@ellipsis-dev/sdk 0.17.0 → 0.18.0

package/schema/openapi.v1.json

@@ -11,7 +11,6 @@
           "claude": {
             "$ref": "#/components/schemas/AgentConfigClaude",
             "default": {
-              "model": "claude-opus-5",
               "system": ""
             }
           },
@@ -211,9 +210,15 @@
             "title": "Max Turns"
           },
           "model": {
-            "default": "claude-opus-5",
-            "title": "Model",
-            "type": "string"
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Model"
           },
           "settings": {
             "anyOf": [
@@ -809,10 +814,9 @@
         "type": "object"
       },
       "AgentConfigMentionPlatform": {
-        "description": "The surface an @ellipsis mention can come from.",
+        "description": "The surface an @ellipsis mention can come from.\n\nNo SLACK member: Slack routing is not a trigger on an agent config, it is the\n`slack.yaml` routing file (`SlackConfig`), which answers the questions a\nplatform list cannot \u2014 which channel, and whose DM. A mention trigger listing\n`slack` is therefore a config error, not a silently-never-fires config.",
         "enum": [
           "github",
-          "slack",
           "linear"
         ],
         "title": "AgentConfigMentionPlatform",
@@ -1159,34 +1163,6 @@
         "title": "AgentConfigsListResponse",
         "type": "object"
       },
-      "AgentDefaults": {
-        "description": "Which agent config serves sessions started without an explicit config:\none account-wide rung, plus a rung per repository.\n\nValues are config ids \u2014 stable across renames, unlike the agent's name.\nA repo rung whose repository this installation can no longer see is absent\nfrom `repositories`; its row is left in place, so re-installing the repo\nbrings the rung back.",
-        "properties": {
-          "account": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Config id serving sessions with no repository context, or null when no account default is set.",
-            "title": "Account"
-          },
-          "repositories": {
-            "additionalProperties": {
-              "type": "string"
-            },
-            "default": {},
-            "description": "Config id per repository, keyed \"owner/name\". A repository with no default set is absent.",
-            "title": "Repositories",
-            "type": "object"
-          }
-        },
-        "title": "AgentDefaults",
-        "type": "object"
-      },
       "AgentTemplate": {
         "description": "A built-in agent template: a ready-to-use agent config plus the\nmetadata that describes it in the template gallery.",
         "properties": {
@@ -3572,34 +3548,6 @@
         "title": "EnvironmentConfigEllipsis",
         "type": "object"
       },
-      "EnvironmentDefaults": {
-        "description": "Which environment serves sessions whose config carries no environment\nof its own: one account-wide rung, plus a rung per repository. Values are\nenvironment ids \u2014 stable across renames, unlike names.",
-        "properties": {
-          "account": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Environment id serving sessions with no repository context, or null when no account default is set.",
-            "title": "Account"
-          },
-          "repositories": {
-            "additionalProperties": {
-              "type": "string"
-            },
-            "default": {},
-            "description": "Environment id per repository, keyed \"owner/name\". A repository with no default set is absent.",
-            "title": "Repositories",
-            "type": "object"
-          }
-        },
-        "title": "EnvironmentDefaults",
-        "type": "object"
-      },
       "EnvironmentResponse": {
         "description": "One saved environment.",
         "properties": {
@@ -5916,60 +5864,6 @@
         "title": "PullRequestsTotals",
         "type": "object"
       },
-      "PutAgentDefaultRequest": {
-        "description": "Parameters for setting a default agent config, at either the account\nor the repository level.",
-        "properties": {
-          "config_id": {
-            "description": "The config to make the default: a config id, or the agent's customer-unique `ellipsis.name`.",
-            "title": "Config Id",
-            "type": "string"
-          },
-          "repository": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "The rung to set: \"owner/name\" for a repo default; omit to set the account default. Unlike session start's silent ignore, an unknown or foreign repo here is a 404.",
-            "title": "Repository"
-          }
-        },
-        "required": [
-          "config_id"
-        ],
-        "title": "PutAgentDefaultRequest",
-        "type": "object"
-      },
-      "PutEnvironmentDefaultRequest": {
-        "description": "Parameters for setting a default environment, at either the account or\nthe repository level.",
-        "properties": {
-          "environment": {
-            "description": "The environment to make the default: an environment id, or its customer-unique name.",
-            "title": "Environment",
-            "type": "string"
-          },
-          "repository": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "The rung to set: \"owner/name\" for a repo default; omit to set the account default. An unknown or foreign repo is a 404.",
-            "title": "Repository"
-          }
-        },
-        "required": [
-          "environment"
-        ],
-        "title": "PutEnvironmentDefaultRequest",
-        "type": "object"
-      },
       "PutSecretsRequest": {
         "description": "Store secrets for the account's sandboxes. Each secret is upserted by\nname: existing names are overwritten.",
         "properties": {
@@ -6443,50 +6337,6 @@
         "title": "RecordSource",
         "type": "string"
       },
-      "ReplayAgentSessionRequest": {
-        "description": "Parameters for re-running an existing run's original trigger input as\na new run.",
-        "properties": {
-          "config_id": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "A saved config to replay against. By default the original run's frozen config snapshot is reused.",
-            "title": "Config Id"
-          },
-          "override": {
-            "anyOf": [
-              {
-                "additionalProperties": true,
-                "type": "object"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Optional partial patch on the replayed config, applied last \u2014 e.g. {\"claude\": {\"model\": \"claude-opus-4-8\"}} to replay the run on a different model, or {\"budget\": {\"session\": 5.0}} to raise its budget.",
-            "title": "Override"
-          },
