@deepraxis/sdk 0.1.0-dev.4cbfc1f → 0.1.0-dev.5e0f28e

package/dist/generated/sdk.gen.d.ts

@@ -210,7 +210,7 @@ export declare const computersFilesContent: <ThrowOnError extends boolean = fals
  *
  * Own-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.
  *
- * Connect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {"need":"heavy"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Heavy running time counts toward the daily budget in seconds. Renew the lease while using the connection and release it with DELETE when finished. If the daily budget is exhausted, 429 COMPUTER_BUDGET_EXHAUSTED allows you to continue with need light.
+ * Connect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {"need":"heavy"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Renew the lease while using the connection and release it with DELETE when finished.
  */
 export declare const connectComputer: <ThrowOnError extends boolean = false>(options: Options<ConnectComputerData, ThrowOnError>) => RequestResult<ConnectComputerResponses, ConnectComputerErrors, ThrowOnError>;
 /**
@@ -893,7 +893,7 @@ export declare const sessionsList: <ThrowOnError extends boolean = false>(option
 /**
  * Create session
  *
- * Create a session: one conversation with an agent, running on a machine. Pass agent as an agent id (latest version) or {id, version, type:"agent"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass environment_id for a sandbox recipe. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.
+ * Create a session: one conversation with an agent. Pass agent as an agent id (latest version) or {id, version, type:"agent"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass an environment id for a sandbox recipe. For service agents, omission returns environment_id=light; explicit null allocates no machine, so codemode, bash and other machine tools are unavailable. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.
  */
 export declare const sessionsCreate: <ThrowOnError extends boolean = false>(options: Options<SessionsCreateData, ThrowOnError>) => RequestResult<SessionsCreateResponses, unknown, ThrowOnError>;
 /**

package/dist/generated/sdk.gen.js

@@ -497,7 +497,7 @@ export const computersFilesContent = (options) => (options.client ?? client).get
  *
  * Own-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.
  *
- * Connect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {"need":"heavy"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Heavy running time counts toward the daily budget in seconds. Renew the lease while using the connection and release it with DELETE when finished. If the daily budget is exhausted, 429 COMPUTER_BUDGET_EXHAUSTED allows you to continue with need light.
+ * Connect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {"need":"heavy"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Renew the lease while using the connection and release it with DELETE when finished.
  */
 export const connectComputer = (options) => (options.client ?? client).post({
     security: [{
@@ -2508,7 +2508,7 @@ export const sessionsList = (options) => (options?.client ?? client).get({
 /**
  * Create session
  *
- * Create a session: one conversation with an agent, running on a machine. Pass agent as an agent id (latest version) or {id, version, type:"agent"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass environment_id for a sandbox recipe. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.
+ * Create a session: one conversation with an agent. Pass agent as an agent id (latest version) or {id, version, type:"agent"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass an environment id for a sandbox recipe. For service agents, omission returns environment_id=light; explicit null allocates no machine, so codemode, bash and other machine tools are unavailable. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.
  */
 export const sessionsCreate = (options) => (options.client ?? client).post({
     security: [{

