@github/copilot-sdk 1.0.13-preview.0 → 1.0.13-preview.2

package/dist/generated/rpc.d.ts

@@ -15,7 +15,7 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
  * via the `definition` "AuthInfo".
  */
 /** @experimental */
-export type AuthInfo = HMACAuthInfo | EnvAuthInfo | TokenAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
+export type AuthInfo = HMACAuthInfo | EnvAuthInfo | TokenAuthInfo | TokenProviderAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
 /**
  * User to log out
  *
@@ -241,6 +241,8 @@ export type AuthInfoType =
  | "api-key"
 /** Authentication from a GitHub token. */
  | "token"
+/** Authentication from an SDK GitHub token callback. */
+ | "token-provider"
 /** Authentication from a Copilot API token. */
  | "copilot-api-token";
 /**
@@ -796,8 +798,6 @@ export type DebugCollectLogsResultKind =
 "archive"
 /** A directory containing redacted files was written. */
  | "directory";
-/** @experimental */
-export type DisableBypassPermissionsMode = "disable";
 /**
  * Persisted extension discovery source
  *
@@ -1128,6 +1128,48 @@ export type FactoryPhaseStatus =
 export type FilterMapping = {
     [k: string]: ContentFilterMode;
 } | ContentFilterMode;
+/**
+ * Why the runtime is requesting a GitHub credential.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GitHubTokenAcquireReason".
+ */
+/** @experimental */
+export type GitHubTokenAcquireReason = 
+/** The runtime is acquiring the registration's first credential. */
+"initial"
+/** The runtime is replacing a credential that is approaching expiry. */
+ | "refresh";
+/**
+ * SDK host response to a GitHub credential request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GitHubTokenAcquireResult".
+ */
+/** @experimental */
+export type GitHubTokenAcquireResult = {
+    /**
+     * GitHub access token acquired by the SDK host.
+     */
+    accessToken: string;
+    /**
+     * OAuth token type. Defaults to bearer when omitted.
+     */
+    tokenType?: string;
+    /**
+     * Remaining token lifetime in seconds when callback execution completes. It must exceed the one-hour preflight refresh threshold.
+     */
+    expiresIn: number;
+    /**
+     * GitHub credential response variant discriminator.
+     */
+    kind: "token";
+} | {
+    /**
+     * GitHub credential response variant discriminator.
+     */
+    kind: "cancelled";
+};
 /**
  * Optional compaction parameters.
  *
@@ -1736,7 +1778,7 @@ export type McpOauthPendingRequestResponse = {
      */
     accessToken: string;
     /**
-     * OAuth token type. Defaults to Bearer when omitted.
+     * OAuth token type. Defaults to bearer when omitted.
      */
     tokenType?: string;
     /**
@@ -2331,8 +2373,24 @@ export type PermissionDecisionSurface =
  | "prompt_mode"
 /** The Copilot App client. */
  | "copilot_app"
+/** An Agent Client Protocol host. */
+ | "acp"
 /** A generic Copilot SDK client. */
  | "sdk";
+/**
+ * Response capability available to the client when it settled a permission request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PermissionResponseCapability".
+ */
+/** @experimental */
+export type PermissionResponseCapability = 
+/** The client could ask a user for this decision. */
+"interactive"
+/** The client could return an automated response but could not ask a user. */
+ | "headless"
+/** The client had no response path available. */
+ | "none";
 /**
  * Tool approval to persist and apply
  *
@@ -3019,6 +3077,14 @@ export type SessionsOpenProgressStatus =
 "in-progress"
 /** The step has completed successfully. */
  | "complete";
+/**
+ * Authentication credentials accepted by session.gitHubAuth.setCredentials. Session-owned token-provider identities cannot be installed through this method.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SettableAuthInfo".
+ */
+/** @experimental */
+export type SettableAuthInfo = HMACAuthInfo | EnvAuthInfo | SettableTokenAuthInfo | CopilotApiTokenAuthInfo | UserAuthInfo | GhCliAuthInfo | ApiKeyAuthInfo;
 /**
  * Rust-owned settings predicates exposed across the SDK boundary. Raw feature-flag names are intentionally not part of the contract.
