@github/copilot-sdk 1.0.8-preview.0 → 1.0.9-preview.0

package/dist/generated/rpc.d.ts

@@ -58,6 +58,25 @@ export type AgentInfoSource =
  | "plugin"
 /** Agent built into the Copilot runtime. */
  | "builtin";
+/**
+ * Controls whether built-in agents and authored prompt text are included.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AgentListRequest".
+ */
+/** @experimental */
+export type AgentListRequest = {
+    [k: string]: unknown | undefined;
+} | {
+    /**
+     * When true, request the session's configured built-in agents alongside custom agents. Listing applies feature, context, inclusion, exclusion, and user-disabled-agent policy, but does not evaluate transient invocation requirements such as model availability. Built-in metadata may be omitted when the session cannot project it, such as a relay session.
+     */
+    includeBuiltInAgents?: boolean;
+    /**
+     * When true, request authored base prompt text on each AgentInfo. Prompt text may be omitted when unavailable, such as for agents projected through a relay session.
+     */
+    includePrompt?: boolean;
+};
 /**
  * Process kind tag for the registry entry
  *
@@ -246,6 +265,29 @@ export type SlashCommandKind =
  */
 /** @experimental */
 export type SlashCommandInputCompletion = "directory";
+/**
+ * Optional filters controlling which command sources to include in the listing.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CommandsListRequest".
+ */
+/** @experimental */
+export type CommandsListRequest = {
+    [k: string]: unknown | undefined;
+} | {
+    /**
+     * Include runtime built-in commands
+     */
+    includeBuiltins?: boolean;
+    /**
+     * Include enabled user-invocable skills and commands
+     */
+    includeSkills?: boolean;
+    /**
+     * Include commands registered by protocol clients, including SDK clients and extensions
+     */
+    includeClientCommands?: boolean;
+};
 /**
  * Result of the queued command execution.
  *
@@ -485,17 +527,53 @@ export type ExternalToolTextResultForLlmContentResourceLinkIconTheme =
 /** @experimental */
 export type ExternalToolTextResultForLlmContentResourceDetails = EmbeddedTextResourceContents | EmbeddedBlobResourceContents;
 /**
- * Kind of factory progress line.
+ * Execution-critical factory storage operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryDurableOperation".
+ */
+/** @experimental */
+export type FactoryDurableOperation = 
+/** Creating the durable run and declared phases. */
+"createRun"
+/** Persisting the transition to running. */
+ | "markRunStarted"
+/** Persisting the terminal run envelope. */
+ | "finishRun"
+/** Persisting subagent admission accounting. */
+ | "reserveAgent"
+/** Rolling back an uncommitted subagent admission. */
+ | "releaseAgent"
+/** Persisting an idempotent model-usage charge. */
+ | "chargeCredit"
+/** Persisting active execution time. */
+ | "addElapsed"
+/** Reading the authoritative AI-credit total. */
+ | "reconcileCreditTotal"
+/** Reading a journal entry without treating storage failure as a cache miss. */
+ | "journalGet"
+/** Persisting a journal entry before reporting success. */
+ | "journalPut";
+/**
+ * Current or terminal state of a factory run.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "FactoryLogLineKind".
+ * via the `definition` "FactoryRunStatus".
  */
 /** @experimental */
-export type FactoryLogLineKind = 
-/** A narrator log line. */
-"log"
-/** A named factory phase marker. */
- | "phase";
+export type FactoryRunStatus = 
+/** The run was minted and is awaiting approval. */
+"pending"
+/** The run is executing. */
+ | "running"
+/** The run completed successfully. */
+ | "completed"
+/** The run was interrupted while resource budget remained. */
+ | "halted"
+/** The run was cancelled before completion. */
+ | "cancelled"
+/** The factory body failed or reached a cumulative resource ceiling. */
+ | "error";
 /**
  * Machine-readable factory run failure.
  *
@@ -524,6 +602,17 @@ export type FactoryRunFailure = {
      */
     reason: string;
     type: "factory_resume_declined";
+} | {
+    /**
+     * Stable failure code.
+     */
+    code: string;
+    operation: FactoryDurableOperation;
+    /**
+     * Factory run identifier.
+     */
+    runId: string;
+    type: "factory_durable_failure";
 };
 /**
  * Cumulative resource ceiling that stopped a factory run.
@@ -535,28 +624,38 @@ export type FactoryRunFailure = {
 export type FactoryRunFailureKind = 
 /** The run admitted the approved maximum total number of subagents. */
 "maxTotalSubagents"
-/** The run reached the approved timeout deadline. */
- | "timeout";
+/** The run reached the approved accumulated active-execution time in seconds. */
+ | "timeoutSeconds"
+/** The run's settled subagent model usage exceeded the approved AI-credit ceiling, or no headroom remained for another subagent. */
+ | "maxAiCredits";
 /**
- * Current or terminal state of a factory run.
+ * Kind of factory progress line.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "FactoryRunStatus".
+ * via the `definition` "FactoryLogLineKind".
  */
 /** @experimental */
-export type FactoryRunStatus = 
-/** The run was minted and is awaiting approval. */
+export type FactoryLogLineKind = 
+/** A narrator log line. */
+"log"
+/** A named factory phase marker. */
+ | "phase";
+/**
+ * Derived lifecycle state of a factory phase.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryPhaseStatus".
+ */
+/** @experimental */
+export type FactoryPhaseStatus = 
+/** The phase has not been entered yet. */
 "pending"
-/** The run is executing. */
- | "running"
-/** The run completed successfully. */
+/** The phase is currently entered and accumulating active time. */
+ | "active"
+/** The phase was entered and has since been closed. */
  | "completed"
-/** The run was interrupted while resource budget remained. */
- | "halted"
-/** The run was cancelled before completion. */
- | "cancelled"
-/** The factory body failed or reached a cumulative resource ceiling. */
- | "error";
+/** The phase was never entered because a later phase was entered or the run reached a terminal state. */
+ | "skipped";
 /**
  * Content filtering mode to apply to all tools, or a map of tool name to content filtering mode.
  *
@@ -567,6 +666,109 @@ export type FactoryRunStatus =
 export type FilterMapping = {
     [k: string]: ContentFilterMode;
 } | ContentFilterMode;
+/**
+ * Optional compaction parameters.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryCompactRequest".
+ */
+/** @experimental */
+export type HistoryCompactRequest = {
+    [k: string]: unknown | undefined;
+} | {
+    /**
+     * Optional user-provided instructions to focus the compaction summary
+     */
+    customInstructions?: string;
+    /**
+     * What initiated this compaction request, recorded as the `trigger` on the persisted `session.compaction_start` / `session.compaction_complete` events. When absent, the compaction is persisted without trigger attribution (initiator unknown).
+     */
+    trigger?: "manual"
+    /** Compaction requested while switching to a model with a smaller context window. */
+     | "model_switch";
+    /**
+     * Context window token limit this compaction is targeting, recorded as the `tokenLimit` on the persisted `session.compaction_start` / `session.compaction_complete` events. Set it when the compaction targets a window other than the compacting model's own, e.g. switching to a model with a smaller context window: the compaction still runs on the current model, so the limit that motivated it would otherwise be lost. When absent, the events record the compacting model's own resolved limit. Attribution metadata only - it does not change how much the compaction removes.
+     */
+    tokenLimit?: number;
+};
+/**
+ * Reason a captured file was not restored.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryFileRestoreSkipReason".
+ */
+/** @experimental */
+export type HistoryFileRestoreSkipReason = 
+/** The file changed after Copilot's last captured write. */
+"user-modified"
+/** A faithful preimage was not captured. */
+ | "skipped-capture";
+/**
+ * Reason a rewind read (rewind points, file-restore preview, or session diff) could not be answered from the session's file-change captures.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryRewindUnavailableReason".
+ */
+/** @experimental */
+export type HistoryRewindUnavailableReason = 
+/** The session did not opt into file-change tracking before its first turn. */
+"file-change-tracking-disabled"
+/** The session still has work that may mutate files or history. Transient: the same request succeeds once the session settles, so callers should retry rather than treat it as a failure. */
+ | "session-busy"
+/** Remote-backed rewind routing is not supported. */
+ | "unsupported-remote-session";
+/**
+ * Aggregate file change represented by a rewind preview.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryRewindChangeType".
+ */
+/** @experimental */
+export type HistoryRewindChangeType = 
+/** The discarded turns created the file. */
+"created"
+/** The discarded turns deleted the file. */
+ | "deleted"
+/** The discarded turns modified the file. */
+ | "modified";
+/**
+ * Scope of a rewind operation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryRewindMode".
+ */
+/** @experimental */
+export type HistoryRewindMode = 
+/** Discard conversation events while leaving files unchanged. */
+"conversation"
+/** Discard conversation events and restore captured files changed by those turns. */
+ | "conversation-and-files";
+/**
+ * Outcome of a rewind request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryRewindOutcome".
+ */
+/** @experimental */
+export type HistoryRewindOutcome = 
+/** The requested rewind completed; reachable in either mode. */
+"success"
+/** The session still has work that may mutate files or history; reachable in either mode. */
+ | "session-busy"
+/** A conversation-and-files rewind was requested for a session that did not enable capture; conversation-only rewinds never produce this. */
+ | "file-change-tracking-disabled"
+/** Remote-backed rewind routing is not supported; reachable in either mode. */
+ | "unsupported-remote-session"
+/** File restore failed and all applied file changes were rolled back; only conversation-and-files rewinds produce this. */
+ | "files-rolled-back"
+/** File restore failed and its rollback could not fully restore the pre-rewind state; only conversation-and-files rewinds produce this. */
+ | "rollback-incomplete"
+/** Conversation truncation failed. In conversation-and-files mode any files that were restored are left in place because conversation history cannot be un-truncated; in conversation-only mode no files are restored. Consult restoredFiles for what, if anything, was applied. */
+ | "truncation-failed"
+/** The conversation was rewound (and, in conversation-and-files mode, captured files were restored), but persisted checkpoints could not be cleaned up; reachable in either mode. */
+ | "checkpoint-cleanup-failed"
+/** Files and conversation were rewound, but obsolete file snapshots could not be removed; only conversation-and-files rewinds produce this. */
+ | "snapshot-prune-failed";
 /**
  * Source for direct repo installs (when marketplace is empty)
  *
@@ -1115,6 +1317,21 @@ export type ModelPickerPriceCategory =
  | "high"
 /** Highest relative token cost tier. */
  | "very_high";
+/**
+ * Optional listing options.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelListRequest".
+ */
+/** @experimental */
+export type ModelListRequest = {
+    [k: string]: unknown | undefined;
+} | {
+    /**
+     * If true, bypasses the per-session model list cache and re-fetches from CAPI.
+     */
+    skipCache?: boolean;
+};
 /**
  * Provider type. Defaults to "openai" for generic OpenAI-compatible APIs.
  *
@@ -1315,6 +1532,37 @@ export type PermissionsSetApproveAllSource =
  | "autopilot_confirmation"
 /** Allow-all was enabled through an RPC caller. */
  | "rpc";
+/**
+ * Optional flags controlling which side effects the reload performs.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PluginsReloadRequest".
+ */
+/** @experimental */
+export type PluginsReloadRequest = {
+    [k: string]: unknown | undefined;
+} | {
+    /**
+     * Reload MCP server connections after refreshing plugins. Defaults to true.
+     */
+    reloadMcp?: boolean;
+    /**
+     * Re-run custom-agent discovery after refreshing plugins. Defaults to true.
+     */
+    reloadCustomAgents?: boolean;
+    /**
+     * Re-load user, plugin, and (subject to `deferRepoHooks`) repo hooks. Defaults to true. Has no effect when the host has not registered a hook reloader (e.g. remote sessions).
+     */
+    reloadHooks?: boolean;
+    /**
+     * Re-discover and relaunch subprocess extensions (including plugin-shipped extensions) after refreshing plugins. Defaults to true. Has no effect when the session has no active extension controller (e.g. extensions were not requested for the session).
+     */
+    reloadExtensions?: boolean;
+    /**
+     * When true, skip repo-level hooks during the hook reload. Use before folder trust is confirmed; load them post-trust via `sessions.loadDeferredRepoHooks`.
+     */
+    deferRepoHooks?: boolean;
+};
 /**
  * Provider family. Matches the `type` field of a BYOK provider config.
  *
@@ -1353,6 +1601,21 @@ export type ProviderEndpointTransport =
 "http"
 /** WebSocket transport. */
  | "websockets";
+/**
+ * Optional model identifier to scope the endpoint snapshot to.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ProviderGetEndpointRequest".
+ */
+/** @experimental */
+export type ProviderGetEndpointRequest = {
+    [k: string]: unknown | undefined;
+} | {
+    /**
+     * Model identifier the caller intends to use against the returned endpoint. Used to pick the correct wire shape. Omit to use whichever model the session is currently using.
+     */
+    modelId?: string;
+};
 /**
  * Attachment union accepted by push input, covering files, directories, GitHub objects, blobs, snippets, and extension context.
  *
@@ -1375,6 +1638,34 @@ export type PushAttachmentGitHubReferenceType =
  | "pr"
 /** GitHub discussion reference. */
  | "discussion";
+/**
+ * The UI mode the agent was in when this message was sent. Defaults to the session's current mode.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SendAgentMode".
+ */
+/** @experimental */
+export type SendAgentMode = 
+/** The agent is responding interactively to the user. */
+"interactive"
+/** The agent is preparing a plan before making changes. */
+ | "plan"
+/** The agent is working autonomously toward task completion. */
+ | "autopilot"
+/** The agent is in shell-focused UI mode. */
+ | "shell";
+/**
+ * How to deliver the message. `enqueue` (default) appends to the message queue. `immediate` interjects during an in-progress turn.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SendMode".
+ */
+/** @experimental */
+export type SendMode = 
+/** Append the message to the normal session queue. */
+"enqueue"
+/** Interject the message during the in-progress turn. */
+ | "immediate";
 /**
  * Whether this item is a queued user message or a queued slash command / model change
  *
@@ -1421,34 +1712,6 @@ export type RemoteSessionMetadataTaskType =
 "cca"
 /** CLI remote task. */
  | "cli";
-/**
- * The UI mode the agent was in when this message was sent. Defaults to the session's current mode.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendAgentMode".
- */
-/** @experimental */
-export type SendAgentMode = 
-/** The agent is responding interactively to the user. */
-"interactive"
-/** The agent is preparing a plan before making changes. */
- | "plan"
-/** The agent is working autonomously toward task completion. */
- | "autopilot"
-/** The agent is in shell-focused UI mode. */
- | "shell";
-/**
- * How to deliver the message. `enqueue` (default) appends to the message queue. `immediate` interjects during an in-progress turn.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SendMode".
