@github/copilot-sdk 1.0.29-preview.7 → 1.0.29-preview.9

package/dist/client.js

@@ -1,8 +1,8 @@
 import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
-import { existsSync } from "node:fs";
+import { accessSync, constants, existsSync, statSync } from "node:fs";
 import { isIPv6, Socket } from "node:net";
-import { dirname, isAbsolute, join, resolve } from "node:path";
+import { dirname, isAbsolute, join, resolve, win32 } from "node:path";
 import {
   createMessageConnection as createRpcMessageConnection,
   ErrorCodes,
@@ -283,6 +283,10 @@ function getNodeExecPath() {
 function getBundledRuntimePath() {
   return ensureRuntimeBundle(COPILOT_CLI_VERSION);
 }
+async function getSpawnableBundledRuntimePath() {
+  const runtimePath = await getBundledRuntimePath();
+  return process.platform === "win32" ? win32.toNamespacedPath(runtimePath) : runtimePath;
+}
 class TeardownResilientStreamMessageWriter extends StreamMessageWriter {
   suppressWriteErrors = false;
   constructor(writable) {
@@ -448,19 +452,22 @@ class CopilotClient {
    */
   constructor(options = {}) {
     const conn = options._internalConnection ?? options.connection ?? CopilotClient.resolveDefaultConnection();
+    if ((conn.kind === "uri" || conn.kind === "parent-process") && options.internalTestOptions !== void 0) {
+      throw new Error("internalTestOptions requires a runtime owned by this client");
+    }
     if (conn.kind === "uri" && (options.gitHubToken !== void 0 || options.useLoggedInUser !== void 0)) {
       throw new Error(
         "gitHubToken and useLoggedInUser cannot be used with RuntimeConnection.forUri (external server manages its own auth)"
       );
     }
-    if (conn.kind === "inprocess" && options.workingDirectory !== void 0) {
+    if (conn.kind === "inprocess" && options.env !== void 0) {
       throw new Error(
-        "workingDirectory is not supported with RuntimeConnection.forInProcess(): the in-process transport hosts the runtime in this process, so honoring it would require mutating the shared process-global cwd. Change the host process's working directory before constructing the client instead."
+        "env is not supported with RuntimeConnection.forInProcess(): environment variables belong to the shared host process. Use typed client/session options or a child-process transport."
       );
     }
-    if (conn.kind === "inprocess" && options.env !== void 0) {
+    if (conn.kind === "inprocess" && options.workingDirectory !== void 0) {
       throw new Error(
-        "env is not supported with RuntimeConnection.forInProcess(): the in-process transport loads the native runtime into the shared host process, whose single environment block cannot carry per-client values. Set the variables on the host process environment instead."
+        "workingDirectory is not supported with RuntimeConnection.forInProcess(): the in-process transport hosts the runtime in this process, so honoring it would require mutating the shared process-global cwd. Set SessionConfig.workingDirectory instead."
       );
     }
     if (conn.kind === "inprocess" && options.telemetry !== void 0) {
@@ -526,6 +533,7 @@ class CopilotClient {
     const connArgs = conn.kind === "stdio" || conn.kind === "tcp" ? conn.args ?? [] : [];
     this.connectionExtraArgs = [...connArgs];
     this.options = {
+      internalTestOptions: options.internalTestOptions,
       entra: options.entra ? { ...options.entra, tokenProvider: options.entra.tokenProvider } : void 0,
       workingDirectory: options.workingDirectory ?? process.cwd(),
       logLevel: options.logLevel,
@@ -797,12 +805,17 @@ class CopilotClient {
    * Stops the CLI server and closes all active sessions.
    *
    * This method performs graceful cleanup:
-   * 1. Closes all active sessions (releases in-memory resources)
+   * 1. Closes all active sessions (releases in-memory resources); detach
+   *    requests share one shutdown timeout
    * 2. Requests runtime shutdown for SDK-owned CLI processes
    * 3. Closes the JSON-RPC connection
    * 4. Signals EOF to an owned stdio process and waits for host cleanup, then
    *    terminates the process if it does not exit within the shutdown timeout
    *
+   * In-process connections first abort active turns without a timeout. That
+   * step is outside the detach deadline, so in-process stop() can still wait
+   * indefinitely if the runtime stops answering abort requests.
+   *
    * Note: session data on disk is preserved, so sessions can be resumed later.
