@github/copilot-sdk 1.0.15-unstable.35395657398.gad69ee1 → 1.0.15

package/dist/generated/rpc.js

@@ -39,6 +39,15 @@ function createServerRpc(connection) {
       getBuiltInCatalog: async () => connection.sendRequest("models.getBuiltInCatalog", {})
     },
     /** @experimental */
+    sandbox: {
+      /**
+       * Reports whether the host running this runtime can run the command sandbox, without starting a session or spawning a sandboxed command.
+       *
+       * @returns Whether the host running this runtime can run the command sandbox. The runtime checks `supported` once per process. A capability answer can change while the process runs, for example after the user installs a missing package.
+       */
+      getHostSupport: async () => connection.sendRequest("sandbox.getHostSupport", {})
+    },
+    /** @experimental */
     tools: {
       /**
        * Lists built-in tools available for a model.
@@ -159,7 +168,74 @@ function createServerRpc(connection) {
        *
        * @returns Outcome of an mcp.planInstall call: either a normalised plan, or one typed refusal. Nothing is written in either case.
        */
-      planInstall: async (params) => connection.sendRequest("mcp.planInstall", params)
+      planInstall: async (params) => connection.sendRequest("mcp.planInstall", params),
+      /**
+       * Consumes a bound catalogue plan and retains one exact fully resolved personal remote MCP operation requiring no supplied values or configured secrets. Returns its runtime operation ID and original expiry before any confirmation, activation, writer initialisation or installation effect. Register the original connection, operation and selected-session binding before calling applyInstall. Missing lower owned admission is unavailable, never a raw-config fallback.
+       *
+       * @param params Side-effect-free preparation of one original bound remote MCP choice.
+       *
+       * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+       */
+      prepareInstall: async (params) => connection.sendRequest("mcp.prepareInstall", params),
+      /**
+       * Consumes a retained prepared MCP operation once, revalidates its original authority, requests explicit human consent through installations.confirm on the original connection, then revalidates source and applies the sealed transaction. An uncertain result requires original-operation inspection or recovery, never replay.
+       *
+       * @param params Applies exactly one previously prepared operation on its original connection.
+       *
+       * @returns An installation result together with the exact honoured contract, or a negotiation refusal.
+       */
+      applyInstall: async (params) => connection.sendRequest("mcp.applyInstall", params),
+      /**
+       * Prepares a read-only removal plan for an exact owned receipt under the selected existing session. Returns the original operation ID before confirmation; neither planning nor abandonment changes configuration or shared OAuth credentials.
+       *
+       * @param params Read-only preparation of one owned removal under fresh selected-session authority.
+       *
+       * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+       */
+      planUninstall: async (params) => connection.sendRequest("mcp.planUninstall", params),
+      /**
+       * Consumes the original owned-removal plan once and requests fresh exact human confirmation on its original connection. Drift is refused; unrelated manual configuration and shared OAuth credentials are preserved.
+       *
+       * @param params One-use application of the exact retained removal plan.
+       *
+       * @returns An installation result together with the exact honoured contract, or a negotiation refusal.
+       */
+      applyUninstall: async (params) => connection.sendRequest("mcp.applyUninstall", params),
+      /** @experimental */
+      installations: {
+        /**
+         * Reads receipt-owned MCP inventory for the selected account and host without activating servers or reconstructing missing ownership. Configuration ownership does not prove session-specific usability.
+         *
+         * @param params New-work inventory or recovery request under an explicitly selected existing session.
+         *
+         * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+         */
+        list: async (params) => connection.sendRequest("mcp.installations.list", params),
+        /**
+         * Reconciles already-confirmed durable MCP transactions, then inspects owned inventory. Does not replay apply or reconstruct deleted ownership metadata; unresolved or unsafe evidence remains an explicit refusal.
+         *
+         * @param params New-work inventory or recovery request under an explicitly selected existing session.
+         *
+         * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+         */
+        recover: async (params) => connection.sendRequest("mcp.installations.recover", params),
+        /**
+         * Inspects a known operation only on its original connection. Remains available after account or selected-session loss; does not acquire new authority or rebind an operation.
+         *
+         * @param params Existing-operation control. A new session selector is deliberately not accepted.
+         *
+         * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+         */
+        status: async (params) => connection.sendRequest("mcp.installations.status", params),
+        /**
+         * Requests cancellation of a known operation on its original connection, including before apply or confirmation. Already-started effects retain their transaction lease and report an honest terminal or recovery outcome.
+         *
+         * @param params Existing-operation control. A new session selector is deliberately not accepted.
+         *
+         * @returns Management result with contract receipt, or a typed request/negotiation refusal.
+         */
+        cancel: async (params) => connection.sendRequest("mcp.installations.cancel", params)
+      }
     },
     /** @experimental */
     extensions: {
@@ -182,6 +258,115 @@ function createServerRpc(connection) {
        */
       disable: async (params) => connection.sendRequest("extensions.disable", params)
     },
+    /** @experimental */
+    skills: {
+      /**
+       * Plans installation of a verified Agent Finder Skill candidate without writing files. The returned review is safe to present to a user and installing always leaves the Skill disabled until separately enabled.
+       *
+       * @param params Side-effect-free planning of one verified Agent Finder Skill candidate.
+       *
+       * @returns Skill installation management result with the honoured contract, or a typed refusal.
+       */
+      planInstall: async (params) => connection.sendRequest("skills.planInstall", params),
+      /**
+       * Consumes one verified Skill installation plan, requests explicit human consent through installations.confirm on the original connection, then revalidates and installs the Skill disabled.
+       *
+       * @param params Applies exactly one retained verified Skill installation plan.
