@github/copilot-sdk 1.0.13-preview.1 → 1.0.13-preview.3

package/dist/client.js

@@ -271,6 +271,7 @@ class CopilotClient {
   builtinPluginDirectories = [];
   onGitHubTelemetry;
   clientGlobalHandlers = {};
+  githubTokenProviders = /* @__PURE__ */ new Map();
   /**
    * Typed server-scoped RPC methods.
    * @throws Error if the client is not connected
@@ -528,8 +529,53 @@ class CopilotClient {
         }
       };
     }
+    handlers.gitHubToken = {
+      getToken: (params) => this.acquireGitHubToken(params)
+    };
     this.clientGlobalHandlers = handlers;
   }
+  async acquireGitHubToken(params) {
+    const registration = this.githubTokenProviders.get(params.registrationId);
+    if (!registration) {
+      throw new Error(
+        `No GitHub token provider registered for registration ID "${params.registrationId}"`
+      );
+    }
+    return await registration.provider({
+      host: params.host,
+      sessionId: params.sessionId ?? registration.sessionId,
+      reason: params.reason
+    });
+  }
+  registerGitHubTokenProvider(provider, sessionId) {
+    if (!provider) {
+      return void 0;
+    }
+    const registrationId = randomUUID();
+    this.githubTokenProviders.set(registrationId, { provider, sessionId, committed: false });
+    return registrationId;
+  }
+  assignGitHubTokenProvider(registrationId, sessionId) {
+    if (!registrationId) {
+      return;
+    }
+    const registration = this.githubTokenProviders.get(registrationId);
+    if (registration) {
+      registration.sessionId = sessionId;
+    }
+  }
+  commitGitHubTokenProvider(sessionId, registrationId) {
+    for (const [candidateId, registration2] of this.githubTokenProviders) {
+      if (registration2.sessionId === sessionId && registration2.committed) {
+        this.githubTokenProviders.delete(candidateId);
+      }
+    }
+    const registration = registrationId ? this.githubTokenProviders.get(registrationId) : void 0;
+    if (registration) {
+      registration.sessionId = sessionId;
+      registration.committed = true;
+    }
+  }
   /**
    * Starts the CLI server and establishes a connection.
    *
@@ -646,6 +692,7 @@ class CopilotClient {
       session._markDisconnected();
     }
     this.sessions.clear();
+    this.githubTokenProviders.clear();
     if (this.connection && (this.cliProcess || this.ffiHost) && !this.isExternalServer) {
       const runtimeShutdownStart = Date.now();
       const shutdownPromise = this.rpc.runtime.shutdown();
@@ -800,6 +847,7 @@ class CopilotClient {
       session._markDisconnected();
     }
     this.sessions.clear();
+    this.githubTokenProviders.clear();
     if (this.messageWriter) {
       this.messageWriter.suppressWriteErrors = true;
     }
@@ -1003,6 +1051,9 @@ class CopilotClient {
     }
   }
   async createSession(config) {
+    if (config.gitHubToken !== void 0 && config.gitHubTokenProvider !== void 0) {
+      throw new Error("gitHubToken and gitHubTokenProvider are mutually exclusive");
+    }
     if (!this.connection) {
       await this.start();
     }
@@ -1013,6 +1064,11 @@ class CopilotClient {
     const callerSessionId = config.sessionId;
     const useServerGeneratedId = config.cloud != null && callerSessionId == null;
     const localSessionId = useServerGeneratedId ? void 0 : callerSessionId ?? randomUUID();
+    const toolFilterOptions = this.resolveToolFilterOptions(config);
+    const gitHubTokenProviderRegistrationId = this.registerGitHubTokenProvider(
+      config.gitHubTokenProvider,
+      localSessionId
+    );
     const {
       wireProvider: bearerWireProvider,
       wireProviders: bearerWireProviders,
@@ -1029,7 +1085,10 @@ class CopilotClient {
         this.onGetTraceContext,
         {
           mcpAuthHandler: config.onMcpAuthRequest,