    * To permanently remove session data before stopping, call
    * {@link deleteSession} for each session first.
@@ -824,16 +837,31 @@ class CopilotClient {
     if (this.connectionConfig.kind === "inprocess") {
       await Promise.allSettled(activeSessions.map((session) => session.abort()));
     }
+    let detachDeadlineTimer;
+    const detachDeadline = new Promise((resolve2) => {
+      detachDeadlineTimer = setTimeout(() => resolve2("timeout"), RUNTIME_SHUTDOWN_TIMEOUT_MS);
+    });
     for (const session of activeSessions) {
       const sessionId = session.sessionId;
       let lastError = null;
+      let attempts = 0;
       for (let attempt = 1; attempt <= 3; attempt++) {
         if (this.connectionClosed) {
           lastError = null;
           break;
         }
+        attempts = attempt;
         try {
-          await session.disconnect();
+          const outcome = await Promise.race([
+            session.disconnect().then(() => "disconnected"),
+            detachDeadline
+          ]);
+          if (outcome === "timeout") {
+            lastError = new Error(
+              `session.detach did not complete within the ${RUNTIME_SHUTDOWN_TIMEOUT_MS}ms shutdown timeout`
+            );
+            break;
+          }
           lastError = null;
           break;
         } catch (error) {
@@ -851,11 +879,12 @@ class CopilotClient {
       if (lastError) {
         errors.push(
           new Error(
-            `Failed to disconnect session ${sessionId} after 3 attempts: ${lastError.message}`
+            `Failed to disconnect session ${sessionId} after ${attempts} ${attempts === 1 ? "attempt" : "attempts"}: ${lastError.message}`
           )
         );
       }
     }
+    clearTimeout(detachDeadlineTimer);
     for (const session of activeSessions) {
       session._markDisconnected();
     }
@@ -1125,7 +1154,7 @@ class CopilotClient {
    * // Session with model and tools
    * const session = await client.createSession({
    *   onPermissionRequest: approveAll,
-   *   model: "gpt-4",
+   *   model: "gpt-5.4",
    *   tools: [{
    *     name: "get_weather",
    *     description: "Get weather for a location",
@@ -2390,15 +2419,40 @@ class CopilotClient {
     };
   }
   /**
-   * Builds the environment for the spawned runtime child process (stdio/TCP): applies
-   * the auth token, connection token, `COPILOT_HOME`, keychain setting, and telemetry
-   * variables on top of the effective env. Not used by the in-process (FFI) transport,
-   * whose worker inherits the host process's ambient environment
-   * (see {@link CopilotClient.startInProcessFfi}).
+   * Builds runtime configuration for child processes and the per-host FFI snapshot.
+   * Typed auth, home, keychain, and telemetry options override the effective env.
    */
   buildRuntimeEnv() {
-    const env = { ...this.resolvedEnv };
+    const env = process.platform === "win32" ? Object.fromEntries(
+      Object.entries(this.resolvedEnv).map(([key, value]) => [
+        key.toUpperCase(),
+        value
+      ])
+    ) : { ...this.resolvedEnv };
     delete env.NODE_DEBUG;
+    const test = this.options.internalTestOptions;
+    if (test) {
+      const overrides = {
+        COPILOT_API_URL: test.copilotApiUrl,
+        COPILOT_DEBUG_GITHUB_API_URL: test.githubApiUrl,
+        HTTP_PROXY: test.proxyUrl,
+        HTTPS_PROXY: test.proxyUrl,
+        http_proxy: test.proxyUrl,
+        https_proxy: test.proxyUrl,
+        NO_PROXY: test.noProxy,
+        no_proxy: test.noProxy,
+        NODE_EXTRA_CA_CERTS: test.caCertificatePath,
+        SSL_CERT_FILE: test.caCertificatePath,
+        REQUESTS_CA_BUNDLE: test.caCertificatePath,
+        CURL_CA_BUNDLE: test.caCertificatePath,
+        GIT_SSL_CAINFO: test.caCertificatePath
+      };
+      for (const [key, value] of Object.entries(overrides)) {
+        if (value !== void 0) {
+          env[process.platform === "win32" ? key.toUpperCase() : key] = value;
+        }
+      }
+    }
     if (this.options.gitHubToken) {
       env.COPILOT_SDK_AUTH_TOKEN = this.options.gitHubToken;
     }
@@ -2407,6 +2461,9 @@ class CopilotClient {
