@deepraxis/sdk 0.1.0-dev.ce6682e → 0.1.0-dev.d0f5f8e

package/dist/generated/types.gen.d.ts

@@ -714,7 +714,7 @@ export type BrowserStreamMessage = {
 };
 export type OwnFileCreateFileRequest = {
     /**
-     * File bytes in one multipart file part, not a filename or file ID. The file must be nonempty and at most 104857600 bytes; its content determines the MIME type.
+     * File bytes in one multipart file part, not a filename or file ID. The file must be nonempty and at most 100000000 bytes; its content determines the MIME type.
      */
     file: Blob | File;
     /**
@@ -739,7 +739,7 @@ export type OwnFileCreateFileRequest = {
  */
 export type OwnFileOpenAiFile = {
     /**
-     * File identifier: file_dp_ followed by a 26-character uppercase Crockford ULID. Use the ID returned by upload or list.
+     * File identifier: file- followed by 24 base62 characters. Use the ID returned by upload or list.
      */
     id: string;
     /**
@@ -753,7 +753,7 @@ export type OwnFileOpenAiFile = {
     /**
      * The Unix timestamp (in seconds) for when the file will expire.
      */
-    expires_at?: number;
+    expires_at?: number | null;
     /**
      * The name of the file.
      */
@@ -772,22 +772,12 @@ export type OwnFileOpenAiFile = {
      * @deprecated
      */
     status: 'uploaded' | 'processed' | 'error';
-    /**
-     * Deprecated; always null or absent.
-     *
-     * @deprecated
-     */
-    status_details?: string | null;
     /**
      * Content-detected MIME type.
      */
     mime_type: string;
     /**
-     * Tenant-owned live files can be downloaded through this face.
-     */
-    downloadable: true;
-    /**
-     * Present for session output files.
+     * Session scope for session outputs; null for other files.
      */
     scope?: {
         /**
@@ -798,7 +788,7 @@ export type OwnFileOpenAiFile = {
          * Id of the session the file belongs to.
          */
         id: string;
-    };
+    } | null;
     /**
      * Path within the session output directory; present for session outputs.
      */
@@ -807,6 +797,18 @@ export type OwnFileOpenAiFile = {
      * Session output revision; present for session outputs.
      */
     revision?: number;
+    /**
+     * processing is not yet usable; active is ready; expired cannot be read.
+     */
+    state: 'processing' | 'active' | 'expired';
+    /**
+     * upload is user-provided, generated is platform-produced, session is a session output.
+     */
+    source: 'upload' | 'generated' | 'session';
+    /**
+     * Content digest, prefixed sha256:. Available after processing completes.
+     */
+    sha256: string;
 };
 export type OwnFileErrorResponse = {
     error: OwnFileError;
@@ -835,7 +837,7 @@ export type OwnFileListFilesResponse = {
 };
 export type OwnFileDeleteFileResponse = {
     /**
-     * File identifier: file_dp_ followed by a 26-character uppercase Crockford ULID. Use the ID returned by upload or list.
+     * File identifier: file- followed by 24 base62 characters. Use the ID returned by upload or list.
      */
     id: string;
     /**
@@ -847,6 +849,132 @@ export type OwnFileDeleteFileResponse = {
      */
     deleted: boolean;
 };
+export type OwnFilePraxisCreateUpload = {
+    /**
+     * Exact complete file length in bytes, from 1 through 2147483648 (2 GiB); the sum of completed parts must match.
+     */
+    bytes: number;
+    /**
+     * Filename for the resulting file, at most 255 UTF-8 bytes.
+     */
+    filename: string;
+    /**
+     * Declared MIME type; validated against the assembled content.
+     */
+    mime_type: string;
+    /**
+     * Use user_data for conversation attachments, assistants for assistant files, or vision for PNG, JPEG, GIF and WebP images.
+     */
+    purpose: 'user_data' | 'assistants' | 'vision';
+    /**
+     * Optional expiry policy for the resulting file; omission retains the file until deletion.
+     */
+    expires_after?: {
+        /**
+         * Expiry is measured from file creation; created_at is the only supported anchor.
+         */
+        anchor?: 'created_at';
+        /**
+         * Resulting file lifetime in seconds; omit expires_after to retain it until deletion.
+         */
+        seconds: number;
+    };
+    /**
+     * Optional fixed part size in bytes, 5242880–64000000. Requires part_number on every part; retries of identical bytes at the same number return the same part. Omit to use arbitrary-sized parts.
