muse-code-msp 1.4.6__tar.gz → 1.4.8__tar.gz

{muse_code_msp-1.4.6/src/muse_code_msp.egg-info → muse_code_msp-1.4.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: muse-code-msp
-Version: 1.4.6
+Version: 1.4.8
 Summary: Generated Python wire types for the Muse Session Protocol (MSP). No hand-written protocol types, ever.
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/meta-models/muse-code-sdk

{muse_code_msp-1.4.6 → muse_code_msp-1.4.8}/pyproject.toml

@@ -5,7 +5,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "muse-code-msp"
-version = "1.4.6"
+version = "1.4.8"
 description = "Generated Python wire types for the Muse Session Protocol (MSP). No hand-written protocol types, ever."
 readme = "README.md"
 requires-python = ">=3.10"

{muse_code_msp-1.4.6 → muse_code_msp-1.4.8}/src/muse_code_msp/__init__.py

@@ -7,10 +7,10 @@ from __future__ import annotations
 
 from typing import Any, Final, Literal, TypedDict
 
-SCHEMA_FINGERPRINT: Final[str] = "sha256:eae467ab60cb9a5d5af4de616830f065e59375c987fd59269c8cc33ed2a1137f"
+SCHEMA_FINGERPRINT: Final[str] = "sha256:4e3200c3c9dc0cd7919d11022630d43f9bc1c5cdda375381e90b0183b5665069"
 SCHEMA_VERSION: Final[int] = 1
 EXPERIMENTAL: Final[bool] = False
-REQUIRED_HOST_VERSION: Final[str] = "1.4.6"
+REQUIRED_HOST_VERSION: Final[str] = "1.4.8"
 
 ApprovalAmendmentDurability = str  # open enum: unknown values stay representable
 APPROVAL_AMENDMENT_DURABILITY_KNOWN_VALUES: Final[tuple[str, ...]] = ("session", "localPersistent",)
@@ -51,7 +51,7 @@ BACKGROUND_INITIATOR_KNOWN_VALUES: Final[tuple[str, ...]] = ("user", "timeout",)
 
 # A grantable capability name. Open: the reserved `rawLog` entry joins this domain as an additive open-enum extension when the protocol spec un-defers — closed would make that a retype.
 CapabilityName = str  # open enum: unknown values stay representable
-CAPABILITY_NAME_KNOWN_VALUES: Final[tuple[str, ...]] = ("userShell", "sessionMcp", "sessionListStream", "feedback", "computerUseSetup",)
+CAPABILITY_NAME_KNOWN_VALUES: Final[tuple[str, ...]] = ("userShell", "sessionMcp", "sessionListStream", "feedback", "computerUseSetup", "computerUseHostSetup", "sessionRename",)
 
 # The language a Code Mode cell ran in. Open: values are lowercase VS Code language identifiers, and only `javascript` (the V8 engine) is minted today.
 CodeModeLanguage = str  # open enum: unknown values stay representable
@@ -80,6 +80,14 @@ COMPACTION_OUTCOME_KNOWN_VALUES: Final[tuple[str, ...]] = ("compacted", "noop",
 CompactionTrigger = str  # open enum: unknown values stay representable
 COMPACTION_TRIGGER_KNOWN_VALUES: Final[tuple[str, ...]] = ("manual", "auto",)
 
+# A per-app choice. **Open**, like `ComputerUseChoice`.
+ComputerUseAppChoice = str  # open enum: unknown values stay representable
+COMPUTER_USE_APP_CHOICE_KNOWN_VALUES: Final[tuple[str, ...]] = ("ask", "alwaysAllow", "blocked",)
+
+# Why Settings can't change a row. **Open**.
+ComputerUseAppLock = str  # open enum: unknown values stay representable
+COMPUTER_USE_APP_LOCK_KNOWN_VALUES: Final[tuple[str, ...]] = ("builtIn", "file",)
+
 # A capability dropdown's value. **Open**: the read result carries it, so an older client tolerates a value it does not know.
 ComputerUseChoice = str  # open enum: unknown values stay representable
 COMPUTER_USE_CHOICE_KNOWN_VALUES: Final[tuple[str, ...]] = ("ask", "alwaysAllow",)
@@ -135,7 +143,7 @@ IfBusy = Literal["queue", "steer", "replace"]
 
 # The eleven v1 item kinds plus post-v1 kinds. Open: a new kind is additive evolution, and clients MUST render unknown kinds generically.
 ItemKind = str  # open enum: unknown values stay representable
-ITEM_KIND_KNOWN_VALUES: Final[tuple[str, ...]] = ("userMessage", "agentMessage", "reasoning", "toolCall", "userShell", "subagent", "workflow", "reminderChild", "compaction", "hookRun", "sideChat", "webSearch",)
+ITEM_KIND_KNOWN_VALUES: Final[tuple[str, ...]] = ("userMessage", "agentMessage", "reasoning", "toolCall", "userShell", "subagent", "workflow", "reminderChild", "compaction", "hookRun", "sideChat", "webSearch", "monitorFeed",)
 
 # The `item/readOutput` content encoding. Closed: text media is ALWAYS `utf8` and binary media `base64`; a third value would change the client's decode contract.
 ItemReadOutputEncoding = Literal["utf8", "base64"]
@@ -151,6 +159,10 @@ JsonRpcVersion = Literal["2.0"]
 LimitKind = str  # open enum: unknown values stay representable
 LIMIT_KIND_KNOWN_VALUES: Final[tuple[str, ...]] = ("tierLimit",)
 
+# `agentMessage.messagePhase`: the phase the model declared on the commit, never inferred from position. Set on the completed item only; absent on `item/started`, which opens before the phase is recorded. Open: a client reads an absent or unknown value on a completed item as `"finalAnswer"` and still decodes the item. Not a turn-done signal; `turn/completed` is.
+MessagePhase = str  # open enum: unknown values stay representable
+MESSAGE_PHASE_KNOWN_VALUES: Final[tuple[str, ...]] = ("commentary", "finalAnswer",)
+
 # Where a model catalog came from. **Open**: an unrecognized value is an unknown source, not an error.
 ModelCatalogSource = str  # open enum: unknown values stay representable
 MODEL_CATALOG_SOURCE_KNOWN_VALUES: Final[tuple[str, ...]] = ("providerCatalog", "fakeCatalog", "unresolvedCatalog", "bundledCatalog", "configCatalog",)
@@ -205,6 +217,14 @@ RequestId = int | str
 RetractOutcome = str  # open enum: unknown values stay representable
 RETRACT_OUTCOME_KNOWN_VALUES: Final[tuple[str, ...]] = ("accepted", "declined",)
 
