@ellipsis-dev/sdk 0.11.0 → 0.13.0

package/dist/{types-DDQQ1Yfh.d.ts → types-egqnpL5C.d.ts}

@@ -1,5 +1,5 @@
 interface paths {
-    '/agents/configs': {
+    '/v1/agents/configs': {
         parameters: {
             query?: never;
             header?: never;
@@ -32,7 +32,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/agents/configs/{config_id}': {
+    '/v1/agents/configs/{config_id}': {
         parameters: {
             query?: never;
             header?: never;
@@ -70,7 +70,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/agents/configs/{config_id}/link': {
+    '/v1/agents/configs/{config_id}/link': {
         parameters: {
             query?: never;
             header?: never;
@@ -95,7 +95,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/agents/configs/{config_id}/unlink': {
+    '/v1/agents/configs/{config_id}/unlink': {
         parameters: {
             query?: never;
             header?: never;
@@ -119,7 +119,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/agents/defaults': {
+    '/v1/agents/defaults': {
         parameters: {
             query?: never;
             header?: never;
@@ -128,12 +128,11 @@ interface paths {
         };
         /**
          * List Agent Defaults
-         * @description List default agent configs.
+         * @description Get the default agent configs.
          *
-         *     The account default and any per-repository defaults.
-         *
-         *     Defaults are addressed by rung: the account rung is repository
-         *     omitted, a repo rung is "owner/name" — never by row id.
+         *     The account-wide default and the per-repository defaults, as config
+         *     ids. Repo rungs are keyed "owner/name"; a repository this
+         *     installation can no longer see is omitted.
          */
         get: operations['list_agent_defaults'];
         /**
@@ -142,7 +141,7 @@ interface paths {
          *
          *     Addressed by rung: the account rung (repository omitted) or a
          *     repository rung ("owner/name"); the config by id or by the
-         *     agent's name.
+         *     agent's name. Returns the full resulting ladder.
          *
          *     Refused for sandbox tokens (potentially prompt-injected code
          *     must not repoint the account's ambient default); an unknown or
@@ -165,7 +164,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/agents/templates': {
+    '/v1/agents/templates': {
         parameters: {
             query?: never;
             header?: never;
@@ -188,7 +187,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/agents/templates/{template_id}': {
+    '/v1/agents/templates/{template_id}': {
         parameters: {
             query?: never;
             header?: never;
@@ -208,7 +207,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/alerts': {
+    '/v1/alerts': {
         parameters: {
             query?: never;
             header?: never;
@@ -233,7 +232,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/alerts/{alert_id}': {
+    '/v1/alerts/{alert_id}': {
         parameters: {
             query?: never;
             header?: never;
@@ -255,7 +254,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/alerts/{alert_id}/dismiss': {
+    '/v1/alerts/{alert_id}/dismiss': {
         parameters: {
             query?: never;
             header?: never;
@@ -277,7 +276,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/analytics/metrics': {
+    '/v1/analytics/metrics': {
         parameters: {
             query?: never;
             header?: never;
@@ -305,7 +304,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/analytics/pull-requests': {
+    '/v1/analytics/pull-requests': {
         parameters: {
             query?: never;
             header?: never;
@@ -328,7 +327,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/analytics/reviews': {
+    '/v1/analytics/reviews': {
         parameters: {
             query?: never;
             header?: never;
@@ -353,7 +352,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/auth/cli/poll': {
+    '/v1/auth/cli/poll': {
         parameters: {
             query?: never;
             header?: never;
@@ -375,7 +374,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/auth/cli/start': {
+    '/v1/auth/cli/start': {
         parameters: {
             query?: never;
             header?: never;
@@ -399,7 +398,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/budget': {
+    '/v1/budget': {
         parameters: {
             query?: never;
             header?: never;
@@ -419,7 +418,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/files': {
+    '/v1/files': {
         parameters: {
             query?: never;
             header?: never;
@@ -452,7 +451,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/files/{file_id}': {
+    '/v1/files/{file_id}': {
         parameters: {
             query?: never;
             header?: never;
@@ -490,7 +489,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/integrations': {
+    '/v1/integrations': {
         parameters: {
             query?: never;
             header?: never;
@@ -517,7 +516,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/integrations/github/members': {
+    '/v1/integrations/github/members': {
         parameters: {
             query?: never;
             header?: never;
@@ -543,7 +542,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/integrations/github/repos': {
+    '/v1/integrations/github/repos': {
         parameters: {
             query?: never;
             header?: never;
@@ -563,7 +562,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/integrations/linear/teams': {
+    '/v1/integrations/linear/teams': {
         parameters: {
             query?: never;
             header?: never;
@@ -583,7 +582,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/integrations/sentry/organizations': {
+    '/v1/integrations/sentry/organizations': {
         parameters: {
             query?: never;
             header?: never;
@@ -603,7 +602,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/integrations/slack/channels': {
+    '/v1/integrations/slack/channels': {
         parameters: {
             query?: never;
             header?: never;
@@ -624,7 +623,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/integrations/slack/members': {
+    '/v1/integrations/slack/members': {
         parameters: {
             query?: never;
             header?: never;
@@ -645,7 +644,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/me': {
+    '/v1/me': {
         parameters: {
             query?: never;
             header?: never;
@@ -665,7 +664,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/memories': {
+    '/v1/memories': {
         parameters: {
             query?: never;
             header?: never;
@@ -702,7 +701,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/memories/{memory_id}': {
+    '/v1/memories/{memory_id}': {
         parameters: {
             query?: never;
             header?: never;
@@ -743,7 +742,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/models': {
+    '/v1/models': {
         parameters: {
             query?: never;
             header?: never;
@@ -770,7 +769,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/reviews': {
+    '/v1/reviews': {
         parameters: {
             query?: never;
             header?: never;
@@ -809,7 +808,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/reviews/{review_id}': {
+    '/v1/reviews/{review_id}': {
         parameters: {
             query?: never;
             header?: never;
@@ -836,7 +835,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/secrets': {
+    '/v1/secrets': {
         parameters: {
             query?: never;
             header?: never;
@@ -868,7 +867,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/secrets/{name}': {
+    '/v1/secrets/{name}': {
         parameters: {
             query?: never;
             header?: never;
@@ -891,7 +890,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/sessions': {
+    '/v1/sessions': {
         parameters: {
             query?: never;
             header?: never;
@@ -916,8 +915,7 @@ interface paths {
          *     config, or
          *     template_id; with none, the account's default-config ladder
          *     resolves the config. 400 when idle_start is combined with
-         *     prompt, input, or handoff, or when a handoff is combined with
-         *     any config source or override. 422 when the agent declares an
+         *     prompt or input. 422 when the agent declares an
          *     input schema and the request's input is absent or invalid.
          */
         post: operations['start_agent_session'];
@@ -927,7 +925,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/sessions/search': {
+    '/v1/sessions/search': {
         parameters: {
             query?: never;
             header?: never;
@@ -955,31 +953,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/sessions/sync': {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Sync Agent Session
-         * @description Sync a local Claude Code session to Ellipsis.
-         *
-         *     Requires a user token (device-flow `agent login`): the user is
-         *     part of the sync's idempotency key, so API keys and sandbox
-         *     tokens are rejected with a 403 rather than silently attributed.
-         */
-        post: operations['sync_agent_session'];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    '/sessions/{session_id}': {
+    '/v1/sessions/{session_id}': {
         parameters: {
             query?: never;
             header?: never;
@@ -1006,7 +980,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/sessions/{session_id}/executions': {
+    '/v1/sessions/{session_id}/executions': {
         parameters: {
             query?: never;
             header?: never;
@@ -1034,7 +1008,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/sessions/{session_id}/export': {
+    '/v1/sessions/{session_id}/export': {
         parameters: {
             query?: never;
             header?: never;
@@ -1063,35 +1037,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/sessions/{session_id}/ide': {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * Get Agent Session Ide
-         * @description Return the IDE link for the session's sandbox.
-         *
-         *     The membership-gated dashboard page, which performs the sandbox
-         *     proxy handoff itself.
-         *
-         *     No credential is minted here — the URL grants nothing by
-         *     possession. 409 when the sandbox isn't running (send the
-         *     session a message to wake it first). Backs the `agent session
-         *     ide` CLI verb.
-         */
-        get: operations['get_agent_session_ide'];
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    '/sessions/{session_id}/messages': {
+    '/v1/sessions/{session_id}/messages': {
         parameters: {
             query?: never;
             header?: never;
@@ -1116,7 +1062,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/sessions/{session_id}/output': {
+    '/v1/sessions/{session_id}/output': {
         parameters: {
             query?: never;
             header?: never;
@@ -1129,7 +1075,7 @@ interface paths {
          *
          *     The payload the agent submitted through its config-declared
          *     output.json_schema, as the raw JSON body with no envelope. 404
-         *     while the session is still running (poll GET /sessions/{id}),
+         *     while the session is still running (poll GET /v1/sessions/{id}),
          *     when the agent declares no output block, or when no execution
          *     produced output.
          */
@@ -1142,32 +1088,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/sessions/{session_id}/ports/{port}': {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * Get Agent Session Port
-         * @description Return a preview link for a sandbox port.
-         *
-         *     For a dev server running in the session's live sandbox: the
-         *     same dashboard page as the IDE, deep-linked to the port.
-         *
-         *     Backs `agent session port`.
-         */
-        get: operations['get_agent_session_port'];
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    '/sessions/{session_id}/records': {
+    '/v1/sessions/{session_id}/records': {
         parameters: {
             query?: never;
             header?: never;
@@ -1182,8 +1103,7 @@ interface paths {
          *     full retained transcript. Available to sandbox tokens too: an
          *     agent answering "did X look into Y?" needs to read the session
          *     it found via /sessions/search, and any org member sees the same
-         *     transcript in the dashboard (laptop transcripts are redacted
-         *     client-side before they are ever uploaded).
