@lightspeed-ai/sdk 0.4.0 → 0.5.1

package/dist/generated/methods.d.ts

@@ -1,5 +1,5 @@
 import type * as Api from "./types.js";
-export declare const METHODS: readonly ["vfs/workspaces/files/read", "initialize", "session/start", "session/managed/start", "session/read", "session/list", "session/config/put", "session/rename", "session/metadata/put", "session/retention/put", "session/close", "session/delete", "session/share", "session/events/read", "session/context/append", "session/context/remove", "session/context/replace", "session/context/compact", "session/runs/start", "session/runs/list", "session/runs/read", "session/runs/cancel", "session/runs/approvals/decide", "session/runs/steer", "session/skills/list", "session/profiles/apply", "session/environments/activate", "session/environments/deactivate", "environments/credentials/bind", "environments/credentials/list", "environments/credentials/unbind", "environments/create", "environments/read", "environments/list", "environments/close", "environments/external/create", "environments/ingress/put", "environments/power/put", "environments/idle-policy/put", "environments/provider-bindings/list", "environments/provider-bindings/read", "environments/templates/list", "environments/templates/read", "environments/jobs/create", "environments/jobs/read", "environments/jobs/cancel", "environments/registration-keys/create", "environments/registration-keys/read", "environments/registration-keys/list", "environments/registration-keys/revoke", "transcriptions/start", "transcriptions/read", "transcriptions/cancel", "models/defaults/read", "models/defaults/put", "models/list", "profiles/create", "profiles/read", "profiles/list", "profiles/put", "profiles/delete", "blobs/put", "blobs/read", "blobs/has", "vfs/snapshots/commit", "vfs/snapshots/read", "vfs/workspaces/create", "vfs/workspaces/read", "vfs/workspaces/list", "vfs/workspaces/update", "vfs/workspaces/delete", "mcp/servers/put", "mcp/servers/auth/discover", "mcp/servers/tools/discover", "mcp/servers/read", "mcp/servers/list", "mcp/servers/delete", "auth/grants/import", "auth/grants/lease", "auth/grants/read", "auth/grants/list", "auth/grants/revoke", "auth/clients/create", "auth/clients/read", "auth/clients/list", "auth/clients/delete", "auth/flows/start", "auth/flows/read", "auth/providers/create", "auth/providers/read", "auth/providers/list", "auth/providers/delete", "auth/github/installations/list", "auth/github/installations/grant", "bots/create", "bots/put", "bots/read", "bots/list", "bots/close", "bots/delete", "bots/state/read", "bots/sessions/rotate", "bots/triggers/put", "bots/triggers/read", "bots/triggers/list", "bots/triggers/delete", "bots/events/admit", "bots/events/replay", "bots/events/list", "bots/events/read", "bots/filters/test", "channels/accounts/create", "channels/accounts/put", "channels/accounts/read", "channels/accounts/list", "channels/accounts/delete", "channels/inbound/admit", "channels/pairings/list", "channels/pairings/delete", "channels/conversations/read", "deployment/environment-provider-bindings/list", "deployment/universes/create", "deployment/universes/list", "deployment/universes/read", "deployment/universes/slug/put", "deployment/universes/delete", "deployment/api-keys/create", "deployment/api-keys/list", "deployment/api-keys/rotate", "deployment/api-keys/revoke", "deployment/environment-providers/put", "deployment/environment-providers/list", "deployment/environment-providers/read", "deployment/environment-providers/delete", "deployment/environment-providers/bindings/put", "deployment/environment-providers/bindings/delete", "deployment/environments/adopt", "deployment/channels/accounts/list"];
+export declare const METHODS: readonly ["vfs/workspaces/files/read", "initialize", "session/start", "session/managed/start", "session/read", "session/list", "session/config/put", "session/rename", "session/metadata/put", "session/retention/put", "session/close", "session/delete", "session/share", "session/events/read", "session/context/append", "session/context/remove", "session/context/replace", "session/context/compact", "session/runs/start", "session/runs/list", "session/runs/read", "session/runs/cancel", "session/runs/approvals/decide", "session/runs/steer", "session/skills/list", "session/profiles/apply", "session/environments/activate", "session/environments/deactivate", "environments/credentials/bind", "environments/credentials/list", "environments/credentials/unbind", "environments/create", "environments/read", "environments/update", "environments/list", "environments/close", "environments/external/create", "environments/ingress/put", "environments/power/put", "environments/provider-bindings/list", "environments/provider-bindings/read", "environments/templates/list", "environments/templates/read", "environments/jobs/create", "environments/jobs/read", "environments/jobs/cancel", "environments/registration-keys/create", "environments/registration-keys/read", "environments/registration-keys/list", "environments/registration-keys/update", "environments/registration-keys/rotate", "environments/registration-keys/revoke", "transcriptions/start", "transcriptions/read", "transcriptions/cancel", "models/defaults/read", "models/defaults/put", "models/list", "profiles/create", "profiles/read", "profiles/list", "profiles/put", "profiles/delete", "blobs/put", "blobs/read", "blobs/has", "vfs/snapshots/commit", "vfs/snapshots/read", "vfs/workspaces/create", "vfs/workspaces/read", "vfs/workspaces/list", "vfs/workspaces/update", "vfs/workspaces/delete", "mcp/servers/put", "mcp/servers/auth/discover", "mcp/servers/tools/discover", "mcp/servers/read", "mcp/servers/list", "mcp/servers/delete", "auth/grants/import", "auth/grants/lease", "auth/grants/read", "auth/grants/list", "auth/grants/revoke", "auth/clients/create", "auth/clients/read", "auth/clients/list", "auth/clients/delete", "auth/flows/start", "auth/flows/read", "auth/providers/create", "auth/providers/read", "auth/providers/list", "auth/providers/delete", "auth/github/installations/list", "auth/github/installations/grant", "bots/create", "bots/put", "bots/read", "bots/list", "bots/close", "bots/delete", "bots/state/read", "bots/sessions/rotate", "bots/triggers/put", "bots/triggers/read", "bots/triggers/list", "bots/triggers/delete", "bots/events/admit", "bots/events/replay", "bots/events/list", "bots/events/read", "bots/filters/test", "channels/accounts/create", "channels/accounts/put", "channels/accounts/read", "channels/accounts/list", "channels/accounts/delete", "channels/inbound/admit", "channels/pairings/list", "channels/pairings/delete", "channels/conversations/read", "deployment/sessions/deleted/list", "deployment/sessions/purge", "deployment/environment-provider-bindings/list", "deployment/universes/create", "deployment/universes/list", "deployment/universes/read", "deployment/universes/slug/put", "deployment/universes/delete", "deployment/api-keys/create", "deployment/api-keys/list", "deployment/api-keys/rotate", "deployment/api-keys/revoke", "deployment/environment-providers/put", "deployment/environment-providers/list", "deployment/environment-providers/read", "deployment/environment-providers/delete", "deployment/environment-providers/bindings/put", "deployment/environment-providers/bindings/delete", "deployment/channels/accounts/list"];
 export declare const METHOD_INFO: {
     readonly "vfs/workspaces/files/read": {
         readonly scope: "universe";
@@ -57,7 +57,7 @@ export declare const METHOD_INFO: {
     readonly "session/config/put": {
         readonly scope: "universe";
         readonly access: {
-            readonly action: "control_session";
+            readonly action: "configure_session";
             readonly kind: "universe";
         };
         readonly summary: "Replace session configuration";
@@ -75,7 +75,7 @@ export declare const METHOD_INFO: {
     readonly "session/metadata/put": {
         readonly scope: "universe";
         readonly access: {
-            readonly action: "control_session";
+            readonly action: "configure_session";
             readonly kind: "universe";
         };
         readonly summary: "Replace session metadata";
@@ -84,16 +84,16 @@ export declare const METHOD_INFO: {
     readonly "session/retention/put": {
         readonly scope: "universe";
         readonly access: {
-            readonly action: "control_session";
+            readonly action: "set_session_retention";
             readonly kind: "universe";
         };
         readonly summary: "Replace session retention";