-          "prompt": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Per-run instructions. Omit to inherit the original run's prompt (a bare replay re-runs the same instructions); pass \"\" to clear it.",
-            "title": "Prompt"
-          }
-        },
-        "title": "ReplayAgentSessionRequest",
-        "type": "object"
-      },
       "RepoFacet": {
         "description": "A repository filter option, counted over the unfiltered window so\noptions never vanish when filters are applied.",
         "properties": {
@@ -9120,6 +8970,25 @@
         "title": "SessionCost",
         "type": "object"
       },
+      "SessionDefaults": {
+        "description": "The account-wide session defaults.",
+        "properties": {
+          "model": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Canonical model id every session falls back to when neither the request nor its agent config names one, or null when unset (sessions then run the platform default).",
+            "title": "Model"
+          }
+        },
+        "title": "SessionDefaults",
+        "type": "object"
+      },
       "SessionEnvironment": {
         "description": "The environment this session resolved: which saved environment (as it\nexists now) and how it was chosen. The environment's frozen BODY rides\ninside `agent.config.environment` \u2014 substitution happens before the config\nsnapshot freezes \u2014 so this object is provenance, not payload.",
         "properties": {
@@ -10343,48 +10212,72 @@
         "type": "object"
       },
       "StartAgentSessionRequest": {
-        "description": "Parameters for starting a new agent session.",
+        "additionalProperties": false,
+        "description": "Parameters for starting a new agent session: an optional base config\npointer, the message fields, and any AgentConfig keys to patch on top.",
         "properties": {
-          "config": {
+          "budget": {
             "anyOf": [
               {
-                "$ref": "#/components/schemas/AgentConfig"
+                "$ref": "#/components/schemas/AgentConfigBudget"
               },
               {
                 "type": "null"
               }
             ],
-            "description": "An inline agent config to run under. At most one of config_id or config may be set; if neither is, the run resolves the account's default-config ladder (repo default, then account default, then the platform default config)."
+            "description": "The session's spend limits, e.g. {\"session\": 5.0}."
           },
-          "config_id": {
+          "claude": {
             "anyOf": [
               {
-                "type": "string"
+                "$ref": "#/components/schemas/AgentConfigClaude"
               },
               {
                 "type": "null"
               }
             ],
-            "description": "A saved agent config to run under: its id, or the agent's customer-unique `ellipsis.name`.",
-            "title": "Config Id"
+            "description": "The Claude-harness block: `{\"model\": ...}` to pick this session's model, plus system/effort/fallback_model/max_turns/settings."
+          },
+          "codex": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/AgentConfigCodex"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The Codex-harness block. Its presence on the EFFECTIVE config selects the Codex harness, exactly as in a saved config."
+          },
+          "ellipsis": {
+            "$ref": "#/components/schemas/StartSessionEllipsis",
+            "description": "Platform housekeeping: metadata, interactive, force_rebuild."
           },
           "environment": {
             "anyOf": [
               {
                 "type": "string"
               },
+              {
+                "$ref": "#/components/schemas/AgentConfigEnvironment"
+              },
               {
                 "type": "null"
               }
             ],
-            "description": "The environment to run in: a saved environment's id (`env_...`) or its customer-unique name. Only for sessions with no explicit config (the agent config decides its own environment; 400 when combined with config/config_id). Omitted, the default-environment ladder resolves: repo default, then account default, then the built-in basic sandbox.",
+            "description": "Where the session runs. A STRING (a saved environment's `env_...` id or name) re-picks that environment wholesale \u2014 it beats the base config's own reference. An OBJECT deep-merges onto the resolved environment (repositories merge by identity, see above).",
             "title": "Environment"
           },
-          "force_rebuild": {
-            "default": false,
-            "description": "Skip the image cache for this session's initial provision: a fresh full build whose snapshot then refreshes the cache for later runs. A wake of a durable session provisions through the cache as usual. The CLI's `--rebuild`.",
-            "title": "Force Rebuild",
-            "type": "boolean"
+          "from_config_id": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The saved agent config to use as this session's base: its id, or the agent's customer-unique `ellipsis.name`. Omitted, the base is the bare ad-hoc config \u2014 an empty system prompt on the account's default model in the basic sandbox \u2014 so the request's own keys and prompt fully describe the run.",
+            "title": "From Config Id"
           },
           "input": {
             "anyOf": [
@@ -10399,33 +10292,27 @@
             "description": "The typed payload for an agent that declares input.json_schema: validated against the effective config's schema (422 on mismatch), rendered into the session's initial message (the agent's input.message template, or a JSON block). Required when the agent declares a schema; rejected when it does not.",
             "title": "Input"
           },
-          "interactive": {
-            "default": true,
-            "description": "Whether the session stays open for messages after its first turn. Set false for a one-shot run that does its job and closes without holding a warm sandbox; a one-shot run must carry a prompt (or input), since nothing can ever be sent to it later. Agents on the Codex harness are one-shot regardless.",
-            "title": "Interactive",
-            "type": "boolean"
-          },
-          "metadata": {
-            "additionalProperties": {
-              "type": "string"
-            },
-            "default": {},
-            "description": "Arbitrary string key/value metadata stored on the session.",
-            "title": "Metadata",
-            "type": "object"
+          "output": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/AgentConfigOutput"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The structured-output exit contract for this session."