+       *
+       * @returns Skill installation result with the honoured contract, or a typed request/negotiation refusal.
+       */
+      applyInstall: async (params) => connection.sendRequest("skills.applyInstall", params),
+      /** @experimental */
+      installations: {
+        /**
+         * Lists owned verified Agent Finder Skill installations for the selected existing session. Listing is never gated by the Skill-install feature flag.
+         *
+         * @param params Inventory request under an explicitly selected existing session.
+         *
+         * @returns Skill installation management result with the honoured contract, or a typed refusal.
+         */
+        list: async (params) => connection.sendRequest("skills.installations.list", params),
+        /**
+         * Reconciles interrupted owned Skill installation work for the selected existing session, then inspects owned inventory. Recovery is never gated by the Skill-install feature flag.
+         *
+         * @param params Inventory request under an explicitly selected existing session.
+         *
+         * @returns Skill installation management result with the honoured contract, or a typed refusal.
+         */
+        recover: async (params) => connection.sendRequest("skills.installations.recover", params),
+        /**
+         * Inspects a known Skill installation operation on its original runtime connection. Status is never gated by the Skill-install feature flag.
+         *
+         * @param params Existing-operation control. A new session selector is deliberately not accepted.
+         *
+         * @returns Skill installation management result with the honoured contract, or a typed refusal.
+         */
+        status: async (params) => connection.sendRequest("skills.installations.status", params),
+        /**
+         * Requests cancellation of a known Skill installation operation before commit. Already-started durable work requires recovery instead of silent replay.
+         *
+         * @param params Existing-operation control. A new session selector is deliberately not accepted.
+         *
+         * @returns Skill installation management result with the honoured contract, or a typed refusal.
+         */
+        cancel: async (params) => connection.sendRequest("skills.installations.cancel", params),
+        /**
+         * Atomically persists enablement for one owned Agent Finder Skill and reconciles the selected bound session. Enablement is installation-scoped by receipt identity and is never gated by the Skill-install feature flag.
+         *
+         * @param params Persisted enablement update for one owned Skill installation.
+         *
+         * @returns Skill installation management result with the honoured contract, or a typed refusal.
+         */
+        setEnabled: async (params) => connection.sendRequest("skills.installations.setEnabled", params)
+      },
+      /**
+       * Prepares a read-only removal plan for an owned verified Agent Finder Skill installation. Uninstall planning is never gated by the Skill-install feature flag.
+       *
+       * @param params Read-only preparation of one owned Skill removal under fresh selected-session authority.
+       *
+       * @returns Skill installation management result with the honoured contract, or a typed refusal.
+       */
+      planUninstall: async (params) => connection.sendRequest("skills.planUninstall", params),
+      /**
+       * Consumes an owned Skill removal plan, requests explicit human consent through installations.confirm, refuses drift, and removes the exact owned files through quarantine.
+       *
+       * @param params One-use application of the exact retained Skill removal plan.
+       *
+       * @returns Skill installation result with the honoured contract, or a typed request/negotiation refusal.
+       */
+      applyUninstall: async (params) => connection.sendRequest("skills.applyUninstall", params),
+      /** @experimental */
+      config: {
+        /**
+         * Replaces the global list of disabled skills.
+         *
+         * @param params Skill names to mark as disabled in global configuration, replacing any previous list.
+         */
+        setDisabledSkills: async (params) => connection.sendRequest("skills.config.setDisabledSkills", params),
+        /**
+         * Atomically adds or removes one skill from the disabled list.
+         *
+         * @param params Adds or removes a single skill from the global disabled list, leaving every other entry untouched.
+         */
+        setSkillDisabled: async (params) => connection.sendRequest("skills.config.setSkillDisabled", params)
+      },
+      /**
+       * Discovers skills across global and project sources.
+       *
+       * @param params Optional project paths and additional skill directories to include in discovery.
+       *
+       * @returns Skills discovered across global and project sources.
+       */
+      discover: async (params) => connection.sendRequest("skills.discover", params),
+      /**
+       * Returns the canonical directories where a client may create skills that the runtime will recognize, including ones that do not exist yet. Project directories become active once created.
+       *
+       * @param params Optional project paths to enumerate.
+       *
+       * @returns Canonical locations where skills can be created so the runtime will recognize them.
+       */
+      getDiscoveryPaths: async (params) => connection.sendRequest("skills.getDiscoveryPaths", params)
+    },
     /**
      * Registers the calling SDK client as the per-entrypoint extension launch provider. Call before creating any sessions. When omitted, the runtime uses its built-in extension launcher.
      *
@@ -197,7 +382,15 @@ function createServerRpc(connection) {
        *
        * @returns Outcome of a catalog.search call: either bounded inert candidates, or one typed refusal. Never a partial success.
        */
-      search: async (params) => connection.sendRequest("catalog.search", params)
+      search: async (params) => connection.sendRequest("catalog.search", params),
+      /**
+       * Terminates one retained catalog selection group. A selected outcome returns the native host a fresh single-use candidate handle plus the original searchId for a later explicit mcp.planInstall call; non-selected outcomes release the group without producing a planning input. Candidate state, cards, URLs, credentials and private identifiers remain inside the runtime. The model-facing catalog_select tool projects the result separately and never exposes the candidate handle or searchId.
+       *
+       * @param params Terminates one retained catalog selection group through an opaque reference previously returned by the model-safe search projection.
+       *
+       * @returns Typed outcome of catalog.select. Only the selected host result carries a fresh candidate handle; the model-facing projection removes both that handle and searchId.