-        readonly description: "Sets the positive close-relative automatic-deletion duration on a retention root, or clears it with null. Forks and delegated children inherit the root policy and cannot override it.";
+        readonly description: "Sets the positive close-relative automatic soft-deletion duration on a retention root, or clears it with null. Forks and delegated children inherit the root policy and cannot override it. Retention does not permanently delete stored history.";
     };
     readonly "session/close": {
         readonly scope: "universe";
         readonly access: {
-            readonly action: "stop_session";
+            readonly action: "close_session";
             readonly kind: "universe";
         };
         readonly summary: "Close a session";
@@ -106,7 +106,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Delete closed sessions";
-        readonly description: "Permanently removes a closed retention-tree leaf, or its closed history-fork and delegated-child subtree when cascade is true. Config-only clones are never included.";
+        readonly description: "Permanently deletes a closed retention-tree leaf, or its closed history-fork and delegated-child subtree when cascade is true. Set softDelete to true to hide sessions while retaining records and history until a deployment administrator purges them. Prior soft deletion is not required for permanent deletion. Config-only clones are never included.";
     };
     readonly "session/share": {
         readonly scope: "universe";
@@ -228,7 +228,7 @@ export declare const METHOD_INFO: {
     readonly "session/profiles/apply": {
         readonly scope: "universe";
         readonly access: {
-            readonly action: "control_session";
+            readonly action: "configure_session";
             readonly kind: "universe";
         };
         readonly summary: "Apply a profile to a session";
@@ -237,7 +237,7 @@ export declare const METHOD_INFO: {
     readonly "session/environments/activate": {
         readonly scope: "universe";
         readonly access: {
-            readonly action: "control_session";
+            readonly action: "configure_session";
             readonly kind: "universe";
         };
         readonly summary: "Activate a session environment";
@@ -246,7 +246,7 @@ export declare const METHOD_INFO: {
     readonly "session/environments/deactivate": {
         readonly scope: "universe";
         readonly access: {
-            readonly action: "control_session";
+            readonly action: "configure_session";
             readonly kind: "universe";
         };
         readonly summary: "Deactivate the session environment";
@@ -286,7 +286,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Create an environment";
-        readonly description: "Records an idempotent provisioning intent against an enabled universe binding, attributed to the caller. The provider validates its provider-wide template and provisions through its backend asynchronously.";
+        readonly description: "Creates a provisioned environment, attributed to the caller, from a template of a provider enabled for the universe. Idempotent per requestId: same inputs, same environment; others conflict. Provisioning until the target's first envd handshake, then open; idle overrides the template default.";
     };
     readonly "environments/read": {
         readonly scope: "universe";
@@ -295,7 +295,16 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Read an environment";
-        readonly description: "Returns the durable universe resource, source binding, logical lifecycle state, and minimal current-incarnation identity.";
+        readonly description: "Returns one environment: its source, lifecycle state, derived display status, state message, close reason, daemon build, and the latest provider observation.";
+    };
+    readonly "environments/update": {
+        readonly scope: "universe";
+        readonly access: {
+            readonly action: "configure_resource";
+            readonly kind: "universe";
+        };
+        readonly summary: "Update an environment";
+        readonly description: "Replaces the display name and caller metadata of an environment of any kind. Refused for a closed environment.";
     };
     readonly "environments/list": {
         readonly scope: "universe";
@@ -304,7 +313,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "List environments";
-        readonly description: "Lists the universe environments, optionally filtered by provider, binding, or logical lifecycle state.";
+        readonly description: "Lists the universe environments in id order, one page at a time, optionally filtered by provider, registration key, state, or metadata. Closed environments are omitted unless includeClosed is set or state is closed. Continue from nextAfter.";
     };
     readonly "environments/close": {
         readonly scope: "universe";
@@ -313,7 +322,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Close an environment";
-        readonly description: "Records an asynchronous idempotent close intent. Provider cleanup is resumed by lifecycle reconciliation; quota is released only after Closed.";
+        readonly description: "Closes an environment; idempotent. A provisioned environment moves to closing while Lightspeed asks its provider to remove the target, retrying until it is gone, then closed. External and registered environments close at once, and a connected registered daemon is told its environment closed.";
     };
     readonly "environments/external/create": {
         readonly scope: "universe";
@@ -322,7 +331,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Register an external environment";
-        readonly description: "Creates an environment backed by a Lightspeed-reachable envd WebSocket endpoint, attributed to the caller. Reachability is checked on demand.";
+        readonly description: "Creates an open environment backed by a Lightspeed-reachable envd endpoint, attributed to the caller. Idempotent per requestId. Reachability is checked on use.";
     };
     readonly "environments/ingress/put": {
         readonly scope: "universe";
@@ -331,7 +340,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Configure environment public ingress";
-        readonly description: "Synchronously enables or disables one provider-authorized HTTPS endpoint for a provisioned environment. The provider owns hostname allocation, the approved guest port, routing, TLS, and health.";
+        readonly description: "Synchronously ensures or removes public ingress of an open provisioned environment through its provider; source.publicEndpoint carries the reported endpoint. Rejected when the provider offers no ingress; an internal error, safe to retry, when the provider is unreachable or times out. The provider owns hostname, guest port, routing, TLS, and health.";
     };
     readonly "environments/power/put": {
         readonly scope: "universe";
@@ -339,17 +348,8 @@ export declare const METHOD_INFO: {
             readonly action: "configure_resource";
             readonly kind: "universe";
         };
-        readonly summary: "Set environment power intent";
-        readonly description: "Records the desired power state (running, paused, suspended, or stopped) of a provisioned environment; the lifecycle reconciler converges the provider target asynchronously. Powered-down environments wake transparently on their next use. Rejected when the provider does not support the state.";
-    };
-    readonly "environments/idle-policy/put": {
-        readonly scope: "universe";
-        readonly access: {
-            readonly action: "configure_resource";
-            readonly kind: "universe";
-        };
-        readonly summary: "Set environment idle policy";
-        readonly description: "Replaces or clears the staged idle policy of a provisioned environment. The power reaper measures the daemon's idle duration against the pause/suspend/stop/close thresholds and escalates through the stages the provider supports.";
+        readonly summary: "Set environment power";
+        readonly description: "Synchronously moves an open provisioned environment's target to running, paused, suspended, or stopped via its provider and records the observation; the provider may also change power on idle. Rejected without provider power control or when the template lacks the state; an internal error, safe to retry, when the provider is unreachable or times out.";
     };
