@deepraxis/cli 0.1.0-dev.331f4e7 → 0.1.0-dev.35d57f8

package/COMMANDS.md

@@ -2,7 +2,7 @@
 
 Generated by `bun run commands`. DO NOT EDIT.
 
-413 HTTP operations; 415 commands including aliases.
+426 HTTP operations; 428 commands including aliases.
 
 Environment: `PRAXIS_ENV=develop|production` (dev package defaults to `develop`; stable package defaults to `production`). No `--env` option.
 
@@ -31,7 +31,11 @@ Handwritten commands: `login`, `logout`, `whoami`, `org list`, `org switch <orga
 | `praxis agent computer lease renew create` | `agent.computers.leases.renew.create` | POST `/agent/v1/computers/{computer_id}/leases/{lease_id}/renew` | `--computer`, `--lease` |
 | `praxis agent computer list` | `agent.computers.list` | GET `/agent/v1/computers` | `--param-limit`, `--page` |
 | `praxis agent computer update <computer_id>` | `agent.computers.update` | POST `/agent/v1/computers/{computer_id}` | `--name` |
-| `praxis agent create` | `agent.agents.create` | POST `/agent/v1/agents` | `--name`, `--description`, `--system`, `--kind`, `--computer-id`, `--subagent-model`, `--preset` |
+| `praxis agent create` | `agent.agents.create` | POST `/agent/v1/agents` | `--name`, `--description`, `--system`, `--kind`, `--computer-id`, `--subagent-model`, `--avatar`, `--environment-id`, `--vault-ids`, `--preset` |
+| `praxis agent customer auth access-token create` | `agent.agents.customers.auth.accessTokens.create` | POST `/agent/v1/agents/{agent_id}/customers/auth/access_tokens` | `--agent` |
+| `praxis agent customer auth access-token delete-current` | `agent.agents.customers.auth.accessTokens.deleteCurrent` | DELETE `/agent/v1/agents/{agent_id}/customers/auth/access_tokens/current` | `--agent` |
+| `praxis agent customer auth access-token renew create` | `agent.agents.customers.auth.accessTokens.renew.create` | POST `/agent/v1/agents/{agent_id}/customers/auth/access_tokens/renew` | `--agent` |
+| `praxis agent customer auth grant-code create` | `agent.agents.customers.auth.grantCodes.create` | POST `/agent/v1/agents/{agent_id}/customers/auth/grant_codes` | `--agent`, `--customer-id`, `--param-version`, `--budget-cents`, `--origin`, `--expires-in`, `--max-session-seconds`, `--anonymous-access-token` |
 | `praxis agent deployment archive <deployment_id>` | `agent.deployments.archive` | POST `/agent/v1/deployments/{deployment_id}/archive` |  |
 | `praxis agent deployment create` | `agent.deployments.create` | POST `/agent/v1/deployments` | `--environment-id`, `--name`, `--description`, `--vault-ids` |
 | `praxis agent deployment get <deployment_id>` | `agent.deployments.retrieve` | GET `/agent/v1/deployments/{deployment_id}` |  |
@@ -56,10 +60,10 @@ Handwritten commands: `login`, `logout`, `whoami`, `org list`, `org switch <orga
 | `praxis agent end-user revoke-token create` | `agent.agents.endUsers.revokeTokens.create` | POST `/agent/v1/agents/{agent_id}/end_users/{external_user_id}/revoke_tokens` | `--agent`, `--end-user` |
 | `praxis agent end-user unblock create` | `agent.agents.endUsers.unblock.create` | POST `/agent/v1/agents/{agent_id}/end_users/{external_user_id}/unblock` | `--agent`, `--end-user` |
 | `praxis agent environment archive <environment_id>` | `agent.environments.archive` | POST `/agent/v1/environments/{environment_id}/archive` |  |
-| `praxis agent environment create` | `agent.environments.create` | POST `/agent/v1/environments` | `--name`, `--description`, `--scope` |
+| `praxis agent environment create` | `agent.environments.create` | POST `/agent/v1/environments` | `--name`, `--description` |
 | `praxis agent environment get <environment_id>` | `agent.environments.retrieve` | GET `/agent/v1/environments/{environment_id}` |  |
 | `praxis agent environment list` | `agent.environments.list` | GET `/agent/v1/environments` | `--include-archived`, `--param-limit`, `--page` |
-| `praxis agent environment update <environment_id>` | `agent.environments.update` | POST `/agent/v1/environments/{environment_id}` | `--description`, `--name`, `--scope` |
+| `praxis agent environment update <environment_id>` | `agent.environments.update` | POST `/agent/v1/environments/{environment_id}` | `--description`, `--name` |
 | `praxis agent get <agent_id>` | `agent.agents.retrieve` | GET `/agent/v1/agents/{agent_id}` | `--param-version` |
 | `praxis agent list` | `agent.agents.list` | GET `/agent/v1/agents` | `--created-at-gte`, `--created-at-lte`, `--include-archived`, `--param-limit`, `--page`, `--kind` |
 | `praxis agent session archive <session_id>` | `agent.sessions.archive` | POST `/agent/v1/sessions/{session_id}/archive` |  |
@@ -90,9 +94,18 @@ Handwritten commands: `login`, `logout`, `whoami`, `org list`, `org switch <orga
 | `praxis agent session thread list` | `agent.sessions.threads.list` | GET `/agent/v1/sessions/{session_id}/threads` | `--session`, `--param-limit`, `--page` |
 | `praxis agent session thread stream <thread_id>` | `agent.sessions.threads.stream` | GET `/agent/v1/sessions/{session_id}/threads/{thread_id}/stream` | `--session`, `--query-session-id`, `--event-deltas` |
 | `praxis agent session update <session_id>` | `agent.sessions.update` | POST `/agent/v1/sessions/{session_id}` | `--title`, `--vault-ids`, `--model` |
+| `praxis agent skill create` | `agent.skills.create` | POST `/agent/v1/skills` | `--files`, `--display-name` |
+| `praxis agent skill delete <skill_id>` | `agent.skills.delete` | DELETE `/agent/v1/skills/{skill_id}` |  |
+| `praxis agent skill get <skill_id>` | `agent.skills.retrieve` | GET `/agent/v1/skills/{skill_id}` |  |
+| `praxis agent skill list` | `agent.skills.list` | GET `/agent/v1/skills` | `--source`, `--param-limit`, `--page` |
+| `praxis agent skill version create` | `agent.skills.versions.create` | POST `/agent/v1/skills/{skill_id}/versions` | `--skill`, `--files` |
+| `praxis agent skill version delete <version>` | `agent.skills.versions.delete` | DELETE `/agent/v1/skills/{skill_id}/versions/{version}` | `--skill` |
+| `praxis agent skill version get <version>` | `agent.skills.versions.retrieve` | GET `/agent/v1/skills/{skill_id}/versions/{version}` | `--skill` |
+| `praxis agent skill version get-content <version>` | `agent.skills.versions.retrieveContent` | GET `/agent/v1/skills/{skill_id}/versions/{version}/content` | `--skill` |
+| `praxis agent skill version list` | `agent.skills.versions.list` | GET `/agent/v1/skills/{skill_id}/versions` | `--skill`, `--param-limit`, `--page` |
 | `praxis agent toolset list` | `agent.toolsets.list` | GET `/agent/v1/toolsets` |  |
 | `praxis agent unarchive create` | `agent.agents.unarchive.create` | POST `/agent/v1/agents/{agent_id}/unarchive` | `--agent` |
-| `praxis agent update <agent_id>` | `agent.agents.update` | POST `/agent/v1/agents/{agent_id}` | `--description`, `--name`, `--system`, `--param-version`, `--apply`, `--version-note`, `--kind`, `--computer-id`, `--subagent-model`, `--preset` |
+| `praxis agent update <agent_id>` | `agent.agents.update` | POST `/agent/v1/agents/{agent_id}` | `--description`, `--name`, `--system`, `--param-version`, `--apply`, `--version-note`, `--kind`, `--computer-id`, `--subagent-model`, `--avatar`, `--environment-id`, `--vault-ids`, `--preset` |
 | `praxis agent version apply <version>` | `agent.agents.versions.apply` | POST `/agent/v1/agents/{agent_id}/versions/{version}/apply` | `--agent` |
 | `praxis agent version list` | `agent.agents.versions.list` | GET `/agent/v1/agents/{agent_id}/versions` | `--agent`, `--param-limit`, `--page` |
 | `praxis application asset upload` | `application.assets.upload.create` | POST `/application/v1/assets/upload` | `--jwt` |

