@github/copilot-sdk 1.0.15-preview.3 → 1.0.15-preview.4

package/dist/generated/session-events.d.ts

@@ -9,7 +9,7 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
 /**
  * Union of all session event variants emitted by the Copilot CLI runtime.
  */
-export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | IndexedSearchEvent | WarningEvent | ModelChangeEvent | ModelDeselectedEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | PermissionRecoveryEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | PermissionAssentDetectedEvent | PermissionContextualAuthorizationEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | FactoryRunUpdatedEvent | FactoryRunStartedEvent | FactoryRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
+export type SessionEvent = StartEvent | ResumeEvent | RemoteSteerableChangedEvent | ErrorEvent | IdleEvent | TitleChangedEvent | ScheduleCreatedEvent | ScheduleCancelledEvent | ScheduleRearmedEvent | AutopilotObjectiveChangedEvent | InfoEvent | IndexedSearchEvent | WarningEvent | ModelChangeEvent | ModelDeselectedEvent | AutoTierRecommendationEvent | AutoTierSwitchFailedEvent | ModeChangedEvent | ModeNoticeDeliveredEvent | SessionLimitsChangedEvent | PermissionsChangedEvent | PlanChangedEvent | TodosChangedEvent | WorkspaceFileChangedEvent | HandoffEvent | TruncationEvent | SnapshotRewindEvent | ShutdownEvent | UsageCheckpointEvent | ContextChangedEvent | UsageInfoEvent | ContextClearedEvent | CompactionStartEvent | CompactionCompleteEvent | TaskCompleteEvent | CompletionReceiptEvent | FusionRouteStartedEvent | FusionRouteFailedEvent | FusionResolvedEvent | FusionCompletedEvent | PermissionRecoveryEvent | UserMessageEvent | PendingMessagesModifiedEvent | AssistantTurnStartEvent | AssistantIntentEvent | AssistantFusionPhaseStartedEvent | AssistantFusionPhaseActivityEvent | AssistantFusionPhaseCompletedEvent | AssistantFusionPhaseFailedEvent | AssistantServerToolProgressEvent | AssistantReasoningEvent | AssistantReasoningDeltaEvent | AssistantToolCallDeltaEvent | AssistantStreamingDeltaEvent | AssistantMessageEvent | AssistantMessageStartEvent | AssistantMessageDeltaEvent | AssistantTurnEndEvent | AssistantIdleEvent | AssistantUsageEvent | ModelCallFailureEvent | ModelCallFinishedEvent | AbortEvent | ToolUserRequestedEvent | ToolExecutionStartEvent | ToolExecutionPartialResultEvent | ToolExecutionProgressEvent | ToolExecutionCompleteEvent | ToolSearchActivatedEvent | SkillInvokedEvent | SubagentStartedEvent | SubagentConfiguredEvent | SubagentCompletedEvent | SubagentFailedEvent | SubagentSelectedEvent | SubagentDeselectedEvent | HookStartEvent | HookEndEvent | HookProgressEvent | BinaryAssetEvent | SystemMessageEvent | SystemNotificationEvent | PermissionRequestedEvent | PermissionCompletedEvent | PermissionCarriedForwardEvent | PermissionMessageAuthorizationEvent | PermissionMessageAuthorizationReadEvent | PermissionMessageAuthorizationDegradedEvent | PermissionAssentDetectedEvent | PermissionContextualAuthorizationEvent | UserInputRequestedEvent | UserInputCompletedEvent | ElicitationRequestedEvent | ElicitationCompletedEvent | SamplingRequestedEvent | SamplingCompletedEvent | McpOauthRequiredEvent | McpOauthCompletedEvent | McpHeadersRefreshRequiredEvent | McpHeadersRefreshCompletedEvent | CustomNotificationEvent | UIEphemeralQueryEvent | ExternalToolRequestedEvent | ExternalToolCompletedEvent | CommandQueuedEvent | CommandExecuteEvent | CommandCompletedEvent | AutoModeSwitchRequestedEvent | AutoModeSwitchCompletedEvent | SessionLimitsExhaustedRequestedEvent | SessionLimitsExhaustedCompletedEvent | AutoModeResolvedEvent | ManagedSettingsResolvedEvent | ManagedSettingsEnforcedEvent | CommandsChangedEvent | CapabilitiesChangedEvent | ExitPlanModeRequestedEvent | ExitPlanModeCompletedEvent | ToolsUpdatedEvent | BackgroundTasksChangedEvent | WorkflowRunUpdatedEvent | WorkflowRunStartedEvent | WorkflowRunSettledEvent | SkillsLoadedEvent | CustomAgentsUpdatedEvent | McpServersLoadedEvent | McpServerStatusChangedEvent | McpServerRemovedEvent | McpServerNeedsReconnectEvent | McpToolsListChangedEvent | McpResourcesListChangedEvent | McpPromptsListChangedEvent | ExtensionsLoadedEvent | CanvasOpenedEvent | CanvasRegistryChangedEvent | CanvasClosedEvent | CanvasUnavailableEvent | CanvasRecordedEvent | CanvasRemovedEvent | ExtensionsAttachmentsPushedEvent | McpAppToolCallCompleteEvent;
 /**
  * Routing preference used when the session model is `auto`. `fast` is an integrator-only latency preset and is not a first-party GitHub Copilot product preference.