-          managedSettingsEnabled: config.enableManagedSettings === true || config.managedSettings !== void 0
+          managedSettingsEnabled: config.enableManagedSettings === true || config.managedSettings !== void 0,
+          onDisconnected: gitHubTokenProviderRegistrationId === void 0 ? void 0 : () => this.githubTokenProviders.delete(
+            gitHubTokenProviderRegistrationId
+          )
         }
       );
       s.registerTools(config.tools);
@@ -1067,10 +1126,16 @@ class CopilotClient {
     let session;
     let registeredId;
     if (localSessionId !== void 0) {
-      session = initializeSession(localSessionId);
-      registeredId = localSessionId;
+      try {
+        session = initializeSession(localSessionId);
+        registeredId = localSessionId;
+      } catch (error) {
+        if (gitHubTokenProviderRegistrationId !== void 0) {
+          this.githubTokenProviders.delete(gitHubTokenProviderRegistrationId);
+        }
+        throw error;
+      }
     }
-    const toolFilterOptions = this.resolveToolFilterOptions(config);
     try {
       const response = await this.connection.sendRequest("session.create", {
         ...await getTraceContext(this.onGetTraceContext),
@@ -1120,6 +1185,7 @@ class CopilotClient {
         requestPermission: !!config.onPermissionRequest,
         requestUserInput: !!config.onUserInputRequest,
         requestElicitation: !!config.onElicitationRequest,
+        askUserVariant: config.askUserVariant,
         ...config.enableMcpApps ? { requestMcpApps: true } : {},
         ...config.githubMcpToolConfig != null ? { githubMcpToolConfig: config.githubMcpToolConfig } : {},
         requestExitPlanMode: !!config.onExitPlanModeRequest,
@@ -1155,6 +1221,7 @@ class CopilotClient {
         infiniteSessions: config.infiniteSessions,
         memory: config.memory,
         gitHubToken: config.gitHubToken,
+        gitHubTokenProviderRegistrationId,
         remoteSession: config.remoteSession,
         cloud: config.cloud,
         expAssignments: config.expAssignments,
@@ -1178,6 +1245,7 @@ class CopilotClient {
         session = initializeSession(returnedSessionId);
         registeredId = returnedSessionId;
       }
+      this.assignGitHubTokenProvider(gitHubTokenProviderRegistrationId, returnedSessionId);
       if (config.onMcpAuthRequest) {
         await this.connection.sendRequest("session.eventLog.registerInterest", {
           sessionId: returnedSessionId,
@@ -1187,10 +1255,14 @@ class CopilotClient {
       session["_workspacePath"] = workspacePath;
       session.setCapabilities(capabilities);
       await this.updateSessionOptionsForMode(session, config);
+      this.commitGitHubTokenProvider(returnedSessionId, gitHubTokenProviderRegistrationId);
     } catch (e) {
       if (registeredId !== void 0) {
         this.sessions.delete(registeredId);
       }
+      if (gitHubTokenProviderRegistrationId !== void 0) {
+        this.githubTokenProviders.delete(gitHubTokenProviderRegistrationId);
+      }
       throw e;
     }
     return session;
@@ -1227,6 +1299,9 @@ class CopilotClient {
     return this.resumeSessionInternal(sessionId, config, factories, extensionOptions);
   }
   async resumeSessionInternal(sessionId, config, factories, extensionOptions) {
+    if (config.gitHubToken !== void 0 && config.gitHubTokenProvider !== void 0) {
+      throw new Error("gitHubToken and gitHubTokenProvider are mutually exclusive");
+    }
     if (!this.connection) {
       await this.start();
     }
@@ -1284,6 +1359,15 @@ class CopilotClient {
     this.sessions.set(sessionId, session);
     this.setupSessionFs(session, config);
     const toolFilterOptions = this.resolveToolFilterOptions(config);
+    const gitHubTokenProviderRegistrationId = this.registerGitHubTokenProvider(
+      config.gitHubTokenProvider,
+      sessionId
+    );
