@ellipsis-dev/sdk 0.28.0 → 0.30.0

package/schema/collection_frames.schema.json

@@ -1,24 +1,14 @@
 {
   "$defs": {
-    "AttributionType": {
-      "enum": [
-        "github_user",
-        "linear_user",
-        "slack_user",
-        "api_key"
-      ],
-      "title": "AttributionType",
-      "type": "string"
-    },
-    "Automation": {
-      "description": "An automation: a saved agent definition that runs on its trigger or\nwhen invoked, plus where it syncs from and the state of that sync.",
+    "Agent": {
+      "description": "An agent: a saved agent definition that runs on its trigger or\nwhen invoked, plus where it syncs from and the state of that sync.",
       "properties": {
         "config": {
-          "$ref": "#/$defs/AutomationConfig",
-          "description": "The automation definition itself, in the same schema as its YAML file: identity, trigger, input contract, and the session block."
+          "$ref": "#/$defs/AgentConfig",
+          "description": "The agent definition itself, in the same schema as its YAML file: identity, trigger, input contract, and the session block."
         },
         "created_at": {
-          "description": "When the automation was created.",
+          "description": "When the agent was created.",
           "format": "date-time",
           "title": "Created At",
           "type": "string"
@@ -46,10 +36,10 @@
             }
           ],
           "default": null,
-          "description": "The GitHub account that last edited the automation, when the edit came from a known user."
+          "description": "The GitHub account that last edited the agent, when the edit came from a known user."
         },
         "id": {
-          "description": "Unique identifier of the automation.",
+          "description": "Unique identifier of the agent.",
           "title": "Id",
           "type": "string"
         },
@@ -77,7 +67,7 @@
             }
           ],
           "default": null,
-          "description": "The most recent session this automation started, or null if it has never run.",
+          "description": "The most recent session this agent started, or null if it has never run.",
           "title": "Last Session Id"
         },
         "last_sync_error": {
@@ -90,7 +80,7 @@
             }
           ],
           "default": null,
-          "description": "The parse or validation error from the most recent sync attempt, or null when it succeeded. A non-null value means the automation is not running the YAML currently on the branch.",
+          "description": "The parse or validation error from the most recent sync attempt, or null when it succeeded. A non-null value means the agent is not running the YAML currently on the branch.",
           "title": "Last Sync Error"
         },
         "last_synced_commit_sha": {
@@ -103,12 +93,12 @@
             }
           ],
           "default": null,
-          "description": "The last commit the automation was synced from.",
+          "description": "The last commit the agent was synced from.",
           "title": "Last Synced Commit Sha"
         },
         "managed_by": {
           "$ref": "#/$defs/ConfigManagedBy",
-          "description": "Which writer owns this automation. \"github\" automations are defined by a file in a repository and are changed by editing that file; \"api\" automations have no file and are changed through this API."
+          "description": "Which writer owns this agent. \"github\" agents are defined by a file in a repository and are changed by editing that file; \"api\" agents have no file and are changed through this API."
         },
         "name": {
           "anyOf": [
@@ -120,7 +110,7 @@
             }
           ],
           "default": null,
-          "description": "The automation's account-unique addressable name (a slug of its display name); usable anywhere an automation is referenced, interchangeably with the id.",
+          "description": "The agent's account-unique addressable name (a slug of its display name); usable anywhere an agent is referenced, interchangeably with the id.",
           "title": "Name"
         },
         "pending_pull_request_url": {
@@ -133,7 +123,7 @@
             }
           ],
           "default": null,
-          "description": "The open pull request that adds this automation's file. Non-null means the automation is not live yet: it starts running once the pull request merges and syncs.",
+          "description": "The open pull request that adds this agent's file. Non-null means the agent is not live yet: it starts running once the pull request merges and syncs.",
           "title": "Pending Pull Request Url"
         },
         "sha": {
@@ -151,10 +141,10 @@
             }
           ],
           "default": null,
-          "description": "The repository, path, and branch the automation syncs from. Null only transiently, before the creating pull request's file lands on the branch."
+          "description": "The repository, path, and branch the agent syncs from. Null only transiently, before the creating pull request's file lands on the branch."
         },
         "updated_at": {
-          "description": "When the automation was last updated.",
+          "description": "When the agent was last updated.",
           "format": "date-time",
           "title": "Updated At",
           "type": "string"
@@ -177,25 +167,15 @@
         "source_details",
         "updated_at"
       ],
-      "title": "Automation",
+      "title": "Agent",
       "type": "object"
     },
-    "AutomationConfig": {
+    "AgentConfig": {
       "additionalProperties": false,
-      "description": "A saved automation, as written in its YAML file: identity\n(`ellipsis`), when it runs (`trigger`), what goes in (`input`), and the\n`session:` block every session it starts is frozen from. Field order is\nthe canonical key order for files and `to_yaml` exports.",
+      "description": "A saved agent, as written in its YAML file: identity\n(`ellipsis`), when it runs (`trigger`), what goes in (`input`), and the\n`session:` block every session it starts is frozen from. Field order is\nthe canonical key order for files and `to_yaml` exports.",
       "properties": {
         "ellipsis": {
-          "$ref": "#/$defs/AutomationIdentity",
-          "default": {
-            "description": null,
-            "enabled": true,
-            "metadata": {
-              "annotations": {},
-              "labels": []
-            },
-            "name": null,
-            "version": "v1"
-          }
+          "$ref": "#/$defs/AgentIdentity"
         },
         "input": {
           "anyOf": [
@@ -244,12 +224,12 @@
         "session",
         "trigger"
       ],
-      "title": "AutomationConfig",
+      "title": "AgentConfig",
       "type": "object"
     },
-    "AutomationIdentity": {
+    "AgentIdentity": {
       "additionalProperties": false,
-      "description": "The Ellipsis product namespace for a config file: which schema this is\n(`version`), the human-facing identity (`name`/`description`), freeform\norganizational `metadata`, and whether the agent is `enabled`. The\npresence of a top-level `ellipsis:` mapping is what marks a YAML file as\nan Ellipsis automation (vs arbitrary YAML that merely lives under a\nconfig directory) \u2014 see `yaml_is_ellipsis_config`.\n\n`enabled` is agent behavior, not freeform metadata, so it stays inside\nthe config `sha` (only `metadata` is sha-excluded). Whether a session\naccepts messages is a per-run choice (POST /v1/sessions `interactive`),\nnot a config one.",
+      "description": "The Ellipsis product namespace for a config file: which schema this is\n(`version`), the human-facing identity (`name`/`description`), freeform\norganizational `metadata`, and whether the agent is `enabled`. The\npresence of a top-level `ellipsis:` mapping is what marks a YAML file as\nan Ellipsis agent (vs arbitrary YAML that merely lives under a\nconfig directory) \u2014 see `yaml_is_ellipsis_config`.\n\n`enabled` is agent behavior, not freeform metadata, so it stays inside\nthe config `sha` (only `metadata` is sha-excluded). Whether a session\naccepts messages is a per-run choice (POST /v1/sessions `interactive`),\nnot a config one.",
       "properties": {
         "description": {
           "anyOf": [
@@ -268,6 +248,11 @@
           "title": "Enabled",
           "type": "boolean"
         },
+        "kind": {
+          "const": "agent",
+          "title": "Kind",
+          "type": "string"
+        },
         "metadata": {
           "$ref": "#/$defs/ConfigMetadata",
           "default": {
@@ -296,36 +281,47 @@
       "required": [
         "description",
         "enabled",
+        "kind",
         "metadata",
         "name",
         "version"
       ],
-      "title": "AutomationIdentity",
+      "title": "AgentIdentity",
       "type": "object"
     },
-    "AutomationListStreamMessage": {
+    "AgentListStreamMessage": {
       "properties": {
-        "automations": {
+        "agents": {
           "items": {
-            "$ref": "#/$defs/Automation"
+            "$ref": "#/$defs/Agent"
           },
-          "title": "Automations",
+          "title": "Agents",
           "type": "array"
         },
         "type": {
-          "const": "automations",
-          "default": "automations",
+          "const": "agents",
+          "default": "agents",
           "title": "Type",
           "type": "string"
         }
       },
       "required": [
-        "automations",
+        "agents",
         "type"
       ],
-      "title": "AutomationListStreamMessage",
+      "title": "AgentListStreamMessage",
       "type": "object"
     },
+    "AttributionType": {
+      "enum": [
+        "github_user",
+        "linear_user",
+        "slack_user",
+        "api_key"
+      ],
+      "title": "AttributionType",
+      "type": "string"
+    },
     "BudgetConfig": {
       "additionalProperties": false,
       "properties": {
@@ -356,6 +352,7 @@
         "session": {
           "anyOf": [
             {
+              "exclusiveMinimum": 0,
               "type": "number"
             },
             {
@@ -387,17 +384,6 @@
       "title": "BudgetConfig",
       "type": "object"
     },
-    "BudgetSource": {
-      "description": "Which layer actually determined the enforced budget.\n\nNot derivable from the run row alone (the run does not store the config\ncents or the account default), so we persist it for the UI / audit.",
-      "enum": [
-        "system",
-        "account",
-        "config",
-        "run"
-      ],
-      "title": "BudgetSource",
-      "type": "string"
-    },
     "ClaudeConfig": {
       "additionalProperties": false,
       "description": "Native Claude Code options for an explicitly selected harness.",
@@ -450,6 +436,19 @@
           "default": null,
           "title": "Model"
         },
+        "prompt": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The initial user message, passed verbatim. Omit to start an interactive session idle.",
+          "title": "Prompt"
+        },
         "settings": {
           "anyOf": [
             {
@@ -460,11 +459,6 @@
             }
           ],
           "default": null
-        },
-        "type": {
-          "const": "claude_code",
-          "title": "Type",
-          "type": "string"
         }
       },
       "required": [
@@ -472,8 +466,8 @@
         "fallback_model",
         "max_turns",
         "model",
-        "settings",
-        "type"
+        "prompt",
+        "settings"
       ],
       "title": "ClaudeConfig",
       "type": "object"
@@ -499,16 +493,24 @@
           "title": "Model",
           "type": "string"
         },
-        "type": {
-          "const": "codex",
-          "title": "Type",
-          "type": "string"
+        "prompt": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The initial user message, passed verbatim. Omit to start an interactive session idle.",
+          "title": "Prompt"
         }
       },
       "required": [
         "effort",
         "model",
-        "type"
+        "prompt"
       ],
       "title": "CodexConfig",
