@anthropic-ai/sdk 0.103.0 → 0.104.1

package/src/resources/beta/index.ts

@@ -63,6 +63,78 @@ export {
   type BetaPermissionError,
   type BetaRateLimitError,
 } from './beta';
+export {
+  DeploymentRuns,
+  type BetaManagedAgentsAgentArchivedRunError,
+  type BetaManagedAgentsDeploymentRun,
+  type BetaManagedAgentsEnvironmentArchivedRunError,
+  type BetaManagedAgentsEnvironmentNotFoundRunError,
+  type BetaManagedAgentsFileNotFoundRunError,
+  type BetaManagedAgentsManualTriggerContext,
+  type BetaManagedAgentsMCPEgressBlockedRunError,
+  type BetaManagedAgentsMemoryStoreArchivedRunError,
+  type BetaManagedAgentsOrganizationDisabledRunError,
+  type BetaManagedAgentsScheduleTriggerContext,
+  type BetaManagedAgentsSelfHostedResourcesUnsupportedRunError,
+  type BetaManagedAgentsSessionCreationRejectedRunError,
+  type BetaManagedAgentsSessionRateLimitedRunError,
+  type BetaManagedAgentsSessionResourceNotFoundRunError,
+  type BetaManagedAgentsSkillNotFoundRunError,
+  type BetaManagedAgentsTriggerContext,
+  type BetaManagedAgentsTriggerType,
+  type BetaManagedAgentsUnknownRunError,
+  type BetaManagedAgentsVaultArchivedRunError,
+  type BetaManagedAgentsVaultNotFoundRunError,
+  type BetaManagedAgentsWorkspaceArchivedRunError,
+  type DeploymentRunRetrieveParams,
+  type DeploymentRunListParams,
+  type BetaManagedAgentsDeploymentRunsPageCursor,
+} from './deployment-runs';
+export {
+  Deployments,
+  type BetaManagedAgentsAgentArchivedDeploymentPausedReasonError,
+  type BetaManagedAgentsCronSchedule,
+  type BetaManagedAgentsCronScheduleParams,
+  type BetaManagedAgentsDeployment,
+  type BetaManagedAgentsDeploymentInitialEvent,
+  type BetaManagedAgentsDeploymentInitialEventParams,
+  type BetaManagedAgentsDeploymentPausedReason,
+  type BetaManagedAgentsDeploymentPausedReasonError,
+  type BetaManagedAgentsDeploymentStatus,
+  type BetaManagedAgentsDeploymentSystemMessageEvent,
+  type BetaManagedAgentsDeploymentUserDefineOutcomeEvent,
+  type BetaManagedAgentsDeploymentUserMessageEvent,
+  type BetaManagedAgentsEnvironmentArchivedDeploymentPausedReasonError,
+  type BetaManagedAgentsEnvironmentNotFoundDeploymentPausedReasonError,
+  type BetaManagedAgentsErrorDeploymentPausedReason,
+  type BetaManagedAgentsFileNotFoundDeploymentPausedReasonError,
+  type BetaManagedAgentsFileResourceConfig,
+  type BetaManagedAgentsGitHubRepositoryResourceConfig,
+  type BetaManagedAgentsManualDeploymentPausedReason,
+  type BetaManagedAgentsMCPEgressBlockedDeploymentPausedReasonError,
+  type BetaManagedAgentsMemoryStoreArchivedDeploymentPausedReasonError,
+  type BetaManagedAgentsMemoryStoreResourceConfig,
+  type BetaManagedAgentsOrganizationDisabledDeploymentPausedReasonError,
+  type BetaManagedAgentsSchedule,
+  type BetaManagedAgentsScheduleParams,
+  type BetaManagedAgentsSelfHostedResourcesUnsupportedDeploymentPausedReasonError,
+  type BetaManagedAgentsSessionResourceConfig,
+  type BetaManagedAgentsSessionResourceNotFoundDeploymentPausedReasonError,
+  type BetaManagedAgentsSkillNotFoundDeploymentPausedReasonError,
+  type BetaManagedAgentsUnknownDeploymentPausedReasonError,
+  type BetaManagedAgentsVaultArchivedDeploymentPausedReasonError,
+  type BetaManagedAgentsVaultNotFoundDeploymentPausedReasonError,
+  type BetaManagedAgentsWorkspaceArchivedDeploymentPausedReasonError,
+  type DeploymentCreateParams,
+  type DeploymentRetrieveParams,
+  type DeploymentUpdateParams,
+  type DeploymentListParams,
+  type DeploymentArchiveParams,
+  type DeploymentPauseParams,
+  type DeploymentRunParams,
+  type DeploymentUnpauseParams,
+  type BetaManagedAgentsDeploymentsPageCursor,
+} from './deployments';
 export {
   Environments,
   type BetaCloudConfig,
@@ -376,6 +448,8 @@ export {
   type BetaManagedAgentsSessionStats,
   type BetaManagedAgentsSessionUpdatedEvent,
   type BetaManagedAgentsSessionUsage,
+  type BetaManagedAgentsSystemContentBlock,
+  type BetaManagedAgentsSystemMessageEvent,
   type BetaManagedAgentsUserToolResultEvent,
   type SessionCreateParams,
   type SessionRetrieveParams,