+# Whether this host can enforce the sandbox. A property of the host process, probed once at construction and identical for every session and every connection it serves — never requested, granted, or negotiated, which is why it is not a capability. Open: a future enforcement posture arrives as a new value, read by older clients as unknown.
+SandboxAvailability = str  # open enum: unknown values stay representable
+SANDBOX_AVAILABILITY_KNOWN_VALUES: Final[tuple[str, ...]] = ("available", "unavailable",)
+
+# Why sandbox enforcement is impossible on this host. Sent only when [`SandboxAvailability`] is `unavailable`; a client MUST NOT infer a reason when none is sent. Open: a future reason arrives as a new value, read by older clients as unknown.
+SandboxUnavailableReason = str  # open enum: unknown values stay representable
+SANDBOX_UNAVAILABLE_REASON_KNOWN_VALUES: Final[tuple[str, ...]] = ("userNamespacesDenied", "bubblewrapUnavailable",)
+
 # The closed-reason vocabulary. Server-produced and published OPEN by owner ruling — the menu-B pick, which settles that this notification reason enum publishes open rather than resting on E2's result-vocabulary rule by analogy. A crash is deliberately not a reason, because a crash emits no notification at all.
 SessionClosedReason = str  # open enum: unknown values stay representable
 SESSION_CLOSED_REASON_KNOWN_VALUES: Final[tuple[str, ...]] = ("idle", "hostShutdown",)
@@ -226,6 +246,10 @@ SessionMcpServerMode = Literal["required", "optional"]
 # Stdio framing choices exposed by session MCP configuration.
 SessionMcpStdioFraming = Literal["auto", "contentLength", "lineDelimitedJson"]
 
+# How the served session name was set. **Open enum** (`x-msp-openness: open`): v1 serves `automatic` and `custom`; a client MUST read absent — and any value it does not recognize — as unknown, never fabricated. Open: a future source such as conversation-generated names adds a value here, so closed would make that a breaking change.
+SessionNameOrigin = str  # open enum: unknown values stay representable
+SESSION_NAME_ORIGIN_KNOWN_VALUES: Final[tuple[str, ...]] = ("automatic", "custom",)
+
 # A session's load state.
 SessionStatus = str  # open enum: unknown values stay representable
 SESSION_STATUS_KNOWN_VALUES: Final[tuple[str, ...]] = ("notLoaded", "idle", "running",)
@@ -583,6 +607,27 @@ class CommandAcceptedResult(TypedDict):
     status: CommandAckStatus
 
 
+class _ComputerUseAppBase(TypedDict):
+    bundleId: str
+    choice: ComputerUseAppChoice
+
+
+class ComputerUseApp(_ComputerUseAppBase, total=False):
+    """One row of the Settings apps list."""
+
+    lastAskedAt: str
+    locked: bool
+    lockedBy: ComputerUseAppLock
+    name: str
+
+
+class ComputerUseAppPatch(TypedDict):
+    """One per-app choice to set in `computerUseSettings/update`."""
+
+    bundleId: str
+    choice: ComputerUseAppChoice
+
+
 class _ComputerUseBlockedAppBase(TypedDict):
     bundleId: str
     locked: bool
@@ -594,46 +639,66 @@ class ComputerUseBlockedApp(_ComputerUseBlockedAppBase, total=False):
     prefix: bool
 
 
-class ComputerUseSettings(TypedDict):
-    """`computerUseSettings/read` result, also answered by `computerUseSettings/update`."""
+class ComputerUseInstalledApp(TypedDict):
+    """One installed or running app, for Settings' app picker."""
+
+    bundleId: str
+    name: str
+
 
+class _ComputerUseSettingsBase(TypedDict):
     blockedApps: list[ComputerUseBlockedApp]
     computerControl: ComputerUseChoice
     screenshots: ComputerUseChoice
 
 
+class ComputerUseSettings(_ComputerUseSettingsBase, total=False):
+    """`computerUseSettings/read` result, also answered by `computerUseSettings/update`."""
+
+    apps: list[ComputerUseApp]
+    installedApps: list[ComputerUseInstalledApp]
+
+
 class ComputerUseSettingsReadParams(TypedDict, total=False):
     """`computerUseSettings/read` params."""
 
+    installed: bool
     showBuiltIns: bool
 
 
 class ComputerUseSettingsUpdateParams(TypedDict, total=False):
     """`computerUseSettings/update` params: a patch. Omitted members are left alone; the whole patch applies or none of it does."""
 
+    apps: list[ComputerUseAppPatch]
     blockApps: list[str]
     computerControl: ComputerUseChoice
     screenshots: ComputerUseChoice
     unblockApps: list[str]
 
 
-class ComputerUseSetupChanged(TypedDict):
+class _ComputerUseSetupChangedBase(TypedDict):
+    state: ComputerUseSetupState
+
+
+class ComputerUseSetupChanged(_ComputerUseSetupChangedBase, total=False):
     """`computerUseSetup/changed` params."""
 
     sessionId: str
-    state: ComputerUseSetupState
 
 
-class ComputerUseSetupReadParams(TypedDict):
+class ComputerUseSetupReadParams(TypedDict, total=False):
     """`computerUseSetup/read` params."""
 
     sessionId: str
 
 
-class ComputerUseSetupStartParams(TypedDict):
+class _ComputerUseSetupStartParamsBase(TypedDict):
+    commandId: str
+
+
+class ComputerUseSetupStartParams(_ComputerUseSetupStartParamsBase, total=False):
     """`computerUseSetup/start` params: a human command."""
 
-    commandId: str
     sessionId: str
 
 
@@ -926,6 +991,8 @@ class _InitializeResultBase(TypedDict):
 class InitializeResult(_InitializeResultBase, total=False):
     """The `initialize` result."""
 
+    sandboxAvailability: SandboxAvailability
+    sandboxUnavailableReason: SandboxUnavailableReason
     sessionDurability: SessionDurability
 
 
@@ -954,6 +1021,7 @@ class Item(_ItemBase, total=False):
     commandId: str
     commandText: str
     controlStatus: SubagentControlStatus
+    cutOff: bool
     declaredPhase: str
     depth: int
     displayText: str
@@ -970,7 +1038,10 @@ class Item(_ItemBase, total=False):
     hookKey: str
     label: str
     message: str
+    messagePhase: MessagePhase
     modelVisibleContent: list[ModelVisibleContent]
+    monitorDescription: str
+    monitorId: str
     objective: str
     outcome: CompactionOutcome
     outputRef: OutputRef
@@ -1547,9 +1618,11 @@ class Session(_SessionBase, total=False):
     branch: str
     createdByClient: ClientInfo
     firstUserPrompt: str
+    generatedName: str
     kind: SessionKind
     lastActivityAt: str
     name: str
+    nameOrigin: SessionNameOrigin
     parentSessionId: str
     sideFrom: SideProvenance | None
     title: str
@@ -1754,15 +1827,20 @@ class SessionModelRouteUnservedParams(TypedDict):
     viewCursor: str
 
 
-class SessionNameChangedParams(TypedDict):
-    """`session/nameChanged` params: the fold of ANY durable session-name record — the FIRST-NAMING automatic allocate as well as an accepted `session/rename` (or the same in-process runtime command). Replace-wholesale like every sibling."""
-
+class _SessionNameChangedParamsBase(TypedDict):
     name: str
     sessionId: str
     sourceRange: SourceRange
     viewCursor: str
 
 
+class SessionNameChangedParams(_SessionNameChangedParamsBase, total=False):
+    """`session/nameChanged` params: the fold of ANY durable session-name record — the FIRST-NAMING automatic allocate as well as an accepted `session/rename` (or the same in-process runtime command). Replace-wholesale like every sibling."""
+
+    generatedName: str
+    nameOrigin: SessionNameOrigin
+
+
 class _SessionReadParamsBase(TypedDict):
     sessionId: str
 