           },
-          "override": {
+          "permissions": {
             "anyOf": [
               {
-                "additionalProperties": true,
-                "type": "object"
+                "$ref": "#/components/schemas/AgentConfigPermissions"
               },
               {
                 "type": "null"
               }
             ],
-            "description": "Optional partial patch on the RESOLVED session config, applied last \u2014 after the config and environment are chosen and the environment is substituted in. Nested objects merge key by key; scalars and arrays replace. E.g. {\"environment\": {\"compute\": {\"memory\": \"16GB\"}}} for just this session, or {\"claude\": {\"model\": \"claude-opus-4-8\"}}. It cannot swap in a different saved environment (it patches the resolved document; it never re-runs resolution).",
-            "title": "Override"
+            "description": "What the session may touch, per minted credential."
           },
           "prompt": {
             "anyOf": [
@@ -10439,17 +10326,20 @@
             "description": "The session's first message. Omit it and the session starts idle: the sandbox spins up, the agent waits at the prompt, and the first message you send opens turn 0.",
             "title": "Prompt"
           },
-          "repository": {
+          "skills": {
             "anyOf": [
               {
-                "type": "string"
+                "items": {
+                  "$ref": "#/components/schemas/AgentConfigSkill"
+                },
+                "type": "array"
               },
               {
                 "type": "null"
               }
             ],
-            "description": "The \"owner/name\" repository the client is standing in (the CLI's detected git remote). Selects the repo rung of the defaults ladder, and is merged into the sandbox repository set (cloned at its default branch) regardless of which config source is used. An unknown or foreign repo is ignored.",
-            "title": "Repository"
+            "description": "Config-declared skills; replaces the base config's list.",
+            "title": "Skills"
           }
         },
         "title": "StartAgentSessionRequest",
@@ -10500,6 +10390,35 @@
         "title": "StartCliAuthResponse",
         "type": "object"
       },
+      "StartSessionEllipsis": {
+        "additionalProperties": false,
+        "description": "Platform housekeeping for the session \u2014 the request-side `ellipsis`\nblock. Session-scoped: unlike a config file's `ellipsis` block it carries\nno `name`/`enabled` (those describe a saved agent, not a run) \u2014 and\nsending them here is a 422, not a silent drop.",
+        "properties": {
+          "force_rebuild": {
+            "default": false,
+            "description": "Skip the image cache for this session's initial provision: a fresh full build whose snapshot then refreshes the cache for later runs. A wake of a durable session provisions through the cache as usual. The CLI's `--rebuild`.",
+            "title": "Force Rebuild",
+            "type": "boolean"
+          },
+          "interactive": {
+            "default": true,
+            "description": "Whether the session stays open for messages after its first turn. Set false for a one-shot run that does its job and closes without holding a warm sandbox; a one-shot run must carry a prompt (or input), since nothing can ever be sent to it later. Agents on the Codex harness are one-shot regardless.",
+            "title": "Interactive",
+            "type": "boolean"
+          },
+          "metadata": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "default": {},
+            "description": "Arbitrary string key/value metadata stored on the session.",
+            "title": "Metadata",
+            "type": "object"
+          }
+        },
+        "title": "StartSessionEllipsis",
+        "type": "object"
+      },
       "TokensInfo": {
         "additionalProperties": false,
         "description": "Token/cost usage, per record (one API call's counts, aggregate fields at\ntheir zero defaults) or aggregated per execution/session\n(compute_spend_from_records derives num_turns and cost_usd).\n\nStrict on purpose: this is our own persisted schema, so an unknown key is a\nwriter bug (the num_turns=0 bug shipped because a Claude Code usage dict\nvalidated leniently against this model, silently zeroing every\nnon-overlapping field). Legacy keys were dropped from persisted blobs by\nthe 2026-07-26 tokens_info migration; per-model usage lives on\n`execution.model_usage` (CC's modelUsage, verbatim).",
@@ -11542,15 +11461,14 @@
         "x-ellipsis-sdk-method": "agents.configs.unlink"
       }
     },
-    "/v1/agents/defaults": {
-      "delete": {
-        "description": "Clear a default agent config.\n\nAddressed by rung: the account rung (repository omitted) or a\nrepository rung.\n\nRefused for sandbox tokens.",
-        "operationId": "delete_agent_default",
+    "/v1/agents/templates": {
+      "get": {
+        "description": "List the built-in starter agent templates.\n\nBehind auth but not account-scoped \u2014 the data is static\nproduct content shared by the dashboard, landing site, and CLI.",
+        "operationId": "list_agent_templates",
         "parameters": [
           {
-            "description": "Repo rung to clear (\"owner/name\"); omit to clear the account default.",
-            "in": "query",
-            "name": "repository",
+            "in": "header",
+            "name": "user-agent",
             "required": false,
             "schema": {
               "anyOf": [
@@ -11561,281 +11479,7 @@
                   "type": "null"
                 }
               ],
-              "description": "Repo rung to clear (\"owner/name\"); omit to clear the account default.",
