@ellipsis-dev/sdk 0.16.0 → 0.18.0

package/dist/{types-DB1hOyQE.d.ts → types-BLSh1Px1.d.ts}

@@ -14,16 +14,11 @@ interface paths {
         put?: never;
         /**
          * Create Agent Config
-         * @description Create an agent config.
+         * @description Create an agent config, managed through the API: no file, live
+         *     immediately. To put its definition in a repository instead, create
+         *     it here and then POST /v1/agents/configs/{config_id}/link.
          *
-         *     Name a repository and Ellipsis opens a pull request adding the
-         *     config file to agents/ there; the agent goes live when it
-         *     merges. Omit it and the agent is created here, with no file,
-         *     live immediately — and every file reference in it must name the
-         *     repository it lives in.
-         *
-         *     Accepts an inline config or a gallery template slug. 409 when
-         *     another live agent already holds the name.
+         *     409 when another live agent already holds the name.
          */
         post: operations['create_agent_config'];
         delete?: never;
@@ -119,51 +114,6 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/v1/agents/defaults': {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * List Agent Defaults
-         * @description Get the default agent configs.
-         *
-         *     The account-wide default and the per-repository defaults, as config
-         *     ids. Repo rungs are keyed "owner/name"; a repository this
-         *     installation can no longer see is omitted.
-         */
-        get: operations['list_agent_defaults'];
-        /**
-         * Put Agent Default
-         * @description Set a default agent config.
-         *
-         *     Addressed by rung: the account rung (repository omitted) or a
-         *     repository rung ("owner/name"); the config by id or by the
-         *     agent's name. Returns the full resulting ladder.
-         *
-         *     Refused for sandbox tokens (potentially prompt-injected code
-         *     must not repoint the account's ambient default); an unknown or
-         *     foreign repository is a 404.
-         */
-        put: operations['put_agent_default'];
-        post?: never;
-        /**
-         * Delete Agent Default
-         * @description Clear a default agent config.
-         *
-         *     Addressed by rung: the account rung (repository omitted) or a
-         *     repository rung.
-         *
-         *     Refused for sandbox tokens.
-         */
-        delete: operations['delete_agent_default'];
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     '/v1/agents/templates': {
         parameters: {
             query?: never;
@@ -418,6 +368,73 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    '/v1/environments': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List Environments
+         * @description List saved environments.
+         */
+        get: operations['list_environments'];
+        put?: never;
+        /**
+         * Create Environment
+         * @description Create an environment, managed through the API: no file, live
+         *     immediately. To define it in a repository instead, commit a
+         *     `kind: environment` YAML under an agents directory.
+         *
+         *     409 when another live environment already holds the name.
+         */
+        post: operations['create_environment'];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    '/v1/environments/{environment_id}': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Environment
+         * @description Return one saved environment, by id or by name.
+         */
+        get: operations['get_environment'];
+        /**
+         * Update Environment
+         * @description Replace an environment's definition, by id or by name.
+         *
+         *     The whole definition is replaced, live at once — future sessions
+         *     resolve the new body; running sessions keep the one frozen at
+         *     their start. Only for environments managed through this API: one
+         *     defined by a repository file is a 409.
+         */
+        put: operations['update_environment'];
+        post?: never;
+        /**
+         * Delete Environment
+         * @description Delete an environment, by id or by name.
+         *
+         *     Always succeeds, even while agents still reference it — their next
+         *     session start fails with a clear error naming the missing
+         *     environment. Past sessions remain readable. Only for environments
+         *     managed through this API — delete the file to remove one defined
+         *     by a repository.
+         */
+        delete: operations['delete_environment'];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     '/v1/files': {
         parameters: {
             query?: never;
@@ -497,7 +514,7 @@ interface paths {
             cookie?: never;
         };
         /**
-         * Get Integrations
+         * List Integrations
          * @description List connected integrations.
          *
          *     A read-only view, so an agent authoring another agent's
@@ -652,7 +669,7 @@ interface paths {
             cookie?: never;
         };
         /**
-         * Whoami
+         * Current Identity
          * @description Return the identity behind the caller's credential.
          */
         get: operations['whoami'];
@@ -851,7 +868,7 @@ interface paths {
          */
         get: operations['list_secrets'];
         /**
-         * Put Secrets
+         * Set Secrets
          * @description Upsert secrets.
          *
          *     Returns only the secrets this call wrote, names and timestamps
@@ -911,12 +928,14 @@ interface paths {
          * Start Agent Session
          * @description Start a cloud agent session.
          *
-         *     Provide at most one of config_id (an id or an agent name),
-         *     config, or
-         *     template_id; with none, the account's default-config ladder
-         *     resolves the config. 400 when idle_start is combined with
-         *     prompt or input. 422 when the agent declares an
-         *     input schema and the request's input is absent or invalid.
+         *     The base is `from_config_id` (an id or an agent name) or, omitted,
+         *     the bare ad-hoc config; every AgentConfig key on the request
+         *     deep-merges on top, so the body is both the pointer and the
+         *     per-session override. `prompt` is the first message; omit it and
+         *     the session starts idle, waiting for one. 400 when
+         *     ellipsis.interactive=false and there is no prompt or input. 422
+         *     when the agent declares an input schema and the request's input
+         *     is absent or invalid.
          */
         post: operations['start_agent_session'];
         delete?: never;
@@ -933,7 +952,7 @@ interface paths {
             cookie?: never;
         };
         /**
-         * Search Sessions
+         * Search Agent Sessions
          * @description Search sessions over steps, recaps, and pull requests.
          *
          *     Grouped by session, over everything a session left behind: step text, recap text, created
@@ -996,8 +1015,7 @@ interface paths {
          *     instructions + the config's own instructions).
          *
          *     Per execution because each cold wake persists its own launch
-         *     config (a config edit or replay override between wakes changes
-         *     it).
+         *     config (a config edit between wakes changes it).
          */
         get: operations['get_agent_session_executions'];
         put?: never;
@@ -1114,7 +1132,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    '/v1/sessions/{session_id}/replay': {
+    '/v1/sessions/{session_id}/stop': {
         parameters: {
             query?: never;
             header?: never;
@@ -1124,22 +1142,20 @@ interface paths {
         get?: never;
         put?: never;
         /**
-         * Replay Agent Session
-         * @description Replay a session as a new session.
+         * Stop Agent Session
+         * @description Stop an in-flight session and return it.
          *
-         *     Reuses the original config snapshot unless config_id is given,
-         *     and accepts the same config_override as session start — e.g.
-         *     {"claude": {"model": ...}} to replay the same input on a
-         *     different model.
+         *     stopped_by is recorded only when the caller's credential maps
+         *     to a GitHub account.
          */
-        post: operations['replay_agent_session'];
+        post: operations['stop_agent_session'];
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    '/v1/sessions/{session_id}/stop': {
+    '/v1/sessions/{session_id}/transcript': {
         parameters: {
             query?: never;
             header?: never;
@@ -1149,38 +1165,47 @@ interface paths {
         get?: never;
         put?: never;
         /**
-         * Stop Agent Session
-         * @description Stop an in-flight session and return it.
+         * Ingest Agent Session Transcript
+         * @description Append transcript lines to a session's record.
          *
-         *     stopped_by is recorded only when the caller's credential maps
-         *     to a GitHub account.
+         *     The in-sandbox tailer for interactive sessions.
+         *
+         *     A sandbox token may only push its own session's transcript.
+         *     Idempotent by transcript line uuid; tolerant of malformed lines.
          */
-        post: operations['stop_agent_session'];
+        post: operations['ingest_agent_session_transcript'];
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    '/v1/sessions/{session_id}/transcript': {
+    '/v1/settings/sessions/defaults': {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
         /**
-         * Ingest Agent Session Transcript
-         * @description Append transcript lines to a session's record.
+         * Get Session Defaults
+         * @description Get the account-wide session defaults.
          *
-         *     The in-sandbox tailer for interactive sessions.
+         *     Today one setting: the default model every session falls back to
+         *     when neither its request nor its agent config names one.