@@ -1827,6 +1905,7 @@ class SessionResumeParams(_SessionResumeParamsBase, total=False):
     cursor: str | None
     excludeItems: bool
     history: HistoryPreference
+    permissionProfile: str
 
 
 class _SessionResumeResultBase(TypedDict):
@@ -2023,6 +2102,7 @@ class SkillCatalogEntry(_SkillCatalogEntryBase, total=False):
 
     argumentHint: str
     pluginId: str
+    title: str
 
 
 class SkillChangedParams(TypedDict):
@@ -2495,6 +2575,25 @@ class TurnInterruptResult(TypedDict):
     turnId: str
 
 
+class _TurnModelRetryScheduledParamsBase(TypedDict):
+    attempt: int
+    maxAttempts: int
+    nextAttempt: int
+    retryDelayMs: int
+    sessionId: str
+    sourceRange: SourceRange
+    turnId: str
+    viewCursor: str
+
+
+class TurnModelRetryScheduledParams(_TurnModelRetryScheduledParamsBase, total=False):
+    """`turn/modelRetryScheduled` params: a durable model-stream retry-scheduled fact folded — the provider backoff behind one model attempt is observable BEFORE the turn terminates, so a streaming client can render \"system words · retrying in Ss · attempt N/M\" instead of dead air. Non-terminal: it never resolves a turn-wait. The sibling `turn/retryScheduled` shape at the model layer: same member names and semantics (attempt/nextAttempt/maxAttempts/ retryDelayMs/system/errorKind/httpStatus), minus `reason` — the row's words derive from `errorKind` through the shared gate-off mapping, and the recorded machine message is not user text. The delay is the recorded scheduled backoff, never an absolute fire time — clients derive any countdown locally. `sourceRange` cites the session stream's mirror of the task-lifecycle record."""
+
+    errorKind: str
+    httpStatus: int
+    system: str
+
+
 class _TurnRefBase(TypedDict):
     commandId: str
     turnId: str
@@ -3052,8 +3151,9 @@ METHODS: Final[dict[str, MethodSpec]] = {
     "approval/listPending": {"description": "Reads the full pending approval and user-input payloads for a session; a lease-free fold read.", "params": "ApprovalListPendingParams", "result": "ApprovalListPendingResult"},
     "computerUseSettings/read": {"description": "Reads the computer-use Settings: each capability's Always allow switch and the user's blocked apps from the approval policy store, plus the built-in blocks as locked rows when asked; computerUseUnavailable while the CUA gate is off.", "params": "ComputerUseSettingsReadParams", "result": "ComputerUseSettings"},
     "computerUseSettings/update": {"description": "Applies one Settings patch (capability dropdowns, blocked apps to add or remove) all-or-nothing and answers the user's Settings after it; a built-in block is refused in either list; computerUseUnavailable while the CUA gate is off.", "params": "ComputerUseSettingsUpdateParams", "result": "ComputerUseSettings"},
-    "computerUseSetup/read": {"description": "Reads one session's computer-use setup state and permissions by running cua_setup status for it as a host command: no model turn, no prompt, no spawn; computerUseUnavailable while the CUA gate is off.", "params": "ComputerUseSetupReadParams", "result": "ComputerUseSetupState"},
-    "computerUseSetup/start": {"description": "A human command: runs cua_setup start for one session, between turns, exactly as the TUI's /cua on does, and answers the state it settles in, with the refusal code when setup refused; computerUseUnavailable while the CUA gate is off.", "params": "ComputerUseSetupStartParams", "result": "ComputerUseSetupState"},
+    "computerUseSetup/check": {"description": "Reads the host's three macOS grants with no prompt: starts the computer-use helper only long enough to check them, reports each as granted or missing, and ends it; never requests a grant or opens System Settings. Needs computerUseHostSetup; commandRejected runtime_busy while a setup attempt holds the host.", "params": None, "result": "ComputerUseSetupState"},
+    "computerUseSetup/read": {"description": "Reads one session's computer-use setup state and permissions by running cua_setup status for it as a host command: no model turn, no prompt, no spawn; computerUseUnavailable while the CUA gate is off. Without sessionId it reads the host's own setup, with computerUseHostSetup.", "params": "ComputerUseSetupReadParams", "result": "ComputerUseSetupState"},
+    "computerUseSetup/start": {"description": "A human command: runs cua_setup start for one session, between turns, exactly as the TUI's /cua on does, and answers the state it settles in, with the refusal code when setup refused; computerUseUnavailable while the CUA gate is off. Without sessionId it starts the host's own setup under one host owner, with computerUseHostSetup.", "params": "ComputerUseSetupStartParams", "result": "ComputerUseSetupState"},
     "feedback/submit": {"description": "Submits a first-party feedback report through the host, reusing the TUI submitter seam (consent, bundle-first persistence, redaction), and answers the upload receipt.", "params": "FeedbackSubmitParams", "result": "FeedbackSubmitResult"},
     "goal/clear": {"description": "Clears the session goal; never wakes and its ack never names a turn.", "params": "GoalClearParams", "result": "GoalCommandResult"},
     "goal/edit": {"description": "Replaces the current goal's objective under the same wake gate as goal/set.", "params": "GoalEditParams", "result": "GoalCommandResult"},
@@ -3122,7 +3222,7 @@ NOTIFICATIONS: Final[dict[str, NotificationSpec]] = {
     "approval/requested": {"description": "An approval opened: the fold of its durable Requested record.", "params": "ApprovalRequestParams"},
     "approval/resolved": {"description": "The first durable approval terminal landed; protected delivery.", "params": "ApprovalResolvedParams"},
     "approval/updated": {"description": "A non-terminal approval record changed the pending view.", "params": "ApprovalUpdatedParams"},
-    "computerUseSetup/changed": {"description": "A computerUseSetup/read or /start observed a session's setup state differ from the last one sent for it, including inProgress when a start begins and the state it settles in.", "params": "ComputerUseSetupChanged"},
+    "computerUseSetup/changed": {"description": "A computerUseSetup/read or /start observed a session's setup state differ from the last one sent for it, including inProgress when a start begins and the state it settles in. Without sessionId it carries the host's own setup state, delivered only with computerUseHostSetup.", "params": "ComputerUseSetupChanged"},
     "initialized": {"description": "Client-to-server notification closing the handshake; no params.", "params": None},
     "item/completed": {"description": "An item reached its terminal state: the authoritative final object.", "params": "ItemCompletedParams"},
     "item/delta": {"description": "Streaming append to an open item's field path (ephemeral-sourced, no sourceRange; opt-out-able).", "params": "ItemDeltaParams"},
@@ -3149,6 +3249,7 @@ NOTIFICATIONS: Final[dict[str, NotificationSpec]] = {
     "skill/changed": {"description": "The session's user-invocable skill set changed; clients re-issue skill/list. A live host-state projection, not a view event.", "params": "SkillChangedParams"},
     "turn/completed": {"description": "Turn terminal: completed | failed | cancelled, with usage and the settled error object.", "params": "TurnCompletedParams"},
     "turn/foregroundCompleted": {"description": "The turn's foreground work is done while named background reminder checks hold the turn open; explicitly non-terminal.", "params": "TurnForegroundCompletedParams"},
+    "turn/modelRetryScheduled": {"description": "A provider backoff behind one model attempt is scheduled and waiting out its delay; observable mid-turn, non-terminal.", "params": "TurnModelRetryScheduledParams"},
     "turn/retracted": {"description": "An accepted interrupt's paired retract durably settled, accepted or declined.", "params": "TurnRetractedParams"},
     "turn/retryScheduled": {"description": "A failing model attempt's retry is scheduled and waiting out its backoff; observable mid-turn, non-terminal.", "params": "TurnRetryScheduledParams"},
     "turn/started": {"description": "A foreground turn began running.", "params": "TurnStartedParams"},
@@ -3200,4 +3301,4 @@ ERRORS: Final[tuple[ErrorSpec, ...]] = (
     {"code": -32057, "kind": "userInputAnswerInvalid", "retryable": False, "overrideKinds": ()},
 )
 
