@ellipsis-dev/sdk 0.22.0 → 0.27.0

package/schema/openapi.v1.json

@@ -1,1136 +1,6 @@
 {
   "components": {
     "schemas": {
-      "AgentConfig": {
-        "additionalProperties": false,
-        "properties": {
-          "budget": {
-            "$ref": "#/components/schemas/AgentConfigBudget",
-            "default": {}
-          },
-          "claude": {
-            "$ref": "#/components/schemas/AgentConfigClaude",
-            "default": {
-              "system": ""
-            }
-          },
-          "codex": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/AgentConfigCodex"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "ellipsis": {
-            "$ref": "#/components/schemas/AgentConfigEllipsis",
-            "default": {
-              "enabled": true,
-              "metadata": {
-                "annotations": {},
-                "labels": []
-              },
-              "version": "v1"
-            }
-          },
-          "environment": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "$ref": "#/components/schemas/AgentConfigEnvironment"
-              }
-            ],
-            "default": {
-              "compute": {},
-              "hooks": {},
-              "image": {},
-              "mcp_servers": [],
-              "repositories": [],
-              "variables": []
-            },
-            "title": "Environment"
-          },
-          "input": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/AgentConfigInput"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "output": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/AgentConfigOutput"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "permissions": {
-            "$ref": "#/components/schemas/AgentConfigPermissions",
-            "default": {
-              "ellipsis": true,
-              "github": {}
-            }
-          },
-          "skills": {
-            "default": [],
-            "items": {
-              "$ref": "#/components/schemas/AgentConfigSkill"
-            },
-            "title": "Skills",
-            "type": "array"
-          },
-          "trigger": {
-            "anyOf": [
-              {
-                "discriminator": {
-                  "mapping": {
-                    "cron": "#/components/schemas/AgentConfigCronTrigger",
-                    "mention": "#/components/schemas/AgentConfigMentionTrigger",
-                    "react": "#/components/schemas/AgentConfigReactTrigger"
-                  },
-                  "propertyName": "type"
-                },
-                "oneOf": [
-                  {
-                    "$ref": "#/components/schemas/AgentConfigCronTrigger"
-                  },
-                  {
-                    "$ref": "#/components/schemas/AgentConfigReactTrigger"
-                  },
-                  {
-                    "$ref": "#/components/schemas/AgentConfigMentionTrigger"
-                  }
-                ]
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Trigger"
-          }
-        },
-        "title": "AgentConfig",
-        "type": "object"
-      },
-      "AgentConfigBudget": {
-        "additionalProperties": false,
-        "properties": {
-          "day": {
-            "anyOf": [
-              {
-                "type": "number"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Day"
-          },
-          "month": {
-            "anyOf": [
-              {
-                "type": "number"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Month"
-          },
-          "session": {
-            "anyOf": [
-              {
-                "type": "number"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Session"
-          },
-          "week": {
-            "anyOf": [
-              {
-                "type": "number"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Week"
-          }
-        },
-        "title": "AgentConfigBudget",
-        "type": "object"
-      },
-      "AgentConfigClaude": {
-        "additionalProperties": false,
-        "properties": {
-          "effort": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/EffortLevel"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "fallback_model": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Fallback Model"
-          },
-          "max_turns": {
-            "anyOf": [
-              {
-                "exclusiveMinimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Max Turns"
-          },
-          "model": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Model"
-          },
-          "settings": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/AgentConfigSettingsRef"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "system": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "$ref": "#/components/schemas/AgentConfigSystemFileRef"
-              },
-              {
-                "items": {
-                  "anyOf": [
-                    {
-                      "type": "string"
-                    },
-                    {
-                      "$ref": "#/components/schemas/AgentConfigSystemFileRef"
-                    }
-                  ]
-                },
-                "type": "array"
-              }
-            ],
-            "default": "",
-            "title": "System"
-          }
-        },
-        "title": "AgentConfigClaude",
-        "type": "object"
-      },
-      "AgentConfigCodex": {
-        "additionalProperties": false,
-        "description": "The `codex:` block \u2014 run this agent on OpenAI's Codex CLI instead of\nClaude Code. Declaring the block at all is what selects the harness\n(`AgentConfig.harness`).\n\nDeliberately a small subset of `AgentConfigClaude`: the fields omitted here\nare ones Codex has no equivalent for (`effort`, `fallback_model`,\n`settings`) or that the platform does not yet wire through for this harness\n(`max_turns`, `skills`, MCP servers). They are omitted rather than\naccepted-and-ignored, because `StrictConfigModel` forbids extra keys \u2014 so a\nconfig that sets one fails loudly at parse time instead of silently not doing\nit. The budget still bounds a run regardless.",
-        "properties": {
-          "model": {
-            "default": "gpt-5.6-terra",
-            "title": "Model",
-            "type": "string"
-          },
-          "system": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "$ref": "#/components/schemas/AgentConfigSystemFileRef"
-              },
-              {
-                "items": {
-                  "anyOf": [
-                    {
-                      "type": "string"
-                    },
-                    {
-                      "$ref": "#/components/schemas/AgentConfigSystemFileRef"
-                    }
-                  ]
-                },
-                "type": "array"
-              }
-            ],
-            "default": "",
-            "title": "System"
-          }
-        },
-        "title": "AgentConfigCodex",
-        "type": "object"
-      },
-      "AgentConfigCompute": {
-        "additionalProperties": false,
-        "description": "Sandbox compute sizing. Every field is optional; None inherits the\nplatform default (1 vCPU / 4096 MiB / 3600s \u2014 see DEFAULT_MODAL_* in\nmodels/ellipsis/sandboxes/sandbox.py). A resolved value outside the platform\nbounds fails validation loudly (a sync error on the config) rather than\nbeing clamped silently.\n\n`memory` and `timeout` each accept a shorthand string (\"8GB\", \"30m\") or an\nexplicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /\n`timeout_seconds` properties resolve either form to the canonical integer\nthe sandbox driver consumes.\n\n`timeout` is the max wall-clock the agent may run before the sandbox is\nkilled, capped at 1h (MAX_SANDBOX_TIMEOUT_SECONDS \u2014 equal to the default, so\ntoday the knob only shortens a session; the cap matches the 1-hour validity\nof the sandbox's GitHub token). The worker's lease/visibility heartbeat\nceiling is derived from that cap, so a run at the max stays owned by its\nworker for its whole life.\n\nCompute is billed on the requested allocation over the sandbox's\nwall-clock lifetime, so a bigger/longer box costs proportionally more.",
-        "properties": {
-          "cpu": {
-            "anyOf": [
-              {
-                "maximum": 16.0,
-                "minimum": 0.125,
-                "type": "number"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Cpu"
-          },
-          "memory": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "$ref": "#/components/schemas/AgentConfigMemorySize"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Memory"
-          },
-          "timeout": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "$ref": "#/components/schemas/AgentConfigDuration"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Timeout"
-          }
-        },
-        "title": "AgentConfigCompute",
-        "type": "object"
-      },
-      "AgentConfigCronTrigger": {
-        "additionalProperties": false,
-        "properties": {
-          "schedule": {
-            "title": "Schedule",
-            "type": "string"
-          },
-          "type": {
-            "const": "cron",
-            "default": "cron",
-            "title": "Type",
-            "type": "string"
-          }
-        },
-        "required": [
-          "schedule"
-        ],
-        "title": "AgentConfigCronTrigger",
-        "type": "object"
-      },
-      "AgentConfigDuration": {
-        "additionalProperties": false,
-        "description": "A duration as explicit units, summed. Set any of `hours`/`minutes`/\n`seconds` (at least one). The alternative to the `30m`-style shorthand\nstring wherever a duration is accepted.",
-        "properties": {
-          "hours": {
-            "anyOf": [
-              {
-                "minimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Hours"
-          },
-          "minutes": {
-            "anyOf": [
-              {
-                "minimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Minutes"
-          },
-          "seconds": {
-            "anyOf": [
-              {
-                "minimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Seconds"
-          }
-        },
-        "title": "AgentConfigDuration",
-        "type": "object"
-      },
-      "AgentConfigEllipsis": {
-        "additionalProperties": false,
-        "description": "The Ellipsis product namespace for a config file: which schema this is\n(`version`), the human-facing identity (`name`/`description`), freeform\norganizational `metadata`, and whether the agent is `enabled`. The\npresence of a top-level `ellipsis:` mapping is what marks a YAML file as\nan Ellipsis agent config (vs arbitrary YAML that merely lives under a\nconfig directory) \u2014 see `yaml_is_ellipsis_config`.\n\n`enabled` is agent behavior, not freeform metadata, so it stays inside\nthe config `sha` (only `metadata` is sha-excluded). Whether a session\naccepts messages is a per-run choice (POST /v1/sessions `interactive`),\nnot a config one.",
-        "properties": {
-          "description": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Description"
-          },
-          "enabled": {
-            "default": true,
-            "title": "Enabled",
-            "type": "boolean"
-          },
-          "metadata": {
-            "$ref": "#/components/schemas/AgentConfigMetadata",
-            "default": {
-              "annotations": {},
-              "labels": []
-            }
-          },
-          "name": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Name"
-          },
-          "version": {
-            "default": "v1",
-            "title": "Version",
-            "type": "string"
-          }
-        },
-        "title": "AgentConfigEllipsis",
-        "type": "object"
-      },
-      "AgentConfigEllipsisPermissions": {
-        "additionalProperties": {
-          "anyOf": [
-            {
-              "$ref": "#/components/schemas/Level"
-            },
-            {
-              "$ref": "#/components/schemas/EllipsisGrant"
-            },
-            {
-              "items": {
-                "anyOf": [
-                  {
-                    "$ref": "#/components/schemas/Level"
-                  },
-                  {
-                    "$ref": "#/components/schemas/EllipsisGrant"
-                  }
-                ]
-              },
-              "type": "array"
-            }
-          ]
-        },
-        "description": "`permissions.ellipsis` as a map: resource \u2192 level | grant | list of\ngrants. Levels are hierarchical (read < write < delete), so `write`\nincludes `read`. An unlisted resource is denied. The whole block is\nintersected with the platform's sandbox ceiling at token mint \u2014 it can\nnarrow what a sandbox token may do, never exceed it.",
-        "propertyNames": {
-          "$ref": "#/components/schemas/Resource"
-        },
-        "title": "AgentConfigEllipsisPermissions",
-        "type": "object"
-      },
-      "AgentConfigEnvironment": {
-        "additionalProperties": false,
-        "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, how its `image` is customized, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
-        "properties": {
-          "compute": {
-            "$ref": "#/components/schemas/AgentConfigCompute",
-            "default": {}
-          },
-          "hooks": {
-            "$ref": "#/components/schemas/AgentConfigEnvironmentHooks",
-            "default": {}
-          },
-          "image": {
-            "$ref": "#/components/schemas/AgentConfigEnvironmentImage",
-            "default": {}
-          },
-          "mcp_servers": {
-            "default": [],
-            "items": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "$ref": "#/components/schemas/AgentConfigMcpServer"
-                },
-                {
-                  "$ref": "#/components/schemas/AgentConfigMcpStdioServer"
-                },
-                {
-                  "$ref": "#/components/schemas/AgentConfigMcpRemoteServer"
-                }
-              ]
-            },
-            "title": "Mcp Servers",
-            "type": "array"
-          },
-          "repositories": {
-            "default": [],
-            "items": {
-              "$ref": "#/components/schemas/AgentConfigRepository"
-            },
-            "title": "Repositories",
-            "type": "array"
-          },
-          "variables": {
-            "default": [],
-            "items": {
-              "$ref": "#/components/schemas/AgentConfigEnvironmentVariable"
-            },
-            "title": "Variables",
-            "type": "array"
-          }
-        },
-        "title": "AgentConfigEnvironment",
-        "type": "object"
-      },
-      "AgentConfigEnvironmentHooks": {
-        "additionalProperties": false,
-        "description": "Shell scripts run at points in the sandbox lifecycle, each as the sandbox\nuser with the sandbox's environment variables available. A non-zero exit\nfails the run (exit_status = LIFECYCLE_HOOK_FAILED) and is not retried.\n\n`post_start` runs after the container starts, before any repo is cloned \u2014\nrepo-independent setup (authenticate a CLI, e.g. `doppler setup`). On Modal\nthe repo is baked into the image so it is incidentally present, but\n`post_start` must not depend on repo contents (that's `post_clone`).\n\n`post_clone` runs after all repos are cloned/checked out, before the agent \u2014\nrepo-dependent setup (`pip install -r requirements.txt`, codegen).\n\nHooks run on every run and their output is never cached. A dependency\ninstall whose result should be reused across runs belongs in `image.setup`\n(baked into the cached image) instead; keep hooks for per-run work \u2014 e.g.\nanything that touches run-scoped credentials.",
-        "properties": {
-          "post_clone": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Post Clone"
-          },
-          "post_start": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Post Start"
-          }
-        },
-        "title": "AgentConfigEnvironmentHooks",
-        "type": "object"
-      },
-      "AgentConfigEnvironmentImage": {
-        "additionalProperties": false,
-        "description": "How to customize the container image the agent runs in. You\ncontribute appended layers (`dockerfile_append`) and a build-time script\n(`setup`) only \u2014 Ellipsis owns FROM / base tooling / entrypoint / user.\nToday only inline bodies are supported; a file reference (resolved at the\nrun's SHA) will come later.\n\nThe split: `dockerfile_append` runs when the image is assembled, before any\nrepo exists \u2014 toolchain installs (a package manager binary, apt packages).\n`setup` runs at image-build time *after* the configured repositories are\nchecked out, and its output is captured by the filesystem snapshot that\nbecomes the cached image \u2014 dependency installs (`poetry install`,\n`npm install`), so later runs start with deps already on disk. Neither runs\nper run; that's `hooks.post_start` / `hooks.post_clone`.",
-        "properties": {
-          "dockerfile_append": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Dockerfile Append"
-          },
-          "setup": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Setup"
-          }
-        },
-        "title": "AgentConfigEnvironmentImage",
-        "type": "object"
-      },
-      "AgentConfigEnvironmentVariable": {
-        "additionalProperties": false,
