@deepraxis/sdk 0.1.0-dev.56788b6 → 0.1.0-dev.5e0f28e

package/dist/generated/types.gen.d.ts

@@ -27281,6 +27281,69 @@ export type UnarchiveAgentResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -30106,7 +30169,7 @@ export type ConnectComputerErrors = {
         };
     };
     /**
-     * COMPUTER_BUDGET_EXHAUSTED: today's full-computer time has been used up. Connect with need light to continue using the lightweight shell.
+     * Platform error with Computer code, message and hint
      */
     429: {
         error: {
@@ -32122,7 +32185,7 @@ export type ForkSessionResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         /**
@@ -40703,7 +40766,7 @@ export type SessionsRetrieveResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -40981,7 +41044,7 @@ export type SessionsUpdateResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -41229,6 +41292,69 @@ export type AgentsListResponses = {
              * modified.
              */
             version: number;
+            /**
+             * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            databases: Array<{
+                /**
+                 * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            vector_stores: Array<{
+                /**
+                 * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            files: Array<{
+                /**
+                 * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reading the bound file; files do not accept read_write.
+                 */
+                access: 'read_only';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
             /**
              * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
              */
@@ -41681,6 +41807,69 @@ export type AgentsCreateData = {
          * across all toolsets allowed.
          */
         tools?: Array<AgentManaged15 | AgentManaged29 | AgentManaged32>;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases?: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores?: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files?: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.
          */
@@ -42146,6 +42335,69 @@ export type AgentsCreateResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -42626,6 +42878,69 @@ export type AgentsRetrieveResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -43083,6 +43398,69 @@ export type AgentsUpdateData = {
          * current version; omit to apply the update unconditionally.
          */
         version?: number;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        databases?: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        vector_stores?: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        files?: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
         /**
          * Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.
          */
@@ -43553,6 +43931,69 @@ export type AgentsUpdateResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -44027,6 +44468,69 @@ export type AgentsArchiveResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -44511,6 +45015,69 @@ export type AgentsVersionsListResponses = {
              * modified.
              */
             version: number;
+            /**
+             * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            databases: Array<{
+                /**
+                 * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            vector_stores: Array<{
+                /**
+                 * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            files: Array<{
+                /**
+                 * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reading the bound file; files do not accept read_write.
+                 */
+                access: 'read_only';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
             /**
              * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
              */
@@ -45062,7 +45629,7 @@ export type SessionsListResponses = {
              */
             created_at: string;
             /**
-             * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+             * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
              */
             environment_id?: string;
             metadata: AgentManaged173;
@@ -45196,10 +45763,9 @@ export type SessionsCreateData = {
          */
         agent: string | AgentManaged10 | AgentManaged167;
         /**
-         * ID of the `environment` defining the container configuration for
-         * this session.
+         * Execution environment id from agent.environments.list or agent.environments.create. For a service agent, omission selects the built-in light environment and returns session.environment_id=light; explicit null allocates no machine and makes machine tools, including codemode and bash, unavailable. Personal agents use their selected Computer.
          */
-        environment_id?: string;
+        environment_id?: string | null;
         /**
          * A hard spend ceiling. The session stops issuing new model requests
          * once the tracked list cost reaches `max_list_cost`.
@@ -45371,7 +45937,7 @@ export type SessionsCreateResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -45609,7 +46175,7 @@ export type SessionsArchiveResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -54458,7 +55024,7 @@ export type DatabaseDeleteData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54482,7 +55048,7 @@ export type DatabaseDeleteData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54514,7 +55080,7 @@ export type DatabaseDeleteData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54574,7 +55140,7 @@ export type DatabaseSelectData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54602,7 +55168,7 @@ export type DatabaseSelectData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54634,7 +55200,7 @@ export type DatabaseSelectData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54694,7 +55260,7 @@ export type DatabaseHeadData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54722,7 +55288,7 @@ export type DatabaseHeadData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54754,7 +55320,7 @@ export type DatabaseHeadData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54815,7 +55381,7 @@ export type DatabaseUpdateData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54839,7 +55405,7 @@ export type DatabaseUpdateData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54871,7 +55437,7 @@ export type DatabaseUpdateData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54935,7 +55501,7 @@ export type DatabaseInsertData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54959,7 +55525,7 @@ export type DatabaseInsertData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54991,7 +55557,7 @@ export type DatabaseInsertData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**