@deepraxis/cli 0.1.0-dev.98b03cc → 0.1.0-dev.9d9e2b6

package/dist/praxis.js

@@ -10,7 +10,7 @@ var operations = [
   {
     resource: "agent.agents",
     method: "list",
-    summary: "",
+    summary: "List agents",
     description: "List the agents of the workspace behind your API key, newest first, in pages of at most 100 (default 20). Use it to find an agent id before creating a session; to read one agent use agents.retrieve, to see its history use agents.versions.list. Archived agents are hidden unless include_archived is true. Filter kind=personal for durable-computer agents or kind=service for per-session environments. Pass next_page from the response as page to read the next page; a null next_page means the end.",
     http: "GET",
     path: "/agent/v1/agents",
@@ -67,7 +67,7 @@ var operations = [
   {
     resource: "agent.agents",
     method: "create",
-    summary: "",
+    summary: "Create agent",
     description: 'Create a reusable agent definition, then pass its returned id to sessions.create to start a conversation. The definition includes model, system prompt, tools, MCP servers and an optional multiagent roster. It is saved as version 1; real updates create new versions. Unlike Anthropic Managed Agents, nonempty skills attachments and custom tool entries return 400; the native skill tool is separate from the skills field. Use tools: [{type: "agent_toolset_20260401"}] for built-in tools including codemode, skill and agent; inspect toolsets.list for names and schemas, and keep bash enabled for native additions. To offer only some tools, set default_config: {enabled: false} and list the tools to keep in configs, e.g. tools: [{type: "agent_toolset_20260401", default_config: {enabled: false}, configs: [{name: "codemode", enabled: true}, {name: "bash", enabled: true, permission_policy: {type: "always_ask"}}]}]; every tool not listed, including todo_write, enter_plan_mode, ask_user_question and goal_read, follows default_config, and the response echoes it. codemode runs through bash, so enabling codemode while bash is disabled returns 400. Optional mcp_toolset entries pair with mcp_servers. model accepts platform model IDs such as deepseek-flash, not only the Claude IDs in the protocol examples. model.settings.reasoning sets default thinking; other extra model controls return 400. Example: {"name":"helper","model":{"id":"deepseek-flash"},"tools":[{"type":"agent_toolset_20260401"}]}.',
     http: "POST",
     path: "/agent/v1/agents",
@@ -101,7 +101,7 @@ var operations = [
           type: "array",
           itemType: "object",
           required: false,
-          description: "MCP servers this agent connects to. Maximum 20. Names must be unique\nwithin the array. Every server must be referenced by an `mcp_toolset` in\n`tools`; unreferenced servers are rejected. See the\n[MCP connector guide](https://platform.claude.com/docs/en/managed-agents/mcp-connector)."
+          description: "Praxis extension: HTTP, SSE or trusted stdio MCP servers paired with mcp_toolset entries and saved with the agent version."
         },
         {
           name: "metadata",
@@ -190,7 +190,7 @@ across all toolsets allowed.`
   {
     resource: "agent.agents",
     method: "retrieve",
-    summary: "",
+    summary: "Get agent",
     description: "Read one agent by id, at its latest version or, with version, at a specific earlier version. The response lists every native tool with its resolved configuration in one agent_toolset_20260401 entry, so it can be sent back unchanged to agents.update. Use agents.versions.list to enumerate versions.",
     http: "GET",
     path: "/agent/v1/agents/{agent_id}",
@@ -214,7 +214,7 @@ across all toolsets allowed.`
   {
     resource: "agent.agents",
     method: "update",
-    summary: "",
+    summary: "Update agent",
     description: "Update an agent. Send the current version in the body for optimistic concurrency: a stale version returns 409, and an update that changes nothing keeps the version number. Any real change saves a new version; existing sessions keep the version they were created with. Omitted fields keep their value. multiagent takes null or a coordinator roster; subagent_model keeps its value when omitted and is cleared by null. Archived agents cannot be updated. Unlike Anthropic Managed Agents, nonempty skills attachments and custom tools return 400; use the native skill tool for available runtime skills.",
     http: "POST",
     path: "/agent/v1/agents/{agent_id}",
@@ -241,7 +241,7 @@ across all toolsets allowed.`
           type: "array",
           itemType: "object",
           required: false,
-          description: "MCP servers. Full replacement. Omit to preserve; send empty array or\n`null` to clear. Names must be unique. Maximum 20. Every server must be\nreferenced by an `mcp_toolset` in the agent's resulting `tools`; unreferenced\nservers are rejected. See the\n[MCP connector guide](https://platform.claude.com/docs/en/managed-agents/mcp-connector)."
+          description: "Praxis extension: HTTP, SSE or trusted stdio MCP servers paired with mcp_toolset entries and saved with the agent version."