+         */
+        get: operations['get_session_defaults'];
+        /**
+         * Set Session Defaults
+         * @description Set the account-wide session defaults.
          *
-         *     A sandbox token may only push its own session's transcript.
-         *     Idempotent by transcript line uuid; tolerant of malformed lines.
+         *     `model` accepts an alias or canonical id and is stored canonical;
+         *     null clears it (sessions then fall back to the platform default).
+         *     Refused for sandbox tokens (potentially prompt-injected code must
+         *     not repoint the account's default model).
          */
-        post: operations['ingest_agent_session_transcript'];
+        put: operations['put_session_defaults'];
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
@@ -1195,7 +1220,7 @@ interface paths {
             cookie?: never;
         };
         /**
-         * Get Usage Endpoint
+         * Get Usage
          * @description Return the caller's usage dashboard data.
          */
         get: operations['get_usage_endpoint'];
@@ -1216,7 +1241,6 @@ interface components {
             budget: components['schemas']['AgentConfigBudget'];
             /**
              * @default {
-             *       "model": "claude-opus-5",
              *       "system": ""
              *     }
              */
@@ -1225,7 +1249,6 @@ interface components {
             /**
              * @default {
              *       "enabled": true,
-             *       "interactive": true,
              *       "metadata": {
              *         "annotations": {},
              *         "labels": []
@@ -1235,21 +1258,18 @@ interface components {
              */
             ellipsis: components['schemas']['AgentConfigEllipsis'];
             /**
+             * Environment
              * @default {
              *       "compute": {},
              *       "hooks": {},
              *       "image": {},
+             *       "mcp_servers": [],
              *       "repositories": [],
              *       "variables": []
              *     }
              */
-            environment: components['schemas']['AgentConfigEnvironment'];
+            environment: string | components['schemas']['AgentConfigEnvironment'];
             input?: components['schemas']['AgentConfigInput'] | null;
-            /**
-             * Mcp Servers
-             * @default []
-             */
-            mcp_servers: (string | components['schemas']['AgentConfigMcpServer'])[];
             output?: components['schemas']['AgentConfigOutput'] | null;
             /**
              * @default {
@@ -1284,11 +1304,8 @@ interface components {
             fallback_model?: string | null;
             /** Max Turns */
             max_turns?: number | null;
-            /**
-             * Model
-             * @default claude-opus-5
-             */
-            model: string;
+            /** Model */
+            model?: string | null;
             settings?: components['schemas']['AgentConfigSettingsRef'] | null;
             /**
              * System
@@ -1381,17 +1398,15 @@ interface components {
          * AgentConfigEllipsis
          * @description The Ellipsis product namespace for a config file: which schema this is
          *     (`version`), the human-facing identity (`name`/`description`), freeform
-         *     organizational `metadata`, whether the agent is `enabled`, and the
-         *     human-access flag `interactive`. The presence of a top-level `ellipsis:`
-         *     mapping is what marks a YAML file as an Ellipsis agent config (vs arbitrary
-         *     YAML that merely lives under a config directory) — see
-         *     `yaml_is_ellipsis_config`.
+         *     organizational `metadata`, and whether the agent is `enabled`. The
+         *     presence of a top-level `ellipsis:` mapping is what marks a YAML file as
+         *     an Ellipsis agent config (vs arbitrary YAML that merely lives under a
+         *     config directory) — see `yaml_is_ellipsis_config`.
          *
-         *     `enabled`/`interactive` are agent behavior, not freeform metadata, so they
-         *     stay inside the config `sha` (only `metadata` is sha-excluded).
-         *     `interactive` lets a human `agent session connect` to a live session (CLI
-         *     relay). It does not decide whether a session is ephemeral or durable — that
-         *     is the trigger's job.
+         *     `enabled` is agent behavior, not freeform metadata, so it stays inside
+         *     the config `sha` (only `metadata` is sha-excluded). Whether a session
+         *     accepts messages is a per-run choice (POST /v1/sessions `interactive`),
+         *     not a config one.
          */
         AgentConfigEllipsis: {
             /** Description */
@@ -1401,11 +1416,6 @@ interface components {
              * @default true
              */
             enabled: boolean;
-            /**
-             * Interactive
-             * @default true
-             */
-            interactive: boolean;
             /**
              * @default {
              *       "annotations": {},
@@ -1453,6 +1463,11 @@ interface components {
             hooks: components['schemas']['AgentConfigEnvironmentHooks'];
             /** @default {} */
             image: components['schemas']['AgentConfigEnvironmentImage'];
+            /**
+             * Mcp Servers
+             * @default []
+             */
+            mcp_servers: (string | components['schemas']['AgentConfigMcpServer'] | components['schemas']['AgentConfigMcpStdioServer'] | components['schemas']['AgentConfigMcpRemoteServer'])[];
             /**
              * Repositories
              * @default []
@@ -1578,19 +1593,69 @@ interface components {
             /** Message */
             message?: string | null;
         };
+        /**
+         * AgentConfigMcpRemoteServer
+         * @description A bring-your-own remote MCP server: the harness talks HTTP to `url`.
+         *     Nothing runs in the sandbox image. `headers` carry static auth (e.g.
+         *     `Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret
+         *     references, resolved at run time from the account's secrets store.
+         */
+        AgentConfigMcpRemoteServer: {
+            /**
+             * Headers
+             * @default {}
+             */
+            headers: {
+                [key: string]: string;
+            };
+            /** Name */
+            name: string;
+            /** Url */
+            url: string;
+        };
         /**
          * AgentConfigMcpServer
          * @description One built-in MCP server this agent opts into by name (`linear`/`slack`).
-         *     This is a name reference over the connected built-in set, NOT a custom-server
-         *     definition — there is no command/url/headers shape (that was the old,
-         *     removed field, and Ellipsis does not support bring-your-own MCP servers).
-         *     It only matters when the named integration is set to `opt_in` inclusion; an
-         *     integration in the default `all_sessions` mode is added regardless.
+         *     A name reference over the connected built-in set — the platform manages the
+         *     server's transport and credentials. It only matters when the named
+         *     integration is set to `opt_in` inclusion; an integration in the default
+         *     `all_sessions` mode is added regardless. For a server the platform does not
+         *     provide, define it instead (`AgentConfigMcpStdioServer` /
+         *     `AgentConfigMcpRemoteServer`).
          */
         AgentConfigMcpServer: {
             /** Name */
             name: string;
         };
+        /**
+         * AgentConfigMcpStdioServer
+         * @description A bring-your-own stdio MCP server: the harness spawns `command` inside
+         *     the sandbox and speaks JSON-RPC over its stdin/stdout. The command must be
+         *     runnable in the sandbox image — install its runtime via `image.setup` /
+         *     `image.dockerfile_append` if the base image lacks it.
+         *
+         *     `env` values may embed `${NAME}` references, resolved at run time from the
+         *     account's secrets store (see `mcp_secret_refs`); everything else is passed
+         *     literally.
+         */
+        AgentConfigMcpStdioServer: {
+            /**
+             * Args
+             * @default []
+             */
+            args: string[];
+            /** Command */
+            command: string;
+            /**
+             * Env
+             * @default {}
+             */
+            env: {
+                [key: string]: string;
+            };
+            /** Name */
+            name: string;
+        };
         /**
          * AgentConfigMemorySize
          * @description A memory size as explicit units, summed (binary: 1GB = 1024MB = 1024MiB).
@@ -1606,9 +1671,14 @@ interface components {
         /**
          * AgentConfigMentionPlatform
          * @description The surface an @ellipsis mention can come from.
+         *
+         *     No SLACK member: Slack routing is not a trigger on an agent config, it is the
+         *     `slack.yaml` routing file (`SlackConfig`), which answers the questions a
+         *     platform list cannot — which channel, and whose DM. A mention trigger listing
+         *     `slack` is therefore a config error, not a silently-never-fires config.