+       */
+      select: async (params) => connection.sendRequest("catalog.select", params)
     },
     /** @experimental */
     plugins: {
@@ -299,40 +492,6 @@ function createServerRpc(connection) {
       }
     },
     /** @experimental */
-    skills: {
-      /** @experimental */
-      config: {
-        /**
-         * Replaces the global list of disabled skills.
-         *
-         * @param params Skill names to mark as disabled in global configuration, replacing any previous list.
-         */
-        setDisabledSkills: async (params) => connection.sendRequest("skills.config.setDisabledSkills", params),
-        /**
-         * Atomically adds or removes one skill from the disabled list.
-         *
-         * @param params Adds or removes a single skill from the global disabled list, leaving every other entry untouched.
-         */
-        setSkillDisabled: async (params) => connection.sendRequest("skills.config.setSkillDisabled", params)
-      },
-      /**
-       * Discovers skills across global and project sources.
-       *
-       * @param params Optional project paths and additional skill directories to include in discovery.
-       *
-       * @returns Skills discovered across global and project sources.
-       */
-      discover: async (params) => connection.sendRequest("skills.discover", params),
-      /**
-       * Returns the canonical directories where a client may create skills that the runtime will recognize, including ones that do not exist yet. Project directories become active once created.
-       *
-       * @param params Optional project paths to enumerate.
-       *
-       * @returns Canonical locations where skills can be created so the runtime will recognize them.
-       */
-      getDiscoveryPaths: async (params) => connection.sendRequest("skills.getDiscoveryPaths", params)
-    },
-    /** @experimental */
     agents: {
       /**
        * Discovers custom agents across user, project, plugin, and remote sources.
@@ -428,7 +587,7 @@ function createServerRpc(connection) {
       /**
        * Registers an SDK client as the session filesystem provider.
        *
-       * @param params Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider.
+       * @param params Initial working directory, session-state path layout, and path conventions used to register the calling SDK client as the session filesystem provider. A registered provider is authoritative for path interpretation and filesystem facts used by workspace permission validation. Paths are interpreted lexically; home-relative paths (`~` and `~/...`) and Windows drive-relative paths such as `C:foo` are unsupported. Until provider-side canonicalization is supported, providers must not expose symlinks inside allowed roots that escape those roots.
        *
        * @returns Indicates whether the calling client was registered as the session filesystem provider.
        */
@@ -737,6 +896,17 @@ function createInternalServerRpc(connection) {
        * @param params Params to attach or detach an in-process ExtensionController delegate.
        */
       configureSessionExtensions: async (params) => connection.sendRequest("sessions.configureSessionExtensions", params)
+    },
+    /** @experimental */
+    accounts: {
+      /**
+       * Acquire a Microsoft Entra access token through the runtime's OneAuth broker. Account-scoped because it uses the same native broker as the account stack: a trusted host application mints a scoped Entra token for its own use, most notably to authenticate to a remote MCP server whose authorization server is Entra ID (in place of the generic browser-OAuth flow).
+       *
+       * @param params OneAuth token request supplied by a trusted host application.
+       *
+       * @returns Result of a OneAuth token acquisition.
+       */
+      acquireEntraToken: async (params) => connection.sendRequest("accounts.acquireEntraToken", params)
     }
   };
 }
@@ -839,6 +1009,58 @@ function createSessionRpc(connection, sessionId) {
       setCredentials: async (params) => connection.sendRequest("session.gitHubAuth.setCredentials", { sessionId, ...params })
     },
     /** @experimental */
+    accounts: {
+      /**
+       * Enumerate a typed accounts collection: the signed-in accounts, or the providers offered for interactive login.
+       *
+       * @param params Enumerate request carrying the typed collection query.
+       *
+       * @returns The enumerated collection, keyed by the same selector as the query.
+       */
+      enumerate: async (params) => connection.sendRequest("session.accounts.enumerate", { sessionId, ...params }),
+      /**
+       * Read one typed accounts datum: the active account, a neutral status summary, or the last authentication errors.
+       *
+       * @param params Read request carrying the typed datum query.
+       *
+       * @returns The read result, keyed by the same selector as the query.
+       */
+      get: async (params) => connection.sendRequest("session.accounts.get", { sessionId, ...params }),
+      /**
+       * Apply one non-interactive accounts mutation: switch the active account, log an account out, or set credentials from a token.
+       *
+       * @param params Mutation request carrying the typed write command.
+       *
+       * @returns Result of a non-interactive accounts mutation.
+       */
+      set: async (params) => connection.sendRequest("session.accounts.set", { sessionId, ...params }),
+      /** @experimental */
+      login: {
+        /**
+         * Begin an interactive login flow for a provider kind (dispatch is kind-only) and return its opaque flow id and first step.
+         *
+         * @param params Begin an interactive login flow for a provider kind. Dispatch is kind-only.
+         *
+         * @returns A started login flow: its opaque id and first step.
+         */
+        begin: async (params) => connection.sendRequest("session.accounts.login.begin", { sessionId, ...params }),
+        /**
+         * Advance an in-flight login flow, optionally fulfilling an input-required step, and return the next step.
+         *
+         * @param params Advance an in-flight login flow, optionally fulfilling an input-required step.
+         *
+         * @returns One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra).
+         */
+        advance: async (params) => connection.sendRequest("session.accounts.login.advance", { sessionId, ...params }),
+        /**
+         * Cancel an in-flight login flow and release its resources.
+         *
+         * @param params Cancel an in-flight login flow.
