@github/copilot-sdk 1.0.15-preview.3 → 1.0.15-preview.4

package/dist/cjs/generated/rpc.js

@@ -196,7 +196,74 @@ function createServerRpc(connection) {
        *
        * @returns Outcome of an mcp.planInstall call: either a normalised plan, or one typed refusal. Nothing is written in either case.
        */
-      planInstall: async (params) => connection.sendRequest("mcp.planInstall", params)
+      planInstall: async (params) => connection.sendRequest("mcp.planInstall", params),
+      /**
+       * Consumes a bound catalogue plan and retains one exact fully resolved personal remote MCP operation requiring no supplied values or configured secrets. Returns its runtime operation ID and original expiry before any confirmation, activation, writer initialisation or installation effect. Register the original connection, operation and selected-session binding before calling applyInstall. Missing lower owned admission is unavailable, never a raw-config fallback.
+       *
+       * @param params Side-effect-free preparation of one original bound remote MCP choice.
+       *
+       * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+       */
+      prepareInstall: async (params) => connection.sendRequest("mcp.prepareInstall", params),
+      /**
+       * Consumes a retained prepared MCP operation once, revalidates its original authority, requests explicit human consent through installations.confirm on the original connection, then revalidates source and applies the sealed transaction. An uncertain result requires original-operation inspection or recovery, never replay.
+       *
+       * @param params Applies exactly one previously prepared operation on its original connection.
+       *
+       * @returns An installation result together with the exact honoured contract, or a negotiation refusal.
+       */
+      applyInstall: async (params) => connection.sendRequest("mcp.applyInstall", params),
+      /**
+       * Prepares a read-only removal plan for an exact owned receipt under the selected existing session. Returns the original operation ID before confirmation; neither planning nor abandonment changes configuration or shared OAuth credentials.
+       *
+       * @param params Read-only preparation of one owned removal under fresh selected-session authority.
+       *
+       * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+       */
+      planUninstall: async (params) => connection.sendRequest("mcp.planUninstall", params),
+      /**
+       * Consumes the original owned-removal plan once and requests fresh exact human confirmation on its original connection. Drift is refused; unrelated manual configuration and shared OAuth credentials are preserved.
+       *
+       * @param params One-use application of the exact retained removal plan.
+       *
+       * @returns An installation result together with the exact honoured contract, or a negotiation refusal.
+       */
+      applyUninstall: async (params) => connection.sendRequest("mcp.applyUninstall", params),
+      /** @experimental */
+      installations: {
+        /**
+         * Reads receipt-owned MCP inventory for the selected account and host without activating servers or reconstructing missing ownership. Configuration ownership does not prove session-specific usability.
+         *
+         * @param params New-work inventory or recovery request under an explicitly selected existing session.
+         *
+         * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+         */
+        list: async (params) => connection.sendRequest("mcp.installations.list", params),
+        /**
+         * Reconciles already-confirmed durable MCP transactions, then inspects owned inventory. Does not replay apply or reconstruct deleted ownership metadata; unresolved or unsafe evidence remains an explicit refusal.
+         *
+         * @param params New-work inventory or recovery request under an explicitly selected existing session.
+         *
+         * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+         */
+        recover: async (params) => connection.sendRequest("mcp.installations.recover", params),
+        /**
+         * Inspects a known operation only on its original connection. Remains available after account or selected-session loss; does not acquire new authority or rebind an operation.
+         *
+         * @param params Existing-operation control. A new session selector is deliberately not accepted.
+         *
+         * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+         */
+        status: async (params) => connection.sendRequest("mcp.installations.status", params),
+        /**
+         * Requests cancellation of a known operation on its original connection, including before apply or confirmation. Already-started effects retain their transaction lease and report an honest terminal or recovery outcome.
+         *
+         * @param params Existing-operation control. A new session selector is deliberately not accepted.
