@ellipsis-dev/sdk 0.11.0 → 0.13.0

package/schema/frames.schema.json

@@ -1,5 +1,1247 @@
 {
   "$defs": {
+    "AgentConfig": {
+      "additionalProperties": false,
+      "properties": {
+        "budget": {
+          "$ref": "#/$defs/AgentConfigBudget",
+          "default": {
+            "day": null,
+            "month": null,
+            "session": null,
+            "week": null
+          }
+        },
+        "claude": {
+          "$ref": "#/$defs/AgentConfigClaude",
+          "default": {
+            "effort": null,
+            "fallback_model": null,
+            "max_turns": null,
+            "model": "claude-opus-5",
+            "settings": null,
+            "system": ""
+          }
+        },
+        "codex": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/AgentConfigCodex"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "ellipsis": {
+          "$ref": "#/$defs/AgentConfigEllipsis",
+          "default": {
+            "description": null,
+            "enabled": true,
+            "interactive": true,
+            "metadata": {
+              "annotations": {},
+              "labels": []
+            },
+            "name": null,
+            "version": "v1"
+          }
+        },
+        "environment": {
+          "$ref": "#/$defs/AgentConfigEnvironment",
+          "default": {
+            "compute": {
+              "cpu": null,
+              "memory": null,
+              "timeout": null
+            },
+            "hooks": {
+              "post_clone": null,
+              "post_start": null
+            },
+            "image": {
+              "dockerfile_append": null,
+              "setup": null
+            },
+            "repositories": [],
+            "variables": []
+          }
+        },
+        "input": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/AgentConfigInput"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "llm": {
+          "$ref": "#/$defs/AgentConfigLlm",
+          "default": {
+            "proxy": null
+          }
+        },
+        "mcp_servers": {
+          "default": [],
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "$ref": "#/$defs/AgentConfigMcpServer"
+              }
+            ]
+          },
+          "title": "Mcp Servers",
+          "type": "array"
+        },
+        "output": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/AgentConfigOutput"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "permissions": {
+          "$ref": "#/$defs/AgentConfigPermissions",
+          "default": {
+            "ellipsis": true,
+            "github": {
+              "permissions": null,
+              "repositories": null
+            }
+          }
+        },
+        "skills": {
+          "default": [],
+          "items": {
+            "$ref": "#/$defs/AgentConfigSkill"
+          },
+          "title": "Skills",
+          "type": "array"
+        },
+        "trigger": {
+          "anyOf": [
+            {
+              "discriminator": {
+                "mapping": {
+                  "cron": "#/$defs/AgentConfigCronTrigger",
+                  "mention": "#/$defs/AgentConfigMentionTrigger",
+                  "react": "#/$defs/AgentConfigReactTrigger"
+                },
+                "propertyName": "type"
+              },
+              "oneOf": [
+                {
+                  "$ref": "#/$defs/AgentConfigCronTrigger"
+                },
+                {
+                  "$ref": "#/$defs/AgentConfigReactTrigger"
+                },
+                {
+                  "$ref": "#/$defs/AgentConfigMentionTrigger"
+                }
+              ]
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Trigger"
+        }
+      },
+      "required": [
+        "budget",
+        "claude",
+        "codex",
+        "ellipsis",
+        "environment",
+        "input",
+        "llm",
+        "mcp_servers",
+        "output",
+        "permissions",
+        "skills",
+        "trigger"
+      ],
+      "title": "AgentConfig",
+      "type": "object"
+    },
+    "AgentConfigBudget": {
+      "additionalProperties": false,
+      "properties": {
+        "day": {
+          "anyOf": [
+            {
+              "type": "number"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Day"
+        },
+        "month": {
+          "anyOf": [
+            {
+              "type": "number"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Month"
+        },
+        "session": {
+          "anyOf": [
+            {
+              "type": "number"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Session"
+        },
+        "week": {
+          "anyOf": [
+            {
+              "type": "number"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Week"
+        }
+      },
+      "required": [
+        "day",
+        "month",
+        "session",
+        "week"
+      ],
+      "title": "AgentConfigBudget",
+      "type": "object"
+    },
+    "AgentConfigClaude": {
+      "additionalProperties": false,
+      "properties": {
+        "effort": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/EffortLevel"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "fallback_model": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Fallback Model"
+        },
+        "max_turns": {
+          "anyOf": [
+            {
+              "exclusiveMinimum": 0,
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Max Turns"
+        },
+        "model": {
+          "default": "claude-opus-5",
+          "title": "Model",
+          "type": "string"
+        },
+        "settings": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/AgentConfigSettingsRef"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "system": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "$ref": "#/$defs/AgentConfigSystemFileRef"
+            },
+            {
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "$ref": "#/$defs/AgentConfigSystemFileRef"
+                  }
+                ]
+              },
+              "type": "array"
+            }
+          ],
+          "default": "",
+          "title": "System"
+        }
+      },
+      "required": [
+        "effort",
+        "fallback_model",
+        "max_turns",
+        "model",
+        "settings",
+        "system"
+      ],
+      "title": "AgentConfigClaude",
+      "type": "object"
+    },
+    "AgentConfigCodex": {
+      "additionalProperties": false,
+      "description": "The `codex:` block \u2014 run this agent on OpenAI's Codex CLI instead of\nClaude Code. Declaring the block at all is what selects the harness\n(`AgentConfig.harness`).\n\nDeliberately a small subset of `AgentConfigClaude`: the fields omitted here\nare ones Codex has no equivalent for (`effort`, `fallback_model`,\n`settings`) or that the platform does not yet wire through for this harness\n(`max_turns`, `skills`, MCP servers). They are omitted rather than\naccepted-and-ignored, because `StrictConfigModel` forbids extra keys \u2014 so a\nconfig that sets one fails loudly at parse time instead of silently not doing\nit. The budget still bounds a run regardless.",
+      "properties": {
+        "model": {
+          "default": "gpt-5.6-terra",
+          "title": "Model",
+          "type": "string"
+        },
+        "system": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "$ref": "#/$defs/AgentConfigSystemFileRef"
+            },
+            {
