@deepraxis/sdk 0.1.1-dev.b176367 → 0.1.1-dev.bdcd5e6

package/dist/generated/types.gen.d.ts

@@ -4215,7 +4215,7 @@ export type AgentManaged57 = {
     type: 'custom';
 };
 /**
- * Session spending limit, {type: "limit", max_list_cost: {amount, currency}}; null when unlimited. Creation defaults to a limit of 2000 US cents (USD 20.00) when omitted. amount is a positive integer string of US cents; removing the limit with null prevents setting it again for that session.
+ * Session spending limit, {type: "limit", max_list_cost: {amount, currency}}; null when unlimited. amount is in US dollars: send an integer or up to 2 decimals ("0.50"), and responses carry exactly 2 decimals ("20.00"). Creation defaults to USD 20.00 when omitted. More decimals, zero or a number return 400. Removing the limit with null prevents setting it again for that session.
  */
 export type AgentManaged76 = {
     /**
@@ -4408,6 +4408,19 @@ export type AgentManaged179 = {
      * Cumulative count of server-executed tool invocations, broken down by tool.
      */
     server_tool_use?: null | AgentManaged181;
+    /**
+     * Praxis extension: priced runtime of this session (the time it was running), billed separately from list_cost and not counted against the budget. amount is in US dollars as a decimal string with exactly 6 decimals, e.g. "0.000280". Each thread's runtime is reported on that thread. /agent/v1 only.
+     */
+    runtime_cost?: {
+        /**
+         * Runtime cost in US dollars, decimal string with exactly 6 decimals.
+         */
+        amount: string;
+        /**
+         * Always USD.
+         */
+        currency: 'USD';
+    };
 };
 export type AgentManaged183 = {
     [key: string]: null | string;
@@ -18102,11 +18115,11 @@ export type AgentManaged33 = {
     [key: string]: unknown;
 };
 /**
- * Largest list-price cost the session may reach, as {amount, currency}. amount is a string of US cents, not dollars.
+ * Largest list-price cost the session may reach, as {amount, currency}. amount is in US dollars with at most 2 decimals, not cents.
  */
 export type AgentManaged77 = {
     /**
-     * Cost ceiling in US cents, as a positive integer string with no leading zeros: "2000" is USD 20.00 and "50" is fifty cents. Decimals and JSON numbers return 400.
+     * Amount in US dollars as a decimal string. Costs (usage.list_cost) carry exactly 6 decimals, e.g. "0.000345"; budgets (budget.max_list_cost) carry exactly 2 decimals, e.g. "20.00", and accept an integer or up to 2 decimals on input.
      */
     amount: string;
     /**
@@ -28037,7 +28050,7 @@ export type ApplyAgentVersionResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -28056,6 +28069,10 @@ export type ApplyAgentVersionResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -28065,6 +28082,10 @@ export type ApplyAgentVersionResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -28082,6 +28103,10 @@ export type ApplyAgentVersionResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -29210,7 +29235,7 @@ export type UnarchiveAgentResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -29229,6 +29254,10 @@ export type UnarchiveAgentResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -29238,6 +29267,10 @@ export type UnarchiveAgentResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -29255,6 +29288,10 @@ export type UnarchiveAgentResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -29750,37 +29787,45 @@ export type SetRunFeedbackResponses = {
     };
 };
 export type SetRunFeedbackResponse = SetRunFeedbackResponses[keyof SetRunFeedbackResponses];
-export type ListEndUsersData = {
+export type ListCustomersData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
     };
     query?: {
         /**
-         * Maximum users per page; defaults to 20.
+         * Maximum customers per page, 1 to 100; defaults to 20.
          */
         limit?: number;
         /**
-         * next_page from the previous response with the same agent, q and limit.
+         * next_page from the previous response with the same q, type, blocked and limit.
          */
         page?: string;
         /**
-         * Case-sensitive literal prefix of external_user_id; omit or use an empty string for all users.
+         * Case-sensitive literal prefix of the customer id; omit for all customers.
          */
         q?: string;
+        /**
+         * Only identified or only anonymous customers; omit for both.
+         */
+        type?: 'identified' | 'anonymous';
+        /**
+         * true for blocked customers only, false for customers who are not blocked; omit for both.
+         */
+        blocked?: boolean;
     };
-    url: '/agent/v1/agents/{agent_id}/end_users';
+    url: '/agent/v1/agents/{agent_id}/customers';
 };
-export type ListEndUsersErrors = {
+export type ListCustomersErrors = {
     /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
+     * INVALID_PARAMS: limit outside 1 to 100, type other than identified or anonymous, blocked other than true or false, or an unknown query parameter. INVALID_PAGE_TOKEN: next_page from another query; restart without page.
      */
     400: unknown;
     /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -29788,14 +29833,14 @@ export type ListEndUsersErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * The agent is not an active service agent of your organization, or the caller is a customer access token.
      */
     404: unknown;
 };
-export type ListEndUsersError = ListEndUsersErrors[keyof ListEndUsersErrors];
-export type ListEndUsersResponses = {
+export type ListCustomersError = ListCustomersErrors[keyof ListCustomersErrors];
+export type ListCustomersResponses = {
     /**
-     * Matching users and next page cursor.
+     * Matching customers and the next page cursor.
      */
     200: {
         /**
@@ -29803,64 +29848,81 @@ export type ListEndUsersResponses = {
          */
         data: Array<{
             /**
-             * Host application's user identifier, scoped to this organization and agent.
+             * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
              */
-            external_user_id: string;
+            id: string;
             /**
-             * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
+             * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
              */
-            first_seen_at: string | null;
+            type: 'identified' | 'anonymous';
             /**
-             * Latest session update or token issuance time; null when there is no history.
+             * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
              */
-            last_active_at: string | null;
+            merged_into: string | null;
             /**
-             * Total sessions for this end user on this agent.
+             * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
              */
-            session_count: number;
+            blocked: boolean;
             /**
-             * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
+             * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
              */
-            cost_micro_usd: number;
+            first_seen_at: string | null;
             /**
-             * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
+             * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
              */
-            blocked: boolean;
+            last_seen_at: string | null;
+            /**
+             * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+             */
+            session_count: number;
+            /**
+             * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+             */
+            cost: {
+                /**
+                 * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+                 */
+                amount: string;
+                /**
+                 * Always USD.
+                 */
+                currency: 'USD';
+            };
         }>;
         /**
-         * Cursor for the same agent, q and limit; null when exhausted.
+         * Cursor for the next page with the same agent, q, type, blocked and limit; null when exhausted.
          */
         next_page: string | null;
     };
 };
-export type ListEndUsersResponse = ListEndUsersResponses[keyof ListEndUsersResponses];
-export type DeleteEndUserData = {
+export type ListCustomersResponse = ListCustomersResponses[keyof ListCustomersResponses];
+export type DeleteCustomerData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * Customer id from customer listing, or your own customer_id.