+         *
+         * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+         */
+        cancel: async (params) => connection.sendRequest("mcp.installations.cancel", params)
+      }
     },
     /** @experimental */
     extensions: {
@@ -219,6 +286,115 @@ function createServerRpc(connection) {
        */
       disable: async (params) => connection.sendRequest("extensions.disable", params)
     },
+    /** @experimental */
+    skills: {
+      /**
+       * Plans installation of a verified Agent Finder Skill candidate without writing files. The returned review is safe to present to a user and installing always leaves the Skill disabled until separately enabled.
+       *
+       * @param params Side-effect-free planning of one verified Agent Finder Skill candidate.
+       *
+       * @returns Skill installation management result with the honoured contract, or a typed refusal.
+       */
+      planInstall: async (params) => connection.sendRequest("skills.planInstall", params),
+      /**
+       * Consumes one verified Skill installation plan, requests explicit human consent through installations.confirm on the original connection, then revalidates and installs the Skill disabled.
+       *
+       * @param params Applies exactly one retained verified Skill installation plan.
+       *
+       * @returns Skill installation result with the honoured contract, or a typed request/negotiation refusal.
+       */
+      applyInstall: async (params) => connection.sendRequest("skills.applyInstall", params),
+      /** @experimental */
+      installations: {
+        /**
+         * Lists owned verified Agent Finder Skill installations for the selected existing session. Listing is never gated by the Skill-install feature flag.
+         *
+         * @param params Inventory request under an explicitly selected existing session.
+         *
+         * @returns Skill installation management result with the honoured contract, or a typed refusal.
+         */
+        list: async (params) => connection.sendRequest("skills.installations.list", params),
+        /**
+         * Reconciles interrupted owned Skill installation work for the selected existing session, then inspects owned inventory. Recovery is never gated by the Skill-install feature flag.
+         *
+         * @param params Inventory request under an explicitly selected existing session.
+         *
+         * @returns Skill installation management result with the honoured contract, or a typed refusal.
+         */
+        recover: async (params) => connection.sendRequest("skills.installations.recover", params),
+        /**
+         * Inspects a known Skill installation operation on its original runtime connection. Status is never gated by the Skill-install feature flag.
+         *
+         * @param params Existing-operation control. A new session selector is deliberately not accepted.
+         *
+         * @returns Skill installation management result with the honoured contract, or a typed refusal.
+         */
+        status: async (params) => connection.sendRequest("skills.installations.status", params),
+        /**
+         * Requests cancellation of a known Skill installation operation before commit. Already-started durable work requires recovery instead of silent replay.
+         *
+         * @param params Existing-operation control. A new session selector is deliberately not accepted.
+         *
+         * @returns Skill installation management result with the honoured contract, or a typed refusal.
+         */
+        cancel: async (params) => connection.sendRequest("skills.installations.cancel", params),
+        /**
+         * Atomically persists enablement for one owned Agent Finder Skill and reconciles the selected bound session. Enablement is installation-scoped by receipt identity and is never gated by the Skill-install feature flag.
+         *
+         * @param params Persisted enablement update for one owned Skill installation.
+         *
+         * @returns Skill installation management result with the honoured contract, or a typed refusal.
+         */
+        setEnabled: async (params) => connection.sendRequest("skills.installations.setEnabled", params)
+      },
+      /**
+       * Prepares a read-only removal plan for an owned verified Agent Finder Skill installation. Uninstall planning is never gated by the Skill-install feature flag.
+       *
+       * @param params Read-only preparation of one owned Skill removal under fresh selected-session authority.
+       *
+       * @returns Skill installation management result with the honoured contract, or a typed refusal.
+       */
+      planUninstall: async (params) => connection.sendRequest("skills.planUninstall", params),
+      /**
+       * Consumes an owned Skill removal plan, requests explicit human consent through installations.confirm, refuses drift, and removes the exact owned files through quarantine.
+       *
+       * @param params One-use application of the exact retained Skill removal plan.
+       *
+       * @returns Skill installation result with the honoured contract, or a typed request/negotiation refusal.
+       */
+      applyUninstall: async (params) => connection.sendRequest("skills.applyUninstall", params),
+      /** @experimental */
+      config: {
+        /**
+         * Replaces the global list of disabled skills.
+         *
+         * @param params Skill names to mark as disabled in global configuration, replacing any previous list.
