@deepraxis/sdk 0.1.0-dev.449ac38 → 0.1.0-dev.48c1ce8

package/dist/helpers/application-publish.d.ts

@@ -1,5 +1,5 @@
 import type { Praxis } from '../core/client.js';
-import type { ApplicationAssetsConfig, ApplicationBinding } from '../generated/types.gen.js';
+import type { ApplicationAssetsConfig, ApplicationBinding, ApplicationVersion } from '../generated/types.gen.js';
 export type AssetsConfig = ApplicationAssetsConfig;
 export interface PublishInput {
     /** 应用名；存在同名应用时复用。 */
@@ -20,16 +20,32 @@ export interface PublishInput {
     bindings?: ApplicationBinding[];
     /** 静态资源路由配置，原样传递。 */
     assets_config?: AssetsConfig;
+    /** Register an upload session to plan changes; do not upload content or publish. Requires an existing application. */
+    dryRun?: boolean;
+    /** Preserve current paths omitted from files. Defaults to false (whole-site replacement). */
+    keepExisting?: boolean;
     /** 是否等待部署完成，默认 true。 */
     wait?: boolean;
     /** 部署等待上限（毫秒），默认 120000。超时不会撤销部署。 */
     timeout_ms?: number;
 }
 export interface PublishResult {
+    /** True when a static-only publication matches the active version. */
+    unchanged?: boolean;
+    /** Current version when unchanged or planning an existing deployment. */
+    version?: ApplicationVersion;
+    /** dryRun compares against the active version; counts are distinct content hashes. */
+    plan?: {
+        added: string[];
+        changed: string[];
+        removed: string[];
+        upload_hashes: number;
+        existing_hashes: number;
+    };
     url: string;
     worker_id: string;
-    version_id: string;
-    deployment_id: string;
+    version_id: string | null;
+    deployment_id: string | null;
     status: string;
     created: boolean;
     /** 本次上传的不同内容 hash 数量。 */
@@ -37,5 +53,9 @@ export interface PublishResult {
     /** 服务端已存在的不同内容 hash 数量。 */
     reused: number;
 }
-/** Publish through the public SDK resources, including content-addressed incremental uploads. */
+/** Publish with whole-site replacement by default; keepExisting preserves omitted paths.
+ * dryRun registers an idempotent upload session (stores its manifest), but uploads no content and does not publish.
+ * The platform does not support gradual rollout. Roll back using workers.deployments.create with
+ * strategy: 'percentage', versions: [{ version_id: previousVersionId, percentage: 100 }], while artifacts are retained.
+ */
 export declare function publish(client: Pick<Praxis, 'application'>, input: PublishInput): Promise<PublishResult>;

package/dist/helpers/application-publish.js

@@ -8,8 +8,16 @@ function base64(bytes) {
     }
     return btoa(chunks.join(''));
 }
-/** Publish through the public SDK resources, including content-addressed incremental uploads. */
+/** Publish with whole-site replacement by default; keepExisting preserves omitted paths.
+ * dryRun registers an idempotent upload session (stores its manifest), but uploads no content and does not publish.
+ * The platform does not support gradual rollout. Roll back using workers.deployments.create with
+ * strategy: 'percentage', versions: [{ version_id: previousVersionId, percentage: 100 }], while artifacts are retained.
+ */
 export async function publish(client, input) {
+    const rolloutFields = ['gradual', 'gradualRollout', 'gradual_rollout', 'canary', 'rollout', 'percentage', 'percent', 'traffic', 'traffic_percentage', 'strategy', 'versions'];
+    if (Object.keys(input).some(key => rolloutFields.includes(key) || /percentage|percent|canary|gradual|rollout|灰度/i.test(key))) {
+        throw new PraxisError({ code: 'INVALID_PARAMS', message: '平台不支持灰度 (gradual rollout is not supported). Roll back with praxis.application.workers.deployments.create({ path: { worker_id }, body: { strategy: "percentage", versions: [{ version_id: previousVersionId, percentage: 100 }] } }); the previous version artifacts must still be retained.' });
+    }
     const timeout = input.timeout_ms ?? 120_000;
     if (!Number.isFinite(timeout) || timeout < 0)
         throw new RangeError('timeout_ms must be non-negative and finite');
@@ -21,7 +29,7 @@ export async function publish(client, input) {
     const files = Object.entries(input.files);
     if (files.length > 100_000)
         throw new PraxisError({ code: 'LIMIT_EXCEEDED', message: 'At most 100000 asset paths can be published' });
-    const manifest = {};
+    let manifest = {};
     const contents = new Map();
     for (const [path, content] of files) {
         const normalized = path.startsWith('/') ? path : `/${path}`;
@@ -44,9 +52,51 @@ export async function publish(client, input) {
         }
     }
     const created = !worker;
+    if (!worker && input.dryRun)
+        throw new PraxisError({ code: 'NOT_FOUND', message: '请先创建应用 (create the application before dryRun)' });
     worker ??= await workers.create({ body: { name: input.name, subdomain: { enabled: true } } });
     const path = { worker_id: worker.id };
+    let currentVersion;
+    let currentDeployment;
+    let previous = {};
+    if (worker.praxis?.current_deployment_id) {
+        currentDeployment = await workers.deployments.retrieve({ path: { ...path, deployment_id: worker.praxis.current_deployment_id } });
+        const active = currentDeployment.versions[0];
+        if (!active)
+            throw new PraxisError({ code: 'INVALID_RESPONSE', message: 'Current deployment has no version' });
+        currentVersion = await workers.versions.retrieve({ path: { ...path, version_id: active.version_id } });
+        previous = (await workers.versions.assets.retrieveManifest({ path: { ...path, version_id: active.version_id } })).manifest;
+    }
+    // Keep the stored path order: the service hashes JSON.stringify(manifest), including property order.