  */
@@ -298,7 +298,9 @@ export type ModelChangeSource =
 /** The user selected the promoted model from the changeboarding card or its keyboard shortcut. */
  | "changeboarding_shortcut"
 /** An SDK or RPC caller selected the model. */
- | "sdk";
+ | "sdk"
+/** The user accepted a CAPI-issued Auto tier recommendation. */
+ | "auto_tier_recommendation";
 /**
  * Why the session no longer has an explicitly selected model.
  */
@@ -883,7 +885,7 @@ export type SystemMessageRole =
 /**
  * Structured metadata identifying what triggered this notification
  */
-export type SystemNotification = SystemNotificationAgentCompleted | SystemNotificationAgentIdle | SystemNotificationNewInboxMessage | SystemNotificationShellCompleted | SystemNotificationShellDetachedCompleted | SystemNotificationInstructionDiscovered | SystemNotificationFactoryCompleted | SystemNotificationUnclassified;
+export type SystemNotification = SystemNotificationAgentCompleted | SystemNotificationAgentIdle | SystemNotificationNewInboxMessage | SystemNotificationShellCompleted | SystemNotificationShellDetachedCompleted | SystemNotificationInstructionDiscovered | SystemNotificationWorkflowCompleted | SystemNotificationUnclassified;
 /**
  * Whether the agent completed successfully or failed
  */
@@ -893,11 +895,11 @@ export type SystemNotificationAgentCompletedStatus =
 /** The agent failed. */
  | "failed";
 /**
- * Durable metadata describing who initiated a factory pause.
+ * Durable metadata describing who initiated a workflow pause.
  */
-export type SystemNotificationFactoryPauseInfo = {
+export type SystemNotificationWorkflowPauseInfo = {
     /**
-     * Factory pause initiator discriminator.
+     * Workflow pause initiator discriminator.
      */
     type: "user";
 } | {
@@ -906,28 +908,28 @@ export type SystemNotificationFactoryPauseInfo = {
      */
     key: string;
     /**
-     * Factory pause initiator discriminator.
+     * Workflow pause initiator discriminator.
      */
     type: "checkpoint";
 };
 /**
- * Terminal status reached by a factory execution attempt.
+ * Terminal status reached by a workflow execution attempt.
  */
-export type SystemNotificationFactoryCompletedStatus = 
-/** The factory completed successfully. */
+export type SystemNotificationWorkflowCompletedStatus = 
+/** The workflow completed successfully. */
 "completed"
-/** The factory was halted. */
+/** The workflow was halted. */
  | "halted"
-/** The factory attempt paused intentionally. */
+/** The workflow attempt paused intentionally. */
  | "paused"
-/** The factory was cancelled. */
+/** The workflow was cancelled. */
  | "cancelled"
-/** The factory failed. */
+/** The workflow failed. */
  | "error";
 /**
  * Details of the permission being requested
  */
-export type PermissionRequest = PermissionRequestShell | PermissionRequestWrite | PermissionRequestRead | PermissionRequestMcp | PermissionRequestUrl | PermissionRequestMemory | PermissionRequestCustomTool | PermissionRequestHook | PermissionRequestExtensionManagement | PermissionRequestFactory | PermissionRequestExtensionPermissionAccess | PermissionRequestExtensionEnvAccess;
+export type PermissionRequest = PermissionRequestShell | PermissionRequestWrite | PermissionRequestRead | PermissionRequestMcp | PermissionRequestUrl | PermissionRequestMemory | PermissionRequestCustomTool | PermissionRequestHook | PermissionRequestExtensionManagement | PermissionRequestWorkflow | PermissionRequestExtensionPermissionAccess | PermissionRequestExtensionEnvAccess;
 /**
  * Advisory recommendation the runtime attaches to a permission request whose origin it can vouch for by construction. Unlike the auto-approval judge this does not depend on auto mode and does not evaluate what the tool call does; its absence simply means the runtime has no opinion and the request follows the host's normal approval flow.
  */
@@ -988,17 +990,17 @@ export type PermissionRequestMemoryScope =
 /** Store the memory for the current user. */
  | "user";
 /**
- * Operation gated by a factory permission request.
+ * Operation gated by a workflow permission request.
