@deepraxis/sdk 0.1.1-dev.b176367 → 0.1.1-dev.c64b603

package/dist/generated/types.gen.d.ts

@@ -4215,7 +4215,7 @@ export type AgentManaged57 = {
     type: 'custom';
 };
 /**
- * Session spending limit, {type: "limit", max_list_cost: {amount, currency}}; null when unlimited. Creation defaults to a limit of 2000 US cents (USD 20.00) when omitted. amount is a positive integer string of US cents; removing the limit with null prevents setting it again for that session.
+ * Session spending limit, {type: "limit", max_list_cost: {amount, currency}}; null when unlimited. amount is in US dollars: send an integer or up to 2 decimals ("0.50"), and responses carry exactly 2 decimals ("20.00"). Creation defaults to USD 20.00 when omitted. More decimals, zero or a number return 400. Removing the limit with null prevents setting it again for that session.
  */
 export type AgentManaged76 = {
     /**
@@ -4408,6 +4408,19 @@ export type AgentManaged179 = {
      * Cumulative count of server-executed tool invocations, broken down by tool.
      */
     server_tool_use?: null | AgentManaged181;
+    /**
+     * Praxis extension: priced runtime of this session (the time it was running), billed separately from list_cost and not counted against the budget. amount is in US dollars as a decimal string with exactly 6 decimals, e.g. "0.000280". Each thread's runtime is reported on that thread. /agent/v1 only.
+     */
+    runtime_cost?: {
+        /**
+         * Runtime cost in US dollars, decimal string with exactly 6 decimals.
+         */
+        amount: string;
+        /**
+         * Always USD.
+         */
+        currency: 'USD';
+    };
 };
 export type AgentManaged183 = {
     [key: string]: null | string;
@@ -18102,11 +18115,11 @@ export type AgentManaged33 = {
     [key: string]: unknown;
 };
 /**
- * Largest list-price cost the session may reach, as {amount, currency}. amount is a string of US cents, not dollars.
+ * Largest list-price cost the session may reach, as {amount, currency}. amount is in US dollars with at most 2 decimals, not cents.
  */
 export type AgentManaged77 = {
     /**
-     * Cost ceiling in US cents, as a positive integer string with no leading zeros: "2000" is USD 20.00 and "50" is fifty cents. Decimals and JSON numbers return 400.
+     * Amount in US dollars as a decimal string. Costs (usage.list_cost) carry exactly 6 decimals, e.g. "0.000345"; budgets (budget.max_list_cost) carry exactly 2 decimals, e.g. "20.00", and accept an integer or up to 2 decimals on input.
      */
     amount: string;
     /**
@@ -28037,7 +28050,7 @@ export type ApplyAgentVersionResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -28056,6 +28069,10 @@ export type ApplyAgentVersionResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -28065,6 +28082,10 @@ export type ApplyAgentVersionResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -28082,6 +28103,10 @@ export type ApplyAgentVersionResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -29210,7 +29235,7 @@ export type UnarchiveAgentResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -29229,6 +29254,10 @@ export type UnarchiveAgentResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -29238,6 +29267,10 @@ export type UnarchiveAgentResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -29255,6 +29288,10 @@ export type UnarchiveAgentResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -29819,9 +29856,18 @@ export type ListEndUsersResponses = {
              */
             session_count: number;
             /**
-             * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
+             * Accumulated recorded cost of this customer's sessions on this agent: model usage (threads included) plus session runtime; amount "0.000000" when nothing has been recorded.
              */
-            cost_micro_usd: number;
+            cost: {
+                /**
+                 * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+                 */
+                amount: string;
+                /**
+                 * Always USD.
+                 */
+                currency: 'USD';
+            };
             /**
              * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
              */
@@ -29945,9 +29991,18 @@ export type GetEndUserResponses = {
          */
         session_count: number;
         /**
-         * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
+         * Accumulated recorded cost of this customer's sessions on this agent: model usage (threads included) plus session runtime; amount "0.000000" when nothing has been recorded.