+         */
+        cancel: async (params) => connection.sendRequest("session.accounts.login.cancel", { sessionId, ...params })
+      }
+    },
+    /** @experimental */
     debug: {
       /**
        * Collects a session debug log bundle into a local archive or staging directory. Logs are redacted by default; redaction can be configured per caller-provided diagnostic entry. The runtime includes session-owned logs by default and accepts caller-provided diagnostic entries so host applications can add their own files without changing this API shape.
@@ -890,105 +1112,105 @@ function createSessionRpc(connection, sessionId) {
       }
     },
     /** @experimental */
-    factory: {
+    workflow: {
       /**
-       * Runs a registered factory by name at the top level.
+       * Runs a registered dynamic workflow by name at the top level.
        *
-       * @param params Parameters for invoking a registered factory.
+       * @param params Parameters for invoking a registered workflow.
        *
-       * @returns Complete current or terminal factory run envelope.
+       * @returns Complete current or terminal workflow run envelope.
        */
-      run: async (params) => connection.sendRequest("session.factory.run", { sessionId, ...params }),
+      run: async (params) => connection.sendRequest("session.workflow.run", { sessionId, ...params }),
       /**
-       * Resumes a factory run using its persisted name, arguments, journal, and accounting.
+       * Resumes a dynamic workflow run using its persisted name, arguments, journal, and accounting.
        *
-       * @param params Parameters for resuming a factory run from its persisted identity.
+       * @param params Parameters for resuming a workflow run from its persisted identity.
        *
-       * @returns Resolved persisted factory identity and resumed run envelope.
+       * @returns Resolved persisted workflow identity and resumed run envelope.
        */
-      resume: async (params) => connection.sendRequest("session.factory.resume", { sessionId, ...params }),
+      resume: async (params) => connection.sendRequest("session.workflow.resume", { sessionId, ...params }),
       /**
-       * Gets the current or settled envelope for a factory run.
+       * Gets the current or settled envelope for a dynamic workflow run.
        *
-       * @param params Parameters for retrieving a factory run.
+       * @param params Parameters for retrieving a workflow run.
        *
-       * @returns Complete current or terminal factory run envelope.
+       * @returns Complete current or terminal workflow run envelope.
        */
-      getRun: async (params) => connection.sendRequest("session.factory.getRun", { sessionId, ...params }),
+      getRun: async (params) => connection.sendRequest("session.workflow.getRun", { sessionId, ...params }),
       /**
-       * Lists durable factory runs for this session in creation order.
+       * Lists durable dynamic workflow runs for this session in creation order.
        *
-       * @param params Parameters for paging factory runs.
+       * @param params Parameters for paging workflow runs.
        *
-       * @returns A page of factory runs in durable creation order.
+       * @returns A page of workflow runs in durable creation order.
        */
-      listRuns: async (params) => connection.sendRequest("session.factory.listRuns", { sessionId, ...params }),
+      listRuns: async (params) => connection.sendRequest("session.workflow.listRuns", { sessionId, ...params }),
       /**
-       * Gets durable and live observability detail for one factory run.
+       * Gets durable and live observability detail for one dynamic workflow run.
        *
-       * @param params Parameters for retrieving a factory run.
+       * @param params Parameters for retrieving a workflow run.
        *
-       * @returns Full factory run observability detail.
+       * @returns Full workflow run observability detail.
        */
-      getRunDetail: async (params) => connection.sendRequest("session.factory.getRunDetail", { sessionId, ...params }),
+      getRunDetail: async (params) => connection.sendRequest("session.workflow.getRunDetail", { sessionId, ...params }),
       /**
-       * Pages durable progress for one factory run.
+       * Pages durable progress for one dynamic workflow run.
        *
-       * @param params Parameters for paging factory progress.
+       * @param params Parameters for paging workflow progress.
        *
-       * @returns A bidirectional page of factory progress.
+       * @returns A bidirectional page of workflow progress.
        */
-      getRunProgress: async (params) => connection.sendRequest("session.factory.getRunProgress", { sessionId, ...params }),
+      getRunProgress: async (params) => connection.sendRequest("session.workflow.getRunProgress", { sessionId, ...params }),
       /**
-       * Requests cancellation of a factory run and returns its run envelope.
+       * Requests cancellation of a dynamic workflow run and returns its run envelope.
        *
-       * @param params Parameters for cancelling a factory run.
+       * @param params Parameters for cancelling a workflow run.
        *
-       * @returns Complete current or terminal factory run envelope.
+       * @returns Complete current or terminal workflow run envelope.
        */
-      cancel: async (params) => connection.sendRequest("session.factory.cancel", { sessionId, ...params }),
+      cancel: async (params) => connection.sendRequest("session.workflow.cancel", { sessionId, ...params }),
       /**
-       * Pauses a running factory and returns its settled run envelope.
+       * Pauses a running dynamic workflow and returns its settled run envelope.
        *
-       * @param params Parameters for pausing a running factory.
+       * @param params Parameters for pausing a running workflow.
        *
-       * @returns Complete current or terminal factory run envelope.
+       * @returns Complete current or terminal workflow run envelope.
        */
-      pause: async (params) => connection.sendRequest("session.factory.pause", { sessionId, ...params }),
+      pause: async (params) => connection.sendRequest("session.workflow.pause", { sessionId, ...params }),
       /**
-       * Records a batch of ordered factory progress lines.
+       * Records a batch of ordered dynamic workflow progress lines.
        *
-       * @param params Parameters for recording factory progress.
+       * @param params Parameters for recording workflow progress.
        *
-       * @returns Acknowledgement that a factory request was accepted.
+       * @returns Acknowledgement that a workflow request was accepted.
        */
-      log: async (params) => connection.sendRequest("session.factory.log", { sessionId, ...params }),
+      log: async (params) => connection.sendRequest("session.workflow.log", { sessionId, ...params }),
       /**
-       * Runs one factory-scoped subagent and returns its result.