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "$ref": "#/$defs/AgentConfigSystemFileRef"
+                  }
+                ]
+              },
+              "type": "array"
+            }
+          ],
+          "default": "",
+          "title": "System"
+        }
+      },
+      "required": [
+        "model",
+        "system"
+      ],
+      "title": "AgentConfigCodex",
+      "type": "object"
+    },
+    "AgentConfigCompute": {
+      "additionalProperties": false,
+      "description": "Sandbox compute sizing. Every field is optional; None inherits the\nplatform default (1 vCPU / 4096 MiB / 3600s \u2014 see DEFAULT_MODAL_* in\nmodels/ellipsis/sandboxes/sandbox.py). A resolved value outside the platform\nbounds fails validation loudly (a sync error on the config) rather than\nbeing clamped silently.\n\n`memory` and `timeout` each accept a shorthand string (\"8GB\", \"30m\") or an\nexplicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /\n`timeout_seconds` properties resolve either form to the canonical integer\nthe sandbox driver consumes.\n\n`timeout` is the max wall-clock the agent may run before the sandbox is\nkilled, capped at 1h (MAX_SANDBOX_TIMEOUT_SECONDS \u2014 equal to the default, so\ntoday the knob only shortens a session; the cap matches the 1-hour validity\nof the sandbox's GitHub token). The worker's lease/visibility heartbeat\nceiling is derived from that cap, so a run at the max stays owned by its\nworker for its whole life.\n\nCompute is billed on the requested allocation over the sandbox's\nwall-clock lifetime, so a bigger/longer box costs proportionally more.",
+      "properties": {
+        "cpu": {
+          "anyOf": [
+            {
+              "maximum": 16,
+              "minimum": 0.125,
+              "type": "number"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Cpu"
+        },
+        "memory": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "$ref": "#/$defs/AgentConfigMemorySize"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Memory"
+        },
+        "timeout": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "$ref": "#/$defs/AgentConfigDuration"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Timeout"
+        }
+      },
+      "required": [
+        "cpu",
+        "memory",
+        "timeout"
+      ],
+      "title": "AgentConfigCompute",
+      "type": "object"
+    },
+    "AgentConfigCronTrigger": {
+      "additionalProperties": false,
+      "properties": {
+        "schedule": {
+          "title": "Schedule",
+          "type": "string"
+        },
+        "type": {
+          "const": "cron",
+          "default": "cron",
+          "title": "Type",
+          "type": "string"
+        }
+      },
+      "required": [
+        "schedule",
+        "type"
+      ],
+      "title": "AgentConfigCronTrigger",
+      "type": "object"
+    },
+    "AgentConfigDuration": {
+      "additionalProperties": false,
+      "description": "A duration as explicit units, summed. Set any of `hours`/`minutes`/\n`seconds` (at least one). The alternative to the `30m`-style shorthand\nstring wherever a duration is accepted.",
+      "properties": {
+        "hours": {
+          "anyOf": [
+            {
+              "minimum": 0,
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Hours"
+        },
+        "minutes": {
+          "anyOf": [
+            {
+              "minimum": 0,
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Minutes"
+        },
+        "seconds": {
+          "anyOf": [
+            {
+              "minimum": 0,
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Seconds"
+        }
+      },
+      "required": [
+        "hours",
+        "minutes",
+        "seconds"
+      ],
+      "title": "AgentConfigDuration",
+      "type": "object"
+    },
+    "AgentConfigEllipsis": {
+      "additionalProperties": false,
+      "description": "The Ellipsis product namespace for a config file: which schema this is\n(`version`), the human-facing identity (`name`/`description`), freeform\norganizational `metadata`, whether the agent is `enabled`, and the\nhuman-access flag `interactive`. The presence of a top-level `ellipsis:`\nmapping is what marks a YAML file as an Ellipsis agent config (vs arbitrary\nYAML that merely lives under a config directory) \u2014 see\n`yaml_is_ellipsis_config`.\n\n`enabled`/`interactive` are agent behavior, not freeform metadata, so they\nstay inside the config `sha` (only `metadata` is sha-excluded).\n`interactive` lets a human `agent session connect` to a live session (CLI\nrelay). It does not decide whether a session is ephemeral or durable \u2014 that\nis the trigger's job.",
+      "properties": {
+        "description": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Description"
+        },
+        "enabled": {
+          "default": true,
+          "title": "Enabled",
+          "type": "boolean"
+        },
+        "interactive": {
+          "default": true,
+          "title": "Interactive",
+          "type": "boolean"
+        },
+        "metadata": {
+          "$ref": "#/$defs/AgentConfigMetadata",
+          "default": {
+            "annotations": {},
+            "labels": []
+          }
+        },
+        "name": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Name"
+        },
+        "version": {
+          "default": "v1",
+          "title": "Version",
+          "type": "string"
+        }
+      },
+      "required": [
+        "description",
+        "enabled",
+        "interactive",
+        "metadata",
+        "name",
+        "version"
+      ],
+      "title": "AgentConfigEllipsis",
+      "type": "object"
+    },
+    "AgentConfigEllipsisPermissions": {
+      "additionalProperties": {
+        "anyOf": [
+          {
+            "$ref": "#/$defs/Level"
+          },
+          {
+            "$ref": "#/$defs/EllipsisGrant"
+          },
+          {
+            "items": {
+              "anyOf": [
+                {
+                  "$ref": "#/$defs/Level"
+                },
+                {
+                  "$ref": "#/$defs/EllipsisGrant"
+                }
+              ]
+            },
+            "type": "array"
+          }
+        ]
+      },
+      "description": "`permissions.ellipsis` as a map: resource \u2192 level | grant | list of\ngrants. Levels are hierarchical (read < write < delete), so `write`\nincludes `read`. An unlisted resource is denied. The whole block is\nintersected with the platform's sandbox ceiling at token mint \u2014 it can\nnarrow what a sandbox token may do, never exceed it.",
+      "propertyNames": {
+        "$ref": "#/$defs/Resource"
+      },
+      "title": "AgentConfigEllipsisPermissions",
+      "type": "object"
+    },
+    "AgentConfigEnvironment": {
+      "additionalProperties": false,
+      "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, how its `image` is customized, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
+      "properties": {
+        "compute": {
+          "$ref": "#/$defs/AgentConfigCompute",
+          "default": {
+            "cpu": null,
+            "memory": null,
+            "timeout": null
+          }
+        },
+        "hooks": {
+          "$ref": "#/$defs/AgentConfigEnvironmentHooks",
+          "default": {
+            "post_clone": null,
+            "post_start": null
+          }
+        },
+        "image": {
+          "$ref": "#/$defs/AgentConfigEnvironmentImage",
+          "default": {
+            "dockerfile_append": null,