-        "description": "One environment variable injected into the agent's sandbox.\n\n`value`, when set, is a literal injected as-is \u2014 use it for non-secret\nconfig (LOG_LEVEL, an API base URL). When `value` is omitted the value is\nresolved at run time from the account's sandbox-secrets store (dashboard\n/ `PUT /v1/secrets`) by `name`, so a secret can be injected without\never putting it in the config file. Either way the variable only reaches\nagents that name it.",
-        "properties": {
-          "name": {
-            "title": "Name",
-            "type": "string"
-          },
-          "value": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Value"
-          }
-        },
-        "required": [
-          "name"
-        ],
-        "title": "AgentConfigEnvironmentVariable",
-        "type": "object"
-      },
-      "AgentConfigGithubPermissions": {
-        "additionalProperties": false,
-        "description": "The agent's GitHub access: the scope of the installation token minted for\nits sandbox \u2014 the credential `git`, `gh`, and the GitHub MCP server\nauthenticate with.\n\nBy default the token carries the installation's full permissions on all of\nthe installation's repositories. `permissions` narrows what it may do:\nthe string `read_only` grants read access to contents, issues, metadata and\npull requests; a map requests explicit levels per GitHub App permission\nscope (e.g. `{contents: read, pull_requests: write}`) and may never exceed\nwhat the installation granted. `repositories` scopes the token to exactly\nthe listed repos, by name (they must belong to the installation).\n\nRestriction is enforced by GitHub, not by Ellipsis: the token itself is\nminted with the reduced scope, so nothing running in the sandbox can\nexceed it.",
-        "properties": {
-          "permissions": {
-            "anyOf": [
-              {
-                "const": "read_only",
-                "type": "string"
-              },
-              {
-                "additionalProperties": {
-                  "type": "string"
-                },
-                "type": "object"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Permissions"
-          },
-          "repositories": {
-            "anyOf": [
-              {
-                "items": {
-                  "type": "string"
-                },
-                "type": "array"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Repositories"
-          }
-        },
-        "title": "AgentConfigGithubPermissions",
-        "type": "object"
-      },
-      "AgentConfigInput": {
-        "additionalProperties": false,
-        "description": "The typed input contract: what goes INTO a session (the trigger is\nwhen it happens; this is what goes in).\n\n`json_schema` types the payload a caller-started session takes\n(`POST /v1/sessions` `input`, validated at the door; required when\ndeclared). It is illegal on a react-triggered agent \u2014 react payloads are\nplatform-shaped (the published surface field sets), not caller-shaped.\n\n`message` is the initial-message template: exact `{{path}}` substitution\nover the caller payload (or, on a react agent, over the surface's\npublished fields), no conditionals/loops/filters. Refs are validated at\ndeploy time against the governing field set (see AgentConfig's\n`_check_input`).",
-        "properties": {
-          "json_schema": {
-            "anyOf": [
-              {
-                "additionalProperties": true,
-                "type": "object"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Json Schema"
-          },
-          "message": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Message"
-          }
-        },
-        "title": "AgentConfigInput",
-        "type": "object"
-      },
-      "AgentConfigMcpRemoteServer": {
-        "additionalProperties": false,
-        "description": "A bring-your-own remote MCP server: the harness talks HTTP to `url`.\nNothing runs in the sandbox image. `headers` carry static auth (e.g.\n`Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret\nreferences, resolved at run time from the account's secrets store.",
-        "properties": {
-          "headers": {
-            "additionalProperties": {
-              "type": "string"
-            },
-            "default": {},
-            "title": "Headers",
-            "type": "object"
-          },
-          "name": {
-            "title": "Name",
-            "type": "string"
-          },
-          "url": {
-            "title": "Url",
-            "type": "string"
-          }
-        },
-        "required": [
-          "name",
-          "url"
-        ],
-        "title": "AgentConfigMcpRemoteServer",
-        "type": "object"
-      },
-      "AgentConfigMcpServer": {
-        "additionalProperties": false,
-        "description": "One built-in MCP server this agent opts into by name (`linear`/`slack`).\nA name reference over the connected built-in set \u2014 the platform manages the\nserver's transport and credentials. It only matters when the named\nintegration is set to `opt_in` inclusion; an integration in the default\n`all_sessions` mode is added regardless. For a server the platform does not\nprovide, define it instead (`AgentConfigMcpStdioServer` /\n`AgentConfigMcpRemoteServer`).",
-        "properties": {
-          "name": {
-            "title": "Name",
-            "type": "string"
-          }
-        },
-        "required": [
-          "name"
-        ],
-        "title": "AgentConfigMcpServer",
-        "type": "object"
-      },
-      "AgentConfigMcpStdioServer": {
-        "additionalProperties": false,
-        "description": "A bring-your-own stdio MCP server: the harness spawns `command` inside\nthe sandbox and speaks JSON-RPC over its stdin/stdout. The command must be\nrunnable in the sandbox image \u2014 install its runtime via `image.setup` /\n`image.dockerfile_append` if the base image lacks it.\n\n`env` values may embed `${NAME}` references, resolved at run time from the\naccount's secrets store (see `mcp_secret_refs`); everything else is passed\nliterally.",
-        "properties": {
-          "args": {
-            "default": [],
-            "items": {
-              "type": "string"
-            },
-            "title": "Args",
-            "type": "array"
-          },
-          "command": {
-            "title": "Command",
-            "type": "string"
-          },
-          "env": {
-            "additionalProperties": {
-              "type": "string"
-            },
-            "default": {},
-            "title": "Env",
-            "type": "object"
-          },
-          "name": {
-            "title": "Name",
-            "type": "string"
-          }
-        },
-        "required": [
-          "name",
-          "command"
-        ],
-        "title": "AgentConfigMcpStdioServer",
-        "type": "object"
-      },
-      "AgentConfigMemorySize": {
-        "additionalProperties": false,
-        "description": "A memory size as explicit units, summed (binary: 1GB = 1024MB = 1024MiB).\nSet any of `gb`/`mb` (at least one). The alternative to the `8GB`-style\nshorthand string.",
-        "properties": {
-          "gb": {
-            "anyOf": [
-              {
-                "minimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Gb"
-          },
-          "mb": {
-            "anyOf": [
-              {
-                "minimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Mb"
-          }
-        },
-        "title": "AgentConfigMemorySize",
-        "type": "object"
-      },
-      "AgentConfigMentionPlatform": {
-        "description": "The surface an @ellipsis mention can come from.\n\nNo SLACK member: Slack routing is not a trigger on an agent config, it is the\n`slack.yaml` routing file (`SlackConfig`), which answers the questions a\nplatform list cannot \u2014 which channel, and whose DM. A mention trigger listing\n`slack` is therefore a config error, not a silently-never-fires config.",
-        "enum": [
-          "github",
-          "linear"
-        ],
-        "title": "AgentConfigMentionPlatform",
-        "type": "string"
-      },
-      "AgentConfigMentionTrigger": {
-        "additionalProperties": false,
-        "properties": {
-          "platforms": {
-            "default": [],
-            "items": {
-              "$ref": "#/components/schemas/AgentConfigMentionPlatform"
-            },
-            "title": "Platforms",
-            "type": "array"
-          },
-          "type": {
-            "const": "mention",
-            "default": "mention",
-            "title": "Type",
-            "type": "string"
-          }
-        },
-        "title": "AgentConfigMentionTrigger",
-        "type": "object"
-      },
-      "AgentConfigMetadata": {
-        "additionalProperties": false,
-        "properties": {
-          "annotations": {
-            "additionalProperties": {
-              "type": "string"
-            },
-            "default": {},
-            "title": "Annotations",
-            "type": "object"
-          },
-          "labels": {
-            "default": [],
-            "items": {
-              "type": "string"
-            },
-            "title": "Labels",
-            "type": "array"
-          }
-        },
-        "title": "AgentConfigMetadata",
-        "type": "object"
-      },
-      "AgentConfigOutput": {
-        "additionalProperties": false,
-        "description": "The typed output contract: the JSON Schema the agent must exit through\n(the StructuredOutput exit tool). Read back via\nGET /v1/sessions/{id}/output.",
-        "properties": {
-          "json_schema": {
-            "additionalProperties": true,
-            "title": "Json Schema",
-            "type": "object"
-          }
-        },
-        "required": [
-          "json_schema"
-        ],
-        "title": "AgentConfigOutput",
-        "type": "object"
-      },
-      "AgentConfigPermissions": {
-        "additionalProperties": false,
-        "description": "What the agent is allowed to touch, per credential the platform mints\ninto its sandbox. Distinct from `environment:`, which is where the agent\nruns; this is what it may do from there.\n\n`ellipsis` scopes the sandbox's Ellipsis API token\n(`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates\nwith). `true` / the string `all` (the default) grant the full sandbox\nceiling \u2014 everything a sandbox token can ever do. A map narrows it per\nresource (see `AgentConfigEllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) \u2014\nsee `AgentConfigGithubPermissions`. GitHub enforces it at mint time.",
-        "properties": {
-          "ellipsis": {
-            "anyOf": [
-              {
-                "enum": [
-                  true,
-                  "all"
-                ]
-              },
-              {
-                "$ref": "#/components/schemas/AgentConfigEllipsisPermissions"
-              }
-            ],
-            "default": true,
-            "title": "Ellipsis"
-          },
-          "github": {
-            "$ref": "#/components/schemas/AgentConfigGithubPermissions",
-            "default": {}
-          }
-        },
-        "title": "AgentConfigPermissions",
-        "type": "object"
-      },
-      "AgentConfigReactTrigger": {
-        "additionalProperties": false,
-        "properties": {
-          "issue": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/ReactIssue"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "linear_issue": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/ReactLinearIssue"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "pull_request": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/ReactPullRequest"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "push": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/ReactPush"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "sentry": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/ReactSentry"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "slack_channel": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/ReactSlackChannel"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "type": {
-            "const": "react",
-            "default": "react",
-            "title": "Type",
-            "type": "string"
-          }
-        },
-        "title": "AgentConfigReactTrigger",
-        "type": "object"
-      },
-      "AgentConfigRepository": {
-        "additionalProperties": false,
-        "properties": {
-          "name": {
-            "title": "Name",
-            "type": "string"
-          },
-          "owner": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Owner"
-          },
-          "ref": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Ref"
-          }
-        },
-        "required": [
-          "name"
-        ],
-        "title": "AgentConfigRepository",
-        "type": "object"
-      },
-      "AgentConfigSettingsRef": {
-        "additionalProperties": false,
-        "description": "A config-declared Claude Code settings.json, resolved at run start and\npassed to `claude --settings <path>`. That is the CLI settings tier \u2014 BELOW\nEllipsis's managed-settings.json floor \u2014 so it customizes behavior (model\npermissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a\nsecurity setting. Lets a team point the cloud agent at the same settings file\nthey already use with Claude Code locally instead of re-encoding it as YAML.",
-        "properties": {
-          "path": {
-            "title": "Path",
-            "type": "string"
-          },
-          "repository": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/AgentConfigRepository"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          }
-        },
-        "required": [
-          "path"
-        ],
-        "title": "AgentConfigSettingsRef",
-        "type": "object"
-      },
-      "AgentConfigSkill": {
-        "additionalProperties": false,
-        "description": "One config-declared Claude Code skill: a repository directory containing\na SKILL.md, resolved at run start and installed at the sandbox's personal\nskill level (`~/.claude/skills/<basename(path)>/`). This is how a config\nbrings in skills its cloned repositories don't provide \u2014 cross-repo refs\n(an org-wide skills repo), public third-party repos, and repo-less runs.\nSkills under a cloned repo's own `.claude/skills/` load by themselves and\ndon't need an entry here.",
-        "properties": {
-          "path": {
-            "title": "Path",
-            "type": "string"
-          },
-          "repository": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/AgentConfigRepository"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          }
-        },
-        "required": [
-          "path"
-        ],
-        "title": "AgentConfigSkill",
-        "type": "object"
-      },
-      "AgentConfigSource": {
-        "description": "Where a session's config came from. Total: every session has exactly one\nsource, including the ones that never touch defaults resolution.\n\nNot derivable from the row \u2014 `agent_config_id` says WHICH saved config, not\nhow it was chosen, and is null for inline, platform-default, and built-in\nconfigs alike \u2014 so it is persisted for audit and the published wire.",
-        "enum": [
-          "explicit",
-          "inline",
-          "template",
-          "repo_default",
-          "account_default",
-          "platform_default",
-          "trigger",
-          "builtin"
-        ],
-        "title": "AgentConfigSource",
-        "type": "string"
-      },
-      "AgentConfigSourceGithub": {
-        "description": "Identifies the file a GitHub-sourced agent config is synced from.\n\nKeyed on the repository ID (not owner/name) so repository and org renames\ndon't orphan the config; resolve display names from gh_repositories at\nread time.",
-        "properties": {
-          "branch": {
-            "title": "Branch",
-            "type": "string"
-          },
-          "path": {
-            "title": "Path",
-            "type": "string"
-          },
-          "repo_id": {
-            "title": "Repo Id",
-            "type": "integer"
-          }
-        },
-        "required": [
-          "repo_id",
-          "path",
-          "branch"
-        ],
-        "title": "AgentConfigSourceGithub",
-        "type": "object"
-      },
-      "AgentConfigSystemFileRef": {
-        "additionalProperties": false,
-        "properties": {
-          "file": {
-            "title": "File",
-            "type": "string"
-          },
-          "repository": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/AgentConfigRepository"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          }
-        },
-        "required": [
-          "file"
-        ],
-        "title": "AgentConfigSystemFileRef",
-        "type": "object"
-      },
       "AgentTemplate": {
         "description": "A built-in agent template: a ready-to-use agent config plus the\nmetadata that describes it in the template gallery.",
         "properties": {
@@ -1672,20 +542,9 @@
       "Automation": {
         "description": "An automation: a saved agent definition that runs on its trigger or\nwhen invoked, plus where it syncs from and the state of that sync.",
         "properties": {
-          "agent_config": {
-            "$ref": "#/components/schemas/AgentConfig",
-            "description": "The agent definition itself, in the same schema as a YAML file under agents/."