+       * Runs one dynamic-workflow-scoped subagent and returns its result.
        *
-       * @param params Parameters for one factory-scoped subagent call.
+       * @param params Parameters for one workflow-scoped subagent call.
        *
-       * @returns Result of one factory-scoped subagent call.
+       * @returns Result of one workflow-scoped subagent call.
        */
-      agent: async (params) => connection.sendRequest("session.factory.agent", { sessionId, ...params }),
+      agent: async (params) => connection.sendRequest("session.workflow.agent", { sessionId, ...params }),
       /** @experimental */
       journal: {
         /**
-         * Reads a memoized factory journal entry.
+         * Reads a memoized dynamic workflow journal entry.
          *
-         * @param params Parameters for reading a factory journal entry.
+         * @param params Parameters for reading a workflow journal entry.
          *
-         * @returns Result of reading a factory journal entry.
+         * @returns Result of reading a workflow journal entry.
          */
-        get: async (params) => connection.sendRequest("session.factory.journal.get", { sessionId, ...params }),
+        get: async (params) => connection.sendRequest("session.workflow.journal.get", { sessionId, ...params }),
         /**
-         * Stores a memoized factory journal entry.
+         * Stores a memoized dynamic workflow journal entry.
          *
-         * @param params Parameters for storing a factory journal entry.
+         * @param params Parameters for storing a workflow journal entry.
          *
-         * @returns Acknowledgement that a factory request was accepted.
+         * @returns Acknowledgement that a workflow request was accepted.
          */
-        put: async (params) => connection.sendRequest("session.factory.journal.put", { sessionId, ...params })
+        put: async (params) => connection.sendRequest("session.workflow.journal.put", { sessionId, ...params })
       }
     },
     /** @experimental */
@@ -1287,7 +1509,20 @@ function createSessionRpc(connection, sessionId) {
        *
        * @returns Instruction sources loaded for the session, in merge order.
        */
-      getSources: async () => connection.sendRequest("session.instructions.getSources", { sessionId })
+      getSources: async () => connection.sendRequest("session.instructions.getSources", { sessionId }),
+      /**
+       * Invalidates cached custom-instruction discovery so subsequent turns and source reads observe instruction files currently on disk.
+       */
+      reload: async () => connection.sendRequest("session.instructions.reload", { sessionId })
+    },
+    /** @experimental */
+    customizations: {
+      /**
+       * Reloads all repository and user customizations for the active session: instructions, plugins and their MCP servers and hooks, custom agents, extensions, and skills. Returns diagnostics from the final skill reload.
+       *
+       * @returns Diagnostics from reloading skill definitions, with warnings and errors as separate lists.
+       */
+      reload: async () => connection.sendRequest("session.customizations.reload", { sessionId })
     },
     /** @experimental */
     fleet: {
@@ -1586,7 +1821,15 @@ function createSessionRpc(connection, sessionId) {
          */
         authenticationStateChanged: async (params) => connection.sendRequest("session.mcp.oauth.authenticationStateChanged", { sessionId, ...params }),
         /**
-         * Starts OAuth authentication for a remote MCP server.
+         * Prepares an inert, expiring owned OAuth login bound to the original session requester and exact installation. Does not activate, connect, read credentials or open a browser.
+         *
+         * @param params Effect-free preparation bound to the existing local session, requester and installation, with frozen options.
+         *
+         * @returns An inert runtime-issued login handle. Preparation alone performs no activation or OAuth work.
+         */
+        prepareLogin: async (params) => connection.sendRequest("session.mcp.oauth.prepareLogin", { sessionId, ...params }),
+        /**
+         * Starts OAuth authentication for a remote MCP server. Owned servers require the original one-use prepareLogin handle and exact installation ID; manual servers retain the existing direct login behaviour.
          *
          * @param params Remote MCP server name and optional overrides controlling reauthentication, OAuth client display name, callback success-page copy, and static OAuth client selection.
          *
@@ -1601,6 +1844,14 @@ function createSessionRpc(connection, sessionId) {
          * @returns Passive MCP OAuth probe result. `authenticated` means the server accepted the probe request while an OAuth-origin access token was attached; it does not prove the server required or independently validated that token. The probe does not make a second unauthenticated request. Failed is an expected probe-domain outcome; JSON-RPC errors are reserved for API-call failures.
          */
         probe: async (params) => connection.sendRequest("session.mcp.oauth.probe", { sessionId, ...params }),
+        /**
+         * Cancels the exact owned OAuth login issued to this original session requester, without clearing shared credentials.
+         *
+         * @param params Targets only the original prepared/applying owned login on this exact session requester.
+         *
+         * @returns Honest terminal cancellation result; persistence or recovery failures remain RPC errors.
+         */
+        cancelLogin: async (params) => connection.sendRequest("session.mcp.oauth.cancelLogin", { sessionId, ...params }),
         /**
          * Responds to a pending MCP OAuth authorization request by its request id.
          *
@@ -1697,13 +1948,187 @@ function createSessionRpc(connection, sessionId) {
       }
     },
     /** @experimental */
+    diagnostics: {
+      /**
+       * Patches configured session diagnostic sources without restarting their producers. Setting a source level to off clears its retained diagnostics and invalidates cursors selecting that source.
+       *
+       * @param params Patch session diagnostic thresholds for explicitly supplied sources.
+       *
+       * @returns Per-source session diagnostics configuration.