          * @enum {string}
          */
-        AgentConfigMentionPlatform: 'github' | 'slack' | 'linear';
+        AgentConfigMentionPlatform: 'github' | 'linear';
         /** AgentConfigMentionTrigger */
         AgentConfigMentionTrigger: {
             /**
@@ -1779,31 +1849,6 @@ interface components {
              */
             configs: components['schemas']['Config'][];
         };
-        /**
-         * AgentDefaults
-         * @description Which agent config serves sessions started without an explicit config:
-         *     one account-wide rung, plus a rung per repository.
-         *
-         *     Values are config ids — stable across renames, unlike the agent's name.
-         *     A repo rung whose repository this installation can no longer see is absent
-         *     from `repositories`; its row is left in place, so re-installing the repo
-         *     brings the rung back.
-         */
-        AgentDefaults: {
-            /**
-             * Account
-             * @description Config id serving sessions with no repository context, or null when no account default is set.
-             */
-            account?: string | null;
-            /**
-             * Repositories
-             * @description Config id per repository, keyed "owner/name". A repository with no default set is absent.
-             * @default {}
-             */
-            repositories: {
-                [key: string]: string;
-            };
-        };
         /**
          * AgentTemplate
          * @description A built-in agent template: a ready-to-use agent config plus the
@@ -2874,46 +2919,19 @@ interface components {
         };
         /**
          * CreateAgentConfigRequest
-         * @description Parameters for creating an agent config. Exactly one of config or
-         *     template_id must be set.
+         * @description Parameters for creating an agent config.
          */
         CreateAgentConfigRequest: {
-            /** @description An inline agent config. */
-            config?: components['schemas']['AgentConfig'] | null;
-            /**
-             * Path
-             * @description File path within the repo, when a repository is named. Omit for the default agents/<slug>.yaml; if set it must be a location the config sync scans (a .yaml/.yml file under agents/, .agents/, ellipsis/, or .ellipsis/ at any depth).
-             */
-            path?: string | null;
-            /**
-             * Repository
-             * @description Define the agent as a file in this repository: Ellipsis opens a pull request adding it, and the agent goes live when that merges. Repository name within the caller's account; the owner is always the account, so pass a bare name (e.g. "my-service"), not "owner/my-service". Omit to create the agent through the API alone, with no file and live immediately.
-             */
-            repository?: string | null;
-            /**
-             * Template Id
-             * @description A gallery template slug (see GET /v1/agents/templates).
-             */
-            template_id?: string | null;
+            /** @description The agent's definition. */
+            config: components['schemas']['AgentConfig'];
         };
         /**
-         * CreateAgentConfigResponse
-         * @description The created agent config, plus the pull request that adds its file when
-         *     one was opened.
+         * CreateEnvironmentRequest
+         * @description Parameters for creating an environment.
          */
-        CreateAgentConfigResponse: {
-            /** @description The created agent config. */
-            config: components['schemas']['Config'];
-            /**
-             * Path
-             * @description The file path the config was written to, or null when the agent has no file.
-             */
-            path?: string | null;
-            /**
-             * Pull Request Url
-             * @description The pull request that adds the config file. The agent becomes live once it merges and syncs. Null when no repository was named: the agent is already live.
-             */
-            pull_request_url?: string | null;
+        CreateEnvironmentRequest: {
+            /** @description The environment's definition. */
+            environment: components['schemas']['EnvironmentConfig'];
         };
         /**
          * CreateFileRequest
@@ -3079,99 +3097,240 @@ interface components {
             /** Match */
             match?: string[] | null;
         };
-        /** ErrorInfo */
-        ErrorInfo: {
-            /**
-             * Code
-             * @description Stable machine-readable error code. Open vocabulary — handle unknown codes by HTTP status. Known values: account_blocked, conflict, contact_email_required, failed_dependency, file_quota_exceeded, forbidden, internal_error, invalid_request, not_found, rate_limit_exceeded, rate_limited, review_in_flight, session_closed, session_ephemeral_trigger, session_finished, session_harness_single_turn, session_mention_surface, session_non_interactive, unauthorized, unavailable.
-             */
-            code: string;
-            /**
-             * Message
-             * @description Human-readable explanation. Wording may change at any time; switch on `code`, never on this text.
-             */
-            message: string;
-            /**
-             * Request Id
-             * @description Present on internal server errors: quote it when contacting support to identify the exact failure.
-             */
-            request_id?: string | null;
-        };
-        /**
-         * ErrorResponse
-         * @description The error envelope every /v1 error returns.
-         */
-        ErrorResponse: {
-            error: components['schemas']['ErrorInfo'];
-        };
-        /**
-         * ExecutionStatus
-         * @description Per-execution status ladder (was AgentProcessStatus). Distinct from the
-         *     session's durable `session_state` and from `agent_sessions.status`, which
-         *     remains the atomic claim/dispatch guard.
-         * @enum {string}
-         */
-        ExecutionStatus: 'running' | 'failed' | 'done';
         /**
-         * File
-         * @description A file's metadata — the file itself is fetched via a separate
-         *     download URL.
+         * Environment
+         * @description A saved environment: the machine agents run in (repositories,
+         *     variables, MCP servers, image, compute, hooks), defined once and
+         *     referenced by name or id from agent configs and session starts.
          */
-        File: {
-            /**
-             * Content Type
-             * @description The file's MIME type.
-             */
-            content_type: string;
+        Environment: {
             /**
              * Created At
              * Format: date-time
-             * @description When the file was uploaded.
+             * @description When the environment was created.
              */
             created_at: string;
-            /**
-             * Filename
-             * @description The original file basename, for display.
-             */
-            filename: string;
+            /** @description The GitHub account that last edited the environment, when known. */
+            edited_by?: components['schemas']['GithubAccountSnippet'] | null;
+            /** @description The environment definition itself, as parsed from its YAML. */
+            environment: components['schemas']['EnvironmentConfig'];
             /**
              * Id
-             * @description The file's unique identifier.
+             * @description Unique identifier of the environment.
              */
             id: string;
             /**
-             * Session Id
-             * @description The agent session that produced this file, when it was uploaded from a sandbox. Null for uploads made outside an agent session.
+             * Last Sync Error
+             * @description The parse or validation error from the most recent sync attempt, or null when it succeeded. A non-null value means sessions run the last good definition, not the YAML currently on the branch.
              */
-            session_id?: string | null;
+            last_sync_error?: string | null;
             /**
-             * Size Bytes
-             * @description The size of the stored file in bytes.
+             * Last Synced Commit Sha
+             * @description The last commit the environment was synced from.
              */
-            size_bytes: number;
-        };
-        /**
-         * FilesListResponse
-         * @description A page of the calling account's files, newest first. Metadata only —
-         *     fetch an individual file to get a download URL.
-         */
-        FilesListResponse: {
+            last_synced_commit_sha?: string | null;
+            /** @description "github" environments are defined by a file in a repository and are changed by editing that file; "api" environments have no file and are changed through this API. */
+            managed_by: components['schemas']['ConfigManagedBy'];
             /**
-             * Files
-             * @description The account's files, newest first.
+             * Name
+             * @description The environment's customer-unique addressable name; usable anywhere an environment is referenced, interchangeably with the id.
              */
-            files: components['schemas']['File'][];
+            name: string;
             /**
-             * Has More
-             * @description Whether more results exist past this page.
-             * @default false
+             * Sha
+             * @description The environment's content identity fingerprint.
              */
-            has_more: boolean;
+            sha: string;
+            /** @description The repository, path, and branch the environment syncs from. Null for environments managed through the API. */
+            source_details?: components['schemas']['AgentConfigSourceGithub'] | null;
             /**
-             * Next Cursor
-             * @description Pass as `cursor` to fetch the next page. Null on the last page. Opaque — echo it back rather than parsing it.
+             * Updated At
+             * Format: date-time
+             * @description When the environment was last updated.
              */
-            next_cursor?: string | null;
+            updated_at: string;
+        };
+        /**
+         * EnvironmentConfig
+         * @description A parsed environment document: identity plus the environment body.
