@lightspeed-ai/sdk 0.4.0 → 0.5.0

package/dist/generated/methods.js

@@ -32,12 +32,12 @@ export const METHODS = [
     "environments/credentials/unbind",
     "environments/create",
     "environments/read",
+    "environments/update",
     "environments/list",
     "environments/close",
     "environments/external/create",
     "environments/ingress/put",
     "environments/power/put",
-    "environments/idle-policy/put",
     "environments/provider-bindings/list",
     "environments/provider-bindings/read",
     "environments/templates/list",
@@ -48,6 +48,8 @@ export const METHODS = [
     "environments/registration-keys/create",
     "environments/registration-keys/read",
     "environments/registration-keys/list",
+    "environments/registration-keys/update",
+    "environments/registration-keys/rotate",
     "environments/registration-keys/revoke",
     "transcriptions/start",
     "transcriptions/read",
@@ -119,6 +121,8 @@ export const METHODS = [
     "channels/pairings/list",
     "channels/pairings/delete",
     "channels/conversations/read",
+    "deployment/sessions/deleted/list",
+    "deployment/sessions/purge",
     "deployment/environment-provider-bindings/list",
     "deployment/universes/create",
     "deployment/universes/list",
@@ -135,7 +139,6 @@ export const METHODS = [
     "deployment/environment-providers/delete",
     "deployment/environment-providers/bindings/put",
     "deployment/environment-providers/bindings/delete",
-    "deployment/environments/adopt",
     "deployment/channels/accounts/list",
 ];
 export const METHOD_INFO = {
@@ -177,7 +180,7 @@ export const METHOD_INFO = {
     },
     "session/config/put": {
         scope: "universe",
-        access: { "action": "control_session", "kind": "universe" },
+        access: { "action": "configure_session", "kind": "universe" },
         summary: "Replace session configuration",
         description: "Replaces the complete sparse config while the session is idle. Use the current config revision for safe read-modify-write; omitted features are revoked, an omitted model preserves the current model, and an identical document is a no-op.",
     },
@@ -189,19 +192,19 @@ export const METHOD_INFO = {
     },
     "session/metadata/put": {
         scope: "universe",
-        access: { "action": "control_session", "kind": "universe" },
+        access: { "action": "configure_session", "kind": "universe" },
         summary: "Replace session metadata",
         description: "Replaces the complete descriptive key/value map (bounded like session/start); an omitted or empty map clears it. Record-only: the event log and updatedAtMs are untouched.",
     },
     "session/retention/put": {
         scope: "universe",
-        access: { "action": "control_session", "kind": "universe" },
+        access: { "action": "set_session_retention", "kind": "universe" },
         summary: "Replace session retention",
-        description: "Sets the positive close-relative automatic-deletion duration on a retention root, or clears it with null. Forks and delegated children inherit the root policy and cannot override it.",
+        description: "Sets the positive close-relative automatic soft-deletion duration on a retention root, or clears it with null. Forks and delegated children inherit the root policy and cannot override it. Retention does not permanently delete stored history.",
     },
     "session/close": {
         scope: "universe",
-        access: { "action": "stop_session", "kind": "universe" },
+        access: { "action": "close_session", "kind": "universe" },
         summary: "Close a session",
         description: "Closes an idle session and detaches its environment bindings. Force mode cancels active work, drops queued runs, and can recover a session whose workflow is unavailable.",
     },
@@ -209,7 +212,7 @@ export const METHOD_INFO = {
         scope: "universe",
         access: { "action": "delete_session", "kind": "universe" },
         summary: "Delete closed sessions",
-        description: "Permanently removes a closed retention-tree leaf, or its closed history-fork and delegated-child subtree when cascade is true. Config-only clones are never included.",
+        description: "Permanently deletes a closed retention-tree leaf, or its closed history-fork and delegated-child subtree when cascade is true. Set softDelete to true to hide sessions while retaining records and history until a deployment administrator purges them. Prior soft deletion is not required for permanent deletion. Config-only clones are never included.",
     },
     "session/share": {
         scope: "universe",
@@ -291,19 +294,19 @@ export const METHOD_INFO = {
     },
     "session/profiles/apply": {
         scope: "universe",
-        access: { "action": "control_session", "kind": "universe" },
+        access: { "action": "configure_session", "kind": "universe" },
         summary: "Apply a profile to a session",