package/src/resources/beta/messages/messages.ts

@@ -2442,7 +2442,7 @@ export interface BetaRefusalStopDetails {
    *
    * `null` when the refusal doesn't map to a named category.
    */
-  category: 'cyber' | 'bio' | 'reasoning_extraction' | null;
+  category: 'cyber' | 'bio' | 'frontier_llm' | 'reasoning_extraction' | null;
 
   /**
    * Human-readable explanation of the refusal.

package/src/resources/beta/sessions/events.ts

@@ -518,6 +518,37 @@ export interface BetaManagedAgentsBillingError {
   type: 'billing_error';
 }
 
+/**
+ * An `environment_variable` credential's `auth.networking.allowed_hosts` includes
+ * a host the environment's network policy does not permit.
+ */
+export interface BetaManagedAgentsCredentialHostUnreachableError {
+  /**
+   * ID of the affected credential.
+   */
+  credential_id: string;
+
+  /**
+   * Human-readable error description.
+   */
+  message: string;
+
+  /**
+   * What the client should do next in response to this error.
+   */
+  retry_status:
+    | BetaManagedAgentsRetryStatusRetrying
+    | BetaManagedAgentsRetryStatusExhausted
+    | BetaManagedAgentsRetryStatusTerminal;
+
+  type: 'credential_host_unreachable_error';
+
+  /**
+   * ID of the vault containing the affected credential.
+   */
+  vault_id: string;
+}
+
 /**
  * Document content, either specified directly as base64 data, as text, or as a
  * reference via a URL.
@@ -554,7 +585,8 @@ export type BetaManagedAgentsEventParams =
   | BetaManagedAgentsUserToolConfirmationEventParams
   | BetaManagedAgentsUserCustomToolResultEventParams
   | BetaManagedAgentsUserDefineOutcomeEventParams
-  | BetaManagedAgentsUserToolResultEventParams;
+  | BetaManagedAgentsUserToolResultEventParams
+  | BetaManagedAgentsSystemMessageEventParams;
 
 /**
  * Document referenced by file ID.
@@ -835,6 +867,7 @@ export interface BetaManagedAgentsSendSessionEvents {
     | BetaManagedAgentsUserCustomToolResultEvent
     | BetaManagedAgentsUserDefineOutcomeEvent
     | SessionsAPI.BetaManagedAgentsUserToolResultEvent
+    | SessionsAPI.BetaManagedAgentsSystemMessageEvent
   >;
 }
 
@@ -884,7 +917,8 @@ export interface BetaManagedAgentsSessionErrorEvent {
     | BetaManagedAgentsModelRequestFailedError
     | BetaManagedAgentsMCPConnectionFailedError
     | BetaManagedAgentsMCPAuthenticationFailedError
-    | BetaManagedAgentsBillingError;
+    | BetaManagedAgentsBillingError
+    | BetaManagedAgentsCredentialHostUnreachableError;
 
   /**
    * A timestamp in RFC 3339 format
@@ -930,7 +964,8 @@ export type BetaManagedAgentsSessionEvent =
   | BetaManagedAgentsSessionThreadStatusTerminatedEvent
   | SessionsAPI.BetaManagedAgentsUserToolResultEvent
   | BetaManagedAgentsSessionThreadStatusRescheduledEvent
-  | SessionsAPI.BetaManagedAgentsSessionUpdatedEvent;
+  | SessionsAPI.BetaManagedAgentsSessionUpdatedEvent
+  | SessionsAPI.BetaManagedAgentsSystemMessageEvent;
 