+         *
+         *     The body fields are flattened to the top level of the file (not nested
+         *     under an `environment:` key) — the file *is* the environment, so nesting
+         *     would be ceremony. `to_environment()` projects the body for substitution
+         *     into an agent config.
+         */
+        EnvironmentConfig: {
+            /** @default {} */
+            compute: components['schemas']['AgentConfigCompute'];
+            ellipsis: components['schemas']['EnvironmentConfigEllipsis'];
+            /** @default {} */
+            hooks: components['schemas']['AgentConfigEnvironmentHooks'];
+            /** @default {} */
+            image: components['schemas']['AgentConfigEnvironmentImage'];
+            /**
+             * Mcp Servers
+             * @default []
+             */
+            mcp_servers: (string | components['schemas']['AgentConfigMcpServer'] | components['schemas']['AgentConfigMcpStdioServer'] | components['schemas']['AgentConfigMcpRemoteServer'])[];
+            /**
+             * Repositories
+             * @default []
+             */
+            repositories: components['schemas']['AgentConfigRepository'][];
+            /**
+             * Variables
+             * @default []
+             */
+            variables: components['schemas']['AgentConfigEnvironmentVariable'][];
+        };
+        /**
+         * EnvironmentConfigEllipsis
+         * @description The Ellipsis namespace of an environment file. `kind: environment` is
+         *     what routes a synced YAML here instead of to the agent-config parser —
+         *     an agent config carries no `kind` (or `kind: agent`, tolerated nowhere:
+         *     absence is the agent marker).
+         */
+        EnvironmentConfigEllipsis: {
+            /** Description */
+            description?: string | null;
+            /**
+             * Kind
+             * @constant
+             */
+            kind: 'environment';
+            /**
+             * @default {
+             *       "annotations": {},
+             *       "labels": []
+             *     }
+             */
+            metadata: components['schemas']['AgentConfigMetadata'];
+            /** Name */
+            name?: string | null;
+        };
+        /**
+         * EnvironmentResponse
+         * @description One saved environment.
+         */
+        EnvironmentResponse: {
+            /** @description The saved environment. */
+            environment: components['schemas']['Environment'];
+        };
+        /**
+         * EnvironmentSource
+         * @description How a session's environment was chosen. None (the field is nullable)
+         *     when the config carried an inline environment block and no resolution ran —
+         *     an inline environment is not a reference, so there is nothing to record.
+         *
+         *     Not derivable from the row: `environment_id` says WHICH environment, not
+         *     how it was chosen, and is null for the built-in basic sandbox.
+         * @enum {string}
+         */
+        EnvironmentSource: 'request' | 'agent_config' | 'repo_default' | 'account_default' | 'platform_default';
+        /**
+         * EnvironmentsListResponse
+         * @description The caller's saved environments.
+         */
+        EnvironmentsListResponse: {
+            /**
+             * Environments
+             * @description Saved environments.
+             */
+            environments: components['schemas']['Environment'][];
+        };
+        /** ErrorInfo */
+        ErrorInfo: {
+            /**
+             * Code
+             * @description Stable machine-readable error code. Open vocabulary — handle unknown codes by HTTP status. Known values: account_blocked, conflict, contact_email_required, failed_dependency, file_quota_exceeded, forbidden, internal_error, invalid_request, not_found, rate_limit_exceeded, rate_limited, review_in_flight, session_closed, session_ephemeral_trigger, session_finished, session_harness_single_turn, session_mention_surface, session_non_interactive, unauthorized, unavailable.
+             */
+            code: string;
+            /**
+             * Message
+             * @description Human-readable explanation. Wording may change at any time; switch on `code`, never on this text.
+             */
+            message: string;
+            /**
+             * Request Id
+             * @description Present on internal server errors: quote it when contacting support to identify the exact failure.
+             */
+            request_id?: string | null;
+        };
+        /**
+         * ErrorResponse
+         * @description The error envelope every /v1 error returns.
+         */
+        ErrorResponse: {
+            error: components['schemas']['ErrorInfo'];
+        };
+        /**
+         * ExecutionStatus
+         * @description Per-execution status ladder (was AgentProcessStatus). Distinct from the
+         *     session's durable `session_state` and from `agent_sessions.status`, which
+         *     remains the atomic claim/dispatch guard.
+         * @enum {string}
+         */
+        ExecutionStatus: 'running' | 'failed' | 'done';
+        /**
+         * File
+         * @description A file's metadata — the file itself is fetched via a separate
+         *     download URL.
+         */
+        File: {
+            /**
+             * Content Type
+             * @description The file's MIME type.
+             */
+            content_type: string;
+            /**
+             * Created At
+             * Format: date-time
+             * @description When the file was uploaded.
+             */
+            created_at: string;
+            /**
+             * Filename
+             * @description The original file basename, for display.
+             */
+            filename: string;
+            /**
+             * Id
+             * @description The file's unique identifier.
+             */
+            id: string;
+            /**
+             * Session Id
+             * @description The agent session that produced this file, when it was uploaded from a sandbox. Null for uploads made outside an agent session.
+             */
+            session_id?: string | null;
+            /**
+             * Size Bytes
+             * @description The size of the stored file in bytes.
+             */
+            size_bytes: number;
+        };
+        /**
+         * FilesListResponse
+         * @description A page of the calling account's files, newest first. Metadata only —
+         *     fetch an individual file to get a download URL.
+         */
+        FilesListResponse: {
+            /**
+             * Files
+             * @description The account's files, newest first.
+             */
+            files: components['schemas']['File'][];
+            /**
+             * Has More
+             * @description Whether more results exist past this page.
+             * @default false
+             */
+            has_more: boolean;
+            /**
+             * Next Cursor
+             * @description Pass as `cursor` to fetch the next page. Null on the last page. Opaque — echo it back rather than parsing it.
+             */
+            next_cursor?: string | null;
         };
         /**
          * FindingAnchor
@@ -4400,23 +4559,6 @@ interface components {
              */
             prs: number;
         };
-        /**
-         * PutAgentDefaultRequest
-         * @description Parameters for setting a default agent config, at either the account
-         *     or the repository level.
-         */
-        PutAgentDefaultRequest: {
-            /**
-             * Config Id
-             * @description The config to make the default: a config id, or the agent's customer-unique `ellipsis.name`.
-             */
-            config_id: string;
-            /**
-             * Repository
-             * @description The rung to set: "owner/name" for a repo default; omit to set the account default. Unlike session start's silent ignore, an unknown or foreign repo here is a 404.
-             */
-            repository?: string | null;
-        };
         /**
          * PutSecretsRequest
          * @description Store secrets for the account's sandboxes. Each secret is upserted by
@@ -4665,35 +4807,6 @@ interface components {
          * @enum {string}
          */
         RecordSource: 'lifecycle' | 'claude_code' | 'codex';
-        /**
-         * ReplayAgentSessionRequest
-         * @description Parameters for re-running an existing run's original trigger input as
-         *     a new run.
-         */
-        ReplayAgentSessionRequest: {
-            /**
-             * Config Id
-             * @description A saved config to replay against. By default the original run's frozen config snapshot is reused.
-             */
-            config_id?: string | null;
-            /**
-             * Config Override
-             * @description Optional partial-config override merged onto the chosen config and re-validated — e.g. {"claude": {"model": "claude-opus-4-8"}} to replay the run on a different model, or {"budget": {"session": 5.0}} to raise its budget. Mutually exclusive with config_override_yaml.
-             */
-            config_override?: {
-                [key: string]: unknown;
-            } | null;
-            /**
-             * Config Override Yaml
-             * @description The same partial-config override as a YAML/JSON string (e.g. read from a file). Mutually exclusive with config_override.
-             */
-            config_override_yaml?: string | null;
-            /**
-             * Prompt
-             * @description Per-run instructions. Omit to inherit the original run's prompt (a bare replay re-runs the same instructions); pass "" to clear it.
-             */
-            prompt?: string | null;
-        };
         /**
          * RepoFacet
          * @description A repository filter option, counted over the unfiltered window so
@@ -4749,7 +4862,7 @@ interface components {
          *     routes; nothing maps to it yet.