-GRANTABLE_CAPABILITIES: Final[tuple[str, ...]] = ("userShell", "sessionMcp", "sessionListStream", "feedback", "computerUseSetup",)
+GRANTABLE_CAPABILITIES: Final[tuple[str, ...]] = ("userShell", "sessionMcp", "sessionListStream", "feedback", "computerUseSetup", "computerUseHostSetup", "sessionRename",)

{muse_code_msp-1.4.6 → muse_code_msp-1.4.8}/src/muse_code_msp/experimental/__init__.py

@@ -7,10 +7,10 @@ from __future__ import annotations
 
 from typing import Any, Final, Literal, TypedDict
 
-SCHEMA_FINGERPRINT: Final[str] = "sha256:9c425a9b1b30ff1810012585626a7e7baca1495963a198104fa5544fd02d43c2"
+SCHEMA_FINGERPRINT: Final[str] = "sha256:c533a6c39dca76ab4da20084e0b730712e0cae8db4644721290e13676aec90a3"
 SCHEMA_VERSION: Final[int] = 1
 EXPERIMENTAL: Final[bool] = True
-REQUIRED_HOST_VERSION: Final[str] = "1.4.6"
+REQUIRED_HOST_VERSION: Final[str] = "1.4.8"
 
 # How a login flow ended. Server-produced, so the vocabulary is open per the E2 rule — a future flow may end in a new way additively.
 AccountLoginOutcome = str  # open enum: unknown values stay representable
@@ -70,7 +70,7 @@ BACKGROUND_STATE_KNOWN_VALUES: Final[tuple[str, ...]] = ("backgrounded",)
 
 # A grantable capability name. Open: the reserved `rawLog` entry joins this domain as an additive open-enum extension when the protocol spec un-defers — closed would make that a retype.
 CapabilityName = str  # open enum: unknown values stay representable
-CAPABILITY_NAME_KNOWN_VALUES: Final[tuple[str, ...]] = ("userShell", "sessionMcp", "sessionListStream", "feedback", "computerUseSetup", "peerMessaging", "rawLog",)
+CAPABILITY_NAME_KNOWN_VALUES: Final[tuple[str, ...]] = ("userShell", "sessionMcp", "sessionListStream", "feedback", "computerUseSetup", "computerUseHostSetup", "sessionRename", "peerMessaging", "rawLog",)
 
 # The language a Code Mode cell ran in. Open: values are lowercase VS Code language identifiers, and only `javascript` (the V8 engine) is minted today.
 CodeModeLanguage = str  # open enum: unknown values stay representable
@@ -99,6 +99,14 @@ COMPACTION_OUTCOME_KNOWN_VALUES: Final[tuple[str, ...]] = ("compacted", "noop",
 CompactionTrigger = str  # open enum: unknown values stay representable
 COMPACTION_TRIGGER_KNOWN_VALUES: Final[tuple[str, ...]] = ("manual", "auto",)
 
+# A per-app choice. **Open**, like `ComputerUseChoice`.
+ComputerUseAppChoice = str  # open enum: unknown values stay representable
+COMPUTER_USE_APP_CHOICE_KNOWN_VALUES: Final[tuple[str, ...]] = ("ask", "alwaysAllow", "blocked",)
+
+# Why Settings can't change a row. **Open**.
+ComputerUseAppLock = str  # open enum: unknown values stay representable
+COMPUTER_USE_APP_LOCK_KNOWN_VALUES: Final[tuple[str, ...]] = ("builtIn", "file",)
+
 # A capability dropdown's value. **Open**: the read result carries it, so an older client tolerates a value it does not know.
 ComputerUseChoice = str  # open enum: unknown values stay representable
 COMPUTER_USE_CHOICE_KNOWN_VALUES: Final[tuple[str, ...]] = ("ask", "alwaysAllow",)
@@ -154,7 +162,7 @@ IfBusy = Literal["queue", "steer", "replace"]
 
 # The eleven v1 item kinds plus post-v1 kinds. Open: a new kind is additive evolution, and clients MUST render unknown kinds generically.
 ItemKind = str  # open enum: unknown values stay representable
-ITEM_KIND_KNOWN_VALUES: Final[tuple[str, ...]] = ("userMessage", "agentMessage", "reasoning", "toolCall", "userShell", "subagent", "workflow", "reminderChild", "compaction", "hookRun", "sideChat", "webSearch", "skillRead",)
+ITEM_KIND_KNOWN_VALUES: Final[tuple[str, ...]] = ("userMessage", "agentMessage", "reasoning", "toolCall", "userShell", "subagent", "workflow", "reminderChild", "compaction", "hookRun", "sideChat", "webSearch", "monitorFeed", "skillRead",)
 
 # The `item/readOutput` content encoding. Closed: text media is ALWAYS `utf8` and binary media `base64`; a third value would change the client's decode contract.
 ItemReadOutputEncoding = Literal["utf8", "base64"]
@@ -170,6 +178,10 @@ JsonRpcVersion = Literal["2.0"]
 LimitKind = str  # open enum: unknown values stay representable
 LIMIT_KIND_KNOWN_VALUES: Final[tuple[str, ...]] = ("tierLimit",)
 
+# `log/gap` `reason`: only a `replayAnchorLost` gap is refillable through `log/page`; an `overFrame` gap is a known hole on that connection, its hole `(after, next]` less `next` when it is delivered. **Open**: a server-produced vocabulary.
+LogGapReason = str  # open enum: unknown values stay representable
+LOG_GAP_REASON_KNOWN_VALUES: Final[tuple[str, ...]] = ("replayAnchorLost", "overFrame",)
+
 # The login flow's terminal vocabulary. Open.
 McpOAuthLoginOutcome = str  # open enum: unknown values stay representable
 MCP_O_AUTH_LOGIN_OUTCOME_KNOWN_VALUES: Final[tuple[str, ...]] = ("granted", "denied", "expired", "cancelled", "failed",)
@@ -190,6 +202,10 @@ MCP_SERVER_LIST_SOURCE_KNOWN_VALUES: Final[tuple[str, ...]] = ("settings", "plug
 McpServerListTransport = str  # open enum: unknown values stay representable
 MCP_SERVER_LIST_TRANSPORT_KNOWN_VALUES: Final[tuple[str, ...]] = ("stdio", "streamableHttp", "unknown",)
 