+     */
+    part_size?: number;
+};
+export type OwnFilePraxisUpload = {
+    /**
+     * Upload identifier returned by create. Use this value for parts, complete and cancel.
+     */
+    id: string;
+    /**
+     * Object type; upload identifies an upload session.
+     */
+    object: 'upload';
+    /**
+     * Declared size of the complete file in bytes.
+     */
+    bytes: number;
+    /**
+     * Creation time as Unix seconds.
+     */
+    created_at: number;
+    /**
+     * Expiry time as Unix seconds; unfinished uploads expire after one hour.
+     */
+    expires_at: number;
+    /**
+     * Filename supplied when creating the upload.
+     */
+    filename: string;
+    /**
+     * File purpose: user_data for conversation attachments, assistants for assistant files, vision for images.
+     */
+    purpose: 'user_data' | 'assistants' | 'vision';
+    /**
+     * Upload state: pending accepts parts; completed has a file; cancelled was cancelled; expired exceeded its one-hour lifetime.
+     */
+    status: 'pending' | 'completed' | 'cancelled' | 'expired';
+    /**
+     * Present after complete. A file with status uploaded is still processing; poll files.retrieve until processed before use.
+     */
+    file?: OwnFileOpenAiFile | null;
+    /**
+     * Declared MIME type, verified during assembly.
+     */
+    mime_type?: string;
+    /**
+     * Assembly failure, or null if no failure is recorded.
+     */
+    error?: {
+        /**
+         * File service error code identifying the assembly failure.
+         */
+        code: string;
+        /**
+         * Explanation of why assembly failed.
+         */
+        message: string;
+    } | null;
+};
+export type OwnFilePraxisUploadPart = {
+    /**
+     * Part identifier returned by this request. Supply it to complete in file byte order.
+     */
+    id: string;
+    /**
+     * Object type; upload.part identifies an uploaded part.
+     */
+    object: 'upload.part';
+    /**
+     * Part creation time as Unix seconds.
+     */
+    created_at: number;
+    /**
+     * Parent upload identifier supplied in the request path.
+     */
+    upload_id: string;
+    /**
+     * Accepted part length in bytes.
+     */
+    bytes?: number;
+    /**
+     * Part content digest prefixed sha256:.
+     */
+    sha256?: string;
+};
+export type OwnFilePraxisCompleteUpload = {
+    /**
+     * All part IDs in concatenation order, without duplicates. Fixed-size uploads require increasing part_number order.
+     */
+    part_ids: Array<string>;
+    /**
+     * Optional whole-file MD5 as 32 hexadecimal characters; verified after assembly.
+     */
+    md5?: string;
+};
 /**
  * Problem document returned by the Meta method catalog on failure.
  */
@@ -1253,7 +1381,7 @@ export type OpenaiPrediction = {
  */
 export type OpenaiPromptCacheOptions = {
     /**
-     * Prompt cache mode; explicit caches only the blocks marked with prompt_cache_breakpoint.
+     * Explicit request-level cache mode: use only caller-marked cache breakpoints on models supporting this option.
      */
     mode: 'explicit';
     /**
@@ -1261,6 +1389,9 @@ export type OpenaiPromptCacheOptions = {
      */
     ttl?: string | null;
 } | null;
+/**
+ * Provider name used in provider selection preferences.