          */
-        cost_micro_usd: number;
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
         /**
          * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
          */
@@ -30185,9 +30240,18 @@ export type BlockEndUserResponses = {
          */
         session_count: number;
         /**
-         * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
+         * Accumulated recorded cost of this customer's sessions on this agent: model usage (threads included) plus session runtime; amount "0.000000" when nothing has been recorded.
          */
-        cost_micro_usd: number;
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
         /**
          * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
          */
@@ -30255,9 +30319,18 @@ export type UnblockEndUserResponses = {
          */
         session_count: number;
         /**
-         * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
+         * Accumulated recorded cost of this customer's sessions on this agent: model usage (threads included) plus session runtime; amount "0.000000" when nothing has been recorded.
          */
-        cost_micro_usd: number;
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
         /**
          * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
          */
@@ -30265,6 +30338,801 @@ export type UnblockEndUserResponses = {
     };
 };
 export type UnblockEndUserResponse = UnblockEndUserResponses[keyof UnblockEndUserResponses];
+export type ListCustomersData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+    };
+    query?: {
+        /**
+         * Maximum customers per page, 1 to 100; defaults to 20.
+         */
+        limit?: number;
+        /**
+         * next_page from the previous response with the same q, type, blocked and limit.
+         */
+        page?: string;
+        /**
+         * Case-sensitive literal prefix of the customer id; omit for all customers.
+         */
+        q?: string;
+        /**
+         * Only identified or only anonymous customers; omit for both.
+         */
+        type?: 'identified' | 'anonymous';
+        /**
+         * true for blocked customers only, false for customers who are not blocked; omit for both.
+         */
+        blocked?: boolean;
+    };
+    url: '/agent/v1/agents/{agent_id}/customers';
+};
+export type ListCustomersErrors = {
+    /**
+     * INVALID_PARAMS: limit outside 1 to 100, type other than identified or anonymous, blocked other than true or false, or an unknown query parameter. INVALID_PAGE_TOKEN: next_page from another query; restart without page.
+     */
+    400: unknown;
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * The agent is not an active service agent of your organization, or the caller is a customer access token.
+     */
+    404: unknown;
+};
+export type ListCustomersError = ListCustomersErrors[keyof ListCustomersErrors];
+export type ListCustomersResponses = {
+    /**
+     * Matching customers and the next page cursor.
+     */
+    200: {
+        /**
+         * Items of this page, in the order requested by the call.
+         */
+        data: Array<{
+            /**
+             * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
+             */
+            id: string;
+            /**
+             * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+             */
+            type: 'identified' | 'anonymous';
+            /**
+             * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+             */
+            merged_into: string | null;
+            /**
+             * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
+             */
+            blocked: boolean;
+            /**
+             * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
+             */
+            first_seen_at: string | null;
+            /**
+             * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
+             */
+            last_seen_at: string | null;
+            /**
+             * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+             */
+            session_count: number;
+            /**
+             * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+             */
+            cost: {
+                /**
+                 * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+                 */
+                amount: string;
+                /**
+                 * Always USD.
+                 */
+                currency: 'USD';
+            };
+        }>;
+        /**
+         * Cursor for the next page with the same agent, q, type, blocked and limit; null when exhausted.
+         */
+        next_page: string | null;
+    };
+};
+export type ListCustomersResponse = ListCustomersResponses[keyof ListCustomersResponses];
+export type DeleteCustomerData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query: {
+        /**
+         * Must equal the customer_id path parameter exactly, confirming the destructive deletion.
+         */
+        confirm: string;
+    };
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}';
+};
+export type DeleteCustomerErrors = {
+    /**
+     * INVALID_PARAMS: confirm is missing or differs from customer_id; send ?confirm=<customer_id>.
+     */
+    400: unknown;
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     */
+    404: unknown;
+};
+export type DeleteCustomerError = DeleteCustomerErrors[keyof DeleteCustomerErrors];
+export type DeleteCustomerResponses = {
+    /**
+     * Deletion accepted; poll the deletion endpoint until done or failed.
+     */
+    202: {
+        /**
+         * Deletion task identifier.
