@deepraxis/sdk 0.1.0-dev.ce6682e → 0.1.0-dev.d23f787

package/dist/generated/types.gen.d.ts

@@ -1253,7 +1253,7 @@ export type OpenaiPrediction = {
  */
 export type OpenaiPromptCacheOptions = {
     /**
-     * Prompt cache mode; explicit caches only the blocks marked with prompt_cache_breakpoint.
+     * Explicit request-level cache mode: use only caller-marked cache breakpoints on models supporting this option.
      */
     mode: 'explicit';
     /**
@@ -1261,6 +1261,9 @@ export type OpenaiPromptCacheOptions = {
      */
     ttl?: string | null;
 } | null;
+/**
+ * Provider name used in provider selection preferences.
+ */
 export type OpenaiProviderName = 'Modal' | 'AkashML' | 'AI21' | 'AionLabs' | 'Alibaba' | 'Ambient' | 'Baidu' | 'Amazon Bedrock' | 'Amazon Nova' | 'Anthropic' | 'Arcee AI' | 'AssemblyAI' | 'AtlasCloud' | 'Avian' | 'Azure' | 'BaseTen' | 'BytePlus' | 'Black Forest Labs' | 'Cerebras' | 'Chutes' | 'Cirrascale' | 'Claude Platform on AWS' | 'Clarifai' | 'Cloudflare' | 'Cohere' | 'CoreWeave' | 'Cosine' | 'Crucible' | 'Crusoe' | 'Darkbloom' | 'Databricks' | 'Decart' | 'Deepgram' | 'DeepInfra' | 'DeepSeek' | 'DekaLLM' | 'DigitalOcean' | 'Featherless' | 'Fireworks' | 'Fish Audio' | 'Friendli' | 'GMICloud' | 'Google' | 'Google AI Studio' | 'Groq' | 'HeyGen' | 'Inception' | 'Inceptron' | 'InferenceNet' | 'Ionstream' | 'Infermatic' | 'Io Net' | 'Inferact vLLM' | 'Inflection' | 'Liquid' | 'Makora' | 'Mara' | 'Mancer 2' | 'Meta' | 'Minimax' | 'ModelRun' | 'Mistral' | 'Modular' | 'Moonshot AI' | 'Morph' | 'VoyageAI by MongoDB' | 'TypeSafe' | 'Near AI' | 'Nebius' | 'Nex AGI' | 'NextBit' | 'Novita' | 'Nvidia' | 'Ollama' | 'OpenAI' | 'OpenInference' | 'Parasail' | 'Poolside' | 'PrimeIntellect' | 'Perceptron' | 'Perplexity' | 'Phala' | 'Recraft' | 'Reka' | 'Relace' | 'Sail Research' | 'Sakana AI' | 'SambaNova' | 'Seed' | 'SiliconFlow' | 'Sourceful' | 'StepFun' | 'Stealth' | 'StreamLake' | 'Switchpoint' | 'Tencent' | 'Tenstorrent' | 'Thinking Machines' | 'Together' | 'Unbiased' | 'Upstage' | 'Venice' | 'Wafer' | 'WandB' | 'Quiver' | 'Krea' | 'Runway' | 'Xiaomi' | 'xAI' | 'Z.AI' | 'FakeProvider';
 /**
  * Preferred maximum latency (in seconds). Can be a number (applies to p50) or an object with percentile-specific cutoffs. Endpoints above the threshold(s) may still be used, but are deprioritized in routing. When using fallback models, this may cause a fallback model to be used instead of the primary model if it meets the threshold.
@@ -1270,6 +1273,9 @@ export type OpenaiPreferredMaxLatency = number | OpenaiPercentileLatencyCutoffs
  * Preferred minimum throughput (in tokens per second). Can be a number (applies to p50) or an object with percentile-specific cutoffs. Endpoints below the threshold(s) may still be used, but are deprioritized in routing. When using fallback models, this may cause a fallback model to be used instead of the primary model if it meets the threshold.
  */
 export type OpenaiPreferredMinThroughput = number | OpenaiPercentileThroughputCutoffs | null;
+/**
+ * Numeric precision or quantization format used by the model provider.
