@ellipsis-dev/sdk 0.28.0 → 0.31.0

package/schema/collection_frames.schema.json

@@ -1,24 +1,14 @@
 {
   "$defs": {
-    "AttributionType": {
-      "enum": [
-        "github_user",
-        "linear_user",
-        "slack_user",
-        "api_key"
-      ],
-      "title": "AttributionType",
-      "type": "string"
-    },
-    "Automation": {
-      "description": "An automation: a saved agent definition that runs on its trigger or\nwhen invoked, plus where it syncs from and the state of that sync.",
+    "Agent": {
+      "description": "An agent: a saved agent definition that runs on its trigger or\nwhen invoked, plus where it syncs from and the state of that sync.",
       "properties": {
         "config": {
-          "$ref": "#/$defs/AutomationConfig",
-          "description": "The automation definition itself, in the same schema as its YAML file: identity, trigger, input contract, and the session block."
+          "$ref": "#/$defs/AgentConfig",
+          "description": "The agent definition itself, in the same schema as its YAML file: identity, trigger, input contract, and the session block."
         },
         "created_at": {
-          "description": "When the automation was created.",
+          "description": "When the agent was created.",
           "format": "date-time",
           "title": "Created At",
           "type": "string"
@@ -46,10 +36,10 @@
             }
           ],
           "default": null,
-          "description": "The GitHub account that last edited the automation, when the edit came from a known user."
+          "description": "The GitHub account that last edited the agent, when the edit came from a known user."
         },
         "id": {
-          "description": "Unique identifier of the automation.",
+          "description": "Unique identifier of the agent.",
           "title": "Id",
           "type": "string"
         },
@@ -77,7 +67,7 @@
             }
           ],
           "default": null,
-          "description": "The most recent session this automation started, or null if it has never run.",
+          "description": "The most recent session this agent started, or null if it has never run.",
           "title": "Last Session Id"
         },
         "last_sync_error": {
@@ -90,7 +80,7 @@
             }
           ],
           "default": null,
-          "description": "The parse or validation error from the most recent sync attempt, or null when it succeeded. A non-null value means the automation is not running the YAML currently on the branch.",
+          "description": "The parse or validation error from the most recent sync attempt, or null when it succeeded. A non-null value means the agent is not running the YAML currently on the branch.",
           "title": "Last Sync Error"
         },
         "last_synced_commit_sha": {
@@ -103,12 +93,12 @@
             }
           ],
           "default": null,
-          "description": "The last commit the automation was synced from.",
+          "description": "The last commit the agent was synced from.",
           "title": "Last Synced Commit Sha"
         },
         "managed_by": {
           "$ref": "#/$defs/ConfigManagedBy",
-          "description": "Which writer owns this automation. \"github\" automations are defined by a file in a repository and are changed by editing that file; \"api\" automations have no file and are changed through this API."
+          "description": "Which writer owns this agent. \"github\" agents are defined by a file in a repository and are changed by editing that file; \"api\" agents have no file and are changed through this API."
         },
         "name": {
           "anyOf": [
@@ -120,7 +110,7 @@
             }
           ],
           "default": null,
-          "description": "The automation's account-unique addressable name (a slug of its display name); usable anywhere an automation is referenced, interchangeably with the id.",
+          "description": "The agent's account-unique addressable name (a slug of its display name); usable anywhere an agent is referenced, interchangeably with the id.",
           "title": "Name"
         },
         "pending_pull_request_url": {
@@ -133,7 +123,7 @@
             }
           ],
           "default": null,
-          "description": "The open pull request that adds this automation's file. Non-null means the automation is not live yet: it starts running once the pull request merges and syncs.",
+          "description": "The open pull request that adds this agent's file. Non-null means the agent is not live yet: it starts running once the pull request merges and syncs.",
           "title": "Pending Pull Request Url"
         },
         "sha": {
@@ -151,10 +141,10 @@
             }
           ],
           "default": null,
-          "description": "The repository, path, and branch the automation syncs from. Null only transiently, before the creating pull request's file lands on the branch."