  *
@@ -3913,6 +3979,32 @@ export interface TokenAuthInfo {
      * The token value itself. Treat as a secret.
      */
     token: string;
+    /**
+     * Opaque native GitHub credential registration backing this token identity, when applicable.
+     */
+    registrationId?: string;
+    copilotUser?: CopilotUserResponse;
+}
+/**
+ * Authentication-info variant backed by an SDK GitHub token callback. It carries routing metadata but never a plaintext token.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "TokenProviderAuthInfo".
+ */
+/** @experimental */
+export interface TokenProviderAuthInfo {
+    /**
+     * SDK callback-backed GitHub token authentication.
+     */
+    type: "token-provider";
+    /**
+     * Authentication host.
+     */
+    host: string;
+    /**
+     * Opaque SDK callback registration identifier.
+     */
+    registrationId: string;
     copilotUser?: CopilotUserResponse;
 }
 /**
@@ -4556,6 +4648,10 @@ export interface AuthIdentity {
      * Name of the environment variable that supplied the credential, when applicable
      */
     envVar?: string;
+    /**
+     * Opaque SDK GitHub credential registration backing this identity. Routing metadata only; never a credential.
+     */
+    registrationId?: string;
     copilotUser?: CopilotUserResponse;
 }
 /**
@@ -6776,6 +6872,10 @@ export interface ExternalToolTextResultForLlmContentShellExit {
      * Whether outputPreview is known to be incomplete or truncated
      */
     outputTruncated?: boolean;
+    /**
+     * Path reported in the shell session's filesystem namespace when shell output exceeded the configured large-output threshold.
+     */
+    outputFilePath?: string;
 }
 /**
  * Image content block with base64-encoded data
@@ -7596,6 +7696,14 @@ export interface FactoryResumeRequest {
      */
     runId: string;
     limits?: FactoryRunLimits;
+    /**
+     * Whether to notify the originating session when the factory completes.
+     */
+    notifyOnComplete?: boolean;
+    /**
+     * Whether to emit factory phase names to the session transcript.
+     */
+    logPhaseNames?: boolean;
 }
 /**
  * Wire-only per-invocation factory resource ceiling overrides.
@@ -7779,6 +7887,14 @@ export interface FactoryRunRequest {
 /** @experimental */
 export interface RunOptions {
     limits?: FactoryRunLimits;
+    /**
+     * Whether to notify the originating session when the factory completes.
+     */
+    notifyOnComplete?: boolean;
+    /**
+     * Whether to emit factory phase names to the session transcript.
+     */
+    logPhaseNames?: boolean;
     /**
      * Run identifier whose journal and progress should seed this resumed run.
      */
@@ -7897,6 +8013,14 @@ export interface GitHubTelemetryClientInfo {
      * Stable machine identifier for the device.
      */
     dev_device_id?: string;
+    /**
+     * Distinct CPU model names for the host, comma-separated.
+     */
+    cpu_model?: string;
+    /**
+     * Number of logical CPU cores on the host.
+     */
+    cpu_count?: number;
 }
 /**
  * A single telemetry event in the runtime's native GitHub-shaped telemetry format, forwarded verbatim to opted-in hosts. The `restricted` flag on the enclosing GitHubTelemetryNotification distinguishes standard from restricted events; the payload shape is identical for both.
@@ -7968,6 +8092,28 @@ export interface GitHubTelemetryNotification {
     restricted: boolean;
     event: GitHubTelemetryEvent;
 }
+/**
+ * Asks the SDK client to acquire a GitHub access token from an opaque callback registration.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "GitHubTokenAcquireRequest".
+ */
+/** @experimental */
+export interface GitHubTokenAcquireRequest {
+    /**
+     * Opaque identifier generated by the SDK for this callback registration.
+     */
+    registrationId: string;
+    /**
+     * Effective GitHub host for which the callback must return a token.
+     */
+    host: string;
+    /**
+     * Session receiving the token. Absent only before a cloud session has been assigned its id.
+     */
+    sessionId?: string;
+    reason: GitHubTokenAcquireReason;
+}
 /**
  * Pending external tool call request ID, with the tool result or an error describing why it failed.
