… API
The page API now exposes the typed-action vocabulary documented in
docs/PERMISSIONS.md. agent.requestCapabilities translates a flat list of
typed-action requests into the legacy capability shape that the existing
session.create pipeline understands. agent.upgradeSession threads through
to SessionRegistry.setMode, which re-attenuates the capability token; the
mode lattice rejects widening attempts and returns upgraded:false.
Co-authored-by: Cursor <cursoragent@cursor.com>
