@deepraxis/sdk 0.1.1-dev.69cffcf → 0.1.1-dev.76902b6

package/dist/generated/types.gen.d.ts

@@ -28050,7 +28050,7 @@ export type ApplyAgentVersionResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -28069,6 +28069,10 @@ export type ApplyAgentVersionResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -28078,6 +28082,10 @@ export type ApplyAgentVersionResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -29227,7 +29235,7 @@ export type UnarchiveAgentResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -29246,6 +29254,10 @@ export type UnarchiveAgentResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -29255,6 +29267,10 @@ export type UnarchiveAgentResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -30237,34 +30253,668 @@ export type BlockEndUserResponses = {
             currency: 'USD';
         };
         /**
-         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
+         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
+         */
+        blocked: boolean;
+    };
+};
+export type BlockEndUserResponse = BlockEndUserResponses[keyof BlockEndUserResponses];
+export type UnblockEndUserData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent identifier from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Host user identifier supplied at issuance or from end-user listing.
+         */
+        external_user_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/unblock';
+};
+export type UnblockEndUserErrors = {
+    /**
+     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
+     */
+    400: unknown;
+    /**
+     * Authenticate with a host credential.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     */
+    404: unknown;
+    /**
+     * Configure an embed policy before blocking or unblocking; retry if a concurrent policy update caused the conflict.
+     */
+    409: unknown;
+};
+export type UnblockEndUserError = UnblockEndUserErrors[keyof UnblockEndUserErrors];
+export type UnblockEndUserResponses = {
+    /**
+     * Current end-user view.
+     */
+    200: {
+        /**
+         * Host application's user identifier, scoped to this organization and agent.
+         */
+        external_user_id: string;
+        /**
+         * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
+         */
+        first_seen_at: string | null;
+        /**
+         * Latest session update or token issuance time; null when there is no history.
+         */
+        last_active_at: string | null;
+        /**
+         * Total sessions for this end user on this agent.
+         */
+        session_count: number;
+        /**
+         * Accumulated recorded cost of this customer's sessions on this agent: model usage (threads included) plus session runtime; amount "0.000000" when nothing has been recorded.
+         */
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
+        /**
+         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
+         */
+        blocked: boolean;
+    };
+};
+export type UnblockEndUserResponse = UnblockEndUserResponses[keyof UnblockEndUserResponses];
+export type ListCustomersData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+    };
+    query?: {
+        /**
+         * Maximum customers per page, 1 to 100; defaults to 20.
+         */
+        limit?: number;
+        /**
+         * next_page from the previous response with the same q, type, blocked and limit.
+         */
+        page?: string;
+        /**
+         * Case-sensitive literal prefix of the customer id; omit for all customers.
+         */
+        q?: string;
+        /**
+         * Only identified or only anonymous customers; omit for both.
+         */
+        type?: 'identified' | 'anonymous';
+        /**
+         * true for blocked customers only, false for customers who are not blocked; omit for both.
+         */
+        blocked?: boolean;
+    };
+    url: '/agent/v1/agents/{agent_id}/customers';
+};
+export type ListCustomersErrors = {
+    /**
+     * INVALID_PARAMS: limit outside 1 to 100, type other than identified or anonymous, blocked other than true or false, or an unknown query parameter. INVALID_PAGE_TOKEN: next_page from another query; restart without page.
+     */
+    400: unknown;
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * The agent is not an active service agent of your organization, or the caller is a customer access token.
+     */
+    404: unknown;
+};
+export type ListCustomersError = ListCustomersErrors[keyof ListCustomersErrors];
+export type ListCustomersResponses = {
+    /**
+     * Matching customers and the next page cursor.
+     */
+    200: {
+        /**
+         * Items of this page, in the order requested by the call.
+         */
+        data: Array<{
+            /**
+             * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
+             */
+            id: string;
+            /**
+             * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+             */
+            type: 'identified' | 'anonymous';
+            /**
+             * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+             */
+            merged_into: string | null;
+            /**
+             * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
+             */
+            blocked: boolean;
+            /**
+             * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
+             */
+            first_seen_at: string | null;
+            /**
+             * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
+             */
+            last_seen_at: string | null;
+            /**
+             * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+             */
+            session_count: number;
+            /**
+             * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+             */
+            cost: {
+                /**
+                 * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+                 */
+                amount: string;
+                /**
+                 * Always USD.