     }
     if (this.options.baseDirectory) {
       env.COPILOT_HOME = this.options.baseDirectory;
+      if (this.connectionConfig.kind === "inprocess") {
+        env.COPILOT_CACHE_HOME = join(this.options.baseDirectory, "cache");
+      }
     }
     if (this.options.mode === "empty") {
       env.COPILOT_DISABLE_KEYTAR = "1";
@@ -2433,7 +2490,7 @@ class CopilotClient {
    * Start the CLI server process
    */
   async startCLIServer() {
-    this.resolvedCliPath ??= await getBundledRuntimePath();
+    this.resolvedCliPath ??= await getSpawnableBundledRuntimePath();
     return new Promise((resolve2, reject) => {
       this.stderrBuffer = "";
       const args = [...this.connectionExtraArgs, "--headless", "--no-auto-update"];
@@ -2471,6 +2528,22 @@ class CopilotClient {
           `Copilot CLI not found at ${this.resolvedCliPath}. Set COPILOT_CLI_PATH to use a custom installation.`
         );
       }
+      const workingDirectory = this.options.workingDirectory;
+      let workingDirectoryProblem;
+      try {
+        workingDirectoryProblem = statSync(workingDirectory).isDirectory() ? void 0 : "does not exist or is not a directory";
+        if (!workingDirectoryProblem) {
+          accessSync(workingDirectory, constants.X_OK);
+        }
+      } catch (error) {
+        const code = error.code;
+        workingDirectoryProblem = code === "ENOENT" || code === "ENOTDIR" ? "does not exist or is not a directory" : `cannot be entered: ${error instanceof Error ? error.message : String(error)}`;
+      }
+      if (workingDirectoryProblem) {
+        throw new Error(
+          `Working directory ${workingDirectory} ${workingDirectoryProblem}.`
+        );
+      }
       const stdioConfig = this.connectionConfig.kind === "stdio" ? ["pipe", "pipe", "pipe"] : ["ignore", "pipe", "pipe"];
       const isJsFile = this.resolvedCliPath.endsWith(".js");
       if (isJsFile) {
@@ -2622,16 +2695,7 @@ stderr: ${this.stderrBuffer.trim().slice(-8192) || "(empty)"}`
       runtimeLibrary = join(dirname(bundledRuntimePath), "runtime.node");
     }
     const { FfiRuntimeHost } = await import("./ffiRuntimeHost.js");
-    const environment = {};
-    if (this.options.gitHubToken) {
-      environment.COPILOT_SDK_AUTH_TOKEN = this.options.gitHubToken;
-    }
-    if (this.options.baseDirectory) {
-      environment.COPILOT_HOME = this.options.baseDirectory;
-    }
-    if (this.options.mode === "empty") {
-      environment.COPILOT_DISABLE_KEYTAR = "1";
-    }
+    const environment = this.buildRuntimeEnv();
     const args = [];
     if (this.options.logLevel) {
       args.push("--log-level", this.options.logLevel);

package/dist/generated/lifecycle-diagnostics.d.ts

@@ -116,6 +116,10 @@ export interface RuntimeLifecycleProgressStateDiagnosticEvent {
  * Experimental, observational-only state of runtime progress and the lifecycle operations that block it. Observation and delivery never control runtime or model behavior. Process death, diagnostic projection loss, transport loss, or serialization failure can prevent external delivery.
  */
 export interface RuntimeLifecycleProgressStateData {
+    /**
+     * Agent that owns this progress. Absent for the primary agent and progress without an agent owner.
+     */
+    agentId?: string;
     /**
      * Complete dependency blocker set after this progress change.
      */

package/dist/generated/rpc.d.ts

@@ -130,7 +130,7 @@ export type AuthEnumerateQuery = {
  */
 /** @experimental */
 export type LoginProviderKind = 
-/** OAuth github.com sign-in via the browser (web loopback + PKCE). */
+/** OAuth github.com sign-in, in the browser (web loopback + PKCE) or by device code — see the login method. */
 "githubDotCom"
 /** A GitHub Enterprise Cloud account — a GitHub account on a non-github.com host, e.g. *.ghe.com; the host is supplied interactively through the neutral input-required step. */
  | "proxima"
@@ -438,6 +438,18 @@ export type AuthEnumerateValue = {
      */
     kind: "loginAccounts";
 };
+/**
+ * How an interactive GitHub login is authorized.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "AuthLoginMethod".