-          },
-          "agent_config_source_details": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/AgentConfigSourceGithub"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "The repository, path, and branch the automation syncs from. Null only transiently, before the creating pull request's file lands on the branch."
+          "config": {
+            "$ref": "#/components/schemas/AutomationConfig",
+            "description": "The automation definition itself, in the same schema as its YAML file: identity, trigger, input contract, and the session block."
           },
           "created_at": {
             "description": "When the automation was created.",
@@ -1727,38 +586,192 @@
                 "format": "date-time",
                 "type": "string"
               },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "When that most recent session was created.",
-            "title": "Last Session Created At"
+              {
+                "type": "null"
+              }
+            ],
+            "description": "When that most recent session was created.",
+            "title": "Last Session Created At"
+          },
+          "last_session_id": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The most recent session this automation started, or null if it has never run.",
+            "title": "Last Session Id"
+          },
+          "last_sync_error": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The parse or validation error from the most recent sync attempt, or null when it succeeded. A non-null value means the automation is not running the YAML currently on the branch.",
+            "title": "Last Sync Error"
+          },
+          "last_synced_commit_sha": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The last commit the automation was synced from.",
+            "title": "Last Synced Commit Sha"
+          },
+          "managed_by": {
+            "$ref": "#/components/schemas/ConfigManagedBy",
+            "description": "Which writer owns this automation. \"github\" automations are defined by a file in a repository and are changed by editing that file; \"api\" automations have no file and are changed through this API."
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The automation's account-unique addressable name (a slug of its display name); usable anywhere an automation is referenced, interchangeably with the id.",
+            "title": "Name"
+          },
+          "pending_pull_request_url": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The open pull request that adds this automation's file. Non-null means the automation is not live yet: it starts running once the pull request merges and syncs.",
+            "title": "Pending Pull Request Url"
+          },
+          "sha": {
+            "description": "The definition's content identity: the version fingerprint frozen onto each session that runs it.",
+            "title": "Sha",
+            "type": "string"
+          },
+          "source_details": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/GithubSourceDetails"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The repository, path, and branch the automation syncs from. Null only transiently, before the creating pull request's file lands on the branch."
+          },
+          "updated_at": {
+            "description": "When the automation was last updated.",
+            "format": "date-time",
+            "title": "Updated At",
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "sha",
+          "created_at",
+          "updated_at",
+          "managed_by",
+          "config"
+        ],
+        "title": "Automation",
+        "type": "object"
+      },
+      "AutomationConfig": {
+        "additionalProperties": false,
+        "description": "A saved automation, as written in its YAML file: identity\n(`ellipsis`), when it runs (`trigger`), what goes in (`input`), and the\n`session:` block every session it starts is frozen from. Field order is\nthe canonical key order for files and `to_yaml` exports.",
+        "properties": {
+          "ellipsis": {
+            "$ref": "#/components/schemas/AutomationIdentity",
+            "default": {
+              "enabled": true,
+              "metadata": {
+                "annotations": {},
+                "labels": []
+              },
+              "version": "v1"
+            }
           },
-          "last_session_id": {
+          "input": {
             "anyOf": [
               {
-                "type": "string"
+                "$ref": "#/components/schemas/InputContract"
               },
               {
                 "type": "null"
               }
-            ],
-            "description": "The most recent session this automation started, or null if it has never run.",
-            "title": "Last Session Id"
+            ]
           },
-          "last_sync_error": {
+          "session": {
+            "$ref": "#/components/schemas/SessionConfig",
+            "default": {
+              "budget": {},
+              "claude": {
+                "system": ""
+              },
+              "environment": {
+                "compute": {},
+                "hooks": {},
+                "image": {},
+                "mcp_servers": [],
+                "repositories": [],
+                "variables": []
+              },
+              "permissions": {
+                "ellipsis": true,
+                "github": {}
+              },
+              "skills": []
+            }
+          },
+          "trigger": {
             "anyOf": [
               {
-                "type": "string"
+                "discriminator": {
+                  "mapping": {
+                    "cron": "#/components/schemas/CronTrigger",
+                    "react": "#/components/schemas/ReactTrigger"
+                  },
+                  "propertyName": "type"
+                },
+                "oneOf": [
+                  {
+                    "$ref": "#/components/schemas/CronTrigger"
+                  },
+                  {
+                    "$ref": "#/components/schemas/ReactTrigger"
+                  }
+                ]
               },
               {
                 "type": "null"
               }
             ],
-            "description": "The parse or validation error from the most recent sync attempt, or null when it succeeded. A non-null value means the automation is not running the YAML currently on the branch.",
-            "title": "Last Sync Error"
-          },
-          "last_synced_commit_sha": {
+            "title": "Trigger"
+          }
+        },
+        "title": "AutomationConfig",
+        "type": "object"
+      },
+      "AutomationIdentity": {
+        "additionalProperties": false,
+        "description": "The Ellipsis product namespace for a config file: which schema this is\n(`version`), the human-facing identity (`name`/`description`), freeform\norganizational `metadata`, and whether the agent is `enabled`. The\npresence of a top-level `ellipsis:` mapping is what marks a YAML file as\nan Ellipsis agent config (vs arbitrary YAML that merely lives under a\nconfig directory) \u2014 see `yaml_is_ellipsis_config`.\n\n`enabled` is agent behavior, not freeform metadata, so it stays inside\nthe config `sha` (only `metadata` is sha-excluded). Whether a session\naccepts messages is a per-run choice (POST /v1/sessions `interactive`),\nnot a config one.",
+        "properties": {
+          "description": {
             "anyOf": [
               {
                 "type": "string"
@@ -1767,12 +780,19 @@
                 "type": "null"
               }
             ],
-            "description": "The last commit the automation was synced from.",
-            "title": "Last Synced Commit Sha"
+            "title": "Description"
           },
-          "managed_by": {
-            "$ref": "#/components/schemas/ConfigManagedBy",
-            "description": "Which writer owns this automation. \"github\" automations are defined by a file in a repository and are changed by editing that file; \"api\" automations have no file and are changed through this API."
+          "enabled": {
+            "default": true,
+            "title": "Enabled",
+            "type": "boolean"
+          },
+          "metadata": {
+            "$ref": "#/components/schemas/ConfigMetadata",
+            "default": {
+              "annotations": {},
+              "labels": []
+            }
           },
           "name": {
             "anyOf": [
@@ -1783,42 +803,42 @@
                 "type": "null"
               }
             ],
-            "description": "The automation's account-unique addressable name (a slug of its display name); usable anywhere an automation is referenced, interchangeably with the id.",
             "title": "Name"
           },
-          "pending_pull_request_url": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "The open pull request that adds this automation's file. Non-null means the automation is not live yet: it starts running once the pull request merges and syncs.",
-            "title": "Pending Pull Request Url"
-          },
-          "sha": {
-            "description": "The definition's content identity: the version fingerprint frozen onto each session that runs it.",
-            "title": "Sha",
+          "version": {
+            "default": "v1",
+            "title": "Version",
             "type": "string"
+          }
+        },
+        "title": "AutomationIdentity",
+        "type": "object"
+      },
+      "AutomationMetricsResponse": {
+        "description": "An automation's session distribution and trailing spend.",
+        "properties": {
+          "samples": {
+            "description": "One entry per finished session, unordered.",
+            "items": {
+              "$ref": "#/components/schemas/AutomationSessionSample"
+            },
+            "title": "Samples",
+            "type": "array"
           },
-          "updated_at": {
-            "description": "When the automation was last updated.",
-            "format": "date-time",
-            "title": "Updated At",
-            "type": "string"
+          "spend_windows": {
+            "description": "Trailing spend versus the budget, one entry per window (1, 7, and 28 days).",
+            "items": {
+              "$ref": "#/components/schemas/AutomationSpendWindow"
+            },
+            "title": "Spend Windows",
+            "type": "array"
           }
         },
         "required": [
-          "id",
-          "sha",
-          "created_at",
-          "updated_at",
-          "managed_by",
-          "agent_config"
+          "samples",
+          "spend_windows"
         ],
-        "title": "Automation",
+        "title": "AutomationMetricsResponse",
         "type": "object"
       },
       "AutomationResponse": {
@@ -1835,6 +855,66 @@
         "title": "AutomationResponse",
         "type": "object"
       },
+      "AutomationSessionSample": {
+        "description": "One finished session of the automation, reduced to the three figures\nthe distributions are drawn from.",
+        "properties": {
+          "cost": {
+            "description": "What the session cost, in millicents.",
+            "title": "Cost",
+            "type": "integer"
+          },
+          "duration_seconds": {
+            "description": "Wall-clock seconds from the session's creation to its last update.",
+            "title": "Duration Seconds",
+            "type": "number"
+          },
+          "tokens_total": {
+            "description": "Tokens the session consumed across every lane, including prompt-cache reads and writes.",
+            "title": "Tokens Total",
+            "type": "integer"
+          }
+        },
+        "required": [
+          "duration_seconds",
+          "cost",
+          "tokens_total"
+        ],
+        "title": "AutomationSessionSample",
+        "type": "object"
+      },
+      "AutomationSpendWindow": {
+        "description": "The automation's trailing spend against its budget over one window.",
+        "properties": {
+          "limit_usd": {
+            "description": "The enforced cap for the window, in US dollars: the automation's own budget clamped to the platform maximum, or the maximum itself when the budget is unset.",
+            "title": "Limit Usd",
+            "type": "number"
+          },
+          "platform_max_usd": {
+            "description": "The platform ceiling for the window, in US dollars; a budget above it is clamped to it.",
+            "title": "Platform Max Usd",
+            "type": "number"
+          },
+          "spent_usd": {
+            "description": "What the automation's sessions cost over the window, in US dollars.",