+    if (gitHubTokenProviderRegistrationId !== void 0) {
+      session._setOnDisconnected(
+        () => this.githubTokenProviders.delete(gitHubTokenProviderRegistrationId)
+      );
+    }
     try {
       const response = await this.connection.sendRequest("session.resume", {
         ...await getTraceContext(this.onGetTraceContext),
@@ -1334,6 +1418,7 @@ class CopilotClient {
         requestPermission: config.onPermissionRequest !== defaultJoinSessionPermissionHandler,
         requestUserInput: !!config.onUserInputRequest,
         requestElicitation: !!config.onElicitationRequest,
+        askUserVariant: config.askUserVariant,
         ...config.enableMcpApps ? { requestMcpApps: true } : {},
         ...config.githubMcpToolConfig != null ? { githubMcpToolConfig: config.githubMcpToolConfig } : {},
         requestExitPlanMode: !!config.onExitPlanModeRequest,
@@ -1371,6 +1456,7 @@ class CopilotClient {
         disableResume: config.suppressResumeEvent,
         continuePendingWork: config.continuePendingWork,
         gitHubToken: config.gitHubToken,
+        gitHubTokenProviderRegistrationId,
         remoteSession: config.remoteSession,
         openCanvases: config.openCanvases,
         expAssignments: config.expAssignments,
@@ -1400,8 +1486,12 @@ class CopilotClient {
         });
       }
       await this.updateSessionOptionsForMode(session, config);
+      this.commitGitHubTokenProvider(sessionId, gitHubTokenProviderRegistrationId);
     } catch (e) {
       this.sessions.delete(sessionId);
+      if (gitHubTokenProviderRegistrationId !== void 0) {
+        this.githubTokenProviders.delete(gitHubTokenProviderRegistrationId);
+      }
       throw e;
     }
     return session;
@@ -1590,7 +1680,9 @@ class CopilotClient {
     if (!success) {
       throw new Error(`Failed to delete session ${sessionId}: ${error || "Unknown error"}`);
     }
+    const session = this.sessions.get(sessionId);
     this.sessions.delete(sessionId);
+    session?._runOnDisconnected();
   }
   /**
    * List all available sessions.
@@ -2138,6 +2230,7 @@ stderr: ${stderrOutput}`
     );
     this.connection.onClose(() => {
       this.state = "disconnected";
+      this.githubTokenProviders.clear();
     });
     this.connection.onError((_error) => {
       this.state = "disconnected";

package/dist/extension.d.ts

@@ -42,7 +42,7 @@ export type JoinSessionConfig = Omit<ResumeSessionConfig, "onPermissionRequest"
     factories?: FactoryHandle[];
 };
 export type { ExtensionInfo, FactoryLimits, FactoryMeta } from "./types.js";
-export { defineFactory, FactoryResumeError, isFactoryRunTerminal, type RunOptions, type ResumeOptions, type FactoryResumeErrorCode, type SessionFactoryApi, type FactoryAgentOptions, type FactoryContext, type FactoryDefinition, type FactoryHandle, type FactoryJsonSchema, type JsonValue, type FactoryPipelineStage, type FactoryStepOptions, type FactoryRunResult, type FactoryRunStatus, type FactoryRunSummary, type FactoryRunDetail, type FactoryProgressPage, type FactoryProgressLine, type FactoryPhaseObservation, type FactoryPhaseStatus, type FactoryAgentSummary, } from "./factory.js";
+export { defineFactory, FactoryResumeError, isFactoryRunTerminal, type RunOptions, type ResumeOptions, type FactoryResumeErrorCode, type SessionFactoryApi, type FactoryAgentOptions, type FactoryContext, type FactoryDefinition, type FactoryHandle, type FactoryJsonSchema, type JsonValue, type FactoryPipelineStage, type FactoryStepOptions, type FactoryRunResult, type FactoryRunStatus, type FactoryRunSummary, type FactoryListRunsOptions, type FactoryRunsPage, type FactoryRunDetail, type FactoryProgressPage, type FactoryProgressLine, type FactoryPhaseObservation, type FactoryPhaseStatus, type FactoryAgentSummary, } from "./factory.js";
 /**
  * Joins the current foreground session.