+ */
 export type OpenaiProviderName = 'Modal' | 'AkashML' | 'AI21' | 'AionLabs' | 'Alibaba' | 'Ambient' | 'Baidu' | 'Amazon Bedrock' | 'Amazon Nova' | 'Anthropic' | 'Arcee AI' | 'AssemblyAI' | 'AtlasCloud' | 'Avian' | 'Azure' | 'BaseTen' | 'BytePlus' | 'Black Forest Labs' | 'Cerebras' | 'Chutes' | 'Cirrascale' | 'Claude Platform on AWS' | 'Clarifai' | 'Cloudflare' | 'Cohere' | 'CoreWeave' | 'Cosine' | 'Crucible' | 'Crusoe' | 'Darkbloom' | 'Databricks' | 'Decart' | 'Deepgram' | 'DeepInfra' | 'DeepSeek' | 'DekaLLM' | 'DigitalOcean' | 'Featherless' | 'Fireworks' | 'Fish Audio' | 'Friendli' | 'GMICloud' | 'Google' | 'Google AI Studio' | 'Groq' | 'HeyGen' | 'Inception' | 'Inceptron' | 'InferenceNet' | 'Ionstream' | 'Infermatic' | 'Io Net' | 'Inferact vLLM' | 'Inflection' | 'Liquid' | 'Makora' | 'Mara' | 'Mancer 2' | 'Meta' | 'Minimax' | 'ModelRun' | 'Mistral' | 'Modular' | 'Moonshot AI' | 'Morph' | 'VoyageAI by MongoDB' | 'TypeSafe' | 'Near AI' | 'Nebius' | 'Nex AGI' | 'NextBit' | 'Novita' | 'Nvidia' | 'Ollama' | 'OpenAI' | 'OpenInference' | 'Parasail' | 'Poolside' | 'PrimeIntellect' | 'Perceptron' | 'Perplexity' | 'Phala' | 'Recraft' | 'Reka' | 'Relace' | 'Sail Research' | 'Sakana AI' | 'SambaNova' | 'Seed' | 'SiliconFlow' | 'Sourceful' | 'StepFun' | 'Stealth' | 'StreamLake' | 'Switchpoint' | 'Tencent' | 'Tenstorrent' | 'Thinking Machines' | 'Together' | 'Unbiased' | 'Upstage' | 'Venice' | 'Wafer' | 'WandB' | 'Quiver' | 'Krea' | 'Runway' | 'Xiaomi' | 'xAI' | 'Z.AI' | 'FakeProvider';
 /**
  * Preferred maximum latency (in seconds). Can be a number (applies to p50) or an object with percentile-specific cutoffs. Endpoints above the threshold(s) may still be used, but are deprioritized in routing. When using fallback models, this may cause a fallback model to be used instead of the primary model if it meets the threshold.
@@ -1270,6 +1401,9 @@ export type OpenaiPreferredMaxLatency = number | OpenaiPercentileLatencyCutoffs
  * Preferred minimum throughput (in tokens per second). Can be a number (applies to p50) or an object with percentile-specific cutoffs. Endpoints below the threshold(s) may still be used, but are deprioritized in routing. When using fallback models, this may cause a fallback model to be used instead of the primary model if it meets the threshold.
  */
 export type OpenaiPreferredMinThroughput = number | OpenaiPercentileThroughputCutoffs | null;
+/**
+ * Numeric precision or quantization format used by the model provider.
+ */
 export type OpenaiQuantization = 'int4' | 'int8' | 'fp4' | 'mxfp4' | 'nvfp4' | 'fp6' | 'fp8' | 'mxfp8' | 'fp16' | 'bf16' | 'fp32' | 'unknown';
 /**
  * The provider sorting strategy (price, throughput, latency)
@@ -1415,6 +1549,9 @@ export type OpenaiTraceConfig = {
     trace_name?: string;
     [key: string]: unknown;
 };
+/**
+ * Extra output data the request can ask for through include; each value adds one kind of detail to the response, such as file search results or encrypted reasoning content.
+ */
 export type OpenaiResponseIncludesEnum = 'file_search_call.results' | 'message.input_image.image_url' | 'computer_call_output.output.image_url' | 'reasoning.encrypted_content' | 'code_interpreter_call.outputs';
 /**
  * Input for a response request - can be a string or array of items
@@ -22188,7 +22325,7 @@ export type OpenaiOpenAiResponseCustomToolCallOutput = {
  */
 export type OpenaiPromptCacheBreakpoint = {
     /**
-     * Cache boundary mode; only explicit exists.
+     * Explicit cache boundary at this content block; automatic breakpoints remain enabled unless the request-level cache mode disables them.
      */
     mode: 'explicit';
 } | null;
@@ -27272,6 +27409,69 @@ export type UnarchiveAgentResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -30097,7 +30297,7 @@ export type ConnectComputerErrors = {
         };
     };
     /**
-     * COMPUTER_BUDGET_EXHAUSTED: today's full-computer time has been used up. Connect with need light to continue using the lightweight shell.
+     * Platform error with Computer code, message and hint
      */
     429: {
         error: {
@@ -32113,7 +32313,7 @@ export type ForkSessionResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         /**
@@ -34349,7 +34549,7 @@ export type FileDeleteFileData = {
     body?: never;
     path: {
         /**
-         * ID of a tenant-owned live file, as returned by upload or list; starts with file_dp_.
+         * ID of a tenant-owned live file, as returned by upload or list; starts with file-.