+ */
 export type OpenaiQuantization = 'int4' | 'int8' | 'fp4' | 'mxfp4' | 'nvfp4' | 'fp6' | 'fp8' | 'mxfp8' | 'fp16' | 'bf16' | 'fp32' | 'unknown';
 /**
  * The provider sorting strategy (price, throughput, latency)
@@ -1415,6 +1421,9 @@ export type OpenaiTraceConfig = {
     trace_name?: string;
     [key: string]: unknown;
 };
+/**
+ * Extra output data the request can ask for through include; each value adds one kind of detail to the response, such as file search results or encrypted reasoning content.
+ */
 export type OpenaiResponseIncludesEnum = 'file_search_call.results' | 'message.input_image.image_url' | 'computer_call_output.output.image_url' | 'reasoning.encrypted_content' | 'code_interpreter_call.outputs';
 /**
  * Input for a response request - can be a string or array of items
@@ -22188,7 +22197,7 @@ export type OpenaiOpenAiResponseCustomToolCallOutput = {
  */
 export type OpenaiPromptCacheBreakpoint = {
     /**
-     * Cache boundary mode; only explicit exists.
+     * Explicit cache boundary at this content block; automatic breakpoints remain enabled unless the request-level cache mode disables them.
      */
     mode: 'explicit';
 } | null;
@@ -27272,6 +27281,69 @@ export type UnarchiveAgentResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -30097,7 +30169,7 @@ export type ConnectComputerErrors = {
         };
     };
     /**
-     * COMPUTER_BUDGET_EXHAUSTED: today's full-computer time has been used up. Connect with need light to continue using the lightweight shell.
+     * Platform error with Computer code, message and hint
      */
     429: {
         error: {
@@ -32113,7 +32185,7 @@ export type ForkSessionResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         /**
@@ -40694,7 +40766,7 @@ export type SessionsRetrieveResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -40972,7 +41044,7 @@ export type SessionsUpdateResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -41220,6 +41292,69 @@ export type AgentsListResponses = {
              * modified.
              */
             version: number;
+            /**
+             * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            databases: Array<{
+                /**
+                 * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            vector_stores: Array<{
+                /**
+                 * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            files: Array<{
+                /**
+                 * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reading the bound file; files do not accept read_write.
+                 */
+                access: 'read_only';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
             /**
              * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
              */
@@ -41672,6 +41807,69 @@ export type AgentsCreateData = {
          * across all toolsets allowed.
          */
         tools?: Array<AgentManaged15 | AgentManaged29 | AgentManaged32>;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases?: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores?: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files?: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.
          */
@@ -42137,6 +42335,69 @@ export type AgentsCreateResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -42617,6 +42878,69 @@ export type AgentsRetrieveResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -43074,6 +43398,69 @@ export type AgentsUpdateData = {
          * current version; omit to apply the update unconditionally.
          */
         version?: number;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        databases?: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        vector_stores?: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
+        /**
+         * Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings.
+         */
+        files?: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }> | null;
         /**
          * Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error.
          */
@@ -43544,6 +43931,69 @@ export type AgentsUpdateResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -44018,6 +44468,69 @@ export type AgentsArchiveResponses = {
          * modified.
          */
         version: number;
+        /**
+         * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        databases: Array<{
+            /**
+             * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        vector_stores: Array<{
+            /**
+             * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reads of the bound resource; read_write permits reads and writes.
+             */
+            access: 'read_only' | 'read_write';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
+        /**
+         * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+         */
+        files: Array<{
+            /**
+             * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+             */
+            id: string;
+            /**
+             * read_only permits reading the bound file; files do not accept read_write.
+             */
+            access: 'read_only';
+            /**
+             * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+             */
+            instructions?: string;
+            /**
+             * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+             */
+            enabled?: boolean;
+        }>;
         /**
          * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
          */
@@ -44502,6 +45015,69 @@ export type AgentsVersionsListResponses = {
              * modified.
              */
             version: number;
+            /**
+             * Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            databases: Array<{
+                /**
+                 * Resource id from database.databases.list or database.databases.create; use the returned id, not its name. Must start with db_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            vector_stores: Array<{
+                /**
+                 * Resource id from knowledge.vectorStores.list or knowledge.vectorStores.create; use the returned id, not its name. Must start with vs_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reads of the bound resource; read_write permits reads and writes.