         description: "Applies a named or inline profile's config, instructions, and environment setup to an existing session; mutating profile sections require it to be open and idle. Pass current revisions to guard concurrent changes.",
     },
     "session/environments/activate": {
         scope: "universe",
-        access: { "action": "control_session", "kind": "universe" },
+        access: { "action": "configure_session", "kind": "universe" },
         summary: "Activate a session environment",
         description: "Selects an attached, live universe environment for environment-targeted tools while the session is idle.",
     },
     "session/environments/deactivate": {
         scope: "universe",
-        access: { "action": "control_session", "kind": "universe" },
+        access: { "action": "configure_session", "kind": "universe" },
         summary: "Deactivate the session environment",
         description: "Clears active environment selection without changing or closing the universe environment.",
     },
@@ -329,85 +332,85 @@ export const METHOD_INFO = {
         scope: "universe",
         access: { "action": "configure_resource", "kind": "universe" },
         summary: "Create an environment",
-        description: "Records an idempotent provisioning intent against an enabled universe binding, attributed to the caller. The provider validates its provider-wide template and provisions through its backend asynchronously.",
+        description: "Creates a provisioned environment, attributed to the caller, from a template of a provider enabled for the universe. Idempotent per requestId: same inputs, same environment; others conflict. Provisioning until the target's first envd handshake, then open; idle overrides the template default.",
     },
     "environments/read": {
         scope: "universe",
         access: { "action": "read", "kind": "universe" },
         summary: "Read an environment",
-        description: "Returns the durable universe resource, source binding, logical lifecycle state, and minimal current-incarnation identity.",
+        description: "Returns one environment: its source, lifecycle state, derived display status, state message, close reason, daemon build, and the latest provider observation.",
+    },
+    "environments/update": {
+        scope: "universe",
+        access: { "action": "configure_resource", "kind": "universe" },
+        summary: "Update an environment",
+        description: "Replaces the display name and caller metadata of an environment of any kind. Refused for a closed environment.",
     },
     "environments/list": {
         scope: "universe",
         access: { "action": "read", "kind": "universe" },
         summary: "List environments",
-        description: "Lists the universe environments, optionally filtered by provider, binding, or logical lifecycle state.",
+        description: "Lists the universe environments in id order, one page at a time, optionally filtered by provider, registration key, state, or metadata. Closed environments are omitted unless includeClosed is set or state is closed. Continue from nextAfter.",
     },
     "environments/close": {
         scope: "universe",
         access: { "action": "configure_resource", "kind": "universe" },
         summary: "Close an environment",
-        description: "Records an asynchronous idempotent close intent. Provider cleanup is resumed by lifecycle reconciliation; quota is released only after Closed.",
+        description: "Closes an environment; idempotent. A provisioned environment moves to closing while Lightspeed asks its provider to remove the target, retrying until it is gone, then closed. External and registered environments close at once, and a connected registered daemon is told its environment closed.",
     },
     "environments/external/create": {
         scope: "universe",
         access: { "action": "configure_resource", "kind": "universe" },
         summary: "Register an external environment",
-        description: "Creates an environment backed by a Lightspeed-reachable envd WebSocket endpoint, attributed to the caller. Reachability is checked on demand.",
+        description: "Creates an open environment backed by a Lightspeed-reachable envd endpoint, attributed to the caller. Idempotent per requestId. Reachability is checked on use.",
     },
     "environments/ingress/put": {
         scope: "universe",
         access: { "action": "configure_resource", "kind": "universe" },
         summary: "Configure environment public ingress",
-        description: "Synchronously enables or disables one provider-authorized HTTPS endpoint for a provisioned environment. The provider owns hostname allocation, the approved guest port, routing, TLS, and health.",
+        description: "Synchronously ensures or removes public ingress of an open provisioned environment through its provider; source.publicEndpoint carries the reported endpoint. Rejected when the provider offers no ingress; an internal error, safe to retry, when the provider is unreachable or times out. The provider owns hostname, guest port, routing, TLS, and health.",
     },
     "environments/power/put": {