+         */
+        id: string;
+        /**
+         * Accepted for asynchronous processing; poll deletion for progress.
+         */
+        status: 'pending';
+    };
+};
+export type DeleteCustomerResponse = DeleteCustomerResponses[keyof DeleteCustomerResponses];
+export type GetCustomerData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}';
+};
+export type GetCustomerErrors = {
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     */
+    404: unknown;
+};
+export type GetCustomerError = GetCustomerErrors[keyof GetCustomerErrors];
+export type GetCustomerResponses = {
+    /**
+     * The customer with its recent sessions.
+     */
+    200: {
+        /**
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
+         */
+        id: string;
+        /**
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+         */
+        type: 'identified' | 'anonymous';
+        /**
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+         */
+        merged_into: string | null;
+        /**
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
+         */
+        blocked: boolean;
+        /**
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
+         */
+        first_seen_at: string | null;
+        /**
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
+         */
+        last_seen_at: string | null;
+        /**
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+         */
+        session_count: number;
+        /**
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+         */
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
+        /**
+         * Up to twenty sessions of the customer, and of anonymous customers merged into it, most recently updated first.
+         */
+        recent_sessions: Array<{
+            /**
+             * Public sesn_ session identifier, usable with session retrieval.
+             */
+            id: string;
+            /**
+             * Session title, or null when unset.
+             */
+            title: string | null;
+            /**
+             * Session entry surface, or null when no surface was recorded.
+             */
+            source: string | null;
+            /**
+             * Session creation time in UTC.
+             */
+            created_at: string;
+            /**
+             * Most recent session update time in UTC.
+             */
+            updated_at: string;
+        }>;
+    };
+};
+export type GetCustomerResponse = GetCustomerResponses[keyof GetCustomerResponses];
+export type GetCustomerDeletionData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/deletion';
+};
+export type GetCustomerDeletionErrors = {
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND or no deletion task: the customer or task is unknown, or the caller is a customer access token.
+     */
+    404: unknown;
+};
+export type GetCustomerDeletionError = GetCustomerDeletionErrors[keyof GetCustomerDeletionErrors];
+export type GetCustomerDeletionResponses = {
+    /**
+     * The latest deletion task and its snapshot counts.
+     */
+    200: {
+        /**
+         * Deletion task identifier.
+         */
+        id: string;
+        /**
+         * pending: accepted; snapshotting: exporting recovery data; deleting: verified snapshot exists and erasure is running; done: erasure completed; failed: stopped safely, retry DELETE to resume the same task.
+         */
+        status: 'pending' | 'snapshotting' | 'deleting' | 'done' | 'failed';
+        /**
+         * Counts from the verified snapshot; empty until snapshotting completes.
+         */
+        counts: {
+            /**
+             * Number of primary and child sessions in the snapshot.
+             */
+            sessions?: number;
+            /**
+             * Number of durable session events captured without changing the history.
+             */
+            events?: number;
+            /**
+             * Number of stored transcript messages in the snapshot.
+             */
+            messages?: number;
+            /**
+             * Number of backed-up directory, authorization, feedback and projection rows.
+             */
+            d1_rows?: number;
+            /**
+             * Number of session attachment references; their file bytes are retained.
+             */
+            attachments?: number;
+        };
+        /**
+         * Operator recovery snapshot key, retained for seven days. Attachment bytes are not copied or deleted.
+         */
+        snapshot_key?: string;
+        /**
+         * Content-free failure summary; retry the confirmed deletion to resume.
+         */
+        error?: string;
+        /**
+         * Task creation time in RFC 3339 format.
+         */
+        created_at: string;
+        /**
+         * Latest task update time in RFC 3339 format.
+         */
+        updated_at: string;
+    };
+};
+export type GetCustomerDeletionResponse = GetCustomerDeletionResponses[keyof GetCustomerDeletionResponses];
+export type BlockCustomerData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/block';
+};
+export type BlockCustomerErrors = {
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     */
+    404: unknown;
+    /**
+     * Credential revocation failed; the customer stays blocked if you asked to block it. Retry to finish revoking.