+                 */
+                currency: 'USD';
+            };
+        }>;
+        /**
+         * Cursor for the next page with the same agent, q, type, blocked and limit; null when exhausted.
+         */
+        next_page: string | null;
+    };
+};
+export type ListCustomersResponse = ListCustomersResponses[keyof ListCustomersResponses];
+export type DeleteCustomerData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query: {
+        /**
+         * Must equal the customer_id path parameter exactly, confirming the destructive deletion.
+         */
+        confirm: string;
+    };
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}';
+};
+export type DeleteCustomerErrors = {
+    /**
+     * INVALID_PARAMS: confirm is missing or differs from customer_id; send ?confirm=<customer_id>.
+     */
+    400: unknown;
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     */
+    404: unknown;
+};
+export type DeleteCustomerError = DeleteCustomerErrors[keyof DeleteCustomerErrors];
+export type DeleteCustomerResponses = {
+    /**
+     * Deletion accepted; poll the deletion endpoint until done or failed.
+     */
+    202: {
+        /**
+         * Deletion task identifier.
+         */
+        id: string;
+        /**
+         * Accepted for asynchronous processing; poll deletion for progress.
+         */
+        status: 'pending';
+    };
+};
+export type DeleteCustomerResponse = DeleteCustomerResponses[keyof DeleteCustomerResponses];
+export type GetCustomerData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}';
+};
+export type GetCustomerErrors = {
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     */
+    404: unknown;
+};
+export type GetCustomerError = GetCustomerErrors[keyof GetCustomerErrors];
+export type GetCustomerResponses = {
+    /**
+     * The customer with its recent sessions.
+     */
+    200: {
+        /**
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
+         */
+        id: string;
+        /**
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+         */
+        type: 'identified' | 'anonymous';
+        /**
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+         */
+        merged_into: string | null;
+        /**
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
+         */
+        blocked: boolean;
+        /**
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
+         */
+        first_seen_at: string | null;
+        /**
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
+         */
+        last_seen_at: string | null;
+        /**
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+         */
+        session_count: number;
+        /**
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+         */
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
+        /**
+         * Up to twenty sessions of the customer, and of anonymous customers merged into it, most recently updated first.
+         */
+        recent_sessions: Array<{
+            /**
+             * Public sesn_ session identifier, usable with session retrieval.
+             */
+            id: string;
+            /**
+             * Session title, or null when unset.
+             */
+            title: string | null;
+            /**
+             * Session entry surface, or null when no surface was recorded.
+             */
+            source: string | null;
+            /**
+             * Session creation time in UTC.
+             */
+            created_at: string;
+            /**
+             * Most recent session update time in UTC.
+             */
+            updated_at: string;
+        }>;
+    };
+};
+export type GetCustomerResponse = GetCustomerResponses[keyof GetCustomerResponses];
+export type GetCustomerDeletionData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/deletion';
+};
+export type GetCustomerDeletionErrors = {
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND or no deletion task: the customer or task is unknown, or the caller is a customer access token.
+     */
+    404: unknown;
+};
+export type GetCustomerDeletionError = GetCustomerDeletionErrors[keyof GetCustomerDeletionErrors];
+export type GetCustomerDeletionResponses = {
+    /**
+     * The latest deletion task and its snapshot counts.
+     */
+    200: {
+        /**
+         * Deletion task identifier.
+         */
+        id: string;
+        /**
+         * pending: accepted; snapshotting: exporting recovery data; deleting: verified snapshot exists and erasure is running; done: erasure completed; failed: stopped safely, retry DELETE to resume the same task.
+         */
+        status: 'pending' | 'snapshotting' | 'deleting' | 'done' | 'failed';
+        /**
+         * Counts from the verified snapshot; empty until snapshotting completes.
+         */
+        counts: {
+            /**
+             * Number of primary and child sessions in the snapshot.
+             */
+            sessions?: number;
+            /**
+             * Number of durable session events captured without changing the history.
+             */
+            events?: number;
+            /**
+             * Number of stored transcript messages in the snapshot.
+             */
+            messages?: number;
+            /**
+             * Number of backed-up directory, authorization, feedback and projection rows.