  *

package/dist/factory.d.ts

@@ -1,9 +1,23 @@
-import type { FactoryGetRunProgressRequest, FactoryProgressPage, FactoryRunDetail, FactoryRunResult, FactoryRunStatus, FactoryRunSummary } from "./generated/rpc.js";
+import type { FactoryGetRunProgressRequest, FactoryListRunsRequest, FactoryListRunsResult, FactoryProgressPage, FactoryRunDetail, FactoryRunResult, FactoryRunStatus, FactoryRunSummary } from "./generated/rpc.js";
 import type { ContextTier } from "./generated/session-events.js";
 import type { CopilotSession } from "./session.js";
 import type { FactoryLimits, FactoryMeta } from "./types.js";
 export type { FactoryRunResult };
 export type { FactoryAgentSummary, FactoryPhaseStatus, FactoryPhaseObservation, FactoryProgressLine, FactoryProgressPage, FactoryRunDetail, FactoryRunStatus, FactoryRunSummary, } from "./generated/rpc.js";
+/**
+ * Options for paging durable factory runs.
+ *
+ * @experimental Part of the experimental Agent Factories surface and may
+ * change or be removed in future SDK or CLI releases.
+ */
+export type FactoryListRunsOptions = FactoryListRunsRequest;
+/**
+ * A page of durable factory runs and its paging metadata.
+ *
+ * @experimental Part of the experimental Agent Factories surface and may
+ * change or be removed in future SDK or CLI releases.
+ */
+export type FactoryRunsPage = FactoryListRunsResult;
 /**
  * Whether a factory run status is terminal.
  *
@@ -165,6 +179,10 @@ export interface RunOptions<TArgs extends JsonValue = JsonValue> {
     args?: TArgs;
     /** Optional per-invocation resource ceiling overrides. */
     limits?: FactoryLimits;
+    /** Whether to notify the originating session when the factory completes. */
+    notifyOnComplete?: boolean;
+    /** Whether to emit factory phase names to the session transcript. */
+    logPhaseNames?: boolean;
     /**
      * Prior run whose persisted identity, arguments, journal, and accounting should be resumed.
      *
@@ -181,6 +199,10 @@ export interface RunOptions<TArgs extends JsonValue = JsonValue> {
 export interface ResumeOptions {
     /** Optional per-invocation resource ceiling overrides. */
     limits?: FactoryLimits;
+    /** Whether to notify the originating session when the factory completes. */
+    notifyOnComplete?: boolean;
+    /** Whether to emit factory phase names to the session transcript. */
+    logPhaseNames?: boolean;
 }
 /**
  * Machine-readable pre-execution factory resume failure.
@@ -239,8 +261,20 @@ export interface SessionFactoryApi {
     }): Promise<FactoryRunResult>;
     /**
      * List the newest default page of this session's durable factory runs.
+     *
+     * This backwards-compatible overload returns only the runs array. Pass
+     * paging options to receive the full page, including its cursors and
+     * truncation metadata.
      */
     listRuns(): Promise<FactoryRunSummary[]>;
+    /**
+     * Page this session's durable factory runs.
+     *
+     * `afterSeq` and `beforeSeq` are exclusive cursors. The result includes
+     * `oldestSeq`, `newestSeq`, `hasMoreNewer`, and `omittedOlder` so callers
+     * can continue paging without using the raw RPC client.
