@deepraxis/sdk 0.1.1-dev.13dab28 → 0.1.1-dev.1538445

package/dist/generated/types.gen.d.ts

@@ -28050,7 +28050,7 @@ export type ApplyAgentVersionResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -28069,6 +28069,10 @@ export type ApplyAgentVersionResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -28078,6 +28082,10 @@ export type ApplyAgentVersionResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -29227,7 +29235,7 @@ export type UnarchiveAgentResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -29246,6 +29254,10 @@ export type UnarchiveAgentResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -29255,6 +29267,10 @@ export type UnarchiveAgentResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -29771,37 +29787,45 @@ export type SetRunFeedbackResponses = {
     };
 };
 export type SetRunFeedbackResponse = SetRunFeedbackResponses[keyof SetRunFeedbackResponses];
-export type ListEndUsersData = {
+export type ListCustomersData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
     };
     query?: {
         /**
-         * Maximum users per page; defaults to 20.
+         * Maximum customers per page, 1 to 100; defaults to 20.
          */
         limit?: number;
         /**
-         * next_page from the previous response with the same agent, q and limit.
+         * next_page from the previous response with the same q, type, blocked and limit.
          */
         page?: string;
         /**
-         * Case-sensitive literal prefix of external_user_id; omit or use an empty string for all users.
+         * Case-sensitive literal prefix of the customer id; omit for all customers.
          */
         q?: string;
+        /**
+         * Only identified or only anonymous customers; omit for both.
+         */
+        type?: 'identified' | 'anonymous';
+        /**
+         * true for blocked customers only, false for customers who are not blocked; omit for both.
+         */
+        blocked?: boolean;
     };
-    url: '/agent/v1/agents/{agent_id}/end_users';
+    url: '/agent/v1/agents/{agent_id}/customers';
 };
-export type ListEndUsersErrors = {
+export type ListCustomersErrors = {
     /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
+     * INVALID_PARAMS: limit outside 1 to 100, type other than identified or anonymous, blocked other than true or false, or an unknown query parameter. INVALID_PAGE_TOKEN: next_page from another query; restart without page.
      */
     400: unknown;
     /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -29809,14 +29833,14 @@ export type ListEndUsersErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * The agent is not an active service agent of your organization, or the caller is a customer access token.
      */
     404: unknown;
 };
-export type ListEndUsersError = ListEndUsersErrors[keyof ListEndUsersErrors];
-export type ListEndUsersResponses = {
+export type ListCustomersError = ListCustomersErrors[keyof ListCustomersErrors];
+export type ListCustomersResponses = {
     /**
-     * Matching users and next page cursor.
+     * Matching customers and the next page cursor.
      */
     200: {
         /**
@@ -29824,23 +29848,35 @@ export type ListEndUsersResponses = {
          */
         data: Array<{
             /**
-             * Host application's user identifier, scoped to this organization and agent.
+             * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
+             */
+            id: string;
+            /**
+             * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+             */
+            type: 'identified' | 'anonymous';
+            /**
+             * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+             */
+            merged_into: string | null;
+            /**
+             * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
              */
-            external_user_id: string;
+            blocked: boolean;
             /**
-             * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
+             * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
              */
             first_seen_at: string | null;
             /**
-             * Latest session update or token issuance time; null when there is no history.
+             * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
              */
-            last_active_at: string | null;
+            last_seen_at: string | null;
             /**
-             * Total sessions for this end user on this agent.
+             * Sessions of this customer on this agent, including those of anonymous customers merged into it.
              */
             session_count: number;
             /**
-             * Accumulated recorded cost of this customer's sessions on this agent: model usage (threads included) plus session runtime; amount "0.000000" when nothing has been recorded.
+             * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
              */
             cost: {
                 /**
@@ -29852,45 +29888,41 @@ export type ListEndUsersResponses = {
                  */
                 currency: 'USD';
             };
-            /**
-             * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
-             */
-            blocked: boolean;
         }>;
         /**
-         * Cursor for the same agent, q and limit; null when exhausted.
+         * Cursor for the next page with the same agent, q, type, blocked and limit; null when exhausted.
          */
         next_page: string | null;
     };
 };
-export type ListEndUsersResponse = ListEndUsersResponses[keyof ListEndUsersResponses];
-export type DeleteEndUserData = {
+export type ListCustomersResponse = ListCustomersResponses[keyof ListCustomersResponses];
+export type DeleteCustomerData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * Customer id from customer listing, or your own customer_id.
          */
-        external_user_id: string;
+        customer_id: string;
     };
     query: {
         /**
-         * Must exactly equal the external_user_id path parameter to confirm destructive deletion.
+         * Must equal the customer_id path parameter exactly, confirming the destructive deletion.
          */
         confirm: string;
     };
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}';
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}';
 };
-export type DeleteEndUserErrors = {
+export type DeleteCustomerErrors = {
     /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
+     * INVALID_PARAMS: confirm is missing or differs from customer_id; send ?confirm=<customer_id>.
      */
     400: unknown;
     /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -29898,12 +29930,12 @@ export type DeleteEndUserErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
      */
     404: unknown;
 };
-export type DeleteEndUserError = DeleteEndUserErrors[keyof DeleteEndUserErrors];
-export type DeleteEndUserResponses = {
+export type DeleteCustomerError = DeleteCustomerErrors[keyof DeleteCustomerErrors];
+export type DeleteCustomerResponses = {
     /**
      * Deletion accepted; poll the deletion endpoint until done or failed.
      */
@@ -29918,29 +29950,25 @@ export type DeleteEndUserResponses = {
         status: 'pending';
     };
 };
-export type DeleteEndUserResponse = DeleteEndUserResponses[keyof DeleteEndUserResponses];
-export type GetEndUserData = {
+export type DeleteCustomerResponse = DeleteCustomerResponses[keyof DeleteCustomerResponses];
+export type GetCustomerData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * Customer id from customer listing, or your own customer_id.
          */
-        external_user_id: string;
+        customer_id: string;
     };
     query?: never;
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}';
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}';
 };
-export type GetEndUserErrors = {
-    /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
-     */
-    400: unknown;
+export type GetCustomerErrors = {
     /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -29948,34 +29976,46 @@ export type GetEndUserErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
      */
     404: unknown;
 };
-export type GetEndUserError = GetEndUserErrors[keyof GetEndUserErrors];
-export type GetEndUserResponses = {
+export type GetCustomerError = GetCustomerErrors[keyof GetCustomerErrors];
+export type GetCustomerResponses = {
     /**
-     * Current end-user view.
+     * The customer with its recent sessions.
      */
     200: {
         /**
-         * Host application's user identifier, scoped to this organization and agent.
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
+         */
+        id: string;
+        /**
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+         */
+        type: 'identified' | 'anonymous';
+        /**
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+         */
+        merged_into: string | null;
+        /**
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
          */
-        external_user_id: string;
+        blocked: boolean;
         /**
-         * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
          */
         first_seen_at: string | null;
         /**
-         * Latest session update or token issuance time; null when there is no history.
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
          */
-        last_active_at: string | null;
+        last_seen_at: string | null;
         /**
-         * Total sessions for this end user on this agent.
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
          */
         session_count: number;
         /**
-         * Accumulated recorded cost of this customer's sessions on this agent: model usage (threads included) plus session runtime; amount "0.000000" when nothing has been recorded.
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
          */
         cost: {
             /**
@@ -29988,11 +30028,7 @@ export type GetEndUserResponses = {
             currency: 'USD';
         };
         /**
-         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
-         */
-        blocked: boolean;
-        /**
-         * Up to twenty sessions, ordered by most recent update first.
+         * Up to twenty sessions of the customer, and of anonymous customers merged into it, most recently updated first.
          */
         recent_sessions: Array<{
             /**
@@ -30018,29 +30054,25 @@ export type GetEndUserResponses = {
         }>;
     };
 };
-export type GetEndUserResponse = GetEndUserResponses[keyof GetEndUserResponses];
-export type GetEndUserDeletionData = {
+export type GetCustomerResponse = GetCustomerResponses[keyof GetCustomerResponses];
+export type GetCustomerDeletionData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * Customer id from customer listing, or your own customer_id.
          */
-        external_user_id: string;
+        customer_id: string;
     };
     query?: never;
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/deletion';
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/deletion';
 };
-export type GetEndUserDeletionErrors = {
-    /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
-     */
-    400: unknown;
+export type GetCustomerDeletionErrors = {
     /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -30048,14 +30080,14 @@ export type GetEndUserDeletionErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * CUSTOMER_NOT_FOUND or no deletion task: the customer or task is unknown, or the caller is a customer access token.
      */
     404: unknown;
 };
-export type GetEndUserDeletionError = GetEndUserDeletionErrors[keyof GetEndUserDeletionErrors];
-export type GetEndUserDeletionResponses = {
+export type GetCustomerDeletionError = GetCustomerDeletionErrors[keyof GetCustomerDeletionErrors];
+export type GetCustomerDeletionResponses = {
     /**
-     * Latest deletion task and snapshot counts.
+     * The latest deletion task and its snapshot counts.
      */
     200: {
         /**
@@ -30109,29 +30141,25 @@ export type GetEndUserDeletionResponses = {
         updated_at: string;
     };
 };
-export type GetEndUserDeletionResponse = GetEndUserDeletionResponses[keyof GetEndUserDeletionResponses];
-export type RevokeEndUserTokensData = {
+export type GetCustomerDeletionResponse = GetCustomerDeletionResponses[keyof GetCustomerDeletionResponses];
+export type BlockCustomerData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * Customer id from customer listing, or your own customer_id.
          */
-        external_user_id: string;
+        customer_id: string;
     };
     query?: never;
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/revoke_tokens';
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/block';
 };
-export type RevokeEndUserTokensErrors = {
-    /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
-     */
-    400: unknown;
+export type BlockCustomerErrors = {
     /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -30139,92 +30167,50 @@ export type RevokeEndUserTokensErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
      */
     404: unknown;
     /**
-     * Credential revocation failed; grant timestamps remain unchanged. A requested block remains in effect; retry to finish revocation.
+     * Credential revocation failed; the customer stays blocked if you asked to block it. Retry to finish revoking.
      */
     502: unknown;
 };
-export type RevokeEndUserTokensError = RevokeEndUserTokensErrors[keyof RevokeEndUserTokensErrors];
-export type RevokeEndUserTokensResponses = {
+export type BlockCustomerError = BlockCustomerErrors[keyof BlockCustomerErrors];
+export type BlockCustomerResponses = {
     /**
-     * Number of newly revoked grants.
+     * The customer after the change.
      */
     200: {
         /**
-         * Number of previously unrevoked grants marked revoked by this request.
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
          */
-        revoked: number;
-    };
-};
-export type RevokeEndUserTokensResponse = RevokeEndUserTokensResponses[keyof RevokeEndUserTokensResponses];
-export type BlockEndUserData = {
-    body?: never;
-    path: {
+        id: string;
         /**
-         * Active service agent identifier from agent creation or listing.
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
          */
-        agent_id: string;
+        type: 'identified' | 'anonymous';
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
          */
-        external_user_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/block';
-};
-export type BlockEndUserErrors = {
-    /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
-     */
-    400: unknown;
-    /**
-     * Authenticate with a host credential.
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
-     */
-    404: unknown;
-    /**
-     * Configure an embed policy before blocking or unblocking; retry if a concurrent policy update caused the conflict.
-     */
-    409: unknown;
-    /**
-     * Credential revocation failed; grant timestamps remain unchanged. A requested block remains in effect; retry to finish revocation.
-     */
-    502: unknown;
-};
-export type BlockEndUserError = BlockEndUserErrors[keyof BlockEndUserErrors];
-export type BlockEndUserResponses = {
-    /**
-     * Current end-user view.