+             */
+            d1_rows?: number;
+            /**
+             * Number of session attachment references; their file bytes are retained.
+             */
+            attachments?: number;
+        };
+        /**
+         * Operator recovery snapshot key, retained for seven days. Attachment bytes are not copied or deleted.
+         */
+        snapshot_key?: string;
+        /**
+         * Content-free failure summary; retry the confirmed deletion to resume.
+         */
+        error?: string;
+        /**
+         * Task creation time in RFC 3339 format.
+         */
+        created_at: string;
+        /**
+         * Latest task update time in RFC 3339 format.
+         */
+        updated_at: string;
+    };
+};
+export type GetCustomerDeletionResponse = GetCustomerDeletionResponses[keyof GetCustomerDeletionResponses];
+export type BlockCustomerData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/block';
+};
+export type BlockCustomerErrors = {
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     */
+    404: unknown;
+    /**
+     * Credential revocation failed; the customer stays blocked if you asked to block it. Retry to finish revoking.
+     */
+    502: unknown;
+};
+export type BlockCustomerError = BlockCustomerErrors[keyof BlockCustomerErrors];
+export type BlockCustomerResponses = {
+    /**
+     * The customer after the change.
+     */
+    200: {
+        /**
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
+         */
+        id: string;
+        /**
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+         */
+        type: 'identified' | 'anonymous';
+        /**
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+         */
+        merged_into: string | null;
+        /**
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
+         */
+        blocked: boolean;
+        /**
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
+         */
+        first_seen_at: string | null;
+        /**
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
+         */
+        last_seen_at: string | null;
+        /**
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+         */
+        session_count: number;
+        /**
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+         */
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
+    };
+};
+export type BlockCustomerResponse = BlockCustomerResponses[keyof BlockCustomerResponses];
+export type UnblockCustomerData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/unblock';
+};
+export type UnblockCustomerErrors = {
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     */
+    404: unknown;
+};
+export type UnblockCustomerError = UnblockCustomerErrors[keyof UnblockCustomerErrors];
+export type UnblockCustomerResponses = {
+    /**
+     * The customer after the change.
+     */
+    200: {
+        /**
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
+         */
+        id: string;
+        /**
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+         */
+        type: 'identified' | 'anonymous';
+        /**
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+         */
+        merged_into: string | null;
+        /**
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
+         */
+        blocked: boolean;
+        /**
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
+         */
+        first_seen_at: string | null;
+        /**
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
+         */
+        last_seen_at: string | null;
+        /**
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+         */
+        session_count: number;
+        /**
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+         */
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
+    };
+};
+export type UnblockCustomerResponse = UnblockCustomerResponses[keyof UnblockCustomerResponses];
+export type RevokeCustomerTokensData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/revoke_tokens';
+};
+export type RevokeCustomerTokensErrors = {
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     */
+    404: unknown;
+    /**
+     * Credential revocation failed; the customer stays blocked if you asked to block it. Retry to finish revoking.
+     */
+    502: unknown;
+};
+export type RevokeCustomerTokensError = RevokeCustomerTokensErrors[keyof RevokeCustomerTokensErrors];
+export type RevokeCustomerTokensResponses = {
+    /**
+     * How many access tokens this request revoked.
+     */
+    200: {
+        /**
+         * Number of access tokens this request revoked; 0 when none was live.
          */
-        blocked: boolean;
+        revoked: number;
     };
 };
-export type BlockEndUserResponse = BlockEndUserResponses[keyof BlockEndUserResponses];
-export type UnblockEndUserData = {
+export type RevokeCustomerTokensResponse = RevokeCustomerTokensResponses[keyof RevokeCustomerTokensResponses];
+export type GetAgentAppearanceData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Service agent id from agent creation or listing; with a customer access token, the agent the token was issued for.
          */
         agent_id: string;
-        /**
-         * Host user identifier supplied at issuance or from end-user listing.
-         */
-        external_user_id: string;
     };
     query?: never;
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/unblock';
+    url: '/agent/v1/agents/{agent_id}/appearance';
 };
-export type UnblockEndUserErrors = {
-    /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
-     */
-    400: unknown;
+export type GetAgentAppearanceErrors = {
     /**
-     * Authenticate with a host credential.
+     * Authenticate with a customer access token of this agent, your API key or a console session.