          */
-        external_user_id: string;
+        customer_id: string;
     };
     query: {
         /**
-         * Must exactly equal the external_user_id path parameter to confirm destructive deletion.
+         * Must equal the customer_id path parameter exactly, confirming the destructive deletion.
          */
         confirm: string;
     };
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}';
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}';
 };
-export type DeleteEndUserErrors = {
+export type DeleteCustomerErrors = {
     /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
+     * INVALID_PARAMS: confirm is missing or differs from customer_id; send ?confirm=<customer_id>.
      */
     400: unknown;
     /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -29868,12 +29930,12 @@ export type DeleteEndUserErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
      */
     404: unknown;
 };
-export type DeleteEndUserError = DeleteEndUserErrors[keyof DeleteEndUserErrors];
-export type DeleteEndUserResponses = {
+export type DeleteCustomerError = DeleteCustomerErrors[keyof DeleteCustomerErrors];
+export type DeleteCustomerResponses = {
     /**
      * Deletion accepted; poll the deletion endpoint until done or failed.
      */
@@ -29888,29 +29950,25 @@ export type DeleteEndUserResponses = {
         status: 'pending';
     };
 };
-export type DeleteEndUserResponse = DeleteEndUserResponses[keyof DeleteEndUserResponses];
-export type GetEndUserData = {
+export type DeleteCustomerResponse = DeleteCustomerResponses[keyof DeleteCustomerResponses];
+export type GetCustomerData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * Customer id from customer listing, or your own customer_id.
          */
-        external_user_id: string;
+        customer_id: string;
     };
     query?: never;
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}';
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}';
 };
-export type GetEndUserErrors = {
+export type GetCustomerErrors = {
     /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
-     */
-    400: unknown;
-    /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -29918,42 +29976,59 @@ export type GetEndUserErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
      */
     404: unknown;
 };
-export type GetEndUserError = GetEndUserErrors[keyof GetEndUserErrors];
-export type GetEndUserResponses = {
+export type GetCustomerError = GetCustomerErrors[keyof GetCustomerErrors];
+export type GetCustomerResponses = {
     /**
-     * Current end-user view.
+     * The customer with its recent sessions.
      */
     200: {
         /**
-         * Host application's user identifier, scoped to this organization and agent.
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
          */
-        external_user_id: string;
+        id: string;
         /**
-         * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
          */
-        first_seen_at: string | null;
+        type: 'identified' | 'anonymous';
         /**
-         * Latest session update or token issuance time; null when there is no history.
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
          */
-        last_active_at: string | null;
+        merged_into: string | null;
         /**
-         * Total sessions for this end user on this agent.
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
          */
-        session_count: number;
+        blocked: boolean;
         /**
-         * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
          */
-        cost_micro_usd: number;
+        first_seen_at: string | null;
         /**
-         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
          */
-        blocked: boolean;
+        last_seen_at: string | null;
+        /**
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+         */
+        session_count: number;
         /**
-         * Up to twenty sessions, ordered by most recent update first.
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+         */
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
+        /**
+         * Up to twenty sessions of the customer, and of anonymous customers merged into it, most recently updated first.
          */
         recent_sessions: Array<{
             /**
@@ -29979,29 +30054,25 @@ export type GetEndUserResponses = {
         }>;
     };
 };
-export type GetEndUserResponse = GetEndUserResponses[keyof GetEndUserResponses];
-export type GetEndUserDeletionData = {
+export type GetCustomerResponse = GetCustomerResponses[keyof GetCustomerResponses];
+export type GetCustomerDeletionData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * Customer id from customer listing, or your own customer_id.
          */
-        external_user_id: string;
+        customer_id: string;
     };
     query?: never;
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/deletion';
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/deletion';
 };
-export type GetEndUserDeletionErrors = {
-    /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
-     */
-    400: unknown;
+export type GetCustomerDeletionErrors = {
     /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -30009,14 +30080,14 @@ export type GetEndUserDeletionErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * CUSTOMER_NOT_FOUND or no deletion task: the customer or task is unknown, or the caller is a customer access token.
      */
     404: unknown;
 };
-export type GetEndUserDeletionError = GetEndUserDeletionErrors[keyof GetEndUserDeletionErrors];
-export type GetEndUserDeletionResponses = {
+export type GetCustomerDeletionError = GetCustomerDeletionErrors[keyof GetCustomerDeletionErrors];
+export type GetCustomerDeletionResponses = {
     /**
-     * Latest deletion task and snapshot counts.
+     * The latest deletion task and its snapshot counts.
      */
     200: {
         /**
@@ -30070,29 +30141,25 @@ export type GetEndUserDeletionResponses = {
         updated_at: string;
     };
 };
-export type GetEndUserDeletionResponse = GetEndUserDeletionResponses[keyof GetEndUserDeletionResponses];
-export type RevokeEndUserTokensData = {
+export type GetCustomerDeletionResponse = GetCustomerDeletionResponses[keyof GetCustomerDeletionResponses];
+export type BlockCustomerData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * Customer id from customer listing, or your own customer_id.
          */
-        external_user_id: string;
+        customer_id: string;
     };
     query?: never;
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/revoke_tokens';
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/block';
 };
-export type RevokeEndUserTokensErrors = {
-    /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
-     */
-    400: unknown;
+export type BlockCustomerErrors = {
     /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -30100,49 +30167,82 @@ export type RevokeEndUserTokensErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
      */
     404: unknown;
     /**
-     * Credential revocation failed; grant timestamps remain unchanged. A requested block remains in effect; retry to finish revocation.
+     * Credential revocation failed; the customer stays blocked if you asked to block it. Retry to finish revoking.
      */
     502: unknown;
 };
-export type RevokeEndUserTokensError = RevokeEndUserTokensErrors[keyof RevokeEndUserTokensErrors];
-export type RevokeEndUserTokensResponses = {
+export type BlockCustomerError = BlockCustomerErrors[keyof BlockCustomerErrors];
+export type BlockCustomerResponses = {
     /**
-     * Number of newly revoked grants.
+     * The customer after the change.
      */
     200: {
         /**
-         * Number of previously unrevoked grants marked revoked by this request.
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
          */
-        revoked: number;
+        id: string;
+        /**
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+         */
+        type: 'identified' | 'anonymous';
+        /**
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+         */
+        merged_into: string | null;
+        /**
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
+         */
+        blocked: boolean;
+        /**
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
+         */
+        first_seen_at: string | null;
+        /**
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
+         */
+        last_seen_at: string | null;
+        /**
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+         */
+        session_count: number;
+        /**
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+         */
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
     };
 };
-export type RevokeEndUserTokensResponse = RevokeEndUserTokensResponses[keyof RevokeEndUserTokensResponses];
-export type BlockEndUserData = {
+export type BlockCustomerResponse = BlockCustomerResponses[keyof BlockCustomerResponses];
+export type UnblockCustomerData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * Customer id from customer listing, or your own customer_id.