-     */
-    200: {
+        merged_into: string | null;
         /**
-         * Host application's user identifier, scoped to this organization and agent.
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
          */
-        external_user_id: string;
+        blocked: boolean;
         /**
-         * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
          */
         first_seen_at: string | null;
         /**
-         * Latest session update or token issuance time; null when there is no history.
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
          */
-        last_active_at: string | null;
+        last_seen_at: string | null;
         /**
-         * Total sessions for this end user on this agent.
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
          */
         session_count: number;
         /**
-         * Accumulated recorded cost of this customer's sessions on this agent: model usage (threads included) plus session runtime; amount "0.000000" when nothing has been recorded.
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
          */
         cost: {
             /**
@@ -30236,35 +30222,27 @@ export type BlockEndUserResponses = {
              */
             currency: 'USD';
         };
-        /**
-         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
-         */
-        blocked: boolean;
     };
 };
-export type BlockEndUserResponse = BlockEndUserResponses[keyof BlockEndUserResponses];
-export type UnblockEndUserData = {
+export type BlockCustomerResponse = BlockCustomerResponses[keyof BlockCustomerResponses];
+export type UnblockCustomerData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * Customer id from customer listing, or your own customer_id.
          */
-        external_user_id: string;
+        customer_id: string;
     };
     query?: never;
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/unblock';
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/unblock';
 };
-export type UnblockEndUserErrors = {
-    /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
-     */
-    400: unknown;
+export type UnblockCustomerErrors = {
     /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -30272,38 +30250,46 @@ export type UnblockEndUserErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
      */
     404: unknown;
-    /**
-     * Configure an embed policy before blocking or unblocking; retry if a concurrent policy update caused the conflict.
-     */
-    409: unknown;
 };
-export type UnblockEndUserError = UnblockEndUserErrors[keyof UnblockEndUserErrors];
-export type UnblockEndUserResponses = {
+export type UnblockCustomerError = UnblockCustomerErrors[keyof UnblockCustomerErrors];
+export type UnblockCustomerResponses = {
     /**
-     * Current end-user view.
+     * The customer after the change.
      */
     200: {
         /**
-         * Host application's user identifier, scoped to this organization and agent.
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
+         */
+        id: string;
+        /**
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+         */
+        type: 'identified' | 'anonymous';
+        /**
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+         */
+        merged_into: string | null;
+        /**
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
          */
-        external_user_id: string;
+        blocked: boolean;
         /**
-         * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
          */
         first_seen_at: string | null;
         /**
-         * Latest session update or token issuance time; null when there is no history.
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
          */
-        last_active_at: string | null;
+        last_seen_at: string | null;
         /**
-         * Total sessions for this end user on this agent.
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
          */
         session_count: number;
         /**
-         * Accumulated recorded cost of this customer's sessions on this agent: model usage (threads included) plus session runtime; amount "0.000000" when nothing has been recorded.
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
          */
         cost: {
             /**
@@ -30315,50 +30301,25 @@ export type UnblockEndUserResponses = {
              */
             currency: 'USD';
         };
-        /**
-         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
-         */
-        blocked: boolean;
     };
 };
-export type UnblockEndUserResponse = UnblockEndUserResponses[keyof UnblockEndUserResponses];
-export type ListCustomersData = {
+export type UnblockCustomerResponse = UnblockCustomerResponses[keyof UnblockCustomerResponses];
+export type RevokeCustomerTokensData = {
     body?: never;
     path: {
         /**
          * Active service agent id from agent creation or listing.
          */
         agent_id: string;
-    };
-    query?: {
-        /**
-         * Maximum customers per page, 1 to 100; defaults to 20.
-         */
-        limit?: number;
-        /**
-         * next_page from the previous response with the same q, type, blocked and limit.
-         */
-        page?: string;
-        /**
-         * Case-sensitive literal prefix of the customer id; omit for all customers.
-         */
-        q?: string;
-        /**
-         * Only identified or only anonymous customers; omit for both.
-         */
-        type?: 'identified' | 'anonymous';
         /**
-         * true for blocked customers only, false for customers who are not blocked; omit for both.
+         * Customer id from customer listing, or your own customer_id.
          */
-        blocked?: boolean;
+        customer_id: string;
     };
-    url: '/agent/v1/agents/{agent_id}/customers';
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/revoke_tokens';
 };
-export type ListCustomersErrors = {
-    /**
-     * INVALID_PARAMS: limit outside 1 to 100, type other than identified or anonymous, blocked other than true or false, or an unknown query parameter. INVALID_PAGE_TOKEN: next_page from another query; restart without page.
-     */
-    400: unknown;
+export type RevokeCustomerTokensErrors = {
     /**
      * Authenticate with your API key or a console session.
      */
@@ -30368,142 +30329,41 @@ export type ListCustomersErrors = {
      */
     403: AgentError;
     /**
-     * The agent is not an active service agent of your organization, or the caller is a customer access token.
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
      */
     404: unknown;
-};
-export type ListCustomersError = ListCustomersErrors[keyof ListCustomersErrors];
-export type ListCustomersResponses = {
-    /**
-     * Matching customers and the next page cursor.
-     */
-    200: {
-        /**
-         * Items of this page, in the order requested by the call.
-         */
-        data: Array<{
-            /**
-             * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
-             */
-            id: string;
-            /**
-             * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
-             */
-            type: 'identified' | 'anonymous';
-            /**
-             * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
-             */
-            merged_into: string | null;
-            /**
-             * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
-             */
-            blocked: boolean;
-            /**
-             * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
-             */
-            first_seen_at: string | null;
-            /**
-             * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
-             */
-            last_seen_at: string | null;
-            /**
-             * Sessions of this customer on this agent, including those of anonymous customers merged into it.
-             */
-            session_count: number;
-            /**
-             * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
-             */
-            cost: {
-                /**
-                 * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
-                 */
-                amount: string;
-                /**
-                 * Always USD.
-                 */
-                currency: 'USD';
-            };
-        }>;
-        /**
-         * Cursor for the next page with the same agent, q, type, blocked and limit; null when exhausted.
-         */
-        next_page: string | null;
-    };
-};
-export type ListCustomersResponse = ListCustomersResponses[keyof ListCustomersResponses];
-export type DeleteCustomerData = {
-    body?: never;
-    path: {
-        /**
-         * Active service agent id from agent creation or listing.
-         */
-        agent_id: string;
-        /**
-         * Customer id from customer listing, or your own customer_id.
-         */
-        customer_id: string;
-    };
-    query: {
-        /**
-         * Must equal the customer_id path parameter exactly, confirming the destructive deletion.
-         */
-        confirm: string;
-    };
-    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}';
-};
-export type DeleteCustomerErrors = {
-    /**
-     * INVALID_PARAMS: confirm is missing or differs from customer_id; send ?confirm=<customer_id>.
-     */
-    400: unknown;
-    /**
-     * Authenticate with your API key or a console session.
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
     /**
-     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     * Credential revocation failed; the customer stays blocked if you asked to block it. Retry to finish revoking.
      */
-    404: unknown;
+    502: unknown;
 };
-export type DeleteCustomerError = DeleteCustomerErrors[keyof DeleteCustomerErrors];
-export type DeleteCustomerResponses = {
+export type RevokeCustomerTokensError = RevokeCustomerTokensErrors[keyof RevokeCustomerTokensErrors];
+export type RevokeCustomerTokensResponses = {
     /**
-     * Deletion accepted; poll the deletion endpoint until done or failed.
+     * How many access tokens this request revoked.
      */
-    202: {
-        /**
-         * Deletion task identifier.
-         */
-        id: string;
+    200: {
         /**
-         * Accepted for asynchronous processing; poll deletion for progress.
+         * Number of access tokens this request revoked; 0 when none was live.
          */
-        status: 'pending';
+        revoked: number;
     };
 };
-export type DeleteCustomerResponse = DeleteCustomerResponses[keyof DeleteCustomerResponses];
-export type GetCustomerData = {
+export type RevokeCustomerTokensResponse = RevokeCustomerTokensResponses[keyof RevokeCustomerTokensResponses];
+export type GetAgentAppearanceData = {
     body?: never;
     path: {
         /**
-         * Active service agent id from agent creation or listing.
+         * Service agent id from agent creation or listing; with a customer access token, the agent the token was issued for.
          */
         agent_id: string;
-        /**
-         * Customer id from customer listing, or your own customer_id.
-         */
-        customer_id: string;
     };
     query?: never;
-    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}';
+    url: '/agent/v1/agents/{agent_id}/appearance';
 };
-export type GetCustomerErrors = {
+export type GetAgentAppearanceErrors = {
     /**
-     * Authenticate with your API key or a console session.
+     * Authenticate with a customer access token of this agent, your API key or a console session.
      */
     401: unknown;
     /**
@@ -30511,1368 +30371,540 @@ export type GetCustomerErrors = {
      */
     403: AgentError;
     /**
-     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     * AGENT_NOT_FOUND: the agent is absent, archived or not a service agent, or the customer access token belongs to another agent.
      */
     404: unknown;
+    /**
+     * Appearance is temporarily unavailable; use the default appearance and continue the conversation.
+     */
+    503: unknown;
 };
-export type GetCustomerError = GetCustomerErrors[keyof GetCustomerErrors];
-export type GetCustomerResponses = {
+export type GetAgentAppearanceError = GetAgentAppearanceErrors[keyof GetAgentAppearanceErrors];
+export type GetAgentAppearanceResponses = {
     /**
-     * The customer with its recent sessions.
+     * Saved Kit options, at most 8192 UTF-8 JSON bytes. Omitted groups use Kit defaults; an unconfigured agent returns an empty object.
      */
     200: {
         /**
-         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
-         */
-        id: string;
-        /**
-         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
-         */
-        type: 'identified' | 'anonymous';
-        /**
-         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
-         */
-        merged_into: string | null;
-        /**
-         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
-         */
-        blocked: boolean;
-        /**
-         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
-         */
-        first_seen_at: string | null;
-        /**
-         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
-         */
-        last_seen_at: string | null;
-        /**
-         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
-         */
-        session_count: number;
-        /**
-         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+         * Public identity displayed on the chat page, independent of the internal agent name.
          */
-        cost: {
+        agent?: {
             /**
-             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             * Display name; omission keeps the neutral browser-language default.
              */
-            amount: string;
+            name?: string;
             /**
-             * Always USD.
+             * Optional HTTPS avatar image URL; non-HTTPS images are rejected.
              */
-            currency: 'USD';
+            avatar?: string;
         };
         /**
-         * Up to twenty sessions of the customer, and of anonymous customers merged into it, most recently updated first.
+         * Loader default: inline stays in the page, sidebar attaches to the edge, popup floats above its launcher, modal centers an overlay. A script data-layout overrides it; Hosted always uses inline.
          */
-        recent_sessions: Array<{
+        layout?: 'inline' | 'sidebar' | 'popup' | 'modal';
+        /**
+         * Default entry button for the loader; an explicit script data-launcher takes precedence.
+         */
+        launcher?: {
             /**
-             * Public sesn_ session identifier, usable with session retrieval.
+             * Entry control: none hides the launcher, bubble shows a button, mascot shows a character that reacts while the visitor types and the agent thinks and answers. A mascot needs pack.
              */
-            id: string;
+            type: 'none' | 'bubble' | 'mascot';
             /**
-             * Session title, or null when unset.
+             * Mascot images: exactly one of preset or images. Send pack, not image.
              */
-            title: string | null;
+            pack?: {
+                /**
+                 * Built-in character: mint (mint support girl), cat (cat-eared girl) or bot (small robot).
+                 */
+                preset?: 'mint' | 'cat' | 'bot';
+                /**
+                 * One HTTPS image per slot; only idle is required and a missing slot shows idle. Use 2:3 canvases with the feet bottom-centered on a transparent background; PNG or WebP stay still, GIF, WebP and APNG play as they are.