+          "description": "The repository, path, and branch the agent syncs from. Null only transiently, before the creating pull request's file lands on the branch."
         },
         "updated_at": {
-          "description": "When the automation was last updated.",
+          "description": "When the agent was last updated.",
           "format": "date-time",
           "title": "Updated At",
           "type": "string"
@@ -177,25 +167,15 @@
         "source_details",
         "updated_at"
       ],
-      "title": "Automation",
+      "title": "Agent",
       "type": "object"
     },
-    "AutomationConfig": {
+    "AgentConfig": {
       "additionalProperties": false,
-      "description": "A saved automation, as written in its YAML file: identity\n(`ellipsis`), when it runs (`trigger`), what goes in (`input`), and the\n`session:` block every session it starts is frozen from. Field order is\nthe canonical key order for files and `to_yaml` exports.",
+      "description": "A saved agent, as written in its YAML file: identity\n(`ellipsis`), when it runs (`trigger`), what goes in (`input`), and the\n`session:` block every session it starts is frozen from. Field order is\nthe canonical key order for files and `to_yaml` exports.",
       "properties": {
         "ellipsis": {
-          "$ref": "#/$defs/AutomationIdentity",
-          "default": {
-            "description": null,
-            "enabled": true,
-            "metadata": {
-              "annotations": {},
-              "labels": []
-            },
-            "name": null,
-            "version": "v1"
-          }
+          "$ref": "#/$defs/AgentIdentity"
         },
         "input": {
           "anyOf": [
@@ -244,12 +224,12 @@
         "session",
         "trigger"
       ],
-      "title": "AutomationConfig",
+      "title": "AgentConfig",
       "type": "object"
     },
-    "AutomationIdentity": {
+    "AgentIdentity": {
       "additionalProperties": false,
-      "description": "The Ellipsis product namespace for a config file: which schema this is\n(`version`), the human-facing identity (`name`/`description`), freeform\norganizational `metadata`, and whether the agent is `enabled`. The\npresence of a top-level `ellipsis:` mapping is what marks a YAML file as\nan Ellipsis automation (vs arbitrary YAML that merely lives under a\nconfig directory) \u2014 see `yaml_is_ellipsis_config`.\n\n`enabled` is agent behavior, not freeform metadata, so it stays inside\nthe config `sha` (only `metadata` is sha-excluded). Whether a session\naccepts messages is a per-run choice (POST /v1/sessions `interactive`),\nnot a config one.",
+      "description": "The Ellipsis product namespace for a config file: which schema this is\n(`version`), the human-facing identity (`name`/`description`), freeform\norganizational `metadata`, and whether the agent is `enabled`. The\npresence of a top-level `ellipsis:` mapping is what marks a YAML file as\nan Ellipsis agent (vs arbitrary YAML that merely lives under a\nconfig directory) \u2014 see `yaml_is_ellipsis_config`.\n\n`enabled` is agent behavior, not freeform metadata, so it stays inside\nthe config `sha` (only `metadata` is sha-excluded). Whether a session\naccepts messages is a per-run choice (POST /v1/sessions `interactive`),\nnot a config one.",
       "properties": {
         "description": {
           "anyOf": [
@@ -268,6 +248,11 @@
           "title": "Enabled",
           "type": "boolean"
         },
+        "kind": {
+          "const": "agent",
+          "title": "Kind",
+          "type": "string"
+        },
         "metadata": {
           "$ref": "#/$defs/ConfigMetadata",
           "default": {
@@ -296,36 +281,47 @@
       "required": [
         "description",
         "enabled",
+        "kind",
         "metadata",
         "name",
         "version"
       ],
-      "title": "AutomationIdentity",
+      "title": "AgentIdentity",
       "type": "object"
     },
-    "AutomationListStreamMessage": {
+    "AgentListStreamMessage": {
       "properties": {
-        "automations": {
+        "agents": {
           "items": {
-            "$ref": "#/$defs/Automation"
+            "$ref": "#/$defs/Agent"
           },
-          "title": "Automations",
+          "title": "Agents",
           "type": "array"
         },
         "type": {
-          "const": "automations",
-          "default": "automations",
+          "const": "agents",
+          "default": "agents",
           "title": "Type",
           "type": "string"
         }