+            "title": "Spent Usd",
+            "type": "number"
+          },
+          "window_days": {
+            "description": "The trailing window, in days: 1, 7, or 28.",
+            "title": "Window Days",
+            "type": "integer"
+          }
+        },
+        "required": [
+          "window_days",
+          "spent_usd",
+          "limit_usd",
+          "platform_max_usd"
+        ],
+        "title": "AutomationSpendWindow",
+        "type": "object"
+      },
       "AutomationsListResponse": {
         "description": "The caller's automations.",
         "properties": {
@@ -1872,6 +952,57 @@
         "title": "BudgetCeiling",
         "type": "object"
       },
+      "BudgetConfig": {
+        "additionalProperties": false,
+        "properties": {
+          "day": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Day"
+          },
+          "month": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Month"
+          },
+          "session": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Session"
+          },
+          "week": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Week"
+          }
+        },
+        "title": "BudgetConfig",
+        "type": "object"
+      },
       "BudgetSource": {
         "description": "Which layer actually determined the enforced budget.\n\nNot derivable from the run row alone (the run does not store the config\ncents or the account default), so we persist it for the UI / audit.",
         "enum": [
@@ -1954,18 +1085,104 @@
                 "type": "string"
               },
               {
-                "type": "null"
+                "type": "null"
+              }
+            ],
+            "description": "When the budget period started, as an ISO timestamp.",
+            "title": "Start"
+          }
+        },
+        "required": [
+          "start",
+          "end"
+        ],
+        "title": "BudgetWindow",
+        "type": "object"
+      },
+      "ClaudeConfig": {
+        "additionalProperties": false,
+        "properties": {
+          "effort": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/EffortLevel"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "fallback_model": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Fallback Model"
+          },
+          "max_turns": {
+            "anyOf": [
+              {
+                "exclusiveMinimum": 0.0,
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Max Turns"
+          },
+          "model": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Model"
+          },
+          "settings": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/SettingsRef"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "system": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "$ref": "#/components/schemas/SystemFileRef"
+              },
+              {
+                "items": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SystemFileRef"
+                    }
+                  ]
+                },
+                "type": "array"
               }
             ],
-            "description": "When the budget period started, as an ISO timestamp.",
-            "title": "Start"
+            "default": "",
+            "title": "System"
           }
         },
-        "required": [
-          "start",
-          "end"
-        ],
-        "title": "BudgetWindow",
+        "title": "ClaudeConfig",
         "type": "object"
       },
       "ClaudeSessionRecord": {
@@ -2263,6 +1480,44 @@
         "title": "CodexCommandExecutionItem",
         "type": "object"
       },
+      "CodexConfig": {
+        "additionalProperties": false,
+        "description": "The `codex:` block \u2014 run this agent on OpenAI's Codex CLI instead of\nClaude Code. Declaring the block at all is what selects the harness\n(`AutomationConfig.harness`).\n\nDeliberately a small subset of `ClaudeConfig`: the fields omitted here\nare ones Codex has no equivalent for (`effort`, `fallback_model`,\n`settings`) or that the platform does not yet wire through for this harness\n(`max_turns`, `skills`, MCP servers). They are omitted rather than\naccepted-and-ignored, because `StrictConfigModel` forbids extra keys \u2014 so a\nconfig that sets one fails loudly at parse time instead of silently not doing\nit. The budget still bounds a run regardless.",
+        "properties": {
+          "model": {
+            "default": "gpt-5.6-terra",
+            "title": "Model",
+            "type": "string"
+          },
+          "system": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "$ref": "#/components/schemas/SystemFileRef"
+              },
+              {
+                "items": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SystemFileRef"
+                    }
+                  ]
+                },
+                "type": "array"
+              }
+            ],
+            "default": "",
+            "title": "System"
+          }
+        },
+        "title": "CodexConfig",
+        "type": "object"
+      },
       "CodexErrorEvent": {
         "additionalProperties": true,
         "properties": {
@@ -3032,6 +2287,55 @@
         "title": "CodexWebSearchItem",
         "type": "object"
       },
+      "ComputeConfig": {
+        "additionalProperties": false,
+        "description": "Sandbox compute sizing. Every field is optional; None inherits the\nplatform default (1 vCPU / 4096 MiB / 3600s \u2014 see DEFAULT_MODAL_* in\nmodels/ellipsis/sandboxes/sandbox.py). A resolved value outside the platform\nbounds fails validation loudly (a sync error on the config) rather than\nbeing clamped silently.\n\n`memory` and `timeout` each accept a shorthand string (\"8GB\", \"30m\") or an\nexplicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /\n`timeout_seconds` properties resolve either form to the canonical integer\nthe sandbox driver consumes.\n\n`timeout` is the max wall-clock the agent may run before the sandbox is\nkilled, capped at 1h (MAX_SANDBOX_TIMEOUT_SECONDS \u2014 equal to the default, so\ntoday the knob only shortens a session; the cap matches the 1-hour validity\nof the sandbox's GitHub token). The worker's lease/visibility heartbeat\nceiling is derived from that cap, so a run at the max stays owned by its\nworker for its whole life.\n\nCompute is billed on the requested allocation over the sandbox's\nwall-clock lifetime, so a bigger/longer box costs proportionally more.",
+        "properties": {
+          "cpu": {
+            "anyOf": [
+              {
+                "maximum": 16.0,
+                "minimum": 0.125,
+                "type": "number"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Cpu"
+          },
+          "memory": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "$ref": "#/components/schemas/MemorySize"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Memory"
+          },
+          "timeout": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "$ref": "#/components/schemas/Duration"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Timeout"
+          }
+        },
+        "title": "ComputeConfig",
+        "type": "object"
+      },
       "ConfigManagedBy": {
         "description": "Which writer owns an agent: the repository file it is defined in, or\nthis API. Every agent has exactly one owner, fixed when it is created and\nchanged only by linking or unlinking it.",
         "enum": [
@@ -3041,6 +2345,29 @@
         "title": "ConfigManagedBy",
         "type": "string"
       },
+      "ConfigMetadata": {
+        "additionalProperties": false,
+        "properties": {
+          "annotations": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "default": {},
+            "title": "Annotations",
+            "type": "object"
+          },
+          "labels": {
+            "default": [],
+            "items": {
+              "type": "string"
+            },
+            "title": "Labels",
+            "type": "array"
+          }
+        },
+        "title": "ConfigMetadata",
+        "type": "object"
+      },
       "ContributorUsage": {
         "description": "An author who merged a pull request in the window. The pull-request and\nline counts cover their merged pull requests; `reviews` counts reviews this\nperson also submitted.",
         "properties": {
@@ -3103,8 +2430,8 @@
         "description": "Parameters for creating an automation.",
         "properties": {
           "automation": {
-            "$ref": "#/components/schemas/AgentConfig",
-            "description": "The automation's definition, in the same schema as a YAML file under agents/."
+            "$ref": "#/components/schemas/AutomationConfig",
+            "description": "The automation's definition, in the same schema as a YAML file under .ellipsis/."
           }
         },
         "required": [
@@ -3117,7 +2444,7 @@
         "description": "Parameters for creating an environment.",
         "properties": {
           "environment": {
-            "$ref": "#/components/schemas/EnvironmentConfig",
+            "$ref": "#/components/schemas/EnvironmentDocument",
             "description": "The environment's definition."
           }
         },
@@ -3241,6 +2568,70 @@
         "title": "CreateReviewRequest",
         "type": "object"
       },
+      "CronTrigger": {
+        "additionalProperties": false,
+        "properties": {
+          "schedule": {
+            "title": "Schedule",
+            "type": "string"
+          },
+          "type": {
+            "const": "cron",
+            "default": "cron",
+            "title": "Type",
+            "type": "string"
+          }
+        },
+        "required": [
+          "schedule"
+        ],
+        "title": "CronTrigger",
+        "type": "object"
+      },
+      "Duration": {
+        "additionalProperties": false,
+        "description": "A duration as explicit units, summed. Set any of `hours`/`minutes`/\n`seconds` (at least one). The alternative to the `30m`-style shorthand\nstring wherever a duration is accepted.",
+        "properties": {
+          "hours": {
+            "anyOf": [
+              {
+                "minimum": 0.0,
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Hours"
+          },
+          "minutes": {
+            "anyOf": [
+              {
+                "minimum": 0.0,
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Minutes"
+          },
+          "seconds": {
+            "anyOf": [
+              {
+                "minimum": 0.0,
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Seconds"
+          }
+        },
+        "title": "Duration",
+        "type": "object"
+      },
       "DurationPercentiles": {
         "description": "Percentiles of a duration distribution, in hours. p0 = fastest,\np100 = slowest; the spread shows how merge latency varies.",
         "properties": {
@@ -3362,6 +2753,37 @@
         "title": "EllipsisGrant",
         "type": "object"
       },
+      "EllipsisPermissions": {
+        "additionalProperties": {
+          "anyOf": [
+            {
+              "$ref": "#/components/schemas/Level"
+            },
+            {
+              "$ref": "#/components/schemas/EllipsisGrant"
+            },
+            {
+              "items": {
+                "anyOf": [
+                  {
+                    "$ref": "#/components/schemas/Level"
+                  },
+                  {
+                    "$ref": "#/components/schemas/EllipsisGrant"
+                  }
+                ]
+              },
+              "type": "array"
+            }
+          ]
+        },
+        "description": "`permissions.ellipsis` as a map: resource \u2192 level | grant | list of\ngrants. Levels are hierarchical (read < write < delete), so `write`\nincludes `read`. An unlisted resource is denied. The whole block is\nintersected with the platform's sandbox ceiling at token mint \u2014 it can\nnarrow what a sandbox token may do, never exceed it.",
+        "propertyNames": {
+          "$ref": "#/components/schemas/Resource"
+        },
+        "title": "EllipsisPermissions",
+        "type": "object"
+      },
       "Environment": {
         "description": "A saved environment: the machine agents run in (repositories,\nvariables, MCP servers, image, compute, hooks), defined once and\nreferenced by name or id from agent configs and session starts.",
         "properties": {
@@ -3383,7 +2805,7 @@
             "description": "The GitHub account that last edited the environment, when known."
           },
           "environment": {
-            "$ref": "#/components/schemas/EnvironmentConfig",
+            "$ref": "#/components/schemas/EnvironmentDocument",
             "description": "The environment definition itself, as parsed from its YAML."