- */
-/** @experimental */
-export type SendMode = 
-/** Append the message to the normal session queue. */
-"enqueue"
-/** Interject the message during the in-progress turn. */
- | "immediate";
 /**
  * Session capability enabled for this session
  *
@@ -1529,6 +1792,20 @@ export type SessionFsSqliteQueryType =
  | "query"
 /** Execute INSERT, UPDATE, or DELETE SQL and return affected-row metadata. */
  | "run";
+/**
+ * SQLite transaction failure classification.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionFsSqliteTransactionErrorClass".
+ */
+/** @experimental */
+export type SessionFsSqliteTransactionErrorClass = 
+/** SQLite reported BUSY or LOCKED before commit; the transaction was rolled back and may be retried. */
+"busyOrLocked"
+/** The statement, database, or provider failed definitively and must not be retried automatically. */
+ | "fatal"
+/** The transport failed after the provider may have committed; retrying could duplicate effects. */
+ | "postCommitAmbiguous";
 /**
  * Source descriptor for direct repo installs (when marketplace is empty)
  *
@@ -1538,10 +1815,94 @@ export type SessionFsSqliteQueryType =
 /** @experimental */
 export type SessionInstalledPluginSource = string | SessionInstalledPluginSourceGitHub | SessionInstalledPluginSourceUrl | SessionInstalledPluginSourceLocal;
 /**
- * Local or remote session metadata entry. Narrow on `isRemote` to access source-specific fields.
+ * Client population used for the prediction baseline.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SessionListEntry".
+ * via the `definition` "SessionLimitPredictionClientType".
+ */
+/** @experimental */
+export type SessionLimitPredictionClientType = 
+/** Interactive CLI sessions where a user can accept, edit, or top up the limit. */
+"cli-interactive"
+/** Prompt/non-interactive CLI sessions where the initial limit must cover more of the run. */
+ | "cli-prompt";
+/**
+ * Baseline fallback level used to create the prediction.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLimitPredictionSource".
+ */
+/** @experimental */
+export type SessionLimitPredictionSource = 
+/** The prediction used the exact resolved model's baseline cell. */
+"model"
+/** The exact model was unavailable, so the prediction used the model family's baseline cell. */
+ | "family"
+/** No model or family cell was available, so the prediction used the global client-type baseline cell. */
+ | "global";
+/**
+ * Semantic usage tier used for a recommended cap or additional headroom.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLimitPredictionTier".
+ */
+/** @experimental */
+export type SessionLimitPredictionTier = 
+/** Recommended starting tier. */
+"recommended"
+/** Additional headroom for longer-running sessions. */
+ | "additional_headroom"
+/** Generous headroom for unusually high usage. */
+ | "generous_headroom"
+/** Maximum available headroom tier. */
+ | "maximum_headroom";
+/**
+ * Parameters for predicting an AI-credit session limit. Omitting `modelId` uses the session's currently selected model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLimitPredictionRequest".
+ */
+/** @experimental */
+export type SessionLimitPredictionRequest = {
+    [k: string]: unknown | undefined;
+} | {
+    /**
+     * Optional model identifier override. If omitted, the session's current model is used.
+     */
+    modelId?: string;
+    clientType?: SessionLimitPredictionClientType;
+};
+/**
+ * Prediction result. Available results include prediction details; unavailable results include an explicit reason.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLimitPredictionResult".
+ */
+/** @experimental */
+export type SessionLimitPredictionResult = {
+    prediction: SessionLimitPredictionDetails;
+    kind: "available";
+} | {
+    reason: SessionLimitPredictionUnavailableReason;
+    kind: "unavailable";
+};
+/**
+ * Reason a prediction could not be computed.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLimitPredictionUnavailableReason".
+ */
+/** @experimental */
+export type SessionLimitPredictionUnavailableReason = 
+/** The current model is auto and has not resolved to a concrete model yet. */
+"auto_unresolved"
+/** No model was provided and the session does not currently have a selected model. */
+ | "no_model";
+/**
+ * Local or remote session metadata entry. Narrow on `isRemote` to access source-specific fields.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionListEntry".
  */
 /** @experimental */
 export type SessionListEntry = LocalSessionMetadataValue | RemoteSessionMetadataValue;
@@ -1617,6 +1978,30 @@ export type SessionOpenOptionsReasoningSummary =
  | "concise"
 /** Request a detailed summary of model reasoning. */
  | "detailed";
+/**
+ * Controls automatic non-interactive profile loading where supported. Explicit initScripts are unaffected.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ShellInitProfile".
+ */
+/** @experimental */
+export type ShellInitProfile = 
+/** Disable automatic non-interactive profile loading. Explicit initScripts still run. */
+"none"
+/** Allow automatic non-interactive profile loading when supported. Explicit initScripts still run. */
+ | "non-interactive";
+/**
+ * Supported built-in shells for initialization scripts.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ShellInitScriptShell".
+ */
+/** @experimental */
+export type ShellInitScriptShell = 
+/** Source the script in the built-in Bash shell on macOS and Linux. */
+"bash"
+/** Source the script in the built-in PowerShell shell on Windows. */
+ | "powershell";
 /**
  * How MCP server environment values are interpreted.
  *
@@ -2074,6 +2459,14 @@ export type WorkspacesWorkspaceDetailsHostType =
  */
 /** @experimental */
 export type AccountGetAllUsersResult = AccountAllUsers[];
+/**
+ * The number of running background agents (task-registry agents) that were cancelled.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionCancelAllBackgroundAgentsResult".
+ */
+/** @experimental */
+export type SessionCancelAllBackgroundAgentsResult = number;
 /**
  * Parameters for aborting the current turn
  *
@@ -2794,7 +3187,7 @@ export interface AgentGetCurrentResult {
     agent?: AgentInfo | null;
 }
 /**
- * Custom agent metadata, including identifiers, display details, source, tools, model, MCP servers, skills, and file path.
+ * Agent metadata, including identifiers, display details, source, tools, model, MCP servers, skills, and file path.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AgentInfo".
@@ -2802,7 +3195,7 @@ export interface AgentGetCurrentResult {
 /** @experimental */
 export interface AgentInfo {
     /**
-     * Unique identifier of the custom agent
+     * Name of the agent. Use `id` as the stable selection identifier.
      */
     name: string;
     /**
@@ -2831,7 +3224,7 @@ export interface AgentInfo {
      */
     tools?: string[];
     /**
-     * Preferred model id for this agent. When omitted, inherits the outer agent's model.
+     * Authored preferred model id for this agent. Runtime model selection may choose a different model; omitted means no authored preference.
      */
     model?: string;
     /**
@@ -2846,9 +3239,13 @@ export interface AgentInfo {
      * Skill names preloaded into this agent's context. Omitted means none.
      */
     skills?: string[];
+    /**
+     * Authored base prompt for the agent. Runtime prompt assembly may add dynamic context at invocation time. Omitted from `session.agent.list` unless `includePrompt` is true.
+     */
+    prompt?: string;
 }
 /**
- * Custom agents available to the session.
+ * Agents available to the session.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AgentList".
@@ -2856,7 +3253,7 @@ export interface AgentInfo {
 /** @experimental */
 export interface AgentList {
     /**
-     * Available custom agents
+     * Available agents
      */
     agents: AgentInfo[];
 }
@@ -3160,6 +3557,32 @@ export interface AllowAllPermissionState {
     enabled: boolean;
     mode?: PermissionsAllowAllMode;
 }
+/**
+ * The running runtime's complete catalog of well-known built-in model IDs, including supported models and additional IDs with built-in metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "BuiltInModelCatalog".
+ */
+/** @experimental */
+export interface BuiltInModelCatalog {
+    /**
+     * Built-in model entries.
+     */
+    models: BuiltInModelCatalogEntry[];
+}
+/**
+ * A well-known model in the runtime's built-in catalog.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "BuiltInModelCatalogEntry".
+ */
+/** @experimental */
+export interface BuiltInModelCatalogEntry {
+    /**
+     * Well-known runtime model ID suitable for `ProviderConfig.modelId` or `ProviderModelConfig.modelId`. This is not necessarily the provider-facing deployment or model name and does not indicate CAPI entitlement or provider availability.
+     */
+    id: string;
+}
 /**
  * Cancellation result for a user-requested shell command.
  *
@@ -3690,27 +4113,6 @@ export interface CommandsInvokeRequest {
      */
     input?: string;
 }
-/**
- * Optional filters controlling which command sources to include in the listing.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "CommandsListRequest".
- */
-/** @experimental */
-export interface CommandsListRequest {
-    /**
-     * Include runtime built-in commands
-     */
-    includeBuiltins?: boolean;
-    /**
-     * Include enabled user-invocable skills and commands
-     */
-    includeSkills?: boolean;
-    /**
-     * Include commands registered by protocol clients, including SDK clients and extensions
-     */
-    includeClientCommands?: boolean;
-}
 /**
  * Queued-command request ID and the result indicating whether the host executed it (and whether to stop processing further queued commands).
  *
@@ -3921,6 +4323,53 @@ export interface ConnectRemoteSessionParams {
      */
     sessionId: string;
 }
+/**
+ * Local file system absolute paths within the session working directory to check against its content-exclusion policy.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ContentExclusionCheckPathsRequest".
+ */
+/** @experimental */
+export interface ContentExclusionCheckPathsRequest {
+    /**
+     * Local file system absolute paths within the session working directory to check. Results are returned in the same order, including duplicates.
+     */
+    paths: string[];
+}
+/**
+ * Batch content-exclusion result. Callers must fail closed when policy evaluation is unavailable.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ContentExclusionCheckPathsResult".
+ */
+/** @experimental */
+export interface ContentExclusionCheckPathsResult {
+    /**
+     * Whether the session's policy service was available for the complete batch. When false, checks is empty and callers must treat every requested path as excluded.
+     */
+    available: boolean;
+    /**
+     * Per-path decisions in request order. Empty when available is false.
+     */
+    checks: ContentExclusionPathCheck[];
+}
+/**
+ * Content-exclusion decision for one requested path.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ContentExclusionPathCheck".
+ */
+/** @experimental */
+export interface ContentExclusionPathCheck {
+    /**
+     * The path supplied by the caller.
+     */
+    path: string;
+    /**
+     * Whether the session's complete content-exclusion policy excludes the path.
+     */
+    excluded: boolean;
+}
 /**
  * A single large message currently in context.
  *
@@ -4214,6 +4663,10 @@ export interface EventLogReadRequest {
     waitMs?: number;
     types?: EventLogTypes;
     agentScope?: EventsAgentScope;
+    /**
+     * When false, skip ephemeral events entirely and return only durable (persisted) events. History-backfill callers that discard ephemerals anyway should set this so the read is bounded by the durable log length instead of racing the ephemeral ring on a busy session. Defaults to true (ephemerals are interleaved with durable events in creation order).
+     */
+    includeEphemeral?: boolean;
 }
 /**
  * Indicates whether the operation succeeded.
@@ -4250,7 +4703,7 @@ export interface EventLogTailResult {
 /** @experimental */
 export interface EventsReadResult {
     /**
-     * Events are delivered in two batches per read: persisted events first (in append order), then ephemeral events (in seq order). When `waitMs > 0` and the catch-up batches were empty, post-wait events follow the same two-batch ordering. Persisted and ephemeral events do not interleave within a single read.
+     * Session events for this batch, merged into a single stream in creation order: durable (persisted) events and ephemeral events interleave exactly as they were emitted. Set `includeEphemeral: false` to receive only durable events. Ephemeral events are never replayable once pruned from the in-memory ring, so a consumer that needs them should keep reading with a non-zero `waitMs`.
      */
     events: SessionEvent[];
     /**
@@ -4704,6 +5157,10 @@ export interface FactoryAgentRequest {
      * Factory run identifier that owns the subagent.
      */
     factoryRunId: string;
+    /**
+     * Opaque token identifying the current factory execution attempt.
+     */
+    executionToken: string;
     /**
      * Prompt to send to the subagent.
      */
@@ -4725,6 +5182,28 @@ export interface FactoryAgentResult {
         [k: string]: unknown | undefined;
     };
 }
+/**
+ * Prompt-safe durable identity and live status for a direct factory agent.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryAgentSummary".
+ */
+/** @experimental */
+export interface FactoryAgentSummary {
+    agentId: string;
+    toolCallId: string;
+    runId: string;
+    phaseId: string | null;
+    label: string;
+    agentType: string;
+    status: string;
+    requestedModel?: string;
+    resolvedModel?: string;
+    startedAt?: number;
+    completedAt?: number;
+    activeMs: number;
+    activity?: string;
+}
 /**
  * Parameters for cancelling a factory run.
  *
@@ -4738,6 +5217,30 @@ export interface FactoryCancelRequest {
      */
     runId: string;
 }
+/**
+ * Current factory phase identity.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryCurrentPhase".
+ */
+/** @experimental */
+export interface FactoryCurrentPhase {
+    id: string;
+    ordinal: number | null;
+}
+/**
+ * Declared or approved factory resource ceilings.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryDeclaredLimits".
+ */
+/** @experimental */
+export interface FactoryDeclaredLimits {
+    maxConcurrentSubagents?: number;
+    maxTotalSubagents?: number;
+    timeoutSeconds?: number;
+    maxAiCredits?: number;
+}
 /**
  * Parameters sent to the owning extension to execute a factory closure.
  *
@@ -4758,6 +5261,10 @@ export interface FactoryExecuteRequest {
      * Factory run identifier.
      */
     runId: string;
+    /**
+     * Opaque token identifying this factory execution attempt.
+     */
+    executionToken: string;
     /**
      * Factory input value.
      */
@@ -4776,10 +5283,39 @@ export interface FactoryExecuteResult {
     /**
      * Factory result value.
      */
-    result: {
+    result?: {
         [k: string]: unknown | undefined;
     };
 }
+/**
+ * Parameters for paging factory progress.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryGetRunProgressRequest".
+ */
+/** @experimental */
+export interface FactoryGetRunProgressRequest {
+    /**
+     * Factory run identifier.
+     */
+    runId: string;
+    /**
+     * Optional phase identifier used to scope records and cursors.
+     */
+    phaseId?: string;
+    /**
+     * Exclusive forward cursor.
+     */
+    afterSeq?: number;
+    /**
+     * Exclusive backward cursor.
+     */
+    beforeSeq?: number;
+    /**
+     * Maximum records to return. Defaults to 200 and is capped at 500.
+     */
+    limit?: number;
+}
 /**
  * Parameters for retrieving a factory run.
  *
@@ -4805,6 +5341,10 @@ export interface FactoryJournalGetRequest {
      * Factory run identifier.
      */
     runId: string;
+    /**
+     * Opaque token identifying the current factory execution attempt.
+     */
+    executionToken: string;
     /**
      * Namespaced journal key.
      */
@@ -4841,6 +5381,10 @@ export interface FactoryJournalPutRequest {
      * Factory run identifier.
      */
     runId: string;
+    /**
+     * Opaque token identifying the current factory execution attempt.