+# `agentMessage.messagePhase`: the phase the model declared on the commit, never inferred from position. Set on the completed item only; absent on `item/started`, which opens before the phase is recorded. Open: a client reads an absent or unknown value on a completed item as `"finalAnswer"` and still decodes the item. Not a turn-done signal; `turn/completed` is.
+MessagePhase = str  # open enum: unknown values stay representable
+MESSAGE_PHASE_KNOWN_VALUES: Final[tuple[str, ...]] = ("commentary", "finalAnswer",)
+
 # Where a model catalog came from. **Open**: an unrecognized value is an unknown source, not an error.
 ModelCatalogSource = str  # open enum: unknown values stay representable
 MODEL_CATALOG_SOURCE_KNOWN_VALUES: Final[tuple[str, ...]] = ("providerCatalog", "fakeCatalog", "unresolvedCatalog", "bundledCatalog", "configCatalog",)
@@ -210,6 +226,18 @@ PEER_STATUS_KNOWN_VALUES: Final[tuple[str, ...]] = ("idle", "active", "busy", "c
 PendingRequestKind = str  # open enum: unknown values stay representable
 PENDING_REQUEST_KIND_KNOWN_VALUES: Final[tuple[str, ...]] = ("approval", "userInput",)
 
+# A profile's effective approval axis. **Open**: the vocabulary can widen.
+PermissionApprovalAxis = str  # open enum: unknown values stay representable
+PERMISSION_APPROVAL_AXIS_KNOWN_VALUES: Final[tuple[str, ...]] = ("onRequest", "promptUnmatched", "allowAll",)
+
+# A profile's effective filesystem axis. **Open**: the vocabulary can widen.
+PermissionFilesystemAxis = str  # open enum: unknown values stay representable
+PERMISSION_FILESYSTEM_AXIS_KNOWN_VALUES: Final[tuple[str, ...]] = ("sandboxed", "unrestricted",)
+
+# A profile's effective local-command network axis. **Open**: the vocabulary can widen.
+PermissionNetworkAxis = str  # open enum: unknown values stay representable
+PERMISSION_NETWORK_AXIS_KNOWN_VALUES: Final[tuple[str, ...]] = ("restricted", "off", "enabled",)
+
 # Whether a profile change did anything. The accepted arm spells `completed` exactly as `session/setApprovalMode` so the shared member never forks spellings. Apply failures are `commandRejected`.
 PermissionProfileApplyOutcome = str  # open enum: unknown values stay representable
 PERMISSION_PROFILE_APPLY_OUTCOME_KNOWN_VALUES: Final[tuple[str, ...]] = ("completed", "noop",)
@@ -264,6 +292,14 @@ RETRACT_OUTCOME_KNOWN_VALUES: Final[tuple[str, ...]] = ("accepted", "declined",)
 ReviewerAuthority = str  # open enum: unknown values stay representable
 REVIEWER_AUTHORITY_KNOWN_VALUES: Final[tuple[str, ...]] = ("autoReview", "human", "none",)
 
+# Whether this host can enforce the sandbox. A property of the host process, probed once at construction and identical for every session and every connection it serves — never requested, granted, or negotiated, which is why it is not a capability. Open: a future enforcement posture arrives as a new value, read by older clients as unknown.
+SandboxAvailability = str  # open enum: unknown values stay representable
+SANDBOX_AVAILABILITY_KNOWN_VALUES: Final[tuple[str, ...]] = ("available", "unavailable",)
+
+# Why sandbox enforcement is impossible on this host. Sent only when [`SandboxAvailability`] is `unavailable`; a client MUST NOT infer a reason when none is sent. Open: a future reason arrives as a new value, read by older clients as unknown.
+SandboxUnavailableReason = str  # open enum: unknown values stay representable
+SANDBOX_UNAVAILABLE_REASON_KNOWN_VALUES: Final[tuple[str, ...]] = ("userNamespacesDenied", "bubblewrapUnavailable",)
+
 # The closed-reason vocabulary. Server-produced and published OPEN by owner ruling — the menu-B pick, which settles that this notification reason enum publishes open rather than resting on E2's result-vocabulary rule by analogy. A crash is deliberately not a reason, because a crash emits no notification at all.
 SessionClosedReason = str  # open enum: unknown values stay representable
 SESSION_CLOSED_REASON_KNOWN_VALUES: Final[tuple[str, ...]] = ("idle", "hostShutdown",)
@@ -285,6 +321,16 @@ SessionMcpServerMode = Literal["required", "optional"]
 # Stdio framing choices exposed by session MCP configuration.
 SessionMcpStdioFraming = Literal["auto", "contentLength", "lineDelimitedJson"]
 
+# How the served session name was set. **Open enum** (`x-msp-openness: open`): v1 serves `automatic` and `custom`; a client MUST read absent — and any value it does not recognize — as unknown, never fabricated. Open: a future source such as conversation-generated names adds a value here, so closed would make that a breaking change.
+SessionNameOrigin = str  # open enum: unknown values stay representable
+SESSION_NAME_ORIGIN_KNOWN_VALUES: Final[tuple[str, ...]] = ("automatic", "custom",)
+
+# `session/reportStartupPhases` span phase: the `StartupPhasesRecord` phase vocabulary in camelCase. The host maps each value onto the record's snake_case spelling at append. Experimental: the stable bundle strips this until the surface stabilizes (in-v1 row 348).
+SessionReportStartupPhase = Literal["terminalProbe", "sessionOpen", "runtimeInit", "firstFrame", "inputReady"]
+
+# `session/reportStartupPhases` terminal color provenance: the durable `TerminalColorProvenance` vocabulary in camelCase. The host maps each value onto the record spelling at append. Experimental: the stable bundle strips this until the surface stabilizes (in-v1 row 348).
+SessionReportTerminalColorProvenance = Literal["probed", "defaulted", "overridden"]
+
 # A session's load state.
 SessionStatus = str  # open enum: unknown values stay representable
 SESSION_STATUS_KNOWN_VALUES: Final[tuple[str, ...]] = ("notLoaded", "idle", "running",)
@@ -798,6 +844,27 @@ class CommandAcceptedResult(TypedDict):
     status: CommandAckStatus
 
 
+class _ComputerUseAppBase(TypedDict):
+    bundleId: str
+    choice: ComputerUseAppChoice
+
+
+class ComputerUseApp(_ComputerUseAppBase, total=False):
+    """One row of the Settings apps list."""
+
+    lastAskedAt: str
+    locked: bool
+    lockedBy: ComputerUseAppLock
+    name: str
+
+
+class ComputerUseAppPatch(TypedDict):
+    """One per-app choice to set in `computerUseSettings/update`."""
+
+    bundleId: str
+    choice: ComputerUseAppChoice
+
+
 class _ComputerUseBlockedAppBase(TypedDict):
     bundleId: str
     locked: bool
@@ -809,46 +876,66 @@ class ComputerUseBlockedApp(_ComputerUseBlockedAppBase, total=False):
     prefix: bool
 
 
-class ComputerUseSettings(TypedDict):
-    """`computerUseSettings/read` result, also answered by `computerUseSettings/update`."""
+class ComputerUseInstalledApp(TypedDict):
+    """One installed or running app, for Settings' app picker."""
+
+    bundleId: str
+    name: str
 
+
+class _ComputerUseSettingsBase(TypedDict):
     blockedApps: list[ComputerUseBlockedApp]
     computerControl: ComputerUseChoice
     screenshots: ComputerUseChoice
 
 
+class ComputerUseSettings(_ComputerUseSettingsBase, total=False):
+    """`computerUseSettings/read` result, also answered by `computerUseSettings/update`."""
+
+    apps: list[ComputerUseApp]
+    installedApps: list[ComputerUseInstalledApp]
+
+
 class ComputerUseSettingsReadParams(TypedDict, total=False):
     """`computerUseSettings/read` params."""
 
