@deepraxis/sdk 0.1.1-dev.b176367 → 0.1.1-dev.bdcd5e6

package/dist/operations.generated.d.ts

@@ -107,7 +107,7 @@ export declare const operations: readonly [{
             readonly type: "array";
             readonly itemType: "object";
             readonly required: false;
-            readonly description: "Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.";
+            readonly description: "Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.";
         }, {
             readonly name: "kind";
             readonly type: "string";
@@ -124,6 +124,11 @@ export declare const operations: readonly [{
             readonly type: "string";
             readonly required: false;
             readonly description: "Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.";
+        }, {
+            readonly name: "image_model";
+            readonly type: "string";
+            readonly required: false;
+            readonly description: "Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.";
         }, {
             readonly name: "subagents";
             readonly type: "array";
@@ -292,6 +297,11 @@ export declare const operations: readonly [{
             readonly type: "string";
             readonly required: false;
             readonly description: "Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.";
+        }, {
+            readonly name: "image_model";
+            readonly type: "string";
+            readonly required: false;
+            readonly description: "Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.";
         }, {
             readonly name: "subagents";
             readonly type: "array";
@@ -338,6 +348,21 @@ export declare const operations: readonly [{
             readonly description: "Optional tool preset. minimal enables read, glob, grep and ask_user_question; data-editor also enables write and edit; full uses the default toolset with always_allow. Explicit tools override matching preset entries. codemode requires bash and is absent from data-editor.";
         }];
     };
+}, {
+    readonly resource: "agent.agents";
+    readonly method: "retrieveAppearance";
+    readonly summary: "Get agent appearance";
+    readonly description: "Read the saved chat appearance of a service agent.\n\nAgent Kit calls this from the page with a customer access token of this agent; your API key and console members can read it too. A token of another agent returns 404. The body is the same as the embed appearance read; a missing appearance returns the agent's own name and avatar only. Responses are private and cacheable for 60 seconds.";
+    readonly http: "GET";
+    readonly path: "/agent/v1/agents/{agent_id}/appearance";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "agent_id";
+        readonly sdkName: "agent_id";
+        readonly description: "Service agent id from agent creation or listing; with a customer access token, the agent the token was issued for.";
+    }];
+    readonly query: readonly [];
 }, {
     readonly resource: "agent.agents";
     readonly method: "archive";
@@ -353,6 +378,47 @@ export declare const operations: readonly [{
         readonly description: "Agent id, as returned by agents.create or agents.list (for a session filter, the agent the session was created with). Not the agent name.";
     }];
     readonly query: readonly [];
+}, {
+    readonly resource: "agent.agents.customers";
+    readonly method: "list";
+    readonly summary: "List customers";
+    readonly description: "List the customers of a service agent, identified and anonymous, most recently seen first.\n\nCall this from your backend with your API key, or from the console. Customers follow Shopify Admin customers (list, retrieve, block, sign-out and data deletion of the people who use your storefront), so that experience applies. The list includes customers who signed in but have not started a session yet, and customers recorded under your own ids by embed tokens before customer sign-in existed; an id first seen that way is identified unless it starts with anon_. Unlike Shopify, a customer can be anonymous: a visitor admitted with the publishable key gets an anon_ id, and when it later signs in with anonymous_access_token it is merged: merged_into names the identified customer, and its sessions count toward that customer. Filter with q (a case-sensitive customer id prefix), type (identified or anonymous) and blocked (true or false). limit is 1 to 100, default 20; reuse next_page with the same filters and limit. A customer access token gets 404. Example: GET /agent/v1/agents/agent_example/customers?type=identified&blocked=false&limit=50.";
+    readonly http: "GET";
+    readonly path: "/agent/v1/agents/{agent_id}/customers";