         },
         {
           name: "metadata",
@@ -355,7 +355,7 @@ current version; omit to apply the update unconditionally.`
   {
     resource: "agent.agents",
     method: "archive",
-    summary: "",
+    summary: "Archive agent",
     description: "Archive an agent so it can no longer be updated and no new session can be created from it (AGENT_ARCHIVED). The agent and all of its versions stay readable. Use it to retire an agent you no longer want to run; it does not delete anything.",
     http: "POST",
     path: "/agent/v1/agents/{agent_id}/archive",
@@ -372,7 +372,7 @@ current version; omit to apply the update unconditionally.`
   {
     resource: "agent.agents.versions",
     method: "list",
-    summary: "",
+    summary: "List agent versions",
     description: "List the saved versions of one agent, in pages of at most 100 (default 20). Each item is the full agent definition at that version, so you can compare what changed between versions. Use agents.retrieve with version to read a single one; agent_id comes from agents.list or agents.create.",
     http: "GET",
     path: "/agent/v1/agents/{agent_id}/versions",
@@ -648,7 +648,7 @@ Praxis extension: MA only has session-scoped temporary containers and memory_sto
   {
     resource: "agent.deploymentRuns",
     method: "list",
-    summary: "",
+    summary: "List deployment runs",
     description: "List deployment runs newest first. Filter by deployment_id, has_error, trigger_type (manual or schedule) and created_at[gt|gte|lt|lte]. The default limit is 20, maximum 100; pass next_page as page with the same filters to continue. Each record identifies the resolved agent version and either its session or creation error.",
     http: "GET",
     path: "/agent/v1/deployment_runs",
@@ -723,7 +723,7 @@ Praxis extension: MA only has session-scoped temporary containers and memory_sto
   {
     resource: "agent.deploymentRuns",
     method: "retrieve",
-    summary: "",
+    summary: "Get deployment run",
     description: "Read a deployment run by the drun_ id returned by deployments.run or deployment_runs.list. Exactly one of session_id and error is non-null. Scheduled runs include scheduled_at in trigger_context. Foreign or absent ids return 404.",
     http: "GET",
     path: "/agent/v1/deployment_runs/{deployment_run_id}",
@@ -740,7 +740,7 @@ Praxis extension: MA only has session-scoped temporary containers and memory_sto
   {
     resource: "agent.deployments",
     method: "list",
-    summary: "",
+    summary: "List deployments",
     description: "List stored deployments newest first. Filter by agent_id, status, or inclusive created_at bounds; status and include_archived cannot be combined, even when include_archived is false. The default limit is 20, maximum 100; pass next_page as page to continue. Archived deployments are hidden by default. Schedules show up to five future wall-clock occurrences, also while paused; archived schedules show none.",
     http: "GET",
     path: "/agent/v1/deployments",
@@ -804,8 +804,8 @@ archived).`
   {
     resource: "agent.deployments",
     method: "create",
-    summary: "",
-    description: "Freeze session parameters as a deployment; this operation does not open a session. Pass an agent id or versioned reference, a name, 1–50 user.message initial events and an environment_id from environments.list. Unlike Anthropic Managed Agents, /agent/v1 also accepts agent_with_overrides (model, permission_mode and cwd) and target=computer for personal agents, with environment_id omitted. Cron schedules use five POSIX fields and an IANA timezone. File resources and empty vault_ids are accepted. Active schedules run every minute when due; session creation errors pause the deployment. Unsupported tools, mcp_servers, system and skills overrides return 400.",
+    summary: "Create deployment",
+    description: "Freeze session parameters as a deployment; this operation does not open a session. Pass an agent id or versioned reference, a name, 1–50 user.message initial events and an environment_id from environments.list. Unlike Anthropic Managed Agents, /agent/v1 also accepts agent_with_overrides (model, permission_mode and cwd) and target=computer for personal agents, with environment_id omitted. Cron schedules use five POSIX fields and an IANA timezone. File resources are accepted. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Active schedules run every minute when due; session creation errors pause the deployment. Unsupported tools, mcp_servers, system and skills overrides return 400.",
     http: "POST",
     path: "/agent/v1/deployments",
     streaming: "no",
@@ -894,7 +894,7 @@ created from this deployment. Maximum 50.`
   {
     resource: "agent.deployments",
     method: "retrieve",
-    summary: "",
+    summary: "Get deployment",