  *
@@ -8368,6 +8514,10 @@ export interface InstalledPlugin {
      * Per-plugin source fingerprint (a SHA-256 hash of the plugin's catalog source spec plus its resolved source subtree — NOT a Git commit SHA) captured at marketplace install/update time. Auto-update compares it against the freshly recomputed fingerprint to detect a content change that does not bump the version. Absent for pre-existing installs and for direct (non-marketplace) installs.
      */
     source_sha?: string;
+    /**
+     * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — those synthesized at session start for a directory/local marketplace, whose cache_path points at the real plugin directory on disk rather than a copy under the installed-plugins cache. Its presence is what marks a record as live, and no record carrying it is ever written to the persisted installedPlugins key.
+     */
+    installed_from?: string;
 }
 /**
  * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref or full commit SHA, and optional subpath.
@@ -8472,6 +8622,10 @@ export interface InstalledPluginInfo {
      * Whether the plugin is currently enabled for new sessions
      */
     enabled: boolean;
+    /**
+     * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — a plugin belonging to a directory/local marketplace, which is loaded from its real directory on every pass instead of a copy under the installed-plugins cache. Its presence is what marks a listed plugin as live: such a plugin is always present on disk, so `enabled` is its only meaningful state and it is never "not installed".
+     */
+    installedFrom?: string;
 }
 /**
  * Canonical file or directory where custom instructions can be discovered or created, with location, kind, preference, and project path.
@@ -11315,6 +11469,15 @@ export interface Model {
     supportedContextTiers?: string[];
     modelPickerCategory?: ModelPickerCategory;
     modelPickerPriceCategory?: ModelPickerPriceCategory;
+    warningText?: ModelWarningText;
+    /**
+     * Informational notices the service published for this model, such as an upcoming change or a recommended alternative. Present only when the service published at least one notice. Hosts should surface these without implying anything is wrong with the model.
+     */
+    infoMessages?: ModelMessage[];
+    /**
+     * Warnings the service published for this model, such as a deprecated client version. Present only when the service published at least one warning. The model remains usable; hosts should surface these as advisory rather than blocking.
+     */
+    warningMessages?: ModelMessage[];
 }
 /**
  * Model capabilities and limits
@@ -11537,6 +11700,36 @@ export interface ModelBillingPromo {
      */
     message?: string;
 }
+/**
+ * Service-published warning text that hosts should display when presenting a model.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelWarningText".
+ */
+/** @experimental */
+export interface ModelWarningText {
+    /**
+     * Data-retention warning for the model. The text may contain Markdown links and should be rendered as Markdown when supported.
+     */
+    dataRetention?: string;
+}
+/**
+ * A service-published message about a model, carrying a stable machine-readable code alongside human-readable text.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "ModelMessage".
+ */
+/** @experimental */
+export interface ModelMessage {
+    /**
+     * Stable machine-readable identifier for the message, such as `client_version_deprecated`. Hosts can key custom presentation off this; unrecognized codes should fall back to displaying `message`.
+     */
+    code: string;
+    /**
+     * Human-readable message text intended for display to the user.
+     */
+    message: string;
+}
 /**
  * Managed, repository, and CLI model overrides to overlay onto the session at startup.
  *
@@ -12751,6 +12944,7 @@ export interface PermissionDecisionContext {
     outcome: PermissionDecisionOutcome;
     source: PermissionDecisionSource;
     surface: PermissionDecisionSurface;
+    responseCapability?: PermissionResponseCapability;
 }
 /**
  * Pending permission request ID and the decision to apply (approve/reject and scope).
@@ -13045,7 +13239,7 @@ export interface PermissionLocationResolveResult {
 /** @experimental */
 export interface PermissionPathsAddParams {
     /**
-     * Directory to add to the allow-list. The runtime resolves and validates the path before adding.
+     * Directory to add to the allow-list. The runtime resolves and validates the path before adding, then loads conventional `.github/skills/` and `.github/agents/` definitions under it when their subsystem gates are enabled. Adding the directory is therefore also a trust decision for configuration stored there.