+         */
+        setDisabledSkills: async (params) => connection.sendRequest("skills.config.setDisabledSkills", params),
+        /**
+         * Atomically adds or removes one skill from the disabled list.
+         *
+         * @param params Adds or removes a single skill from the global disabled list, leaving every other entry untouched.
+         */
+        setSkillDisabled: async (params) => connection.sendRequest("skills.config.setSkillDisabled", params)
+      },
+      /**
+       * Discovers skills across global and project sources.
+       *
+       * @param params Optional project paths and additional skill directories to include in discovery.
+       *
+       * @returns Skills discovered across global and project sources.
+       */
+      discover: async (params) => connection.sendRequest("skills.discover", params),
+      /**
+       * Returns the canonical directories where a client may create skills that the runtime will recognize, including ones that do not exist yet. Project directories become active once created.
+       *
+       * @param params Optional project paths to enumerate.
+       *
+       * @returns Canonical locations where skills can be created so the runtime will recognize them.
+       */
+      getDiscoveryPaths: async (params) => connection.sendRequest("skills.getDiscoveryPaths", params)
+    },
     /**
      * Registers the calling SDK client as the per-entrypoint extension launch provider. Call before creating any sessions. When omitted, the runtime uses its built-in extension launcher.
      *
@@ -344,40 +520,6 @@ function createServerRpc(connection) {
       }
     },
     /** @experimental */
-    skills: {
-      /** @experimental */
-      config: {
-        /**
-         * Replaces the global list of disabled skills.
-         *
-         * @param params Skill names to mark as disabled in global configuration, replacing any previous list.
-         */
-        setDisabledSkills: async (params) => connection.sendRequest("skills.config.setDisabledSkills", params),
-        /**
-         * Atomically adds or removes one skill from the disabled list.
-         *
-         * @param params Adds or removes a single skill from the global disabled list, leaving every other entry untouched.
-         */
-        setSkillDisabled: async (params) => connection.sendRequest("skills.config.setSkillDisabled", params)
-      },
-      /**
-       * Discovers skills across global and project sources.
-       *
-       * @param params Optional project paths and additional skill directories to include in discovery.
-       *
-       * @returns Skills discovered across global and project sources.
-       */
-      discover: async (params) => connection.sendRequest("skills.discover", params),
-      /**
-       * Returns the canonical directories where a client may create skills that the runtime will recognize, including ones that do not exist yet. Project directories become active once created.
-       *
-       * @param params Optional project paths to enumerate.
-       *
-       * @returns Canonical locations where skills can be created so the runtime will recognize them.
-       */
-      getDiscoveryPaths: async (params) => connection.sendRequest("skills.getDiscoveryPaths", params)
-    },
-    /** @experimental */
     agents: {
       /**
        * Discovers custom agents across user, project, plugin, and remote sources.
@@ -782,6 +924,17 @@ function createInternalServerRpc(connection) {
        * @param params Params to attach or detach an in-process ExtensionController delegate.
        */
       configureSessionExtensions: async (params) => connection.sendRequest("sessions.configureSessionExtensions", params)
+    },
+    /** @experimental */
+    accounts: {
+      /**
+       * Acquire a Microsoft Entra access token through the runtime's OneAuth broker. Account-scoped because it uses the same native broker as the account stack: a trusted host application mints a scoped Entra token for its own use, most notably to authenticate to a remote MCP server whose authorization server is Entra ID (in place of the generic browser-OAuth flow).
+       *
+       * @param params OneAuth token request supplied by a trusted host application.
+       *
+       * @returns Result of a OneAuth token acquisition.
+       */
+      acquireEntraToken: async (params) => connection.sendRequest("accounts.acquireEntraToken", params)
     }
   };
 }
@@ -884,6 +1037,58 @@ function createSessionRpc(connection, sessionId) {
       setCredentials: async (params) => connection.sendRequest("session.gitHubAuth.setCredentials", { sessionId, ...params })
     },
     /** @experimental */
+    accounts: {
+      /**
+       * Enumerate a typed accounts collection: the signed-in accounts, or the providers offered for interactive login.