package/dist/praxis.js

@@ -68,7 +68,7 @@ var operations = [
     resource: "agent.agents",
     method: "create",
     summary: "Create agent",
-    description: 'Create a reusable agent definition, then pass its returned id to sessions.create to start a conversation. The definition includes model, system prompt, tools, MCP servers and an optional multiagent roster. It is saved as version 1; real updates create new versions. Unlike Anthropic Managed Agents, nonempty skills attachments return 400; the native skill tool is separate from the skills field. Use tools: [{type: "agent_toolset_20260401"}] for built-in tools including codemode, skill and agent; inspect toolsets.list for names and schemas, and keep bash enabled for native additions. To offer only some tools, set default_config: {enabled: false} and list the tools to keep in configs, e.g. tools: [{type: "agent_toolset_20260401", default_config: {enabled: false}, configs: [{name: "codemode", enabled: true}, {name: "bash", enabled: true, permission_policy: {type: "always_ask"}}]}]; every tool not listed, including todo_write, enter_plan_mode, ask_user_question and goal_read, follows default_config, and the response echoes it. codemode runs through bash, so enabling codemode while bash is disabled returns 400. Optional mcp_toolset entries pair with mcp_servers. model accepts platform model IDs such as deepseek-flash, not only the Claude IDs in the protocol examples. model.settings.reasoning sets default thinking; other extra model controls return 400. Example: {"name":"helper","model":{"id":"deepseek-flash"},"tools":[{"type":"agent_toolset_20260401"}]}.',
+    description: `Create a reusable agent definition, then pass its returned id to sessions.create to start a conversation. The definition includes model, system prompt, tools, MCP servers and an optional multiagent roster. It is saved as version 1; real updates create new versions. skills attaches uploaded custom skills as [{type: "custom", skill_id, version?}] (skill_id from skills.create or skills.list; at most 20, no repeated skill_id). Omit version, or send "latest", to use the skill's newest version when a session starts. type anthropic returns 400. Use tools: [{type: "agent_toolset_20260401"}] for built-in tools including codemode, skill and agent; inspect toolsets.list for names and schemas, and keep bash enabled for native additions. To offer only some tools, set default_config: {enabled: false} and list the tools to keep in configs, e.g. tools: [{type: "agent_toolset_20260401", default_config: {enabled: false}, configs: [{name: "codemode", enabled: true}, {name: "bash", enabled: true, permission_policy: {type: "always_ask"}}]}]; every tool not listed, including todo_write, enter_plan_mode, ask_user_question and goal_read, follows default_config, and the response echoes it. codemode runs through bash, so enabling codemode while bash is disabled returns 400. Optional mcp_toolset entries pair with mcp_servers. model accepts platform model IDs such as deepseek-flash, not only the Claude IDs in the protocol examples. model.settings.reasoning sets default thinking; other extra model controls return 400. model and every models.allowed entry must be a catalog model that can run an agent: an unknown id returns 400 "model <id> is not in the model catalog" and an embedding, image or speech model returns 400 "model <id> cannot run an agent". name is a label, not a unique key: 1 to 256 characters after trimming, no NUL or line breaks. avatar is trimmed, must not contain spaces or point at a loopback, private or internal host, and its scheme is stored in lowercase. script and workflow binding ids are stored in lowercase, the form automation matches; bindings together with environment_id null return 400 because bindings need a machine. Example: {"name":"helper","model":{"id":"deepseek-flash"},"tools":[{"type":"agent_toolset_20260401"}]}.`,
     http: "POST",
     path: "/agent/v1/agents",
     streaming: "no",
@@ -82,13 +82,13 @@ var operations = [
           name: "model",
           type: "object",
           required: true,
-          description: "Model identifier. Accepts the\n[model string](https://platform.claude.com/docs/en/about-claude/models/overview#latest-models-comparison),\ne.g. `claude-opus-5`, or a `model_config` object for additional configuration\ncontrol"
+          description: "A model id from the Praxis model catalog (`praxis.model.models.list`), or a `model_config` object for additional configuration control. Unlike Anthropic, Claude model ids other than those in the catalog are rejected."
         },
         {
           name: "name",
           type: "string",
           required: true,
-          description: "Human-readable name for the agent."
+          description: "Display name of the agent, 1 to 256 characters after trimming, with no NUL or line breaks. A label, not a unique key: two agents may share a name."
         },
         {
           name: "description",
@@ -120,7 +120,7 @@ var operations = [
           type: "array",
           itemType: "object",
           required: false,
-          description: "Skill attachments are not supported: a nonempty array returns 400. Omit this field or send an empty array; the native skill tool is configured separately through tools."
+          description: `Custom skills attached to the agent, each {type: "custom", skill_id, version?}: skill_id comes from skills.create or skills.list, at most 20 skills, no repeated skill_id. Omit version, or send "latest", to use the skill's newest version at the moment a session starts; a pinned version stays fixed. type anthropic returns 400: upload the skill and attach it as custom. On update, omit the field to keep the list, send an array to replace it, or send [] or null to clear it.`
         },
         {
           name: "system",
@@ -137,25 +137,11 @@ var operations = [
 across all toolsets allowed.`
         },
         {
-          name: "databases",
-          type: "array",
-          itemType: "object",
-          required: false,
-          description: "Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings."
-        },
-        {
-          name: "vector_stores",
-          type: "array",
-          itemType: "object",
-          required: false,
-          description: "Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings."
-        },
-        {
-          name: "files",
+          name: "bindings",
           type: "array",
           itemType: "object",
           required: false,
-          description: "File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings."
+          description: "Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings."
         },
         {
           name: "kind",
@@ -205,6 +191,25 @@ across all toolsets allowed.`
           required: false,
           description: "Praxis extension: switchable model ids on /agent/v1 only. The default model must be included. When omitted, only the default model is selectable."
         },
+        {
+          name: "avatar",
+          type: "string",
+          required: false,
+          description: "Avatar image of the agent: an absolute https URL of at most 2048 characters, without credentials; any other value returns 400 avatar must be an https URL. It is the default picture in agent lists, the agent detail, the chat header and embedded chat when the embed appearance sets none. Saved with the agent version like other configuration, so apply=false keeps the previous avatar in effect until that version is applied. Omit on create for no avatar; on update, omit to keep it and send null to clear it. Both personal and service agents accept it. /agent/v1 only; /anthropic neither accepts nor returns it."
+        },
+        {
+          name: "environment_id",
+          type: "string",
+          required: false,
+          description: "Default environment of a service agent: the environment_id a new session gets when it names none. Use light, node22 or the env_ id of an active environment of your organization; any other value returns 400 environment_id <id> was not found. null means no environment, so sessions are plain conversation without codemode or bash. Saved with the agent version like other configuration, so apply=false keeps the previous environment in effect for new sessions until that version is applied; a session that sets environment_id itself, null included, overrides it. Omit on create for light; on update, omit to keep it. Versions saved before this field existed read as light. Personal agents use a Computer: a non-null value returns 400 and the field is not returned. /agent/v1 only; /anthropic neither accepts nor returns it."
+        },
+        {
+          name: "vault_ids",
+          type: "array",
+          itemType: "string",
+          required: false,
+          description: "Default vaults of a service agent: the vault_ids a new session gets when it names none, so the agent's credentials follow the version. At most 50 ids without duplicates; each must be a vault of your organization that is not archived, otherwise 400 vault_ids[<index>] <id> was not found. Saved with the agent version like other configuration, so apply=false keeps the previous vaults in effect for new sessions until that version is applied; a session that sets vault_ids itself, [] included, overrides it. Omit on create for []; on update, omit to keep the list and send an array to replace it as a whole. Versions saved before this field existed read as []. Embed tokens use the vault_ids of the version they pin; vault_ids on the embed policy is deprecated, still accepted and ignored. Personal agents get no default vaults: a non-empty value returns 400 and the field is not returned. /agent/v1 only; /anthropic neither accepts nor returns it."
+        },
         {
           name: "preset",
           type: "string",
@@ -223,7 +228,7 @@ across all toolsets allowed.`
     resource: "agent.agents",
     method: "retrieve",
     summary: "Get agent",