+    // Reordered input with identical paths must still hash to the active version's manifest_hash.
+    manifest = {
+        ...Object.fromEntries(Object.entries(previous).filter(([key]) => input.keepExisting || Object.hasOwn(manifest, key))),
+        ...manifest,
+    };
+    if (Object.keys(manifest).length > 100_000)
+        throw new PraxisError({ code: 'LIMIT_EXCEEDED', message: 'At most 100000 asset paths can be published' });
+    const added = Object.keys(manifest).filter(key => !Object.hasOwn(previous, key));
+    const changed = Object.keys(manifest).filter(key => previous[key] && (previous[key].hash !== manifest[key].hash || previous[key].size !== manifest[key].size));
+    const removed = Object.keys(previous).filter(key => !Object.hasOwn(manifest, key));
+    const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', new TextEncoder().encode(JSON.stringify(manifest))));
+    const manifestHash = Array.from(digest, byte => byte.toString(16).padStart(2, '0')).join('');
+    const staticOnly = !['main', 'bindings', 'compatibility_date', 'compatibility_flags', 'assets_config'].some(key => Object.hasOwn(input, key));
+    const unchanged = staticOnly && !!currentVersion && manifestHash === currentVersion.praxis.assets_manifest?.manifest_hash;
+    const hashes = new Set(Object.values(manifest).map(entry => entry.hash));
+    const currentResult = { url: worker.subdomain.url, worker_id: worker.id, version_id: currentVersion?.id ?? null,
+        deployment_id: currentDeployment?.id ?? null, status: currentDeployment?.praxis.status ?? 'draft', created,
+        ...(currentVersion ? { version: currentVersion } : {}), unchanged, uploaded: 0, reused: hashes.size };
+    if (unchanged && !input.dryRun)
+        return currentResult;
+    // dryRun intentionally registers the content-addressed session manifest, but never uploads or publishes.
     const session = await workers.assetsUploadSession.create({ path, body: { manifest } });
+    if (input.dryRun) {
+        const missing = new Set(session.buckets.flat());
+        if ([...missing].some(hash => !hashes.has(hash)))
+            throw new PraxisError({ code: 'INVALID_RESPONSE', message: 'Upload session requested an unknown hash' });
+        return { ...currentResult, reused: hashes.size - missing.size,
+            plan: { added, changed, removed, upload_hashes: missing.size, existing_hashes: hashes.size - missing.size } };
+    }
     let jwt = session.buckets.length ? null : session.jwt;
     const uploaded = new Set();
     for (const bucket of session.buckets) {
@@ -112,5 +162,5 @@ export async function publish(client, input) {
     }
     return { url: worker.subdomain.url, worker_id: worker.id, version_id: result.version.id,
         deployment_id: deployment.id, status: deployment.praxis.status, created,
-        uploaded: uploaded.size, reused: contents.size - uploaded.size };
+        uploaded: uploaded.size, reused: hashes.size - uploaded.size };
 }

package/dist/operations.generated.d.ts

@@ -2,7 +2,7 @@ export declare const operations: readonly [{
     readonly resource: "agent.agents";
     readonly method: "list";
     readonly summary: "List agents";
-    readonly description: "List the agents of the workspace behind your API key, newest first, in pages of at most 100 (default 20). Use it to find an agent id before creating a session; to read one agent use agents.retrieve, to see its history use agents.versions.list. Archived agents are hidden unless include_archived is true. Filter kind=personal for durable-computer agents or kind=service for per-session environments. Pass next_page from the response as page to read the next page; a null next_page means the end.";
+    readonly description: "List the agents of the workspace behind your API key, newest first, in pages of at most 100 (default 20). Use it to find an agent id before creating a session; to read one agent use agents.retrieve, to see its history use agents.versions.list. Archived agents are hidden unless include_archived is true. Filter kind=personal for durable-computer agents or kind=business for per-session environments. Pass next_page from the response as page to read the next page; a null next_page means the end.";
     readonly http: "GET";
     readonly path: "/agent/v1/agents";
     readonly streaming: "no";
@@ -37,7 +37,7 @@ export declare const operations: readonly [{
     }, {
         readonly name: "kind";
         readonly type: "string";
-        readonly enum: readonly ["personal", "service"];
+        readonly enum: readonly ["personal", "business"];
         readonly required: false;
         readonly description: "Filter agents by their immutable kind, including agents created before kind was recorded.";
     }];
@@ -45,7 +45,7 @@ export declare const operations: readonly [{
     readonly resource: "agent.agents";
     readonly method: "create";
     readonly summary: "Create agent";