           },
           "id": {
@@ -3432,7 +2854,7 @@
           "source_details": {
             "anyOf": [
               {
-                "$ref": "#/components/schemas/AgentConfigSourceGithub"
+                "$ref": "#/components/schemas/GithubSourceDetails"
               },
               {
                 "type": "null"
@@ -3459,23 +2881,80 @@
         "title": "Environment",
         "type": "object"
       },
-      "EnvironmentConfig": {
+      "EnvironmentConfig": {
+        "additionalProperties": false,
+        "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, how its `image` is customized, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
+        "properties": {
+          "compute": {
+            "$ref": "#/components/schemas/ComputeConfig",
+            "default": {}
+          },
+          "hooks": {
+            "$ref": "#/components/schemas/EnvironmentHooks",
+            "default": {}
+          },
+          "image": {
+            "$ref": "#/components/schemas/EnvironmentImage",
+            "default": {}
+          },
+          "mcp_servers": {
+            "default": [],
+            "items": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "$ref": "#/components/schemas/McpServerRef"
+                },
+                {
+                  "$ref": "#/components/schemas/McpStdioServer"
+                },
+                {
+                  "$ref": "#/components/schemas/McpRemoteServer"
+                }
+              ]
+            },
+            "title": "Mcp Servers",
+            "type": "array"
+          },
+          "repositories": {
+            "default": [],
+            "items": {
+              "$ref": "#/components/schemas/RepositoryRef"
+            },
+            "title": "Repositories",
+            "type": "array"
+          },
+          "variables": {
+            "default": [],
+            "items": {
+              "$ref": "#/components/schemas/EnvironmentVariable"
+            },
+            "title": "Variables",
+            "type": "array"
+          }
+        },
+        "title": "EnvironmentConfig",
+        "type": "object"
+      },
+      "EnvironmentDocument": {
         "additionalProperties": false,
         "description": "A parsed environment document: identity plus the environment body.\n\nThe body fields are flattened to the top level of the file (not nested\nunder an `environment:` key) \u2014 the file *is* the environment, so nesting\nwould be ceremony. `to_environment()` projects the body for substitution\ninto an agent config.",
         "properties": {
           "compute": {
-            "$ref": "#/components/schemas/AgentConfigCompute",
+            "$ref": "#/components/schemas/ComputeConfig",
             "default": {}
           },
           "ellipsis": {
-            "$ref": "#/components/schemas/EnvironmentConfigEllipsis"
+            "$ref": "#/components/schemas/EnvironmentIdentity"
           },
           "hooks": {
-            "$ref": "#/components/schemas/AgentConfigEnvironmentHooks",
+            "$ref": "#/components/schemas/EnvironmentHooks",
             "default": {}
           },
           "image": {
-            "$ref": "#/components/schemas/AgentConfigEnvironmentImage",
+            "$ref": "#/components/schemas/EnvironmentImage",
             "default": {}
           },
           "mcp_servers": {
@@ -3486,13 +2965,13 @@
                   "type": "string"
                 },
                 {
-                  "$ref": "#/components/schemas/AgentConfigMcpServer"
+                  "$ref": "#/components/schemas/McpServerRef"
                 },
                 {
-                  "$ref": "#/components/schemas/AgentConfigMcpStdioServer"
+                  "$ref": "#/components/schemas/McpStdioServer"
                 },
                 {
-                  "$ref": "#/components/schemas/AgentConfigMcpRemoteServer"
+                  "$ref": "#/components/schemas/McpRemoteServer"
                 }
               ]
             },
@@ -3502,7 +2981,7 @@
           "repositories": {
             "default": [],
             "items": {
-              "$ref": "#/components/schemas/AgentConfigRepository"
+              "$ref": "#/components/schemas/RepositoryRef"
             },
             "title": "Repositories",
             "type": "array"
@@ -3510,7 +2989,7 @@
           "variables": {
             "default": [],
             "items": {
-              "$ref": "#/components/schemas/AgentConfigEnvironmentVariable"
+              "$ref": "#/components/schemas/EnvironmentVariable"
             },
             "title": "Variables",
             "type": "array"
@@ -3519,10 +2998,40 @@
         "required": [
           "ellipsis"
         ],
-        "title": "EnvironmentConfig",
+        "title": "EnvironmentDocument",
+        "type": "object"
+      },
+      "EnvironmentHooks": {
+        "additionalProperties": false,
+        "description": "Shell scripts run at points in the sandbox lifecycle, each as the sandbox\nuser with the sandbox's environment variables available. A non-zero exit\nfails the run (exit_status = LIFECYCLE_HOOK_FAILED) and is not retried.\n\n`post_start` runs after the container starts, before any repo is cloned \u2014\nrepo-independent setup (authenticate a CLI, e.g. `doppler setup`). On Modal\nthe repo is baked into the image so it is incidentally present, but\n`post_start` must not depend on repo contents (that's `post_clone`).\n\n`post_clone` runs after all repos are cloned/checked out, before the agent \u2014\nrepo-dependent setup (`pip install -r requirements.txt`, codegen).\n\nHooks run on every run and their output is never cached. A dependency\ninstall whose result should be reused across runs belongs in `image.setup`\n(baked into the cached image) instead; keep hooks for per-run work \u2014 e.g.\nanything that touches run-scoped credentials.",
+        "properties": {
+          "post_clone": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Post Clone"
+          },
+          "post_start": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Post Start"
+          }
+        },
+        "title": "EnvironmentHooks",
         "type": "object"
       },
-      "EnvironmentConfigEllipsis": {
+      "EnvironmentIdentity": {
         "additionalProperties": false,
         "description": "The Ellipsis namespace of an environment file. `kind: environment` is\nwhat routes a synced YAML here instead of to the agent-config parser \u2014\nan agent config carries no `kind` (or `kind: agent`, tolerated nowhere:\nabsence is the agent marker).",
         "properties": {
@@ -3543,7 +3052,7 @@
             "type": "string"
           },
           "metadata": {
-            "$ref": "#/components/schemas/AgentConfigMetadata",
+            "$ref": "#/components/schemas/ConfigMetadata",
             "default": {
               "annotations": {},
               "labels": []
@@ -3564,7 +3073,37 @@
         "required": [
           "kind"
         ],
-        "title": "EnvironmentConfigEllipsis",
+        "title": "EnvironmentIdentity",
+        "type": "object"
+      },
+      "EnvironmentImage": {
+        "additionalProperties": false,
+        "description": "How to customize the container image the agent runs in. You\ncontribute appended layers (`dockerfile_append`) and a build-time script\n(`setup`) only \u2014 Ellipsis owns FROM / base tooling / entrypoint / user.\nToday only inline bodies are supported; a file reference (resolved at the\nrun's SHA) will come later.\n\nThe split: `dockerfile_append` runs when the image is assembled, before any\nrepo exists \u2014 toolchain installs (a package manager binary, apt packages).\n`setup` runs at image-build time *after* the configured repositories are\nchecked out, and its output is captured by the filesystem snapshot that\nbecomes the cached image \u2014 dependency installs (`poetry install`,\n`npm install`), so later runs start with deps already on disk. Neither runs\nper run; that's `hooks.post_start` / `hooks.post_clone`.",
+        "properties": {
+          "dockerfile_append": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Dockerfile Append"
+          },
+          "setup": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Setup"
+          }
+        },
+        "title": "EnvironmentImage",
         "type": "object"
       },
       "EnvironmentResponse": {
@@ -3593,6 +3132,32 @@
         "title": "EnvironmentSource",
         "type": "string"
       },
+      "EnvironmentVariable": {
+        "additionalProperties": false,
+        "description": "One environment variable injected into the agent's sandbox.\n\n`value`, when set, is a literal injected as-is \u2014 use it for non-secret\nconfig (LOG_LEVEL, an API base URL). When `value` is omitted the value is\nresolved at run time from the account's sandbox-secrets store (dashboard\n/ `PUT /v1/secrets`) by `name`, so a secret can be injected without\never putting it in the config file. Either way the variable only reaches\nagents that name it.",
+        "properties": {
+          "name": {
+            "title": "Name",
+            "type": "string"
+          },
+          "value": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Value"
+          }
+        },
+        "required": [
+          "name"
+        ],
+        "title": "EnvironmentVariable",
+        "type": "object"
+      },
       "EnvironmentsListResponse": {
         "description": "The caller's saved environments.",
         "properties": {
@@ -4345,6 +3910,46 @@
         "title": "GithubMembersListResponse",
         "type": "object"
       },
+      "GithubPermissions": {
+        "additionalProperties": false,
+        "description": "The agent's GitHub access: the scope of the installation token minted for\nits sandbox \u2014 the credential `git`, `gh`, and the GitHub MCP server\nauthenticate with.\n\nBy default the token carries the installation's full permissions on all of\nthe installation's repositories. `permissions` narrows what it may do:\nthe string `read_only` grants read access to contents, issues, metadata and\npull requests; a map requests explicit levels per GitHub App permission\nscope (e.g. `{contents: read, pull_requests: write}`) and may never exceed\nwhat the installation granted. `repositories` scopes the token to exactly\nthe listed repos, by name (they must belong to the installation).\n\nRestriction is enforced by GitHub, not by Ellipsis: the token itself is\nminted with the reduced scope, so nothing running in the sandbox can\nexceed it.",
+        "properties": {
+          "permissions": {
+            "anyOf": [
+              {
+                "const": "read_only",
+                "type": "string"
+              },
+              {
+                "additionalProperties": {
+                  "type": "string"
+                },
+                "type": "object"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Permissions"
+          },
+          "repositories": {
+            "anyOf": [
+              {
+                "items": {
+                  "type": "string"
+                },
+                "type": "array"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Repositories"
+          }
+        },
+        "title": "GithubPermissions",
+        "type": "object"
+      },
       "GithubRepositoriesListResponse": {
         "description": "The repositories connected to the account's GitHub installation.",
         "properties": {
@@ -4420,6 +4025,30 @@
         "title": "GithubRepository",
         "type": "object"
       },
+      "GithubSourceDetails": {
+        "description": "Identifies the file a GitHub-sourced agent config is synced from.\n\nKeyed on the repository ID (not owner/name) so repository and org renames\ndon't orphan the config; resolve display names from gh_repositories at\nread time.",
+        "properties": {
+          "branch": {
+            "title": "Branch",
+            "type": "string"
+          },
+          "path": {
+            "title": "Path",
+            "type": "string"
+          },
+          "repo_id": {
+            "title": "Repo Id",
+            "type": "integer"
+          }
+        },
+        "required": [
+          "repo_id",
+          "path",
+          "branch"
+        ],
+        "title": "GithubSourceDetails",
+        "type": "object"
+      },
       "GithubUser": {
         "description": "This is a full user account. It's the most amount of info we need to represent a GitHub user.\n\nRepresents both a public and private user.",
         "properties": {
@@ -4821,6 +4450,33 @@
         "title": "Harness",
         "type": "string"
       },
+      "ImageAttachment": {
+        "description": "One image on a request body, base64 inline (the Claude Code paste\nshape). Shared by `POST /v1/sessions` and `POST /v1/sessions/{id}/messages`.",
+        "properties": {
+          "data": {
+            "description": "The raw image bytes, base64-encoded. 5 MiB cap.",
+            "title": "Data",
+            "type": "string"
+          },
+          "media_type": {
+            "description": "The image's MIME type: image/png, image/jpeg, image/gif, or image/webp. The bytes must match.",
+            "enum": [
+              "image/png",
+              "image/jpeg",
+              "image/gif",
+              "image/webp"
+            ],
+            "title": "Media Type",
+            "type": "string"
+          }
+        },
+        "required": [
+          "media_type",
+          "data"
+        ],
+        "title": "ImageAttachment",
+        "type": "object"
+      },
       "IngestTranscriptRequest": {
         "description": "A batch of raw transcript lines pushed from inside a session's\nsandbox.",
         "properties": {
@@ -4845,6 +4501,37 @@
         "title": "IngestTranscriptRequest",
         "type": "object"
       },
+      "InputContract": {
+        "additionalProperties": false,
+        "description": "The typed input contract: what goes INTO a session (the trigger is\nwhen it happens; this is what goes in).\n\n`json_schema` types the payload a caller-started session takes\n(`POST /v1/sessions` `input`, validated at the door; required when\ndeclared). It is illegal on a react-triggered agent \u2014 react payloads are\nplatform-shaped (the published surface field sets), not caller-shaped.\n\n`message` is the initial-message template: exact `{{path}}` substitution\nover the caller payload (or, on a react agent, over the surface's\npublished fields), no conditionals/loops/filters. Refs are validated at\ndeploy time against the governing field set (see AutomationConfig's\n`_check_input`).",
+        "properties": {
+          "json_schema": {
+            "anyOf": [
+              {
+                "additionalProperties": true,
+                "type": "object"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Json Schema"
+          },
+          "message": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Message"
+          }
+        },
+        "title": "InputContract",
+        "type": "object"
+      },
       "IssueAction": {
         "enum": [
           "opened",
@@ -5135,7 +4822,7 @@
                 "type": "null"
               }
             ],
-            "description": "File path within the repo. Omit for the default agents/<slug>.yaml; if set it must be a location the sync scans (a .yaml/.yml file under agents/, .agents/, ellipsis/, or .ellipsis/ at any depth).",
+            "description": "File path within the repo. Omit for the default .ellipsis/automations/<slug>.yaml; if set it must be a location the sync scans (a .yaml/.yml file under .ellipsis/ at any depth; in the repository named .ellipsis the repo root is that directory).",
             "title": "Path"
           },
           "repository": {
@@ -5218,16 +4905,95 @@
             "description": "The linked Slack user's email, if known.",
             "title": "Slack Email"
           },
-          "slack_user_id": {
-            "description": "The linked Slack user id.",
-            "title": "Slack User Id",
+          "slack_user_id": {
+            "description": "The linked Slack user id.",
+            "title": "Slack User Id",
+            "type": "string"
+          }
+        },
+        "required": [
+          "slack_user_id"
+        ],
+        "title": "LinkedSlackIdentity",
+        "type": "object"
+      },
+      "McpRemoteServer": {
+        "additionalProperties": false,
+        "description": "A bring-your-own remote MCP server: the harness talks HTTP to `url`.\nNothing runs in the sandbox image. `headers` carry static auth (e.g.\n`Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret\nreferences, resolved at run time from the account's secrets store.",
+        "properties": {
+          "headers": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "default": {},
+            "title": "Headers",
+            "type": "object"
+          },
+          "name": {
+            "title": "Name",
+            "type": "string"
+          },
+          "url": {
+            "title": "Url",
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "url"
+        ],
+        "title": "McpRemoteServer",
+        "type": "object"
+      },
+      "McpServerRef": {
+        "additionalProperties": false,
+        "description": "One built-in MCP server this agent opts into by name (`linear`/`slack`).\nA name reference over the connected built-in set \u2014 the platform manages the\nserver's transport and credentials. It only matters when the named\nintegration is set to `opt_in` inclusion; an integration in the default\n`all_sessions` mode is added regardless. For a server the platform does not\nprovide, define it instead (`McpStdioServer` /\n`McpRemoteServer`).",
+        "properties": {
+          "name": {
+            "title": "Name",
+            "type": "string"
+          }
+        },
+        "required": [
+          "name"
+        ],
+        "title": "McpServerRef",
+        "type": "object"
+      },
+      "McpStdioServer": {
+        "additionalProperties": false,
+        "description": "A bring-your-own stdio MCP server: the harness spawns `command` inside\nthe sandbox and speaks JSON-RPC over its stdin/stdout. The command must be\nrunnable in the sandbox image \u2014 install its runtime via `image.setup` /\n`image.dockerfile_append` if the base image lacks it.\n\n`env` values may embed `${NAME}` references, resolved at run time from the\naccount's secrets store (see `mcp_secret_refs`); everything else is passed\nliterally.",
+        "properties": {
+          "args": {
+            "default": [],
+            "items": {
+              "type": "string"
+            },
+            "title": "Args",
+            "type": "array"
+          },
+          "command": {
+            "title": "Command",
+            "type": "string"
+          },
+          "env": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "default": {},
+            "title": "Env",
+            "type": "object"
+          },
+          "name": {
+            "title": "Name",
             "type": "string"
           }
         },
         "required": [
-          "slack_user_id"
+          "name",
+          "command"
         ],
-        "title": "LinkedSlackIdentity",
+        "title": "McpStdioServer",
         "type": "object"
       },
       "MemoriesListResponse": {
@@ -5360,6 +5126,38 @@
         "title": "MemoryResponse",
         "type": "object"
       },
+      "MemorySize": {
+        "additionalProperties": false,
+        "description": "A memory size as explicit units, summed (binary: 1GB = 1024MB = 1024MiB).\nSet any of `gb`/`mb` (at least one). The alternative to the `8GB`-style\nshorthand string.",
+        "properties": {
+          "gb": {
+            "anyOf": [
+              {
+                "minimum": 0.0,
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Gb"
+          },
+          "mb": {
+            "anyOf": [
+              {
+                "minimum": 0.0,
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Mb"
+          }
+        },
+        "title": "MemorySize",
+        "type": "object"
+      },
       "MemorySummary": {
         "description": "One entry in the index: a memory with every field except `content`.\n\nContent is the only omission, and it's the whole reason this shape exists \u2014\nan account can hold 2,000 memories of 100 KB each, so a listing that carried\ncontent would be a 200 MB response.",
         "properties": {
@@ -5569,18 +5367,6 @@
             "$ref": "#/components/schemas/BudgetCeiling",
             "description": "The organization's spend ceilings."