+    readonly streaming: "no";
+    readonly pagination: false;
+    readonly pathParams: readonly [{
+        readonly name: "agent_id";
+        readonly sdkName: "agent_id";
+        readonly description: "Active service agent id from agent creation or listing.";
+    }];
+    readonly query: readonly [{
+        readonly name: "limit";
+        readonly type: "integer";
+        readonly required: false;
+        readonly description: "Maximum customers per page, 1 to 100; defaults to 20.";
+    }, {
+        readonly name: "page";
+        readonly type: "string";
+        readonly required: false;
+        readonly description: "next_page from the previous response with the same q, type, blocked and limit.";
+    }, {
+        readonly name: "q";
+        readonly type: "string";
+        readonly required: false;
+        readonly description: "Case-sensitive literal prefix of the customer id; omit for all customers.";
+    }, {
+        readonly name: "type";
+        readonly type: "string";
+        readonly enum: readonly ["identified", "anonymous"];
+        readonly required: false;
+        readonly description: "Only identified or only anonymous customers; omit for both.";
+    }, {
+        readonly name: "blocked";
+        readonly type: "boolean";
+        readonly required: false;
+        readonly description: "true for blocked customers only, false for customers who are not blocked; omit for both.";
+    }];
 }, {
     readonly resource: "agent.agents.customers.auth.accessTokens";
     readonly method: "create";
@@ -406,7 +472,7 @@ export declare const operations: readonly [{
     readonly resource: "agent.agents.customers.auth.grantCodes";
     readonly method: "create";
     readonly summary: "Create customer grant code";
-    readonly description: "Sign your logged-in customer in to a service agent from your backend with a one-time grant code that Agent Kit exchanges for a customer access token.\n\nCall this from your backend with your API key after your own login succeeds, then pass the returned code to Agent Kit in the browser; never call it from the browser. Customer authorization follows Shopify Storefront customer access tokens (Multipass-style sign-in, a short-lived token, renewal and logout), so that experience applies. customer_id is your own identifier for the customer: use an opaque id such as your database user id, not an email address or phone number. The value auth is reserved, and ids starting with anon_ are reserved for anonymous customers. The code works once and expires after expires_in seconds (default 900). The sign-in it starts lasts max_session_seconds (default 7 days); version, budget_cents, system_message, agent_override and metadata apply to every token of the sign-in. Unlike Shopify, origin binds the whole sign-in to one page origin, and anonymous_access_token merges the conversations of the anonymous visitor who chatted before signing in into this customer. Example body: {\"customer_id\":\"cus_8f2a91\",\"origin\":\"https://shop.example.com\"}.";
+    readonly description: "Sign your logged-in customer in to a service agent from your backend with a one-time grant code that Agent Kit exchanges for a customer access token.\n\nCall this from your backend with your API key after your own login succeeds, then pass the returned code to Agent Kit in the browser; never call it from the browser. Customer authorization follows Shopify Storefront customer access tokens (Multipass-style sign-in, a short-lived token, renewal and logout), so that experience applies. customer_id is your own identifier for the customer: use an opaque id such as your database user id, not an email address or phone number. The value auth is reserved, and ids starting with anon_ are reserved for anonymous customers. The code works once and expires after expires_in seconds (default 900). The sign-in it starts lasts max_session_seconds (default 7 days); version, budget (US dollars, at most 2 decimals), system_message, agent_override and metadata apply to every token of the sign-in. Unlike Shopify, origin binds the whole sign-in to one page origin, and anonymous_access_token merges the conversations of the anonymous visitor who chatted before signing in into this customer. Example body: {\"customer_id\":\"cus_8f2a91\",\"origin\":\"https://shop.example.com\"}.";
     readonly http: "POST";
     readonly path: "/agent/v1/agents/{agent_id}/customers/auth/grant_codes";
     readonly streaming: "no";
@@ -430,10 +496,10 @@ export declare const operations: readonly [{
             readonly required: false;
             readonly description: "Existing agent version that every token of this sign-in pins. Defaults to the agent's active_version when the code is issued.";