+     */
+    executionToken: string;
     /**
      * Namespaced journal key.
      */
@@ -4852,6 +5396,78 @@ export interface FactoryJournalPutRequest {
         [k: string]: unknown | undefined;
     };
 }
+/**
+ * Empty parameters for listing factory runs.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryListRunsRequest".
+ */
+/** @experimental */
+export interface FactoryListRunsRequest {
+}
+/**
+ * Factory runs in durable creation order.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryListRunsResult".
+ */
+/** @experimental */
+export interface FactoryListRunsResult {
+    runs: FactoryRunSummary[];
+}
+/**
+ * Durable factory run summary with read-time live overlays.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryRunSummary".
+ */
+/** @experimental */
+export interface FactoryRunSummary {
+    runId: string;
+    factoryName: string;
+    description: string;
+    status: FactoryRunStatus;
+    revision: number;
+    createdAt: number;
+    startedAt: number | null;
+    updatedAt: number;
+    completedAt: number | null;
+    currentPhase: FactoryCurrentPhase | null;
+    declaredPhaseCount: number;
+    liveAgentCount: number;
+    totalSpawnedAgentCount: number;
+    consumed: FactoryRunConsumed;
+    declaredLimits: FactoryDeclaredLimits;
+    approved: FactoryDeclaredLimits | null;
+    observedAt: number;
+    activeSegmentStartedAt: number | null;
+    terminal: FactoryRunTerminal | null;
+}
+/**
+ * Durable factory resource consumption.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryRunConsumed".
+ */
+/** @experimental */
+export interface FactoryRunConsumed {
+    activeMs: number;
+    subagents: number;
+    nanoAiu: number;
+}
+/**
+ * Prompt-safe terminal factory outcome.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryRunTerminal".
+ */
+/** @experimental */
+export interface FactoryRunTerminal {
+    reason?: string;
+    failure?: FactoryRunFailure;
+    error?: string;
+    resultPreview?: string;
+}
 /**
  * One ordered factory progress line.
  *
@@ -4882,65 +5498,137 @@ export interface FactoryLogRequest {
      * Factory run identifier.
      */
     runId: string;
+    /**
+     * Opaque token identifying the current factory execution attempt.
+     */
+    executionToken: string;
     /**
      * Ordered progress lines to append.
      */
     lines: FactoryLogLine[];
 }
 /**
- * Wire-only per-invocation factory resource ceiling overrides.
+ * Durable lifecycle and timing for one factory phase.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "FactoryRunLimits".
+ * via the `definition` "FactoryPhaseObservation".
  */
 /** @experimental */
-export interface FactoryRunLimits {
+export interface FactoryPhaseObservation {
+    id: string;
+    ordinal: number | null;
+    title: string;
+    detail?: string;
+    status: FactoryPhaseStatus;
+    lastEnteredRunAttempt: number;
+    entryCount: number;
+    startedAt?: number;
+    completedAt?: number;
+    accumulatedActiveMs: number;
+    currentActiveMs: number;
+    totalAgentCount: number;
+    liveAgentCount: number;
+}
+/**
+ * One durable factory progress record.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryProgressLine".
+ */
+/** @experimental */
+export interface FactoryProgressLine {
     /**
-     * Maximum number of factory subagents that may run concurrently.
+     * Global monotonic sequence number within the run.
      */
-    maxConcurrentSubagents?: number;
+    seq: number;
     /**
-     * Maximum total number of factory subagents that may be admitted.
+     * Resume attempt that emitted this record.
      */
-    maxTotalSubagents?: number;
+    attempt: number;
     /**
-     * Factory active-run timeout in milliseconds.
+     * Phase active when the record was emitted, or null before any phase.
      */
-    timeout?: number;
+    phaseId: string | null;
+    /**
+     * Epoch milliseconds when the record was persisted.
+     */
+    recordedAt: number;
+    kind: FactoryLogLineKind;
+    /**
+     * Prompt-safe progress text.
+     */
+    text: string;
 }
 /**
- * Parameters for invoking a registered factory.
+ * A bidirectional page of factory progress.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "FactoryRunRequest".
+ * via the `definition` "FactoryProgressPage".
  */
 /** @experimental */
-export interface FactoryRunRequest {
-    /**
-     * Registered factory name.
-     */
-    name: string;
+export interface FactoryProgressPage {
+    records: FactoryProgressLine[];
+    oldestSeq: number | null;
+    newestSeq: number | null;
+    hasMoreOlder: boolean;
+    hasMoreNewer: boolean;
     /**
-     * Factory input value.
+     * Run revision reflected by this page.
      */
-    args: {
-        [k: string]: unknown | undefined;
-    };
-    options?: RunOptions;
+    revision: number;
 }
 /**
- * Options controlling factory invocation.
+ * Parameters for resuming a factory run from its persisted identity.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "RunOptions".
+ * via the `definition` "FactoryResumeRequest".
  */
 /** @experimental */
-export interface RunOptions {
+export interface FactoryResumeRequest {
+    /**
+     * Factory run identifier.
+     */
+    runId: string;
     limits?: FactoryRunLimits;
+}
+/**
+ * Wire-only per-invocation factory resource ceiling overrides.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryRunLimits".
+ */
+/** @experimental */
+export interface FactoryRunLimits {
     /**
-     * Run identifier whose journal and progress should seed this resumed run.
+     * Maximum number of factory subagents that may run concurrently.
      */
-    resumeFromRunId?: string;
+    maxConcurrentSubagents?: number;
+    /**
+     * Maximum total number of factory subagents that may be admitted.
+     */
+    maxTotalSubagents?: number;
+    /**
+     * Maximum accumulated active-execution time in seconds. Active execution includes the entire extension body, subprocess waits, queued-agent waits, and sleeps; time between resumed attempts is not counted.
+     */
+    timeoutSeconds?: number;
+    /**
+     * Maximum AI credits consumed by factory subagents and their descendants. The post-paid ceiling is soft: parallel turns can settle beyond it before the run stops.
+     */
+    maxAiCredits?: number;
+}
+/**
+ * Resolved persisted factory identity and resumed run envelope.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryResumeResult".
+ */
+/** @experimental */
+export interface FactoryResumeResult {
+    /**
+     * Persisted factory name resolved for the resumed run.
+     */
+    factoryName: string;
+    run: FactoryRunResult;
 }
 /**
  * Complete current or terminal factory run envelope.
@@ -4977,6 +5665,71 @@ export interface FactoryRunResult {
         [k: string]: unknown | undefined;
     };
 }
+/**
+ * Full factory run observability detail.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryRunDetail".
+ */
+/** @experimental */
+export interface FactoryRunDetail {
+    runId: string;
+    factoryName: string;
+    description: string;
+    status: FactoryRunStatus;
+    revision: number;
+    createdAt: number;
+    startedAt: number | null;
+    updatedAt: number;
+    completedAt: number | null;
+    currentPhase: FactoryCurrentPhase | null;
+    declaredPhaseCount: number;
+    liveAgentCount: number;
+    totalSpawnedAgentCount: number;
+    consumed: FactoryRunConsumed;
+    declaredLimits: FactoryDeclaredLimits;
+    approved: FactoryDeclaredLimits | null;
+    observedAt: number;
+    activeSegmentStartedAt: number | null;
+    terminal: FactoryRunTerminal | null;
+    phases: FactoryPhaseObservation[];
+    agents: FactoryAgentSummary[];
+    progress: FactoryProgressPage;
+}
+/**
+ * Parameters for invoking a registered factory.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "FactoryRunRequest".
+ */
+/** @experimental */
+export interface FactoryRunRequest {
+    /**
+     * Registered factory name.
+     */
+    name: string;
+    /**
+     * Factory input value.
+     */
+    args: {
+        [k: string]: unknown | undefined;
+    };
+    options?: RunOptions;
+}
+/**
+ * Options controlling factory invocation.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "RunOptions".
+ */
+/** @experimental */
+export interface RunOptions {
+    limits?: FactoryRunLimits;
+    /**
+     * Run identifier whose journal and progress should seed this resumed run.
+     */
+    resumeFromRunId?: string;
+}
 /**
  * Optional user prompt to combine with the fleet orchestration instructions.
  *
@@ -5251,19 +6004,6 @@ export interface HistoryCompactContextWindow {
      */
     toolDefinitionsTokens?: number;
 }
-/**
- * Optional compaction parameters.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "HistoryCompactRequest".
- */
-/** @experimental */
-export interface HistoryCompactRequest {
-    /**
-     * Optional user-provided instructions to focus the compaction summary
-     */
-    customInstructions?: string;
-}
 /**
  * Compaction outcome with the number of tokens and messages removed, summary text, and the resulting context window breakdown.
  *
@@ -5290,6 +6030,180 @@ export interface HistoryCompactResult {
     summaryContent?: string;
     contextWindow?: HistoryCompactContextWindow;
 }
+/**
+ * Rewind points and file-change-tracking availability for the session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryListRewindPointsResult".
+ */
+/** @experimental */
+export interface HistoryListRewindPointsResult {
+    /**
+     * Whether this session captured file changes from its first turn.
+     */
+    fileChangeTrackingEnabled: boolean;
+    unavailableReason?: HistoryRewindUnavailableReason;
+    /**
+     * Root user turns in chronological order. Empty when `unavailableReason` is set.
+     */
+    points: HistoryRewindPoint[];
+}
+/**
+ * A root user turn that the session can rewind to.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryRewindPoint".
+ */
+/** @experimental */
+export interface HistoryRewindPoint {
+    /**
+     * ID of the user.message event that begins the discarded suffix.
+     */
+    eventId: string;
+    /**
+     * User-visible message text for the turn.
+     */
+    userMessage: string;
+    /**
+     * ISO timestamp of the user turn.
+     */
+    timestamp: string;
+    /**
+     * Whether at least one file in this turn or a later turn can be restored.
+     */
+    canRestoreFiles: boolean;
+    /**
+     * Number of unique files in this turn and all later turns that have captured changes.
+     */
+    fileCount: number;
+    /**
+     * Whether this turn itself captured any file changes.
+     */
+    turnChangedFiles: boolean;
+    /**
+     * Lines added by this turn's captured file changes.
+     */
+    linesAdded: number;
+    /**
+     * Lines removed by this turn's captured file changes.
+     */
+    linesRemoved: number;
+    /**
+     * Whether this turn was an automatically injected autopilot continuation.
+     */
+    isAutopilotContinuation: boolean;
+}
+/**
+ * Event boundary to preview for conversation-and-files rewind.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryPreviewRewindRequest".
+ */
+/** @experimental */
+export interface HistoryPreviewRewindRequest {
+    /**
+     * ID of the user.message event that begins the discarded suffix.
+     */
+    eventId: string;
+}
+/**
+ * Files and aggregate changes for a prospective rewind.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryPreviewRewindResult".
+ */
+/** @experimental */
+export interface HistoryPreviewRewindResult {
+    /**
+     * Whether file restore is available for this session. This is authoritative: switch on it and read `reason` only when it is false.
+     */
+    available: boolean;
+    reason?: HistoryRewindUnavailableReason;
+    /**
+     * Number of unique files in the preview.
+     */
+    fileCount: number;
+    /**
+     * Files ordered by path.
+     */
+    files: HistoryRewindFilePreview[];
+}
+/**
+ * A file that a conversation-and-files rewind would restore.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryRewindFilePreview".
+ */
+/** @experimental */
+export interface HistoryRewindFilePreview {
+    /**
+     * Absolute path of the captured file.
+     */
+    path: string;
+    changeType: HistoryRewindChangeType;
+    /**
+     * Lines added across the discarded turns.
+     */
+    linesAdded: number;
+    /**
+     * Lines removed across the discarded turns.
+     */
+    linesRemoved: number;
+}
+/**
+ * Boundary and mode for rewinding session history.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryRewindRequest".
+ */
+/** @experimental */
+export interface HistoryRewindRequest {
+    /**
+     * ID of the user.message event that begins the discarded suffix.
+     */
+    eventId: string;
+    mode: HistoryRewindMode;
+}
+/**
+ * Structured outcome of a rewind request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistoryRewindResult".
+ */
+/** @experimental */
+export interface HistoryRewindResult {
+    outcome: HistoryRewindOutcome;
+    /**
+     * Number of persisted events removed by conversation truncation. Present only when truncation succeeded (outcomes `success`, `checkpoint-cleanup-failed`, and `snapshot-prune-failed`); omitted for every unavailable outcome (`session-busy`, `file-change-tracking-disabled`, `unsupported-remote-session`) and for `truncation-failed`, `files-rolled-back`, and `rollback-incomplete`.
+     */
+    eventsRemoved?: number;
+    /**
+     * Absolute paths restored to their captured preimages. Always empty for conversation-only rewinds and for the unavailable outcomes (`session-busy`, `file-change-tracking-disabled`, `unsupported-remote-session`); only conversation-and-files outcomes that reached the file-restore stage populate it.
+     */
+    restoredFiles: string[];
+    /**
+     * Captured files intentionally left unchanged. Always empty for conversation-only rewinds and for the unavailable outcomes (`session-busy`, `file-change-tracking-disabled`, `unsupported-remote-session`); only conversation-and-files outcomes that reached the file-restore stage populate it.
+     */
+    skippedFiles: HistorySkippedFileRestore[];
+    /**
+     * Failure detail. Set only for the failure and partial-failure outcomes (`files-rolled-back`, `rollback-incomplete`, `truncation-failed`, `checkpoint-cleanup-failed`, `snapshot-prune-failed`); omitted for `success` and for the unavailable outcomes (`session-busy`, `file-change-tracking-disabled`, `unsupported-remote-session`).
+     */
+    error?: string;
+}
+/**
+ * A captured file that rewind intentionally left unchanged.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistorySkippedFileRestore".
+ */
+/** @experimental */
+export interface HistorySkippedFileRestore {
+    /**
+     * Absolute path of the skipped file.
+     */
+    path: string;
+    reason: HistoryFileRestoreSkipReason;
+}
 /**
  * Markdown summary of the conversation context (empty when not available).
  *
@@ -5328,6 +6242,14 @@ export interface HistoryTruncateResult {
      * Number of events that were removed
      */
     eventsRemoved: number;
+    /**
+     * True when conversation truncation succeeded but post-truncation workspace checkpoint cleanup failed. History is already truncated; callers may still prune snapshots but should report a checkpoint-cleanup rather than a truncation failure.
+     */
+    checkpointCleanupFailed?: boolean;
+    /**
+     * Failure detail when checkpointCleanupFailed is true.
+     */
+    checkpointCleanupError?: string;
 }
 /**
  * Installed plugin record from global state, with marketplace, version, install time, enabled state, cache path, and source.
@@ -5364,7 +6286,7 @@ export interface InstalledPlugin {
     source?: InstalledPluginSource;
 }
 /**
- * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref, and optional subpath.
+ * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref or full commit SHA, and optional subpath.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "InstalledPluginSourceGitHub".
@@ -5377,10 +6299,14 @@ export interface InstalledPluginSourceGitHub {
     source: "github";
     repo: string;
     ref?: string;
+    /**
+     * Optional full 40-character hexadecimal commit SHA.
+     */
+    sha?: string;
     path?: string;
 }
 /**
- * Source descriptor for a direct URL plugin install, with URL, optional ref, and optional subpath.
+ * Source descriptor for a direct URL plugin install, with URL, optional ref or full commit SHA, and optional subpath.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "InstalledPluginSourceUrl".
@@ -5393,6 +6319,10 @@ export interface InstalledPluginSourceUrl {
     source: "url";
     url: string;
     ref?: string;
+    /**
+     * Optional full 40-character hexadecimal commit SHA.
+     */
+    sha?: string;
     path?: string;
 }
 /**
@@ -5560,10 +6490,36 @@ export interface InstructionSource {
      */
     defaultDisabled?: boolean;
     /**
-     * The project path this source was discovered from. Only set by sessionless discovery for repository/working-directory sources, where it disambiguates same-named files (e.g. .github/copilot-instructions.md) across multiple workspace roots. The session-scoped getSources leaves it unset.
+     * The project path this source was discovered from. Only set by sessionless discovery for repository, working-directory, and project-scoped plugin sources, where it disambiguates sources across multiple workspace roots. The session-scoped getSources leaves it unset.
      */
     projectPath?: string;
 }
+/**
+ * Parameters for interrupting the main agent turn.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InterruptMainTurnRequest".
+ */
+/** @experimental */
+export interface InterruptMainTurnRequest {
+    /**
+     * When true, the user's queued prompts are preserved and run as the next turn once the interrupted turn unwinds; when false (the default), the queue is cleared like a plain abort.
+     */
+    flushQueued?: boolean;
+}
+/**
+ * Result of interrupting the main agent turn.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "InterruptMainTurnResult".
+ */
+/** @experimental */
+export interface InterruptMainTurnResult {
+    /**
+     * Whether an in-flight main agent turn was interrupted. False when the main loop was not processing.
+     */
+    interrupted: boolean;
+}
 /**
  * HTTP headers as a map from lowercased header name to a list of values. Multi-valued headers (e.g. Set-Cookie) preserve all values.
  *
@@ -5606,6 +6562,10 @@ export interface LlmInferenceHttpRequestChunkRequest {
      * Optional human-readable reason for the cancellation, propagated for logging.
      */
     cancelReason?: string;
+    /**
+     * Identity of the agent invocation (one agentic loop) this body chunk belongs to, matching the `agentInvocationId` semantics on httpRequestStart. Carried per chunk so a persistent transport can attribute successive turns correctly: when a WebSocket connection is reused across turns, the httpRequestStart identity reflects only the turn that opened the connection, so each later turn stamps its own invocation id here. Absent when the runtime has no invocation context for the request, or on the plain-HTTP transport where every request has its own httpRequestStart.
+     */
+    agentInvocationId?: string;
 }
 /**
  * Acknowledgement. The SDK is free to ignore the ack and treat chunk delivery as fire-and-forget.
@@ -6385,6 +7345,10 @@ export interface McpServerConfigStdio {
     oidc?: McpServerAuthConfig;
     auth?: McpServerAuthConfig;
     deferTools?: McpServerConfigDeferTools;
+    /**
+     * Set to true to disable persisted MCP tool snapshots for this server. Live tool discovery is unaffected.
+     */
+    disableToolCache?: boolean;
     /**
      * Executable command used to start the Stdio MCP server process.
      */
@@ -6442,6 +7406,10 @@ export interface McpServerConfigHttp {
     oidc?: McpServerAuthConfig;
     auth?: McpServerAuthConfig;
     deferTools?: McpServerConfigDeferTools;
+    /**
+     * Set to true to disable persisted MCP tool snapshots for this server. Live tool discovery is unaffected.
+     */
+    disableToolCache?: boolean;
     /**
      * URL of the remote MCP server endpoint.
      */
@@ -6640,7 +7608,7 @@ export interface McpExecuteSamplingResult {
     [k: string]: unknown | undefined;
 }
 /**
- * MCP server filtered by policy, with name, reason, optional redacted reason, and enterprise login.
+ * MCP server filtered by policy, with name, reason, and optional redacted reason.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "McpFilteredServer".
@@ -6660,7 +7628,8 @@ export interface McpFilteredServer {
      */
     redactedReason?: string;
     /**
-     * Enterprise login associated with an allowlist policy
+     * @deprecated
+     * Deprecated. This field is no longer populated.
      */
     enterpriseName?: string;
 }
@@ -6708,7 +7677,7 @@ export interface McpHostState {
      */
     disabledServers: string[];
     /**
-     * Configured servers filtered out by enterprise allowlist policy.
+     * Configured servers filtered out by MCP server policy.
      */
     filteredServers: string[];
     /**
@@ -6927,6 +7896,32 @@ export interface McpOauthLoginResult {
      */
     authorizationUrl?: string;
 }
+/**
+ * Pending MCP OAuth request id to respond to.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpOauthRespondRequest".
+ */
+/** @experimental */
+export interface McpOauthRespondRequest {
+    /**
+     * OAuth request identifier from the mcp.oauth_required event
+     */
+    requestId: string;
+}
+/**
+ * Indicates whether the pending MCP OAuth response was accepted.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "McpOauthRespondResult".
+ */
+/** @experimental */
+export interface McpOauthRespondResult {
+    /**
+     * Whether the response was accepted. False if the request was unknown, timed out, or already resolved.
+     */
+    success: boolean;
+}
 /**
  * Indicates whether the auto-managed `github` MCP server was removed (false when nothing to remove).
  *
@@ -7314,7 +8309,7 @@ export interface McpSetEnvValueModeResult {
     mode: McpSetEnvValueModeDetails;
 }
 /**
- * Server name and configuration for an individual MCP server start.
+ * Server name and optional configuration for an individual MCP server start. Omit `config` for a config-free start-by-name of an already-configured server.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "McpStartServerRequest".
@@ -7325,7 +8320,7 @@ export interface McpStartServerRequest {
      * Name of the MCP server to start
      */
     serverName: string;
-    config: McpServerConfig;
+    config?: McpServerConfig;
 }
 /**
  * MCP server startup filtering result.
@@ -7836,7 +8831,7 @@ export interface ModelBillingTokenPricesLongContext {
     maxPromptTokens?: number;
 }
 /**
- * Active server-driven promotion for a model, including its discount and expiry.
+ * Active server-driven promotion for a model, including its discount and optional expiry.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "ModelBillingPromo".
@@ -7852,11 +8847,11 @@ export interface ModelBillingPromo {
      */
     discountPercent?: number;
     /**
-     * UTC ISO 8601 timestamp marking when the promotion ends. Always present: the API only surfaces a promo whose expiry parses and is in the future. Consumers should treat a past value as expired.
+     * UTC ISO 8601 timestamp marking when the promotion ends. Optional: an open-ended promotion omits this field. When present, the API only surfaces a promo whose expiry parses and is in the future, so consumers should treat a past value as expired.
      */
-    endsAt: string;
+    endsAt?: string;
     /**
-     * Human-readable promotion message. Does not include the expiry timestamp; consumers may format endsAt and append it.
+     * Human-readable promotion message. Does not include the expiry timestamp; consumers may format endsAt and append it when present.
      */
     message?: string;
 }
@@ -7945,19 +8940,6 @@ export interface ModelList {
      */
     models: Model[];
 }
-/**
- * Optional listing options.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ModelListRequest".
- */
-/** @experimental */
-export interface ModelListRequest {
-    /**
-     * If true, bypasses the per-session model list cache and re-fetches from CAPI.
-     */
-    skipCache?: boolean;
-}
 /**
  * Reasoning effort level to apply to the currently selected model.
  *
@@ -8011,6 +8993,10 @@ export interface ModelSwitchToRequest {
     verbosity?: Verbosity;
     modelCapabilities?: ModelCapabilitiesOverride;
     contextTier?: ContextTier;
+    /**
+     * When true, defer this switch (enqueue it) if another model change is already queued, even when no turn is active — so it drains last (FIFO) and wins over the already-queued change. Intended for genuine user-initiated model selections; internal restore/reapply switches omit it and apply immediately when no turn is active. When no other model change is queued this has no effect (a switch still applies immediately unless a turn is active).
+     */
+    deferIfModelChangeQueued?: boolean;
 }
 /**
  * The model identifier active on the session after the switch.
@@ -8024,6 +9010,10 @@ export interface ModelSwitchToResult {
      * Currently active model identifier after the switch
      */
     modelId?: string;
+    /**
+     * True when the switch was deferred (enqueued as a cancellable `/model` command) because a turn was active or another model change was already queued, rather than applied immediately. When true, the session's live model is unchanged until the queued change drains.
+     */
+    deferred?: boolean;
 }
 /**
  * Agent interaction mode to apply to the session.
@@ -8214,6 +9204,10 @@ export interface PermissionDecisionApproveOnce {
      * Approve this single request only
      */
     kind: "approve-once";
+    /**
+     * True only when a host surfaced this request to a user who approved it.
+     */
+    approvedInteractively?: boolean;
 }
 /**
  * Permission-decision request variant to approve for the rest of the session, with optional tool approval or URL domain.
@@ -9367,13 +10361,17 @@ export interface PermissionsPathsUpdatePrimaryResult {
 export interface PermissionsPendingRequestsRequest {
 }
 /**
- * No parameters; clears all session-scoped tool permission approvals.
+ * Clears session-scoped tool permission approvals, and optionally the location-scoped ones.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "PermissionsResetSessionApprovalsRequest".
  */
 /** @experimental */
 export interface PermissionsResetSessionApprovalsRequest {
+    /**
+     * Whether location-scoped approvals are cleared too. Defaults to `true`.
+     */
+    includeLocation?: boolean;
 }
 /**
  * Indicates whether the operation succeeded.
@@ -9796,35 +10794,6 @@ export interface PluginsMarketplacesRemoveRequest {
      */
     force?: boolean;
 }
-/**
- * Optional flags controlling which side effects the reload performs.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "PluginsReloadRequest".
- */
-/** @experimental */
-export interface PluginsReloadRequest {
-    /**
-     * Reload MCP server connections after refreshing plugins. Defaults to true.
-     */
-    reloadMcp?: boolean;
-    /**
-     * Re-run custom-agent discovery after refreshing plugins. Defaults to true.
-     */
-    reloadCustomAgents?: boolean;
-    /**
-     * Re-load user, plugin, and (subject to `deferRepoHooks`) repo hooks. Defaults to true. Has no effect when the host has not registered a hook reloader (e.g. remote sessions).
-     */
-    reloadHooks?: boolean;
-    /**
-     * Re-discover and relaunch subprocess extensions (including plugin-shipped extensions) after refreshing plugins. Defaults to true. Has no effect when the session has no active extension controller (e.g. extensions were not requested for the session).
-     */
-    reloadExtensions?: boolean;
-    /**
-     * When true, skip repo-level hooks during the hook reload. Use before folder trust is confirmed; load them post-trust via `sessions.loadDeferredRepoHooks`.
-     */
-    deferRepoHooks?: boolean;
-}
 /**
  * Name (or spec) of the plugin to uninstall.
  *
@@ -10105,19 +11074,6 @@ export interface ProviderSessionToken {
      */
     expiresAt?: string;
 }
-/**
- * Optional model identifier to scope the endpoint snapshot to.
- *
- * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "ProviderGetEndpointRequest".
- */
-/** @experimental */
-export interface ProviderGetEndpointRequest {
-    /**
-     * Model identifier the caller intends to use against the returned endpoint. Used to pick the correct wire shape. Omit to use whichever model the session is currently using.
-     */
-    modelId?: string;
-}
 /**
  * Asks the SDK client to acquire a bearer token for a BYOK provider whose config set `hasBearerTokenProvider: true`. Issued by the runtime before each outbound model request; the runtime does no caching, so this is sent once per request.
  *
@@ -10607,6 +11563,253 @@ export interface PushAttachmentBlob {
      */
     displayName?: string;
 }
+/**
+ * Inputs for starting a deferred-idle drain.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueBeginDeferredIdleDrainRequest".
+ */
+/** @experimental */
+export interface QueueBeginDeferredIdleDrainRequest {
+    /**
+     * Whether the host still has active background work.
+     */
+    activeBackgroundWork: boolean;
+}
+/**
+ * Whether a deferred-idle drain should run.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueBeginDeferredIdleDrainResult".
+ */
+/** @experimental */
+export interface QueueBeginDeferredIdleDrainResult {
+    /**
+     * True when the host should run finishDeferredIdleDrain asynchronously.
+     */
+    shouldDrain: boolean;
+}
+/**
+ * Internal filter for consuming queued system notifications.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueConsumeSystemNotificationsRequest".
+ */
+/** @experimental */
+export interface QueueConsumeSystemNotificationsRequest {
+    /**
+     * Opaque runtime-owned filter object.
+     */
+    filter: {
+        [k: string]: unknown | undefined;
+    };
+}
+/**
+ * Inputs for marking session.idle deferred in native state.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueDeferSessionIdleRequest".
+ */
+/** @experimental */
+export interface QueueDeferSessionIdleRequest {
+    /**
+     * Whether the deferred idle was caused by an aborted foreground turn.
+     */
+    aborted: boolean;
+}
+/**
+ * Parameters for duplicating a queued item.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueDuplicateAtRequest".
+ */
+/** @experimental */
+export interface QueueDuplicateAtRequest {
+    id: string;
+}
+/**
+ * Result of duplicating a queued item.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueDuplicateAtResult".
+ */
+/** @experimental */
+export interface QueueDuplicateAtResult {
+    /**
+     * Fresh stable opaque id assigned to the duplicate.
+     */
+    id: string;
+}
+/**
+ * Result of enqueueing the resume-pending wake item.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueEnqueueResumePendingResult".
+ */
+/** @experimental */
+export interface QueueEnqueueResumePendingResult {
+    /**
+     * True when a wake item was newly queued.
+     */
+    queued: boolean;
+}
+/**
+ * Inputs for completing a deferred-idle drain.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueFinishDeferredIdleDrainRequest".
+ */
+/** @experimental */
+export interface QueueFinishDeferredIdleDrainRequest {
+    /**
+     * Whether the host still has active background work.
+     */
+    activeBackgroundWork: boolean;
+    /**
+     * Whether native queued work remains.
+     */
+    hasPending: boolean;
+}
+/**
+ * Action selected by the native deferred-idle drain.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueFinishDeferredIdleDrainResult".
+ */
+/** @experimental */
+export interface QueueFinishDeferredIdleDrainResult {
+    /**
+     * One of none, processQueue, or emitSessionIdle.