 /**
  * The agent is idle waiting on one or more blocking user-input events (tool
@@ -1415,7 +1450,25 @@ export type BetaManagedAgentsStreamSessionEvents =
   | BetaManagedAgentsSessionThreadStatusTerminatedEvent
   | SessionsAPI.BetaManagedAgentsUserToolResultEvent
   | BetaManagedAgentsSessionThreadStatusRescheduledEvent
-  | SessionsAPI.BetaManagedAgentsSessionUpdatedEvent;
+  | SessionsAPI.BetaManagedAgentsSessionUpdatedEvent
+  | SessionsAPI.BetaManagedAgentsSystemMessageEvent;
+
+/**
+ * Privileged context for the accompanying turn and all subsequent turns, appended
+ * to the session's system context as a `role: "system"` turn rather than replacing
+ * the top-level system prompt. At most one per request: it must be the final event
+ * and immediately follow the `user.message`, `user.tool_result`, or
+ * `user.custom_tool_result` it accompanies. Only supported on models that accept
+ * mid-conversation system messages.
+ */
+export interface BetaManagedAgentsSystemMessageEventParams {
+  /**
+   * System content blocks to append. Text-only.
+   */
+  content: Array<SessionsAPI.BetaManagedAgentsSystemContentBlock>;
+
+  type: 'system.message';
+}
 
 /**
  * Regular text content.
@@ -1891,6 +1944,7 @@ export declare namespace Events {
     type BetaManagedAgentsBase64DocumentSource as BetaManagedAgentsBase64DocumentSource,
     type BetaManagedAgentsBase64ImageSource as BetaManagedAgentsBase64ImageSource,
     type BetaManagedAgentsBillingError as BetaManagedAgentsBillingError,
+    type BetaManagedAgentsCredentialHostUnreachableError as BetaManagedAgentsCredentialHostUnreachableError,
     type BetaManagedAgentsDocumentBlock as BetaManagedAgentsDocumentBlock,
     type BetaManagedAgentsEventParams as BetaManagedAgentsEventParams,
     type BetaManagedAgentsFileDocumentSource as BetaManagedAgentsFileDocumentSource,
@@ -1933,6 +1987,7 @@ export declare namespace Events {
     type BetaManagedAgentsSpanOutcomeEvaluationOngoingEvent as BetaManagedAgentsSpanOutcomeEvaluationOngoingEvent,
     type BetaManagedAgentsSpanOutcomeEvaluationStartEvent as BetaManagedAgentsSpanOutcomeEvaluationStartEvent,
     type BetaManagedAgentsStreamSessionEvents as BetaManagedAgentsStreamSessionEvents,
+    type BetaManagedAgentsSystemMessageEventParams as BetaManagedAgentsSystemMessageEventParams,
     type BetaManagedAgentsTextBlock as BetaManagedAgentsTextBlock,
     type BetaManagedAgentsTextRubric as BetaManagedAgentsTextRubric,
     type BetaManagedAgentsTextRubricParams as BetaManagedAgentsTextRubricParams,

package/src/resources/beta/sessions/index.ts

@@ -15,6 +15,7 @@ export {
   type BetaManagedAgentsBase64DocumentSource,
   type BetaManagedAgentsBase64ImageSource,
   type BetaManagedAgentsBillingError,
+  type BetaManagedAgentsCredentialHostUnreachableError,
   type BetaManagedAgentsDocumentBlock,
   type BetaManagedAgentsEventParams,
   type BetaManagedAgentsFileDocumentSource,
@@ -57,6 +58,7 @@ export {
   type BetaManagedAgentsSpanOutcomeEvaluationOngoingEvent,
   type BetaManagedAgentsSpanOutcomeEvaluationStartEvent,
   type BetaManagedAgentsStreamSessionEvents,
+  type BetaManagedAgentsSystemMessageEventParams,
   type BetaManagedAgentsTextBlock,
   type BetaManagedAgentsTextRubric,
   type BetaManagedAgentsTextRubricParams,
@@ -116,6 +118,8 @@ export {
   type BetaManagedAgentsSessionStats,
   type BetaManagedAgentsSessionUpdatedEvent,
   type BetaManagedAgentsSessionUsage,
+  type BetaManagedAgentsSystemContentBlock,
+  type BetaManagedAgentsSystemMessageEvent,
   type BetaManagedAgentsUserToolResultEvent,
   type SessionCreateParams,
   type SessionRetrieveParams,