     description: "Read a stored deployment by its depl_ id from deployments.create or deployments.list. The agent reference has a concrete version; own-face overrides are echoed unchanged. This read recomputes upcoming schedule times and does not execute the deployment. Foreign or absent ids return 404.",
     http: "GET",
     path: "/agent/v1/deployments/{deployment_id}",
@@ -911,7 +911,7 @@ created from this deployment. Maximum 50.`
   {
     resource: "agent.deployments",
     method: "update",
-    summary: "",
+    summary: "Update deployment",
     description: "Partially update a deployment. Omitted fields keep their values; a supplied agent id re-pins the latest version, or supply a versioned reference. Metadata merges string values and deletes keys set to null. Null clears schedule, resources and description; name, environment_id and initial_events cannot be cleared. Archived deployments return 409. Overrides apply to new sessions; updating a schedule recalculates its next occurrence.",
     http: "POST",
     path: "/agent/v1/deployments/{deployment_id}",
@@ -1009,7 +1009,7 @@ null to clear. Maximum 50.`
   {
     resource: "agent.deployments",
     method: "archive",
-    summary: "",
+    summary: "Archive deployment",
     description: "Archive a deployment by its depl_ id. Repeated calls are idempotent; archived deployments remain readable and have no upcoming schedule times. Subsequent update, pause and unpause calls return 409. This operation does not create a deployment run.",
     http: "POST",
     path: "/agent/v1/deployments/{deployment_id}/archive",
@@ -1026,7 +1026,7 @@ null to clear. Maximum 50.`
   {
     resource: "agent.deployments",
     method: "pause",
-    summary: "",
+    summary: "Pause deployment",
     description: "Pause an active deployment and set paused_reason to {type: manual}. Repeated pause calls are idempotent; archived deployments return 409. Upcoming schedule times remain visible while paused; no run is executed.",
     http: "POST",
     path: "/agent/v1/deployments/{deployment_id}/pause",
@@ -1043,7 +1043,7 @@ null to clear. Maximum 50.`
   {
     resource: "agent.deployments.run",
     method: "create",
-    summary: "",
+    summary: "Run deployment",
     description: "Create one session from an active deployment using its pinned agent version and stored parameters. Pass the depl_ id from deployments.create or deployments.list; no request body is needed. Returns a drun_ record with exactly one of session_id or error populated. Creation errors automatically pause the deployment; paused or archived deployments return 409 without a run. Unlike the own face, the compatible face rejects computer targets with 400.",
     http: "POST",
     path: "/agent/v1/deployments/{deployment_id}/run",
@@ -1060,7 +1060,7 @@ null to clear. Maximum 50.`
   {
     resource: "agent.deployments.unpause",
     method: "create",
-    summary: "",
+    summary: "Unpause deployment",
     description: "Resume a paused deployment and clear paused_reason. Repeated unpause calls on an active deployment are idempotent; archived deployments return 409. This operation changes resource state only and does not execute a run.",
     http: "POST",
     path: "/agent/v1/deployments/{deployment_id}/unpause",
@@ -1074,6 +1074,45 @@ null to clear. Maximum 50.`
     ],
     query: []
   },
+  {
+    resource: "agent.embedTokens",
+    method: "list",
+    summary: "List Embed Tokens",
+    description: `List embed token issuance records in your organization.
+
+Includes expired and revoked grants; returns neither token nor token_id. Sorts by created_at, then grant id, both descending. agent_id accepts agent_ or agt_; external_user_id matches exactly. limit is 1–100 (default 20). Reuse next_page as page with the same filters and organization; a mismatch returns 400. End-user credentials return 404.`,
+    http: "GET",
+    path: "/agent/v1/embed_tokens",
+    streaming: "no",
+    pagination: false,
+    pathParams: [],
+    query: [
+      {
+        name: "agent_id",
+        type: "string",
+        required: false,
+        description: "Filter by service agent identifier (agent_ or agt_ prefix)."
+      },
+      {
+        name: "external_user_id",
+        type: "string",
+        required: false,
+        description: "Exact host user identifier supplied at issuance."
+      },
+      {
+        name: "limit",
+        type: "integer",
+        required: false,
+        description: "Maximum records per page; defaults to 20."
+      },
+      {
+        name: "page",
+        type: "string",
+        required: false,
+        description: "next_page from a previous response with the same filters."
+      }
+    ]
+  },
   {
     resource: "agent.embedTokens",
     method: "create",
@@ -1149,10 +1188,29 @@ Requires an active service agent in your organization with an embed policy. Pins
       ]
     }
   },
+  {
+    resource: "agent.embedTokens.revoke",
+    method: "create",
+    summary: "Revoke Embed Token",
+    description: `Revoke an embed token and close its open event streams.