         scope: "universe",
         access: { "action": "configure_resource", "kind": "universe" },
-        summary: "Set environment power intent",
-        description: "Records the desired power state (running, paused, suspended, or stopped) of a provisioned environment; the lifecycle reconciler converges the provider target asynchronously. Powered-down environments wake transparently on their next use. Rejected when the provider does not support the state.",
-    },
-    "environments/idle-policy/put": {
-        scope: "universe",
-        access: { "action": "configure_resource", "kind": "universe" },
-        summary: "Set environment idle policy",
-        description: "Replaces or clears the staged idle policy of a provisioned environment. The power reaper measures the daemon's idle duration against the pause/suspend/stop/close thresholds and escalates through the stages the provider supports.",
+        summary: "Set environment power",
+        description: "Synchronously moves an open provisioned environment's target to running, paused, suspended, or stopped via its provider and records the observation; the provider may also change power on idle. Rejected without provider power control or when the template lacks the state; an internal error, safe to retry, when the provider is unreachable or times out.",
     },
     "environments/provider-bindings/list": {
         scope: "universe",
         access: { "action": "read", "kind": "universe" },
         summary: "List environment provider bindings",
-        description: "Lists this universe's revisioned routing and admission bindings to deployment-scoped physical providers.",
+        description: "Lists this universe's bindings to deployment providers and whether each is enabled.",
     },
     "environments/provider-bindings/read": {
         scope: "universe",
         access: { "action": "read", "kind": "universe" },
         summary: "Read an environment provider binding",
-        description: "Returns one universe routing and admission binding. Provider-wide templates and physical resource, network, and ingress policy remain provider-owned.",
+        description: "Returns this universe's binding to one provider. Templates and physical resource, network, and ingress policy remain provider-owned.",
     },
     "environments/templates/list": {
         scope: "universe",
         access: { "action": "read", "kind": "universe" },
         summary: "List environment templates",
-        description: "Reads immutable templates directly from the selected bound provider controller.",
+        description: "Reads templates live from the controllers of the universe's enabled provider bindings, or of one provider: compute, power states, public ingress, and default idle policy.",
     },
     "environments/templates/read": {
         scope: "universe",
         access: { "action": "read", "kind": "universe" },
         summary: "Read an environment template",
-        description: "Returns one immutable template version from the selected bound provider controller.",
+        description: "Returns one template, read live from a bound provider's controller.",
     },
     "environments/jobs/create": {
         scope: "universe",
         access: { "action": "use_resource", "kind": "universe" },
         summary: "Create environment jobs",
-        description: "Starts a dependency-aware job group on one environment instance, injecting the environment's configured credentials at provider start. requestId is the retry identity; jobs are owned by the instance rather than a session. A powered-down environment is woken on use: the call fails with environment_not_ready while the wake is in progress; retry with backoff.",
+        description: "Starts a dependency-aware job group on one environment instance, injecting its configured credentials at provider start. requestId is the retry identity; jobs are owned by the instance, not a session. A powered-down environment wakes on its data route; the call fails with environment_not_ready while it wakes or reconnects; retry with backoff.",
     },
     "environments/jobs/read": {
         scope: "universe",
         access: { "action": "read", "kind": "universe" },
         summary: "Read environment jobs",
-        description: "Reads selected job handles with bounded output, optional sequence continuation, and optional artifacts; use returned status/sequence data for polling.",
+        description: "Reads selected job handles with bounded output from a byte offset or the output tail; continue from each entry's outputNext and poll on the returned status.",
     },
     "environments/jobs/cancel": {
         scope: "universe",
@@ -419,7 +422,7 @@ export const METHOD_INFO = {
         scope: "universe",
         access: { "action": "configure_resource", "kind": "universe" },
         summary: "Mint an environment registration key",