+         *     transcript in the dashboard.
          */
         get: operations['get_agent_session_records'];
         put?: never;
@@ -1194,7 +1114,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/sessions/{session_id}/replay': {
+    '/v1/sessions/{session_id}/replay': {
         parameters: {
             query?: never;
             header?: never;
@@ -1219,7 +1139,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/sessions/{session_id}/stop': {
+    '/v1/sessions/{session_id}/stop': {
         parameters: {
             query?: never;
             header?: never;
@@ -1242,7 +1162,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/sessions/{session_id}/transcript': {
+    '/v1/sessions/{session_id}/transcript': {
         parameters: {
             query?: never;
             header?: never;
@@ -1267,7 +1187,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/usage': {
+    '/v1/usage': {
         parameters: {
             query?: never;
             header?: never;
@@ -1305,7 +1225,6 @@ interface components {
             /**
              * @default {
              *       "enabled": true,
-             *       "ide": true,
              *       "interactive": true,
              *       "metadata": {
              *         "annotations": {},
@@ -1320,12 +1239,6 @@ interface components {
              *       "compute": {},
              *       "hooks": {},
              *       "image": {},
-             *       "ports": [
-             *         3000,
-             *         5173,
-             *         8000,
-             *         8080
-             *       ],
              *       "repositories": [],
              *       "variables": []
              *     }
@@ -1402,7 +1315,7 @@ interface components {
         AgentConfigCodex: {
             /**
              * Model
-             * @default bedrock-gpt-5.6-terra
+             * @default gpt-5.6-terra
              */
             model: string;
             /**
@@ -1470,18 +1383,17 @@ interface components {
          * AgentConfigEllipsis
          * @description The Ellipsis product namespace for a config file: which schema this is
          *     (`version`), the human-facing identity (`name`/`description`), freeform
-         *     organizational `metadata`, whether the agent is `enabled`, and the two
-         *     human-access flags (`interactive`/`ide`). The presence of a top-level
-         *     `ellipsis:` mapping is what marks a YAML file as an Ellipsis agent config (vs
-         *     arbitrary YAML that merely lives under a config directory) — see
+         *     organizational `metadata`, whether the agent is `enabled`, and the
+         *     human-access flag `interactive`. The presence of a top-level `ellipsis:`
+         *     mapping is what marks a YAML file as an Ellipsis agent config (vs arbitrary
+         *     YAML that merely lives under a config directory) — see
          *     `yaml_is_ellipsis_config`.
          *
-         *     `enabled`/`interactive`/`ide` are agent behavior, not freeform metadata, so
-         *     they stay inside the config `sha` (only `metadata` is sha-excluded).
-         *     `interactive` and `ide` are sibling human-access flags: `interactive` lets a
-         *     human `agent session connect` to a live session (CLI relay); `ide` lets a
-         *     human open an editor / a port URL into the sandbox. Neither decides whether a
-         *     session is ephemeral or durable — that is the trigger's job.
+         *     `enabled`/`interactive` are agent behavior, not freeform metadata, so they
+         *     stay inside the config `sha` (only `metadata` is sha-excluded).
+         *     `interactive` lets a human `agent session connect` to a live session (CLI
+         *     relay). It does not decide whether a session is ephemeral or durable — that
+         *     is the trigger's job.
          */
         AgentConfigEllipsis: {
             /** Description */
@@ -1491,11 +1403,6 @@ interface components {
              * @default true
              */
             enabled: boolean;
-            /**
-             * Ide
-             * @default true
-             */
-            ide: boolean;
             /**
              * Interactive
              * @default true
@@ -1548,16 +1455,6 @@ interface components {
             hooks: components['schemas']['AgentConfigEnvironmentHooks'];
             /** @default {} */
             image: components['schemas']['AgentConfigEnvironmentImage'];
-            /**
-             * Ports
-             * @default [
-             *       3000,
-             *       5173,
-             *       8000,
-             *       8080
-             *     ]
-             */
-            ports: number[];
             /**
              * Repositories
              * @default []
@@ -1623,7 +1520,7 @@ interface components {
          *     `value`, when set, is a literal injected as-is — use it for non-secret
          *     config (LOG_LEVEL, an API base URL). When `value` is omitted the value is
          *     resolved at run time from the account's sandbox-secrets store (dashboard
-         *     / `PUT /secrets`) by `name`, so a secret can be injected without
+         *     / `PUT /v1/secrets`) by `name`, so a secret can be injected without
          *     ever putting it in the config file. Either way the variable only reaches
          *     agents that name it.
          */
@@ -1665,7 +1562,7 @@ interface components {
          *     when it happens; this is what goes in).
          *
          *     `json_schema` types the payload a caller-started session takes
-         *     (`POST /sessions` `input`, validated at the door; required when
+         *     (`POST /v1/sessions` `input`, validated at the door; required when
          *     declared). It is illegal on a react-triggered agent — react payloads are
          *     platform-shaped (the published surface field sets), not caller-shaped.
          *
@@ -1763,7 +1660,7 @@ interface components {
          * AgentConfigOutput
          * @description The typed output contract: the JSON Schema the agent must exit through
          *     (the StructuredOutput exit tool). Read back via
-         *     GET /sessions/{id}/output.
+         *     GET /v1/sessions/{id}/output.
          */
         AgentConfigOutput: {
             /** Json Schema */
@@ -1857,6 +1754,17 @@ interface components {
             path: string;
             repository?: components['schemas']['AgentConfigRepository'] | null;
         };
+        /**
+         * AgentConfigSource
+         * @description Where a session's config came from. Total: every session has exactly one
+         *     source, including the ones that never touch defaults resolution.
+         *
+         *     Not derivable from the row — `agent_config_id` says WHICH saved config, not
+         *     how it was chosen, and is null for inline, platform-default, and built-in
+         *     configs alike — so it is persisted for audit and the published wire.
+         * @enum {string}
+         */
+        AgentConfigSource: 'explicit' | 'inline' | 'template' | 'repo_default' | 'account_default' | 'platform_default' | 'trigger' | 'builtin';
         /**
          * AgentConfigSourceGithub
          * @description Identifies the file a GitHub-sourced agent config is synced from.
@@ -1891,61 +1799,29 @@ interface components {
             configs: components['schemas']['Config'][];
         };
         /**
-         * AgentDefault
-         * @description A default-agent setting: which agent config serves sessions started
-         *     without an explicit config, for the whole account or for one repository.
+         * AgentDefaults
+         * @description Which agent config serves sessions started without an explicit config:
+         *     one account-wide rung, plus a rung per repository.
+         *
+         *     Values are config ids — stable across renames, unlike the agent's name.
+         *     A repo rung whose repository this installation can no longer see is absent
+         *     from `repositories`; its row is left in place, so re-installing the repo
+         *     brings the rung back.
          */
-        AgentDefault: {
-            /**
-             * Broken
-             * @description Why this default cannot serve sessions, or null when it is healthy.
-             */
-            broken?: ('config_deleted' | 'config_disabled' | 'config_pending_pr' | 'repo_inaccessible') | null;
-            /**
-             * Config Id
-             * @description The agent config this default points at.
-             */
-            config_id: string;
-            /**
-             * Config Name
-             * @description The pointed-at config's name; null when the config no longer exists.
-             */
-            config_name?: string | null;
-            /**
-             * Id
-             * @description The default's unique identifier.
-             */
-            id: string;
-            /**
-             * Repository
-             * @description The repository this default applies to, as "owner/name", or null for the account-wide default.
-             */
-            repository?: string | null;
+        AgentDefaults: {
             /**
-             * Updated At
-             * Format: date-time
-             * @description When the default was last changed.
+             * Account
+             * @description Config id serving sessions with no repository context, or null when no account default is set.
              */
-            updated_at: string;
-        };
-        /**
-         * AgentDefaultResponse
-         * @description One default-agent setting.
-         */
-        AgentDefaultResponse: {
-            /** @description The default-agent setting. */
-            default: components['schemas']['AgentDefault'];
-        };
-        /**
-         * AgentDefaultsListResponse
-         * @description The account's default-agent settings.
-         */
-        AgentDefaultsListResponse: {
+            account?: string | null;
             /**
-             * Defaults
-             * @description The configured defaults.
+             * Repositories
+             * @description Config id per repository, keyed "owner/name". A repository with no default set is absent.
+             * @default {}
              */
-            defaults: components['schemas']['AgentDefault'][];
+            repositories: {
+                [key: string]: string;
+            };
         };
         /**
          * AgentTemplate
@@ -2411,7 +2287,7 @@ interface components {
         CliAuthPollRequest: {
             /**
              * Device Code
-             * @description The device code returned by POST /auth/cli/start.
+             * @description The device code returned by POST /v1/auth/cli/start.
              */
             device_code: string;
         };
@@ -2563,7 +2439,7 @@ interface components {
             repository?: string | null;
             /**
              * Template Id
-             * @description A gallery template slug (see GET /agents/templates).
+             * @description A gallery template slug (see GET /v1/agents/templates).
              */
             template_id?: string | null;
         };
@@ -2680,16 +2556,6 @@ interface components {
              */
             scope: components['schemas']['ReviewScope'];
         };
-        /**
-         * DefaultResolution
-         * @description How a session that arrived with no explicit config source resolved its
-         *     config (documents/eng/DEFAULT_CONFIGS.md §4). Persisted on the session so
-         *     audit and clients can say "ran under X (repo default)". A session started
-         *     with an explicit config/config_id/template_id never enters resolution and
-         *     stores None.