       "type": "object"
@@ -542,7 +544,7 @@
     },
     "ComputeConfig": {
       "additionalProperties": false,
-      "description": "Sandbox compute sizing. Every field is optional; None inherits the\nplatform default (2 vCPU / 4096 MiB / 3600s \u2014 see DEFAULT_SANDBOX_* in\nmodels/ellipsis/sandboxes/sandbox.py). A resolved value outside the platform\nbounds fails validation loudly (a sync error on the config) rather than\nbeing clamped silently.\n\n`memory` and `timeout` each accept a shorthand string (\"8GB\", \"30m\") or an\nexplicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /\n`timeout_seconds` properties resolve either form to the canonical integer\nthe sandbox driver consumes.\n\n`timeout` is the max wall-clock the agent may run before its execution is\nstopped, capped at 1h (MAX_SANDBOX_TIMEOUT_SECONDS \u2014 equal to the default, so\ntoday the knob only shortens a session; the cap matches the 1-hour validity\nof the sandbox's GitHub token). The worker's lease/visibility heartbeat\nceiling is derived from that cap, so a run at the max stays owned by its\nworker for its whole life.\n\nCompute currently uses a temporary flat one-cent amount per allocated\nexecution, subject to the account's existing free-compute exemptions.",
+      "description": "Sandbox compute sizing. Every field is optional; None inherits the\nplatform default (2 vCPU / 4096 MiB / 3600s \u2014 see DEFAULT_SANDBOX_* in\nmodels/ellipsis/vms/vm_execution.py). A resolved value outside the platform\nbounds fails validation loudly (a sync error on the config) rather than\nbeing clamped silently.\n\n`memory` and `timeout` each accept a shorthand string (\"8GB\", \"30m\") or an\nexplicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /\n`timeout_seconds` properties resolve either form to the canonical integer\nthe sandbox driver consumes.\n\n`timeout` is the max wall-clock the agent may run before its execution is\nstopped, capped at 1h (MAX_SANDBOX_TIMEOUT_SECONDS \u2014 equal to the default, so\ntoday the knob only shortens a session; the cap matches the 1-hour validity\nof the sandbox's GitHub token). The worker's lease/visibility heartbeat\nceiling is derived from that cap, so a run at the max stays owned by its\nworker for its whole life.\n\nCompute currently uses a temporary flat one-cent amount per allocated\nexecution, subject to the account's existing free-compute exemptions.",
       "properties": {
         "cpu": {
           "anyOf": [
@@ -633,6 +635,14 @@
       "title": "ConfigMetadata",
       "type": "object"
     },
+    "ConversationState": {
+      "enum": [
+        "open",
+        "closed"
+      ],
+      "title": "ConversationState",
+      "type": "string"
+    },
     "CronTrigger": {
       "additionalProperties": false,
       "properties": {
@@ -778,9 +788,43 @@
       "title": "EllipsisPermissions",
       "type": "object"
     },
+    "EnvironmentBaseBuild": {
+      "additionalProperties": false,
+      "description": "Create a reusable base, optionally using only selected repository files.",
+      "properties": {
+        "inputs": {
+          "anyOf": [
+            {
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Exact files relative to /sandbox, including the repository name. Only these files are available during build_base and their contents and modes determine reuse. Omit to use all repositories and invalidate on any source change; [] means no repository files.",
+          "title": "Inputs"
+        },
+        "run": {
+          "description": "Shell script to run in /sandbox.",
+          "minLength": 1,
+          "title": "Run",
+          "type": "string"
+        }
+      },
+      "required": [
+        "inputs",
+        "run"
+      ],
+      "title": "EnvironmentBaseBuild",
+      "type": "object"
+    },
     "EnvironmentConfig": {
       "additionalProperties": false,
-      "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, how its `image` is customized, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
+      "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
       "properties": {
         "compute": {
           "$ref": "#/$defs/ComputeConfig",
@@ -793,17 +837,13 @@
         "hooks": {
           "$ref": "#/$defs/EnvironmentHooks",
           "default": {
+            "after_checkout": null,
+            "before_start": null,
+            "build_base": null,
             "post_clone": null,
             "post_start": null
           }
         },
-        "image": {
-          "$ref": "#/$defs/EnvironmentImage",
-          "default": {
-            "dockerfile_append": null,
-            "setup": null
-          }
-        },
         "mcp_servers": {
           "default": [],
           "items": {
@@ -845,7 +885,6 @@
       "required": [
         "compute",
         "hooks",
-        "image",
         "mcp_servers",
         "repositories",
         "variables"
@@ -855,10 +894,13 @@
     },
     "EnvironmentHooks": {
       "additionalProperties": false,
-      "description": "Shell scripts run at points in the sandbox lifecycle, each as the sandbox\nuser with the sandbox's environment variables available. A non-zero exit\nfails the run (exit_status = LIFECYCLE_HOOK_FAILED) and is not retried.\n\n`post_start` runs after the container starts, before any repo is cloned \u2014\nrepo-independent setup (authenticate a CLI, e.g. `doppler setup`). On Freestyle\nthe repo is baked into the image so it is incidentally present, but\n`post_start` must not depend on repo contents (that's `post_clone`).\n\n`post_clone` runs after all repos are cloned/checked out, before the agent \u2014\nrepo-dependent setup (`pip install -r requirements.txt`, codegen).\n\nHooks run on every run and their output is never cached. A dependency\ninstall whose result should be reused across runs belongs in `image.setup`\n(baked into the cached image) instead; keep hooks for per-run work \u2014 e.g.\nanything that touches run-scoped credentials.",
+      "description": "Environment lifecycle scripts, in order: build_base, after_checkout,\nbefore_start. The first two produce reusable snapshots; before_start runs\nbefore an agent starts or resumes its session. Scripts run as the sandbox\nuser in /sandbox. A nonzero exit fails the session.\n\nLegacy post_start/post_clone scripts remain supported for existing configs;\nboth run after workspace preparation, before the agent starts or resumes.\nThey cannot be combined with the new lifecycle fields.",
       "properties": {
-        "post_clone": {
+        "after_checkout": {
           "anyOf": [
+            {
+              "$ref": "#/$defs/EnvironmentScript"
+            },
             {
               "type": "string"
             },
@@ -867,10 +909,14 @@
             }
           ],
           "default": null,
-          "title": "Post Clone"
+          "description": "Prepare the requested source revision after Ellipsis checks out all repositories, before saving the prepared sandbox. Skipped when that prepared sandbox is reused.",
+          "title": "After Checkout"
         },
-        "post_start": {
+        "before_start": {
           "anyOf": [
+            {
+              "$ref": "#/$defs/EnvironmentScript"
+            },
             {
               "type": "string"
             },
@@ -879,21 +925,26 @@
             }
           ],
           "default": null,
-          "title": "Post Start"
-        }
-      },
-      "required": [
-        "post_clone",
-        "post_start"
-      ],
-      "title": "EnvironmentHooks",
-      "type": "object"
-    },
-    "EnvironmentImage": {
-      "additionalProperties": false,
-      "description": "How to customize the container image the agent runs in. You\ncontribute appended layers (`dockerfile_append`) and a build-time script\n(`setup`) only \u2014 Ellipsis owns FROM / base tooling / entrypoint / user.\nToday only inline bodies are supported; a file reference (resolved at the\nrun's SHA) will come later.\n\nThe split: `dockerfile_append` runs when the image is assembled, before any\nrepo exists \u2014 toolchain installs (a package manager binary, apt packages).\n`setup` runs at image-build time *after* the configured repositories are\nchecked out, and its output is captured by the filesystem snapshot that\nbecomes the cached image \u2014 dependency installs (`poetry install`,\n`npm install`), so later runs start with deps already on disk. Neither runs\nper run; that's `hooks.post_start` / `hooks.post_clone`.",
-      "properties": {
-        "dockerfile_append": {
+          "description": "Run before the agent starts or resumes a session, after the sandbox is ready. This hook is not cached and adds to session startup time.",
+          "title": "Before Start"
+        },
+        "build_base": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/EnvironmentBaseBuild"
+            },
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Build a reusable environment before full checkout. Cached by declared inputs, script, toolchain, resources, and build configuration. A string is shorthand for run with all repositories as inputs.",
+          "title": "Build Base"
+        },
+        "post_clone": {
           "anyOf": [
             {
               "type": "string"
@@ -903,9 +954,10 @@
             }
           ],
           "default": null,
-          "title": "Dockerfile Append"
+          "description": "Legacy session startup script. Use before_start for session setup or after_checkout for cached source preparation.",
+          "title": "Post Clone"
         },
-        "setup": {
+        "post_start": {
           "anyOf": [
             {
               "type": "string"
@@ -915,21 +967,42 @@
             }
           ],
           "default": null,
-          "title": "Setup"
+          "description": "Legacy session startup script. Use before_start in new configurations.",
+          "title": "Post Start"
+        }
+      },
+      "required": [
+        "after_checkout",
+        "before_start",
+        "build_base",
+        "post_clone",
+        "post_start"
+      ],
+      "title": "EnvironmentHooks",
+      "type": "object"
+    },
+    "EnvironmentScript": {
+      "additionalProperties": false,
+      "description": "An inline shell script run as the sandbox user, with /sandbox as cwd.",
+      "properties": {
+        "run": {
+          "description": "Shell script to run in /sandbox.",
+          "minLength": 1,
+          "title": "Run",
+          "type": "string"
         }
       },
       "required": [
-        "dockerfile_append",
-        "setup"
+        "run"
       ],
-      "title": "EnvironmentImage",
+      "title": "EnvironmentScript",
       "type": "object"
     },
     "EnvironmentSource": {
       "description": "How a session's environment was chosen. None (the field is nullable)\nwhen the config carried an inline environment block and no resolution ran \u2014\nan inline environment is not a reference, so there is nothing to record.\n\nNot derivable from the row: `environment_id` says WHICH environment, not\nhow it was chosen, and is null for the built-in basic sandbox.",
       "enum": [
         "request",
-        "automation",
+        "agent",
         "repo_default",
         "account_default",
         "platform_default"
@@ -995,6 +1068,10 @@
               "title": "Include"
             }
           },
+          "required": [
+            "exclude",
+            "include"
+          ],
           "title": "GithubAccountFilter",
           "type": "object"
         },
@@ -1065,6 +1142,57 @@
       "title": "GithubAccountType",
       "type": "string"
     },
+    "GithubIssueEvent": {
+      "properties": {
+        "action": {
+          "$ref": "#/$defs/IssueAction"
+        },
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "number": {
+          "title": "Number",
+          "type": "integer"
+        },
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "title": {
+          "title": "Title",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.issue",
+          "default": "github.issue",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "number",