-        description: "Creates a reusable universe-scoped key that lets outbound envd daemons register as environments. The plaintext secret is returned exactly once; only its hash is stored. Identity mode, active limit, disconnect grace, and expiry are the key's policy. Treat the secret like a cluster-join credential.",
+        description: "Creates a reusable universe-scoped key that lets outbound envd daemons register as environments. The plaintext secret is returned exactly once; only its hash is stored. Identity mode (immutable), active limit, disconnect grace, offline close-after, and expiry are the key's policy. Treat the secret like a cluster-join credential.",
     },
     "environments/registration-keys/read": {
         scope: "universe",
@@ -433,6 +436,18 @@ export const METHOD_INFO = {
         summary: "List environment registration keys",
         description: "Lists this universe's registration keys with policy, status, and derived counts. Each key is the group of the environments it admitted.",
     },
+    "environments/registration-keys/update": {
+        scope: "universe",
+        access: { "action": "configure_resource", "kind": "universe" },
+        summary: "Update an environment registration key",
+        description: "Replaces a key's editable policy: display name, active limit, disconnect grace, offline close-after, and expiry; an omitted field is unset. The identity mode is immutable. The active limit and expiry apply to later admissions; a changed disconnect grace or offline close-after applies at the next sweep to environments whose daemon is away.",
+    },
+    "environments/registration-keys/rotate": {
+        scope: "universe",
+        access: { "action": "configure_resource", "kind": "universe" },
+        summary: "Rotate an environment registration key",
+        description: "Replaces the key's secret and display prefix and retires the old secret at once. The key keeps its id, group, policy, and the environments it admitted; daemons already registered are unaffected because they never present the key again. Returns the new secret once. Refused for a revoked key.",
+    },
     "environments/registration-keys/revoke": {
         scope: "universe",
         access: { "action": "configure_resource", "kind": "universe" },
@@ -737,7 +752,7 @@ export const METHOD_INFO = {
         scope: "universe",
         access: { "action": "manage_bot", "kind": "universe" },
         summary: "Delete a bot",
-        description: "Closes the bot if needed, waits for its controller to complete, deletes the sessions it closed, and removes the record so the bot id is free again.",
+        description: "Closes the bot if needed, waits for its controller to complete, retains its session history, and removes the record so the bot id is free again.",
     },
     "bots/state/read": {
         scope: "universe",
@@ -859,6 +874,18 @@ export const METHOD_INFO = {
         summary: "Read a conversation snapshot",
         description: "Queries the conversation workflow's live state for one chat, for debugging; absent when no workflow exists yet.",
     },
+    "deployment/sessions/deleted/list": {
+        scope: "deployment",
+        access: { "kind": "deployment" },
+        summary: "List deleted sessions",
+        description: "Administrative metadata for soft-deleted sessions, ordered by session ID. Unavailable through universe-scoped methods.",
+    },
+    "deployment/sessions/purge": {
+        scope: "deployment",
+        access: { "kind": "deployment" },
+        summary: "Permanently delete a session",
+        description: "Removes a soft-deleted session and its soft-deleted history subtree. Rejects any selected session that has not been soft-deleted. Releases event, checkpoint and blob references; unreferenced blobs follow normal garbage collection. Does not delete external workspaces, environments, backups or Temporal history.",
+    },
     "deployment/environment-provider-bindings/list": {
         scope: "deployment",
         access: { "kind": "deployment" },
@@ -923,43 +950,37 @@ export const METHOD_INFO = {
         scope: "deployment",
         access: { "kind": "deployment" },
         summary: "Put an environment provider",
-        description: "Registers or replaces one deployment provider and its controller connection. The provider does not call this API or require access to Lightspeed.",
+        description: "Registers or replaces a deployment provider: controller endpoint, optional data route base, and optional bearer credential for controller and data routes (write-only: kept when omitted, removed by clearCredential, never returned). The controller is probed: a definitive refusal is invalid_request, unreachable is accepted. The provider never calls Lightspeed.",
     },
     "deployment/environment-providers/list": {
         scope: "deployment",
         access: { "kind": "deployment" },
         summary: "List environment providers",
-        description: "Returns every deployment-registered deployment provider and its controller connection.",
+        description: "Returns every deployment-registered provider with its controller endpoint, data route base, and whether a credential is stored.",