     readonly "environments/provider-bindings/list": {
         readonly scope: "universe";
@@ -358,7 +358,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "List environment provider bindings";
-        readonly description: "Lists this universe's revisioned routing and admission bindings to deployment-scoped physical providers.";
+        readonly description: "Lists this universe's bindings to deployment providers and whether each is enabled.";
     };
     readonly "environments/provider-bindings/read": {
         readonly scope: "universe";
@@ -367,7 +367,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Read an environment provider binding";
-        readonly description: "Returns one universe routing and admission binding. Provider-wide templates and physical resource, network, and ingress policy remain provider-owned.";
+        readonly description: "Returns this universe's binding to one provider. Templates and physical resource, network, and ingress policy remain provider-owned.";
     };
     readonly "environments/templates/list": {
         readonly scope: "universe";
@@ -376,7 +376,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "List environment templates";
-        readonly description: "Reads immutable templates directly from the selected bound provider controller.";
+        readonly description: "Reads templates live from the controllers of the universe's enabled provider bindings, or of one provider: compute, power states, public ingress, and default idle policy.";
     };
     readonly "environments/templates/read": {
         readonly scope: "universe";
@@ -385,7 +385,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Read an environment template";
-        readonly description: "Returns one immutable template version from the selected bound provider controller.";
+        readonly description: "Returns one template, read live from a bound provider's controller.";
     };
     readonly "environments/jobs/create": {
         readonly scope: "universe";
@@ -394,7 +394,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Create environment jobs";
-        readonly description: "Starts a dependency-aware job group on one environment instance, injecting the environment's configured credentials at provider start. requestId is the retry identity; jobs are owned by the instance rather than a session. A powered-down environment is woken on use: the call fails with environment_not_ready while the wake is in progress; retry with backoff.";
+        readonly description: "Starts a dependency-aware job group on one environment instance, injecting its configured credentials at provider start. requestId is the retry identity; jobs are owned by the instance, not a session. A powered-down environment wakes on its data route; the call fails with environment_not_ready while it wakes or reconnects; retry with backoff.";
     };
     readonly "environments/jobs/read": {
         readonly scope: "universe";
@@ -403,7 +403,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Read environment jobs";
-        readonly description: "Reads selected job handles with bounded output, optional sequence continuation, and optional artifacts; use returned status/sequence data for polling.";
+        readonly description: "Reads selected job handles with bounded output from a byte offset or the output tail; continue from each entry's outputNext and poll on the returned status.";
     };
     readonly "environments/jobs/cancel": {
         readonly scope: "universe";
@@ -421,7 +421,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Mint an environment registration key";
-        readonly description: "Creates a reusable universe-scoped key that lets outbound envd daemons register as environments. The plaintext secret is returned exactly once; only its hash is stored. Identity mode, active limit, disconnect grace, and expiry are the key's policy. Treat the secret like a cluster-join credential.";
+        readonly description: "Creates a reusable universe-scoped key that lets outbound envd daemons register as environments. The plaintext secret is returned exactly once; only its hash is stored. Identity mode (immutable), active limit, disconnect grace, offline close-after, and expiry are the key's policy. Treat the secret like a cluster-join credential.";
     };
     readonly "environments/registration-keys/read": {
         readonly scope: "universe";
@@ -441,6 +441,24 @@ export declare const METHOD_INFO: {
         readonly summary: "List environment registration keys";
         readonly description: "Lists this universe's registration keys with policy, status, and derived counts. Each key is the group of the environments it admitted.";
     };
+    readonly "environments/registration-keys/update": {
+        readonly scope: "universe";
+        readonly access: {
+            readonly action: "configure_resource";
+            readonly kind: "universe";
+        };
+        readonly summary: "Update an environment registration key";
+        readonly description: "Replaces a key's editable policy: display name, active limit, disconnect grace, offline close-after, and expiry; an omitted field is unset. The identity mode is immutable. The active limit and expiry apply to later admissions; a changed disconnect grace or offline close-after applies at the next sweep to environments whose daemon is away.";
+    };
+    readonly "environments/registration-keys/rotate": {
+        readonly scope: "universe";
+        readonly access: {
+            readonly action: "configure_resource";
+            readonly kind: "universe";
+        };
+        readonly summary: "Rotate an environment registration key";
+        readonly description: "Replaces the key's secret and display prefix and retires the old secret at once. The key keeps its id, group, policy, and the environments it admitted; daemons already registered are unaffected because they never present the key again. Returns the new secret once. Refused for a revoked key.";
+    };
     readonly "environments/registration-keys/revoke": {
         readonly scope: "universe";
         readonly access: {
@@ -897,7 +915,7 @@ export declare const METHOD_INFO: {
             readonly kind: "universe";
         };
         readonly summary: "Delete a bot";
-        readonly description: "Closes the bot if needed, waits for its controller to complete, deletes the sessions it closed, and removes the record so the bot id is free again.";
+        readonly description: "Closes the bot if needed, waits for its controller to complete, retains its session history, and removes the record so the bot id is free again.";
     };
     readonly "bots/state/read": {
         readonly scope: "universe";
@@ -1078,6 +1096,22 @@ export declare const METHOD_INFO: {
         readonly summary: "Read a conversation snapshot";
         readonly description: "Queries the conversation workflow's live state for one chat, for debugging; absent when no workflow exists yet.";
     };
+    readonly "deployment/sessions/deleted/list": {
+        readonly scope: "deployment";
+        readonly access: {
+            readonly kind: "deployment";
+        };
+        readonly summary: "List deleted sessions";
+        readonly description: "Administrative metadata for soft-deleted sessions, ordered by session ID. Unavailable through universe-scoped methods.";
+    };
+    readonly "deployment/sessions/purge": {
+        readonly scope: "deployment";
+        readonly access: {
+            readonly kind: "deployment";
+        };
+        readonly summary: "Permanently delete a session";
+        readonly description: "Removes a soft-deleted session and its soft-deleted history subtree. Rejects any selected session that has not been soft-deleted. Releases event, checkpoint and blob references; unreferenced blobs follow normal garbage collection. Does not delete external workspaces, environments, backups or Temporal history.";
+    };
     readonly "deployment/environment-provider-bindings/list": {
         readonly scope: "deployment";
         readonly access: {
@@ -1164,7 +1198,7 @@ export declare const METHOD_INFO: {
             readonly kind: "deployment";
         };
         readonly summary: "Put an environment provider";
-        readonly description: "Registers or replaces one deployment provider and its controller connection. The provider does not call this API or require access to Lightspeed.";