      */
     path: string;
 }
@@ -13088,7 +13282,7 @@ export interface PermissionPathsConfig {
      */
     unrestricted?: boolean;
     /**
-     * Additional directories to allow tool access to (in addition to the session's working directory). When `unrestricted` is true, these are still pre-populated on the UnrestrictedPathManager so they remain visible via getDirectories() (e.g. for @-mention completion).
+     * Additional directories to allow tool access to (in addition to the session's working directory). Conventional `.github/skills/` and `.github/agents/` definitions under them also join the session catalogs when their subsystem gates are enabled, so supplying a directory is a trust decision for configuration stored there. When `unrestricted` is true, these are still pre-populated on the UnrestrictedPathManager so they remain visible via getDirectories() (e.g. for @-mention completion).
      */
     additionalDirectories?: string[];
     /**
@@ -15013,6 +15207,10 @@ export interface QueuePendingItemsResult {
      * Display text for messages currently in the immediate steering queue (interjections sent during a running turn).
      */
     steeringMessages: string[];
+    /**
+     * How many leading entries of `steeringMessages` have already been folded into the running turn (and so have an emitted `user.message`), as opposed to still waiting for one. Absent for hosts that do not distinguish the two.
+     */
+    inFlightSteeringCount?: number;
 }
 /**
  * Parameters for removing a queued item by stable id.
@@ -15545,7 +15743,7 @@ export interface SandboxConfig {
     addCurrentWorkingDirectory?: boolean;
     auth?: SandboxConfigAuth;
     /**
-     * Whether to auto-grant read access to the tool directories discovered on PATH and in toolchain environment variables (GOROOT, CARGO_HOME, JAVA_HOME, VIRTUAL_ENV, and similar), and to common developer-tool caches, registries, and toolchains in their default home locations (cargo, go, npm, Maven, and more), plus read-write access to (and, on Unix, up-front creation of) the scratch caches builds write on every run (go-build, ccache, sccache, Gradle caches, Cargo lock/tracker files), so builds work without extra configuration; a relocated CARGO_HOME additionally gets its Cargo lock files granted read-write. Set to false to disable every grant listed above: user-installed toolchains (rustup, nvm, pyenv, conda, pipx) then need explicit userPolicy.filesystem entries — readonlyPaths to read them, plus readwriteFiles for a relocated CARGO_HOME's .package-cache and .global-cache, which Cargo locks on every build. Only these developer-tool grants are affected: the working directory (see addCurrentWorkingDirectory), temporary storage, session log paths, and system locations follow their own rules and stay granted, so commands still run. Default: true (enabled by default; set to false to opt out).
+     * Whether to auto-grant read access to tool directories discovered on PATH and in toolchain environment variables (GOROOT, JAVA_HOME, VIRTUAL_ENV, and similar), and to common developer-tool caches, config, and toolchains. Writable grants cover scratch caches, the Unix GitHub CLI cache, and Cargo's registry, git store, and lock/tracker files. A relocated CARGO_HOME gets the same narrow split: registry and git are read-write; bin is read-only; the home root, config.toml, and credentials.toml stay ungranted. Set to false to disable every grant listed above; user-installed toolchains and caches then need explicit userPolicy.filesystem readonlyPaths and readwritePaths entries. The working directory (see addCurrentWorkingDirectory), temporary storage, session log paths, and system locations follow their own rules and stay granted. Default: true (enabled by default; set to false to opt out).
      */
     allowDevToolAccess?: boolean;
 }
@@ -16849,6 +17047,10 @@ export interface SessionInstalledPlugin {
      * Per-plugin source fingerprint (a SHA-256 hash of the plugin's catalog source spec plus its resolved source subtree — NOT a Git commit SHA) captured at marketplace install/update time. Auto-update compares it against the freshly recomputed fingerprint to detect a content change that does not bump the version. Absent for pre-existing installs and for direct (non-marketplace) installs.
      */
     source_sha?: string;
+    /**
+     * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — those synthesized at session start for a directory/local marketplace, whose cache_path points at the real plugin directory on disk rather than a copy under the installed-plugins cache. Its presence is what marks a record as live, and no record carrying it is ever written to the persisted installedPlugins key.