+
+Use an id from issuance or listing. Revokes the credential before setting revoked_at; upstream failure leaves it unset. Streams receive session.error (EMBED_TOKEN_REVOKED), then close immediately; other credentials are unaffected. Idempotent; repeats return the original revoked record without another revocation or audit. Missing or foreign grants and end-user credentials return 404.`,
+    http: "POST",
+    path: "/agent/v1/embed_tokens/{id}/revoke",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "id",
+        sdkName: "id"
+      }
+    ],
+    query: []
+  },
   {
     resource: "agent.environments",
     method: "list",
-    summary: "",
+    summary: "List environments",
     description: "List execution environments: the built-in recipes and the tenant-owned cloud environments that a session can run in. Archived environments are hidden unless include_archived is true. Pages hold at most 100 items (default 20); pass next_page as page to continue. Use the returned id as environment_id when creating a session.",
     http: "GET",
     path: "/agent/v1/environments",
@@ -1187,7 +1245,7 @@ Requires an active service agent in your organization with an embed policy. Pins
   {
     resource: "agent.environments",
     method: "create",
-    summary: "",
+    summary: "Create environment",
     description: "Create a tenant-owned cloud environment: a sandbox recipe (packages to install and networking policy) that sessions can select through environment_id. Package installation happens when the session's sandbox is created; a failed install terminates that session with ENVIRONMENT_PACKAGE_INSTALL_FAILED. Limited networking is applied at sandbox creation. Unlike Anthropic Managed Agents, self_hosted environments, scope and cross-session package caching are not supported.",
     http: "POST",
     path: "/agent/v1/environments",
@@ -1241,7 +1299,7 @@ rejected. If not specified, defaults based on organization type.`
   {
     resource: "agent.environments",
     method: "retrieve",
-    summary: "",
+    summary: "Get environment",
     description: "Read one environment's configuration and status by id. Built-in environments are readable but never editable; tenant-owned ones can be updated or archived. environment_id comes from environments.list or environments.create.",
     http: "GET",
     path: "/agent/v1/environments/{environment_id}",
@@ -1258,7 +1316,7 @@ rejected. If not specified, defaults based on organization type.`
   {
     resource: "agent.environments",
     method: "update",
-    summary: "",
+    summary: "Update environment",
     description: "Update the configuration of a tenant-owned cloud environment. Built-in environments are read-only. Package installation and limited networking are applied when a session's sandbox is created. Omitted fields keep their value.",
     http: "POST",
     path: "/agent/v1/environments/{environment_id}",
@@ -1317,7 +1375,7 @@ owning account only.`
   {
     resource: "agent.environments",
     method: "archive",
-    summary: "",
+    summary: "Archive environment",
     description: "Soft-archive a tenant-owned cloud environment so it can no longer be used to create new sessions. Built-in environments are read-only and cannot be archived.",
     http: "POST",
     path: "/agent/v1/environments/{environment_id}/archive",
@@ -1334,7 +1392,7 @@ owning account only.`
   {
     resource: "agent.sessions",
     method: "list",
-    summary: "",
+    summary: "List sessions",
     description: "List sessions of the workspace behind your API key, newest first, in pages of at most 100 (default 20). Unlike Anthropic Managed Agents, only limit, page, agent_id and deployment_id are honored; the other filters declared here (agent_version, created_at ranges, memory_store_id, include_archived, order, statuses) are not supported and return 400. Use the returned id with sessions.retrieve or sessions.events.list; pass next_page as page for the next page.",
     http: "GET",
     path: "/agent/v1/sessions",
@@ -1440,8 +1498,8 @@ owning account only.`
   {
     resource: "agent.sessions",
     method: "create",
-    summary: "",
-    description: `Create a session: one conversation with an agent, running on a machine. Pass agent as an agent id (latest version) or {id, version, type:"agent"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass environment_id for a sandbox recipe. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides and nonempty vault_ids are not supported. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.`,
+    summary: "Create session",
+    description: `Create a session: one conversation with an agent, running on a machine. Pass agent as an agent id (latest version) or {id, version, type:"agent"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass environment_id for a sandbox recipe. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.`,
     http: "POST",
     path: "/agent/v1/sessions",
     streaming: "no",
@@ -1544,7 +1602,7 @@ offsets ("+08:00") and unknown names return 400. Never stored in
   {
     resource: "agent.sessions",
     method: "retrieve",
-    summary: "",
+    summary: "Get session",
     description: "Read one session by id: its agent snapshot, status, model and thinking selection, resources, title, metadata and, for a fork, forked_from. Use it to poll status; to read what happened use sessions.events.list. This response does not include a machine object or sandbox id. With no environment_id or Computer selected at creation, the session starts on a light machine; no environment lookup or provisioning is needed for a codemode calculation.",
     http: "GET",
     path: "/agent/v1/sessions/{session_id}",
@@ -1561,8 +1619,8 @@ offsets ("+08:00") and unknown names return 400. Never stored in
   {
     resource: "agent.sessions",
     method: "update",
-    summary: "",
-    description: "Update a session's title, metadata, model or thinking selection. metadata follows patch semantics: a string value sets the key, null deletes it, a null metadata clears all keys, untouched keys stay. model must be allowed by the session's agent version; thinking is {effort} or null (null restores inheritance); a model-only change clears a session thinking that the new model does not support, and combined changes are validated against the new model, with the previous selection kept on a 400. Changes apply from the next turn, not to a turn already running. Agent overrides and nonempty vault_ids are not supported (400 naming the field). A budget limit must exceed consumed cost; null removes it permanently for this session. Updating an archived session returns 409.",
+    summary: "Update session",