+     */
+    502: unknown;
+};
+export type BlockCustomerError = BlockCustomerErrors[keyof BlockCustomerErrors];
+export type BlockCustomerResponses = {
+    /**
+     * The customer after the change.
+     */
+    200: {
+        /**
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
+         */
+        id: string;
+        /**
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+         */
+        type: 'identified' | 'anonymous';
+        /**
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+         */
+        merged_into: string | null;
+        /**
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
+         */
+        blocked: boolean;
+        /**
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
+         */
+        first_seen_at: string | null;
+        /**
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
+         */
+        last_seen_at: string | null;
+        /**
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+         */
+        session_count: number;
+        /**
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+         */
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
+    };
+};
+export type BlockCustomerResponse = BlockCustomerResponses[keyof BlockCustomerResponses];
+export type UnblockCustomerData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/unblock';
+};
+export type UnblockCustomerErrors = {
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     */
+    404: unknown;
+};
+export type UnblockCustomerError = UnblockCustomerErrors[keyof UnblockCustomerErrors];
+export type UnblockCustomerResponses = {
+    /**
+     * The customer after the change.
+     */
+    200: {
+        /**
+         * The customer id: your customer_id for an identified customer, or anon_ followed by 16 characters for an anonymous one.
+         */
+        id: string;
+        /**
+         * identified: signed in through a grant code from your backend, or seen under your own id before customer sign-in existed. anonymous: a visitor admitted with the publishable key.
+         */
+        type: 'identified' | 'anonymous';
+        /**
+         * For an anonymous customer who later signed in, the identified customer it joined; their conversations count toward that customer. null otherwise.
+         */
+        merged_into: string | null;
+        /**
+         * Whether the customer is blocked: no grant code, sign-in, renewal or new session is accepted for this id until it is unblocked.
+         */
+        blocked: boolean;
+        /**
+         * Earliest sign-in, session or token issuance for this customer, in RFC 3339; null when nothing is recorded.
+         */
+        first_seen_at: string | null;
+        /**
+         * Latest sign-in, token renewal, session update or token issuance, in RFC 3339; the list is ordered by it, newest first.
+         */
+        last_seen_at: string | null;
+        /**
+         * Sessions of this customer on this agent, including those of anonymous customers merged into it.
+         */
+        session_count: number;
+        /**
+         * Recorded cost of those sessions: model usage (threads included) plus session runtime; "0.000000" when nothing has been recorded.
+         */
+        cost: {
+            /**
+             * Amount in US dollars, as a decimal string with exactly 6 decimals and no exponent, e.g. "0.000345" or "12.500000".
+             */
+            amount: string;
+            /**
+             * Always USD.
+             */
+            currency: 'USD';
+        };
+    };
+};
+export type UnblockCustomerResponse = UnblockCustomerResponses[keyof UnblockCustomerResponses];
+export type RevokeCustomerTokensData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent id from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Customer id from customer listing, or your own customer_id.
+         */
+        customer_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/customers/{customer_id}/revoke_tokens';
+};
+export type RevokeCustomerTokensErrors = {
+    /**
+     * Authenticate with your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * CUSTOMER_NOT_FOUND: the customer is unknown on this agent, or the caller is a customer access token.
+     */
+    404: unknown;
+    /**
+     * Credential revocation failed; the customer stays blocked if you asked to block it. Retry to finish revoking.
+     */
+    502: unknown;
+};
+export type RevokeCustomerTokensError = RevokeCustomerTokensErrors[keyof RevokeCustomerTokensErrors];
+export type RevokeCustomerTokensResponses = {
+    /**
+     * How many access tokens this request revoked.
+     */
+    200: {
+        /**
+         * Number of access tokens this request revoked; 0 when none was live.
+         */
+        revoked: number;
+    };
+};
+export type RevokeCustomerTokensResponse = RevokeCustomerTokensResponses[keyof RevokeCustomerTokensResponses];
+export type GetAgentAppearanceData = {
+    body?: never;
+    path: {
+        /**
+         * Service agent id from agent creation or listing; with a customer access token, the agent the token was issued for.