          */
-        external_user_id: string;
+        customer_id: string;
     };
     query?: never;
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/block';
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/unblock';
 };
-export type BlockEndUserErrors = {
-    /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
-     */
-    400: unknown;
+export type UnblockCustomerErrors = {
     /**
-     * Authenticate with a host credential.
+     * Authenticate with your API key or a console session.
      */
     401: unknown;
     /**
@@ -30150,73 +30250,120 @@ export type BlockEndUserErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
      */
     404: unknown;
-    /**
-     * Configure an embed policy before blocking or unblocking; retry if a concurrent policy update caused the conflict.
-     */
-    409: unknown;
-    /**
-     * Credential revocation failed; grant timestamps remain unchanged. A requested block remains in effect; retry to finish revocation.
-     */
-    502: unknown;
 };
-export type BlockEndUserError = BlockEndUserErrors[keyof BlockEndUserErrors];
-export type BlockEndUserResponses = {
+export type UnblockCustomerError = UnblockCustomerErrors[keyof UnblockCustomerErrors];
+export type UnblockCustomerResponses = {
     /**
-     * Current end-user view.
+     * The customer after the change.
      */
     200: {
         /**
-         * Host application's user identifier, scoped to this organization and agent.
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
          */
-        external_user_id: string;
+        id: string;
         /**
-         * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
          */
-        first_seen_at: string | null;
+        type: 'identified' | 'anonymous';
         /**
-         * Latest session update or token issuance time; null when there is no history.
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
          */
-        last_active_at: string | null;
+        merged_into: string | null;
         /**
-         * Total sessions for this end user on this agent.
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
          */
-        session_count: number;
+        blocked: boolean;
+        /**
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
+         */
+        first_seen_at: string | null;
         /**
-         * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
          */
-        cost_micro_usd: number;
+        last_seen_at: string | null;
         /**
-         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
          */
-        blocked: boolean;
+        session_count: number;
+        /**
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+         */
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
     };
 };
-export type BlockEndUserResponse = BlockEndUserResponses[keyof BlockEndUserResponses];
-export type UnblockEndUserData = {
+export type UnblockCustomerResponse = UnblockCustomerResponses[keyof UnblockCustomerResponses];
+export type RevokeCustomerTokensData = {
     body?: never;
     path: {
         /**
-         * Active service agent identifier from agent creation or listing.
+         * Active service agent id from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Host user identifier supplied at issuance or from end-user listing.
+         * Customer id from customer listing, or your own customer_id.
          */
-        external_user_id: string;
+        customer_id: string;
     };
     query?: never;
-    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/unblock';
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/revoke_tokens';
 };
-export type UnblockEndUserErrors = {
+export type RevokeCustomerTokensErrors = {
     /**
-     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
+     * Authenticate with your API key or a console session.
      */
-    400: unknown;
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     */
+    404: unknown;
+    /**
+     * Credential revocation failed; the customer stays blocked if you asked to block it. Retry to finish revoking.
+     */
+    502: unknown;
+};
+export type RevokeCustomerTokensError = RevokeCustomerTokensErrors[keyof RevokeCustomerTokensErrors];
+export type RevokeCustomerTokensResponses = {
+    /**
+     * How many access tokens this request revoked.
+     */
+    200: {
+        /**
+         * Number of access tokens this request revoked; 0 when none was live.
+         */
+        revoked: number;
+    };
+};
+export type RevokeCustomerTokensResponse = RevokeCustomerTokensResponses[keyof RevokeCustomerTokensResponses];
+export type GetAgentAppearanceData = {
+    body?: never;
+    path: {
+        /**
+         * Service agent id from agent creation or listing; with a customer access token, the agent the token was issued for.
+         */
+        agent_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/appearance';
+};
+export type GetAgentAppearanceErrors = {
     /**
-     * Authenticate with a host credential.
+     * Authenticate with a customer access token of this agent, your API key or a console session.
      */
     401: unknown;
     /**
@@ -30224,47 +30371,217 @@ export type UnblockEndUserErrors = {
      */
     403: AgentError;
     /**
-     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     * AGENT_NOT_FOUND: the agent is absent, archived or not a service agent, or the customer access token belongs to another agent.
      */
     404: unknown;
     /**
-     * Configure an embed policy before blocking or unblocking; retry if a concurrent policy update caused the conflict.
+     * Appearance is temporarily unavailable; use the default appearance and continue the conversation.
      */
-    409: unknown;
+    503: unknown;
 };
-export type UnblockEndUserError = UnblockEndUserErrors[keyof UnblockEndUserErrors];
-export type UnblockEndUserResponses = {
+export type GetAgentAppearanceError = GetAgentAppearanceErrors[keyof GetAgentAppearanceErrors];
+export type GetAgentAppearanceResponses = {
     /**
-     * Current end-user view.
+     * Saved Kit options, at most 8192 UTF-8 JSON bytes. Omitted groups use Kit defaults; an unconfigured agent returns an empty object.
      */
     200: {
         /**
-         * Host application's user identifier, scoped to this organization and agent.
+         * Public identity displayed on the chat page, independent of the internal agent name.
+         */
+        agent?: {
+            /**
+             * Display name; omission keeps the neutral browser-language default.
+             */
+            name?: string;
+            /**
+             * Optional HTTPS avatar image URL; non-HTTPS images are rejected.
+             */
+            avatar?: string;
+        };
+        /**
+         * Loader default: inline stays in the page, sidebar attaches to the edge, popup floats above its launcher, modal centers an overlay. A script data-layout overrides it; Hosted always uses inline.
          */
-        external_user_id: string;
+        layout?: 'inline' | 'sidebar' | 'popup' | 'modal';
         /**
-         * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
+         * Default entry button for the loader; an explicit script data-launcher takes precedence.
          */
-        first_seen_at: string | null;
+        launcher?: {
+            /**
+             * Entry control: none hides the launcher, bubble shows a button, mascot shows a character that reacts while the visitor types and the agent thinks and answers. A mascot needs pack.
+             */
+            type: 'none' | 'bubble' | 'mascot';
+            /**
+             * Mascot images: exactly one of preset or images. Send pack, not image.
+             */
+            pack?: {
+                /**
+                 * Built-in character: mint (mint support girl), cat (cat-eared girl) or bot (small robot).