+            "setup": null
+          }
+        },
+        "repositories": {
+          "default": [],
+          "items": {
+            "$ref": "#/$defs/AgentConfigRepository"
+          },
+          "title": "Repositories",
+          "type": "array"
+        },
+        "variables": {
+          "default": [],
+          "items": {
+            "$ref": "#/$defs/AgentConfigEnvironmentVariable"
+          },
+          "title": "Variables",
+          "type": "array"
+        }
+      },
+      "required": [
+        "compute",
+        "hooks",
+        "image",
+        "repositories",
+        "variables"
+      ],
+      "title": "AgentConfigEnvironment",
+      "type": "object"
+    },
+    "AgentConfigEnvironmentHooks": {
+      "additionalProperties": false,
+      "description": "Shell scripts run at points in the sandbox lifecycle, each as the sandbox\nuser with the sandbox's environment variables available. A non-zero exit\nfails the run (exit_status = LIFECYCLE_HOOK_FAILED) and is not retried.\n\n`post_start` runs after the container starts, before any repo is cloned \u2014\nrepo-independent setup (authenticate a CLI, e.g. `doppler setup`). On Modal\nthe repo is baked into the image so it is incidentally present, but\n`post_start` must not depend on repo contents (that's `post_clone`).\n\n`post_clone` runs after all repos are cloned/checked out, before the agent \u2014\nrepo-dependent setup (`pip install -r requirements.txt`, codegen).\n\nHooks run on every run and their output is never cached. A dependency\ninstall whose result should be reused across runs belongs in `image.setup`\n(baked into the cached image) instead; keep hooks for per-run work \u2014 e.g.\nanything that touches run-scoped credentials.",
+      "properties": {
+        "post_clone": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Post Clone"
+        },
+        "post_start": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Post Start"
+        }
+      },
+      "required": [
+        "post_clone",
+        "post_start"
+      ],
+      "title": "AgentConfigEnvironmentHooks",
+      "type": "object"
+    },
+    "AgentConfigEnvironmentImage": {
+      "additionalProperties": false,
+      "description": "How to customize the container image the agent runs in. You\ncontribute appended layers (`dockerfile_append`) and a build-time script\n(`setup`) only \u2014 Ellipsis owns FROM / base tooling / entrypoint / user.\nToday only inline bodies are supported; a file reference (resolved at the\nrun's SHA) will come later.\n\nThe split: `dockerfile_append` runs when the image is assembled, before any\nrepo exists \u2014 toolchain installs (a package manager binary, apt packages).\n`setup` runs at image-build time *after* the configured repositories are\nchecked out, and its output is captured by the filesystem snapshot that\nbecomes the cached image \u2014 dependency installs (`poetry install`,\n`npm install`), so later runs start with deps already on disk. Neither runs\nper run; that's `hooks.post_start` / `hooks.post_clone`.",
+      "properties": {
+        "dockerfile_append": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Dockerfile Append"
+        },
+        "setup": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Setup"
+        }
+      },
+      "required": [
+        "dockerfile_append",
+        "setup"
+      ],
+      "title": "AgentConfigEnvironmentImage",
+      "type": "object"
+    },
+    "AgentConfigEnvironmentVariable": {
+      "additionalProperties": false,
+      "description": "One environment variable injected into the agent's sandbox.\n\n`value`, when set, is a literal injected as-is \u2014 use it for non-secret\nconfig (LOG_LEVEL, an API base URL). When `value` is omitted the value is\nresolved at run time from the account's sandbox-secrets store (dashboard\n/ `PUT /v1/secrets`) by `name`, so a secret can be injected without\never putting it in the config file. Either way the variable only reaches\nagents that name it.",
+      "properties": {
+        "name": {
+          "title": "Name",
+          "type": "string"
+        },
+        "value": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Value"
+        }
+      },
+      "required": [
+        "name",
+        "value"
+      ],
+      "title": "AgentConfigEnvironmentVariable",
+      "type": "object"
+    },
+    "AgentConfigGithubPermissions": {
+      "additionalProperties": false,
+      "description": "The agent's GitHub access: the scope of the installation token minted for\nits sandbox \u2014 the credential `git`, `gh`, and the GitHub MCP server\nauthenticate with.\n\nBy default the token carries the installation's full permissions on all of\nthe installation's repositories. `permissions` narrows what it may do:\nthe string `read_only` grants read access to contents, issues, metadata and\npull requests; a map requests explicit levels per GitHub App permission\nscope (e.g. `{contents: read, pull_requests: write}`) and may never exceed\nwhat the installation granted. `repositories` scopes the token to exactly\nthe listed repos, by name (they must belong to the installation).\n\nRestriction is enforced by GitHub, not by Ellipsis: the token itself is\nminted with the reduced scope, so nothing running in the sandbox can\nexceed it.",
+      "properties": {
+        "permissions": {
+          "anyOf": [
+            {
+              "const": "read_only",
+              "type": "string"
+            },
+            {
+              "additionalProperties": {
+                "type": "string"
+              },
+              "type": "object"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Permissions"
+        },
+        "repositories": {
+          "anyOf": [
+            {
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Repositories"
+        }
+      },
+      "required": [
+        "permissions",
+        "repositories"
+      ],
+      "title": "AgentConfigGithubPermissions",
+      "type": "object"
+    },
+    "AgentConfigInput": {
+      "additionalProperties": false,
+      "description": "The typed input contract: what goes INTO a session (the trigger is\nwhen it happens; this is what goes in).\n\n`json_schema` types the payload a caller-started session takes\n(`POST /v1/sessions` `input`, validated at the door; required when\ndeclared). It is illegal on a react-triggered agent \u2014 react payloads are\nplatform-shaped (the published surface field sets), not caller-shaped.\n\n`message` is the initial-message template: exact `{{path}}` substitution\nover the caller payload (or, on a react agent, over the surface's\npublished fields), no conditionals/loops/filters. Refs are validated at\ndeploy time against the governing field set (see AgentConfig's\n`_check_input`).",
+      "properties": {
+        "json_schema": {
+          "anyOf": [
+            {
+              "additionalProperties": true,
+              "type": "object"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Json Schema"
+        },
+        "message": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Message"
+        }
+      },
+      "required": [
+        "json_schema",
+        "message"
+      ],
+      "title": "AgentConfigInput",
+      "type": "object"
+    },
+    "AgentConfigLlm": {
+      "additionalProperties": false,