  */
-export type FactoryPermissionOperation = 
-/** Running a registered factory, which spends subagents, active time, and AI credits under the approved limits. */
+export type WorkflowPermissionOperation = 
+/** Running a registered workflow, which spends subagents, active time, and AI credits under the approved limits. */
 "run"
-/** Authoring a factory, which writes JavaScript into a session-scoped extension and loads it. */
+/** Authoring a workflow, which writes JavaScript into a session-scoped extension and loads it. */
  | "author";
 /**
  * Derived user-facing permission prompt details for UI consumers
  */
-export type PermissionPromptRequest = PermissionPromptRequestCommands | PermissionPromptRequestWrite | PermissionPromptRequestRead | PermissionPromptRequestMcp | PermissionPromptRequestUrl | PermissionPromptRequestMemory | PermissionPromptRequestCustomTool | PermissionPromptRequestPath | PermissionPromptRequestHook | PermissionPromptRequestExtensionManagement | PermissionPromptRequestFactory | PermissionPromptRequestExtensionPermissionAccess | PermissionPromptRequestExtensionEnvAccess;
+export type PermissionPromptRequest = PermissionPromptRequestCommands | PermissionPromptRequestWrite | PermissionPromptRequestRead | PermissionPromptRequestMcp | PermissionPromptRequestUrl | PermissionPromptRequestMemory | PermissionPromptRequestCustomTool | PermissionPromptRequestPath | PermissionPromptRequestHook | PermissionPromptRequestExtensionManagement | PermissionPromptRequestWorkflow | PermissionPromptRequestExtensionPermissionAccess | PermissionPromptRequestExtensionEnvAccess;
 /**
  * Underlying permission kind that needs path approval
  */
@@ -1021,7 +1023,7 @@ export type PermissionDecisionSource =
  | "host_policy"
 /** The host denied the request because no interactive user response was available. */
  | "unattended_fallback"
-/** A live authorization record from an earlier human decision in this session contained the proposal, so it ran without another prompt. This is not a new human decision and never mints authority of its own. */
+/** Historical compatibility value for sessions created while authorization carry-forward was executable. Current runtimes do not produce this source. */
  | "authorization_carry_forward";
 /**
  * The result of the permission request
@@ -1030,15 +1032,15 @@ export type PermissionResult = PermissionApproved | PermissionApprovedForSession
 /**
  * The approval to add as a session-scoped rule
  */
-export type UserToolSessionApproval = UserToolSessionApprovalCommands | UserToolSessionApprovalRead | UserToolSessionApprovalWrite | UserToolSessionApprovalMcp | UserToolSessionApprovalMemory | UserToolSessionApprovalCustomTool | UserToolSessionApprovalExtensionManagement | UserToolSessionApprovalFactory | UserToolSessionApprovalExtensionPermissionAccess | UserToolSessionApprovalExtensionEnvAccess;
+export type UserToolSessionApproval = UserToolSessionApprovalCommands | UserToolSessionApprovalRead | UserToolSessionApprovalWrite | UserToolSessionApprovalMcp | UserToolSessionApprovalMemory | UserToolSessionApprovalCustomTool | UserToolSessionApprovalExtensionManagement | UserToolSessionApprovalWorkflow | UserToolSessionApprovalExtensionPermissionAccess | UserToolSessionApprovalExtensionEnvAccess;
 /**
- * Which direction a message-backed authorization claim moves authority in.
+ * Direction stored in a historical extractor claim. Current runtimes do not apply it.
  */
 /** @experimental */
 export type PermissionMessageAuthorizationPolarity = 
-/** The human's words authorized an effect. */
+/** Historical claim recorded as a grant. */
 "grant"
-/** The human's words refused an effect. */
+/** Historical claim recorded as a denial. */
  | "denial";
 /**
  * Elicitation mode; "form" for structured input, "url" for browser-based. Defaults to "form" when absent.
@@ -1206,10 +1208,10 @@ export type ExitPlanModeAction =
 /** Exit plan mode and continue with parallel autonomous workers. */
  | "autopilot_fleet";
 /**
- * Terminal status a factory run committed. A settled run is never `pending` or `running`, so those two members of the run-status domain are deliberately absent.
+ * Terminal status a workflow run committed. A settled run is never `pending` or `running`, so those two members of the run-status domain are deliberately absent.
  */
-export type FactoryRunSettledStatus = 
-/** The factory body resolved and its result was committed. */
+export type WorkflowRunSettledStatus = 
+/** The workflow body resolved and its result was committed. */
 "completed"
 /** The run was stopped by a limit, an approval refusal or another policy decision. */
  | "halted"
@@ -3694,6 +3696,12 @@ export interface FusionResolvedData {
      * Version of the validated HydraFusion event contract.
      */
     contractVersion: number;
+    /**
+     * Planned Critique phase identities, including independent critics with repeated model IDs. May be absent in older events; consumers then use secondaryModel for the legacy critic.
+     *
+     * @experimental
+     */
+    critics?: FusionCritic[];
     /**
      * Concrete model used when the planned primary model cannot execute.
      */
@@ -3713,6 +3721,12 @@ export interface FusionResolvedData {
      * @experimental
      */
     hint?: string;
+    /**
+     * Concrete model selected for Cascade escalation-gate calls, when required.
+     *
+     * @experimental
+     */
+    judgeModel?: string;
     /**
      * Version of the executable model universe used for selection.