+        readonly description: "Registers or replaces a deployment provider: controller endpoint, optional data route base, and optional bearer credential for controller and data routes (write-only: kept when omitted, removed by clearCredential, never returned). The controller is probed: a definitive refusal is invalid_request, unreachable is accepted. The provider never calls Lightspeed.";
     };
     readonly "deployment/environment-providers/list": {
         readonly scope: "deployment";
@@ -1172,7 +1206,7 @@ export declare const METHOD_INFO: {
             readonly kind: "deployment";
         };
         readonly summary: "List environment providers";
-        readonly description: "Returns every deployment-registered deployment provider and its controller connection.";
+        readonly description: "Returns every deployment-registered provider with its controller endpoint, data route base, and whether a credential is stored.";
     };
     readonly "deployment/environment-providers/read": {
         readonly scope: "deployment";
@@ -1180,7 +1214,7 @@ export declare const METHOD_INFO: {
             readonly kind: "deployment";
         };
         readonly summary: "Read an environment provider";
-        readonly description: "Returns one deployment-registered deployment provider and its controller connection.";
+        readonly description: "Returns one deployment-registered provider with its controller endpoint, data route base, and whether a credential is stored.";
     };
     readonly "deployment/environment-providers/delete": {
         readonly scope: "deployment";
@@ -1188,7 +1222,7 @@ export declare const METHOD_INFO: {
             readonly kind: "deployment";
         };
         readonly summary: "Delete an environment provider";
-        readonly description: "Deletes a deployment provider only when no universe binding references it.";
+        readonly description: "Deletes a deployment provider only when no universe binding and no non-closed environment references it.";
     };
     readonly "deployment/environment-providers/bindings/put": {
         readonly scope: "deployment";
@@ -1196,7 +1230,7 @@ export declare const METHOD_INFO: {
             readonly kind: "deployment";
         };
         readonly summary: "Put an environment provider binding";
-        readonly description: "Creates or replaces one universe's complete revisioned routing and admission binding. A deployment provider may have at most one binding in a universe.";
+        readonly description: "Creates or replaces one universe's binding to a deployment provider. Only an enabled binding admits creates, template listing, and data routes for the universe.";
     };
     readonly "deployment/environment-providers/bindings/delete": {
         readonly scope: "deployment";
@@ -1204,15 +1238,7 @@ export declare const METHOD_INFO: {
             readonly kind: "deployment";
         };
         readonly summary: "Delete an environment provider binding";
-        readonly description: "Deletes a universe provider binding only after every referencing environment has reached Closed.";
-    };
-    readonly "deployment/environments/adopt": {
-        readonly scope: "deployment";
-        readonly access: {
-            readonly kind: "deployment";
-        };
-        readonly summary: "Adopt a provider environment";
-        readonly description: "Creates a universe environment by transferring an existing provider target into Lightspeed's managed lifecycle. The caller must explicitly accept ownership transfer.";
+        readonly description: "Deletes a universe's binding to a provider only when the universe has no non-closed environment of that provider.";
     };
     readonly "deployment/channels/accounts/list": {
         readonly scope: "deployment";
@@ -1311,7 +1337,7 @@ export interface MethodMap {
     /**
      * Replace session retention
      *
-     * Sets the positive close-relative automatic-deletion duration on a retention root, or clears it with null. Forks and delegated children inherit the root policy and cannot override it.
+     * Sets the positive close-relative automatic soft-deletion duration on a retention root, or clears it with null. Forks and delegated children inherit the root policy and cannot override it. Retention does not permanently delete stored history.
      */
     "session/retention/put": {
         params: Api.SessionRetentionPutParams;
@@ -1329,7 +1355,7 @@ export interface MethodMap {
     /**
      * Delete closed sessions
      *
-     * Permanently removes a closed retention-tree leaf, or its closed history-fork and delegated-child subtree when cascade is true. Config-only clones are never included.
+     * Permanently deletes a closed retention-tree leaf, or its closed history-fork and delegated-child subtree when cascade is true. Set softDelete to true to hide sessions while retaining records and history until a deployment administrator purges them. Prior soft deletion is not required for permanent deletion. Config-only clones are never included.
      */
     "session/delete": {
         params: Api.SessionDeleteParams;
@@ -1509,7 +1535,7 @@ export interface MethodMap {
     /**
      * Create an environment
      *
-     * Records an idempotent provisioning intent against an enabled universe binding, attributed to the caller. The provider validates its provider-wide template and provisions through its backend asynchronously.
+     * Creates a provisioned environment, attributed to the caller, from a template of a provider enabled for the universe. Idempotent per requestId: same inputs, same environment; others conflict. Provisioning until the target's first envd handshake, then open; idle overrides the template default.
      */
     "environments/create": {
         params: Api.EnvironmentCreateParams;
@@ -1518,16 +1544,25 @@ export interface MethodMap {
     /**
      * Read an environment
      *
-     * Returns the durable universe resource, source binding, logical lifecycle state, and minimal current-incarnation identity.
+     * Returns one environment: its source, lifecycle state, derived display status, state message, close reason, daemon build, and the latest provider observation.
      */
     "environments/read": {
         params: Api.EnvironmentReadParams;
         result: Api.AgentApiOutcomeOfEnvironmentReadResponse;
     };
+    /**
+     * Update an environment
+     *
+     * Replaces the display name and caller metadata of an environment of any kind. Refused for a closed environment.
+     */
+    "environments/update": {
+        params: Api.EnvironmentUpdateParams;
+        result: Api.AgentApiOutcomeOfEnvironmentUpdateResponse;
+    };
     /**
      * List environments
      *
-     * Lists the universe environments, optionally filtered by provider, binding, or logical lifecycle state.
+     * Lists the universe environments in id order, one page at a time, optionally filtered by provider, registration key, state, or metadata. Closed environments are omitted unless includeClosed is set or state is closed. Continue from nextAfter.
      */
     "environments/list": {
         params: Api.EnvironmentListParams;
@@ -1536,7 +1571,7 @@ export interface MethodMap {
     /**
      * Close an environment
      *
-     * Records an asynchronous idempotent close intent. Provider cleanup is resumed by lifecycle reconciliation; quota is released only after Closed.
+     * Closes an environment; idempotent. A provisioned environment moves to closing while Lightspeed asks its provider to remove the target, retrying until it is gone, then closed. External and registered environments close at once, and a connected registered daemon is told its environment closed.
      */
     "environments/close": {
         params: Api.EnvironmentCloseParams;
@@ -1545,7 +1580,7 @@ export interface MethodMap {
     /**
      * Register an external environment
      *
-     * Creates an environment backed by a Lightspeed-reachable envd WebSocket endpoint, attributed to the caller. Reachability is checked on demand.
+     * Creates an open environment backed by a Lightspeed-reachable envd endpoint, attributed to the caller. Idempotent per requestId. Reachability is checked on use.
      */
     "environments/external/create": {
         params: Api.EnvironmentExternalCreateParams;
@@ -1554,34 +1589,25 @@ export interface MethodMap {
     /**
      * Configure environment public ingress
      *
-     * Synchronously enables or disables one provider-authorized HTTPS endpoint for a provisioned environment. The provider owns hostname allocation, the approved guest port, routing, TLS, and health.
