rust.ts

/**
 * Rust code generator for the Copilot protocol JSON Schemas.
 *
 * Reads api.schema.json and session-events.schema.json, emits idiomatic Rust
 * types to rust/src/generated/.
 *
 * Usage:
 *   npx tsx scripts/codegen/rust.ts
 *   npx tsx scripts/codegen/rust.ts <apiSchemaPath>
 *   npx tsx scripts/codegen/rust.ts <sessionEventsSchemaPath> <apiSchemaPath>
 */

import { execFile } from "child_process";
import { realpathSync } from "fs";
import fs from "fs/promises";
import path from "path";
import { fileURLToPath } from "url";
import { promisify } from "util";
import type { JSONSchema7, JSONSchema7Definition } from "json-schema";
import {
	addManagedApprovalRequiredToPermissionRequests,
	type ApiSchema,
	type DefinitionCollections,
	EXCLUDED_EVENT_TYPES,
	REPO_ROOT,
	type RpcMethod,
	collectDefinitionCollections,
	collectDefinitions,
	collectExperimentalOnlyRpcReferencedDefinitionNames,
	collectReachableDefinitionNames,
	collectRpcMethodReferencedDefinitionNames,
	findSharedSchemaDefinitions,
	getApiSchemaPath,
	getEnumValueDescriptions,
	getNullableInner,
	getRpcSchemaTypeName,
	getSessionEventsSchemaPath,
	isIntegerSchemaBoundedToInt32,
	isObjectSchema,
	isRpcMethod,
	isSchemaDeprecated,
	isSchemaExperimental,
	isSchemaInternal,
	isVoidSchema,
	normalizeSchemaBrandCasing,
	fixBrandCasing,
	parseExternalSchemaRef,
	postProcessSchema,
	propagateInternalVisibility,
	refTypeName,
	resolveObjectSchema,
	resolveRef,
	resolveSchema,
	rewriteSharedDefinitionReferences,
	stripBooleanLiterals,
	type EnumValueDescriptions,
} from "./utils.js";
import {
	isOmittableRequest,
	LEGACY_PARAMETERS_KEY,
	readLegacyParameters,
	rejectLegacyParameters,
	type LegacyParameters,
} from "./legacy-parameters.js";

const execFileAsync = promisify(execFile);

const GENERATED_DIR = path.join(process.env.COPILOT_CODEGEN_OUTPUT_ROOT ?? REPO_ROOT, "rust/src/generated");

const EXTERNAL_SCHEMA_RUST_MODULE: Record<string, string> = {
	"session-events.schema.json": "super::session_events",
};

const EXTERNAL_SCHEMA_RUST_TYPE_MODULE: Record<string, Record<string, string>> = {
	"session-events.schema.json": {
		SessionEvent: "crate::types",
	},
};

function rustDeprecatedAttributes(indent = ""): string[] {
	return [`${indent}#[doc(hidden)]`, `${indent}#[deprecated]`];
}

/**
 * JSON property names that should be emitted as a hand-authored newtype rather
 * than `String`. The newtype is `#[serde(transparent)]`, so the wire format is
 * unchanged. Add new entries sparingly — these only fire when a schema field
 * has type `string` and an exact-match name in this map.
 */
const STRING_NEWTYPE_OVERRIDES: Record<string, string> = {
	sessionId: "SessionId",
	remoteSessionId: "SessionId",
	requestId: "RequestId",
};

// ── Naming helpers ──────────────────────────────────────────────────────────

function toPascalCase(s: string): string {
	const name = fixBrandCasing(
		s
			.split(/[^A-Za-z0-9]+/)
			.filter(Boolean)
			.map((w) => w.charAt(0).toUpperCase() + w.slice(1))
			.join(""),
	);
	if (!name) return "Value";
	return /^[0-9]/.test(name) ? `Value${name}` : name;
}

function toRustPascalIdentifier(value: string, fallback: string): string {
	let identifier = toPascalCase(value);
	if (!identifier) {
		identifier = fallback;
	} else if (!/^[A-Za-z_]/.test(identifier)) {
		identifier = `${fallback}${identifier}`;
	}

	return RUST_KEYWORDS.has(identifier) ? `${identifier}Value` : identifier;
}

function uniqueRustPascalIdentifier(
	value: string,
	used: Set<string>,
	fallback: string,
	reserved: Set<string> = new Set(),
	override?: string,
): string {
	const identifier = override ?? toRustPascalIdentifier(value, fallback);
	if (used.has(identifier) || reserved.has(identifier)) {
		throw new Error(
			`Generated Rust enum variant identifier "${identifier}" is not unique for value "${value}". Add an explicit naming rule instead of stabilizing an arbitrary public variant name.`,
		);
	}
	used.add(identifier);
	return identifier;
}

function toSnakeCase(s: string): string {
	return s
		.replace(/([A-Z])/g, "_$1")
		.replace(/^_/, "")
		.replace(/[.\-\s]+/g, "_")
		.toLowerCase()
		.replace(/_+/g, "_");
}

/** Convert a JSON property name (camelCase) to a Rust field name (snake_case). */
function toRustFieldName(jsonName: string): string {
	return toSnakeCase(jsonName);
}

/** Convert snake_case back to camelCase (matches serde's rename_all = "camelCase"). */
function snakeToCamelCase(snake: string): string {
	return snake.replace(/_([a-z0-9])/g, (_, c: string) => c.toUpperCase());
}

/**
 * Rust reserved keywords that need raw identifier syntax (r#).
 */
const RUST_KEYWORDS = new Set([
	"as",
	"async",
	"await",
	"break",
	"const",
	"continue",
	"crate",
	"dyn",
	"else",
	"enum",
	"extern",
	"false",
	"fn",
	"for",
	"if",
	"impl",
	"in",
	"let",
	"loop",
	"match",
	"mod",
	"move",
	"mut",
	"pub",
	"ref",
	"return",
	"self",
	"Self",
	"static",
	"struct",
	"super",
	"trait",
	"true",
	"type",
	"unsafe",
	"use",
	"where",
	"while",
	"yield",
]);

function safeRustFieldName(name: string): string {
	const snake = toRustFieldName(name);
	return RUST_KEYWORDS.has(snake) ? `r#${snake}` : snake;
}

// ── Codegen context ─────────────────────────────────────────────────────────

interface RustCodegenCtx {
	/** Accumulated struct definitions. */
	structs: string[];
	/** Accumulated type alias definitions. */
	typeAliases: string[];
	/** Accumulated enum definitions. */
	enums: string[];
	/** Track generated type names to avoid duplicates. */
	generatedNames: Set<string>;
	/** Value set and origin of each emitted string enum, so two literals never share one name. */
	stringEnums: Map<string, { values: string; fromConst: boolean }>;
	/**
	 * Generated type names that do not (and cannot trivially) implement
	 * `Default` — currently `#[serde(untagged)]` enums of distinct payload
	 * structs. Structs with a *required* field of one of these types must
	 * also skip the `Default` derive; their names are added here on emission
	 * so the property propagates transitively.
	 */
	nonDefaultableTypes: Set<string>;
	/** Generated type names reached only through experimental RPC methods. */
	experimentalTypeNames: Set<string>;
	/** Schema definitions for $ref resolution. */
	definitions?: DefinitionCollections;
	/** Discriminator names accepted in addition to required, enum-referenced string constants. */
	unionDiscriminatorProperties?: Set<string>;
	/** Whether unions without a const-valued discriminator should be emitted. */
	allowUntaggedUnions: boolean;
	/** Specific union type names allowed even when their discriminator is not generally allowed. */
	allowedUnionTypeNames: Set<string>;
	/** Boolean discriminator literals enforced for explicitly supported variant structs. */
	strictBooleanConstFields: Map<string, Map<string, boolean>>;
	/** External schema references that are actually emitted in generated types. */
	externalTypeRefs: Map<string, Set<string>>;
}

const STRICT_BOOLEAN_UNION_VARIANTS = new Map([
	[
		"EnqueueCommandResult",
		new Map([
			["AcceptedEnqueueCommandResult", new Map([["queued", true]])],
			["UnsupportedEnqueueCommandResult", new Map([["queued", false]])],
		]),
	],
]);

function stripOption(typeName: string): string {
	return typeName.startsWith("Option<") && typeName.endsWith(">")
		? typeName.slice("Option<".length, -1)
		: typeName;
}

function getUnionVariants(schema: JSONSchema7): JSONSchema7[] | null {
	if (schema.anyOf) return schema.anyOf as JSONSchema7[];
	if (schema.oneOf) return schema.oneOf as JSONSchema7[];
	return null;
}

interface RustUnionVariant {
	schema: JSONSchema7;
	typeName: string;
}

function findRustDiscriminator(variants: RustUnionVariant[]): string | null {
	const first = variants[0]?.schema;
	if (!isObjectSchema(first) || !first.properties) return null;

	for (const [propName, propSchema] of Object.entries(first.properties).sort(
		([a], [b]) => a.localeCompare(b),
	)) {
		if (typeof propSchema !== "object") continue;
		if ((propSchema as JSONSchema7).const === undefined) continue;

		const values = new Set<string>();
		let isValid = true;
		for (const { schema } of variants) {
			if (!isObjectSchema(schema) || !schema.properties) {
				isValid = false;
				break;
			}
			const candidate = schema.properties[propName];
			if (typeof candidate !== "object") {
				isValid = false;
				break;
			}
			const value = (candidate as JSONSchema7).const;
			if (value === undefined) {
				isValid = false;
				break;
			}
			const key = String(value);
			if (values.has(key)) {
				isValid = false;
				break;
			}
			values.add(key);
		}
		if (isValid) return propName;
	}

	return null;
}

function hasRequiredReferencedStringDiscriminator(
	variants: RustUnionVariant[],
	discriminator: string,
	ctx: RustCodegenCtx,
): boolean {
	return variants.every(({ schema }) => {
		const property = schema.properties?.[discriminator];
		if (
			!schema.required?.includes(discriminator) ||
			typeof property !== "object" ||
			!property.$ref ||
			typeof property.const !== "string"
		) {
			return false;
		}
		const referenced = resolveRef(property.$ref, ctx.definitions);
		return referenced?.type === "string" && referenced.enum?.includes(property.const) === true;
	});
}

/** Discriminators recognised before the MCP installation payloads were typed. */
const RELEASED_UNION_DISCRIMINATORS: ReadonlySet<string> = new Set(["kind", "resource"]);

function tryEmitRustUnion(
	schema: JSONSchema7,
	parentTypeName: string,
	jsonPropName: string,
	ctx: RustCodegenCtx,
	isRequired = true,
	standalone = false,
): string | null {
	const variants = getUnionVariants(schema);
	if (!variants) return null;

	const nonNull = variants.filter((variant) => variant.type !== "null");
	if (nonNull.length <= 1) return null;

	const enumName =
		(typeof schema.title === "string" && schema.title) ||
		parentTypeName + (jsonPropName ? toPascalCase(jsonPropName) : "");
	const isAllowedUnionType = ctx.allowedUnionTypeNames.has(enumName);

	const resolvedVariants: RustUnionVariant[] = [];
	for (let i = 0; i < nonNull.length; i++) {
		const variant = nonNull[i];
		if (variant.$ref && typeof variant.$ref === "string") {
			const resolved = resolveRef(variant.$ref, ctx.definitions);
			if (resolved && !isObjectSchema(resolved)) return null;
			resolvedVariants.push({
				schema: (resolved ?? variant) as JSONSchema7,
				typeName: rustRefTypeName(variant.$ref, ctx.definitions),
			});
			continue;
		}

		const resolved =
			resolveObjectSchema(variant, ctx.definitions) ??
			resolveSchema(variant, ctx.definitions) ??
			variant;
		if (!isObjectSchema(resolved)) {
			if (!isAllowedUnionType) return null;
			resolvedVariants.push({
				schema: resolved as JSONSchema7,
				typeName: resolveRustType(
					resolved as JSONSchema7,
					enumName,
					`variant${i + 1}`,
					true,
					ctx,
				),
			});
			continue;
		}
		const discriminatorValue = Object.values(resolved.properties ?? {}).find(
			(prop) => typeof prop === "object" && (prop as JSONSchema7).const !== undefined,
		) as JSONSchema7 | undefined;
		const typeName =
			(typeof resolved.title === "string" && resolved.title) ||
			(discriminatorValue?.const !== undefined
				? `${enumName}${toPascalCase(String(discriminatorValue.const))}`
				: `${enumName}Variant${i + 1}`);