      */
@@ -3740,6 +3754,12 @@ export interface FusionResolvedData {
      * Concrete model selected for the primary solver phase.
      */
     primaryModel: string;
+    /**
+     * Concrete model selected for Cascade repair, when required.
+     *
+     * @experimental
+     */
+    repairModel?: string;
     /**
      * Router implementation that supplied the plan.
      */
@@ -3762,7 +3782,7 @@ export interface FusionResolvedData {
     ruleName?: string;
     scores?: FusionScores;
     /**
-     * Concrete model selected for the review or judge phase, when required.
+     * Concrete model selected for Critique review, or the legacy Cascade judge/repair model when role-specific fields are absent.
      */
     secondaryModel: string | null;
     /**
@@ -3774,6 +3794,27 @@ export interface FusionResolvedData {
      */
     turnId: string;
 }
+/** @experimental */
+export interface FusionCritic {
+    /**
+     * Concrete model selected for this critic.
+     *
+     * @experimental
+     */
+    model: string;
+    /**
+     * Unique execution phase identifier for this critic.
+     *
+     * @experimental
+     */
+    phaseId: string;
+    /**
+     * Explicit reasoning effort selected for this critic, if supplied.
+     *
+     * @experimental
+     */
+    reasoningEffort?: string;
+}
 /**
  * Durable server recommendation for subsequent HydraFusion turns.
  */
@@ -4553,6 +4594,10 @@ export interface AssistantTurnStartData {
      * Model identifier used for this turn, when known
      */
     model?: string;
+    /**
+     * Parent task tool call ID when this turn belongs to a sub-agent
+     */
+    parentToolCallId?: string;
     /**
      * Identifier for this turn within the agentic loop, typically a stringified turn number
      */
@@ -4648,6 +4693,12 @@ export interface FusionPhaseStartedData {
      */
     phaseId: string;
     phaseKind: FusionPhaseKind;
+    /**
+     * Explicit reasoning effort selected for this phase, if supplied.
+     *
+     * @experimental
+     */
+    reasoningEffort?: string;
     /**
      * Semantic role assigned to the phase.
      */
@@ -4772,6 +4823,12 @@ export interface FusionPhaseCompletedData {
      */
     phaseId: string;
     phaseKind: FusionPhaseKind;
+    /**
+     * Explicit reasoning effort selected for this phase, if supplied.
+     *
+     * @experimental
+     */
+    reasoningEffort?: string;
     /**
      * Semantic role assigned to the completed phase.
      */
@@ -4879,6 +4936,12 @@ export interface FusionPhaseFailedData {
      * Stable machine-readable reason for the phase failure.
      */
     reason: string;
+    /**
+     * Explicit reasoning effort selected for this phase, if supplied.
+     *
+     * @experimental
+     */
+    reasoningEffort?: string;
     /**
      * Semantic role assigned to the failed phase.
      */
@@ -5642,6 +5705,10 @@ export interface AssistantTurnEndData {
      * Model identifier used for this turn, when known
      */
     model?: string;
+    /**
+     * Parent task tool call ID when this turn belongs to a sub-agent
+     */
+    parentToolCallId?: string;
     /**
      * Identifier of the turn that has ended, matching the corresponding assistant.turn_start event
      */
@@ -5975,6 +6042,10 @@ export interface ModelCallFailureData {
      * Model identifier used for the failed API call
      */
     model?: string;
+    /**
+     * Parent task tool call ID when this failed model call belongs to a sub-agent
+     */
+    parentToolCallId?: string;
     /**
      * GitHub request tracing ID (x-github-request-id header) for server-side log correlation
      */
@@ -7176,7 +7247,7 @@ export interface SubagentStartedData {
      */
     executionMode?: string;
     /**
-     * Root id of the factory run that spawned this sub-agent, when it was spawned by one.
+     * Legacy root id of the workflow run that spawned this sub-agent. New consumers should use workflowRunId.
      */
     factoryRunId?: string;
     /**
@@ -7197,6 +7268,10 @@ export interface SubagentStartedData {
      * Tool call ID of the parent tool invocation that spawned this sub-agent
      */
     toolCallId: string;
+    /**
+     * Root id of the workflow run that spawned this sub-agent, when it was spawned by one.
+     */
+    workflowRunId?: string;
 }
 /**
  * Session event "subagent.configured". Resolved runtime configuration for a configured sub-agent
@@ -8015,9 +8090,9 @@ export interface SystemNotificationInstructionDiscovered {
     type: "instruction_discovered";
 }
 /**
- * System notification metadata for a factory execution attempt that reached a terminal state.
+ * System notification metadata for a workflow execution attempt that reached a terminal state.
  */
-export interface SystemNotificationFactoryCompleted {
+export interface SystemNotificationWorkflowCompleted {
     /**
      * Execution attempt that reached this terminal state.
      */
@@ -8034,32 +8109,32 @@ export interface SystemNotificationFactoryCompleted {
      * Accumulated active execution time in milliseconds.