-         * @enum {string}
-         */
-        DefaultResolution: 'repo_default' | 'account_default' | 'none';
         /**
          * DurationPercentiles
          * @description Percentiles of a duration distribution, in hours. p0 = fastest,
@@ -2764,7 +2630,7 @@ interface components {
         ErrorInfo: {
             /**
              * Code
-             * @description Stable machine-readable error code. Open vocabulary — handle unknown codes by HTTP status. Known values: account_blocked, conflict, default_config_broken, failed_dependency, file_quota_exceeded, forbidden, internal_error, invalid_request, not_found, rate_limited, review_in_flight, session_closed, session_ephemeral_trigger, session_finished, session_harness_single_turn, session_laptop, session_mention_surface, session_non_interactive, unauthorized, unavailable.
+             * @description Stable machine-readable error code. Open vocabulary — handle unknown codes by HTTP status. Known values: account_blocked, conflict, contact_email_required, failed_dependency, file_quota_exceeded, forbidden, internal_error, invalid_request, not_found, rate_limited, review_in_flight, session_closed, session_ephemeral_trigger, session_finished, session_harness_single_turn, session_mention_surface, session_non_interactive, unauthorized, unavailable.
              */
             code: string;
             /**
@@ -2995,17 +2861,6 @@ interface components {
             /** @description The connected Slack workspace, or null if not connected. */
             slack?: components['schemas']['SlackIntegrationSummary'] | null;
         };
-        /**
-         * GetSessionIdeResponse
-         * @description The IDE link for a session's live sandbox.
-         */
-        GetSessionIdeResponse: {
-            /**
-             * Url
-             * @description The membership-gated dashboard page for the session's sandbox. The page performs the proxy handoff itself, so the URL carries no credential — safe to share with any org member, in a transcript, or in a Slack message.
-             */
-            url: string;
-        };
         /**
          * GetSessionLogResponse
          * @description The session log manifest: the complete, ordered, downloadable history
@@ -3053,22 +2908,6 @@ interface components {
              */
             session_id: string;
         };
-        /**
-         * GetSessionPortResponse
-         * @description A preview link for a port in a session's live sandbox.
-         */
-        GetSessionPortResponse: {
-            /**
-             * Port
-             * @description The sandbox port the link previews.
-             */
-            port: number;
-            /**
-             * Url
-             * @description The same membership-gated dashboard page as the IDE URL, deep-linked to a preview port (a dev server the agent or the IDE user started).
-             */
-            url: string;
-        };
         /**
          * GetUsageDashboardResponse
          * @description The account's usage over a period: token and cost totals, a per-day
@@ -3381,35 +3220,6 @@ interface components {
             /** Detail */
             detail?: components['schemas']['ValidationError'][];
         };
-        /**
-         * HandoffAgentSessionParams
-         * @description Laptop-to-cloud handoff parameters (`agent session handoff`): start a
-         *     fresh session on the built-in handoff config, chained to the handed-off
-         *     session. Mutually exclusive with config_id / config / template_id — the
-         *     handoff config is platform-owned.
-         */
-        HandoffAgentSessionParams: {
-            /**
-             * Parent Session Id
-             * @description The session being handed off (usually a laptop-synced session).
-             */
-            parent_session_id: string;
-            /**
-             * Ref
-             * @description Where the WIP commit was pushed (refs/ellipsis/handoff/<short>); recorded as a metadata breadcrumb.
-             */
-            ref?: string | null;
-            /**
-             * Repo
-             * @description "owner/name" (or a bare name under the caller's account).
-             */
-            repo: string;
-            /**
-             * Sha
-             * @description The work-in-progress commit the CLI pushed (a commit of the dirty working tree) — becomes the sandbox checkout target.
-             */
-            sha: string;
-        };
         /**
          * Harness
          * @enum {string}
@@ -3740,9 +3550,9 @@ interface components {
          *     Serving path is irrelevant here. Anthropic built every Claude model, so all of
          *     them are ANTHROPIC whether we reach them through the first-party Anthropic API
          *     or through Bedrock -- a choice made per request by the llm_providers chain, so
-         *     it is not even a fixed property of the model. Likewise the `bedrock-gpt-5.6-*`
-         *     rows are OPENAI (OpenAI's models, served by AWS), and GLM is ZAI (Z.ai's model,
-         *     served by Concentrate).
+         *     it is not even a fixed property of the model. Likewise the `gpt-5.6-*` rows
+         *     are OPENAI (OpenAI's models, served by AWS via bedrock-mantle), and GLM is ZAI
+         *     (Z.ai's model, served by DeepInfra via OpenRouter).
          *
          *     So this is deliberately NOT derived from `EgressRoute.provider`: routing is an
          *     infrastructure fact that changes when we move a model between providers, while
@@ -3822,13 +3632,11 @@ interface components {
          *
          *     CONTINUATION — a follow-up in the same conversation surface (e.g. a Slack
          *     thread reply spawning a fresh session on the same thread).
-         *     HANDOFF — a session started to take over work from another surface (e.g.
-         *     laptop → cloud handoff; later phase).
          *     RESUME — a conversation re-hosted on a new box after its sandbox was torn
          *     down (interactive platform; later phase).
          * @enum {string}
          */
-        ParentKind: 'continuation' | 'handoff' | 'resume';
+        ParentKind: 'continuation' | 'resume';
         /**
          * PollCliAuthResponse
          * @description The state of a device-code flow. Poll until `status` leaves `pending`.
@@ -3850,7 +3658,7 @@ interface components {
          * @description Why direct prompting is refused. Absent when prompting is allowed.
          * @enum {string}
          */
-        PromptBlockedReason: 'mention_surface' | 'ephemeral_trigger' | 'non_interactive' | 'harness_single_turn' | 'closed' | 'laptop';
+        PromptBlockedReason: 'mention_surface' | 'ephemeral_trigger' | 'non_interactive' | 'harness_single_turn' | 'closed';
         /**
          * PullRequestAction
          * @enum {string}
@@ -4337,7 +4145,7 @@ interface components {
             config_id?: string | null;
             /**
              * Config Override
-             * @description Optional partial-config override merged onto the chosen config and re-validated — e.g. {"claude": {"model": "claude-opus-4-8"}} to replay the run on a different model, or {"limits": {"run": 5.0}} to raise its budget. Mutually exclusive with config_override_yaml.
+             * @description Optional partial-config override merged onto the chosen config and re-validated — e.g. {"claude": {"model": "claude-opus-4-8"}} to replay the run on a different model, or {"budget": {"session": 5.0}} to raise its budget. Mutually exclusive with config_override_yaml.
              */
             config_override?: {
                 [key: string]: unknown;
@@ -5361,32 +5169,17 @@ interface components {
         /**
          * Session
          * @description An agent session: one conversation with an agent, from trigger to
-         *     terminal state. Returned by `GET /sessions/{id}` and carried by the
+         *     terminal state. Returned by `GET /v1/sessions/{id}` and carried by the
          *     session stream's `session`/`snapshot` frames — REST and stream never
          *     disagree about what a session looks like.
          */
         Session: {
+            /** @description The agent that ran: the config the session executed, where that config came from, and any override merged into it. */
+            agent: components['schemas']['SessionAgent'];
             /** @description The principal this session is attributed to. */
             attribution?: components['schemas']['SessionAttribution'];
             /** @description The spend budget enforced for this session. */
             budget?: components['schemas']['SessionBudget'];
-            /**
-             * Client Version
-             * @description Version of the client that started the session, if reported.
-             */
-            client_version?: string | null;
-            /**
-             * Config Id
-             * @description Identifier of the saved agent config the session ran on, if any.
-             */
-            config_id?: string | null;
-            /**
-             * Config Override
-             * @description The partial-config diff applied for this run; null when the config was unmodified.
-             */
-            config_override?: {
-                [key: string]: unknown;
-            } | null;
             /**
              * Context Repository
              * @description The "owner/name" repository context the session was started in, if any.
@@ -5400,8 +5193,6 @@ interface components {
              * @description When the session was created.
              */
             created_at: string;
-            /** @description How the session's config was resolved from the account's defaults, when no explicit config was given. */
-            default_resolution?: components['schemas']['DefaultResolution'] | null;
             /** @description How the session ended; null until it is terminal. */
             exit_status?: components['schemas']['SessionExitStatus'] | null;
             /** @description The coding-agent harness the session runs on. */
@@ -5421,11 +5212,6 @@ interface components {
              * @description When the session last received a message.
              */
             last_message_at?: string | null;
-            /**
-             * Live Summary
-             * @description A live summary of the session's progress while it runs.
-             */
-            live_summary?: string | null;
             /**
              * Metadata
              * @description Caller-supplied metadata key-value pairs.
@@ -5448,19 +5234,9 @@ interface components {
             prompt?: string | null;
             /** @description Whether a client may send this session a message and, when it may not, the reason to show instead of a composer. */
             prompting: components['schemas']['SessionPrompting'];
-            /**
-             * Sandbox Id
-             * @description Identifier of the sandbox the session runs in, if any.
-             */
-            sandbox_id?: string | null;
-            /**
-             * Session Key
-             * @description Key identifying the durable conversation this session belongs to, or null for single-shot sessions.
-             */
-            session_key?: string | null;
             /** @description Lifecycle state of the durable conversation, or null for sessions without one. */
             session_state?: components['schemas']['SessionState'] | null;
-            /** @description Where the session came from (e.g. react, manual, api, cli, mention, cron, laptop). */
+            /** @description Where the session came from (e.g. react, manual, api, cli, mention, cron). */
             source: components['schemas']['SessionSource'];
             /** @description Execution status of the session. */
             status: components['schemas']['SessionStatus'];
@@ -5471,7 +5247,9 @@ interface components {
             status_reason?: string | null;
             /** @description The stop request, if the session was stopped. */
             stopped?: components['schemas']['SessionStopped'];
-            /** @description The public status projection; null for laptop-synced sessions. */
+            /** @description The latest live summary of the session's progress while it runs, and when it was generated. */
+            summary?: components['schemas']['SessionSummary'] | null;
+            /** @description The public status projection; null on list/search responses, which do not derive it. */
             surface?: components['schemas']['SessionSurface'] | null;
             /** @description The tokens the session spent and the model they went to. `total` includes the prompt-cache lanes. */
             tokens?: components['schemas']['SessionTokens'];
@@ -5481,13 +5259,35 @@ interface components {
              * @description When the session was last updated.