+                 */
+                preset?: 'mint' | 'cat' | 'bot';
+                /**
+                 * One HTTPS image per slot; only idle is required and a missing slot shows idle. Use 2:3 canvases with the feet bottom-centered on a transparent background; PNG or WebP stay still, GIF, WebP and APNG play as they are.
+                 */
+                images?: {
+                    /**
+                     * Resting state.
+                     */
+                    idle: string;
+                    /**
+                     * Page open and while the greeting bubble shows.
+                     */
+                    greet?: string;
+                    /**
+                     * The visitor is typing in the composer.
+                     */
+                    listening?: string;
+                    /**
+                     * After the visitor sends, before the first reply text.
+                     */
+                    thinking?: string;
+                    /**
+                     * While the reply streams; alternates with talking-2 every 220 ms.
+                     */
+                    talking?: string;
+                    /**
+                     * Second mouth frame of talking, mouth closed; without it talking alternates with idle.
+                     */
+                    'talking-2'?: string;
+                    /**
+                     * The last turn failed or was refused.
+                     */
+                    sorry?: string;
+                    /**
+                     * No interaction for 60 seconds; hover or click wakes the mascot.
+                     */
+                    sleep?: string;
+                };
+            };
+            /**
+             * Legacy single mascot image, read as pack.images.idle. When pack is present, pack wins.
+             */
+            image?: string;
+            /**
+             * float (default) gently floats the mascot, bounces on hover and waves with the greeting; none keeps it still. Reduced-motion settings always win.
+             */
+            motion?: 'float' | 'none';
+            /**
+             * Launcher corner: bottom-right is the default; bottom-left uses the opposite corner.
+             */
+            position?: 'bottom-right' | 'bottom-left';
+            /**
+             * Accessible entry button label and bubble text; omission uses the default chat label.
+             */
+            label?: string;
+        };
         /**
-         * Latest session update or token issuance time; null when there is no history.
+         * Visible chat heading; omitted title uses the public agent name.
          */
-        last_active_at: string | null;
+        header?: {
+            /**
+             * Optional heading text shown instead of the public agent name.
+             */
+            title?: string;
+            /**
+             * Optional secondary line beneath the heading.
+             */
+            subtitle?: string;
+            /**
+             * Optional HTTPS image shown in the heading avatar position.
+             */
+            icon?: string;
+        };
         /**
-         * Total sessions for this end user on this agent.
+         * Visual tokens applied to the conversation and header; omitted fields use Kit defaults.
          */
-        session_count: number;
+        theme?: {
+            /**
+             * light or dark selects a fixed scheme; system follows the device preference.
+             */
+            colorScheme?: 'light' | 'dark' | 'system';
+            /**
+             * Explicit opaque CSS accent color, for example #167A43.
+             */
+            accent?: string;
+            /**
+             * Explicit opaque CSS background color, for example #ffffff.
+             */
+            surface?: string;
+            /**
+             * neutral uses grayscale surfaces, warm uses warm tones, cool uses cool tones.
+             */
+            grayscale?: 'neutral' | 'warm' | 'cool';
+            /**
+             * Corner rounding: none is square, sm is small, md is medium, lg is large, full is fully rounded.
+             */
+            radius?: 'none' | 'sm' | 'md' | 'lg' | 'full';
+            /**
+             * Spacing: compact reduces gaps, normal uses defaults, spacious increases gaps.
+             */
+            density?: 'compact' | 'normal' | 'spacious';
+            /**
+             * CSS font family list using fonts available on the device; external font loading is not configured here.
+             */
+            fontFamily?: string;
+            /**
+             * Positive base font size in CSS pixels; omission preserves Kit sizing.
+             */
+            fontSize?: number;
+        };
         /**
-         * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
+         * Reserved Kit locale preference: zh for Chinese, en for English. Kit currently passes this option through without translating all controls.
          */
-        cost_micro_usd: number;
+        locale?: 'zh' | 'en';
         /**
-         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
+         * Content displayed before the first message in a conversation.
          */
-        blocked: boolean;
+        startScreen?: {
+            /**
+             * Optional welcome text on the empty conversation.
+             */
+            greeting?: string;
+            /**
+             * Up to four suggested questions; clicking a label sends its prompt text.
+             */
+            prompts?: Array<{
+                /**
+                 * Visible suggested-question button text.
+                 */
+                label: string;
+                /**
+                 * User message sent when this suggestion is selected.
+                 */
+                prompt: string;
+            }>;
+        };
+        /**
+         * Message input appearance; transport and attachment settings are excluded.
+         */
+        composer?: {
+            /**
+             * Hint shown when the message input is empty.
+             */
+            placeholder?: string;
+        };
+        /**
+         * Optional notice displayed beside the conversation composer.
+         */
+        disclaimer?: string;
+        /**
+         * Optional text below the conversation.
+         */
+        footer?: string;
+        /**
+         * Availability of the conversation history control.
+         */
+        history?: {
+            /**
+             * False hides history; omission uses the default enabled state.
+             */
+            enabled?: boolean;
+        };
     };
 };
-export type UnblockEndUserResponse = UnblockEndUserResponses[keyof UnblockEndUserResponses];
+export type GetAgentAppearanceResponse = GetAgentAppearanceResponses[keyof GetAgentAppearanceResponses];
 export type CreateCustomerGrantCodeData = {
     body: {
         /**
@@ -30276,9 +30593,27 @@ export type CreateCustomerGrantCodeData = {
          */
         version?: number;
         /**
-         * Budget in cents for each session the customer starts. Defaults to the embed policy session budget and cannot exceed its maximum.
+         * Budget for each session the customer starts, in the same shape as a session budget. Defaults to the embed policy session budget and cannot exceed its maximum.
          */
-        budget_cents?: number;
+        budget?: {
+            /**
+             * Budget kind; always limit.
+             */
+            type: 'limit';
+            /**
+             * Spending limit of each session the customer starts.
+             */
+            max_list_cost: {
+                /**
+                 * Largest list cost of each session, in US dollars, as a decimal string with at most 2 fraction digits, e.g. "0.50". "0" lets the customer sign in without spending.
+                 */
+                amount: string;
+                /**
+                 * Always USD.
+                 */
+                currency: 'USD';
+            };
+        };
         /**
          * Optional context the agent receives at the start of each session, as text blocks, limited to 8192 UTF-8 bytes in total.
          */
@@ -30570,439 +30905,6 @@ export type DeleteCurrentCustomerAccessTokenResponses = {
     204: void;
 };
 export type DeleteCurrentCustomerAccessTokenResponse = DeleteCurrentCustomerAccessTokenResponses[keyof DeleteCurrentCustomerAccessTokenResponses];
-export type ExchangeEmbedCodeData = {
-    body: {
-        /**
-         * Single-use credential from the c fragment parameter of hosted_url returned by embed token creation. Valid for 60 seconds.