      */
     elapsedMs: number;
-    /**
-     * Persisted factory name.
-     */
-    factoryName: string;
     /**
      * Machine-readable terminal failure details, when present.
      */
     failure?: JsonValue;
-    pauseInfo?: SystemNotificationFactoryPauseInfo;
+    pauseInfo?: SystemNotificationWorkflowPauseInfo;
     /**
      * Bounded prompt-safe preview of the completed result.
      */
     resultPreview?: string;
     /**
-     * Actionable run_factory resume guidance for a resource-limit failure.
+     * Actionable run_dynamic_workflow resume guidance for a resource-limit failure.
      */
     retryGuidance?: string;
     /**
-     * Factory run identifier.
+     * Workflow run identifier.
      */
     runId: string;
-    status: SystemNotificationFactoryCompletedStatus;
+    status: SystemNotificationWorkflowCompletedStatus;
+    /**
+     * Type discriminator. Always "workflow_completed".
+     */
+    type: "workflow_completed";
     /**
-     * Type discriminator. Always "factory_completed".
+     * Persisted workflow name.
      */
-    type: "factory_completed";
+    workflowName: string;
 }
 /**
  * System notification metadata from an external host that does not match a runtime-owned notification kind.
@@ -8633,41 +8708,45 @@ export interface PermissionRequestExtensionManagement {
     toolCallId?: string;
 }
 /**
- * Factory run or authoring permission request
+ * Workflow run or authoring permission request
  */
-export interface PermissionRequestFactory {
+export interface PermissionRequestWorkflow {
     /**
-     * Canonical key used for scoped factory approvals
+     * Canonical key used for scoped workflow approvals
      */
     approvalKey: string;
     /**
-     * Whether this factory is eligible for persistent approval
+     * Whether this workflow is eligible for persistent approval
      */
     canPersistApproval: boolean;
     /**
-     * Factory-declared AI-credit limit before any run/resume caller override is applied.
+     * Workflow-declared AI-credit limit before any run/resume caller override is applied.
      */
     declaredMaxAiCredits?: number;
     /**
-     * Factory-declared concurrent-subagent limit before any run/resume caller override is applied.
+     * Workflow-declared concurrent-subagent limit before any run/resume caller override is applied.
      */
     declaredMaxConcurrentSubagents?: number;
     /**
-     * Factory-declared total-subagent limit before any run/resume caller override is applied.
+     * Workflow-declared total-subagent limit before any run/resume caller override is applied.
      */
     declaredMaxTotalSubagents?: number;
     /**
-     * Factory-declared active-time limit in seconds before any run/resume caller override is applied.
+     * Workflow-declared active-time limit in seconds before any run/resume caller override is applied.
      */
     declaredTimeoutSeconds?: number;
     /**
-     * Factory description
+     * Workflow description
      */
     description: string;
     /**
      * Permission kind discriminator
      */
-    kind: "factory";
+    kind: "workflow";
+    /**
+     * Whether managed policy requires a human response and forbids host auto-approval
+     */
+    managedApprovalRequired?: boolean;
     /**
      * Effective AI-credit limit; omitted means unlimited
      */
@@ -8681,14 +8760,14 @@ export interface PermissionRequestFactory {
      */
     maxTotalSubagents?: number;
     /**
-     * Factory name
+     * Workflow name
      */
     name: string;
-    operation: FactoryPermissionOperation;
+    operation: WorkflowPermissionOperation;
     /**
-     * Declared factory phases
+     * Declared workflow phases
      */
-    phases: FactoryPermissionPhase[];
+    phases: WorkflowPermissionPhase[];
     /**
      * Effective active-time limit in seconds; omitted means unlimited
      */
@@ -8699,9 +8778,9 @@ export interface PermissionRequestFactory {
     toolCallId?: string;
 }
 /**
- * A declared phase shown in a factory permission prompt.
+ * A declared phase shown in a workflow permission prompt.
  */
-export interface FactoryPermissionPhase {
+export interface WorkflowPermissionPhase {
     /**
      * Optional phase detail
      */
@@ -9135,11 +9214,11 @@ export interface PermissionPromptRequestExtensionManagement {
     toolCallId?: string;
 }
 /**
- * Factory run or authoring permission prompt
+ * Workflow run or authoring permission prompt
  */
-export interface PermissionPromptRequestFactory {
+export interface PermissionPromptRequestWorkflow {
     /**
-     * Canonical key used for scoped factory approvals
+     * Canonical key used for scoped workflow approvals
      */
     approvalKey: string;
     /**
@@ -9149,33 +9228,33 @@ export interface PermissionPromptRequestFactory {
      */
     assistedApproval?: PermissionAssistedApproval;
     /**
-     * Whether this factory is eligible for persistent approval
+     * Whether this workflow is eligible for persistent approval
      */
     canPersistApproval: boolean;
     /**
-     * Factory-declared AI-credit limit before any run/resume caller override is applied.
+     * Workflow-declared AI-credit limit before any run/resume caller override is applied.