		resolvedVariants.push({
			schema: resolved as JSONSchema7,
			typeName,
		});
	}

	const discriminator = findRustDiscriminator(resolvedVariants);
	if (discriminator) {
		// A definition emitted on its own, not reached through a field, keeps the released
		// discriminator rule, so newer rules add no standalone types.
		const discriminators = standalone ? RELEASED_UNION_DISCRIMINATORS : ctx.unionDiscriminatorProperties;
		if (
			discriminators &&
			!discriminators.has(discriminator) &&
			(standalone || !isRequired || !hasRequiredReferencedStringDiscriminator(resolvedVariants, discriminator, ctx)) &&
			!isAllowedUnionType
		) {
			// Newly recognised unions must not narrow existing optional raw metadata:
			// consumers need malformed/future payloads intact for bounded degradation.
			return null;
		}
	} else if (!ctx.allowUntaggedUnions && !isAllowedUnionType) {
		return null;
	}

	if (hasGeneratedRustType(enumName, ctx)) {
		return enumName;
	}
	ctx.generatedNames.add(enumName);
	// Untagged enums of distinct payload structs have no obvious default
	// variant; structs with a required field of this type will also skip
	// the `Default` derive.
	ctx.nonDefaultableTypes.add(enumName);

	const strictBooleanVariants = STRICT_BOOLEAN_UNION_VARIANTS.get(enumName);
	if (strictBooleanVariants) {
		for (const [typeName, fields] of strictBooleanVariants) {
			ctx.strictBooleanConstFields.set(typeName, fields);
		}
	}

	for (const { schema: variantSchema, typeName } of resolvedVariants) {
		if (isObjectSchema(variantSchema)) {
			emitRustStruct(typeName, variantSchema, ctx);
		}
	}

	const lines: string[] = [];
	if (schema.description) {
		pushRustDoc(lines, schema.description);
	}
	pushRustExperimentalDocs(lines, isSchemaExperimental(schema) || ctx.experimentalTypeNames.has(enumName));
	lines.push("#[derive(Debug, Clone, Serialize, Deserialize)]");
	lines.push("#[serde(untagged)]");
	lines.push(`pub enum ${enumName} {`);

	const usedVariantNames = new Set<string>();
	for (const { schema: variantSchema, typeName } of resolvedVariants) {
		const discriminatorValue =
			discriminator && isObjectSchema(variantSchema)
				? (variantSchema.properties?.[discriminator] as JSONSchema7 | undefined)
						?.const
				: undefined;
		const variantName = uniqueRustPascalIdentifier(
			discriminatorValue === undefined ? typeName : String(discriminatorValue),
			usedVariantNames,
			"Variant",
		);
		lines.push(`    ${variantName}(${stripOption(typeName)}),`);
	}

	lines.push("}");
	ctx.enums.push(lines.join("\n"));
	return enumName;
}

function recordExternalRustTypeRef(ref: string, ctx: RustCodegenCtx): void {
	const externalRef = parseExternalSchemaRef(ref);
	if (!externalRef) return;

	let typeNames = ctx.externalTypeRefs.get(externalRef.schemaFile);
	if (!typeNames) {
		typeNames = new Set<string>();
		ctx.externalTypeRefs.set(externalRef.schemaFile, typeNames);
	}
	typeNames.add(externalRef.definitionName);
}

function makeCtx(
	definitions?: DefinitionCollections,
	options: {
		unionDiscriminatorProperties?: Set<string> | null;
		allowUntaggedUnions?: boolean;
		allowedUnionTypeNames?: Iterable<string>;
		experimentalTypeNames?: Iterable<string>;
		nonDefaultableTypes?: Iterable<string>;
	} = {},
): RustCodegenCtx {
	return {
		structs: [],
		typeAliases: [],
		enums: [],
		generatedNames: new Set(),
		stringEnums: new Map(),
		nonDefaultableTypes: new Set(options.nonDefaultableTypes ?? []),
		experimentalTypeNames: new Set(options.experimentalTypeNames ?? []),
		definitions,
		unionDiscriminatorProperties:
			options.unionDiscriminatorProperties === null
				? undefined
				: (options.unionDiscriminatorProperties ?? new Set(["kind", "action", "phase", "resource"])),
		allowUntaggedUnions: options.allowUntaggedUnions ?? false,
		allowedUnionTypeNames: new Set(options.allowedUnionTypeNames ?? []),
		strictBooleanConstFields: new Map(),
		externalTypeRefs: new Map(),
	};
}

function pushRustExperimentalDocs(
	lines: string[],
	experimental: boolean,
	indent = "",
): void {
	if (!experimental) return;
	lines.push(`${indent}///`);
	lines.push(`${indent}/// <div class="warning">`);
	lines.push(`${indent}///`);
	lines.push(
		`${indent}/// **Experimental.** This type is part of an experimental wire-protocol surface`,
	);
	lines.push(
		`${indent}/// and may change or be removed in future SDK or CLI releases.`,
	);
	lines.push(`${indent}///`);
	lines.push(`${indent}/// </div>`);
}

function pushRustDoc(lines: string[], text: string | undefined, indent = ""): void {
	if (!text) return;
	const sanitized = text
		.split("`")
		.map((segment, index) =>
			index % 2 === 0
				? segment.replace(/<[A-Za-z][A-Za-z0-9_-]*>/g, "`$&`")
				: segment,
		)
		.join("`")
		.replace(/\[::\]/g, "`[::]`");
	for (const paragraph of sanitized.trim().split(/\r?\n/)) {
		if (paragraph.trim().length === 0) {
			lines.push(`${indent}///`);
		} else {
			lines.push(`${indent}/// ${paragraph.trim()}`);
		}
	}
}

function isRustMapSchema(schema: JSONSchema7): boolean {
	const hasProperties =
		!!schema.properties && Object.keys(schema.properties).length > 0;
	return (
		(schema.type === "object" || schema.additionalProperties !== undefined) &&
		!hasProperties &&
		schema.additionalProperties !== undefined &&
		schema.additionalProperties !== false
	);
}

function isRustArraySchema(schema: JSONSchema7): boolean {
	return schema.type === "array";
}

function rustArrayType(
	schema: JSONSchema7,
	parentTypeName: string,
	ctx: RustCodegenCtx,
): string {
	const items = schema.items as JSONSchema7 | undefined;
	if (!items) return "Vec<serde_json::Value>";

	return `Vec<${resolveRustType(items, parentTypeName, "item", true, ctx)}>`;
}

function rustMapValueType(
	schema: JSONSchema7,
	parentTypeName: string,
	ctx: RustCodegenCtx,
): string {
	const additionalProperties = schema.additionalProperties;
	if (
		additionalProperties &&
		typeof additionalProperties === "object" &&
		Object.keys(additionalProperties as Record<string, unknown>).length > 0
	) {
		const valueSchema = additionalProperties as JSONSchema7;
		if (valueSchema.type === "object" && valueSchema.properties) {
			const valueName = (valueSchema.title as string) || `${parentTypeName}Value`;
			emitRustStruct(valueName, valueSchema, ctx);
			return valueName;
		}
		return resolveRustType(valueSchema, parentTypeName, "value", true, ctx);
	}
	return "serde_json::Value";
}

function rustMapType(
	schema: JSONSchema7,
	parentTypeName: string,
	ctx: RustCodegenCtx,
): string {
	return `HashMap<String, ${rustMapValueType(schema, parentTypeName, ctx)}>`;
}

function hasGeneratedRustType(typeName: string, ctx: RustCodegenCtx): boolean {
	return ctx.generatedNames.has(typeName);
}

function emitRustTypeAlias(
	typeName: string,
	schema: JSONSchema7,
	aliasType: string,
	ctx: RustCodegenCtx,
	description?: string,
): void {
	if (hasGeneratedRustType(typeName, ctx)) return;
	ctx.generatedNames.add(typeName);

	const lines: string[] = [];
	pushRustDoc(lines, description || schema.description);
	pushRustExperimentalDocs(
		lines,
		isSchemaExperimental(schema) || ctx.experimentalTypeNames.has(typeName),
	);
	if (isSchemaDeprecated(schema)) {
		lines.push(...rustDeprecatedAttributes());
	}
	const aliasVis = isSchemaInternal(schema) ? "pub(crate)" : "pub";
	lines.push(`${aliasVis} type ${typeName} = ${aliasType};`);
	ctx.typeAliases.push(lines.join("\n"));
}

function emitRustArrayAlias(
	typeName: string,
	schema: JSONSchema7,
	ctx: RustCodegenCtx,
	description?: string,
): void {
	if (hasGeneratedRustType(typeName, ctx)) return;
	emitRustTypeAlias(
		typeName,
		schema,
		rustArrayType(schema, typeName, ctx),
		ctx,
		description,
	);
}

function emitRustMapAlias(
	typeName: string,
	schema: JSONSchema7,
	ctx: RustCodegenCtx,
	description?: string,
): void {
	if (hasGeneratedRustType(typeName, ctx)) return;
	emitRustTypeAlias(
		typeName,
		schema,
		rustMapType(schema, typeName, ctx),
		ctx,
		description,
	);
}

/**
 * Map a primitive JSON Schema type to its Rust equivalent, or `undefined` when
 * the schema is not a plain scalar. Mirrors the primitive branches of
 * {@link resolveRustType}.
 */
function rustScalarType(schema: JSONSchema7): string | undefined {
	if (schema.enum || schema.const !== undefined) return undefined;
	switch (schema.type) {
		case "string":
			return "String";
		case "number":
			return "f64";
		case "integer":
			return isIntegerSchemaBoundedToInt32(schema) ? "i32" : "i64";
		case "boolean":
			return "bool";
		default:
			return undefined;
	}
}

/**
 * Emit a type alias for a named schema that resolves to a primitive scalar
 * (e.g. an RPC result declared as `{ "type": "integer" }`). Without this the
 * generated RPC surface would reference a `*Result` type that was never
 * defined.
 */
function emitRustScalarAlias(
	typeName: string,
	schema: JSONSchema7,
	ctx: RustCodegenCtx,
	description?: string,
): void {
	if (hasGeneratedRustType(typeName, ctx)) return;
	const scalarType = rustScalarType(schema);
	if (!scalarType) return;
	emitRustTypeAlias(typeName, schema, scalarType, ctx, description);
}

function rustRpcResultDescription(
	method: RpcMethod,
	resultSchema: JSONSchema7 | undefined,
): string | undefined {
	if (isVoidSchema(resultSchema)) return undefined;
	return method.result?.description ?? resultSchema?.description;
}

function rustRpcParamsDescription(
	method: RpcMethod,
	resolvedParams: JSONSchema7 | undefined,
): string | undefined {
	return method.params?.description ?? resolvedParams?.description;
}

function rustRpcMethodDocs(
	method: RpcMethod,
	resultSchema: JSONSchema7 | undefined,
	paramsDescription: string | undefined,
	includeParams: boolean,
): string[] {
	const docs: string[] = [];
	pushRustDoc(docs, method.description ?? `Calls \`${method.rpcMethod}\`.`, "    ");
	docs.push("    ///");
	docs.push(`    /// Wire method: \`${method.rpcMethod}\`.`);
	if (includeParams && paramsDescription) {
		docs.push("    ///");
		docs.push("    /// # Parameters");
		docs.push("    ///");
		pushRustDoc(docs, `* \`params\` - ${paramsDescription}`, "    ");
	}
	const resultDescription = rustRpcResultDescription(method, resultSchema);
	if (resultDescription) {
		docs.push("    ///");
		docs.push("    /// # Returns");
		docs.push("    ///");
		pushRustDoc(docs, resultDescription, "    ");
	}
	return docs;
}