-    description: "Read one agent by id, at its latest version or, with version, at a specific earlier version. The response lists every native tool with its resolved configuration in one agent_toolset_20260401 entry, so it can be sent back unchanged to agents.update. Use agents.versions.list to enumerate versions.",
+    description: "Read one agent by id. The top level is the latest saved version, the editable head whose version you send back for optimistic concurrency; after a save with apply false it differs from active_version, and new sessions use active_version, which you read with version=active. With version, read a specific saved version. The response lists every native tool with its resolved configuration in one agent_toolset_20260401 entry, so it can be sent back unchanged to agents.update. Use agents.versions.list to enumerate versions.",
     http: "GET",
     path: "/agent/v1/agents/{agent_id}",
     streaming: "no",
@@ -239,7 +244,7 @@ across all toolsets allowed.`
         name: "version",
         type: "number",
         required: false,
-        description: "Agent version to read; omit for the latest. Integer of at least 1; versions are listed by agents.versions.list."
+        description: "Agent version to read; omit for the latest saved version. An integer of at least 1 (versions are listed by agents.versions.list), or the string active for the version new sessions use."
       }
     ]
   },
@@ -247,7 +252,7 @@ across all toolsets allowed.`
     resource: "agent.agents",
     method: "update",
     summary: "Update agent",
-    description: "Update an agent. Send the current version in the body for optimistic concurrency: a stale version returns 409, and an update that changes nothing keeps the version number. Any real change saves a new version. apply defaults to true and moves active_version to the new version, or to the latest when configuration is unchanged; apply false saves without applying. version_note optionally records up to 280 characters on a newly created version. Existing sessions and tokens keep their version. Omitted fields keep their value. multiagent takes null or a coordinator roster; subagent_model keeps its value when omitted and is cleared by null. Archived agents cannot be updated. Unlike Anthropic Managed Agents, nonempty skills attachments return 400; use the native skill tool for available runtime skills.",
+    description: "Update an agent. Send the current version in the body for optimistic concurrency: a stale version returns 409, and an update that changes nothing keeps the version number. Any real change saves a new version. apply defaults to true and moves active_version to the new version, or to the latest when configuration is unchanged; apply false saves without applying. version_note optionally records up to 280 characters on a newly created version; null means no note, and a note sent when the request changes nothing else returns 400 because a note is stored only with a new version. Existing sessions and tokens keep their version. Omitted fields keep their value. multiagent takes null or a coordinator roster; subagent_model keeps its value when omitted and is cleared by null. Archived agents cannot be updated. tools: [] removes every tool, while tools: null returns 400 (tools cannot be null; send [] to remove every tool). On update, omit skills to keep them, send an array to replace them, or send [] or null to clear them. skills attaches uploaded custom skills as [{type: \"custom\", skill_id, version?}] (skill_id from skills.create or skills.list; at most 20, no repeated skill_id). Omit version, or send \"latest\", to use the skill's newest version when a session starts. type anthropic returns 400.",
     http: "POST",
     path: "/agent/v1/agents/{agent_id}",
     streaming: "no",
@@ -287,7 +292,7 @@ to 64 chars each) with values up to 512 chars.`
           name: "model",
           type: "object",
           required: false,
-          description: "Model identifier. Accepts the\n[model string](https://platform.claude.com/docs/en/about-claude/models/overview#latest-models-comparison),\ne.g. `claude-opus-5`, or a `model_config` object for additional configuration\ncontrol. Omit to preserve. Cannot be cleared."
+          description: "A model id from the Praxis model catalog (`praxis.model.models.list`), or a `model_config` object for additional configuration control. Unlike Anthropic, Claude model ids other than those in the catalog are rejected."
         },
         {
           name: "multiagent",
@@ -299,15 +304,14 @@ to 64 chars each) with values up to 512 chars.`
           name: "name",
           type: "string",
           required: false,
-          description: `Human-readable name. Must be non-empty. Omit to preserve. Cannot be
-cleared.`
+          description: "New display name, 1 to 256 characters after trimming, with no NUL or line breaks. A label, not a unique key; omit to keep the current name."
         },
         {
           name: "skills",
           type: "array",
           itemType: "object",
           required: false,
-          description: "Skill attachments are not supported: a nonempty array returns 400. Omit this field or send an empty array; the native skill tool is configured separately through tools."
+          description: `Custom skills attached to the agent, each {type: "custom", skill_id, version?}: skill_id comes from skills.create or skills.list, at most 20 skills, no repeated skill_id. Omit version, or send "latest", to use the skill's newest version at the moment a session starts; a pinned version stays fixed. type anthropic returns 400: upload the skill and attach it as custom. On update, omit the field to keep the list, send an array to replace it, or send [] or null to clear it.`
         },
         {
           name: "system",
@@ -343,28 +347,14 @@ current version; omit to apply the update unconditionally.`
           name: "version_note",
           type: "string",
           required: false,
-          description: "Optional change explanation stored as note on the new immutable version, up to 280 characters. Omission stores null. A note alone does not create a version or rewrite an existing note."
-        },
-        {
-          name: "databases",
-          type: "array",
-          itemType: "object",
-          required: false,
-          description: "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings."
-        },
-        {
-          name: "vector_stores",
-          type: "array",
-          itemType: "object",
-          required: false,
-          description: "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings."
+          description: "Optional change explanation stored as note on the new immutable version, up to 280 characters. Omission or null stores no note. A note sent when nothing else changes returns 400 (nothing to save), because a note is stored only with a new version."
         },
         {
-          name: "files",
+          name: "bindings",
           type: "array",
           itemType: "object",
           required: false,
-          description: "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings."
+          description: "Replace the whole bindings list; omission preserves it, and null or [] clears it. Additions apply only to new sessions; once this version is applied, disabling, removing or downgrading a binding revokes it immediately in running sessions on older versions, while apply=false changes no access. Only service agents accept a nonempty list."
         },
         {
           name: "kind",
@@ -414,6 +404,25 @@ current version; omit to apply the update unconditionally.`
           required: false,
           description: "Praxis extension: switchable model ids on /agent/v1 only. The default model must be included. When omitted, only the default model is selectable."
         },
+        {
+          name: "avatar",
+          type: "string",
+          required: false,
+          description: "Avatar image of the agent: an absolute https URL of at most 2048 characters, without credentials; any other value returns 400 avatar must be an https URL. It is the default picture in agent lists, the agent detail, the chat header and embedded chat when the embed appearance sets none. Saved with the agent version like other configuration, so apply=false keeps the previous avatar in effect until that version is applied. Omit on create for no avatar; on update, omit to keep it and send null to clear it. Both personal and service agents accept it. /agent/v1 only; /anthropic neither accepts nor returns it."
+        },
+        {
+          name: "environment_id",
+          type: "string",
+          required: false,
+          description: "Default environment of a service agent: the environment_id a new session gets when it names none. Use light, node22 or the env_ id of an active environment of your organization; any other value returns 400 environment_id <id> was not found. null means no environment, so sessions are plain conversation without codemode or bash. Saved with the agent version like other configuration, so apply=false keeps the previous environment in effect for new sessions until that version is applied; a session that sets environment_id itself, null included, overrides it. Omit on create for light; on update, omit to keep it. Versions saved before this field existed read as light. Personal agents use a Computer: a non-null value returns 400 and the field is not returned. /agent/v1 only; /anthropic neither accepts nor returns it."
+        },
+        {
+          name: "vault_ids",
+          type: "array",
+          itemType: "string",
+          required: false,