           },
-          "default_environment": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "The saved environment sessions run in when neither their request nor their automation names one: an `env_...` id or the environment's name on write, always the id on read. Null means the built-in basic sandbox.",
-            "title": "Default Environment"
-          },
           "default_model": {
             "anyOf": [
               {
@@ -5597,6 +5383,22 @@
         "title": "OrganizationSettings",
         "type": "object"
       },
+      "OutputConfig": {
+        "additionalProperties": false,
+        "description": "The typed output contract: the JSON Schema the agent must exit through\n(the StructuredOutput exit tool). Read back via\nGET /v1/sessions/{id}/output.",
+        "properties": {
+          "json_schema": {
+            "additionalProperties": true,
+            "title": "Json Schema",
+            "type": "object"
+          }
+        },
+        "required": [
+          "json_schema"
+        ],
+        "title": "OutputConfig",
+        "type": "object"
+      },
       "ParentKind": {
         "description": "How a session relates to its predecessor (parent_agent_session_id) \u2014\nthe ONE \"preceded-by\" chain for every predecessor relationship. Routing\nreads this when the distinction matters.\n\nCONTINUATION \u2014 a follow-up in the same conversation surface (e.g. a Slack\nthread reply spawning a fresh session on the same thread).\nRESUME \u2014 a conversation re-hosted on a new box after its sandbox was torn\ndown (interactive platform; later phase).",
         "enum": [
@@ -5606,6 +5408,33 @@
         "title": "ParentKind",
         "type": "string"
       },
+      "PermissionsConfig": {
+        "additionalProperties": false,
+        "description": "What the agent is allowed to touch, per credential the platform mints\ninto its sandbox. Distinct from `environment:`, which is where the agent\nruns; this is what it may do from there.\n\n`ellipsis` scopes the sandbox's Ellipsis API token\n(`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates\nwith). `true` / the string `all` (the default) grant the full sandbox\nceiling \u2014 everything a sandbox token can ever do. A map narrows it per\nresource (see `EllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) \u2014\nsee `GithubPermissions`. GitHub enforces it at mint time.",
+        "properties": {
+          "ellipsis": {
+            "anyOf": [
+              {
+                "enum": [
+                  true,
+                  "all"
+                ]
+              },
+              {
+                "$ref": "#/components/schemas/EllipsisPermissions"
+              }
+            ],
+            "default": true,
+            "title": "Ellipsis"
+          },
+          "github": {
+            "$ref": "#/components/schemas/GithubPermissions",
+            "default": {}
+          }
+        },
+        "title": "PermissionsConfig",
+        "type": "object"
+      },
       "PollCliAuthResponse": {
         "description": "The state of a device-code flow. Poll until `status` leaves `pending`.",
         "properties": {
@@ -6103,6 +5932,79 @@
         "title": "ReactSlackChannel",
         "type": "object"
       },
+      "ReactTrigger": {
+        "additionalProperties": false,
+        "properties": {
+          "issue": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/ReactIssue"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "linear_issue": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/ReactLinearIssue"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "pull_request": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/ReactPullRequest"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "push": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/ReactPush"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "sentry": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/ReactSentry"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "slack_channel": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/ReactSlackChannel"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "type": {
+            "const": "react",
+            "default": "react",
+            "title": "Type",
+            "type": "string"
+          }
+        },
+        "title": "ReactTrigger",
+        "type": "object"
+      },
       "RecentPullRequest": {
         "description": "One pull request in the recent-activity table.",
         "properties": {
@@ -6310,6 +6212,42 @@
           }
         ]
       },
+      "RepositoryRef": {
+        "additionalProperties": false,
+        "properties": {
+          "name": {
+            "title": "Name",
+            "type": "string"
+          },
+          "owner": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Owner"
+          },
+          "ref": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Ref"
+          }
+        },
+        "required": [
+          "name"
+        ],
+        "title": "RepositoryRef",
+        "type": "object"
+      },
       "RepositorySelection": {
         "enum": [
           "all",
@@ -7209,11 +7147,44 @@
       "ReviewPullRequest": {
         "description": "The pull request a review ran on.",
         "properties": {
+          "author": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/ReviewPullRequestAuthor"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Who opened the pull request, or null when Ellipsis has not ingested the pull request yet."
+          },
+          "base_sha": {
+            "description": "The pull request's base commit when the review was created.",
+            "title": "Base Sha",
+            "type": "string"
+          },
+          "head_sha": {
+            "description": "The pull request's head commit the review ran against (the same as `scope.head`).",
+            "title": "Head Sha",
+            "type": "string"
+          },
           "number": {
             "description": "The pull request number.",
             "title": "Number",
             "type": "integer"
           },
+          "title": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The pull request's title, or null when Ellipsis has not ingested the pull request yet.",
+            "title": "Title"
+          },
           "url": {
             "description": "The pull request's URL on GitHub.",
             "title": "Url",
@@ -7222,11 +7193,46 @@
         },
         "required": [
           "number",
-          "url"
+          "url",
+          "base_sha",
+          "head_sha"
         ],
         "title": "ReviewPullRequest",
         "type": "object"
       },
+      "ReviewPullRequestAuthor": {
+        "description": "The GitHub account that opened the pull request.",
+        "properties": {
+          "avatar_url": {
+            "description": "The account's avatar URL.",
+            "title": "Avatar Url",
+            "type": "string"
+          },
+          "id": {
+            "description": "The account's GitHub id.",
+            "title": "Id",
+            "type": "integer"
+          },
+          "login": {
+            "description": "The account's GitHub login.",
+            "title": "Login",
+            "type": "string"
+          },
+          "type": {
+            "description": "The account type: \"User\", \"Organization\", or \"Bot\".",
+            "title": "Type",
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "login",
+          "avatar_url",
+          "type"
+        ],
+        "title": "ReviewPullRequestAuthor",
+        "type": "object"
+      },
       "ReviewRepoFacet": {
         "description": "A repository filter option for the reviews view.",
         "properties": {
@@ -8481,8 +8487,16 @@
             "description": "Optional retry-safety key, unique per (session, key): a retry with the same key returns the original message \u2014 no duplicate message, no double turn, no double spend. The SDK auto-generates one per send.",
             "title": "Idempotency Key"
           },
+          "images": {
+            "description": "Images attached to the message, base64 inline \u2014 what a paste into Claude Code sends. Each becomes an `[Image #N]` placeholder in the stored body and an image block the model sees on the turn this message opens. Up to 10, 5 MiB each; PNG, JPEG, GIF, or WebP. Claude harness only.",
+            "items": {
+              "$ref": "#/components/schemas/ImageAttachment"
+            },
+            "title": "Images",
+            "type": "array"
+          },
           "message": {
-            "description": "The message text.",
+            "description": "The message text. May be empty when `images` is not.",
             "title": "Message",
             "type": "string"
           }
@@ -8543,18 +8557,29 @@
       "Session": {
         "description": "An agent session: one conversation with an agent, from trigger to\nterminal state. Returned by `GET /v1/sessions/{id}` and carried by the\nsession stream's `session`/`snapshot` frames \u2014 REST and stream never\ndisagree about what a session looks like.",
         "properties": {
-          "agent": {
-            "$ref": "#/components/schemas/SessionAgent",
-            "description": "The agent that ran: the config the session executed, where that config came from, and any override merged into it."
-          },
           "attribution": {
             "$ref": "#/components/schemas/SessionAttribution",
             "description": "The principal this session is attributed to."
           },
+          "automation": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/SessionAutomation"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The automation the session was started from, or null for a raw session started with POST /v1/sessions."
+          },
           "budget": {
             "$ref": "#/components/schemas/SessionBudget",
             "description": "The spend budget enforced for this session."
           },
+          "config": {
+            "$ref": "#/components/schemas/SessionConfig",
+            "description": "What the session ran on, frozen when it was created: the harness block, the resolved environment, permissions, skills, output contract, and budget."
+          },
           "context_repository": {
             "anyOf": [
               {
@@ -8579,7 +8604,7 @@
           },
           "environment": {
             "$ref": "#/components/schemas/SessionEnvironment",
-            "description": "The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is inside agent.config.environment."
+            "description": "The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is `config.environment`."
           },
           "exit_status": {
             "anyOf": [
@@ -8680,7 +8705,7 @@
           },
           "source": {
             "$ref": "#/components/schemas/SessionSource",
-            "description": "Where the session came from (e.g. react, manual, api, cli, mention, cron)."
+            "description": "Where the session came from (e.g. react, web, api, cli, mention, cron)."
           },
           "status": {
             "$ref": "#/components/schemas/SessionStatus",
@@ -8737,55 +8762,11 @@
           "status",
           "surface",
           "prompting",
-          "agent"
+          "config"
         ],
         "title": "Session",
         "type": "object"
       },
-      "SessionAgent": {
-        "description": "The agent this session ran: the definition it actually executed, where\nthat definition came from, and the diff that was merged in \u2014 the same\neffective-value-plus-provenance shape `SessionBudget` uses.\n\n`config` is the snapshot frozen when the session was created;\n`automation_id` points at the automation as it exists NOW. They diverge\nlegitimately: a YAML edit after the session started, or any `override`,\nleaves the pointer describing something the session never ran.",
-        "properties": {
-          "automation_id": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Identifier of the automation this session's snapshot was taken from. Null for raw sessions (nothing saved behind them), templates, and built-in agents. Points at the automation as it exists now, which may have changed since.",
-            "title": "Automation Id"
-          },
-          "config": {
-            "$ref": "#/components/schemas/AgentConfig",
-            "description": "The agent definition the session actually ran, frozen when the session was created."
-          },
-          "override": {
-            "anyOf": [
-              {
-                "additionalProperties": true,
-                "type": "object"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "The partial-config override merged into `config` for this session, or null when the config ran unmodified. `config` is the merged result; this is the diff.",
-            "title": "Override"
-          },
-          "source": {
-            "$ref": "#/components/schemas/AgentConfigSource",
-            "description": "How this session's config was chosen."
-          }
-        },
-        "required": [
-          "config",
-          "source"
-        ],
-        "title": "SessionAgent",
-        "type": "object"
-      },
       "SessionAttribution": {
         "description": "The principal a session is attributed to: what kind, its id, and \u2014 when\nthe kind is a GitHub user \u2014 the resolved display snippet.",
         "properties": {
@@ -8827,6 +8808,32 @@
         "title": "SessionAttribution",
         "type": "object"
       },
+      "SessionAutomation": {
+        "description": "The automation this session was started from: the definition frozen\nwhen the session was created, and the saved automation it came from as it\nexists NOW. They diverge legitimately \u2014 a YAML edit after the session\nstarted leaves the pointer describing something the session never ran.",
+        "properties": {
+          "config": {
+            "$ref": "#/components/schemas/AutomationConfig",
+            "description": "The automation definition the session was started from, frozen when the session was created."