+                 */
+                images?: {
+                    /**
+                     * Resting state.
+                     */
+                    idle: string;
+                    /**
+                     * Page open and while the greeting bubble shows.
+                     */
+                    greet?: string;
+                    /**
+                     * The visitor is typing in the composer.
+                     */
+                    listening?: string;
+                    /**
+                     * After the visitor sends, before the first reply text.
+                     */
+                    thinking?: string;
+                    /**
+                     * While the reply streams; alternates with talking-2 every 220 ms.
+                     */
+                    talking?: string;
+                    /**
+                     * Second mouth frame of talking, mouth closed; without it talking alternates with idle.
+                     */
+                    'talking-2'?: string;
+                    /**
+                     * The last turn failed or was refused.
+                     */
+                    sorry?: string;
+                    /**
+                     * No interaction for 60 seconds; hover or click wakes the mascot.
+                     */
+                    sleep?: string;
+                };
+            };
             /**
-             * Session entry surface, or null when no surface was recorded.
+             * Legacy single mascot image, read as pack.images.idle. When pack is present, pack wins.
              */
-            source: string | null;
+            image?: string;
             /**
-             * Session creation time in UTC.
+             * float (default) gently floats the mascot, bounces on hover and waves with the greeting; none keeps it still. Reduced-motion settings always win.
              */
-            created_at: string;
+            motion?: 'float' | 'none';
             /**
-             * Most recent session update time in UTC.
+             * Launcher corner: bottom-right is the default; bottom-left uses the opposite corner.
              */
-            updated_at: string;
-        }>;
-    };
-};
-export type GetCustomerResponse = GetCustomerResponses[keyof GetCustomerResponses];
-export type GetCustomerDeletionData = {
-    body?: never;
-    path: {
-        /**
-         * Active service agent id from agent creation or listing.
-         */
-        agent_id: string;
-        /**
-         * Customer id from customer listing, or your own customer_id.
-         */
-        customer_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/deletion';
-};
-export type GetCustomerDeletionErrors = {
-    /**
-     * Authenticate with your API key or a console session.
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * CUSTOMER_NOT_FOUND or no deletion task: the customer or task is unknown, or the caller is a customer access token.
-     */
-    404: unknown;
-};
-export type GetCustomerDeletionError = GetCustomerDeletionErrors[keyof GetCustomerDeletionErrors];
-export type GetCustomerDeletionResponses = {
-    /**
-     * The latest deletion task and its snapshot counts.
-     */
-    200: {
-        /**
-         * Deletion task identifier.
-         */
-        id: string;
+            position?: 'bottom-right' | 'bottom-left';
+            /**
+             * Accessible entry button label and bubble text; omission uses the default chat label.
+             */
+            label?: string;
+        };
         /**
-         * pending: accepted; snapshotting: exporting recovery data; deleting: verified snapshot exists and erasure is running; done: erasure completed; failed: stopped safely, retry DELETE to resume the same task.
+         * Visible chat heading; omitted title uses the public agent name.
          */
-        status: 'pending' | 'snapshotting' | 'deleting' | 'done' | 'failed';
+        header?: {
+            /**
+             * Optional heading text shown instead of the public agent name.
+             */
+            title?: string;
+            /**
+             * Optional secondary line beneath the heading.
+             */
+            subtitle?: string;
+            /**
+             * Optional HTTPS image shown in the heading avatar position.
+             */
+            icon?: string;
+        };
         /**
-         * Counts from the verified snapshot; empty until snapshotting completes.
+         * Visual tokens applied to the conversation and header; omitted fields use Kit defaults.
          */
-        counts: {
+        theme?: {
             /**
-             * Number of primary and child sessions in the snapshot.
+             * light or dark selects a fixed scheme; system follows the device preference.
              */
-            sessions?: number;
+            colorScheme?: 'light' | 'dark' | 'system';
             /**
-             * Number of durable session events captured without changing the history.
+             * Explicit opaque CSS accent color, for example #167A43.
              */
-            events?: number;
+            accent?: string;
             /**
-             * Number of stored transcript messages in the snapshot.
+             * Explicit opaque CSS background color, for example #ffffff.
              */
-            messages?: number;
+            surface?: string;
             /**
-             * Number of backed-up directory, authorization, feedback and projection rows.
+             * neutral uses grayscale surfaces, warm uses warm tones, cool uses cool tones.
              */
-            d1_rows?: number;
+            grayscale?: 'neutral' | 'warm' | 'cool';
             /**
-             * Number of session attachment references; their file bytes are retained.
+             * Corner rounding: none is square, sm is small, md is medium, lg is large, full is fully rounded.
              */
-            attachments?: number;
+            radius?: 'none' | 'sm' | 'md' | 'lg' | 'full';
+            /**
+             * Spacing: compact reduces gaps, normal uses defaults, spacious increases gaps.
+             */
+            density?: 'compact' | 'normal' | 'spacious';
+            /**
+             * CSS font family list using fonts available on the device; external font loading is not configured here.
+             */
+            fontFamily?: string;
+            /**
+             * Positive base font size in CSS pixels; omission preserves Kit sizing.
+             */
+            fontSize?: number;
         };
         /**
-         * Operator recovery snapshot key, retained for seven days. Attachment bytes are not copied or deleted.
-         */
-        snapshot_key?: string;
-        /**
-         * Content-free failure summary; retry the confirmed deletion to resume.
-         */
-        error?: string;
-        /**
-         * Task creation time in RFC 3339 format.
-         */
-        created_at: string;
-        /**
-         * Latest task update time in RFC 3339 format.
-         */
-        updated_at: string;
-    };
-};
-export type GetCustomerDeletionResponse = GetCustomerDeletionResponses[keyof GetCustomerDeletionResponses];
-export type BlockCustomerData = {
-    body?: never;
-    path: {
-        /**
-         * Active service agent id from agent creation or listing.
-         */
-        agent_id: string;
-        /**
-         * Customer id from customer listing, or your own customer_id.
-         */
-        customer_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/block';
-};
-export type BlockCustomerErrors = {
-    /**
-     * Authenticate with your API key or a console session.
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
-     */
-    404: unknown;
-    /**
-     * Credential revocation failed; the customer stays blocked if you asked to block it. Retry to finish revoking.
-     */
-    502: unknown;
-};
-export type BlockCustomerError = BlockCustomerErrors[keyof BlockCustomerErrors];
-export type BlockCustomerResponses = {
-    /**
-     * The customer after the change.
-     */
-    200: {
-        /**
-         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
-         */
-        id: string;
-        /**
-         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
-         */
-        type: 'identified' | 'anonymous';
-        /**
-         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+         * Reserved Kit locale preference: zh for Chinese, en for English. Kit currently passes this option through without translating all controls.
          */
-        merged_into: string | null;
+        locale?: 'zh' | 'en';
         /**
-         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
+         * Content displayed before the first message in a conversation.
          */
-        blocked: boolean;
+        startScreen?: {
+            /**
+             * Optional welcome text on the empty conversation.
+             */
+            greeting?: string;
+            /**
+             * Up to four suggested questions; clicking a label sends its prompt text.
+             */
+            prompts?: Array<{
+                /**
+                 * Visible suggested-question button text.
+                 */
+                label: string;
+                /**
+                 * User message sent when this suggestion is selected.
+                 */
+                prompt: string;
+            }>;
+        };
         /**
-         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
+         * Message input appearance; transport and attachment settings are excluded.
          */
-        first_seen_at: string | null;
+        composer?: {
+            /**
+             * Hint shown when the message input is empty.
+             */
+            placeholder?: string;
+        };
         /**
-         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
+         * Optional notice displayed beside the conversation composer.
          */
-        last_seen_at: string | null;
+        disclaimer?: string;
         /**
-         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+         * Optional text below the conversation.
          */
-        session_count: number;
+        footer?: string;
         /**
-         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+         * Availability of the conversation history control.
          */
-        cost: {
-            /**
-             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
-             */
-            amount: string;
+        history?: {
             /**
-             * Always USD.
+             * False hides history; omission uses the default enabled state.
              */
-            currency: 'USD';
+            enabled?: boolean;
         };
     };
 };
-export type BlockCustomerResponse = BlockCustomerResponses[keyof BlockCustomerResponses];
-export type UnblockCustomerData = {
-    body?: never;
-    path: {
-        /**
-         * Active service agent id from agent creation or listing.
-         */
-        agent_id: string;
+export type GetAgentAppearanceResponse = GetAgentAppearanceResponses[keyof GetAgentAppearanceResponses];
+export type CreateCustomerGrantCodeData = {
+    body: {
         /**
-         * Customer id from customer listing, or your own customer_id.
-         */
-        customer_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/unblock';
-};
-export type UnblockCustomerErrors = {
-    /**
-     * Authenticate with your API key or a console session.
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
-     */
-    404: unknown;
-};
-export type UnblockCustomerError = UnblockCustomerErrors[keyof UnblockCustomerErrors];
-export type UnblockCustomerResponses = {
-    /**
-     * The customer after the change.
-     */
-    200: {
-        /**
-         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
-         */
-        id: string;
-        /**
-         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
-         */
-        type: 'identified' | 'anonymous';
-        /**
-         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
-         */
-        merged_into: string | null;
-        /**
-         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
-         */
-        blocked: boolean;
-        /**
-         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
-         */
-        first_seen_at: string | null;
-        /**
-         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
-         */
-        last_seen_at: string | null;
-        /**
-         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
-         */
-        session_count: number;
-        /**
-         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
-         */
-        cost: {
-            /**
-             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
-             */
-            amount: string;
-            /**
-             * Always USD.
-             */
-            currency: 'USD';
-        };
-    };
-};
-export type UnblockCustomerResponse = UnblockCustomerResponses[keyof UnblockCustomerResponses];
-export type RevokeCustomerTokensData = {
-    body?: never;
-    path: {
-        /**
-         * Active service agent id from agent creation or listing.
-         */
-        agent_id: string;
-        /**
-         * Customer id from customer listing, or your own customer_id.
-         */
-        customer_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/revoke_tokens';
-};
-export type RevokeCustomerTokensErrors = {
-    /**
-     * Authenticate with your API key or a console session.
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
-     */
-    404: unknown;
-    /**
-     * Credential revocation failed; the customer stays blocked if you asked to block it. Retry to finish revoking.
-     */
-    502: unknown;
-};
-export type RevokeCustomerTokensError = RevokeCustomerTokensErrors[keyof RevokeCustomerTokensErrors];
-export type RevokeCustomerTokensResponses = {
-    /**
-     * How many access tokens this request revoked.
-     */
-    200: {
-        /**
-         * Number of access tokens this request revoked; 0 when none was live.
-         */
-        revoked: number;
-    };
-};
-export type RevokeCustomerTokensResponse = RevokeCustomerTokensResponses[keyof RevokeCustomerTokensResponses];
-export type GetAgentAppearanceData = {
-    body?: never;
-    path: {
-        /**
-         * Service agent id from agent creation or listing; with a customer access token, the agent the token was issued for.
-         */
-        agent_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/agents/{agent_id}/appearance';
-};
-export type GetAgentAppearanceErrors = {
-    /**
-     * Authenticate with a customer access token of this agent, your API key or a console session.
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * AGENT_NOT_FOUND: the agent is absent, archived or not a service agent, or the customer access token belongs to another agent.
-     */
-    404: unknown;
-    /**
-     * Appearance is temporarily unavailable; use the default appearance and continue the conversation.
-     */
-    503: unknown;
-};
-export type GetAgentAppearanceError = GetAgentAppearanceErrors[keyof GetAgentAppearanceErrors];
-export type GetAgentAppearanceResponses = {
-    /**
-     * Saved Kit options, at most 8192 UTF-8 JSON bytes. Omitted groups use Kit defaults; an unconfigured agent returns an empty object.