package/dist/generated/types.gen.d.ts

@@ -27281,6 +27281,69 @@ export type UnarchiveAgentResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -30106,7 +30169,7 @@ export type ConnectComputerErrors = {
         };
     };
     /**
-     * COMPUTER_BUDGET_EXHAUSTED: today's full-computer time has been used up. Connect with need light to continue using the lightweight shell.
+     * Platform error with Computer code, message and hint
      */
     429: {
         error: {
@@ -32122,7 +32185,7 @@ export type ForkSessionResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         /**
@@ -40703,7 +40766,7 @@ export type SessionsRetrieveResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -40981,7 +41044,7 @@ export type SessionsUpdateResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -41229,6 +41292,69 @@ export type AgentsListResponses = {
              * modified.
              */
             version: number;
+            /**
+             * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            databases: Array<{
+                /**
+                 * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            vector_stores: Array<{
+                /**
+                 * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            files: Array<{
+                /**
+                 * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reading the bound file; files do not accept read_write.
+                 */
+                access: 'read_only';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
             /**
              * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
              */
@@ -41681,6 +41807,69 @@ export type AgentsCreateData = {
          * across all toolsets allowed.
          */
         tools?: Array<AgentManaged15 | AgentManaged29 | AgentManaged32>;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases?: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores?: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files?: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.
          */
@@ -42146,6 +42335,69 @@ export type AgentsCreateResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -42626,6 +42878,69 @@ export type AgentsRetrieveResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -43083,6 +43398,69 @@ export type AgentsUpdateData = {
          * current version; omit to apply the update unconditionally.
          */
         version?: number;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        databases?: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        vector_stores?: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        files?: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
         /**
          * Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.
          */
@@ -43553,6 +43931,69 @@ export type AgentsUpdateResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -44027,6 +44468,69 @@ export type AgentsArchiveResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -44511,6 +45015,69 @@ export type AgentsVersionsListResponses = {
              * modified.
              */
             version: number;
+            /**
+             * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            databases: Array<{
+                /**
+                 * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            vector_stores: Array<{
+                /**
+                 * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            files: Array<{
+                /**
+                 * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reading the bound file; files do not accept read_write.
+                 */
+                access: 'read_only';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
             /**
              * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
              */
@@ -45062,7 +45629,7 @@ export type SessionsListResponses = {
              */
             created_at: string;
             /**
-             * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+             * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
              */
             environment_id?: string;
             metadata: AgentManaged173;
@@ -45196,10 +45763,9 @@ export type SessionsCreateData = {
          */
         agent: string | AgentManaged10 | AgentManaged167;
         /**
-         * ID of the `environment` defining the container configuration for
-         * this session.
+         * Execution environment id from agent.environments.list or agent.environments.create. For a service agent, omission selects the built-in light environment and returns session.environment_id=light; explicit null allocates no machine and makes machine tools, including codemode and bash, unavailable. Personal agents use their selected Computer.
          */
-        environment_id?: string;
+        environment_id?: string | null;
         /**
          * A hard spend ceiling. The session stops issuing new model requests
          * once the tracked list cost reaches `max_list_cost`.
@@ -45371,7 +45937,7 @@ export type SessionsCreateResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -45609,7 +46175,7 @@ export type SessionsArchiveResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;

package/dist/operations.generated.d.ts

@@ -102,6 +102,24 @@ export declare const operations: readonly [{
             readonly itemType: "object";
             readonly required: false;
             readonly description: "Tool configurations available to the agent. Maximum of 128 tools\nacross all toolsets allowed.";
+        }, {
+            readonly name: "databases";
+            readonly type: "array";
+            readonly itemType: "object";
+            readonly required: false;
+            readonly description: "Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.";
+        }, {
+            readonly name: "vector_stores";
+            readonly type: "array";
+            readonly itemType: "object";
+            readonly required: false;
+            readonly description: "Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.";
+        }, {
+            readonly name: "files";
+            readonly type: "array";
+            readonly itemType: "object";
+            readonly required: false;
+            readonly description: "File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.";
         }, {
             readonly name: "kind";
             readonly type: "string";
@@ -236,6 +254,24 @@ export declare const operations: readonly [{
             readonly type: "number";
             readonly required: false;
             readonly description: "The agent's current version, used to prevent concurrent overwrites.\nObtain this value from a create or retrieve response. Must be at least 1 if\nspecified. When supplied, the request fails if it does not match the server's\ncurrent version; omit to apply the update unconditionally.";
+        }, {
+            readonly name: "databases";
+            readonly type: "array";
+            readonly itemType: "object";
+            readonly required: false;
+            readonly description: "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.";
+        }, {
+            readonly name: "vector_stores";
+            readonly type: "array";
+            readonly itemType: "object";
+            readonly required: false;
+            readonly description: "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.";
+        }, {
+            readonly name: "files";
+            readonly type: "array";
+            readonly itemType: "object";
+            readonly required: false;
+            readonly description: "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.";
         }, {
             readonly name: "kind";
             readonly type: "string";
@@ -608,7 +644,7 @@ export declare const operations: readonly [{
     readonly resource: "agent.computers";
     readonly method: "connect";
     readonly summary: "Connect computer";
-    readonly description: "Resume the computer and issue a sandbox connection.\n\nOwn-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.\n\nConnect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {\"need\":\"heavy\"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Heavy running time counts toward the daily budget in seconds. Renew the lease while using the connection and release it with DELETE when finished. If the daily budget is exhausted, 429 COMPUTER_BUDGET_EXHAUSTED allows you to continue with need light.";
+    readonly description: "Resume the computer and issue a sandbox connection.\n\nOwn-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.\n\nConnect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {\"need\":\"heavy\"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Renew the lease while using the connection and release it with DELETE when finished.";
     readonly http: "POST";
     readonly path: "/agent/v1/computers/{computer_id}/connect";
     readonly streaming: "no";
@@ -1442,7 +1478,7 @@ export declare const operations: readonly [{
     readonly resource: "agent.sessions";
     readonly method: "create";
     readonly summary: "Create session";
-    readonly description: "Create a session: one conversation with an agent, running on a machine. Pass agent as an agent id (latest version) or {id, version, type:\"agent\"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass environment_id for a sandbox recipe. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.";
+    readonly description: "Create a session: one conversation with an agent. Pass agent as an agent id (latest version) or {id, version, type:\"agent\"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass an environment id for a sandbox recipe. For service agents, omission returns environment_id=light; explicit null allocates no machine, so codemode, bash and other machine tools are unavailable. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.";
     readonly http: "POST";
     readonly path: "/agent/v1/sessions";
     readonly streaming: "no";
@@ -1460,7 +1496,7 @@ export declare const operations: readonly [{
             readonly name: "environment_id";
             readonly type: "string";
             readonly required: false;
-            readonly description: "ID of the `environment` defining the container configuration for\nthis session.";
+            readonly description: "Execution environment id from agent.environments.list or agent.environments.create. For a service agent, omission selects the built-in light environment and returns session.environment_id=light; explicit null allocates no machine and makes machine tools, including codemode and bash, unavailable. Personal agents use their selected Computer.";
         }, {
             readonly name: "budget";
             readonly type: "object";