+          description: "Default vaults of a service agent: the vault_ids a new session gets when it names none, so the agent's credentials follow the version. At most 50 ids without duplicates; each must be a vault of your organization that is not archived, otherwise 400 vault_ids[<index>] <id> was not found. Saved with the agent version like other configuration, so apply=false keeps the previous vaults in effect for new sessions until that version is applied; a session that sets vault_ids itself, [] included, overrides it. Omit on create for []; on update, omit to keep the list and send an array to replace it as a whole. Versions saved before this field existed read as []. Embed tokens use the vault_ids of the version they pin; vault_ids on the embed policy is deprecated, still accepted and ignored. Personal agents get no default vaults: a non-empty value returns 400 and the field is not returned. /agent/v1 only; /anthropic neither accepts nor returns it."
+        },
         {
           name: "preset",
           type: "string",
@@ -445,6 +454,152 @@ current version; omit to apply the update unconditionally.`
     ],
     query: []
   },
+  {
+    resource: "agent.agents.customers.auth.accessTokens",
+    method: "create",
+    summary: "Create customer access token",
+    description: `Exchange a grant code, or the agent's publishable key for an anonymous visitor, for a customer access token that authorizes the agent's embedded sessions.
+
+No Authorization header is required: the grant code or the publishable key is the credential. Agent Kit calls this from the browser, so send the page Origin. With grant_code, the code is consumed atomically: concurrent attempts have exactly one winner, and unknown, used, expired and other-agent codes all return the same 401 GRANT_CODE_INVALID. The sign-in starts now and lasts the code's max_session_seconds. Unlike Shopify, a visitor without an account gets a token too: send publishable_key instead and a new anonymous customer (anon_…) is created, bound to the request Origin, for 7 days. The access token lasts at most two hours and never outlives the sign-in; renew it with access_tokens/renew before expires_at. Both forms share the per-IP minute limit of anonymous issuance (default 20). Example body: {"grant_code":"cgc_…"}.`,
+    http: "POST",
+    path: "/agent/v1/agents/{agent_id}/customers/auth/access_tokens",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "agent_id",
+        sdkName: "agent_id"
+      }
+    ],
+    query: [],
+    body: {
+      required: true,
+      fields: []
+    }
+  },
+  {
+    resource: "agent.agents.customers.auth.accessTokens",
+    method: "deleteCurrent",
+    summary: "Log out customer",
+    description: `Log the customer out by revoking the sign-in of the presented access token and every token issued in it.
+
+Send the current customer access token as the Bearer credential, with no body, when the customer logs out of your site. Every token of the sign-in, including renewed ones, stops working, and their live event streams close; the customer's conversations are kept. Returns 204. Calling it again with the same token returns 401 ACCESS_TOKEN_REVOKED, so treat that as already logged out.`,
+    http: "DELETE",
+    path: "/agent/v1/agents/{agent_id}/customers/auth/access_tokens/current",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "agent_id",
+        sdkName: "agent_id"
+      }
+    ],
+    query: []
+  },
+  {
+    resource: "agent.agents.customers.auth.accessTokens.renew",
+    method: "create",
+    summary: "Renew customer access token",
+    description: `Get a fresh customer access token in the same sign-in, authenticated with the current one.
+
+Send the current customer access token as the Bearer credential, with no body, a few minutes before expires_at. The new token keeps the version, budget, context, metadata and origin binding of the sign-in and lasts at most two hours, never past session_expires_at. Unlike Shopify, renewal does not revoke the presented token: it stays valid until its own expiry, so a reply that is streaming on it is not cut off. When less than 60 seconds of the sign-in remain, renewal returns 401 CUSTOMER_SESSION_EXPIRED; sign the customer in again with a new grant code from your backend. A token that was logged out or merged returns 401 ACCESS_TOKEN_REVOKED.`,
+    http: "POST",
+    path: "/agent/v1/agents/{agent_id}/customers/auth/access_tokens/renew",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "agent_id",
+        sdkName: "agent_id"
+      }
+    ],
+    query: []
+  },
+  {
+    resource: "agent.agents.customers.auth.grantCodes",
+    method: "create",
+    summary: "Create customer grant code",
+    description: `Sign your logged-in customer in to a service agent from your backend with a one-time grant code that Agent Kit exchanges for a customer access token.
+
+Call this from your backend with your API key after your own login succeeds, then pass the returned code to Agent Kit in the browser; never call it from the browser. Customer authorization follows Shopify Storefront customer access tokens (Multipass-style sign-in, a short-lived token, renewal and logout), so that experience applies. customer_id is your own identifier for the customer: use an opaque id such as your database user id, not an email address or phone number. The value auth is reserved, and ids starting with anon_ are reserved for anonymous customers. The code works once and expires after expires_in seconds (default 900). The sign-in it starts lasts max_session_seconds (default 7 days); version, budget_cents, system_message, agent_override and metadata apply to every token of the sign-in. Unlike Shopify, origin binds the whole sign-in to one page origin, and anonymous_access_token merges the conversations of the anonymous visitor who chatted before signing in into this customer. Example body: {"customer_id":"cus_8f2a91","origin":"https://shop.example.com"}.`,
+    http: "POST",
+    path: "/agent/v1/agents/{agent_id}/customers/auth/grant_codes",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "agent_id",
+        sdkName: "agent_id"
+      }
+    ],
+    query: [],
+    body: {
+      required: true,
+      fields: [
+        {
+          name: "customer_id",
+          type: "string",
+          required: true,
+          description: 'Your stable, opaque identifier for the signed-in customer, such as your database user id. Do not use an email address or phone number. "auth" is reserved, and ids starting with anon_ are reserved for anonymous customers.'
+        },
+        {
+          name: "version",
+          type: "integer",
+          required: false,
+          description: "Existing agent version that every token of this sign-in pins. Defaults to the agent's active_version when the code is issued."
+        },
+        {
+          name: "budget_cents",
+          type: "integer",
+          required: false,
+          description: "Budget in cents for each session the customer starts. Defaults to the embed policy session budget and cannot exceed its maximum."
+        },
+        {
+          name: "system_message",
+          type: "array",
+          itemType: "object",
+          required: false,
+          description: "Optional context the agent receives at the start of each session, as text blocks, limited to 8192 UTF-8 bytes in total."
+        },
+        {
+          name: "agent_override",
+          type: "object",
+          required: false,
+          description: "Optional system prompt override, accepted only when the embed policy allows agent overrides."
+        },
+        {
+          name: "metadata",
+          type: "object",
+          required: false,
+          description: "Up to 16 string pairs copied onto every session the customer starts. The playground key is reserved."
+        },
+        {
+          name: "origin",
+          type: "string",
+          required: false,
+          description: "Page origin, such as https://shop.example.com, that must be one of the agent policy's allowed_origins (or localhost when the policy allows it). When set, every token of this sign-in works only from exactly this origin. Omit to accept any policy origin."
+        },
+        {
+          name: "expires_in",
+          type: "integer",
+          required: false,
+          description: "Seconds the code stays redeemable, from 60 to 86400. Defaults to 900."
+        },
+        {
+          name: "max_session_seconds",
+          type: "integer",
+          required: false,
+          description: "Total lifetime of the sign-in in seconds, from 3600 to 604800 (7 days). Tokens renew within it; after it the customer signs in again. Defaults to 604800."
+        },
+        {
+          name: "anonymous_access_token",
+          type: "string",
+          required: false,
+          description: "The current access token of the anonymous customer who used this agent before signing in. Their conversations become visible to the identified customer, and the anonymous sign-in ends at exchange."
+        }
+      ]
+    }
+  },
   {
     resource: "agent.agents.endUsers",
     method: "list",
@@ -649,7 +804,7 @@ Removes the user from the blocklist; previously revoked tokens stay revoked. Ide
     resource: "agent.agents.versions",
     method: "list",
     summary: "List agent versions",
-    description: "List the saved versions of one agent, in pages of at most 100 (default 20). Each item is the full agent definition at that version, so you can compare what changed between versions. Use agents.retrieve with version to read a single one; agent_id comes from agents.list or agents.create.",
+    description: "List the saved versions of one agent, in pages of at most 100 (default 20). Each item is the full agent definition at that version, so you can compare what changed between versions. active is true only for the item that new sessions use; active_version on each item is the agent-level value, kept for compatibility. Use agents.retrieve with version to read a single one; agent_id comes from agents.list or agents.create.",
     http: "GET",
     path: "/agent/v1/agents/{agent_id}/versions",
     streaming: "no",
@@ -699,8 +854,8 @@ Removes the user from the blocklist; previously revoked tokens stay revoked. Ide
   {
     resource: "agent.computers",
     method: "list",
-    summary: "ComputersList",
-    description: `Tenant-owned durable computer resource.
+    summary: "List Computers",
+    description: `List the computers of your organization, archived ones included.
 