+        "repository",
+        "title",
+        "type",
+        "url"
+      ],
+      "title": "GithubIssueEvent",
+      "type": "object"
+    },
     "GithubPermissions": {
       "additionalProperties": false,
       "description": "The agent's GitHub access: the scope of the installation token minted for\nits sandbox \u2014 the credential `git`, `gh`, and the GitHub MCP server\nauthenticate with.\n\nBy default the token carries the installation's full permissions on all of\nthe installation's repositories. `permissions` narrows what it may do:\nthe string `read_only` grants read access to contents, issues, metadata and\npull requests; a map requests explicit levels per GitHub App permission\nscope (e.g. `{contents: read, pull_requests: write}`) and may never exceed\nwhat the installation granted. `repositories` scopes the token to exactly\nthe listed repos, by name (they must belong to the installation).\n\nRestriction is enforced by GitHub, not by Ellipsis: the token itself is\nminted with the reduced scope, so nothing running in the sandbox can\nexceed it.",
@@ -1111,114 +1239,194 @@
       "title": "GithubPermissions",
       "type": "object"
     },
-    "GithubSourceDetails": {
-      "description": "Identifies the file a GitHub-sourced automation is synced from.\n\nKeyed on the repository ID (not owner/name) so repository and org renames\ndon't orphan the config; resolve display names from gh_repositories at\nread time.",
-      "properties": {
-        "branch": {
-          "title": "Branch",
-          "type": "string"
-        },
-        "path": {
-          "title": "Path",
-          "type": "string"
-        },
-        "repo_id": {
-          "title": "Repo Id",
-          "type": "integer"
-        }
-      },
-      "required": [
-        "branch",
-        "path",
-        "repo_id"
-      ],
-      "title": "GithubSourceDetails",
-      "type": "object"
-    },
-    "Harness": {
-      "enum": [
-        "claude_code",
-        "codex"
-      ],
-      "title": "Harness",
-      "type": "string"
-    },
-    "HarnessOptions": {
-      "discriminator": {
-        "mapping": {
-          "claude_code": "#/$defs/ClaudeConfig",
-          "codex": "#/$defs/CodexConfig"
-        },
-        "propertyName": "type"
-      },
-      "oneOf": [
-        {
-          "$ref": "#/$defs/ClaudeConfig"
-        },
-        {
-          "$ref": "#/$defs/CodexConfig"
-        }
-      ]
-    },
-    "InputContract": {
-      "additionalProperties": false,
-      "description": "The typed input contract: what goes INTO a session (the trigger is\nwhen it happens; this is what goes in).\n\n`json_schema` types the payload a caller-started session takes\n(`POST /v1/sessions` `input`, validated at the door; required when\ndeclared). It is illegal on a react-triggered agent \u2014 react payloads are\nplatform-shaped (the published surface field sets), not caller-shaped.\n\n`message` is the initial-message template: exact `{{path}}` substitution\nover the caller payload (or, on a react agent, over the surface's\npublished fields), no conditionals/loops/filters. Refs are validated at\ndeploy time against the governing field set (see AutomationConfig's\n`_check_input`).",
+    "GithubPullRequestEvent": {
       "properties": {
-        "json_schema": {
+        "action": {
           "anyOf": [
             {
-              "additionalProperties": true,
-              "type": "object"
+              "$ref": "#/$defs/PullRequestAction"
             },
             {
-              "type": "null"
+              "const": "review_commented",
+              "type": "string"
             }
           ],
-          "default": null,
-          "title": "Json Schema"
+          "title": "Action"
         },
-        "message": {
+        "actor": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/SessionEventActor"
             },
             {
               "type": "null"
             }
           ],
-          "default": null,
-          "title": "Message"
-        }
-      },
-      "required": [
-        "json_schema",
-        "message"
-      ],
-      "title": "InputContract",
-      "type": "object"
-    },
-    "Instructions": {
-      "anyOf": [
-        {
+          "default": null
+        },
+        "branch": {
+          "title": "Branch",
           "type": "string"
         },
-        {
-          "$ref": "#/$defs/SystemFileRef"
+        "number": {
+          "title": "Number",
+          "type": "integer"
         },
-        {
-          "items": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "$ref": "#/$defs/SystemFileRef"
-              }
-            ]
-          },
-          "type": "array"
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "title": {
+          "title": "Title",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.pull_request",
+          "default": "github.pull_request",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
         }
-      ]
+      },
+      "required": [
+        "action",
+        "actor",
+        "branch",
+        "number",
+        "repository",
+        "title",
+        "type",
+        "url"
+      ],
+      "title": "GithubPullRequestEvent",
+      "type": "object"
+    },
+    "GithubPushEvent": {
+      "properties": {
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "after": {
+          "title": "After",
+          "type": "string"
+        },
+        "before": {
+          "title": "Before",
+          "type": "string"
+        },
+        "branch": {
+          "title": "Branch",
+          "type": "string"
+        },
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.push",
+          "default": "github.push",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "actor",
+        "after",
+        "before",
+        "branch",
+        "repository",
+        "type",
+        "url"
+      ],
+      "title": "GithubPushEvent",
+      "type": "object"
+    },
+    "GithubSourceDetails": {
+      "description": "Identifies the file a GitHub-sourced agent is synced from.\n\nKeyed on the repository ID (not owner/name) so repository and org renames\ndon't orphan the config; resolve display names from gh_repositories at\nread time.",
+      "properties": {
+        "branch": {
+          "title": "Branch",
+          "type": "string"
+        },
+        "path": {
+          "title": "Path",
+          "type": "string"
+        },
+        "repo_id": {
+          "title": "Repo Id",
+          "type": "integer"
+        }
+      },
+      "required": [
+        "branch",
+        "path",
+        "repo_id"
+      ],
+      "title": "GithubSourceDetails",
+      "type": "object"
+    },
+    "HandlerService": {
+      "description": "The service whose events a handler responds to.",
+      "enum": [
+        "slack",
+        "github",
+        "linear",
+        "sentry"
+      ],
+      "title": "HandlerService",
+      "type": "string"
+    },
+    "InputContract": {
+      "additionalProperties": false,
+      "description": "The typed input contract: what goes INTO a session (the trigger is\nwhen it happens; this is what goes in).\n\n`json_schema` validates customer data sent as `input` to\n`POST /v1/agents/{id}/sessions` and stored as `session.input`.\nInvocations require input when a schema is declared. React agents\ncannot declare schemas: the platform defines their event payloads.\n\n`message` is the initial-message template: exact `{{path}}` substitution\nover the caller payload (or, on a react agent, over the surface's\npublished fields), no conditionals/loops/filters. Refs are validated at\ndeploy time against the governing field set (see AgentConfig's\n`_check_input`).",
+      "properties": {
+        "json_schema": {
+          "anyOf": [
+            {
+              "additionalProperties": true,
+              "type": "object"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Json Schema"
+        },
+        "message": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Message"
+        }
+      },
+      "required": [
+        "json_schema",
+        "message"
+      ],
+      "title": "InputContract",
+      "type": "object"
     },
     "IssueAction": {
       "enum": [
@@ -1246,6 +1454,74 @@
       "title": "LinearIssueAction",
       "type": "string"
     },
+    "LinearIssueEvent": {
+      "properties": {
+        "action": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/LinearIssueAction"
+            },
+            {
+              "const": "commented",
+              "type": "string"
+            }
+          ],
+          "title": "Action"
+        },
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "identifier": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Identifier"
+        },
+        "number": {
+          "title": "Number",
+          "type": "integer"
+        },
+        "title": {
+          "title": "Title",
+          "type": "string"
+        },
+        "type": {
+          "const": "linear.issue",
+          "default": "linear.issue",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "identifier",
+        "number",
+        "title",
+        "type",
+        "url"
+      ],
+      "title": "LinearIssueEvent",
+      "type": "object"
+    },
     "McpRemoteServer": {
       "additionalProperties": false,
       "description": "A bring-your-own remote MCP server: the harness talks HTTP to `url`.\nNothing runs in the sandbox image. `headers` carry static auth (e.g.\n`Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret\nreferences, resolved at run time from the account's secrets store.",
@@ -1292,7 +1568,7 @@
     },
     "McpStdioServer": {
       "additionalProperties": false,
-      "description": "A bring-your-own stdio MCP server: the harness spawns `command` inside\nthe sandbox and speaks JSON-RPC over its stdin/stdout. The command must be\nrunnable in the sandbox image \u2014 install its runtime via `image.setup` /\n`image.dockerfile_append` if the base image lacks it.\n\n`env` values may embed `${NAME}` references, resolved at run time from the\naccount's secrets store (see `mcp_secret_refs`); everything else is passed\nliterally.",
+      "description": "A bring-your-own stdio MCP server: the harness spawns `command` inside\nthe sandbox and speaks JSON-RPC over its stdin/stdout. The command must be\nrunnable in the sandbox image \u2014 install its runtime via `hooks.build_base` /\n`hooks.after_checkout` if the managed environment lacks it.\n\n`env` values may embed `${NAME}` references, resolved at run time from the\naccount's secrets store (see `mcp_secret_refs`); everything else is passed\nliterally.",
       "properties": {
         "args": {
           "default": [],
@@ -1382,15 +1658,6 @@
       "title": "OutputConfig",
       "type": "object"
     },
-    "ParentKind": {
-      "description": "How a session relates to its predecessor (parent_agent_session_id) \u2014\nthe ONE \"preceded-by\" chain for every predecessor relationship. Routing\nreads this when the distinction matters.\n\nCONTINUATION \u2014 a follow-up in the same conversation surface (e.g. a Slack\nthread reply spawning a fresh session on the same thread).\nRESUME \u2014 a conversation re-hosted on a new box after its sandbox was torn\ndown (interactive platform; later phase).",
-      "enum": [
-        "continuation",
-        "resume"
-      ],
-      "title": "ParentKind",
-      "type": "string"
-    },
     "PermissionsConfig": {
       "additionalProperties": false,
       "description": "What the agent is allowed to touch, per credential the platform mints\ninto its sandbox. Distinct from `environment:`, which is where the agent\nruns; this is what it may do from there.\n\n`ellipsis` scopes the sandbox's Ellipsis API token\n(`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates\nwith). `true` / the string `all` (the default) grant the full sandbox\nceiling \u2014 everything a sandbox token can ever do. A map narrows it per\nresource (see `EllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) \u2014\nsee `GithubPermissions`. GitHub enforces it at mint time.",
@@ -1759,6 +2026,10 @@
               "type": "array"