+         */
+        agent_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/appearance';
+};
+export type GetAgentAppearanceErrors = {
+    /**
+     * Authenticate with a customer access token of this agent, your API key or a console session.
+     */
+    401: unknown;
+    /**
+     * permission_error: the credential's role or bound resources do not allow this operation. Use a key with access to the agent domain and its resources.
+     */
+    403: AgentError;
+    /**
+     * AGENT_NOT_FOUND: the agent is absent, archived or not a service agent, or the customer access token belongs to another agent.
+     */
+    404: unknown;
+    /**
+     * Appearance is temporarily unavailable; use the default appearance and continue the conversation.
+     */
+    503: unknown;
+};
+export type GetAgentAppearanceError = GetAgentAppearanceErrors[keyof GetAgentAppearanceErrors];
+export type GetAgentAppearanceResponses = {
+    /**
+     * Saved Kit options, at most 8192 UTF-8 JSON bytes. Omitted groups use Kit defaults; an unconfigured agent returns an empty object.
+     */
+    200: {
+        /**
+         * Public identity displayed on the chat page, independent of the internal agent name.
+         */
+        agent?: {
+            /**
+             * Display name; omission keeps the neutral browser-language default.
+             */
+            name?: string;
+            /**
+             * Optional HTTPS avatar image URL; non-HTTPS images are rejected.
+             */
+            avatar?: string;
+        };
+        /**
+         * Loader default: inline stays in the page, sidebar attaches to the edge, popup floats above its launcher, modal centers an overlay. A script data-layout overrides it; Hosted always uses inline.
+         */
+        layout?: 'inline' | 'sidebar' | 'popup' | 'modal';
+        /**
+         * Default entry button for the loader; an explicit script data-launcher takes precedence.
+         */
+        launcher?: {
+            /**
+             * Entry control: none hides the launcher, bubble shows a button, mascot shows a character that reacts while the visitor types and the agent thinks and answers. A mascot needs pack.
+             */
+            type: 'none' | 'bubble' | 'mascot';
+            /**
+             * Mascot images: exactly one of preset or images. Send pack, not image.
+             */
+            pack?: {
+                /**
+                 * Built-in character: mint (mint support girl), cat (cat-eared girl) or bot (small robot).
+                 */
+                preset?: 'mint' | 'cat' | 'bot';
+                /**
+                 * One HTTPS image per slot; only idle is required and a missing slot shows idle. Use 2:3 canvases with the feet bottom-centered on a transparent background; PNG or WebP stay still, GIF, WebP and APNG play as they are.
+                 */
+                images?: {
+                    /**
+                     * Resting state.
+                     */
+                    idle: string;
+                    /**
+                     * Page open and while the greeting bubble shows.
+                     */
+                    greet?: string;
+                    /**
+                     * The visitor is typing in the composer.
+                     */
+                    listening?: string;
+                    /**
+                     * After the visitor sends, before the first reply text.
+                     */
+                    thinking?: string;
+                    /**
+                     * While the reply streams; alternates with talking-2 every 220 ms.
+                     */
+                    talking?: string;
+                    /**
+                     * Second mouth frame of talking, mouth closed; without it talking alternates with idle.
+                     */
+                    'talking-2'?: string;
+                    /**
+                     * The last turn failed or was refused.
+                     */
+                    sorry?: string;
+                    /**
+                     * No interaction for 60 seconds; hover or click wakes the mascot.
+                     */
+                    sleep?: string;
+                };
+            };
+            /**
+             * Legacy single mascot image, read as pack.images.idle. When pack is present, pack wins.
+             */
+            image?: string;
+            /**
+             * float (default) gently floats the mascot, bounces on hover and waves with the greeting; none keeps it still. Reduced-motion settings always win.
+             */
+            motion?: 'float' | 'none';
+            /**
+             * Launcher corner: bottom-right is the default; bottom-left uses the opposite corner.
+             */
+            position?: 'bottom-right' | 'bottom-left';
+            /**
+             * Accessible entry button label and bubble text; omission uses the default chat label.
+             */
+            label?: string;
+        };
+        /**
+         * Visible chat heading; omitted title uses the public agent name.