-              "title": "Repository"
-            }
-          },
-          {
-            "in": "header",
-            "name": "user-agent",
-            "required": false,
-            "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "User-Agent"
-            }
-          }
-        ],
-        "responses": {
-          "204": {
-            "description": "Successful Response"
-          },
-          "401": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The bearer token is missing, invalid, or revoked."
-          },
-          "403": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The credential may not perform this action, or the account is blocked."
-          },
-          "404": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "No default is set at that rung, or the repository was not found in your account."
-          },
-          "422": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/HTTPValidationError"
-                }
-              }
-            },
-            "description": "Validation Error"
-          }
-        },
-        "security": [
-          {
-            "HTTPBearer": []
-          }
-        ],
-        "summary": "Delete Agent Default",
-        "tags": [
-          "v1"
-        ],
-        "x-ellipsis-sdk-method": "agents.defaults.delete"
-      },
-      "get": {
-        "description": "Get the default agent configs.\n\nThe account-wide default and the per-repository defaults, as config\nids. Repo rungs are keyed \"owner/name\"; a repository this\ninstallation can no longer see is omitted.",
-        "operationId": "list_agent_defaults",
-        "parameters": [
-          {
-            "in": "header",
-            "name": "user-agent",
-            "required": false,
-            "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "User-Agent"
-            }
-          }
-        ],
-        "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/AgentDefaults"
-                }
-              }
-            },
-            "description": "Successful Response"
-          },
-          "401": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The bearer token is missing, invalid, or revoked."
-          },
-          "403": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The credential may not perform this action, or the account is blocked."
-          },
-          "422": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/HTTPValidationError"
-                }
-              }
-            },
-            "description": "Validation Error"
-          }
-        },
-        "security": [
-          {
-            "HTTPBearer": []
-          }
-        ],
-        "summary": "List Agent Defaults",
-        "tags": [
-          "v1"
-        ],
-        "x-ellipsis-sdk-method": "agents.defaults.list"
-      },
-      "put": {
-        "description": "Set a default agent config.\n\nAddressed by rung: the account rung (repository omitted) or a\nrepository rung (\"owner/name\"); the config by id or by the\nagent's name. Returns the full resulting ladder.\n\nRefused for sandbox tokens (potentially prompt-injected code\nmust not repoint the account's ambient default); an unknown or\nforeign repository is a 404.",
-        "operationId": "put_agent_default",
-        "parameters": [
-          {
-            "in": "header",
-            "name": "user-agent",
-            "required": false,
-            "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "User-Agent"
-            }
-          }
-        ],
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/PutAgentDefaultRequest"
-              }
-            }
-          },
-          "required": true
-        },
-        "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/AgentDefaults"
-                }
-              }
-            },
-            "description": "Successful Response"
-          },
-          "400": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The config is not eligible as a default: its pull request has not merged, or it is disabled."
-          },
-          "401": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The bearer token is missing, invalid, or revoked."
-          },
-          "403": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The credential may not perform this action, or the account is blocked."
-          },
-          "404": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The config or repository was not found in your account."
-          },
-          "422": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/HTTPValidationError"
-                }
-              }
-            },
-            "description": "Validation Error"
-          }
-        },
-        "security": [
-          {
-            "HTTPBearer": []
-          }
-        ],
-        "summary": "Put Agent Default",
-        "tags": [
-          "v1"
-        ],
-        "x-ellipsis-sdk-method": "agents.defaults.set"
-      }
-    },
-    "/v1/agents/templates": {
-      "get": {
-        "description": "List the built-in starter agent templates.\n\nBehind auth but not account-scoped \u2014 the data is static\nproduct content shared by the dashboard, landing site, and CLI.",
-        "operationId": "list_agent_templates",
-        "parameters": [
-          {
-            "in": "header",
-            "name": "user-agent",
-            "required": false,
-            "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "User-Agent"
+              "title": "User-Agent"
             }
           }
         ],
@@ -13047,259 +12691,7 @@
             },
             "description": "Successful Response"
           },
-          "401": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The bearer token is missing, invalid, or revoked."