-    readonly description: "Create a reusable agent definition, then pass its returned id to sessions.create to start a conversation. The definition includes model, system prompt, tools, MCP servers and an optional multiagent roster. It is saved as version 1; real updates create new versions. Unlike Anthropic Managed Agents, nonempty skills attachments and custom tool entries return 400; the native skill tool is separate from the skills field. Use tools: [{type: \"agent_toolset_20260401\"}] for built-in tools including codemode, skill and agent; inspect toolsets.list for names and schemas, and keep bash enabled for native additions. To offer only some tools, set default_config: {enabled: false} and list the tools to keep in configs, e.g. tools: [{type: \"agent_toolset_20260401\", default_config: {enabled: false}, configs: [{name: \"codemode\", enabled: true}, {name: \"bash\", enabled: true, permission_policy: {type: \"always_ask\"}}]}]; every tool not listed, including todo_write, enter_plan_mode, ask_user_question and goal_read, follows default_config, and the response echoes it. codemode runs through bash, so enabling codemode while bash is disabled returns 400. Optional mcp_toolset entries pair with mcp_servers. model accepts platform model IDs such as deepseek-flash, not only the Claude IDs in the protocol examples. model.settings.reasoning sets default thinking; other extra model controls return 400. Example: {\"name\":\"helper\",\"model\":{\"id\":\"deepseek-flash\"},\"tools\":[{\"type\":\"agent_toolset_20260401\"}]}.";
+    readonly description: "Create a reusable agent definition, then pass its returned id to sessions.create to start a conversation. The definition includes model, system prompt, tools, MCP servers and an optional multiagent roster. It is saved as version 1; real updates create new versions. Unlike Anthropic Managed Agents, nonempty skills attachments return 400; the native skill tool is separate from the skills field. Use tools: [{type: \"agent_toolset_20260401\"}] for built-in tools including codemode, skill and agent; inspect toolsets.list for names and schemas, and keep bash enabled for native additions. To offer only some tools, set default_config: {enabled: false} and list the tools to keep in configs, e.g. tools: [{type: \"agent_toolset_20260401\", default_config: {enabled: false}, configs: [{name: \"codemode\", enabled: true}, {name: \"bash\", enabled: true, permission_policy: {type: \"always_ask\"}}]}]; every tool not listed, including todo_write, enter_plan_mode, ask_user_question and goal_read, follows default_config, and the response echoes it. codemode runs through bash, so enabling codemode while bash is disabled returns 400. Optional mcp_toolset entries pair with mcp_servers. model accepts platform model IDs such as deepseek-flash, not only the Claude IDs in the protocol examples. model.settings.reasoning sets default thinking; other extra model controls return 400. Example: {\"name\":\"helper\",\"model\":{\"id\":\"deepseek-flash\"},\"tools\":[{\"type\":\"agent_toolset_20260401\"}]}.";
     readonly http: "POST";
     readonly path: "/agent/v1/agents";
     readonly streaming: "no";
@@ -105,9 +105,9 @@ export declare const operations: readonly [{
         }, {
             readonly name: "kind";
             readonly type: "string";
-            readonly enum: readonly ["personal", "service"];
+            readonly enum: readonly ["personal", "business"];
             readonly required: false;
-            readonly description: "Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.";
+            readonly description: "Immutable agent kind. personal requires computer_id; business cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.";
         }, {
             readonly name: "computer_id";
             readonly type: "string";
@@ -140,6 +140,12 @@ export declare const operations: readonly [{
             readonly type: "object";
             readonly required: false;
             readonly description: "Praxis extension: switchable model ids on /agent/v1 only. The default model must be included. When omitted, only the default model is selectable.";
+        }, {
+            readonly name: "preset";
+            readonly type: "string";
+            readonly enum: readonly ["minimal", "data-editor", "full"];
+            readonly required: false;
+            readonly description: "Optional tool preset. minimal enables read, glob, grep and ask_user_question; data-editor also enables write and edit; full uses the default toolset with always_allow. Explicit tools override matching preset entries. codemode requires bash and is absent from data-editor.";
         }];
     };
 }, {
@@ -165,7 +171,7 @@ export declare const operations: readonly [{
     readonly resource: "agent.agents";
     readonly method: "update";
     readonly summary: "Update agent";
-    readonly description: "Update an agent. Send the current version in the body for optimistic concurrency: a stale version returns 409, and an update that changes nothing keeps the version number. Any real change saves a new version; existing sessions keep the version they were created with. Omitted fields keep their value. multiagent takes null or a coordinator roster; subagent_model keeps its value when omitted and is cleared by null. Archived agents cannot be updated. Unlike Anthropic Managed Agents, nonempty skills attachments and custom tools return 400; use the native skill tool for available runtime skills.";
+    readonly description: "Update an agent. Send the current version in the body for optimistic concurrency: a stale version returns 409, and an update that changes nothing keeps the version number. Any real change saves a new version; existing sessions keep the version they were created with. Omitted fields keep their value. multiagent takes null or a coordinator roster; subagent_model keeps its value when omitted and is cleared by null. Archived agents cannot be updated. Unlike Anthropic Managed Agents, nonempty skills attachments return 400; use the native skill tool for available runtime skills.";
     readonly http: "POST";
     readonly path: "/agent/v1/agents/{agent_id}";
     readonly streaming: "no";
@@ -233,9 +239,9 @@ export declare const operations: readonly [{
         }, {
             readonly name: "kind";
             readonly type: "string";