+     */
+    action: string;
+    /**
+     * Whether the deferred idle was caused by an aborted foreground turn.
+     */
+    aborted: boolean;
+}
+/**
+ * Whether the native queue has pending work.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueHasPendingResult".
+ */
+/** @experimental */
+export interface QueueHasPendingResult {
+    /**
+     * True when queued or immediate native work is pending.
+     */
+    hasPending: boolean;
+}
+/**
+ * Parameters for inserting a queued message at a public visible position.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueInsertAtRequest".
+ */
+/** @experimental */
+export interface QueueInsertAtRequest {
+    /**
+     * Zero-based position in the public visible queue. Values outside the queue clamp to an end.
+     */
+    position: number;
+    message: QueueInsertMessage;
+}
+/**
+ * Serializable message fields accepted by queue.insertAt.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueInsertMessage".
+ */
+/** @experimental */
+export interface QueueInsertMessage {
+    /**
+     * The user message text.
+     */
+    prompt: string;
+    /**
+     * Optional user-facing display text.
+     */
+    displayPrompt?: string;
+    /**
+     * Optional attachments for the message.
+     */
+    attachments?: Attachment[];
+    agentMode?: SendAgentMode;
+    /**
+     * Optional provenance source. `system` is rejected: it would hide the inserted row from `pendingItems` and make it unaddressable while still executing, so inserted items must stay visible.
+     */
+    source?: string;
+    /**
+     * Whether the message is billable.
+     */
+    billable?: boolean;
+    /**
+     * Required tool name for the turn, when any.
+     */
+    requiredTool?: string;
+    /**
+     * Per-turn request headers.
+     */
+    requestHeaders?: {
+        [k: string]: string | undefined;
+    };
+    mode?: SendMode;
+    /**
+     * Accepted for SendOptions compatibility but ignored; the requested public position controls placement.
+     */
+    prepend?: boolean;
+    /**
+     * Accepted for SendOptions compatibility but ignored; insertion scheduling is controlled by the queue drain state.
+     */
+    wait?: boolean;
+    /**
+     * Accepted for internal SendOptions compatibility but ignored; delivery is derived from current session activity.
+     */
+    delivery?: string;
+}
+/**
+ * Result of inserting a queued message.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueInsertAtResult".
+ */
+/** @experimental */
+export interface QueueInsertAtResult {
+    /**
+     * Fresh stable opaque id assigned to the inserted item.
+     */
+    id: string;
+}
+/**
+ * Parameters for moving a queued item by stable id.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueMoveItemRequest".
+ */
+/** @experimental */
+export interface QueueMoveItemRequest {
+    /**
+     * Stable opaque queued-item id.
+     */
+    id: string;
+    /**
+     * Zero-based target position in the public visible queue. Values outside the queue clamp to an end.
+     */
+    toPosition: number;
+}
+/**
+ * Result of moving a queued item.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueMoveItemResult".
+ */
+/** @experimental */
+export interface QueueMoveItemResult {
+    /**
+     * True when the item changed position; false when it was already at the requested position.
+     */
+    changed: boolean;
+}
 /**
  * User-facing pending queue entry, with kind and display text for a queued message, slash command, or model change.
  *
@@ -10615,11 +11818,16 @@ export interface PushAttachmentBlob {
  */
 /** @experimental */
 export interface QueuePendingItems {
+    /**
+     * Stable opaque id for the canonical queued item. Batch rows share one id.
+     */
+    id: string;
     kind: QueuePendingItemsKind;
     /**
      * Human-readable text to display for this queue entry in the UI
      */
     displayText: string;
+    agentMode: SendAgentMode;
 }
 /**
  * Snapshot of the session's pending queued items and immediate-steering messages.
@@ -10638,6 +11846,29 @@ export interface QueuePendingItemsResult {
      */
     steeringMessages: string[];
 }
+/**
+ * Parameters for removing a queued item by stable id.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueRemoveAtRequest".
+ */
+/** @experimental */
+export interface QueueRemoveAtRequest {
+    id: string;
+}
+/**
+ * Result of removing a queued item.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueRemoveAtResult".
+ */
+/** @experimental */
+export interface QueueRemoveAtResult {
+    /**
+     * True when the addressed item was removed.
+     */
+    removed: boolean;
+}
 /**
  * Indicates whether a user-facing pending item was removed.
  *
@@ -10651,6 +11882,89 @@ export interface QueueRemoveMostRecentResult {
      */
     removed: boolean;
 }
+/**
+ * Parameters for steering a queued message into a live turn.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueSendNowRequest".
+ */
+/** @experimental */
+export interface QueueSendNowRequest {
+    id: string;
+}
+/**
+ * Result of trying to steer a queued message into a live turn.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueSendNowResult".
+ */
+/** @experimental */
+export interface QueueSendNowResult {
+    /**
+     * True when the item was accepted into the steering lane; false when no main turn was live.
+     */
+    steered: boolean;
+}
+/**
+ * Parameters for acquiring or releasing the queued-lane drain pause. Acquisition is exclusive and non-idempotent: `paused: true` against an already-paused session fails with `queue_already_paused`. The pause is never released automatically — it is not tied to the caller's lifetime, so a client that exits without sending `paused: false` leaves the lane frozen. Release is unowned: `paused: false` clears the pause for any caller, including one that never acquired it.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueSetDrainPausedRequest".
+ */
+/** @experimental */
+export interface QueueSetDrainPausedRequest {
+    paused: boolean;
+}
+/**
+ * Internal snapshot of native queue state for local session orchestration.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueSnapshotResult".
+ */
+/** @experimental */
+export interface QueueSnapshotResult {
+    /**
+     * User-facing pending items in FIFO order.
+     */
+    items: QueuePendingItems[];
+    /**
+     * Immediate steering messages waiting for an active turn.
+     */
+    steeringMessages: string[];
+    /**
+     * Insertion orders for queued items, aligned with `items`.
+     */
+    itemOrders?: number[];
+    /**
+     * Insertion orders for immediate steering messages, aligned with `steeringMessages`.
+     */
+    steeringMessageOrders?: number[];
+}
+/**
+ * Parameters for editing a single queued message.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueUpdateTextRequest".
+ */
+/** @experimental */
+export interface QueueUpdateTextRequest {
+    id: string;
+    prompt: string;
+    displayPrompt?: string;
+}
+/**
+ * Result of editing a queued message.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "QueueUpdateTextResult".
+ */
+/** @experimental */
+export interface QueueUpdateTextResult {
+    /**
+     * True when the stored text changed.
+     */
+    updated: boolean;
+}
 /**
  * Event type to register consumer interest for, used by runtime gating logic.
  *
@@ -11101,6 +12415,28 @@ export interface SandboxConfigUserPolicyNetwork {
      * Whether traffic to local/loopback addresses is allowed.
      */
     allowLocalNetwork?: boolean;
+    proxy?: SandboxConfigUserPolicyNetworkProxy;
+}
+/**
+ * HTTP proxy configuration for sandboxed traffic.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxConfigUserPolicyNetworkProxy".
+ */
+/** @experimental */
+export interface SandboxConfigUserPolicyNetworkProxy {
+    /**
+     * Proxy URL (e.g. http://proxy.example.com:8080). The port is optional and defaults to the scheme's standard port when omitted. Credentials must not be embedded here — a `user:pass@` authority is rejected; put them in the separate `username`/`password` fields. A credential-free http:// loopback URL is routed through the localhost proxy automatically; loopback covers localhost and any *.localhost subdomain, the whole 127.0.0.0/8 range, ::1, and IPv4-mapped loopback (::ffff:127.0.0.1). An https:// URL, or one with a username/password set, is used as-is.
+     */
+    url: string;
+    /**
+     * Optional username for proxy authentication. Combined with the URL (and `password`) into `user:pass@host` when the sandboxed process routes through the proxy.
+     */
+    username?: string;
+    /**
+     * Optional password for proxy authentication, combined with the URL at spawn time. The persisted value may be a literal password, a `${secret:…}` reference resolved from the OS keychain, or a `${VAR}`/`$VAR` environment reference; it is resolved just before the sandboxed process routes through the proxy. The /sandbox dialog stores a real password in the OS keychain and persists only a `${secret:…}` placeholder (never plaintext in settings.json); the field is masked in the dialog and redacted by /settings show.
+     */
+    password?: string;
 }
 /**
  * macOS seatbelt-specific options.
@@ -11126,17 +12462,110 @@ export interface SandboxConfigUserPolicyExperimental {
     seatbelt?: SandboxConfigUserPolicyExperimentalSeatbelt;
 }
 /**
- * macOS seatbelt experimental options.
+ * macOS seatbelt experimental options.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxConfigUserPolicyExperimentalSeatbelt".
+ */
+/** @experimental */
+export interface SandboxConfigUserPolicyExperimentalSeatbelt {
+    /**
+     * Whether the macOS seatbelt profile may access the keychain.
+     */
+    keychainAccess?: boolean;
+}
+/**
+ * Register an absolute-time scheduled prompt.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ScheduleAddAtRequest".
+ */
+/** @experimental */
+export interface ScheduleAddAtRequest {
+    /**
+     * Epoch milliseconds when the prompt should fire.
+     */
+    at: number;
+    /**
+     * Prompt text to enqueue when the schedule fires.
+     */
+    prompt: string;
+    /**
+     * Whether the schedule should re-arm after each tick. Defaults to false.
+     */
+    recurring?: boolean;
+    /**
+     * Optional display-only prompt label.
+     */
+    displayPrompt?: string;
+}
+/**
+ * Register a cron scheduled prompt.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ScheduleAddCronRequest".
+ */
+/** @experimental */
+export interface ScheduleAddCronRequest {
+    /**
+     * 5-field cron expression.
+     */
+    cron: string;
+    /**
+     * Prompt text to enqueue when the schedule fires.
+     */
+    prompt: string;
+    /**
+     * Whether the schedule should re-arm after each tick. Defaults to true.
+     */
+    recurring?: boolean;
+    /**
+     * Optional display-only prompt label.
+     */
+    displayPrompt?: string;
+    /**
+     * IANA timezone for evaluating the cron expression.
+     */
+    tz?: string;
+}
+/**
+ * Register a relative-interval scheduled prompt.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ScheduleAddRequest".
+ */
+/** @experimental */
+export interface ScheduleAddRequest {
+    /**
+     * Human-readable interval such as `30s`, `5m`, or `2h`.
+     */
+    interval: string;
+    /**
+     * Prompt text to enqueue when the schedule fires.
+     */
+    prompt: string;
+    /**
+     * Whether the schedule should re-arm after each tick. Defaults to true.
+     */
+    recurring?: boolean;
+    /**
+     * Optional display-only prompt label.
+     */
+    displayPrompt?: string;
+}
+/**
+ * Result of registering or re-arming a scheduled prompt.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
- * via the `definition` "SandboxConfigUserPolicyExperimentalSeatbelt".
+ * via the `definition` "ScheduleAddResult".
  */
 /** @experimental */
-export interface SandboxConfigUserPolicyExperimentalSeatbelt {
+export interface ScheduleAddResult {
+    entry?: ScheduleEntry;
     /**
-     * Whether the macOS seatbelt profile may access the keychain.
+     * User-facing validation error, when registration failed.
      */
-    keychainAccess?: boolean;
+    error?: string;
 }
 /**
  * Scheduled prompt entry with ID, timing (`intervalMs`, `cron`, or `at`), prompt text, recurrence, and next run time.
@@ -11187,6 +12616,36 @@ export interface ScheduleEntry {
      */
     nextRunAt: string;
 }
+/**
+ * Register a self-paced scheduled prompt.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ScheduleAddSelfPacedRequest".
+ */
+/** @experimental */
+export interface ScheduleAddSelfPacedRequest {
+    /**
+     * Prompt text to enqueue when the schedule fires.
+     */
+    prompt: string;
+    /**
+     * Optional display-only prompt label.
+     */
+    displayPrompt?: string;
+}
+/**
+ * Whether the session currently has an active self-paced schedule.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ScheduleHasSelfPacedResult".
+ */
+/** @experimental */
+export interface ScheduleHasSelfPacedResult {
+    /**
+     * True when at least one active schedule is self-paced.
+     */
+    hasSelfPaced: boolean;
+}
 /**
  * Snapshot of the currently active recurring prompts for this session.
  *
@@ -11200,6 +12659,23 @@ export interface ScheduleList {
      */
     entries: ScheduleEntry[];
 }
+/**
+ * Re-arm a self-paced scheduled prompt.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ScheduleRearmSelfPacedRequest".
+ */
+/** @experimental */
+export interface ScheduleRearmSelfPacedRequest {
+    /**
+     * Id of the self-paced scheduled prompt.
+     */
+    id: number;
+    /**
+     * Epoch milliseconds when the prompt should next fire.
+     */
+    at: number;
+}
 /**
  * Identifier of the scheduled prompt to remove.
  *
@@ -11324,7 +12800,7 @@ export interface SendMessagesRequest {
      */
     tracestate?: string;
     /**
-     * If true, await completion of the agentic loop for this turn before returning. Defaults to false (fire-and-forget). When true, the result still contains the same `messageIds`; the caller can rely on the agent having processed the messages before the call resolves.
+     * If true, await completion of the agentic loop for this turn before returning. Defaults to false (fire-and-forget). When true, the result still contains the same `messageIds`; the caller can rely on the agent having processed the messages before the call resolves. Transport-dependent tail semantics: on a LOCAL (in-process) session the wait additionally blocks until the completed turn's event tail has been dispatched to this session's in-process subscribers, so a subsequent read of subscriber state already reflects the turn; on a REMOTE session the wait resolves once the loop completes and mirrored delivery follows over the wire. Callers that need the stronger local guarantee on remote sessions should await the event stream explicitly.
      */
     wait?: boolean;
 }
@@ -11390,7 +12866,7 @@ export interface SendRequest {
      */
     tracestate?: string;
     /**
-     * If true, await completion of the agentic loop for this message before returning. Defaults to false (fire-and-forget). When true, the result still contains the same `messageId`; the caller can rely on the agent having processed the message before the call resolves.
+     * If true, await completion of the agentic loop for this message before returning. Defaults to false (fire-and-forget). When true, the result still contains the same `messageId`; the caller can rely on the agent having processed the message before the call resolves. Transport-dependent tail semantics: on a LOCAL (in-process) session the wait additionally blocks until the completed turn's event tail has been dispatched to this session's in-process subscribers, so a subsequent read of subscriber state already reflects the turn; on a REMOTE session the wait resolves once the loop completes and mirrored delivery follows over the wire. Callers that need the stronger local guarantee on remote sessions should await the event stream explicitly.
      */
     wait?: boolean;
 }
@@ -11407,6 +12883,31 @@ export interface SendResult {
      */
     messageId: string;
 }
+/**
+ * Internal request for sending a system notification.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SendSystemNotificationRequest".