+       */
+      configure: async (params) => connection.sendRequest("session.diagnostics.configure", { sessionId, ...params }),
+      /**
+       * Reads a bounded batch of retained session diagnostics for the selected sources. Records are never consumed and each reader advances independently through its opaque cursor.
+       *
+       * @param params Cursor-based request for session diagnostics. The default limit is 100 (maximum 500); the default waitMs is zero (maximum 30000).
+       *
+       * @returns One cursor-addressed page of retained session diagnostics.
+       */
+      read: async (params) => connection.sendRequest("session.diagnostics.read", { sessionId, ...params })
+    },
+    /** @experimental */
+    connectors: {
+      /**
+       * Returns feature availability and bounded polling limits for the EXPERIMENTAL session connector API. This method never performs a Connector service request.
+       *
+       * @returns Feature detection and hard polling limits for the EXPERIMENTAL session connector API.
+       */
+      getCapabilities: async () => connection.sendRequest("session.connectors.getCapabilities", { sessionId }),
+      /**
+       * Returns authoritative session Connector state from current availability, pinned account selection, cached catalog, and live MCP projection without performing a Connector service request.
+       *
+       * @returns Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+       */
+      getStatus: async () => connection.sendRequest("session.connectors.getStatus", { sessionId }),
+      /**
+       * Returns the cached Connector catalog for the pinned opaque account selection, fetching it only when this session has no cached catalog.
+       *
+       * @param params Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
+       *
+       * @returns Validated Connector catalog snapshot cached by the session.
+       */
+      list: async (params) => connection.sendRequest("session.connectors.list", { sessionId, ...params }),
+      /**
+       * Refreshes and validates the Connector catalog for the pinned opaque account selection.
+       *
+       * @param params Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
+       *
+       * @returns Validated Connector catalog snapshot cached by the session.
+       */
+      refresh: async (params) => connection.sendRequest("session.connectors.refresh", { sessionId, ...params }),
+      /**
+       * Initiates an idempotent Connector connection request without opening a browser. Returns connected when the service is immediately authoritative, consent_required with a validated URL, or pending with an opaque continuation ID.
+       *
+       * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+       *
+       * @returns Typed result of initiating or continuing a Connector connection.
+       */
+      connect: async (params) => connection.sendRequest("session.connectors.connect", { sessionId, ...params }),
+      /**
+       * Re-initiates an idempotent Connector connection request without browser or UI effects, with the same typed outcomes as connect.
+       *
+       * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+       *
+       * @returns Typed result of initiating or continuing a Connector connection.
+       */
+      reconnect: async (params) => connection.sendRequest("session.connectors.reconnect", { sessionId, ...params }),
+      /**
+       * Continues a pending Connector connection with caller-supplied attempt, interval, and deadline bounds. The runtime never opens the returned consent URL.
+       *
+       * @param params Explicitly bounded continuation of a pending Connector connection.
+       *
+       * @returns Typed result of initiating or continuing a Connector connection.
+       */
+      continueConnection: async (params) => connection.sendRequest("session.connectors.continueConnection", { sessionId, ...params }),
+      /**
+       * Disconnects one Connector for the pinned opaque account selection, refreshes the authoritative catalog, and removes its session-owned MCP projection.
+       *
+       * @param params Selects one Connector and the pinned host-owned account used for its service and MCP authorization.
+       *
+       * @returns Authoritative result after disconnect and MCP reconciliation.
+       */
+      disconnect: async (params) => connection.sendRequest("session.connectors.disconnect", { sessionId, ...params }),
+      /**
+       * Reconciles the authoritative cached or freshly requested Connector catalog into the session Connector MCP projection and returns live status.
+       *
+       * @param params Requests authoritative Connector-to-MCP reconciliation for the pinned account.
+       *
+       * @returns Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+       */
+      reconcile: async (params) => connection.sendRequest("session.connectors.reconcile", { sessionId, ...params })
+    },
+    /** @experimental */
+    managedSettings: {
+      /**
+       * Waits for the live session's in-flight managed-settings application, then returns the retained effective snapshot used by runtime enforcement and by `session.managed_settings_resolved`. It does not perform another account, device, or server resolution, and rejects when resolution has not produced a snapshot.
+       *
+       * @returns Enterprise managed-settings resolution: the effective managed settings the session applied and which channels contributed, so SDK clients can show users what is enterprise-managed. Fires whenever managed policy is (re)applied — at session start, on resume, and on account switch. This is an ephemeral live snapshot (delivered to subscribers but not persisted to the session event log), because at session start it resolves before `session.start` is emitted. Device values take precedence over server values, then the policy helper, per ordinary key, while permissions compose restrictively across device, server, policy-helper, and SDK-client layers. The account-scoped `getManagedSettings()` API does not include session-local client injection. Marked experimental while the managed-settings surface stabilizes.
+       */
+      get: async () => connection.sendRequest("session.managedSettings.get", { sessionId })
+    },
+    /** @experimental */
     plugins: {
       /**
-       * Lists plugins installed for the session.
+       * Lists globally installed, live, built-in, and enterprise-managed desired plugins using the live session's authoritative account, working directory, and retained managed policy.
        *
        * @returns Plugins installed for the session, with their enabled state and version metadata.
        */
       list: async () => connection.sendRequest("session.plugins.list", { sessionId }),
+      /**
+       * Installs a plugin using the live session's authoritative account, working directory, and retained managed policy.
+       *
+       * @param params Plugin source resolved relative to the session's authoritative working directory.
+       *
+       * @returns Result of installing a plugin.
+       */
+      install: async (params) => connection.sendRequest("session.plugins.install", { sessionId, ...params }),
+      /**
+       * Uninstalls a plugin when permitted by the live session's retained managed policy.