-            readonly enum: readonly ["personal", "service"];
+            readonly enum: readonly ["personal", "business"];
             readonly required: false;
-            readonly description: "Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.";
+            readonly description: "Immutable agent kind. personal requires computer_id; business cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.";
         }, {
             readonly name: "computer_id";
             readonly type: "string";
@@ -268,6 +274,12 @@ export declare const operations: readonly [{
             readonly type: "object";
             readonly required: false;
             readonly description: "Praxis extension: switchable model ids on /agent/v1 only. The default model must be included. When omitted, only the default model is selectable.";
+        }, {
+            readonly name: "preset";
+            readonly type: "string";
+            readonly enum: readonly ["minimal", "data-editor", "full"];
+            readonly required: false;
+            readonly description: "Optional tool preset. minimal enables read, glob, grep and ask_user_question; data-editor also enables write and edit; full uses the default toolset with always_allow. Explicit tools override matching preset entries. codemode requires bash and is absent from data-editor.";
         }];
     };
 }, {
@@ -284,6 +296,156 @@ export declare const operations: readonly [{
         readonly sdkName: "agent_id";
     }];
     readonly query: readonly [];
+}, {
+    readonly resource: "agent.agents.endUsers";
+    readonly method: "list";
+    readonly summary: "List End Users";
+    readonly description: "List users who have sessions or token issuance history on a business agent.\n\nOrdered by last_active_at and external_user_id descending. q is a case-sensitive literal prefix, including underscores. limit is 1–100, default 20. Reuse next_page with the same organization, agent, q and limit. Preemptively blocked users without history do not appear. End-user credentials and inaccessible or personal agents return 404.";
+    readonly http: "GET";
+    readonly path: "/agent/v1/agents/{agent_id}/end_users";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "agent_id";
+        readonly sdkName: "agent_id";
+    }];
+    readonly query: readonly [{
+        readonly name: "limit";
+        readonly type: "integer";
+        readonly required: false;
+        readonly description: "Maximum users per page; defaults to 20.";
+    }, {
+        readonly name: "page";
+        readonly type: "string";
+        readonly required: false;
+        readonly description: "next_page from the previous response with the same agent, q and limit.";
+    }, {
+        readonly name: "q";
+        readonly type: "string";
+        readonly required: false;
+        readonly description: "Case-sensitive literal prefix of external_user_id; omit or use an empty string for all users.";
+    }];
+}, {
+    readonly resource: "agent.agents.endUsers";
+    readonly method: "delete";
+    readonly summary: "Delete end-user data";
+    readonly description: "Delete a host application's end-user data from one business agent after explicit confirmation.\n\nDevelop only. Set confirm to the exact external_user_id; missing or mismatched confirmation returns 400. Returns 202 with a pending task id, not completion. Poll the deletion endpoint. Concurrent requests reuse the unfinished task; retry DELETE after failure to resume it. Tokens are revoked and the user is blocked before a seven-day recovery snapshot is verified. Sessions including child sessions, conversation data, grants and feedback are then removed. A pre-existing block remains; a temporary block is removed on success. Attachment metadata is recorded and File attachments are retained. No charge is introduced by this operation. Example: DELETE /agent/v1/agents/agent_example/end_users/customer_123?confirm=customer_123.";
+    readonly http: "DELETE";
+    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "agent_id";
+        readonly sdkName: "agent_id";
+    }, {
+        readonly name: "external_user_id";
+        readonly sdkName: "external_user_id";
+    }];
+    readonly query: readonly [{
+        readonly name: "confirm";
+        readonly type: "string";
+        readonly required: true;
+        readonly description: "Must exactly equal the external_user_id path parameter to confirm destructive deletion.";
+    }];
+}, {
+    readonly resource: "agent.agents.endUsers";
+    readonly method: "retrieve";
+    readonly summary: "Get End User";
+    readonly description: "Inspect one end user and their twenty most recently updated sessions.\n\nUse external_user_id from listing or your host application. Users without session or issuance history return 404, including preemptively blocked users. End-user credentials and inaccessible or personal agents return 404.";
+    readonly http: "GET";
+    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "agent_id";
+        readonly sdkName: "agent_id";
+    }, {
+        readonly name: "external_user_id";
+        readonly sdkName: "external_user_id";
+    }];
+    readonly query: readonly [];
+}, {
+    readonly resource: "agent.agents.endUsers.block";
+    readonly method: "create";
+    readonly summary: "Block End User";
+    readonly description: "Block token issuance and session creation, then revoke existing tokens for an end user.\n\nMay block a user before any history exists; timestamps are then null and counts and cost are zero. Requires an embed policy, otherwise returns 409 with setup guidance. Deduplicates the policy blocklist and retains its 1000-user maximum. If revocation returns 502, the user remains blocked; retry to finish revocation. Repeats keep the user blocked and revoke any remaining grants. End-user credentials and inaccessible or personal agents return 404.";