          * @enum {string}
          */
-        Resource: 'account' | 'alerts' | 'sessions' | 'files' | 'memories' | 'reviews' | 'configs' | 'defaults' | 'secrets' | 'templates' | 'integrations' | 'tokens';
+        Resource: 'account' | 'alerts' | 'sessions' | 'files' | 'memories' | 'reviews' | 'configs' | 'defaults' | 'environments' | 'secrets' | 'templates' | 'integrations' | 'tokens';
         /**
          * Review
          * @description One code review: one pipeline iteration over one commit range of a pull
@@ -5972,6 +6085,8 @@ interface components {
              * @description When the session was created.
              */
             created_at: string;
+            /** @description The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is inside agent.config.environment. */
+            environment?: components['schemas']['SessionEnvironment'];
             /** @description How the session ended; null until it is terminal. */
             exit_status?: components['schemas']['SessionExitStatus'] | null;
             /** @description What the session did to git, one entry per repository in its workspace: the commit and branch it sits on, per-file line counts for its uncommitted changes, and the pull requests it opened. Null if nothing was ever captured. */
@@ -6139,6 +6254,33 @@ interface components {
              */
             total: number;
         };
+        /**
+         * SessionDefaults
+         * @description The account-wide session defaults.
+         */
+        SessionDefaults: {
+            /**
+             * Model
+             * @description Canonical model id every session falls back to when neither the request nor its agent config names one, or null when unset (sessions then run the platform default).
+             */
+            model?: string | null;
+        };
+        /**
+         * SessionEnvironment
+         * @description The environment this session resolved: which saved environment (as it
+         *     exists now) and how it was chosen. The environment's frozen BODY rides
+         *     inside `agent.config.environment` — substitution happens before the config
+         *     snapshot freezes — so this object is provenance, not payload.
+         */
+        SessionEnvironment: {
+            /**
+             * Environment Id
+             * @description Identifier of the saved environment the session's config resolved. Null for an inline environment block or the built-in basic sandbox.
+             */
+            environment_id?: string | null;
+            /** @description How the environment was chosen (request, agent_config, repo_default, account_default, platform_default). Null when the config carried its own inline environment. */
+            source?: components['schemas']['EnvironmentSource'] | null;
+        };
         /**
          * SessionExecution
          * @description One runtime attempt of a session — the initial start, a cold wake of a
@@ -6809,40 +6951,28 @@ interface components {
         };
         /**
          * StartAgentSessionRequest
-         * @description Parameters for starting a new agent session.
+         * @description Parameters for starting a new agent session: an optional base config
+         *     pointer, the message fields, and any AgentConfig keys to patch on top.
          */
         StartAgentSessionRequest: {
-            /** @description An inline agent config to run under. */
-            config?: components['schemas']['AgentConfig'] | null;
-            /**
-             * Config Id
-             * @description A saved agent config to run under: its id, or the agent's customer-unique `ellipsis.name`.
-             */
-            config_id?: string | null;
-            /**
-             * Config Override
-             * @description Optional partial-config override merged onto the chosen config and re-validated (e.g. {"budget": {"session": 5.0}} to raise just this session's budget). Merged onto config_id/template_id or the platform default; with an inline config, set fields directly instead. Mutually exclusive with config_override_yaml.
-             */
-            config_override?: {
-                [key: string]: unknown;
-            } | null;
-            /**
-             * Config Override Yaml
-             * @description The same partial-config override as a YAML/JSON string (e.g. read from a file). Mutually exclusive with config_override.
-             */
-            config_override_yaml?: string | null;
+            /** @description The session's spend limits, e.g. {"session": 5.0}. */
+            budget?: components['schemas']['AgentConfigBudget'] | null;
+            /** @description The Claude-harness block: `{"model": ...}` to pick this session's model, plus system/effort/fallback_model/max_turns/settings. */
+            claude?: components['schemas']['AgentConfigClaude'] | null;
+            /** @description The Codex-harness block. Its presence on the EFFECTIVE config selects the Codex harness, exactly as in a saved config. */
+            codex?: components['schemas']['AgentConfigCodex'] | null;
+            /** @description Platform housekeeping: metadata, interactive, force_rebuild. */
+            ellipsis?: components['schemas']['StartSessionEllipsis'];
             /**
-             * Force Rebuild
-             * @description Skip the image cache for this session's initial provision: a fresh full build whose snapshot then refreshes the cache for later runs. A wake of a durable session provisions through the cache as usual. The CLI's `--rebuild`.
-             * @default false
+             * Environment
+             * @description Where the session runs. A STRING (a saved environment's `env_...` id or name) re-picks that environment wholesale — it beats the base config's own reference. An OBJECT deep-merges onto the resolved environment (repositories merge by identity, see above).
              */
-            force_rebuild: boolean;
+            environment?: string | components['schemas']['AgentConfigEnvironment'] | null;
             /**
-             * Idle Start
-             * @description Start the session with no initial message: the sandbox spins up, the agent starts idle at the prompt, and the first message sent to the session opens turn 0. Mutually exclusive with prompt. Ignored when the resolved config is not interactive (an ephemeral run keeps its kickoff — it can never receive a message).
-             * @default false
+             * From Config Id
+             * @description The saved agent config to use as this session's base: its id, or the agent's customer-unique `ellipsis.name`. Omitted, the base is the bare ad-hoc config — an empty system prompt on the account's default model in the basic sandbox — so the request's own keys and prompt fully describe the run.
              */
-            idle_start: boolean;
+            from_config_id?: string | null;
             /**
              * Input
              * @description The typed payload for an agent that declares input.json_schema: validated against the effective config's schema (422 on mismatch), rendered into the session's initial message (the agent's input.message template, or a JSON block). Required when the agent declares a schema; rejected when it does not.
@@ -6850,29 +6980,20 @@ interface components {
             input?: {
                 [key: string]: unknown;
             } | null;
-            /**
-             * Metadata
-             * @description Arbitrary string key/value metadata stored on the session.
-             * @default {}
-             */
-            metadata: {
-                [key: string]: string;
-            };
+            /** @description The structured-output exit contract for this session. */
+            output?: components['schemas']['AgentConfigOutput'] | null;
+            /** @description What the session may touch, per minted credential. */
+            permissions?: components['schemas']['AgentConfigPermissions'] | null;
             /**
              * Prompt
-             * @description Per-run instructions appended to the initial query after the config's shared system prompt. Applies regardless of which config source is used.
+             * @description The session's first message. Omit it and the session starts idle: the sandbox spins up, the agent waits at the prompt, and the first message you send opens turn 0.
              */
             prompt?: string | null;
             /**
-             * Repository
-             * @description The "owner/name" repository the client is standing in (the CLI's detected git remote). Selects the repo rung of the defaults ladder, and is merged into the sandbox repository set (cloned at its default branch) regardless of which config source is used. An unknown or foreign repo is ignored.
-             */
-            repository?: string | null;
-            /**
-             * Template Id
-             * @description A maintained run-on-demand template slug (e.g. "ellipsis-helper"), resolved server-side to its config. At most one of config_id, config, or template_id may be set; if none is, the run resolves the account's default-config ladder (repo default, then account default, then the platform default config).
+             * Skills
+             * @description Config-declared skills; replaces the base config's list.
              */
-            template_id?: string | null;
+            skills?: components['schemas']['AgentConfigSkill'][] | null;
         };
         /**
          * StartCliAuthResponse
@@ -6911,6 +7032,35 @@ interface components {
              */
             verification_uri_complete: string;
         };
+        /**
+         * StartSessionEllipsis
+         * @description Platform housekeeping for the session — the request-side `ellipsis`
+         *     block. Session-scoped: unlike a config file's `ellipsis` block it carries
+         *     no `name`/`enabled` (those describe a saved agent, not a run) — and
+         *     sending them here is a 422, not a silent drop.
+         */
+        StartSessionEllipsis: {
+            /**
+             * Force Rebuild
+             * @description Skip the image cache for this session's initial provision: a fresh full build whose snapshot then refreshes the cache for later runs. A wake of a durable session provisions through the cache as usual. The CLI's `--rebuild`.