+       *
+       * @param params Enumerate request carrying the typed collection query.
+       *
+       * @returns The enumerated collection, keyed by the same selector as the query.
+       */
+      enumerate: async (params) => connection.sendRequest("session.accounts.enumerate", { sessionId, ...params }),
+      /**
+       * Read one typed accounts datum: the active account, a neutral status summary, or the last authentication errors.
+       *
+       * @param params Read request carrying the typed datum query.
+       *
+       * @returns The read result, keyed by the same selector as the query.
+       */
+      get: async (params) => connection.sendRequest("session.accounts.get", { sessionId, ...params }),
+      /**
+       * Apply one non-interactive accounts mutation: switch the active account, log an account out, or set credentials from a token.
+       *
+       * @param params Mutation request carrying the typed write command.
+       *
+       * @returns Result of a non-interactive accounts mutation.
+       */
+      set: async (params) => connection.sendRequest("session.accounts.set", { sessionId, ...params }),
+      /** @experimental */
+      login: {
+        /**
+         * Begin an interactive login flow for a provider kind (dispatch is kind-only) and return its opaque flow id and first step.
+         *
+         * @param params Begin an interactive login flow for a provider kind. Dispatch is kind-only.
+         *
+         * @returns A started login flow: its opaque id and first step.
+         */
+        begin: async (params) => connection.sendRequest("session.accounts.login.begin", { sessionId, ...params }),
+        /**
+         * Advance an in-flight login flow, optionally fulfilling an input-required step, and return the next step.
+         *
+         * @param params Advance an in-flight login flow, optionally fulfilling an input-required step.
+         *
+         * @returns One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra).
+         */
+        advance: async (params) => connection.sendRequest("session.accounts.login.advance", { sessionId, ...params }),
+        /**
+         * Cancel an in-flight login flow and release its resources.
+         *
+         * @param params Cancel an in-flight login flow.
+         */
+        cancel: async (params) => connection.sendRequest("session.accounts.login.cancel", { sessionId, ...params })
+      }
+    },
+    /** @experimental */
     debug: {
       /**
        * Collects a session debug log bundle into a local archive or staging directory. Logs are redacted by default; redaction can be configured per caller-provided diagnostic entry. The runtime includes session-owned logs by default and accepts caller-provided diagnostic entries so host applications can add their own files without changing this API shape.
@@ -935,108 +1140,6 @@ function createSessionRpc(connection, sessionId) {
       }
     },
     /** @experimental */
-    factory: {
-      /**
-       * Runs a registered factory by name at the top level.
-       *
-       * @param params Parameters for invoking a registered factory.
-       *
-       * @returns Complete current or terminal factory run envelope.
-       */
-      run: async (params) => connection.sendRequest("session.factory.run", { sessionId, ...params }),
-      /**
-       * Resumes a factory run using its persisted name, arguments, journal, and accounting.
-       *
-       * @param params Parameters for resuming a factory run from its persisted identity.
-       *
-       * @returns Resolved persisted factory identity and resumed run envelope.
-       */
-      resume: async (params) => connection.sendRequest("session.factory.resume", { sessionId, ...params }),
-      /**
-       * Gets the current or settled envelope for a factory run.
-       *
-       * @param params Parameters for retrieving a factory run.
-       *
-       * @returns Complete current or terminal factory run envelope.
-       */
-      getRun: async (params) => connection.sendRequest("session.factory.getRun", { sessionId, ...params }),
-      /**
-       * Lists durable factory runs for this session in creation order.
-       *
-       * @param params Parameters for paging factory runs.
-       *
-       * @returns A page of factory runs in durable creation order.
-       */
-      listRuns: async (params) => connection.sendRequest("session.factory.listRuns", { sessionId, ...params }),
-      /**
-       * Gets durable and live observability detail for one factory run.
-       *
-       * @param params Parameters for retrieving a factory run.
-       *
-       * @returns Full factory run observability detail.
-       */
-      getRunDetail: async (params) => connection.sendRequest("session.factory.getRunDetail", { sessionId, ...params }),
-      /**
-       * Pages durable progress for one factory run.
