxy`, the client decides the proxies for every request the runtime would otherwise route by ambient proxy settings (proxy environment variables, `NO_PROXY` and operating-system settings), or leaves a request to that routing; requests with an explicitly configured proxy and loopback targets never consult it. With `authenticateNegotiate`, the client supplies the Kerberos tokens for Negotiate proxy challenges instead of native credential lookup. The callbacks serve requests made for the client's sessions and, with `runtime` scope, the runtime's shared traffic, which includes background requests and remote MCP server connections; only one connection may hold `runtime` scope. The registration ends when the connection closes.
          *
-         * @param params Registers the calling SDK connection's Kerberos credential provider.
+         * @param params Registers the calling SDK connection's network callbacks, replacing any previous registration.
          */
-        setProvider: (params: KerberosAuthSetProviderRequest) => Promise<void>;
+        setProvider: (params: NetworkSetProviderRequest) => Promise<void>;
     };
     /** @experimental */
     sessions: {
@@ -39391,6 +40624,17 @@ export declare function createServerRpc(connection: MessageConnection): {
          */
         refresh: (params: ConnectorDiscoveryAccountRequest) => Promise<ConnectorDiscoveryCatalogResult>;
     };
+    /** @experimental */
+    lsp: {
+        /**
+         * Reads the process-wide language-server inventory for a working directory without starting servers. Uses the host configuration home and persisted workspace trust.
+         *
+         * @param params Parameters for a process-wide, read-only language-server inventory.
+         *
+         * @returns Runtime-owned configuration inventory and configuration diagnostics.
+         */
+        list: (params: LspListRequest) => Promise<LspListResult>;
+    };
 };
 /** Create typed session-scoped RPC methods. */
 export declare function createSessionRpc(connection: MessageConnection, sessionId: string): {
@@ -39804,6 +41048,14 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns The session's authoritative model snapshot. Auto preference fields are configuration for the virtual `auto` model and do not change the selected model identifier. The context tier reflects `Session.getContextTier()`, restored from the session journal on resume.
          */
         getCurrent: () => Promise<CurrentModel>;
+        /**
+         * Reads the session's cached startup model state without fetching a catalog or resolving credentials. An interactive host can claim the one-time enablement prompt after applying its startup configuration. Claims remain shared with the owning host and are scoped to this session's lifetime.
+         *
+         * @param params Options for a host's startup model admission check.
+         *
+         * @returns A cached startup model snapshot and an optional one-time enablement prompt. This check never resolves credentials or fetches a catalog.
+         */
+        startupAdmission: (params: ModelStartupAdmissionRequest) => Promise<ModelStartupAdmissionResult>;
         /**
          * Switches the session to a model and optional reasoning configuration.
          *
@@ -39833,7 +41085,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          *
          * @param params Reasoning effort level to apply to the currently selected model.
          *
-         * @returns Update the session's reasoning effort without changing the selected model. Use `switchTo` instead when you also need to change the model. The runtime stores the effort on the session and applies it to subsequent turns.
+         * @returns Update the session's reasoning effort without changing the selected model. Use `switchTo` instead when you also need to change the model. The runtime applies the effort to the next new model request, including tool continuations, without changing retries of an already-started request.
          */
         setReasoningEffort: (params: ModelSetReasoningEffortRequest) => Promise<ModelSetReasoningEffortResult>;
         /**
@@ -40779,6 +42031,12 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
              */
             refresh: (params?: SessionPluginsMarketplacesRefreshRequest) => Promise<MarketplaceRefreshResult>;
         };
+        /**
+         * Reads Team and managed soft plugin defaults for the live session. Does not install plugins or persist user preferences.
+         *
+         * @returns Soft plugin defaults for this session, without persistent user preferences or hard policy.
+         */
+        getDefaults: () => Promise<SessionPluginDefaults>;
         /**
          * Reloads the session's plugin set, refreshing MCP servers, custom agents, hooks, and skills cache so SDK-driven changes via `server.plugins.*` take effect immediately.
          *
@@ -40854,6 +42112,40 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @param params Parameters for (re)loading the merged LSP configuration set.
          */
         initialize: (params: LspInitializeRequest) => Promise<void>;
+        /**
+         * Reads language-server configuration and diagnostics using the session's settings and active plugins. Explicit force reloads the files from disk.
+         *
+         * @param params Parameters for (re)loading the merged LSP configuration set.
+         *
+         * @returns Runtime-owned configuration inventory and configuration diagnostics.
+         */
+        list: (params: LspInitializeRequest) => Promise<SessionLspListResult>;
+        /**
+         * Initializes and retains configured language servers under the session's effective LSP sandbox policy. The runtime owns client leases, callbacks, and process lifetime.
+         *
+         * @param params Parameters for (re)loading the merged LSP configuration set.
+         *
+         * @returns The servers retained by the session after warmup.