         }, {
-            readonly name: "budget_cents";
-            readonly type: "integer";
+            readonly name: "budget";
+            readonly type: "object";
             readonly required: false;
-            readonly description: "Budget in cents for each session the customer starts. Defaults to the embed policy session budget and cannot exceed its maximum.";
+            readonly description: "Budget for each session the customer starts, in the same shape as a session budget. Defaults to the embed policy session budget and cannot exceed its maximum.";
         }, {
             readonly name: "system_message";
             readonly type: "array";
@@ -478,152 +544,122 @@ export declare const operations: readonly [{
         }];
     };
 }, {
-    readonly resource: "agent.agents.endUsers";
-    readonly method: "list";
-    readonly summary: "List End Users";
-    readonly description: "List users who have sessions or token issuance history on a service agent.\n\nOrdered by last_active_at and external_user_id descending. q is a case-sensitive literal prefix, including underscores. limit is 1–100, default 20. Reuse next_page with the same organization, agent, q and limit. Preemptively blocked users without history do not appear. End-user credentials and inaccessible or personal agents return 404.";
-    readonly http: "GET";
-    readonly path: "/agent/v1/agents/{agent_id}/end_users";
-    readonly streaming: "no";
-    readonly pagination: false;
-    readonly pathParams: readonly [{
-        readonly name: "agent_id";
-        readonly sdkName: "agent_id";
-        readonly description: "Active service agent identifier from agent creation or listing.";
-    }];
-    readonly query: readonly [{
-        readonly name: "limit";
-        readonly type: "integer";
-        readonly required: false;
-        readonly description: "Maximum users per page; defaults to 20.";
-    }, {
-        readonly name: "page";
-        readonly type: "string";
-        readonly required: false;
-        readonly description: "next_page from the previous response with the same agent, q and limit.";
-    }, {
-        readonly name: "q";
-        readonly type: "string";
-        readonly required: false;
-        readonly description: "Case-sensitive literal prefix of external_user_id; omit or use an empty string for all users.";
-    }];
-}, {
-    readonly resource: "agent.agents.endUsers";
+    readonly resource: "agent.agents.customers";
     readonly method: "delete";
-    readonly summary: "Delete end-user data";
-    readonly description: "Delete a host application's end-user data from one service agent after explicit confirmation.\n\nDevelop only. Set confirm to the exact external_user_id; missing or mismatched confirmation returns 400. Returns 202 with a pending task id, not completion. Poll the deletion endpoint. Concurrent requests reuse the unfinished task; retry DELETE after failure to resume it. Tokens are revoked and the user is blocked before a seven-day recovery snapshot is verified. Sessions including child sessions, conversation data, grants and feedback are then removed. A pre-existing block remains; a temporary block is removed on success. Attachment metadata is recorded and File attachments are retained. No charge is introduced by this operation. Example: DELETE /agent/v1/agents/agent_example/end_users/customer_123?confirm=customer_123.";
+    readonly summary: "Delete customer data";
+    readonly description: "Delete a customer's data from one service agent after explicit confirmation.\n\nDevelop only. Set confirm to the exact customer id; a missing or different confirm returns 400 naming the value to send. Returns 202 with a pending task id; poll the deletion endpoint. Concurrent requests reuse the unfinished task; retry DELETE after failure to resume it. Tokens are revoked and the customer is blocked before a seven-day recovery snapshot is verified; sessions including child sessions, conversation data, grants and feedback are then removed. A block that existed before stays; a temporary block is removed on success. File attachments are retained. Example: DELETE /agent/v1/agents/agent_example/customers/cus_8f2a91?confirm=cus_8f2a91.";
     readonly http: "DELETE";
-    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}";
+    readonly path: "/agent/v1/agents/{agent_id}/customers/{customer_id}";
     readonly streaming: "no";
     readonly pagination: false;
     readonly pathParams: readonly [{
         readonly name: "agent_id";
         readonly sdkName: "agent_id";
-        readonly description: "Active service agent identifier from agent creation or listing.";