-       *
-       * @param params Parameters for paging factory progress.
-       *
-       * @returns A bidirectional page of factory progress.
-       */
-      getRunProgress: async (params) => connection.sendRequest("session.factory.getRunProgress", { sessionId, ...params }),
-      /**
-       * Requests cancellation of a factory run and returns its run envelope.
-       *
-       * @param params Parameters for cancelling a factory run.
-       *
-       * @returns Complete current or terminal factory run envelope.
-       */
-      cancel: async (params) => connection.sendRequest("session.factory.cancel", { sessionId, ...params }),
-      /**
-       * Pauses a running factory and returns its settled run envelope.
-       *
-       * @param params Parameters for pausing a running factory.
-       *
-       * @returns Complete current or terminal factory run envelope.
-       */
-      pause: async (params) => connection.sendRequest("session.factory.pause", { sessionId, ...params }),
-      /**
-       * Records a batch of ordered factory progress lines.
-       *
-       * @param params Parameters for recording factory progress.
-       *
-       * @returns Acknowledgement that a factory request was accepted.
-       */
-      log: async (params) => connection.sendRequest("session.factory.log", { sessionId, ...params }),
-      /**
-       * Runs one factory-scoped subagent and returns its result.
-       *
-       * @param params Parameters for one factory-scoped subagent call.
-       *
-       * @returns Result of one factory-scoped subagent call.
-       */
-      agent: async (params) => connection.sendRequest("session.factory.agent", { sessionId, ...params }),
-      /** @experimental */
-      journal: {
-        /**
-         * Reads a memoized factory journal entry.
-         *
-         * @param params Parameters for reading a factory journal entry.
-         *
-         * @returns Result of reading a factory journal entry.
-         */
-        get: async (params) => connection.sendRequest("session.factory.journal.get", { sessionId, ...params }),
-        /**
-         * Stores a memoized factory journal entry.
-         *
-         * @param params Parameters for storing a factory journal entry.
-         *
-         * @returns Acknowledgement that a factory request was accepted.
-         */
-        put: async (params) => connection.sendRequest("session.factory.journal.put", { sessionId, ...params })
-      }
-    },
-    /** @experimental */
     workflow: {
       /**
        * Runs a registered dynamic workflow by name at the top level.
@@ -1746,7 +1849,15 @@ function createSessionRpc(connection, sessionId) {
          */
         authenticationStateChanged: async (params) => connection.sendRequest("session.mcp.oauth.authenticationStateChanged", { sessionId, ...params }),
         /**
-         * Starts OAuth authentication for a remote MCP server.
+         * Prepares an inert, expiring owned OAuth login bound to the original session requester and exact installation. Does not activate, connect, read credentials or open a browser.
+         *
+         * @param params Effect-free preparation bound to the existing local session, requester and installation, with frozen options.
+         *
+         * @returns An inert runtime-issued login handle. Preparation alone performs no activation or OAuth work.
+         */
+        prepareLogin: async (params) => connection.sendRequest("session.mcp.oauth.prepareLogin", { sessionId, ...params }),
+        /**
+         * Starts OAuth authentication for a remote MCP server. Owned servers require the original one-use prepareLogin handle and exact installation ID; manual servers retain the existing direct login behaviour.
          *
          * @param params Remote MCP server name and optional overrides controlling reauthentication, OAuth client display name, callback success-page copy, and static OAuth client selection.
          *
@@ -1761,6 +1872,14 @@ function createSessionRpc(connection, sessionId) {
          * @returns Passive MCP OAuth probe result. `authenticated` means the server accepted the probe request while an OAuth-origin access token was attached; it does not prove the server required or independently validated that token. The probe does not make a second unauthenticated request. Failed is an expected probe-domain outcome; JSON-RPC errors are reserved for API-call failures.
          */
         probe: async (params) => connection.sendRequest("session.mcp.oauth.probe", { sessionId, ...params }),
+        /**
+         * Cancels the exact owned OAuth login issued to this original session requester, without clearing shared credentials.
+         *
+         * @param params Targets only the original prepared/applying owned login on this exact session requester.