package/src/resources/beta/sessions/sessions.ts

@@ -18,6 +18,7 @@ import {
   BetaManagedAgentsBase64DocumentSource,
   BetaManagedAgentsBase64ImageSource,
   BetaManagedAgentsBillingError,
+  BetaManagedAgentsCredentialHostUnreachableError,
   BetaManagedAgentsDocumentBlock,
   BetaManagedAgentsEventParams,
   BetaManagedAgentsFileDocumentSource,
@@ -61,6 +62,7 @@ import {
   BetaManagedAgentsSpanOutcomeEvaluationOngoingEvent,
   BetaManagedAgentsSpanOutcomeEvaluationStartEvent,
   BetaManagedAgentsStreamSessionEvents,
+  BetaManagedAgentsSystemMessageEventParams,
   BetaManagedAgentsTextBlock,
   BetaManagedAgentsTextRubric,
   BetaManagedAgentsTextRubricParams,
@@ -555,6 +557,12 @@ export interface BetaManagedAgentsSession {
    * supplied.
    */
   vault_ids: Array<string>;
+
+  /**
+   * Deployment ID when the session was created from a deployment reference. Null
+   * otherwise.
+   */
+  deployment_id?: string | null;
 }
 
 /**
@@ -710,6 +718,41 @@ export interface BetaManagedAgentsSessionUsage {
   output_tokens?: number;
 }
 
+/**
+ * Regular text content.
+ */
+export interface BetaManagedAgentsSystemContentBlock {
+  /**
+   * The text content.
+   */
+  text: string;
+
+  type: 'text';
+}
+
+/**
+ * A mid-conversation system message event. Carries system-role content that is
+ * appended to the session as a `role: "system"` turn.
+ */
+export interface BetaManagedAgentsSystemMessageEvent {
+  /**
+   * Unique identifier for this event.
+   */
+  id: string;
+
+  /**
+   * System content blocks. Text-only.
+   */
+  content: Array<BetaManagedAgentsSystemContentBlock>;
+
+  type: 'system.message';
+
+  /**
+   * A timestamp in RFC 3339 format
+   */
+  processed_at?: string | null;
+}
+
 /**
  * Event sent by the client providing the result of an agent-toolset tool
  * execution. Only valid on `self_hosted` environments, where sandbox-routed tools
@@ -875,6 +918,11 @@ export interface SessionListParams extends PageCursorParams {
    */
   'created_at[lte]'?: string;
 
+  /**
+   * Query param: Filter sessions created by this deployment ID.
+   */
+  deployment_id?: string;
+
   /**
    * Query param: When true, includes archived sessions. Default: false (exclude
    * archived).
@@ -944,6 +992,8 @@ export declare namespace Sessions {
     type BetaManagedAgentsSessionStats as BetaManagedAgentsSessionStats,
     type BetaManagedAgentsSessionUpdatedEvent as BetaManagedAgentsSessionUpdatedEvent,
     type BetaManagedAgentsSessionUsage as BetaManagedAgentsSessionUsage,
+    type BetaManagedAgentsSystemContentBlock as BetaManagedAgentsSystemContentBlock,
+    type BetaManagedAgentsSystemMessageEvent as BetaManagedAgentsSystemMessageEvent,
     type BetaManagedAgentsUserToolResultEvent as BetaManagedAgentsUserToolResultEvent,
     type BetaManagedAgentsSessionsPageCursor as BetaManagedAgentsSessionsPageCursor,
     type SessionCreateParams as SessionCreateParams,
@@ -969,6 +1019,7 @@ export declare namespace Sessions {
     type BetaManagedAgentsBase64DocumentSource as BetaManagedAgentsBase64DocumentSource,
     type BetaManagedAgentsBase64ImageSource as BetaManagedAgentsBase64ImageSource,
     type BetaManagedAgentsBillingError as BetaManagedAgentsBillingError,
+    type BetaManagedAgentsCredentialHostUnreachableError as BetaManagedAgentsCredentialHostUnreachableError,
     type BetaManagedAgentsDocumentBlock as BetaManagedAgentsDocumentBlock,
     type BetaManagedAgentsEventParams as BetaManagedAgentsEventParams,
     type BetaManagedAgentsFileDocumentSource as BetaManagedAgentsFileDocumentSource,
@@ -1011,6 +1062,7 @@ export declare namespace Sessions {
     type BetaManagedAgentsSpanOutcomeEvaluationOngoingEvent as BetaManagedAgentsSpanOutcomeEvaluationOngoingEvent,
     type BetaManagedAgentsSpanOutcomeEvaluationStartEvent as BetaManagedAgentsSpanOutcomeEvaluationStartEvent,
     type BetaManagedAgentsStreamSessionEvents as BetaManagedAgentsStreamSessionEvents,
+    type BetaManagedAgentsSystemMessageEventParams as BetaManagedAgentsSystemMessageEventParams,
     type BetaManagedAgentsTextBlock as BetaManagedAgentsTextBlock,
     type BetaManagedAgentsTextRubric as BetaManagedAgentsTextRubric,
     type BetaManagedAgentsTextRubricParams as BetaManagedAgentsTextRubricParams,