              */
             updated_at: string;
+        };
+        /**
+         * SessionAgent
+         * @description The agent this session ran: the config it actually executed, where that
+         *     config came from, and the diff that was merged in — the same
+         *     effective-value-plus-provenance shape `SessionBudget` uses.
+         *
+         *     `config` is the snapshot frozen when the session was created; `config_id`
+         *     points at the saved config as it exists NOW. They diverge legitimately: a
+         *     YAML edit after the session started, or any `override`, leaves the pointer
+         *     describing something the session never ran.
+         */
+        SessionAgent: {
+            /** @description The agent config the session actually ran, frozen when the session was created. */
+            config: components['schemas']['AgentConfig'];
+            /**
+             * Config Id
+             * @description Identifier of the saved config this session's snapshot was taken from. Null for inline, platform-default, and built-in configs. Points at the config as it exists now, which may have changed since.
+             */
+            config_id?: string | null;
             /**
-             * Webhook Id
-             * @description Identifier of the webhook event that triggered the session, if any.
+             * Override
+             * @description The partial-config override merged into `config` for this session, or null when the config ran unmodified. `config` is the merged result; this is the diff.
              */
-            webhook_id?: string | null;
-            /** @description Type of the webhook event that triggered the session, if any. */
-            webhook_type?: components['schemas']['WebhookType'] | null;
+            override?: {
+                [key: string]: unknown;
+            } | null;
+            /** @description How this session's config was chosen. */
+            source: components['schemas']['AgentConfigSource'];
         };
         /**
          * SessionAttribution
@@ -5650,7 +5450,7 @@ interface components {
          *     a deliberate cancellation. It is None until the run reaches a terminal state.
          * @enum {string}
          */
-        SessionExitStatus: 'completed' | 'budget_hit' | 'payment_required' | 'tool_call_failed' | 'lifecycle_hook_failed' | 'missing_repo_access' | 'missing_token_permissions' | 'missing_sandbox_variables' | 'cancelled' | 'interrupted' | 'error' | 'stopped';
+        SessionExitStatus: 'completed' | 'budget_hit' | 'payment_required' | 'tool_call_failed' | 'lifecycle_hook_failed' | 'missing_repo_access' | 'missing_token_permissions' | 'missing_sandbox_variables' | 'blocked' | 'contact_email_required' | 'cancelled' | 'interrupted' | 'error' | 'stopped';
         /**
          * SessionLiveness
          * @description The durable conversation axis (backs the surfaced `session` field).
@@ -6006,7 +5806,7 @@ interface components {
          * SessionSource
          * @enum {string}
          */
-        SessionSource: 'react' | 'manual' | 'api' | 'cli' | 'mention' | 'cron' | 'laptop';
+        SessionSource: 'react' | 'manual' | 'api' | 'cli' | 'mention' | 'cron';
         /**
          * SessionState
          * @description Lifecycle of a keyed (multi-turn) session — the durable conversation.
@@ -6041,9 +5841,26 @@ interface components {
             /** @description The GitHub user who stopped the session, resolved at read time. */
             by_user?: components['schemas']['GithubAccountSnippet'] | null;
         };
+        /**
+         * SessionSummary
+         * @description A live one-line summary of what the session is working on, refreshed
+         *     every few steps while it runs.
+         */
+        SessionSummary: {
+            /**
+             * Created At
+             * @description When this summary line was generated. Null on summaries written before generation time was tracked.
+             */
+            created_at?: string | null;
+            /**
+             * Description
+             * @description One-line description of what the session is working on.
+             */
+            description: string;
+        };
         /**
          * SessionSurface
-         * @description The three fields we expose. All `None` for an un-keyed (laptop) session.
+         * @description The three fields we expose.
          *
          *     `use_enum_values=True` (from CustomBaseModel) stores the members as their
          *     string values, so this serializes to `{"session": "alive", "run": "waiting",
@@ -6121,7 +5938,7 @@ interface components {
             next_cursor?: string | null;
             /**
              * Sessions
-             * @description Lean wire rows — the same shape GET /sessions/{id} and the stream's session frames carry. The heavy blobs (config snapshot, input/output) live on the detail endpoints.
+             * @description Lean wire rows — the same shape GET /v1/sessions/{id} and the stream's session frames carry. The heavy blobs (config snapshot, input/output) live on the detail endpoints.
              */
             sessions: components['schemas']['Session'][];
         };
@@ -6263,7 +6080,7 @@ interface components {
             config_id?: string | null;
             /**
              * Config Override
-             * @description Optional partial-config override merged onto the chosen config and re-validated (e.g. {"limits": {"run": 5.0}} to raise just this run's budget). Merged onto config_id/template_id or the platform default; with an inline config, set fields directly instead. Mutually exclusive with config_override_yaml.
+             * @description Optional partial-config override merged onto the chosen config and re-validated (e.g. {"budget": {"session": 5.0}} to raise just this session's budget). Merged onto config_id/template_id or the platform default; with an inline config, set fields directly instead. Mutually exclusive with config_override_yaml.
              */
             config_override?: {
                 [key: string]: unknown;
@@ -6279,11 +6096,9 @@ interface components {
              * @default false
              */
             force_rebuild: boolean;
-            /** @description Laptop-to-cloud handoff parameters. When set, the built-in handoff config is used and config_id/config/template_id must be omitted. */
-            handoff?: components['schemas']['HandoffAgentSessionParams'] | null;
             /**
              * Idle Start
-             * @description Start the session with no initial message: the sandbox spins up, the agent starts idle at the prompt, and the first message sent to the session opens turn 0. Mutually exclusive with prompt and handoff. Ignored when the resolved config is not interactive (an ephemeral run keeps its kickoff — it can never receive a message).
+             * @description Start the session with no initial message: the sandbox spins up, the agent starts idle at the prompt, and the first message sent to the session opens turn 0. Mutually exclusive with prompt. Ignored when the resolved config is not interactive (an ephemeral run keeps its kickoff — it can never receive a message).
              * @default false
              */
             idle_start: boolean;
@@ -6304,7 +6119,7 @@ interface components {
             };
             /**
              * Prompt
-             * @description Per-run instructions appended to the initial query after the config's shared system prompt. Applies regardless of which config source is used. For a handoff, this is the developer's handoff note.
+             * @description Per-run instructions appended to the initial query after the config's shared system prompt. Applies regardless of which config source is used.
              */
             prompt?: string | null;
             /**
@@ -6318,22 +6133,6 @@ interface components {
              */
             template_id?: string | null;
         };
-        /**
-         * StartAgentSessionResponse
-         * @description The started session, plus explicit fields describing how its config
-         *     was resolved.
-         */
-        StartAgentSessionResponse: {
-            /** @description Which rung of the defaults ladder chose the config (repo_default | account_default | none). Null when an explicit config/config_id/template_id (or a handoff) bypassed resolution. */
-            resolution_source?: components['schemas']['DefaultResolution'] | null;
-            /**
-             * Resolved Config Name
-             * @description The name of the config the session runs under.
-             */
-            resolved_config_name?: string | null;
-            /** @description The started session. */
-            session: components['schemas']['Session'];
-        };
         /**
          * StartCliAuthResponse
          * @description A freshly minted device-code flow: show the user code (or open the
@@ -6371,72 +6170,6 @@ interface components {
              */
             verification_uri_complete: string;
         };
-        /**
-         * SyncAgentSessionRequest
-         * @description One hook-driven transcript sync from a developer laptop. The CLI reads
-         *     the live on-disk Claude Code transcript, redacts it client-side, gzips
-         *     it, and POSTs it here — once per turn and at termination.
-         */
-        SyncAgentSessionRequest: {
-            /**
-             * Cc Session Id
-             * @description The Claude Code session uuid (from the hook payload's session_id).
-             */
-            cc_session_id: string;
-            /**
-             * Cwd
-             * @description The laptop working directory.
-             */
-            cwd?: string | null;
-            /**
-             * Git Branch
-             * @description The checked-out git branch.
-             */
-            git_branch?: string | null;
-            /**
-             * Reason
-             * @description Which hook fired the sync: "stop" (mid-session, once per turn) or "session_end" (the Claude Code process terminated).
-             * @default stop
-             * @enum {string}
-             */
-            reason: 'stop' | 'session_end';
-            /**
-             * Repo
-             * @description The enrolled repository ("owner/name", from the working directory's git remote).
-             */
-            repo?: string | null;
-            /**
-             * Transcript Gzip B64
-             * @description The redacted transcript JSONL, gzipped then base64-encoded.
-             */
-            transcript_gzip_b64: string;
-        };
-        /**
-         * SyncAgentSessionResponse
-         * @description The outcome of a laptop transcript sync.
-         */
-        SyncAgentSessionResponse: {
-            /**
-             * Accepted
-             * @description False when the stored snapshot was already at least as long (longest snapshot wins) — acknowledged, nothing written.
-             */
-            accepted: boolean;
-            /**
-             * Event Count
-             * @description The number of transcript events in the stored snapshot.
-             */
-            event_count: number;
-            /**
-             * Process Id
-             * @description The synced Claude Code process id.
-             */
-            process_id: string;
-            /**
-             * Session Id
-             * @description The platform session the sync mapped to.