+      "description": "Where this agent's completions go.\n\nDefaults to Ellipsis's own LLM proxy (our Anthropic/Bedrock account, or the\naccount-wide BYO provider if one is enabled). Setting `proxy` to the id of a\nproxy registered on the models settings page routes THIS agent's\ncompletions through that gateway instead.\n\nOpt-in per agent by design: registering a proxy does not silently move any\nexisting agent's traffic. The id is account-scoped, so naming another\naccount's id is a terminal config error, not a route.",
+      "properties": {
+        "proxy": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Proxy"
+        }
+      },
+      "required": [
+        "proxy"
+      ],
+      "title": "AgentConfigLlm",
+      "type": "object"
+    },
+    "AgentConfigMcpServer": {
+      "additionalProperties": false,
+      "description": "One built-in MCP server this agent opts into by name (`linear`/`slack`).\nThis is a name reference over the connected built-in set, NOT a custom-server\ndefinition \u2014 there is no command/url/headers shape (that was the old,\nremoved field, and Ellipsis does not support bring-your-own MCP servers).\nIt only matters when the named integration is set to `opt_in` inclusion; an\nintegration in the default `all_sessions` mode is added regardless.",
+      "properties": {
+        "name": {
+          "title": "Name",
+          "type": "string"
+        }
+      },
+      "required": [
+        "name"
+      ],
+      "title": "AgentConfigMcpServer",
+      "type": "object"
+    },
+    "AgentConfigMemorySize": {
+      "additionalProperties": false,
+      "description": "A memory size as explicit units, summed (binary: 1GB = 1024MB = 1024MiB).\nSet any of `gb`/`mb` (at least one). The alternative to the `8GB`-style\nshorthand string.",
+      "properties": {
+        "gb": {
+          "anyOf": [
+            {
+              "minimum": 0,
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Gb"
+        },
+        "mb": {
+          "anyOf": [
+            {
+              "minimum": 0,
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Mb"
+        }
+      },
+      "required": [
+        "gb",
+        "mb"
+      ],
+      "title": "AgentConfigMemorySize",
+      "type": "object"
+    },
+    "AgentConfigMentionPlatform": {
+      "description": "The surface an @ellipsis mention can come from.",
+      "enum": [
+        "github",
+        "slack",
+        "linear"
+      ],
+      "title": "AgentConfigMentionPlatform",
+      "type": "string"
+    },
+    "AgentConfigMentionTrigger": {
+      "additionalProperties": false,
+      "properties": {
+        "platforms": {
+          "default": [],
+          "items": {
+            "$ref": "#/$defs/AgentConfigMentionPlatform"
+          },
+          "title": "Platforms",
+          "type": "array"
+        },
+        "type": {
+          "const": "mention",
+          "default": "mention",
+          "title": "Type",
+          "type": "string"
+        }
+      },
+      "required": [
+        "platforms",
+        "type"
+      ],
+      "title": "AgentConfigMentionTrigger",
+      "type": "object"
+    },
+    "AgentConfigMetadata": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "default": {},
+          "title": "Annotations",
+          "type": "object"
+        },
+        "labels": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Labels",
+          "type": "array"
+        }
+      },
+      "required": [
+        "annotations",
+        "labels"
+      ],
+      "title": "AgentConfigMetadata",
+      "type": "object"
+    },
+    "AgentConfigOutput": {
+      "additionalProperties": false,
+      "description": "The typed output contract: the JSON Schema the agent must exit through\n(the StructuredOutput exit tool). Read back via\nGET /v1/sessions/{id}/output.",
+      "properties": {
+        "json_schema": {
+          "additionalProperties": true,
+          "title": "Json Schema",
+          "type": "object"
+        }
+      },
+      "required": [
+        "json_schema"
+      ],
+      "title": "AgentConfigOutput",
+      "type": "object"
+    },
+    "AgentConfigPermissions": {
+      "additionalProperties": false,
+      "description": "What the agent is allowed to touch, per credential the platform mints\ninto its sandbox. Distinct from `environment:`, which is where the agent\nruns; this is what it may do from there.\n\n`ellipsis` scopes the sandbox's Ellipsis API token\n(`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates\nwith). `true` / the string `all` (the default) grant the full sandbox\nceiling \u2014 everything a sandbox token can ever do. A map narrows it per\nresource (see `AgentConfigEllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) \u2014\nsee `AgentConfigGithubPermissions`. GitHub enforces it at mint time.",
+      "properties": {
+        "ellipsis": {
+          "anyOf": [
+            {
+              "enum": [
+                true,
+                "all"
+              ]
+            },
+            {
+              "$ref": "#/$defs/AgentConfigEllipsisPermissions"
+            }
+          ],
+          "default": true,
+          "title": "Ellipsis"
+        },
+        "github": {
+          "$ref": "#/$defs/AgentConfigGithubPermissions",
+          "default": {
+            "permissions": null,
+            "repositories": null
+          }
+        }
+      },
+      "required": [
+        "ellipsis",
+        "github"
+      ],
+      "title": "AgentConfigPermissions",
+      "type": "object"
+    },
+    "AgentConfigReactTrigger": {
+      "additionalProperties": false,
+      "properties": {
+        "issue": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactIssue"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "linear_issue": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactLinearIssue"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "pull_request": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactPullRequest"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "push": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactPush"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "sentry": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactSentry"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "slack_channel": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactSlackChannel"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "type": {
+          "const": "react",
+          "default": "react",
+          "title": "Type",
+          "type": "string"
+        }
+      },
+      "required": [
+        "issue",
+        "linear_issue",
+        "pull_request",
+        "push",
+        "sentry",
+        "slack_channel",
+        "type"
+      ],
+      "title": "AgentConfigReactTrigger",
+      "type": "object"
+    },
+    "AgentConfigRepository": {
+      "additionalProperties": false,
+      "properties": {
+        "name": {
+          "title": "Name",
+          "type": "string"
+        },
+        "owner": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Owner"
+        },
+        "ref": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Ref"
+        }
+      },
+      "required": [
+        "name",
+        "owner",
+        "ref"
+      ],
+      "title": "AgentConfigRepository",
+      "type": "object"
+    },
+    "AgentConfigSettingsRef": {
+      "additionalProperties": false,