-          },
-          "403": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The credential may not perform this action, or the account is blocked."
-          }
-        },
-        "summary": "Cli Auth Start",
-        "tags": [
-          "v1"
-        ],
-        "x-ellipsis-sdk-method": "auth.cli.start",
-        "x-ellipsis-undocumented": true
-      }
-    },
-    "/v1/budget": {
-      "get": {
-        "description": "Return the caller's current budget summary.",
-        "operationId": "get_budget",
-        "parameters": [
-          {
-            "in": "header",
-            "name": "user-agent",
-            "required": false,
-            "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "User-Agent"
-            }
-          }
-        ],
-        "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/BudgetSummary"
-                }
-              }
-            },
-            "description": "Successful Response"
-          },
-          "401": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The bearer token is missing, invalid, or revoked."
-          },
-          "403": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The credential may not perform this action, or the account is blocked."
-          },
-          "422": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/HTTPValidationError"
-                }
-              }
-            },
-            "description": "Validation Error"
-          }
-        },
-        "security": [
-          {
-            "HTTPBearer": []
-          }
-        ],
-        "summary": "Get Budget",
-        "tags": [
-          "v1"
-        ],
-        "x-ellipsis-sdk-method": "budget"
-      }
-    },
-    "/v1/environments": {
-      "get": {
-        "description": "List saved environments.",
-        "operationId": "list_environments",
-        "parameters": [
-          {
-            "in": "header",
-            "name": "user-agent",
-            "required": false,
-            "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "User-Agent"
-            }
-          }
-        ],
-        "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/EnvironmentsListResponse"
-                }
-              }
-            },
-            "description": "Successful Response"
-          },
-          "401": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The bearer token is missing, invalid, or revoked."
-          },
-          "403": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The credential may not perform this action, or the account is blocked."
-          },
-          "422": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/HTTPValidationError"
-                }
-              }
-            },
-            "description": "Validation Error"
-          }
-        },
-        "security": [
-          {
-            "HTTPBearer": []
-          }
-        ],
-        "summary": "List Environments",
-        "tags": [
-          "v1"
-        ],
-        "x-ellipsis-sdk-method": "environments.list"
-      },
-      "post": {
-        "description": "Create an environment, managed through the API: no file, live\nimmediately. To define it in a repository instead, commit a\n`kind: environment` YAML under an agents directory.\n\n409 when another live environment already holds the name.",
-        "operationId": "create_environment",
-        "parameters": [
-          {
-            "in": "header",
-            "name": "user-agent",
-            "required": false,
-            "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "User-Agent"
-            }
-          }
-        ],
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/CreateEnvironmentRequest"
-              }
-            }
-          },
-          "required": true
-        },
-        "responses": {
-          "201": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/EnvironmentResponse"
-                }
-              }
-            },
-            "description": "Successful Response"
-          },
-          "400": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The environment is invalid."
-          },
-          "401": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The bearer token is missing, invalid, or revoked."
-          },
-          "403": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The credential may not perform this action, or the account is blocked."
-          },
-          "409": {
+          "401": {
             "content": {
               "application/json": {
                 "schema": {
@@ -13307,9 +12699,9 @@
                 }
               }
             },
-            "description": "An environment with that name already exists."
+            "description": "The bearer token is missing, invalid, or revoked."
           },
-          "422": {
+          "403": {
             "content": {
               "application/json": {
                 "schema": {
@@ -13317,44 +12709,22 @@
                 }
               }
             },
-            "description": "The environment's name is missing or malformed."
+            "description": "The credential may not perform this action, or the account is blocked."
           }
         },
-        "security": [
-          {
-            "HTTPBearer": []
-          }
-        ],
-        "summary": "Create Environment",
+        "summary": "Cli Auth Start",
         "tags": [
           "v1"
         ],
-        "x-ellipsis-sdk-method": "environments.create"
+        "x-ellipsis-sdk-method": "auth.cli.start",
+        "x-ellipsis-undocumented": true
       }
     },
-    "/v1/environments/defaults": {
-      "delete": {
-        "description": "Clear a default environment.\n\nAddressed by rung: the account rung (repository omitted) or a\nrepository rung. Refused for sandbox tokens.",
-        "operationId": "delete_environment_default",
+    "/v1/budget": {
+      "get": {
+        "description": "Return the caller's current budget summary.",
+        "operationId": "get_budget",
         "parameters": [
-          {
-            "description": "Repo rung to clear (\"owner/name\"); omit to clear the account default.",
-            "in": "query",
-            "name": "repository",
-            "required": false,
-            "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "description": "Repo rung to clear (\"owner/name\"); omit to clear the account default.",
-              "title": "Repository"
-            }
-          },
           {
             "in": "header",
             "name": "user-agent",
@@ -13373,20 +12743,17 @@
           }
         ],
         "responses": {
-          "204": {
-            "description": "Successful Response"
-          },
-          "401": {
+          "200": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
+                  "$ref": "#/components/schemas/BudgetSummary"
                 }
               }
             },
-            "description": "The bearer token is missing, invalid, or revoked."