+        readonly description: "Active service agent id from agent creation or listing.";
     }, {
-        readonly name: "external_user_id";
-        readonly sdkName: "external_user_id";
-        readonly description: "Host user identifier supplied at issuance or from end-user listing.";
+        readonly name: "customer_id";
+        readonly sdkName: "customer_id";
+        readonly description: "Customer id from customer listing, or your own customer_id.";
     }];
     readonly query: readonly [{
         readonly name: "confirm";
         readonly type: "string";
         readonly required: true;
-        readonly description: "Must exactly equal the external_user_id path parameter to confirm destructive deletion.";
+        readonly description: "Must equal the customer_id path parameter exactly, confirming the destructive deletion.";
     }];
 }, {
-    readonly resource: "agent.agents.endUsers";
+    readonly resource: "agent.agents.customers";
     readonly method: "retrieve";
-    readonly summary: "Get End User";
-    readonly description: "Inspect one end user and their twenty most recently updated sessions.\n\nUse external_user_id from listing or your host application. Users without session or issuance history return 404, including preemptively blocked users. End-user credentials and inaccessible or personal agents return 404.";
+    readonly summary: "Get customer";
+    readonly description: "Retrieve one customer of a service agent with its twenty most recently updated sessions.\n\nUse the customer id from the list or your own customer_id. An unknown customer returns 404 CUSTOMER_NOT_FOUND, and so does a customer access token. Unlike Shopify, an identified customer's session_count, cost and recent_sessions include the sessions of anonymous customers merged into it; the merged anonymous customer still shows its own sessions and its merged_into.";
     readonly http: "GET";
-    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}";
+    readonly path: "/agent/v1/agents/{agent_id}/customers/{customer_id}";
     readonly streaming: "no";
     readonly pagination: false;
     readonly pathParams: readonly [{
         readonly name: "agent_id";
         readonly sdkName: "agent_id";
-        readonly description: "Active service agent identifier from agent creation or listing.";
+        readonly description: "Active service agent id from agent creation or listing.";
     }, {
-        readonly name: "external_user_id";
-        readonly sdkName: "external_user_id";
-        readonly description: "Host user identifier supplied at issuance or from end-user listing.";
+        readonly name: "customer_id";
+        readonly sdkName: "customer_id";
+        readonly description: "Customer id from customer listing, or your own customer_id.";
     }];
     readonly query: readonly [];
 }, {
-    readonly resource: "agent.agents.endUsers.block";
+    readonly resource: "agent.agents.customers.block";
     readonly method: "create";
-    readonly summary: "Block End User";
-    readonly description: "Block token issuance and session creation, then revoke existing tokens for an end user.\n\nMay block a user before any history exists; timestamps are then null and counts and cost are zero. Requires an embed policy, otherwise returns 409 with setup guidance. Deduplicates the policy blocklist and retains its 1000-user maximum. If revocation returns 502, the user remains blocked; retry to finish revocation. Repeats keep the user blocked and revoke any remaining grants. End-user credentials and inaccessible or personal agents return 404.";
+    readonly summary: "Block customer";
+    readonly description: "Block a customer and end every sign-in it has on this agent.\n\nBlocks the customer, then ends every live sign-in the way logout does: each access token is revoked and its open event streams close. From then on grant_codes, access_tokens, renew and new sessions for this customer return CUSTOMER_BLOCKED until you unblock it. Idempotent: a repeat keeps the first block time and revokes whatever is still live. If credential revocation fails the request returns 502 and the customer stays blocked; retry to finish. An unknown customer returns 404 CUSTOMER_NOT_FOUND.";
     readonly http: "POST";
-    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}/block";
+    readonly path: "/agent/v1/agents/{agent_id}/customers/{customer_id}/block";
     readonly streaming: "no";
     readonly pagination: false;
     readonly pathParams: readonly [{
         readonly name: "agent_id";
         readonly sdkName: "agent_id";
-        readonly description: "Active service agent identifier from agent creation or listing.";
+        readonly description: "Active service agent id from agent creation or listing.";