-     */
-    200: {
-        /**
-         * Public identity displayed on the chat page, independent of the internal agent name.
-         */
-        agent?: {
-            /**
-             * Display name; omission keeps the neutral browser-language default.
-             */
-            name?: string;
-            /**
-             * Optional HTTPS avatar image URL; non-HTTPS images are rejected.
-             */
-            avatar?: string;
-        };
-        /**
-         * Loader default: inline stays in the page, sidebar attaches to the edge, popup floats above its launcher, modal centers an overlay. A script data-layout overrides it; Hosted always uses inline.
-         */
-        layout?: 'inline' | 'sidebar' | 'popup' | 'modal';
-        /**
-         * Default entry button for the loader; an explicit script data-launcher takes precedence.
-         */
-        launcher?: {
-            /**
-             * Entry control: none hides the launcher, bubble shows a button, mascot shows a character that reacts while the visitor types and the agent thinks and answers. A mascot needs pack.
-             */
-            type: 'none' | 'bubble' | 'mascot';
-            /**
-             * Mascot images: exactly one of preset or images. Send pack, not image.
-             */
-            pack?: {
-                /**
-                 * Built-in character: mint (mint support girl), cat (cat-eared girl) or bot (small robot).
-                 */
-                preset?: 'mint' | 'cat' | 'bot';
-                /**
-                 * One HTTPS image per slot; only idle is required and a missing slot shows idle. Use 2:3 canvases with the feet bottom-centered on a transparent background; PNG or WebP stay still, GIF, WebP and APNG play as they are.
-                 */
-                images?: {
-                    /**
-                     * Resting state.
-                     */
-                    idle: string;
-                    /**
-                     * Page open and while the greeting bubble shows.
-                     */
-                    greet?: string;
-                    /**
-                     * The visitor is typing in the composer.
-                     */
-                    listening?: string;
-                    /**
-                     * After the visitor sends, before the first reply text.
-                     */
-                    thinking?: string;
-                    /**
-                     * While the reply streams; alternates with talking-2 every 220 ms.
-                     */
-                    talking?: string;
-                    /**
-                     * Second mouth frame of talking, mouth closed; without it talking alternates with idle.
-                     */
-                    'talking-2'?: string;
-                    /**
-                     * The last turn failed or was refused.
-                     */
-                    sorry?: string;
-                    /**
-                     * No interaction for 60 seconds; hover or click wakes the mascot.
-                     */
-                    sleep?: string;
-                };
-            };
-            /**
-             * Legacy single mascot image, read as pack.images.idle. When pack is present, pack wins.
-             */
-            image?: string;
-            /**
-             * float (default) gently floats the mascot, bounces on hover and waves with the greeting; none keeps it still. Reduced-motion settings always win.
-             */
-            motion?: 'float' | 'none';
-            /**
-             * Launcher corner: bottom-right is the default; bottom-left uses the opposite corner.
-             */
-            position?: 'bottom-right' | 'bottom-left';
-            /**
-             * Accessible entry button label and bubble text; omission uses the default chat label.
-             */
-            label?: string;
-        };
-        /**
-         * Visible chat heading; omitted title uses the public agent name.
-         */
-        header?: {
-            /**
-             * Optional heading text shown instead of the public agent name.
-             */
-            title?: string;
-            /**
-             * Optional secondary line beneath the heading.
-             */
-            subtitle?: string;
-            /**
-             * Optional HTTPS image shown in the heading avatar position.
-             */
-            icon?: string;
-        };
-        /**
-         * Visual tokens applied to the conversation and header; omitted fields use Kit defaults.
-         */
-        theme?: {
-            /**
-             * light or dark selects a fixed scheme; system follows the device preference.
-             */
-            colorScheme?: 'light' | 'dark' | 'system';
-            /**
-             * Explicit opaque CSS accent color, for example #167A43.
-             */
-            accent?: string;
-            /**
-             * Explicit opaque CSS background color, for example #ffffff.
-             */
-            surface?: string;
-            /**
-             * neutral uses grayscale surfaces, warm uses warm tones, cool uses cool tones.
-             */
-            grayscale?: 'neutral' | 'warm' | 'cool';
-            /**
-             * Corner rounding: none is square, sm is small, md is medium, lg is large, full is fully rounded.
-             */
-            radius?: 'none' | 'sm' | 'md' | 'lg' | 'full';
-            /**
-             * Spacing: compact reduces gaps, normal uses defaults, spacious increases gaps.
-             */
-            density?: 'compact' | 'normal' | 'spacious';
-            /**
-             * CSS font family list using fonts available on the device; external font loading is not configured here.
-             */
-            fontFamily?: string;
-            /**
-             * Positive base font size in CSS pixels; omission preserves Kit sizing.
-             */
-            fontSize?: number;
-        };
-        /**
-         * Reserved Kit locale preference: zh for Chinese, en for English. Kit currently passes this option through without translating all controls.
-         */
-        locale?: 'zh' | 'en';
-        /**
-         * Content displayed before the first message in a conversation.
-         */
-        startScreen?: {
-            /**
-             * Optional welcome text on the empty conversation.
-             */
-            greeting?: string;
-            /**
-             * Up to four suggested questions; clicking a label sends its prompt text.
-             */
-            prompts?: Array<{
-                /**
-                 * Visible suggested-question button text.
-                 */
-                label: string;
-                /**
-                 * User message sent when this suggestion is selected.
-                 */
-                prompt: string;
-            }>;
-        };
-        /**
-         * Message input appearance; transport and attachment settings are excluded.
-         */
-        composer?: {
-            /**
-             * Hint shown when the message input is empty.
-             */
-            placeholder?: string;
-        };
-        /**
-         * Optional notice displayed beside the conversation composer.
-         */
-        disclaimer?: string;
-        /**
-         * Optional text below the conversation.
-         */
-        footer?: string;
-        /**
-         * Availability of the conversation history control.
-         */
-        history?: {
-            /**
-             * False hides history; omission uses the default enabled state.
-             */
-            enabled?: boolean;
-        };
-    };
-};
-export type GetAgentAppearanceResponse = GetAgentAppearanceResponses[keyof GetAgentAppearanceResponses];
-export type CreateCustomerGrantCodeData = {
-    body: {
-        /**
-         * Your stable, opaque identifier for the signed-in customer, such as your database user id. Do not use an email address or phone number. "auth" is reserved, and ids starting with anon_ are reserved for anonymous customers.
-         */
-        customer_id: string;
-        /**
-         * Existing agent version that every token of this sign-in pins. Defaults to the agent's active_version when the code is issued.
-         */
-        version?: number;
-        /**
-         * Budget for each session the customer starts, in the same shape as a session budget. Defaults to the embed policy session budget and cannot exceed its maximum.
-         */
-        budget?: {
-            /**
-             * Budget kind; always limit.
-             */
-            type: 'limit';
-            /**
-             * Spending limit of each session the customer starts.
-             */
-            max_list_cost: {
-                /**
-                 * Largest list cost of each session, in US dollars, as a decimal string with at most 2 fraction digits, e.g. "0.50". "0" lets the customer sign in without spending.
-                 */
-                amount: string;
-                /**
-                 * Always USD.
-                 */
-                currency: 'USD';
-            };
-        };
-        /**
-         * Optional context the agent receives at the start of each session, as text blocks, limited to 8192 UTF-8 bytes in total.
-         */
-        system_message?: Array<{
-            /**
-             * The text block kind; text is the only supported kind.
-             */
-            type: 'text';
-            /**
-             * Context text about this customer. All blocks together must fit within 8192 UTF-8 bytes.
-             */
-            text: string;
-        }>;
-        /**
-         * Optional system prompt override, accepted only when the embed policy allows agent overrides.
-         */
-        agent_override?: {
-            /**
-             * Replacement system prompt, or null to clear it for this sign-in.
-             */
-            system: string | null;
-        };
-        /**
-         * Up to 16 string pairs copied onto every session the customer starts. The playground key is reserved.
-         */
-        metadata?: {
-            [key: string]: string;
-        };
-        /**
-         * Page origin, such as https://shop.example.com, that must be one of the agent policy's allowed_origins (or localhost when the policy allows it). When set, every token of this sign-in works only from exactly this origin. Omit to accept any policy origin.
-         */
-        origin?: string;
-        /**
-         * Seconds the code stays redeemable, from 60 to 86400. Defaults to 900.
-         */
-        expires_in?: number;
-        /**
-         * Total lifetime of the sign-in in seconds, from 3600 to 604800 (7 days). Tokens renew within it; after it the customer signs in again. Defaults to 604800.
-         */
-        max_session_seconds?: number;
-        /**
-         * The current access token of the anonymous customer who used this agent before signing in. Their conversations become visible to the identified customer, and the anonymous sign-in ends at exchange.
-         */
-        anonymous_access_token?: string;
-        /**
-         * Set true to also return hosted_url, a link to the agent's Hosted chat page that carries the code in its fragment. The page exchanges the code only when the customer clicks to start, so link previews in email or chat apps do not use it up. The agent must have an identity_number, and origin cannot be set: the code is bound to no origin. Defaults to false.
-         */
-        hosted?: boolean;
-    };
-    path: {
-        /**
-         * Service agent id (agent_…) or its short identity number, from agent creation or listing.
-         */
-        agent_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/agents/{agent_id}/customers/auth/grant_codes';
-};
-export type CreateCustomerGrantCodeErrors = {
-    /**
-     * INVALID_PARAMS: an unknown field, a reserved or malformed customer_id, an origin outside the policy, a value outside its range, or an anonymous_access_token that is not a live anonymous token of this agent. The message names the field to correct.
-     */
-    400: unknown;
-    /**
-     * Authenticate with your backend API key or a console session.
-     */
-    401: unknown;
-    /**
-     * CUSTOMER_BLOCKED: the customer is on the agent's blocked list; unblock them in the console first.
-     */
-    403: unknown;
-    /**
-     * The agent is not an active service agent of your organization, or the caller is a customer access token.
-     */
-    404: unknown;
-};
-export type CreateCustomerGrantCodeResponses = {
-    /**
-     * The one-time grant code and its expiry. Only its hash is stored; it cannot be read again.
-     */
-    201: {
-        /**
-         * Object type, always customer_grant_code.
-         */
-        type: 'customer_grant_code';
-        /**
-         * One-time grant code (cgc_…). Hand it to Agent Kit in the browser, which exchanges it for an access token; it is never shown again.
-         */
-        code: string;
-        /**
-         * The customer_id that the code signs in.
-         */
-        customer_id: string;
-        /**
-         * RFC 3339 time after which the code can no longer be exchanged.
-         */
-        expires_at: string;
-        /**
-         * Returned only when hosted is true: https://chat.praxisusercontent.com/a/{identity_number}?mode=hosted#grant={code}. Send it to the customer before expires_at; the code stays in the fragment and never reaches a server log.
-         */
-        hosted_url?: string;
-    };
-};
-export type CreateCustomerGrantCodeResponse = CreateCustomerGrantCodeResponses[keyof CreateCustomerGrantCodeResponses];
-export type CreateCustomerAccessTokenData = {
-    /**
-     * Exactly one of grant_code (a signed-in customer) or publishable_key (an anonymous visitor).
-     */
-    body: {
-        /**
-         * The grant code your backend received from grant_codes. It works once.
-         */
-        grant_code: string;
-    } | {
-        /**
-         * The agent's publishable key, for a visitor who has not signed in. Creates a new anonymous customer.
-         */
-        publishable_key: string;
-    };
-    headers?: {
-        /**
-         * Browser page origin. Required for publishable_key and for a grant code bound to an origin; it must be in the agent's allowed_origins.