+            "description": "Successful Response"
           },
-          "403": {
+          "401": {
             "content": {
               "application/json": {
                 "schema": {
@@ -13394,9 +12761,9 @@
                 }
               }
             },
-            "description": "The credential may not perform this action, or the account is blocked."
+            "description": "The bearer token is missing, invalid, or revoked."
           },
-          "404": {
+          "403": {
             "content": {
               "application/json": {
                 "schema": {
@@ -13404,7 +12771,7 @@
                 }
               }
             },
-            "description": "No default is set at that rung, or the repository was not found in your account."
+            "description": "The credential may not perform this action, or the account is blocked."
           },
           "422": {
             "content": {
@@ -13422,15 +12789,17 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Delete Environment Default",
+        "summary": "Get Budget",
         "tags": [
           "v1"
         ],
-        "x-ellipsis-sdk-method": "environments.defaults.delete"
-      },
+        "x-ellipsis-sdk-method": "budget"
+      }
+    },
+    "/v1/environments": {
       "get": {
-        "description": "Get the default environments.\n\nThe account-wide default and the per-repository defaults, as\nenvironment ids. Repo rungs are keyed \"owner/name\".",
-        "operationId": "list_environment_defaults",
+        "description": "List saved environments.",
+        "operationId": "list_environments",
         "parameters": [
           {
             "in": "header",
@@ -13454,7 +12823,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/EnvironmentDefaults"
+                  "$ref": "#/components/schemas/EnvironmentsListResponse"
                 }
               }
             },
@@ -13496,15 +12865,15 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "List Environment Defaults",
+        "summary": "List Environments",
         "tags": [
           "v1"
         ],
-        "x-ellipsis-sdk-method": "environments.defaults.list"
+        "x-ellipsis-sdk-method": "environments.list"
       },
-      "put": {
-        "description": "Set a default environment.\n\nAddressed by rung: the account rung (repository omitted) or a\nrepository rung (\"owner/name\"); the environment by id or name.\nReturns the full resulting ladder. Refused for sandbox tokens.",
-        "operationId": "put_environment_default",
+      "post": {
+        "description": "Create an environment, managed through the API: no file, live\nimmediately. To define it in a repository instead, commit a\n`kind: environment` YAML under an agents directory.\n\n409 when another live environment already holds the name.",
+        "operationId": "create_environment",
         "parameters": [
           {
             "in": "header",
@@ -13527,23 +12896,33 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PutEnvironmentDefaultRequest"
+                "$ref": "#/components/schemas/CreateEnvironmentRequest"
               }
             }
           },
           "required": true
         },
         "responses": {
-          "200": {
+          "201": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/EnvironmentDefaults"
+                  "$ref": "#/components/schemas/EnvironmentResponse"
                 }
               }
             },
             "description": "Successful Response"
           },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The environment is invalid."
+          },
           "401": {
             "content": {
               "application/json": {
@@ -13564,7 +12943,7 @@
             },
             "description": "The credential may not perform this action, or the account is blocked."
           },
-          "404": {
+          "409": {
             "content": {
               "application/json": {
                 "schema": {
@@ -13572,17 +12951,17 @@
                 }
               }
             },
-            "description": "The environment or repository was not found in your account."
+            "description": "An environment with that name already exists."
           },
           "422": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/HTTPValidationError"
+                  "$ref": "#/components/schemas/ErrorResponse"
                 }
               }
             },
-            "description": "Validation Error"
+            "description": "The environment's name is missing or malformed."