     },
     "deployment/environment-providers/read": {
         scope: "deployment",
         access: { "kind": "deployment" },
         summary: "Read an environment provider",
-        description: "Returns one deployment-registered deployment provider and its controller connection.",
+        description: "Returns one deployment-registered provider with its controller endpoint, data route base, and whether a credential is stored.",
     },
     "deployment/environment-providers/delete": {
         scope: "deployment",
         access: { "kind": "deployment" },
         summary: "Delete an environment provider",
-        description: "Deletes a deployment provider only when no universe binding references it.",
+        description: "Deletes a deployment provider only when no universe binding and no non-closed environment references it.",
     },
     "deployment/environment-providers/bindings/put": {
         scope: "deployment",
         access: { "kind": "deployment" },
         summary: "Put an environment provider binding",
-        description: "Creates or replaces one universe's complete revisioned routing and admission binding. A deployment provider may have at most one binding in a universe.",
+        description: "Creates or replaces one universe's binding to a deployment provider. Only an enabled binding admits creates, template listing, and data routes for the universe.",
     },
     "deployment/environment-providers/bindings/delete": {
         scope: "deployment",
         access: { "kind": "deployment" },
         summary: "Delete an environment provider binding",
-        description: "Deletes a universe provider binding only after every referencing environment has reached Closed.",
-    },
-    "deployment/environments/adopt": {
-        scope: "deployment",
-        access: { "kind": "deployment" },
-        summary: "Adopt a provider environment",
-        description: "Creates a universe environment by transferring an existing provider target into Lightspeed's managed lifecycle. The caller must explicitly accept ownership transfer.",
+        description: "Deletes a universe's binding to a provider only when the universe has no non-closed environment of that provider.",
     },
     "deployment/channels/accounts/list": {
         scope: "deployment",
@@ -1052,7 +1073,7 @@ export const rpc = {
     /**
      * Replace session retention
      *
-     * Sets the positive close-relative automatic-deletion duration on a retention root, or clears it with null. Forks and delegated children inherit the root policy and cannot override it.
+     * Sets the positive close-relative automatic soft-deletion duration on a retention root, or clears it with null. Forks and delegated children inherit the root policy and cannot override it. Retention does not permanently delete stored history.
      */
     sessionRetentionPut(client, params) {
         return client.call("session/retention/put", params);
@@ -1068,7 +1089,7 @@ export const rpc = {
     /**
      * Delete closed sessions
      *
-     * Permanently removes a closed retention-tree leaf, or its closed history-fork and delegated-child subtree when cascade is true. Config-only clones are never included.
+     * Permanently deletes a closed retention-tree leaf, or its closed history-fork and delegated-child subtree when cascade is true. Set softDelete to true to hide sessions while retaining records and history until a deployment administrator purges them. Prior soft deletion is not required for permanent deletion. Config-only clones are never included.
      */
     sessionDelete(client, params) {
         return client.call("session/delete", params);
@@ -1228,7 +1249,7 @@ export const rpc = {
     /**
      * Create an environment
      *
-     * Records an idempotent provisioning intent against an enabled universe binding, attributed to the caller. The provider validates its provider-wide template and provisions through its backend asynchronously.
+     * Creates a provisioned environment, attributed to the caller, from a template of a provider enabled for the universe. Idempotent per requestId: same inputs, same environment; others conflict. Provisioning until the target's first envd handshake, then open; idle overrides the template default.
      */
     environmentsCreate(client, params) {
         return client.call("environments/create", params);
@@ -1236,15 +1257,23 @@ export const rpc = {
     /**
      * Read an environment
      *
-     * Returns the durable universe resource, source binding, logical lifecycle state, and minimal current-incarnation identity.
+     * Returns one environment: its source, lifecycle state, derived display status, state message, close reason, daemon build, and the latest provider observation.
      */
     environmentsRead(client, params) {
         return client.call("environments/read", params);
     },
+    /**
+     * Update an environment
+     *
+     * Replaces the display name and caller metadata of an environment of any kind. Refused for a closed environment.