// ── Type resolution ─────────────────────────────────────────────────────────

function rustRefTypeName(ref: string, definitions?: DefinitionCollections): string {
	const externalRef = parseExternalSchemaRef(ref);
	return toPascalCase(externalRef?.definitionName ?? refTypeName(ref, definitions));
}

function isRustNullableSchema(
	schema: JSONSchema7,
	definitions: DefinitionCollections | undefined,
	seen = new Set<JSONSchema7>(),
): boolean {
	const resolved = resolveSchema(schema, definitions);
	if (!resolved || seen.has(resolved)) return false;
	seen.add(resolved);
	return resolved.type === "null" ||
		(Array.isArray(resolved.type) && resolved.type.includes("null")) ||
		(getUnionVariants(resolved)?.some(
			(variant) => typeof variant === "object" && isRustNullableSchema(variant, definitions, seen),
		) ?? false) ||
		(resolved.type === undefined && (resolved.allOf?.every(
			(variant) => typeof variant === "object" && isRustNullableSchema(variant, definitions, new Set(seen)),
		) ?? false));
}

/**
 * Map a JSON Schema to a Rust type string. Emits nested type definitions as
 * side effects into ctx.
 */
function resolveRustType(
	propSchema: JSONSchema7,
	parentTypeName: string,
	jsonPropName: string,
	isRequired: boolean,
	ctx: RustCodegenCtx,
): string {
	const nestedName = parentTypeName + toPascalCase(jsonPropName);

	if (ctx.strictBooleanConstFields.get(parentTypeName)?.has(jsonPropName)) {
		return wrapOption("bool", isRequired);
	}


	// $ref — resolve and recurse
	if (propSchema.$ref && typeof propSchema.$ref === "string") {
		recordExternalRustTypeRef(propSchema.$ref, ctx);
		const typeName = rustRefTypeName(propSchema.$ref, ctx.definitions);
		const resolved = resolveRef(propSchema.$ref, ctx.definitions);
		if (resolved) {
			if (resolved.enum) {
				emitRustStringEnum(
					typeName,
					resolved.enum as string[],
					ctx,
					resolved.description,
					getEnumValueDescriptions(resolved),
					isSchemaExperimental(resolved),
				);
				return wrapOption(typeName, isRequired);
			}
			if (isObjectSchema(resolved)) {
				emitRustStruct(typeName, resolved, ctx);
				return wrapOption(typeName, isRequired);
			}
			return resolveRustType(
				getUnionVariants(resolved) ? { ...resolved, title: resolved.title ?? typeName } : resolved,
				parentTypeName,
				jsonPropName,
				isRequired,
				ctx,
			);
		}
		return wrapOption(typeName, isRequired);
	}

	// anyOf — nullable pattern or union
	if (propSchema.anyOf) {
		const unionType = tryEmitRustUnion(
			propSchema,
			parentTypeName,
			jsonPropName,
			ctx,
			isRequired,
		);
		if (unionType) {
			return wrapOption(unionType, isRequired && !isRustNullableSchema(propSchema, ctx.definitions));
		}

		const nonNull = (propSchema.anyOf as JSONSchema7[]).filter(
			(s) => s.type !== "null",
		);
		const hasNull = (propSchema.anyOf as JSONSchema7[]).some(
			(s) => s.type === "null",
		);

		if (nonNull.length === 1) {
			const innerType = resolveRustType(
				nonNull[0],
				parentTypeName,
				jsonPropName,
				true,
				ctx,
			);
			if (isRequired && !hasNull) return innerType;
			return wrapOption(innerType, false);
		}

		if (nonNull.length > 1) {
			// Multi-type union — use serde_json::Value as escape hatch
			return wrapOption("serde_json::Value", isRequired);
		}
	}

	// oneOf — treat like anyOf for now
	if (propSchema.oneOf) {
		const unionType = tryEmitRustUnion(
			propSchema,
			parentTypeName,
			jsonPropName,
			ctx,
			isRequired,
		);
		if (unionType) {
			return wrapOption(unionType, isRequired && !isRustNullableSchema(propSchema, ctx.definitions));
		}

		const nonNull = (propSchema.oneOf as JSONSchema7[]).filter(
			(s) => s.type !== "null",
		);
		if (nonNull.length === 1) {
			const innerType = resolveRustType(
				nonNull[0],
				parentTypeName,
				jsonPropName,
				true,
				ctx,
			);
			return wrapOption(innerType, isRequired && !isRustNullableSchema(propSchema, ctx.definitions));
		}
		return wrapOption("serde_json::Value", isRequired);
	}

	// allOf — merge and treat as object
	if (propSchema.allOf) {
		const merged = resolveObjectSchema(propSchema, ctx.definitions);
		if (merged && isObjectSchema(merged)) {
			const structName = (propSchema.title as string) || nestedName;
			emitRustStruct(structName, merged, ctx);
			return wrapOption(structName, isRequired);
		}
	}

	// enum
	if (propSchema.enum && Array.isArray(propSchema.enum)) {
		const enumName = (propSchema.title as string) || nestedName;
		emitRustStringEnum(
			enumName,
			propSchema.enum as string[],
			ctx,
			propSchema.description,
			getEnumValueDescriptions(propSchema),
			isSchemaExperimental(propSchema),
		);
		return wrapOption(enumName, isRequired);
	}

	// const — just a string
	if (propSchema.const !== undefined) {
		if (typeof propSchema.const === "string") {
			// A title on a single literal names the union enum other generators infer; each
			// Rust literal is its own type, so name it from its owner as untitled literals are.
			const enumName = nestedName;
			emitRustConstStringEnum(
				enumName,
				propSchema.const,
				ctx,
				propSchema.description,
			);
			return wrapOption(enumName, isRequired);
		}
		return wrapOption("serde_json::Value", isRequired);
	}

	const schemaType = propSchema.type;

	// Type arrays like ["string", "null"]
	if (Array.isArray(schemaType)) {
		const nonNullTypes = (schemaType as string[]).filter((t) => t !== "null");
		if (nonNullTypes.length === 1) {
			const inner = resolveRustType(
				{ ...propSchema, type: nonNullTypes[0] as JSONSchema7["type"] },
				parentTypeName,
				jsonPropName,
				true,
				ctx,
			);
			return wrapOption(inner, false);
		}
		return wrapOption("serde_json::Value", isRequired);
	}

	// Primitive types
	if (schemaType === "string") {
		const newtype = STRING_NEWTYPE_OVERRIDES[jsonPropName];
		if (newtype) return wrapOption(newtype, isRequired);
		return wrapOption("String", isRequired);
	}
	if (schemaType === "number") return wrapOption("f64", isRequired);
	if (schemaType === "integer") {
		return wrapOption(
			isIntegerSchemaBoundedToInt32(propSchema) ? "i32" : "i64",
			isRequired,
		);
	}
	if (schemaType === "boolean") return wrapOption("bool", isRequired);

	// Array
	if (schemaType === "array") {
		const items = propSchema.items as JSONSchema7 | undefined;
		if (items) {
			const itemType = resolveRustType(
				items,
				parentTypeName,
				`${jsonPropName}Item`,
				true,
				ctx,
			);
			return wrapOption(`Vec<${itemType}>`, isRequired);
		}
		return wrapOption("Vec<serde_json::Value>", isRequired);
	}

	// Object
	if (schemaType === "object" || (propSchema.properties && !schemaType)) {
		if (
			propSchema.properties &&
			Object.keys(propSchema.properties).length > 0
		) {
			const structName = (propSchema.title as string) || nestedName;
			emitRustStruct(structName, propSchema, ctx);
			return wrapOption(structName, isRequired);
		}
		if (isRustMapSchema(propSchema)) {
			return wrapOption(rustMapType(propSchema, nestedName, ctx), isRequired);
		}
		return wrapOption("serde_json::Value", isRequired);
	}

	// Fallback
	return wrapOption("serde_json::Value", isRequired);
}

function wrapOption(rustType: string, isRequired: boolean): string {
	if (isRequired) return rustType;
	// Already wrapped in Option — don't double-wrap.
	if (rustType.startsWith("Option<")) {
		return rustType;
	}
	// Non-required Vec/HashMap must be Option<Vec<…>> / Option<HashMap<…>>
	// so the SDK can distinguish "field omitted" (None) from "explicitly
	// empty" (Some(vec![])). Bare Vec/HashMap with #[serde(default)] would
	// serialize as `[]`/`{}` for unset fields, which patch-style request
	// types (e.g. SessionUpdateOptionsParams) interpret as "clear the
	// list" — silently wiping server-side state set elsewhere.
	return `Option<${rustType}>`;
}

// ── Struct emission ─────────────────────────────────────────────────────────

function emitRustStruct(
	typeName: string,
	schema: JSONSchema7,
	ctx: RustCodegenCtx,
	description?: string,
): void {
	if (hasGeneratedRustType(typeName, ctx)) return;
	ctx.generatedNames.add(typeName);

	const required = new Set(schema.required || []);
	const lines: string[] = [];
	const desc = description || schema.description;
	if (desc) {
		for (const line of desc.split(/\r?\n/)) {
			lines.push(`/// ${line}`);
		}
	}
	pushRustExperimentalDocs(lines, isSchemaExperimental(schema) || ctx.experimentalTypeNames.has(typeName));
	if (isSchemaDeprecated(schema)) {
		lines.push(...rustDeprecatedAttributes());
	}
	const structVis = isSchemaInternal(schema) ? "pub(crate)" : "pub";

	// Resolve field types up-front so we can decide whether `Default` can be
	// derived. A required field whose bare type is non-default-able (e.g. an
	// untagged enum, or another struct that already opted out) blocks the
	// derive and propagates the opt-out to this struct.
	interface FieldInfo {
		propName: string;
		prop: JSONSchema7;
		isReq: boolean;
		rustField: string;
		rustType: string;
		strictBooleanConst: boolean | undefined;
	}
	const fields: FieldInfo[] = [];
	for (const [propName, propSchema] of Object.entries(
		schema.properties || {},
	)) {
		if (typeof propSchema !== "object") continue;
		const prop = propSchema as JSONSchema7;
		const isReq = required.has(propName);
		const rustField = safeRustFieldName(propName);
		const rustType = resolveRustType(prop, typeName, propName, isReq, ctx);
		const strictBooleanConst = ctx.strictBooleanConstFields
			.get(typeName)
			?.get(propName);
		fields.push({
			propName,
			prop,
			isReq,
			rustField,
			rustType,
			strictBooleanConst,
		});
	}

	const blocksDefault = fields.some(
		(f) =>
			(f.isReq && ctx.nonDefaultableTypes.has(f.rustType)) ||
			f.strictBooleanConst === true,
	);
	if (blocksDefault) {
		ctx.nonDefaultableTypes.add(typeName);
		lines.push("#[derive(Debug, Clone, Serialize, Deserialize)]");
	} else {
		lines.push("#[derive(Debug, Clone, Default, Serialize, Deserialize)]");
	}
	lines.push(`#[serde(rename_all = "camelCase")]`);
	lines.push(`${structVis} struct ${typeName} {`);

	for (const {
		propName,
		prop,
		isReq,
		rustField,
		rustType,
		strictBooleanConst,
	} of fields) {
		if (prop.description) {
			pushRustDoc(lines, prop.description, "    ");
		}
		pushRustExperimentalDocs(lines, isSchemaExperimental(prop), "    ");
		const propIsInternal = isSchemaInternal(prop);
		if (propIsInternal) {
			lines.push(`    #[doc(hidden)]`);
		}
		if (isSchemaDeprecated(prop)) {
			lines.push(...rustDeprecatedAttributes("    "));
		}