           }
         },
         "security": [
@@ -13590,11 +12969,11 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Put Environment Default",
+        "summary": "Create Environment",
         "tags": [
           "v1"
         ],
-        "x-ellipsis-sdk-method": "environments.defaults.set"
+        "x-ellipsis-sdk-method": "environments.create"
       }
     },
     "/v1/environments/{environment_id}": {
@@ -14385,7 +13764,7 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Get Integrations",
+        "summary": "List Integrations",
         "tags": [
           "v1"
         ],
@@ -14947,7 +14326,7 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Whoami",
+        "summary": "Current Identity",
         "tags": [
           "v1"
         ],
@@ -16105,7 +15484,7 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Put Secrets",
+        "summary": "Set Secrets",
         "tags": [
           "v1"
         ],
@@ -16429,7 +15808,7 @@
         "x-ellipsis-sdk-method": "sessions.list"
       },
       "post": {
-        "description": "Start a cloud agent session.\n\nProvide at most one of config_id (an id or an agent name) or\nconfig; with neither, the account's default-config ladder\nresolves the config. `prompt` is the first message; omit it and\nthe session starts idle, waiting for one. 400 when\ninteractive=false and there is no prompt or input. 422 when the\nagent declares an input schema and the request's input is absent\nor invalid.",
+        "description": "Start a cloud agent session.\n\nThe base is `from_config_id` (an id or an agent name) or, omitted,\nthe bare ad-hoc config; every AgentConfig key on the request\ndeep-merges on top, so the body is both the pointer and the\nper-session override. `prompt` is the first message; omit it and\nthe session starts idle, waiting for one. 400 when\nellipsis.interactive=false and there is no prompt or input. 422\nwhen the agent declares an input schema and the request's input\nis absent or invalid.",
         "operationId": "start_agent_session",
         "parameters": [
           {
@@ -16478,7 +15857,7 @@
                 }
               }
             },
-            "description": "The request combines incompatible fields (both config sources, or a one-shot run with no prompt or input), or the config override is invalid."
+            "description": "The request is incompatible with itself (a one-shot run with no prompt or input) or its config keys produce an invalid config."
           },
           "401": {
             "content": {
@@ -16508,17 +15887,7 @@
                 }
               }
             },
-            "description": "The named agent does not exist in your account."
-          },
-          "409": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The resolved default config is broken (deleted, disabled, unmerged, or on an inaccessible repository)."
+            "description": "The named agent or environment does not exist in your account."
           },
           "422": {
             "content": {
@@ -16803,7 +16172,7 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Search Sessions",
+        "summary": "Search Agent Sessions",
         "tags": [
           "v1"
         ],
@@ -16907,7 +16276,7 @@
     },
     "/v1/sessions/{session_id}/executions": {
       "get": {
-        "description": "Return the session's executions and launch context.\n\nMost notably system_prompt_append, the text Ellipsis appends to\nClaude Code's default system prompt (platform section + response\ninstructions + the config's own instructions).\n\nPer execution because each cold wake persists its own launch\nconfig (a config edit or replay override between wakes changes\nit).",
+        "description": "Return the session's executions and launch context.\n\nMost notably system_prompt_append, the text Ellipsis appends to\nClaude Code's default system prompt (platform section + response\ninstructions + the config's own instructions).\n\nPer execution because each cold wake persists its own launch\nconfig (a config edit between wakes changes it).",
         "operationId": "get_agent_session_executions",
         "parameters": [
           {
@@ -17444,10 +16813,10 @@
         "x-ellipsis-sdk-method": "sessions.records"
       }
     },
-    "/v1/sessions/{session_id}/replay": {
+    "/v1/sessions/{session_id}/stop": {
       "post": {
-        "description": "Replay a session as a new session.\n\nReuses the original config snapshot unless config_id is given,\nand accepts the same config_override as session start \u2014 e.g.\n{\"claude\": {\"model\": ...}} to replay the same input on a\ndifferent model.",
-        "operationId": "replay_agent_session",
+        "description": "Stop an in-flight session and return it.\n\nstopped_by is recorded only when the caller's credential maps\nto a GitHub account.",
+        "operationId": "stop_agent_session",
         "parameters": [
           {
             "in": "path",
@@ -17475,18 +16844,8 @@
             }
           }
         ],
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/ReplayAgentSessionRequest"
-              }
-            }
-          },
-          "required": true
-        },
         "responses": {
-          "201": {
+          "200": {
             "content": {
               "application/json": {
                 "schema": {
@@ -17496,7 +16855,7 @@
             },
             "description": "Successful Response"
           },
-          "400": {
+          "401": {
             "content": {
               "application/json": {
                 "schema": {
@@ -17504,9 +16863,9 @@
                 }
               }
             },
-            "description": "The named config does not exist, or the config override is invalid."
+            "description": "The bearer token is missing, invalid, or revoked."
           },
-          "401": {
+          "403": {
             "content": {
               "application/json": {
                 "schema": {
@@ -17514,9 +16873,9 @@
                 }
               }
             },
-            "description": "The bearer token is missing, invalid, or revoked."
+            "description": "The credential may not perform this action, or the account is blocked."
           },
-          "403": {
+          "404": {
             "content": {
               "application/json": {
                 "schema": {
@@ -17524,9 +16883,9 @@
                 }
               }
             },
-            "description": "The credential may not perform this action, or the account is blocked."
+            "description": "No such session in your account."
           },
-          "404": {
+          "409": {
             "content": {
               "application/json": {
                 "schema": {
@@ -17534,7 +16893,7 @@
                 }
               }
             },
-            "description": "No such session in your account."
+            "description": "The session has already finished."