 Praxis extension: MA only has session-scoped temporary containers and memory_stores, not durable browsable computers. Archived files remain readable, but new sessions cannot bind them. environment_id is an optional recipe reference; computers start with a light sandbox and expose the public SDK sandbox_id. Lists include archived computers.`,
     http: "GET",
@@ -726,8 +881,8 @@ Praxis extension: MA only has session-scoped temporary containers and memory_sto
   {
     resource: "agent.computers",
     method: "create",
-    summary: "ComputersCreate",
-    description: `Tenant-owned durable computer resource.
+    summary: "Create Computer",
+    description: `Create a durable computer: a named machine whose files outlive sessions, for personal agents.
 
 Praxis extension: MA only has session-scoped temporary containers and memory_stores, not durable browsable computers. Archived files remain readable, but new sessions cannot bind them. environment_id is an optional recipe reference; computers start with a light sandbox and expose the public SDK sandbox_id. Lists include archived computers.`,
     http: "POST",
@@ -776,8 +931,8 @@ Own-face superset: Managed Agents has no persistent Computer deletion lifecycle.
   {
     resource: "agent.computers",
     method: "retrieve",
-    summary: "ComputersRetrieve",
-    description: `Tenant-owned durable computer resource.
+    summary: "Get Computer",
+    description: `Read one computer's status, storage use and sandbox id.
 
 Praxis extension: MA only has session-scoped temporary containers and memory_stores, not durable browsable computers. Archived files remain readable, but new sessions cannot bind them. environment_id is an optional recipe reference; computers start with a light sandbox and expose the public SDK sandbox_id. Lists include archived computers.`,
     http: "GET",
@@ -795,8 +950,8 @@ Praxis extension: MA only has session-scoped temporary containers and memory_sto
   {
     resource: "agent.computers",
     method: "update",
-    summary: "ComputersUpdate",
-    description: `Tenant-owned durable computer resource.
+    summary: "Update Computer",
+    description: `Rename a computer.
 
 Praxis extension: MA only has session-scoped temporary containers and memory_stores, not durable browsable computers. Archived files remain readable, but new sessions cannot bind them. environment_id is an optional recipe reference; computers start with a light sandbox and expose the public SDK sandbox_id. Lists include archived computers.`,
     http: "POST",
@@ -825,8 +980,8 @@ Praxis extension: MA only has session-scoped temporary containers and memory_sto
   {
     resource: "agent.computers",
     method: "archive",
-    summary: "ComputersArchive",
-    description: `Tenant-owned durable computer resource.
+    summary: "Archive Computer",
+    description: `Archive a computer: its files stay readable but new sessions cannot use it.
 
 Praxis extension: MA only has session-scoped temporary containers and memory_stores, not durable browsable computers. Archived files remain readable, but new sessions cannot bind them. environment_id is an optional recipe reference; computers start with a light sandbox and expose the public SDK sandbox_id. Lists include archived computers.`,
     http: "POST",
@@ -910,8 +1065,8 @@ Connect to a computer with a caller-held lease. Omit the body or send {} to requ
   {
     resource: "agent.computers.files",
     method: "list",
-    summary: "ComputersFilesList",
-    description: `Tenant-owned durable computer resource.
+    summary: "List Computer Files",
+    description: `List the entries of one directory on a computer.
 
 Praxis extension: MA only has session-scoped temporary containers and memory_stores, not durable browsable computers. Archived files remain readable, but new sessions cannot bind them. environment_id is an optional recipe reference; computers start with a light sandbox and expose the public SDK sandbox_id. Lists include archived computers.`,
     http: "GET",
@@ -936,8 +1091,8 @@ Praxis extension: MA only has session-scoped temporary containers and memory_sto
   {
     resource: "agent.computers.files",
     method: "retrieveContent",
-    summary: "ComputersFilesContent",
-    description: `Tenant-owned durable computer resource.
+    summary: "Get Computer File Content",
+    description: `Download the bytes of one file on a computer, up to 16 MiB, with single-range support.
 