		// Determine if an explicit rename is needed. `rename_all = "camelCase"` on
		// the struct converts snake_case fields to camelCase automatically, so we
		// only need an explicit rename when that automatic conversion doesn't produce
		// the original JSON property name.
		const snakeField = toRustFieldName(propName);
		const autoRename = snakeToCamelCase(snakeField);
		const needsRename = autoRename !== propName;
		const isOptionType = rustType.startsWith("Option<");
		const needsSkip = !isReq && isOptionType;

		if (needsSkip && needsRename) {
			lines.push(
				`    #[serde(rename = "${propName}", skip_serializing_if = "Option::is_none")]`,
			);
		} else if (needsSkip) {
			lines.push(`    #[serde(skip_serializing_if = "Option::is_none")]`);
		} else if (!isReq && !isOptionType && needsRename) {
			lines.push(`    #[serde(rename = "${propName}", default)]`);
		} else if (!isReq && !isOptionType) {
			lines.push("    #[serde(default)]");
		} else if (needsRename) {
			lines.push(`    #[serde(rename = "${propName}")]`);
		}

		if (prop.$ref && typeof prop.const === "string") {
			lines.push(
				`    #[serde(${isReq ? "" : "default, "}deserialize_with = "${typeName}::deserialize_${snakeField}")]`,
			);
		} else if (strictBooleanConst !== undefined) {
			lines.push(
				`    #[serde(${isReq ? "" : "default, "}deserialize_with = "${typeName}::deserialize_${snakeField}", serialize_with = "${typeName}::serialize_${snakeField}")]`,
			);
		}

		lines.push(`    ${propIsInternal ? "pub(crate)" : "pub"} ${rustField}: ${rustType},`);
	}

	lines.push("}");
	const constrainedFields = fields.filter(
		({ prop, strictBooleanConst }) =>
			(prop.$ref && typeof prop.const === "string") ||
			strictBooleanConst !== undefined,
	);
	if (constrainedFields.length > 0) {
		// A referenced enum can accept future values; its containing field must
		// still enforce an explicit literal constraint before union selection.
		lines.push("", `impl ${typeName} {`);
		for (const [index, {
			propName,
			prop,
			isReq,
			rustType,
			strictBooleanConst,
		}] of constrainedFields.entries()) {
			if (index > 0) lines.push("");
			const literal = JSON.stringify(strictBooleanConst ?? prop.const);
			if (strictBooleanConst !== undefined) {
				const deserializeMismatch = isReq
					? strictBooleanConst
						? "!value"
						: "value"
					: strictBooleanConst
						? "value.is_some_and(|value| !value)"
						: "value.is_some_and(|value| value)";
				const serializeMismatch = isReq
					? strictBooleanConst
						? "!*value"
						: "*value"
					: deserializeMismatch;
				lines.push(
					`    fn deserialize_${toRustFieldName(propName)}<'de, D>(deserializer: D) -> Result<${rustType}, D::Error>`,
					"    where",
					"        D: serde::Deserializer<'de>,",
					"    {",
					`        let value = ${isReq ? "bool" : "Option::<bool>"}::deserialize(deserializer)?;`,
					`        if ${deserializeMismatch} {`,
					`            return Err(serde::de::Error::custom("expected ${literal}"));`,
					"        }",
					"        Ok(value)",
					"    }",
					"",
					`    fn serialize_${toRustFieldName(propName)}<S>(value: &${rustType}, serializer: S) -> Result<S::Ok, S::Error>`,
					"    where",
					"        S: serde::Serializer,",
					"    {",
					`        if ${serializeMismatch} {`,
					`            return Err(serde::ser::Error::custom("expected ${literal}"));`,
					"        }",
					"        value.serialize(serializer)",
					"    }",
				);
				continue;
			}
			lines.push(
				`    fn deserialize_${toRustFieldName(propName)}<'de, D>(deserializer: D) -> Result<${rustType}, D::Error>`,
				"    where",
				"        D: serde::Deserializer<'de>,",
				"    {",
			);
			if (isReq) {
				lines.push("        let value = String::deserialize(deserializer)?;");
			} else {
				lines.push(
					"        let Some(value) = Option::<String>::deserialize(deserializer)? else {",
					"            return Ok(None);",
					"        };",
				);
			}
			lines.push(
				`        if value != ${literal} {`,
				`            return Err(serde::de::Error::unknown_variant(&value, &[${literal}]));`,
				"        }",
				`        <${stripOption(rustType)}>::deserialize(serde::de::value::StringDeserializer::<D::Error>::new(value))${isReq ? "" : ".map(Some)"}`,
				"    }",
			);
		}
		lines.push("}");
	}
	ctx.structs.push(lines.join("\n"));
}

// ── Enum emission ───────────────────────────────────────────────────────────

/**
 * Claims a string enum name. Two const literals resolving to one name with different values
 * fail generation, so distinct discriminators can never collapse into one enum. A const whose
 * name matches an existing value enum reuses it, as released output does.
 */
function claimRustStringEnum(
	enumName: string,
	values: readonly string[],
	fromConst: boolean,
	ctx: RustCodegenCtx,
): boolean {
	const key = JSON.stringify([...values].sort());
	const previous = ctx.stringEnums.get(enumName);
	if (previous !== undefined) {
		if (previous.values !== key && (fromConst ? previous.fromConst : true)) {
			throw new Error(`Rust string enum ${enumName} is requested for different values ${previous.values} and ${key}`);
		}
		return false;
	}
	if (hasGeneratedRustType(enumName, ctx)) return false;
	ctx.stringEnums.set(enumName, { values: key, fromConst });
	ctx.generatedNames.add(enumName);
	return true;
}

function emitRustStringEnum(
	enumName: string,
	values: string[],
	ctx: RustCodegenCtx,
	description?: string,
	enumValueDescriptions?: EnumValueDescriptions,
	experimental = false,
): void {
	if (!claimRustStringEnum(enumName, values, false, ctx)) return;

	const lines: string[] = [];
	if (description) {
		for (const line of description.split(/\r?\n/)) {
			lines.push(`/// ${line}`);
		}
	}
	pushRustExperimentalDocs(lines, experimental || ctx.experimentalTypeNames.has(enumName));
	lines.push(
		"#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]",
	);
	lines.push(`pub enum ${enumName} {`);

	const usedVariantNames = new Set<string>();
	const reservedVariantNames = new Set(["Unknown"]);
	for (const value of values) {
		// Keep the protocol's explicit "unknown" distinct from the serde fallback,
		// including anonymous enums whose names depend on their containing type.
		const variantName = uniqueRustPascalIdentifier(
			value,
			usedVariantNames,
			"Value",
			reservedVariantNames,
			value === "unknown" ? "UnknownValue" : undefined,
		);
		pushRustDoc(lines, enumValueDescriptions?.[value], "    ");
		if (variantName !== value) {
			lines.push(`    #[serde(rename = "${value}")]`);
		}
		lines.push(`    ${variantName},`);
	}

	// Add a catch-all for forward compatibility. This is also the `Default`
	// variant — for wire-protocol enums an unknown/sentinel value is the only
	// safe default.
	lines.push("    /// Unknown variant for forward compatibility.");
	lines.push("    #[default]");
	lines.push("    #[serde(other)]");
	lines.push("    Unknown,");

	lines.push("}");
	ctx.enums.push(lines.join("\n"));
}

function emitRustConstStringEnum(
	enumName: string,
	value: string,
	ctx: RustCodegenCtx,
	description?: string,
): void {
	if (!claimRustStringEnum(enumName, [value], true, ctx)) return;

	const lines: string[] = [];
	if (description) {
		for (const line of description.split(/\r?\n/)) {
			lines.push(`/// ${line}`);
		}
	}
	lines.push(
		"#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]",
	);
	lines.push(`pub enum ${enumName} {`);
	const variantName = toRustPascalIdentifier(value, "Value");
	if (variantName !== value) {
		lines.push(`    #[serde(rename = "${value}")]`);
	}
	lines.push("    #[default]");
	lines.push(`    ${variantName},`);
	lines.push("}");
	ctx.enums.push(lines.join("\n"));
}

// ── Session events generation ───────────────────────────────────────────────

interface EventVariant {
	/** The event type string, e.g. "session.start" */
	typeName: string;
	/** PascalCase variant name, e.g. "SessionStart" */
	variantName: string;
	/** Data struct name, e.g. "SessionStartData" */
	dataClassName: string;
	/** Schema for the data field */
	dataSchema: JSONSchema7;
	/** Description of the event */
	description?: string;
	/** Whether the event definition is experimental. */
	eventExperimental: boolean;
	/** Whether the event data definition is experimental. */
	dataExperimental: boolean;
}

function extractEventVariants(schema: JSONSchema7): EventVariant[] {
	const definitionCollections = collectDefinitionCollections(
		schema as Record<string, unknown>,
	);
	const sessionEvent =
		resolveSchema(
			{ $ref: "#/definitions/SessionEvent" },
			definitionCollections,
		) ?? resolveSchema({ $ref: "#/$defs/SessionEvent" }, definitionCollections);
	if (!sessionEvent?.anyOf)
		throw new Error("Schema must have SessionEvent definition with anyOf");

	return (sessionEvent.anyOf as JSONSchema7[])
		.map((variant) => {
			const resolvedVariant =
				resolveObjectSchema(variant as JSONSchema7, definitionCollections) ??
				resolveSchema(variant as JSONSchema7, definitionCollections) ??
				(variant as JSONSchema7);
			if (typeof resolvedVariant !== "object" || !resolvedVariant.properties) {
				throw new Error("Invalid variant");
			}
			const typeSchema = resolvedVariant.properties.type as JSONSchema7;
			const typeName = typeSchema?.const as string;
			if (!typeName) throw new Error("Variant must have type.const");

			const dataSchema =
				resolveObjectSchema(
					resolvedVariant.properties.data as JSONSchema7,
					definitionCollections,
				) ??
				resolveSchema(
					resolvedVariant.properties.data as JSONSchema7,
					definitionCollections,
				) ??
				((resolvedVariant.properties.data as JSONSchema7) || {});

			return {
				typeName,
				variantName: toPascalCase(typeName),
				dataClassName: `${toPascalCase(typeName)}Data`,
				dataSchema,
				description: resolvedVariant.description || dataSchema.description,
				eventExperimental: isSchemaExperimental(resolvedVariant),
				dataExperimental: isSchemaExperimental(dataSchema),
			};
		})
		.filter(
			(v) =>
				!EXCLUDED_EVENT_TYPES.has(v.typeName) &&
				!isSchemaInternal(v.dataSchema),
		);
}

export function generateSessionEventsCode(schema: JSONSchema7): string {
	const variants = extractEventVariants(schema);
	const ctx = makeCtx(
		collectDefinitionCollections(schema as Record<string, unknown>),
		{
			allowUntaggedUnions: true,
			allowedUnionTypeNames: [
				"ToolExecutionCompleteContent",
				"ToolExecutionCompleteContentResourceDetails",
			],
		},
	);

	// Generate per-event payload types without flattening root unions into empty structs.
	for (const variant of variants) {
		if (getUnionVariants(variant.dataSchema)) {
			const payloadType =
				tryEmitRustUnion(
					variant.dataSchema,
					variant.variantName,
					"data",
					ctx,
				) ?? "serde_json::Value";
			if (payloadType !== variant.dataClassName) {
				emitRustTypeAlias(
					variant.dataClassName,
					variant.dataSchema,
					payloadType,
					ctx,
					variant.description,
				);
				if (ctx.nonDefaultableTypes.has(payloadType)) {
					ctx.nonDefaultableTypes.add(variant.dataClassName);
				}
			}
			continue;
		}
		emitRustStruct(
			variant.dataClassName,
			variant.dataSchema,
			ctx,
			variant.description,
		);
	}

	// Build the SessionEventType enum
	const typeEnumLines: string[] = [];
	typeEnumLines.push("/// Identifies the kind of session event.");
	typeEnumLines.push(
		"#[derive(Debug, Clone, Default, PartialEq, Eq, Hash, Serialize, Deserialize)]",
	);
	typeEnumLines.push("pub enum SessionEventType {");
	for (const variant of variants) {
		pushRustExperimentalDocs(
			typeEnumLines,
			variant.eventExperimental,
			"    ",
		);
		typeEnumLines.push(`    #[serde(rename = "${variant.typeName}")]`);
		typeEnumLines.push(`    ${variant.variantName},`);
	}
	typeEnumLines.push("    /// Unknown event type for forward compatibility.");
	typeEnumLines.push("    #[default]");
	typeEnumLines.push("    #[serde(other)]");
	typeEnumLines.push("    Unknown,");
	typeEnumLines.push("}");

	// Build the SessionEventData enum (adjacently tagged by type/data)
	const dataEnumLines: string[] = [];
	dataEnumLines.push(
		"/// Typed session event data, discriminated by the event `type` field.",
	);
	dataEnumLines.push("///");
	dataEnumLines.push(
		"/// Use with [`TypedSessionEvent`] for fully typed event handling.",
	);
	dataEnumLines.push("#[derive(Debug, Clone, Serialize, Deserialize)]");
	dataEnumLines.push(`#[serde(tag = "type", content = "data")]`);
	dataEnumLines.push("pub enum SessionEventData {");
	for (const variant of variants) {
		pushRustExperimentalDocs(
			dataEnumLines,
			variant.dataExperimental,
			"    ",
		);
		dataEnumLines.push(`    #[serde(rename = "${variant.typeName}")]`);
		dataEnumLines.push(`    ${variant.variantName}(${variant.dataClassName}),`);
	}
	dataEnumLines.push("}");