+    description: "Update a session's title, metadata, model or thinking selection. metadata follows patch semantics: a string value sets the key, null deletes it, a null metadata clears all keys, untouched keys stay. model must be allowed by the session's agent version; thinking is {effort} or null (null restores inheritance); a model-only change clears a session thinking that the new model does not support, and combined changes are validated against the new model, with the previous selection kept on a 400. Changes apply from the next turn, not to a turn already running. Agent overrides are not supported (400 naming the field). Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. A budget limit must exceed consumed cost; null removes it permanently for this session. Updating an archived session returns 409.",
     http: "POST",
     path: "/agent/v1/sessions/{session_id}",
     streaming: "no",
@@ -1627,7 +1685,7 @@ delete it. Omit the field to preserve.`
   {
     resource: "agent.sessions",
     method: "archive",
-    summary: "",
+    summary: "Archive session",
     description: "Archive a session. An archived session refuses new messages with 400 invalid_request_error, while its details and event history stay readable. Archiving again is idempotent and archived_at keeps the first archive time. Use it when a conversation is finished; it does not delete anything.",
     http: "POST",
     path: "/agent/v1/sessions/{session_id}/archive",
@@ -1813,7 +1871,7 @@ Praxis extension available only on /agent/v1, following Claude Agent SDK getCont
   {
     resource: "agent.sessions.events",
     method: "list",
-    summary: "",
+    summary: "List session events",
     description: "Read the event history of a session as a page of events, oldest first by default (order=desc for newest first). Use it after sending a message to collect the reply, to find tool calls that wait for approval (session.status_idle with stop_reason requires_action lists their event_ids), or to audit a run; to follow a running session live use sessions.events.stream instead. Filter by types and by a created_at range on processed_at; pages hold at most 100 events (default 20) and next_page continues. A failed run emits session.error before session.status_terminated. Native history also includes user.steer, user.withdraw, system.notification, session.forked, session.goal_changed and session.goal_verification; these are not accepted by the /anthropic/v1 event-type filter.",
     http: "GET",
     path: "/agent/v1/sessions/{session_id}/events",
@@ -1884,7 +1942,7 @@ Praxis extension available only on /agent/v1, following Claude Agent SDK getCont
   {
     resource: "agent.sessions.events",
     method: "send",
-    summary: "",
+    summary: "Send session events",
     description: 'Send events to a session: user.message (exactly one nonempty text block), user.interrupt, user.tool_confirmation to allow or deny a pending tool call, user.steer to inject a queued user.message into a turn that is still running, and user.withdraw to retract a queued message. The response only acknowledges the inputs; read replies with sessions.events.list or sessions.events.stream. A message sent while the session waits for tool approval is queued (processed_at null) and runs in order after the approval is resolved. Archived sessions reject new messages. To approve, read a pending agent.tool_use or agent.mcp_tool_use event and send {type: "user.tool_confirmation", tool_use_id: <that event id>, result: "allow"} (or deny); include session_thread_id for a child approval. Native confirmations also accept updated_permissions, answers and annotations, which /anthropic/v1 rejects.',
     http: "POST",
     path: "/agent/v1/sessions/{session_id}/events",
@@ -1913,7 +1971,7 @@ Praxis extension available only on /agent/v1, following Claude Agent SDK getCont
   {
     resource: "agent.sessions.events",
     method: "stream",
-    summary: "",
+    summary: "Stream session events",
     description: "Open a Server-Sent Events stream of a session's events in real time. Use it to show a reply as it is produced; to read past events use sessions.events.list. Send a message through sessions.events.send in another request while the stream is open. Closing the stream only drops your subscription and does not stop the agent. Pass event_deltas[]=agent.message, agent.thinking or agent.tool_use to also receive event_start / event_delta previews before the final event.",
     http: "GET",
     path: "/agent/v1/sessions/{session_id}/events/stream",
@@ -1972,7 +2030,7 @@ Available only on /agent/v1. Use the message_id field from own-face events, not
   {
     resource: "agent.sessions.resources",
     method: "list",
-    summary: "",
+    summary: "List session resources",
     description: "List the extra resources (file references) attached to a session, oldest first, at most 1000 per page (default 1000). Use the returned id with sessions.resources.retrieve or sessions.resources.delete; next_page continues a truncated list.",
     http: "GET",
     path: "/agent/v1/sessions/{session_id}/resources",
@@ -2002,7 +2060,7 @@ Available only on /agent/v1. Use the message_id field from own-face events, not
   {
     resource: "agent.sessions.resources",
     method: "create",
-    summary: "",
+    summary: "Add session resource",
     description: "Attach a file resource to a session by file_id, up to 500 per session. The file must exist and belong to your tenant. It is mounted under /mnt/session/uploads/<file_id> unless mount_path is given; custom paths are rooted there and parent traversal is rejected. File content is immutable through this API, and synchronizing it into a running sandbox is not implemented in this version.",
     http: "POST",
     path: "/agent/v1/sessions/{session_id}/resources",
@@ -2046,7 +2104,7 @@ Available only on /agent/v1. Use the message_id field from own-face events, not
   {
     resource: "agent.sessions.resources",
     method: "delete",
-    summary: "",
+    summary: "Delete session resource",
     description: "Detach a resource from a session. Only the reference is removed; the underlying file is not deleted. The response is {id, type: session_resource_deleted}. resource_id comes from sessions.resources.list or the add call.",
     http: "DELETE",
     path: "/agent/v1/sessions/{session_id}/resources/{resource_id}",
@@ -2075,7 +2133,7 @@ Available only on /agent/v1. Use the message_id field from own-face events, not
   {
     resource: "agent.sessions.resources",
     method: "retrieve",
-    summary: "",
+    summary: "Get session resource",
     description: "Read one resource attached to a session: its type, file_id, mount_path and timestamps. resource_id comes from sessions.resources.list or sessions.resources.add.",
     http: "GET",
     path: "/agent/v1/sessions/{session_id}/resources/{resource_id}",
@@ -2101,10 +2159,77 @@ Available only on /agent/v1. Use the message_id field from own-face events, not
       }
     ]
   },
+  {
+    resource: "agent.sessions.runs",
+    method: "deleteFeedback",
+    summary: "Delete Run Feedback",
+    description: `Remove the rating and comment for a run.