+      "description": "A config-declared Claude Code settings.json, resolved at run start and\npassed to `claude --settings <path>`. That is the CLI settings tier \u2014 BELOW\nEllipsis's managed-settings.json floor \u2014 so it customizes behavior (model\npermissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a\nsecurity setting. Lets a team point the cloud agent at the same settings file\nthey already use with Claude Code locally instead of re-encoding it as YAML.",
+      "properties": {
+        "path": {
+          "title": "Path",
+          "type": "string"
+        },
+        "repository": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/AgentConfigRepository"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        }
+      },
+      "required": [
+        "path",
+        "repository"
+      ],
+      "title": "AgentConfigSettingsRef",
+      "type": "object"
+    },
+    "AgentConfigSkill": {
+      "additionalProperties": false,
+      "description": "One config-declared Claude Code skill: a repository directory containing\na SKILL.md, resolved at run start and installed at the sandbox's personal\nskill level (`~/.claude/skills/<basename(path)>/`). This is how a config\nbrings in skills its cloned repositories don't provide \u2014 cross-repo refs\n(an org-wide skills repo), public third-party repos, and repo-less runs.\nSkills under a cloned repo's own `.claude/skills/` load by themselves and\ndon't need an entry here.",
+      "properties": {
+        "path": {
+          "title": "Path",
+          "type": "string"
+        },
+        "repository": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/AgentConfigRepository"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        }
+      },
+      "required": [
+        "path",
+        "repository"
+      ],
+      "title": "AgentConfigSkill",
+      "type": "object"
+    },
+    "AgentConfigSource": {
+      "description": "Where a session's config came from. Total: every session has exactly one\nsource, including the ones that never touch defaults resolution.\n\nNot derivable from the row \u2014 `agent_config_id` says WHICH saved config, not\nhow it was chosen, and is null for inline, platform-default, and built-in\nconfigs alike \u2014 so it is persisted for audit and the published wire.",
+      "enum": [
+        "explicit",
+        "inline",
+        "template",
+        "repo_default",
+        "account_default",
+        "platform_default",
+        "trigger",
+        "builtin"
+      ],
+      "title": "AgentConfigSource",
+      "type": "string"
+    },
+    "AgentConfigSystemFileRef": {
+      "additionalProperties": false,
+      "properties": {
+        "file": {
+          "title": "File",
+          "type": "string"
+        },
+        "repository": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/AgentConfigRepository"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        }
+      },
+      "required": [
+        "file",
+        "repository"
+      ],
+      "title": "AgentConfigSystemFileRef",
+      "type": "object"
+    },
     "AttributionType": {
       "enum": [
         "github_user",
@@ -21,16 +1263,6 @@
       "title": "BudgetSource",
       "type": "string"
     },
-    "DefaultResolution": {
-      "description": "How a session that arrived with no explicit config source resolved its\nconfig (documents/eng/DEFAULT_CONFIGS.md \u00a74). Persisted on the session so\naudit and clients can say \"ran under X (repo default)\". A session started\nwith an explicit config/config_id/template_id never enters resolution and\nstores None.",
-      "enum": [
-        "repo_default",
-        "account_default",
-        "none"
-      ],
-      "title": "DefaultResolution",
-      "type": "string"
-    },
     "DeltaFrame": {
       "description": "Fire-and-forget partial assistant output for the current response.\nCarries no sequence number and is never resumable; superseded by the\ncommitted record.",
       "properties": {
@@ -110,6 +1342,47 @@
       "title": "DoneFrame",
       "type": "object"
     },
+    "EffortLevel": {
+      "enum": [
+        "low",
+        "medium",
+        "high",
+        "xhigh",
+        "max"
+      ],
+      "title": "EffortLevel",
+      "type": "string"
+    },
+    "EllipsisGrant": {
+      "additionalProperties": false,
+      "description": "One grant entry: a level, optionally narrowed to instances whose\nnatural key (a file's name, a memory's path, a secret's name, a config's\nname, a session's id) matches any of the `match` globs.",
+      "properties": {
+        "level": {
+          "$ref": "#/$defs/Level"
+        },
+        "match": {
+          "anyOf": [
+            {
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Match"
+        }
+      },
+      "required": [
+        "level",
+        "match"
+      ],
+      "title": "EllipsisGrant",
+      "type": "object"
+    },
     "ErrorFrame": {
       "description": "Terminal error marker, sent before the server closes with code 1011.",
       "properties": {
@@ -132,6 +1405,68 @@
       "title": "ErrorFrame",
       "type": "object"
     },
+    "GithubAccountFilter": {
+      "anyOf": [
+        {
+          "additionalProperties": false,
+          "description": "One include-minus-exclude set of GitHub accounts: an account matches iff\nit is in `include` (`true` = all, a list = exactly those, `false`/`[]` =\nnone) AND not in `exclude`. A bare bool or list is shorthand for `include`,\nso `users: true` and `users: [priya-shah]` both parse.",
+          "properties": {
+            "exclude": {
+              "default": [],
+              "items": {
+                "type": "string"
+              },
+              "title": "Exclude",
+              "type": "array"
+            },
+            "include": {
+              "anyOf": [
+                {
+                  "items": {
+                    "type": "string"
+                  },
+                  "type": "array"
+                },
+                {
+                  "type": "boolean"
+                }
+              ],
+              "default": true,
+              "title": "Include"
+            }
+          },
+          "title": "GithubAccountFilter",
+          "type": "object"
+        },
+        {
+          "type": "boolean"
+        },
+        {
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      ]
+    },
+    "GithubAccountSelector": {
+      "additionalProperties": false,
+      "description": "A selector of GitHub accounts \u2014 the `for:` audience gate on react\nsurfaces and code review pipelines, classified on the stable entity author\n(the pusher for `push`, the PR author for a review). `users` selects human\naccounts, `bots` selects bot accounts; each is a `GithubAccountFilter`\n(include minus exclude, with bare bool/list shorthand).",
+      "properties": {
+        "bots": {
+          "$ref": "#/$defs/GithubAccountFilter"
+        },
+        "users": {
+          "$ref": "#/$defs/GithubAccountFilter"
+        }
+      },
+      "required": [
+        "bots",
+        "users"
+      ],
+      "title": "GithubAccountSelector",
+      "type": "object"
+    },
     "GithubAccountSnippet": {
       "description": "Sometimes the GitHub API returns a user of github (can include bots)\nusing this snippet instead of the full GithubAccount model. One example,\nis when the API returns a pull request.\n\nThis is the least amount of info we need to represent a GitHub account.",
       "properties": {
@@ -152,77 +1487,312 @@
         }
       },
       "required": [
-        "avatar_url",
-        "id",
-        "login",
-        "type"
+        "avatar_url",
+        "id",
+        "login",