       },
       "required": [
-        "automations",
+        "agents",
         "type"
       ],
-      "title": "AutomationListStreamMessage",
+      "title": "AgentListStreamMessage",
       "type": "object"
     },
+    "AttributionType": {
+      "enum": [
+        "github_user",
+        "linear_user",
+        "slack_user",
+        "api_key"
+      ],
+      "title": "AttributionType",
+      "type": "string"
+    },
     "BudgetConfig": {
       "additionalProperties": false,
       "properties": {
@@ -356,6 +352,7 @@
         "session": {
           "anyOf": [
             {
+              "exclusiveMinimum": 0,
               "type": "number"
             },
             {
@@ -387,17 +384,6 @@
       "title": "BudgetConfig",
       "type": "object"
     },
-    "BudgetSource": {
-      "description": "Which layer actually determined the enforced budget.\n\nNot derivable from the run row alone (the run does not store the config\ncents or the account default), so we persist it for the UI / audit.",
-      "enum": [
-        "system",
-        "account",
-        "config",
-        "run"
-      ],
-      "title": "BudgetSource",
-      "type": "string"
-    },
     "ClaudeConfig": {
       "additionalProperties": false,
       "description": "Native Claude Code options for an explicitly selected harness.",
@@ -450,6 +436,19 @@
           "default": null,
           "title": "Model"
         },
+        "prompt": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The initial user message, passed verbatim. Omit to start an interactive session with no turn, waiting for a message.",
+          "title": "Prompt"
+        },
         "settings": {
           "anyOf": [
             {
@@ -460,11 +459,6 @@
             }
           ],
           "default": null
-        },
-        "type": {
-          "const": "claude_code",
-          "title": "Type",
-          "type": "string"
         }
       },
       "required": [
@@ -472,8 +466,8 @@
         "fallback_model",
         "max_turns",
         "model",
-        "settings",
-        "type"
+        "prompt",
+        "settings"
       ],
       "title": "ClaudeConfig",
       "type": "object"
@@ -495,20 +489,28 @@
           "description": "Reasoning effort for every turn. Omit to use the model default."
         },
         "model": {
-          "default": "gpt-5.6-terra",
+          "default": "gpt-6-sol",
           "title": "Model",
           "type": "string"
         },
-        "type": {
-          "const": "codex",
-          "title": "Type",
-          "type": "string"
+        "prompt": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The initial user message, passed verbatim. Omit to start an interactive session with no turn, waiting for a message.",
+          "title": "Prompt"
         }
       },
       "required": [
         "effort",
         "model",
-        "type"
+        "prompt"
       ],
       "title": "CodexConfig",
       "type": "object"
@@ -542,7 +544,7 @@
     },
     "ComputeConfig": {
       "additionalProperties": false,
-      "description": "Sandbox compute sizing. Every field is optional; None inherits the\nplatform default (2 vCPU / 4096 MiB / 3600s \u2014 see DEFAULT_SANDBOX_* in\nmodels/ellipsis/sandboxes/sandbox.py). A resolved value outside the platform\nbounds fails validation loudly (a sync error on the config) rather than\nbeing clamped silently.\n\n`memory` and `timeout` each accept a shorthand string (\"8GB\", \"30m\") or an\nexplicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /\n`timeout_seconds` properties resolve either form to the canonical integer\nthe sandbox driver consumes.\n\n`timeout` is the max wall-clock the agent may run before its execution is\nstopped, capped at 1h (MAX_SANDBOX_TIMEOUT_SECONDS \u2014 equal to the default, so\ntoday the knob only shortens a session; the cap matches the 1-hour validity\nof the sandbox's GitHub token). The worker's lease/visibility heartbeat\nceiling is derived from that cap, so a run at the max stays owned by its\nworker for its whole life.\n\nCompute currently uses a temporary flat one-cent amount per allocated\nexecution, subject to the account's existing free-compute exemptions.",