-         */
-        Origin?: string;
-    };
-    path: {
-        /**
-         * Service agent id (agent_…) or its short identity number, from agent creation or listing.
-         */
-        agent_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/agents/{agent_id}/customers/auth/access_tokens';
-};
-export type CreateCustomerAccessTokenErrors = {
-    /**
-     * INVALID_PARAMS: send exactly one of grant_code or publishable_key, nothing else.
-     */
-    400: unknown;
-    /**
-     * GRANT_CODE_INVALID: the code is unknown, already used, expired or for another agent (one answer for all four); request a new grant code from your backend. UNAUTHENTICATED: the publishable key is unknown, disabled or for another agent.
-     */
-    401: unknown;
-    /**
-     * EMBED_BUDGET_EXHAUSTED: the publishable key's daily spending cap is reached; wait for the UTC reset or ask the owner to raise it.
-     */
-    402: unknown;
-    /**
-     * ORIGIN_NOT_ALLOWED or EMBED_ORIGIN_NOT_ALLOWED: call from the origin the code was issued for, or from one in the agent's allowed_origins. CUSTOMER_BLOCKED: the merchant blocked this customer.
-     */
-    403: unknown;
-    /**
-     * EMBED_RATE_LIMITED: the per-IP minute limit or the key's daily session cap is reached; wait for Retry-After or the UTC reset.
-     */
-    429: unknown;
-    /**
-     * Issuance or rate limiting is unavailable; retry later with a new grant code if this one expires.
-     */
-    503: unknown;
-};
-export type CreateCustomerAccessTokenResponses = {
-    /**
-     * A customer access token, its expiry and the end of the sign-in.
-     */
-    201: {
-        /**
-         * Object type, always customer_access_token.
-         */
-        type: 'customer_access_token';
-        /**
-         * Bearer credential for this agent's sessions on behalf of the customer. Renew it before expires_at.
-         */
-        access_token: string;
-        /**
-         * RFC 3339 expiry of this access token: at most two hours after issue and never after session_expires_at.
-         */
-        expires_at: string;
-        /**
-         * RFC 3339 end of the sign-in. Renewal stops working here; the customer signs in again with a new grant code.
-         */
-        session_expires_at: string;
-        /**
-         * The customer this token acts for.
-         */
-        customer: {
-            /**
-             * The customer id: your customer_id, or anon_ followed by 16 characters for an anonymous customer.
-             */
-            id: string;
-            /**
-             * identified: signed in through a grant code from your backend. anonymous: a visitor admitted with the publishable key.
-             */
-            type: 'identified' | 'anonymous';
-        };
-    };
-};
-export type CreateCustomerAccessTokenResponse = CreateCustomerAccessTokenResponses[keyof CreateCustomerAccessTokenResponses];
-export type RenewCustomerAccessTokenData = {
-    body?: never;
-    path: {
-        /**
-         * Service agent id (agent_…) or its short identity number, from agent creation or listing.
-         */
-        agent_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/agents/{agent_id}/customers/auth/access_tokens/renew';
-};
-export type RenewCustomerAccessTokenErrors = {
-    /**
-     * ACCESS_TOKEN_REVOKED: the token or its sign-in was revoked (logout, merge, or revocation by the merchant); sign the customer in again with a new grant code. Other 401 responses mean the Bearer token is missing, invalid or expired; renew before expires_at. CUSTOMER_SESSION_EXPIRED: less than 60 seconds of the sign-in remain; sign in again: request a new grant code from your backend.
-     */
-    401: unknown;
-    /**
-     * CUSTOMER_BLOCKED: the merchant blocked this customer; unblock them before signing them in. ORIGIN_NOT_ALLOWED: the request Origin is not the origin this sign-in is bound to, or is not in the agent's allowed_origins; call from the page that signed in.
-     */
-    403: unknown;
-    /**
-     * The token belongs to another agent, is not a customer access token, or the agent is archived or absent; use the agent_id the token was issued for.
-     */
-    404: unknown;
-};
-export type RenewCustomerAccessTokenResponses = {
-    /**
-     * A new access token in the same sign-in. The presented token stays valid until its own expiry.
-     */
-    201: {
-        /**
-         * Object type, always customer_access_token.
-         */
-        type: 'customer_access_token';
-        /**
-         * Bearer credential for this agent's sessions on behalf of the customer. Renew it before expires_at.
+         * Your stable, opaque identifier for the signed-in customer, such as your database user id. Do not use an email address or phone number. "auth" is reserved, and ids starting with anon_ are reserved for anonymous customers.
          */
-        access_token: string;
+        customer_id: string;
         /**
-         * RFC 3339 expiry of this access token: at most two hours after issue and never after session_expires_at.
+         * Existing agent version that every token of this sign-in pins. Defaults to the agent's active_version when the code is issued.
          */
-        expires_at: string;
+        version?: number;
         /**
-         * RFC 3339 end of the sign-in. Renewal stops working here; the customer signs in again with a new grant code.
+         * Budget for each session the customer starts, in the same shape as a session budget. Defaults to the embed policy session budget and cannot exceed its maximum.
          */
-        session_expires_at: string;
+        budget?: {
+            /**
+             * Budget kind; always limit.
+             */
+            type: 'limit';
+            /**
+             * Spending limit of each session the customer starts.
+             */
+            max_list_cost: {
+                /**
+                 * Largest list cost of each session, in US dollars, as a decimal string with at most 2 fraction digits, e.g. "0.50". "0" lets the customer sign in without spending.
+                 */
+                amount: string;
+                /**
+                 * Always USD.
+                 */
+                currency: 'USD';
+            };
+        };
         /**
-         * The customer this token acts for.
+         * Optional context the agent receives at the start of each session, as text blocks, limited to 8192 UTF-8 bytes in total.
          */
-        customer: {
+        system_message?: Array<{
             /**
-             * The customer id: your customer_id, or anon_ followed by 16 characters for an anonymous customer.
+             * The text block kind; text is the only supported kind.
              */
-            id: string;
+            type: 'text';
             /**
-             * identified: signed in through a grant code from your backend. anonymous: a visitor admitted with the publishable key.
+             * Context text about this customer. All blocks together must fit within 8192 UTF-8 bytes.
              */
-            type: 'identified' | 'anonymous';
+            text: string;
+        }>;
+        /**
+         * Optional system prompt override, accepted only when the embed policy allows agent overrides.
+         */
+        agent_override?: {
+            /**
+             * Replacement system prompt, or null to clear it for this sign-in.
+             */
+            system: string | null;
         };
-    };
-};
-export type RenewCustomerAccessTokenResponse = RenewCustomerAccessTokenResponses[keyof RenewCustomerAccessTokenResponses];
-export type DeleteCurrentCustomerAccessTokenData = {
-    body?: never;
-    path: {
         /**
-         * Service agent id (agent_…) or its short identity number, from agent creation or listing.
+         * Up to 16 string pairs copied onto every session the customer starts. The playground key is reserved.
          */
-        agent_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/agents/{agent_id}/customers/auth/access_tokens/current';
-};
-export type DeleteCurrentCustomerAccessTokenErrors = {
-    /**
-     * ACCESS_TOKEN_REVOKED: the token or its sign-in was revoked (logout, merge, or revocation by the merchant); sign the customer in again with a new grant code. Other 401 responses mean the Bearer token is missing, invalid or expired; renew before expires_at.
-     */
-    401: unknown;
-    /**
-     * CUSTOMER_BLOCKED: the merchant blocked this customer; unblock them before signing them in. ORIGIN_NOT_ALLOWED: the request Origin is not the origin this sign-in is bound to, or is not in the agent's allowed_origins; call from the page that signed in.
-     */
-    403: unknown;
-    /**
-     * The token belongs to another agent, is not a customer access token, or the agent is archived or absent; use the agent_id the token was issued for.
-     */
-    404: unknown;
-};
-export type DeleteCurrentCustomerAccessTokenResponses = {
-    /**
-     * Logged out: the sign-in and every access token in it are revoked, and their live event streams close.
-     */
-    204: void;
-};
-export type DeleteCurrentCustomerAccessTokenResponse = DeleteCurrentCustomerAccessTokenResponses[keyof DeleteCurrentCustomerAccessTokenResponses];
-export type ExchangeEmbedCodeData = {
-    body: {
+        metadata?: {
+            [key: string]: string;
+        };
         /**
-         * Single-use credential from the c fragment parameter of hosted_url returned by embed token creation. Valid for 60 seconds.
+         * Page origin, such as https://shop.example.com, that must be one of the agent policy's allowed_origins (or localhost when the policy allows it). When set, every token of this sign-in works only from exactly this origin. Omit to accept any policy origin.
          */
-        code: string;
-    };
-    path?: never;
-    query?: never;
-    url: '/agent/v1/embed/exchange';
-};
-export type ExchangeEmbedCodeErrors = {
-    /**
-     * Expected a JSON object containing only code. Correct the request body.
-     */
-    400: unknown;
-    /**
-     * UNAUTHENTICATED (or INVALID_API_KEY, API_KEY_DISABLED, API_KEY_EXPIRED, INVALID_API_TOKEN, API_TOKEN_EXPIRED, API_TOKEN_REVOKED): the API key is missing, invalid or revoked. Send a valid key as X-API-Key or as a Bearer token.
-     */
-    401: AgentError;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * The code is expired, already used or unknown. Return to the host website for a new link; all three cases have the same response body.
-     */
-    404: unknown;
-    /**
-     * The IP minute limit is reached. Wait for Retry-After before trying a fresh link.
-     */
-    429: unknown;
-    /**
-     * Exchange or rate limiting is unavailable. Return to the host website for a new link later.
-     */
-    503: unknown;
-};
-export type ExchangeEmbedCodeError = ExchangeEmbedCodeErrors[keyof ExchangeEmbedCodeErrors];
-export type ExchangeEmbedCodeResponses = {
-    /**
-     * The end-user token and its expiration; the code has been consumed.
-     */
-    200: {
+        origin?: string;
         /**
-         * End-user credential for the hosted conversation. Keep it in memory; it cannot be refreshed here.
+         * Seconds the code stays redeemable, from 60 to 86400. Defaults to 900.
          */
-        token: string;
+        expires_in?: number;
         /**
-         * Token expiration as an ISO 8601 UTC timestamp. Return to the host website after expiration.
+         * Total lifetime of the sign-in in seconds, from 3600 to 604800 (7 days). Tokens renew within it; after it the customer signs in again. Defaults to 604800.
          */
-        expires_at: string;
-    };
-};
-export type ExchangeEmbedCodeResponse = ExchangeEmbedCodeResponses[keyof ExchangeEmbedCodeResponses];
-export type CreateAnonymousEmbedTokenData = {
-    body: {
+        max_session_seconds?: number;
         /**
-         * Public key created by the service agent owner; safe to include in browser code.
+         * The current access token of the anonymous customer who used this agent before signing in. Their conversations become visible to the identified customer, and the anonymous sign-in ends at exchange.
          */
-        publishable_key: string;
+        anonymous_access_token?: string;
         /**
-         * Secret returned by a previous anonymous issuance for this key. Omit for a new visitor; an unknown secret creates a new visitor.
+         * Set true to also return hosted_url, a link to the agent's Hosted chat page that carries the code in its fragment. The page exchanges the code only when the customer clicks to start, so link previews in email or chat apps do not use it up. The agent must have an identity_number, and origin cannot be set: the code is bound to no origin. Defaults to false.
          */
-        visitor_secret?: string;
+        hosted?: boolean;
     };
-    headers: {
+    path: {
         /**
-         * Browser page origin from the agent policy allowlist.
+         * Service agent id (agent_…) or its short identity number, from agent creation or listing.
