@ellipsis-dev/sdk 0.22.0 → 0.27.0

package/dist/{types-BKAbWcLN.d.ts → types-ClEF_IA9.d.ts}

@@ -280,6 +280,32 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    '/v1/automations/{automation_id}/metrics': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Automation Metrics
+         * @description Return an automation's session distribution and trailing spend,
+         *     by id or by name.
+         *
+         *     `samples` carries one entry per finished session (duration, cost,
+         *     tokens) for distributions; `spend_windows` carries what the
+         *     automation's sessions cost over the last 1, 7, and 28 days against
+         *     its budget for each window.
+         */
+        get: operations['get_automation_metrics'];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     '/v1/automations/{automation_id}/sessions': {
         parameters: {
             query?: never;
@@ -780,7 +806,10 @@ interface paths {
          * List Reviews
          * @description List code reviews, newest first.
          *
-         *     `findings` is omitted (counters only).
+         *     `findings` and `configuration` are omitted (counters only). Each
+         *     filter is a set: repeat `repository`, `pull_request_number`, or
+         *     `status` to match any of several values. `start` and `end` bound
+         *     the review's creation time.
          *
          *     Webhook-created reviews appear here too, so this answers "show
          *     me every review on this PR".
@@ -791,9 +820,10 @@ interface paths {
          * Create Review
          * @description Run a code review on demand.
          *
-         *     Reviews an existing PR or a pushed branch (for a branch, the
-         *     platform finds or creates a draft PR for it, since a code
-         *     review is structurally about a PR).
+         *     Reviews an open pull request. Which pipeline runs is not a
+         *     parameter: it resolves from the repository's files exactly as
+         *     it does for a push, so an on-demand review never disagrees with
+         *     the automatic one.
          *
          *     A review is one pipeline run over one commit range, with one
          *     agent session per stage: `review.id` is the run id, and
@@ -912,9 +942,10 @@ interface paths {
          * @description Start a cloud agent session.
          *
          *     The daily driver: a prompt, optionally where to run it
-         *     (`environment`) and the run's own settings, in the AgentConfig
-         *     vocabulary. Anything omitted comes from the organization's
-         *     settings — default model, default environment, budget — so
+         *     (`environment`) and the run's own settings, in the AutomationConfig
+         *     vocabulary. What you send is what runs: omit `environment` and the
+         *     session runs in the built-in basic sandbox. A missing model or
+         *     budget comes from the organization's settings, so
          *     `{"prompt": "..."}` alone is a complete request. `prompt` is the
          *     first message; omit it and the session starts idle, waiting for
          *     one. 400 when `interactive` is false and there is no prompt, or
@@ -955,6 +986,32 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    '/v1/sessions/{session_id}/diff': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Agent Session Diff
+         * @description Return the session's uncommitted changes as a patch.
+         *
+         *     One unified-diff section per changed file, captured from the
+         *     sandbox's working tree when the session ended. The per-file
+         *     counts ride on the session itself (`git.repos[].files`); this
+         *     is the text behind them. Empty when the tree was clean. A
+         *     sandbox token may read only its own session's diff.
+         */
+        get: operations['get_agent_session_diff'];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     '/v1/sessions/{session_id}/export': {
         parameters: {
             query?: never;
@@ -1120,19 +1177,18 @@ interface paths {
          * Get Organization Settings
          * @description Get the organization settings.
          *
-         *     The default model and default environment every session falls
-         *     back to when neither its request nor its automation names one,
-         *     and the per-session budget ceiling no session may exceed.
+         *     The default model every session falls back to when neither its
+         *     request nor its automation names one, and the per-session budget
+         *     ceiling no session may exceed.
          */
         get: operations['get_organization_settings'];
         /**
          * Set Organization Settings
          * @description Set the organization settings.
          *
-         *     Replaces all three: `default_model` accepts an alias or canonical
-         *     id and is stored canonical; `default_environment` accepts a name
-         *     or `env_` id and is stored as the id; `budget_ceiling.session` is
-         *     in US dollars, at most the platform ceiling. Null clears each.
+         *     Replaces both: `default_model` accepts an alias or canonical id
+         *     and is stored canonical; `budget_ceiling.session` is in US
+         *     dollars, at most the platform ceiling. Null clears each.
          *     Refused for sandbox tokens (potentially prompt-injected code must
          *     not repoint the organization's defaults).
          */
@@ -1145,666 +1201,71 @@ interface paths {
         trace?: never;
     };
     '/v1/templates': {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * List Agent Templates
-         * @description List the built-in starter agent templates.
-         *
-         *     Behind auth but not account-scoped — the data is static
-         *     product content shared by the dashboard, landing site, and CLI.
-         */
-        get: operations['list_agent_templates'];
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    '/v1/templates/{template_id}': {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * Get Agent Template
-         * @description Return one built-in agent template by slug.
-         */
-        get: operations['get_agent_template'];
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    '/v1/usage': {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * Get Usage
-         * @description Return the caller's usage dashboard data.
-         */
-        get: operations['get_usage_endpoint'];
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-}
-interface components {
-    schemas: {
-        /** AgentConfig */
-        AgentConfig: {
-            /** @default {} */
-            budget: components['schemas']['AgentConfigBudget'];
-            /**
-             * @default {
-             *       "system": ""
-             *     }
-             */
-            claude: components['schemas']['AgentConfigClaude'];
-            codex?: components['schemas']['AgentConfigCodex'] | null;
-            /**
-             * @default {
-             *       "enabled": true,
-             *       "metadata": {
-             *         "annotations": {},
-             *         "labels": []
-             *       },
-             *       "version": "v1"
-             *     }
-             */
-            ellipsis: components['schemas']['AgentConfigEllipsis'];
-            /**
-             * Environment
-             * @default {
-             *       "compute": {},
-             *       "hooks": {},
-             *       "image": {},
-             *       "mcp_servers": [],
-             *       "repositories": [],
-             *       "variables": []
-             *     }
-             */
-            environment: string | components['schemas']['AgentConfigEnvironment'];
-            input?: components['schemas']['AgentConfigInput'] | null;
-            output?: components['schemas']['AgentConfigOutput'] | null;
-            /**
-             * @default {
-             *       "ellipsis": true,
-             *       "github": {}
-             *     }
-             */
-            permissions: components['schemas']['AgentConfigPermissions'];
-            /**
-             * Skills
-             * @default []
-             */
-            skills: components['schemas']['AgentConfigSkill'][];
-            /** Trigger */
-            trigger?: (components['schemas']['AgentConfigCronTrigger'] | components['schemas']['AgentConfigReactTrigger'] | components['schemas']['AgentConfigMentionTrigger']) | null;
-        };
-        /** AgentConfigBudget */
-        AgentConfigBudget: {
-            /** Day */
-            day?: number | null;
-            /** Month */
-            month?: number | null;
-            /** Session */
-            session?: number | null;
-            /** Week */
-            week?: number | null;
-        };
-        /** AgentConfigClaude */
-        AgentConfigClaude: {
-            effort?: components['schemas']['EffortLevel'] | null;
-            /** Fallback Model */
-            fallback_model?: string | null;
-            /** Max Turns */
-            max_turns?: number | null;
-            /** Model */
-            model?: string | null;
-            settings?: components['schemas']['AgentConfigSettingsRef'] | null;
-            /**
-             * System
-             * @default
-             */
-            system: string | components['schemas']['AgentConfigSystemFileRef'] | (string | components['schemas']['AgentConfigSystemFileRef'])[];
-        };
-        /**
-         * AgentConfigCodex
-         * @description The `codex:` block — run this agent on OpenAI's Codex CLI instead of
-         *     Claude Code. Declaring the block at all is what selects the harness
-         *     (`AgentConfig.harness`).
-         *
-         *     Deliberately a small subset of `AgentConfigClaude`: the fields omitted here
-         *     are ones Codex has no equivalent for (`effort`, `fallback_model`,
-         *     `settings`) or that the platform does not yet wire through for this harness
-         *     (`max_turns`, `skills`, MCP servers). They are omitted rather than
-         *     accepted-and-ignored, because `StrictConfigModel` forbids extra keys — so a
-         *     config that sets one fails loudly at parse time instead of silently not doing
-         *     it. The budget still bounds a run regardless.
-         */
-        AgentConfigCodex: {
-            /**
-             * Model
-             * @default gpt-5.6-terra
-             */
-            model: string;
-            /**
-             * System
-             * @default
-             */
-            system: string | components['schemas']['AgentConfigSystemFileRef'] | (string | components['schemas']['AgentConfigSystemFileRef'])[];
-        };
-        /**
-         * AgentConfigCompute
-         * @description Sandbox compute sizing. Every field is optional; None inherits the
-         *     platform default (1 vCPU / 4096 MiB / 3600s — see DEFAULT_MODAL_* in
-         *     models/ellipsis/sandboxes/sandbox.py). A resolved value outside the platform
-         *     bounds fails validation loudly (a sync error on the config) rather than
-         *     being clamped silently.
-         *
-         *     `memory` and `timeout` each accept a shorthand string ("8GB", "30m") or an
-         *     explicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /
-         *     `timeout_seconds` properties resolve either form to the canonical integer
-         *     the sandbox driver consumes.
-         *
-         *     `timeout` is the max wall-clock the agent may run before the sandbox is
-         *     killed, capped at 1h (MAX_SANDBOX_TIMEOUT_SECONDS — equal to the default, so
-         *     today the knob only shortens a session; the cap matches the 1-hour validity
-         *     of the sandbox's GitHub token). The worker's lease/visibility heartbeat
-         *     ceiling is derived from that cap, so a run at the max stays owned by its
-         *     worker for its whole life.
-         *
-         *     Compute is billed on the requested allocation over the sandbox's
-         *     wall-clock lifetime, so a bigger/longer box costs proportionally more.
-         */
-        AgentConfigCompute: {
-            /** Cpu */
-            cpu?: number | null;
-            /** Memory */
-            memory?: string | components['schemas']['AgentConfigMemorySize'] | null;
-            /** Timeout */
-            timeout?: string | components['schemas']['AgentConfigDuration'] | null;
-        };
-        /** AgentConfigCronTrigger */
-        AgentConfigCronTrigger: {
-            /** Schedule */
-            schedule: string;
-            /**
-             * @description discriminator enum property added by openapi-typescript
-             * @enum {string}
-             */
-            type: 'cron';
-        };
-        /**
-         * AgentConfigDuration
-         * @description A duration as explicit units, summed. Set any of `hours`/`minutes`/
-         *     `seconds` (at least one). The alternative to the `30m`-style shorthand
-         *     string wherever a duration is accepted.
-         */
-        AgentConfigDuration: {
-            /** Hours */
-            hours?: number | null;
-            /** Minutes */
-            minutes?: number | null;
-            /** Seconds */
-            seconds?: number | null;
-        };
-        /**
-         * AgentConfigEllipsis
-         * @description The Ellipsis product namespace for a config file: which schema this is
-         *     (`version`), the human-facing identity (`name`/`description`), freeform
-         *     organizational `metadata`, and whether the agent is `enabled`. The
-         *     presence of a top-level `ellipsis:` mapping is what marks a YAML file as
-         *     an Ellipsis agent config (vs arbitrary YAML that merely lives under a
-         *     config directory) — see `yaml_is_ellipsis_config`.
-         *
-         *     `enabled` is agent behavior, not freeform metadata, so it stays inside
-         *     the config `sha` (only `metadata` is sha-excluded). Whether a session
-         *     accepts messages is a per-run choice (POST /v1/sessions `interactive`),
-         *     not a config one.
-         */
-        AgentConfigEllipsis: {
-            /** Description */
-            description?: string | null;
-            /**
-             * Enabled
-             * @default true
-             */
-            enabled: boolean;
-            /**
-             * @default {
-             *       "annotations": {},
-             *       "labels": []
-             *     }
-             */
-            metadata: components['schemas']['AgentConfigMetadata'];
-            /** Name */
-            name?: string | null;
-            /**
-             * Version
-             * @default v1
-             */
-            version: string;
-        };
-        /**
-         * AgentConfigEllipsisPermissions
-         * @description `permissions.ellipsis` as a map: resource → level | grant | list of
-         *     grants. Levels are hierarchical (read < write < delete), so `write`
-         *     includes `read`. An unlisted resource is denied. The whole block is
-         *     intersected with the platform's sandbox ceiling at token mint — it can
-         *     narrow what a sandbox token may do, never exceed it.
-         */
-        AgentConfigEllipsisPermissions: {
-            [key: string]: components['schemas']['Level'] | components['schemas']['EllipsisGrant'] | (components['schemas']['Level'] | components['schemas']['EllipsisGrant'])[];
-        };
-        /**
-         * AgentConfigEnvironment
-         * @description Everything about the environment (the sandbox) the agent runs in: which
-         *     `repositories` are cloned into it, which environment `variables` it gets,
-         *     its `compute` sizing, how its `image` is customized, and lifecycle `hooks`.
-         *     What the agent may *do* from that environment is the top-level
-         *     `permissions:` block, not this one.
-         *
-         *     Each `variables` entry names a variable to inject; with an inline `value` it
-         *     is hardcoded, without one it is resolved from the account's sandbox-secrets
-         *     store. Only the named variables reach this agent; the rest of the account's
-         *     stored variables never do. This is how a config brings in the config and
-         *     credentials a custom CLI needs.