     }, {
-        readonly name: "external_user_id";
-        readonly sdkName: "external_user_id";
-        readonly description: "Host user identifier supplied at issuance or from end-user listing.";
+        readonly name: "customer_id";
+        readonly sdkName: "customer_id";
+        readonly description: "Customer id from customer listing, or your own customer_id.";
     }];
     readonly query: readonly [];
 }, {
-    readonly resource: "agent.agents.endUsers";
+    readonly resource: "agent.agents.customers";
     readonly method: "retrieveDeletion";
-    readonly summary: "Get end-user deletion";
-    readonly description: "Poll the latest deletion task for an end user, including after the user data has been removed.\n\nUse the same agent_id and external_user_id as the confirmed DELETE. Status is pending, snapshotting, deleting, done or failed. Counts are empty until a verified snapshot exists. A failed task remains blocked and resumes when DELETE is retried with matching confirmation. snapshot_key is an operator recovery reference retained for seven days, not a public download URL. End-user credentials, inaccessible or personal agents, and missing tasks return 404. This read does not create a task or charge usage.";
+    readonly summary: "Get customer deletion";
+    readonly description: "Poll the latest deletion task of a customer, including after its data has been removed.\n\nUse the same agent_id and customer id as the confirmed DELETE. Status is pending, snapshotting, deleting, done or failed. Counts are empty until a verified snapshot exists. snapshot_key is an operator recovery reference retained for seven days, not a download URL. A customer access token and a missing task return 404.";
     readonly http: "GET";
-    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}/deletion";
+    readonly path: "/agent/v1/agents/{agent_id}/customers/{customer_id}/deletion";
     readonly streaming: "no";
     readonly pagination: false;
     readonly pathParams: readonly [{
         readonly name: "agent_id";
         readonly sdkName: "agent_id";
-        readonly description: "Active service agent identifier from agent creation or listing.";
+        readonly description: "Active service agent id from agent creation or listing.";
     }, {
-        readonly name: "external_user_id";
-        readonly sdkName: "external_user_id";
-        readonly description: "Host user identifier supplied at issuance or from end-user listing.";
+        readonly name: "customer_id";
+        readonly sdkName: "customer_id";
+        readonly description: "Customer id from customer listing, or your own customer_id.";
     }];
     readonly query: readonly [];
 }, {
-    readonly resource: "agent.agents.endUsers.revokeTokens";
+    readonly resource: "agent.agents.customers.revokeTokens";
     readonly method: "create";
-    readonly summary: "Revoke End User Tokens";
-    readonly description: "Revoke all issued tokens for an end user and terminate their open embed streams.\n\nRevokes credentials before marking grants revoked. Upstream failure returns 502 without changing grant revocation timestamps. Returns the count of newly revoked grants; a repeat without new grants returns zero. Does not block future issuance. End-user credentials and inaccessible or personal agents return 404.";
+    readonly summary: "Revoke customer tokens";
+    readonly description: "Sign a customer out everywhere without blocking it.\n\nEnds every live sign-in of the customer, revoking each access token and closing its open event streams; the customer can sign in again right away. Returns the number of access tokens this request revoked; a repeat returns 0. Credential revocation failure returns 502; retry to finish. An unknown customer returns 404 CUSTOMER_NOT_FOUND.";
     readonly http: "POST";
-    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}/revoke_tokens";
+    readonly path: "/agent/v1/agents/{agent_id}/customers/{customer_id}/revoke_tokens";
     readonly streaming: "no";
     readonly pagination: false;
     readonly pathParams: readonly [{
         readonly name: "agent_id";
         readonly sdkName: "agent_id";
-        readonly description: "Active service agent identifier from agent creation or listing.";
+        readonly description: "Active service agent id from agent creation or listing.";
     }, {
-        readonly name: "external_user_id";
-        readonly sdkName: "external_user_id";
-        readonly description: "Host user identifier supplied at issuance or from end-user listing.";
+        readonly name: "customer_id";
+        readonly sdkName: "customer_id";
+        readonly description: "Customer id from customer listing, or your own customer_id.";