-             */
-            session_id: string;
-        };
         /**
          * TokensInfo
          * @description Token/cost usage, per record (one API call's counts, aggregate fields at
@@ -6582,11 +6315,6 @@ interface components {
             /** Error Type */
             type: string;
         };
-        /**
-         * WebhookType
-         * @enum {string}
-         */
-        WebhookType: 'github.issue' | 'github.issue_comment' | 'github.push' | 'github.pull_request' | 'github.pull_request_comment' | 'github.pull_request_review' | 'github.pull_request_review_comment' | 'slack.app_mention' | 'slack.message' | 'slack.channel_created' | 'linear.issue' | 'linear.issue_comment' | 'sentry.event_alert' | 'sentry.metric_alert' | 'user.message';
         /**
          * WhoAmIResponse
          * @description The identity behind the caller's credential.
@@ -7134,7 +6862,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['AgentDefaultsListResponse'];
+                    'application/json': components['schemas']['AgentDefaults'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -7187,7 +6915,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['AgentDefaultResponse'];
+                    'application/json': components['schemas']['AgentDefaults'];
                 };
             };
             /** @description The config is not eligible as a default: its pull request has not merged, or it is disabled. */
@@ -9351,7 +9079,7 @@ interface operations {
                 cursor?: string | null;
                 /** @description A GitHub account id (see GET /v1/integrations/github/members); scopes the list to sessions attributed to that developer. */
                 author_id?: number | null;
-                /** @description "owner/name" (exact) or a bare repo name, matched the same way as on GET /v1/sessions/search. Sessions whose repository is named only inside their agent config — dashboard starts, cron, handoffs — do not match. */
+                /** @description "owner/name" (exact) or a bare repo name, matched the same way as on GET /v1/sessions/search. Sessions whose repository is named only inside their agent config — dashboard starts, cron — do not match. */
                 repo?: string | null;
                 /** @description Keep only sessions whose conversation is still going — live or sleeping — dropping the ones that completed, errored, or were stopped or cancelled. A session parked between turns counts as unfinished. */
                 unfinished?: boolean;
@@ -9423,10 +9151,10 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['StartAgentSessionResponse'];
+                    'application/json': components['schemas']['SessionResponse'];
                 };
             };
-            /** @description The request combines incompatible fields (multiple config sources, idle_start with prompt/input/handoff, a handoff with a config source, or both override forms), or the config override / handoff repo/sha is invalid. */
+            /** @description The request combines incompatible fields (multiple config sources, idle_start with prompt/input, or both override forms), or the config override is invalid. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -9453,7 +9181,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The named agent, template, or handoff parent session does not exist in your account. */
+            /** @description The named agent or template does not exist in your account. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -9555,20 +9283,18 @@ interface operations {
             };
         };
     };
-    sync_agent_session: {
+    get_agent_session: {
         parameters: {
             query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                'application/json': components['schemas']['SyncAgentSessionRequest'];
+            path: {
+                session_id: string;
             };
+            cookie?: never;
         };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
             200: {
@@ -9576,16 +9302,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['SyncAgentSessionResponse'];
-                };
-            };
-            /** @description The transcript payload is empty, or is not valid base64/gzip. */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
+                    'application/json': components['schemas']['SessionResponse'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -9606,8 +9323,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The transcript exceeds the size limit (compressed or decompressed). */
-            413: {
+            /** @description No such session in your account. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -9626,7 +9343,7 @@ interface operations {
             };
         };
     };
-    get_agent_session: {
+    get_agent_session_executions: {
         parameters: {
             query?: never;
             header?: {
@@ -9645,7 +9362,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['SessionResponse'];
+                    'application/json': components['schemas']['SessionExecutionsListResponse'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -9686,7 +9403,7 @@ interface operations {
             };
         };
     };
-    get_agent_session_executions: {
+    export_agent_session: {
         parameters: {
             query?: never;
             header?: {
@@ -9705,7 +9422,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['SessionExecutionsListResponse'];
+                    'application/json': components['schemas']['GetSessionLogResponse'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -9746,7 +9463,7 @@ interface operations {
             };
         };
     };
-    export_agent_session: {
+    send_agent_session_message: {
         parameters: {
             query?: never;
             header?: {
@@ -9757,7 +9474,11 @@ interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['SendSessionMessageRequest'];
+            };
+        };
         responses: {
             /** @description Successful Response */
             200: {
@@ -9765,144 +9486,11 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['GetSessionLogResponse'];
+                    'application/json': components['schemas']['SessionMessageResponse'];
                 };
             };
-            /** @description The bearer token is missing, invalid, or revoked. */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description The credential may not perform this action, or the account is blocked. */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description No such session in your account. */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description Validation Error */
-            422: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['HTTPValidationError'];
-                };
-            };
-        };
-    };
-    get_agent_session_ide: {
-        parameters: {
-            query?: never;
-            header?: {
-                'user-agent'?: string | null;
-            };
-            path: {
-                session_id: string;
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Successful Response */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['GetSessionIdeResponse'];
-                };
-            };
-            /** @description The bearer token is missing, invalid, or revoked. */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description The credential may not perform this action, or the account is blocked. */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description No such session in your account. */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description The session's sandbox is not running; send it a message to wake it first. */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description Validation Error */
-            422: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['HTTPValidationError'];
-                };
-            };
-        };
-    };
-    send_agent_session_message: {
-        parameters: {
-            query?: never;
-            header?: {
-                'user-agent'?: string | null;
-            };
-            path: {
-                session_id: string;
-            };
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                'application/json': components['schemas']['SendSessionMessageRequest'];
-            };
-        };
-        responses: {
-            /** @description Successful Response */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['SessionMessageResponse'];
-                };
-            };
-            /** @description The message is empty. */
-            400: {
+            /** @description The message is empty. */
+            400: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -9937,7 +9525,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The session cannot be messaged: it is closed, non-interactive, laptop-synced, or steered from its triggering surface (mention/react/cron). */
+            /** @description The session cannot be messaged: it is closed, non-interactive, or steered from its triggering surface (mention/react/cron). */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -10017,76 +9605,6 @@ interface operations {
             };
         };
     };
-    get_agent_session_port: {
-        parameters: {
-            query?: never;
-            header?: {
-                'user-agent'?: string | null;
-            };
-            path: {
-                session_id: string;
-                port: number;
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Successful Response */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['GetSessionPortResponse'];
-                };
-            };
-            /** @description The bearer token is missing, invalid, or revoked. */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description The credential may not perform this action, or the account is blocked. */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description No such session in your account, or the port is not a valid TCP port. */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description The session's sandbox is not running; send it a message to wake it first. */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description Validation Error */
-            422: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['HTTPValidationError'];
-                };
-            };
-        };
-    };
     get_agent_session_records: {
         parameters: {
             query?: {
@@ -10176,7 +9694,7 @@ interface operations {
                     'application/json': components['schemas']['SessionResponse'];
                 };
             };
-            /** @description The session is a laptop session (not replayable), the named config does not exist, or the config override is invalid. */
+            /** @description The named config does not exist, or the config override is invalid. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -10245,15 +9763,6 @@ interface operations {
                     'application/json': components['schemas']['SessionResponse'];
                 };
             };
-            /** @description The session runs on a developer laptop and cannot be stopped from the cloud. */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
             /** @description The bearer token is missing, invalid, or revoked. */
             401: {
                 headers: {
@@ -10426,7 +9935,7 @@ interface operations {
 }
 
 /**
- * One server-to-client frame of the Ellipsis session stream protocol v3 (WS /sessions/{id}/stream?protocol=3). Clients MUST ignore frames with unknown `type` values — additive frames are not a protocol break.
+ * One server-to-client frame of the Ellipsis session stream protocol v3 (WS /v1/sessions/{id}/stream?protocol=3). Clients MUST ignore frames with unknown `type` values — additive frames are not a protocol break.
  */
 type SessionStreamFrame = SnapshotFrame | RecordsAppendFrame | SessionFrame | DeltaFrame | HeartbeatFrame | DoneFrame | ErrorFrame;
 type AttributionType = 'github_user' | 'linear_user' | 'slack_user' | 'api_key';
@@ -10434,19 +9943,38 @@ type AttributionType = 'github_user' | 'linear_user' | 'slack_user' | 'api_key';
  * Delivery status of the message.
  */
 type SessionMessageStatus = 'pending' | 'delivered';
+type EffortLevel = 'low' | 'medium' | 'high' | 'xhigh' | 'max';
+/**
+ * What may be done to a resource. Strictly ordered: a grant at one level
+ * includes every level below it (write-only would be a phantom capability —
+ * no real client can create what it cannot read back).
+ */
+type Level = 'read' | 'write' | 'delete';
+type GithubAccountFilter = {
+    exclude?: string[];
+    include?: string[] | boolean;
+} | boolean | string[];
+type IssueAction = 'opened' | 'closed' | 'commented';
+type RepositoryFilter = {
+    exclude?: string[];
+    include?: string[];
+} | string[];
+type LinearIssueAction = 'opened';
+type PullRequestAction = 'opened' | 'pushed' | 'merged' | 'closed' | 'review_submitted' | 'commented';
+type SentryAction = 'issue_alert' | 'metric_alert';
+/**
+ * The surface an @ellipsis mention can come from.
+ */
+type AgentConfigMentionPlatform = 'github' | 'slack' | 'linear';
+/**
+ * How this session's config was chosen.
+ */
+type AgentConfigSource = 'explicit' | 'inline' | 'template' | 'repo_default' | 'account_default' | 'platform_default' | 'trigger' | 'builtin';
 type GithubAccountType = 'User' | 'Organization' | 'Bot' | 'Mannequin';
 /**
  * Where the resolved budget came from.
  */
 type BudgetSource = 'system' | 'account' | 'config' | 'run';
-/**
- * How a session that arrived with no explicit config source resolved its
- * config (documents/eng/DEFAULT_CONFIGS.md §4). Persisted on the session so
- * audit and clients can say "ran under X (repo default)". A session started
- * with an explicit config/config_id/template_id never enters resolution and
- * stores None.
- */
-type DefaultResolution = 'repo_default' | 'account_default' | 'none';
 /**
  * Why a terminal agent session ended — a finer-grained reason than `status`.