          */
         file_id: string;
     };
@@ -34378,7 +34578,7 @@ export type FileRetrieveFileData = {
     body?: never;
     path: {
         /**
-         * ID of a tenant-owned live file, as returned by upload or list; starts with file_dp_.
+         * ID of a tenant-owned live file, as returned by upload or list; starts with file-.
          */
         file_id: string;
     };
@@ -34407,7 +34607,7 @@ export type FileRetrieveFileContentData = {
     body?: never;
     path: {
         /**
-         * ID of a tenant-owned live file, as returned by upload or list; starts with file_dp_.
+         * ID of a tenant-owned live file, as returned by upload or list; starts with file-.
          */
         file_id: string;
     };
@@ -34440,6 +34640,139 @@ export type FileRetrieveFileContentResponses = {
     200: Blob | File;
 };
 export type FileRetrieveFileContentResponse = FileRetrieveFileContentResponses[keyof FileRetrieveFileContentResponses];
+export type FileCreateUploadData = {
+    body: OwnFilePraxisCreateUpload;
+    path?: never;
+    query?: never;
+    url: '/file/v1/uploads';
+};
+export type FileCreateUploadErrors = {
+    /**
+     * Invalid upload input or upload state; correct the request before retrying.
+     */
+    400: unknown;
+    /**
+     * The upload is missing or belongs to another organization.
+     */
+    404: unknown;
+    /**
+     * Completion inputs conflict with an earlier completion request.
+     */
+    409: unknown;
+};
+export type FileCreateUploadResponses = {
+    /**
+     * The upload state and, after completion, the resulting file.
+     */
+    200: OwnFilePraxisUpload;
+};
+export type FileCreateUploadResponse = FileCreateUploadResponses[keyof FileCreateUploadResponses];
+export type FileAddUploadPartData = {
+    body: {
+        /**
+         * Raw bytes of this part, nonempty and at most 64000000 bytes.
+         */
+        data: Blob | File;
+    };
+    path: {
+        /**
+         * Upload identifier from create.
+         */
+        upload_id: string;
+    };
+    query?: {
+        /**
+         * Fixed part position, starting at 1.
+         */
+        part_number?: number;
+    };
+    url: '/file/v1/uploads/{upload_id}/parts';
+};
+export type FileAddUploadPartErrors = {
+    /**
+     * Invalid upload input or upload state; correct the request before retrying.
+     */
+    400: unknown;
+    /**
+     * The upload is missing or belongs to another organization.
+     */
+    404: unknown;
+    /**
+     * Completion inputs conflict with an earlier completion request.
+     */
+    409: unknown;
+};
+export type FileAddUploadPartResponses = {
+    /**
+     * The part was accepted.
+     */
+    200: OwnFilePraxisUploadPart;
+};
+export type FileAddUploadPartResponse = FileAddUploadPartResponses[keyof FileAddUploadPartResponses];
+export type FileCompleteUploadData = {
+    body: OwnFilePraxisCompleteUpload;
+    path: {
+        /**
+         * Upload identifier from create.
+         */
+        upload_id: string;
+    };
+    query?: never;
+    url: '/file/v1/uploads/{upload_id}/complete';
+};
+export type FileCompleteUploadErrors = {
+    /**
+     * Invalid upload input or upload state; correct the request before retrying.
+     */
+    400: unknown;
+    /**
+     * The upload is missing or belongs to another organization.
+     */
+    404: unknown;
+    /**
+     * Completion inputs conflict with an earlier completion request.
+     */
+    409: unknown;
+};
+export type FileCompleteUploadResponses = {
+    /**
+     * The upload state and, after completion, the resulting file.
+     */
+    200: OwnFilePraxisUpload;
+};
+export type FileCompleteUploadResponse = FileCompleteUploadResponses[keyof FileCompleteUploadResponses];
+export type FileCancelUploadData = {
+    body?: never;
+    path: {
+        /**
+         * Upload identifier from create.
+         */
+        upload_id: string;
+    };
+    query?: never;
+    url: '/file/v1/uploads/{upload_id}/cancel';
+};
+export type FileCancelUploadErrors = {
+    /**
+     * Invalid upload input or upload state; correct the request before retrying.
+     */
+    400: unknown;
+    /**
+     * The upload is missing or belongs to another organization.
+     */
+    404: unknown;
+    /**
+     * Completion inputs conflict with an earlier completion request.
+     */
+    409: unknown;
+};
+export type FileCancelUploadResponses = {
+    /**
+     * The upload state and, after completion, the resulting file.
