Agent Sessions is in private preview. The API is not part of the public
SDKs yet.
Configuration
Phase instructions
phase_instructions is added to the agent’s system instructions for the run. Keep it specific to the work that definition does.
Capabilities
Capabilities limit each run to the access required for its phase:
Pushes and pull requests are always control-plane actions. Write credentials are sent only with that operation and are not stored in the agent environment. The built-in reviewer receives no Git credential. Custom definitions can request read-only Git access when the factory policy permits it. All capabilities remain subject to the factory’s effective policy. An agent definition cannot widen factory access.