      */
     401: unknown;
     /**
@@ -30272,56 +30922,217 @@ export type UnblockEndUserErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * AGENT_NOT_FOUND: the agent is absent, archived or not a service agent, or the customer access token belongs to another agent.
      */
     404: unknown;
     /**
-     * Configure an embed policy before blocking or unblocking; retry if a concurrent policy update caused the conflict.
+     * Appearance is temporarily unavailable; use the default appearance and continue the conversation.
      */
-    409: unknown;
+    503: unknown;
 };
-export type UnblockEndUserError = UnblockEndUserErrors[keyof UnblockEndUserErrors];
-export type UnblockEndUserResponses = {
+export type GetAgentAppearanceError = GetAgentAppearanceErrors[keyof GetAgentAppearanceErrors];
+export type GetAgentAppearanceResponses = {
     /**
-     * Current end-user view.
+     * Saved Kit options, at most 8192 UTF-8 JSON bytes. Omitted groups use Kit defaults; an unconfigured agent returns an empty object.
      */
     200: {
         /**
-         * Host application's user identifier, scoped to this organization and agent.
+         * Public identity displayed on the chat page, independent of the internal agent name.
          */
-        external_user_id: string;
+        agent?: {
+            /**
+             * Display name; omission keeps the neutral browser-language default.
+             */
+            name?: string;
+            /**
+             * Optional HTTPS avatar image URL; non-HTTPS images are rejected.
+             */
+            avatar?: string;
+        };
         /**
-         * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
+         * Loader default: inline stays in the page, sidebar attaches to the edge, popup floats above its launcher, modal centers an overlay. A script data-layout overrides it; Hosted always uses inline.
          */
-        first_seen_at: string | null;
+        layout?: 'inline' | 'sidebar' | 'popup' | 'modal';
         /**
-         * Latest session update or token issuance time; null when there is no history.
+         * Default entry button for the loader; an explicit script data-launcher takes precedence.
          */
-        last_active_at: string | null;
+        launcher?: {
+            /**
+             * Entry control: none hides the launcher, bubble shows a button, mascot shows a character that reacts while the visitor types and the agent thinks and answers. A mascot needs pack.
+             */
+            type: 'none' | 'bubble' | 'mascot';
+            /**
+             * Mascot images: exactly one of preset or images. Send pack, not image.
+             */
+            pack?: {
+                /**
+                 * Built-in character: mint (mint support girl), cat (cat-eared girl) or bot (small robot).
+                 */
+                preset?: 'mint' | 'cat' | 'bot';
+                /**
+                 * One HTTPS image per slot; only idle is required and a missing slot shows idle. Use 2:3 canvases with the feet bottom-centered on a transparent background; PNG or WebP stay still, GIF, WebP and APNG play as they are.
+                 */
+                images?: {
+                    /**
+                     * Resting state.
+                     */
+                    idle: string;
+                    /**
+                     * Page open and while the greeting bubble shows.
+                     */
+                    greet?: string;
+                    /**
+                     * The visitor is typing in the composer.
+                     */
+                    listening?: string;
+                    /**
+                     * After the visitor sends, before the first reply text.
+                     */
+                    thinking?: string;
+                    /**
+                     * While the reply streams; alternates with talking-2 every 220 ms.
+                     */
+                    talking?: string;
+                    /**
+                     * Second mouth frame of talking, mouth closed; without it talking alternates with idle.
+                     */
+                    'talking-2'?: string;
+                    /**
+                     * The last turn failed or was refused.
+                     */
+                    sorry?: string;
+                    /**
+                     * No interaction for 60 seconds; hover or click wakes the mascot.
+                     */
+                    sleep?: string;
+                };
+            };
+            /**
+             * Legacy single mascot image, read as pack.images.idle. When pack is present, pack wins.
+             */
+            image?: string;
+            /**
+             * float (default) gently floats the mascot, bounces on hover and waves with the greeting; none keeps it still. Reduced-motion settings always win.
+             */
+            motion?: 'float' | 'none';
+            /**
+             * Launcher corner: bottom-right is the default; bottom-left uses the opposite corner.
+             */
+            position?: 'bottom-right' | 'bottom-left';
+            /**
+             * Accessible entry button label and bubble text; omission uses the default chat label.