+        "type"
+      ],
+      "title": "GithubAccountSnippet",
+      "type": "object"
+    },
+    "GithubAccountType": {
+      "enum": [
+        "User",
+        "Organization",
+        "Bot",
+        "Mannequin"
+      ],
+      "title": "GithubAccountType",
+      "type": "string"
+    },
+    "Harness": {
+      "enum": [
+        "claude_code",
+        "codex"
+      ],
+      "title": "Harness",
+      "type": "string"
+    },
+    "HeartbeatFrame": {
+      "description": "A keepalive sent after a period of idleness; doubles as the dead-socket\nprobe. Clients should treat roughly twice the heartbeat interval of\nsilence as a dead connection.",
+      "properties": {
+        "ts": {
+          "description": "Server time when the heartbeat was sent.",
+          "format": "date-time",
+          "title": "Ts",
+          "type": "string"
+        },
+        "type": {
+          "const": "heartbeat",
+          "default": "heartbeat",
+          "title": "Type",
+          "type": "string"
+        }
+      },
+      "required": [
+        "ts",
+        "type"
+      ],
+      "title": "HeartbeatFrame",
+      "type": "object"
+    },
+    "IssueAction": {
+      "enum": [
+        "opened",
+        "closed",
+        "commented"
+      ],
+      "title": "IssueAction",
+      "type": "string"
+    },
+    "Level": {
+      "description": "What may be done to a resource. Strictly ordered: a grant at one level\nincludes every level below it (write-only would be a phantom capability \u2014\nno real client can create what it cannot read back).",
+      "enum": [
+        "read",
+        "write",
+        "delete"
+      ],
+      "title": "Level",
+      "type": "string"
+    },
+    "LinearIssueAction": {
+      "enum": [
+        "opened"
+      ],
+      "title": "LinearIssueAction",
+      "type": "string"
+    },
+    "ParentKind": {
+      "description": "How a session relates to its predecessor (parent_agent_session_id) \u2014\nthe ONE \"preceded-by\" chain for every predecessor relationship. Routing\nreads this when the distinction matters.\n\nCONTINUATION \u2014 a follow-up in the same conversation surface (e.g. a Slack\nthread reply spawning a fresh session on the same thread).\nRESUME \u2014 a conversation re-hosted on a new box after its sandbox was torn\ndown (interactive platform; later phase).",
+      "enum": [
+        "continuation",
+        "resume"
+      ],
+      "title": "ParentKind",
+      "type": "string"
+    },
+    "PromptBlockedReason": {
+      "description": "Why direct prompting is refused. Absent when prompting is allowed.",
+      "enum": [
+        "mention_surface",
+        "ephemeral_trigger",
+        "non_interactive",
+        "harness_single_turn",
+        "closed"
+      ],
+      "title": "PromptBlockedReason",
+      "type": "string"
+    },
+    "PullRequestAction": {
+      "enum": [
+        "opened",
+        "pushed",
+        "merged",
+        "closed",
+        "review_submitted",
+        "commented"
+      ],
+      "title": "PullRequestAction",
+      "type": "string"
+    },
+    "ReactIssue": {
+      "additionalProperties": false,
+      "properties": {
+        "for": {
+          "$ref": "#/$defs/GithubAccountSelector"
+        },
+        "labels": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Labels",
+          "type": "array"
+        },
+        "on": {
+          "items": {
+            "$ref": "#/$defs/IssueAction"
+          },
+          "title": "On",
+          "type": "array"
+        },
+        "repositories": {
+          "$ref": "#/$defs/RepositoryFilter"
+        }
+      },
+      "required": [
+        "for",
+        "labels",
+        "on",
+        "repositories"
+      ],
+      "title": "ReactIssue",
+      "type": "object"
+    },
+    "ReactLinearIssue": {
+      "additionalProperties": false,
+      "properties": {
+        "for": {
+          "$ref": "#/$defs/GithubAccountSelector"
+        },
+        "on": {
+          "default": [
+            "opened"
+          ],
+          "items": {
+            "$ref": "#/$defs/LinearIssueAction"
+          },
+          "title": "On",
+          "type": "array"
+        }
+      },
+      "required": [
+        "for",
+        "on"
+      ],
+      "title": "ReactLinearIssue",
+      "type": "object"
+    },
+    "ReactPullRequest": {
+      "additionalProperties": false,
+      "properties": {
+        "base": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Base",
+          "type": "array"
+        },
+        "draft": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Draft"
+        },
+        "for": {
+          "$ref": "#/$defs/GithubAccountSelector"
+        },
+        "head": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Head",
+          "type": "array"
+        },
+        "labels": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Labels",
+          "type": "array"
+        },
+        "on": {
+          "items": {
+            "$ref": "#/$defs/PullRequestAction"
+          },
+          "title": "On",
+          "type": "array"
+        },
+        "paths": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Paths",
+          "type": "array"
+        },
+        "repositories": {
+          "$ref": "#/$defs/RepositoryFilter"
+        }
+      },
+      "required": [
+        "base",
+        "draft",
+        "for",
+        "head",
+        "labels",
+        "on",
+        "paths",
+        "repositories"
+      ],
+      "title": "ReactPullRequest",
+      "type": "object"
+    },
+    "ReactPush": {
+      "additionalProperties": false,
+      "properties": {
+        "branch": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Branch",
+          "type": "array"
+        },
+        "for": {
+          "$ref": "#/$defs/GithubAccountSelector"
+        },
+        "paths": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Paths",
+          "type": "array"
+        },
+        "repositories": {
+          "$ref": "#/$defs/RepositoryFilter"
+        }
+      },
+      "required": [
+        "branch",
+        "for",
+        "paths",
+        "repositories"
       ],
-      "title": "GithubAccountSnippet",
+      "title": "ReactPush",
       "type": "object"
     },
-    "GithubAccountType": {
-      "enum": [
-        "User",
-        "Organization",
-        "Bot",
-        "Mannequin"
-      ],
-      "title": "GithubAccountType",
-      "type": "string"
-    },
-    "Harness": {
-      "enum": [
-        "claude_code",
-        "codex"
-      ],
-      "title": "Harness",
-      "type": "string"
-    },
-    "HeartbeatFrame": {
-      "description": "A keepalive sent after a period of idleness; doubles as the dead-socket\nprobe. Clients should treat roughly twice the heartbeat interval of\nsilence as a dead connection.",
+    "ReactSentry": {
+      "additionalProperties": false,
       "properties": {
-        "ts": {
-          "description": "Server time when the heartbeat was sent.",
-          "format": "date-time",
-          "title": "Ts",
-          "type": "string"
+        "on": {
+          "items": {
+            "$ref": "#/$defs/SentryAction"
+          },
+          "title": "On",
+          "type": "array"
         },
-        "type": {
-          "const": "heartbeat",
-          "default": "heartbeat",
-          "title": "Type",
-          "type": "string"
+        "projects": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Projects",
+          "type": "array"