             }
           },
+          "required": [
+            "exclude",
+            "include"
+          ],
           "title": "RepositoryFilter",
           "type": "object"
         },
@@ -1832,22 +2103,6 @@
       "title": "Resource",
       "type": "string"
     },
-    "RunStatus": {
-      "description": "What the current (or most recent) execution is doing (backs `run`).",
-      "enum": [
-        "scheduled",
-        "starting",
-        "working",
-        "waiting",
-        "done",
-        "failed",
-        "stopped",
-        "cancelled",
-        "retrying"
-      ],
-      "title": "RunStatus",
-      "type": "string"
-    },
     "SandboxCacheTier": {
       "description": "Which image-cache tier a sandbox creation took \u2014 the customer-facing\nnames for `create_sandbox_from_default`'s exact / latest / default tiers.\nRides on `Sandbox.cache_tier` and the sandbox_ready lifecycle record.",
       "enum": [
@@ -1971,237 +2226,10 @@
       "title": "SandboxRepository",
       "type": "object"
     },
-    "SandboxResponse": {
+    "SandboxSnapshotFrame": {
       "properties": {
-        "cache_tier": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/SandboxCacheTier"
-            },
-            {
-              "type": "null"
-            }
-          ]
-        },
-        "cost_sandbox_cpu": {
-          "title": "Cost Sandbox Cpu",
-          "type": "integer"
-        },
-        "cost_sandbox_memory": {
-          "title": "Cost Sandbox Memory",
-          "type": "integer"
-        },
-        "cpu": {
-          "title": "Cpu",
-          "type": "number"
-        },
-        "dockerfile": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Dockerfile"
-        },
-        "encrypted_ports": {
-          "items": {
-            "type": "integer"
-          },
-          "title": "Encrypted Ports",
-          "type": "array"
-        },
-        "environment_variable_keys": {
-          "items": {
-            "type": "string"
-          },
-          "title": "Environment Variable Keys",
-          "type": "array"
-        },
-        "failed_at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Failed At"
-        },
-        "id": {
-          "title": "Id",
-          "type": "string"
-        },
-        "image_setup": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Image Setup"
-        },
-        "memory_mib": {
-          "title": "Memory Mib",
-          "type": "integer"
-        },
-        "phase_timings": {
-          "additionalProperties": {
-            "type": "number"
-          },
-          "title": "Phase Timings",
-          "type": "object"
-        },
-        "post_clone": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Post Clone"
-        },
-        "post_start": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Post Start"
-        },
-        "repositories": {
-          "items": {
-            "$ref": "#/$defs/SandboxRepository"
-          },
-          "title": "Repositories",
-          "type": "array"
-        },
-        "running_at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Running At"
-        },
-        "scheduled_at": {
-          "format": "date-time",
-          "title": "Scheduled At",
-          "type": "string"
-        },
-        "source": {
-          "$ref": "#/$defs/SandboxSource"
-        },
-        "source_session_id": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Source Session Id"
-        },
-        "status": {
-          "$ref": "#/$defs/SandboxStatus"
-        },
-        "terminated_at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Terminated At"
-        },
-        "terminating_at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Terminating At"
-        },
-        "timeout_seconds": {
-          "title": "Timeout Seconds",
-          "type": "integer"
-        },
-        "tunnels": {
-          "items": {
-            "$ref": "#/$defs/SandboxPort"
-          },
-          "title": "Tunnels",
-          "type": "array"
-        },
-        "type": {
-          "$ref": "#/$defs/SandboxType"
-        },
-        "unencrypted_ports": {
-          "items": {
-            "type": "integer"
-          },
-          "title": "Unencrypted Ports",
-          "type": "array"
-        }
-      },
-      "required": [
-        "cache_tier",
-        "cost_sandbox_cpu",
-        "cost_sandbox_memory",
-        "cpu",
-        "dockerfile",
-        "encrypted_ports",
-        "environment_variable_keys",
-        "failed_at",
-        "id",
-        "image_setup",
-        "memory_mib",
-        "phase_timings",
-        "post_clone",
-        "post_start",
-        "repositories",
-        "running_at",
-        "scheduled_at",
-        "source",
-        "source_session_id",
-        "status",
-        "terminated_at",
-        "terminating_at",
-        "timeout_seconds",
-        "tunnels",
-        "type",
-        "unencrypted_ports"
-      ],
-      "title": "SandboxResponse",
-      "type": "object"
-    },
-    "SandboxSnapshotFrame": {
-      "properties": {
-        "sandbox": {
-          "$ref": "#/$defs/SandboxResponse"
+        "sandbox": {
+          "$ref": "#/$defs/VMExecutionResponse"
         },
         "type": {
           "const": "snapshot",
@@ -2222,7 +2250,7 @@
         "cli",
         "web_ui",
         "ingest_pull_request_job_run",
-        "agent_session",
+        "session",
         "image_refresh",
         "test",
         "script"
@@ -2253,7 +2281,7 @@
     "SandboxUpdateFrame": {
       "properties": {
         "sandbox": {
-          "$ref": "#/$defs/SandboxResponse"
+          "$ref": "#/$defs/VMExecutionResponse"
         },
         "type": {
           "const": "sandbox",
@@ -2277,111 +2305,59 @@
       "title": "SentryAction",
       "type": "string"
     },
-    "Session": {
-      "description": "An agent session: one conversation with an agent, from trigger to\nterminal state. Returned by `GET /v1/sessions/{id}` and carried by the\nsession stream's `session`/`snapshot` frames \u2014 REST and stream never\ndisagree about what a session looks like.",
+    "SentryAlertEvent": {
       "properties": {
-        "attribution": {
-          "$ref": "#/$defs/SessionAttribution",
-          "description": "The principal this session is attributed to."
-        },
-        "automation": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/SessionAutomation"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "The automation the session was started from, or null for a raw session started with POST /v1/sessions."
-        },
-        "budget": {
-          "$ref": "#/$defs/SessionBudget",
-          "description": "The spend budget enforced for this session."
-        },
-        "config": {
-          "$ref": "#/$defs/SessionConfig",
-          "description": "What the session ran on, frozen when it was created: the harness block, the resolved environment, permissions, skills, output contract, and budget."
+        "action": {
+          "$ref": "#/$defs/SentryAction"
         },
-        "context_repository": {
+        "actor": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/SessionEventActor"
             },
             {
               "type": "null"
             }
           ],
-          "default": null,
-          "description": "The \"owner/name\" repository context the session was started in, if any.",
-          "title": "Context Repository"
-        },
-        "cost": {
-          "$ref": "#/$defs/SessionCost",
-          "description": "What the session cost, in millicents, broken down by leg and carrying its own total."
+          "default": null
         },
-        "created_at": {
-          "description": "When the session was created.",
-          "format": "date-time",
-          "title": "Created At",
+        "organization_slug": {
+          "title": "Organization Slug",
           "type": "string"
         },
-        "environment": {
-          "$ref": "#/$defs/SessionEnvironment",
-          "description": "The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is `config.environment`."
-        },
-        "exit_status": {
+        "project_slug": {
           "anyOf": [
             {
-              "$ref": "#/$defs/SessionExitStatus"
+              "type": "string"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "How the session ended; null until it is terminal."
+          "title": "Project Slug"
         },
-        "git": {
+        "title": {
           "anyOf": [
             {
-              "$ref": "#/$defs/SessionGit"
+              "type": "string"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "What the session did to git, one entry per repository in its workspace: the commit and branch it sits on, per-file line counts for its uncommitted changes, and the pull requests it opened. Null if nothing was ever captured."
-        },
-        "harness": {
-          "$ref": "#/$defs/Harness",
-          "description": "The coding-agent harness the session runs on."
+          "title": "Title"
         },
-        "id": {
-          "description": "Unique identifier of the session.",
-          "title": "Id",
+        "type": {
+          "const": "sentry.alert",
+          "default": "sentry.alert",
+          "title": "Type",
           "type": "string"
         },
-        "last_activity_at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "When the session last showed activity.",
-          "title": "Last Activity At"
-        },
-        "last_message_at": {
+        "url": {
           "anyOf": [
             {
-              "format": "date-time",
               "type": "string"
             },
             {
@@ -2389,148 +2365,343 @@
             }
           ],
           "default": null,
-          "description": "When the session last received a message.",
-          "title": "Last Message At"
-        },
-        "metadata": {
-          "additionalProperties": {
-            "type": "string"
-          },
-          "default": {},
-          "description": "Caller-supplied metadata key-value pairs.",
-          "title": "Metadata",
-          "type": "object"
+          "title": "Url"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "organization_slug",
+        "project_slug",
+        "title",
+        "type",
+        "url"
+      ],
+      "title": "SentryAlertEvent",
+      "type": "object"
+    },
+    "Session": {
+      "additionalProperties": false,
+      "allOf": [
+        {
+          "oneOf": [
+            {
+              "properties": {
+                "claude_code": {
+                  "additionalProperties": true,
+                  "type": "object"
+                },
+                "codex": {
+                  "type": "null"
+                }
+              },
+              "required": [
+                "claude_code",
+                "codex"
+              ]
+            },
+            {
+              "properties": {
+                "claude_code": {
+                  "type": "null"
+                },
+                "codex": {
+                  "additionalProperties": true,
+                  "type": "object"
+                }
+              },
+              "required": [
+                "claude_code",
+                "codex"
+              ]
+            }
+          ]
+        }
+      ],
+      "description": "An agent session: one conversation with an agent, from trigger to\nterminal state. Returned by `GET /v1/sessions/{id}` and carried by the\nsession stream's `session`/`snapshot` frames \u2014 REST and stream never\ndisagree about what a session looks like.",
+      "properties": {
+        "agent": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionAgent"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The agent the session was started from, or null for a raw session started with POST /v1/sessions."
         },
-        "parent": {
-          "$ref": "#/$defs/SessionParent",
-          "description": "What preceded this session, if anything."
+        "attribution": {
+          "$ref": "#/$defs/SessionAttribution",
+          "description": "The principal this session is attributed to."