package/src/resources/beta/sessions/threads/threads.ts

@@ -255,7 +255,8 @@ export type BetaManagedAgentsStreamSessionThreadEvents =
   | EventsAPI.BetaManagedAgentsSessionThreadStatusTerminatedEvent
   | SessionsAPI.BetaManagedAgentsUserToolResultEvent
   | EventsAPI.BetaManagedAgentsSessionThreadStatusRescheduledEvent
-  | SessionsAPI.BetaManagedAgentsSessionUpdatedEvent;
+  | SessionsAPI.BetaManagedAgentsSessionUpdatedEvent
+  | SessionsAPI.BetaManagedAgentsSystemMessageEvent;
 
 export interface ThreadRetrieveParams {
   /**

package/src/resources/beta/vaults/credentials.ts

@@ -237,7 +237,10 @@ export interface BetaManagedAgentsCredential {
   /**
    * Authentication details for a credential.
    */
-  auth: BetaManagedAgentsMCPOAuthAuthResponse | BetaManagedAgentsStaticBearerAuthResponse;
+  auth:
+    | BetaManagedAgentsMCPOAuthAuthResponse
+    | BetaManagedAgentsStaticBearerAuthResponse
+    | BetaManagedAgentsEnvironmentVariableAuthResponse;
 
   /**
    * A timestamp in RFC 3339 format
@@ -267,6 +270,15 @@ export interface BetaManagedAgentsCredential {
   display_name?: string | null;
 }
 
+/**
+ * Substitute the secret on any host the session's Environment network policy
+ * permits egress to. The Environment's network policy is the only boundary on
+ * where the secret can reach.
+ */
+export type BetaManagedAgentsCredentialNetworkingParams =
+  | BetaManagedAgentsUnrestrictedCredentialNetworkingParams
+  | BetaManagedAgentsLimitedCredentialNetworkingParams;
+
 /**
  * Result of live-probing a credential against its configured MCP server.
  */
@@ -326,6 +338,94 @@ export interface BetaManagedAgentsDeletedCredential {
   type: 'vault_credential_deleted';
 }
 