           },
           "422": {
             "content": {
@@ -17552,17 +16911,17 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Replay Agent Session",
+        "summary": "Stop Agent Session",
         "tags": [
           "v1"
         ],
-        "x-ellipsis-sdk-method": "sessions.replay"
+        "x-ellipsis-sdk-method": "sessions.stop"
       }
     },
-    "/v1/sessions/{session_id}/stop": {
+    "/v1/sessions/{session_id}/transcript": {
       "post": {
-        "description": "Stop an in-flight session and return it.\n\nstopped_by is recorded only when the caller's credential maps\nto a GitHub account.",
-        "operationId": "stop_agent_session",
+        "description": "Append transcript lines to a session's record.\n\nThe in-sandbox tailer for interactive sessions.\n\nA sandbox token may only push its own session's transcript.\nIdempotent by transcript line uuid; tolerant of malformed lines.",
+        "operationId": "ingest_agent_session_transcript",
         "parameters": [
           {
             "in": "path",
@@ -17590,12 +16949,22 @@
             }
           }
         ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/IngestTranscriptRequest"
+              }
+            }
+          },
+          "required": true
+        },
         "responses": {
           "200": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/SessionResponse"
+                  "$ref": "#/components/schemas/TranscriptIngestResult"
                 }
               }
             },
@@ -17639,7 +17008,7 @@
                 }
               }
             },
-            "description": "The session has already finished."
+            "description": "The session has no execution yet to attach transcript records to."
           },
           "422": {
             "content": {
@@ -17657,27 +17026,93 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Stop Agent Session",
+        "summary": "Ingest Agent Session Transcript",
         "tags": [
           "v1"
         ],
-        "x-ellipsis-sdk-method": "sessions.stop"
+        "x-ellipsis-sdk-method": "sessions.ingest_transcript",
+        "x-ellipsis-undocumented": true
       }
     },
-    "/v1/sessions/{session_id}/transcript": {
-      "post": {
-        "description": "Append transcript lines to a session's record.\n\nThe in-sandbox tailer for interactive sessions.\n\nA sandbox token may only push its own session's transcript.\nIdempotent by transcript line uuid; tolerant of malformed lines.",
-        "operationId": "ingest_agent_session_transcript",
+    "/v1/settings/sessions/defaults": {
+      "get": {
+        "description": "Get the account-wide session defaults.\n\nToday one setting: the default model every session falls back to\nwhen neither its request nor its agent config names one.",
+        "operationId": "get_session_defaults",
         "parameters": [
           {
-            "in": "path",
-            "name": "session_id",
-            "required": true,
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
             "schema": {
-              "title": "Session Id",
-              "type": "string"
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
             }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SessionDefaults"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
           },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Get Session Defaults",
+        "tags": [
+          "v1"
+        ],
+        "x-ellipsis-sdk-method": "settings.sessions.get_defaults"
+      },
+      "put": {
+        "description": "Set the account-wide session defaults.\n\n`model` accepts an alias or canonical id and is stored canonical;\nnull clears it (sessions then fall back to the platform default).\nRefused for sandbox tokens (potentially prompt-injected code must\nnot repoint the account's default model).",
+        "operationId": "put_session_defaults",
+        "parameters": [
           {
             "in": "header",
             "name": "user-agent",
@@ -17699,7 +17134,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/IngestTranscriptRequest"
+                "$ref": "#/components/schemas/SessionDefaults"
               }
             }
           },
@@ -17710,23 +17145,13 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/TranscriptIngestResult"
+                  "$ref": "#/components/schemas/SessionDefaults"
                 }
               }
             },
             "description": "Successful Response"
           },
-          "401": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The bearer token is missing, invalid, or revoked."
-          },
-          "403": {
+          "400": {
             "content": {
               "application/json": {
                 "schema": {
@@ -17734,9 +17159,9 @@
                 }
               }
             },
-            "description": "The credential may not perform this action, or the account is blocked."
+            "description": "The model id is unknown, internal-only, or not runnable on the Claude Code harness."
           },
-          "404": {
+          "401": {
             "content": {
               "application/json": {
                 "schema": {
@@ -17744,9 +17169,9 @@
                 }
               }
             },
-            "description": "No such session in your account."
+            "description": "The bearer token is missing, invalid, or revoked."
           },
-          "409": {
+          "403": {
             "content": {
               "application/json": {
                 "schema": {
@@ -17754,7 +17179,7 @@
                 }
               }
             },
-            "description": "The session has no execution yet to attach transcript records to."
+            "description": "The credential may not perform this action, or the account is blocked."
           },
           "422": {
             "content": {
@@ -17772,12 +17197,11 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Ingest Agent Session Transcript",
+        "summary": "Set Session Defaults",
         "tags": [
           "v1"
         ],
-        "x-ellipsis-sdk-method": "sessions.ingest_transcript",
-        "x-ellipsis-undocumented": true
+        "x-ellipsis-sdk-method": "settings.sessions.set_defaults"
       }
     },
     "/v1/usage": {
@@ -17849,7 +17273,7 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Get Usage Endpoint",
+        "summary": "Get Usage",
         "tags": [
           "v1"
         ],