+         */
+        header?: {
+            /**
+             * Optional heading text shown instead of the public agent name.
+             */
+            title?: string;
+            /**
+             * Optional secondary line beneath the heading.
+             */
+            subtitle?: string;
+            /**
+             * Optional HTTPS image shown in the heading avatar position.
+             */
+            icon?: string;
+        };
+        /**
+         * Visual tokens applied to the conversation and header; omitted fields use Kit defaults.
+         */
+        theme?: {
+            /**
+             * light or dark selects a fixed scheme; system follows the device preference.
+             */
+            colorScheme?: 'light' | 'dark' | 'system';
+            /**
+             * Explicit opaque CSS accent color, for example #167A43.
+             */
+            accent?: string;
+            /**
+             * Explicit opaque CSS background color, for example #ffffff.
+             */
+            surface?: string;
+            /**
+             * neutral uses grayscale surfaces, warm uses warm tones, cool uses cool tones.
+             */
+            grayscale?: 'neutral' | 'warm' | 'cool';
+            /**
+             * Corner rounding: none is square, sm is small, md is medium, lg is large, full is fully rounded.
+             */
+            radius?: 'none' | 'sm' | 'md' | 'lg' | 'full';
+            /**
+             * Spacing: compact reduces gaps, normal uses defaults, spacious increases gaps.
+             */
+            density?: 'compact' | 'normal' | 'spacious';
+            /**
+             * CSS font family list using fonts available on the device; external font loading is not configured here.
+             */
+            fontFamily?: string;
+            /**
+             * Positive base font size in CSS pixels; omission preserves Kit sizing.
+             */
+            fontSize?: number;
+        };
+        /**
+         * Reserved Kit locale preference: zh for Chinese, en for English. Kit currently passes this option through without translating all controls.
+         */
+        locale?: 'zh' | 'en';
+        /**
+         * Content displayed before the first message in a conversation.
+         */
+        startScreen?: {
+            /**
+             * Optional welcome text on the empty conversation.
+             */
+            greeting?: string;
+            /**
+             * Up to four suggested questions; clicking a label sends its prompt text.
+             */
+            prompts?: Array<{
+                /**
+                 * Visible suggested-question button text.
+                 */
+                label: string;
+                /**
+                 * User message sent when this suggestion is selected.
+                 */
+                prompt: string;
+            }>;
+        };
+        /**
+         * Message input appearance; transport and attachment settings are excluded.
+         */
+        composer?: {
+            /**
+             * Hint shown when the message input is empty.
+             */
+            placeholder?: string;
+        };
+        /**
+         * Optional notice displayed beside the conversation composer.
+         */
+        disclaimer?: string;
+        /**
+         * Optional text below the conversation.
+         */
+        footer?: string;
+        /**
+         * Availability of the conversation history control.
+         */
+        history?: {
+            /**
+             * False hides history; omission uses the default enabled state.
+             */
+            enabled?: boolean;
+        };
+    };
+};
+export type GetAgentAppearanceResponse = GetAgentAppearanceResponses[keyof GetAgentAppearanceResponses];
 export type CreateCustomerGrantCodeData = {
     body: {
         /**
@@ -30276,9 +31144,27 @@ export type CreateCustomerGrantCodeData = {
          */
         version?: number;
         /**
-         * Budget in cents for each session the customer starts. Defaults to the embed policy session budget and cannot exceed its maximum.
+         * Budget for each session the customer starts, in the same shape as a session budget. Defaults to the embed policy session budget and cannot exceed its maximum.
          */
-        budget_cents?: number;
+        budget?: {
+            /**
+             * Budget kind; always limit.
+             */
+            type: 'limit';
+            /**
+             * Spending limit of each session the customer starts.
+             */
+            max_list_cost: {
+                /**
+                 * Largest list cost of each session, in US dollars, as a decimal string with at most 2 fraction digits, e.g. "0.50". "0" lets the customer sign in without spending.
+                 */
+                amount: string;
+                /**
+                 * Always USD.