+     */
+    listRuns(options: FactoryListRunsOptions): Promise<FactoryRunsPage>;
     /** Read durable phases, direct agents, and the latest progress tail for a run. */
     getRunDetail(runId: string): Promise<FactoryRunDetail>;
     /** Page durable progress forward, backward, or from the latest tail. */

package/dist/generated/rpc.d.ts

@@ -3,7 +3,7 @@
  * Generated from: api.schema.json
  */
 import type { MessageConnection } from "vscode-jsonrpc/node.js";
-import type { AbortReason, Attachment, ContextTier, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, McpOauthHttpResponse, McpOauthWWWAuthenticateParams, McpServerSource, McpServerStatus, ModelChangeSource, PermissionMode, PermissionPromptRequest, PermissionRule, ReasoningSummary, SessionEvent, SessionLimitsConfig, SessionMode, ShutdownType, SkillSource, TaskCompleteData, TaskCompletionOutcome, UserToolSessionApproval, Verbosity } from "./session-events.js";
+import type { AbortReason, Attachment, AutoTier, ContextTier, EmbeddedBlobResourceContents, EmbeddedTextResourceContents, McpOauthHttpResponse, McpOauthWWWAuthenticateParams, McpServerSource, McpServerStatus, ModelChangeSource, PermissionMode, PermissionPromptRequest, PermissionRule, ReasoningSummary, SessionEvent, SessionLimitsConfig, SessionMode, ShutdownType, SkillSource, TaskCompleteData, TaskCompletionOutcome, UserToolSessionApproval, Verbosity } from "./session-events.js";
 /** A value that can be represented losslessly on the SDK JSON wire. */
 export type JsonValue = null | boolean | number | string | JsonValue[] | {
     [key: string]: JsonValue;
@@ -2373,8 +2373,24 @@ export type PermissionDecisionSurface =
  | "prompt_mode"
 /** The Copilot App client. */
  | "copilot_app"
+/** An Agent Client Protocol host. */
+ | "acp"
 /** A generic Copilot SDK client. */
  | "sdk";
+/**
+ * Response capability available to the client when it settled a permission request.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "PermissionResponseCapability".
+ */
+/** @experimental */
+export type PermissionResponseCapability = 
+/** The client could ask a user for this decision. */
+"interactive"
+/** The client could return an automated response but could not ask a user. */
+ | "headless"
+/** The client had no response path available. */
+ | "none";
 /**
  * Tool approval to persist and apply
  *
@@ -5164,6 +5180,7 @@ export interface CanvasProviderUnregisterRequest {
  */
 /** @experimental */
 export interface CapiSessionOptions {
+    autoTier?: AutoTier;
     /**
      * Whether to use WebSocket transport for the CAPI Responses API. Enabled by default when the model advertises `ws:/responses` support; set to `false` to force the HTTP Responses transport in environments where WebSockets are blocked (e.g. behind a proxy). Setting this to `false` is equivalent to the `COPILOT_CLI_DISABLE_WEBSOCKET_RESPONSES` environment variable.
      */
@@ -6447,6 +6464,10 @@ export interface EnqueueCommandParams {
      * Slash-prefixed command string to enqueue, e.g. '/compact' or '/model gpt-4'. Queued FIFO with any in-flight items; if the session is idle, processing kicks off immediately.
      */
     command: string;
+    /**
+     * Optional user-facing text for the queue row. The command string is shown when omitted.
+     */
+    displayText?: string | null;
 }
 /**
  * Indicates whether the command was accepted into the local execution queue.
@@ -6856,6 +6877,10 @@ export interface ExternalToolTextResultForLlmContentShellExit {
      * Whether outputPreview is known to be incomplete or truncated
      */
     outputTruncated?: boolean;
+    /**
+     * Path reported in the shell session's filesystem namespace when shell output exceeded the configured large-output threshold.
+     */
+    outputFilePath?: string;
 }
 /**
  * Image content block with base64-encoded data
@@ -7676,6 +7701,14 @@ export interface FactoryResumeRequest {
      */
     runId: string;
     limits?: FactoryRunLimits;
+    /**
+     * Whether to notify the originating session when the factory completes.
+     */
+    notifyOnComplete?: boolean;
+    /**
+     * Whether to emit factory phase names to the session transcript.
+     */
+    logPhaseNames?: boolean;
 }
 /**
  * Wire-only per-invocation factory resource ceiling overrides.
@@ -7859,6 +7892,14 @@ export interface FactoryRunRequest {
 /** @experimental */
 export interface RunOptions {
     limits?: FactoryRunLimits;
+    /**
+     * Whether to notify the originating session when the factory completes.
+     */
+    notifyOnComplete?: boolean;
+    /**
+     * Whether to emit factory phase names to the session transcript.