         }
       },
       "required": [
-        "ts",
-        "type"
+        "on",
+        "projects"
       ],
-      "title": "HeartbeatFrame",
+      "title": "ReactSentry",
       "type": "object"
     },
-    "ParentKind": {
-      "description": "How a session relates to its predecessor (parent_agent_session_id) \u2014\nthe ONE \"preceded-by\" chain for every predecessor relationship. Routing\nreads this when the distinction matters.\n\nCONTINUATION \u2014 a follow-up in the same conversation surface (e.g. a Slack\nthread reply spawning a fresh session on the same thread).\nHANDOFF \u2014 a session started to take over work from another surface (e.g.\nlaptop \u2192 cloud handoff; later phase).\nRESUME \u2014 a conversation re-hosted on a new box after its sandbox was torn\ndown (interactive platform; later phase).",
-      "enum": [
-        "continuation",
-        "handoff",
-        "resume"
-      ],
-      "title": "ParentKind",
-      "type": "string"
-    },
-    "PromptBlockedReason": {
-      "description": "Why direct prompting is refused. Absent when prompting is allowed.",
-      "enum": [
-        "mention_surface",
-        "ephemeral_trigger",
-        "non_interactive",
-        "harness_single_turn",
-        "closed",
-        "laptop"
-      ],
-      "title": "PromptBlockedReason",
-      "type": "string"
+    "ReactSlackChannel": {
+      "additionalProperties": false,
+      "properties": {},
+      "title": "ReactSlackChannel",
+      "type": "object"
     },
     "RecordsAppendFrame": {
       "description": "Cursored append-only delivery of session records, ordered by feed_seq,\nfrom all sources. Every record in the frame advances the resume cursor \u2014\nincluding ones a client renders as nothing.",
@@ -249,6 +1819,59 @@
       "title": "RecordsAppendFrame",
       "type": "object"
     },
+    "RepositoryFilter": {
+      "anyOf": [
+        {
+          "additionalProperties": false,
+          "description": "The watch scope of a trigger, by repository name (owner defaults to the\naccount). Include minus exclude: `include: []` (the default) covers every\nrepository of the installation, so `exclude`-only means \"all except these\"\nand keeps covering repositories added to the org later. A bare list is\nshorthand for `include`.",
+          "properties": {
+            "exclude": {
+              "default": [],
+              "items": {
+                "type": "string"
+              },
+              "title": "Exclude",
+              "type": "array"
+            },
+            "include": {
+              "default": [],
+              "items": {
+                "type": "string"
+              },
+              "title": "Include",
+              "type": "array"
+            }
+          },
+          "title": "RepositoryFilter",
+          "type": "object"
+        },
+        {
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      ]
+    },
+    "Resource": {
+      "description": "Everything a credential can be granted access to, one value per /v1\nresource family. `TOKENS` is reserved for the future token-management\nroutes; nothing maps to it yet.",
+      "enum": [
+        "account",
+        "alerts",
+        "sessions",
+        "files",
+        "memories",
+        "reviews",
+        "configs",
+        "defaults",
+        "secrets",
+        "templates",
+        "integrations",
+        "tokens"
+      ],
+      "title": "Resource",
+      "type": "string"
+    },
     "RunStatus": {
       "description": "What the current (or most recent) execution is doing (backs `run`).",
       "enum": [
@@ -265,9 +1888,21 @@
       "title": "RunStatus",
       "type": "string"
     },
+    "SentryAction": {
+      "enum": [
+        "issue_alert",
+        "metric_alert"
+      ],
+      "title": "SentryAction",
+      "type": "string"
+    },
     "Session": {
-      "description": "An agent session: one conversation with an agent, from trigger to\nterminal state. Returned by `GET /sessions/{id}` and carried by the\nsession stream's `session`/`snapshot` frames \u2014 REST and stream never\ndisagree about what a session looks like.",
+      "description": "An agent session: one conversation with an agent, from trigger to\nterminal state. Returned by `GET /v1/sessions/{id}` and carried by the\nsession stream's `session`/`snapshot` frames \u2014 REST and stream never\ndisagree about what a session looks like.",
       "properties": {
+        "agent": {
+          "$ref": "#/$defs/SessionAgent",
+          "description": "The agent that ran: the config the session executed, where that config came from, and any override merged into it."
+        },
         "attribution": {
           "$ref": "#/$defs/SessionAttribution",
           "description": "The principal this session is attributed to."
@@ -276,46 +1911,6 @@
           "$ref": "#/$defs/SessionBudget",
           "description": "The spend budget enforced for this session."
         },
-        "client_version": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "Version of the client that started the session, if reported.",
-          "title": "Client Version"
-        },
-        "config_id": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "Identifier of the saved agent config the session ran on, if any.",
-          "title": "Config Id"
-        },
-        "config_override": {
-          "anyOf": [
-            {
-              "additionalProperties": true,
-              "type": "object"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "The partial-config diff applied for this run; null when the config was unmodified.",
-          "title": "Config Override"
-        },
         "context_repository": {
           "anyOf": [
             {
@@ -339,18 +1934,6 @@
           "title": "Created At",
           "type": "string"
         },
-        "default_resolution": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/DefaultResolution"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "How the session's config was resolved from the account's defaults, when no explicit config was given."
-        },
         "exit_status": {
           "anyOf": [
             {
@@ -400,19 +1983,6 @@
           "description": "When the session last received a message.",
           "title": "Last Message At"
         },
-        "live_summary": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "A live summary of the session's progress while it runs.",
-          "title": "Live Summary"
-        },
         "metadata": {
           "additionalProperties": {
             "type": "string"
@@ -459,32 +2029,6 @@
           "$ref": "#/$defs/SessionPrompting",
           "description": "Whether a client may send this session a message and, when it may not, the reason to show instead of a composer."
         },
-        "sandbox_id": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "Identifier of the sandbox the session runs in, if any.",
-          "title": "Sandbox Id"
-        },
-        "session_key": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "Key identifying the durable conversation this session belongs to, or null for single-shot sessions.",
-          "title": "Session Key"
-        },
         "session_state": {
           "anyOf": [
             {
@@ -499,7 +2043,7 @@
         },
         "source": {
           "$ref": "#/$defs/SessionSource",
-          "description": "Where the session came from (e.g. react, manual, api, cli, mention, cron, laptop)."