+             * @default false
+             */
+            force_rebuild: boolean;
+            /**
+             * Interactive
+             * @description Whether the session stays open for messages after its first turn. Set false for a one-shot run that does its job and closes without holding a warm sandbox; a one-shot run must carry a prompt (or input), since nothing can ever be sent to it later. Agents on the Codex harness are one-shot regardless.
+             * @default true
+             */
+            interactive: boolean;
+            /**
+             * Metadata
+             * @description Arbitrary string key/value metadata stored on the session.
+             * @default {}
+             */
+            metadata: {
+                [key: string]: string;
+            };
+        };
         /**
          * TokensInfo
          * @description Token/cost usage, per record (one API call's counts, aggregate fields at
@@ -6975,6 +7125,14 @@ interface components {
             /** @description The agent's new definition. Replaces the previous one wholesale — this is not a partial update. */
             config: components['schemas']['AgentConfig'];
         };
+        /**
+         * UpdateEnvironmentRequest
+         * @description A replacement definition for an environment managed through the API.
+         */
+        UpdateEnvironmentRequest: {
+            /** @description The environment's new definition. Replaces the previous one wholesale — this is not a partial update. */
+            environment: components['schemas']['EnvironmentConfig'];
+        };
         /**
          * UsageDailyPoint
          * @description One day's usage: tokens split by type, and cost split into the four
@@ -7162,15 +7320,15 @@ interface operations {
         };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['CreateAgentConfigResponse'];
+                    'application/json': components['schemas']['AgentConfigResponse'];
                 };
             };
-            /** @description Provide exactly one of config or template_id; or the config, path, or target branch is invalid. */
+            /** @description The config is invalid. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -7197,16 +7355,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The template or repository was not found in your account. */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description An agent with that name already exists, another agent is already synced from that path, or a file already exists there. */
+            /** @description An agent with that name already exists. */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -7586,7 +7735,7 @@ interface operations {
             };
         };
     };
-    list_agent_defaults: {
+    list_agent_templates: {
         parameters: {
             query?: never;
             header?: {
@@ -7603,7 +7752,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['AgentDefaults'];
+                    'application/json': components['schemas']['AgentTemplatesListResponse'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -7635,20 +7784,18 @@ interface operations {
             };
         };
     };
-    put_agent_default: {
+    get_agent_template: {
         parameters: {
             query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                'application/json': components['schemas']['PutAgentDefaultRequest'];
+            path: {
+                template_id: string;
             };
+            cookie?: never;
         };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
             200: {
@@ -7656,16 +7803,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['AgentDefaults'];
-                };
-            };
-            /** @description The config is not eligible as a default: its pull request has not merged, or it is disabled. */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
+                    'application/json': components['schemas']['AgentTemplate'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -7686,7 +7824,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The config or repository was not found in your account. */
+            /** @description No such template. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -7706,11 +7844,13 @@ interface operations {
             };
         };
     };
-    delete_agent_default: {
+    list_alerts: {
         parameters: {
             query?: {
-                /** @description Repo rung to clear ("owner/name"); omit to clear the account default. */
-                repository?: string | null;
+                status?: components['schemas']['AlertStatus'] | null;
+                source?: components['schemas']['AlertSource'] | null;
+                limit?: number;
+                cursor?: string | null;
             };
             header?: {
                 'user-agent'?: string | null;
@@ -7721,11 +7861,13 @@ interface operations {
         requestBody?: never;
         responses: {
             /** @description Successful Response */
-            204: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content?: never;
+                content: {
+                    'application/json': components['schemas']['AlertsListResponse'];
+                };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
             401: {
@@ -7745,15 +7887,6 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description No default is set at that rung, or the repository was not found in your account. */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
             /** @description Validation Error */
             422: {
                 headers: {
@@ -7765,13 +7898,15 @@ interface operations {
             };
         };
     };
-    list_agent_templates: {
+    get_alert: {
         parameters: {
             query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
-            path?: never;
+            path: {
+                alert_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
@@ -7782,7 +7917,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['AgentTemplatesListResponse'];
+                    'application/json': components['schemas']['AlertResponse'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -7803,6 +7938,15 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
+            /** @description No such alert in your account. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
             /** @description Validation Error */
             422: {
                 headers: {
@@ -7814,14 +7958,14 @@ interface operations {
             };
         };
     };
-    get_agent_template: {
+    dismiss_alert: {
         parameters: {
             query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
             path: {
-                template_id: string;
+                alert_id: string;
             };
             cookie?: never;
         };
@@ -7833,7 +7977,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['AgentTemplate'];
+                    'application/json': components['schemas']['AlertResponse'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -7854,7 +7998,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description No such template. */
+            /** @description No such alert in your account. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -7863,6 +8007,15 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
+            /** @description The alert is not open. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
             /** @description Validation Error */
             422: {
                 headers: {
@@ -7874,13 +8027,19 @@ interface operations {
             };
         };
     };
-    list_alerts: {
+    get_analytics_metrics: {
         parameters: {
             query?: {
-                status?: components['schemas']['AlertStatus'] | null;
-                source?: components['schemas']['AlertSource'] | null;
-                limit?: number;
-                cursor?: string | null;
+                days?: number | null;
+                start?: string | null;
+                end?: string | null;
+                /** @description Filter to repositories by "owner/name". */
+                repo?: string[] | null;
+                /** @description Filter by PR-author login(s). */
+                author?: string[] | null;
+                account_type?: string;
+                /** @description Filter by parent-PR status (open|draft|merged|closed). */
+                status?: string[] | null;
             };
             header?: {
                 'user-agent'?: string | null;
@@ -7896,7 +8055,16 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['AlertsListResponse'];
+                    'application/json': components['schemas']['GetAnalyticsMetricsResponse'];
+                };
+            };
+            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -7928,15 +8096,21 @@ interface operations {
             };
         };
     };
-    get_alert: {
+    get_analytics_pull_requests: {
         parameters: {
-            query?: never;
+            query?: {
+                days?: number | null;
+                start?: string | null;
+                end?: string | null;
+                account_type?: string[] | null;
+                repository_id?: number[] | null;
+                author_id?: number[] | null;
+                status?: string[] | null;
+            };
             header?: {
                 'user-agent'?: string | null;
             };
-            path: {
-                alert_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -7947,11 +8121,11 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['AlertResponse'];
+                    'application/json': components['schemas']['GetAnalyticsPullRequestsResponse'];
                 };
             };
-            /** @description The bearer token is missing, invalid, or revoked. */
-            401: {
+            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
+            400: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -7959,8 +8133,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The credential may not perform this action, or the account is blocked. */
-            403: {
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -7968,8 +8142,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description No such alert in your account. */
-            404: {
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -7988,15 +8162,22 @@ interface operations {
             };
         };
     };
-    dismiss_alert: {
+    get_analytics_reviews: {
         parameters: {
-            query?: never;
+            query?: {
+                days?: number | null;
+                start?: string | null;
+                end?: string | null;
+                repo?: string[] | null;
+                /** @description Filter by reviewer login(s). */
+                author?: string[] | null;
+                account_type?: string;
+                review_state?: string[] | null;
+            };
             header?: {
                 'user-agent'?: string | null;
             };
-            path: {
-                alert_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -8007,7 +8188,16 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['AlertResponse'];
+                    'application/json': components['schemas']['GetAnalyticsReviewsResponse'];
+                };
+            };
+            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -8028,8 +8218,41 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description No such alert in your account. */
-            404: {
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    cli_auth_poll: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['CliAuthPollRequest'];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['PollCliAuthResponse'];
+                };
+            };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8037,8 +8260,17 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The alert is not open. */
-            409: {
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description Unknown device code. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8057,20 +8289,47 @@ interface operations {
             };
         };
     };
-    get_analytics_metrics: {
+    cli_auth_start: {
         parameters: {
-            query?: {
-                days?: number | null;
-                start?: string | null;
-                end?: string | null;
-                /** @description Filter to repositories by "owner/name". */
-                repo?: string[] | null;
-                /** @description Filter by PR-author login(s). */
-                author?: string[] | null;
-                account_type?: string;
-                /** @description Filter by parent-PR status (open|draft|merged|closed). */
-                status?: string[] | null;
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['StartCliAuthResponse'];
+                };
             };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+        };
+    };
+    get_budget: {
+        parameters: {
+            query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