+          },
+          "id": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Identifier of the saved automation this session's snapshot was taken from. Null for a routing-file agent, a code-review stage agent, or the built-in mention agent, which have no saved automation behind them. Points at the automation as it exists now, which may have changed since.",
+            "title": "Id"
+          }
+        },
+        "required": [
+          "config"
+        ],
+        "title": "SessionAutomation",
+        "type": "object"
+      },
       "SessionBudget": {
         "description": "The spend budget actually enforced for this session, and which layer of\nthe cascade set it.",
         "properties": {
@@ -8845,6 +8852,78 @@
         "title": "SessionBudget",
         "type": "object"
       },
+      "SessionConfig": {
+        "additionalProperties": false,
+        "description": "What one session runs on: the harness block(s), where it runs, what it\nmay touch, its skills, its exit contract, and its spend cap. Every session\nfreezes one of these (`agent_sessions.session_config`); an automation\ncarries one under `session:` (`AutomationConfig.session`); and\n`POST /v1/sessions` is this shape flattened onto the request body, plus the\nrun settings. Nothing in here is an automation's identity or trigger \u2014\nthose belong to `AutomationConfig`.\n\nField order is the canonical key order for `session:` blocks and YAML\nexports: what runs (`claude`/`codex`), where (`environment`), what it may\ntouch (`permissions`), then the rest.",
+        "properties": {
+          "budget": {
+            "$ref": "#/components/schemas/BudgetConfig",
+            "default": {}
+          },
+          "claude": {
+            "$ref": "#/components/schemas/ClaudeConfig",
+            "default": {
+              "system": ""
+            }
+          },
+          "codex": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/CodexConfig"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "environment": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "$ref": "#/components/schemas/EnvironmentConfig"
+              }
+            ],
+            "default": {
+              "compute": {},
+              "hooks": {},
+              "image": {},
+              "mcp_servers": [],
+              "repositories": [],
+              "variables": []
+            },
+            "title": "Environment"
+          },
+          "output": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/OutputConfig"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "permissions": {
+            "$ref": "#/components/schemas/PermissionsConfig",
+            "default": {
+              "ellipsis": true,
+              "github": {}
+            }
+          },
+          "skills": {
+            "default": [],
+            "items": {
+              "$ref": "#/components/schemas/SkillRef"
+            },
+            "title": "Skills",
+            "type": "array"
+          }
+        },
+        "title": "SessionConfig",
+        "type": "object"
+      },
       "SessionCost": {
         "description": "What a session (or one turn of it) cost, in millicents.\n\n`llm` is deliberately NOT called `tokens`: it would sit beside the `tokens`\nobject and read as \"the token count's cost\" rather than \"the cost of the\nLLM leg\".",
         "properties": {
@@ -8882,8 +8961,35 @@
         "title": "SessionCost",
         "type": "object"
       },
+      "SessionDiffResponse": {
+        "description": "A session's uncommitted working-tree changes, one patch per file.",
+        "properties": {
+          "files": {
+            "description": "One unified-diff section per changed file, `diff --git` header included, exactly as git emitted it. Join to the per-file counts on `git.repos[].files` by (full_name, path). Empty when the tree was clean or no capture ran.",
+            "items": {
+              "$ref": "#/components/schemas/SessionGitPatchFile"
+            },
+            "title": "Files",
+            "type": "array"
+          },
+          "omitted_paths": {
+            "description": "Paths whose hunks were dropped to fit the storage cap, so a viewer can name what is missing instead of showing a silently partial diff.",
+            "items": {
+              "type": "string"
+            },
+            "title": "Omitted Paths",
+            "type": "array"
+          }
+        },
+        "required": [
+          "files",
+          "omitted_paths"
+        ],
+        "title": "SessionDiffResponse",
+        "type": "object"
+      },
       "SessionEnvironment": {
-        "description": "The environment this session resolved: which saved environment (as it\nexists now) and how it was chosen. The environment's frozen BODY rides\ninside `agent.config.environment` \u2014 substitution happens before the config\nsnapshot freezes \u2014 so this object is provenance, not payload.",
+        "description": "The environment this session resolved: which saved environment (as it\nexists now) and how it was chosen. The environment's frozen BODY rides\ninside `config.environment` \u2014 substitution happens before the config\nsnapshot freezes \u2014 so this object is provenance, not payload.",
         "properties": {
           "environment_id": {
             "anyOf": [
@@ -8906,7 +9012,7 @@
                 "type": "null"
               }
             ],
-            "description": "How the environment was chosen (request, agent_config, repo_default, account_default, platform_default). Null when the config carried its own inline environment."
+            "description": "How the environment was chosen (request, agent_config, platform_default; repo_default and account_default on sessions from before those ladders were removed). Null when the config carried its own inline environment."
           }
         },
         "title": "SessionEnvironment",
@@ -9007,6 +9113,30 @@
         "title": "SessionGitFile",
         "type": "object"
       },
+      "SessionGitPatchFile": {
+        "description": "One file's patch, split out of `git diff HEAD` at capture time.\n\nStored per file rather than as one blob because that is how a viewer reads\nit: a row per changed file, opened one at a time. Counts and status are NOT\nrepeated here \u2014 they live on the matching SessionGitFile in\n`agent_sessions.output_git`, which rides on every session read, so a surface\nlists the changed files (and their +/\u2212) before it fetches a single hunk. The\njoin key is (full_name, path).\n\n`patch` is the unified-diff section for this file, `diff --git` header\nincluded, exactly as git emitted it.",
+        "properties": {
+          "full_name": {
+            "title": "Full Name",
+            "type": "string"
+          },
+          "patch": {
+            "title": "Patch",
+            "type": "string"
+          },
+          "path": {
+            "title": "Path",
+            "type": "string"
+          }
+        },
+        "required": [
+          "full_name",
+          "path",
+          "patch"
+        ],
+        "title": "SessionGitPatchFile",
+        "type": "object"
+      },
       "SessionGitPr": {
         "description": "A pull request the session opened in this repo, written the moment the\ncreating tool call's result lands (see extract_session_prs.PrCreateWatcher).\nLive PR state (open/merged/closed) is not stored \u2014 it lives on gh_prs,\njoined via `gh_pr_id` (GET /frontend/agents/sessions/{id}/git). The repo is\nthe parent object, so it is not repeated here.",
         "properties": {
@@ -9195,7 +9325,7 @@
             "title": "Author"
           },
           "body": {
-            "description": "The message text.",
+            "description": "The message text, with one `[Image #N]` placeholder per attached image.",
             "title": "Body",
             "type": "string"
           },
@@ -9247,6 +9377,14 @@
             "title": "Id",
             "type": "string"
           },
+          "images": {
+            "description": "Images attached to the message, metadata only: index, media type, size. The bytes go to the model, never over the stream.",
+            "items": {
+              "$ref": "#/components/schemas/SessionMessageImage"
+            },
+            "title": "Images",
+            "type": "array"
+          },
           "sender_attribution_id": {
             "anyOf": [
               {
@@ -9290,6 +9428,33 @@
         "title": "SessionMessage",
         "type": "object"
       },
+      "SessionMessageImage": {
+        "description": "One image on a message, metadata only. `index` is the N in the\n`[Image #N]` placeholder in the message body.",
+        "properties": {
+          "index": {
+            "description": "1-based position: the N in `[Image #N]`.",
+            "title": "Index",
+            "type": "integer"
+          },
+          "media_type": {
+            "description": "The image's MIME type.",
+            "title": "Media Type",
+            "type": "string"
+          },
+          "size_bytes": {
+            "description": "Size of the decoded image, in bytes.",
+            "title": "Size Bytes",
+            "type": "integer"
+          }
+        },
+        "required": [
+          "index",
+          "media_type",
+          "size_bytes"
+        ],
+        "title": "SessionMessageImage",
+        "type": "object"
+      },
       "SessionMessageResponse": {
         "description": "One inbox message.",
         "properties": {
@@ -9491,9 +9656,10 @@
         "type": "object"
       },
       "SessionSource": {
+        "description": "Where a session came from: the credential that started it (web app,\nAPI key, CLI) or the trigger that fired (react, mention, cron). Never\ntaken from a request body.",
         "enum": [
           "react",
-          "manual",
+          "web",
           "api",
           "cli",
           "mention",
@@ -9719,6 +9885,56 @@
         "title": "SessionsListResponse",
         "type": "object"
       },
+      "SettingsRef": {
+        "additionalProperties": false,
+        "description": "A config-declared Claude Code settings.json, resolved at run start and\npassed to `claude --settings <path>`. That is the CLI settings tier \u2014 BELOW\nEllipsis's managed-settings.json floor \u2014 so it customizes behavior (model\npermissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a\nsecurity setting. Lets a team point the cloud agent at the same settings file\nthey already use with Claude Code locally instead of re-encoding it as YAML.",
+        "properties": {
+          "path": {
+            "title": "Path",
+            "type": "string"
+          },
+          "repository": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/RepositoryRef"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "path"
+        ],
+        "title": "SettingsRef",
+        "type": "object"
+      },
+      "SkillRef": {
+        "additionalProperties": false,
+        "description": "One config-declared Claude Code skill: a repository directory containing\na SKILL.md, resolved at run start and installed at the sandbox's personal\nskill level (`~/.claude/skills/<basename(path)>/`). This is how a config\nbrings in skills its cloned repositories don't provide \u2014 cross-repo refs\n(an org-wide skills repo), public third-party repos, and repo-less runs.\nSkills under a cloned repo's own `.claude/skills/` load by themselves and\ndon't need an entry here.",
+        "properties": {
+          "path": {
+            "title": "Path",
+            "type": "string"
+          },
+          "repository": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/RepositoryRef"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "path"
+        ],
+        "title": "SkillRef",
+        "type": "object"
+      },
       "SlackChannel": {
         "description": "One channel in the connected Slack workspace.",
         "properties": {
@@ -9939,7 +10155,7 @@
       },
       "StartAgentSessionRequest": {
         "additionalProperties": false,
-        "description": "Parameters for starting a raw session: where it runs, its first\nmessage, and the run's own settings. Flat, in the AgentConfig vocabulary\n\u2014 a `claude:` or `permissions:` block copied from an agents/ YAML file\npastes in verbatim. There is no automation behind a raw session; to run a\nsaved automation, invoke it with POST /v1/automations/{automation_id}/sessions.\n\nExtra keys are a 422, not silently dropped \u2014 a retired field\n(`from_config_id`, `input`, `ellipsis`, `config_id`) must fail loudly on\nan old client, never no-op.",
+        "description": "Parameters for starting a raw session: where it runs, its first\nmessage, and the run's own settings. Flat, in the AutomationConfig vocabulary\n\u2014 a `claude:` or `permissions:` block copied from an agents/ YAML file\npastes in verbatim. There is no automation behind a raw session; to run a\nsaved automation, invoke it with POST /v1/automations/{automation_id}/sessions.\n\nExtra keys are a 422, not silently dropped \u2014 a retired field\n(`from_config_id`, `input`, `ellipsis`, `config_id`) must fail loudly on\nan old client, never no-op.",
         "properties": {
           "budget": {
             "anyOf": [
@@ -9957,7 +10173,7 @@
           "claude": {
             "anyOf": [
               {
-                "$ref": "#/components/schemas/AgentConfigClaude"
+                "$ref": "#/components/schemas/ClaudeConfig"
               },
               {
                 "type": "null"
@@ -9968,7 +10184,7 @@
           "codex": {
             "anyOf": [
               {
-                "$ref": "#/components/schemas/AgentConfigCodex"
+                "$ref": "#/components/schemas/CodexConfig"
               },
               {
                 "type": "null"
@@ -9982,13 +10198,13 @@
                 "type": "string"
               },
               {
-                "$ref": "#/components/schemas/AgentConfigEnvironment"
+                "$ref": "#/components/schemas/EnvironmentConfig"
               },
               {
                 "type": "null"
               }
             ],
-            "description": "Where the session runs. A STRING is a saved environment's name or `env_...` id. An OBJECT is an inline environment for this session only. Omitted, the session runs in the organization's default environment, else the built-in basic sandbox.",
+            "description": "Where the session runs. A STRING is a saved environment's name or `env_...` id, substituted wholesale. An OBJECT is the whole environment for this session \u2014 `{}` is the bare sandbox. Omitted, the session runs in the built-in basic sandbox \u2014 nothing outside the request picks the environment.",
             "title": "Environment"
           },
           "force_rebuild": {
@@ -9997,6 +10213,14 @@
             "title": "Force Rebuild",
             "type": "boolean"
           },
+          "images": {
+            "description": "Images attached to the first message, base64 inline \u2014 what a paste into Claude Code sends. Each becomes an `[Image #N]` placeholder in the prompt and an image block the model sees on turn 0. Up to 10, 5 MiB each; PNG, JPEG, GIF, or WebP. Claude harness only.",
+            "items": {
+              "$ref": "#/components/schemas/ImageAttachment"
+            },
+            "title": "Images",
+            "type": "array"
+          },
           "interactive": {
             "default": true,
             "description": "Whether the session stays open for messages after its first turn. Set false for a one-shot run that does its job and closes without holding a warm sandbox; a one-shot run must carry a prompt, since nothing can ever be sent to it later. Sessions on the Codex harness are one-shot regardless.",
@@ -10015,7 +10239,7 @@
           "output": {
             "anyOf": [
               {
-                "$ref": "#/components/schemas/AgentConfigOutput"
+                "$ref": "#/components/schemas/OutputConfig"
               },
               {
                 "type": "null"
@@ -10026,7 +10250,7 @@
           "permissions": {
             "anyOf": [
               {
-                "$ref": "#/components/schemas/AgentConfigPermissions"
+                "$ref": "#/components/schemas/PermissionsConfig"
               },
               {
                 "type": "null"
@@ -10046,11 +10270,26 @@
             "description": "The session's first message. Omit it and the session starts idle: the sandbox spins up, the agent waits at the prompt, and the first message you send opens turn 0.",
             "title": "Prompt"
           },
+          "repositories": {
+            "anyOf": [
+              {
+                "items": {
+                  "type": "string"
+                },
+                "type": "array"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Repositories to check out in addition to the environment's own, as `owner/name` or a bare `name` (the account's). Each is added only when the resolved environment does not already have it \u2014 the CLI sends the repository it is standing in this way, whatever environment the session runs in.",
+            "title": "Repositories"
+          },
           "skills": {
             "anyOf": [
               {
                 "items": {
-                  "$ref": "#/components/schemas/AgentConfigSkill"
+                  "$ref": "#/components/schemas/SkillRef"
                 },
                 "type": "array"
               },
@@ -10143,14 +10382,38 @@
           }
         },
         "required": [
-          "device_code",
-          "user_code",
-          "verification_uri",
-          "verification_uri_complete",
-          "interval",
-          "expires_in"
+          "device_code",
+          "user_code",
+          "verification_uri",
+          "verification_uri_complete",
+          "interval",
+          "expires_in"
+        ],
+        "title": "StartCliAuthResponse",
+        "type": "object"
+      },
+      "SystemFileRef": {
+        "additionalProperties": false,
+        "properties": {
+          "file": {
+            "title": "File",
+            "type": "string"
+          },
+          "repository": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/RepositoryRef"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "file"
         ],
-        "title": "StartCliAuthResponse",
+        "title": "SystemFileRef",
         "type": "object"
       },
       "TokensInfo": {
@@ -10223,7 +10486,7 @@
         "description": "A replacement definition for an automation managed through the API.",
         "properties": {
           "automation": {
-            "$ref": "#/components/schemas/AgentConfig",
+            "$ref": "#/components/schemas/AutomationConfig",
             "description": "The automation's new definition. Replaces the previous one wholesale \u2014 this is not a partial update."