+
+Own-face extension. Use the session id from session creation or listing and the run_id from its events. Requires a readable session and a run belonging to it. Idempotent; returns 204 even when no feedback exists. End users can delete feedback only for their own sessions. Does not delete the run or messages, enter model context, or start another run.`,
+    http: "DELETE",
+    path: "/agent/v1/sessions/{session_id}/runs/{run_id}/feedback",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "session_id",
+        sdkName: "session_id"
+      },
+      {
+        name: "run_id",
+        sdkName: "run_id"
+      }
+    ],
+    query: []
+  },
+  {
+    resource: "agent.sessions.runs.feedback",
+    method: "create",
+    summary: "Set Run Feedback",
+    description: `Submit thumbs up or thumbs down for a run, with an optional comment.
+
+Own-face extension. Use a readable session and a run_id from its events. Each submission replaces the previous rating and comment; omitted or null comment clears it, while created_at is preserved. Comments allow at most 2000 Unicode characters. End users can submit only for their own sessions. Feedback never enters model context or starts a run. For example, submit {"rating":"positive","comment":"Helpful"}. POST follows Managed Agents resource update conventions; the resource remains unique per session and run.`,
+    http: "POST",
+    path: "/agent/v1/sessions/{session_id}/runs/{run_id}/feedback",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "session_id",
+        sdkName: "session_id"
+      },
+      {
+        name: "run_id",
+        sdkName: "run_id"
+      }
+    ],
+    query: [],
+    body: {
+      required: true,
+      fields: [
+        {
+          name: "rating",
+          type: "string",
+          enum: [
+            "positive",
+            "negative"
+          ],
+          required: true,
+          description: "positive means thumbs up; negative means thumbs down for this run."
+        },
+        {
+          name: "comment",
+          type: "string",
+          required: false,
+          description: "Optional comment, at most 2000 Unicode characters. Omit or send null to clear the previous comment."
+        }
+      ]
+    }
+  },
   {
     resource: "agent.sessions.threads",
     method: "list",
-    summary: "",
+    summary: "List session threads",
     description: "List the execution threads of a session: the primary thread plus every child thread started by subagents or advisors, in created_at order. Child threads reference the primary through parent_thread_id. Pages hold at most 100 threads (default 20). Use a thread id with sessions.threads.retrieve, sessions.threads.events.list or sessions.threads.events.stream.",
     http: "GET",
     path: "/agent/v1/sessions/{session_id}/threads",
@@ -2134,7 +2259,7 @@ Available only on /agent/v1. Use the message_id field from own-face events, not
   {
     resource: "agent.sessions.threads",
     method: "retrieve",
-    summary: "",
+    summary: "Get session thread",
     description: "Read one execution thread of a session, field for field the same as its list item. Thread ids that are unknown, malformed or belong to another session all return 404, so existence is not revealed. thread_id comes from sessions.threads.list or from the session_thread_id of a session.thread_created event.",
     http: "GET",
     path: "/agent/v1/sessions/{session_id}/threads/{thread_id}",
@@ -2163,7 +2288,7 @@ Available only on /agent/v1. Use the message_id field from own-face events, not
   {
     resource: "agent.sessions.threads",
     method: "archive",
-    summary: "",
+    summary: "Archive session thread",
     description: "Archive one execution thread. Archiving the primary thread archives the session; archiving a child archives only that child, leaving the parent and its siblings untouched. An archived child has status terminated and archived_at set, receives no new events and keeps its history readable.",
     http: "POST",
     path: "/agent/v1/sessions/{session_id}/threads/{thread_id}/archive",
@@ -2192,7 +2317,7 @@ Available only on /agent/v1. Use the message_id field from own-face events, not
   {
     resource: "agent.sessions.threads.events",
     method: "list",
-    summary: "",
+    summary: "List session thread events",
     description: "Read the event history of one execution thread: the session itself for the primary thread, or the child session for a child thread. It accepts the same filters, ordering and paging as sessions.events.list and returns the same data + next_page envelope. Child approvals carry session_thread_id so you can route a confirmation to the owning thread.",
     http: "GET",
     path: "/agent/v1/sessions/{session_id}/threads/{thread_id}/events",
@@ -2233,7 +2358,7 @@ Available only on /agent/v1. Use the message_id field from own-face events, not
   {
     resource: "agent.sessions.threads",
     method: "stream",
-    summary: "",