+    installed: bool
     showBuiltIns: bool
 
 
 class ComputerUseSettingsUpdateParams(TypedDict, total=False):
     """`computerUseSettings/update` params: a patch. Omitted members are left alone; the whole patch applies or none of it does."""
 
+    apps: list[ComputerUseAppPatch]
     blockApps: list[str]
     computerControl: ComputerUseChoice
     screenshots: ComputerUseChoice
     unblockApps: list[str]
 
 
-class ComputerUseSetupChanged(TypedDict):
+class _ComputerUseSetupChangedBase(TypedDict):
+    state: ComputerUseSetupState
+
+
+class ComputerUseSetupChanged(_ComputerUseSetupChangedBase, total=False):
     """`computerUseSetup/changed` params."""
 
     sessionId: str
-    state: ComputerUseSetupState
 
 
-class ComputerUseSetupReadParams(TypedDict):
+class ComputerUseSetupReadParams(TypedDict, total=False):
     """`computerUseSetup/read` params."""
 
     sessionId: str
 
 
-class ComputerUseSetupStartParams(TypedDict):
+class _ComputerUseSetupStartParamsBase(TypedDict):
+    commandId: str
+
+
+class ComputerUseSetupStartParams(_ComputerUseSetupStartParamsBase, total=False):
     """`computerUseSetup/start` params: a human command."""
 
-    commandId: str
     sessionId: str
 
 
@@ -929,14 +1016,18 @@ class EffectiveModel(TypedDict):
     source: ModelChangeSource
 
 
-class EffectivePermissionState(TypedDict):
-    """The effective permission-state projection: the committed native permission snapshot (profile identity, reviewer authority) plus the live per-session runtime's attachment evidence. The same object `session/setPermissionProfile` returns and the `Session` object carries as `permissionState`. Served values must be coherent: a read never combines an old profile with a newer runtime's attachment claim."""
-
+class _EffectivePermissionStateBase(TypedDict):
     profileId: str | None
     reviewerAttached: bool
     reviewerAuthority: ReviewerAuthority
 
 
+class EffectivePermissionState(_EffectivePermissionStateBase, total=False):
+    """The effective permission-state projection: the committed native permission snapshot (profile identity, reviewer authority) plus the live per-session runtime's attachment evidence. The same object `session/setPermissionProfile` returns and the `Session` object carries as `permissionState`. Served values must be coherent: a read never combines an old profile with a newer runtime's attachment claim."""
+
+    axes: PermissionAxes
+
+
 class _ErrorDataBase(TypedDict):
     kind: ErrorKind
 
@@ -1160,6 +1251,8 @@ class _InitializeResultBase(TypedDict):
 class InitializeResult(_InitializeResultBase, total=False):
     """The `initialize` result."""
 
+    sandboxAvailability: SandboxAvailability
+    sandboxUnavailableReason: SandboxUnavailableReason
     sessionDurability: SessionDurability
 
 
@@ -1190,6 +1283,7 @@ class Item(_ItemBase, total=False):
     commandId: str
     commandText: str
     controlStatus: SubagentControlStatus
+    cutOff: bool
     declaredPhase: str
     depth: int
     displayText: str
@@ -1206,7 +1300,10 @@ class Item(_ItemBase, total=False):
     hookKey: str
     label: str
     message: str
+    messagePhase: MessagePhase
     modelVisibleContent: list[ModelVisibleContent]
+    monitorDescription: str
+    monitorId: str
     objective: str
     outcome: CompactionOutcome
     outputRef: OutputRef
@@ -1340,15 +1437,19 @@ class LastTurn(_LastTurnBase, total=False):
     reason: str
 
 
-class LogGapParams(TypedDict):
-    """`log/gap` notification params: the raw-altitude shape of the shared gap contract, per subscription. The client MUST fill `(after, next)` with `log/page` before treating its fold as current."""
-
+class _LogGapParamsBase(TypedDict):
     after: RecordPosition
     next: RecordPosition
     stream: StreamRef
     subscriptionId: int
 
 
+class LogGapParams(_LogGapParamsBase, total=False):
+    """`log/gap` notification params: the raw-altitude shape of the shared gap contract, per subscription. The client MUST fill `(after, next)` with `log/page` before treating its fold as current, except for an `overFrame` gap (see [`LogGapReason`])."""
+
+    reason: LogGapReason
+
+
 # `log/page` params.
 LogPageParams = TypedDict("LogPageParams", {
     "limit": "int",
@@ -1700,6 +1801,15 @@ class PendingUserInputPointer(_PendingUserInputPointerBase, total=False):
     itemId: str
 
 
+class PermissionAxes(TypedDict):
+    """A committed profile's effective four axis values: the resolved filesystem, network, approval, and reviewer the YOLO predicate reads. The reviewer member reuses `ReviewerAuthority`, so its spelling never drifts from the served `reviewerAuthority`."""
+
+    approval: PermissionApprovalAxis
+    filesystem: PermissionFilesystemAxis
+    network: PermissionNetworkAxis
+    reviewer: ReviewerAuthority
+
+
 class PermissionProfileListParams(TypedDict, total=False):
     """`permissionProfile/list` params: read the native profile catalog. A read-only method — takes no lease, grants nothing."""
 
@@ -2057,9 +2167,11 @@ class Session(_SessionBase, total=False):
     branch: str
     createdByClient: ClientInfo
     firstUserPrompt: str
+    generatedName: str
     kind: SessionKind
     lastActivityAt: str
     name: str
+    nameOrigin: SessionNameOrigin
     parentSessionId: str
     permissionState: EffectivePermissionState
     sideFrom: SideProvenance | None
@@ -2266,15 +2378,20 @@ class SessionModelRouteUnservedParams(TypedDict):
     viewCursor: str
 
 
-class SessionNameChangedParams(TypedDict):
-    """`session/nameChanged` params: the fold of ANY durable session-name record — the FIRST-NAMING automatic allocate as well as an accepted `session/rename` (or the same in-process runtime command). Replace-wholesale like every sibling."""
-
+class _SessionNameChangedParamsBase(TypedDict):
     name: str
     sessionId: str
     sourceRange: SourceRange
     viewCursor: str
 
 
+class SessionNameChangedParams(_SessionNameChangedParamsBase, total=False):
+    """`session/nameChanged` params: the fold of ANY durable session-name record — the FIRST-NAMING automatic allocate as well as an accepted `session/rename` (or the same in-process runtime command). Replace-wholesale like every sibling."""
+
+    generatedName: str
+    nameOrigin: SessionNameOrigin
+
+
 class SessionPermissionProfileChangedParams(TypedDict):
     """`session/permissionProfileChanged` params: the fold of the durable profile-commit audit fact — fired on every accepted POST-EPOCH-ONE profile commit, never for a mode-only change (that writes no such fact and keeps folding `session/approvalModeChanged` from its own reconfigure fact) and never for a reviewer-attachment change. It folds on EVERY `PermissionProfileCommittedV1` EXCEPT the epoch-one initialization fact and fork/child derivation facts — their causes (`newSessionDefault`, `launchCli` at start, `fork`, `childSpawn`, `legacyInitialization`, `launchOverrides`) are unreachable on the wire until a later commit carries them — so an omitted-profile start and an empty-cut fork fold nothing and their `\"\"`-cursor rules hold byte-for-byte. A held id recommitting under a changed definition or an managed refresh folds too (the `profileId` may equal the prior), exactly as the approvalMode precedent folds per accepted change. The `session/approvalModeChanged` member pattern with `profileId` in place of `mode`; additive-optional under the protocol spec (clients predating it skip the unknown method); subscription-gated as the protocol spec view events are."""
 