+      "description": "Environment compute sizing. Every field is optional; an omitted field\ninherits the platform default (2 vCPU / 4096 MiB / 3600s). A resolved value\noutside the platform bounds fails validation loudly (a sync error on the\nconfig) rather than being clamped silently.\n\n`memory` and `timeout` each accept a shorthand string (\"8GB\", \"30m\") or an\nexplicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /\n`timeout_seconds` properties resolve either form to the canonical integer\nthe environment is sized with.\n\n`timeout` is the max wall-clock the agent may run in one environment before\nit is stopped, capped at 1h (equal to the default, so today the knob only\nshortens a session; the cap matches the 1-hour validity of the session's\nGitHub token).\n\nCompute currently uses a temporary flat one-cent amount each time an\nenvironment is started for a session, subject to the account's existing\nfree-compute exemptions.",
       "properties": {
         "cpu": {
           "anyOf": [
@@ -771,16 +773,50 @@
           }
         ]
       },
-      "description": "`permissions.ellipsis` as a map: resource \u2192 level | grant | list of\ngrants. Levels are hierarchical (read < write < delete), so `write`\nincludes `read`. An unlisted resource is denied. The whole block is\nintersected with the platform's sandbox ceiling at token mint \u2014 it can\nnarrow what a sandbox token may do, never exceed it.",
+      "description": "`permissions.ellipsis` as a map: resource \u2192 level | grant | list of\ngrants. Levels are hierarchical (read < write < delete), so `write`\nincludes `read`. An unlisted resource is denied. The whole block is\nintersected with the platform's session token ceiling at token mint \u2014 it can\nnarrow what a session token may do, never exceed it.",
       "propertyNames": {
         "$ref": "#/$defs/Resource"
       },
       "title": "EllipsisPermissions",
       "type": "object"
     },
+    "EnvironmentBaseBuild": {
+      "additionalProperties": false,
+      "description": "Create a reusable base, optionally using only selected repository files.",
+      "properties": {
+        "inputs": {
+          "anyOf": [
+            {
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Exact files relative to the workspace directory `/sandbox`, including the repository name. Only these files are available during build_base and their contents and modes determine reuse. Omit to use all repositories and invalidate on any source change; [] means no repository files.",
+          "title": "Inputs"
+        },
+        "run": {
+          "description": "Shell script to run in the workspace directory `/sandbox`.",
+          "minLength": 1,
+          "title": "Run",
+          "type": "string"
+        }
+      },
+      "required": [
+        "inputs",
+        "run"
+      ],
+      "title": "EnvironmentBaseBuild",
+      "type": "object"
+    },
     "EnvironmentConfig": {
       "additionalProperties": false,
-      "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, how its `image` is customized, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
+      "description": "Everything about the environment the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
       "properties": {
         "compute": {
           "$ref": "#/$defs/ComputeConfig",
@@ -793,17 +829,13 @@
         "hooks": {
           "$ref": "#/$defs/EnvironmentHooks",
           "default": {
+            "after_checkout": null,
+            "before_start": null,
+            "build_base": null,
             "post_clone": null,
             "post_start": null
           }
         },
-        "image": {
-          "$ref": "#/$defs/EnvironmentImage",
-          "default": {
-            "dockerfile_append": null,
-            "setup": null
-          }
-        },
         "mcp_servers": {
           "default": [],
           "items": {
@@ -845,7 +877,6 @@
       "required": [
         "compute",
         "hooks",
-        "image",
         "mcp_servers",
         "repositories",
         "variables"
@@ -855,10 +886,29 @@
     },
     "EnvironmentHooks": {
       "additionalProperties": false,
-      "description": "Shell scripts run at points in the sandbox lifecycle, each as the sandbox\nuser with the sandbox's environment variables available. A non-zero exit\nfails the run (exit_status = LIFECYCLE_HOOK_FAILED) and is not retried.\n\n`post_start` runs after the container starts, before any repo is cloned \u2014\nrepo-independent setup (authenticate a CLI, e.g. `doppler setup`). On Freestyle\nthe repo is baked into the image so it is incidentally present, but\n`post_start` must not depend on repo contents (that's `post_clone`).\n\n`post_clone` runs after all repos are cloned/checked out, before the agent \u2014\nrepo-dependent setup (`pip install -r requirements.txt`, codegen).\n\nHooks run on every run and their output is never cached. A dependency\ninstall whose result should be reused across runs belongs in `image.setup`\n(baked into the cached image) instead; keep hooks for per-run work \u2014 e.g.\nanything that touches run-scoped credentials.",