+    readonly http: "POST";
+    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}/block";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "agent_id";
+        readonly sdkName: "agent_id";
+    }, {
+        readonly name: "external_user_id";
+        readonly sdkName: "external_user_id";
+    }];
+    readonly query: readonly [];
+}, {
+    readonly resource: "agent.agents.endUsers";
+    readonly method: "retrieveDeletion";
+    readonly summary: "Get end-user deletion";
+    readonly description: "Poll the latest deletion task for an end user, including after the user data has been removed.\n\nUse the same agent_id and external_user_id as the confirmed DELETE. Status is pending, snapshotting, deleting, done or failed. Counts are empty until a verified snapshot exists. A failed task remains blocked and resumes when DELETE is retried with matching confirmation. snapshot_key is an operator recovery reference retained for seven days, not a public download URL. End-user credentials, inaccessible or personal agents, and missing tasks return 404. This read does not create a task or charge usage.";
+    readonly http: "GET";
+    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}/deletion";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "agent_id";
+        readonly sdkName: "agent_id";
+    }, {
+        readonly name: "external_user_id";
+        readonly sdkName: "external_user_id";
+    }];
+    readonly query: readonly [];
+}, {
+    readonly resource: "agent.agents.endUsers.revokeTokens";
+    readonly method: "create";
+    readonly summary: "Revoke End User Tokens";
+    readonly description: "Revoke all issued tokens for an end user and terminate their open embed streams.\n\nRevokes credentials before marking grants revoked. Upstream failure returns 502 without changing grant revocation timestamps. Returns the count of newly revoked grants; a repeat without new grants returns zero. Does not block future issuance. End-user credentials and inaccessible or personal agents return 404.";
+    readonly http: "POST";
+    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}/revoke_tokens";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "agent_id";
+        readonly sdkName: "agent_id";
+    }, {
+        readonly name: "external_user_id";
+        readonly sdkName: "external_user_id";
+    }];
+    readonly query: readonly [];
+}, {
+    readonly resource: "agent.agents.endUsers.unblock";
+    readonly method: "create";
+    readonly summary: "Unblock End User";
+    readonly description: "Allow an end user to receive new tokens and create new sessions again.\n\nRemoves the user from the blocklist; previously revoked tokens stay revoked. Idempotent. Requires an embed policy, otherwise returns 409 with setup guidance. Returns null timestamps and zero counts and cost when no session or issuance history exists. End-user credentials and inaccessible or personal agents return 404.";
+    readonly http: "POST";
+    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}/unblock";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "agent_id";
+        readonly sdkName: "agent_id";
+    }, {
+        readonly name: "external_user_id";
+        readonly sdkName: "external_user_id";
+    }];
+    readonly query: readonly [];
+}, {
+    readonly resource: "agent.agents.unarchive";
+    readonly method: "create";
+    readonly summary: "Unarchive Agent";
+    readonly description: "Restore an archived agent without creating a configuration version. Already active agents are unchanged. Missing or inaccessible agents return 404. Use the returned agent id to create new sessions.";
+    readonly http: "POST";
+    readonly path: "/agent/v1/agents/{agent_id}/unarchive";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "agent_id";
+        readonly sdkName: "agent_id";
+    }];
+    readonly query: readonly [];
 }, {
     readonly resource: "agent.agents.versions";
     readonly method: "list";
@@ -446,7 +608,7 @@ export declare const operations: readonly [{
     readonly resource: "agent.computers";
     readonly method: "connect";
     readonly summary: "Connect computer";
-    readonly description: "Resume the computer and issue a sandbox connection.\n\nOwn-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.";
+    readonly description: "Resume the computer and issue a sandbox connection.\n\nOwn-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.\n\nConnect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {\"need\":\"heavy\"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Heavy running time counts toward the daily budget in seconds. Renew the lease while using the connection and release it with DELETE when finished. If the daily budget is exhausted, 429 COMPUTER_BUDGET_EXHAUSTED allows you to continue with need light.";
     readonly http: "POST";
     readonly path: "/agent/v1/computers/{computer_id}/connect";
     readonly streaming: "no";
@@ -456,6 +618,16 @@ export declare const operations: readonly [{
         readonly sdkName: "computer_id";
     }];
     readonly query: readonly [];
+    readonly body: {
+        readonly required: false;
+        readonly fields: readonly [{
+            readonly name: "need";
+            readonly type: "string";
+            readonly enum: readonly ["light", "heavy"];
+            readonly required: false;