          */
-        Origin: string;
+        agent_id: string;
     };
-    path?: never;
     query?: never;
-    url: '/agent/v1/embed_tokens/anonymous';
+    url: '/agent/v1/agents/{agent_id}/customers/auth/grant_codes';
 };
-export type CreateAnonymousEmbedTokenErrors = {
+export type CreateCustomerGrantCodeErrors = {
     /**
-     * Unknown or invalid request fields, or key budget exceeds policy. Correct the request or ask the owner to update the key.
+     * INVALID_PARAMS: an unknown field, a reserved or malformed customer_id, an origin outside the policy, a value outside its range, or an anonymous_access_token that is not a live anonymous token of this agent. The message names the field to correct.
      */
     400: unknown;
     /**
-     * Unknown or disabled publishable key. Ask the agent owner for an active key.
+     * Authenticate with your backend API key or a console session.
      */
     401: unknown;
     /**
-     * EMBED_BUDGET_EXHAUSTED. The daily spending cap is reached; wait for the UTC reset or ask the owner to raise it.
-     */
-    402: unknown;
-    /**
-     * EMBED_ORIGIN_NOT_ALLOWED or EMBED_USER_BLOCKED. Use an allowed page origin or contact the owner.
+     * CUSTOMER_BLOCKED: the customer is on the agent's blocked list; unblock them in the console first.
      */
     403: unknown;
     /**
-     * EMBED_RATE_LIMITED. Wait for the IP minute window or UTC daily session cap reset.
-     */
-    429: unknown;
-    /**
-     * Anonymous issuance or rate limiting is unavailable; retry later.
+     * The agent is not an active service agent of your organization, or the caller is a customer access token.
      */
-    503: unknown;
+    404: unknown;
 };
-export type CreateAnonymousEmbedTokenResponses = {
+export type CreateCustomerGrantCodeResponses = {
     /**
-     * End-user token and expiration, with a visitor secret only for a new visitor.
+     * The one-time grant code and its expiry. Only its hash is stored; it cannot be read again.
      */
-    200: {
-        /**
-         * Short-lived end-user bearer credential for this agent's embedded sessions.
-         */
-        token: string;
-        /**
-         * RFC 3339 expiration; refresh before this time using the same visitor_secret.
-         */
-        expires_at: string;
+    201: {
         /**
-         * Newly generated visitor secret; save it locally and include it on later requests. Absent when the supplied secret was recognized.
+         * Object type, always customer_grant_code.
          */
-        visitor_secret?: string;
-    };
-};
-export type CreateAnonymousEmbedTokenResponse = CreateAnonymousEmbedTokenResponses[keyof CreateAnonymousEmbedTokenResponses];
-export type ListEmbedTokensData = {
-    body?: never;
-    path?: never;
-    query?: {
+        type: 'customer_grant_code';
         /**
-         * Filter by service agent identifier (agent_ or agt_ prefix).
+         * One-time grant code (cgc_…). Hand it to Agent Kit in the browser, which exchanges it for an access token; it is never shown again.
          */
-        agent_id?: string;
+        code: string;
         /**
-         * Exact host user identifier supplied at issuance.
+         * The customer_id that the code signs in.
          */
-        external_user_id?: string;
+        customer_id: string;
         /**
-         * Maximum records per page; defaults to 20.
+         * RFC 3339 time after which the code can no longer be exchanged.
          */
-        limit?: number;
+        expires_at: string;
         /**
-         * next_page from a previous response with the same filters.
+         * Returned only when hosted is true: https://chat.praxisusercontent.com/a/{identity_number}?mode=hosted#grant={code}. Send it to the customer before expires_at; the code stays in the fragment and never reaches a server log.
          */
-        page?: string;
+        hosted_url?: string;
     };
-    url: '/agent/v1/embed_tokens';
-};
-export type ListEmbedTokensErrors = {
-    /**
-     * Invalid filter, limit or cursor; reuse the cursor with its original filters.
-     */
-    400: unknown;
-    /**
-     * Authenticate with a host credential.
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * The grant is missing or belongs to another organization, or the caller is an end user.
-     */
-    404: unknown;
-    /**
-     * Upstream revocation failed; the record remains unrevoked and the request may be retried.
-     */
-    502: unknown;
 };
-export type ListEmbedTokensError = ListEmbedTokensErrors[keyof ListEmbedTokensErrors];
-export type ListEmbedTokensResponses = {
+export type CreateCustomerGrantCodeResponse = CreateCustomerGrantCodeResponses[keyof CreateCustomerGrantCodeResponses];
+export type CreateCustomerAccessTokenData = {
     /**
-     * Issuance records and next page cursor.
+     * Exactly one of grant_code (a signed-in customer) or publishable_key (an anonymous visitor).
      */
-    200: {
-        /**
-         * Items of this page, in the order requested by the call.
-         */
-        data: Array<{
-            /**
-             * Grant identifier returned by embed token creation.
-             */
-            id: string;
-            /**
-             * Toolset type id as used in an agent's tools entry, for example agent_toolset_20260401.
-             */
-            type: 'embed_token';
-            /**
-             * Service agent identifier.
-             */
-            agent_id: string;
-            /**
-             * Pinned agent version.
-             */
-            agent_version: number;
-            /**
-             * Exact host user identifier supplied at issuance.
-             */
-            external_user_id: string;
-            /**
-             * Issuance time in RFC 3339 format.
-             */
-            created_at: string;
-            /**
-             * Expiration time in RFC 3339 format.
-             */
-            expires_at: string;
-            /**
-             * Revocation time in RFC 3339 format, or null while not revoked.
-             */
-            revoked_at: string | null;
-            /**
-             * Host origin recorded at issuance, or null when absent.
-             */
-            host_origin: string | null;
-            /**
-             * User or API key that issued the token.
-             */
-            issued_by: {
-                /**
-                 * user identifies a signed-in organization member; api_key identifies the issuing API key.
-                 */
-                type: 'user' | 'api_key';
-                /**
-                 * Identifier of the object, as returned by the API; pass it in the path of follow-up calls on the same resource.
-                 */
-                id: string;
-            };
-        }>;
-        /**
-         * Cursor for the next page using the same filters, or null when exhausted.
-         */
-        next_page: string | null;
-    };
-};
-export type ListEmbedTokensResponse = ListEmbedTokensResponses[keyof ListEmbedTokensResponses];
-export type CreateEmbedTokenData = {
     body: {
         /**
-         * Set true to also return a hosted chat URL with a single-use credential valid for 60 seconds. Defaults to false; the agent must have an identity_number.
-         */
-        hosted?: boolean;
-        /**
-         * Service agent ID or identity_number from agent retrieval; it must belong to your organization and be active.
-         */
-        agent: string;
-        /**
-         * Existing agent version to pin. Omit to pin the latest version at issuance.
-         */
-        version?: number;
-        /**
-         * Your application's stable end-user identifier, scoped to this organization and agent.
-         */
-        external_user_id: string;
-        /**
-         * Token lifetime in seconds. Defaults to the embed policy TTL and cannot exceed its maximum or 3600 seconds.
-         */
-        ttl_seconds?: number;
-        /**
-         * Session budget in cents. Defaults to the embed policy session budget and cannot exceed its maximum.
-         */
-        budget_cents?: number;
-        /**
-         * Optional host context as text blocks, limited to 8192 UTF-8 bytes in total.
+         * The grant code your backend received from grant_codes. It works once.
          */
-        system_message?: Array<{
-            /**
-             * The text block kind; text is the only supported kind.
-             */
-            type: 'text';
-            /**
-             * Host context text. All blocks together must fit within 8192 UTF-8 bytes.
-             */
-            text: string;
-        }>;
+        grant_code: string;
+    } | {
         /**
-         * Optional system prompt override, accepted only when the embed policy allows agent overrides.
+         * The agent's publishable key, for a visitor who has not signed in. Creates a new anonymous customer.
          */
-        agent_override?: {
-            /**
-             * Replacement system prompt, or null to clear it for this grant.
-             */
-            system: string | null;
-        };
+        publishable_key: string;
+    };
+    headers?: {
         /**
-         * Optional subset of the policy origin entries, compared exactly. Omit to snapshot every policy origin.
+         * Browser page origin. Required for publishable_key and for a grant code bound to an origin; it must be in the agent's allowed_origins.
          */
-        allowed_origins?: Array<string>;
+        Origin?: string;
+    };
+    path: {
         /**
-         * Host metadata preserved verbatim; at most 16 keys of 1–64 characters and string values of at most 512 characters. Defaults to an empty object.
+         * Service agent id (agent_…) or its short identity number, from agent creation or listing.
          */
-        metadata?: {
-            [key: string]: string;
-        };
+        agent_id: string;
     };
-    path?: never;
     query?: never;
-    url: '/agent/v1/embed_tokens';
+    url: '/agent/v1/agents/{agent_id}/customers/auth/access_tokens';
 };
-export type CreateEmbedTokenErrors = {
+export type CreateCustomerAccessTokenErrors = {
     /**
-     * Request fields exceed policy limits, the policy or its environment is unavailable, or a hosted agent has no identity_number. Configure the policy or correct the reported field.
+     * INVALID_PARAMS: send exactly one of grant_code or publishable_key, nothing else.
      */
     400: unknown;
     /**
-     * A valid host credential is required; authenticate with your backend API key.
+     * GRANT_CODE_INVALID: the code is unknown, already used, expired or for another agent (one answer for all four); request a new grant code from your backend. UNAUTHENTICATED: the publishable key is unknown, disabled or for another agent.
      */
     401: unknown;
     /**
-     * The end user is blocked by the embed policy; contact the agent owner.
+     * EMBED_BUDGET_EXHAUSTED: the publishable key's daily spending cap is reached; wait for the UTC reset or ask the owner to raise it.
+     */
+    402: unknown;
+    /**
+     * ORIGIN_NOT_ALLOWED or EMBED_ORIGIN_NOT_ALLOWED: call from the origin the code was issued for, or from one in the agent's allowed_origins. CUSTOMER_BLOCKED: the merchant blocked this customer.
      */
     403: unknown;
     /**
-     * The service agent or requested version is unavailable to this caller; check the agent identifier and version.
+     * EMBED_RATE_LIMITED: the per-IP minute limit or the key's daily session cap is reached; wait for Retry-After or the UTC reset.
      */
-    404: unknown;
+    429: unknown;
     /**
-     * Token issuance is unavailable; no usable credential was returned.
+     * Issuance or rate limiting is unavailable; retry later with a new grant code if this one expires.
      */
-    502: unknown;
+    503: unknown;
 };
-export type CreateEmbedTokenResponses = {
+export type CreateCustomerAccessTokenResponses = {
     /**
-     * Issued end-user token and its grant identifier and expiration.
+     * A customer access token, its expiry and the end of the sign-in.
      */
     201: {
         /**
-         * Hosted chat link, returned only when hosted is true. Redirect the user here within 60 seconds; its fragment credential can be exchanged only once.
+         * Object type, always customer_access_token.
          */
-        hosted_url?: string;
+        type: 'customer_access_token';
         /**
-         * Grant identifier with the emb_ prefix, identifying this issuance.
+         * Bearer credential for this agent's sessions on behalf of the customer. Renew it before expires_at.
          */
-        id: string;
+        access_token: string;
         /**
-         * Short-lived end-user credential to pass to your frontend; keep the host API key on your backend.
+         * RFC 3339 expiry of this access token: at most two hours after issue and never after session_expires_at.
          */
-        token: string;
+        expires_at: string;
         /**
-         * Token expiration as an ISO 8601 UTC timestamp, as issued by identity.
+         * RFC 3339 end of the sign-in. Renewal stops working here; the customer signs in again with a new grant code.
          */
-        expires_at: string;
+        session_expires_at: string;
+        /**
+         * The customer this token acts for.