	// Build TypedSessionEvent that combines common fields with typed data
	const typedEventLines: string[] = [];
	typedEventLines.push("/// A session event with typed data payload.");
	typedEventLines.push("///");
	typedEventLines.push(
		"/// The common event fields (id, timestamp, parentId, ephemeral, agentId)",
	);
	typedEventLines.push(
		"/// are available directly. The event-specific data is in the `payload`",
	);
	typedEventLines.push("/// field as a [`SessionEventData`] enum.");
	typedEventLines.push("#[derive(Debug, Clone, Serialize, Deserialize)]");
	typedEventLines.push(`#[serde(rename_all = "camelCase")]`);
	typedEventLines.push("pub struct TypedSessionEvent {");
	typedEventLines.push("    /// Unique event identifier (UUID v4).");
	typedEventLines.push("    pub id: String,");
	typedEventLines.push(
		"    /// ISO 8601 timestamp when the event was created.",
	);
	typedEventLines.push("    pub timestamp: String,");
	typedEventLines.push("    /// ID of the preceding event in the chain.");
	typedEventLines.push(`    #[serde(skip_serializing_if = "Option::is_none")]`);
	typedEventLines.push("    pub parent_id: Option<String>,");
	typedEventLines.push(
		"    /// When true, the event is transient and not persisted.",
	);
	typedEventLines.push(`    #[serde(skip_serializing_if = "Option::is_none")]`);
	typedEventLines.push("    pub ephemeral: Option<bool>,");
	typedEventLines.push(
		"    /// Sub-agent instance identifier. Absent for events from the root /",
	);
	typedEventLines.push(
		"    /// main agent and session-level events.",
	);
	typedEventLines.push(`    #[serde(skip_serializing_if = "Option::is_none")]`);
	typedEventLines.push("    pub agent_id: Option<String>,");
	typedEventLines.push(
		"    /// The typed event payload (discriminated by event type).",
	);
	typedEventLines.push("    #[serde(flatten)]");
	typedEventLines.push("    pub payload: SessionEventData,");
	typedEventLines.push("}");

	// Assemble file
	const out: string[] = [];
	out.push(
		"//! Auto-generated from session-events.schema.json — do not edit manually.",
	);
	out.push("");
	out.push("#![allow(deprecated)]");
	out.push("");
	out.push("use std::collections::HashMap;");
	out.push("");
	out.push("use serde::{Deserialize, Serialize};");
	out.push("");
	out.push("use crate::types::{RequestId, SessionId};");
	out.push("");

	// SessionEventType enum
	out.push(typeEnumLines.join("\n"));
	out.push("");

	// SessionEventData enum
	out.push(dataEnumLines.join("\n"));
	out.push("");

	// TypedSessionEvent struct
	out.push(typedEventLines.join("\n"));
	out.push("");

	// Per-event data structs
	for (const block of ctx.structs) {
		out.push(block);
		out.push("");
	}

	// Supporting type aliases
	for (const block of ctx.typeAliases) {
		out.push(block);
		out.push("");
	}

	// Supporting enums
	for (const block of ctx.enums) {
		out.push(block);
		out.push("");
	}

	if (ctx.generatedNames.has("InstallationReview")) {
		out.push("/// Compatibility alias for the confirmation review wrapper.");
		out.push("pub type InstallationConfirmationRequestReview = InstallationReview;");
		out.push("");
		out.push("/// Resource discriminator for installation confirmation reviews.");
		out.push("#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]");
		out.push("pub enum InstallationReviewResource {");
		out.push("    #[serde(rename = \"mcp\")]");
		out.push("    #[default]");
		out.push("    Mcp,");
		out.push("    #[serde(rename = \"skill\")]");
		out.push("    Skill,");
		out.push("}");
		out.push("");
		out.push("/// Compatibility alias for the confirmation review resource discriminator.");
		out.push("pub type InstallationConfirmationRequestReviewResource = InstallationReviewResource;");
		out.push("");
	}

	return out.join("\n");
}

function collectNonDefaultableRustTypeNames(code: string): Set<string> {
	const names = new Set<string>();
	const pattern =
		/#\[derive\(Debug, Clone, Serialize, Deserialize\)\](?:\r?\n#\[serde\([^\n]+\)\])*\r?\npub (?:struct|enum) (\w+)/g;
	for (const match of code.matchAll(pattern)) {
		names.add(match[1]);
	}
	return names;
}

// ── API types generation ────────────────────────────────────────────────────

function collectRpcMethods(
	node: Record<string, unknown>,
	prefix = "",
): RpcMethod[] {
	const methods: RpcMethod[] = [];
	for (const [key, value] of Object.entries(node)) {
		if (isRpcMethod(value)) {
			methods.push(value);
		} else if (typeof value === "object" && value !== null) {
			methods.push(
				...collectRpcMethods(
					value as Record<string, unknown>,
					prefix ? `${prefix}.${key}` : key,
				),
			);
		}
	}
	return methods;
}

function rustParamsTypeName(
	method: RpcMethod,
	context: DefinitionCollections | RustCodegenCtx,
): string {
	const ctx = "externalTypeRefs" in context ? context : undefined;
	const defCollections = ctx?.definitions ?? context;
	const params = method.params as (JSONSchema7 & { $ref?: string }) | undefined;
	if (typeof params?.$ref === "string") {
		if (ctx) {
			recordExternalRustTypeRef(params.$ref, ctx);
		}
		return rustRefTypeName(params.$ref, defCollections);
	}

	const resolved = params ? resolveSchema(params, defCollections) : undefined;
	return getRpcSchemaTypeName(
		resolved ?? params,
		`${toPascalCase(method.rpcMethod)}Params`,
	);
}

function rustResultTypeName(method: RpcMethod, ctx: RustCodegenCtx): string {
	if (method.result?.$ref && parseExternalSchemaRef(method.result.$ref)) {
		recordExternalRustTypeRef(method.result.$ref, ctx);
		return rustRefTypeName(method.result.$ref);
	}
	return getRpcSchemaTypeName(
		method.result,
		`${toPascalCase(method.rpcMethod)}Result`,
	);
}

function asGeneratedObjectSchema(
	schema: JSONSchema7,
	defCollections: DefinitionCollections,
): JSONSchema7 | undefined {
	const resolved = resolveObjectSchema(schema, defCollections);
	if (!resolved || !isObjectSchema(resolved)) return undefined;

	return {
		...resolved,
		title: resolved.title ?? schema.title,
		description: schema.description ?? resolved.description,
	};
}

function getMethodParamsObjectSchema(
	method: RpcMethod,
	defCollections: DefinitionCollections,
	isSession: boolean,
): JSONSchema7 | undefined {
	if (!method.params) return undefined;

	const resolved = asGeneratedObjectSchema(method.params, defCollections);
	if (!resolved) return undefined;

	const properties = { ...(resolved.properties ?? {}) };
	if (isSession) {
		delete properties.sessionId;
	}

	if (Object.keys(properties).length === 0) return undefined;

	const required = (resolved.required ?? [])
		.filter((name) => !isSession || name !== "sessionId")
		.filter((name) => Object.prototype.hasOwnProperty.call(properties, name));

	const schema: JSONSchema7 = {
		...resolved,
		properties,
		description: method.params.description ?? resolved.description,
	};

	if (required.length > 0) {
		schema.required = required;
	} else {
		delete schema.required;
	}

	return schema;
}

function isNullableParamsSchema(
	params: JSONSchema7,
	defCollections: DefinitionCollections,
): boolean {
	if (getNullableInner(params)) return true;

	const resolved = resolveSchema(params, defCollections);
	return !!resolved && !!getNullableInner(resolved);
}

// ── x-legacy-parameters ─────────────────────────────────────────────────────

/**
 * A request that declares `x-legacy-parameters`. Rust keeps the published struct and
 * method with only the legacy fields, and adds a private-field options type with a
 * `new(required...)` constructor, fluent setters and one `*_with_options` method.
 */
interface RustLegacyRequest {
	legacy: LegacyParameters;
	/** The full current request schema, excluding the session-scoped `sessionId`. */
	schema: JSONSchema7;
	optionsName: string;
}

function rustLegacyRequest(
	method: RpcMethod,
	defCollections: DefinitionCollections,
	isSession: boolean,
): RustLegacyRequest | undefined {
	const schema = getMethodParamsObjectSchema(method, defCollections, isSession);
	const legacy = readLegacyParameters(schema, method.rpcMethod, {
		optional: isOmittableRequest(method.params),
		nullable: !!method.params && isNullableParamsSchema(method.params, defCollections),
	});
	if (!legacy || !schema) return undefined;
	const paramsName = rustParamsTypeName(method, defCollections);
	return {
		legacy,
		schema,
		optionsName: `${paramsName.replace(/(Request|Params)$/, "")}Options`,
	};
}

/** The published request schema: the current one without properties added after it. */
function rustLegacyStructSchema(
	schema: JSONSchema7,
	request: RustLegacyRequest,
	owner: string,
): JSONSchema7 {
	const additions = new Set(request.legacy.additions);
	if (Object.hasOwn(schema.properties ?? {}, "sessionId")) {
		throw new Error(`Invalid ${LEGACY_PARAMETERS_KEY} for ${owner}: the request struct must not carry sessionId`);
	}
	return {
		...schema,
		properties: Object.fromEntries(
			Object.entries(schema.properties ?? {}).filter(([name]) => !additions.has(name)),
		),
	};
}

function emitRustLegacyOptions(
	legacyName: string,
	request: RustLegacyRequest,
	ctx: RustCodegenCtx,
): void {
	const { optionsName, schema, legacy } = request;
	if (
		ctx.generatedNames.has(optionsName) ||
		Object.hasOwn(ctx.definitions?.definitions ?? {}, optionsName) ||
		Object.hasOwn(ctx.definitions?.$defs ?? {}, optionsName)
	) {
		throw new Error(`Conflicting Rust type ${optionsName} for the ${legacyName} options`);
	}
	ctx.generatedNames.add(optionsName);
	const properties = schema.properties ?? {};
	const field = (propName: string, isReq: boolean) => {
		const prop = properties[propName] as JSONSchema7;
		const rustType = resolveRustType(prop, legacyName, propName, isReq, ctx);
		if (!isReq && !rustType.startsWith("Option<")) {
			throw new Error(`Invalid ${LEGACY_PARAMETERS_KEY} for ${legacyName}: optional ${propName} must be an Option`);
		}
		return { propName, prop, rustField: safeRustFieldName(propName), rustType };
	};
	const required = legacy.legacy.filter((name) => legacy.required.has(name)).map((name) => field(name, true));
	const legacyOptional = legacy.legacy.filter((name) => !legacy.required.has(name)).map((name) => field(name, false));
	const additions = legacy.additions.map((name) => field(name, false));
	const experimental = isSchemaExperimental(schema) || ctx.experimentalTypeNames.has(legacyName);