+/**
+ * Environment variable credential details. The secret value is never returned.
+ */
+export interface BetaManagedAgentsEnvironmentVariableAuthResponse {
+  /**
+   * Outbound hosts the secret value is substituted on.
+   */
+  networking:
+    | BetaManagedAgentsUnrestrictedCredentialNetworkingResponse
+    | BetaManagedAgentsLimitedCredentialNetworkingResponse;
+
+  /**
+   * Name of the environment variable.
+   */
+  secret_name: string;
+
+  type: 'environment_variable';
+}
+
+/**
+ * Parameters for creating an environment variable credential.
+ */
+export interface BetaManagedAgentsEnvironmentVariableCreateParams {
+  /**
+   * Outbound hosts the secret value is substituted on.
+   */
+  networking: BetaManagedAgentsCredentialNetworkingParams;
+
+  /**
+   * Name of the environment variable. Immutable after create.
+   */
+  secret_name: string;
+
+  /**
+   * Secret value. Write-only; never returned in responses.
+   */
+  secret_value: string;
+
+  type: 'environment_variable';
+}
+
+/**
+ * Parameters for updating an environment variable credential. `secret_name` is
+ * immutable.
+ */
+export interface BetaManagedAgentsEnvironmentVariableUpdateParams {
+  type: 'environment_variable';
+
+  /**
+   * Updated networking scope. Full replacement.
+   */
+  networking?: BetaManagedAgentsCredentialNetworkingParams | null;
+
+  /**
+   * Updated secret value.
+   */
+  secret_value?: string | null;
+}
+
+/**
+ * Substitute the secret only on requests to the listed hosts.
+ */
+export interface BetaManagedAgentsLimitedCredentialNetworkingParams {
+  /**
+   * Hostnames on which the secret will be substituted. Each entry is a bare hostname
+   * (`api.example.com`), an IPv4 address (`192.0.2.1`), or a `*.`-prefixed wildcard
+   * (`*.example.com`). URLs, ports, paths, and IPv6 addresses are not accepted. At
+   * most 16 entries.
+   */
+  allowed_hosts: Array<string>;
+
+  type: 'limited';
+}
+
+/**
+ * The secret is substituted only on requests to the listed hosts.
+ */
+export interface BetaManagedAgentsLimitedCredentialNetworkingResponse {
+  /**
+   * Hostnames on which the secret will be substituted. An entry matches the request
+   * host exactly; a `*.`-prefixed entry matches any subdomain of the named domain
+   * but not the domain itself.
+   */
+  allowed_hosts: Array<string>;
+
+  type: 'limited';
+}
+
 /**
  * OAuth credential details for an MCP server.
  */
@@ -664,11 +764,31 @@ export interface BetaManagedAgentsTokenEndpointAuthPostUpdateParam {
   client_secret?: string | null;
 }
 
+/**
+ * Substitute the secret on any host the session's Environment network policy
+ * permits egress to. The Environment's network policy is the only boundary on
+ * where the secret can reach.
+ */
+export interface BetaManagedAgentsUnrestrictedCredentialNetworkingParams {
+  type: 'unrestricted';
+}
+
+/**
+ * The secret is substituted on any host the session's Environment network policy
+ * permits egress to.
+ */
+export interface BetaManagedAgentsUnrestrictedCredentialNetworkingResponse {
+  type: 'unrestricted';
+}
+
 export interface CredentialCreateParams {
   /**
    * Body param: Authentication details for creating a credential.
    */
-  auth: BetaManagedAgentsMCPOAuthCreateParams | BetaManagedAgentsStaticBearerCreateParams;
+  auth:
+    | BetaManagedAgentsMCPOAuthCreateParams
+    | BetaManagedAgentsStaticBearerCreateParams
+    | BetaManagedAgentsEnvironmentVariableCreateParams;
 
   /**
    * Body param: Human-readable name for the credential. Up to 255 characters.
@@ -708,7 +828,10 @@ export interface CredentialUpdateParams {
   /**
    * Body param: Updated authentication details for a credential.
    */
-  auth?: BetaManagedAgentsMCPOAuthUpdateParams | BetaManagedAgentsStaticBearerUpdateParams;
+  auth?:
+    | BetaManagedAgentsMCPOAuthUpdateParams
+    | BetaManagedAgentsStaticBearerUpdateParams
+    | BetaManagedAgentsEnvironmentVariableUpdateParams;
 