      */
     declaredMaxAiCredits?: number;
     /**
-     * Factory-declared concurrent-subagent limit before any run/resume caller override is applied.
+     * Workflow-declared concurrent-subagent limit before any run/resume caller override is applied.
      */
     declaredMaxConcurrentSubagents?: number;
     /**
-     * Factory-declared total-subagent limit before any run/resume caller override is applied.
+     * Workflow-declared total-subagent limit before any run/resume caller override is applied.
      */
     declaredMaxTotalSubagents?: number;
     /**
-     * Factory-declared active-time limit in seconds before any run/resume caller override is applied.
+     * Workflow-declared active-time limit in seconds before any run/resume caller override is applied.
      */
     declaredTimeoutSeconds?: number;
     /**
-     * Factory description
+     * Workflow description
      */
     description: string;
     /**
      * Prompt kind discriminator
      */
-    kind: "factory";
+    kind: "workflow";
     /**
      * Whether managed policy requires a human response and forbids host auto-approval
      */
@@ -9193,14 +9272,14 @@ export interface PermissionPromptRequestFactory {
      */
     maxTotalSubagents?: number;
     /**
-     * Factory name
+     * Workflow name
      */
     name: string;
-    operation: FactoryPermissionOperation;
+    operation: WorkflowPermissionOperation;
     /**
-     * Declared factory phases
+     * Declared workflow phases
      */
-    phases: FactoryPermissionPhase[];
+    phases: WorkflowPermissionPhase[];
     /**
      * Effective active-time limit in seconds; omitted means unlimited
      */
@@ -9432,17 +9511,17 @@ export interface UserToolSessionApprovalExtensionManagement {
     operation?: string;
 }
 /**
- * Session-scoped factory approval, optionally narrowed by approval key.
+ * Session-scoped workflow approval, optionally narrowed by approval key.
  */
-export interface UserToolSessionApprovalFactory {
+export interface UserToolSessionApprovalWorkflow {
     /**
-     * Optional factory operation name or canonical approval key
+     * Optional workflow operation name or canonical approval key
      */
     approvalKey?: string;
     /**
-     * Factory approval kind
+     * Workflow approval kind
      */
-    kind: "factory";
+    kind: "workflow";
 }
 /**
  * Session-scoped tool-approval rule for an extension's permission-gated capability access, keyed by extension name.
@@ -9594,7 +9673,7 @@ export interface PermissionDeniedByPermissionRequestHook {
     message?: string;
 }
 /**
- * Session event "permission.carriedForward". Records that a live authorization record from an earlier human decision in this session contained a permission proposal, so it ran without another prompt. This mints no authority: it accounts for one more effect against the prior grant, which is what lets a replayed session agree with the live one about how much of that grant is left.
+ * Session event "permission.carriedForward". Historical decode-only receipt from the retired Assisted Permissions authorization extractor. Current runtimes ignore it for permission decisions.
  */
 /** @experimental */
 export interface PermissionCarriedForwardEvent {
@@ -9625,7 +9704,7 @@ export interface PermissionCarriedForwardEvent {
     type: "permission.carriedForward";
 }
 /**
- * Records that a live authorization record from an earlier human decision in this session contained a permission proposal, so it ran without another prompt. This mints no authority: it accounts for one more effect against the prior grant, which is what lets a replayed session agree with the live one about how much of that grant is left.
+ * Historical decode-only receipt from the retired Assisted Permissions authorization extractor. Current runtimes ignore it for permission decisions.
  */
 /** @experimental */
 export interface PermissionCarriedForwardData {
@@ -9655,7 +9734,7 @@ export interface PermissionCarriedForwardData {
     toolCallId: string;
 }
 /**
- * Session event "permission.messageAuthorization". Freezes one blinded, verbatim-verified authorization claim the runtime minted from a human user message, so a resumed session re-establishes the same grant deterministically instead of re-running the extraction model. This mints no authority on its own: it records what a blinded proposer pointed at and the trusted discriminator the runtime established, and deterministic establishment runs on replay. Persisted so recorded authority survives compaction and process resume.
+ * Session event "permission.messageAuthorization". Historical decode-only claim from the retired Assisted Permissions authorization extractor. Current runtimes preserve the payload but do not establish authority from it.
  */
 /** @experimental */
 export interface PermissionMessageAuthorizationEvent {
@@ -9686,7 +9765,7 @@ export interface PermissionMessageAuthorizationEvent {
     type: "permission.messageAuthorization";
 }
 /**
- * Freezes one blinded, verbatim-verified authorization claim the runtime minted from a human user message, so a resumed session re-establishes the same grant deterministically instead of re-running the extraction model. This mints no authority on its own: it records what a blinded proposer pointed at and the trusted discriminator the runtime established, and deterministic establishment runs on replay. Persisted so recorded authority survives compaction and process resume.
+ * Historical decode-only claim from the retired Assisted Permissions authorization extractor. Current runtimes preserve the payload but do not establish authority from it.