-         */
-        code: string;
-    };
-    path?: never;
-    query?: never;
-    url: '/agent/v1/embed/exchange';
-};
-export type ExchangeEmbedCodeErrors = {
-    /**
-     * Expected a JSON object containing only code. Correct the request body.
-     */
-    400: unknown;
-    /**
-     * UNAUTHENTICATED (or INVALID_API_KEY, API_KEY_DISABLED, API_KEY_EXPIRED, INVALID_API_TOKEN, API_TOKEN_EXPIRED, API_TOKEN_REVOKED): the API key is missing, invalid or revoked. Send a valid key as X-API-Key or as a Bearer token.
-     */
-    401: AgentError;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * The code is expired, already used or unknown. Return to the host website for a new link; all three cases have the same response body.
-     */
-    404: unknown;
-    /**
-     * The IP minute limit is reached. Wait for Retry-After before trying a fresh link.
-     */
-    429: unknown;
-    /**
-     * Exchange or rate limiting is unavailable. Return to the host website for a new link later.
-     */
-    503: unknown;
-};
-export type ExchangeEmbedCodeError = ExchangeEmbedCodeErrors[keyof ExchangeEmbedCodeErrors];
-export type ExchangeEmbedCodeResponses = {
-    /**
-     * The end-user token and its expiration; the code has been consumed.
-     */
-    200: {
-        /**
-         * End-user credential for the hosted conversation. Keep it in memory; it cannot be refreshed here.
-         */
-        token: string;
-        /**
-         * Token expiration as an ISO 8601 UTC timestamp. Return to the host website after expiration.
-         */
-        expires_at: string;
-    };
-};
-export type ExchangeEmbedCodeResponse = ExchangeEmbedCodeResponses[keyof ExchangeEmbedCodeResponses];
-export type CreateAnonymousEmbedTokenData = {
-    body: {
-        /**
-         * Public key created by the service agent owner; safe to include in browser code.
-         */
-        publishable_key: string;
-        /**
-         * Secret returned by a previous anonymous issuance for this key. Omit for a new visitor; an unknown secret creates a new visitor.
-         */
-        visitor_secret?: string;
-    };
-    headers: {
-        /**
-         * Browser page origin from the agent policy allowlist.
-         */
-        Origin: string;
-    };
-    path?: never;
-    query?: never;
-    url: '/agent/v1/embed_tokens/anonymous';
-};
-export type CreateAnonymousEmbedTokenErrors = {
-    /**
-     * Unknown or invalid request fields, or key budget exceeds policy. Correct the request or ask the owner to update the key.
-     */
-    400: unknown;
-    /**
-     * Unknown or disabled publishable key. Ask the agent owner for an active key.
-     */
-    401: unknown;
-    /**
-     * EMBED_BUDGET_EXHAUSTED. The daily spending cap is reached; wait for the UTC reset or ask the owner to raise it.
-     */
-    402: unknown;
-    /**
-     * EMBED_ORIGIN_NOT_ALLOWED or EMBED_USER_BLOCKED. Use an allowed page origin or contact the owner.
-     */
-    403: unknown;
-    /**
-     * EMBED_RATE_LIMITED. Wait for the IP minute window or UTC daily session cap reset.
-     */
-    429: unknown;
-    /**
-     * Anonymous issuance or rate limiting is unavailable; retry later.
-     */
-    503: unknown;
-};
-export type CreateAnonymousEmbedTokenResponses = {
-    /**
-     * End-user token and expiration, with a visitor secret only for a new visitor.
-     */
-    200: {
-        /**
-         * Short-lived end-user bearer credential for this agent's embedded sessions.
-         */
-        token: string;
-        /**
-         * RFC 3339 expiration; refresh before this time using the same visitor_secret.
-         */
-        expires_at: string;
-        /**
-         * Newly generated visitor secret; save it locally and include it on later requests. Absent when the supplied secret was recognized.
-         */
-        visitor_secret?: string;
-    };
-};
-export type CreateAnonymousEmbedTokenResponse = CreateAnonymousEmbedTokenResponses[keyof CreateAnonymousEmbedTokenResponses];
-export type ListEmbedTokensData = {
-    body?: never;
-    path?: never;
-    query?: {
-        /**
-         * Filter by service agent identifier (agent_ or agt_ prefix).
-         */
-        agent_id?: string;
-        /**
-         * Exact host user identifier supplied at issuance.
-         */
-        external_user_id?: string;
-        /**
-         * Maximum records per page; defaults to 20.
-         */
-        limit?: number;
-        /**
-         * next_page from a previous response with the same filters.
-         */
-        page?: string;
-    };
-    url: '/agent/v1/embed_tokens';
-};
-export type ListEmbedTokensErrors = {
-    /**
-     * Invalid filter, limit or cursor; reuse the cursor with its original filters.
-     */
-    400: unknown;
-    /**
-     * Authenticate with a host credential.
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * The grant is missing or belongs to another organization, or the caller is an end user.
-     */
-    404: unknown;
-    /**
-     * Upstream revocation failed; the record remains unrevoked and the request may be retried.
-     */
-    502: unknown;
-};
-export type ListEmbedTokensError = ListEmbedTokensErrors[keyof ListEmbedTokensErrors];
-export type ListEmbedTokensResponses = {
-    /**
-     * Issuance records and next page cursor.
-     */
-    200: {
-        /**
-         * Items of this page, in the order requested by the call.
-         */
-        data: Array<{
-            /**
-             * Grant identifier returned by embed token creation.
-             */
-            id: string;
-            /**
-             * Toolset type id as used in an agent's tools entry, for example agent_toolset_20260401.
-             */
-            type: 'embed_token';
-            /**
-             * Service agent identifier.
-             */
-            agent_id: string;
-            /**
-             * Pinned agent version.
-             */
-            agent_version: number;
-            /**
-             * Exact host user identifier supplied at issuance.
-             */
-            external_user_id: string;
-            /**
-             * Issuance time in RFC 3339 format.
-             */
-            created_at: string;
-            /**
-             * Expiration time in RFC 3339 format.
-             */
-            expires_at: string;
-            /**
-             * Revocation time in RFC 3339 format, or null while not revoked.
-             */
-            revoked_at: string | null;
-            /**
-             * Host origin recorded at issuance, or null when absent.
-             */
-            host_origin: string | null;
-            /**
-             * User or API key that issued the token.
-             */
-            issued_by: {
-                /**
-                 * user identifies a signed-in organization member; api_key identifies the issuing API key.
-                 */
-                type: 'user' | 'api_key';
-                /**
-                 * Identifier of the object, as returned by the API; pass it in the path of follow-up calls on the same resource.
-                 */
-                id: string;
-            };
-        }>;
-        /**
-         * Cursor for the next page using the same filters, or null when exhausted.