+             */
+            label?: string;
+        };
         /**
-         * Total sessions for this end user on this agent.
+         * Visible chat heading; omitted title uses the public agent name.
          */
-        session_count: number;
+        header?: {
+            /**
+             * Optional heading text shown instead of the public agent name.
+             */
+            title?: string;
+            /**
+             * Optional secondary line beneath the heading.
+             */
+            subtitle?: string;
+            /**
+             * Optional HTTPS image shown in the heading avatar position.
+             */
+            icon?: string;
+        };
         /**
-         * Accumulated recorded cost of this customer's sessions on this agent: model usage (threads included) plus session runtime; amount "0.000000" when nothing has been recorded.
+         * Visual tokens applied to the conversation and header; omitted fields use Kit defaults.
          */
-        cost: {
+        theme?: {
             /**
-             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             * light or dark selects a fixed scheme; system follows the device preference.
              */
-            amount: string;
+            colorScheme?: 'light' | 'dark' | 'system';
             /**
-             * Always USD.
+             * Explicit opaque CSS accent color, for example #167A43.
              */
-            currency: 'USD';
+            accent?: string;
+            /**
+             * Explicit opaque CSS background color, for example #ffffff.
+             */
+            surface?: string;
+            /**
+             * neutral uses grayscale surfaces, warm uses warm tones, cool uses cool tones.
+             */
+            grayscale?: 'neutral' | 'warm' | 'cool';
+            /**
+             * Corner rounding: none is square, sm is small, md is medium, lg is large, full is fully rounded.
+             */
+            radius?: 'none' | 'sm' | 'md' | 'lg' | 'full';
+            /**
+             * Spacing: compact reduces gaps, normal uses defaults, spacious increases gaps.
+             */
+            density?: 'compact' | 'normal' | 'spacious';
+            /**
+             * CSS font family list using fonts available on the device; external font loading is not configured here.
+             */
+            fontFamily?: string;
+            /**
+             * Positive base font size in CSS pixels; omission preserves Kit sizing.
+             */
+            fontSize?: number;
         };
         /**
-         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
+         * Reserved Kit locale preference: zh for Chinese, en for English. Kit currently passes this option through without translating all controls.
          */
-        blocked: boolean;
+        locale?: 'zh' | 'en';
+        /**
+         * Content displayed before the first message in a conversation.
+         */
+        startScreen?: {
+            /**
+             * Optional welcome text on the empty conversation.
+             */
+            greeting?: string;
+            /**
+             * Up to four suggested questions; clicking a label sends its prompt text.
+             */
+            prompts?: Array<{
+                /**
+                 * Visible suggested-question button text.
+                 */
+                label: string;
+                /**
+                 * User message sent when this suggestion is selected.
+                 */
+                prompt: string;
+            }>;
+        };
+        /**
+         * Message input appearance; transport and attachment settings are excluded.
+         */
+        composer?: {
+            /**
+             * Hint shown when the message input is empty.
+             */
+            placeholder?: string;
+        };
+        /**
+         * Optional notice displayed beside the conversation composer.
+         */
+        disclaimer?: string;
+        /**
+         * Optional text below the conversation.
+         */
+        footer?: string;
+        /**
+         * Availability of the conversation history control.
+         */
+        history?: {
+            /**
+             * False hides history; omission uses the default enabled state.
+             */
+            enabled?: boolean;
+        };
     };
 };
-export type UnblockEndUserResponse = UnblockEndUserResponses[keyof UnblockEndUserResponses];
+export type GetAgentAppearanceResponse = GetAgentAppearanceResponses[keyof GetAgentAppearanceResponses];
 export type CreateCustomerGrantCodeData = {
     body: {
         /**
@@ -43401,7 +44212,7 @@ export type ListOrganizationCostsResponses = {
                  */
                 ResourceName?: string;
                 /**
-                 * Decimal string in BillingCurrency.
+                 * Amount in BillingCurrency: US dollars for USD, decimal string, 6 decimals.
                  */
                 BilledCost: string;
                 /**
@@ -43619,7 +44430,7 @@ export type ListOrganizationEventsResponses = {
              */
             ResourceName: string;
             /**
-             * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+             * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
              */
             BilledCost: string;
             /**
@@ -43643,7 +44454,7 @@ export type ListOrganizationEventsResponses = {
                  */
                 status: 'settled' | 'no_charge' | 'rejected';
                 /**
-                 * USD amount that could not be charged, as a decimal string, when status is settled_with_shortfall; null otherwise.