+     */
+    logPhaseNames?: boolean;
     /**
      * Run identifier whose journal and progress should seed this resumed run.
      */
@@ -7977,6 +8018,14 @@ export interface GitHubTelemetryClientInfo {
      * Stable machine identifier for the device.
      */
     dev_device_id?: string;
+    /**
+     * Distinct CPU model names for the host, comma-separated.
+     */
+    cpu_model?: string;
+    /**
+     * Number of logical CPU cores on the host.
+     */
+    cpu_count?: number;
 }
 /**
  * A single telemetry event in the runtime's native GitHub-shaped telemetry format, forwarded verbatim to opted-in hosts. The `restricted` flag on the enclosing GitHubTelemetryNotification distinguishes standard from restricted events; the payload shape is identical for both.
@@ -12900,6 +12949,7 @@ export interface PermissionDecisionContext {
     outcome: PermissionDecisionOutcome;
     source: PermissionDecisionSource;
     surface: PermissionDecisionSurface;
+    responseCapability?: PermissionResponseCapability;
 }
 /**
  * Pending permission request ID and the decision to apply (approve/reject and scope).
@@ -15698,7 +15748,7 @@ export interface SandboxConfig {
     addCurrentWorkingDirectory?: boolean;
     auth?: SandboxConfigAuth;
     /**
-     * Whether to auto-grant read access to the tool directories discovered on PATH and in toolchain environment variables (GOROOT, CARGO_HOME, JAVA_HOME, VIRTUAL_ENV, and similar), and to common developer-tool caches, registries, and toolchains in their default home locations (cargo, go, npm, Maven, and more), plus read-write access to (and up-front creation of) the scratch caches builds write on every run (go-build, ccache, sccache, Gradle caches, Cargo lock/tracker files), so builds work without extra configuration; a relocated CARGO_HOME additionally gets its Cargo lock files granted read-write. Set to false to disable every grant listed above: user-installed toolchains (rustup, nvm, pyenv, conda, pipx) then need explicit userPolicy.filesystem entries — readonlyPaths to read them, plus readwriteFiles for a relocated CARGO_HOME's .package-cache and .global-cache, which Cargo locks on every build. Only these developer-tool grants are affected: the working directory (see addCurrentWorkingDirectory), temporary storage, session log paths, and system locations follow their own rules and stay granted, so commands still run. Default: true (enabled by default; set to false to opt out).
+     * Whether to auto-grant read access to tool directories discovered on PATH and in toolchain environment variables (GOROOT, JAVA_HOME, VIRTUAL_ENV, and similar), and to common developer-tool caches, config, and toolchains. Writable grants cover scratch caches, the Unix GitHub CLI cache, and Cargo's registry, git store, and lock/tracker files. A relocated CARGO_HOME gets the same narrow split: registry and git are read-write; bin is read-only; the home root, config.toml, and credentials.toml stay ungranted. Set to false to disable every grant listed above; user-installed toolchains and caches then need explicit userPolicy.filesystem readonlyPaths and readwritePaths entries. The working directory (see addCurrentWorkingDirectory), temporary storage, session log paths, and system locations follow their own rules and stay granted. Default: true (enabled by default; set to false to opt out).
      */
     allowDevToolAccess?: boolean;
 }
@@ -15832,6 +15882,27 @@ export interface SandboxConfigAuth {
      */
     gh?: boolean;
 }
+/**
+ * Managed sandbox enforcement state for a session.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "SandboxEnforcementStatus".
+ */
+/** @experimental */
+export interface SandboxEnforcementStatus {
+    /**
+     * Whether the effective managed policy requires an available sandbox backend.
+     */
+    required: boolean;
+    /**
+     * Whether an enforcement failure has permanently blocked the session.
+     */
+    blocked: boolean;
+    /**
+     * The first sandbox enforcement failure that blocked the session.
+     */
+    reason?: string;
+}
 /**
  * Register an absolute-time scheduled prompt.