-         */
-        next_page: string | null;
-    };
-};
-export type ListEmbedTokensResponse = ListEmbedTokensResponses[keyof ListEmbedTokensResponses];
-export type CreateEmbedTokenData = {
-    body: {
-        /**
-         * Set true to also return a hosted chat URL with a single-use credential valid for 60 seconds. Defaults to false; the agent must have an identity_number.
-         */
-        hosted?: boolean;
-        /**
-         * Service agent ID or identity_number from agent retrieval; it must belong to your organization and be active.
-         */
-        agent: string;
-        /**
-         * Existing agent version to pin. Omit to pin the latest version at issuance.
-         */
-        version?: number;
-        /**
-         * Your application's stable end-user identifier, scoped to this organization and agent.
-         */
-        external_user_id: string;
-        /**
-         * Token lifetime in seconds. Defaults to the embed policy TTL and cannot exceed its maximum or 3600 seconds.
-         */
-        ttl_seconds?: number;
-        /**
-         * Session budget in cents. Defaults to the embed policy session budget and cannot exceed its maximum.
-         */
-        budget_cents?: number;
-        /**
-         * Optional host context as text blocks, limited to 8192 UTF-8 bytes in total.
-         */
-        system_message?: Array<{
-            /**
-             * The text block kind; text is the only supported kind.
-             */
-            type: 'text';
-            /**
-             * Host context text. All blocks together must fit within 8192 UTF-8 bytes.
-             */
-            text: string;
-        }>;
-        /**
-         * Optional system prompt override, accepted only when the embed policy allows agent overrides.
-         */
-        agent_override?: {
-            /**
-             * Replacement system prompt, or null to clear it for this grant.
-             */
-            system: string | null;
-        };
-        /**
-         * Optional subset of the policy origin entries, compared exactly. Omit to snapshot every policy origin.
-         */
-        allowed_origins?: Array<string>;
-        /**
-         * Host metadata preserved verbatim; at most 16 keys of 1–64 characters and string values of at most 512 characters. Defaults to an empty object.
-         */
-        metadata?: {
-            [key: string]: string;
-        };
-    };
-    path?: never;
-    query?: never;
-    url: '/agent/v1/embed_tokens';
-};
-export type CreateEmbedTokenErrors = {
-    /**
-     * Request fields exceed policy limits, the policy or its environment is unavailable, or a hosted agent has no identity_number. Configure the policy or correct the reported field.
-     */
-    400: unknown;
-    /**
-     * A valid host credential is required; authenticate with your backend API key.
-     */
-    401: unknown;
-    /**
-     * The end user is blocked by the embed policy; contact the agent owner.
-     */
-    403: unknown;
-    /**
-     * The service agent or requested version is unavailable to this caller; check the agent identifier and version.
-     */
-    404: unknown;
-    /**
-     * Token issuance is unavailable; no usable credential was returned.
-     */
-    502: unknown;
-};
-export type CreateEmbedTokenResponses = {
-    /**
-     * Issued end-user token and its grant identifier and expiration.
-     */
-    201: {
-        /**
-         * Hosted chat link, returned only when hosted is true. Redirect the user here within 60 seconds; its fragment credential can be exchanged only once.
-         */
-        hosted_url?: string;
-        /**
-         * Grant identifier with the emb_ prefix, identifying this issuance.
-         */
-        id: string;
-        /**
-         * Short-lived end-user credential to pass to your frontend; keep the host API key on your backend.
-         */
-        token: string;
-        /**
-         * Token expiration as an ISO 8601 UTC timestamp, as issued by identity.
-         */
-        expires_at: string;
-    };
-};
-export type CreateEmbedTokenResponse = CreateEmbedTokenResponses[keyof CreateEmbedTokenResponses];
-export type RevokeEmbedTokenData = {
-    body?: never;
-    path: {
-        /**
-         * Grant id returned by issuance or listing.
-         */
-        id: string;
-    };
-    query?: never;
-    url: '/agent/v1/embed_tokens/{id}/revoke';
-};
-export type RevokeEmbedTokenErrors = {
-    /**
-     * Invalid filter, limit or cursor; reuse the cursor with its original filters.
-     */
-    400: unknown;
-    /**
-     * Authenticate with a host credential.
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * The grant is missing or belongs to another organization, or the caller is an end user.
-     */
-    404: unknown;
-    /**
-     * Upstream revocation failed; the record remains unrevoked and the request may be retried.
-     */
-    502: unknown;
-};
-export type RevokeEmbedTokenError = RevokeEmbedTokenErrors[keyof RevokeEmbedTokenErrors];
-export type RevokeEmbedTokenResponses = {
-    /**
-     * Revoked issuance record, including its original revocation time on repeated calls.
-     */
-    200: {
-        /**
-         * Grant identifier returned by embed token creation.
-         */
-        id: string;
-        /**
-         * Type tag of the object.
-         */
-        type: 'embed_token';
-        /**
-         * Service agent identifier.
-         */
-        agent_id: string;
-        /**
-         * Pinned agent version.
-         */
-        agent_version: number;
-        /**
-         * Exact host user identifier supplied at issuance.
-         */
-        external_user_id: string;
-        /**
-         * Issuance time in RFC 3339 format.
-         */
-        created_at: string;
-        /**
-         * Expiration time in RFC 3339 format.
-         */
-        expires_at: string;
-        /**
-         * Revocation time in RFC 3339 format, or null while not revoked.
-         */
-        revoked_at: string | null;
-        /**
-         * Host origin recorded at issuance, or null when absent.
-         */
-        host_origin: string | null;
-        /**
-         * User or API key that issued the token.
-         */
-        issued_by: {
-            /**
-             * user identifies a signed-in organization member; api_key identifies the issuing API key.
-             */
-            type: 'user' | 'api_key';
-            /**
-             * Identifier of the object, as returned by the API; pass it in the path of follow-up calls on the same resource.
-             */
-            id: string;
-        };
-    };
-};
-export type RevokeEmbedTokenResponse = RevokeEmbedTokenResponses[keyof RevokeEmbedTokenResponses];
 export type ComputersListData = {
     body?: never;
     path?: never;
@@ -36159,6 +36061,19 @@ export type ForkSessionResponses = {
                  */
                 web_search_requests?: number;
             };
+            /**
+             * Praxis extension: priced runtime of this session (the time it was running), billed separately from list_cost and not counted against the budget. amount is in US dollars as a decimal string with exactly 6 decimals, e.g. "0.000280". Each thread's runtime is reported on that thread. /agent/v1 only.
+             */
+            runtime_cost?: {
+                /**
+                 * Runtime cost in US dollars, decimal string with exactly 6 decimals.
+                 */
+                amount: string;
+                /**
+                 * Always USD.