-         */
-        AgentConfigEnvironment: {
-            /** @default {} */
-            compute: components['schemas']['AgentConfigCompute'];
-            /** @default {} */
-            hooks: components['schemas']['AgentConfigEnvironmentHooks'];
-            /** @default {} */
-            image: components['schemas']['AgentConfigEnvironmentImage'];
-            /**
-             * Mcp Servers
-             * @default []
-             */
-            mcp_servers: (string | components['schemas']['AgentConfigMcpServer'] | components['schemas']['AgentConfigMcpStdioServer'] | components['schemas']['AgentConfigMcpRemoteServer'])[];
-            /**
-             * Repositories
-             * @default []
-             */
-            repositories: components['schemas']['AgentConfigRepository'][];
-            /**
-             * Variables
-             * @default []
-             */
-            variables: components['schemas']['AgentConfigEnvironmentVariable'][];
-        };
-        /**
-         * AgentConfigEnvironmentHooks
-         * @description Shell scripts run at points in the sandbox lifecycle, each as the sandbox
-         *     user with the sandbox's environment variables available. A non-zero exit
-         *     fails the run (exit_status = LIFECYCLE_HOOK_FAILED) and is not retried.
-         *
-         *     `post_start` runs after the container starts, before any repo is cloned —
-         *     repo-independent setup (authenticate a CLI, e.g. `doppler setup`). On Modal
-         *     the repo is baked into the image so it is incidentally present, but
-         *     `post_start` must not depend on repo contents (that's `post_clone`).
-         *
-         *     `post_clone` runs after all repos are cloned/checked out, before the agent —
-         *     repo-dependent setup (`pip install -r requirements.txt`, codegen).
-         *
-         *     Hooks run on every run and their output is never cached. A dependency
-         *     install whose result should be reused across runs belongs in `image.setup`
-         *     (baked into the cached image) instead; keep hooks for per-run work — e.g.
-         *     anything that touches run-scoped credentials.
-         */
-        AgentConfigEnvironmentHooks: {
-            /** Post Clone */
-            post_clone?: string | null;
-            /** Post Start */
-            post_start?: string | null;
-        };
-        /**
-         * AgentConfigEnvironmentImage
-         * @description How to customize the container image the agent runs in. You
-         *     contribute appended layers (`dockerfile_append`) and a build-time script
-         *     (`setup`) only — Ellipsis owns FROM / base tooling / entrypoint / user.
-         *     Today only inline bodies are supported; a file reference (resolved at the
-         *     run's SHA) will come later.
-         *
-         *     The split: `dockerfile_append` runs when the image is assembled, before any
-         *     repo exists — toolchain installs (a package manager binary, apt packages).
-         *     `setup` runs at image-build time *after* the configured repositories are
-         *     checked out, and its output is captured by the filesystem snapshot that
-         *     becomes the cached image — dependency installs (`poetry install`,
-         *     `npm install`), so later runs start with deps already on disk. Neither runs
-         *     per run; that's `hooks.post_start` / `hooks.post_clone`.
-         */
-        AgentConfigEnvironmentImage: {
-            /** Dockerfile Append */
-            dockerfile_append?: string | null;
-            /** Setup */
-            setup?: string | null;
-        };
-        /**
-         * AgentConfigEnvironmentVariable
-         * @description One environment variable injected into the agent's sandbox.
-         *
-         *     `value`, when set, is a literal injected as-is — use it for non-secret
-         *     config (LOG_LEVEL, an API base URL). When `value` is omitted the value is
-         *     resolved at run time from the account's sandbox-secrets store (dashboard
-         *     / `PUT /v1/secrets`) by `name`, so a secret can be injected without
-         *     ever putting it in the config file. Either way the variable only reaches
-         *     agents that name it.
-         */
-        AgentConfigEnvironmentVariable: {
-            /** Name */
-            name: string;
-            /** Value */
-            value?: string | null;
-        };
-        /**
-         * AgentConfigGithubPermissions
-         * @description The agent's GitHub access: the scope of the installation token minted for
-         *     its sandbox — the credential `git`, `gh`, and the GitHub MCP server
-         *     authenticate with.
-         *
-         *     By default the token carries the installation's full permissions on all of
-         *     the installation's repositories. `permissions` narrows what it may do:
-         *     the string `read_only` grants read access to contents, issues, metadata and
-         *     pull requests; a map requests explicit levels per GitHub App permission
-         *     scope (e.g. `{contents: read, pull_requests: write}`) and may never exceed
-         *     what the installation granted. `repositories` scopes the token to exactly
-         *     the listed repos, by name (they must belong to the installation).
-         *
-         *     Restriction is enforced by GitHub, not by Ellipsis: the token itself is
-         *     minted with the reduced scope, so nothing running in the sandbox can
-         *     exceed it.
-         */
-        AgentConfigGithubPermissions: {
-            /** Permissions */
-            permissions?: 'read_only' | {
-                [key: string]: string;
-            } | null;
-            /** Repositories */
-            repositories?: string[] | null;
-        };
-        /**
-         * AgentConfigInput
-         * @description The typed input contract: what goes INTO a session (the trigger is
-         *     when it happens; this is what goes in).
-         *
-         *     `json_schema` types the payload a caller-started session takes
-         *     (`POST /v1/sessions` `input`, validated at the door; required when
-         *     declared). It is illegal on a react-triggered agent — react payloads are
-         *     platform-shaped (the published surface field sets), not caller-shaped.
-         *
-         *     `message` is the initial-message template: exact `{{path}}` substitution
-         *     over the caller payload (or, on a react agent, over the surface's
-         *     published fields), no conditionals/loops/filters. Refs are validated at
-         *     deploy time against the governing field set (see AgentConfig's
-         *     `_check_input`).
-         */
-        AgentConfigInput: {
-            /** Json Schema */
-            json_schema?: {
-                [key: string]: unknown;
-            } | null;
-            /** Message */
-            message?: string | null;
-        };
-        /**
-         * AgentConfigMcpRemoteServer
-         * @description A bring-your-own remote MCP server: the harness talks HTTP to `url`.
-         *     Nothing runs in the sandbox image. `headers` carry static auth (e.g.
-         *     `Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret
-         *     references, resolved at run time from the account's secrets store.
-         */
-        AgentConfigMcpRemoteServer: {
-            /**
-             * Headers
-             * @default {}
-             */
-            headers: {
-                [key: string]: string;
-            };
-            /** Name */
-            name: string;
-            /** Url */
-            url: string;
-        };
-        /**
-         * AgentConfigMcpServer
-         * @description One built-in MCP server this agent opts into by name (`linear`/`slack`).
-         *     A name reference over the connected built-in set — the platform manages the
-         *     server's transport and credentials. It only matters when the named
-         *     integration is set to `opt_in` inclusion; an integration in the default
-         *     `all_sessions` mode is added regardless. For a server the platform does not
-         *     provide, define it instead (`AgentConfigMcpStdioServer` /
-         *     `AgentConfigMcpRemoteServer`).
-         */
-        AgentConfigMcpServer: {
-            /** Name */
-            name: string;
-        };
-        /**
-         * AgentConfigMcpStdioServer
-         * @description A bring-your-own stdio MCP server: the harness spawns `command` inside
-         *     the sandbox and speaks JSON-RPC over its stdin/stdout. The command must be
-         *     runnable in the sandbox image — install its runtime via `image.setup` /
-         *     `image.dockerfile_append` if the base image lacks it.
-         *
-         *     `env` values may embed `${NAME}` references, resolved at run time from the
-         *     account's secrets store (see `mcp_secret_refs`); everything else is passed
-         *     literally.
-         */
-        AgentConfigMcpStdioServer: {
-            /**
-             * Args
-             * @default []
-             */
-            args: string[];
-            /** Command */
-            command: string;
-            /**
-             * Env
-             * @default {}
-             */
-            env: {
-                [key: string]: string;
-            };
-            /** Name */
-            name: string;
-        };
-        /**
-         * AgentConfigMemorySize
-         * @description A memory size as explicit units, summed (binary: 1GB = 1024MB = 1024MiB).
-         *     Set any of `gb`/`mb` (at least one). The alternative to the `8GB`-style
-         *     shorthand string.
-         */
-        AgentConfigMemorySize: {
-            /** Gb */
-            gb?: number | null;
-            /** Mb */
-            mb?: number | null;
-        };
-        /**
-         * AgentConfigMentionPlatform
-         * @description The surface an @ellipsis mention can come from.
-         *
-         *     No SLACK member: Slack routing is not a trigger on an agent config, it is the
-         *     `slack.yaml` routing file (`SlackConfig`), which answers the questions a
-         *     platform list cannot — which channel, and whose DM. A mention trigger listing
-         *     `slack` is therefore a config error, not a silently-never-fires config.
-         * @enum {string}
-         */
-        AgentConfigMentionPlatform: 'github' | 'linear';
-        /** AgentConfigMentionTrigger */
-        AgentConfigMentionTrigger: {
-            /**
-             * Platforms
-             * @default []
-             */
-            platforms: components['schemas']['AgentConfigMentionPlatform'][];
-            /**
-             * @description discriminator enum property added by openapi-typescript
-             * @enum {string}
-             */
-            type: 'mention';
-        };
-        /** AgentConfigMetadata */
-        AgentConfigMetadata: {
-            /**
-             * Annotations
-             * @default {}
-             */
-            annotations: {
-                [key: string]: string;
-            };
-            /**
-             * Labels
-             * @default []
-             */
-            labels: string[];
-        };
-        /**
-         * AgentConfigOutput
-         * @description The typed output contract: the JSON Schema the agent must exit through
-         *     (the StructuredOutput exit tool). Read back via
-         *     GET /v1/sessions/{id}/output.
-         */
-        AgentConfigOutput: {
-            /** Json Schema */
-            json_schema: {
-                [key: string]: unknown;
-            };
-        };
-        /**
-         * AgentConfigPermissions
-         * @description What the agent is allowed to touch, per credential the platform mints
-         *     into its sandbox. Distinct from `environment:`, which is where the agent
-         *     runs; this is what it may do from there.
-         *
-         *     `ellipsis` scopes the sandbox's Ellipsis API token
-         *     (`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates
-         *     with). `true` / the string `all` (the default) grant the full sandbox
-         *     ceiling — everything a sandbox token can ever do. A map narrows it per
-         *     resource (see `AgentConfigEllipsisPermissions`); the minted token carries
-         *     the intersection, so a config can only ever reduce access. `false` fails
-         *     validation — an agent with no API token cannot report its own progress.
-         *
-         *     `github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) —
-         *     see `AgentConfigGithubPermissions`. GitHub enforces it at mint time.
-         */
-        AgentConfigPermissions: {
-            /**
-             * Ellipsis
-             * @default true
-             */
-            ellipsis: (true | 'all') | components['schemas']['AgentConfigEllipsisPermissions'];
-            /** @default {} */
-            github: components['schemas']['AgentConfigGithubPermissions'];
-        };
-        /** AgentConfigReactTrigger */
-        AgentConfigReactTrigger: {
-            issue?: components['schemas']['ReactIssue'] | null;
-            linear_issue?: components['schemas']['ReactLinearIssue'] | null;
-            pull_request?: components['schemas']['ReactPullRequest'] | null;
-            push?: components['schemas']['ReactPush'] | null;
-            sentry?: components['schemas']['ReactSentry'] | null;
-            slack_channel?: components['schemas']['ReactSlackChannel'] | null;
-            /**
-             * @description discriminator enum property added by openapi-typescript
-             * @enum {string}
-             */
-            type: 'react';
-        };
-        /** AgentConfigRepository */
-        AgentConfigRepository: {
-            /** Name */
-            name: string;
-            /** Owner */
-            owner?: string | null;
-            /** Ref */
-            ref?: string | null;
-        };
-        /**
-         * AgentConfigSettingsRef
-         * @description A config-declared Claude Code settings.json, resolved at run start and
-         *     passed to `claude --settings <path>`. That is the CLI settings tier — BELOW
-         *     Ellipsis's managed-settings.json floor — so it customizes behavior (model
-         *     permissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a
-         *     security setting. Lets a team point the cloud agent at the same settings file
-         *     they already use with Claude Code locally instead of re-encoding it as YAML.
-         */
-        AgentConfigSettingsRef: {
-            /** Path */
-            path: string;
-            repository?: components['schemas']['AgentConfigRepository'] | null;
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
         };
         /**
-         * AgentConfigSkill
-         * @description One config-declared Claude Code skill: a repository directory containing
-         *     a SKILL.md, resolved at run start and installed at the sandbox's personal
-         *     skill level (`~/.claude/skills/<basename(path)>/`). This is how a config
-         *     brings in skills its cloned repositories don't provide — cross-repo refs
-         *     (an org-wide skills repo), public third-party repos, and repo-less runs.
-         *     Skills under a cloned repo's own `.claude/skills/` load by themselves and
-         *     don't need an entry here.
+         * List Agent Templates
+         * @description List the built-in starter agent templates.
+         *
+         *     Behind auth but not account-scoped — the data is static
+         *     product content shared by the dashboard, landing site, and CLI.
          */
-        AgentConfigSkill: {
-            /** Path */
-            path: string;
-            repository?: components['schemas']['AgentConfigRepository'] | null;
+        get: operations['list_agent_templates'];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    '/v1/templates/{template_id}': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
         };
         /**
-         * AgentConfigSource
-         * @description Where a session's config came from. Total: every session has exactly one
-         *     source, including the ones that never touch defaults resolution.
-         *
-         *     Not derivable from the row — `agent_config_id` says WHICH saved config, not
-         *     how it was chosen, and is null for inline, platform-default, and built-in
-         *     configs alike — so it is persisted for audit and the published wire.
-         * @enum {string}
+         * Get Agent Template
+         * @description Return one built-in agent template by slug.
          */
-        AgentConfigSource: 'explicit' | 'inline' | 'template' | 'repo_default' | 'account_default' | 'platform_default' | 'trigger' | 'builtin';
+        get: operations['get_agent_template'];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    '/v1/usage': {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * AgentConfigSourceGithub
-         * @description Identifies the file a GitHub-sourced agent config is synced from.
-         *
-         *     Keyed on the repository ID (not owner/name) so repository and org renames
-         *     don't orphan the config; resolve display names from gh_repositories at
-         *     read time.