     }];
     readonly query: readonly [];
 }, {
-    readonly resource: "agent.agents.endUsers.unblock";
+    readonly resource: "agent.agents.customers.unblock";
     readonly method: "create";
-    readonly summary: "Unblock End User";
-    readonly description: "Allow an end user to receive new tokens and create new sessions again.\n\nRemoves the user from the blocklist; previously revoked tokens stay revoked. Idempotent. Requires an embed policy, otherwise returns 409 with setup guidance. Returns null timestamps and zero counts and cost when no session or issuance history exists. End-user credentials and inaccessible or personal agents return 404.";
+    readonly summary: "Unblock customer";
+    readonly description: "Allow a blocked customer to sign in and start sessions again.\n\nIdempotent. Access tokens revoked while the customer was blocked stay revoked; sign the customer in again with a new grant code. An unknown customer returns 404 CUSTOMER_NOT_FOUND.";
     readonly http: "POST";
-    readonly path: "/agent/v1/agents/{agent_id}/end_users/{external_user_id}/unblock";
+    readonly path: "/agent/v1/agents/{agent_id}/customers/{customer_id}/unblock";
     readonly streaming: "no";
     readonly pagination: false;
     readonly pathParams: readonly [{
         readonly name: "agent_id";
         readonly sdkName: "agent_id";
-        readonly description: "Active service agent identifier from agent creation or listing.";
+        readonly description: "Active service agent id from agent creation or listing.";
     }, {
-        readonly name: "external_user_id";
-        readonly sdkName: "external_user_id";
-        readonly description: "Host user identifier supplied at issuance or from end-user listing.";
+        readonly name: "customer_id";
+        readonly sdkName: "customer_id";
+        readonly description: "Customer id from customer listing, or your own customer_id.";
     }];
     readonly query: readonly [];
 }, {
@@ -1274,175 +1310,6 @@ export declare const operations: readonly [{
         readonly description: "Deployment id (depl_...), returned by deployments.create or deployments.list.";
     }];
     readonly query: readonly [];
-}, {
-    readonly resource: "agent.embed";
-    readonly method: "retrieveAppearance";
-    readonly summary: "Read chat appearance";
-    readonly description: "Load saved appearance for an iframe or Hosted chat page. Supply an end-user embed token as Bearer authorization, or a console-issued publishable key in Praxis-Publishable-Key before anonymous token issuance. The credential selects the agent; identity_number and agent_id query parameters are rejected with 400. Missing appearance returns an empty object. Kit option names retain camelCase. Responses are private and cacheable for 60 seconds. Component hosts configure Kit in their own code instead.";
-    readonly http: "GET";
-    readonly path: "/agent/v1/embed/appearance";
-    readonly streaming: "no";
-    readonly pagination: false;
-    readonly pathParams: readonly [];
-    readonly query: readonly [];
-}, {
-    readonly resource: "agent.embed.exchange";
-    readonly method: "create";
-    readonly summary: "Exchange Hosted Code";
-    readonly description: "Redeem a single-use hosted link credential for an end-user token.\n\nRead code from the c fragment parameter of hosted_url returned by embed token creation with hosted true, then remove the fragment before exchanging. No Authorization header is required; the code authenticates this request. The code expires after 60 seconds and is consumed atomically on exchange, so concurrent attempts have only one winner. Expired, used and unknown codes return the same 404 body. Keep the token in memory and return to the host website for a fresh link when it expires; exchange cannot refresh it. Requests are IP limited per minute using the anonymous entrypoint budget (default 20). Example body is {\"code\":\"<code from hosted_url>\"}.";
-    readonly http: "POST";
-    readonly path: "/agent/v1/embed/exchange";
-    readonly streaming: "no";
-    readonly pagination: false;
-    readonly pathParams: readonly [];
-    readonly query: readonly [];
-    readonly body: {
-        readonly required: true;
-        readonly fields: readonly [{
-            readonly name: "code";
-            readonly type: "string";
-            readonly required: true;
-            readonly description: "Single-use credential from the c fragment parameter of hosted_url returned by embed token creation. Valid for 60 seconds.";
-        }];
-    };
-}, {
-    readonly resource: "agent.embedTokens";
-    readonly method: "list";
-    readonly summary: "List Embed Tokens";