+ */
+/** @experimental */
+export type AuthLoginMethod = 
+/** Browser authorization with a loopback callback; the flow surfaces an `open-url` step. */
+"web"
+/** OAuth device authorization; the flow surfaces a `device-code` step with a one-time code, for terminals whose browser cannot reach a loopback callback. */
+ | "device-code";
 /**
  * How an interactive provider login should choose its base identity.
  *
@@ -451,7 +463,7 @@ export type AuthLoginMode =
 /** Explicitly ask the provider to present its account-selection UI instead of serving from a retained identity. */
  | "selectAccount";
 /**
- * One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra).
+ * One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra). A device-code flow surfaces its one-time code as `device-code`; the consumer shows the code, may open the verification URI, and calls advance, which resolves once the user has authorized the device.
  *
  * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
  * via the `definition` "AuthLoginStep".
@@ -503,6 +515,27 @@ export type AuthLoginStep = {
      * Login flow step variant discriminator.
      */
     kind: "error";
+} | {
+    /**
+     * One-time code the user enters at the verification URI.
+     */
+    userCode: string;
+    /**
+     * Page where the user enters the one-time code (consumer-driven browser-open).
+     */
+    verificationUri: string;
+    /**
+     * Seconds until the one-time code expires, measured from when this step was produced. Consumers can show a countdown or pick their own timeout instead of blocking until the provider rejects the code.
+     */
+    expiresIn: number;
+    /**
+     * Minimum seconds between authorization polls required by the provider. The runtime performs the polling itself for the duration of the single `advance` call, so this is informational (for example to drive a progress indicator); repeating `advance` is rejected as already advancing.
+     */
+    interval: number;
+    /**
+     * Login flow step variant discriminator.
+     */
+    kind: "device-code";
 };
 /**
  * Disposition of a login attempt, including pending user decisions.
@@ -8248,6 +8281,10 @@ export interface AgentGetCurrentResult {
  */
 /** @experimental */
 export interface AgentInfo {
+    /**
+     * Opaque identity of the plugin owning this agent. Matches plugins.list().plugins[].id on the same runtime host. Compare the complete value without parsing it. Omitted for non-plugin agents.
+     */
+    pluginId?: string;
     /**
      * Name of the agent. Use `id` as the stable selection identifier.
      */
@@ -8971,6 +9008,10 @@ export interface AuthLoginBeginRequest {
      * The provider kind to sign in with.
      */
     kind: LoginProviderKind;
+    /**
+     * How to authorize: `web` (default) or `device-code`. Device code is offered for `githubDotCom` and `proxima`; `proxima` still asks for its host through `input-required` first.
+     */
+    method?: AuthLoginMethod;
     /**
      * Neutral identity-selection intent. Omitted is equivalent to default.
      */
@@ -10293,6 +10334,23 @@ export interface CanvasProviderUnregisterRequest {
      */
     connectionId: string;
 }
+/**
+ * Closes a canvas through its original owned or attached session namespace.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "CanvasSourceCloseRequest".
+ */
+/** @experimental */
+export interface CanvasSourceCloseRequest {
+    /**
+     * Open canvas instance identifier
+     */
+    instanceId: string;
+    /**
+     * Exact authenticated local attachment identifier. Omit for the SDK connection's owned session.
+     */
+    attachId?: number | null;
+}
 /**
  * Options scoped to the built-in CAPI (Copilot API) provider.
  *
@@ -13810,6 +13868,10 @@ export interface DiscoveredExtension {
  */
 /** @experimental */
 export interface DiscoveredExtensionPlugin {
+    /**
+     * Opaque identity of the owning plugin. Matches plugins.list().plugins[].id on the same runtime host. Compare the complete value without parsing it. May be absent on older runtimes.
+     */
+    id?: string;
     /**
      * Installed plugin name
      */
@@ -13894,6 +13956,14 @@ export interface DiscoveredHook {
      * Durable content hash used by hook enablement. Identical actions may intentionally share this key. Omitted when changing the user's disabled-hooks setting cannot change the action's current server-discovered state, including managed-policy hooks, session-start prompt actions, actions suppressed by disable-all settings, and projectless plugin actions that require project-directory expansion.