+         */
+        customer: {
+            /**
+             * The customer id: your customer_id, or anon_ followed by 16 characters for an anonymous customer.
+             */
+            id: string;
+            /**
+             * identified: signed in through a grant code from your backend. anonymous: a visitor admitted with the publishable key.
+             */
+            type: 'identified' | 'anonymous';
+        };
     };
 };
-export type CreateEmbedTokenResponse = CreateEmbedTokenResponses[keyof CreateEmbedTokenResponses];
-export type RevokeEmbedTokenData = {
+export type CreateCustomerAccessTokenResponse = CreateCustomerAccessTokenResponses[keyof CreateCustomerAccessTokenResponses];
+export type RenewCustomerAccessTokenData = {
     body?: never;
     path: {
         /**
-         * Grant id returned by issuance or listing.
+         * Service agent id (agent_…) or its short identity number, from agent creation or listing.
          */
-        id: string;
+        agent_id: string;
     };
     query?: never;
-    url: '/agent/v1/embed_tokens/{id}/revoke';
+    url: '/agent/v1/agents/{agent_id}/customers/auth/access_tokens/renew';
 };
-export type RevokeEmbedTokenErrors = {
-    /**
-     * Invalid filter, limit or cursor; reuse the cursor with its original filters.
-     */
-    400: unknown;
+export type RenewCustomerAccessTokenErrors = {
     /**
-     * Authenticate with a host credential.
+     * ACCESS_TOKEN_REVOKED: the token or its sign-in was revoked (logout, merge, or revocation by the merchant); sign the customer in again with a new grant code. Other 401 responses mean the Bearer token is missing, invalid or expired; renew before expires_at. CUSTOMER_SESSION_EXPIRED: less than 60 seconds of the sign-in remain; sign in again: request a new grant code from your backend.
      */
     401: unknown;
     /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     * CUSTOMER_BLOCKED: the merchant blocked this customer; unblock them before signing them in. ORIGIN_NOT_ALLOWED: the request Origin is not the origin this sign-in is bound to, or is not in the agent's allowed_origins; call from the page that signed in.
      */
-    403: AgentError;
+    403: unknown;
     /**
-     * The grant is missing or belongs to another organization, or the caller is an end user.
+     * The token belongs to another agent, is not a customer access token, or the agent is archived or absent; use the agent_id the token was issued for.
      */
     404: unknown;
-    /**
-     * Upstream revocation failed; the record remains unrevoked and the request may be retried.
-     */
-    502: unknown;
 };
-export type RevokeEmbedTokenError = RevokeEmbedTokenErrors[keyof RevokeEmbedTokenErrors];
-export type RevokeEmbedTokenResponses = {
+export type RenewCustomerAccessTokenResponses = {
     /**
-     * Revoked issuance record, including its original revocation time on repeated calls.
+     * A new access token in the same sign-in. The presented token stays valid until its own expiry.
      */
-    200: {
-        /**
-         * Grant identifier returned by embed token creation.
-         */
-        id: string;
-        /**
-         * Type tag of the object.
-         */
-        type: 'embed_token';
-        /**
-         * Service agent identifier.
-         */
-        agent_id: string;
-        /**
-         * Pinned agent version.
-         */
-        agent_version: number;
+    201: {
         /**
-         * Exact host user identifier supplied at issuance.
+         * Object type, always customer_access_token.
          */
-        external_user_id: string;
+        type: 'customer_access_token';
         /**
-         * Issuance time in RFC 3339 format.
+         * Bearer credential for this agent's sessions on behalf of the customer. Renew it before expires_at.
          */
-        created_at: string;
+        access_token: string;
         /**
-         * Expiration time in RFC 3339 format.
+         * RFC 3339 expiry of this access token: at most two hours after issue and never after session_expires_at.
          */
         expires_at: string;
         /**
-         * Revocation time in RFC 3339 format, or null while not revoked.
-         */
-        revoked_at: string | null;
-        /**
-         * Host origin recorded at issuance, or null when absent.
+         * RFC 3339 end of the sign-in. Renewal stops working here; the customer signs in again with a new grant code.
          */
-        host_origin: string | null;
+        session_expires_at: string;
         /**
-         * User or API key that issued the token.
+         * The customer this token acts for.
          */
-        issued_by: {
+        customer: {
             /**
-             * user identifies a signed-in organization member; api_key identifies the issuing API key.
+             * The customer id: your customer_id, or anon_ followed by 16 characters for an anonymous customer.
              */
-            type: 'user' | 'api_key';
+            id: string;
             /**
-             * Identifier of the object, as returned by the API; pass it in the path of follow-up calls on the same resource.
+             * identified: signed in through a grant code from your backend. anonymous: a visitor admitted with the publishable key.
              */
-            id: string;
+            type: 'identified' | 'anonymous';
         };
     };
 };
-export type RevokeEmbedTokenResponse = RevokeEmbedTokenResponses[keyof RevokeEmbedTokenResponses];
+export type RenewCustomerAccessTokenResponse = RenewCustomerAccessTokenResponses[keyof RenewCustomerAccessTokenResponses];
+export type DeleteCurrentCustomerAccessTokenData = {
+    body?: never;
+    path: {
+        /**
+         * Service agent id (agent_…) or its short identity number, from agent creation or listing.
+         */
+        agent_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/auth/access_tokens/current';
+};
+export type DeleteCurrentCustomerAccessTokenErrors = {
+    /**
+     * ACCESS_TOKEN_REVOKED: the token or its sign-in was revoked (logout, merge, or revocation by the merchant); sign the customer in again with a new grant code. Other 401 responses mean the Bearer token is missing, invalid or expired; renew before expires_at.
+     */
+    401: unknown;
+    /**
+     * CUSTOMER_BLOCKED: the merchant blocked this customer; unblock them before signing them in. ORIGIN_NOT_ALLOWED: the request Origin is not the origin this sign-in is bound to, or is not in the agent's allowed_origins; call from the page that signed in.
+     */
+    403: unknown;
+    /**
+     * The token belongs to another agent, is not a customer access token, or the agent is archived or absent; use the agent_id the token was issued for.
+     */
+    404: unknown;
+};
+export type DeleteCurrentCustomerAccessTokenResponses = {
+    /**
+     * Logged out: the sign-in and every access token in it are revoked, and their live event streams close.
+     */
+    204: void;
+};
+export type DeleteCurrentCustomerAccessTokenResponse = DeleteCurrentCustomerAccessTokenResponses[keyof DeleteCurrentCustomerAccessTokenResponses];
 export type ComputersListData = {
     body?: never;
     path?: never;
@@ -37529,127 +36561,27 @@ export type GetSessionCompactionResponses = {
          * State of the compaction operation: queued and running are in progress, skipped means nothing needed compaction, succeeded and failed are final.
          */
         status: 'queued' | 'running' | 'skipped' | 'succeeded' | 'failed';
-        /**
-         * Why the compaction was skipped or failed; absent otherwise.
-         */
-        reason?: string;
-    };
-};
-export type GetSessionCompactionResponse = GetSessionCompactionResponses[keyof GetSessionCompactionResponses];
-export type ListSessionCompactionsData = {
-    body?: never;
-    path: {
-        /**
-         * Session id (sesn_...), as returned by sessions.create or sessions.list. The same id is also accepted as the session_id query parameter on resource and thread calls, where it must equal the path value.
-         */
-        session_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/sessions/{session_id}/compactions';
-};
-export type ListSessionCompactionsErrors = {
-    /**
-     * Authentication required
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * Session not found
-     */
-    404: unknown;
-    /**
-     * Agent service failed
-     */
-    502: unknown;
-    /**
-     * Agent service unavailable
-     */
-    503: unknown;
-};
-export type ListSessionCompactionsError = ListSessionCompactionsErrors[keyof ListSessionCompactionsErrors];
-export type ListSessionCompactionsResponses = {
-    /**
-     * Compaction history
-     */
-    200: {
-        /**
-         * Items of this page, in the order requested by the call.
-         */
-        data: Array<{
-            /**
-             * Always `context_compaction`. Record of one past compaction.
-             */
-            type: 'context_compaction';
-            /**
-             * Compaction record id.
-             */
-            id: string;
-            /**
-             * Id of the agent.thread_context_compacted event emitted for this compaction; null when none.
-             */
-            event_id: string | null;
-            /**
-             * What started the compaction.
-             */
-            trigger: 'auto' | 'manual' | 'model_downshift';
-            /**
-             * Final outcome of the compaction.
-             */
-            status: 'succeeded' | 'failed';
-            /**
-             * Model that wrote the summary.
-             */
-            model: string;
-            /**
-             * Number of messages replaced by the summary.
-             */
-            compacted_message_count: number;
-            /**
-             * Context tokens before the compaction.
-             */
-            input_tokens_before: number;
-            /**
-             * Context tokens after the compaction; null when not measured.
-             */
-            input_tokens_after: number | null;
-            /**
-             * Summary text that replaced the messages; null when the compaction failed.
-             */
-            summary: string | null;
-            /**
-             * Failure reason; null when the compaction succeeded.
-             */
-            error: string | null;
-            /**
-             * RFC 3339 time at which the compaction was recorded.
-             */
-            created_at: string;
-        }>;
+        /**
+         * Why the compaction was skipped or failed; absent otherwise.
+         */
+        reason?: string;
     };
 };
-export type ListSessionCompactionsResponse = ListSessionCompactionsResponses[keyof ListSessionCompactionsResponses];
-export type GetEmbedAppearanceData = {
+export type GetSessionCompactionResponse = GetSessionCompactionResponses[keyof GetSessionCompactionResponses];
+export type ListSessionCompactionsData = {
     body?: never;
-    headers?: {
+    path: {
         /**
-         * Active public key from the agent's console embed settings; alternative to an end-user Bearer token.
+         * Session id (sesn_...), as returned by sessions.create or sessions.list. The same id is also accepted as the session_id query parameter on resource and thread calls, where it must equal the path value.
          */
-        'Praxis-Publishable-Key'?: string;
+        session_id: string;
     };
-    path?: never;
     query?: never;
-    url: '/agent/v1/embed/appearance';
+    url: '/agent/v1/sessions/{session_id}/compactions';
 };
-export type GetEmbedAppearanceErrors = {
-    /**
-     * Addressing parameters are not accepted; remove identity_number, agent_id and other query parameters.
-     */
-    400: unknown;
+export type ListSessionCompactionsErrors = {
     /**
-     * Supply a valid embed token or an active publishable key; organization member credentials cannot read this surface.
+     * Authentication required
      */
     401: unknown;
     /**
@@ -37657,217 +36589,80 @@ export type GetEmbedAppearanceErrors = {
      */
     403: AgentError;
     /**
-     * The credential's service agent is absent or archived; obtain credentials for an active service agent.
+     * Session not found
      */
     404: unknown;
     /**
-     * Appearance is temporarily unavailable; use default appearance and continue the conversation.
+     * Agent service failed
+     */
+    502: unknown;
+    /**
+     * Agent service unavailable
      */
     503: unknown;
 };
-export type GetEmbedAppearanceError = GetEmbedAppearanceErrors[keyof GetEmbedAppearanceErrors];
-export type GetEmbedAppearanceResponses = {
+export type ListSessionCompactionsError = ListSessionCompactionsErrors[keyof ListSessionCompactionsErrors];
+export type ListSessionCompactionsResponses = {
     /**
-     * Saved Kit options, at most 8192 UTF-8 JSON bytes. Omitted groups use Kit defaults; an unconfigured agent returns an empty object.
+     * Compaction history
      */
     200: {
         /**
-         * Public identity displayed on the chat page, independent of the internal agent name.
-         */
-        agent?: {
-            /**
-             * Display name; omission keeps the neutral browser-language default.