  *
@@ -10455,7 +9983,7 @@ type DefaultResolution = 'repo_default' | 'account_default' | 'none';
  * the UI and metrics can tell a budget cutoff apart from a crashed tool call or
  * a deliberate cancellation. It is None until the run reaches a terminal state.
  */
-type SessionExitStatus = 'completed' | 'budget_hit' | 'payment_required' | 'tool_call_failed' | 'lifecycle_hook_failed' | 'missing_repo_access' | 'missing_token_permissions' | 'missing_sandbox_variables' | 'cancelled' | 'interrupted' | 'error' | 'stopped';
+type SessionExitStatus = 'completed' | 'budget_hit' | 'payment_required' | 'tool_call_failed' | 'lifecycle_hook_failed' | 'missing_repo_access' | 'missing_token_permissions' | 'missing_sandbox_variables' | 'blocked' | 'contact_email_required' | 'cancelled' | 'interrupted' | 'error' | 'stopped';
 /**
  * The coding-agent harness the session runs on.
  */
@@ -10467,16 +9995,14 @@ type Harness = 'claude_code' | 'codex';
  *
  * CONTINUATION — a follow-up in the same conversation surface (e.g. a Slack
  * thread reply spawning a fresh session on the same thread).
- * HANDOFF — a session started to take over work from another surface (e.g.
- * laptop → cloud handoff; later phase).
  * RESUME — a conversation re-hosted on a new box after its sandbox was torn
  * down (interactive platform; later phase).
  */
-type ParentKind = 'continuation' | 'handoff' | 'resume';
+type ParentKind = 'continuation' | 'resume';
 /**
  * Why direct prompting is refused. Absent when prompting is allowed.
  */
-type PromptBlockedReason = 'mention_surface' | 'ephemeral_trigger' | 'non_interactive' | 'harness_single_turn' | 'closed' | 'laptop';
+type PromptBlockedReason = 'mention_surface' | 'ephemeral_trigger' | 'non_interactive' | 'harness_single_turn' | 'closed';
 /**
  * Lifecycle of a keyed (multi-turn) session — the durable conversation.
  * Distinct from SessionStatus, which is per-execution (one turn's run) and
@@ -10486,9 +10012,9 @@ type PromptBlockedReason = 'mention_surface' | 'ephemeral_trigger' | 'non_intera
  */
 type SessionState = 'idle' | 'running' | 'closed';
 /**
- * Where the session came from (e.g. react, manual, api, cli, mention, cron, laptop).
+ * Where the session came from (e.g. react, manual, api, cli, mention, cron).
  */
-type SessionSource = 'react' | 'manual' | 'api' | 'cli' | 'mention' | 'cron' | 'laptop';
+type SessionSource = 'react' | 'manual' | 'api' | 'cli' | 'mention' | 'cron';
 /**
  * Execution status of the session.
  */
@@ -10501,7 +10027,6 @@ type RunStatus = 'scheduled' | 'starting' | 'working' | 'waiting' | 'done' | 'fa
  * The durable conversation axis (backs the surfaced `session` field).
  */
 type SessionLiveness = 'alive' | 'sleeping' | 'closed';
-type WebhookType = 'github.issue' | 'github.issue_comment' | 'github.push' | 'github.pull_request' | 'github.pull_request_comment' | 'github.pull_request_review' | 'github.pull_request_review_comment' | 'slack.app_mention' | 'slack.message' | 'slack.channel_created' | 'linear.issue' | 'linear.issue_comment' | 'sentry.event_alert' | 'sentry.metric_alert' | 'user.message';
 /**
  * The first frame after the stream connects: the session plus its open
  * inbox. Records always arrive separately via records_append frames.
@@ -10573,22 +10098,9 @@ interface SessionMessage {
  * The session's current state.
  */
 interface Session {
+    agent: SessionAgent;
     attribution: SessionAttribution;
     budget: SessionBudget;
-    /**
-     * Version of the client that started the session, if reported.
-     */
-    client_version: string | null;
-    /**
-     * Identifier of the saved agent config the session ran on, if any.
-     */
-    config_id: string | null;
-    /**
-     * The partial-config diff applied for this run; null when the config was unmodified.
-     */
-    config_override: {
-        [k: string]: unknown;
-    } | null;
     /**
      * The "owner/name" repository context the session was started in, if any.
      */
@@ -10598,10 +10110,6 @@ interface Session {
      * When the session was created.
      */
     created_at: string;
-    /**
-     * How the session's config was resolved from the account's defaults, when no explicit config was given.
-     */
-    default_resolution: DefaultResolution | null;
     /**
      * How the session ended; null until it is terminal.
      */
@@ -10619,10 +10127,6 @@ interface Session {
      * When the session last received a message.
      */
     last_message_at: string | null;
-    /**
-     * A live summary of the session's progress while it runs.
-     */
-    live_summary: string | null;
     /**
      * Caller-supplied metadata key-value pairs.
      */
@@ -10639,14 +10143,6 @@ interface Session {
      */
     prompt: string | null;
     prompting: SessionPrompting;
-    /**
-     * Identifier of the sandbox the session runs in, if any.
-     */
-    sandbox_id: string | null;
-    /**
-     * Key identifying the durable conversation this session belongs to, or null for single-shot sessions.
-     */
-    session_key: string | null;
     /**
      * Lifecycle state of the durable conversation, or null for sessions without one.
      */
@@ -10659,7 +10155,11 @@ interface Session {
     status_reason: string | null;
     stopped: SessionStopped;
     /**
-     * The public status projection; null for laptop-synced sessions.
+     * The latest live summary of the session's progress while it runs, and when it was generated.
+     */
+    summary: SessionSummary | null;
+    /**
+     * The public status projection; null on list/search responses, which do not derive it.
      */
     surface: SessionSurface | null;
     tokens: SessionTokens;
@@ -10667,14 +10167,434 @@ interface Session {
      * When the session was last updated.
      */
     updated_at: string;
+}
+/**
+ * The agent that ran: the config the session executed, where that config came from, and any override merged into it.
+ */
+interface SessionAgent {
+    config: AgentConfig;
     /**
-     * Identifier of the webhook event that triggered the session, if any.
+     * Identifier of the saved config this session's snapshot was taken from. Null for inline, platform-default, and built-in configs. Points at the config as it exists now, which may have changed since.
      */
-    webhook_id: string | null;
+    config_id: string | null;
     /**
-     * Type of the webhook event that triggered the session, if any.
+     * The partial-config override merged into `config` for this session, or null when the config ran unmodified. `config` is the merged result; this is the diff.
      */
-    webhook_type: WebhookType | null;
+    override: {
+        [k: string]: unknown;
+    } | null;
+    source: AgentConfigSource;
+}
+/**
+ * The agent config the session actually ran, frozen when the session was created.
+ */
+interface AgentConfig {
+    budget: AgentConfigBudget;
+    claude: AgentConfigClaude;
+    codex: AgentConfigCodex | null;
+    ellipsis: AgentConfigEllipsis;
+    environment: AgentConfigEnvironment;
+    input: AgentConfigInput | null;
+    llm: AgentConfigLlm;
+    mcp_servers: (string | AgentConfigMcpServer)[];
+    output: AgentConfigOutput | null;
+    permissions: AgentConfigPermissions;
+    skills: AgentConfigSkill[];
+    trigger: (AgentConfigCronTrigger | AgentConfigReactTrigger | AgentConfigMentionTrigger) | null;
+}
+interface AgentConfigBudget {
+    day: number | null;
+    month: number | null;
+    session: number | null;
+    week: number | null;
+}
+interface AgentConfigClaude {
+    effort: EffortLevel | null;
+    fallback_model: string | null;
+    max_turns: number | null;
+    model: string;
+    settings: AgentConfigSettingsRef | null;
+    system: string | AgentConfigSystemFileRef | (string | AgentConfigSystemFileRef)[];
+}
+/**
+ * A config-declared Claude Code settings.json, resolved at run start and
+ * passed to `claude --settings <path>`. That is the CLI settings tier — BELOW
+ * Ellipsis's managed-settings.json floor — so it customizes behavior (model
+ * permissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a
+ * security setting. Lets a team point the cloud agent at the same settings file
+ * they already use with Claude Code locally instead of re-encoding it as YAML.
+ */
+interface AgentConfigSettingsRef {
+    path: string;
+    repository: AgentConfigRepository | null;
+}
+interface AgentConfigRepository {
+    name: string;
+    owner: string | null;
+    ref: string | null;
+}
+interface AgentConfigSystemFileRef {
+    file: string;
+    repository: AgentConfigRepository | null;
+}
+/**
+ * The `codex:` block — run this agent on OpenAI's Codex CLI instead of
+ * Claude Code. Declaring the block at all is what selects the harness
+ * (`AgentConfig.harness`).
+ *
+ * Deliberately a small subset of `AgentConfigClaude`: the fields omitted here
+ * are ones Codex has no equivalent for (`effort`, `fallback_model`,
+ * `settings`) or that the platform does not yet wire through for this harness
+ * (`max_turns`, `skills`, MCP servers). They are omitted rather than
+ * accepted-and-ignored, because `StrictConfigModel` forbids extra keys — so a
+ * config that sets one fails loudly at parse time instead of silently not doing
+ * it. The budget still bounds a run regardless.
+ */
+interface AgentConfigCodex {
+    model: string;
+    system: string | AgentConfigSystemFileRef | (string | AgentConfigSystemFileRef)[];
+}
+/**
+ * The Ellipsis product namespace for a config file: which schema this is
+ * (`version`), the human-facing identity (`name`/`description`), freeform
+ * organizational `metadata`, whether the agent is `enabled`, and the
+ * human-access flag `interactive`. The presence of a top-level `ellipsis:`
+ * mapping is what marks a YAML file as an Ellipsis agent config (vs arbitrary
+ * YAML that merely lives under a config directory) — see
+ * `yaml_is_ellipsis_config`.