  */
 /** @experimental */
 export interface PermissionMessageAuthorizationData {
@@ -9746,7 +9825,7 @@ export interface PermissionMessageAuthorizationData {
     world?: JsonValue;
 }
 /**
- * Session event "permission.messageAuthorizationRead". Records that one human turn has been read by the blinded authorization proposer, whether or not it minted anything, so a resumed session does not re-run the extraction model on a turn the live session already read. Also records whether that pass activates ongoing extraction; contextual-assent-only passes do not, so unrelated future messages remain outside extraction.
+ * Session event "permission.messageAuthorizationRead". Historical decode-only extractor progress marker. Current runtimes do not run or resume extraction from it.
  */
 /** @experimental */
 export interface PermissionMessageAuthorizationReadEvent {
@@ -9777,7 +9856,7 @@ export interface PermissionMessageAuthorizationReadEvent {
     type: "permission.messageAuthorizationRead";
 }
 /**
- * Records that one human turn has been read by the blinded authorization proposer, whether or not it minted anything, so a resumed session does not re-run the extraction model on a turn the live session already read. Also records whether that pass activates ongoing extraction; contextual-assent-only passes do not, so unrelated future messages remain outside extraction.
+ * Historical decode-only extractor progress marker. Current runtimes do not run or resume extraction from it.
  */
 /** @experimental */
 export interface PermissionMessageAuthorizationReadData {
@@ -9795,7 +9874,7 @@ export interface PermissionMessageAuthorizationReadData {
     turnIndex: number;
 }
 /**
- * Session event "permission.messageAuthorizationDegraded". Records that message-backed authorization could not safely represent one human turn before compaction. The runtime may compact the original message after this marker is durable, but message-derived carry-forward and assisted auto-approval remain disabled for the rest of the session so subsequent commands continue through the ordinary permission prompt.
+ * Session event "permission.messageAuthorizationDegraded". Historical decode-only degradation marker from the retired extractor. Current runtimes ignore it for permission decisions.
  */
 /** @experimental */
 export interface PermissionMessageAuthorizationDegradedEvent {
@@ -9826,7 +9905,7 @@ export interface PermissionMessageAuthorizationDegradedEvent {
     type: "permission.messageAuthorizationDegraded";
 }
 /**
- * Records that message-backed authorization could not safely represent one human turn before compaction. The runtime may compact the original message after this marker is durable, but message-derived carry-forward and assisted auto-approval remain disabled for the rest of the session so subsequent commands continue through the ordinary permission prompt.
+ * Historical decode-only degradation marker from the retired extractor. Current runtimes ignore it for permission decisions.
  */
 /** @experimental */
 export interface PermissionMessageAuthorizationDegradedData {
@@ -9838,7 +9917,7 @@ export interface PermissionMessageAuthorizationDegradedData {
     turnIndex: number;
 }
 /**
- * Session event "permission.assentDetected". Records that deterministic text recognition found likely assent in the human turn immediately following a root Autopilot permission request that was blocked because no interactive response was available. This event grants no authority; its model-facing projection only suggests retrying the unchanged operation.
+ * Session event "permission.assentDetected". Historical decode-only contextual-assent marker. Current runtimes do not project it into the conversation or permission flow.
  */
 /** @experimental */
 export interface PermissionAssentDetectedEvent {
@@ -9869,7 +9948,7 @@ export interface PermissionAssentDetectedEvent {
     type: "permission.assentDetected";
 }
 /**
- * Records that deterministic text recognition found likely assent in the human turn immediately following a root Autopilot permission request that was blocked because no interactive response was available. This event grants no authority; its model-facing projection only suggests retrying the unchanged operation.
+ * Historical decode-only contextual-assent marker. Current runtimes do not project it into the conversation or permission flow.
  */
 /** @experimental */
 export interface PermissionAssentDetectedData {
@@ -9887,7 +9966,7 @@ export interface PermissionAssentDetectedData {
     turnIndex: number;
 }
 /**
- * Session event "permission.contextualAuthorization". Freezes a blinded contextual authorization proposal whose verbatim human span was deterministically bound to the immediately preceding blocked permission request. The event carries no action fields; replay re-derives the exact action from the earlier permission request and mints a one-shot message grant only when the binding and span still verify.
+ * Session event "permission.contextualAuthorization". Historical decode-only contextual authorization claim. Current runtimes preserve the payload but do not establish authority from it.
  */
 /** @experimental */
 export interface PermissionContextualAuthorizationEvent {
@@ -9918,7 +9997,7 @@ export interface PermissionContextualAuthorizationEvent {
     type: "permission.contextualAuthorization";
 }
 /**
- * Freezes a blinded contextual authorization proposal whose verbatim human span was deterministically bound to the immediately preceding blocked permission request. The event carries no action fields; replay re-derives the exact action from the earlier permission request and mints a one-shot message grant only when the binding and span still verify.
+ * Historical decode-only contextual authorization claim. Current runtimes preserve the payload but do not establish authority from it.