 Praxis extension: MA only has session-scoped temporary containers and memory_stores, not durable browsable computers. Archived files remain readable, but new sessions cannot bind them. environment_id is an optional recipe reference; computers start with a light sandbox and expose the public SDK sandbox_id. Lists include archived computers.`,
     http: "GET",
@@ -1680,7 +1835,7 @@ Use an id from issuance or listing. Revokes the credential before setting revoke
     resource: "agent.environments",
     method: "create",
     summary: "Create environment",
-    description: "Create a tenant-owned cloud environment: a sandbox recipe (packages to install and networking policy) that sessions can select through environment_id. Package installation happens when the session's sandbox is created; a failed install terminates that session with ENVIRONMENT_PACKAGE_INSTALL_FAILED. Limited networking is applied at sandbox creation. Unlike Anthropic Managed Agents, self_hosted environments, scope and cross-session package caching are not supported.",
+    description: "Create a tenant-owned cloud environment: a sandbox recipe (packages to install and networking policy) that sessions can select through environment_id. Package installation happens when the session's sandbox is created; a failed install terminates that session with ENVIRONMENT_PACKAGE_INSTALL_FAILED. Limited networking is applied at sandbox creation. Unlike Anthropic Managed Agents, self_hosted environments, scope and cross-session package caching are not supported. config.template must name an available sandbox template, otherwise 400 lists the available ones.",
     http: "POST",
     path: "/agent/v1/environments",
     streaming: "no",
@@ -1713,19 +1868,6 @@ Use an id from issuance or listing. Revokes the credential before setting revoke
           type: "object",
           required: false,
           description: "Free-form string key/value pairs."
-        },
-        {
-          name: "scope",
-          type: "string",
-          enum: [
-            "organization",
-            "account"
-          ],
-          required: false,
-          description: `The visibility scope for this environment. 'organization' makes the
-environment visible to all accounts. 'account' restricts visibility to the
-owning account only. API organizations support only 'organization'; 'account' is
-rejected. If not specified, defaults based on organization type.`
         }
       ]
     }
@@ -1751,7 +1893,7 @@ rejected. If not specified, defaults based on organization type.`
     resource: "agent.environments",
     method: "update",
     summary: "Update environment",
-    description: "Update the configuration of a tenant-owned cloud environment. Built-in environments are read-only. Package installation and limited networking are applied when a session's sandbox is created. Omitted fields keep their value.",
+    description: "Update the configuration of a tenant-owned cloud environment. Built-in environments are read-only. Package installation and limited networking are applied when a session's sandbox is created. Omitted fields keep their value. A changed config.template must name an available sandbox template, otherwise 400 lists the available ones.",
     http: "POST",
     path: "/agent/v1/environments/{environment_id}",
     streaming: "no",
@@ -1790,18 +1932,6 @@ clears to null; an empty string is stored as an empty string.`
           type: "string",
           required: false,
           description: "Updated name for the environment"
-        },
-        {
-          name: "scope",
-          type: "string",
-          enum: [
-            "organization",
-            "account"
-          ],
-          required: false,
-          description: `The visibility scope for this environment. 'organization' makes the
-environment visible to all accounts. 'account' restricts visibility to the
-owning account only.`
         }
       ]
     }
@@ -1810,7 +1940,7 @@ owning account only.`
     resource: "agent.environments",
     method: "archive",
     summary: "Archive environment",
-    description: "Soft-archive a tenant-owned cloud environment so it can no longer be used to create new sessions. Built-in environments are read-only and cannot be archived.",
+    description: "Soft-archive a tenant-owned cloud environment so it can no longer be used to create new sessions. Built-in environments are read-only and cannot be archived. An environment that the active version of a non-archived agent uses as environment_id returns 409 RESOURCE_IN_USE naming the agents; point them at another environment first.",
     http: "POST",
     path: "/agent/v1/environments/{environment_id}/archive",
     streaming: "no",
@@ -1827,7 +1957,7 @@ owning account only.`
     resource: "agent.sessions",
     method: "list",
     summary: "List sessions",
-    description: "List sessions of the workspace behind your API key, newest first, in pages of at most 100 (default 20). Unlike Anthropic Managed Agents, only limit, page, agent_id and deployment_id are honored; the other filters declared here (agent_version, created_at ranges, memory_store_id, include_archived, order, statuses) are not supported and return 400. Use the returned id with sessions.retrieve or sessions.events.list; pass next_page as page for the next page.",
+    description: "List sessions of the workspace behind your API key, newest first, in pages of at most 100 (default 20). Archived sessions are hidden unless include_archived is true. Unlike Anthropic Managed Agents, only limit, page, agent_id, deployment_id and include_archived are honored; the other filters declared here (agent_version, created_at ranges, memory_store_id, order, statuses) are not supported and return 400. Use the returned id with sessions.retrieve or sessions.events.list; pass next_page as page for the next page.",
     http: "GET",
     path: "/agent/v1/sessions",
     streaming: "no",
@@ -1856,7 +1986,7 @@ owning account only.`
         name: "created_at[gte]",
         type: "string",
         required: false,
-        description: "Created-at lower bound for sessions. Declared by the Managed Agents shape but not supported here: sessions.list honors only limit, page, agent_id and deployment_id, and other filters return 400."
+        description: "Created-at lower bound for sessions. Declared by the Managed Agents shape but not supported here: sessions.list honors only limit, page, agent_id, deployment_id and include_archived, and other filters return 400."
       },
       {
         name: "created_at[lt]",
@@ -1868,7 +1998,7 @@ owning account only.`
         name: "created_at[lte]",
         type: "string",
         required: false,
-        description: "Created-at upper bound for sessions. Declared by the Managed Agents shape but not supported here: sessions.list honors only limit, page, agent_id and deployment_id, and other filters return 400."
+        description: "Created-at upper bound for sessions. Declared by the Managed Agents shape but not supported here: sessions.list honors only limit, page, agent_id, deployment_id and include_archived, and other filters return 400."
       },
       {
         name: "deployment_id",
@@ -1884,7 +2014,7 @@ owning account only.`
           true
         ],
         required: false,
-        description: "Declared by the Managed Agents shape but not supported by sessions.list; sending it returns 400. Archived sessions are retrievable by id."
+        description: "Whether archived sessions are listed: true includes them, false (the default) hides them. A value other than true or false returns 400. Archived sessions stay retrievable by id either way."
       },
       {
         name: "memory_store_id",
@@ -1952,7 +2082,7 @@ owning account only.`
     resource: "agent.sessions",
     method: "create",
     summary: "Create session",
-    description: `Create a session: one conversation with an agent. Pass agent as an agent id (active_version) or {id, version, type:"agent"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass an environment id for a sandbox recipe. For service agents, omission returns environment_id=light; explicit null allocates no machine, so codemode, bash and other machine tools are unavailable. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.`,