+       *
+       * @param params Name (or spec) of the plugin to uninstall.
+       */
+      uninstall: async (params) => connection.sendRequest("session.plugins.uninstall", { sessionId, ...params }),
+      /**
+       * Updates an installed plugin using the live session's authoritative account, working directory, and retained managed policy.
+       *
+       * @param params Name (or spec) of the plugin to update.
+       *
+       * @returns Result of updating a single plugin.
+       */
+      update: async (params) => connection.sendRequest("session.plugins.update", { sessionId, ...params }),
+      /**
+       * Enables installed plugins when permitted by the live session's retained managed policy.
+       *
+       * @param params Plugin names (or specs) to enable in the session's authoritative working directory.
+       */
+      enable: async (params) => connection.sendRequest("session.plugins.enable", { sessionId, ...params }),
+      /**
+       * Disables installed plugins when permitted by the live session's retained managed policy.
+       *
+       * @param params Plugin names (or specs) to disable in the session's authoritative working directory.
+       */
+      disable: async (params) => connection.sendRequest("session.plugins.disable", { sessionId, ...params }),
+      /** @experimental */
+      marketplaces: {
+        /**
+         * Lists registered and enterprise-managed desired marketplaces using the live session's retained policy.
+         *
+         * @returns All registered marketplaces, including built-in defaults.
+         */
+        list: async () => connection.sendRequest("session.plugins.marketplaces.list", { sessionId }),
+        /**
+         * Adds a marketplace when permitted by the live session's retained managed policy.
+         *
+         * @param params Marketplace source and optional working directory for relative-path resolution.
+         *
+         * @returns Result of registering a new marketplace.
+         */
+        add: async (params) => connection.sendRequest("session.plugins.marketplaces.add", { sessionId, ...params }),
+        /**
+         * Removes a marketplace when permitted by the live session's retained managed policy.
+         *
+         * @param params Name of the marketplace to remove and an optional force flag.
+         *
+         * @returns Outcome of the remove attempt, including dependent-plugin info when applicable.
+         */
+        remove: async (params) => connection.sendRequest("session.plugins.marketplaces.remove", { sessionId, ...params }),
+        /**
+         * Browses a marketplace resolved through the live session's working directory and retained managed policy.
+         *
+         * @param params Name of the marketplace whose plugin catalog to fetch.
+         *
+         * @returns Plugins advertised by the marketplace.
+         */
+        browse: async (params) => connection.sendRequest("session.plugins.marketplaces.browse", { sessionId, ...params }),
+        /**
+         * Refreshes marketplaces resolved through the live session's working directory and retained managed policy.
+         *
+         * @param params Optional marketplace name; omit to refresh all.
+         *
+         * @returns Result of refreshing one or more marketplace catalogs.
+         */
+        refresh: async (params) => connection.sendRequest("session.plugins.marketplaces.refresh", { sessionId, ...params })
+      },
       /**
        * Reloads the session's plugin set, refreshing MCP servers, custom agents, hooks, and skills cache so SDK-driven changes via `server.plugins.*` take effect immediately.
        *
@@ -1728,7 +2153,15 @@ function createSessionRpc(connection, sessionId) {
        *
        * @returns The selectable model entries synthesized for the models added by this call.
        */
-      add: async (params) => connection.sendRequest("session.provider.add", { sessionId, ...params })
+      add: async (params) => connection.sendRequest("session.provider.add", { sessionId, ...params }),
+      /**
+       * Atomically updates the session's BYOK provider and model registry by applying the supplied snapshot, replacing existing entries, updating models, or removing entries absent from the snapshot.
+       *
+       * @param params Authoritative BYOK provider and model registry snapshot to apply atomically to the session.
+       *
+       * @returns The selectable model entries and selection ids synthesized for the synchronized BYOK models.
+       */
+      sync: async (params) => connection.sendRequest("session.provider.sync", { sessionId, ...params })
     },
     /** @experimental */
     options: {
@@ -2054,9 +2487,9 @@ function createSessionRpc(connection, sessionId) {
        */
       setRequired: async (params) => connection.sendRequest("session.permissions.setRequired", { sessionId, ...params }),
       /**
-       * Clears session-scoped tool permission approvals.
+       * Clears session-scoped tool approvals and, for full resets, exact session-approved paths.
        *
-       * @param params Clears session-scoped tool permission approvals, and optionally the location-scoped ones.
+       * @param params Clears session-scoped tool approvals and optionally clears location-scoped approvals and exact session-approved paths.
        *
        * @returns Indicates whether the operation succeeded.
        */
@@ -2072,9 +2505,9 @@ function createSessionRpc(connection, sessionId) {
       /** @experimental */
       paths: {
         /**
-         * Returns the session's allowed directories and primary working directory.
+         * Returns the session's recursive directory grants, exact session-approved paths, and primary working directory.
          *
-         * @returns Snapshot of the session's allow-listed directories and primary working directory.
+         * @returns Snapshot of the session's recursive directory grants, exact session-approved paths, and primary working directory.
          */
         list: async () => connection.sendRequest("session.permissions.paths.list", { sessionId }),
         /**
@@ -2412,6 +2845,22 @@ function createSessionRpc(connection, sessionId) {
        * @returns Result of editing a queued message.
        */
       updateText: async (params) => connection.sendRequest("session.queue.updateText", { sessionId, ...params }),
+      /**
+       * Atomically withdraws an unchanged user message of a local session: from the queued or steering lane while unconsumed, or from the running turn it started while the model has not answered it and nothing the user sent after it is pending. Withdrawing from the running turn interrupts that turn and removes its events from history. A client retaining the original draft may restore it only when removed is true.