+         */
+        start: (params: LspInitializeRequest) => Promise<SessionLspStartResult>;
+        /**
+         * Stops the session's language-server clients without changing another session or the process-wide inventory.
+         */
+        stop: () => Promise<void>;
+        /**
+         * Probes one configured language-server process under the session's effective LSP sandbox policy, then terminates the probe process.
+         *
+         * @param params A server selected for a startup probe.
+         *
+         * @returns Result of a language-server startup probe.
+         */
+        diagnose: (params: SessionLspDiagnoseRequest) => Promise<SessionLspDiagnoseResult>;
+        /**
+         * Persists a user-level language-server enable override in the session's configuration home. Reload configuration to apply it.
+         *
+         * @param params A persistent user-level server toggle.
+         */
+        set: (params: SessionLspSetRequest) => Promise<void>;
     };
     /** @experimental */
     extensions: {
@@ -41106,11 +42398,13 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          */
         handlePendingExitPlanMode: (params: UIHandlePendingExitPlanModeRequest) => Promise<UIHandlePendingResult>;
         /**
-         * Registers an in-process handler for auto-mode-switch requests so the server bridge skips dispatch.
+         * Registers an in-process handler for auto-mode-switch requests so the server bridge skips dispatch. Set `autoModeRecovery` to also handle Auto recovery consent offers.
+         *
+         * @param params Optional recovery-aware enrollment for an in-process Auto-switch handler.
          *
-         * @returns Register an in-process handler for `auto_mode_switch.requested` events. The caller still attaches the actual listener via the standard event-subscription mechanism; this registration solely tells the server bridge to skip its own dispatch (so a remote client doesn't race the in-process handler for the same requestId).
+         * @returns Registers an in-process Auto-switch responder and suppresses server-bridge dispatch to avoid competing responders for the same requestId. When requested, also enrolls the responder for active-request Auto recovery and acknowledges support. Attach the actual listener separately through standard event subscriptions before starting a turn, and release the handle when the responder is removed.
          */
-        registerDirectAutoModeSwitchHandler: () => Promise<UIRegisterDirectAutoModeSwitchHandlerResult>;
+        registerDirectAutoModeSwitchHandler: (params?: SessionUiRegisterDirectAutoModeSwitchHandlerRequest) => Promise<UIRegisterDirectAutoModeSwitchHandlerResult>;
         /**
          * Unregisters a previously-registered in-process auto-mode-switch handler by its opaque handle.
          *
@@ -41979,17 +43273,25 @@ export interface ExtensionLaunchProviderHandler {
      */
     resolve(params: ExtensionLaunchProviderResolveRequest): Promise<ExtensionLaunchProviderResolveResult>;
 }
-/** Handler for `kerberosAuth` client global API methods. */
+/** Handler for `network` client global API methods. */
 /** @experimental */
-export interface KerberosAuthHandler {
+export interface NetworkHandler {
+    /**
+     * Requests the proxies for a request target as a PAC-style proxy list, or no list to leave the request to the runtime's own proxy resolution. The runtime caches answers for a few seconds and fails the request, rather than connecting directly, when the callback fails.
+     *
+     * @param params Requests the proxies for a request target.
+     *
+     * @returns Proxies for a request target, in the order to try them.
+     */
+    resolveProxy(params: NetworkResolveProxyRequest): Promise<NetworkResolveProxyResult>;
     /**
-     * Requests a fresh base64 initial SPNEGO token for a Kerberos service principal; the runtime currently uses it for proxy authentication. Tokens must not be logged, persisted or reused across connections. Continuation challenges are not supported by this callback.
+     * Requests a fresh base64 initial SPNEGO token for a Kerberos service principal; the runtime uses it to answer Negotiate proxy challenges. Tokens must not be logged, persisted or reused across connections. Continuation challenges are not supported by this callback.
      *
      * @param params Requests a fresh initial SPNEGO token for a Kerberos service principal.
      *
-     * @returns Client credentials for a single authentication exchange.
+     * @returns Client credentials for a single Negotiate authentication exchange.
      */
-    acquire(params: KerberosAuthAcquireRequest): Promise<KerberosAuthAcquireResult>;
+    authenticateNegotiate(params: NetworkAuthenticateNegotiateRequest): Promise<NetworkAuthenticateNegotiateResult>;
 }
 /** Handler for `llmInference` client global API methods. */
 /** @experimental */
@@ -42071,7 +43373,7 @@ export interface InstallationsHandler {
 export interface ClientGlobalApiHandlers {
     host?: HostHandler;
     extensionLaunchProvider?: ExtensionLaunchProviderHandler;
-    kerberosAuth?: KerberosAuthHandler;
+    network?: NetworkHandler;
     llmInference?: LlmInferenceHandler;
     gitHubTelemetry?: GitHubTelemetryHandler;
     gitHubToken?: GitHubTokenHandler;