         },
-        "prompt": {
+        "budget": {
+          "default": 0,
+          "description": "The spend budget enforced for this session, in US dollars, after resolving defaults and ceilings.",
+          "title": "Budget",
+          "type": "number"
+        },
+        "claude_code": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/ClaudeConfig"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "The per-session prompt the session was started with.",
-          "title": "Prompt"
-        },
-        "prompting": {
-          "$ref": "#/$defs/SessionPrompting",
-          "description": "Whether a client may send this session a message and, when it may not, the reason to show instead of a composer."
+          "description": "Claude Code input and native options. Set exactly one of claude_code or codex."
         },
-        "session_state": {
+        "codex": {
           "anyOf": [
             {
-              "$ref": "#/$defs/SessionState"
+              "$ref": "#/$defs/CodexConfig"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "Lifecycle state of the durable conversation, or null for sessions without one."
+          "description": "Codex input and native options. Set exactly one of claude_code or codex."
         },
-        "source": {
-          "$ref": "#/$defs/SessionSource",
-          "description": "Where the session came from (e.g. react, web, api, cli, mention, cron)."
+        "cost": {
+          "$ref": "#/$defs/SessionCost",
+          "description": "What the session cost, in millicents, broken down by leg and carrying its own total."
         },
-        "status": {
-          "$ref": "#/$defs/SessionStatus",
-          "description": "Execution status of the session."
+        "environment": {
+          "$ref": "#/$defs/SessionEnvironment",
+          "description": "The full environment configuration frozen when the session was created, with the saved environment's id and how it was chosen."
         },
-        "status_reason": {
+        "event": {
           "anyOf": [
             {
-              "type": "string"
+              "discriminator": {
+                "mapping": {
+                  "github.issue": "#/$defs/GithubIssueEvent",
+                  "github.pull_request": "#/$defs/GithubPullRequestEvent",
+                  "github.push": "#/$defs/GithubPushEvent",
+                  "linear.issue": "#/$defs/LinearIssueEvent",
+                  "sentry.alert": "#/$defs/SentryAlertEvent",
+                  "slack.channel_created": "#/$defs/SlackChannelCreatedEvent",
+                  "slack.message": "#/$defs/SlackMessageEvent"
+                },
+                "propertyName": "type"
+              },
+              "oneOf": [
+                {
+                  "$ref": "#/$defs/GithubPullRequestEvent"
+                },
+                {
+                  "$ref": "#/$defs/GithubIssueEvent"
+                },
+                {
+                  "$ref": "#/$defs/GithubPushEvent"
+                },
+                {
+                  "$ref": "#/$defs/LinearIssueEvent"
+                },
+                {
+                  "$ref": "#/$defs/SlackMessageEvent"
+                },
+                {
+                  "$ref": "#/$defs/SlackChannelCreatedEvent"
+                },
+                {
+                  "$ref": "#/$defs/SentryAlertEvent"
+                }
+              ]
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "Human-readable reason for the current status, when there is one.",
-          "title": "Status Reason"
+          "description": "The typed external event that started the session; null for direct and scheduled starts.",
+          "title": "Event"
         },
-        "stopped": {
-          "$ref": "#/$defs/SessionStopped",
-          "description": "The stop request, if the session was stopped."
+        "git": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionGit"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "What the session did to git, one entry per repository in its workspace: the commit and branch it sits on, per-file line counts for its uncommitted changes, and the pull requests it opened. Null if nothing was ever captured."
         },
-        "summary": {
+        "handler": {
           "anyOf": [
             {
-              "$ref": "#/$defs/SessionSummary"
+              "$ref": "#/$defs/SessionHandler"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "The latest live summary of the session's progress while it runs, and when it was generated."
+          "description": "The saved handler and its effective display name when this session started, frozen at creation. Null for built-in responders, legacy sessions, and sessions started without a handler."
+        },
+        "id": {
+          "description": "Unique identifier of the session.",
+          "title": "Id",
+          "type": "string"
         },
-        "surface": {
-          "$ref": "#/$defs/SessionSurface",
-          "description": "The public status projection: the durable conversation (`session`), the current execution (`run`), and the one derived `status` word."
+        "lifecycle": {
+          "$ref": "#/$defs/SessionLifecycle",
+          "description": "The session's activity, conversation state, messaging policy, outcomes, and timestamps."
         },
-        "tokens": {
-          "$ref": "#/$defs/SessionTokens",
-          "description": "The tokens the session spent and the model they went to. `total` includes the prompt-cache lanes."
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "default": {},
+          "description": "Caller-supplied metadata key-value pairs.",
+          "title": "Metadata",
+          "type": "object"
         },
-        "trigger": {
+        "output": {
           "anyOf": [
             {
-              "$ref": "#/$defs/SessionTrigger"
+              "$ref": "#/$defs/OutputConfig"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "The external event that started the session."
+          "description": "The structured-output exit contract for this session."
         },
-        "updated_at": {
-          "description": "When the session was last updated.",
-          "format": "date-time",
-          "title": "Updated At",
-          "type": "string"
+        "parent": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionParent"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The predecessor session this session continues; null when there is none."
+        },
+        "permissions": {
+          "$ref": "#/$defs/PermissionsConfig",
+          "description": "What the session may touch, per minted credential."
+        },
+        "skills": {
+          "description": "Skills installed for this session.",
+          "items": {
+            "$ref": "#/$defs/SkillRef"
+          },
+          "title": "Skills",
+          "type": "array"
+        },
+        "source": {
+          "$ref": "#/$defs/SessionSource",
+          "description": "Where the session came from (e.g. react, web, api, cli, mention, cron)."
+        },
+        "summary": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionSummary"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The latest live summary of the session's progress while it runs, and when it was generated."
+        },
+        "tokens": {
+          "$ref": "#/$defs/SessionTokens",
+          "description": "The tokens the session spent and the model they went to. `total` includes the prompt-cache lanes."
         }
       },
       "required": [
+        "agent",
         "attribution",
-        "automation",
         "budget",
-        "config",
-        "context_repository",
+        "claude_code",
+        "codex",
         "cost",
-        "created_at",
         "environment",
-        "exit_status",
+        "event",
         "git",
-        "harness",
+        "handler",
         "id",
-        "last_activity_at",
-        "last_message_at",
+        "lifecycle",
         "metadata",
+        "output",
         "parent",
-        "prompt",
-        "prompting",
-        "session_state",
+        "permissions",
+        "skills",
         "source",
-        "status",
-        "status_reason",
-        "stopped",
         "summary",
-        "surface",
-        "tokens",
-        "trigger",
-        "updated_at"
+        "tokens"
       ],
       "title": "Session",
       "type": "object"
     },
+    "SessionAgent": {
+      "description": "The agent this session was started from: the definition frozen\nwhen the session was created, and the saved agent it came from as it\nexists NOW. They diverge legitimately \u2014 a YAML edit after the session\nstarted leaves the pointer describing something the session never ran.",
+      "properties": {
+        "config": {
+          "$ref": "#/$defs/AgentConfig",
+          "description": "The agent definition the session was started from, frozen when the session was created."
+        },
+        "id": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Identifier of the saved agent this session's snapshot was taken from. Null for a routing-file agent, a code-review stage agent, or the built-in mention agent, which have no saved agent behind them. Points at the agent as it exists now, which may have changed since.",
+          "title": "Id"
+        }
+      },
+      "required": [
+        "config",
+        "id"
+      ],
+      "title": "SessionAgent",
+      "type": "object"
+    },
+    "SessionArchived": {
+      "description": "When the session was archived and the GitHub user who archived it.",
+      "properties": {
+        "at": {
+          "description": "When the session was archived.",
+          "format": "date-time",
+          "title": "At",
+          "type": "string"
+        },
+        "by": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/GithubAccountSnippet"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The GitHub user who archived the session; null if unknown or unavailable."
+        }
+      },
+      "required": [
+        "at",
+        "by"
+      ],
+      "title": "SessionArchived",
+      "type": "object"
+    },
     "SessionAttribution": {
       "description": "The principal a session is attributed to: what kind, its id, and \u2014 when\nthe kind is a GitHub user \u2014 the resolved display snippet.",
       "properties": {
@@ -2580,59 +2751,45 @@
       "title": "SessionAttribution",
       "type": "object"
     },
-    "SessionAutomation": {
-      "description": "The automation this session was started from: the definition frozen\nwhen the session was created, and the saved automation it came from as it\nexists NOW. They diverge legitimately \u2014 a YAML edit after the session\nstarted leaves the pointer describing something the session never ran.",
-      "properties": {
-        "config": {
-          "$ref": "#/$defs/AutomationConfig",
-          "description": "The automation definition the session was started from, frozen when the session was created."
-        },
-        "id": {
-          "anyOf": [
+    "SessionConfig": {
+      "additionalProperties": false,
+      "allOf": [
+        {
+          "oneOf": [
             {
-              "type": "string"
+              "properties": {
+                "claude_code": {
+                  "additionalProperties": true,
+                  "type": "object"
+                },
+                "codex": {
+                  "type": "null"
+                }
+              },
+              "required": [
+                "claude_code",
+                "codex"
+              ]
             },
             {
-              "type": "null"
+              "properties": {
+                "claude_code": {
+                  "type": "null"
+                },
+                "codex": {
+                  "additionalProperties": true,
+                  "type": "object"
+                }
+              },
+              "required": [
+                "claude_code",
+                "codex"
+              ]
             }
-          ],
-          "default": null,
-          "description": "Identifier of the saved automation this session's snapshot was taken from. Null for a routing-file agent, a code-review stage agent, or the built-in mention agent, which have no saved automation behind them. Points at the automation as it exists now, which may have changed since.",
-          "title": "Id"
+          ]
         }
-      },
-      "required": [
-        "config",
-        "id"
       ],
-      "title": "SessionAutomation",
-      "type": "object"
-    },
-    "SessionBudget": {
-      "description": "The spend budget actually enforced for this session, and which layer of\nthe cascade set it.",
-      "properties": {
-        "cents": {
-          "default": 0,
-          "description": "The spend budget resolved for this session, in cents.",
-          "title": "Cents",
-          "type": "integer"
-        },
-        "source": {
-          "$ref": "#/$defs/BudgetSource",
-          "default": "account",
-          "description": "Where the resolved budget came from."