+     */
+    installed_from?: string;
 }
 /**
  * Source descriptor for a direct GitHub plugin install, with `owner/repo`, optional ref or full commit SHA, and optional subpath.
@@ -17052,7 +17254,10 @@ export interface SessionLoadDeferredRepoHooksResult {
  */
 /** @experimental */
 export interface SessionManagedPermissions {
-    disableBypassPermissionsMode?: DisableBypassPermissionsMode;
+    /**
+     * When set to `disable`, prevents bypass/allow-all permission modes. `allow-auto-only` blocks full allow-all but permits advisory auto-approval. Any other value is accepted rather than failing the session, but is enforced as `disable`: the key is only present to restrict something, so a mode this runtime cannot interpret fails closed to the most restrictive one it knows. Omit the key entirely to impose no restriction.
+     */
+    disableBypassPermissionsMode?: string;
     /**
      * Permission rules that block matching operations. Deny has highest precedence.
      */
@@ -17257,7 +17462,7 @@ export interface SessionOpenOptions {
      */
     workingDirectory?: string;
     /**
-     * Additional directories the agent may access beyond the working directory. Each entry is granted to the session's file-access allow-list and surfaced to the model (system prompt context and `@`-mention completion). Absolute paths are recommended; a relative path is resolved against the session's working directory. Nonexistent or unresolvable entries are skipped with a warning. This is applied on both session creation and resume, and is not persisted: a resumed session that omits this option does not retain previously supplied directories (re-supply them, exactly as the CLI re-passes `--add-dir`).
+     * Additional directories the agent may access beyond the working directory. Each entry is granted to the session's file-access allow-list and surfaced to the model (system prompt context and `@`-mention completion). Conventional `.github/skills/` and `.github/agents/` definitions under each directory also join the session's project catalogs when their existing subsystem gates are enabled: added-root skills require both `enableConfigDiscovery` and effective `enableSkills`; added-root agents require `enableConfigDiscovery`. Supplying a directory therefore activates configuration from it and should be treated as a trust decision. Absolute paths are recommended; a relative path is resolved against the session's working directory. Nonexistent or unresolvable entries are skipped with a warning. This is applied during session creation and cold resume and is not persisted, so a cold resume must re-supply the directories.
      */
     additionalDirectories?: string[];
     workingDirectoryContext?: SessionContext;
@@ -17329,6 +17534,10 @@ export interface SessionOpenOptions {
      * Additional directories to search for skills.
      */
     skillDirectories?: string[];
+    /**
+     * Built-in skill names to include in this session. When specified, only these runtime-bundled skills are available. Skills from other sources with the same name remain available.
+     */
+    includedBuiltinSkills?: string[];
     /**
      * Skill IDs disabled for this session.
      */
@@ -17870,7 +18079,29 @@ export interface SessionsEnrichMetadataRequest {
  */
 /** @experimental */
 export interface SessionSetCredentialsParams {
-    credentials?: AuthInfo;
+    credentials?: SettableAuthInfo;
+}
+/**
+ * Token authentication accepted by session.gitHubAuth.setCredentials.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SettableTokenAuthInfo".
+ */
+/** @experimental */
+export interface SettableTokenAuthInfo {
+    /**
+     * SDK-side token authentication; the host configured the token directly via the SDK.
+     */
+    type: "token";
+    /**
+     * Authentication host.
+     */
+    host: string;
+    /**
+     * The token value itself. Treat as a secret.
+     */
+    token: string;
+    copilotUser?: CopilotUserResponse;
 }
 /**
  * Indicates whether the credential update succeeded.
@@ -18693,6 +18924,10 @@ export interface SessionUpdateOptionsParams {
      * Additional directories to search for skills.
      */
     skillDirectories?: string[];
+    /**
+     * Built-in skill names to include in this session. When specified, only these runtime-bundled skills are available. Skills from other sources with the same name remain available. Set to null to remove the allowlist restriction.
+     */
+    includedBuiltinSkills?: string[] | null;
     /**
      * Skill IDs that should be excluded from this session.