+         * Get Usage
+         * @description Return the caller's usage dashboard data.
          */
-        AgentConfigSourceGithub: {
-            /** Branch */
-            branch: string;
-            /** Path */
-            path: string;
-            /** Repo Id */
-            repo_id: number;
-        };
-        /** AgentConfigSystemFileRef */
-        AgentConfigSystemFileRef: {
-            /** File */
-            file: string;
-            repository?: components['schemas']['AgentConfigRepository'] | null;
-        };
+        get: operations['get_usage_endpoint'];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+}
+interface components {
+    schemas: {
         /**
          * AgentTemplate
          * @description A built-in agent template: a ready-to-use agent config plus the
@@ -2204,10 +1665,8 @@ interface components {
          *     when invoked, plus where it syncs from and the state of that sync.
          */
         Automation: {
-            /** @description The agent definition itself, in the same schema as a YAML file under agents/. */
-            agent_config: components['schemas']['AgentConfig'];
-            /** @description The repository, path, and branch the automation syncs from. Null only transiently, before the creating pull request's file lands on the branch. */
-            agent_config_source_details?: components['schemas']['AgentConfigSourceGithub'] | null;
+            /** @description The automation definition itself, in the same schema as its YAML file: identity, trigger, input contract, and the session block. */
+            config: components['schemas']['AutomationConfig'];
             /**
              * Created At
              * Format: date-time
@@ -2263,6 +1722,8 @@ interface components {
              * @description The definition's content identity: the version fingerprint frozen onto each session that runs it.
              */
             sha: string;
+            /** @description The repository, path, and branch the automation syncs from. Null only transiently, before the creating pull request's file lands on the branch. */
+            source_details?: components['schemas']['GithubSourceDetails'] | null;
             /**
              * Updated At
              * Format: date-time
@@ -2270,6 +1731,104 @@ interface components {
              */
             updated_at: string;
         };
+        /**
+         * AutomationConfig
+         * @description A saved automation, as written in its YAML file: identity
+         *     (`ellipsis`), when it runs (`trigger`), what goes in (`input`), and the
+         *     `session:` block every session it starts is frozen from. Field order is
+         *     the canonical key order for files and `to_yaml` exports.
+         */
+        AutomationConfig: {
+            /**
+             * @default {
+             *       "enabled": true,
+             *       "metadata": {
+             *         "annotations": {},
+             *         "labels": []
+             *       },
+             *       "version": "v1"
+             *     }
+             */
+            ellipsis: components['schemas']['AutomationIdentity'];
+            input?: components['schemas']['InputContract'] | null;
+            /**
+             * @default {
+             *       "budget": {},
+             *       "claude": {
+             *         "system": ""
+             *       },
+             *       "environment": {
+             *         "compute": {},
+             *         "hooks": {},
+             *         "image": {},
+             *         "mcp_servers": [],
+             *         "repositories": [],
+             *         "variables": []
+             *       },
+             *       "permissions": {
+             *         "ellipsis": true,
+             *         "github": {}
+             *       },
+             *       "skills": []
+             *     }
+             */
+            session: components['schemas']['SessionConfig'];
+            /** Trigger */
+            trigger?: (components['schemas']['CronTrigger'] | components['schemas']['ReactTrigger']) | null;
+        };
+        /**
+         * AutomationIdentity
+         * @description The Ellipsis product namespace for a config file: which schema this is
+         *     (`version`), the human-facing identity (`name`/`description`), freeform
+         *     organizational `metadata`, and whether the agent is `enabled`. The
+         *     presence of a top-level `ellipsis:` mapping is what marks a YAML file as
+         *     an Ellipsis agent config (vs arbitrary YAML that merely lives under a
+         *     config directory) — see `yaml_is_ellipsis_config`.
+         *
+         *     `enabled` is agent behavior, not freeform metadata, so it stays inside
+         *     the config `sha` (only `metadata` is sha-excluded). Whether a session
+         *     accepts messages is a per-run choice (POST /v1/sessions `interactive`),
+         *     not a config one.
+         */
+        AutomationIdentity: {
+            /** Description */
+            description?: string | null;
+            /**
+             * Enabled
+             * @default true
+             */
+            enabled: boolean;
+            /**
+             * @default {
+             *       "annotations": {},
+             *       "labels": []
+             *     }
+             */
+            metadata: components['schemas']['ConfigMetadata'];
+            /** Name */
+            name?: string | null;
+            /**
+             * Version
+             * @default v1
+             */
+            version: string;
+        };
+        /**
+         * AutomationMetricsResponse
+         * @description An automation's session distribution and trailing spend.
+         */
+        AutomationMetricsResponse: {
+            /**
+             * Samples
+             * @description One entry per finished session, unordered.
+             */
+            samples: components['schemas']['AutomationSessionSample'][];
+            /**
+             * Spend Windows
+             * @description Trailing spend versus the budget, one entry per window (1, 7, and 28 days).
+             */
+            spend_windows: components['schemas']['AutomationSpendWindow'][];
+        };
         /**
          * AutomationResponse
          * @description One automation.
@@ -2278,6 +1837,54 @@ interface components {
             /** @description The automation. */
             automation: components['schemas']['Automation'];
         };
+        /**
+         * AutomationSessionSample
+         * @description One finished session of the automation, reduced to the three figures
+         *     the distributions are drawn from.
+         */
+        AutomationSessionSample: {
+            /**
+             * Cost
+             * @description What the session cost, in millicents.
+             */
+            cost: number;
+            /**
+             * Duration Seconds
+             * @description Wall-clock seconds from the session's creation to its last update.
+             */
+            duration_seconds: number;
+            /**
+             * Tokens Total
+             * @description Tokens the session consumed across every lane, including prompt-cache reads and writes.
+             */
+            tokens_total: number;
+        };
+        /**
+         * AutomationSpendWindow
+         * @description The automation's trailing spend against its budget over one window.
+         */
+        AutomationSpendWindow: {
+            /**
+             * Limit Usd
+             * @description The enforced cap for the window, in US dollars: the automation's own budget clamped to the platform maximum, or the maximum itself when the budget is unset.
+             */
+            limit_usd: number;
+            /**
+             * Platform Max Usd
+             * @description The platform ceiling for the window, in US dollars; a budget above it is clamped to it.
+             */
+            platform_max_usd: number;
+            /**
+             * Spent Usd
+             * @description What the automation's sessions cost over the window, in US dollars.
+             */
+            spent_usd: number;
+            /**
+             * Window Days
+             * @description The trailing window, in days: 1, 7, or 28.
+             */
+            window_days: number;
+        };
         /**
          * AutomationsListResponse
          * @description The caller's automations.
@@ -2300,6 +1907,17 @@ interface components {
              */
             session?: number | null;
         };
+        /** BudgetConfig */
+        BudgetConfig: {
+            /** Day */
+            day?: number | null;
+            /** Month */
+            month?: number | null;
+            /** Session */
+            session?: number | null;
+            /** Week */
+            week?: number | null;
+        };
         /**
          * BudgetSource
          * @description Which layer actually determined the enforced budget.
@@ -2364,6 +1982,22 @@ interface components {
              */
             start: string | null;
         };
+        /** ClaudeConfig */
+        ClaudeConfig: {
+            effort?: components['schemas']['EffortLevel'] | null;
+            /** Fallback Model */
+            fallback_model?: string | null;
+            /** Max Turns */
+            max_turns?: number | null;
+            /** Model */
+            model?: string | null;
+            settings?: components['schemas']['SettingsRef'] | null;
+            /**
+             * System
+             * @default
+             */
+            system: string | components['schemas']['SystemFileRef'] | (string | components['schemas']['SystemFileRef'])[];
+        };
         /**
          * ClaudeSessionRecord
          * @description A native transcript record of a Claude session (source=claude_code).
@@ -2506,6 +2140,32 @@ interface components {
         } & {
             [key: string]: unknown;
         };
+        /**
+         * CodexConfig
+         * @description The `codex:` block — run this agent on OpenAI's Codex CLI instead of
+         *     Claude Code. Declaring the block at all is what selects the harness
+         *     (`AutomationConfig.harness`).
+         *
+         *     Deliberately a small subset of `ClaudeConfig`: the fields omitted here
+         *     are ones Codex has no equivalent for (`effort`, `fallback_model`,
+         *     `settings`) or that the platform does not yet wire through for this harness
+         *     (`max_turns`, `skills`, MCP servers). They are omitted rather than
+         *     accepted-and-ignored, because `StrictConfigModel` forbids extra keys — so a
+         *     config that sets one fails loudly at parse time instead of silently not doing
+         *     it. The budget still bounds a run regardless.
+         */
+        CodexConfig: {
+            /**
+             * Model
+             * @default gpt-5.6-terra
+             */
+            model: string;
+            /**
+             * System
+             * @default
+             */
+            system: string | components['schemas']['SystemFileRef'] | (string | components['schemas']['SystemFileRef'])[];
+        };
         /** CodexErrorEvent */
         CodexErrorEvent: {
             /** Message */
@@ -2852,6 +2512,37 @@ interface components {
         } & {
             [key: string]: unknown;
         };
+        /**
+         * ComputeConfig
+         * @description Sandbox compute sizing. Every field is optional; None inherits the
+         *     platform default (1 vCPU / 4096 MiB / 3600s — see DEFAULT_MODAL_* in
+         *     models/ellipsis/sandboxes/sandbox.py). A resolved value outside the platform
+         *     bounds fails validation loudly (a sync error on the config) rather than
+         *     being clamped silently.
+         *
+         *     `memory` and `timeout` each accept a shorthand string ("8GB", "30m") or an
+         *     explicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /
+         *     `timeout_seconds` properties resolve either form to the canonical integer
+         *     the sandbox driver consumes.
+         *
+         *     `timeout` is the max wall-clock the agent may run before the sandbox is
+         *     killed, capped at 1h (MAX_SANDBOX_TIMEOUT_SECONDS — equal to the default, so
+         *     today the knob only shortens a session; the cap matches the 1-hour validity
+         *     of the sandbox's GitHub token). The worker's lease/visibility heartbeat
+         *     ceiling is derived from that cap, so a run at the max stays owned by its
+         *     worker for its whole life.
+         *
+         *     Compute is billed on the requested allocation over the sandbox's
+         *     wall-clock lifetime, so a bigger/longer box costs proportionally more.
+         */
+        ComputeConfig: {
+            /** Cpu */
+            cpu?: number | null;
+            /** Memory */
+            memory?: string | components['schemas']['MemorySize'] | null;
+            /** Timeout */
+            timeout?: string | components['schemas']['Duration'] | null;
+        };
         /**
          * ConfigManagedBy
          * @description Which writer owns an agent: the repository file it is defined in, or
@@ -2860,6 +2551,21 @@ interface components {
          * @enum {string}
          */
         ConfigManagedBy: 'github' | 'api';
+        /** ConfigMetadata */
+        ConfigMetadata: {
+            /**
+             * Annotations
+             * @default {}
+             */
+            annotations: {
+                [key: string]: string;
+            };
+            /**
+             * Labels
+             * @default []
+             */
+            labels: string[];
+        };
         /**
          * ContributorUsage
          * @description An author who merged a pull request in the window. The pull-request and
@@ -2908,8 +2614,8 @@ interface components {
          * @description Parameters for creating an automation.
          */
         CreateAutomationRequest: {
-            /** @description The automation's definition, in the same schema as a YAML file under agents/. */
-            automation: components['schemas']['AgentConfig'];
+            /** @description The automation's definition, in the same schema as a YAML file under .ellipsis/. */
+            automation: components['schemas']['AutomationConfig'];
         };
         /**
          * CreateEnvironmentRequest
@@ -2917,7 +2623,7 @@ interface components {
          */
         CreateEnvironmentRequest: {
             /** @description The environment's definition. */
-            environment: components['schemas']['EnvironmentConfig'];
+            environment: components['schemas']['EnvironmentDocument'];
         };
         /**
          * CreateFileRequest
@@ -3011,7 +2717,31 @@ interface components {
              *       "kind": "incremental"
              *     }
              */
-            scope: components['schemas']['ReviewScope'];
+            scope: components['schemas']['ReviewScope'];
+        };
+        /** CronTrigger */
+        CronTrigger: {
+            /** Schedule */
+            schedule: string;
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: 'cron';
+        };
+        /**
+         * Duration
+         * @description A duration as explicit units, summed. Set any of `hours`/`minutes`/
+         *     `seconds` (at least one). The alternative to the `30m`-style shorthand
+         *     string wherever a duration is accepted.
+         */
+        Duration: {
+            /** Hours */
+            hours?: number | null;
+            /** Minutes */
+            minutes?: number | null;
+            /** Seconds */
+            seconds?: number | null;
         };
         /**
          * DurationPercentiles
@@ -3083,6 +2813,17 @@ interface components {
             /** Match */
             match?: string[] | null;
         };
+        /**
+         * EllipsisPermissions
+         * @description `permissions.ellipsis` as a map: resource → level | grant | list of
+         *     grants. Levels are hierarchical (read < write < delete), so `write`
+         *     includes `read`. An unlisted resource is denied. The whole block is
+         *     intersected with the platform's sandbox ceiling at token mint — it can
+         *     narrow what a sandbox token may do, never exceed it.
+         */
+        EllipsisPermissions: {
+            [key: string]: components['schemas']['Level'] | components['schemas']['EllipsisGrant'] | (components['schemas']['Level'] | components['schemas']['EllipsisGrant'])[];
+        };
         /**
          * Environment
          * @description A saved environment: the machine agents run in (repositories,
@@ -3099,7 +2840,7 @@ interface components {
             /** @description The GitHub account that last edited the environment, when known. */
             edited_by?: components['schemas']['GithubAccountSnippet'] | null;
             /** @description The environment definition itself, as parsed from its YAML. */
-            environment: components['schemas']['EnvironmentConfig'];
+            environment: components['schemas']['EnvironmentDocument'];
             /**
              * Id
              * @description Unique identifier of the environment.