+    summary: "Stream session thread events",
     description: "Open a Server-Sent Events stream of one execution thread's live events, using the same implementation as sessions.events.stream; a read-only WebSocket is also available on this path. The parent session stream additionally carries child creation, status and message events. Pass event_deltas[]=agent.message, agent.thinking or agent.tool_use for incremental previews.",
     http: "GET",
     path: "/agent/v1/sessions/{session_id}/threads/{thread_id}/stream",
@@ -11541,6 +11666,50 @@ for more details.`
     ],
     query: []
   },
+  {
+    resource: "organization.feedback",
+    method: "list",
+    summary: "List your organization's feedback",
+    description: "Feedback submitted by your organization, newest first, with phase and unread state. Filter by phase and search titles and message text (case-insensitive). Page with next_page. Requires a valid API key, Console session, or machine token of the organization.",
+    http: "GET",
+    path: "/organization/v1/feedback",
+    streaming: "no",
+    pagination: false,
+    pathParams: [],
+    query: [
+      {
+        name: "phase",
+        type: "string",
+        enum: [
+          "open",
+          "awaiting_customer",
+          "in_progress",
+          "resolved",
+          "closed"
+        ],
+        required: false,
+        description: "Only feedback in this phase: open, awaiting_customer, in_progress, resolved or closed; see the phase field of a feedback for what each means."
+      },
+      {
+        name: "query",
+        type: "string",
+        required: false,
+        description: "Case-insensitive text matched against titles and message bodies."
+      },
+      {
+        name: "limit",
+        type: "integer",
+        required: false,
+        description: "Items per page, 1 to 100."
+      },
+      {
+        name: "page",
+        type: "string",
+        required: false,
+        description: "Opaque cursor from next_page of the previous response."
+      }
+    ]
+  },
   {
     resource: "organization.feedback",
     method: "create",
@@ -11585,6 +11754,18 @@ for more details.`
           required: false,
           description: "X-Request-Id from the failed response or the related error event ID."
         },
+        {
+          name: "title",
+          type: "string",
+          required: false,
+          description: "Short summary shown in the feedback list; at most 200 Unicode code points."
+        },
+        {
+          name: "type",
+          type: "string",
+          required: false,
+          description: "Feedback type key enabled in the help settings, such as issue, suggestion, billing or other. Unknown or disabled keys are rejected with INVALID_PARAMS."
+        },
         {
           name: "tags",
           type: "object",
@@ -11617,6 +11798,88 @@ for more details.`
       ]
     }
   },
+  {
+    resource: "organization.feedback",
+    method: "retrieve",
+    summary: "Get one of your organization's feedback",
+    description: "Read one feedback submitted by your organization with its current phase and first-response timing. Another organization's feedback answers 404 FEEDBACK_NOT_FOUND exactly like a missing one.",
+    http: "GET",
+    path: "/organization/v1/feedback/{id}",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "id",
+        sdkName: "id"
+      }
+    ],
+    query: []
+  },
+  {
+    resource: "organization.feedback.messages",
+    method: "list",
+    summary: "List the messages of a feedback",
+    description: "The conversation of one feedback in time order: your messages, support replies and system events. Internal support notes are never returned. Page with next_page.",
+    http: "GET",
+    path: "/organization/v1/feedback/{id}/messages",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "id",
+        sdkName: "id"
+      }
+    ],
+    query: [
+      {
+        name: "limit",
+        type: "integer",
+        required: false,
+        description: "Items per page, 1 to 100."
+      },
+      {
+        name: "page",
+        type: "string",
+        required: false,
+        description: "Opaque cursor from next_page of the previous response."
+      }
+    ]
+  },
+  {
+    resource: "organization.feedback.messages",
+    method: "create",
+    summary: "Reply on a feedback",
+    description: "Add your message to a feedback conversation, for example to answer a question from support. A reply while the phase is awaiting_customer moves it to in_progress and notifies support.",
+    http: "POST",
+    path: "/organization/v1/feedback/{id}/messages",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "id",
+        sdkName: "id"
+      }
+    ],
+    query: [],
+    body: {
+      required: true,
+      fields: [
+        {
+          name: "body",
+          type: "string",
+          required: true,
+          description: "Markdown text; at most 4096 Unicode code points."