+                 */
+                access: 'read_only' | 'read_write';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
+            /**
+             * File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings.
+             */
+            files: Array<{
+                /**
+                 * Resource id from file.files.list or file.files.create (upload); use the returned id, not its name. Must start with file_ and be unique within this binding array.
+                 */
+                id: string;
+                /**
+                 * read_only permits reading the bound file; files do not accept read_write.
+                 */
+                access: 'read_only';
+                /**
+                 * Optional guidance for using this resource, up to 4096 characters; does not expand access.
+                 */
+                instructions?: string;
+                /**
+                 * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
+                 */
+                enabled?: boolean;
+            }>;
             /**
              * Immutable agent kind. personal uses a durable computer; service uses a clean environment per session. Historical agents infer kind from their computer binding.
              */
@@ -45053,7 +45629,7 @@ export type SessionsListResponses = {
              */
             created_at: string;
             /**
-             * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+             * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
              */
             environment_id?: string;
             metadata: AgentManaged173;
@@ -45187,10 +45763,9 @@ export type SessionsCreateData = {
          */
         agent: string | AgentManaged10 | AgentManaged167;
         /**
-         * ID of the `environment` defining the container configuration for
-         * this session.
+         * Execution environment id from agent.environments.list or agent.environments.create. For a service agent, omission selects the built-in light environment and returns session.environment_id=light; explicit null allocates no machine and makes machine tools, including codemode and bash, unavailable. Personal agents use their selected Computer.
          */
-        environment_id?: string;
+        environment_id?: string | null;
         /**
          * A hard spend ceiling. The session stops issuing new model requests
          * once the tracked list cost reaches `max_list_cost`.
@@ -45362,7 +45937,7 @@ export type SessionsCreateResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -45600,7 +46175,7 @@ export type SessionsArchiveResponses = {
          */
         created_at: string;
         /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         * Execution environment selected for this session. Service sessions return light when environment_id was omitted, or null when explicitly created without a machine; Computer sessions may omit this field.
          */
         environment_id?: string;
         metadata: AgentManaged173;
@@ -54449,7 +55024,7 @@ export type DatabaseDeleteData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54473,7 +55048,7 @@ export type DatabaseDeleteData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54505,7 +55080,7 @@ export type DatabaseDeleteData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54565,7 +55140,7 @@ export type DatabaseSelectData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54593,7 +55168,7 @@ export type DatabaseSelectData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54625,7 +55200,7 @@ export type DatabaseSelectData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54685,7 +55260,7 @@ export type DatabaseHeadData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54713,7 +55288,7 @@ export type DatabaseHeadData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54745,7 +55320,7 @@ export type DatabaseHeadData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54806,7 +55381,7 @@ export type DatabaseUpdateData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54830,7 +55405,7 @@ export type DatabaseUpdateData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54862,7 +55437,7 @@ export type DatabaseUpdateData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**
@@ -54926,7 +55501,7 @@ export type DatabaseInsertData = {
          */
         'Range-Unit'?: string;
         /**
-         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default uses field defaults for missing batch columns (otherwise NULL). Unknown preferences are ignored unless handling=strict (400 PGRST122).
+         * Comma-separated preferences. count=exact|planned|estimated: unfiltered counts are exact; filtered planned reports *, estimated falls back to * when predicted over budget. missing=default skips null-filling of missing batch columns: inserts use field defaults (or null without a default), while conflict merges preserve omitted columns. Otherwise, holes in the batch key union are filled with null and can clear values during merge. Explicit null stays null. resolution=merge-duplicates updates supplied columns on conflict; resolution=ignore-duplicates leaves conflicting rows unchanged. Unknown preferences are ignored unless handling=strict (400 PGRST122).
          */
         Prefer?: string;
         /**
@@ -54950,7 +55525,7 @@ export type DatabaseInsertData = {
          */
         select?: string;
         /**
-         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix.
+         * Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported.
          */
         '{column}'?: string;
         /**
@@ -54982,7 +55557,7 @@ export type DatabaseInsertData = {
          */
         offset?: number;
         /**
-         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
+         * POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id.
          */
         on_conflict?: string;
         /**