+                 */
+                currency: 'USD';
+            };
         };
         /**
          * Vault IDs attached to the session at creation. Empty when no vaults were
@@ -36748,243 +36663,6 @@ export type ListSessionCompactionsResponses = {
     };
 };
 export type ListSessionCompactionsResponse = ListSessionCompactionsResponses[keyof ListSessionCompactionsResponses];
-export type GetEmbedAppearanceData = {
-    body?: never;
-    headers?: {
-        /**
-         * Active public key from the agent's console embed settings; alternative to an end-user Bearer token.
-         */
-        'Praxis-Publishable-Key'?: string;
-    };
-    path?: never;
-    query?: never;
-    url: '/agent/v1/embed/appearance';
-};
-export type GetEmbedAppearanceErrors = {
-    /**
-     * Addressing parameters are not accepted; remove identity_number, agent_id and other query parameters.
-     */
-    400: unknown;
-    /**
-     * Supply a valid embed token or an active publishable key; organization member credentials cannot read this surface.
-     */
-    401: unknown;
-    /**
-     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
-     */
-    403: AgentError;
-    /**
-     * The credential's service agent is absent or archived; obtain credentials for an active service agent.
-     */
-    404: unknown;
-    /**
-     * Appearance is temporarily unavailable; use default appearance and continue the conversation.
-     */
-    503: unknown;
-};
-export type GetEmbedAppearanceError = GetEmbedAppearanceErrors[keyof GetEmbedAppearanceErrors];
-export type GetEmbedAppearanceResponses = {
-    /**
-     * Saved Kit options, at most 8192 UTF-8 JSON bytes. Omitted groups use Kit defaults; an unconfigured agent returns an empty object.
-     */
-    200: {
-        /**
-         * Public identity displayed on the chat page, independent of the internal agent name.
-         */
-        agent?: {
-            /**
-             * Display name; omission keeps the neutral browser-language default.
-             */
-            name?: string;
-            /**
-             * Optional HTTPS avatar image URL; non-HTTPS images are rejected.
-             */
-            avatar?: string;
-        };
-        /**
-         * Loader default: inline stays in the page, sidebar attaches to the edge, popup floats above its launcher, modal centers an overlay. A script data-layout overrides it; Hosted always uses inline.
-         */
-        layout?: 'inline' | 'sidebar' | 'popup' | 'modal';
-        /**
-         * Default entry button for the loader; an explicit script data-launcher takes precedence.
-         */
-        launcher?: {
-            /**
-             * Entry control: none hides the launcher, bubble shows a button, mascot shows a character that reacts while the visitor types and the agent thinks and answers. A mascot needs pack.
-             */
-            type: 'none' | 'bubble' | 'mascot';
-            /**
-             * Mascot images: exactly one of preset or images. Send pack, not image.
-             */
-            pack?: {
-                /**
-                 * Built-in character: mint (mint support girl), cat (cat-eared girl) or bot (small robot).
-                 */
-                preset?: 'mint' | 'cat' | 'bot';
-                /**
-                 * One HTTPS image per slot; only idle is required and a missing slot shows idle. Use 2:3 canvases with the feet bottom-centered on a transparent background; PNG or WebP stay still, GIF, WebP and APNG play as they are.
-                 */
-                images?: {
-                    /**
-                     * Resting state.
-                     */
-                    idle: string;
-                    /**
-                     * Page open and while the greeting bubble shows.
-                     */
-                    greet?: string;
-                    /**
-                     * The visitor is typing in the composer.
-                     */
-                    listening?: string;
-                    /**
-                     * After the visitor sends, before the first reply text.
-                     */
-                    thinking?: string;
-                    /**
-                     * While the reply streams; alternates with talking-2 every 220 ms.
-                     */
-                    talking?: string;
-                    /**
-                     * Second mouth frame of talking, mouth closed; without it talking alternates with idle.
-                     */
-                    'talking-2'?: string;
-                    /**
-                     * The last turn failed or was refused.
-                     */
-                    sorry?: string;
-                    /**
-                     * No interaction for 60 seconds; hover or click wakes the mascot.
-                     */
-                    sleep?: string;
-                };
-            };
-            /**
-             * Legacy single mascot image, read as pack.images.idle. When pack is present, pack wins.
-             */
-            image?: string;
-            /**
-             * float (default) gently floats the mascot, bounces on hover and waves with the greeting; none keeps it still. Reduced-motion settings always win.
-             */
-            motion?: 'float' | 'none';
-            /**
-             * Launcher corner: bottom-right is the default; bottom-left uses the opposite corner.
-             */
-            position?: 'bottom-right' | 'bottom-left';
-            /**
-             * Accessible entry button label and bubble text; omission uses the default chat label.
-             */
-            label?: string;
-        };
-        /**
-         * Visible chat heading; omitted title uses the public agent name.
-         */
-        header?: {
-            /**
-             * Optional heading text shown instead of the public agent name.
-             */
-            title?: string;
-            /**
-             * Optional secondary line beneath the heading.
-             */
-            subtitle?: string;
-            /**
-             * Optional HTTPS image shown in the heading avatar position.
-             */
-            icon?: string;
-        };
-        /**
-         * Visual tokens applied to the conversation and header; omitted fields use Kit defaults.
-         */
-        theme?: {
-            /**
-             * light or dark selects a fixed scheme; system follows the device preference.
-             */
-            colorScheme?: 'light' | 'dark' | 'system';
-            /**
-             * Explicit opaque CSS accent color, for example #167A43.
-             */
-            accent?: string;
-            /**
-             * Explicit opaque CSS background color, for example #ffffff.
-             */
-            surface?: string;
-            /**
-             * neutral uses grayscale surfaces, warm uses warm tones, cool uses cool tones.
-             */
-            grayscale?: 'neutral' | 'warm' | 'cool';
-            /**
-             * Corner rounding: none is square, sm is small, md is medium, lg is large, full is fully rounded.
-             */
-            radius?: 'none' | 'sm' | 'md' | 'lg' | 'full';
-            /**
-             * Spacing: compact reduces gaps, normal uses defaults, spacious increases gaps.
-             */
-            density?: 'compact' | 'normal' | 'spacious';
-            /**
-             * CSS font family list using fonts available on the device; external font loading is not configured here.
-             */
-            fontFamily?: string;
-            /**
-             * Positive base font size in CSS pixels; omission preserves Kit sizing.
-             */
-            fontSize?: number;
-        };
-        /**
-         * Reserved Kit locale preference: zh for Chinese, en for English. Kit currently passes this option through without translating all controls.
-         */
-        locale?: 'zh' | 'en';
-        /**
-         * Content displayed before the first message in a conversation.
-         */
-        startScreen?: {
-            /**
-             * Optional welcome text on the empty conversation.
-             */
-            greeting?: string;
-            /**
-             * Up to four suggested questions; clicking a label sends its prompt text.