+            readonly description: "Defaults to light. light uses the lightweight shell, or the heavy instance while it is running. heavy requests a full Linux computer for interactive programs; heavy running time counts toward the daily budget in seconds.";
+        }];
+    };
 }, {
     readonly resource: "agent.computers.files";
     readonly method: "list";
@@ -494,6 +666,40 @@ export declare const operations: readonly [{
         readonly required: true;
         readonly description: "Absolute path of the file whose content to download, as returned in the path field of computers.files.list.";
     }];
+}, {
+    readonly resource: "agent.computers.leases";
+    readonly method: "delete";
+    readonly summary: "Release computer lease";
+    readonly description: "Give the lease back when a connection closes so the full machine can be reclaimed without waiting for it to expire.\n\nOwn-face extension. Idempotent: an unknown or already released lease succeeds as well. Foreign or absent computers return 404.";
+    readonly http: "DELETE";
+    readonly path: "/agent/v1/computers/{computer_id}/leases/{lease_id}";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "computer_id";
+        readonly sdkName: "computer_id";
+    }, {
+        readonly name: "lease_id";
+        readonly sdkName: "lease_id";
+    }];
+    readonly query: readonly [];
+}, {
+    readonly resource: "agent.computers.leases.renew";
+    readonly method: "create";
+    readonly summary: "Renew computer lease";
+    readonly description: "Extend the lease a connection holds so the full machine stays in service while the connection is open.\n\nOwn-face extension. A lease that is no longer valid (released, expired, or the computer moved to another machine) returns 409 LEASE_STALE; call connect again for a new connection and lease. Foreign or absent computers return 404.";
+    readonly http: "POST";
+    readonly path: "/agent/v1/computers/{computer_id}/leases/{lease_id}/renew";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "computer_id";
+        readonly sdkName: "computer_id";
+    }, {
+        readonly name: "lease_id";
+        readonly sdkName: "lease_id";
+    }];
+    readonly query: readonly [];
 }, {
     readonly resource: "agent.deploymentRuns";
     readonly method: "list";
@@ -833,6 +1039,37 @@ export declare const operations: readonly [{
         readonly sdkName: "deployment_id";
     }];
     readonly query: readonly [];
+}, {
+    readonly resource: "agent.embed";
+    readonly method: "retrieveAppearance";
+    readonly summary: "Read chat appearance";
+    readonly description: "Load saved appearance for an iframe or Hosted chat page. Supply an end-user embed token as Bearer authorization, or a console-issued publishable key in Praxis-Publishable-Key before anonymous token issuance. The credential selects the agent; identity_number and agent_id query parameters are rejected with 400. Missing appearance returns an empty object. Kit option names retain camelCase. Responses are private and cacheable for 60 seconds. Component hosts configure Kit in their own code instead.";
+    readonly http: "GET";
+    readonly path: "/agent/v1/embed/appearance";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [];
+    readonly query: readonly [];
+}, {
+    readonly resource: "agent.embed.exchange";
+    readonly method: "create";
+    readonly summary: "Exchange Hosted Code";
+    readonly description: "Redeem a single-use hosted link credential for an end-user token.\n\nRead code from the c fragment parameter of hosted_url returned by embed token creation with hosted true, then remove the fragment before exchanging. No Authorization header is required; the code authenticates this request. The code expires after 60 seconds and is consumed atomically on exchange, so concurrent attempts have only one winner. Expired, used and unknown codes return the same 404 body. Keep the token in memory and return to the host website for a fresh link when it expires; exchange cannot refresh it. Requests are IP limited per minute using the anonymous entrypoint budget (default 20). Example body is {\"code\":\"<code from hosted_url>\"}.";
+    readonly http: "POST";
+    readonly path: "/agent/v1/embed/exchange";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [];
+    readonly query: readonly [];
+    readonly body: {
+        readonly required: true;
+        readonly fields: readonly [{
+            readonly name: "code";
+            readonly type: "string";
+            readonly required: true;
+            readonly description: "Single-use credential from the c fragment parameter of hosted_url returned by embed token creation. Valid for 60 seconds.";
+        }];
+    };
 }, {
     readonly resource: "agent.embedTokens";
     readonly method: "list";
@@ -847,7 +1084,7 @@ export declare const operations: readonly [{
         readonly name: "agent_id";
         readonly type: "string";
         readonly required: false;
-        readonly description: "Filter by service agent identifier (agent_ or agt_ prefix).";
+        readonly description: "Filter by business agent identifier (agent_ or agt_ prefix).";
     }, {
         readonly name: "external_user_id";
         readonly type: "string";
@@ -868,7 +1105,7 @@ export declare const operations: readonly [{
     readonly resource: "agent.embedTokens";
     readonly method: "create";
     readonly summary: "Create Embed Token";
-    readonly description: "Issue a short-lived credential on your backend for an end user of a service agent.\n\nRequires an active service agent in your organization with an embed policy. Pins the requested version or the latest version and snapshots the policy environment, vaults and resources; metadata comes from the request. Blocked users cannot receive tokens. Keep your API key on the backend and pass only the returned token to the frontend. Every call creates a new grant; issuance is not idempotent. The hosted field is not supported.";