+       *
+       * @param params Conditional withdrawal of a single user message, from its queue or from the running turn it started.
+       *
+       * @returns Result of withdrawing a user message.
+       */
+      withdrawMessage: async (params) => connection.sendRequest("session.queue.withdrawMessage", { sessionId, ...params }),
+      /**
+       * Atomically appends text and attachments to an unchanged, unconsumed local steering message. Returns updated=false if delivery or withdrawal already claimed the message.
+       *
+       * @param params Append to one pending steering message without changing its identity or delivery position.
+       *
+       * @returns Result of editing a queued message.
+       */
+      appendSteering: async (params) => connection.sendRequest("session.queue.appendSteering", { sessionId, ...params }),
       /**
        * Duplicates an addressable queued item immediately after its source.
        *
@@ -2641,29 +3090,29 @@ function createInternalSessionRpc(connection, sessionId) {
       }
     },
     /** @experimental */
-    factory: {
+    workflow: {
       /**
-       * Internal tool-originated factory invocation.
+       * Internal tool-originated dynamic workflow invocation.
        *
-       * @param params Internal parameters for invoking a registered factory from a tool.
+       * @param params Internal parameters for invoking a registered workflow from a tool.
        *
-       * @returns Complete current or terminal factory run envelope.
+       * @returns Complete current or terminal workflow run envelope.
        */
-      runFromTool: async (params) => connection.sendRequest("session.factory.runFromTool", { sessionId, ...params }),
+      runFromTool: async (params) => connection.sendRequest("session.workflow.runFromTool", { sessionId, ...params }),
       /**
-       * Internal tool-originated factory resume.
+       * Internal tool-originated dynamic workflow resume.
        *
-       * @param params Internal parameters for resuming a factory run from a tool.
+       * @param params Internal parameters for resuming a workflow run from a tool.
        *
-       * @returns Resolved persisted factory identity and resumed run envelope.
+       * @returns Resolved persisted workflow identity and resumed run envelope.
        */
-      resumeFromTool: async (params) => connection.sendRequest("session.factory.resumeFromTool", { sessionId, ...params }),
+      resumeFromTool: async (params) => connection.sendRequest("session.workflow.resumeFromTool", { sessionId, ...params }),
       /**
-       * Atomically pauses an owned factory attempt at a durable checkpoint.
+       * Atomically pauses an owned dynamic workflow attempt at a durable checkpoint.
        *
        * @param params Parameters for an owned durable pause checkpoint.
        */
-      pauseAtCheckpoint: async (params) => connection.sendRequest("session.factory.pauseAtCheckpoint", { sessionId, ...params })
+      pauseAtCheckpoint: async (params) => connection.sendRequest("session.workflow.pauseAtCheckpoint", { sessionId, ...params })
     },
     /** @experimental */
     model: {
@@ -2708,6 +3157,23 @@ function createInternalSessionRpc(connection, sessionId) {
       unregisterExternalClient: async (params) => connection.sendRequest("session.mcp.unregisterExternalClient", { sessionId, ...params })
     },
     /** @experimental */
+    connectors: {
+      /**
+       * Reconciles the authoritative Connector catalog into the session MCP projection during startup with a bounded deadline and fail-closed cleanup.
+       *
+       * @param params Pins a Connector operation to one host-owned GitHub account through its opaque selection ID. Provider tokens are never accepted.
+       *
+       * @returns Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+       */
+      reconcileForStartup: async (params) => connection.sendRequest("session.connectors.reconcileForStartup", { sessionId, ...params }),
+      /**
+       * Removes the runtime-owned Connector MCP projection without changing service-side connections.
+       *
+       * @returns Authoritative session connector state. Account IDs are opaque routing identifiers and credentials are never included.
+       */
+      withdrawProjection: async () => connection.sendRequest("session.connectors.withdrawProjection", { sessionId })
+    },
+    /** @experimental */
     commands: {
       /**
        * Finalizes persistence associated with a client-applied slash-command effect.
@@ -2851,14 +3317,14 @@ function registerClientSessionApiHandlers(connection, getHandlers) {
     if (!handler) throw new Error(`No providerToken handler registered for session: ${params.sessionId}`);
     return handler.getToken(params);
   });
-  connection.onRequest("factory.execute", async (params) => {
-    const handler = getHandlers(params.sessionId).factory;
-    if (!handler) throw new Error(`No factory handler registered for session: ${params.sessionId}`);
+  connection.onRequest("workflow.execute", async (params) => {
+    const handler = getHandlers(params.sessionId).workflow;
+    if (!handler) throw new Error(`No workflow handler registered for session: ${params.sessionId}`);
     return handler.execute(params);
   });
-  connection.onRequest("factory.abort", async (params) => {
-    const handler = getHandlers(params.sessionId).factory;
-    if (!handler) throw new Error(`No factory handler registered for session: ${params.sessionId}`);
+  connection.onRequest("workflow.abort", async (params) => {
+    const handler = getHandlers(params.sessionId).workflow;
+    if (!handler) throw new Error(`No workflow handler registered for session: ${params.sessionId}`);
     return handler.abort(params);
   });
   connection.onRequest("tasks.cancel", async (params) => {
@@ -2973,6 +3439,11 @@ function registerClientGlobalApiHandlers(connection, handlers) {
     if (!handler) throw new Error("No gitHubToken client-global handler registered");
     return handler.getToken(params);
   });
+  connection.onRequest("installations.confirm", async (params) => {
+    const handler = handlers.installations;
+    if (!handler) throw new Error("No installations client-global handler registered");
+    return handler.confirm(params);
+  });
 }
 export {
   createInternalServerRpc,