+    description: `Create a session: one conversation with an agent. Pass agent as an agent id or {type:"agent", id, version?}; an id alone, or an object without version, pins the agent's active_version (the version chosen with agents.versions.apply, not necessarily the newest saved one). Unlike Anthropic Managed Agents, omit environment_id to use the default environment saved in the agent version (light for a new agent), unless computer_id (explicit, or the agent's default) selects a Computer; pass an environment id for a sandbox recipe. For service agents, explicit null allocates no machine, so codemode, bash and other machine tools are unavailable. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Unlike Anthropic Managed Agents, the only inline agent override is system ({type:"agent_with_overrides", id, system}); to change the model, tools, MCP servers or skills, save a version instead. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. budget is {type:"limit", max_list_cost:{amount, currency:"USD"}} where amount is a positive integer string of US cents ("2000" is USD 20.00); omitted budget defaults to "2000" and null removes the limit. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.`,
     http: "POST",
     path: "/agent/v1/sessions",
     streaming: "no",
@@ -1966,19 +2096,19 @@ owning account only.`
           name: "agent",
           type: "object",
           required: true,
-          description: "Agent identifier. Accepts the `agent` ID string, which pins the\nlatest version for the session, or an `agent` object with both id and version\nspecified."
+          description: `The agent to run: an agent id string, or {type: "agent", id, version?}. An id alone, or an object without version, pins the agent's active_version at the moment the session is created (the version chosen with agents.versions.apply, not necessarily the newest saved one); version pins that exact version. Unlike Managed Agents, the only inline override is a system prompt ({type: "agent_with_overrides", id, system}); to change the model, tools, MCP servers or skills, save a version instead.`
         },
         {
           name: "environment_id",
           type: "string",
           required: false,
-          description: "Execution environment id from agent.environments.list or agent.environments.create. For a service agent, omission selects the built-in light environment and returns session.environment_id=light; explicit null allocates no machine and makes machine tools, including codemode and bash, unavailable. Personal agents use their selected Computer."
+          description: "Execution environment id from agent.environments.list or agent.environments.create. For a service agent, omission uses the default environment saved in the agent version (light for a new agent) and returns it as session.environment_id; explicit null allocates no machine and makes machine tools, including codemode and bash, unavailable. Personal agents use their selected Computer."
         },
         {
           name: "budget",
           type: "object",
           required: false,
-          description: "Session spending limit in USD cents; null when unlimited. Creation defaults to USD 20 when omitted. A limit amount is a positive integer string; removing a limit with null prevents setting it again for that session."
+          description: 'Session spending limit, {type: "limit", max_list_cost: {amount, currency}}; null when unlimited. Creation defaults to a limit of 2000 US cents (USD 20.00) when omitted. amount is a positive integer string of US cents; removing the limit with null prevents setting it again for that session.'
         },
         {
           name: "initial_events",
@@ -2105,12 +2235,6 @@ offsets ("+08:00") and unknown names return 400. Never stored in
     body: {
       required: true,
       fields: [
-        {
-          name: "agent",
-          type: "object",
-          required: false,
-          description: "Agent definition the session uses after the change; null when unchanged."
-        },
         {
           name: "budget",
           type: "object",
@@ -2865,6 +2989,236 @@ Own-face extension. Use a readable session and a run_id from its events. Each su
       }
     ]
   },
+  {
+    resource: "agent.skills",
+    method: "list",
+    summary: "List skills",
+    description: "List the skills uploaded to your organization, newest first, in pages of at most 100 (default 20). Use it to find a skill id before reading, versioning or deleting it. Only source=custom has content; source=anthropic returns an empty list. Pass next_page from the response as page to read the next page; a null next_page means the end.",
+    http: "GET",
+    path: "/agent/v1/skills",
+    streaming: "no",
+    pagination: false,
+    pathParams: [],
+    query: [
+      {
+        name: "source",
+        type: "string",
+        required: false,
+        description: `Filter skills by source.
+
+If provided, only skills from the specified source will be returned:
+
+- \`"custom"\`: only return user-created skills
+- \`"anthropic"\`: only return Anthropic-created skills`
+      },
+      {
+        name: "limit",
+        type: "number",
+        required: false,
+        description: "Number of items per page."
+      },
+      {
+        name: "page",
+        type: "string",
+        required: false,
+        description: "Opaque pagination cursor: pass the next_page value of the previous response unchanged. Omit it for the first page. A cursor from a different query or a malformed one returns 400."
+      }
+    ]
+  },
+  {
+    resource: "agent.skills",
+    method: "create",
+    summary: "Create skill",
+    description: 'Upload a skill: a directory that contains SKILL.md, which the agent reads when it needs the skill. Send multipart/form-data with one files part per file, each file name being its path under one top-level directory (pdf/SKILL.md, pdf/scripts/run.py), and an optional display_name. SKILL.md frontmatter needs a description; name defaults to the directory name and must be one folder name (1-255 characters, no "/", backslash or NUL, not "." or ".."), otherwise the upload returns 400 stating the allowed form. Limits: 8 MB in total, at most 200 files, no .. segments, absolute paths or empty names; a violation returns 400 naming the path or field. The upload creates the skill and its first version, and versions are immutable. Attach the skill to an agent with `skills` on the agent.',
+    http: "POST",
+    path: "/agent/v1/skills",
+    streaming: "no",
+    pagination: false,
+    multipart: true,
+    pathParams: [],
+    query: [],
+    body: {
+      required: true,
+      fields: [
+        {
+          name: "files",
+          type: "array",
+          itemType: "string",
+          required: true,
+          description: `Files to upload for the skill.
+
+All files must be in the same top-level directory and must include a SKILL.md
+file at the root of that directory.`
+        },
+        {
+          name: "display_name",
+          type: "string",
+          required: false,
+          description: "Human-readable, single-line label for the Skill. Maximum 255\ncharacters. Always set: derived from the SKILL.md frontmatter `name` when\nomitted at creation. Not unique."
+        }
+      ]
+    }
+  },
+  {
+    resource: "agent.skills",
+    method: "delete",
+    summary: "Delete skill",
+    description: "Delete a skill together with all of its versions. A skill that is still attached to an agent returns 409 RESOURCE_IN_USE naming up to 10 agent ids (the active or latest version of a non-archived agent counts); remove it from those agents first. Returns {id, type: skill_deleted}. skill_id comes from skills.create or skills.list.",
+    http: "DELETE",
+    path: "/agent/v1/skills/{skill_id}",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "skill_id",
+        sdkName: "skill_id"
+      }
+    ],
+    query: []
+  },
+  {
+    resource: "agent.skills",
+    method: "retrieve",
+    summary: "Get skill",
+    description: "Read one skill by id: its display_name, source and latest_version_id. skill_id comes from skills.create or skills.list. A skill of another organization, or a deleted one, returns 404 Skill not found.",
+    http: "GET",
+    path: "/agent/v1/skills/{skill_id}",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "skill_id",
+        sdkName: "skill_id"
+      }
+    ],
+    query: []
+  },
+  {
+    resource: "agent.skills.versions",
+    method: "list",
+    summary: "List skill versions",
+    description: "List the live versions of one skill, newest first, in pages of at most 100 (default 20). Each item carries the name and description read from the SKILL.md of that version. Pass next_page from the response as page to read the next page; a null next_page means the end.",
+    http: "GET",
+    path: "/agent/v1/skills/{skill_id}/versions",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "skill_id",
+        sdkName: "skill_id"
+      }
+    ],
+    query: [
+      {
+        name: "limit",
+        type: "number",
+        required: false,
+        description: "Number of items per page."
+      },
+      {
+        name: "page",
+        type: "string",
+        required: false,
+        description: "Opaque pagination cursor: pass the next_page value of the previous response unchanged. Omit it for the first page. A cursor from a different query or a malformed one returns 400."
+      }
+    ]
+  },
+  {