+    readonly description: "Issue a short-lived credential on your backend for an end user of a business agent.\n\nRequires an active business agent in your organization with an embed policy. Pins the requested version or the latest version and snapshots the policy environment, vaults and resources; metadata comes from the request. Blocked users cannot receive tokens. Keep your API key on the backend and pass only the returned token to the frontend. Every call creates a new grant; issuance is not idempotent. Set hosted to true to also receive hosted_url; redirect the user there within 60 seconds. The agent must have an identity_number. The URL fragment contains a single-use exchange credential, not the token. Omit hosted or set false for ordinary token issuance.";
     readonly http: "POST";
     readonly path: "/agent/v1/embed_tokens";
     readonly streaming: "no";
@@ -878,10 +1115,15 @@ export declare const operations: readonly [{
     readonly body: {
         readonly required: true;
         readonly fields: readonly [{
+            readonly name: "hosted";
+            readonly type: "boolean";
+            readonly required: false;
+            readonly description: "Set true to also return a hosted chat URL with a single-use credential valid for 60 seconds. Defaults to false; the agent must have an identity_number.";
+        }, {
             readonly name: "agent";
             readonly type: "string";
             readonly required: true;
-            readonly description: "Service agent ID or identity_number from agent retrieval; it must belong to your organization and be active.";
+            readonly description: "Business agent ID or identity_number from agent retrieval; it must belong to your organization and be active.";
         }, {
             readonly name: "version";
             readonly type: "integer";
@@ -926,6 +1168,31 @@ export declare const operations: readonly [{
             readonly description: "Host metadata preserved verbatim; at most 16 keys of 1–64 characters and string values of at most 512 characters. Defaults to an empty object.";
         }];
     };
+}, {
+    readonly resource: "agent.embedTokens.anonymous";
+    readonly method: "create";
+    readonly summary: "Issue anonymous visitor token";
+    readonly description: "Obtain a short-lived embedding token for a visitor without an account using the agent owner's publishable key.\n\nNo Authorization header is required. Send the browser Origin allowed by the agent policy. Save a returned visitor_secret and reuse it for refreshes; only new visitors receive one. Unknown secrets create new visitors, and extra fields including visitor_id return 400. Issuance uses the key creator's organization membership, the key session budget and the smaller of the policy TTL maximum and 3600 seconds. IP requests are limited per minute (default 20); UTC daily session and spending caps are checked across the key's primary sessions created that day. Token issuance itself does not create a session or charge usage; subsequent sessions bill the host organization. Example body: {\"publishable_key\":\"pk_praxis_example\"}.";
+    readonly http: "POST";
+    readonly path: "/agent/v1/embed_tokens/anonymous";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [];
+    readonly query: readonly [];
+    readonly body: {
+        readonly required: true;
+        readonly fields: readonly [{
+            readonly name: "publishable_key";
+            readonly type: "string";
+            readonly required: true;
+            readonly description: "Public key created by the business agent owner; safe to include in browser code.";
+        }, {
+            readonly name: "visitor_secret";
+            readonly type: "string";
+            readonly required: false;
+            readonly description: "Secret returned by a previous anonymous issuance for this key. Omit for a new visitor; an unknown secret creates a new visitor.";
+        }];
+    };
 }, {
     readonly resource: "agent.embedTokens.revoke";
     readonly method: "create";
@@ -1254,6 +1521,20 @@ export declare const operations: readonly [{
             readonly description: "Praxis extension: explicit session thinking effort; null inherits the pinned agent default, then the model default. none disables thinking only when model.thinking.can_disable is true. Unsupported efforts return 400 invalid_request_error.";
         }];
     };
+}, {
+    readonly resource: "agent.sessions";
+    readonly method: "delete";
+    readonly summary: "Delete session";
+    readonly description: "Delete an idle or terminated session and its event history after saving a deletion snapshot. Supply the session id from creation or listing. Running sessions return 409 INVALID_STATE: interrupt first or wait until idle or terminated. Afterwards retrieval and event listing return 404 and lists omit the session. Example: DELETE /agent/v1/sessions/sesn_example.";
+    readonly http: "DELETE";
+    readonly path: "/agent/v1/sessions/{session_id}";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "session_id";
+        readonly sdkName: "session_id";
+    }];
+    readonly query: readonly [];
 }, {
     readonly resource: "agent.sessions";
     readonly method: "retrieve";
@@ -1466,7 +1747,7 @@ export declare const operations: readonly [{
     readonly resource: "agent.sessions.events";
     readonly method: "list";