+         *
+         * @returns Honest terminal cancellation result; persistence or recovery failures remain RPC errors.
+         */
+        cancelLogin: async (params) => connection.sendRequest("session.mcp.oauth.cancelLogin", { sessionId, ...params }),
         /**
          * Responds to a pending MCP OAuth authorization request by its request id.
          *
@@ -2999,31 +3118,6 @@ function createInternalSessionRpc(connection, sessionId) {
       }
     },
     /** @experimental */
-    factory: {
-      /**
-       * Internal tool-originated factory invocation.
-       *
-       * @param params Internal parameters for invoking a registered factory from a tool.
-       *
-       * @returns Complete current or terminal factory run envelope.
-       */
-      runFromTool: async (params) => connection.sendRequest("session.factory.runFromTool", { sessionId, ...params }),
-      /**
-       * Internal tool-originated factory resume.
-       *
-       * @param params Internal parameters for resuming a factory run from a tool.
-       *
-       * @returns Resolved persisted factory identity and resumed run envelope.
-       */
-      resumeFromTool: async (params) => connection.sendRequest("session.factory.resumeFromTool", { sessionId, ...params }),
-      /**
-       * Atomically pauses an owned factory attempt at a durable checkpoint.
-       *
-       * @param params Parameters for an owned durable pause checkpoint.
-       */
-      pauseAtCheckpoint: async (params) => connection.sendRequest("session.factory.pauseAtCheckpoint", { sessionId, ...params })
-    },
-    /** @experimental */
     workflow: {
       /**
        * Internal tool-originated dynamic workflow invocation.
@@ -3251,16 +3345,6 @@ function registerClientSessionApiHandlers(connection, getHandlers) {
     if (!handler) throw new Error(`No providerToken handler registered for session: ${params.sessionId}`);
     return handler.getToken(params);
   });
-  connection.onRequest("factory.execute", async (params) => {
-    const handler = getHandlers(params.sessionId).factory;
-    if (!handler) throw new Error(`No factory handler registered for session: ${params.sessionId}`);
-    return handler.execute(params);
-  });
-  connection.onRequest("factory.abort", async (params) => {
-    const handler = getHandlers(params.sessionId).factory;
-    if (!handler) throw new Error(`No factory handler registered for session: ${params.sessionId}`);
-    return handler.abort(params);
-  });
   connection.onRequest("workflow.execute", async (params) => {
     const handler = getHandlers(params.sessionId).workflow;
     if (!handler) throw new Error(`No workflow handler registered for session: ${params.sessionId}`);
@@ -3383,6 +3467,11 @@ function registerClientGlobalApiHandlers(connection, handlers) {
     if (!handler) throw new Error("No gitHubToken client-global handler registered");
     return handler.getToken(params);
   });
+  connection.onRequest("installations.confirm", async (params) => {
+    const handler = handlers.installations;
+    if (!handler) throw new Error("No installations client-global handler registered");
+    return handler.confirm(params);
+  });
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/cjs/index.js

@@ -28,7 +28,6 @@ __export(index_exports, {
   CopilotWebSocketForwarder: () => import_types2.CopilotWebSocketForwarder,
   CopilotWebSocketHandler: () => import_types2.CopilotWebSocketHandler,
   DisableBypassPermissionsModes: () => import_types.DisableBypassPermissionsModes,
-  FactoryResumeError: () => import_factory.FactoryResumeError,
   RuntimeConnection: () => import_types.RuntimeConnection,
   SYSTEM_MESSAGE_SECTIONS: () => import_types2.SYSTEM_MESSAGE_SECTIONS,
   SessionFsSqliteTransactionFailure: () => import_types2.SessionFsSqliteTransactionFailure,
@@ -39,10 +38,8 @@ __export(index_exports, {
   createAttributedPermissionResult: () => import_types2.createAttributedPermissionResult,
   createCanvas: () => import_canvas.createCanvas,
   createSessionFsAdapter: () => import_types2.createSessionFsAdapter,
-  defineFactory: () => import_factory.defineFactory,
   defineTool: () => import_types2.defineTool,
   defineWorkflow: () => import_workflow.defineWorkflow,