  */
 /** @experimental */
 export interface PermissionContextualAuthorizationData {
@@ -11577,15 +11656,15 @@ export interface BackgroundTasksChangedEvent {
 export interface BackgroundTasksChangedData {
 }
 /**
- * Session event "factory.run_updated". Ephemeral invalidation signal for a changed factory run.
+ * Session event "workflow.run_updated". Ephemeral invalidation signal for a changed workflow run.
  */
 /** @experimental */
-export interface FactoryRunUpdatedEvent {
+export interface WorkflowRunUpdatedEvent {
     /**
      * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
      */
     agentId?: string;
-    data: FactoryRunUpdatedData;
+    data: WorkflowRunUpdatedData;
     /**
      * Always true for events that are transient and not persisted to the session event log on disk.
      */
@@ -11603,34 +11682,34 @@ export interface FactoryRunUpdatedEvent {
      */
     timestamp: string;
     /**
-     * Type discriminator. Always "factory.run_updated".
+     * Type discriminator. Always "workflow.run_updated".
      */
-    type: "factory.run_updated";
+    type: "workflow.run_updated";
 }
 /**
- * Ephemeral invalidation signal for a changed factory run.
+ * Ephemeral invalidation signal for a changed workflow run.
  */
 /** @experimental */
-export interface FactoryRunUpdatedData {
+export interface WorkflowRunUpdatedData {
     /**
      * Monotonic revision now available for the run.
      */
     revision: number;
     /**
-     * Factory run identifier.
+     * Workflow run identifier.
      */
     runId: string;
 }
 /**
- * Session event "factory.run_started". Ephemeral signal that a factory run attempt began executing.
+ * Session event "workflow.run_started". Ephemeral signal that a workflow run attempt began executing.
  */
 /** @experimental */
-export interface FactoryRunStartedEvent {
+export interface WorkflowRunStartedEvent {
     /**
      * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
      */
     agentId?: string;
-    data: FactoryRunStartedData;
+    data: WorkflowRunStartedData;
     /**
      * Always true for events that are transient and not persisted to the session event log on disk.
      */
@@ -11648,38 +11727,38 @@ export interface FactoryRunStartedEvent {
      */
     timestamp: string;
     /**
-     * Type discriminator. Always "factory.run_started".
+     * Type discriminator. Always "workflow.run_started".
      */
-    type: "factory.run_started";
+    type: "workflow.run_started";
 }
 /**
- * Ephemeral signal that a factory run attempt began executing.
+ * Ephemeral signal that a workflow run attempt began executing.
  */
 /** @experimental */
-export interface FactoryRunStartedData {
+export interface WorkflowRunStartedData {
     /**
      * Attempt number this start committed; a resumed run increments it.
      */
     attempt: number;
     /**
-     * Name of the factory this run executes. Low cardinality by construction.
+     * Identifier of the workflow run that started.
      */
-    factoryName: string;
+    runId: string;
     /**
-     * Identifier of the factory run that started.
+     * Name of the workflow this run executes. Low cardinality by construction.
      */
-    runId: string;
+    workflowName: string;
 }
 /**
- * Session event "factory.run_settled". Ephemeral signal that a factory run reached a terminal status.
+ * Session event "workflow.run_settled". Ephemeral signal that a workflow run reached a terminal status.
  */
 /** @experimental */
-export interface FactoryRunSettledEvent {
+export interface WorkflowRunSettledEvent {
     /**
      * Sub-agent instance identifier. Absent for events from the root/main agent and session-level events.
      */
     agentId?: string;
-    data: FactoryRunSettledData;
+    data: WorkflowRunSettledData;
     /**
      * Always true for events that are transient and not persisted to the session event log on disk.
      */
@@ -11697,15 +11776,15 @@ export interface FactoryRunSettledEvent {
      */
     timestamp: string;
     /**
-     * Type discriminator. Always "factory.run_settled".
+     * Type discriminator. Always "workflow.run_settled".
      */
-    type: "factory.run_settled";
+    type: "workflow.run_settled";
 }
 /**
- * Ephemeral signal that a factory run reached a terminal status.
+ * Ephemeral signal that a workflow run reached a terminal status.
  */
 /** @experimental */
-export interface FactoryRunSettledData {
+export interface WorkflowRunSettledData {
     /**
      * AI credits this run consumed, in nano-AIU.
      */
@@ -11719,14 +11798,14 @@ export interface FactoryRunSettledData {
      */
     elapsedMs: number;
     /**
-     * Typed failure class recorded on the run, when it failed with one (e.g. `factory_limit_reached`).
+     * Typed failure class recorded on the run, when it failed with one (e.g. `workflow_limit_reached`).
      */
     failureType?: string;
     /**
-     * Identifier of the factory run that settled.
+     * Identifier of the workflow run that settled.
      */
     runId: string;
-    status: FactoryRunSettledStatus;
+    status: WorkflowRunSettledStatus;
 }
 /**
  * Session event "session.skills_loaded". Payload of `session.skills_loaded` listing resolved skill metadata.