-        }
-      },
-      "required": [
-        "cents",
-        "source"
-      ],
-      "title": "SessionBudget",
-      "type": "object"
-    },
-    "SessionConfig": {
-      "additionalProperties": false,
-      "description": "What one session runs on: its selected harness, where it runs, what it\nmay touch, its skills, its exit contract, and its spend cap. Every session\nfreezes one of these (`agent_sessions.session_config`); an automation\ncarries one under `session:` (`AutomationConfig.session`); and\n`POST /v1/sessions` is this shape flattened onto the request body, plus the\nrun settings. Nothing in here is an automation's identity or trigger \u2014\nthose belong to `AutomationConfig`.\n\nField order is the canonical key order for `session:` blocks and YAML\nexports: what runs (`harness`, `instructions`), where (`environment`), what it may\ntouch (`permissions`), then the rest.",
+      "description": "What one session runs on: its selected harness, where it runs, what it\nmay touch, its skills, its exit contract, and its spend cap. Every session\nfreezes one of these (`sessions.session_config`); an agent\ncarries one under `session:` (`AgentConfig.session`); and\n`POST /v1/sessions` is this shape flattened onto the request body, plus the\nrun settings. Nothing in here is an agent's identity or trigger \u2014\nthose belong to `AgentConfig`.\n\nField order is the canonical key order for `session:` blocks and YAML\nexports: what runs (`claude_code` or `codex`), where (`environment`), what it may\ntouch (`permissions`), then the rest.",
       "properties": {
         "budget": {
           "$ref": "#/$defs/BudgetConfig",
@@ -2643,6 +2800,30 @@
             "week": null
           }
         },
+        "claude_code": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ClaudeConfig"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Claude Code input and native options. Set exactly one of claude_code or codex."
+        },
+        "codex": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/CodexConfig"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Codex input and native options. Set exactly one of claude_code or codex."
+        },
         "environment": {
           "anyOf": [
             {
@@ -2659,28 +2840,18 @@
               "timeout": null
             },
             "hooks": {
+              "after_checkout": null,
+              "before_start": null,
+              "build_base": null,
               "post_clone": null,
               "post_start": null
             },
-            "image": {
-              "dockerfile_append": null,
-              "setup": null
-            },
             "mcp_servers": [],
             "repositories": [],
             "variables": []
           },
           "title": "Environment"
         },
-        "harness": {
-          "$ref": "#/$defs/HarnessOptions",
-          "description": "The explicitly selected harness and its native options."
-        },
-        "instructions": {
-          "$ref": "#/$defs/Instructions",
-          "default": "",
-          "description": "Instructions appended to the harness's own prompt. Text and repository file references are resolved in order."
-        },
         "output": {
           "anyOf": [
             {
@@ -2713,9 +2884,9 @@
       },
       "required": [
         "budget",
+        "claude_code",
+        "codex",
         "environment",
-        "harness",
-        "instructions",
         "output",
         "permissions",
         "skills"
@@ -2726,6 +2897,12 @@
     "SessionCost": {
       "description": "What a session (or one turn of it) cost, in millicents.\n\n`llm` is deliberately NOT called `tokens`: it would sit beside the `tokens`\nobject and read as \"the token count's cost\" rather than \"the cost of the\nLLM leg\".",
       "properties": {
+        "cpu": {
+          "default": 0,
+          "description": "Sandbox CPU spend in millicents.",
+          "title": "Cpu",
+          "type": "integer"
+        },
         "fee": {
           "default": 0,
           "description": "Platform fee in millicents.",
@@ -2738,39 +2915,52 @@
           "title": "Llm",
           "type": "integer"
         },
-        "sandbox_cpu": {
-          "default": 0,
-          "description": "Sandbox CPU spend in millicents.",
-          "title": "Sandbox Cpu",
-          "type": "integer"
-        },
-        "sandbox_memory": {
+        "memory": {
           "default": 0,
           "description": "Sandbox memory spend in millicents.",
-          "title": "Sandbox Memory",
+          "title": "Memory",
           "type": "integer"
         },
         "total": {
           "default": 0,
-          "description": "The grand total in millicents: llm + sandbox_cpu + sandbox_memory + fee.",
+          "description": "The grand total in millicents: llm + cpu + memory + fee.",
           "title": "Total",
           "type": "integer"
         }
       },
       "required": [
+        "cpu",
         "fee",
         "llm",
-        "sandbox_cpu",
-        "sandbox_memory",
+        "memory",
         "total"
       ],
       "title": "SessionCost",
       "type": "object"
     },
     "SessionEnvironment": {
-      "description": "The environment this session resolved: which saved environment (as it\nexists now) and how it was chosen. The environment's frozen BODY rides\ninside `config.environment` \u2014 substitution happens before the config\nsnapshot freezes \u2014 so this object is provenance, not payload.",
+      "additionalProperties": false,
+      "description": "The environment configuration frozen at session creation, enriched with\nthe saved environment's identity and how it was chosen.",
       "properties": {
-        "environment_id": {
+        "compute": {
+          "$ref": "#/$defs/ComputeConfig",
+          "default": {
+            "cpu": null,
+            "memory": null,
+            "timeout": null
+          }
+        },
+        "hooks": {
+          "$ref": "#/$defs/EnvironmentHooks",
+          "default": {
+            "after_checkout": null,
+            "before_start": null,
+            "build_base": null,
+            "post_clone": null,
+            "post_start": null
+          }
+        },
+        "id": {
           "anyOf": [
             {
               "type": "string"
@@ -2781,7 +2971,36 @@
           ],
           "default": null,
           "description": "Identifier of the saved environment the session's config resolved. Null for an inline environment block or the built-in basic sandbox.",
-          "title": "Environment Id"
+          "title": "Id"
+        },
+        "mcp_servers": {
+          "default": [],
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "$ref": "#/$defs/McpServerRef"
+              },
+              {
+                "$ref": "#/$defs/McpStdioServer"
+              },
+              {
+                "$ref": "#/$defs/McpRemoteServer"
+              }
+            ]
+          },
+          "title": "Mcp Servers",
+          "type": "array"
+        },
+        "repositories": {
+          "default": [],
+          "items": {
+            "$ref": "#/$defs/RepositoryRef"
+          },
+          "title": "Repositories",
+          "type": "array"
         },
         "source": {
           "anyOf": [
@@ -2793,16 +3012,97 @@
             }
           ],
           "default": null,
-          "description": "How the environment was chosen (request, automation, platform_default; repo_default and account_default on sessions from before those ladders were removed). Null when the config carried its own inline environment."
+          "description": "How the environment was chosen (request, agent, platform_default; repo_default and account_default on sessions from before those ladders were removed). An inline request uses request; an inline environment declared in session configuration has no source."
+        },
+        "variables": {
+          "default": [],
+          "items": {
+            "$ref": "#/$defs/EnvironmentVariable"
+          },
+          "title": "Variables",
+          "type": "array"
         }
       },
       "required": [
-        "environment_id",
-        "source"
+        "compute",
+        "hooks",
+        "id",
+        "mcp_servers",
+        "repositories",
+        "source",
+        "variables"
       ],
       "title": "SessionEnvironment",
       "type": "object"
     },
+    "SessionEventActor": {
+      "description": "The event's initiator, when known; never inferred from resource ownership.",
+      "properties": {
+        "avatar_url": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Avatar Url"
+        },
+        "is_bot": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Is Bot"
+        },
+        "name": {
+          "title": "Name",
+          "type": "string"
+        }
+      },
+      "required": [
+        "avatar_url",
+        "is_bot",
+        "name"
+      ],
+      "title": "SessionEventActor",
+      "type": "object"
+    },
+    "SessionExecutionResult": {
+      "description": "Outcome of the last finished execution, retained across subsequent resumes.\n\nAn execution spans a start or resume through parking or termination, and may\ncontain several turns. Admission failures also produce a result, even when\nprovisioning never starts.",
+      "properties": {
+        "completion_reason": {
+          "$ref": "#/$defs/SessionExitStatus",
+          "description": "Why the last execution ended; completed also includes parking an open conversation."
+        },
+        "detail": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Human-readable explanation of that outcome.",
+          "title": "Detail"
+        }
+      },
+      "required": [
+        "completion_reason",
+        "detail"
+      ],
+      "title": "SessionExecutionResult",
+      "type": "object"
+    },
     "SessionExitStatus": {
       "description": "Why a terminal agent session ended \u2014 a finer-grained reason than `status`.\n\n`status` (SessionStatus) is the lifecycle state: COMPLETED / ERROR /\nCANCELLED. `exit_status` explains *why* a run reached that terminal state, so\nthe UI and metrics can tell a budget cutoff apart from a crashed tool call or\na deliberate cancellation. It is None until the run reaches a terminal state.",
       "enum": [
@@ -2825,7 +3125,7 @@
       "type": "string"
     },
     "SessionGit": {
-      "description": "Every repo the session touched. Small enough to ride on `agent_sessions`\nand be returned by every session read.",
+      "description": "Every repo the session touched. Small enough to ride on `sessions`\nand be returned by every session read.",
       "properties": {
         "repos": {
           "default": [],
@@ -3032,64 +3332,61 @@
       "title": "SessionGitRepo",
       "type": "object"
     },
-    "SessionListStreamMessage": {
+    "SessionHandler": {
+      "description": "The saved handler and its display name when the session started.",
       "properties": {
-        "session": {
-          "$ref": "#/$defs/Session"
+        "agent_name": {
+          "description": "The handler's effective display name when the session started: ellipsis.name, or the service default (Slack, GitHub, Linear, or sentry).",
+          "minLength": 1,
+          "title": "Agent Name",
+          "type": "string"
         },
-        "type": {
-          "const": "session",
-          "default": "session",
-          "title": "Type",
+        "id": {
+          "description": "Identifier of the saved handler.",
+          "minLength": 1,
+          "title": "Id",
+          "type": "string"
+        },
+        "service": {
+          "$ref": "#/$defs/HandlerService",
+          "description": "The service the handler responds to."
+        },
+        "sha": {
+          "description": "Content fingerprint of the validated handler configuration used when the session started. This is not the Git commit SHA.",
+          "minLength": 1,
+          "title": "Sha",
           "type": "string"
         }
       },
       "required": [
-        "session",
-        "type"
+        "agent_name",
+        "id",
+        "service",
+        "sha"
       ],
-      "title": "SessionListStreamMessage",
+      "title": "SessionHandler",
       "type": "object"
     },
-    "SessionLiveness": {
-      "description": "The durable conversation axis (backs the surfaced `session` field).",
-      "enum": [
-        "alive",
-        "idle",
-        "closed"
-      ],
-      "title": "SessionLiveness",
-      "type": "string"
-    },
-    "SessionParent": {
-      "description": "The ONE \"preceded-by\" chain: the predecessor session and how this one\nrelates to it. Not a parent that orchestrates children \u2014 a session never\nspawns sub-sessions.",
+    "SessionLifecycle": {
+      "description": "Current activity, conversation state, messaging policy, and lifecycle history.",
       "properties": {
-        "kind": {
+        "archived": {
           "anyOf": [
             {
-              "$ref": "#/$defs/ParentKind"
+              "$ref": "#/$defs/SessionArchived"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "How this session relates to its parent session, if any."