     readonly summary: "List session events";
-    readonly description: "Read the event history of a session as a page of events, oldest first by default (order=desc for newest first). Use it after sending a message to collect the reply, to find tool calls that wait for approval (session.status_idle with stop_reason requires_action lists their event_ids), or to audit a run; to follow a running session live use sessions.events.stream instead. Filter by types and by a created_at range on processed_at; pages hold at most 100 events (default 20) and next_page continues. A failed run emits session.error before session.status_terminated. Native history also includes user.steer, user.withdraw, system.notification, session.forked, session.goal_changed and session.goal_verification; these are not accepted by the /anthropic/v1 event-type filter.";
+    readonly description: "Read the event history of a session as a page of events, oldest first by default (order=desc for newest first). Use it after sending a message to collect the reply, to find tool calls that wait for approval or client custom tool results (session.status_idle with stop_reason requires_action lists their event_ids), or to audit a run; to follow a running session live use sessions.events.stream instead. Filter by types and by a created_at range on processed_at; pages hold at most 100 events (default 20) and next_page continues. A failed run emits session.error before session.status_terminated. Native history also includes user.steer, user.withdraw, system.notification, session.forked, session.goal_changed and session.goal_verification; these are not accepted by the /anthropic/v1 event-type filter.";
     readonly http: "GET";
     readonly path: "/agent/v1/sessions/{session_id}/events";
     readonly streaming: "no";
@@ -1522,7 +1803,7 @@ export declare const operations: readonly [{
     readonly resource: "agent.sessions.events";
     readonly method: "send";
     readonly summary: "Send session events";
-    readonly description: "Send events to a session: user.message (exactly one nonempty text block), user.interrupt, user.tool_confirmation to allow or deny a pending tool call, user.steer to inject a queued user.message into a turn that is still running, and user.withdraw to retract a queued message. The response only acknowledges the inputs; read replies with sessions.events.list or sessions.events.stream. A message sent while the session waits for tool approval is queued (processed_at null) and runs in order after the approval is resolved. Archived sessions reject new messages. To approve, read a pending agent.tool_use or agent.mcp_tool_use event and send {type: \"user.tool_confirmation\", tool_use_id: <that event id>, result: \"allow\"} (or deny); include session_thread_id for a child approval. Native confirmations also accept updated_permissions, answers and annotations, which /anthropic/v1 rejects.";
+    readonly description: "Attach optional praxis_context={items:[{name,value}]} to user.message for untrusted page context on this turn only (maximum 32 items, 4096 UTF-8 JSON bytes). /anthropic/v1 rejects this field. Send events to a session: user.message (exactly one nonempty text block), user.interrupt, user.tool_confirmation to allow or deny a pending tool call, user.custom_tool_result to return a custom tool result, user.steer to inject a queued user.message into a turn that is still running, and user.withdraw to retract a queued message. The response only acknowledges the inputs; read replies with sessions.events.list or sessions.events.stream. A message sent while the session waits for tool approval is queued (processed_at null) and runs in order after the approval is resolved. Archived sessions reject new messages. To approve, read a pending agent.tool_use or agent.mcp_tool_use event and send {type: \"user.tool_confirmation\", tool_use_id: <that event id>, result: \"allow\"} (or deny); include session_thread_id for a child approval. Native confirmations also accept updated_permissions, answers and annotations, which /anthropic/v1 rejects. Both faces accept user.custom_tool_result with custom_tool_use_id from agent.custom_tool_use.id or the requires_action stop_reason.event_ids. Unlike Anthropic, result content accepts only text blocks (omit it for an empty array). Omitted or null is_error means false. The server routes child calls by id; session_thread_id is rejected in this input. Unknown call ids return 400; duplicate results or calls no longer waiting return 409.";
     readonly http: "POST";
     readonly path: "/agent/v1/sessions/{session_id}/events";
     readonly streaming: "no";
@@ -2463,6 +2744,23 @@ export declare const operations: readonly [{
         readonly sdkName: "version_id";
     }];
     readonly query: readonly [];
+}, {
+    readonly resource: "application.workers.versions.assets";
+    readonly method: "retrieveManifest";
+    readonly summary: "Get version asset manifest";
+    readonly description: "Read the retained asset paths, content hashes and byte sizes of a version for publication planning. This read creates no session or version. A version without assets returns an empty manifest; unavailable artifacts and foreign resources return 404.";
+    readonly http: "GET";
+    readonly path: "/application/v1/workers/{worker_id}/versions/{version_id}/assets/manifest";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "worker_id";
+        readonly sdkName: "worker_id";
+    }, {
+        readonly name: "version_id";
+        readonly sdkName: "version_id";
+    }];
+    readonly query: readonly [];
 }, {
     readonly resource: "automation.actions";
     readonly method: "list";