-    readonly description: "List embed token issuance records in your organization.\n\nIncludes expired and revoked grants; returns neither token nor token_id. Sorts by created_at, then grant id, both descending. agent_id accepts agent_ or agt_; external_user_id matches exactly. limit is 1–100 (default 20). Reuse next_page as page with the same filters and organization; a mismatch returns 400. End-user credentials return 404.";
-    readonly http: "GET";
-    readonly path: "/agent/v1/embed_tokens";
-    readonly streaming: "no";
-    readonly pagination: false;
-    readonly pathParams: readonly [];
-    readonly query: readonly [{
-        readonly name: "agent_id";
-        readonly type: "string";
-        readonly required: false;
-        readonly description: "Filter by service agent identifier (agent_ or agt_ prefix).";
-    }, {
-        readonly name: "external_user_id";
-        readonly type: "string";
-        readonly required: false;
-        readonly description: "Exact host user identifier supplied at issuance.";
-    }, {
-        readonly name: "limit";
-        readonly type: "integer";
-        readonly required: false;
-        readonly description: "Maximum records per page; defaults to 20.";
-    }, {
-        readonly name: "page";
-        readonly type: "string";
-        readonly required: false;
-        readonly description: "next_page from a previous response with the same filters.";
-    }];
-}, {
-    readonly resource: "agent.embedTokens";
-    readonly method: "create";
-    readonly summary: "Create Embed Token";
-    readonly description: "Issue a short-lived credential on your backend for an end user of a service agent.\n\nRequires an active service agent in your organization with an embed policy. Pins the requested version or the latest version and snapshots the policy environment, vaults and resources; metadata comes from the request. Blocked users cannot receive tokens. Keep your API key on the backend and pass only the returned token to the frontend. Every call creates a new grant; issuance is not idempotent. Set hosted to true to also receive hosted_url; redirect the user there within 60 seconds. The agent must have an identity_number. The URL fragment contains a single-use exchange credential, not the token. Omit hosted or set false for ordinary token issuance.";
-    readonly http: "POST";
-    readonly path: "/agent/v1/embed_tokens";
-    readonly streaming: "no";
-    readonly pagination: false;
-    readonly pathParams: readonly [];
-    readonly query: readonly [];
-    readonly body: {
-        readonly required: true;
-        readonly fields: readonly [{
-            readonly name: "hosted";
-            readonly type: "boolean";
-            readonly required: false;
-            readonly description: "Set true to also return a hosted chat URL with a single-use credential valid for 60 seconds. Defaults to false; the agent must have an identity_number.";
-        }, {
-            readonly name: "agent";
-            readonly type: "string";
-            readonly required: true;
-            readonly description: "Service agent ID or identity_number from agent retrieval; it must belong to your organization and be active.";
-        }, {
-            readonly name: "version";
-            readonly type: "integer";
-            readonly required: false;
-            readonly description: "Existing agent version to pin. Omit to pin the latest version at issuance.";
-        }, {
-            readonly name: "external_user_id";
-            readonly type: "string";
-            readonly required: true;
-            readonly description: "Your application's stable end-user identifier, scoped to this organization and agent.";
-        }, {
-            readonly name: "ttl_seconds";
-            readonly type: "integer";
-            readonly required: false;
-            readonly description: "Token lifetime in seconds. Defaults to the embed policy TTL and cannot exceed its maximum or 3600 seconds.";
-        }, {
-            readonly name: "budget_cents";
-            readonly type: "integer";
-            readonly required: false;
-            readonly description: "Session budget in cents. Defaults to the embed policy session budget and cannot exceed its maximum.";
-        }, {
-            readonly name: "system_message";
-            readonly type: "array";
-            readonly itemType: "object";
-            readonly required: false;
-            readonly description: "Optional host context as text blocks, limited to 8192 UTF-8 bytes in total.";
-        }, {
-            readonly name: "agent_override";
-            readonly type: "object";
-            readonly required: false;