	const lines: string[] = [];
	lines.push(`/// Extensible [\`${legacyName}\`], including inputs added after it was published.`);
	lines.push("///");
	lines.push(`/// Required inputs are [\`${optionsName}::new\`] arguments; optional inputs have fluent setters.`);
	lines.push("/// Input-only: it serialises to the flat wire request and is not deserialisable.");
	pushRustExperimentalDocs(lines, experimental);
	lines.push("#[derive(Debug, Clone, Serialize)]");
	lines.push(`#[serde(rename_all = "camelCase")]`);
	lines.push(`pub struct ${optionsName} {`);
	lines.push("    #[serde(flatten)]");
	lines.push(`    legacy: ${legacyName},`);
	for (const { propName, rustField, rustType } of additions) {
		const rename = snakeToCamelCase(toRustFieldName(propName)) !== propName ? `rename = "${propName}", ` : "";
		lines.push(`    #[serde(${rename}skip_serializing_if = "Option::is_none")]`);
		lines.push(`    ${rustField}: ${rustType},`);
	}
	lines.push("}");
	lines.push("");
	lines.push(`impl ${optionsName} {`);
	lines.push("    /// Creates options with the required inputs.");
	const stringInput = (rustType: string) => rustType === "String";
	const parameters = required.map(({ rustField, rustType }) =>
		`${rustField}: ${stringInput(rustType) ? "impl Into<String>" : rustType}`,
	);
	lines.push(`    pub fn new(${parameters.join(", ")}) -> Self {`);
	lines.push("        Self {");
	const legacyFields = [
		...required.map(({ rustField, rustType }) =>
			stringInput(rustType) ? `${rustField}: ${rustField}.into()` : rustField,
		),
		...legacyOptional.map(({ rustField }) => `${rustField}: None`),
	];
	lines.push(`            legacy: ${legacyName} { ${legacyFields.join(", ")} },`);
	for (const { rustField } of additions) {
		lines.push(`            ${rustField}: None,`);
	}
	lines.push("        }");
	lines.push("    }");
	for (const [target, fields] of [["self.legacy", legacyOptional], ["self", additions]] as const) {
		for (const { prop, rustField, rustType } of fields) {
			const inner = stripOption(rustType);
			const [argType, value] = inner === "String" ? ["impl Into<String>", "value.into()"] : [inner, "value"];
			lines.push("");
			pushRustDoc(lines, prop.description ?? `Sets \`${rustField}\`.`, "    ");
			lines.push(`    pub fn ${rustField}(mut self, value: ${argType}) -> Self {`);
			lines.push(`        ${target}.${rustField} = Some(${value});`);
			lines.push("        self");
			lines.push("    }");
		}
	}
	lines.push("}");
	if (required.length === 0) {
		lines.push("");
		lines.push(`impl Default for ${optionsName} {`);
		lines.push("    fn default() -> Self {");
		lines.push("        Self::new()");
		lines.push("    }");
		lines.push("}");
	}
	ctx.structs.push(lines.join("\n"));
}

export function generateApiTypesCode(
	apiSchema: ApiSchema,
	nonDefaultableTypes: Iterable<string> = [],
): string {
	const definitions = collectDefinitions(apiSchema as Record<string, unknown>);
	const defCollections = collectDefinitionCollections(
		apiSchema as Record<string, unknown>,
	);
	const ctx = makeCtx(defCollections, {
		nonDefaultableTypes,
		allowedUnionTypeNames: [
			"AuthInfo",
			"EnqueueCommandResult",
			"EntraTokenAcquireResult",
			"McpOauthProbeResult",
			"SettableAuthInfo",
			"ToolResult",
		],
	});

	// Collect all RPC methods before emitting shared definitions so method stability
	// can propagate to referenced data types.
	const methodEntries: { method: RpcMethod; isSession: boolean }[] = [];
	for (const { group, isSession } of [
		{ group: apiSchema.server, isSession: false },
		{ group: apiSchema.session, isSession: true },
		{ group: apiSchema.clientSession, isSession: false },
	]) {
		if (group) {
			methodEntries.push(
				...collectRpcMethods(group as Record<string, unknown>).map((method) => ({
					method,
					isSession,
				})),
			);
		}
	}
	const allMethods = methodEntries.map(({ method }) => method);
	const inlineMethodParamSchemas = new Map<string, JSONSchema7>();
	const sortedNames = (names: Iterable<string> | undefined): string[] =>
		[...(names ?? [])].sort();
	const schemaPropertyNames = (schema: JSONSchema7): string[] =>
		sortedNames(Object.keys(schema.properties ?? {}));
	const shouldPreferMethodParamSchema = (
		typeName: string,
		paramsSchema: JSONSchema7,
	): boolean => {
		const definition = definitions[typeName];
		if (typeof definition !== "object" || definition === null) return false;
		const definitionSchema = asGeneratedObjectSchema(
			definition as JSONSchema7,
			defCollections,
		);
		if (!definitionSchema) return false;

		return (
			JSON.stringify(schemaPropertyNames(paramsSchema)) !==
				JSON.stringify(schemaPropertyNames(definitionSchema)) ||
			JSON.stringify(sortedNames(paramsSchema.required)) !==
				JSON.stringify(sortedNames(definitionSchema.required))
		);
	};
	for (const { method, isSession } of methodEntries) {
		const params = method.params as (JSONSchema7 & { $ref?: string }) | undefined;
		if (!params || typeof params.$ref === "string") continue;
		const paramsSchema = getMethodParamsObjectSchema(
			method,
			defCollections,
			isSession,
		);
		const paramsName = rustParamsTypeName(method, defCollections);
		if (paramsSchema && shouldPreferMethodParamSchema(paramsName, paramsSchema)) {
			inlineMethodParamSchemas.set(paramsName, paramsSchema);
		}
	}
	for (const name of collectExperimentalOnlyRpcReferencedDefinitionNames(allMethods, defCollections)) {
		ctx.experimentalTypeNames.add(toPascalCase(name));
	}
	const nonExperimentalReferencedTypes = new Set(
		[...collectRpcMethodReferencedDefinitionNames(
			allMethods.filter((method) => method.stability !== "experimental"),
			defCollections,
		)].map((name) => toPascalCase(name)),
	);
	for (const { method, isSession } of methodEntries) {
		if (method.stability !== "experimental") continue;
		const paramsSchema =
			getMethodParamsObjectSchema(method, defCollections, isSession) ??
			(isSession && method.params ? asGeneratedObjectSchema(method.params, defCollections) : undefined);
		if (paramsSchema) {
			const paramsName = rustParamsTypeName(method, defCollections);
			if (!nonExperimentalReferencedTypes.has(paramsName)) {
				ctx.experimentalTypeNames.add(paramsName);
			}
		}
		if (method.result && !isVoidSchema(method.result)) {
			const resultName = rustResultTypeName(method, ctx);
			if (!nonExperimentalReferencedTypes.has(resultName)) {
				ctx.experimentalTypeNames.add(resultName);
			}
		}
	}

	for (const name of STRICT_BOOLEAN_UNION_VARIANTS.keys()) {
		const definition = definitions[name];
		if (typeof definition !== "object" || definition === null) continue;
		tryEmitRustUnion(definition as JSONSchema7, name, "", ctx);
	}

	const legacyRequests = new Map<string, RustLegacyRequest>();
	const handlerMethods = new Set(
		collectRpcMethods((apiSchema.clientSession ?? {}) as Record<string, unknown>),
	);
	for (const method of handlerMethods) {
		rejectLegacyParameters(method.params && resolveSchema(method.params, defCollections), method.rpcMethod);
	}
	for (const { method, isSession } of methodEntries) {
		if (handlerMethods.has(method)) continue;
		const request = rustLegacyRequest(method, defCollections, isSession);
		if (request) legacyRequests.set(rustParamsTypeName(method, defCollections), request);
	}
	const emitLegacyOptions = (name: string): void => {
		const request = legacyRequests.get(name);
		if (request && ctx.generatedNames.has(name) && !ctx.generatedNames.has(request.optionsName)) {
			emitRustLegacyOptions(name, request, ctx);
		}
	};

	// Generate shared definitions (structs & enums)
	for (const [name, def] of Object.entries(definitions)) {
		if (typeof def !== "object" || def === null) continue;
		const current = inlineMethodParamSchemas.get(name) ?? (def as JSONSchema7);
		const legacyRequest = legacyRequests.get(name);
		const schema = legacyRequest ? rustLegacyStructSchema(current, legacyRequest, name) : current;

		if (schema.enum && Array.isArray(schema.enum)) {
			emitRustStringEnum(
				name,
				schema.enum as string[],
				ctx,
				schema.description,
				getEnumValueDescriptions(schema),
				isSchemaExperimental(schema),
			);
		} else if (isRustArraySchema(schema)) {
			emitRustArrayAlias(name, schema, ctx, schema.description);
		} else if (isRustMapSchema(schema)) {
			emitRustMapAlias(name, schema, ctx, schema.description);
		} else if (asGeneratedObjectSchema(schema, defCollections)) {
			emitRustStruct(
				name,
				asGeneratedObjectSchema(schema, defCollections)!,
				ctx,
				schema.description,
			);
		} else if (getUnionVariants(schema)) {
			// Unwrap nullable anyOf wrappers (e.g. anyOf: [{ not: {} }, { type: "object" }])
			// before falling through to struct generation, since tryEmitRustUnion
			// silently drops these.
			const nullableInner = getNullableInner(schema);
			if (nullableInner && isObjectSchema(nullableInner)) {
				emitRustStruct(name, nullableInner, ctx, nullableInner.description ?? schema.description);
			} else {
				tryEmitRustUnion(schema, name, "", ctx, true, true);
			}
		} else {
			emitRustScalarAlias(name, schema, ctx, schema.description);
		}
		emitLegacyOptions(name);
	}

	// A response record must keep every field it deserialises, so Rust cannot freeze it.
	// Existing literals stay source-compatible only through `..Default::default()`.
	for (const [name, def] of Object.entries(definitions)) {
		if (legacyRequests.has(name)) continue;
		if (!readLegacyParameters(def, name, { implicit: ["sessionId"] })) continue;
		const defaultStruct = new RegExp(
			`#\\[derive\\([^)]*\\bDefault\\b[^)]*\\)\\]\\n#\\[serde\\(rename_all = "camelCase"\\)\\]\\n(?:pub|pub\\(crate\\)) struct ${name} \\{`,
		);
		if (!ctx.structs.some((block) => defaultStruct.test(block))) {
			throw new Error(
				`Invalid ${LEGACY_PARAMETERS_KEY} for ${name}: a response record must be a struct that derives Default`,
			);
		}
	}

	// RPC method name constants
	const methodConstLines: string[] = [];
	methodConstLines.push("/// JSON-RPC method name constants.");
	methodConstLines.push("pub mod rpc_methods {");

	for (const method of allMethods) {
		const constName = method.rpcMethod.replace(/\./g, "_").toUpperCase();
		methodConstLines.push(`    /// \`${method.rpcMethod}\``);
		methodConstLines.push(
			`    pub const ${constName}: &str = "${method.rpcMethod}";`,
		);
	}
	methodConstLines.push("}");

	// Generate param/result types for each method
	for (const { method, isSession } of methodEntries) {
		const paramsSchema = getMethodParamsObjectSchema(
			method,
			defCollections,
			isSession,
		);
		const sessionWireParamsSchema = isSession && !paramsSchema && method.params
			? asGeneratedObjectSchema(method.params, defCollections)
			: undefined;
		const generatedParamsSchema = paramsSchema ?? sessionWireParamsSchema;
		if (generatedParamsSchema) {
			const paramsName = rustParamsTypeName(method, ctx);
			const legacyRequest = legacyRequests.get(paramsName);
			const structSchema = legacyRequest
				? rustLegacyStructSchema(generatedParamsSchema, legacyRequest, paramsName)
				: generatedParamsSchema;
			emitRustStruct(
				paramsName,
				structSchema,
				ctx,
				structSchema.description,
			);
			emitLegacyOptions(paramsName);
		}
		if (method.result && !isVoidSchema(method.result)) {
			const resultName = rustResultTypeName(method, ctx);
			const resolved = resolveSchema(method.result, defCollections);
			if (resolved) {
				if (resolved.enum && Array.isArray(resolved.enum)) {
					// Already generated from definitions
				} else if (isRustArraySchema(resolved)) {
					emitRustArrayAlias(resultName, resolved, ctx, resolved.description);
				} else if (isRustMapSchema(resolved)) {
					emitRustMapAlias(resultName, resolved, ctx, resolved.description);
				} else if (isObjectSchema(resolved)) {
					emitRustStruct(resultName, resolved, ctx, resolved.description);
				} else {
					emitRustScalarAlias(resultName, resolved, ctx, resolved.description);
				}
			}
		}
	}