      */
@@ -20073,10 +20308,6 @@ export interface ToolsExecuteRequest {
  */
 /** @experimental */
 export interface ToolsGetBuiltinDescriptorsRequest {
-    /**
-     * Whether line numbers should be omitted from the view tool descriptor.
-     */
-    noViewLineNumbers?: boolean;
     /**
      * Whether descriptors should favor fewer user-intervention prompts.
      */
@@ -20090,10 +20321,6 @@ export interface ToolsGetBuiltinDescriptorsRequest {
      */
     skillEmbeddingEnabled?: boolean;
     shellConfig?: ToolsShellDescriptorConfig;
-    /**
-     * Whether shell commands may only run asynchronously.
-     */
-    shellAsyncOnlyEnabled?: boolean;
     /**
      * Whether the configured shell supports PowerShell 7 syntax.
      */
@@ -23646,7 +23873,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
              */
             list: () => Promise<PermissionPathsList>;
             /**
-             * Adds a directory to the session's allow-list.
+             * Adds a directory to the session's allow-list and activates conventional skill and agent definitions under it.
              *
              * @param params Directory path to add to the session's allowed directories.
              *
@@ -24332,11 +24559,24 @@ export interface GitHubTelemetryHandler {
      */
     event(params: GitHubTelemetryNotification): Promise<void>;
 }
+/** Handler for `gitHubToken` client global API methods. */
+/** @experimental */
+export interface GitHubTokenHandler {
+    /**
+     * Asks the SDK client to mint a GitHub access token for a session whose configuration supplied a GitHub token provider. The runtime acquires the initial token during bootstrap and refreshes it during expiry preflight when one hour or less remains.
+     *
+     * @param params Asks the SDK client to acquire a GitHub access token from an opaque callback registration.
+     *
+     * @returns SDK host response to a GitHub credential request.
+     */
+    getToken(params: GitHubTokenAcquireRequest): Promise<GitHubTokenAcquireResult>;
+}
 /** All client global API handler groups. */
 export interface ClientGlobalApiHandlers {
     extensionLaunchProvider?: ExtensionLaunchProviderHandler;
     llmInference?: LlmInferenceHandler;
     gitHubTelemetry?: GitHubTelemetryHandler;
+    gitHubToken?: GitHubTokenHandler;
 }
 /**
  * Register client global API handlers on a JSON-RPC connection.

package/dist/generated/rpc.js

@@ -1963,7 +1963,7 @@ function createSessionRpc(connection, sessionId) {
          */
         list: async () => connection.sendRequest("session.permissions.paths.list", { sessionId }),
         /**
-         * Adds a directory to the session's allow-list.
+         * Adds a directory to the session's allow-list and activates conventional skill and agent definitions under it.
          *
          * @param params Directory path to add to the session's allowed directories.
          *
@@ -2512,6 +2512,25 @@ function createInternalSessionRpc(connection, sessionId) {
       }
     },
     /** @experimental */
+    factory: {
+      /**
+       * Internal tool-originated factory invocation.
+       *
+       * @param params Internal parameters for invoking a registered factory from a tool.
+       *
+       * @returns Complete current or terminal factory run envelope.
+       */
+      runFromTool: async (params) => connection.sendRequest("session.factory.runFromTool", { sessionId, ...params }),
+      /**
+       * Internal tool-originated factory resume.
+       *
+       * @param params Internal parameters for resuming a factory run from a tool.
+       *
+       * @returns Resolved persisted factory identity and resumed run envelope.
+       */
+      resumeFromTool: async (params) => connection.sendRequest("session.factory.resumeFromTool", { sessionId, ...params })
+    },
+    /** @experimental */
     model: {
       /**
        * Resolves and applies organization-managed and repository model overlays.
@@ -2809,6 +2828,11 @@ function registerClientGlobalApiHandlers(connection, handlers) {
     if (!handler) return;
     await handler.event(params);
   });
+  connection.onRequest("gitHubToken.getToken", async (params) => {
+    const handler = handlers.gitHubToken;
+    if (!handler) throw new Error("No gitHubToken client-global handler registered");
+    return handler.getToken(params);
+  });
 }
 export {
   createInternalServerRpc,