      */
     disableKey?: string;
+    /**
+     * File URI of the document defining this action on the selected runtime host, not the command or script it executes. Inline hooks point to their containing settings document or plugin manifest. Omitted for sources without a backing file, such as registry policy.
+     */
+    definitionFileUri?: string;
+    /**
+     * Opaque identity of the plugin owning this action. Matches plugins.list().plugins[].id and MCP effectiveSource.plugin.id on the same runtime host. Compare the complete value without parsing it. Omitted for non-plugin hooks.
+     */
+    pluginId?: string;
 }
 /**
  * MCP server discovered by `mcp.discover`, with config source, optional plugin source, transport type, and enabled state.
@@ -15796,6 +15866,39 @@ export interface HistorySkippedFileRestore {
      */
     reason: HistoryFileRestoreSkipReason;
 }
+/**
+ * Compaction settings for this session. Each call replaces the previous settings: an omitted field returns to its default. Settings live in memory until the session ends; re-apply them after resuming a session in a new process.
+ *
+ * This interface was referenced by `_RpcSchemaRoot`'s JSON-Schema
+ * via the `definition` "HistorySetCompactionConfigRequest".
+ */
+/** @experimental */
+export interface HistorySetCompactionConfigRequest {
+    /**
+     * Model that summarizes this session's conversation when it compacts,
+     * instead of the session's own model. Applies only when both are Copilot
+     * models the session may use; for a BYOK or provider session, or a model
+     * the session's catalog or allowed-model policy rejects, compaction
+     * summarizes on the session's model. Takes precedence over any runtime
+     * experiment that picks a compaction model. Blank values are ignored.
+     */
+    model?: string;
+    /**
+     * Summarization instruction sent as the final user message of a
+     * compaction request, replacing the built-in prompt entirely; the caller
+     * owns the summary's format. `/compact` focus instructions and a note that
+     * tools are unavailable are appended to it. Blank values are ignored.
+     */
+    prompt?: string;
+    /**
+     * Reasoning effort for compaction requests: one of `none`, `minimal`,
+     * `low`, `medium`, `high`, `xhigh` or `max`. Applies when the model that
+     * summarizes supports it; otherwise the request keeps its usual effort.
+     * Takes precedence over any runtime experiment that adjusts compaction
+     * reasoning effort. Any other value is rejected.
+     */
+    reasoningEffort?: string;
+}
 /**
  * Markdown summary of the conversation context (empty when not available).
  *
@@ -17048,6 +17151,10 @@ export interface InstalledPluginInfo {
      * Whether the plugin is currently enabled for new sessions
      */
     enabled: boolean;
+    /**
+     * Absolute local directory containing this plugin's installed content, including disabled installations. Absent when the runtime has no resolved content directory. This is the plugin root, not its marketplace directory; clients must not forward it back as an additional plugin.
+     */
+    rootPath?: string;
     /**
      * Absolute path of the marketplace directory a live plugin was resolved from. Present only on live, never-persisted records — a plugin belonging to a directory/local marketplace, which is loaded from its real directory on every pass instead of a copy under the installed-plugins cache. Its presence is what marks a listed plugin as live: such a plugin is always present on disk, so `enabled` is its only meaningful state and it is never "not installed".
      */
@@ -17080,6 +17187,10 @@ export interface InstalledPluginInfo {
      * HTTPS URL of the plugin's icon on raw.githubusercontent.com, retained from the catalogue entry it was installed from. Untrusted external content: load it without credentials. Present only for a direct install pinned to one GitHub commit whose catalogue entry had an icon.
      */
     iconUrl?: string;
+    /**
+     * Opaque plugin identity in this runtime's inventory. Matches MCP effectiveSource.plugin.id for the same plugin. Stable across enablement changes, updates and restarts while the installation source is unchanged; not a cross-host identifier or a mutation argument. Compare the complete value without parsing it. May be absent on older runtimes.
+     */
+    id?: string;
 }
 /**
  * The GitHub repository and commit an installed plugin is pinned to.
@@ -17203,6 +17314,10 @@ export interface InstructionsGetSourcesResult {
  */
 /** @experimental */
 export interface InstructionSource {
+    /**
+     * Opaque identity of the plugin owning this instruction source. Matches plugins.list().plugins[].id on the same runtime host. Compare the complete value without parsing it. Omitted for non-plugin sources.