+     */
+    200: OwnFilePraxisUpload;
+};
+export type FileCancelUploadResponse = FileCancelUploadResponses[keyof FileCancelUploadResponses];
 export type HealthCheckData = {
     body?: never;
     path?: never;
@@ -38663,7 +38996,7 @@ export type ListOrganizationFeedbackResponse = ListOrganizationFeedbackResponses
 export type CreateOrganizationFeedbackData = {
     body: {
         /**
-         * Problem description and original error text; at most 4096 Unicode code points.
+         * Problem description, at most 4096 Unicode code points; may be empty only when contexts.praxis.error.message is a non-empty string.
          */
         message: string;
         /**
@@ -40694,7 +41027,7 @@ export type SessionsRetrieveResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -40972,7 +41305,7 @@ export type SessionsUpdateResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -41220,6 +41553,69 @@ export type AgentsListResponses = {
              * modified.
              */
             version: number;
+            /**
+             * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            databases: Array<{
+                /**
+                 * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            vector_stores: Array<{
+                /**
+                 * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            files: Array<{
+                /**
+                 * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reading the bound file; files do not accept read_write.
+                 */
+                access: 'read_only';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
             /**
              * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
              */
@@ -41672,6 +42068,69 @@ export type AgentsCreateData = {
          * across all toolsets allowed.
          */
         tools?: Array<AgentManaged15 | AgentManaged29 | AgentManaged32>;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases?: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores?: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files?: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.
          */
@@ -42137,6 +42596,69 @@ export type AgentsCreateResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -42617,6 +43139,69 @@ export type AgentsRetrieveResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -43074,6 +43659,69 @@ export type AgentsUpdateData = {
          * current version; omit to apply the update unconditionally.
          */
         version?: number;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        databases?: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        vector_stores?: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        files?: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
         /**
          * Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.
          */
@@ -43544,6 +44192,69 @@ export type AgentsUpdateResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -44018,6 +44729,69 @@ export type AgentsArchiveResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -44502,6 +45276,69 @@ export type AgentsVersionsListResponses = {
              * modified.
              */
             version: number;
+            /**
+             * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            databases: Array<{
+                /**
+                 * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            vector_stores: Array<{
+                /**
+                 * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            files: Array<{
+                /**
+                 * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reading the bound file; files do not accept read_write.
+                 */
+                access: 'read_only';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
             /**
              * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
              */
@@ -45053,7 +45890,7 @@ export type SessionsListResponses = {
              */
             created_at: string;
             /**
-             * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+             * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
              */
             environment_id?: string;
             metadata: AgentManaged173;
@@ -45187,10 +46024,9 @@ export type SessionsCreateData = {
          */
         agent: string | AgentManaged10 | AgentManaged167;
         /**
-         * ID of the `environment` defining the container configuration for
-         * this session.
+         * Execution environment id from agent.environments.list or agent.environments.create. For a service agent, omission selects the built-in light environment and returns session.environment_id=light; explicit null allocates no machine and makes machine tools, including codemode and bash, unavailable. Personal agents use their selected Computer.
          */
-        environment_id?: string;
+        environment_id?: string | null;
         /**
          * A hard spend ceiling. The session stops issuing new model requests
          * once the tracked list cost reaches `max_list_cost`.
@@ -45362,7 +46198,7 @@ export type SessionsCreateResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -45600,7 +46436,7 @@ export type SessionsArchiveResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -54449,7 +55285,7 @@ export type DatabaseDeleteData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54473,7 +55309,7 @@ export type DatabaseDeleteData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54505,7 +55341,7 @@ export type DatabaseDeleteData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54565,7 +55401,7 @@ export type DatabaseSelectData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54593,7 +55429,7 @@ export type DatabaseSelectData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54625,7 +55461,7 @@ export type DatabaseSelectData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54685,7 +55521,7 @@ export type DatabaseHeadData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54713,7 +55549,7 @@ export type DatabaseHeadData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54745,7 +55581,7 @@ export type DatabaseHeadData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54806,7 +55642,7 @@ export type DatabaseUpdateData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54830,7 +55666,7 @@ export type DatabaseUpdateData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54862,7 +55698,7 @@ export type DatabaseUpdateData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54926,7 +55762,7 @@ export type DatabaseInsertData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54950,7 +55786,7 @@ export type DatabaseInsertData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54982,7 +55818,7 @@ export type DatabaseInsertData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**