+     */
+    environmentsUpdate(client, params) {
+        return client.call("environments/update", params);
+    },
     /**
      * List environments
      *
-     * Lists the universe environments, optionally filtered by provider, binding, or logical lifecycle state.
+     * Lists the universe environments in id order, one page at a time, optionally filtered by provider, registration key, state, or metadata. Closed environments are omitted unless includeClosed is set or state is closed. Continue from nextAfter.
      */
     environmentsList(client, params) {
         return client.call("environments/list", params);
@@ -1252,7 +1281,7 @@ export const rpc = {
     /**
      * Close an environment
      *
-     * Records an asynchronous idempotent close intent. Provider cleanup is resumed by lifecycle reconciliation; quota is released only after Closed.
+     * Closes an environment; idempotent. A provisioned environment moves to closing while Lightspeed asks its provider to remove the target, retrying until it is gone, then closed. External and registered environments close at once, and a connected registered daemon is told its environment closed.
      */
     environmentsClose(client, params) {
         return client.call("environments/close", params);
@@ -1260,7 +1289,7 @@ export const rpc = {
     /**
      * Register an external environment
      *
-     * Creates an environment backed by a Lightspeed-reachable envd WebSocket endpoint, attributed to the caller. Reachability is checked on demand.
+     * Creates an open environment backed by a Lightspeed-reachable envd endpoint, attributed to the caller. Idempotent per requestId. Reachability is checked on use.
      */
     environmentsExternalCreate(client, params) {
         return client.call("environments/external/create", params);
@@ -1268,31 +1297,23 @@ export const rpc = {
     /**
      * Configure environment public ingress
      *
-     * Synchronously enables or disables one provider-authorized HTTPS endpoint for a provisioned environment. The provider owns hostname allocation, the approved guest port, routing, TLS, and health.
+     * Synchronously ensures or removes public ingress of an open provisioned environment through its provider; source.publicEndpoint carries the reported endpoint. Rejected when the provider offers no ingress; an internal error, safe to retry, when the provider is unreachable or times out. The provider owns hostname, guest port, routing, TLS, and health.
      */
     environmentsIngressPut(client, params) {
         return client.call("environments/ingress/put", params);
     },
     /**
-     * Set environment power intent
+     * Set environment power
      *
-     * Records the desired power state (running, paused, suspended, or stopped) of a provisioned environment; the lifecycle reconciler converges the provider target asynchronously. Powered-down environments wake transparently on their next use. Rejected when the provider does not support the state.
+     * Synchronously moves an open provisioned environment's target to running, paused, suspended, or stopped via its provider and records the observation; the provider may also change power on idle. Rejected without provider power control or when the template lacks the state; an internal error, safe to retry, when the provider is unreachable or times out.
      */
     environmentsPowerPut(client, params) {
         return client.call("environments/power/put", params);
     },
-    /**
-     * Set environment idle policy
-     *
-     * Replaces or clears the staged idle policy of a provisioned environment. The power reaper measures the daemon's idle duration against the pause/suspend/stop/close thresholds and escalates through the stages the provider supports.
-     */
-    environmentsIdlePolicyPut(client, params) {
-        return client.call("environments/idle-policy/put", params);
-    },
     /**
      * List environment provider bindings
      *
-     * Lists this universe's revisioned routing and admission bindings to deployment-scoped physical providers.
+     * Lists this universe's bindings to deployment providers and whether each is enabled.
      */
     environmentsProviderBindingsList(client, params) {
         return client.call("environments/provider-bindings/list", params);
@@ -1300,7 +1321,7 @@ export const rpc = {
     /**
      * Read an environment provider binding
      *
-     * Returns one universe routing and admission binding. Provider-wide templates and physical resource, network, and ingress policy remain provider-owned.
+     * Returns this universe's binding to one provider. Templates and physical resource, network, and ingress policy remain provider-owned.
      */
     environmentsProviderBindingsRead(client, params) {
         return client.call("environments/provider-bindings/read", params);
@@ -1308,7 +1329,7 @@ export const rpc = {
     /**
      * List environment templates
      *
-     * Reads immutable templates directly from the selected bound provider controller.