+     */
+    pluginId?: string;
     /**
      * Unique identifier for this source (used for toggling)
      */
@@ -24205,7 +24320,7 @@ export interface PermissionsConfigureParams {
      */
     authenticatedAuthority?: AuthenticatedAuthorityUpdate;
     /**
-     * Declares whether this connection's registered permission handler applies non-human host policy to the tools this connection registered. When true, unattended Assisted Autopilot sends permission requests for those tools to the handler before runtime Assisted Approval or unattended fallback can settle them. All other requests, including shell commands, file access, URLs, and tools registered by other connections or extensions, keep runtime settlement. Managed policy and other runtime enforcement still take precedence. Only the session's owning non-extension connection may set this field. The declaration ends when that connection detaches or the session is resumed, so hosts must reapply it after resume. Omit to leave unchanged; false clears it. Without a declaration, registered handlers are not consulted during unattended Assisted Autopilot. Remote sessions are not supported.
+     * Declares whether this connection's registered permission handler applies non-human host policy to the tools and canvases this connection registered. When true, unattended Assisted Autopilot sends permission requests for those tools, and `open_canvas` and `invoke_canvas_action` requests whose target canvas this connection registered, to the handler before runtime Assisted Approval or unattended fallback can settle them. All other requests, including shell commands, file access, URLs, and tools or canvases registered by other connections or extensions, keep runtime settlement. Managed policy and other runtime enforcement still take precedence. Only the session's owning non-extension connection may set this field. The declaration ends when that connection detaches or the session is resumed, so hosts must reapply it after resume. Omit to leave unchanged; false clears it. Without a declaration, registered handlers are not consulted during unattended Assisted Autopilot. Remote sessions are not supported.
      */
     hostPolicyPermissionHandler?: boolean;
 }
@@ -24759,6 +24874,10 @@ export interface Plugin {
      * Opaque stable identity for a direct plugin source.
      */
     directSourceId?: string;
+    /**
+     * Absolute local directory containing this plugin's resolved content, including disabled installations. Absent when no content directory is resolved. This is the plugin root, not its marketplace directory; clients must not forward it back as an additional plugin.
+     */
+    rootPath?: string;
     /**
      * Absolute marketplace directory for a live plugin.
      */
@@ -24779,6 +24898,10 @@ export interface Plugin {
      * Whether this managed desired plugin has an installed or live record.
      */
     installed?: boolean;
+    /**
+     * Opaque plugin identity in this runtime's inventory. Matches global inventory id and MCP effectiveSource.plugin.id for the same plugin. Stable across enablement changes, updates and restarts while the source is unchanged. Session-only plugin identities are scoped to their session; not a cross-host identifier or a mutation argument. Compare the complete value without parsing it. May be absent on older runtimes.
+     */
+    id?: string;
 }
 /**
  * Applies exactly one retained verified Agent Plugin installation plan.
@@ -24942,7 +25065,7 @@ export interface PluginsBuiltinSetRequest {
 /** @experimental */
 export interface PluginsDisableRequest {
     /**
-     * Plugin names or "plugin@marketplace" specs to disable. Unknown names are ignored. Non-marketplace direct installs cannot be disabled via this API; uninstall them instead. Plugin-owned MCP servers are stopped in active sessions immediately; other plugin contributions remain available until each session reloads plugins.
+     * Plugin names, "plugin@marketplace" specs, or opaque directSourceId values from inventory to disable. Use directSourceId to distinguish same-named direct installations. Unknown targets and session-only plugin-directory mounts are ignored. Direct-install decisions persist on the installation record. Plugin-owned MCP servers are stopped in active sessions immediately; other plugin contributions remain available until each session reloads plugins.
      */
     names: string[];
     /**
@@ -24959,7 +25082,7 @@ export interface PluginsDisableRequest {
 /** @experimental */
 export interface PluginsEnableRequest {
     /**
-     * Plugin names or "plugin@marketplace" specs to enable. Unknown names are ignored. Non-marketplace direct installs are always enabled and cannot be toggled via this API.
+     * Plugin names, "plugin@marketplace" specs, or opaque directSourceId values from inventory to enable. Use directSourceId to distinguish same-named direct installations. Unknown targets and session-only plugin-directory mounts are ignored. Direct-install decisions persist on the installation record; active sessions must reload plugins to load newly enabled contributions.