+                 * Amount that could not be charged: US dollars, decimal string, 6 decimals, when status is settled_with_shortfall; null otherwise.
                  */
                 shortfall: string | null;
                 /**
@@ -43740,7 +44551,7 @@ export type GetOrganizationEventResponses = {
          */
         ResourceName: string;
         /**
-         * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+         * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
          */
         BilledCost: string;
         /**
@@ -43764,7 +44575,7 @@ export type GetOrganizationEventResponses = {
              */
             status: 'settled' | 'no_charge' | 'rejected';
             /**
-             * USD amount that could not be charged, as a decimal string, when status is settled_with_shortfall; null otherwise.
+             * Amount that could not be charged: US dollars, decimal string, 6 decimals, when status is settled_with_shortfall; null otherwise.
              */
             shortfall: string | null;
             /**
@@ -43801,7 +44612,7 @@ export type GetOrganizationEventResponses = {
              */
             PricingUnit: string | null;
             /**
-             * Amount billed for this line in USD as a decimal string.
+             * Amount billed for this line: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`).
              */
             BilledCost: string;
         }>;
@@ -43814,7 +44625,7 @@ export type GetOrganizationEventResponses = {
              */
             transaction_id: string;
             /**
-             * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+             * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
              */
             BilledCost: string;
             /**
@@ -43868,7 +44679,7 @@ export type ExportOrganizationChargesResponses = {
          */
         ChargePeriodEnd: string;
         /**
-         * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+         * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
          */
         BilledCost: string;
         /**
@@ -45403,7 +46214,7 @@ export type AgentsListResponses = {
              */
             note: string | null;
             /**
-             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
              */
             bindings: Array<{
                 /**
@@ -45422,6 +46233,10 @@ export type AgentsListResponses = {
                  * Optional guidance for using this resource, up to 4096 characters; does not expand access.
                  */
                 instructions?: string;
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
                  */
@@ -45431,6 +46246,10 @@ export type AgentsListResponses = {
                  * Service type. Opens the whole service to codemode; there is no per-resource id.
                  */
                 type: 'search' | 'browser';
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
                  */
@@ -45907,7 +46726,7 @@ export type AgentsCreateData = {
          */
         tools?: Array<AgentManaged15 | AgentManaged29 | AgentManaged32>;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings?: Array<{
             /**
@@ -45926,6 +46745,10 @@ export type AgentsCreateData = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -45935,6 +46758,10 @@ export type AgentsCreateData = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -46472,7 +47299,7 @@ export type AgentsCreateResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -46491,6 +47318,10 @@ export type AgentsCreateResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -46500,6 +47331,10 @@ export type AgentsCreateResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -47060,7 +47895,7 @@ export type AgentsRetrieveResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -47079,6 +47914,10 @@ export type AgentsRetrieveResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -47088,6 +47927,10 @@ export type AgentsRetrieveResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -47595,6 +48438,10 @@ export type AgentsUpdateData = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -47604,6 +48451,10 @@ export type AgentsUpdateData = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -48150,7 +49001,7 @@ export type AgentsUpdateResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -48169,6 +49020,10 @@ export type AgentsUpdateResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -48178,6 +49033,10 @@ export type AgentsUpdateResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -48728,7 +49587,7 @@ export type AgentsArchiveResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -48747,6 +49606,10 @@ export type AgentsArchiveResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -48756,6 +49619,10 @@ export type AgentsArchiveResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -49324,7 +50191,7 @@ export type AgentsVersionsListResponses = {
              */
             note: string | null;
             /**
-             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
              */
             bindings: Array<{
                 /**
@@ -49343,6 +50210,10 @@ export type AgentsVersionsListResponses = {
                  * Optional guidance for using this resource, up to 4096 characters; does not expand access.
                  */
                 instructions?: string;
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
                  */
@@ -49352,6 +50223,10 @@ export type AgentsVersionsListResponses = {
                  * Service type. Opens the whole service to codemode; there is no per-resource id.
                  */
                 type: 'search' | 'browser';
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
                  */