           }
         },
@@ -10237,7 +10500,7 @@
         "description": "A replacement definition for an environment managed through the API.",
         "properties": {
           "environment": {
-            "$ref": "#/components/schemas/EnvironmentConfig",
+            "$ref": "#/components/schemas/EnvironmentDocument",
             "description": "The environment's new definition. Replaces the previous one wholesale \u2014 this is not a partial update."
           }
         },
@@ -12171,6 +12434,101 @@
         "x-ellipsis-sdk-method": "automations.link"
       }
     },
+    "/v1/automations/{automation_id}/metrics": {
+      "get": {
+        "description": "Return an automation's session distribution and trailing spend,\nby id or by name.\n\n`samples` carries one entry per finished session (duration, cost,\ntokens) for distributions; `spend_windows` carries what the\nautomation's sessions cost over the last 1, 7, and 28 days against\nits budget for each window.",
+        "operationId": "get_automation_metrics",
+        "parameters": [
+          {
+            "in": "path",
+            "name": "automation_id",
+            "required": true,
+            "schema": {
+              "title": "Automation Id",
+              "type": "string"
+            }
+          },
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AutomationMetricsResponse"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "No such automation in your account."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Get Automation Metrics",
+        "tags": [
+          "v1"
+        ],
+        "x-ellipsis-sdk-method": "automations.metrics"
+      }
+    },
     "/v1/automations/{automation_id}/sessions": {
       "post": {
         "description": "Invoke an automation.\n\nRuns the automation exactly as defined \u2014 its persona, model,\nenvironment, permissions, skills, and budget bind \u2014 and returns\nthe session it started. The body carries only what a caller may\nsupply: the typed `input` its schema demands, an optional tighter\n`budget`, and `metadata`. For a different persona or environment,\nstart a raw session with POST /v1/sessions instead.",
@@ -14597,71 +14955,90 @@
     },
     "/v1/reviews": {
       "get": {
-        "description": "List code reviews, newest first.\n\n`findings` is omitted (counters only).\n\nWebhook-created reviews appear here too, so this answers \"show\nme every review on this PR\".",
+        "description": "List code reviews, newest first.\n\n`findings` and `configuration` are omitted (counters only). Each\nfilter is a set: repeat `repository`, `pull_request_number`, or\n`status` to match any of several values. `start` and `end` bound\nthe review's creation time.\n\nWebhook-created reviews appear here too, so this answers \"show\nme every review on this PR\".",
         "operationId": "list_reviews",
         "parameters": [
           {
+            "description": "Only reviews on these repositories, each as owner/name. Repeat the parameter for several.",
             "in": "query",
-            "name": "owner",
+            "name": "repository",
             "required": false,
             "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "Owner"
+              "default": [],
+              "description": "Only reviews on these repositories, each as owner/name. Repeat the parameter for several.",
+              "items": {
+                "type": "string"
+              },
+              "title": "Repository",
+              "type": "array"
             }
           },
           {
+            "description": "Only reviews on these pull request numbers. Repeat the parameter for several.",
             "in": "query",
-            "name": "repo",
+            "name": "pull_request_number",
             "required": false,
             "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "Repo"
+              "default": [],
+              "description": "Only reviews on these pull request numbers. Repeat the parameter for several.",
+              "items": {
+                "type": "integer"
+              },
+              "title": "Pull Request Number",
+              "type": "array"
             }
           },
           {
+            "description": "Only reviews in these statuses. Repeat the parameter for several.",
             "in": "query",
-            "name": "pull_request_number",
+            "name": "status",
+            "required": false,
+            "schema": {
+              "default": [],
+              "description": "Only reviews in these statuses. Repeat the parameter for several.",
+              "items": {
+                "$ref": "#/components/schemas/CodeReviewRunStatus"
+              },
+              "title": "Status",
+              "type": "array"
+            }
+          },
+          {
+            "description": "Only reviews created at or after this time.",
+            "in": "query",
+            "name": "start",
             "required": false,
             "schema": {
               "anyOf": [
                 {
-                  "type": "integer"
+                  "format": "date-time",
+                  "type": "string"
                 },
                 {
                   "type": "null"
                 }
               ],
-              "title": "Pull Request Number"
+              "description": "Only reviews created at or after this time.",
+              "title": "Start"
             }
           },
           {
+            "description": "Only reviews created at or before this time.",
             "in": "query",
-            "name": "status",
+            "name": "end",
             "required": false,
             "schema": {
               "anyOf": [
                 {
-                  "$ref": "#/components/schemas/CodeReviewRunStatus"
+                  "format": "date-time",
+                  "type": "string"
                 },
                 {
                   "type": "null"
                 }
               ],
-              "title": "Status"
+              "description": "Only reviews created at or before this time.",
+              "title": "End"
             }
           },
           {
@@ -14728,7 +15105,7 @@
                 }
               }
             },
-            "description": "Filtering by repository requires both owner and repo (and pull_request_number requires them too)."
+            "description": "A `repository` value is not of the form owner/name."
           },
           "401": {
             "content": {
@@ -14758,7 +15135,7 @@
                 }
               }
             },
-            "description": "The repository was not found in your account."
+            "description": "A `repository` was not found in your account."
           },
           "422": {
             "content": {
@@ -14783,7 +15160,7 @@
         "x-ellipsis-sdk-method": "reviews.list"
       },
       "post": {
-        "description": "Run a code review on demand.\n\nReviews an existing PR or a pushed branch (for a branch, the\nplatform finds or creates a draft PR for it, since a code\nreview is structurally about a PR).\n\nA review is one pipeline run over one commit range, with one\nagent session per stage: `review.id` is the run id, and\n`stages[].session_id` is where a client streams\n(/sessions/{id}/stream on a stage session), since the review\nitself is a pipeline rather than one process.",
+        "description": "Run a code review on demand.\n\nReviews an open pull request. Which pipeline runs is not a\nparameter: it resolves from the repository's files exactly as\nit does for a push, so an on-demand review never disagrees with\nthe automatic one.\n\nA review is one pipeline run over one commit range, with one\nagent session per stage: `review.id` is the run id, and\n`stages[].session_id` is where a client streams\n(/sessions/{id}/stream on a stage session), since the review\nitself is a pipeline rather than one process.",
         "operationId": "create_review",
         "parameters": [
           {
@@ -15479,7 +15856,7 @@
         "x-ellipsis-sdk-method": "sessions.list"
       },
       "post": {
-        "description": "Start a cloud agent session.\n\nThe daily driver: a prompt, optionally where to run it\n(`environment`) and the run's own settings, in the AgentConfig\nvocabulary. Anything omitted comes from the organization's\nsettings \u2014 default model, default environment, budget \u2014 so\n`{\"prompt\": \"...\"}` alone is a complete request. `prompt` is the\nfirst message; omit it and the session starts idle, waiting for\none. 400 when `interactive` is false and there is no prompt, or\nwhen `budget` exceeds the organization's per-session ceiling. To\nrun a saved automation, use POST /v1/automations/{automation_id}/sessions.",
+        "description": "Start a cloud agent session.\n\nThe daily driver: a prompt, optionally where to run it\n(`environment`) and the run's own settings, in the AutomationConfig\nvocabulary. What you send is what runs: omit `environment` and the\nsession runs in the built-in basic sandbox. A missing model or\nbudget comes from the organization's settings, so\n`{\"prompt\": \"...\"}` alone is a complete request. `prompt` is the\nfirst message; omit it and the session starts idle, waiting for\none. 400 when `interactive` is false and there is no prompt, or\nwhen `budget` exceeds the organization's per-session ceiling. To\nrun a saved automation, use POST /v1/automations/{automation_id}/sessions.",
         "operationId": "start_agent_session",
         "parameters": [
           {
@@ -15528,7 +15905,7 @@
                 }
               }
             },
-            "description": "The request is incompatible with itself (a one-shot run with no prompt, or both `claude` and `codex`), its keys produce an invalid config, or `budget` exceeds the organization's per-session ceiling."
+            "description": "The request is incompatible with itself (a one-shot run with no prompt, both `claude` and `codex`, or images on the Codex harness), an image is invalid or over the limit, its keys produce an invalid config, or `budget` exceeds the organization's per-session ceiling."
           },
           "401": {
             "content": {
@@ -15678,6 +16055,101 @@
         "x-ellipsis-sdk-method": "sessions.get"
       }
     },
+    "/v1/sessions/{session_id}/diff": {
+      "get": {
+        "description": "Return the session's uncommitted changes as a patch.\n\nOne unified-diff section per changed file, captured from the\nsandbox's working tree when the session ended. The per-file\ncounts ride on the session itself (`git.repos[].files`); this\nis the text behind them. Empty when the tree was clean. A\nsandbox token may read only its own session's diff.",
+        "operationId": "get_agent_session_diff",
+        "parameters": [
+          {
+            "in": "path",
+            "name": "session_id",
+            "required": true,
+            "schema": {
+              "title": "Session Id",
+              "type": "string"
+            }
+          },
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SessionDiffResponse"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "No such session in your account."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Get Agent Session Diff",
+        "tags": [
+          "v1"
+        ],
+        "x-ellipsis-sdk-method": "sessions.diff"
+      }
+    },
     "/v1/sessions/{session_id}/export": {
       "get": {
         "description": "Export the complete session history.\n\nThe complete, ordered history of the session (agent output, tool calls, thinking,\nlifecycle events, sandbox output, message events) as an ordered\nmanifest of presigned segment URLs.\n\nSegments are gzip members: download in order and concatenate\nfor one file. The JSON API never carries the bytes (same\ntwo-step as files). /records is the paged live view of the\nsame data.",
@@ -15833,7 +16305,7 @@
                 }
               }
             },
-            "description": "The message is empty."
+            "description": "The message is empty (no text and no images), an image is invalid or over the limit, or the session runs on the Codex harness (images are Claude-only)."
           },
           "401": {
             "content": {
@@ -16345,7 +16817,7 @@
     },
     "/v1/settings/organization": {
       "get": {
-        "description": "Get the organization settings.\n\nThe default model and default environment every session falls\nback to when neither its request nor its automation names one,\nand the per-session budget ceiling no session may exceed.",
+        "description": "Get the organization settings.\n\nThe default model every session falls back to when neither its\nrequest nor its automation names one, and the per-session budget\nceiling no session may exceed.",
         "operationId": "get_organization_settings",
         "parameters": [
           {
@@ -16419,7 +16891,7 @@
         "x-ellipsis-sdk-method": "settings.organization.get"
       },
       "put": {
-        "description": "Set the organization settings.\n\nReplaces all three: `default_model` accepts an alias or canonical\nid and is stored canonical; `default_environment` accepts a name\nor `env_` id and is stored as the id; `budget_ceiling.session` is\nin US dollars, at most the platform ceiling. Null clears each.\nRefused for sandbox tokens (potentially prompt-injected code must\nnot repoint the organization's defaults).",
+        "description": "Set the organization settings.\n\nReplaces both: `default_model` accepts an alias or canonical id\nand is stored canonical; `budget_ceiling.session` is in US\ndollars, at most the platform ceiling. Null clears each.\nRefused for sandbox tokens (potentially prompt-injected code must\nnot repoint the organization's defaults).",
         "operationId": "put_organization_settings",
         "parameters": [
           {
@@ -16490,16 +16962,6 @@
             },
             "description": "The credential may not perform this action, or the account is blocked."
           },
-          "404": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The default environment does not exist in your account."
-          },
           "422": {
             "content": {
               "application/json": {