@@ -8085,11 +8344,20 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['GetAnalyticsMetricsResponse'];
+                    'application/json': components['schemas']['BudgetSummary'];
                 };
             };
-            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
-            400: {
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8097,6 +8365,37 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    list_environments: {
+        parameters: {
+            query?: never;
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['EnvironmentsListResponse'];
+                };
+            };
             /** @description The bearer token is missing, invalid, or revoked. */
             401: {
                 headers: {
@@ -8126,35 +8425,31 @@ interface operations {
             };
         };
     };
-    get_analytics_pull_requests: {
+    create_environment: {
         parameters: {
-            query?: {
-                days?: number | null;
-                start?: string | null;
-                end?: string | null;
-                account_type?: string[] | null;
-                repository_id?: number[] | null;
-                author_id?: number[] | null;
-                status?: string[] | null;
-            };
+            query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
             path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['CreateEnvironmentRequest'];
+            };
+        };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['GetAnalyticsPullRequestsResponse'];
+                    'application/json': components['schemas']['EnvironmentResponse'];
                 };
             };
-            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
+            /** @description The environment is invalid. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -8181,33 +8476,35 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description Validation Error */
+            /** @description An environment with that name already exists. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The environment's name is missing or malformed. */
             422: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['HTTPValidationError'];
+                    'application/json': components['schemas']['ErrorResponse'];
                 };
             };
         };
     };
-    get_analytics_reviews: {
+    get_environment: {
         parameters: {
-            query?: {
-                days?: number | null;
-                start?: string | null;
-                end?: string | null;
-                repo?: string[] | null;
-                /** @description Filter by reviewer login(s). */
-                author?: string[] | null;
-                account_type?: string;
-                review_state?: string[] | null;
-            };
+            query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
-            path?: never;
+            path: {
+                environment_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
@@ -8218,11 +8515,11 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['GetAnalyticsReviewsResponse'];
+                    'application/json': components['schemas']['EnvironmentResponse'];
                 };
             };
-            /** @description The time window is invalid: days combined with start, a non-positive days, or end not after start. */
-            400: {
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8230,8 +8527,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The bearer token is missing, invalid, or revoked. */
-            401: {
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8239,8 +8536,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The credential may not perform this action, or the account is blocked. */
-            403: {
+            /** @description No such environment in your account. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8259,16 +8556,20 @@ interface operations {
             };
         };
     };
-    cli_auth_poll: {
+    update_environment: {
         parameters: {
             query?: never;
-            header?: never;
-            path?: never;
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path: {
+                environment_id: string;
+            };
             cookie?: never;
         };
         requestBody: {
             content: {
-                'application/json': components['schemas']['CliAuthPollRequest'];
+                'application/json': components['schemas']['UpdateEnvironmentRequest'];
             };
         };
         responses: {
@@ -8278,7 +8579,16 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['PollCliAuthResponse'];
+                    'application/json': components['schemas']['EnvironmentResponse'];
+                };
+            };
+            /** @description The environment is invalid. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -8299,7 +8609,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description Unknown device code. */
+            /** @description No such environment in your account. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -8308,34 +8618,45 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description Validation Error */
+            /** @description The environment is defined by a file in a repository, or another live environment already holds the new name. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The environment's name is missing or malformed. */
             422: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['HTTPValidationError'];
+                    'application/json': components['schemas']['ErrorResponse'];
                 };
             };
         };
     };
-    cli_auth_start: {
+    delete_environment: {
         parameters: {
             query?: never;
-            header?: never;
-            path?: never;
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path: {
+                environment_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
             /** @description Successful Response */
-            201: {
+            204: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    'application/json': components['schemas']['StartCliAuthResponse'];
-                };
+                content?: never;
             };
             /** @description The bearer token is missing, invalid, or revoked. */
             401: {
@@ -8355,30 +8676,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-        };
-    };
-    get_budget: {
-        parameters: {
-            query?: never;
-            header?: {
-                'user-agent'?: string | null;
-            };
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Successful Response */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['BudgetSummary'];
-                };
-            };
-            /** @description The bearer token is missing, invalid, or revoked. */
-            401: {
+            /** @description No such environment in your account. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -8386,8 +8685,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The credential may not perform this action, or the account is blocked. */
-            403: {
+            /** @description The environment is defined by a file in a repository; delete that file instead. */
+            409: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -9895,7 +10194,7 @@ interface operations {
                     'application/json': components['schemas']['SessionResponse'];
                 };
             };
-            /** @description The request combines incompatible fields (multiple config sources, idle_start with prompt/input, or both override forms), or the config override is invalid. */
+            /** @description The request is incompatible with itself (a one-shot run with no prompt or input) or its config keys produce an invalid config. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -9922,7 +10221,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The named agent or template does not exist in your account. */
+            /** @description The named agent or environment does not exist in your account. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -9931,15 +10230,6 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The resolved default config is broken (deleted, disabled, unmerged, or on an inaccessible repository). */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
             /** @description The agent requires 'input' matching its input schema (missing or failed validation), or declares no input schema and 'input' was sent. */
             422: {
                 headers: {
@@ -10409,7 +10699,7 @@ interface operations {
             };
         };
     };
-    replay_agent_session: {
+    stop_agent_session: {
         parameters: {
             query?: never;
             header?: {
@@ -10420,14 +10710,10 @@ interface operations {
             };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                'application/json': components['schemas']['ReplayAgentSessionRequest'];
-            };
-        };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -10435,8 +10721,8 @@ interface operations {
                     'application/json': components['schemas']['SessionResponse'];
                 };
             };
-            /** @description The named config does not exist, or the config override is invalid. */
-            400: {
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -10444,8 +10730,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The bearer token is missing, invalid, or revoked. */
-            401: {
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -10453,8 +10739,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The credential may not perform this action, or the account is blocked. */
-            403: {
+            /** @description No such session in your account. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -10462,8 +10748,8 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description No such session in your account. */
-            404: {
+            /** @description The session has already finished. */
+            409: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -10482,7 +10768,7 @@ interface operations {
             };
         };
     };
-    stop_agent_session: {
+    ingest_agent_session_transcript: {
         parameters: {
             query?: never;
             header?: {
@@ -10493,7 +10779,11 @@ interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['IngestTranscriptRequest'];
+            };
+        };
         responses: {
             /** @description Successful Response */
             200: {
@@ -10501,7 +10791,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['SessionResponse'];
+                    'application/json': components['schemas']['TranscriptIngestResult'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -10531,7 +10821,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The session has already finished. */
+            /** @description The session has no execution yet to attach transcript records to. */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -10551,22 +10841,16 @@ interface operations {
             };
         };
     };
-    ingest_agent_session_transcript: {
+    get_session_defaults: {
         parameters: {
             query?: never;
             header?: {
                 'user-agent'?: string | null;
             };
-            path: {
-                session_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                'application/json': components['schemas']['IngestTranscriptRequest'];
-            };
-        };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
             200: {
@@ -10574,7 +10858,7 @@ interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['TranscriptIngestResult'];
+                    'application/json': components['schemas']['SessionDefaults'];
                 };
             };
             /** @description The bearer token is missing, invalid, or revoked. */
@@ -10595,8 +10879,43 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description No such session in your account. */
-            404: {
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
+    put_session_defaults: {
+        parameters: {
+            query?: never;
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                'application/json': components['schemas']['SessionDefaults'];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['SessionDefaults'];
+                };
+            };
+            /** @description The model id is unknown, internal-only, or not runnable on the Claude Code harness. */
+            400: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -10604,8 +10923,17 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The session has no execution yet to attach transcript records to. */
-            409: {
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -10705,8 +11033,13 @@ type PullRequestAction = 'opened' | 'pushed' | 'merged' | 'closed' | 'review_sub
 type SentryAction = 'issue_alert' | 'metric_alert';
 /**
  * The surface an @ellipsis mention can come from.