	// Assemble file
	const out: string[] = [];
	out.push("//! Auto-generated from api.schema.json — do not edit manually.");
	out.push("");
	out.push("#![allow(clippy::large_enum_variant)]");
	out.push("#![allow(deprecated)]");
	out.push("#![allow(dead_code)]");
	out.push("#![allow(rustdoc::invalid_html_tags)]");
	out.push("");
	out.push("use std::collections::HashMap;");
	out.push("");
	out.push("use serde::{Deserialize, Serialize};");
	out.push("");
	const externalImports = new Map<string, Set<string>>();
	for (const [schemaFile, typeNames] of ctx.externalTypeRefs) {
		const defaultModule = EXTERNAL_SCHEMA_RUST_MODULE[schemaFile];
		const typeModules = EXTERNAL_SCHEMA_RUST_TYPE_MODULE[schemaFile] ?? {};
		for (const typeName of typeNames) {
			const module = typeModules[typeName] ?? defaultModule;
			if (!module) continue;
			let names = externalImports.get(module);
			if (!names) {
				names = new Set<string>();
				externalImports.set(module, names);
			}
			names.add(typeName);
		}
	}
	// api_types.rs always needs RequestId/SessionId from crate::types. Merge them into
	// the same import group as any other crate::types refs (e.g. SessionEvent) so the
	// generator emits a single `use crate::types::{...};` line that matches what
	// rustfmt would otherwise produce after merging adjacent imports.
	let cratesTypesImports = externalImports.get("crate::types");
	if (!cratesTypesImports) {
		cratesTypesImports = new Set<string>();
		externalImports.set("crate::types", cratesTypesImports);
	}
	cratesTypesImports.add("RequestId");
	cratesTypesImports.add("SessionId");
	for (const [module, typeNames] of [...externalImports].sort(([left], [right]) =>
		left.localeCompare(right),
	)) {
		// Preserve API module paths when a definition moves into a shared schema.
		const importKeyword = Object.values(EXTERNAL_SCHEMA_RUST_MODULE).includes(module)
			? "pub use"
			: "use";
		out.push(`${importKeyword} ${module}::{${[...typeNames].sort().join(", ")}};`);
	}
	out.push("");

	// Method constants
	out.push(methodConstLines.join("\n"));
	out.push("");

	// Shared definition types first, then RPC types
	for (const block of ctx.structs) {
		out.push(block);
		out.push("");
	}

	for (const block of ctx.typeAliases) {
		out.push(block);
		out.push("");
	}

	for (const block of ctx.enums) {
		out.push(block);
		out.push("");
	}

	if (ctx.generatedNames.has("InstallationReview")) {
		out.push("/// Compatibility alias for the confirmation review wrapper.");
		out.push("pub type InstallationConfirmationRequestReview = InstallationReview;");
		out.push("");
		out.push("/// Resource discriminator for installation confirmation reviews.");
		out.push("#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]");
		out.push("pub enum InstallationReviewResource {");
		out.push("    #[serde(rename = \"mcp\")]");
		out.push("    #[default]");
		out.push("    Mcp,");
		out.push("    #[serde(rename = \"skill\")]");
		out.push("    Skill,");
		out.push("}");
		out.push("");
		out.push("/// Compatibility alias for the confirmation review resource discriminator.");
		out.push("pub type InstallationConfirmationRequestReviewResource = InstallationReviewResource;");
		out.push("");
	}

	return out.join("\n");
}

// ── Typed RPC namespace generation ──────────────────────────────────────────

interface NamespaceNode {
	name: string;
	typeName: string;
	methods: RpcMethod[];
	children: Map<string, NamespaceNode>;
}

function newNamespaceNode(name: string, typeName: string): NamespaceNode {
	return { name, typeName, methods: [], children: new Map() };
}

/**
 * Build a namespace tree from a list of methods. `groupOf(method)` returns the
 * dotted group path (e.g. "mcp.config" for "mcp.config.list" / "workspaces"
 * for "workspaces.listFiles"); the last segment of `rpcMethod` is the leaf
 * method name.
 */
function buildNamespaceTree(
	rootTypeName: string,
	methods: RpcMethod[],
	stripPrefix: string,
): NamespaceNode {
	const root = newNamespaceNode("", rootTypeName);
	for (const method of methods) {
		const trimmed = stripPrefix && method.rpcMethod.startsWith(stripPrefix)
			? method.rpcMethod.slice(stripPrefix.length)
			: method.rpcMethod;
		const segments = trimmed.split(".");
		const groupSegments = segments.slice(0, -1);
		let node = root;
		for (const seg of groupSegments) {
			let child = node.children.get(seg);
			if (!child) {
				const childTypeName = `${node.typeName}${toPascalCase(seg)}`;
				child = newNamespaceNode(seg, childTypeName);
				node.children.set(seg, child);
			}
			node = child;
		}
		node.methods.push(method);
	}
	return root;
}

/**
 * Determine if a method has typed params. Returns `{ hasParams, typeName }`.
 * Handles `$ref`-based, title-bearing, and inline params uniformly:
 *
 *   - Resolves `$ref` to its definition.
 *   - For session methods, ignores `sessionId` (the namespace injects it).
 *   - Returns `hasParams=false` when the resolved property set (after the
 *     sessionId filter for session methods) is empty.
 *   - The type name comes from `$ref` (preferred), then the resolved
 *     definition's `title`, then the inline params `title`.
 */
function getMethodParamsInfo(
	method: RpcMethod,
	defCollections: DefinitionCollections,
	isSession: boolean,
): { hasParams: boolean; optional: boolean; typeName: string | null } {
	if (!method.params) return { hasParams: false, optional: false, typeName: null };
	const paramsSchema = getMethodParamsObjectSchema(
		method,
		defCollections,
		isSession,
	);
	if (!paramsSchema) return { hasParams: false, optional: false, typeName: null };

	const typeName = rustParamsTypeName(method, defCollections);

	const props = Object.keys(paramsSchema.properties || {});
	if (props.length === 0) return { hasParams: false, optional: false, typeName: null };
	if (!typeName) return { hasParams: false, optional: false, typeName: null };
	const required = new Set(paramsSchema.required || []);
	const hasRequiredParams = props.some((p) => required.has(p));
	const optional = isNullableParamsSchema(method.params, defCollections) &&
		!hasRequiredParams;
	return { hasParams: true, optional, typeName };
}

function rpcMethodConstName(method: RpcMethod): string {
	return method.rpcMethod.replace(/\./g, "_").toUpperCase();
}

function emitNamespaceStruct(
	out: string[],
	node: NamespaceNode,
	holderType: string,
	holderField: string,
	isSession: boolean,
	defCollections: DefinitionCollections,
	docPrefix: string,
): void {
	const lifetimes = "<'a>";
	out.push(`/// ${docPrefix}`);
	out.push(`#[derive(Clone, Copy)]`);
	out.push(`pub struct ${node.typeName}${lifetimes} {`);
	out.push(`    pub(crate) ${holderField}: &'a ${holderType},`);
	out.push(`}`);
	out.push("");

	out.push(`impl${lifetimes} ${node.typeName}${lifetimes} {`);

	// Sub-namespace accessors
	const childNames = Array.from(node.children.keys()).sort();
	for (const childName of childNames) {
		const child = node.children.get(childName)!;
		const accessor = toSnakeCase(childName);
		const desc = isSession
			? `\`session.${accessorPath(node, childName, isSession)}.*\``
			: `\`${accessorPath(node, childName, isSession)}.*\``;
		out.push(`    /// ${desc} sub-namespace.`);
		out.push(
			`    pub fn ${accessor}(&self) -> ${child.typeName}<'a> {`,
		);
		out.push(`        ${child.typeName} { ${holderField}: self.${holderField} }`);
		out.push(`    }`);
		out.push("");
	}

	// Leaf methods
	for (const method of node.methods) {
		emitNamespaceMethod(out, method, holderField, isSession, defCollections);
	}

	out.push(`}`);
	out.push("");

	// Recursively emit child structs
	for (const childName of childNames) {
		const child = node.children.get(childName)!;
		const childDoc = isSession
			? `\`session.${accessorPath(node, childName, isSession)}.*\` RPCs.`
			: `\`${accessorPath(node, childName, isSession)}.*\` RPCs.`;
		emitNamespaceStruct(
			out,
			child,
			holderType,
			holderField,
			isSession,
			defCollections,
			childDoc,
		);
	}
}

function accessorPath(parent: NamespaceNode, child: string, _isSession: boolean): string {
	// Build wire-style dotted path from the namespace tree's "name" chain plus child.
	// `parent.name === ""` for root; we accumulate by retrieving parent name only.
	// (We don't track full ancestry here; this is just for doc strings — we
	// fall back to the child name alone when at the root.)
	if (!parent.name) return child;
	return `${parent.name}.${child}`;
}

function getResultTypeName(
	method: RpcMethod,
	defCollections: DefinitionCollections,
): string | null {
	const result = method.result as (JSONSchema7 & { $ref?: string }) | null;
	if (!result || isVoidSchema(result)) return null;
	if (typeof result.$ref === "string") {
		return refTypeName(result.$ref, defCollections);
	}
	if (typeof result.title === "string") return result.title;
	return `${toPascalCase(method.rpcMethod)}Result`;
}

function methodUsesInternalSchema(
	schema: JSONSchema7 | null | undefined,
	defCollections: DefinitionCollections,
): boolean {
	if (!schema) return false;

	const nonNullable = getNullableInner(schema) ?? schema;
	const resolved = resolveSchema(nonNullable, defCollections) ?? nonNullable;
	return isSchemaInternal(resolved);
}

function pushNamespaceMethodBody(
	out: string[],
	constName: string,
	isSession: boolean,
	hasParams: boolean,
	resultIsVoid: boolean,
): void {
	// Build the params Value sent over the wire.
	if (isSession) {
		if (hasParams) {
			out.push(`        let mut wire_params = serde_json::to_value(params)?;`);
			out.push(
				`        wire_params["sessionId"] = serde_json::Value::String(self.session.id().to_string());`,
			);
		} else {
			out.push(
				`        let wire_params = serde_json::json!({ "sessionId": self.session.id() });`,
			);
		}
		out.push(
			`        let _value = self.session.client().call(rpc_methods::${constName}, Some(wire_params)).await?;`,
		);
	} else {
		if (hasParams) {
			out.push(`        let wire_params = serde_json::to_value(params)?;`);
		} else {
			out.push(`        let wire_params = serde_json::json!({});`);
		}
		out.push(
			`        let _value = self.client.call(rpc_methods::${constName}, Some(wire_params)).await?;`,
		);
	}

	if (resultIsVoid) {
		out.push(`        Ok(())`);
	} else {
		out.push(`        Ok(serde_json::from_value(_value)?)`);
	}
	out.push(`    }`);
}

function emitNamespaceMethod(
	out: string[],
	method: RpcMethod,
	holderField: string,
	isSession: boolean,
	defCollections: DefinitionCollections,
): void {
	const wireMethod = method.rpcMethod;
	const constName = rpcMethodConstName(method);
	const lastSegment = wireMethod.split(".").pop()!;
	const fnName = toSnakeCase(lastSegment);

	const paramsInfo = getMethodParamsInfo(method, defCollections, isSession);
	const hasParams = paramsInfo.hasParams;
	const paramsTypeName = paramsInfo.typeName;
	const resolvedParams = method.params
		? (resolveObjectSchema(method.params, defCollections) ??
			resolveSchema(method.params, defCollections) ??
			method.params)
		: undefined;

	const resultTypeName = getResultTypeName(method, defCollections);
	const resultSchema = method.result
		? (resolveSchema(method.result, defCollections) ?? method.result)
		: undefined;
	const returnType = resultTypeName ? resultTypeName : "()";
	const resultIsVoid = resultTypeName === null;

	const buildDocs = (includeParams: boolean): string[] => {
		const docs = rustRpcMethodDocs(
			method,
			resultSchema,
			rustRpcParamsDescription(method, resolvedParams),
			includeParams,
		);
		if (method.deprecated) docs.push(...rustDeprecatedAttributes("    "));
		const stability = method.stability;
		if (stability === "experimental") {
			docs.push(`    ///`);
			docs.push(
				`    /// <div class="warning">`,
			);
			docs.push(
				`    ///`,
			);
			docs.push(
				`    /// **Experimental.** This API is part of an experimental wire-protocol surface`,
			);
			docs.push(
				`    /// and may change or be removed in future SDK or CLI releases. Pin both the`,
			);
			docs.push(
				`    /// SDK and CLI versions if your code depends on it.`,
			);
			docs.push(
				`    ///`,
			);
			docs.push(
				`    /// </div>`,
			);
		} else if (stability && stability !== "stable") {
			docs.push(`    /// Stability: \`${stability}\`.`);
		}
		return docs;
	};