@@ -3128,7 +2869,7 @@ interface components {
              */
             sha: string;
             /** @description The repository, path, and branch the environment syncs from. Null for environments managed through the API. */
-            source_details?: components['schemas']['AgentConfigSourceGithub'] | null;
+            source_details?: components['schemas']['GithubSourceDetails'] | null;
             /**
              * Updated At
              * Format: date-time
@@ -3138,6 +2879,43 @@ interface components {
         };
         /**
          * EnvironmentConfig
+         * @description Everything about the environment (the sandbox) the agent runs in: which
+         *     `repositories` are cloned into it, which environment `variables` it gets,
+         *     its `compute` sizing, how its `image` is customized, and lifecycle `hooks`.
+         *     What the agent may *do* from that environment is the top-level
+         *     `permissions:` block, not this one.
+         *
+         *     Each `variables` entry names a variable to inject; with an inline `value` it
+         *     is hardcoded, without one it is resolved from the account's sandbox-secrets
+         *     store. Only the named variables reach this agent; the rest of the account's
+         *     stored variables never do. This is how a config brings in the config and
+         *     credentials a custom CLI needs.
+         */
+        EnvironmentConfig: {
+            /** @default {} */
+            compute: components['schemas']['ComputeConfig'];
+            /** @default {} */
+            hooks: components['schemas']['EnvironmentHooks'];
+            /** @default {} */
+            image: components['schemas']['EnvironmentImage'];
+            /**
+             * Mcp Servers
+             * @default []
+             */
+            mcp_servers: (string | components['schemas']['McpServerRef'] | components['schemas']['McpStdioServer'] | components['schemas']['McpRemoteServer'])[];
+            /**
+             * Repositories
+             * @default []
+             */
+            repositories: components['schemas']['RepositoryRef'][];
+            /**
+             * Variables
+             * @default []
+             */
+            variables: components['schemas']['EnvironmentVariable'][];
+        };
+        /**
+         * EnvironmentDocument
          * @description A parsed environment document: identity plus the environment body.
          *
          *     The body fields are flattened to the top level of the file (not nested
@@ -3145,38 +2923,63 @@ interface components {
          *     would be ceremony. `to_environment()` projects the body for substitution
          *     into an agent config.
          */
-        EnvironmentConfig: {
+        EnvironmentDocument: {
             /** @default {} */
-            compute: components['schemas']['AgentConfigCompute'];
-            ellipsis: components['schemas']['EnvironmentConfigEllipsis'];
+            compute: components['schemas']['ComputeConfig'];
+            ellipsis: components['schemas']['EnvironmentIdentity'];
             /** @default {} */
-            hooks: components['schemas']['AgentConfigEnvironmentHooks'];
+            hooks: components['schemas']['EnvironmentHooks'];
             /** @default {} */
-            image: components['schemas']['AgentConfigEnvironmentImage'];
+            image: components['schemas']['EnvironmentImage'];
             /**
              * Mcp Servers
              * @default []
              */
-            mcp_servers: (string | components['schemas']['AgentConfigMcpServer'] | components['schemas']['AgentConfigMcpStdioServer'] | components['schemas']['AgentConfigMcpRemoteServer'])[];
+            mcp_servers: (string | components['schemas']['McpServerRef'] | components['schemas']['McpStdioServer'] | components['schemas']['McpRemoteServer'])[];
             /**
              * Repositories
              * @default []
              */
-            repositories: components['schemas']['AgentConfigRepository'][];
+            repositories: components['schemas']['RepositoryRef'][];
             /**
              * Variables
              * @default []
              */
-            variables: components['schemas']['AgentConfigEnvironmentVariable'][];
+            variables: components['schemas']['EnvironmentVariable'][];
+        };
+        /**
+         * EnvironmentHooks
+         * @description Shell scripts run at points in the sandbox lifecycle, each as the sandbox
+         *     user with the sandbox's environment variables available. A non-zero exit
+         *     fails the run (exit_status = LIFECYCLE_HOOK_FAILED) and is not retried.
+         *
+         *     `post_start` runs after the container starts, before any repo is cloned —
+         *     repo-independent setup (authenticate a CLI, e.g. `doppler setup`). On Modal
+         *     the repo is baked into the image so it is incidentally present, but
+         *     `post_start` must not depend on repo contents (that's `post_clone`).
+         *
+         *     `post_clone` runs after all repos are cloned/checked out, before the agent —
+         *     repo-dependent setup (`pip install -r requirements.txt`, codegen).
+         *
+         *     Hooks run on every run and their output is never cached. A dependency
+         *     install whose result should be reused across runs belongs in `image.setup`
+         *     (baked into the cached image) instead; keep hooks for per-run work — e.g.
+         *     anything that touches run-scoped credentials.
+         */
+        EnvironmentHooks: {
+            /** Post Clone */
+            post_clone?: string | null;
+            /** Post Start */
+            post_start?: string | null;
         };
         /**
-         * EnvironmentConfigEllipsis
+         * EnvironmentIdentity
          * @description The Ellipsis namespace of an environment file. `kind: environment` is
          *     what routes a synced YAML here instead of to the agent-config parser —
          *     an agent config carries no `kind` (or `kind: agent`, tolerated nowhere:
          *     absence is the agent marker).
          */
-        EnvironmentConfigEllipsis: {
+        EnvironmentIdentity: {
             /** Description */
             description?: string | null;
             /**
@@ -3190,10 +2993,32 @@ interface components {
              *       "labels": []
              *     }
              */
-            metadata: components['schemas']['AgentConfigMetadata'];
+            metadata: components['schemas']['ConfigMetadata'];
             /** Name */
             name?: string | null;
         };
+        /**
+         * EnvironmentImage
+         * @description How to customize the container image the agent runs in. You
+         *     contribute appended layers (`dockerfile_append`) and a build-time script
+         *     (`setup`) only — Ellipsis owns FROM / base tooling / entrypoint / user.
+         *     Today only inline bodies are supported; a file reference (resolved at the
+         *     run's SHA) will come later.
+         *
+         *     The split: `dockerfile_append` runs when the image is assembled, before any
+         *     repo exists — toolchain installs (a package manager binary, apt packages).
+         *     `setup` runs at image-build time *after* the configured repositories are
+         *     checked out, and its output is captured by the filesystem snapshot that
+         *     becomes the cached image — dependency installs (`poetry install`,
+         *     `npm install`), so later runs start with deps already on disk. Neither runs
+         *     per run; that's `hooks.post_start` / `hooks.post_clone`.
+         */
+        EnvironmentImage: {
+            /** Dockerfile Append */
+            dockerfile_append?: string | null;
+            /** Setup */
+            setup?: string | null;
+        };
         /**
          * EnvironmentResponse
          * @description One saved environment.
@@ -3213,6 +3038,23 @@ interface components {
          * @enum {string}
          */
         EnvironmentSource: 'request' | 'agent_config' | 'repo_default' | 'account_default' | 'platform_default';
+        /**
+         * EnvironmentVariable
+         * @description One environment variable injected into the agent's sandbox.
+         *
+         *     `value`, when set, is a literal injected as-is — use it for non-secret
+         *     config (LOG_LEVEL, an API base URL). When `value` is omitted the value is
+         *     resolved at run time from the account's sandbox-secrets store (dashboard
+         *     / `PUT /v1/secrets`) by `name`, so a secret can be injected without
+         *     ever putting it in the config file. Either way the variable only reaches
+         *     agents that name it.
+         */
+        EnvironmentVariable: {
+            /** Name */
+            name: string;
+            /** Value */
+            value?: string | null;
+        };
         /**
          * EnvironmentsListResponse
          * @description The caller's saved environments.
@@ -3663,6 +3505,32 @@ interface components {
              */
             members: components['schemas']['GithubMember'][];
         };
+        /**
+         * GithubPermissions
+         * @description The agent's GitHub access: the scope of the installation token minted for
+         *     its sandbox — the credential `git`, `gh`, and the GitHub MCP server
+         *     authenticate with.
+         *
+         *     By default the token carries the installation's full permissions on all of
+         *     the installation's repositories. `permissions` narrows what it may do:
+         *     the string `read_only` grants read access to contents, issues, metadata and
+         *     pull requests; a map requests explicit levels per GitHub App permission
+         *     scope (e.g. `{contents: read, pull_requests: write}`) and may never exceed
+         *     what the installation granted. `repositories` scopes the token to exactly
+         *     the listed repos, by name (they must belong to the installation).
+         *
+         *     Restriction is enforced by GitHub, not by Ellipsis: the token itself is
+         *     minted with the reduced scope, so nothing running in the sandbox can
+         *     exceed it.
+         */
+        GithubPermissions: {
+            /** Permissions */
+            permissions?: 'read_only' | {
+                [key: string]: string;
+            } | null;
+            /** Repositories */
+            repositories?: string[] | null;
+        };
         /**
          * GithubRepositoriesListResponse
          * @description The repositories connected to the account's GitHub installation.
@@ -3712,6 +3580,22 @@ interface components {
              */
             private: boolean;
         };
+        /**
+         * GithubSourceDetails
+         * @description Identifies the file a GitHub-sourced agent config is synced from.
+         *
+         *     Keyed on the repository ID (not owner/name) so repository and org renames
+         *     don't orphan the config; resolve display names from gh_repositories at
+         *     read time.
+         */
+        GithubSourceDetails: {
+            /** Branch */
+            branch: string;
+            /** Path */
+            path: string;
+            /** Repo Id */
+            repo_id: number;
+        };
         /**
          * GithubUser
          * @description This is a full user account. It's the most amount of info we need to represent a GitHub user.
@@ -3815,6 +3699,24 @@ interface components {
          * @enum {string}
          */
         Harness: 'claude_code' | 'codex';
+        /**
+         * ImageAttachment
+         * @description One image on a request body, base64 inline (the Claude Code paste
+         *     shape). Shared by `POST /v1/sessions` and `POST /v1/sessions/{id}/messages`.
+         */
+        ImageAttachment: {
+            /**
+             * Data
+             * @description The raw image bytes, base64-encoded. 5 MiB cap.
+             */
+            data: string;
+            /**
+             * Media Type
+             * @description The image's MIME type: image/png, image/jpeg, image/gif, or image/webp. The bytes must match.
+             * @enum {string}
+             */
+            media_type: 'image/png' | 'image/jpeg' | 'image/gif' | 'image/webp';
+        };
         /**
          * IngestTranscriptRequest
          * @description A batch of raw transcript lines pushed from inside a session's
@@ -3833,6 +3735,30 @@ interface components {
              */
             offset: number;
         };
+        /**
+         * InputContract
+         * @description The typed input contract: what goes INTO a session (the trigger is
+         *     when it happens; this is what goes in).
+         *
+         *     `json_schema` types the payload a caller-started session takes
+         *     (`POST /v1/sessions` `input`, validated at the door; required when
+         *     declared). It is illegal on a react-triggered agent — react payloads are
+         *     platform-shaped (the published surface field sets), not caller-shaped.
+         *
+         *     `message` is the initial-message template: exact `{{path}}` substitution
+         *     over the caller payload (or, on a react agent, over the surface's
+         *     published fields), no conditionals/loops/filters. Refs are validated at
+         *     deploy time against the governing field set (see AutomationConfig's
+         *     `_check_input`).
+         */
+        InputContract: {
+            /** Json Schema */
+            json_schema?: {
+                [key: string]: unknown;
+            } | null;
+            /** Message */
+            message?: string | null;
+        };
         /**
          * IssueAction
          * @enum {string}
@@ -4011,7 +3937,7 @@ interface components {
         LinkAutomationRequest: {
             /**
              * Path
-             * @description File path within the repo. Omit for the default agents/<slug>.yaml; if set it must be a location the sync scans (a .yaml/.yml file under agents/, .agents/, ellipsis/, or .ellipsis/ at any depth).
+             * @description File path within the repo. Omit for the default .ellipsis/automations/<slug>.yaml; if set it must be a location the sync scans (a .yaml/.yml file under .ellipsis/ at any depth; in the repository named .ellipsis the repo root is that directory).
              */
             path?: string | null;
             /**
@@ -4070,6 +3996,69 @@ interface components {
              */
             slack_user_id: string;
         };
+        /**
+         * McpRemoteServer
+         * @description A bring-your-own remote MCP server: the harness talks HTTP to `url`.
+         *     Nothing runs in the sandbox image. `headers` carry static auth (e.g.
+         *     `Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret
+         *     references, resolved at run time from the account's secrets store.
+         */
+        McpRemoteServer: {
+            /**
+             * Headers
+             * @default {}
+             */
+            headers: {
+                [key: string]: string;
+            };
+            /** Name */
+            name: string;
+            /** Url */
+            url: string;
+        };
+        /**
+         * McpServerRef
+         * @description One built-in MCP server this agent opts into by name (`linear`/`slack`).
+         *     A name reference over the connected built-in set — the platform manages the
+         *     server's transport and credentials. It only matters when the named
+         *     integration is set to `opt_in` inclusion; an integration in the default
+         *     `all_sessions` mode is added regardless. For a server the platform does not
+         *     provide, define it instead (`McpStdioServer` /
+         *     `McpRemoteServer`).
+         */
+        McpServerRef: {
+            /** Name */
+            name: string;
+        };
+        /**
+         * McpStdioServer
+         * @description A bring-your-own stdio MCP server: the harness spawns `command` inside
+         *     the sandbox and speaks JSON-RPC over its stdin/stdout. The command must be
+         *     runnable in the sandbox image — install its runtime via `image.setup` /
+         *     `image.dockerfile_append` if the base image lacks it.