+ *
+ * No SLACK member: Slack routing is not a trigger on an agent config, it is the
+ * `slack.yaml` routing file (`SlackConfig`), which answers the questions a
+ * platform list cannot — which channel, and whose DM. A mention trigger listing
+ * `slack` is therefore a config error, not a silently-never-fires config.
  */
-type AgentConfigMentionPlatform = 'github' | 'slack' | 'linear';
+type AgentConfigMentionPlatform = 'github' | 'linear';
 /**
  * How this session's config was chosen.
  */
@@ -10716,6 +11049,15 @@ type GithubAccountType = 'User' | 'Organization' | 'Bot' | 'Mannequin';
  * Where the resolved budget came from.
  */
 type BudgetSource = 'system' | 'account' | 'config' | 'run';
+/**
+ * How a session's environment was chosen. None (the field is nullable)
+ * when the config carried an inline environment block and no resolution ran —
+ * an inline environment is not a reference, so there is nothing to record.
+ *
+ * Not derivable from the row: `environment_id` says WHICH environment, not
+ * how it was chosen, and is null for the built-in basic sandbox.
+ */
+type EnvironmentSource = 'request' | 'agent_config' | 'repo_default' | 'account_default' | 'platform_default';
 /**
  * Why a terminal agent session ended — a finer-grained reason than `status`.
  *
@@ -10851,6 +11193,7 @@ interface Session {
      * When the session was created.
      */
     created_at: string;
+    environment: SessionEnvironment;
     /**
      * How the session ended; null until it is terminal.
      */
@@ -10934,9 +11277,8 @@ interface AgentConfig {
     claude: AgentConfigClaude;
     codex: AgentConfigCodex | null;
     ellipsis: AgentConfigEllipsis;
-    environment: AgentConfigEnvironment;
+    environment: string | AgentConfigEnvironment;
     input: AgentConfigInput | null;
-    mcp_servers: (string | AgentConfigMcpServer)[];
     output: AgentConfigOutput | null;
     permissions: AgentConfigPermissions;
     skills: AgentConfigSkill[];
@@ -10952,7 +11294,7 @@ interface AgentConfigClaude {
     effort: EffortLevel | null;
     fallback_model: string | null;
     max_turns: number | null;
-    model: string;
+    model: string | null;
     settings: AgentConfigSettingsRef | null;
     system: string | AgentConfigSystemFileRef | (string | AgentConfigSystemFileRef)[];
 }
@@ -10997,22 +11339,19 @@ interface AgentConfigCodex {
 /**
  * The Ellipsis product namespace for a config file: which schema this is
  * (`version`), the human-facing identity (`name`/`description`), freeform
- * organizational `metadata`, whether the agent is `enabled`, and the
- * human-access flag `interactive`. The presence of a top-level `ellipsis:`
- * mapping is what marks a YAML file as an Ellipsis agent config (vs arbitrary
- * YAML that merely lives under a config directory) — see
- * `yaml_is_ellipsis_config`.
+ * organizational `metadata`, and whether the agent is `enabled`. The
+ * presence of a top-level `ellipsis:` mapping is what marks a YAML file as
+ * an Ellipsis agent config (vs arbitrary YAML that merely lives under a
+ * config directory) — see `yaml_is_ellipsis_config`.
  *
- * `enabled`/`interactive` are agent behavior, not freeform metadata, so they
- * stay inside the config `sha` (only `metadata` is sha-excluded).
- * `interactive` lets a human `agent session connect` to a live session (CLI
- * relay). It does not decide whether a session is ephemeral or durable — that
- * is the trigger's job.
+ * `enabled` is agent behavior, not freeform metadata, so it stays inside
+ * the config `sha` (only `metadata` is sha-excluded). Whether a session
+ * accepts messages is a per-run choice (POST /v1/sessions `interactive`),
+ * not a config one.
  */
 interface AgentConfigEllipsis {
     description: string | null;
     enabled: boolean;
-    interactive: boolean;
     metadata: AgentConfigMetadata;
     name: string | null;
     version: string;
@@ -11040,6 +11379,7 @@ interface AgentConfigEnvironment {
     compute: AgentConfigCompute;
     hooks: AgentConfigEnvironmentHooks;
     image: AgentConfigEnvironmentImage;
+    mcp_servers: (string | AgentConfigMcpServer | AgentConfigMcpStdioServer | AgentConfigMcpRemoteServer)[];
     repositories: AgentConfigRepository[];
     variables: AgentConfigEnvironmentVariable[];
 }
@@ -11130,6 +11470,49 @@ interface AgentConfigEnvironmentImage {
     dockerfile_append: string | null;
     setup: string | null;
 }
+/**
+ * One built-in MCP server this agent opts into by name (`linear`/`slack`).
+ * A name reference over the connected built-in set — the platform manages the
+ * server's transport and credentials. It only matters when the named
+ * integration is set to `opt_in` inclusion; an integration in the default
+ * `all_sessions` mode is added regardless. For a server the platform does not
+ * provide, define it instead (`AgentConfigMcpStdioServer` /
+ * `AgentConfigMcpRemoteServer`).
+ */
+interface AgentConfigMcpServer {
+    name: string;
+}
+/**
+ * A bring-your-own stdio MCP server: the harness spawns `command` inside
+ * the sandbox and speaks JSON-RPC over its stdin/stdout. The command must be
+ * runnable in the sandbox image — install its runtime via `image.setup` /
+ * `image.dockerfile_append` if the base image lacks it.
+ *
+ * `env` values may embed `${NAME}` references, resolved at run time from the
+ * account's secrets store (see `mcp_secret_refs`); everything else is passed
+ * literally.
+ */
+interface AgentConfigMcpStdioServer {
+    args: string[];
+    command: string;
+    env: {
+        [k: string]: string;
+    };
+    name: string;
+}
+/**
+ * A bring-your-own remote MCP server: the harness talks HTTP to `url`.
+ * Nothing runs in the sandbox image. `headers` carry static auth (e.g.
+ * `Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret
+ * references, resolved at run time from the account's secrets store.
+ */
+interface AgentConfigMcpRemoteServer {
+    headers: {
+        [k: string]: string;
+    };
+    name: string;
+    url: string;
+}
 /**
  * One environment variable injected into the agent's sandbox.
  *
@@ -11165,17 +11548,6 @@ interface AgentConfigInput {
     } | null;
     message: string | null;
 }
-/**
- * One built-in MCP server this agent opts into by name (`linear`/`slack`).
- * This is a name reference over the connected built-in set, NOT a custom-server
- * definition — there is no command/url/headers shape (that was the old,
- * removed field, and Ellipsis does not support bring-your-own MCP servers).
- * It only matters when the named integration is set to `opt_in` inclusion; an
- * integration in the default `all_sessions` mode is added regardless.
- */
-interface AgentConfigMcpServer {
-    name: string;
-}
 /**
  * The typed output contract: the JSON Schema the agent must exit through
  * (the StructuredOutput exit tool). Read back via
@@ -11386,6 +11758,19 @@ interface SessionCost {
      */
     total: number;
 }
+/**
+ * The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is inside agent.config.environment.
+ */
+interface SessionEnvironment {
+    /**
+     * Identifier of the saved environment the session's config resolved. Null for an inline environment block or the built-in basic sandbox.
+     */
+    environment_id: string | null;
+    /**
+     * How the environment was chosen (request, agent_config, repo_default, account_default, platform_default). Null when the config carried its own inline environment.
+     */
+    source: EnvironmentSource | null;
+}
 /**
  * Every repo the session touched. Small enough to ride on `agent_sessions`
  * and be returned by every session read.
@@ -12036,6 +12421,7 @@ interface Session1 {
      * When the session was created.
      */
     created_at: string;
+    environment: SessionEnvironment;
     /**
      * How the session ended; null until it is terminal.
      */