+     * Synchronously ensures or removes public ingress of an open provisioned environment through its provider; source.publicEndpoint carries the reported endpoint. Rejected when the provider offers no ingress; an internal error, safe to retry, when the provider is unreachable or times out. The provider owns hostname, guest port, routing, TLS, and health.
      */
     "environments/ingress/put": {
         params: Api.EnvironmentIngressPutParams;
         result: Api.AgentApiOutcomeOfEnvironmentIngressPutResponse;
     };
     /**
-     * Set environment power intent
+     * Set environment power
      *
-     * Records the desired power state (running, paused, suspended, or stopped) of a provisioned environment; the lifecycle reconciler converges the provider target asynchronously. Powered-down environments wake transparently on their next use. Rejected when the provider does not support the state.
+     * Synchronously moves an open provisioned environment's target to running, paused, suspended, or stopped via its provider and records the observation; the provider may also change power on idle. Rejected without provider power control or when the template lacks the state; an internal error, safe to retry, when the provider is unreachable or times out.
      */
     "environments/power/put": {
         params: Api.EnvironmentPowerPutParams;
         result: Api.AgentApiOutcomeOfEnvironmentPowerPutResponse;
     };
-    /**
-     * Set environment idle policy
-     *
-     * Replaces or clears the staged idle policy of a provisioned environment. The power reaper measures the daemon's idle duration against the pause/suspend/stop/close thresholds and escalates through the stages the provider supports.
-     */
-    "environments/idle-policy/put": {
-        params: Api.EnvironmentIdlePolicyPutParams;
-        result: Api.AgentApiOutcomeOfEnvironmentIdlePolicyPutResponse;
-    };
     /**
      * List environment provider bindings
      *
-     * Lists this universe's revisioned routing and admission bindings to deployment-scoped physical providers.
+     * Lists this universe's bindings to deployment providers and whether each is enabled.
      */
     "environments/provider-bindings/list": {
         params: Api.EnvironmentProviderBindingListParams;
@@ -1590,7 +1616,7 @@ export interface MethodMap {
     /**
      * Read an environment provider binding
      *
-     * Returns one universe routing and admission binding. Provider-wide templates and physical resource, network, and ingress policy remain provider-owned.
+     * Returns this universe's binding to one provider. Templates and physical resource, network, and ingress policy remain provider-owned.
      */
     "environments/provider-bindings/read": {
         params: Api.EnvironmentProviderBindingReadParams;
@@ -1599,7 +1625,7 @@ export interface MethodMap {
     /**
      * List environment templates
      *
-     * Reads immutable templates directly from the selected bound provider controller.
+     * Reads templates live from the controllers of the universe's enabled provider bindings, or of one provider: compute, power states, public ingress, and default idle policy.
      */
     "environments/templates/list": {
         params: Api.EnvironmentTemplateListParams;
@@ -1608,7 +1634,7 @@ export interface MethodMap {
     /**
      * Read an environment template
      *
-     * Returns one immutable template version from the selected bound provider controller.
+     * Returns one template, read live from a bound provider's controller.
      */
     "environments/templates/read": {
         params: Api.EnvironmentTemplateReadParams;
@@ -1617,7 +1643,7 @@ export interface MethodMap {
     /**
      * Create environment jobs
      *
-     * Starts a dependency-aware job group on one environment instance, injecting the environment's configured credentials at provider start. requestId is the retry identity; jobs are owned by the instance rather than a session. A powered-down environment is woken on use: the call fails with environment_not_ready while the wake is in progress; retry with backoff.
+     * Starts a dependency-aware job group on one environment instance, injecting its configured credentials at provider start. requestId is the retry identity; jobs are owned by the instance, not a session. A powered-down environment wakes on its data route; the call fails with environment_not_ready while it wakes or reconnects; retry with backoff.
      */
     "environments/jobs/create": {
         params: Api.EnvironmentJobCreateParams;
@@ -1626,7 +1652,7 @@ export interface MethodMap {
     /**
      * Read environment jobs
      *
-     * Reads selected job handles with bounded output, optional sequence continuation, and optional artifacts; use returned status/sequence data for polling.
+     * Reads selected job handles with bounded output from a byte offset or the output tail; continue from each entry's outputNext and poll on the returned status.
      */
     "environments/jobs/read": {
         params: Api.EnvironmentJobReadParams;
@@ -1644,7 +1670,7 @@ export interface MethodMap {
     /**
      * Mint an environment registration key
      *
-     * Creates a reusable universe-scoped key that lets outbound envd daemons register as environments. The plaintext secret is returned exactly once; only its hash is stored. Identity mode, active limit, disconnect grace, and expiry are the key's policy. Treat the secret like a cluster-join credential.
+     * Creates a reusable universe-scoped key that lets outbound envd daemons register as environments. The plaintext secret is returned exactly once; only its hash is stored. Identity mode (immutable), active limit, disconnect grace, offline close-after, and expiry are the key's policy. Treat the secret like a cluster-join credential.
      */
     "environments/registration-keys/create": {
         params: Api.EnvironmentRegistrationKeyCreateParams;
@@ -1668,6 +1694,24 @@ export interface MethodMap {
         params: Api.EnvironmentRegistrationKeyListParams;
         result: Api.AgentApiOutcomeOfEnvironmentRegistrationKeyListResponse;
     };
+    /**
+     * Update an environment registration key
+     *
+     * Replaces a key's editable policy: display name, active limit, disconnect grace, offline close-after, and expiry; an omitted field is unset. The identity mode is immutable. The active limit and expiry apply to later admissions; a changed disconnect grace or offline close-after applies at the next sweep to environments whose daemon is away.
+     */
+    "environments/registration-keys/update": {
+        params: Api.EnvironmentRegistrationKeyUpdateParams;
+        result: Api.AgentApiOutcomeOfEnvironmentRegistrationKeyUpdateResponse;
+    };
+    /**
+     * Rotate an environment registration key
+     *
+     * Replaces the key's secret and display prefix and retires the old secret at once. The key keeps its id, group, policy, and the environments it admitted; daemons already registered are unaffected because they never present the key again. Returns the new secret once. Refused for a revoked key.
+     */
+    "environments/registration-keys/rotate": {
+        params: Api.EnvironmentRegistrationKeyRotateParams;
+        result: Api.AgentApiOutcomeOfEnvironmentRegistrationKeyRotateResponse;
+    };
     /**
      * Revoke an environment registration key
      *
@@ -2121,7 +2165,7 @@ export interface MethodMap {
     /**
      * Delete a bot
      *
-     * Closes the bot if needed, waits for its controller to complete, deletes the sessions it closed, and removes the record so the bot id is free again.
+     * Closes the bot if needed, waits for its controller to complete, retains its session history, and removes the record so the bot id is free again.
      */
     "bots/delete": {
         params: Api.BotDeleteParams;
@@ -2307,6 +2351,24 @@ export interface MethodMap {
         params: Api.ChannelConversationReadParams;
         result: Api.AgentApiOutcomeOfChannelConversationReadResponse;
     };
+    /**
+     * List deleted sessions
+     *
+     * Administrative metadata for soft-deleted sessions, ordered by session ID. Unavailable through universe-scoped methods.