package/dist/operations.generated.js

@@ -128,6 +128,27 @@ export const operations = [
                     "required": false,
                     "description": "Tool configurations available to the agent. Maximum of 128 tools\nacross all toolsets allowed."
                 },
+                {
+                    "name": "databases",
+                    "type": "array",
+                    "itemType": "object",
+                    "required": false,
+                    "description": "Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings."
+                },
+                {
+                    "name": "vector_stores",
+                    "type": "array",
+                    "itemType": "object",
+                    "required": false,
+                    "description": "Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings."
+                },
+                {
+                    "name": "files",
+                    "type": "array",
+                    "itemType": "object",
+                    "required": false,
+                    "description": "File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings."
+                },
                 {
                     "name": "kind",
                     "type": "string",
@@ -296,6 +317,27 @@ export const operations = [
                     "required": false,
                     "description": "The agent's current version, used to prevent concurrent overwrites.\nObtain this value from a create or retrieve response. Must be at least 1 if\nspecified. When supplied, the request fails if it does not match the server's\ncurrent version; omit to apply the update unconditionally."
                 },
+                {
+                    "name": "databases",
+                    "type": "array",
+                    "itemType": "object",
+                    "required": false,
+                    "description": "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings."
+                },
+                {
+                    "name": "vector_stores",
+                    "type": "array",
+                    "itemType": "object",
+                    "required": false,
+                    "description": "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings."
+                },
+                {
+                    "name": "files",
+                    "type": "array",
+                    "itemType": "object",
+                    "required": false,
+                    "description": "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings."
+                },
                 {
                     "name": "kind",
                     "type": "string",
@@ -756,7 +798,7 @@ export const operations = [
         "resource": "agent.computers",
         "method": "connect",
         "summary": "Connect computer",
-        "description": "Resume the computer and issue a sandbox connection.\n\nOwn-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.\n\nConnect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {\"need\":\"heavy\"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Heavy running time counts toward the daily budget in seconds. Renew the lease while using the connection and release it with DELETE when finished. If the daily budget is exhausted, 429 COMPUTER_BUDGET_EXHAUSTED allows you to continue with need light.",
+        "description": "Resume the computer and issue a sandbox connection.\n\nOwn-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.\n\nConnect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {\"need\":\"heavy\"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Renew the lease while using the connection and release it with DELETE when finished.",
         "http": "POST",
         "path": "/agent/v1/computers/{computer_id}/connect",
         "streaming": "no",
@@ -1793,7 +1835,7 @@ export const operations = [
         "resource": "agent.sessions",
         "method": "create",
         "summary": "Create session",
-        "description": "Create a session: one conversation with an agent, running on a machine. Pass agent as an agent id (latest version) or {id, version, type:\"agent\"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass environment_id for a sandbox recipe. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.",
+        "description": "Create a session: one conversation with an agent. Pass agent as an agent id (latest version) or {id, version, type:\"agent\"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass an environment id for a sandbox recipe. For service agents, omission returns environment_id=light; explicit null allocates no machine, so codemode, bash and other machine tools are unavailable. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.",
         "http": "POST",
         "path": "/agent/v1/sessions",
         "streaming": "no",
@@ -1813,7 +1855,7 @@ export const operations = [
                     "name": "environment_id",
                     "type": "string",
                     "required": false,
-                    "description": "ID of the `environment` defining the container configuration for\nthis session."
+                    "description": "Execution environment id from agent.environments.list or agent.environments.create. For a service agent, omission selects the built-in light environment and returns session.environment_id=light; explicit null allocates no machine and makes machine tools, including codemode and bash, unavailable. Personal agents use their selected Computer."
                 },
                 {
                     "name": "budget",