+        },
+        {
+          name: "attachments",
+          type: "array",
+          itemType: "object",
+          required: false,
+          description: "Up to five attachments; decoded bytes must not exceed 10 MiB each or 20 MiB in total."
+        }
+      ]
+    }
+  },
   {
     resource: "organization.usage",
     method: "list",
@@ -14839,6 +15102,49 @@ var createClient = (config = {}) => {
 var client = createClient(createConfig({ baseUrl: "https://api.deepraxis.com" }));
 
 // ../../packages/sdk/typescript/src/generated/sdk.gen.ts
+var deleteRunFeedback = (options) => (options.client ?? client).delete({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/sessions/{session_id}/runs/{run_id}/feedback",
+  ...options
+});
+var setRunFeedback = (options) => (options.client ?? client).post({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/sessions/{session_id}/runs/{run_id}/feedback",
+  ...options,
+  headers: {
+    "Content-Type": "application/json",
+    ...options.headers
+  }
+});
+var listEmbedTokens = (options) => (options?.client ?? client).get({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/embed_tokens",
+  ...options
+});
 var createEmbedToken = (options) => (options.client ?? client).post({
   security: [{
     key: "BearerAuth",
@@ -14856,6 +15162,19 @@ var createEmbedToken = (options) => (options.client ?? client).post({
     ...options.headers
   }
 });
+var revokeEmbedToken = (options) => (options.client ?? client).post({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/embed_tokens/{id}/revoke",
+  ...options
+});
 var computersList = (options) => (options?.client ?? client).get({
   security: [{
     key: "BearerAuth",
@@ -15862,6 +16181,19 @@ var countResponseInputTokens = (options) => (options.client ?? client).post({
     ...options.headers
   }
 });
+var listOrganizationFeedback = (options) => (options?.client ?? client).get({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/organization/v1/feedback",
+  ...options
+});
 var createOrganizationFeedback = (options) => (options.client ?? client).post({
   security: [{
     key: "BearerAuth",
@@ -15879,6 +16211,49 @@ var createOrganizationFeedback = (options) => (options.client ?? client).post({
     ...options.headers
   }
 });
+var getOrganizationFeedback = (options) => (options.client ?? client).get({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/organization/v1/feedback/{id}",
+  ...options
+});
+var listOrganizationFeedbackMessages = (options) => (options.client ?? client).get({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/organization/v1/feedback/{id}/messages",
+  ...options
+});
+var createOrganizationFeedbackMessage = (options) => (options.client ?? client).post({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/organization/v1/feedback/{id}/messages",
+  ...options,
+  headers: {
+    "Content-Type": "application/json",
+    ...options.headers
+  }
+});
 var listOrganizationCosts = (options) => (options.client ?? client).get({
   security: [{
     key: "BearerAuth",
@@ -19673,7 +20048,11 @@ function createAgent(transport) {
       update: bind(transport, deploymentsUpdate)
     },
     embedTokens: {
-      create: bind(transport, createEmbedToken)
+      create: bind(transport, createEmbedToken),
+      list: bind(transport, listEmbedTokens),
+      revoke: {
+        create: bind(transport, revokeEmbedToken)
+      }
     },
     environments: {
       archive: bind(transport, environmentsArchive),
@@ -19710,6 +20089,12 @@ function createAgent(transport) {
       retrieve: bind(transport, sessionsRetrieve),
       retrieveCompact: bind(transport, getSessionCompaction),
       retrieveContext: bind(transport, getSessionContext),
+      runs: {
+        deleteFeedback: bind(transport, deleteRunFeedback),
+        feedback: {
+          create: bind(transport, setRunFeedback)
+        }
+      },
       threads: {
         archive: bind(transport, aliasOperation(sessionsThreadsArchive, { query: { session_id: "query_session_id" } })),
         events: {
@@ -20184,7 +20569,13 @@ function createOrganization(transport) {
       retrieve: bind(transport, getOrganizationEvent)
     },
     feedback: {
-      create: bind(transport, createOrganizationFeedback)
+      create: bind(transport, createOrganizationFeedback),
+      list: bind(transport, listOrganizationFeedback),
+      messages: {
+        create: bind(transport, createOrganizationFeedbackMessage),
+        list: bind(transport, listOrganizationFeedbackMessages)
+      },
+      retrieve: bind(transport, getOrganizationFeedback)
     },
     usage: {
       list: bind(transport, listOrganizationUsage)
@@ -22374,7 +22765,7 @@ function startProgress(ctx, write = (text) => writeOutput({ stderr: text })) {
 }
 
 // src/main.ts
-var version = "0.1.0-dev.98b03cc";
+var version = "0.1.0-dev.9d9e2b6";
 var commands = commandTree(operations);
 var manual = [["login"], ["logout"], ["whoami"], ["org", "list"], ["org", "switch"], ["api"], ["skill"]];
 function route(argv) {