+     */
+    "deployment/sessions/deleted/list": {
+        params: Api.DeploymentDeletedSessionsListParams;
+        result: Api.AgentApiOutcomeOfDeploymentDeletedSessionsListResponse;
+    };
+    /**
+     * Permanently delete a session
+     *
+     * Removes a soft-deleted session and its soft-deleted history subtree. Rejects any selected session that has not been soft-deleted. Releases event, checkpoint and blob references; unreferenced blobs follow normal garbage collection. Does not delete external workspaces, environments, backups or Temporal history.
+     */
+    "deployment/sessions/purge": {
+        params: Api.DeploymentSessionPurgeParams;
+        result: Api.AgentApiOutcomeOfDeploymentSessionPurgeResponse;
+    };
     /**
      * List a universe's deployment provider bindings
      *
@@ -2400,7 +2462,7 @@ export interface MethodMap {
     /**
      * Put an environment provider
      *
-     * Registers or replaces one deployment provider and its controller connection. The provider does not call this API or require access to Lightspeed.
+     * Registers or replaces a deployment provider: controller endpoint, optional data route base, and optional bearer credential for controller and data routes (write-only: kept when omitted, removed by clearCredential, never returned). The controller is probed: a definitive refusal is invalid_request, unreachable is accepted. The provider never calls Lightspeed.
      */
     "deployment/environment-providers/put": {
         params: Api.DeploymentEnvironmentProviderPutParams;
@@ -2409,7 +2471,7 @@ export interface MethodMap {
     /**
      * List environment providers
      *
-     * Returns every deployment-registered deployment provider and its controller connection.
+     * Returns every deployment-registered provider with its controller endpoint, data route base, and whether a credential is stored.
      */
     "deployment/environment-providers/list": {
         params: Api.DeploymentEnvironmentProviderListParams;
@@ -2418,7 +2480,7 @@ export interface MethodMap {
     /**
      * Read an environment provider
      *
-     * Returns one deployment-registered deployment provider and its controller connection.
+     * Returns one deployment-registered provider with its controller endpoint, data route base, and whether a credential is stored.
      */
     "deployment/environment-providers/read": {
         params: Api.DeploymentEnvironmentProviderReadParams;
@@ -2427,7 +2489,7 @@ export interface MethodMap {
     /**
      * Delete an environment provider
      *
-     * Deletes a deployment provider only when no universe binding references it.
+     * Deletes a deployment provider only when no universe binding and no non-closed environment references it.
      */
     "deployment/environment-providers/delete": {
         params: Api.DeploymentEnvironmentProviderDeleteParams;
@@ -2436,7 +2498,7 @@ export interface MethodMap {
     /**
      * Put an environment provider binding
      *
-     * Creates or replaces one universe's complete revisioned routing and admission binding. A deployment provider may have at most one binding in a universe.
+     * Creates or replaces one universe's binding to a deployment provider. Only an enabled binding admits creates, template listing, and data routes for the universe.
      */
     "deployment/environment-providers/bindings/put": {
         params: Api.DeploymentProviderBindingPutParams;
@@ -2445,21 +2507,12 @@ export interface MethodMap {
     /**
      * Delete an environment provider binding
      *
-     * Deletes a universe provider binding only after every referencing environment has reached Closed.
+     * Deletes a universe's binding to a provider only when the universe has no non-closed environment of that provider.
      */
     "deployment/environment-providers/bindings/delete": {
         params: Api.DeploymentProviderBindingDeleteParams;
         result: Api.AgentApiOutcomeOfDeploymentProviderBindingDeleteResponse;
     };
-    /**
-     * Adopt a provider environment
-     *
-     * Creates a universe environment by transferring an existing provider target into Lightspeed's managed lifecycle. The caller must explicitly accept ownership transfer.
-     */
-    "deployment/environments/adopt": {
-        params: Api.DeploymentEnvironmentAdoptParams;
-        result: Api.AgentApiOutcomeOfDeploymentEnvironmentAdoptResponse;
-    };
     /**
      * List channel accounts across universes
      *
@@ -2533,7 +2586,7 @@ export declare const rpc: {
     /**
      * Replace session retention
      *
-     * Sets the positive close-relative automatic-deletion duration on a retention root, or clears it with null. Forks and delegated children inherit the root policy and cannot override it.
+     * Sets the positive close-relative automatic soft-deletion duration on a retention root, or clears it with null. Forks and delegated children inherit the root policy and cannot override it. Retention does not permanently delete stored history.
      */
     readonly sessionRetentionPut: (client: RpcCaller, params: Api.SessionRetentionPutParams) => Promise<Api.AgentApiOutcomeOfSessionRetentionPutResponse>;
     /**
@@ -2545,7 +2598,7 @@ export declare const rpc: {
     /**
      * Delete closed sessions
      *
-     * Permanently removes a closed retention-tree leaf, or its closed history-fork and delegated-child subtree when cascade is true. Config-only clones are never included.
+     * Permanently deletes a closed retention-tree leaf, or its closed history-fork and delegated-child subtree when cascade is true. Set softDelete to true to hide sessions while retaining records and history until a deployment administrator purges them. Prior soft deletion is not required for permanent deletion. Config-only clones are never included.
      */
     readonly sessionDelete: (client: RpcCaller, params: Api.SessionDeleteParams) => Promise<Api.AgentApiOutcomeOfSessionDeleteResponse>;
     /**
@@ -2665,85 +2718,85 @@ export declare const rpc: {
     /**
      * Create an environment
      *
-     * Records an idempotent provisioning intent against an enabled universe binding, attributed to the caller. The provider validates its provider-wide template and provisions through its backend asynchronously.
+     * Creates a provisioned environment, attributed to the caller, from a template of a provider enabled for the universe. Idempotent per requestId: same inputs, same environment; others conflict. Provisioning until the target's first envd handshake, then open; idle overrides the template default.
      */
     readonly environmentsCreate: (client: RpcCaller, params: Api.EnvironmentCreateParams) => Promise<Api.AgentApiOutcomeOfEnvironmentCreateResponse>;
     /**
      * Read an environment
      *
-     * Returns the durable universe resource, source binding, logical lifecycle state, and minimal current-incarnation identity.
+     * Returns one environment: its source, lifecycle state, derived display status, state message, close reason, daemon build, and the latest provider observation.
      */
     readonly environmentsRead: (client: RpcCaller, params: Api.EnvironmentReadParams) => Promise<Api.AgentApiOutcomeOfEnvironmentReadResponse>;
+    /**
+     * Update an environment
+     *
+     * Replaces the display name and caller metadata of an environment of any kind. Refused for a closed environment.
+     */
+    readonly environmentsUpdate: (client: RpcCaller, params: Api.EnvironmentUpdateParams) => Promise<Api.AgentApiOutcomeOfEnvironmentUpdateResponse>;
     /**
      * List environments
      *
-     * Lists the universe environments, optionally filtered by provider, binding, or logical lifecycle state.
+     * Lists the universe environments in id order, one page at a time, optionally filtered by provider, registration key, state, or metadata. Closed environments are omitted unless includeClosed is set or state is closed. Continue from nextAfter.