-             */
-            prompts?: Array<{
-                /**
-                 * Visible suggested-question button text.
-                 */
-                label: string;
-                /**
-                 * User message sent when this suggestion is selected.
-                 */
-                prompt: string;
-            }>;
-        };
-        /**
-         * Message input appearance; transport and attachment settings are excluded.
-         */
-        composer?: {
-            /**
-             * Hint shown when the message input is empty.
-             */
-            placeholder?: string;
-        };
-        /**
-         * Optional notice displayed beside the conversation composer.
-         */
-        disclaimer?: string;
-        /**
-         * Optional text below the conversation.
-         */
-        footer?: string;
-        /**
-         * Availability of the conversation history control.
-         */
-        history?: {
-            /**
-             * False hides history; omission uses the default enabled state.
-             */
-            enabled?: boolean;
-        };
-    };
-};
-export type GetEmbedAppearanceResponse = GetEmbedAppearanceResponses[keyof GetEmbedAppearanceResponses];
 export type CreateAudioSpeechData = {
     body: unknown & {
         /**
@@ -43313,7 +42991,7 @@ export type ListOrganizationCostsResponses = {
                  */
                 ResourceName?: string;
                 /**
-                 * Decimal string in BillingCurrency.
+                 * Amount in BillingCurrency: US dollars for USD, decimal string, 6 decimals.
                  */
                 BilledCost: string;
                 /**
@@ -43531,7 +43209,7 @@ export type ListOrganizationEventsResponses = {
              */
             ResourceName: string;
             /**
-             * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+             * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
              */
             BilledCost: string;
             /**
@@ -43555,7 +43233,7 @@ export type ListOrganizationEventsResponses = {
                  */
                 status: 'settled' | 'no_charge' | 'rejected';
                 /**
-                 * USD amount that could not be charged, as a decimal string, when status is settled_with_shortfall; null otherwise.
+                 * Amount that could not be charged: US dollars, decimal string, 6 decimals, when status is settled_with_shortfall; null otherwise.
                  */
                 shortfall: string | null;
                 /**
@@ -43652,7 +43330,7 @@ export type GetOrganizationEventResponses = {
          */
         ResourceName: string;
         /**
-         * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+         * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
          */
         BilledCost: string;
         /**
@@ -43676,7 +43354,7 @@ export type GetOrganizationEventResponses = {
              */
             status: 'settled' | 'no_charge' | 'rejected';
             /**
-             * USD amount that could not be charged, as a decimal string, when status is settled_with_shortfall; null otherwise.
+             * Amount that could not be charged: US dollars, decimal string, 6 decimals, when status is settled_with_shortfall; null otherwise.
              */
             shortfall: string | null;
             /**
@@ -43713,7 +43391,7 @@ export type GetOrganizationEventResponses = {
              */
             PricingUnit: string | null;
             /**
-             * Amount billed for this line in USD as a decimal string.
+             * Amount billed for this line: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`).
              */
             BilledCost: string;
         }>;
@@ -43726,7 +43404,7 @@ export type GetOrganizationEventResponses = {
              */
             transaction_id: string;
             /**
-             * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+             * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
              */
             BilledCost: string;
             /**
@@ -43780,7 +43458,7 @@ export type ExportOrganizationChargesResponses = {
          */
         ChargePeriodEnd: string;
         /**
-         * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+         * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
          */
         BilledCost: string;
         /**
@@ -45315,7 +44993,7 @@ export type AgentsListResponses = {
              */
             note: string | null;
             /**
-             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
              */
             bindings: Array<{
                 /**
@@ -45334,6 +45012,10 @@ export type AgentsListResponses = {
                  * Optional guidance for using this resource, up to 4096 characters; does not expand access.
                  */
                 instructions?: string;
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
                  */
@@ -45343,6 +45025,10 @@ export type AgentsListResponses = {
                  * Service type. Opens the whole service to codemode; there is no per-resource id.
                  */
                 type: 'search' | 'browser';
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
                  */
@@ -45360,6 +45046,10 @@ export type AgentsListResponses = {
              * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
              */
             subagent_model?: string | null;
+            /**
+             * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+             */
+            image_model?: string | null;
             /**
              * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
              */
@@ -45815,7 +45505,7 @@ export type AgentsCreateData = {
          */
         tools?: Array<AgentManaged15 | AgentManaged29 | AgentManaged32>;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings?: Array<{
             /**
@@ -45834,6 +45524,10 @@ export type AgentsCreateData = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -45843,6 +45537,10 @@ export type AgentsCreateData = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -45860,6 +45558,10 @@ export type AgentsCreateData = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -46376,7 +46078,7 @@ export type AgentsCreateResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -46395,6 +46097,10 @@ export type AgentsCreateResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -46404,6 +46110,10 @@ export type AgentsCreateResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -46421,6 +46131,10 @@ export type AgentsCreateResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -46960,7 +46674,7 @@ export type AgentsRetrieveResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -46979,6 +46693,10 @@ export type AgentsRetrieveResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -46988,6 +46706,10 @@ export type AgentsRetrieveResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -47005,6 +46727,10 @@ export type AgentsRetrieveResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -47491,6 +47217,10 @@ export type AgentsUpdateData = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -47500,6 +47230,10 @@ export type AgentsUpdateData = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -47517,6 +47251,10 @@ export type AgentsUpdateData = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -48042,7 +47780,7 @@ export type AgentsUpdateResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -48061,6 +47799,10 @@ export type AgentsUpdateResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -48070,6 +47812,10 @@ export type AgentsUpdateResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -48087,6 +47833,10 @@ export type AgentsUpdateResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -48616,7 +48366,7 @@ export type AgentsArchiveResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -48635,6 +48385,10 @@ export type AgentsArchiveResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -48644,6 +48398,10 @@ export type AgentsArchiveResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -48661,6 +48419,10 @@ export type AgentsArchiveResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -49208,7 +48970,7 @@ export type AgentsVersionsListResponses = {
              */
             note: string | null;
             /**
-             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
              */
             bindings: Array<{
                 /**
@@ -49227,6 +48989,10 @@ export type AgentsVersionsListResponses = {
                  * Optional guidance for using this resource, up to 4096 characters; does not expand access.
                  */
                 instructions?: string;
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
                  */
@@ -49236,6 +49002,10 @@ export type AgentsVersionsListResponses = {
                  * Service type. Opens the whole service to codemode; there is no per-resource id.
                  */
                 type: 'search' | 'browser';
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
                  */
@@ -49253,6 +49023,10 @@ export type AgentsVersionsListResponses = {
              * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
              */
             subagent_model?: string | null;
+            /**
+             * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+             */
+            image_model?: string | null;
             /**
              * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
              */