  *
@@ -20263,10 +20334,6 @@ export interface ToolsExecuteRequest {
  */
 /** @experimental */
 export interface ToolsGetBuiltinDescriptorsRequest {
-    /**
-     * Whether line numbers should be omitted from the view tool descriptor.
-     */
-    noViewLineNumbers?: boolean;
     /**
      * Whether descriptors should favor fewer user-intervention prompts.
      */
@@ -20280,10 +20347,6 @@ export interface ToolsGetBuiltinDescriptorsRequest {
      */
     skillEmbeddingEnabled?: boolean;
     shellConfig?: ToolsShellDescriptorConfig;
-    /**
-     * Whether shell commands may only run asynchronously.
-     */
-    shellAsyncOnlyEnabled?: boolean;
     /**
      * Whether the configured shell supports PowerShell 7 syntax.
      */
@@ -22123,7 +22186,7 @@ export declare function createServerRpc(connection: MessageConnection): {
         disable: (params: DiscoveredExtensionsDisableRequest) => Promise<void>;
     };
     /**
-     * Registers the calling SDK client as the per-entrypoint extension launch provider. Call before creating any sessions. When omitted, the runtime temporarily falls back to its built-in Node launcher for backward compatibility.
+     * Registers the calling SDK client as the per-entrypoint extension launch provider. Call before creating any sessions. When omitted, the runtime uses its built-in extension launcher.
      *
      * @experimental
      */
@@ -22618,6 +22681,15 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
      * @experimental
      */
     sendMessages: (params: SendMessagesRequest) => Promise<SendMessagesResult>;
+    /** @experimental */
+    sandbox: {
+        /**
+         * Returns whether managed policy requires sandbox enforcement and whether an enforcement failure has permanently blocked the session.
+         *
+         * @returns Managed sandbox enforcement state for a session.
+         */
+        getEnforcementStatus: () => Promise<SandboxEnforcementStatus>;
+    };
     /**
      * Aborts the current agent turn.
      *

package/dist/generated/rpc.js

@@ -172,7 +172,7 @@ function createServerRpc(connection) {
       disable: async (params) => connection.sendRequest("extensions.disable", params)
     },
     /**
-     * Registers the calling SDK client as the per-entrypoint extension launch provider. Call before creating any sessions. When omitted, the runtime temporarily falls back to its built-in Node launcher for backward compatibility.
+     * Registers the calling SDK client as the per-entrypoint extension launch provider. Call before creating any sessions. When omitted, the runtime uses its built-in extension launcher.
      *
      * @experimental
      */
@@ -745,6 +745,15 @@ function createSessionRpc(connection, sessionId) {
      * @experimental
      */
     sendMessages: async (params) => connection.sendRequest("session.sendMessages", { sessionId, ...params }),
+    /** @experimental */
+    sandbox: {
+      /**
+       * Returns whether managed policy requires sandbox enforcement and whether an enforcement failure has permanently blocked the session.
+       *
+       * @returns Managed sandbox enforcement state for a session.
+       */
+      getEnforcementStatus: async () => connection.sendRequest("session.sandbox.getEnforcementStatus", { sessionId })
+    },
     /**
      * Aborts the current agent turn.
      *
@@ -2512,6 +2521,25 @@ function createInternalSessionRpc(connection, sessionId) {
       }
     },
     /** @experimental */
+    factory: {
+      /**
+       * Internal tool-originated factory invocation.
+       *
+       * @param params Internal parameters for invoking a registered factory from a tool.
+       *
+       * @returns Complete current or terminal factory run envelope.
+       */
+      runFromTool: async (params) => connection.sendRequest("session.factory.runFromTool", { sessionId, ...params }),
+      /**
+       * Internal tool-originated factory resume.
+       *
+       * @param params Internal parameters for resuming a factory run from a tool.
+       *
+       * @returns Resolved persisted factory identity and resumed run envelope.
+       */
+      resumeFromTool: async (params) => connection.sendRequest("session.factory.resumeFromTool", { sessionId, ...params })
+    },
+    /** @experimental */
     model: {
       /**
        * Resolves and applies organization-managed and repository model overlays.