      */
     readonly environmentsList: (client: RpcCaller, params: Api.EnvironmentListParams) => Promise<Api.AgentApiOutcomeOfEnvironmentListResponse>;
     /**
      * Close an environment
      *
-     * Records an asynchronous idempotent close intent. Provider cleanup is resumed by lifecycle reconciliation; quota is released only after Closed.
+     * Closes an environment; idempotent. A provisioned environment moves to closing while Lightspeed asks its provider to remove the target, retrying until it is gone, then closed. External and registered environments close at once, and a connected registered daemon is told its environment closed.
      */
     readonly environmentsClose: (client: RpcCaller, params: Api.EnvironmentCloseParams) => Promise<Api.AgentApiOutcomeOfEnvironmentCloseResponse>;
     /**
      * Register an external environment
      *
-     * Creates an environment backed by a Lightspeed-reachable envd WebSocket endpoint, attributed to the caller. Reachability is checked on demand.
+     * Creates an open environment backed by a Lightspeed-reachable envd endpoint, attributed to the caller. Idempotent per requestId. Reachability is checked on use.
      */
     readonly environmentsExternalCreate: (client: RpcCaller, params: Api.EnvironmentExternalCreateParams) => Promise<Api.AgentApiOutcomeOfEnvironmentExternalCreateResponse>;
     /**
      * Configure environment public ingress
      *
-     * Synchronously enables or disables one provider-authorized HTTPS endpoint for a provisioned environment. The provider owns hostname allocation, the approved guest port, routing, TLS, and health.
+     * Synchronously ensures or removes public ingress of an open provisioned environment through its provider; source.publicEndpoint carries the reported endpoint. Rejected when the provider offers no ingress; an internal error, safe to retry, when the provider is unreachable or times out. The provider owns hostname, guest port, routing, TLS, and health.
      */
     readonly environmentsIngressPut: (client: RpcCaller, params: Api.EnvironmentIngressPutParams) => Promise<Api.AgentApiOutcomeOfEnvironmentIngressPutResponse>;
     /**
-     * Set environment power intent
+     * Set environment power
      *
-     * Records the desired power state (running, paused, suspended, or stopped) of a provisioned environment; the lifecycle reconciler converges the provider target asynchronously. Powered-down environments wake transparently on their next use. Rejected when the provider does not support the state.
+     * Synchronously moves an open provisioned environment's target to running, paused, suspended, or stopped via its provider and records the observation; the provider may also change power on idle. Rejected without provider power control or when the template lacks the state; an internal error, safe to retry, when the provider is unreachable or times out.
      */
     readonly environmentsPowerPut: (client: RpcCaller, params: Api.EnvironmentPowerPutParams) => Promise<Api.AgentApiOutcomeOfEnvironmentPowerPutResponse>;
-    /**
-     * Set environment idle policy
-     *
-     * Replaces or clears the staged idle policy of a provisioned environment. The power reaper measures the daemon's idle duration against the pause/suspend/stop/close thresholds and escalates through the stages the provider supports.
-     */
-    readonly environmentsIdlePolicyPut: (client: RpcCaller, params: Api.EnvironmentIdlePolicyPutParams) => Promise<Api.AgentApiOutcomeOfEnvironmentIdlePolicyPutResponse>;
     /**
      * List environment provider bindings
      *
-     * Lists this universe's revisioned routing and admission bindings to deployment-scoped physical providers.
+     * Lists this universe's bindings to deployment providers and whether each is enabled.
      */
     readonly environmentsProviderBindingsList: (client: RpcCaller, params: Api.EnvironmentProviderBindingListParams) => Promise<Api.AgentApiOutcomeOfEnvironmentProviderBindingListResponse>;
     /**
      * Read an environment provider binding
      *
-     * Returns one universe routing and admission binding. Provider-wide templates and physical resource, network, and ingress policy remain provider-owned.
+     * Returns this universe's binding to one provider. Templates and physical resource, network, and ingress policy remain provider-owned.
      */
     readonly environmentsProviderBindingsRead: (client: RpcCaller, params: Api.EnvironmentProviderBindingReadParams) => Promise<Api.AgentApiOutcomeOfEnvironmentProviderBindingReadResponse>;
     /**
      * List environment templates
      *
-     * Reads immutable templates directly from the selected bound provider controller.
+     * Reads templates live from the controllers of the universe's enabled provider bindings, or of one provider: compute, power states, public ingress, and default idle policy.
      */
     readonly environmentsTemplatesList: (client: RpcCaller, params: Api.EnvironmentTemplateListParams) => Promise<Api.AgentApiOutcomeOfEnvironmentTemplateListResponse>;
     /**
      * Read an environment template
      *
-     * Returns one immutable template version from the selected bound provider controller.
+     * Returns one template, read live from a bound provider's controller.
      */
     readonly environmentsTemplatesRead: (client: RpcCaller, params: Api.EnvironmentTemplateReadParams) => Promise<Api.AgentApiOutcomeOfEnvironmentTemplateReadResponse>;
     /**
      * Create environment jobs
      *
-     * Starts a dependency-aware job group on one environment instance, injecting the environment's configured credentials at provider start. requestId is the retry identity; jobs are owned by the instance rather than a session. A powered-down environment is woken on use: the call fails with environment_not_ready while the wake is in progress; retry with backoff.
+     * Starts a dependency-aware job group on one environment instance, injecting its configured credentials at provider start. requestId is the retry identity; jobs are owned by the instance, not a session. A powered-down environment wakes on its data route; the call fails with environment_not_ready while it wakes or reconnects; retry with backoff.
      */
     readonly environmentsJobsCreate: (client: RpcCaller, params: Api.EnvironmentJobCreateParams) => Promise<Api.AgentApiOutcomeOfEnvironmentJobCreateResponse>;
     /**
      * Read environment jobs
      *
-     * Reads selected job handles with bounded output, optional sequence continuation, and optional artifacts; use returned status/sequence data for polling.
+     * Reads selected job handles with bounded output from a byte offset or the output tail; continue from each entry's outputNext and poll on the returned status.
      */
     readonly environmentsJobsRead: (client: RpcCaller, params: Api.EnvironmentJobReadParams) => Promise<Api.AgentApiOutcomeOfEnvironmentJobReadResponse>;
     /**
@@ -2755,7 +2808,7 @@ export declare const rpc: {
     /**
      * Mint an environment registration key
      *
-     * Creates a reusable universe-scoped key that lets outbound envd daemons register as environments. The plaintext secret is returned exactly once; only its hash is stored. Identity mode, active limit, disconnect grace, and expiry are the key's policy. Treat the secret like a cluster-join credential.
+     * Creates a reusable universe-scoped key that lets outbound envd daemons register as environments. The plaintext secret is returned exactly once; only its hash is stored. Identity mode (immutable), active limit, disconnect grace, offline close-after, and expiry are the key's policy. Treat the secret like a cluster-join credential.