   /**
    * Body param: Updated human-readable name for the credential. 1-255 characters.
@@ -778,9 +901,15 @@ export interface CredentialMCPOAuthValidateParams {
 export declare namespace Credentials {
   export {
     type BetaManagedAgentsCredential as BetaManagedAgentsCredential,
+    type BetaManagedAgentsCredentialNetworkingParams as BetaManagedAgentsCredentialNetworkingParams,
     type BetaManagedAgentsCredentialValidation as BetaManagedAgentsCredentialValidation,
     type BetaManagedAgentsCredentialValidationStatus as BetaManagedAgentsCredentialValidationStatus,
     type BetaManagedAgentsDeletedCredential as BetaManagedAgentsDeletedCredential,
+    type BetaManagedAgentsEnvironmentVariableAuthResponse as BetaManagedAgentsEnvironmentVariableAuthResponse,
+    type BetaManagedAgentsEnvironmentVariableCreateParams as BetaManagedAgentsEnvironmentVariableCreateParams,
+    type BetaManagedAgentsEnvironmentVariableUpdateParams as BetaManagedAgentsEnvironmentVariableUpdateParams,
+    type BetaManagedAgentsLimitedCredentialNetworkingParams as BetaManagedAgentsLimitedCredentialNetworkingParams,
+    type BetaManagedAgentsLimitedCredentialNetworkingResponse as BetaManagedAgentsLimitedCredentialNetworkingResponse,
     type BetaManagedAgentsMCPOAuthAuthResponse as BetaManagedAgentsMCPOAuthAuthResponse,
     type BetaManagedAgentsMCPOAuthCreateParams as BetaManagedAgentsMCPOAuthCreateParams,
     type BetaManagedAgentsMCPOAuthRefreshParams as BetaManagedAgentsMCPOAuthRefreshParams,
@@ -801,6 +930,8 @@ export declare namespace Credentials {
     type BetaManagedAgentsTokenEndpointAuthPostParam as BetaManagedAgentsTokenEndpointAuthPostParam,
     type BetaManagedAgentsTokenEndpointAuthPostResponse as BetaManagedAgentsTokenEndpointAuthPostResponse,
     type BetaManagedAgentsTokenEndpointAuthPostUpdateParam as BetaManagedAgentsTokenEndpointAuthPostUpdateParam,
+    type BetaManagedAgentsUnrestrictedCredentialNetworkingParams as BetaManagedAgentsUnrestrictedCredentialNetworkingParams,
+    type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse as BetaManagedAgentsUnrestrictedCredentialNetworkingResponse,
     type BetaManagedAgentsCredentialsPageCursor as BetaManagedAgentsCredentialsPageCursor,
     type CredentialCreateParams as CredentialCreateParams,
     type CredentialRetrieveParams as CredentialRetrieveParams,

package/src/resources/beta/vaults/index.ts

@@ -3,9 +3,15 @@
 export {
   Credentials,
   type BetaManagedAgentsCredential,
+  type BetaManagedAgentsCredentialNetworkingParams,
   type BetaManagedAgentsCredentialValidation,
   type BetaManagedAgentsCredentialValidationStatus,
   type BetaManagedAgentsDeletedCredential,
+  type BetaManagedAgentsEnvironmentVariableAuthResponse,
+  type BetaManagedAgentsEnvironmentVariableCreateParams,
+  type BetaManagedAgentsEnvironmentVariableUpdateParams,
+  type BetaManagedAgentsLimitedCredentialNetworkingParams,
+  type BetaManagedAgentsLimitedCredentialNetworkingResponse,
   type BetaManagedAgentsMCPOAuthAuthResponse,
   type BetaManagedAgentsMCPOAuthCreateParams,
   type BetaManagedAgentsMCPOAuthRefreshParams,
@@ -26,6 +32,8 @@ export {
   type BetaManagedAgentsTokenEndpointAuthPostParam,
   type BetaManagedAgentsTokenEndpointAuthPostResponse,
   type BetaManagedAgentsTokenEndpointAuthPostUpdateParam,
+  type BetaManagedAgentsUnrestrictedCredentialNetworkingParams,
+  type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse,
   type CredentialCreateParams,
   type CredentialRetrieveParams,
   type CredentialUpdateParams,