@@ -2287,6 +2404,26 @@ class SessionPermissionProfileChangedParams(TypedDict):
     viewCursor: str
 
 
+class SessionPromptHintCandidate(TypedDict):
+    """One `session/promptHint` candidate: the table row's stable `id` plus its model-facing \"relevant when …\" description. Display copy stays client-side; the wire never carries it. Experimental: the stable bundle strips this until the surface stabilizes (in-v1 row 346)."""
+
+    description: str
+    id: str
+
+
+class SessionPromptHintParams(TypedDict):
+    """`session/promptHint` params: the session plus the client-filtered candidate table. A read-only query in the `model/list` mold: no `commandId`, no durable record, no view event — the display-only side call over the wire. Experimental: the stable bundle strips this until the surface stabilizes (in-v1 row 346)."""
+
+    candidates: list[SessionPromptHintCandidate]
+    sessionId: str
+
+
+class SessionPromptHintResult(TypedDict, total=False):
+    """`session/promptHint` result: the picked table id, or `None` when the model declines (the NONE arm) — never a copy string, so the pinned table stays the single source of truth. Experimental: the stable bundle strips this until the surface stabilizes (in-v1 row 346)."""
+
+    hintId: str
+
+
 class _SessionReadParamsBase(TypedDict):
     sessionId: str
 
@@ -2339,6 +2476,32 @@ class SessionRenameResult(_SessionRenameResultBase, total=False):
     name: str
 
 
+class _SessionReportStartupPhaseSpanBase(TypedDict):
+    durationMs: int
+    phase: SessionReportStartupPhase
+    startMs: int
+
+
+class SessionReportStartupPhaseSpan(_SessionReportStartupPhaseSpanBase, total=False):
+    """`session/reportStartupPhases` span: one `StartupPhasesRecord` phase row in camelCase. The host ignores unknown members and fails closed (`invalidParams`) on an unknown phase or provenance value; a `colorProvenance` on any other phase is stripped. The host maps each row onto the record's snake_case spelling at append. Experimental: the stable bundle strips this until the surface stabilizes (in-v1 row 348)."""
+
+    colorProvenance: SessionReportTerminalColorProvenance
+
+
+class SessionReportStartupPhasesParams(TypedDict):
+    """`session/reportStartupPhases` params: the served session, the client-minted launch nonce (one UUID per process launch, any textual UUID form), and the finished spans. No `commandId`: the nonce is the idempotency key and the call is best-effort. Experimental: the stable bundle strips this until the surface stabilizes (in-v1 row 348)."""
+
+    launchNonce: str
+    phases: list[SessionReportStartupPhaseSpan]
+    sessionId: str
+
+
+class SessionReportStartupPhasesResult(TypedDict):
+    """`session/reportStartupPhases` result: whether this report appended. A duplicate nonce succeeds with `recorded: false` and appends nothing. Experimental: the stable bundle strips this until the surface stabilizes (in-v1 row 348)."""
+
+    recorded: bool
+
+
 class _SessionResumeParamsBase(TypedDict):
     commandId: str
     sessionId: str
@@ -2351,6 +2514,7 @@ class SessionResumeParams(_SessionResumeParamsBase, total=False):
     cursor: str | None
     excludeItems: bool
     history: HistoryPreference
+    permissionProfile: str
 
 
 class _SessionResumeResultBase(TypedDict):
@@ -2627,6 +2791,7 @@ class SkillCatalogEntry(_SkillCatalogEntryBase, total=False):
 
     argumentHint: str
     pluginId: str
+    title: str
 
 
 class SkillChangedParams(TypedDict):
@@ -3099,6 +3264,25 @@ class TurnInterruptResult(TypedDict):
     turnId: str
 