+    resource: "agent.skills.versions",
+    method: "create",
+    summary: "Create skill version",
+    description: "Upload a new version of a skill with the same multipart/form-data shape and limits as skills.create (8 MB, 200 files, one top-level directory containing SKILL.md). The SKILL.md name must equal the name of the skill; a different name returns 400. The new version becomes latest_version_id of the skill, and earlier versions stay unchanged because versions are immutable. Attach it to an agent with `skills` on the agent.",
+    http: "POST",
+    path: "/agent/v1/skills/{skill_id}/versions",
+    streaming: "no",
+    pagination: false,
+    multipart: true,
+    pathParams: [
+      {
+        name: "skill_id",
+        sdkName: "skill_id"
+      }
+    ],
+    query: [],
+    body: {
+      required: true,
+      fields: [
+        {
+          name: "files",
+          type: "array",
+          itemType: "string",
+          required: true,
+          description: `Files to upload for the skill.
+
+All files must be in the same top-level directory and must include a SKILL.md
+file at the root of that directory.`
+        }
+      ]
+    }
+  },
+  {
+    resource: "agent.skills.versions",
+    method: "delete",
+    summary: "Delete skill version",
+    description: "Soft-delete one version of a skill so it can no longer be read or downloaded; latest_version_id of the skill falls back to the newest remaining version. Returns {id, type: skill_version_deleted}. A skill keeps at least one version: deleting the last remaining version returns 409 SKILL_LAST_VERSION (delete the skill instead), so latest_version_id is never null. A version that a non-archived agent pins returns 409 RESOURCE_IN_USE naming the agents.",
+    http: "DELETE",
+    path: "/agent/v1/skills/{skill_id}/versions/{version}",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "skill_id",
+        sdkName: "skill_id"
+      },
+      {
+        name: "version",
+        sdkName: "version"
+      }
+    ],
+    query: []
+  },
+  {
+    resource: "agent.skills.versions",
+    method: "retrieve",
+    summary: "Get skill version",
+    description: "Read one version of a skill: its name, description and created_at as read from SKILL.md. version is the id returned by skills.versions.create or skills.versions.list. A deleted or unknown version returns 404 Skill version not found.",
+    http: "GET",
+    path: "/agent/v1/skills/{skill_id}/versions/{version}",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "skill_id",
+        sdkName: "skill_id"
+      },
+      {
+        name: "version",
+        sdkName: "version"
+      }
+    ],
+    query: []
+  },
+  {
+    resource: "agent.skills.versions",
+    method: "retrieveContent",
+    summary: "Download skill version",
+    description: "Download the content of one version as a zip archive (application/zip): the uploaded directory with its top-level folder and every file. version is the id returned by skills.versions.create or skills.versions.list; a deleted version returns 404.",
+    http: "GET",
+    path: "/agent/v1/skills/{skill_id}/versions/{version}/content",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "skill_id",
+        sdkName: "skill_id"
+      },
+      {
+        name: "version",
+        sdkName: "version"
+      }
+    ],
+    query: []
+  },
   {
     resource: "agent.toolsets",
     method: "list",
@@ -17577,6 +17931,57 @@ var unblockEndUser = (options) => (options.client ?? client).post({
   url: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}/unblock",
   ...options
 });
+var createCustomerGrantCode = (options) => (options.client ?? client).post({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/agents/{agent_id}/customers/auth/grant_codes",
+  ...options,
+  headers: {
+    "Content-Type": "application/json",
+    ...options.headers
+  }
+});
+var createCustomerAccessToken = (options) => (options.client ?? client).post({
+  url: "/agent/v1/agents/{agent_id}/customers/auth/access_tokens",
+  ...options,
+  headers: {
+    "Content-Type": "application/json",
+    ...options.headers
+  }
+});
+var renewCustomerAccessToken = (options) => (options.client ?? client).post({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/agents/{agent_id}/customers/auth/access_tokens/renew",
+  ...options
+});
+var deleteCurrentCustomerAccessToken = (options) => (options.client ?? client).delete({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/agents/{agent_id}/customers/auth/access_tokens/current",
+  ...options
+});
 var exchangeEmbedCode = (options) => (options.client ?? client).post({
   url: "/agent/v1/embed/exchange",
   ...options,
@@ -19655,6 +20060,133 @@ var deploymentsRun = (options) => (options.client ?? client).post({
   url: "/agent/v1/deployments/{deployment_id}/run",
   ...options
 });
+var skillsList = (options) => (options?.client ?? client).get({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/skills",
+  ...options
+});
+var skillsCreate = (options) => (options.client ?? client).post({
+  ...formDataBodySerializer,
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/skills",
+  ...options,
+  headers: {
+    "Content-Type": null,
+    ...options.headers
+  }
+});
+var skillsDelete = (options) => (options.client ?? client).delete({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/skills/{skill_id}",
+  ...options
+});
+var skillsRetrieve = (options) => (options.client ?? client).get({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/skills/{skill_id}",
+  ...options
+});
+var skillsVersionsList = (options) => (options.client ?? client).get({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/skills/{skill_id}/versions",
+  ...options
+});
+var skillsVersionsCreate = (options) => (options.client ?? client).post({
+  ...formDataBodySerializer,
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/skills/{skill_id}/versions",
+  ...options,
+  headers: {
+    "Content-Type": null,
+    ...options.headers
+  }
+});
+var skillsVersionsDelete = (options) => (options.client ?? client).delete({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/skills/{skill_id}/versions/{version}",
+  ...options
+});
+var skillsVersionsRetrieve = (options) => (options.client ?? client).get({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/skills/{skill_id}/versions/{version}",
+  ...options
+});
+var skillsVersionsDownload = (options) => (options.client ?? client).get({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/skills/{skill_id}/versions/{version}/content",
+  ...options
+});
 var applicationGetSubdomain = (options) => (options?.client ?? client).get({
   security: [{
     key: "application-bearerAuth",
@@ -23166,6 +23698,20 @@ function createAgent(transport) {
     agents: {
       archive: bind(transport, agentsArchive),
       create: bind(transport, agentsCreate),
+      customers: {
+        auth: {
+          accessTokens: {
+            create: bind(transport, createCustomerAccessToken),
+            deleteCurrent: bind(transport, deleteCurrentCustomerAccessToken),
+            renew: {
+              create: bind(transport, renewCustomerAccessToken)
+            }
+          },
+          grantCodes: {
+            create: bind(transport, createCustomerGrantCode)
+          }
+        }
+      },
       endUsers: {
         block: {
           create: bind(transport, blockEndUser)
@@ -23301,6 +23847,19 @@ function createAgent(transport) {
       },
       update: bind(transport, sessionsUpdate)
     },
+    skills: {
+      create: bind(transport, (options) => skillsCreate({ ...options, bodySerializer: multipartBodySerializer, headers: { "Content-Type": null, ...options.headers } })),
+      delete: bind(transport, skillsDelete),
+      list: bind(transport, skillsList),
+      retrieve: bind(transport, skillsRetrieve),
+      versions: {
+        create: bind(transport, (options) => skillsVersionsCreate({ ...options, bodySerializer: multipartBodySerializer, headers: { "Content-Type": null, ...options.headers } })),
+        delete: bind(transport, skillsVersionsDelete),
+        list: bind(transport, skillsVersionsList),
+        retrieve: bind(transport, skillsVersionsRetrieve),
+        retrieveContent: bind(transport, skillsVersionsDownload)
+      }
+    },
     toolsets: {
       list: bind(transport, listToolsets)
     }
@@ -25997,7 +26556,7 @@ function startProgress(ctx, write = (text) => writeOutput({ stderr: text })) {
 }
 
 // src/main.ts
-var version = "0.1.0-dev.331f4e7";
+var version = "0.1.0-dev.35d57f8";
 var commands = commandTree(operations);
 var manual = [["login"], ["logout"], ["whoami"], ["org", "list"], ["org", "switch"], ["api"], ["skill"]];
 function route(argv) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deepraxis/cli",
-  "version": "0.1.0-dev.331f4e7",
+  "version": "0.1.0-dev.35d57f8",
   "type": "module",
   "bin": {
     "praxis": "dist/praxis.js"