      */
     readonly environmentsRegistrationKeysCreate: (client: RpcCaller, params: Api.EnvironmentRegistrationKeyCreateParams) => Promise<Api.AgentApiOutcomeOfEnvironmentRegistrationKeyCreateResponse>;
     /**
@@ -2770,6 +2823,18 @@ export declare const rpc: {
      * Lists this universe's registration keys with policy, status, and derived counts. Each key is the group of the environments it admitted.
      */
     readonly environmentsRegistrationKeysList: (client: RpcCaller, params: Api.EnvironmentRegistrationKeyListParams) => Promise<Api.AgentApiOutcomeOfEnvironmentRegistrationKeyListResponse>;
+    /**
+     * Update an environment registration key
+     *
+     * Replaces a key's editable policy: display name, active limit, disconnect grace, offline close-after, and expiry; an omitted field is unset. The identity mode is immutable. The active limit and expiry apply to later admissions; a changed disconnect grace or offline close-after applies at the next sweep to environments whose daemon is away.
+     */
+    readonly environmentsRegistrationKeysUpdate: (client: RpcCaller, params: Api.EnvironmentRegistrationKeyUpdateParams) => Promise<Api.AgentApiOutcomeOfEnvironmentRegistrationKeyUpdateResponse>;
+    /**
+     * Rotate an environment registration key
+     *
+     * Replaces the key's secret and display prefix and retires the old secret at once. The key keeps its id, group, policy, and the environments it admitted; daemons already registered are unaffected because they never present the key again. Returns the new secret once. Refused for a revoked key.
+     */
+    readonly environmentsRegistrationKeysRotate: (client: RpcCaller, params: Api.EnvironmentRegistrationKeyRotateParams) => Promise<Api.AgentApiOutcomeOfEnvironmentRegistrationKeyRotateResponse>;
     /**
      * Revoke an environment registration key
      *
@@ -3073,7 +3138,7 @@ export declare const rpc: {
     /**
      * Delete a bot
      *
-     * Closes the bot if needed, waits for its controller to complete, deletes the sessions it closed, and removes the record so the bot id is free again.
+     * Closes the bot if needed, waits for its controller to complete, retains its session history, and removes the record so the bot id is free again.
      */
     readonly botsDelete: (client: RpcCaller, params: Api.BotDeleteParams) => Promise<Api.AgentApiOutcomeOfBotDeleteResponse>;
     /**
@@ -3196,6 +3261,18 @@ export declare const rpc: {
      * Queries the conversation workflow's live state for one chat, for debugging; absent when no workflow exists yet.
      */
     readonly channelsConversationsRead: (client: RpcCaller, params: Api.ChannelConversationReadParams) => Promise<Api.AgentApiOutcomeOfChannelConversationReadResponse>;
+    /**
+     * List deleted sessions
+     *
+     * Administrative metadata for soft-deleted sessions, ordered by session ID. Unavailable through universe-scoped methods.
+     */
+    readonly deploymentSessionsDeletedList: (client: RpcCaller, params: Api.DeploymentDeletedSessionsListParams) => Promise<Api.AgentApiOutcomeOfDeploymentDeletedSessionsListResponse>;
+    /**
+     * Permanently delete a session
+     *
+     * Removes a soft-deleted session and its soft-deleted history subtree. Rejects any selected session that has not been soft-deleted. Releases event, checkpoint and blob references; unreferenced blobs follow normal garbage collection. Does not delete external workspaces, environments, backups or Temporal history.
+     */
+    readonly deploymentSessionsPurge: (client: RpcCaller, params: Api.DeploymentSessionPurgeParams) => Promise<Api.AgentApiOutcomeOfDeploymentSessionPurgeResponse>;
     /**
      * List a universe's deployment provider bindings
      *
@@ -3259,45 +3336,39 @@ export declare const rpc: {
     /**
      * Put an environment provider
      *
-     * Registers or replaces one deployment provider and its controller connection. The provider does not call this API or require access to Lightspeed.
+     * Registers or replaces a deployment provider: controller endpoint, optional data route base, and optional bearer credential for controller and data routes (write-only: kept when omitted, removed by clearCredential, never returned). The controller is probed: a definitive refusal is invalid_request, unreachable is accepted. The provider never calls Lightspeed.
      */
     readonly deploymentEnvironmentProvidersPut: (client: RpcCaller, params: Api.DeploymentEnvironmentProviderPutParams) => Promise<Api.AgentApiOutcomeOfDeploymentEnvironmentProviderPutResponse>;
     /**
      * List environment providers
      *
-     * Returns every deployment-registered deployment provider and its controller connection.
+     * Returns every deployment-registered provider with its controller endpoint, data route base, and whether a credential is stored.
      */
     readonly deploymentEnvironmentProvidersList: (client: RpcCaller, params: Api.DeploymentEnvironmentProviderListParams) => Promise<Api.AgentApiOutcomeOfDeploymentEnvironmentProviderListResponse>;
     /**
      * Read an environment provider
      *
-     * Returns one deployment-registered deployment provider and its controller connection.
+     * Returns one deployment-registered provider with its controller endpoint, data route base, and whether a credential is stored.
      */
     readonly deploymentEnvironmentProvidersRead: (client: RpcCaller, params: Api.DeploymentEnvironmentProviderReadParams) => Promise<Api.AgentApiOutcomeOfDeploymentEnvironmentProviderReadResponse>;
     /**
      * Delete an environment provider
      *
-     * Deletes a deployment provider only when no universe binding references it.
+     * Deletes a deployment provider only when no universe binding and no non-closed environment references it.
      */
     readonly deploymentEnvironmentProvidersDelete: (client: RpcCaller, params: Api.DeploymentEnvironmentProviderDeleteParams) => Promise<Api.AgentApiOutcomeOfDeploymentEnvironmentProviderDeleteResponse>;
     /**
      * Put an environment provider binding
      *
-     * Creates or replaces one universe's complete revisioned routing and admission binding. A deployment provider may have at most one binding in a universe.
+     * Creates or replaces one universe's binding to a deployment provider. Only an enabled binding admits creates, template listing, and data routes for the universe.
      */
     readonly deploymentEnvironmentProvidersBindingsPut: (client: RpcCaller, params: Api.DeploymentProviderBindingPutParams) => Promise<Api.AgentApiOutcomeOfDeploymentProviderBindingPutResponse>;
     /**
      * Delete an environment provider binding
      *
-     * Deletes a universe provider binding only after every referencing environment has reached Closed.
+     * Deletes a universe's binding to a provider only when the universe has no non-closed environment of that provider.
      */
     readonly deploymentEnvironmentProvidersBindingsDelete: (client: RpcCaller, params: Api.DeploymentProviderBindingDeleteParams) => Promise<Api.AgentApiOutcomeOfDeploymentProviderBindingDeleteResponse>;
-    /**
-     * Adopt a provider environment
-     *
-     * Creates a universe environment by transferring an existing provider target into Lightspeed's managed lifecycle. The caller must explicitly accept ownership transfer.
-     */
-    readonly deploymentEnvironmentsAdopt: (client: RpcCaller, params: Api.DeploymentEnvironmentAdoptParams) => Promise<Api.AgentApiOutcomeOfDeploymentEnvironmentAdoptResponse>;
     /**
      * List channel accounts across universes
      *