	const paramArg = hasParams ? `, params: ${paramsTypeName}` : "";
	const fnVis =
		method.visibility === "internal" ||
		methodUsesInternalSchema(method.params, defCollections) ||
		methodUsesInternalSchema(method.result, defCollections)
			? "pub(crate)"
			: "pub";

	const legacyRequest = hasParams ? rustLegacyRequest(method, defCollections, isSession) : undefined;

	if (hasParams && paramsInfo.optional) {
		out.push(...buildDocs(false));
		out.push(
			`    ${fnVis} async fn ${fnName}(&self) -> Result<${returnType}, Error> {`,
		);
		pushNamespaceMethodBody(out, constName, isSession, false, resultIsVoid);
		out.push("");
		out.push(...buildDocs(true));
		out.push(
			`    ${fnVis} async fn ${fnName}_with_params(&self, params: ${paramsTypeName}) -> Result<${returnType}, Error> {`,
		);
		pushNamespaceMethodBody(out, constName, isSession, true, resultIsVoid);
		out.push("");
		return;
	}

	out.push(...buildDocs(hasParams));
	out.push(
		`    ${fnVis} async fn ${fnName}(&self${paramArg}) -> Result<${returnType}, Error> {`,
	);
	pushNamespaceMethodBody(out, constName, isSession, hasParams, resultIsVoid);
	out.push("");

	if (legacyRequest) {
		out.push(...buildDocs(true));
		out.push("    ///");
		out.push(`    /// Accepts [\`${legacyRequest.optionsName}\`], including inputs added after [\`${paramsTypeName}\`].`);
		out.push(
			`    ${fnVis} async fn ${fnName}_with_options(&self, params: ${legacyRequest.optionsName}) -> Result<${returnType}, Error> {`,
		);
		pushNamespaceMethodBody(out, constName, isSession, true, resultIsVoid);
		out.push("");
	}
}

export function generateRpcCode(apiSchema: ApiSchema): string {
	const defCollections = collectDefinitionCollections(
		apiSchema as unknown as Record<string, unknown>,
	);

	const serverMethods = apiSchema.server
		? collectRpcMethods(apiSchema.server as Record<string, unknown>)
		: [];
	const sessionMethods = apiSchema.session
		? collectRpcMethods(apiSchema.session as Record<string, unknown>)
		: [];

	const clientRoot = buildNamespaceTree("ClientRpc", serverMethods, "");
	const sessionRoot = buildNamespaceTree(
		"SessionRpc",
		sessionMethods,
		"session.",
	);

	const out: string[] = [];
	out.push(
		"//! Auto-generated typed JSON-RPC namespace — do not edit manually.",
	);
	out.push("//!");
	out.push(
		"//! Generated from `api.schema.json` by `scripts/codegen/rust.ts`. The",
	);
	out.push(
		"//! [`ClientRpc`] and [`SessionRpc`] view structs let callers reach every",
	);
	out.push(
		"//! protocol method through a typed namespace tree, so wire method names",
	);
	out.push(
		"//! and request/response shapes live in exactly one place — this file.",
	);
	out.push("");
	out.push("#![allow(missing_docs)]");
	out.push("#![allow(clippy::too_many_arguments)]");
	out.push("#![allow(deprecated)]");
	out.push("#![allow(dead_code)]");
	out.push("");
	out.push("use super::api_types::{rpc_methods, *};");
	const externalTypeRefs = new Map<string, Set<string>>();
	const recordExternalTypeRef = (ref: string | undefined): void => {
		if (!ref) return;
		const externalRef = parseExternalSchemaRef(ref);
		if (!externalRef) return;
		let typeNames = externalTypeRefs.get(externalRef.schemaFile);
		if (!typeNames) {
			typeNames = new Set<string>();
			externalTypeRefs.set(externalRef.schemaFile, typeNames);
		}
		typeNames.add(externalRef.definitionName);
	};
	for (const method of [...serverMethods, ...sessionMethods]) {
		recordExternalTypeRef(method.params?.$ref);
		recordExternalTypeRef(method.result?.$ref);
		recordExternalTypeRef(getNullableInner(method.result)?.$ref);
	}
	const externalImports = new Map<string, Set<string>>();
	for (const [schemaFile, typeNames] of externalTypeRefs) {
		const defaultModule = EXTERNAL_SCHEMA_RUST_MODULE[schemaFile];
		const typeModules = EXTERNAL_SCHEMA_RUST_TYPE_MODULE[schemaFile] ?? {};
		for (const typeName of typeNames) {
			const module = typeModules[typeName] ?? defaultModule;
			if (!module) continue;
			let names = externalImports.get(module);
			if (!names) {
				names = new Set<string>();
				externalImports.set(module, names);
			}
			names.add(typeName);
		}
	}
	for (const [module, typeNames] of [...externalImports].sort(([left], [right]) =>
		left.localeCompare(right),
	)) {
		out.push(`use ${module}::{${[...typeNames].sort().join(", ")}};`);
	}
	out.push("use crate::session::Session;");
	out.push("use crate::{Client, Error};");
	out.push("");

	emitNamespaceStruct(
		out,
		clientRoot,
		"Client",
		"client",
		false,
		defCollections,
		"Typed view over the [`Client`]'s server-level RPC namespace.",
	);
	emitNamespaceStruct(
		out,
		sessionRoot,
		"Session",
		"session",
		true,
		defCollections,
		"Typed view over a [`Session`]'s RPC namespace.",
	);

	return out.join("\n");
}

// ── mod.rs generation ───────────────────────────────────────────────────────

function generateModRs(): string {
	const lines: string[] = [];
	lines.push("//! Auto-generated protocol types — **not part of the public API**.");
	lines.push("//!");
	lines.push(
		"//! This module is crate-private. Its layout, item visibility, and",
	);
	lines.push("//! naming may change at any time without notice.");
	lines.push("//!");
	lines.push("//! Public callers reach the generated types through the stable");
	lines.push("//! re-export modules at the crate root:");
	lines.push("//!");
	lines.push("//! - [`crate::session_events`] for session event payload types");
	lines.push("//! - [`crate::rpc`] for JSON-RPC request/response types and typed");
	lines.push("//!   namespace builders");
	lines.push("//!");
	lines.push(
		"//! Generated from the Copilot protocol JSON Schemas by `scripts/codegen/rust.ts`.",
	);
	lines.push("#![allow(missing_docs)]");
	lines.push("#![allow(rustdoc::bare_urls)]");
	lines.push("");
	lines.push("pub mod api_types;");
	lines.push("pub mod rpc;");
	lines.push("pub mod session_events;");
	lines.push("");
	lines.push(
		"// Re-export session event types at the module root — no conflicts with",
	);
	lines.push(
		"// hand-written types. API types are kept namespaced under `api_types::`",
	);
	lines.push(
		"// because some names (Tool, ModelCapabilities, etc.) overlap with the",
	);
	lines.push("// hand-written SDK API types in `types.rs`.");
	lines.push("pub use session_events::*;");
	lines.push("");
	return lines.join("\n");
}

// ── Format with rustfmt ─────────────────────────────────────────────────────

async function rustfmt(filePath: string): Promise<void> {
	await execFileAsync(
		"rustfmt",
		["--config-path", path.join(REPO_ROOT, "rust/.rustfmt.toml"), path.resolve(filePath)],
		{ cwd: path.join(REPO_ROOT, "rust") },
	);
}

// ── Main ────────────────────────────────────────────────────────────────────

function parseSchemaArgs(): {
	sessionEventsSchemaPath?: string;
	apiSchemaPath?: string;
} {
	const [firstArg, secondArg] = process.argv.slice(2);
	if (secondArg) {
		return {
			sessionEventsSchemaPath: firstArg,
			apiSchemaPath: secondArg,
		};
	}

	return {
		apiSchemaPath: firstArg,
	};
}

async function generate(): Promise<void> {
	console.log("Loading schemas...");

	const schemaArgs = parseSchemaArgs();
	const sessionEventsSchemaPath =
		schemaArgs.sessionEventsSchemaPath || (await getSessionEventsSchemaPath());
	const apiSchemaPath = await getApiSchemaPath(schemaArgs.apiSchemaPath);

	const sessionEventsRaw = normalizeSchemaBrandCasing(
		JSON.parse(await fs.readFile(sessionEventsSchemaPath, "utf-8")),
	);
	const apiRaw = normalizeSchemaBrandCasing(
		JSON.parse(await fs.readFile(apiSchemaPath, "utf-8")) as ApiSchema,
	);

	const sessionEventsSchema = propagateInternalVisibility(
		postProcessSchema(
			stripBooleanLiterals(
				addManagedApprovalRequiredToPermissionRequests(sessionEventsRaw as JSONSchema7),
			) as JSONSchema7,
		),
	);
	const apiSchema = propagateInternalVisibility(
		postProcessSchema(
			stripBooleanLiterals(apiRaw) as JSONSchema7,
		),
	) as unknown as ApiSchema;

	// Ensure output directory exists
	await fs.mkdir(GENERATED_DIR, { recursive: true });

	// Generate session events
	console.log("Generating session_events.rs...");
	const sessionEventsCode = generateSessionEventsCode(sessionEventsSchema);
	const sharedDefinitions = findSharedSchemaDefinitions(
		apiSchema as unknown as Record<string, unknown>,
		sessionEventsSchema as unknown as Record<string, unknown>,
	);
	const reachableDefinitions = collectReachableDefinitionNames(
		sessionEventsSchema as unknown as Record<string, unknown>,
	);
	for (const name of [...sharedDefinitions]) {
		const declarationPattern = new RegExp(`\\bpub\\s+(?:struct|enum)\\s+${name}\\b`);
		if (!reachableDefinitions.has(name) || !declarationPattern.test(sessionEventsCode)) {
			sharedDefinitions.delete(name);
		}
	}
	const apiSchemaForGeneration = rewriteSharedDefinitionReferences(
		apiSchema,
		sharedDefinitions,
		"session-events.schema.json",
	);
	const sessionEventsPath = path.join(GENERATED_DIR, "session_events.rs");
	await fs.writeFile(sessionEventsPath, sessionEventsCode, "utf-8");
	await rustfmt(sessionEventsPath);

	// Generate API types
	console.log("Generating api_types.rs...");
	const apiTypesCode = generateApiTypesCode(
		apiSchemaForGeneration,
		collectNonDefaultableRustTypeNames(sessionEventsCode),
	);
	const apiTypesPath = path.join(GENERATED_DIR, "api_types.rs");
	await fs.writeFile(apiTypesPath, apiTypesCode, "utf-8");
	await rustfmt(apiTypesPath);

	// Generate typed RPC namespace
	console.log("Generating rpc.rs...");
	const rpcCode = generateRpcCode(apiSchemaForGeneration);
	const rpcPath = path.join(GENERATED_DIR, "rpc.rs");
	await fs.writeFile(rpcPath, rpcCode, "utf-8");
	await rustfmt(rpcPath);

	// Generate mod.rs
	console.log("Generating mod.rs...");
	const modRsCode = generateModRs();
	const modRsPath = path.join(GENERATED_DIR, "mod.rs");
	await fs.writeFile(modRsPath, modRsCode, "utf-8");
	await rustfmt(modRsPath);

	console.log(`Done! Generated files in ${GENERATED_DIR}`);
}

const __filename = fileURLToPath(import.meta.url);

export function isRustCodegenEntrypoint(
	entryPath: string | undefined,
	modulePath = __filename,
	platform = process.platform,
): boolean {
	if (!entryPath) {
		return false;
	}
	const canonicalize = (filePath: string) => {
		try {
			return realpathSync.native(filePath);
		} catch {
			return path.resolve(filePath);
		}
	};
	const canonicalEntryPath = canonicalize(entryPath);
	const canonicalModulePath = canonicalize(modulePath);
	return platform === "win32"
		? canonicalEntryPath.toLowerCase() === canonicalModulePath.toLowerCase()
		: canonicalEntryPath === canonicalModulePath;
}

if (isRustCodegenEntrypoint(process.argv[1])) {
	generate().catch((err) => {
		console.error("Code generation failed:", err);
		process.exit(1);
	});
}