+                 */
+                currency: 'USD';
+            };
+        };
         /**
          * Optional context the agent receives at the start of each session, as text blocks, limited to 8192 UTF-8 bytes in total.
          */
@@ -36159,6 +37045,19 @@ export type ForkSessionResponses = {
                  */
                 web_search_requests?: number;
             };
+            /**
+             * Praxis extension: priced runtime of this session (the time it was running), billed separately from list_cost and not counted against the budget. amount is in US dollars as a decimal string with exactly 6 decimals, e.g. "0.000280". Each thread's runtime is reported on that thread. /agent/v1 only.
+             */
+            runtime_cost?: {
+                /**
+                 * Runtime cost in US dollars, decimal string with exactly 6 decimals.
+                 */
+                amount: string;
+                /**
+                 * Always USD.
+                 */
+                currency: 'USD';
+            };
         };
         /**
          * Vault IDs attached to the session at creation. Empty when no vaults were
@@ -43313,7 +44212,7 @@ export type ListOrganizationCostsResponses = {
                  */
                 ResourceName?: string;
                 /**
-                 * Decimal string in BillingCurrency.
+                 * Amount in BillingCurrency: US dollars for USD, decimal string, 6 decimals.
                  */
                 BilledCost: string;
                 /**
@@ -43531,7 +44430,7 @@ export type ListOrganizationEventsResponses = {
              */
             ResourceName: string;
             /**
-             * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+             * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
              */
             BilledCost: string;
             /**
@@ -43555,7 +44454,7 @@ export type ListOrganizationEventsResponses = {
                  */
                 status: 'settled' | 'no_charge' | 'rejected';
                 /**
-                 * USD amount that could not be charged, as a decimal string, when status is settled_with_shortfall; null otherwise.
+                 * Amount that could not be charged: US dollars, decimal string, 6 decimals, when status is settled_with_shortfall; null otherwise.
                  */
                 shortfall: string | null;
                 /**
@@ -43652,7 +44551,7 @@ export type GetOrganizationEventResponses = {
          */
         ResourceName: string;
         /**
-         * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+         * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
          */
         BilledCost: string;
         /**
@@ -43676,7 +44575,7 @@ export type GetOrganizationEventResponses = {
              */
             status: 'settled' | 'no_charge' | 'rejected';
             /**
-             * USD amount that could not be charged, as a decimal string, when status is settled_with_shortfall; null otherwise.
+             * Amount that could not be charged: US dollars, decimal string, 6 decimals, when status is settled_with_shortfall; null otherwise.
              */
             shortfall: string | null;
             /**
@@ -43713,7 +44612,7 @@ export type GetOrganizationEventResponses = {
              */
             PricingUnit: string | null;
             /**
-             * Amount billed for this line in USD as a decimal string.
+             * Amount billed for this line: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`).
              */
             BilledCost: string;
         }>;
@@ -43726,7 +44625,7 @@ export type GetOrganizationEventResponses = {
              */
             transaction_id: string;
             /**
-             * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+             * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
              */
             BilledCost: string;
             /**
@@ -43780,7 +44679,7 @@ export type ExportOrganizationChargesResponses = {
          */
         ChargePeriodEnd: string;
         /**
-         * Amount billed in USD as an exact decimal string; unsettled usage counts as 0 until it settles.
+         * Amount billed: US dollars for USD (otherwise BillingCurrency), decimal string, 6 decimals (for example `0.001700`); unsettled usage counts as `0.000000` until it settles.
          */
         BilledCost: string;
         /**
@@ -45315,7 +46214,7 @@ export type AgentsListResponses = {
              */
             note: string | null;
             /**
-             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
              */
             bindings: Array<{
                 /**
@@ -45334,6 +46233,10 @@ export type AgentsListResponses = {
                  * Optional guidance for using this resource, up to 4096 characters; does not expand access.
                  */
                 instructions?: string;
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
                  */
@@ -45343,6 +46246,10 @@ export type AgentsListResponses = {
                  * Service type. Opens the whole service to codemode; there is no per-resource id.