package/dist/resources.generated.d.ts

@@ -27,6 +27,24 @@ export declare function createAgent(transport: Transport): {
             type: "agent";
             updated_at: string;
             version: number;
+            databases: Array<{
+                id: string;
+                access: "read_only" | "read_write";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
+            vector_stores: Array<{
+                id: string;
+                access: "read_only" | "read_write";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
+            files: Array<{
+                id: string;
+                access: "read_only";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
             kind: "personal" | "service";
             computer_id?: string;
             subagent_model?: string | null;
@@ -158,6 +176,24 @@ export declare function createAgent(transport: Transport): {
             type: "agent";
             updated_at: string;
             version: number;
+            databases: Array<{
+                id: string;
+                access: "read_only" | "read_write";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
+            vector_stores: Array<{
+                id: string;
+                access: "read_only" | "read_write";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
+            files: Array<{
+                id: string;
+                access: "read_only";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
             kind: "personal" | "service";
             computer_id?: string;
             subagent_model?: string | null;
@@ -362,6 +398,24 @@ export declare function createAgent(transport: Transport): {
                 type: "agent";
                 updated_at: string;
                 version: number;
+                databases: Array<{
+                    id: string;
+                    access: "read_only" | "read_write";
+                    instructions?: string;
+                    enabled?: boolean;
+                }>;
+                vector_stores: Array<{
+                    id: string;
+                    access: "read_only" | "read_write";
+                    instructions?: string;
+                    enabled?: boolean;
+                }>;
+                files: Array<{
+                    id: string;
+                    access: "read_only";
+                    instructions?: string;
+                    enabled?: boolean;
+                }>;
                 kind: "personal" | "service";
                 computer_id?: string;
                 subagent_model?: string | null;
@@ -495,6 +549,24 @@ export declare function createAgent(transport: Transport): {
             type: "agent";
             updated_at: string;
             version: number;
+            databases: Array<{
+                id: string;
+                access: "read_only" | "read_write";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
+            vector_stores: Array<{
+                id: string;
+                access: "read_only" | "read_write";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
+            files: Array<{
+                id: string;
+                access: "read_only";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
             kind: "personal" | "service";
             computer_id?: string;
             subagent_model?: string | null;
@@ -829,6 +901,24 @@ export declare function createAgent(transport: Transport): {
                 type: "agent";
                 updated_at: string;
                 version: number;
+                databases: Array<{
+                    id: string;
+                    access: "read_only" | "read_write";
+                    instructions?: string;
+                    enabled?: boolean;
+                }>;
+                vector_stores: Array<{
+                    id: string;
+                    access: "read_only" | "read_write";
+                    instructions?: string;
+                    enabled?: boolean;
+                }>;
+                files: Array<{
+                    id: string;
+                    access: "read_only";
+                    instructions?: string;
+                    enabled?: boolean;
+                }>;
                 kind: "personal" | "service";
                 computer_id?: string;
                 subagent_model?: string | null;
@@ -961,6 +1051,24 @@ export declare function createAgent(transport: Transport): {
             type: "agent";
             updated_at: string;
             version: number;
+            databases: Array<{
+                id: string;
+                access: "read_only" | "read_write";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
+            vector_stores: Array<{
+                id: string;
+                access: "read_only" | "read_write";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
+            files: Array<{
+                id: string;
+                access: "read_only";
+                instructions?: string;
+                enabled?: boolean;
+            }>;
             kind: "personal" | "service";
             computer_id?: string;
             subagent_model?: string | null;
@@ -1094,6 +1202,24 @@ export declare function createAgent(transport: Transport): {
                     type: "agent";
                     updated_at: string;
                     version: number;
+                    databases: Array<{
+                        id: string;
+                        access: "read_only" | "read_write";
+                        instructions?: string;
+                        enabled?: boolean;
+                    }>;
+                    vector_stores: Array<{
+                        id: string;
+                        access: "read_only" | "read_write";
+                        instructions?: string;
+                        enabled?: boolean;
+                    }>;
+                    files: Array<{
+                        id: string;
+                        access: "read_only";
+                        instructions?: string;
+                        enabled?: boolean;
+                    }>;
                     kind: "personal" | "service";
                     computer_id?: string;
                     subagent_model?: string | null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deepraxis/sdk",
-  "version": "0.1.0-dev.4cbfc1f",
+  "version": "0.1.0-dev.5e0f28e",
   "type": "module",
   "sideEffects": false,
   "exports": {