-  isFactoryRunTerminal: () => import_factory.isFactoryRunTerminal,
   isWorkflowRunTerminal: () => import_workflow.isWorkflowRunTerminal
 });
 module.exports = __toCommonJS(index_exports);
@@ -50,7 +47,6 @@ var import_client = require("./client.js");
 var import_types = require("./types.js");
 var import_toolSet = require("./toolSet.js");
 var import_session = require("./session.js");
-var import_factory = require("./factory.js");
 var import_workflow = require("./workflow.js");
 var import_canvas = require("./canvas.js");
 var import_types2 = require("./types.js");
@@ -66,7 +62,6 @@ var import_types2 = require("./types.js");
   CopilotWebSocketForwarder,
   CopilotWebSocketHandler,
   DisableBypassPermissionsModes,
-  FactoryResumeError,
   RuntimeConnection,
   SYSTEM_MESSAGE_SECTIONS,
   SessionFsSqliteTransactionFailure,
@@ -77,9 +72,7 @@ var import_types2 = require("./types.js");
   createAttributedPermissionResult,
   createCanvas,
   createSessionFsAdapter,
-  defineFactory,
   defineTool,
   defineWorkflow,
-  isFactoryRunTerminal,
   isWorkflowRunTerminal
 });

package/dist/cjs/installationConfirmation.js

@@ -0,0 +1,98 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var installationConfirmation_exports = {};
+__export(installationConfirmation_exports, {
+  createInstallationConfirmationAdapter: () => createInstallationConfirmationAdapter
+});
+module.exports = __toCommonJS(installationConfirmation_exports);
+var import_node = require("vscode-jsonrpc/node.js");
+function createInstallationConfirmationAdapter(connection, handler) {
+  const closed = new import_node.CancellationTokenSource();
+  const closeSubscription = connection.onClose(() => closed.cancel());
+  const disposeSubscription = connection.onDispose(() => {
+    closed.cancel();
+    closed.dispose();
+    closeSubscription.dispose();
+    disposeSubscription.dispose();
+  });
+  return {
+    async confirm(request, token) {
+      if (!token) {
+        throw new Error("Installation confirmation request cancellation is unavailable");
+      }
+      const { confirmationId, reviewFingerprint } = request;
+      const combined = new import_node.CancellationTokenSource();
+      const subscriptions = [];
+      const cancelRequest = () => combined.cancel();
+      const cancelConnection = () => combined.cancel();
+      const checkCancellation = () => {
+        if (closed.token.isCancellationRequested) {
+          throw new Error("Installation confirmation connection closed");
+        }
+        if (token.isCancellationRequested) {
+          throw new import_node.ResponseError(-32800, "Installation confirmation request cancelled");
+        }
+      };
+      try {
+        subscriptions.push(
+          token.onCancellationRequested(cancelRequest),
+          closed.token.onCancellationRequested(cancelConnection)
+        );
+        if (token.isCancellationRequested || closed.token.isCancellationRequested) {
+          combined.cancel();
+        }
+        checkCancellation();
+        const cancelled = new Promise((_resolve, reject) => {
+          subscriptions.push(
+            token.onCancellationRequested(
+              () => reject(
+                new import_node.ResponseError(
+                  -32800,
+                  "Installation confirmation request cancelled"
+                )
+              )
+            ),
+            closed.token.onCancellationRequested(
+              () => reject(new Error("Installation confirmation connection closed"))
+            )
+          );
+        });
+        const decision = await Promise.race([
+          Promise.resolve().then(() => {
+            checkCancellation();
+            return handler(request, combined.token);
+          }),
+          cancelled
+        ]);
+        checkCancellation();
+        if (decision !== "confirm" && decision !== "decline" && decision !== "cancel") {
+          throw new Error("Invalid installation confirmation decision");
+        }
+        return { confirmationId, reviewFingerprint, decision };
+      } finally {
+        for (const subscription of subscriptions) subscription.dispose();
+        combined.dispose();
+      }
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createInstallationConfirmationAdapter
+});