package/src/resources/beta/vaults/vaults.ts

@@ -5,10 +5,16 @@ import * as BetaAPI from '../beta';
 import * as CredentialsAPI from './credentials';
 import {
   BetaManagedAgentsCredential,
+  BetaManagedAgentsCredentialNetworkingParams,
   BetaManagedAgentsCredentialValidation,
   BetaManagedAgentsCredentialValidationStatus,
   BetaManagedAgentsCredentialsPageCursor,
   BetaManagedAgentsDeletedCredential,
+  BetaManagedAgentsEnvironmentVariableAuthResponse,
+  BetaManagedAgentsEnvironmentVariableCreateParams,
+  BetaManagedAgentsEnvironmentVariableUpdateParams,
+  BetaManagedAgentsLimitedCredentialNetworkingParams,
+  BetaManagedAgentsLimitedCredentialNetworkingResponse,
   BetaManagedAgentsMCPOAuthAuthResponse,
   BetaManagedAgentsMCPOAuthCreateParams,
   BetaManagedAgentsMCPOAuthRefreshParams,
@@ -29,6 +35,8 @@ import {
   BetaManagedAgentsTokenEndpointAuthPostParam,
   BetaManagedAgentsTokenEndpointAuthPostResponse,
   BetaManagedAgentsTokenEndpointAuthPostUpdateParam,
+  BetaManagedAgentsUnrestrictedCredentialNetworkingParams,
+  BetaManagedAgentsUnrestrictedCredentialNetworkingResponse,
   CredentialArchiveParams,
   CredentialCreateParams,
   CredentialDeleteParams,
@@ -340,9 +348,15 @@ export declare namespace Vaults {
   export {
     Credentials as Credentials,
     type BetaManagedAgentsCredential as BetaManagedAgentsCredential,
+    type BetaManagedAgentsCredentialNetworkingParams as BetaManagedAgentsCredentialNetworkingParams,
     type BetaManagedAgentsCredentialValidation as BetaManagedAgentsCredentialValidation,
     type BetaManagedAgentsCredentialValidationStatus as BetaManagedAgentsCredentialValidationStatus,
     type BetaManagedAgentsDeletedCredential as BetaManagedAgentsDeletedCredential,
+    type BetaManagedAgentsEnvironmentVariableAuthResponse as BetaManagedAgentsEnvironmentVariableAuthResponse,
+    type BetaManagedAgentsEnvironmentVariableCreateParams as BetaManagedAgentsEnvironmentVariableCreateParams,
+    type BetaManagedAgentsEnvironmentVariableUpdateParams as BetaManagedAgentsEnvironmentVariableUpdateParams,
+    type BetaManagedAgentsLimitedCredentialNetworkingParams as BetaManagedAgentsLimitedCredentialNetworkingParams,
+    type BetaManagedAgentsLimitedCredentialNetworkingResponse as BetaManagedAgentsLimitedCredentialNetworkingResponse,
     type BetaManagedAgentsMCPOAuthAuthResponse as BetaManagedAgentsMCPOAuthAuthResponse,
     type BetaManagedAgentsMCPOAuthCreateParams as BetaManagedAgentsMCPOAuthCreateParams,
     type BetaManagedAgentsMCPOAuthRefreshParams as BetaManagedAgentsMCPOAuthRefreshParams,
@@ -363,6 +377,8 @@ export declare namespace Vaults {
     type BetaManagedAgentsTokenEndpointAuthPostParam as BetaManagedAgentsTokenEndpointAuthPostParam,
     type BetaManagedAgentsTokenEndpointAuthPostResponse as BetaManagedAgentsTokenEndpointAuthPostResponse,
     type BetaManagedAgentsTokenEndpointAuthPostUpdateParam as BetaManagedAgentsTokenEndpointAuthPostUpdateParam,
+    type BetaManagedAgentsUnrestrictedCredentialNetworkingParams as BetaManagedAgentsUnrestrictedCredentialNetworkingParams,
+    type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse as BetaManagedAgentsUnrestrictedCredentialNetworkingResponse,
     type BetaManagedAgentsCredentialsPageCursor as BetaManagedAgentsCredentialsPageCursor,
     type CredentialCreateParams as CredentialCreateParams,
     type CredentialRetrieveParams as CredentialRetrieveParams,

package/src/resources/beta/webhooks.ts

@@ -225,6 +225,11 @@ export interface BetaWebhookSessionThreadCreatedEventData {
 
   organization_id: string;
 
+  /**
+   * ID of the session thread this event refers to.
+   */
+  session_thread_id: string;
+
   type: 'session.thread_created';
 
   workspace_id: string;
@@ -238,6 +243,11 @@ export interface BetaWebhookSessionThreadIdledEventData {
 
   organization_id: string;
 
+  /**
+   * ID of the session thread this event refers to.
+   */
+  session_thread_id: string;
+
   type: 'session.thread_idled';
 
   workspace_id: string;
@@ -251,6 +261,11 @@ export interface BetaWebhookSessionThreadTerminatedEventData {
 
   organization_id: string;
 
+  /**
+   * ID of the session thread this event refers to.
+   */
+  session_thread_id: string;
+
   type: 'session.thread_terminated';
 
   workspace_id: string;

package/src/resources/messages/messages.ts

@@ -1407,7 +1407,7 @@ export interface RefusalStopDetails {
    *
    * `null` when the refusal doesn't map to a named category.
    */
-  category: 'cyber' | 'bio' | 'reasoning_extraction' | null;
+  category: 'cyber' | 'bio' | 'frontier_llm' | 'reasoning_extraction' | null;
 
   /**
    * Human-readable explanation of the refusal.