+          "description": "When and by whom the session was archived; null when unarchived. Archiving does not stop or close a session."
         },
-        "replayed_from_session_id": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "Identifier of the original session this one was replayed from, if it was started via replay.",
-          "title": "Replayed From Session Id"
+        "conversation": {
+          "$ref": "#/$defs/ConversationState",
+          "description": "Whether the conversation is open or permanently closed. Open does not imply direct messages are permitted."
         },
-        "session_id": {
+        "detail": {
           "anyOf": [
             {
               "type": "string"
@@ -3099,114 +3396,139 @@
             }
           ],
           "default": null,
-          "description": "Identifier of the parent session that spawned this one, if any.",
-          "title": "Session Id"
-        }
-      },
-      "required": [
-        "kind",
-        "replayed_from_session_id",
-        "session_id"
-      ],
-      "title": "SessionParent",
-      "type": "object"
-    },
-    "SessionPrompting": {
-      "description": "The prompt-affordance projection. `enabled` answers \"would a send work\",\nand when it wouldn't, `blocked_reason` + `detail` say why.\n\n`surface_name` is set only for MENTION_SURFACE, naming where to reply.",
-      "properties": {
-        "blocked_reason": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/PromptBlockedReason"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null
+          "description": "Explanation of the current status, when applicable.",
+          "title": "Detail"
         },
-        "detail": {
+        "interactive": {
+          "description": "Whether the session stays open after its first turn.",
+          "title": "Interactive",
+          "type": "boolean"
+        },
+        "last_execution_result": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/SessionExecutionResult"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "title": "Detail"
+          "description": "The last finished execution's outcome, retained across resumes; null until an outcome has been recorded."
         },
-        "enabled": {
-          "title": "Enabled",
-          "type": "boolean"
+        "prompting": {
+          "$ref": "#/$defs/SessionPrompting",
+          "description": "The session's policy for direct messages. Caller authorization and message validation are checked separately."
         },
-        "surface_name": {
+        "status": {
+          "$ref": "#/$defs/SessionLifecycleStatus",
+          "description": "Canonical current activity. working means a turn is in progress; waiting means the worker is warm and awaiting input; idle means parked. A failed, stopped, or cancelled execution may leave an open conversation."
+        },
+        "stopped": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/SessionStopped"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "title": "Surface Name"
+          "description": "When and by whom a stop was requested; null when no stop is pending for this execution."
+        },
+        "timestamps": {
+          "$ref": "#/$defs/SessionTimestamps"
         }
       },
       "required": [
-        "blocked_reason",
+        "archived",
+        "conversation",
         "detail",
-        "enabled",
-        "surface_name"
+        "interactive",
+        "last_execution_result",
+        "prompting",
+        "status",
+        "stopped",
+        "timestamps"
       ],
-      "title": "SessionPrompting",
+      "title": "SessionLifecycle",
       "type": "object"
     },
-    "SessionSource": {
-      "description": "Where a session came from: the credential that started it (web app,\nAPI key, CLI) or the trigger that fired (react, mention, cron). Never\ntaken from a request body.",
+    "SessionLifecycleStatus": {
       "enum": [
-        "react",
-        "web",
-        "api",
-        "cli",
-        "mention",
-        "cron"
+        "scheduled",
+        "starting",
+        "working",
+        "waiting",
+        "retrying",
+        "idle",
+        "closed",
+        "failed",
+        "stopped",
+        "cancelled"
       ],
-      "title": "SessionSource",
+      "title": "SessionLifecycleStatus",
       "type": "string"
     },
-    "SessionState": {
-      "description": "Lifecycle of a keyed (multi-turn) session \u2014 the durable conversation.\nDistinct from SessionStatus, which is per-execution (one turn's run) and\nmoves to agent_turns in a later slice. IDLE: alive, waiting for the next\nmessage. RUNNING: a turn is executing. CLOSED: the conversation is done and\nits sandbox/snapshots are torn down.",
-      "enum": [
-        "idle",
-        "running",
-        "closed"
+    "SessionListStreamMessage": {
+      "properties": {
+        "session": {
+          "$ref": "#/$defs/Session"
+        },
+        "type": {
+          "const": "session",
+          "default": "session",
+          "title": "Type",
+          "type": "string"
+        }
+      },
+      "required": [
+        "session",
+        "type"
       ],
-      "title": "SessionState",
-      "type": "string"
+      "title": "SessionListStreamMessage",
+      "type": "object"
     },
-    "SessionStatus": {
-      "enum": [
-        "scheduled",
-        "creating_sandbox",
-        "running",
-        "retrying",
-        "completed",
-        "error",
-        "cancelled",
-        "stopped"
+    "SessionParent": {
+      "description": "The predecessor session this session continues.",
+      "properties": {
+        "session_id": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Identifier of the predecessor session this session continues, if any.",
+          "title": "Session Id"
+        }
+      },
+      "required": [
+        "session_id"
       ],
-      "title": "SessionStatus",
-      "type": "string"
+      "title": "SessionParent",
+      "type": "object"
     },
-    "SessionStopped": {
-      "description": "The stop request, if there was one: when, by which GitHub account id,\nand that account resolved to a display snippet.",
+    "SessionPrompting": {
+      "description": "The prompt-affordance projection. `enabled` answers \"would a send work\",\nand when it wouldn't, `blocked_reason` + `detail` say why.\n\n`surface_name` is set only for MENTION_SURFACE, naming where to reply.",
       "properties": {
-        "at": {
+        "blocked_reason": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/PromptBlockedReason"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "detail": {
           "anyOf": [
             {
-              "format": "date-time",
               "type": "string"
             },
             {
@@ -3214,23 +3536,57 @@
             }
           ],
           "default": null,
-          "description": "When a stop was requested, if one was.",
-          "title": "At"
+          "title": "Detail"
         },
-        "by": {
+        "enabled": {
+          "title": "Enabled",
+          "type": "boolean"
+        },
+        "surface_name": {
           "anyOf": [
             {
-              "type": "integer"
+              "type": "string"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "GitHub account id of the user who stopped the session, if known.",
-          "title": "By"
+          "title": "Surface Name"
+        }
+      },
+      "required": [
+        "blocked_reason",
+        "detail",
+        "enabled",
+        "surface_name"
+      ],
+      "title": "SessionPrompting",
+      "type": "object"
+    },
+    "SessionSource": {
+      "description": "Where a session came from: the credential that started it (web app,\nAPI key, CLI) or the trigger that fired (react, mention, cron). Never\ntaken from a request body.",
+      "enum": [
+        "react",
+        "web",
+        "api",
+        "cli",
+        "mention",
+        "cron"
+      ],
+      "title": "SessionSource",
+      "type": "string"
+    },
+    "SessionStopped": {
+      "description": "When a stop was requested and the GitHub user who requested it.",
+      "properties": {
+        "at": {
+          "description": "When a stop was requested.",
+          "format": "date-time",
+          "title": "At",
+          "type": "string"
         },
-        "by_user": {
+        "by": {
           "anyOf": [
             {
               "$ref": "#/$defs/GithubAccountSnippet"
@@ -3240,13 +3596,12 @@
             }
           ],
           "default": null,
-          "description": "The GitHub user who stopped the session, resolved at read time."
+          "description": "The GitHub user who stopped the session, resolved at read time. Null if the user is unknown or unavailable."