+         *
+         *     `env` values may embed `${NAME}` references, resolved at run time from the
+         *     account's secrets store (see `mcp_secret_refs`); everything else is passed
+         *     literally.
+         */
+        McpStdioServer: {
+            /**
+             * Args
+             * @default []
+             */
+            args: string[];
+            /** Command */
+            command: string;
+            /**
+             * Env
+             * @default {}
+             */
+            env: {
+                [key: string]: string;
+            };
+            /** Name */
+            name: string;
+        };
         /**
          * MemoriesListResponse
          * @description The organization's memories: the rendered index a reader scans, plus the
@@ -4160,6 +4149,18 @@ interface components {
             /** @description The memory. */
             memory: components['schemas']['Memory'];
         };
+        /**
+         * MemorySize
+         * @description A memory size as explicit units, summed (binary: 1GB = 1024MB = 1024MiB).
+         *     Set any of `gb`/`mb` (at least one). The alternative to the `8GB`-style
+         *     shorthand string.
+         */
+        MemorySize: {
+            /** Gb */
+            gb?: number | null;
+            /** Mb */
+            mb?: number | null;
+        };
         /**
          * MemorySummary
          * @description One entry in the index: a memory with every field except `content`.
@@ -4305,17 +4306,24 @@ interface components {
         OrganizationSettings: {
             /** @description The organization's spend ceilings. */
             budget_ceiling?: components['schemas']['BudgetCeiling'];
-            /**
-             * Default Environment
-             * @description The saved environment sessions run in when neither their request nor their automation names one: an `env_...` id or the environment's name on write, always the id on read. Null means the built-in basic sandbox.
-             */
-            default_environment?: string | null;
             /**
              * Default Model
              * @description Canonical model id every session falls back to when neither its request nor its automation names one, or null when unset (sessions then run the platform default).
              */
             default_model?: string | null;
         };
+        /**
+         * OutputConfig
+         * @description The typed output contract: the JSON Schema the agent must exit through
+         *     (the StructuredOutput exit tool). Read back via
+         *     GET /v1/sessions/{id}/output.
+         */
+        OutputConfig: {
+            /** Json Schema */
+            json_schema: {
+                [key: string]: unknown;
+            };
+        };
         /**
          * ParentKind
          * @description How a session relates to its predecessor (parent_agent_session_id) —
@@ -4329,6 +4337,32 @@ interface components {
          * @enum {string}
          */
         ParentKind: 'continuation' | 'resume';
+        /**
+         * PermissionsConfig
+         * @description What the agent is allowed to touch, per credential the platform mints
+         *     into its sandbox. Distinct from `environment:`, which is where the agent
+         *     runs; this is what it may do from there.
+         *
+         *     `ellipsis` scopes the sandbox's Ellipsis API token
+         *     (`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates
+         *     with). `true` / the string `all` (the default) grant the full sandbox
+         *     ceiling — everything a sandbox token can ever do. A map narrows it per
+         *     resource (see `EllipsisPermissions`); the minted token carries
+         *     the intersection, so a config can only ever reduce access. `false` fails
+         *     validation — an agent with no API token cannot report its own progress.
+         *
+         *     `github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) —
+         *     see `GithubPermissions`. GitHub enforces it at mint time.
+         */
+        PermissionsConfig: {
+            /**
+             * Ellipsis
+             * @default true
+             */
+            ellipsis: (true | 'all') | components['schemas']['EllipsisPermissions'];
+            /** @default {} */
+            github: components['schemas']['GithubPermissions'];
+        };
         /**
          * PollCliAuthResponse
          * @description The state of a device-code flow. Poll until `status` leaves `pending`.
@@ -4647,6 +4681,20 @@ interface components {
         };
         /** ReactSlackChannel */
         ReactSlackChannel: Record<string, never>;
+        /** ReactTrigger */
+        ReactTrigger: {
+            issue?: components['schemas']['ReactIssue'] | null;
+            linear_issue?: components['schemas']['ReactLinearIssue'] | null;
+            pull_request?: components['schemas']['ReactPullRequest'] | null;
+            push?: components['schemas']['ReactPush'] | null;
+            sentry?: components['schemas']['ReactSentry'] | null;
+            slack_channel?: components['schemas']['ReactSlackChannel'] | null;
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: 'react';
+        };
         /**
          * RecentPullRequest
          * @description One pull request in the recent-activity table.
@@ -4771,6 +4819,15 @@ interface components {
              */
             include: string[];
         } | string[];
+        /** RepositoryRef */
+        RepositoryRef: {
+            /** Name */
+            name: string;
+            /** Owner */
+            owner?: string | null;
+            /** Ref */
+            ref?: string | null;
+        };
         /**
          * RepositorySelection
          * @enum {string}
@@ -5302,17 +5359,60 @@ interface components {
          * @description The pull request a review ran on.
          */
         ReviewPullRequest: {
+            /** @description Who opened the pull request, or null when Ellipsis has not ingested the pull request yet. */
+            author?: components['schemas']['ReviewPullRequestAuthor'] | null;
+            /**
+             * Base Sha
+             * @description The pull request's base commit when the review was created.
+             */
+            base_sha: string;
+            /**
+             * Head Sha
+             * @description The pull request's head commit the review ran against (the same as `scope.head`).
+             */
+            head_sha: string;
             /**
              * Number
              * @description The pull request number.
              */
             number: number;
+            /**
+             * Title
+             * @description The pull request's title, or null when Ellipsis has not ingested the pull request yet.
+             */
+            title?: string | null;
             /**
              * Url
              * @description The pull request's URL on GitHub.
              */
             url: string;
         };
+        /**
+         * ReviewPullRequestAuthor
+         * @description The GitHub account that opened the pull request.
+         */
+        ReviewPullRequestAuthor: {
+            /**
+             * Avatar Url
+             * @description The account's avatar URL.
+             */
+            avatar_url: string;
+            /**
+             * Id
+             * @description The account's GitHub id.
+             */
+            id: number;
+            /**
+             * Login
+             * @description The account's GitHub login.
+             */
+            login: string;
+            /**
+             * Type
+             * @description The account type: "User", "Organization", or "Bot".
+             */
+            type: string;
+        };
         /**
          * ReviewRepoFacet
          * @description A repository filter option for the reviews view.
@@ -5955,9 +6055,14 @@ interface components {
              * @description Optional retry-safety key, unique per (session, key): a retry with the same key returns the original message — no duplicate message, no double turn, no double spend. The SDK auto-generates one per send.
              */
             idempotency_key?: string | null;
+            /**
+             * Images
+             * @description Images attached to the message, base64 inline — what a paste into Claude Code sends. Each becomes an `[Image #N]` placeholder in the stored body and an image block the model sees on the turn this message opens. Up to 10, 5 MiB each; PNG, JPEG, GIF, or WebP. Claude harness only.
+             */
+            images?: components['schemas']['ImageAttachment'][];
             /**
              * Message
-             * @description The message text.
+             * @description The message text. May be empty when `images` is not.
              */
             message: string;
         };
@@ -6001,12 +6106,14 @@ interface components {
          *     disagree about what a session looks like.
          */
         Session: {
-            /** @description The agent that ran: the config the session executed, where that config came from, and any override merged into it. */
-            agent: components['schemas']['SessionAgent'];
             /** @description The principal this session is attributed to. */
             attribution?: components['schemas']['SessionAttribution'];
+            /** @description The automation the session was started from, or null for a raw session started with POST /v1/sessions. */
+            automation?: components['schemas']['SessionAutomation'] | null;
             /** @description The spend budget enforced for this session. */
             budget?: components['schemas']['SessionBudget'];
+            /** @description What the session ran on, frozen when it was created: the harness block, the resolved environment, permissions, skills, output contract, and budget. */
+            config: components['schemas']['SessionConfig'];
             /**
              * Context Repository
              * @description The "owner/name" repository context the session was started in, if any.
@@ -6020,7 +6127,7 @@ interface components {
              * @description When the session was created.
              */
             created_at: string;
-            /** @description The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is inside agent.config.environment. */
+            /** @description The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is `config.environment`. */
             environment?: components['schemas']['SessionEnvironment'];
             /** @description How the session ended; null until it is terminal. */
             exit_status?: components['schemas']['SessionExitStatus'] | null;
@@ -6062,7 +6169,7 @@ interface components {
             prompting: components['schemas']['SessionPrompting'];
             /** @description Lifecycle state of the durable conversation, or null for sessions without one. */
             session_state?: components['schemas']['SessionState'] | null;
-            /** @description Where the session came from (e.g. react, manual, api, cli, mention, cron). */
+            /** @description Where the session came from (e.g. react, web, api, cli, mention, cron). */
             source: components['schemas']['SessionSource'];
             /** @description Execution status of the session. */
             status: components['schemas']['SessionStatus'];
@@ -6086,35 +6193,6 @@ interface components {
              */
             updated_at: string;
         };
-        /**
-         * SessionAgent
-         * @description The agent this session ran: the definition it actually executed, where
-         *     that definition came from, and the diff that was merged in — the same
-         *     effective-value-plus-provenance shape `SessionBudget` uses.
-         *
-         *     `config` is the snapshot frozen when the session was created;
-         *     `automation_id` points at the automation as it exists NOW. They diverge
-         *     legitimately: a YAML edit after the session started, or any `override`,
-         *     leaves the pointer describing something the session never ran.
-         */
-        SessionAgent: {
-            /**
-             * Automation Id
-             * @description Identifier of the automation this session's snapshot was taken from. Null for raw sessions (nothing saved behind them), templates, and built-in agents. Points at the automation as it exists now, which may have changed since.
-             */
-            automation_id?: string | null;
-            /** @description The agent definition the session actually ran, frozen when the session was created. */
-            config: components['schemas']['AgentConfig'];
-            /**
-             * Override
-             * @description The partial-config override merged into `config` for this session, or null when the config ran unmodified. `config` is the merged result; this is the diff.
-             */
-            override?: {
-                [key: string]: unknown;
-            } | null;
-            /** @description How this session's config was chosen. */
-            source: components['schemas']['AgentConfigSource'];
-        };
         /**
          * SessionAttribution
          * @description The principal a session is attributed to: what kind, its id, and — when
@@ -6131,6 +6209,22 @@ interface components {
             /** @description The GitHub user the session is attributed to, resolved at read time. Null when the attribution is not a GitHub user. */
             user?: components['schemas']['GithubAccountSnippet'] | null;
         };
+        /**
+         * SessionAutomation
+         * @description The automation this session was started from: the definition frozen
+         *     when the session was created, and the saved automation it came from as it
+         *     exists NOW. They diverge legitimately — a YAML edit after the session
+         *     started leaves the pointer describing something the session never ran.
+         */
+        SessionAutomation: {
+            /** @description The automation definition the session was started from, frozen when the session was created. */
+            config: components['schemas']['AutomationConfig'];
+            /**
+             * Id
+             * @description Identifier of the saved automation this session's snapshot was taken from. Null for a routing-file agent, a code-review stage agent, or the built-in mention agent, which have no saved automation behind them. Points at the automation as it exists now, which may have changed since.
+             */
+            id?: string | null;
+        };
         /**
          * SessionBudget
          * @description The spend budget actually enforced for this session, and which layer of
@@ -6149,6 +6243,56 @@ interface components {
              */
             source: components['schemas']['BudgetSource'];
         };
+        /**
+         * SessionConfig
+         * @description What one session runs on: the harness block(s), where it runs, what it
+         *     may touch, its skills, its exit contract, and its spend cap. Every session
+         *     freezes one of these (`agent_sessions.session_config`); an automation
+         *     carries one under `session:` (`AutomationConfig.session`); and
+         *     `POST /v1/sessions` is this shape flattened onto the request body, plus the
+         *     run settings. Nothing in here is an automation's identity or trigger —
+         *     those belong to `AutomationConfig`.
+         *
+         *     Field order is the canonical key order for `session:` blocks and YAML
+         *     exports: what runs (`claude`/`codex`), where (`environment`), what it may
+         *     touch (`permissions`), then the rest.
+         */
+        SessionConfig: {
+            /** @default {} */
+            budget: components['schemas']['BudgetConfig'];
+            /**
+             * @default {
+             *       "system": ""
+             *     }
+             */
+            claude: components['schemas']['ClaudeConfig'];
+            codex?: components['schemas']['CodexConfig'] | null;
+            /**
+             * Environment
+             * @default {
+             *       "compute": {},
+             *       "hooks": {},
+             *       "image": {},
+             *       "mcp_servers": [],
+             *       "repositories": [],
+             *       "variables": []
+             *     }
+             */
+            environment: string | components['schemas']['EnvironmentConfig'];
+            output?: components['schemas']['OutputConfig'] | null;
+            /**
+             * @default {
+             *       "ellipsis": true,
+             *       "github": {}
+             *     }
+             */
+            permissions: components['schemas']['PermissionsConfig'];
+            /**
+             * Skills
+             * @default []
+             */
+            skills: components['schemas']['SkillRef'][];
+        };
         /**
          * SessionCost
          * @description What a session (or one turn of it) cost, in millicents.
@@ -6189,11 +6333,27 @@ interface components {
              */
             total: number;
         };
+        /**
+         * SessionDiffResponse
+         * @description A session's uncommitted working-tree changes, one patch per file.
+         */
+        SessionDiffResponse: {
+            /**
+             * Files
+             * @description One unified-diff section per changed file, `diff --git` header included, exactly as git emitted it. Join to the per-file counts on `git.repos[].files` by (full_name, path). Empty when the tree was clean or no capture ran.
+             */
+            files: components['schemas']['SessionGitPatchFile'][];
+            /**
+             * Omitted Paths
+             * @description Paths whose hunks were dropped to fit the storage cap, so a viewer can name what is missing instead of showing a silently partial diff.