+ */
+/** @experimental */
+export interface SendSystemNotificationRequest {
+    /**
+     * Notification text to deliver to the model.
+     */
+    message: string;
+    /**
+     * Optional structured notification kind.
+     */
+    kind?: {
+        [k: string]: unknown | undefined;
+    };
+    /**
+     * Internal delivery options, including passive policy.
+     */
+    options?: {
+        [k: string]: unknown | undefined;
+    };
+}
 /**
  * Agents discovered across user, project, plugin, and remote sources.
  *
@@ -11869,7 +13370,7 @@ export interface SessionFsSqliteExistsResult {
     exists: boolean;
 }
 /**
- * SQL query, query type, and optional bind parameters for executing a SQLite query against the per-session database.
+ * SQL query, query type, and optional bind parameters for executing a SQLite query against the per-session database. The provider applies its SQLite busy timeout for every call.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SessionFsSqliteQueryRequest".
@@ -11920,6 +13421,62 @@ export interface SessionFsSqliteQueryResult {
     lastInsertRowid?: number;
     error?: SessionFsError;
 }
+/**
+ * Classified SQLite transaction failure. busyOrLocked guarantees rollback; postCommitAmbiguous must never be retried.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionFsSqliteTransactionError".
+ */
+/** @experimental */
+export interface SessionFsSqliteTransactionError {
+    errorClass: SessionFsSqliteTransactionErrorClass;
+    message: string;
+}
+/**
+ * Statements to execute atomically. Providers apply busy handling for every call.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionFsSqliteTransactionRequest".
+ */
+/** @experimental */
+export interface SessionFsSqliteTransactionRequest {
+    /**
+     * Target session identifier
+     */
+    sessionId: string;
+    statements: SessionFsSqliteTransactionStatement[];
+}
+/**
+ * One statement in an atomic SQLite transaction.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionFsSqliteTransactionStatement".
+ */
+/** @experimental */
+export interface SessionFsSqliteTransactionStatement {
+    /**
+     * SQL statement to execute.
+     */
+    query: string;
+    queryType: SessionFsSqliteQueryType;
+    /**
+     * Optional named bind parameters.
+     */
+    params?: {
+        [k: string]: unknown | undefined;
+    };
+}
+/**
+ * Per-statement results, or a classified transaction error.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionFsSqliteTransactionResult".
+ */
+/** @experimental */
+export interface SessionFsSqliteTransactionResult {
+    results: SessionFsSqliteQueryResult[];
+    error?: SessionFsSqliteTransactionError;
+}
 /**
  * Path whose metadata should be returned from the client-provided session filesystem.
  *
@@ -12027,7 +13584,7 @@ export interface SessionInstalledPlugin {
     source?: SessionInstalledPluginSource;
 }
 /**
- * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref, and optional subpath.
+ * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref or full commit SHA, and optional subpath.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SessionInstalledPluginSourceGitHub".
@@ -12040,10 +13597,14 @@ export interface SessionInstalledPluginSourceGitHub {
     source: "github";
     repo: string;
     ref?: string;
+    /**
+     * Optional full 40-character hexadecimal commit SHA.
+     */
+    sha?: string;
     path?: string;
 }
 /**
- * Source descriptor for a direct URL plugin install, with URL, optional ref, and optional subpath.
+ * Source descriptor for a direct URL plugin install, with URL, optional ref or full commit SHA, and optional subpath.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "SessionInstalledPluginSourceUrl".
@@ -12056,6 +13617,10 @@ export interface SessionInstalledPluginSourceUrl {
     source: "url";
     url: string;
     ref?: string;
+    /**
+     * Optional full 40-character hexadecimal commit SHA.
+     */
+    sha?: string;
     path?: string;
 }
 /**
@@ -12072,6 +13637,70 @@ export interface SessionInstalledPluginSourceLocal {
     source: "local";
     path: string;
 }
+/**
+ * Baseline data provenance for a prediction.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLimitPredictionBaselineData".
+ */
+/** @experimental */
+export interface SessionLimitPredictionBaselineData {
+    /**
+     * Start of the baseline data slice.
+     */
+    windowStart: string;
+    /**
+     * End of the baseline data slice.
+     */
+    windowEnd: string;
+}
+/**
+ * Explainable AI-credit session-limit prediction.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLimitPredictionDetails".
+ */
+/** @experimental */
+export interface SessionLimitPredictionDetails {
+    clientType: SessionLimitPredictionClientType;
+    /**
+     * Model identifier used for lookup.
+     */
+    modelId: string;
+    source: SessionLimitPredictionSource;
+    /**
+     * Key matched at the source level, such as a model id, family id, or `global`.
+     */
+    sourceKey: string;
+    /**
+     * Resolved model family when known.
+     */
+    family?: string;
+    /**
+     * Ordered usage tiers and their AI-credit caps.
+     */
+    tiers: SessionLimitPredictionTierOption[];
+    baselineData: SessionLimitPredictionBaselineData;
+    recommendedTier: SessionLimitPredictionTier;
+    /**
+     * Recommended maximum AI credits for this session.
+     */
+    recommendedCap: number;
+}
+/**
+ * Semantic usage tier and its AI-credit cap.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionLimitPredictionTierOption".
+ */
+/** @experimental */
+export interface SessionLimitPredictionTierOption {
+    tier: SessionLimitPredictionTier;
+    /**
+     * AI-credit cap for this tier.
+     */
+    cap: number;
+}
 /**
  * Sessions matching the filter, ordered most-recently-modified first.
  *
@@ -12270,6 +13899,10 @@ export interface SessionOpenOptions {
      * Opt-in: self-fetch and enforce enterprise managed settings at session bootstrap.
      */
     enableManagedSettings?: boolean;
+    /**
+     * Opt in to capturing file changes for session rewind and session diff. Capture cannot reconstruct changes made before it was enabled. On create it starts capture from the first turn. It is also honored on resume: for a session that already has tracked prior turns, tracking continues automatically even if this is omitted; passing it on resume additionally enables tracking for an eligible session that has no prior root turn yet. Resuming a session whose prior root turns were never tracked has no restorable baseline, so tracking stays disabled for it and rewind reports file change tracking as unavailable; the resume itself still succeeds, so sessions that predate tracking remain loadable. The opt-in is only rejected when the session can never track (a subagent session, or one without local session storage). It is intentionally absent from the mutable options update because enabling it after edits have occurred would create an incomplete, misleading baseline. Subagents share the parent session's capture store and are not tracked as separate rewind points: a file a subagent writes is attributed to whichever root user turn was open when the capture was staged, just before the tool body ran. A turn cannot open while a staged capture is still in flight, so a subagent tool that staged under the spawning turn stays attributed to it however late the write lands, while a capture it stages after the user's next message belongs to that later turn. Attribution decides which turn's rewind point counts and file preview include that write; it does not narrow which rewinds revert it, because a rewind restores every capture from the selected turn onward, so the earlier spawning turn reverts it as well.
+     */
+    enableFileChangeTracking?: boolean;
     /**
      * Feature-flag values resolved by the host.
      */
@@ -12299,6 +13932,10 @@ export interface SessionOpenOptions {
      * Working directory to anchor the session.
      */
     workingDirectory?: string;
+    /**
+     * Additional directories the agent may access beyond the working directory. Each entry is granted to the session's file-access allow-list and surfaced to the model (system prompt context and `@`-mention completion). Absolute paths are recommended; a relative path is resolved against the session's working directory. Nonexistent or unresolvable entries are skipped with a warning. This is applied on both session creation and resume, and is not persisted: a resumed session that omits this option does not retain previously supplied directories (re-supply them, exactly as the CLI re-passes `--add-dir`).
+     */
+    additionalDirectories?: string[];
     workingDirectoryContext?: SessionContext;
     /**
      * Whether this session supports remote steering.
@@ -12340,12 +13977,14 @@ export interface SessionOpenOptions {
      * Whether shell-script safety heuristics are enabled.
      */
     enableScriptSafety?: boolean;
+    shell?: ShellOptions;
     /**
-     * Shell init profile.
+     * @deprecated
+     * Use shell.initProfile instead. Shell init profile.
      */
     shellInitProfile?: string;
     /**
-     * Per-shell process flags.
+     * PowerShell process flags applied to built-in and user-requested shell commands.
      */
     shellProcessFlags?: string[];
     sandboxConfig?: SandboxConfig;
@@ -12434,6 +14073,10 @@ export interface SessionOpenOptions {
      * Override directory for session event logs.
      */
     eventsLogDirectory?: string;
+    /**
+     * Whether subagent callback events should be forwarded into the session event log sink.
+     */
+    eventsLogIncludesSubagents?: boolean;
     /**
      * Override Copilot configuration directory.
      */
@@ -12450,6 +14093,48 @@ export interface SessionOpenOptions {
      */
     sessionCapabilities?: SessionCapability[];
 }
+/**
+ * Per-session settings for built-in shell tools.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ShellOptions".
+ */
+/** @experimental */
+export interface ShellOptions {
+    initProfile?: ShellInitProfile;
+    /**
+     * Ordered host-provided script paths sourced before each built-in shell command when the
+     * entry's shell target matches the active shell. Use these for rc files, environment setup scripts,
+     * or other custom scripts. A script that returns a nonzero status is reported, and later scripts
+     * and the user command continue while the shell remains running. Because scripts are sourced into
+     * the command shell, `exit`, `exec`, failures under `set -e`, or other shell-terminating behavior
+     * can prevent continuation. Script standard output is preserved; Bash script stderr is discarded,
+     * PowerShell exception messages are replaced, and runtime-generated failure notices omit
+     * configured script paths. When sandboxing is enabled, each script must already be readable under
+     * the active sandbox filesystem policy. Pass an empty array to clear the list.
+     */
+    initScripts?: ShellInitScript[];
+    /**
+     * Flags passed to the active built-in shell process on startup, replacing its default flags.
+     * When omitted, the built-in Bash shell uses `--norc --noprofile`,
+     * and the built-in PowerShell shell uses `-NoProfile -NoLogo`.
+     */
+    processFlags?: string[];
+}
+/**
+ * A host-provided script sourced before each built-in shell command when its shell target matches the active shell.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ShellInitScript".
+ */
+/** @experimental */
+export interface ShellInitScript {
+    /**
+     * Path to the script to source.
+     */
+    path: string;
+    shell: ShellInitScriptShell;
+}
 /**
  * Content-exclusion policy supplied to `sessions.open` options, with rules, last-updated data, and scope.
  *
@@ -12752,6 +14437,23 @@ export interface SessionsCloseRequest {
 /** @experimental */
 export interface SessionsCloseResult {
 }
+/**
+ * Session ID to delete from disk.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsDeleteRequest".
+ */
+/** @experimental */
+export interface SessionsDeleteRequest {
+    /**
+     * Session ID to delete
+     */
+    sessionId: string;
+    /**
+     * Internal resolved session directory path to delete
+     */
+    sessionPath?: string | null;
+}
 /**
  * Session metadata records to enrich with summary and context information.
  *
@@ -13085,6 +14787,29 @@ export interface SessionsGetLastForContextResult {
      */
     sessionId?: string;
 }
+/**
+ * Session ID whose persisted metadata should be read.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsGetMetadataRequest".
+ */
+/** @experimental */
+export interface SessionsGetMetadataRequest {
+    /**
+     * Session ID to inspect
+     */
+    sessionId: string;
+}
+/**
+ * Persisted local session metadata when the session exists.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsGetMetadataResult".
+ */
+/** @experimental */
+export interface SessionsGetMetadataResult {
+    session?: LocalSessionMetadataValue;
+}
 /**
  * Session ID to look up the persisted remote-steerable flag for.
  *
@@ -13126,6 +14851,32 @@ export interface SessionSizes {
         [k: string]: number | undefined;
     };
 }
+/**
+ * Limit for non-empty local session IDs.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsListNonEmptySessionIdsRequest".
+ */
+/** @experimental */
+export interface SessionsListNonEmptySessionIdsRequest {
+    /**
+     * Maximum number of session IDs to return.
+     */
+    limit?: number;
+}
+/**
+ * Recent local session IDs that contain user-visible history.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SessionsListNonEmptySessionIdsResult".
+ */
+/** @experimental */
+export interface SessionsListNonEmptySessionIdsResult {
+    /**
+     * Session IDs ordered newest-first.
+     */
+    sessionIds: string[];
+}
 /**
  * Optional source filter, metadata-load limit, and context filter applied to the returned sessions.
  *
@@ -13415,12 +15166,14 @@ export interface SessionUpdateOptionsParams {
      * Whether shell-script safety heuristics are enabled.
      */
     enableScriptSafety?: boolean;
+    shell?: ShellOptions;
     /**
-     * Shell init profile (`None` or `NonInteractive`).
+     * @deprecated
+     * Use shell.initProfile instead. Shell init profile (`None` or `NonInteractive`).
      */
     shellInitProfile?: string;
     /**
-     * Per-shell process flags (e.g., `pwsh` arguments).
+     * PowerShell process flags applied to built-in and user-requested shell commands.
      */
     shellProcessFlags?: string[];
     sandboxConfig?: SandboxConfig;
@@ -13442,7 +15195,7 @@ export interface SessionUpdateOptionsParams {
      */
     disabledSkills?: string[];
     /**
-     * Whether to discover custom instructions on demand after successful file views (AGENTS.md / CLAUDE.md / .github/copilot-instructions.md surfacing). Combined with `skipCustomInstructions` and the runtime-side `ON_DEMAND_INSTRUCTIONS` feature flag.
+     * Whether to discover custom instructions on demand after successful file views (AGENTS.md / CLAUDE.md / .github/copilot-instructions.md surfacing). Combined with `skipCustomInstructions`.
      */
     enableOnDemandInstructionDiscovery?: boolean;
     /**
@@ -13509,6 +15262,10 @@ export interface SessionUpdateOptionsParams {
      * Override directory for the session-events log. When unset, the runtime's default events log directory is used.
      */
     eventsLogDirectory?: string;
+    /**
+     * Whether subagent callback events should be forwarded into the session event log sink.
+     */
+    eventsLogIncludesSubagents?: boolean;
     /**
      * Additional content-exclusion policies to merge into the session's policy set.
      *
@@ -14970,6 +16727,10 @@ export interface UIExitPlanModeResponse {
      * Feedback from the user when they declined the plan or requested changes.
      */
     feedback?: string;
+    /**
+     * When true, the agent is instructed to end its turn without starting implementation so the client can restore the session model and auto-submit a fresh implementation turn on it. Set only when a distinct plan configuration (a different model, reasoning effort, or context tier) actually ran the planning turn.
+     */
+    deferImplementation?: boolean;
 }
 /**
  * Request ID of a pending `auto_mode_switch.requested` event and the user's response.