 
+class _TurnModelRetryScheduledParamsBase(TypedDict):
+    attempt: int
+    maxAttempts: int
+    nextAttempt: int
+    retryDelayMs: int
+    sessionId: str
+    sourceRange: SourceRange
+    turnId: str
+    viewCursor: str
+
+
+class TurnModelRetryScheduledParams(_TurnModelRetryScheduledParamsBase, total=False):
+    """`turn/modelRetryScheduled` params: a durable model-stream retry-scheduled fact folded — the provider backoff behind one model attempt is observable BEFORE the turn terminates, so a streaming client can render \"system words · retrying in Ss · attempt N/M\" instead of dead air. Non-terminal: it never resolves a turn-wait. The sibling `turn/retryScheduled` shape at the model layer: same member names and semantics (attempt/nextAttempt/maxAttempts/ retryDelayMs/system/errorKind/httpStatus), minus `reason` — the row's words derive from `errorKind` through the shared gate-off mapping, and the recorded machine message is not user text. The delay is the recorded scheduled backoff, never an absolute fire time — clients derive any countdown locally. `sourceRange` cites the session stream's mirror of the task-lifecycle record."""
+
+    errorKind: str
+    httpStatus: int
+    system: str
+
+
 class _TurnRefBase(TypedDict):
     commandId: str
     turnId: str
@@ -3711,8 +3895,9 @@ METHODS: Final[dict[str, MethodSpec]] = {
     "approval/listPending": {"description": "Reads the full pending approval and user-input payloads for a session; a lease-free fold read.", "params": "ApprovalListPendingParams", "result": "ApprovalListPendingResult"},
     "computerUseSettings/read": {"description": "Reads the computer-use Settings: each capability's Always allow switch and the user's blocked apps from the approval policy store, plus the built-in blocks as locked rows when asked; computerUseUnavailable while the CUA gate is off.", "params": "ComputerUseSettingsReadParams", "result": "ComputerUseSettings"},
     "computerUseSettings/update": {"description": "Applies one Settings patch (capability dropdowns, blocked apps to add or remove) all-or-nothing and answers the user's Settings after it; a built-in block is refused in either list; computerUseUnavailable while the CUA gate is off.", "params": "ComputerUseSettingsUpdateParams", "result": "ComputerUseSettings"},
-    "computerUseSetup/read": {"description": "Reads one session's computer-use setup state and permissions by running cua_setup status for it as a host command: no model turn, no prompt, no spawn; computerUseUnavailable while the CUA gate is off.", "params": "ComputerUseSetupReadParams", "result": "ComputerUseSetupState"},
-    "computerUseSetup/start": {"description": "A human command: runs cua_setup start for one session, between turns, exactly as the TUI's /cua on does, and answers the state it settles in, with the refusal code when setup refused; computerUseUnavailable while the CUA gate is off.", "params": "ComputerUseSetupStartParams", "result": "ComputerUseSetupState"},
+    "computerUseSetup/check": {"description": "Reads the host's three macOS grants with no prompt: starts the computer-use helper only long enough to check them, reports each as granted or missing, and ends it; never requests a grant or opens System Settings. Needs computerUseHostSetup; commandRejected runtime_busy while a setup attempt holds the host.", "params": None, "result": "ComputerUseSetupState"},
+    "computerUseSetup/read": {"description": "Reads one session's computer-use setup state and permissions by running cua_setup status for it as a host command: no model turn, no prompt, no spawn; computerUseUnavailable while the CUA gate is off. Without sessionId it reads the host's own setup, with computerUseHostSetup.", "params": "ComputerUseSetupReadParams", "result": "ComputerUseSetupState"},
+    "computerUseSetup/start": {"description": "A human command: runs cua_setup start for one session, between turns, exactly as the TUI's /cua on does, and answers the state it settles in, with the refusal code when setup refused; computerUseUnavailable while the CUA gate is off. Without sessionId it starts the host's own setup under one host owner, with computerUseHostSetup.", "params": "ComputerUseSetupStartParams", "result": "ComputerUseSetupState"},
     "feedback/submit": {"description": "Submits a first-party feedback report through the host, reusing the TUI submitter seam (consent, bundle-first persistence, redaction), and answers the upload receipt.", "params": "FeedbackSubmitParams", "result": "FeedbackSubmitResult"},
     "goal/clear": {"description": "Clears the session goal; never wakes and its ack never names a turn.", "params": "GoalClearParams", "result": "GoalCommandResult"},
     "goal/edit": {"description": "Replaces the current goal's objective under the same wake gate as goal/set.", "params": "GoalEditParams", "result": "GoalCommandResult"},
@@ -3746,8 +3931,10 @@ METHODS: Final[dict[str, MethodSpec]] = {
     "session/compact": {"description": "Compacts the session's conversation context; runs asynchronously, so the ack is admission only.", "params": "SessionCompactParams", "result": "SessionCompactResult"},
     "session/fork": {"description": "Branches a session into a new id whose log copies the source through a cut point, with durable provenance.", "params": "SessionForkParams", "result": "SessionForkResult"},
     "session/list": {"description": "Pages through stored sessions under the sessions root for history and picker UIs; read-only, never touches leases.", "params": "SessionListParams", "result": "SessionListResult"},
+    "session/promptHint": {"description": "Picks one feature-tip table id over the client-supplied candidates; display-only, nothing is logged.", "params": "SessionPromptHintParams", "result": "SessionPromptHintResult"},
     "session/read": {"description": "Reads one stored session without attaching: no lease, no load, no subscription, no resume record.", "params": "SessionReadParams", "result": "SessionReadResult"},
     "session/rename": {"description": "Sets or changes the durable allocated session name through the runtime session_name command; withheld under the ephemeral profile.", "params": "SessionRenameParams", "result": "SessionRenameResult"},
+    "session/reportStartupPhases": {"description": "Reports the client's measured startup spans once per launch; the host appends the durable phases record as single writer.", "params": "SessionReportStartupPhasesParams", "result": "SessionReportStartupPhasesResult"},
     "session/resume": {"description": "Loads a stored session on this host, auto-subscribes this connection, and returns the history needed to render it.", "params": "SessionResumeParams", "result": "SessionResumeResult"},
     "session/setApprovalMode": {"description": "Selects a preconfigured approval enforcement mode mid-session; select, never create.", "params": "SessionSetApprovalModeParams", "result": "SessionSetApprovalModeResult"},
     "session/setModel": {"description": "Reconfigures the session's model; the selection is durable and applies to subsequent model calls.", "params": "SessionSetModelParams", "result": "SessionSetModelResult"},
@@ -3803,7 +3990,7 @@ NOTIFICATIONS: Final[dict[str, NotificationSpec]] = {
     "approval/requested": {"description": "An approval opened: the fold of its durable Requested record.", "params": "ApprovalRequestParams"},
     "approval/resolved": {"description": "The first durable approval terminal landed; protected delivery.", "params": "ApprovalResolvedParams"},
     "approval/updated": {"description": "A non-terminal approval record changed the pending view.", "params": "ApprovalUpdatedParams"},
-    "computerUseSetup/changed": {"description": "A computerUseSetup/read or /start observed a session's setup state differ from the last one sent for it, including inProgress when a start begins and the state it settles in.", "params": "ComputerUseSetupChanged"},
+    "computerUseSetup/changed": {"description": "A computerUseSetup/read or /start observed a session's setup state differ from the last one sent for it, including inProgress when a start begins and the state it settles in. Without sessionId it carries the host's own setup state, delivered only with computerUseHostSetup.", "params": "ComputerUseSetupChanged"},
     "initialized": {"description": "Client-to-server notification closing the handshake; no params.", "params": None},
     "item/completed": {"description": "An item reached its terminal state: the authoritative final object.", "params": "ItemCompletedParams"},
     "item/delta": {"description": "Streaming append to an open item's field path (ephemeral-sourced, no sourceRange; opt-out-able).", "params": "ItemDeltaParams"},
@@ -3834,6 +4021,7 @@ NOTIFICATIONS: Final[dict[str, NotificationSpec]] = {
     "skill/changed": {"description": "The session's user-invocable skill set changed; clients re-issue skill/list. A live host-state projection, not a view event.", "params": "SkillChangedParams"},
     "turn/completed": {"description": "Turn terminal: completed | failed | cancelled, with usage and the settled error object.", "params": "TurnCompletedParams"},
     "turn/foregroundCompleted": {"description": "The turn's foreground work is done while named background reminder checks hold the turn open; explicitly non-terminal.", "params": "TurnForegroundCompletedParams"},
+    "turn/modelRetryScheduled": {"description": "A provider backoff behind one model attempt is scheduled and waiting out its delay; observable mid-turn, non-terminal.", "params": "TurnModelRetryScheduledParams"},
     "turn/retracted": {"description": "An accepted interrupt's paired retract durably settled, accepted or declined.", "params": "TurnRetractedParams"},
     "turn/retryScheduled": {"description": "A failing model attempt's retry is scheduled and waiting out its backoff; observable mid-turn, non-terminal.", "params": "TurnRetryScheduledParams"},
     "turn/started": {"description": "A foreground turn began running.", "params": "TurnStartedParams"},
@@ -3894,4 +4082,4 @@ ERRORS: Final[tuple[ErrorSpec, ...]] = (
     {"code": -32072, "kind": "admissionChoiceInvalid", "retryable": False, "overrideKinds": ()},
 )
 
-GRANTABLE_CAPABILITIES: Final[tuple[str, ...]] = ("userShell", "sessionMcp", "sessionListStream", "feedback", "computerUseSetup", "rawLog", "peerMessaging",)
+GRANTABLE_CAPABILITIES: Final[tuple[str, ...]] = ("userShell", "sessionMcp", "sessionListStream", "feedback", "computerUseSetup", "computerUseHostSetup", "sessionRename", "rawLog", "peerMessaging",)

{muse_code_msp-1.4.6 → muse_code_msp-1.4.8/src/muse_code_msp.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: muse-code-msp
-Version: 1.4.6
+Version: 1.4.8
 Summary: Generated Python wire types for the Muse Session Protocol (MSP). No hand-written protocol types, ever.
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/meta-models/muse-code-sdk