      */
     names: string[];
     /**
@@ -28079,6 +28202,10 @@ export interface ServerInstructionSourceList {
  */
 /** @experimental */
 export interface ServerSkill {
+    /**
+     * Opaque identity of the plugin owning this skill. Matches plugins.list().plugins[].id on the same runtime host. Compare the complete value without parsing it. Omitted for non-plugin skills.
+     */
+    pluginId?: string;
     /**
      * Unique identifier for the skill
      */
@@ -30388,7 +30515,7 @@ export interface SessionsOpenProgress {
 /** @experimental */
 export interface SessionPluginsDisableRequest {
     /**
-     * Plugin names or "plugin@marketplace" specs to disable. Unknown names are ignored. Non-marketplace direct installs cannot be disabled via this API; uninstall them instead. Plugin-owned MCP servers are stopped in active sessions immediately; other plugin contributions remain available until each session reloads plugins.
+     * Plugin names, "plugin@marketplace" specs, or opaque directSourceId values from inventory to disable. Use directSourceId to distinguish same-named direct installations. This persists user-level enablement, not a session-only override. Unknown targets and session-only plugin-directory mounts are ignored. Plugin-owned MCP servers are stopped in active sessions immediately; other plugin contributions remain available until each session reloads plugins.
      */
     names: string[];
 }
@@ -30401,7 +30528,7 @@ export interface SessionPluginsDisableRequest {
 /** @experimental */
 export interface SessionPluginsEnableRequest {
     /**
-     * Plugin names or "plugin@marketplace" specs to enable. Unknown names are ignored. Non-marketplace direct installs are always enabled and cannot be toggled via this API.
+     * Plugin names, "plugin@marketplace" specs, or opaque directSourceId values from inventory to enable. Use directSourceId to distinguish same-named direct installations. This persists user-level enablement, not a session-only override. Unknown targets and session-only plugin-directory mounts are ignored; active sessions must reload plugins to load newly enabled contributions.
      */
     names: string[];
 }
@@ -32109,6 +32236,10 @@ export interface ShutdownRequest {
  */
 /** @experimental */
 export interface Skill {
+    /**
+     * Opaque identity of the plugin owning this skill. Matches plugins.list().plugins[].id on the same runtime host. Compare the complete value without parsing it. Omitted for non-plugin skills.
+     */
+    pluginId?: string;
     /**
      * Unique identifier for the skill
      */
@@ -39489,7 +39620,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
         /** @experimental */
         login: {
             /**
-             * Begin an interactive login flow for a provider kind (dispatch is kind-only) and return its opaque flow id and first step.
+             * Begin an interactive login flow for a provider kind, optionally selecting how to authorize (`method`: `web` by default, or `device-code`), and return its opaque flow id and first step.
              *
              * @param params Begin an interactive login flow for a provider kind, optionally reusing a cached base identity or explicitly requesting provider account selection.
              *
@@ -39501,7 +39632,7 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
              *
              * @param params Advance an in-flight login flow, optionally fulfilling an input-required step.
              *
-             * @returns One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra).
+             * @returns One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra). A device-code flow surfaces its one-time code as `device-code`; the consumer shows the code, may open the verification URI, and calls advance, which resolves once the user has authorized the device.
              */
             advance: (params: AuthLoginAdvanceRequest) => Promise<AuthLoginStep>;
             /**
@@ -41361,6 +41492,12 @@ export declare function createSessionRpc(connection: MessageConnection, sessionI
          * @returns Indicates whether an in-progress background compaction was cancelled.
          */
         cancelBackgroundCompaction: () => Promise<HistoryCancelBackgroundCompactionResult>;
+        /**
+         * Replaces this local session's compaction settings: the model, prompt and reasoning effort its automatic and manual compactions use. Each call replaces all three: an omitted field returns to its default. Settings are held in memory only, so re-apply them after resuming the session in a new process. A change applies to compactions that start afterwards, except that automatic compactions keep the model the running turn already chose for them until that turn ends; a compaction already in progress may still pick up a new reasoning effort. Rejects on a remote session.
+         *
+         * @param params Compaction settings for this session. Each call replaces the previous settings: an omitted field returns to its default. Settings live in memory until the session ends; re-apply them after resuming a session in a new process.
+         */
+        setCompactionConfig: (params: HistorySetCompactionConfigRequest) => Promise<void>;
         /**
          * Aborts any in-progress manual compaction on a local session.