+             */
+            omitted_paths: string[];
+        };
         /**
          * SessionEnvironment
          * @description The environment this session resolved: which saved environment (as it
          *     exists now) and how it was chosen. The environment's frozen BODY rides
-         *     inside `agent.config.environment` — substitution happens before the config
+         *     inside `config.environment` — substitution happens before the config
          *     snapshot freezes — so this object is provenance, not payload.
          */
         SessionEnvironment: {
@@ -6202,7 +6362,7 @@ interface components {
              * @description Identifier of the saved environment the session's config resolved. Null for an inline environment block or the built-in basic sandbox.
              */
             environment_id?: string | null;
-            /** @description How the environment was chosen (request, agent_config, repo_default, account_default, platform_default). Null when the config carried its own inline environment. */
+            /** @description How the environment was chosen (request, agent_config, platform_default; repo_default and account_default on sessions from before those ladders were removed). Null when the config carried its own inline environment. */
             source?: components['schemas']['EnvironmentSource'] | null;
         };
         /**
@@ -6263,6 +6423,28 @@ interface components {
             /** Status */
             status: string;
         };
+        /**
+         * SessionGitPatchFile
+         * @description One file's patch, split out of `git diff HEAD` at capture time.
+         *
+         *     Stored per file rather than as one blob because that is how a viewer reads
+         *     it: a row per changed file, opened one at a time. Counts and status are NOT
+         *     repeated here — they live on the matching SessionGitFile in
+         *     `agent_sessions.output_git`, which rides on every session read, so a surface
+         *     lists the changed files (and their +/−) before it fetches a single hunk. The
+         *     join key is (full_name, path).
+         *
+         *     `patch` is the unified-diff section for this file, `diff --git` header
+         *     included, exactly as git emitted it.
+         */
+        SessionGitPatchFile: {
+            /** Full Name */
+            full_name: string;
+            /** Patch */
+            patch: string;
+            /** Path */
+            path: string;
+        };
         /**
          * SessionGitPr
          * @description A pull request the session opened in this repo, written the moment the
@@ -6373,7 +6555,7 @@ interface components {
             author?: string | null;
             /**
              * Body
-             * @description The message text.
+             * @description The message text, with one `[Image #N]` placeholder per attached image.
              */
             body: string;
             /**
@@ -6402,6 +6584,11 @@ interface components {
              * @description Unique identifier of the message.
              */
             id: string;
+            /**
+             * Images
+             * @description Images attached to the message, metadata only: index, media type, size. The bytes go to the model, never over the stream.
+             */
+            images?: components['schemas']['SessionMessageImage'][];
             /**
              * Sender Attribution Id
              * @description Identifier of the principal that sent the message, if attributed.
@@ -6417,6 +6604,28 @@ interface components {
             /** @description Delivery status of the message. */
             status: components['schemas']['SessionMessageStatus'];
         };
+        /**
+         * SessionMessageImage
+         * @description One image on a message, metadata only. `index` is the N in the
+         *     `[Image #N]` placeholder in the message body.
+         */
+        SessionMessageImage: {
+            /**
+             * Index
+             * @description 1-based position: the N in `[Image #N]`.
+             */
+            index: number;
+            /**
+             * Media Type
+             * @description The image's MIME type.
+             */
+            media_type: string;
+            /**
+             * Size Bytes
+             * @description Size of the decoded image, in bytes.
+             */
+            size_bytes: number;
+        };
         /**
          * SessionMessageResponse
          * @description One inbox message.
@@ -6510,9 +6719,12 @@ interface components {
         };
         /**
          * SessionSource
+         * @description Where a session came from: the credential that started it (web app,
+         *     API key, CLI) or the trigger that fired (react, mention, cron). Never
+         *     taken from a request body.
          * @enum {string}
          */
-        SessionSource: 'react' | 'manual' | 'api' | 'cli' | 'mention' | 'cron';
+        SessionSource: 'react' | 'web' | 'api' | 'cli' | 'mention' | 'cron';
         /**
          * SessionState
          * @description Lifecycle of a keyed (multi-turn) session — the durable conversation.
@@ -6648,6 +6860,35 @@ interface components {
              */
             sessions: components['schemas']['Session'][];
         };
+        /**
+         * SettingsRef
+         * @description A config-declared Claude Code settings.json, resolved at run start and
+         *     passed to `claude --settings <path>`. That is the CLI settings tier — BELOW
+         *     Ellipsis's managed-settings.json floor — so it customizes behavior (model
+         *     permissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a
+         *     security setting. Lets a team point the cloud agent at the same settings file
+         *     they already use with Claude Code locally instead of re-encoding it as YAML.
+         */
+        SettingsRef: {
+            /** Path */
+            path: string;
+            repository?: components['schemas']['RepositoryRef'] | null;
+        };
+        /**
+         * SkillRef
+         * @description One config-declared Claude Code skill: a repository directory containing
+         *     a SKILL.md, resolved at run start and installed at the sandbox's personal
+         *     skill level (`~/.claude/skills/<basename(path)>/`). This is how a config
+         *     brings in skills its cloned repositories don't provide — cross-repo refs
+         *     (an org-wide skills repo), public third-party repos, and repo-less runs.
+         *     Skills under a cloned repo's own `.claude/skills/` load by themselves and
+         *     don't need an entry here.
+         */
+        SkillRef: {
+            /** Path */
+            path: string;
+            repository?: components['schemas']['RepositoryRef'] | null;
+        };
         /**
          * SlackChannel
          * @description One channel in the connected Slack workspace.
@@ -6775,7 +7016,7 @@ interface components {
         /**
          * StartAgentSessionRequest
          * @description Parameters for starting a raw session: where it runs, its first
-         *     message, and the run's own settings. Flat, in the AgentConfig vocabulary
+         *     message, and the run's own settings. Flat, in the AutomationConfig vocabulary
          *     — a `claude:` or `permissions:` block copied from an agents/ YAML file
          *     pastes in verbatim. There is no automation behind a raw session; to run a
          *     saved automation, invoke it with POST /v1/automations/{automation_id}/sessions.
@@ -6791,20 +7032,25 @@ interface components {
              */
             budget?: number | null;
             /** @description The Claude-harness block: `{"model": ...}` to pick this session's model, plus system/effort/fallback_model/max_turns/settings. Omit the model to run the organization's default. */
-            claude?: components['schemas']['AgentConfigClaude'] | null;
+            claude?: components['schemas']['ClaudeConfig'] | null;
             /** @description The Codex-harness block. Its presence selects the Codex harness, exactly as in a saved automation; a request may not carry both `claude` and `codex`. */
-            codex?: components['schemas']['AgentConfigCodex'] | null;
+            codex?: components['schemas']['CodexConfig'] | null;
             /**
              * Environment
-             * @description Where the session runs. A STRING is a saved environment's name or `env_...` id. An OBJECT is an inline environment for this session only. Omitted, the session runs in the organization's default environment, else the built-in basic sandbox.
+             * @description Where the session runs. A STRING is a saved environment's name or `env_...` id, substituted wholesale. An OBJECT is the whole environment for this session — `{}` is the bare sandbox. Omitted, the session runs in the built-in basic sandbox — nothing outside the request picks the environment.
              */
-            environment?: string | components['schemas']['AgentConfigEnvironment'] | null;
+            environment?: string | components['schemas']['EnvironmentConfig'] | null;
             /**
              * Force Rebuild
              * @description Skip the image cache for this session's initial provision: a fresh full build whose snapshot then refreshes the cache for later runs. The CLI's `--rebuild`.
              * @default false
              */
             force_rebuild: boolean;
+            /**
+             * Images
+             * @description Images attached to the first message, base64 inline — what a paste into Claude Code sends. Each becomes an `[Image #N]` placeholder in the prompt and an image block the model sees on turn 0. Up to 10, 5 MiB each; PNG, JPEG, GIF, or WebP. Claude harness only.
+             */
+            images?: components['schemas']['ImageAttachment'][];
             /**
              * Interactive
              * @description Whether the session stays open for messages after its first turn. Set false for a one-shot run that does its job and closes without holding a warm sandbox; a one-shot run must carry a prompt, since nothing can ever be sent to it later. Sessions on the Codex harness are one-shot regardless.
@@ -6820,19 +7066,24 @@ interface components {
                 [key: string]: string;
             };
             /** @description The structured-output exit contract for this session. */
-            output?: components['schemas']['AgentConfigOutput'] | null;
+            output?: components['schemas']['OutputConfig'] | null;
             /** @description What the session may touch, per minted credential. */
-            permissions?: components['schemas']['AgentConfigPermissions'] | null;
+            permissions?: components['schemas']['PermissionsConfig'] | null;
             /**
              * Prompt
              * @description The session's first message. Omit it and the session starts idle: the sandbox spins up, the agent waits at the prompt, and the first message you send opens turn 0.
              */
             prompt?: string | null;
+            /**
+             * Repositories
+             * @description Repositories to check out in addition to the environment's own, as `owner/name` or a bare `name` (the account's). Each is added only when the resolved environment does not already have it — the CLI sends the repository it is standing in this way, whatever environment the session runs in.
+             */
+            repositories?: string[] | null;
             /**
              * Skills
              * @description Skills installed for this session.
              */
-            skills?: components['schemas']['AgentConfigSkill'][] | null;
+            skills?: components['schemas']['SkillRef'][] | null;
         };
         /**
          * StartAutomationSessionRequest
@@ -6901,6 +7152,12 @@ interface components {
              */
             verification_uri_complete: string;
         };
+        /** SystemFileRef */
+        SystemFileRef: {
+            /** File */
+            file: string;
+            repository?: components['schemas']['RepositoryRef'] | null;
+        };
         /**
          * TokensInfo
          * @description Token/cost usage, per record (one API call's counts, aggregate fields at
@@ -6963,7 +7220,7 @@ interface components {
          */
         UpdateAutomationRequest: {
             /** @description The automation's new definition. Replaces the previous one wholesale — this is not a partial update. */
-            automation: components['schemas']['AgentConfig'];
+            automation: components['schemas']['AutomationConfig'];
         };
         /**
          * UpdateEnvironmentRequest
@@ -6971,7 +7228,7 @@ interface components {
          */
         UpdateEnvironmentRequest: {
             /** @description The environment's new definition. Replaces the previous one wholesale — this is not a partial update. */
-            environment: components['schemas']['EnvironmentConfig'];
+            environment: components['schemas']['EnvironmentDocument'];
         };
         /**
          * UsageDailyPoint
@@ -7962,7 +8219,76 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The automation or repository was not found in your account. */
+            /** @description The automation or repository was not found in your account. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The automation is already defined by a file, a link is already open for it, a file already exists at that path, or another automation syncs from it. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description GitHub rejected the pull request. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+        };
+    };
+    get_automation_metrics: {
+        parameters: {
+            query?: never;
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path: {
+                automation_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['AutomationMetricsResponse'];
+                };
+            };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description No such automation in your account. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -7971,22 +8297,13 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The automation is already defined by a file, a link is already open for it, a file already exists at that path, or another automation syncs from it. */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
-            /** @description GitHub rejected the pull request. */
+            /** @description Validation Error */
             422: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    'application/json': components['schemas']['ErrorResponse'];
+                    'application/json': components['schemas']['HTTPValidationError'];
                 };
             };
         };
@@ -9541,10 +9858,16 @@ interface operations {
     list_reviews: {
         parameters: {
             query?: {
-                owner?: string | null;
-                repo?: string | null;
-                pull_request_number?: number | null;
-                status?: components['schemas']['CodeReviewRunStatus'] | null;
+                /** @description Only reviews on these repositories, each as owner/name. Repeat the parameter for several. */
+                repository?: string[];
+                /** @description Only reviews on these pull request numbers. Repeat the parameter for several. */
+                pull_request_number?: number[];
+                /** @description Only reviews in these statuses. Repeat the parameter for several. */
+                status?: components['schemas']['CodeReviewRunStatus'][];
+                /** @description Only reviews created at or after this time. */
+                start?: string | null;
+                /** @description Only reviews created at or before this time. */
+                end?: string | null;
                 limit?: number;
                 cursor?: string | null;
             };
@@ -9565,7 +9888,7 @@ interface operations {
                     'application/json': components['schemas']['ReviewsListResponse'];
                 };
             };
-            /** @description Filtering by repository requires both owner and repo (and pull_request_number requires them too). */
+            /** @description A `repository` value is not of the form owner/name. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -9592,7 +9915,7 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The repository was not found in your account. */
+            /** @description A `repository` was not found in your account. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -10000,7 +10323,7 @@ interface operations {
                     'application/json': components['schemas']['SessionResponse'];
                 };
             };
-            /** @description The request is incompatible with itself (a one-shot run with no prompt, or both `claude` and `codex`), its keys produce an invalid config, or `budget` exceeds the organization's per-session ceiling. */
+            /** @description The request is incompatible with itself (a one-shot run with no prompt, both `claude` and `codex`, or images on the Codex harness), an image is invalid or over the limit, its keys produce an invalid config, or `budget` exceeds the organization's per-session ceiling. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -10107,6 +10430,66 @@ interface operations {
             };
         };
     };
+    get_agent_session_diff: {
+        parameters: {
+            query?: never;
+            header?: {
+                'user-agent'?: string | null;
+            };
+            path: {
+                session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['SessionDiffResponse'];
+                };
+            };
+            /** @description The bearer token is missing, invalid, or revoked. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description The credential may not perform this action, or the account is blocked. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description No such session in your account. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['ErrorResponse'];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    'application/json': components['schemas']['HTTPValidationError'];
+                };
+            };
+        };
+    };
     export_agent_session: {
         parameters: {
             query?: never;
@@ -10193,7 +10576,7 @@ interface operations {
                     'application/json': components['schemas']['SessionMessageResponse'];
                 };
             };
-            /** @description The message is empty. */
+            /** @description The message is empty (no text and no images), an image is invalid or over the limit, or the session runs on the Codex harness (images are Claude-only). */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -10614,15 +10997,6 @@ interface operations {
                     'application/json': components['schemas']['ErrorResponse'];
                 };
             };
-            /** @description The default environment does not exist in your account. */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    'application/json': components['schemas']['ErrorResponse'];
-                };
-            };
             /** @description Validation Error */
             422: {
                 headers: {
@@ -10803,6 +11177,7 @@ type AttributionType = 'github_user' | 'linear_user' | 'slack_user' | 'api_key';
  * Delivery status of the message.