@@ -15493,7 +17254,7 @@ export interface VisibilitySetResult {
 /** @experimental */
 export interface WorkspaceDiffFileChange {
     /**
-     * Path to the changed file, relative to the workspace root.
+     * Path to the changed file, relative to the workspace root when the file lives under it. A file changed outside the workspace root keeps a `../`-relative path, or an absolute path when no relative path exists (for example a different Windows drive).
      */
     path: string;
     /**
@@ -15529,9 +17290,52 @@ export interface WorkspaceDiffResult {
      */
     baseBranch?: string;
     /**
-     * Whether a requested branch diff fell back to unstaged changes because branch diff failed.
+     * Whether the requested diff fell back to unstaged changes, either because branch diff failed or session diff was unavailable.
      */
     isFallback: boolean;
+    unavailableReason?: HistoryRewindUnavailableReason;
+}
+/**
+ * Compaction summary checkpoint to persist.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesAddSummaryRequest".
+ */
+/** @experimental */
+export interface WorkspacesAddSummaryRequest {
+    /**
+     * Summary title shown in checkpoint listings.
+     */
+    title: string;
+    /**
+     * Markdown summary content to persist.
+     */
+    content: string;
+}
+/**
+ * Persisted summary metadata and refreshed workspace metadata.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesAddSummaryResult".
+ */
+/** @experimental */
+export interface WorkspacesAddSummaryResult {
+    summary?: {};
+    workspace?: {};
+    [k: string]: unknown | undefined;
+}
+/**
+ * Whether the autopilot objective file exists.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesAutopilotObjectiveExistsResult".
+ */
+/** @experimental */
+export interface WorkspacesAutopilotObjectiveExistsResult {
+    /**
+     * True when the objective file exists.
+     */
+    exists: boolean;
 }
 /**
  * Workspace checkpoint metadata with assigned number, human-readable title, and checkpoint filename.
@@ -15561,15 +17365,28 @@ export interface WorkspacesCheckpoints {
  * via the `definition` "WorkspacesCreateFileRequest".
  */
 /** @experimental */
-export interface WorkspacesCreateFileRequest {
-    /**
-     * Relative path within the workspace files directory
-     */
-    path: string;
+export interface WorkspacesCreateFileRequest {
+    /**
+     * Relative path within the workspace files directory
+     */
+    path: string;
+    /**
+     * File content to write as a UTF-8 string
+     */
+    content: string;
+}
+/**
+ * Result of deleting the autopilot objective file.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesDeleteAutopilotObjectiveResult".
+ */
+/** @experimental */
+export interface WorkspacesDeleteAutopilotObjectiveResult {
     /**
-     * File content to write as a UTF-8 string
+     * True when a file was deleted.
      */
-    content: string;
+    deleted: boolean;
 }
 /**
  * Parameters for computing a workspace diff.
@@ -15585,6 +17402,21 @@ export interface WorkspacesDiffRequest {
      */
     ignoreWhitespace?: boolean;
 }
+/**
+ * Optional session context used when creating a local workspace.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesEnsureRequest".
+ */
+/** @experimental */
+export interface WorkspacesEnsureRequest {
+    /**
+     * Opaque workspace context supplied by the session host.
+     */
+    context?: {
+        [k: string]: unknown | undefined;
+    };
+}
 /**
  * Current workspace metadata for the session, including its absolute filesystem path when available.
  *
@@ -15646,6 +17478,19 @@ export interface WorkspacesListFilesResult {
      */
     files: string[];
 }
+/**
+ * Autopilot objective file content, or null when missing.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesReadAutopilotObjectiveResult".
+ */
+/** @experimental */
+export interface WorkspacesReadAutopilotObjectiveResult {
+    /**
+     * Autopilot objective file content, or null when missing.
+     */
+    content: string | null;
+}
 /**
  * Checkpoint number to read.
  *
@@ -15737,6 +17582,82 @@ export interface WorkspacesSaveLargePasteResult {
         sizeBytes: number;
     } | null;
 }
+/**
+ * Rollback point for local workspace summaries.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesTruncateSummariesRequest".
+ */
+/** @experimental */
+export interface WorkspacesTruncateSummariesRequest {
+    /**
+     * Number of newest summaries to keep.
+     */
+    keepCount: number;
+}
+/**
+ * Workspace metadata fields to update.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesUpdateMetadataRequest".
+ */
+/** @experimental */
+export interface WorkspacesUpdateMetadataRequest {
+    /**
+     * Opaque workspace context supplied by the session host.
+     */
+    context?: {
+        [k: string]: unknown | undefined;
+    };
+    /**
+     * Optional workspace display name override.
+     */
+    name?: string;
+}
+/**
+ * Autopilot objective file content to persist.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesWriteAutopilotObjectiveRequest".
+ */
+/** @experimental */
+export interface WorkspacesWriteAutopilotObjectiveRequest {
+    /**
+     * Autopilot objective file content.
+     */
+    content: string;
+}
+/**
+ * Result of writing the autopilot objective file.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "WorkspacesWriteAutopilotObjectiveResult".
+ */
+/** @experimental */
+export interface WorkspacesWriteAutopilotObjectiveResult {
+    /**
+     * Filesystem operation performed.
+     */
+    operation: string;
+}
+/** @experimental */
+export interface SessionModelListRequest {
+    /**
+     * If true, bypasses the per-session model list cache and re-fetches from CAPI.
+     */
+    skipCache?: boolean;
+}
+/** @experimental */
+export interface SessionAgentListRequest {
+    /**
+     * When true, request the session's configured built-in agents alongside custom agents. Listing applies feature, context, inclusion, exclusion, and user-disabled-agent policy, but does not evaluate transient invocation requirements such as model availability. Built-in metadata may be omitted when the session cannot project it, such as a relay session.
+     */
+    includeBuiltInAgents?: boolean;
+    /**
+     * When true, request authored base prompt text on each AgentInfo. Prompt text may be omitted when unavailable, such as for agents projected through a relay session.
+     */
+    includePrompt?: boolean;
+}
 /**
  * Standard MCP CallToolResult
  *
@@ -15747,6 +17668,76 @@ export interface WorkspacesSaveLargePasteResult {
 export interface SessionMcpAppsCallToolResult {
     [k: string]: unknown | undefined;
 }
+/** @experimental */
+export interface SessionPluginsReloadRequest {
+    /**
+     * Reload MCP server connections after refreshing plugins. Defaults to true.
+     */
+    reloadMcp?: boolean;
+    /**
+     * Re-run custom-agent discovery after refreshing plugins. Defaults to true.
+     */
+    reloadCustomAgents?: boolean;
+    /**
+     * Re-load user, plugin, and (subject to `deferRepoHooks`) repo hooks. Defaults to true. Has no effect when the host has not registered a hook reloader (e.g. remote sessions).
+     */
+    reloadHooks?: boolean;
+    /**
+     * Re-discover and relaunch subprocess extensions (including plugin-shipped extensions) after refreshing plugins. Defaults to true. Has no effect when the session has no active extension controller (e.g. extensions were not requested for the session).
+     */
+    reloadExtensions?: boolean;
+    /**
+     * When true, skip repo-level hooks during the hook reload. Use before folder trust is confirmed; load them post-trust via `sessions.loadDeferredRepoHooks`.
+     */
+    deferRepoHooks?: boolean;
+}
+/** @experimental */
+export interface SessionProviderGetEndpointRequest {
+    /**
+     * Model identifier the caller intends to use against the returned endpoint. Used to pick the correct wire shape. Omit to use whichever model the session is currently using.
+     */
+    modelId?: string;
+}
+/** @experimental */
+export interface SessionCommandsListRequest {
+    /**
+     * Include runtime built-in commands
+     */
+    includeBuiltins?: boolean;
+    /**
+     * Include enabled user-invocable skills and commands
+     */
+    includeSkills?: boolean;
+    /**
+     * Include commands registered by protocol clients, including SDK clients and extensions
+     */
+    includeClientCommands?: boolean;
+}
+/** @experimental */
+export interface SessionHistoryCompactRequest {
+    /**
+     * Optional user-provided instructions to focus the compaction summary
+     */
+    customInstructions?: string;
+    /**
+     * What initiated this compaction request, recorded as the `trigger` on the persisted `session.compaction_start` / `session.compaction_complete` events. When absent, the compaction is persisted without trigger attribution (initiator unknown).
+     */
+    trigger?: "manual"
+    /** Compaction requested while switching to a model with a smaller context window. */
+     | "model_switch";
+    /**
+     * Context window token limit this compaction is targeting, recorded as the `tokenLimit` on the persisted `session.compaction_start` / `session.compaction_complete` events. Set it when the compaction targets a window other than the compacting model's own, e.g. switching to a model with a smaller context window: the compaction still runs on the current model, so the limit that motivated it would otherwise be lost. When absent, the events record the compacting model's own resolved limit. Attribution metadata only - it does not change how much the compaction removes.
+     */
+    tokenLimit?: number;
+}
+/** @experimental */
+export interface SessionLimitPredictionPredictRequest {
+    /**
+     * Optional model identifier override. If omitted, the session's current model is used.
+     */
+    modelId?: string;
+    clientType?: SessionLimitPredictionClientType;
+}
 /**
  * Identifies the target session.
  *
@@ -15782,6 +17773,12 @@ export declare function createServerRpc(connection: MessageConnection): {
          * @returns List of Copilot models available to the resolved user, including capabilities and billing metadata.
          */
         list: (params: ModelsListRequest) => Promise<ModelList>;
+        /**
+         * Returns the running runtime's complete catalog of well-known built-in model IDs without authentication or network access.
+         *
+         * @returns The running runtime's complete catalog of well-known built-in model IDs, including supported models and additional IDs with built-in metadata.
+         */
+        getBuiltInCatalog: () => Promise<BuiltInModelCatalog>;
     };
     /** @experimental */
     tools: {
@@ -16363,6 +18360,24 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
      * @experimental
      */
     abort: (params: AbortRequest) => Promise<AbortResult>;
+    /**
+     * Interrupts the current main agent turn while leaving running background work (subagents, sidekicks, and promoted attached shells) alive. No-op when the main loop is not processing.
+     *
+     * @param params Parameters for interrupting the main agent turn.
+     *
+     * @returns Result of interrupting the main agent turn.
+     *
+     * @experimental
+     */
+    interruptMainTurn: (params: InterruptMainTurnRequest) => Promise<InterruptMainTurnResult>;
+    /**
+     * Cancels every running background agent (task-registry subagents plus sidekick agents) without interrupting the main agent loop. Promoted attached shells are left running.
+     *
+     * @returns The number of running background agents (task-registry agents) that were cancelled.
+     *
+     * @experimental
+     */
+    cancelAllBackgroundAgents: () => Promise<SessionCancelAllBackgroundAgentsResult>;
     /**
      * Shuts down the session and persists its final state. Awaits any deferred sessionEnd hooks before resolving so user-supplied hook scripts complete before the runtime tears down.
      *
@@ -16449,6 +18464,14 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Complete current or terminal factory run envelope.
          */
         run: (params: FactoryRunRequest) => Promise<FactoryRunResult>;
+        /**
+         * Resumes a factory run using its persisted name, arguments, journal, and accounting.
+         *
+         * @param params Parameters for resuming a factory run from its persisted identity.
+         *
+         * @returns Resolved persisted factory identity and resumed run envelope.
+         */
+        resume: (params: FactoryResumeRequest) => Promise<FactoryResumeResult>;
         /**
          * Gets the current or settled envelope for a factory run.
          *
@@ -16457,6 +18480,28 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Complete current or terminal factory run envelope.
          */
         getRun: (params: FactoryGetRunRequest) => Promise<FactoryRunResult>;
+        /**
+         * Lists durable factory runs for this session in creation order.
+         *
+         * @returns Factory runs in durable creation order.
+         */
+        listRuns: () => Promise<FactoryListRunsResult>;
+        /**
+         * Gets durable and live observability detail for one factory run.
+         *
+         * @param params Parameters for retrieving a factory run.
+         *
+         * @returns Full factory run observability detail.
+         */
+        getRunDetail: (params: FactoryGetRunRequest) => Promise<FactoryRunDetail>;
+        /**
+         * Pages durable progress for one factory run.
+         *
+         * @param params Parameters for paging factory progress.
+         *
+         * @returns A bidirectional page of factory progress.
+         */
+        getRunProgress: (params: FactoryGetRunProgressRequest) => Promise<FactoryProgressPage>;
         /**
          * Requests cancellation of a factory run and returns its run envelope.
          *
@@ -16532,7 +18577,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          *
          * @returns The list of models available to this session.
          */
-        list: (params?: ModelListRequest) => Promise<SessionModelList>;
+        list: (params?: SessionModelListRequest) => Promise<SessionModelList>;
     };
     /** @experimental */
     mode: {
@@ -16611,6 +18656,22 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Current workspace metadata for the session, including its absolute filesystem path when available.
          */
         getWorkspace: () => Promise<WorkspacesGetWorkspaceResult>;
+        /**
+         * Updates workspace metadata for a local session and returns the refreshed workspace.
+         *
+         * @param params Workspace metadata fields to update.
+         *
+         * @returns Current workspace metadata for the session, including its absolute filesystem path when available.
+         */
+        updateMetadata: (params: WorkspacesUpdateMetadataRequest) => Promise<WorkspacesGetWorkspaceResult>;
+        /**
+         * Ensures a local session workspace exists and returns it.
+         *
+         * @param params Optional session context used when creating a local workspace.
+         *
+         * @returns Current workspace metadata for the session, including its absolute filesystem path when available.
+         */
+        ensure: (params: WorkspacesEnsureRequest) => Promise<WorkspacesGetWorkspaceResult>;
         /**
          * Lists files stored in the session workspace files directory.
          *
@@ -16645,6 +18706,48 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Checkpoint content as a UTF-8 string, or null when the checkpoint or workspace is missing.
          */
         readCheckpoint: (params: WorkspacesReadCheckpointRequest) => Promise<WorkspacesReadCheckpointResult>;
+        /**
+         * Adds a compaction summary checkpoint to the local session workspace.
+         *
+         * @param params Compaction summary checkpoint to persist.
+         *
+         * @returns Persisted summary metadata and refreshed workspace metadata.
+         */
+        addSummary: (params: WorkspacesAddSummaryRequest) => Promise<WorkspacesAddSummaryResult>;
+        /**
+         * Truncates local workspace compaction summaries after a rollback.
+         *
+         * @param params Rollback point for local workspace summaries.
+         *
+         * @returns Current workspace metadata for the session, including its absolute filesystem path when available.
+         */
+        truncateSummaries: (params: WorkspacesTruncateSummariesRequest) => Promise<WorkspacesGetWorkspaceResult>;
+        /**
+         * Reads the autopilot objective state file from the local session workspace.
+         *
+         * @returns Autopilot objective file content, or null when missing.