+     * Reads templates live from the controllers of the universe's enabled provider bindings, or of one provider: compute, power states, public ingress, and default idle policy.
      */
     environmentsTemplatesList(client, params) {
         return client.call("environments/templates/list", params);
@@ -1316,7 +1337,7 @@ export const rpc = {
     /**
      * Read an environment template
      *
-     * Returns one immutable template version from the selected bound provider controller.
+     * Returns one template, read live from a bound provider's controller.
      */
     environmentsTemplatesRead(client, params) {
         return client.call("environments/templates/read", params);
@@ -1324,7 +1345,7 @@ export const rpc = {
     /**
      * Create environment jobs
      *
-     * Starts a dependency-aware job group on one environment instance, injecting the environment's configured credentials at provider start. requestId is the retry identity; jobs are owned by the instance rather than a session. A powered-down environment is woken on use: the call fails with environment_not_ready while the wake is in progress; retry with backoff.
+     * Starts a dependency-aware job group on one environment instance, injecting its configured credentials at provider start. requestId is the retry identity; jobs are owned by the instance, not a session. A powered-down environment wakes on its data route; the call fails with environment_not_ready while it wakes or reconnects; retry with backoff.
      */
     environmentsJobsCreate(client, params) {
         return client.call("environments/jobs/create", params);
@@ -1332,7 +1353,7 @@ export const rpc = {
     /**
      * Read environment jobs
      *
-     * Reads selected job handles with bounded output, optional sequence continuation, and optional artifacts; use returned status/sequence data for polling.
+     * Reads selected job handles with bounded output from a byte offset or the output tail; continue from each entry's outputNext and poll on the returned status.
      */
     environmentsJobsRead(client, params) {
         return client.call("environments/jobs/read", params);
@@ -1348,7 +1369,7 @@ export const rpc = {
     /**
      * Mint an environment registration key
      *
-     * Creates a reusable universe-scoped key that lets outbound envd daemons register as environments. The plaintext secret is returned exactly once; only its hash is stored. Identity mode, active limit, disconnect grace, and expiry are the key's policy. Treat the secret like a cluster-join credential.
+     * Creates a reusable universe-scoped key that lets outbound envd daemons register as environments. The plaintext secret is returned exactly once; only its hash is stored. Identity mode (immutable), active limit, disconnect grace, offline close-after, and expiry are the key's policy. Treat the secret like a cluster-join credential.
      */
     environmentsRegistrationKeysCreate(client, params) {
         return client.call("environments/registration-keys/create", params);
@@ -1369,6 +1390,22 @@ export const rpc = {
     environmentsRegistrationKeysList(client, params) {
         return client.call("environments/registration-keys/list", params);
     },
+    /**
+     * Update an environment registration key
+     *
+     * Replaces a key's editable policy: display name, active limit, disconnect grace, offline close-after, and expiry; an omitted field is unset. The identity mode is immutable. The active limit and expiry apply to later admissions; a changed disconnect grace or offline close-after applies at the next sweep to environments whose daemon is away.
+     */
+    environmentsRegistrationKeysUpdate(client, params) {
+        return client.call("environments/registration-keys/update", params);
+    },
+    /**
+     * Rotate an environment registration key
+     *
+     * Replaces the key's secret and display prefix and retires the old secret at once. The key keeps its id, group, policy, and the environments it admitted; daemons already registered are unaffected because they never present the key again. Returns the new secret once. Refused for a revoked key.
+     */
+    environmentsRegistrationKeysRotate(client, params) {
+        return client.call("environments/registration-keys/rotate", params);
+    },
     /**
      * Revoke an environment registration key
      *
@@ -1772,7 +1809,7 @@ export const rpc = {
     /**
      * Delete a bot
      *
-     * Closes the bot if needed, waits for its controller to complete, deletes the sessions it closed, and removes the record so the bot id is free again.
+     * Closes the bot if needed, waits for its controller to complete, retains its session history, and removes the record so the bot id is free again.