  */
 type SessionMessageStatus = 'pending' | 'delivered';
+type GithubAccountType = 'User' | 'Organization' | 'Bot' | 'Mannequin';
 type EffortLevel = 'low' | 'medium' | 'high' | 'xhigh' | 'max';
 /**
  * What may be done to a resource. Strictly ordered: a grant at one level
@@ -10822,20 +11197,6 @@ type RepositoryFilter = {
 type LinearIssueAction = 'opened';
 type PullRequestAction = 'opened' | 'pushed' | 'merged' | 'closed' | 'review_submitted' | 'commented';
 type SentryAction = 'issue_alert' | 'metric_alert';
-/**
- * The surface an @ellipsis mention can come from.
- *
- * No SLACK member: Slack routing is not a trigger on an agent config, it is the
- * `slack.yaml` routing file (`SlackConfig`), which answers the questions a
- * platform list cannot — which channel, and whose DM. A mention trigger listing
- * `slack` is therefore a config error, not a silently-never-fires config.
- */
-type AgentConfigMentionPlatform = 'github' | 'linear';
-/**
- * How this session's config was chosen.
- */
-type AgentConfigSource = 'explicit' | 'inline' | 'template' | 'repo_default' | 'account_default' | 'platform_default' | 'trigger' | 'builtin';
-type GithubAccountType = 'User' | 'Organization' | 'Bot' | 'Mannequin';
 /**
  * Where the resolved budget came from.
  */
@@ -10886,9 +11247,9 @@ type PromptBlockedReason = 'mention_surface' | 'ephemeral_trigger' | 'non_intera
  */
 type SessionState = 'idle' | 'running' | 'closed';
 /**
- * Where the session came from (e.g. react, manual, api, cli, mention, cron).
+ * Where the session came from (e.g. react, web, api, cli, mention, cron).
  */
-type SessionSource = 'react' | 'manual' | 'api' | 'cli' | 'mention' | 'cron';
+type SessionSource = 'react' | 'web' | 'api' | 'cli' | 'mention' | 'cron';
 /**
  * Execution status of the session.
  */
@@ -10931,7 +11292,7 @@ interface SessionMessage {
      */
     author: string | null;
     /**
-     * The message text.
+     * The message text, with one `[Image #N]` placeholder per attached image.
      */
     body: string;
     /**
@@ -10954,6 +11315,10 @@ interface SessionMessage {
      * Unique identifier of the message.
      */
     id: string;
+    /**
+     * Images attached to the message, metadata only: index, media type, size. The bytes go to the model, never over the stream.
+     */
+    images: SessionMessageImage[];
     /**
      * Identifier of the principal that sent the message, if attributed.
      */
@@ -10968,13 +11333,35 @@ interface SessionMessage {
     session_id: string;
     status: SessionMessageStatus;
 }
+/**
+ * One image on a message, metadata only. `index` is the N in the
+ * `[Image #N]` placeholder in the message body.
+ */
+interface SessionMessageImage {
+    /**
+     * 1-based position: the N in `[Image #N]`.
+     */
+    index: number;
+    /**
+     * The image's MIME type.
+     */
+    media_type: string;
+    /**
+     * Size of the decoded image, in bytes.
+     */
+    size_bytes: number;
+}
 /**
  * The session's current state.
  */
 interface Session {
-    agent: SessionAgent;
     attribution: SessionAttribution;
+    /**
+     * The automation the session was started from, or null for a raw session started with POST /v1/sessions.
+     */
+    automation: SessionAutomation | null;
     budget: SessionBudget;
+    config: SessionConfig1;
     /**
      * The "owner/name" repository context the session was started in, if any.
      */
@@ -11041,50 +11428,139 @@ interface Session {
     updated_at: string;
 }
 /**
- * The agent that ran: the config the session executed, where that config came from, and any override merged into it.
+ * The principal this session is attributed to.
  */
-interface SessionAgent {
+interface SessionAttribution {
+    /**
+     * Identifier of the principal the session is attributed to.
+     */
+    id: string | null;
+    /**
+     * Kind of principal the session is attributed to (e.g. a GitHub user or an API key).
+     */
+    type: AttributionType | null;
     /**
-     * Identifier of the automation this session's snapshot was taken from. Null for raw sessions (nothing saved behind them), templates, and built-in agents. Points at the automation as it exists now, which may have changed since.
+     * The GitHub user the session is attributed to, resolved at read time. Null when the attribution is not a GitHub user.
      */
-    automation_id: string | null;
-    config: AgentConfig;
+    user: GithubAccountSnippet | null;
+}
+/**
+ * Sometimes the GitHub API returns a user of github (can include bots)
+ * using this snippet instead of the full GithubAccount model. One example,
+ * is when the API returns a pull request.
+ *
+ * This is the least amount of info we need to represent a GitHub account.
+ */
+interface GithubAccountSnippet {
+    avatar_url: string;
+    id: number;
+    login: string;
+    type: GithubAccountType;
+}
+/**
+ * The automation this session was started from: the definition frozen
+ * when the session was created, and the saved automation it came from as it
+ * exists NOW. They diverge legitimately — a YAML edit after the session
+ * started leaves the pointer describing something the session never ran.
+ */
+interface SessionAutomation {
+    config: AutomationConfig;
     /**
-     * The partial-config override merged into `config` for this session, or null when the config ran unmodified. `config` is the merged result; this is the diff.
+     * Identifier of the saved automation this session's snapshot was taken from. Null for a routing-file agent, a code-review stage agent, or the built-in mention agent, which have no saved automation behind them. Points at the automation as it exists now, which may have changed since.
      */
-    override: {
+    id: string | null;
+}
+/**
+ * The automation definition the session was started from, frozen when the session was created.
+ */
+interface AutomationConfig {
+    ellipsis: AutomationIdentity;
+    input: InputContract | null;
+    session: SessionConfig;
+    trigger: (CronTrigger | ReactTrigger) | null;
+}
+/**
+ * The Ellipsis product namespace for a config file: which schema this is
+ * (`version`), the human-facing identity (`name`/`description`), freeform
+ * organizational `metadata`, and whether the agent is `enabled`. The
+ * presence of a top-level `ellipsis:` mapping is what marks a YAML file as
+ * an Ellipsis agent config (vs arbitrary YAML that merely lives under a
+ * config directory) — see `yaml_is_ellipsis_config`.
+ *
+ * `enabled` is agent behavior, not freeform metadata, so it stays inside
+ * the config `sha` (only `metadata` is sha-excluded). Whether a session
+ * accepts messages is a per-run choice (POST /v1/sessions `interactive`),
+ * not a config one.
+ */
+interface AutomationIdentity {
+    description: string | null;
+    enabled: boolean;
+    metadata: ConfigMetadata;
+    name: string | null;
+    version: string;
+}
+interface ConfigMetadata {
+    annotations: {
+        [k: string]: string;
+    };
+    labels: string[];
+}
+/**
+ * The typed input contract: what goes INTO a session (the trigger is
+ * when it happens; this is what goes in).
+ *
+ * `json_schema` types the payload a caller-started session takes
+ * (`POST /v1/sessions` `input`, validated at the door; required when
+ * declared). It is illegal on a react-triggered agent — react payloads are
+ * platform-shaped (the published surface field sets), not caller-shaped.
+ *
+ * `message` is the initial-message template: exact `{{path}}` substitution
+ * over the caller payload (or, on a react agent, over the surface's
+ * published fields), no conditionals/loops/filters. Refs are validated at
+ * deploy time against the governing field set (see AutomationConfig's
+ * `_check_input`).
+ */
+interface InputContract {
+    json_schema: {
         [k: string]: unknown;
     } | null;
-    source: AgentConfigSource;
+    message: string | null;
 }
 /**
- * The agent definition the session actually ran, frozen when the session was created.
+ * What one session runs on: the harness block(s), where it runs, what it
+ * may touch, its skills, its exit contract, and its spend cap. Every session
+ * freezes one of these (`agent_sessions.session_config`); an automation
+ * carries one under `session:` (`AutomationConfig.session`); and
+ * `POST /v1/sessions` is this shape flattened onto the request body, plus the
+ * run settings. Nothing in here is an automation's identity or trigger —
+ * those belong to `AutomationConfig`.
+ *
+ * Field order is the canonical key order for `session:` blocks and YAML
+ * exports: what runs (`claude`/`codex`), where (`environment`), what it may
+ * touch (`permissions`), then the rest.
  */
-interface AgentConfig {
-    budget: AgentConfigBudget;
-    claude: AgentConfigClaude;
-    codex: AgentConfigCodex | null;
-    ellipsis: AgentConfigEllipsis;
-    environment: string | AgentConfigEnvironment;
-    input: AgentConfigInput | null;
-    output: AgentConfigOutput | null;
-    permissions: AgentConfigPermissions;
-    skills: AgentConfigSkill[];
-    trigger: (AgentConfigCronTrigger | AgentConfigReactTrigger | AgentConfigMentionTrigger) | null;
+interface SessionConfig {
+    budget: BudgetConfig;
+    claude: ClaudeConfig;
+    codex: CodexConfig | null;
+    environment: string | EnvironmentConfig;
+    output: OutputConfig | null;
+    permissions: PermissionsConfig;
+    skills: SkillRef[];
 }
-interface AgentConfigBudget {
+interface BudgetConfig {
     day: number | null;
     month: number | null;
     session: number | null;
     week: number | null;
 }
-interface AgentConfigClaude {
+interface ClaudeConfig {
     effort: EffortLevel | null;
     fallback_model: string | null;
     max_turns: number | null;
     model: string | null;
-    settings: AgentConfigSettingsRef | null;
-    system: string | AgentConfigSystemFileRef | (string | AgentConfigSystemFileRef)[];
+    settings: SettingsRef | null;
+    system: string | SystemFileRef | (string | SystemFileRef)[];
 }
 /**
  * A config-declared Claude Code settings.json, resolved at run start and
@@ -11094,25 +11570,25 @@ interface AgentConfigClaude {
  * security setting. Lets a team point the cloud agent at the same settings file
  * they already use with Claude Code locally instead of re-encoding it as YAML.
  */
-interface AgentConfigSettingsRef {
+interface SettingsRef {
     path: string;
-    repository: AgentConfigRepository | null;
+    repository: RepositoryRef | null;
 }
-interface AgentConfigRepository {
+interface RepositoryRef {
     name: string;
     owner: string | null;
     ref: string | null;
 }
-interface AgentConfigSystemFileRef {
+interface SystemFileRef {
     file: string;
-    repository: AgentConfigRepository | null;
+    repository: RepositoryRef | null;
 }
 /**
  * The `codex:` block — run this agent on OpenAI's Codex CLI instead of
  * Claude Code. Declaring the block at all is what selects the harness
- * (`AgentConfig.harness`).
+ * (`AutomationConfig.harness`).
  *
- * Deliberately a small subset of `AgentConfigClaude`: the fields omitted here
+ * Deliberately a small subset of `ClaudeConfig`: the fields omitted here
  * are ones Codex has no equivalent for (`effort`, `fallback_model`,
  * `settings`) or that the platform does not yet wire through for this harness
  * (`max_turns`, `skills`, MCP servers). They are omitted rather than
@@ -11120,35 +11596,9 @@ interface AgentConfigSystemFileRef {
  * config that sets one fails loudly at parse time instead of silently not doing
  * it. The budget still bounds a run regardless.
  */
-interface AgentConfigCodex {
+interface CodexConfig {
     model: string;
-    system: string | AgentConfigSystemFileRef | (string | AgentConfigSystemFileRef)[];
-}
-/**
- * The Ellipsis product namespace for a config file: which schema this is
- * (`version`), the human-facing identity (`name`/`description`), freeform
- * organizational `metadata`, and whether the agent is `enabled`. The
- * presence of a top-level `ellipsis:` mapping is what marks a YAML file as
- * an Ellipsis agent config (vs arbitrary YAML that merely lives under a
- * config directory) — see `yaml_is_ellipsis_config`.
- *
- * `enabled` is agent behavior, not freeform metadata, so it stays inside
- * the config `sha` (only `metadata` is sha-excluded). Whether a session
- * accepts messages is a per-run choice (POST /v1/sessions `interactive`),
- * not a config one.
- */
-interface AgentConfigEllipsis {
-    description: string | null;
-    enabled: boolean;
-    metadata: AgentConfigMetadata;
-    name: string | null;
-    version: string;
-}
-interface AgentConfigMetadata {
-    annotations: {
-        [k: string]: string;
-    };
-    labels: string[];
+    system: string | SystemFileRef | (string | SystemFileRef)[];
 }
 /**
  * Everything about the environment (the sandbox) the agent runs in: which
@@ -11163,13 +11613,13 @@ interface AgentConfigMetadata {
  * stored variables never do. This is how a config brings in the config and
  * credentials a custom CLI needs.