+ *
+ * `enabled`/`interactive` are agent behavior, not freeform metadata, so they
+ * stay inside the config `sha` (only `metadata` is sha-excluded).
+ * `interactive` lets a human `agent session connect` to a live session (CLI
+ * relay). It does not decide whether a session is ephemeral or durable — that
+ * is the trigger's job.
+ */
+interface AgentConfigEllipsis {
+    description: string | null;
+    enabled: boolean;
+    interactive: boolean;
+    metadata: AgentConfigMetadata;
+    name: string | null;
+    version: string;
+}
+interface AgentConfigMetadata {
+    annotations: {
+        [k: string]: string;
+    };
+    labels: string[];
+}
+/**
+ * Everything about the environment (the sandbox) the agent runs in: which
+ * `repositories` are cloned into it, which environment `variables` it gets,
+ * its `compute` sizing, how its `image` is customized, and lifecycle `hooks`.
+ * What the agent may *do* from that environment is the top-level
+ * `permissions:` block, not this one.
+ *
+ * Each `variables` entry names a variable to inject; with an inline `value` it
+ * is hardcoded, without one it is resolved from the account's sandbox-secrets
+ * store. Only the named variables reach this agent; the rest of the account's
+ * stored variables never do. This is how a config brings in the config and
+ * credentials a custom CLI needs.
+ */
+interface AgentConfigEnvironment {
+    compute: AgentConfigCompute;
+    hooks: AgentConfigEnvironmentHooks;
+    image: AgentConfigEnvironmentImage;
+    repositories: AgentConfigRepository[];
+    variables: AgentConfigEnvironmentVariable[];
+}
+/**
+ * Sandbox compute sizing. Every field is optional; None inherits the
+ * platform default (1 vCPU / 4096 MiB / 3600s — see DEFAULT_MODAL_* in
+ * models/ellipsis/sandboxes/sandbox.py). A resolved value outside the platform
+ * bounds fails validation loudly (a sync error on the config) rather than
+ * being clamped silently.
+ *
+ * `memory` and `timeout` each accept a shorthand string ("8GB", "30m") or an
+ * explicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /
+ * `timeout_seconds` properties resolve either form to the canonical integer
+ * the sandbox driver consumes.
+ *
+ * `timeout` is the max wall-clock the agent may run before the sandbox is
+ * killed, capped at 1h (MAX_SANDBOX_TIMEOUT_SECONDS — equal to the default, so
+ * today the knob only shortens a session; the cap matches the 1-hour validity
+ * of the sandbox's GitHub token). The worker's lease/visibility heartbeat
+ * ceiling is derived from that cap, so a run at the max stays owned by its
+ * worker for its whole life.
+ *
+ * Compute is billed on the requested allocation over the sandbox's
+ * wall-clock lifetime, so a bigger/longer box costs proportionally more.
+ */
+interface AgentConfigCompute {
+    cpu: number | null;
+    memory: string | AgentConfigMemorySize | null;
+    timeout: string | AgentConfigDuration | null;
+}
+/**
+ * A memory size as explicit units, summed (binary: 1GB = 1024MB = 1024MiB).
+ * Set any of `gb`/`mb` (at least one). The alternative to the `8GB`-style
+ * shorthand string.
+ */
+interface AgentConfigMemorySize {
+    gb: number | null;
+    mb: number | null;
+}
+/**
+ * A duration as explicit units, summed. Set any of `hours`/`minutes`/
+ * `seconds` (at least one). The alternative to the `30m`-style shorthand
+ * string wherever a duration is accepted.
+ */
+interface AgentConfigDuration {
+    hours: number | null;
+    minutes: number | null;
+    seconds: number | null;
+}
+/**
+ * Shell scripts run at points in the sandbox lifecycle, each as the sandbox
+ * user with the sandbox's environment variables available. A non-zero exit
+ * fails the run (exit_status = LIFECYCLE_HOOK_FAILED) and is not retried.
+ *
+ * `post_start` runs after the container starts, before any repo is cloned —
+ * repo-independent setup (authenticate a CLI, e.g. `doppler setup`). On Modal
+ * the repo is baked into the image so it is incidentally present, but
+ * `post_start` must not depend on repo contents (that's `post_clone`).
+ *
+ * `post_clone` runs after all repos are cloned/checked out, before the agent —
+ * repo-dependent setup (`pip install -r requirements.txt`, codegen).
+ *
+ * Hooks run on every run and their output is never cached. A dependency
+ * install whose result should be reused across runs belongs in `image.setup`
+ * (baked into the cached image) instead; keep hooks for per-run work — e.g.
+ * anything that touches run-scoped credentials.
+ */
+interface AgentConfigEnvironmentHooks {
+    post_clone: string | null;
+    post_start: string | null;
+}
+/**
+ * How to customize the container image the agent runs in. You
+ * contribute appended layers (`dockerfile_append`) and a build-time script
+ * (`setup`) only — Ellipsis owns FROM / base tooling / entrypoint / user.
+ * Today only inline bodies are supported; a file reference (resolved at the
+ * run's SHA) will come later.
+ *
+ * The split: `dockerfile_append` runs when the image is assembled, before any
+ * repo exists — toolchain installs (a package manager binary, apt packages).
+ * `setup` runs at image-build time *after* the configured repositories are
+ * checked out, and its output is captured by the filesystem snapshot that
+ * becomes the cached image — dependency installs (`poetry install`,
+ * `npm install`), so later runs start with deps already on disk. Neither runs
+ * per run; that's `hooks.post_start` / `hooks.post_clone`.
+ */
+interface AgentConfigEnvironmentImage {
+    dockerfile_append: string | null;
+    setup: string | null;
+}
+/**
+ * One environment variable injected into the agent's sandbox.
+ *
+ * `value`, when set, is a literal injected as-is — use it for non-secret
+ * config (LOG_LEVEL, an API base URL). When `value` is omitted the value is
+ * resolved at run time from the account's sandbox-secrets store (dashboard
+ * / `PUT /v1/secrets`) by `name`, so a secret can be injected without
+ * ever putting it in the config file. Either way the variable only reaches
+ * agents that name it.
+ */
+interface AgentConfigEnvironmentVariable {
+    name: string;
+    value: string | null;
+}
+/**
+ * The typed input contract: what goes INTO a session (the trigger is
+ * when it happens; this is what goes in).
+ *
+ * `json_schema` types the payload a caller-started session takes
+ * (`POST /v1/sessions` `input`, validated at the door; required when
+ * declared). It is illegal on a react-triggered agent — react payloads are
+ * platform-shaped (the published surface field sets), not caller-shaped.
+ *
+ * `message` is the initial-message template: exact `{{path}}` substitution
+ * over the caller payload (or, on a react agent, over the surface's
+ * published fields), no conditionals/loops/filters. Refs are validated at
+ * deploy time against the governing field set (see AgentConfig's
+ * `_check_input`).
+ */
+interface AgentConfigInput {
+    json_schema: {
+        [k: string]: unknown;
+    } | null;
+    message: string | null;
+}
+/**
+ * Where this agent's completions go.
+ *
+ * Defaults to Ellipsis's own LLM proxy (our Anthropic/Bedrock account, or the
+ * account-wide BYO provider if one is enabled). Setting `proxy` to the id of a
+ * proxy registered on the models settings page routes THIS agent's
+ * completions through that gateway instead.
+ *
+ * Opt-in per agent by design: registering a proxy does not silently move any
+ * existing agent's traffic. The id is account-scoped, so naming another
+ * account's id is a terminal config error, not a route.
+ */
+interface AgentConfigLlm {
+    proxy: string | null;
+}
+/**
+ * One built-in MCP server this agent opts into by name (`linear`/`slack`).
+ * This is a name reference over the connected built-in set, NOT a custom-server
+ * definition — there is no command/url/headers shape (that was the old,
+ * removed field, and Ellipsis does not support bring-your-own MCP servers).
+ * It only matters when the named integration is set to `opt_in` inclusion; an
+ * integration in the default `all_sessions` mode is added regardless.
+ */
+interface AgentConfigMcpServer {
+    name: string;
+}
+/**
+ * The typed output contract: the JSON Schema the agent must exit through
+ * (the StructuredOutput exit tool). Read back via
+ * GET /v1/sessions/{id}/output.
+ */
+interface AgentConfigOutput {
+    json_schema: {
+        [k: string]: unknown;
+    };
+}
+/**
+ * What the agent is allowed to touch, per credential the platform mints
+ * into its sandbox. Distinct from `environment:`, which is where the agent
+ * runs; this is what it may do from there.
+ *
+ * `ellipsis` scopes the sandbox's Ellipsis API token
+ * (`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates
+ * with). `true` / the string `all` (the default) grant the full sandbox
+ * ceiling — everything a sandbox token can ever do. A map narrows it per
+ * resource (see `AgentConfigEllipsisPermissions`); the minted token carries
+ * the intersection, so a config can only ever reduce access. `false` fails
+ * validation — an agent with no API token cannot report its own progress.
+ *
+ * `github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) —
+ * see `AgentConfigGithubPermissions`. GitHub enforces it at mint time.
+ */
+interface AgentConfigPermissions {
+    ellipsis: (true | 'all') | AgentConfigEllipsisPermissions;
+    github: AgentConfigGithubPermissions;
+}
+/**
+ * `permissions.ellipsis` as a map: resource → level | grant | list of
+ * grants. Levels are hierarchical (read < write < delete), so `write`
+ * includes `read`. An unlisted resource is denied. The whole block is
+ * intersected with the platform's sandbox ceiling at token mint — it can
+ * narrow what a sandbox token may do, never exceed it.
+ */
+interface AgentConfigEllipsisPermissions {
+    [k: string]: Level | EllipsisGrant | (Level | EllipsisGrant)[];
+}
+/**
+ * One grant entry: a level, optionally narrowed to instances whose
+ * natural key (a file's name, a memory's path, a secret's name, a config's
+ * name, a session's id) matches any of the `match` globs.