         }
       },
       "required": [
         "at",
-        "by",
-        "by_user"
+        "by"
       ],
       "title": "SessionStopped",
       "type": "object"
@@ -3281,47 +3636,56 @@
       "title": "SessionSummary",
       "type": "object"
     },
-    "SessionSurface": {
-      "description": "The three fields we expose.\n\n`use_enum_values=True` (from CustomBaseModel) stores the members as their\nstring values, so this serializes to `{\"session\": \"alive\", \"run\": \"waiting\",\n\"status\": \"waiting\"}` \u2014 a plain object, not enum names.",
+    "SessionTimestamps": {
       "properties": {
-        "run": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/RunStatus"
-            },
-            {
-              "type": "null"
-            }
-          ]
+        "created_at": {
+          "description": "When the session was created.",
+          "format": "date-time",
+          "title": "Created At",
+          "type": "string"
         },
-        "session": {
+        "last_activity_at": {
           "anyOf": [
             {
-              "$ref": "#/$defs/SessionLiveness"
+              "format": "date-time",
+              "type": "string"
             },
             {
               "type": "null"
             }
-          ]
+          ],
+          "default": null,
+          "description": "When the session last showed agent activity.",
+          "title": "Last Activity At"
         },
-        "status": {
+        "last_message_at": {
           "anyOf": [
             {
+              "format": "date-time",
               "type": "string"
             },
             {
               "type": "null"
             }
           ],
-          "title": "Status"
+          "default": null,
+          "description": "When the session last received a message.",
+          "title": "Last Message At"
+        },
+        "updated_at": {
+          "description": "When the session was last updated.",
+          "format": "date-time",
+          "title": "Updated At",
+          "type": "string"
         }
       },
       "required": [
-        "run",
-        "session",
-        "status"
+        "created_at",
+        "last_activity_at",
+        "last_message_at",
+        "updated_at"
       ],
-      "title": "SessionSurface",
+      "title": "SessionTimestamps",
       "type": "object"
     },
     "SessionTokens": {
@@ -3375,57 +3739,78 @@
       "title": "SessionTokens",
       "type": "object"
     },
-    "SessionTrigger": {
-      "description": "The external event that started a session, without raw webhook payloads.",
+    "SettingsRef": {
+      "additionalProperties": false,
+      "description": "A config-declared Claude Code settings.json, resolved at run start and\npassed to `claude --settings <path>`. That is the CLI settings tier \u2014 BELOW\nEllipsis's managed-settings.json floor \u2014 so it customizes behavior (model\npermissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a\nsecurity setting. Lets a team point the cloud agent at the same settings file\nthey already use with Claude Code locally instead of re-encoding it as YAML.",
       "properties": {
-        "action": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "title": "Action"
+        "path": {
+          "title": "Path",
+          "type": "string"
         },
-        "actor": {
+        "repository": {
           "anyOf": [
             {
-              "$ref": "#/$defs/SessionTriggerActor"
+              "$ref": "#/$defs/RepositoryRef"
             },
             {
               "type": "null"
             }
           ],
           "default": null
+        }
+      },
+      "required": [
+        "path",
+        "repository"
+      ],
+      "title": "SettingsRef",
+      "type": "object"
+    },
+    "SkillRef": {
+      "additionalProperties": false,
+      "description": "A repository directory containing SKILL.md and supporting UTF-8 files.\nResolved at run start and installed in the selected harness's skill directory.\nExplicit skill references require a model with the skills capability.",
+      "properties": {
+        "path": {
+          "title": "Path",
+          "type": "string"
         },
-        "branch": {
+        "repository": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/RepositoryRef"
             },
             {
               "type": "null"
             }
           ],
-          "default": null,
-          "title": "Branch"
-        },
-        "number": {
+          "default": null
+        }
+      },
+      "required": [
+        "path",
+        "repository"
+      ],
+      "title": "SkillRef",
+      "type": "object"
+    },
+    "SlackChannelCreatedEvent": {
+      "properties": {
+        "actor": {
           "anyOf": [
             {
-              "type": "integer"
+              "$ref": "#/$defs/SessionEventActor"
             },
             {
               "type": "null"
             }
           ],
-          "default": null,
-          "title": "Number"
+          "default": null
         },
-        "repository": {
+        "channel_id": {
+          "title": "Channel Id",
+          "type": "string"
+        },
+        "channel_name": {
           "anyOf": [
             {
               "type": "string"
@@ -3435,21 +3820,55 @@
             }
           ],
           "default": null,
-          "title": "Repository"
+          "title": "Channel Name"
+        },
+        "type": {
+          "const": "slack.channel_created",
+          "default": "slack.channel_created",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "actor",
+        "channel_id",
+        "channel_name",
+        "type",
+        "url"
+      ],
+      "title": "SlackChannelCreatedEvent",
+      "type": "object"
+    },
+    "SlackMessageEvent": {
+      "properties": {
+        "action": {
+          "enum": [
+            "message",
+            "app_mention"
+          ],
+          "title": "Action",
+          "type": "string"
         },
-        "surface": {
+        "actor": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/SessionEventActor"
             },
             {
               "type": "null"
             }
           ],
-          "default": null,
-          "title": "Surface"
+          "default": null
         },
-        "title": {
+        "channel_id": {
+          "title": "Channel Id",
+          "type": "string"
+        },
+        "channel_name": {
           "anyOf": [
             {
               "type": "string"
@@ -3459,9 +3878,13 @@
             }
           ],
           "default": null,
-          "title": "Title"
+          "title": "Channel Name"
         },
-        "url": {
+        "message_ts": {
+          "title": "Message Ts",
+          "type": "string"
+        },
+        "thread_ts": {
           "anyOf": [
             {
               "type": "string"
@@ -3471,143 +3894,255 @@
             }
           ],
           "default": null,
-          "title": "Url"
+          "title": "Thread Ts"
+        },
+        "type": {
+          "const": "slack.message",
+          "default": "slack.message",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
         }
       },
       "required": [
         "action",
         "actor",
-        "branch",
-        "number",
-        "repository",
-        "surface",
-        "title",
+        "channel_id",
+        "channel_name",
+        "message_ts",
+        "thread_ts",
+        "type",
         "url"
       ],
-      "title": "SessionTrigger",
+      "title": "SlackMessageEvent",
       "type": "object"
     },
-    "SessionTriggerActor": {
+    "VMExecutionResponse": {
       "properties": {
-        "avatar_url": {
+        "cache_tier": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SandboxCacheTier"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "cost_sandbox_cpu": {
+          "title": "Cost Sandbox Cpu",
+          "type": "integer"
+        },
+        "cost_sandbox_memory": {
+          "title": "Cost Sandbox Memory",
+          "type": "integer"
+        },
+        "cpu": {
+          "title": "Cpu",
+          "type": "number"
+        },
+        "encrypted_ports": {
+          "items": {
+            "type": "integer"
+          },
+          "title": "Encrypted Ports",
+          "type": "array"
+        },
+        "environment_variable_keys": {
+          "items": {
+            "type": "string"
+          },
+          "title": "Environment Variable Keys",
+          "type": "array"
+        },
+        "failed_at": {
           "anyOf": [
             {
+              "format": "date-time",
               "type": "string"
             },
             {
               "type": "null"
             }
           ],
-          "default": null,
-          "title": "Avatar Url"
+          "title": "Failed At"
         },
-        "is_bot": {
-          "default": false,
-          "title": "Is Bot",
-          "type": "boolean"
+        "hooks": {
+          "$ref": "#/$defs/EnvironmentHooks",
+          "default": {
+            "after_checkout": null,
+            "before_start": null,
+            "build_base": null,
+            "post_clone": null,
+            "post_start": null
+          }
         },
-        "name": {
-          "title": "Name",
-          "type": "string"
-        }
-      },
-      "required": [
-        "avatar_url",
-        "is_bot",
-        "name"
-      ],
-      "title": "SessionTriggerActor",
-      "type": "object"
-    },
-    "SettingsRef": {
-      "additionalProperties": false,
-      "description": "A config-declared Claude Code settings.json, resolved at run start and\npassed to `claude --settings <path>`. That is the CLI settings tier \u2014 BELOW\nEllipsis's managed-settings.json floor \u2014 so it customizes behavior (model\npermissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a\nsecurity setting. Lets a team point the cloud agent at the same settings file\nthey already use with Claude Code locally instead of re-encoding it as YAML.",
-      "properties": {
-        "path": {
-          "title": "Path",
+        "id": {
+          "title": "Id",
           "type": "string"
         },
-        "repository": {
+        "memory_mib": {
+          "title": "Memory Mib",
+          "type": "integer"
+        },
+        "phase_timings": {
+          "additionalProperties": {
+            "type": "number"
+          },
+          "title": "Phase Timings",
+          "type": "object"
+        },
+        "post_clone": {
           "anyOf": [
             {
-              "$ref": "#/$defs/RepositoryRef"
+              "type": "string"
             },
             {
               "type": "null"
             }
           ],
-          "default": null
-        }
-      },
-      "required": [
-        "path",
-        "repository"
-      ],
-      "title": "SettingsRef",
-      "type": "object"
-    },
-    "SkillRef": {
-      "additionalProperties": false,
-      "description": "A repository directory containing SKILL.md and supporting UTF-8 files.\nResolved at run start and installed in the selected harness's skill directory.\nExplicit skill references require a model with the skills capability.",
-      "properties": {
-        "path": {
-          "title": "Path",
-          "type": "string"
+          "title": "Post Clone"
         },
-        "repository": {
+        "post_start": {
           "anyOf": [
             {
-              "$ref": "#/$defs/RepositoryRef"
+              "type": "string"
             },
             {
               "type": "null"
             }
           ],
-          "default": null
-        }
-      },
-      "required": [
-        "path",
-        "repository"
-      ],
-      "title": "SkillRef",
-      "type": "object"
-    },
-    "SystemFileRef": {
-      "additionalProperties": false,
-      "properties": {
-        "file": {
-          "title": "File",
+          "title": "Post Start"
+        },
+        "repositories": {
+          "items": {
+            "$ref": "#/$defs/SandboxRepository"
+          },
+          "title": "Repositories",
+          "type": "array"
+        },
+        "running_at": {
+          "anyOf": [
+            {
+              "format": "date-time",
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "title": "Running At"
+        },
+        "scheduled_at": {
+          "format": "date-time",
+          "title": "Scheduled At",
           "type": "string"
         },
-        "repository": {
+        "source": {
+          "$ref": "#/$defs/SandboxSource"
+        },
+        "source_session_id": {
           "anyOf": [
             {
-              "$ref": "#/$defs/RepositoryRef"
+              "type": "string"
             },
             {
               "type": "null"
             }
           ],
-          "default": null
+          "title": "Source Session Id"
+        },
+        "status": {
+          "$ref": "#/$defs/SandboxStatus"
+        },
+        "terminated_at": {
+          "anyOf": [
+            {
+              "format": "date-time",
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "title": "Terminated At"
+        },
+        "terminating_at": {
+          "anyOf": [
+            {
+              "format": "date-time",
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "title": "Terminating At"
+        },
+        "timeout_seconds": {
+          "title": "Timeout Seconds",
+          "type": "integer"
+        },
+        "tunnels": {
+          "items": {
+            "$ref": "#/$defs/SandboxPort"
+          },
+          "title": "Tunnels",
+          "type": "array"
+        },
+        "type": {
+          "$ref": "#/$defs/SandboxType"
+        },
+        "unencrypted_ports": {
+          "items": {
+            "type": "integer"
+          },
+          "title": "Unencrypted Ports",
+          "type": "array"
         }
       },
       "required": [
-        "file",
-        "repository"
+        "cache_tier",
+        "cost_sandbox_cpu",
+        "cost_sandbox_memory",
+        "cpu",
+        "encrypted_ports",
+        "environment_variable_keys",
+        "failed_at",
+        "hooks",
+        "id",
+        "memory_mib",
+        "phase_timings",
+        "post_clone",
+        "post_start",
+        "repositories",
+        "running_at",
+        "scheduled_at",
+        "source",
+        "source_session_id",
+        "status",
+        "terminated_at",
+        "terminating_at",
+        "timeout_seconds",
+        "tunnels",
+        "type",
+        "unencrypted_ports"
       ],
-      "title": "SystemFileRef",
+      "title": "VMExecutionResponse",
       "type": "object"
     }
   },
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Frames on /v1/sessions/stream, /v1/automations/stream and /v1/sandboxes/{id}/stream. Ignore unknown frame types.",
+  "description": "Frames on /v1/sessions/stream, /v1/agents/stream and /v1/vm-executions/{id}/stream. Ignore unknown frame types.",
   "oneOf": [
     {
       "$ref": "#/$defs/SessionListStreamMessage"
     },
     {
-      "$ref": "#/$defs/AutomationListStreamMessage"
+      "$ref": "#/$defs/AgentListStreamMessage"
     },
     {
       "$ref": "#/$defs/CollectionStreamHeartbeat"