+         */
+        readAutopilotObjective: () => Promise<WorkspacesReadAutopilotObjectiveResult>;
+        /**
+         * Writes the autopilot objective state file in the local session workspace.
+         *
+         * @param params Autopilot objective file content to persist.
+         *
+         * @returns Result of writing the autopilot objective file.
+         */
+        writeAutopilotObjective: (params: WorkspacesWriteAutopilotObjectiveRequest) => Promise<WorkspacesWriteAutopilotObjectiveResult>;
+        /**
+         * Deletes the autopilot objective state file from the local session workspace.
+         *
+         * @returns Result of deleting the autopilot objective file.
+         */
+        deleteAutopilotObjective: () => Promise<WorkspacesDeleteAutopilotObjectiveResult>;
+        /**
+         * Checks whether the local session workspace has an autopilot objective state file.
+         *
+         * @returns Whether the autopilot objective file exists.
+         */
+        autopilotObjectiveExists: () => Promise<WorkspacesAutopilotObjectiveExistsResult>;
         /**
          * Saves pasted content as a UTF-8 file in the session workspace.
          *
@@ -16654,7 +18757,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          */
         saveLargePaste: (params: WorkspacesSaveLargePasteRequest) => Promise<WorkspacesSaveLargePasteResult>;
         /**
-         * Computes a diff for the session workspace.
+         * Computes a diff for the session workspace. Never rejects for a busy session: a `session`-mode diff that cannot read the session's file-change captures falls back to an unstaged git diff with `isFallback: true` and reports why in `unavailableReason`.
          *
          * @param params Parameters for computing a workspace diff.
          *
@@ -16702,11 +18805,13 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
     /** @experimental */
     agent: {
         /**
-         * Lists custom agents available to the session.
+         * Lists agents available to the session. Defaults to custom agents only; pass includeBuiltInAgents to include the effective built-in agents.
+         *
+         * @param params Controls whether built-in agents and authored prompt text are included.
          *
-         * @returns Custom agents available to the session.
+         * @returns Agents available to the session.
          */
-        list: () => Promise<AgentList>;
+        list: (params?: SessionAgentListRequest) => Promise<AgentList>;
         /**
          * Gets the currently selected custom agent for the session.
          *
@@ -16913,9 +19018,9 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          */
         removeGitHub: () => Promise<McpRemoveGitHubResult>;
         /**
-         * Starts an individual MCP server on the live session from a caller-supplied config. Session-scoped and ephemeral: the server is added to this session's running set only and is reaped when the session ends. Does NOT modify persistent user configuration (`mcp.config.*`), so it does not affect future sessions. The server surfaces through `session.mcp.list` and the `session.mcp_servers_loaded` / `session.mcp_server_status_changed` events like any other server.
+         * Starts an individual MCP server on the live session. Omit `config` for a config-free start-by-name of an already-configured server (reuses the server's already-registered configuration); supply `config` to start from a caller-supplied configuration. Session-scoped and ephemeral: the server is added to this session's running set only and is reaped when the session ends. Does NOT modify persistent user configuration (`mcp.config.*`), so it does not affect future sessions. The server surfaces through `session.mcp.list` and the `session.mcp_servers_loaded` / `session.mcp_server_status_changed` events like any other server.
          *
-         * @param params Server name and configuration for an individual MCP server start.
+         * @param params Server name and optional configuration for an individual MCP server start. Omit `config` for a config-free start-by-name of an already-configured server.
          */
         startServer: (params: McpStartServerRequest) => Promise<void>;
         /**
@@ -16956,6 +19061,14 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
              * @returns OAuth authorization URL the caller should open, or empty when cached tokens already authenticated the server.
              */
             login: (params: McpOauthLoginRequest) => Promise<McpOauthLoginResult>;
+            /**
+             * Responds to a pending MCP OAuth authorization request by its request id.
+             *
+             * @param params Pending MCP OAuth request id to respond to.
+             *
+             * @returns Indicates whether the pending MCP OAuth response was accepted.
+             */
+            respond: (params: McpOauthRespondRequest) => Promise<McpOauthRespondResult>;
         };
         /** @experimental */
         headers: {
@@ -17056,7 +19169,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          *
          * @param params Optional flags controlling which side effects the reload performs.
          */
-        reload: (params?: PluginsReloadRequest) => Promise<void>;
+        reload: (params?: SessionPluginsReloadRequest) => Promise<void>;
     };
     /** @experimental */
     provider: {
@@ -17067,7 +19180,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          *
          * @returns A snapshot of the provider endpoint the session is currently configured to talk to.
          */
-        getEndpoint: (params?: ProviderGetEndpointRequest) => Promise<ProviderEndpoint>;
+        getEndpoint: (params?: SessionProviderGetEndpointRequest) => Promise<ProviderEndpoint>;
         /**
          * Adds BYOK providers and/or models to the session's registry at runtime, extending the additive registry built from the session's `providers`/`models` options. Both fields are optional, so a call may add providers only, models only, or both. Within a single call providers are registered before models, so a model may reference a provider added in the same call; across calls a model may reference any provider already registered (from session creation or a prior add). A model whose referenced provider is not registered by the end of the call is rejected. Newly added models become selectable via `model.list` / `model.switchTo` and are inherited by sub-agents spawned afterwards.
          *
@@ -17168,7 +19281,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          *
          * @returns Slash commands available in the session, after applying any include/exclude filters.
          */
-        list: (params?: CommandsListRequest) => Promise<CommandList>;
+        list: (params?: SessionCommandsListRequest) => Promise<CommandList>;
         /**
          * Invokes a slash command in the session.
          *
@@ -17371,9 +19484,11 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         /**
          * Clears session-scoped tool permission approvals.
          *
+         * @param params Clears session-scoped tool permission approvals, and optionally the location-scoped ones.
+         *
          * @returns Indicates whether the operation succeeded.
          */
-        resetSessionApprovals: () => Promise<PermissionsResetSessionApprovalsResult>;
+        resetSessionApprovals: (params: PermissionsResetSessionApprovalsRequest) => Promise<PermissionsResetSessionApprovalsResult>;
         /**
          * Notifies the runtime that a permission prompt UI has been shown to the user.
          *
@@ -17559,9 +19674,20 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         recomputeContextTokens: (params: MetadataRecomputeContextTokensRequest) => Promise<MetadataRecomputeContextTokensResult>;
     };
     /** @experimental */
+    contentExclusion: {
+        /**
+         * Checks local file system absolute paths within the session working directory against its content-exclusion policy. Results preserve input order. Unsupported paths/filesystems and unavailable policy evaluation return available false, and callers must treat every requested path as excluded.
+         *
+         * @param params Local file system absolute paths within the session working directory to check against its content-exclusion policy.
+         *
+         * @returns Batch content-exclusion result. Callers must fail closed when policy evaluation is unavailable.
+         */
+        checkPaths: (params: ContentExclusionCheckPathsRequest) => Promise<ContentExclusionCheckPathsResult>;
+    };
+    /** @experimental */
     shell: {
         /**
-         * Starts a shell command and streams output through session notifications.
+         * Starts a shell command and streams output through session notifications. The command runs as the leader of its own process group (POSIX) or in a dedicated job object (Windows), so a forced termination — via "shell.kill", the request timeout, or session disposal — signals that whole group/job rather than only the direct child. Two gaps are worth planning for: a command that exits on its own does not trigger that teardown, and on POSIX a descendant that moves itself into a new session or process group (for example via "setsid") leaves the signalled group, so either can leave a background process running.
          *
          * @param params Shell command to run, with optional working directory and timeout in milliseconds.
          *
@@ -17569,7 +19695,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          */
         exec: (params: ShellExecRequest) => Promise<ShellExecResult>;
         /**
-         * Sends a signal to a shell process previously started via "shell.exec".
+         * Sends a signal to a shell process previously started via "shell.exec". The signal targets the command's whole process group (POSIX) or job object (Windows), so descendants still in that group are signalled too, not just the direct child. On POSIX a descendant that moved itself into a new session or process group (for example via "setsid") is no longer in the signalled group and survives.
          *
          * @param params Identifier of a process previously returned by "shell.exec" and the signal to send.
          *
@@ -17602,7 +19728,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          *
          * @returns Compaction outcome with the number of tokens and messages removed, summary text, and the resulting context window breakdown.
          */
-        compact: (params?: HistoryCompactRequest) => Promise<HistoryCompactResult>;
+        compact: (params?: SessionHistoryCompactRequest) => Promise<HistoryCompactResult>;
         /**
          * Truncates persisted session history to a specific event.
          *
@@ -17611,6 +19737,28 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Number of events that were removed by the truncation.
          */
         truncate: (params: HistoryTruncateRequest) => Promise<HistoryTruncateResult>;
+        /**
+         * Lists the user turns that the session can rewind to. Never rejects for a busy session: rewind reads need the session's file-change captures to be settled, so a session that still holds active work answers with `unavailableReason: "session-busy"` and no points, which the caller can retry.
+         *
+         * @returns Rewind points and file-change-tracking availability for the session.
+         */
+        listRewindPoints: () => Promise<HistoryListRewindPointsResult>;
+        /**
+         * Previews the files that a conversation-and-files rewind would restore.
+         *
+         * @param params Event boundary to preview for conversation-and-files rewind.
+         *
+         * @returns Files and aggregate changes for a prospective rewind.
+         */
+        previewRewind: (params: HistoryPreviewRewindRequest) => Promise<HistoryPreviewRewindResult>;
+        /**
+         * Rewinds the session conversation, optionally restoring files changed by the discarded turns. Not crash-atomic: file restore and conversation truncation are separate stores, applied in that order, so a process crash between them can leave the workspace rewound while the conversation still contains the discarded turns. There is no recovery journal; re-running the same rewind is the recovery path for a crash before truncation lands, since file restore is idempotent (already-restored files are reported as skipped) and truncation is re-derived from the still-retained boundary event. After truncation lands that boundary no longer exists, so the same request is rejected; the only stage that can still be outstanding is snapshot pruning, whose failure leaves orphan snapshots the capture store tolerates. The reverse inconsistency cannot occur, because truncation is never applied before file restore succeeds.
+         *
+         * @param params Boundary and mode for rewinding session history.
+         *
+         * @returns Structured outcome of a rewind request.
+         */
+        rewind: (params: HistoryRewindRequest) => Promise<HistoryRewindResult>;
         /**
          * Cancels any in-progress background compaction on a local session.
          *
@@ -17638,6 +19786,60 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Snapshot of the session's pending queued items and immediate-steering messages.
          */
         pendingItems: () => Promise<QueuePendingItemsResult>;
+        /**
+         * Moves an addressable queued item to a public visible position.
+         *
+         * @param params Parameters for moving a queued item by stable id.
+         *
+         * @returns Result of moving a queued item.
+         */
+        moveItem: (params: QueueMoveItemRequest) => Promise<QueueMoveItemResult>;
+        /**
+         * Inserts a new queued message at a public visible position.
+         *
+         * @param params Parameters for inserting a queued message at a public visible position.
+         *
+         * @returns Result of inserting a queued message.
+         */
+        insertAt: (params: QueueInsertAtRequest) => Promise<QueueInsertAtResult>;
+        /**
+         * Removes an addressable queued item by its stable id.
+         *
+         * @param params Parameters for removing a queued item by stable id.
+         *
+         * @returns Result of removing a queued item.
+         */
+        removeAt: (params: QueueRemoveAtRequest) => Promise<QueueRemoveAtResult>;
+        /**
+         * Updates the text of an addressable single-message queue item.
+         *
+         * @param params Parameters for editing a single queued message.
+         *
+         * @returns Result of editing a queued message.
+         */
+        updateText: (params: QueueUpdateTextRequest) => Promise<QueueUpdateTextResult>;
+        /**
+         * Duplicates an addressable queued item immediately after its source.
+         *
+         * @param params Parameters for duplicating a queued item.
+         *
+         * @returns Result of duplicating a queued item.
+         */
+        duplicateAt: (params: QueueDuplicateAtRequest) => Promise<QueueDuplicateAtResult>;
+        /**
+         * Acquires or releases the queued-lane drain pause.
+         *
+         * @param params Parameters for acquiring or releasing the queued-lane drain pause. Acquisition is exclusive and non-idempotent: `paused: true` against an already-paused session fails with `queue_already_paused`. The pause is never released automatically — it is not tied to the caller's lifetime, so a client that exits without sending `paused: false` leaves the lane frozen. Release is unowned: `paused: false` clears the pause for any caller, including one that never acquired it.
+         */
+        setDrainPaused: (params: QueueSetDrainPausedRequest) => Promise<void>;
+        /**
+         * Moves an addressable queued message into the live turn's steering lane.
+         *
+         * @param params Parameters for steering a queued message into a live turn.
+         *
+         * @returns Result of trying to steer a queued message into a live turn.
+         */
+        sendNow: (params: QueueSendNowRequest) => Promise<QueueSendNowResult>;
         /**
          * Removes the most recently queued user-facing item (LIFO).
          *
@@ -17692,6 +19894,17 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         getMetrics: () => Promise<UsageGetMetricsResult>;
     };
     /** @experimental */
+    limitPrediction: {
+        /**
+         * Predicts an AI-credit session limit for the session's resolved model. Returns an unavailable result instead of falling back when the current model is unresolved auto.
+         *
+         * @param params Parameters for predicting an AI-credit session limit. Omitting `modelId` uses the session's currently selected model.
+         *
+         * @returns Prediction result. Available results include prediction details; unavailable results include an explicit reason.
+         */
+        predict: (params?: SessionLimitPredictionPredictRequest) => Promise<SessionLimitPredictionResult>;
+    };
+    /** @experimental */
     remote: {
         /**
          * Enables remote session export or steering.
@@ -17865,13 +20078,21 @@ export interface SessionFsHandler {
      */
     rename(params: SessionFsRenameRequest): Promise<SessionFsError | undefined>;
     /**
-     * Executes a SQLite query against the per-session database.
+     * Executes a SQLite query against the per-session database. Providers apply busy handling for every call.
      *
-     * @param params SQL query, query type, and optional bind parameters for executing a SQLite query against the per-session database.
+     * @param params SQL query, query type, and optional bind parameters for executing a SQLite query against the per-session database. The provider applies its SQLite busy timeout for every call.
      *
      * @returns Query results including rows, columns, and rows affected, or a filesystem error if execution failed.
      */
     sqliteQuery(params: SessionFsSqliteQueryRequest): Promise<SessionFsSqliteQueryResult>;
+    /**
+     * Executes SQLite statements atomically on the provider-owned connection.
+     *
+     * @param params Statements to execute atomically. Providers apply busy handling for every call.
+     *
+     * @returns Per-statement results, or a classified transaction error.
+     */
+    sqliteTransaction(params: SessionFsSqliteTransactionRequest): Promise<SessionFsSqliteTransactionResult>;
     /**
      * Checks whether the per-session SQLite database already exists, without creating it.
      *