  */
-interface AgentConfigEnvironment {
-    compute: AgentConfigCompute;
-    hooks: AgentConfigEnvironmentHooks;
-    image: AgentConfigEnvironmentImage;
-    mcp_servers: (string | AgentConfigMcpServer | AgentConfigMcpStdioServer | AgentConfigMcpRemoteServer)[];
-    repositories: AgentConfigRepository[];
-    variables: AgentConfigEnvironmentVariable[];
+interface EnvironmentConfig {
+    compute: ComputeConfig;
+    hooks: EnvironmentHooks;
+    image: EnvironmentImage;
+    mcp_servers: (string | McpServerRef | McpStdioServer | McpRemoteServer)[];
+    repositories: RepositoryRef[];
+    variables: EnvironmentVariable[];
 }
 /**
  * Sandbox compute sizing. Every field is optional; None inherits the
@@ -11193,17 +11643,17 @@ interface AgentConfigEnvironment {
  * Compute is billed on the requested allocation over the sandbox's
  * wall-clock lifetime, so a bigger/longer box costs proportionally more.
  */
-interface AgentConfigCompute {
+interface ComputeConfig {
     cpu: number | null;
-    memory: string | AgentConfigMemorySize | null;
-    timeout: string | AgentConfigDuration | null;
+    memory: string | MemorySize | null;
+    timeout: string | Duration | null;
 }
 /**
  * A memory size as explicit units, summed (binary: 1GB = 1024MB = 1024MiB).
  * Set any of `gb`/`mb` (at least one). The alternative to the `8GB`-style
  * shorthand string.
  */
-interface AgentConfigMemorySize {
+interface MemorySize {
     gb: number | null;
     mb: number | null;
 }
@@ -11212,7 +11662,7 @@ interface AgentConfigMemorySize {
  * `seconds` (at least one). The alternative to the `30m`-style shorthand
  * string wherever a duration is accepted.
  */
-interface AgentConfigDuration {
+interface Duration {
     hours: number | null;
     minutes: number | null;
     seconds: number | null;
@@ -11235,7 +11685,7 @@ interface AgentConfigDuration {
  * (baked into the cached image) instead; keep hooks for per-run work — e.g.
  * anything that touches run-scoped credentials.
  */
-interface AgentConfigEnvironmentHooks {
+interface EnvironmentHooks {
     post_clone: string | null;
     post_start: string | null;
 }
@@ -11254,7 +11704,7 @@ interface AgentConfigEnvironmentHooks {
  * `npm install`), so later runs start with deps already on disk. Neither runs
  * per run; that's `hooks.post_start` / `hooks.post_clone`.
  */
-interface AgentConfigEnvironmentImage {
+interface EnvironmentImage {
     dockerfile_append: string | null;
     setup: string | null;
 }
@@ -11264,10 +11714,10 @@ interface AgentConfigEnvironmentImage {
  * server's transport and credentials. It only matters when the named
  * integration is set to `opt_in` inclusion; an integration in the default
  * `all_sessions` mode is added regardless. For a server the platform does not
- * provide, define it instead (`AgentConfigMcpStdioServer` /
- * `AgentConfigMcpRemoteServer`).
+ * provide, define it instead (`McpStdioServer` /
+ * `McpRemoteServer`).
  */
-interface AgentConfigMcpServer {
+interface McpServerRef {
     name: string;
 }
 /**
@@ -11280,7 +11730,7 @@ interface AgentConfigMcpServer {
  * account's secrets store (see `mcp_secret_refs`); everything else is passed
  * literally.
  */
-interface AgentConfigMcpStdioServer {
+interface McpStdioServer {
     args: string[];
     command: string;
     env: {
@@ -11294,7 +11744,7 @@ interface AgentConfigMcpStdioServer {
  * `Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret
  * references, resolved at run time from the account's secrets store.
  */
-interface AgentConfigMcpRemoteServer {
+interface McpRemoteServer {
     headers: {
         [k: string]: string;
     };
@@ -11311,37 +11761,16 @@ interface AgentConfigMcpRemoteServer {
  * ever putting it in the config file. Either way the variable only reaches
  * agents that name it.
  */
-interface AgentConfigEnvironmentVariable {
+interface EnvironmentVariable {
     name: string;
     value: string | null;
 }
-/**
- * The typed input contract: what goes INTO a session (the trigger is
- * when it happens; this is what goes in).
- *
- * `json_schema` types the payload a caller-started session takes
- * (`POST /v1/sessions` `input`, validated at the door; required when
- * declared). It is illegal on a react-triggered agent — react payloads are
- * platform-shaped (the published surface field sets), not caller-shaped.
- *
- * `message` is the initial-message template: exact `{{path}}` substitution
- * over the caller payload (or, on a react agent, over the surface's
- * published fields), no conditionals/loops/filters. Refs are validated at
- * deploy time against the governing field set (see AgentConfig's
- * `_check_input`).
- */
-interface AgentConfigInput {
-    json_schema: {
-        [k: string]: unknown;
-    } | null;
-    message: string | null;
-}
 /**
  * The typed output contract: the JSON Schema the agent must exit through
  * (the StructuredOutput exit tool). Read back via
  * GET /v1/sessions/{id}/output.
  */
-interface AgentConfigOutput {
+interface OutputConfig {
     json_schema: {
         [k: string]: unknown;
     };
@@ -11355,16 +11784,16 @@ interface AgentConfigOutput {
  * (`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates
  * with). `true` / the string `all` (the default) grant the full sandbox
  * ceiling — everything a sandbox token can ever do. A map narrows it per
- * resource (see `AgentConfigEllipsisPermissions`); the minted token carries
+ * resource (see `EllipsisPermissions`); the minted token carries
  * the intersection, so a config can only ever reduce access. `false` fails
  * validation — an agent with no API token cannot report its own progress.
  *
  * `github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) —
- * see `AgentConfigGithubPermissions`. GitHub enforces it at mint time.
+ * see `GithubPermissions`. GitHub enforces it at mint time.
  */
-interface AgentConfigPermissions {
-    ellipsis: (true | 'all') | AgentConfigEllipsisPermissions;
-    github: AgentConfigGithubPermissions;
+interface PermissionsConfig {
+    ellipsis: (true | 'all') | EllipsisPermissions;
+    github: GithubPermissions;
 }
 /**
  * `permissions.ellipsis` as a map: resource → level | grant | list of
@@ -11373,7 +11802,7 @@ interface AgentConfigPermissions {
  * intersected with the platform's sandbox ceiling at token mint — it can
  * narrow what a sandbox token may do, never exceed it.
  */
-interface AgentConfigEllipsisPermissions {
+interface EllipsisPermissions {
     [k: string]: Level | EllipsisGrant | (Level | EllipsisGrant)[];
 }
 /**
@@ -11402,7 +11831,7 @@ interface EllipsisGrant {
  * minted with the reduced scope, so nothing running in the sandbox can
  * exceed it.
  */
-interface AgentConfigGithubPermissions {
+interface GithubPermissions {
     permissions: 'read_only' | {
         [k: string]: string;
     } | null;
@@ -11417,15 +11846,15 @@ interface AgentConfigGithubPermissions {
  * Skills under a cloned repo's own `.claude/skills/` load by themselves and
  * don't need an entry here.
  */
-interface AgentConfigSkill {
+interface SkillRef {
     path: string;
-    repository: AgentConfigRepository | null;
+    repository: RepositoryRef | null;
 }
-interface AgentConfigCronTrigger {
+interface CronTrigger {
     schedule: string;
     type: 'cron';
 }
-interface AgentConfigReactTrigger {
+interface ReactTrigger {
     issue: ReactIssue | null;
     linear_issue: ReactLinearIssue | null;
     pull_request: ReactPullRequest | null;
@@ -11477,40 +11906,6 @@ interface ReactSentry {
 }
 interface ReactSlackChannel {
 }
-interface AgentConfigMentionTrigger {
-    platforms: AgentConfigMentionPlatform[];
-    type: 'mention';
-}
-/**
- * The principal this session is attributed to.
- */
-interface SessionAttribution {
-    /**
-     * Identifier of the principal the session is attributed to.
-     */
-    id: string | null;
-    /**
-     * Kind of principal the session is attributed to (e.g. a GitHub user or an API key).
-     */
-    type: AttributionType | null;
-    /**
-     * The GitHub user the session is attributed to, resolved at read time. Null when the attribution is not a GitHub user.
-     */
-    user: GithubAccountSnippet | null;
-}
-/**
- * Sometimes the GitHub API returns a user of github (can include bots)
- * using this snippet instead of the full GithubAccount model. One example,
- * is when the API returns a pull request.
- *
- * This is the least amount of info we need to represent a GitHub account.
- */
-interface GithubAccountSnippet {
-    avatar_url: string;
-    id: number;
-    login: string;
-    type: GithubAccountType;
-}
 /**
  * The spend budget enforced for this session.
  */
@@ -11521,6 +11916,18 @@ interface SessionBudget {
     cents: number;
     source: BudgetSource;
 }
+/**
+ * What the session ran on, frozen when it was created: the harness block, the resolved environment, permissions, skills, output contract, and budget.
+ */
+interface SessionConfig1 {
+    budget: BudgetConfig;
+    claude: ClaudeConfig;
+    codex: CodexConfig | null;
+    environment: string | EnvironmentConfig;
+    output: OutputConfig | null;
+    permissions: PermissionsConfig;
+    skills: SkillRef[];
+}
 /**
  * What the session cost, in millicents, broken down by leg and carrying its own total.
  */
@@ -11547,7 +11954,7 @@ interface SessionCost {
     total: number;
 }
 /**
- * The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is inside agent.config.environment.
+ * The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is `config.environment`.
  */
 interface SessionEnvironment {
     /**
@@ -11555,7 +11962,7 @@ interface SessionEnvironment {
      */
     environment_id: string | null;
     /**
-     * How the environment was chosen (request, agent_config, repo_default, account_default, platform_default). Null when the config carried its own inline environment.
+     * How the environment was chosen (request, agent_config, platform_default; repo_default and account_default on sessions from before those ladders were removed). Null when the config carried its own inline environment.
      */
     source: EnvironmentSource | null;
 }
@@ -12208,9 +12615,13 @@ interface SessionFrame {
  * The session's current state.
  */
 interface Session1 {
-    agent: SessionAgent;
     attribution: SessionAttribution;
+    /**
+     * The automation the session was started from, or null for a raw session started with POST /v1/sessions.
+     */
+    automation: SessionAutomation | null;
     budget: SessionBudget;
+    config: SessionConfig1;
     /**
      * The "owner/name" repository context the session was started in, if any.
      */
@@ -12375,4 +12786,4 @@ type ReviewRequester = components['schemas']['ReviewRequester'];
 type ReviewFinding = components['schemas']['ReviewFinding'];
 type Finding = ReviewFinding;
 
-export type { SessionState as $, AgentConfigSource as A, BudgetSource as B, ClaudeSessionRecord as C, DeltaFrame as D, ErrorFrame as E, Finding as F, GithubAccountSnippet as G, Harness as H, SdkUserRecord as I, SendSessionMessageRequest as J, Session as K, LifecycleSessionRecord as L, SessionExitStatus as M, SessionFrame as N, SessionGit as O, ParentKind as P, SessionLiveness as Q, RecordsAppendFrame as R, SdkAssistantRecord as S, SessionMessage as T, SessionMessageResponse as U, SessionMessageStatus as V, SessionPrompting as W, SessionRecord as X, SessionRecordsListResponse as Y, SessionResponse as Z, SessionSource as _, AttributionType as a, SessionStatus as a0, SessionStreamFrame as a1, SessionSurface as a2, SessionsListResponse as a3, SnapshotFrame as a4, StreamFrame as a5, TokensInfo as a6, paths as a7, CodexFileChangeItem as a8, CodexMcpToolCallItem as a9, CodexEvent as b, components as c, CodexItem as d, CodexSessionRecord as e, CreateReviewRequest as f, DoneFrame as g, GithubAccountType as h, HeartbeatFrame as i, PromptBlockedReason as j, ResolvedReviewScope as k, Review as l, ReviewConfiguration as m, ReviewCounters as n, ReviewFinding as o, ReviewRequester as p, ReviewScope as q, ReviewScopeKind as r, ReviewStage as s, ReviewedCommit as t, ReviewsListResponse as u, SdkContentBlock as v, SdkRateLimitRecord as w, SdkRecord as x, SdkResultRecord as y, SdkSystemRecord as z };
+export type { SessionStatus as $, AttributionType as A, BudgetSource as B, ClaudeSessionRecord as C, DeltaFrame as D, ErrorFrame as E, Finding as F, GithubAccountSnippet as G, Harness as H, SendSessionMessageRequest as I, Session as J, SessionExitStatus as K, LifecycleSessionRecord as L, SessionFrame as M, SessionGit as N, SessionLiveness as O, ParentKind as P, SessionMessage as Q, RecordsAppendFrame as R, SdkAssistantRecord as S, SessionMessageResponse as T, SessionMessageStatus as U, SessionPrompting as V, SessionRecord as W, SessionRecordsListResponse as X, SessionResponse as Y, SessionSource as Z, SessionState as _, CodexEvent as a, SessionStreamFrame as a0, SessionSurface as a1, SessionsListResponse as a2, SnapshotFrame as a3, StreamFrame as a4, TokensInfo as a5, paths as a6, CodexFileChangeItem as a7, CodexMcpToolCallItem as a8, CodexItem as b, components as c, CodexSessionRecord as d, CreateReviewRequest as e, DoneFrame as f, GithubAccountType as g, HeartbeatFrame as h, PromptBlockedReason as i, ResolvedReviewScope as j, Review as k, ReviewConfiguration as l, ReviewCounters as m, ReviewFinding as n, ReviewRequester as o, ReviewScope as p, ReviewScopeKind as q, ReviewStage as r, ReviewedCommit as s, ReviewsListResponse as t, SdkContentBlock as u, SdkRateLimitRecord as v, SdkRecord as w, SdkResultRecord as x, SdkSystemRecord as y, SdkUserRecord as z };