+ */
+interface EllipsisGrant {
+    level: Level;
+    match: string[] | null;
+}
+/**
+ * The agent's GitHub access: the scope of the installation token minted for
+ * its sandbox — the credential `git`, `gh`, and the GitHub MCP server
+ * authenticate with.
+ *
+ * By default the token carries the installation's full permissions on all of
+ * the installation's repositories. `permissions` narrows what it may do:
+ * the string `read_only` grants read access to contents, issues, metadata and
+ * pull requests; a map requests explicit levels per GitHub App permission
+ * scope (e.g. `{contents: read, pull_requests: write}`) and may never exceed
+ * what the installation granted. `repositories` scopes the token to exactly
+ * the listed repos, by name (they must belong to the installation).
+ *
+ * Restriction is enforced by GitHub, not by Ellipsis: the token itself is
+ * minted with the reduced scope, so nothing running in the sandbox can
+ * exceed it.
+ */
+interface AgentConfigGithubPermissions {
+    permissions: 'read_only' | {
+        [k: string]: string;
+    } | null;
+    repositories: string[] | null;
+}
+/**
+ * One config-declared Claude Code skill: a repository directory containing
+ * a SKILL.md, resolved at run start and installed at the sandbox's personal
+ * skill level (`~/.claude/skills/<basename(path)>/`). This is how a config
+ * brings in skills its cloned repositories don't provide — cross-repo refs
+ * (an org-wide skills repo), public third-party repos, and repo-less runs.
+ * Skills under a cloned repo's own `.claude/skills/` load by themselves and
+ * don't need an entry here.
+ */
+interface AgentConfigSkill {
+    path: string;
+    repository: AgentConfigRepository | null;
+}
+interface AgentConfigCronTrigger {
+    schedule: string;
+    type: 'cron';
+}
+interface AgentConfigReactTrigger {
+    issue: ReactIssue | null;
+    linear_issue: ReactLinearIssue | null;
+    pull_request: ReactPullRequest | null;
+    push: ReactPush | null;
+    sentry: ReactSentry | null;
+    slack_channel: ReactSlackChannel | null;
+    type: 'react';
+}
+interface ReactIssue {
+    for: GithubAccountSelector;
+    labels: string[];
+    on: IssueAction[];
+    repositories: RepositoryFilter;
+}
+/**
+ * A selector of GitHub accounts — the `for:` audience gate on react
+ * surfaces and code review pipelines, classified on the stable entity author
+ * (the pusher for `push`, the PR author for a review). `users` selects human
+ * accounts, `bots` selects bot accounts; each is a `GithubAccountFilter`
+ * (include minus exclude, with bare bool/list shorthand).
+ */
+interface GithubAccountSelector {
+    bots: GithubAccountFilter;
+    users: GithubAccountFilter;
+}
+interface ReactLinearIssue {
+    for: GithubAccountSelector;
+    on: LinearIssueAction[];
+}
+interface ReactPullRequest {
+    base: string[];
+    draft: boolean | null;
+    for: GithubAccountSelector;
+    head: string[];
+    labels: string[];
+    on: PullRequestAction[];
+    paths: string[];
+    repositories: RepositoryFilter;
+}
+interface ReactPush {
+    branch: string[];
+    for: GithubAccountSelector;
+    paths: string[];
+    repositories: RepositoryFilter;
+}
+interface ReactSentry {
+    on: SentryAction[];
+    projects: string[];
+}
+interface ReactSlackChannel {
+}
+interface AgentConfigMentionTrigger {
+    platforms: AgentConfigMentionPlatform[];
+    type: 'mention';
 }
 /**
  * The principal this session is attributed to.
@@ -10797,7 +10717,21 @@ interface SessionStopped {
     by_user: GithubAccountSnippet | null;
 }
 /**
- * The three fields we expose. All `None` for an un-keyed (laptop) session.
+ * A live one-line summary of what the session is working on, refreshed
+ * every few steps while it runs.
+ */
+interface SessionSummary {
+    /**
+     * When this summary line was generated. Null on summaries written before generation time was tracked.
+     */
+    created_at: string | null;
+    /**
+     * One-line description of what the session is working on.
+     */
+    description: string;
+}
+/**
+ * The three fields we expose.
  *
  * `use_enum_values=True` (from CustomBaseModel) stores the members as their
  * string values, so this serializes to `{"session": "alive", "run": "waiting",
@@ -10954,22 +10888,9 @@ interface SessionFrame {
  * The session's current state.
  */
 interface Session1 {
+    agent: SessionAgent;
     attribution: SessionAttribution;
     budget: SessionBudget;
-    /**
-     * Version of the client that started the session, if reported.
-     */
-    client_version: string | null;
-    /**
-     * Identifier of the saved agent config the session ran on, if any.
-     */
-    config_id: string | null;
-    /**
-     * The partial-config diff applied for this run; null when the config was unmodified.
-     */
-    config_override: {
-        [k: string]: unknown;
-    } | null;
     /**
      * The "owner/name" repository context the session was started in, if any.
      */
@@ -10979,10 +10900,6 @@ interface Session1 {
      * When the session was created.
      */
     created_at: string;
-    /**
-     * How the session's config was resolved from the account's defaults, when no explicit config was given.
-     */
-    default_resolution: DefaultResolution | null;
     /**
      * How the session ended; null until it is terminal.
      */
@@ -11000,10 +10917,6 @@ interface Session1 {
      * When the session last received a message.
      */
     last_message_at: string | null;
-    /**
-     * A live summary of the session's progress while it runs.
-     */
-    live_summary: string | null;
     /**
      * Caller-supplied metadata key-value pairs.
      */
@@ -11020,14 +10933,6 @@ interface Session1 {
      */
     prompt: string | null;
     prompting: SessionPrompting;
-    /**
-     * Identifier of the sandbox the session runs in, if any.
-     */
-    sandbox_id: string | null;
-    /**
-     * Key identifying the durable conversation this session belongs to, or null for single-shot sessions.
-     */
-    session_key: string | null;
     /**
      * Lifecycle state of the durable conversation, or null for sessions without one.
      */
@@ -11040,7 +10945,11 @@ interface Session1 {
     status_reason: string | null;
     stopped: SessionStopped;
     /**
-     * The public status projection; null for laptop-synced sessions.
+     * The latest live summary of the session's progress while it runs, and when it was generated.
+     */
+    summary: SessionSummary | null;
+    /**
+     * The public status projection; null on list/search responses, which do not derive it.
      */
     surface: SessionSurface | null;
     tokens: SessionTokens;
@@ -11048,14 +10957,6 @@ interface Session1 {
      * When the session was last updated.
      */
     updated_at: string;
-    /**
-     * Identifier of the webhook event that triggered the session, if any.
-     */
-    webhook_id: string | null;
-    /**
-     * Type of the webhook event that triggered the session, if any.
-     */
-    webhook_type: WebhookType | null;
 }
 /**
  * Fire-and-forget partial assistant output for the current response.
@@ -11136,4 +11037,4 @@ type ReviewRequester = components['schemas']['ReviewRequester'];
 type ReviewFinding = components['schemas']['ReviewFinding'];
 type Finding = ReviewFinding;
 
-export type { AttributionType as A, BudgetSource as B, CreateReviewRequest as C, DefaultResolution as D, ErrorFrame as E, Finding as F, GithubAccountSnippet as G, Harness as H, SessionPr as I, SessionPrompting as J, SessionRecord as K, SessionRecordsListResponse as L, SessionResponse as M, SessionSource as N, SessionState as O, ParentKind as P, SessionStatus as Q, RecordsAppendFrame as R, SendSessionMessageRequest as S, SessionStreamFrame as T, SessionSurface as U, SessionsListResponse as V, SnapshotFrame as W, StreamFrame as X, TokensInfo as Y, paths as Z, DeltaFrame as a, DoneFrame as b, components as c, GithubAccountType as d, HeartbeatFrame as e, PromptBlockedReason as f, ResolvedReviewScope as g, Review as h, ReviewConfiguration as i, ReviewCounters as j, ReviewFinding as k, ReviewRequester as l, ReviewScope as m, ReviewScopeKind as n, ReviewStage as o, ReviewedCommit as p, ReviewsListResponse as q, Session as r, SessionExecution as s, SessionExecutionsListResponse as t, SessionExitStatus as u, SessionFrame as v, SessionLiveness as w, SessionMessage as x, SessionMessageResponse as y, SessionMessageStatus as z };
+export type { AgentConfigSource as A, BudgetSource as B, CreateReviewRequest as C, DeltaFrame as D, ErrorFrame as E, Finding as F, GithubAccountSnippet as G, Harness as H, SessionPr as I, SessionPrompting as J, SessionRecord as K, SessionRecordsListResponse as L, SessionResponse as M, SessionSource as N, SessionState as O, ParentKind as P, SessionStatus as Q, RecordsAppendFrame as R, SendSessionMessageRequest as S, SessionStreamFrame as T, SessionSurface as U, SessionsListResponse as V, SnapshotFrame as W, StreamFrame as X, TokensInfo as Y, paths as Z, AttributionType as a, DoneFrame as b, components as c, GithubAccountType as d, HeartbeatFrame as e, PromptBlockedReason as f, ResolvedReviewScope as g, Review as h, ReviewConfiguration as i, ReviewCounters as j, ReviewFinding as k, ReviewRequester as l, ReviewScope as m, ReviewScopeKind as n, ReviewStage as o, ReviewedCommit as p, ReviewsListResponse as q, Session as r, SessionExecution as s, SessionExecutionsListResponse as t, SessionExitStatus as u, SessionFrame as v, SessionLiveness as w, SessionMessage as x, SessionMessageResponse as y, SessionMessageStatus as z };