+          "description": "Where the session came from (e.g. react, manual, api, cli, mention, cron)."
         },
         "status": {
           "$ref": "#/$defs/SessionStatus",
@@ -522,6 +2066,18 @@
           "$ref": "#/$defs/SessionStopped",
           "description": "The stop request, if the session was stopped."
         },
+        "summary": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionSummary"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The latest live summary of the session's progress while it runs, and when it was generated."
+        },
         "surface": {
           "anyOf": [
             {
@@ -532,7 +2088,7 @@
             }
           ],
           "default": null,
-          "description": "The public status projection; null for laptop-synced sessions."
+          "description": "The public status projection; null on list/search responses, which do not derive it."
         },
         "tokens": {
           "$ref": "#/$defs/SessionTokens",
@@ -543,70 +2099,86 @@
           "format": "date-time",
           "title": "Updated At",
           "type": "string"
-        },
-        "webhook_id": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "Identifier of the webhook event that triggered the session, if any.",
-          "title": "Webhook Id"
-        },
-        "webhook_type": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/WebhookType"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "Type of the webhook event that triggered the session, if any."
         }
       },
       "required": [
+        "agent",
         "attribution",
         "budget",
-        "client_version",
-        "config_id",
-        "config_override",
         "context_repository",
         "cost",
         "created_at",
-        "default_resolution",
         "exit_status",
         "harness",
         "id",
         "last_activity_at",
         "last_message_at",
-        "live_summary",
         "metadata",
         "output_prs",
         "parent",
         "prompt",
         "prompting",
-        "sandbox_id",
-        "session_key",
         "session_state",
         "source",
         "status",
         "status_reason",
         "stopped",
+        "summary",
         "surface",
         "tokens",
-        "updated_at",
-        "webhook_id",
-        "webhook_type"
+        "updated_at"
       ],
       "title": "Session",
       "type": "object"
     },
+    "SessionAgent": {
+      "description": "The agent this session ran: the config it actually executed, where that\nconfig came from, and the diff that was merged in \u2014 the same\neffective-value-plus-provenance shape `SessionBudget` uses.\n\n`config` is the snapshot frozen when the session was created; `config_id`\npoints at the saved config as it exists NOW. They diverge legitimately: a\nYAML edit after the session started, or any `override`, leaves the pointer\ndescribing something the session never ran.",
+      "properties": {
+        "config": {
+          "$ref": "#/$defs/AgentConfig",
+          "description": "The agent config the session actually ran, frozen when the session was created."
+        },
+        "config_id": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Identifier of the saved config this session's snapshot was taken from. Null for inline, platform-default, and built-in configs. Points at the config as it exists now, which may have changed since.",
+          "title": "Config Id"
+        },
+        "override": {
+          "anyOf": [
+            {
+              "additionalProperties": true,
+              "type": "object"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The partial-config override merged into `config` for this session, or null when the config ran unmodified. `config` is the merged result; this is the diff.",
+          "title": "Override"
+        },
+        "source": {
+          "$ref": "#/$defs/AgentConfigSource",
+          "description": "How this session's config was chosen."
+        }
+      },
+      "required": [
+        "config",
+        "config_id",
+        "override",
+        "source"
+      ],
+      "title": "SessionAgent",
+      "type": "object"
+    },
     "SessionAttribution": {
       "description": "The principal a session is attributed to: what kind, its id, and \u2014 when\nthe kind is a GitHub user \u2014 the resolved display snippet.",
       "properties": {
@@ -733,6 +2305,8 @@
         "missing_repo_access",
         "missing_token_permissions",
         "missing_sandbox_variables",
+        "blocked",
+        "contact_email_required",
         "cancelled",
         "interrupted",
         "error",
@@ -1226,8 +2800,7 @@
         "api",
         "cli",
         "mention",
-        "cron",
-        "laptop"
+        "cron"
       ],
       "title": "SessionSource",
       "type": "string"
@@ -1307,8 +2880,38 @@
       "title": "SessionStopped",
       "type": "object"
     },
+    "SessionSummary": {
+      "description": "A live one-line summary of what the session is working on, refreshed\nevery few steps while it runs.",
+      "properties": {
+        "created_at": {
+          "anyOf": [
+            {
+              "format": "date-time",
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "When this summary line was generated. Null on summaries written before generation time was tracked.",
+          "title": "Created At"
+        },
+        "description": {
+          "description": "One-line description of what the session is working on.",
+          "title": "Description",
+          "type": "string"
+        }
+      },
+      "required": [
+        "created_at",
+        "description"
+      ],
+      "title": "SessionSummary",
+      "type": "object"
+    },
     "SessionSurface": {
-      "description": "The three fields we expose. All `None` for an un-keyed (laptop) session.\n\n`use_enum_values=True` (from CustomBaseModel) stores the members as their\nstring values, so this serializes to `{\"session\": \"alive\", \"run\": \"waiting\",\n\"status\": \"waiting\"}` \u2014 a plain object, not enum names.",
+      "description": "The three fields we expose.\n\n`use_enum_values=True` (from CustomBaseModel) stores the members as their\nstring values, so this serializes to `{\"session\": \"alive\", \"run\": \"waiting\",\n\"status\": \"waiting\"}` \u2014 a plain object, not enum names.",
       "properties": {
         "run": {
           "anyOf": [
@@ -1496,31 +3099,10 @@
       ],
       "title": "TokensInfo",
       "type": "object"
-    },
-    "WebhookType": {
-      "enum": [
-        "github.issue",
-        "github.issue_comment",
-        "github.push",
-        "github.pull_request",
-        "github.pull_request_comment",
-        "github.pull_request_review",
-        "github.pull_request_review_comment",
-        "slack.app_mention",
-        "slack.message",
-        "slack.channel_created",
-        "linear.issue",
-        "linear.issue_comment",
-        "sentry.event_alert",
-        "sentry.metric_alert",
-        "user.message"
-      ],
-      "title": "WebhookType",
-      "type": "string"
     }
   },
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "One server-to-client frame of the Ellipsis session stream protocol v3 (WS /sessions/{id}/stream?protocol=3). Clients MUST ignore frames with unknown `type` values \u2014 additive frames are not a protocol break.",
+  "description": "One server-to-client frame of the Ellipsis session stream protocol v3 (WS /v1/sessions/{id}/stream?protocol=3). Clients MUST ignore frames with unknown `type` values \u2014 additive frames are not a protocol break.",
   "oneOf": [
     {
       "$ref": "#/$defs/SnapshotFrame"