-            readonly description: "Optional system prompt override, accepted only when the embed policy allows agent overrides.";
-        }, {
-            readonly name: "allowed_origins";
-            readonly type: "array";
-            readonly itemType: "string";
-            readonly required: false;
-            readonly description: "Optional subset of the policy origin entries, compared exactly. Omit to snapshot every policy origin.";
-        }, {
-            readonly name: "metadata";
-            readonly type: "object";
-            readonly required: false;
-            readonly description: "Host metadata preserved verbatim; at most 16 keys of 1–64 characters and string values of at most 512 characters. Defaults to an empty object.";
-        }];
-    };
-}, {
-    readonly resource: "agent.embedTokens.anonymous";
-    readonly method: "create";
-    readonly summary: "Issue anonymous visitor token";
-    readonly description: "Obtain a short-lived embedding token for a visitor without an account using the agent owner's publishable key.\n\nNo Authorization header is required. Send the browser Origin allowed by the agent policy. Save a returned visitor_secret and reuse it for refreshes; only new visitors receive one. Unknown secrets create new visitors, and extra fields including visitor_id return 400. Issuance uses the key creator's organization membership, the key session budget and the smaller of the policy TTL maximum and 3600 seconds. IP requests are limited per minute (default 20); UTC daily session and spending caps are checked across the key's primary sessions created that day. Token issuance itself does not create a session or charge usage; subsequent sessions bill the host organization. Example body: {\"publishable_key\":\"pk_praxis_example\"}.";
-    readonly http: "POST";
-    readonly path: "/agent/v1/embed_tokens/anonymous";
-    readonly streaming: "no";
-    readonly pagination: false;
-    readonly pathParams: readonly [];
-    readonly query: readonly [];
-    readonly body: {
-        readonly required: true;
-        readonly fields: readonly [{
-            readonly name: "publishable_key";
-            readonly type: "string";
-            readonly required: true;
-            readonly description: "Public key created by the service agent owner; safe to include in browser code.";
-        }, {
-            readonly name: "visitor_secret";
-            readonly type: "string";
-            readonly required: false;
-            readonly description: "Secret returned by a previous anonymous issuance for this key. Omit for a new visitor; an unknown secret creates a new visitor.";
-        }];
-    };
-}, {
-    readonly resource: "agent.embedTokens.revoke";
-    readonly method: "create";
-    readonly summary: "Revoke Embed Token";
-    readonly description: "Revoke an embed token and close its open event streams.\n\nUse an id from issuance or listing. Revokes the credential before setting revoked_at; upstream failure leaves it unset. Streams receive session.error (EMBED_TOKEN_REVOKED), then close immediately; other credentials are unaffected. Idempotent; repeats return the original revoked record without another revocation or audit. Missing or foreign grants and end-user credentials return 404.";
-    readonly http: "POST";
-    readonly path: "/agent/v1/embed_tokens/{id}/revoke";
-    readonly streaming: "no";
-    readonly pagination: false;
-    readonly pathParams: readonly [{
-        readonly name: "id";
-        readonly sdkName: "id";
-        readonly description: "Grant id returned by issuance or listing.";
-    }];
-    readonly query: readonly [];
 }, {
     readonly resource: "agent.environments";
     readonly method: "list";
@@ -1692,7 +1559,7 @@ export declare const operations: readonly [{
             readonly name: "budget";
             readonly type: "object";
             readonly required: false;
-            readonly description: "Session spending limit, {type: \"limit\", max_list_cost: {amount, currency}}; null when unlimited. Creation defaults to a limit of 2000 US cents (USD 20.00) when omitted. amount is a positive integer string of US cents; removing the limit with null prevents setting it again for that session.";
+            readonly description: "Session spending limit, {type: \"limit\", max_list_cost: {amount, currency}}; null when unlimited. amount is in US dollars: send an integer or up to 2 decimals (\"0.50\"), and responses carry exactly 2 decimals (\"20.00\"). Creation defaults to USD 20.00 when omitted. More decimals, zero or a number return 400. Removing the limit with null prevents setting it again for that session.";
         }, {
             readonly name: "initial_events";
             readonly type: "array";