      */
     botsDelete(client, params) {
         return client.call("bots/delete", params);
@@ -1937,6 +1974,22 @@ export const rpc = {
     channelsConversationsRead(client, params) {
         return client.call("channels/conversations/read", params);
     },
+    /**
+     * List deleted sessions
+     *
+     * Administrative metadata for soft-deleted sessions, ordered by session ID. Unavailable through universe-scoped methods.
+     */
+    deploymentSessionsDeletedList(client, params) {
+        return client.call("deployment/sessions/deleted/list", params);
+    },
+    /**
+     * Permanently delete a session
+     *
+     * Removes a soft-deleted session and its soft-deleted history subtree. Rejects any selected session that has not been soft-deleted. Releases event, checkpoint and blob references; unreferenced blobs follow normal garbage collection. Does not delete external workspaces, environments, backups or Temporal history.
+     */
+    deploymentSessionsPurge(client, params) {
+        return client.call("deployment/sessions/purge", params);
+    },
     /**
      * List a universe's deployment provider bindings
      *
@@ -2020,7 +2073,7 @@ export const rpc = {
     /**
      * Put an environment provider
      *
-     * Registers or replaces one deployment provider and its controller connection. The provider does not call this API or require access to Lightspeed.
+     * Registers or replaces a deployment provider: controller endpoint, optional data route base, and optional bearer credential for controller and data routes (write-only: kept when omitted, removed by clearCredential, never returned). The controller is probed: a definitive refusal is invalid_request, unreachable is accepted. The provider never calls Lightspeed.
      */
     deploymentEnvironmentProvidersPut(client, params) {
         return client.call("deployment/environment-providers/put", params);
@@ -2028,7 +2081,7 @@ export const rpc = {
     /**
      * List environment providers
      *
-     * Returns every deployment-registered deployment provider and its controller connection.
+     * Returns every deployment-registered provider with its controller endpoint, data route base, and whether a credential is stored.
      */
     deploymentEnvironmentProvidersList(client, params) {
         return client.call("deployment/environment-providers/list", params);
@@ -2036,7 +2089,7 @@ export const rpc = {
     /**
      * Read an environment provider
      *
-     * Returns one deployment-registered deployment provider and its controller connection.
+     * Returns one deployment-registered provider with its controller endpoint, data route base, and whether a credential is stored.
      */
     deploymentEnvironmentProvidersRead(client, params) {
         return client.call("deployment/environment-providers/read", params);
@@ -2044,7 +2097,7 @@ export const rpc = {
     /**
      * Delete an environment provider
      *
-     * Deletes a deployment provider only when no universe binding references it.
+     * Deletes a deployment provider only when no universe binding and no non-closed environment references it.
      */
     deploymentEnvironmentProvidersDelete(client, params) {
         return client.call("deployment/environment-providers/delete", params);
@@ -2052,7 +2105,7 @@ export const rpc = {
     /**
      * Put an environment provider binding
      *
-     * Creates or replaces one universe's complete revisioned routing and admission binding. A deployment provider may have at most one binding in a universe.
+     * Creates or replaces one universe's binding to a deployment provider. Only an enabled binding admits creates, template listing, and data routes for the universe.
      */
     deploymentEnvironmentProvidersBindingsPut(client, params) {
         return client.call("deployment/environment-providers/bindings/put", params);
@@ -2060,19 +2113,11 @@ export const rpc = {
     /**
      * Delete an environment provider binding
      *
-     * Deletes a universe provider binding only after every referencing environment has reached Closed.
+     * Deletes a universe's binding to a provider only when the universe has no non-closed environment of that provider.
      */
     deploymentEnvironmentProvidersBindingsDelete(client, params) {
         return client.call("deployment/environment-providers/bindings/delete", params);
     },
-    /**
-     * Adopt a provider environment
-     *
-     * Creates a universe environment by transferring an existing provider target into Lightspeed's managed lifecycle. The caller must explicitly accept ownership transfer.
-     */
-    deploymentEnvironmentsAdopt(client, params) {
-        return client.call("deployment/environments/adopt", params);
-    },
     /**
      * List channel accounts across universes
      *