-             */
-            name?: string;
-            /**
-             * Optional HTTPS avatar image URL; non-HTTPS images are rejected.
-             */
-            avatar?: string;
-        };
-        /**
-         * Loader default: inline stays in the page, sidebar attaches to the edge, popup floats above its launcher, modal centers an overlay. A script data-layout overrides it; Hosted always uses inline.
-         */
-        layout?: 'inline' | 'sidebar' | 'popup' | 'modal';
-        /**
-         * Default entry button for the loader; an explicit script data-launcher takes precedence.
-         */
-        launcher?: {
-            /**
-             * Entry control: none hides the launcher, bubble shows a button, mascot shows a character that reacts while the visitor types and the agent thinks and answers. A mascot needs pack.
-             */
-            type: 'none' | 'bubble' | 'mascot';
-            /**
-             * Mascot images: exactly one of preset or images. Send pack, not image.
-             */
-            pack?: {
-                /**
-                 * Built-in character: mint (mint support girl), cat (cat-eared girl) or bot (small robot).
-                 */
-                preset?: 'mint' | 'cat' | 'bot';
-                /**
-                 * One HTTPS image per slot; only idle is required and a missing slot shows idle. Use 2:3 canvases with the feet bottom-centered on a transparent background; PNG or WebP stay still, GIF, WebP and APNG play as they are.
-                 */
-                images?: {
-                    /**
-                     * Resting state.
-                     */
-                    idle: string;
-                    /**
-                     * Page open and while the greeting bubble shows.
-                     */
-                    greet?: string;
-                    /**
-                     * The visitor is typing in the composer.
-                     */
-                    listening?: string;
-                    /**
-                     * After the visitor sends, before the first reply text.
-                     */
-                    thinking?: string;
-                    /**
-                     * While the reply streams; alternates with talking-2 every 220 ms.
-                     */
-                    talking?: string;
-                    /**
-                     * Second mouth frame of talking, mouth closed; without it talking alternates with idle.
-                     */
-                    'talking-2'?: string;
-                    /**
-                     * The last turn failed or was refused.
-                     */
-                    sorry?: string;
-                    /**
-                     * No interaction for 60 seconds; hover or click wakes the mascot.
-                     */
-                    sleep?: string;
-                };
-            };
-            /**
-             * Legacy single mascot image, read as pack.images.idle. When pack is present, pack wins.
-             */
-            image?: string;
-            /**
-             * float (default) gently floats the mascot, bounces on hover and waves with the greeting; none keeps it still. Reduced-motion settings always win.
-             */
-            motion?: 'float' | 'none';
-            /**
-             * Launcher corner: bottom-right is the default; bottom-left uses the opposite corner.
-             */
-            position?: 'bottom-right' | 'bottom-left';
-            /**
-             * Accessible entry button label and bubble text; omission uses the default chat label.
-             */
-            label?: string;
-        };
-        /**
-         * Visible chat heading; omitted title uses the public agent name.
-         */
-        header?: {
-            /**
-             * Optional heading text shown instead of the public agent name.
-             */
-            title?: string;
-            /**
-             * Optional secondary line beneath the heading.
-             */
-            subtitle?: string;
-            /**
-             * Optional HTTPS image shown in the heading avatar position.
-             */
-            icon?: string;
-        };
-        /**
-         * Visual tokens applied to the conversation and header; omitted fields use Kit defaults.
+         * Items of this page, in the order requested by the call.
          */
-        theme?: {
+        data: Array<{
             /**
-             * light or dark selects a fixed scheme; system follows the device preference.
+             * Always `context_compaction`. Record of one past compaction.
              */
-            colorScheme?: 'light' | 'dark' | 'system';
+            type: 'context_compaction';
             /**
-             * Explicit opaque CSS accent color, for example #167A43.
+             * Compaction record id.
              */
-            accent?: string;
+            id: string;
             /**
-             * Explicit opaque CSS background color, for example #ffffff.
+             * Id of the agent.thread_context_compacted event emitted for this compaction; null when none.
              */
-            surface?: string;
+            event_id: string | null;
             /**
-             * neutral uses grayscale surfaces, warm uses warm tones, cool uses cool tones.
+             * What started the compaction.
              */
-            grayscale?: 'neutral' | 'warm' | 'cool';
+            trigger: 'auto' | 'manual' | 'model_downshift';
             /**
-             * Corner rounding: none is square, sm is small, md is medium, lg is large, full is fully rounded.
+             * Final outcome of the compaction.
              */
-            radius?: 'none' | 'sm' | 'md' | 'lg' | 'full';
+            status: 'succeeded' | 'failed';
             /**
-             * Spacing: compact reduces gaps, normal uses defaults, spacious increases gaps.
+             * Model that wrote the summary.
              */
-            density?: 'compact' | 'normal' | 'spacious';
+            model: string;
             /**
-             * CSS font family list using fonts available on the device; external font loading is not configured here.
+             * Number of messages replaced by the summary.
              */
-            fontFamily?: string;
+            compacted_message_count: number;
             /**
-             * Positive base font size in CSS pixels; omission preserves Kit sizing.
+             * Context tokens before the compaction.
              */
-            fontSize?: number;
-        };
-        /**
-         * Reserved Kit locale preference: zh for Chinese, en for English. Kit currently passes this option through without translating all controls.
-         */
-        locale?: 'zh' | 'en';
-        /**
-         * Content displayed before the first message in a conversation.
-         */
-        startScreen?: {
+            input_tokens_before: number;
             /**
-             * Optional welcome text on the empty conversation.
+             * Context tokens after the compaction; null when not measured.
              */
-            greeting?: string;
+            input_tokens_after: number | null;
             /**
-             * Up to four suggested questions; clicking a label sends its prompt text.
+             * Summary text that replaced the messages; null when the compaction failed.
              */
-            prompts?: Array<{
-                /**
-                 * Visible suggested-question button text.
-                 */
-                label: string;
-                /**
-                 * User message sent when this suggestion is selected.
-                 */
-                prompt: string;
-            }>;
-        };
-        /**
-         * Message input appearance; transport and attachment settings are excluded.
-         */
-        composer?: {
+            summary: string | null;
             /**
-             * Hint shown when the message input is empty.
+             * Failure reason; null when the compaction succeeded.
              */
-            placeholder?: string;
-        };
-        /**
-         * Optional notice displayed beside the conversation composer.
-         */
-        disclaimer?: string;
-        /**
-         * Optional text below the conversation.
-         */
-        footer?: string;
-        /**
-         * Availability of the conversation history control.
-         */
-        history?: {
+            error: string | null;
             /**
-             * False hides history; omission uses the default enabled state.
+             * RFC 3339 time at which the compaction was recorded.
              */
-            enabled?: boolean;
-        };
+            created_at: string;
+        }>;
     };
 };
-export type GetEmbedAppearanceResponse = GetEmbedAppearanceResponses[keyof GetEmbedAppearanceResponses];
+export type ListSessionCompactionsResponse = ListSessionCompactionsResponses[keyof ListSessionCompactionsResponses];
 export type CreateAudioSpeechData = {
     body: unknown & {
         /**
@@ -44196,7 +42991,7 @@ export type ListOrganizationCostsResponses = {
                  */
                 ResourceName?: string;
                 /**
-                 * Decimal string in BillingCurrency.
+                 * Amount in BillingCurrency: US dollars for USD, decimal string, 6 decimals.
                  */
                 BilledCost: string;
                 /**
@@ -44414,7 +43209,7 @@ export type ListOrganizationEventsResponses = {
              */
             ResourceName: string;
             /**
-             * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+             * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
              */
             BilledCost: string;
             /**
@@ -44438,7 +43233,7 @@ export type ListOrganizationEventsResponses = {
                  */
                 status: 'settled' | 'no_charge' | 'rejected';
                 /**
-                 * USD amount that could not be charged, as a decimal string, when status is settled_with_shortfall; null otherwise.
+                 * Amount that could not be charged: US dollars, decimal string, 6 decimals, when status is settled_with_shortfall; null otherwise.
                  */
                 shortfall: string | null;
                 /**
@@ -44535,7 +43330,7 @@ export type GetOrganizationEventResponses = {
          */
         ResourceName: string;
         /**
-         * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+         * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
          */
         BilledCost: string;
         /**
@@ -44559,7 +43354,7 @@ export type GetOrganizationEventResponses = {
              */
             status: 'settled' | 'no_charge' | 'rejected';
             /**
-             * USD amount that could not be charged, as a decimal string, when status is settled_with_shortfall; null otherwise.
+             * Amount that could not be charged: US dollars, decimal string, 6 decimals, when status is settled_with_shortfall; null otherwise.
              */
             shortfall: string | null;
             /**
@@ -44596,7 +43391,7 @@ export type GetOrganizationEventResponses = {
              */
             PricingUnit: string | null;
             /**
-             * Amount billed for this line in USD as a decimal string.
+             * Amount billed for this line: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`).
              */
             BilledCost: string;
         }>;
@@ -44609,7 +43404,7 @@ export type GetOrganizationEventResponses = {
              */
             transaction_id: string;
             /**
-             * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+             * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
              */
             BilledCost: string;
             /**
@@ -44663,7 +43458,7 @@ export type ExportOrganizationChargesResponses = {
          */
         ChargePeriodEnd: string;
         /**
-         * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+         * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
          */
         BilledCost: string;
         /**
@@ -46198,7 +44993,7 @@ export type AgentsListResponses = {
              */
             note: string | null;
             /**
-             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
              */
             bindings: Array<{
                 /**
@@ -46217,6 +45012,10 @@ export type AgentsListResponses = {
                  * Optional guidance for using this resource, up to 4096 characters; does not expand access.
                  */
                 instructions?: string;
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
                  */
@@ -46226,6 +45025,10 @@ export type AgentsListResponses = {
                  * Service type. Opens the whole service to codemode; there is no per-resource id.
                  */
                 type: 'search' | 'browser';
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
                  */
@@ -46702,7 +45505,7 @@ export type AgentsCreateData = {
          */
         tools?: Array<AgentManaged15 | AgentManaged29 | AgentManaged32>;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings?: Array<{
             /**
@@ -46721,6 +45524,10 @@ export type AgentsCreateData = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -46730,6 +45537,10 @@ export type AgentsCreateData = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -47267,7 +46078,7 @@ export type AgentsCreateResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -47286,6 +46097,10 @@ export type AgentsCreateResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -47295,6 +46110,10 @@ export type AgentsCreateResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -47855,7 +46674,7 @@ export type AgentsRetrieveResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -47874,6 +46693,10 @@ export type AgentsRetrieveResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -47883,6 +46706,10 @@ export type AgentsRetrieveResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -48390,6 +47217,10 @@ export type AgentsUpdateData = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -48399,6 +47230,10 @@ export type AgentsUpdateData = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -48945,7 +47780,7 @@ export type AgentsUpdateResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -48964,6 +47799,10 @@ export type AgentsUpdateResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -48973,6 +47812,10 @@ export type AgentsUpdateResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -49523,7 +48366,7 @@ export type AgentsArchiveResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -49542,6 +48385,10 @@ export type AgentsArchiveResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -49551,6 +48398,10 @@ export type AgentsArchiveResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -50119,7 +48970,7 @@ export type AgentsVersionsListResponses = {
              */
             note: string | null;
             /**
-             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
              */
             bindings: Array<{
                 /**
@@ -50138,6 +48989,10 @@ export type AgentsVersionsListResponses = {
                  * Optional guidance for using this resource, up to 4096 characters; does not expand access.
                  */
                 instructions?: string;
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
                  */
@@ -50147,6 +49002,10 @@ export type AgentsVersionsListResponses = {
                  * Service type. Opens the whole service to codemode; there is no per-resource id.
                  */
                 type: 'search' | 'browser';
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
                  */