                  */
                 type: 'search' | 'browser';
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
                  */
@@ -45360,6 +46267,10 @@ export type AgentsListResponses = {
              * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
              */
             subagent_model?: string | null;
+            /**
+             * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+             */
+            image_model?: string | null;
             /**
              * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
              */
@@ -45815,7 +46726,7 @@ export type AgentsCreateData = {
          */
         tools?: Array<AgentManaged15 | AgentManaged29 | AgentManaged32>;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings?: Array<{
             /**
@@ -45834,6 +46745,10 @@ export type AgentsCreateData = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -45843,6 +46758,10 @@ export type AgentsCreateData = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -45860,6 +46779,10 @@ export type AgentsCreateData = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -46376,7 +47299,7 @@ export type AgentsCreateResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -46395,6 +47318,10 @@ export type AgentsCreateResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -46404,6 +47331,10 @@ export type AgentsCreateResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -46421,6 +47352,10 @@ export type AgentsCreateResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -46960,7 +47895,7 @@ export type AgentsRetrieveResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -46979,6 +47914,10 @@ export type AgentsRetrieveResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -46988,6 +47927,10 @@ export type AgentsRetrieveResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -47005,6 +47948,10 @@ export type AgentsRetrieveResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -47491,6 +48438,10 @@ export type AgentsUpdateData = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -47500,6 +48451,10 @@ export type AgentsUpdateData = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -47517,6 +48472,10 @@ export type AgentsUpdateData = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -48042,7 +49001,7 @@ export type AgentsUpdateResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -48061,6 +49020,10 @@ export type AgentsUpdateResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -48070,6 +49033,10 @@ export type AgentsUpdateResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -48087,6 +49054,10 @@ export type AgentsUpdateResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -48616,7 +49587,7 @@ export type AgentsArchiveResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -48635,6 +49606,10 @@ export type AgentsArchiveResponses = {
              * Optional guidance for using this resource, up to 4096 characters; does not expand access.
              */
             instructions?: string;
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
              */
@@ -48644,6 +49619,10 @@ export type AgentsArchiveResponses = {
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
             type: 'search' | 'browser';
+            /**
+             * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+             */
+            readonly verified?: boolean;
             /**
              * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
              */
@@ -48661,6 +49640,10 @@ export type AgentsArchiveResponses = {
          * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
          */
         subagent_model?: string | null;
+        /**
+         * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+         */
+        image_model?: string | null;
         /**
          * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
          */
@@ -49208,7 +50191,7 @@ export type AgentsVersionsListResponses = {
              */
             note: string | null;
             /**
-             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings.
+             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
              */
             bindings: Array<{
                 /**
@@ -49227,6 +50210,10 @@ export type AgentsVersionsListResponses = {
                  * Optional guidance for using this resource, up to 4096 characters; does not expand access.
                  */
                 instructions?: string;
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether this binding grants access. Defaults to true; false immediately disables it for running sessions.
                  */
@@ -49236,6 +50223,10 @@ export type AgentsVersionsListResponses = {
                  * Service type. Opens the whole service to codemode; there is no per-resource id.
                  */
                 type: 'search' | 'browser';
+                /**
+                 * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
+                 */
+                readonly verified?: boolean;
                 /**
                  * Whether the service is open. Defaults to true; false immediately closes it for running sessions.
                  */
@@ -49253,6 +50244,10 @@ export type AgentsVersionsListResponses = {
              * Praxis extension: default subagent model ID, pinned in the agent revision. Call model overrides this; otherwise it overrides the roster member model or the parent model for built-ins. Null clears the default. /agent/v1 only.
              */
             subagent_model?: string | null;
+            /**
+             * Model used by the imagine image tool; defaults to gpt-image-2 when unset. Only models that can generate images are accepted. Omit to preserve; null clears the configured model. /agent/v1 only.
+             */
+            image_model?: string | null;
             /**
              * Praxis extension: inline subagent definitions stored in the configuration revision, separately from the multiagent roster. Omit to preserve; null clears. Names must be unique. Configuration storage only; runtime activation is not implemented. /agent/v1 only.
              */