          *

package/dist/generated/rpc.js

@@ -2600,7 +2600,7 @@ function createSessionRpc(connection, sessionId) {
       /** @experimental */
       login: {
         /**
-         * Begin an interactive login flow for a provider kind (dispatch is kind-only) and return its opaque flow id and first step.
+         * Begin an interactive login flow for a provider kind, optionally selecting how to authorize (`method`: `web` by default, or `device-code`), and return its opaque flow id and first step.
          *
          * @param params Begin an interactive login flow for a provider kind, optionally reusing a cached base identity or explicitly requesting provider account selection.
          *
@@ -2612,7 +2612,7 @@ function createSessionRpc(connection, sessionId) {
          *
          * @param params Advance an in-flight login flow, optionally fulfilling an input-required step.
          *
-         * @returns One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra).
+         * @returns One step in an interactive login flow. The consumer acts on the step and calls advance to proceed. Browser-open is encoded as two distinct steps by design: `open-url` is CONSUMER-driven (the provider surfaces the authorize URL and the consumer opens it — github.com/GHEC web), while `needs-interaction` is PROVIDER-driven (the provider opens the browser or broker UI itself and does not surface a URL — Entra). A device-code flow surfaces its one-time code as `device-code`; the consumer shows the code, may open the verification URI, and calls advance, which resolves once the user has authorized the device.
          */
         advance: async (params) => connection.sendRequest("session.accounts.login.advance", { ...params, sessionId }),
         /**
@@ -4472,6 +4472,12 @@ function createSessionRpc(connection, sessionId) {
        * @returns Indicates whether an in-progress background compaction was cancelled.
        */
       cancelBackgroundCompaction: async () => connection.sendRequest("session.history.cancelBackgroundCompaction", { sessionId }),
+      /**
+       * Replaces this local session's compaction settings: the model, prompt and reasoning effort its automatic and manual compactions use. Each call replaces all three: an omitted field returns to its default. Settings are held in memory only, so re-apply them after resuming the session in a new process. A change applies to compactions that start afterwards, except that automatic compactions keep the model the running turn already chose for them until that turn ends; a compaction already in progress may still pick up a new reasoning effort. Rejects on a remote session.
+       *
+       * @param params Compaction settings for this session. Each call replaces the previous settings: an omitted field returns to its default. Settings live in memory until the session ends; re-apply them after resuming a session in a new process.
+       */
+      setCompactionConfig: async (params) => connection.sendRequest("session.history.setCompactionConfig", { ...params, sessionId }),
       /**
        * Aborts any in-progress manual compaction on a local session.
        *
@@ -4809,6 +4815,15 @@ function createInternalSessionRpc(connection, sessionId) {
       }
     },
     /** @experimental */
+    canvasSource: {
+      /**
+       * Closes a canvas through its original session source. Requires the privately admitted in-process CLI host.
+       *
+       * @param params Closes a canvas through its original owned or attached session namespace.
+       */
+      close: async (params) => connection.sendRequest("session.canvasSource.close", { ...params, sessionId })
+    },
+    /** @experimental */
     workflow: {
       /**
        * Internal tool-originated dynamic workflow invocation.

package/dist/generated/session-events.d.ts

@@ -253,7 +253,15 @@ export type IndexedSearchDisabledReason =
 /** The Windows cloud-sync safety check failed. */
  | "cloud_sync_detection_failed"
 /** The workspace is not available on the runtime's local filesystem. */
- | "workspace_not_local";
+ | "workspace_not_local"
+/** Another process holds the machine-wide indexed-search server slot. */
+ | "server_limit"
+/** The workspace is a filesystem or network-share root. */
+ | "filesystem_root"
+/** The workspace is the user's home directory. */
+ | "home_directory"
+/** The user's home directory could not be determined. */
+ | "home_directory_detection_failed";
 /**
  * Result of an indexed-search startup attempt.
  */
@@ -14202,6 +14210,10 @@ export interface CommandQueuedData {
      * Unique identifier for this request; used to respond via session.respondToQueuedCommand()
      */
     requestId: string;
+    /**
+     * Whether a schedule dispatched this command. Consumers must reject commands marked as not schedulable before executing a scheduled request. Absent for ordinary queued commands.
+     */
+    scheduled?: boolean;
 }
 /**
  * Session event "command.execute". Registered command dispatch request routed to the owning client