+      "description": "Environment lifecycle scripts, in order: build_base, after_checkout,\nbefore_start. The first two produce reusable snapshots; before_start runs\nbefore an agent starts or resumes its session. Scripts run as the environment's\nuser in the workspace directory `/sandbox`. A nonzero exit fails the session.\n\nLegacy post_start/post_clone scripts remain supported for existing configs;\nboth run after workspace preparation, before the agent starts or resumes.\nThey cannot be combined with the new lifecycle fields.",
       "properties": {
-        "post_clone": {
+        "after_checkout": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/EnvironmentScript"
+            },
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Prepare the requested source revision after Ellipsis checks out all repositories, before saving the prepared environment. Skipped when that prepared environment is reused.",
+          "title": "After Checkout"
+        },
+        "before_start": {
           "anyOf": [
+            {
+              "$ref": "#/$defs/EnvironmentScript"
+            },
             {
               "type": "string"
             },
@@ -867,10 +917,14 @@
             }
           ],
           "default": null,
-          "title": "Post Clone"
+          "description": "Run before the agent starts or resumes a session, after the environment is ready. This hook is not cached and adds to session startup time.",
+          "title": "Before Start"
         },
-        "post_start": {
+        "build_base": {
           "anyOf": [
+            {
+              "$ref": "#/$defs/EnvironmentBaseBuild"
+            },
             {
               "type": "string"
             },
@@ -879,21 +933,10 @@
             }
           ],
           "default": null,
-          "title": "Post Start"
-        }
-      },
-      "required": [
-        "post_clone",
-        "post_start"
-      ],
-      "title": "EnvironmentHooks",
-      "type": "object"
-    },
-    "EnvironmentImage": {
-      "additionalProperties": false,
-      "description": "How to customize the container image the agent runs in. You\ncontribute appended layers (`dockerfile_append`) and a build-time script\n(`setup`) only \u2014 Ellipsis owns FROM / base tooling / entrypoint / user.\nToday only inline bodies are supported; a file reference (resolved at the\nrun's SHA) will come later.\n\nThe split: `dockerfile_append` runs when the image is assembled, before any\nrepo exists \u2014 toolchain installs (a package manager binary, apt packages).\n`setup` runs at image-build time *after* the configured repositories are\nchecked out, and its output is captured by the filesystem snapshot that\nbecomes the cached image \u2014 dependency installs (`poetry install`,\n`npm install`), so later runs start with deps already on disk. Neither runs\nper run; that's `hooks.post_start` / `hooks.post_clone`.",
-      "properties": {
-        "dockerfile_append": {
+          "description": "Build a reusable environment before full checkout. Cached by declared inputs, script, toolchain, resources, and build configuration. A string is shorthand for run with all repositories as inputs.",
+          "title": "Build Base"
+        },
+        "post_clone": {
           "anyOf": [
             {
               "type": "string"
@@ -903,9 +946,10 @@
             }
           ],
           "default": null,
-          "title": "Dockerfile Append"
+          "description": "Legacy session startup script. Use before_start for session setup or after_checkout for cached source preparation.",
+          "title": "Post Clone"
         },
-        "setup": {
+        "post_start": {
           "anyOf": [
             {
               "type": "string"
@@ -915,21 +959,42 @@
             }
           ],
           "default": null,
-          "title": "Setup"
+          "description": "Legacy session startup script. Use before_start in new configurations.",
+          "title": "Post Start"
+        }
+      },
+      "required": [
+        "after_checkout",
+        "before_start",
+        "build_base",
+        "post_clone",
+        "post_start"
+      ],
+      "title": "EnvironmentHooks",
+      "type": "object"
+    },
+    "EnvironmentScript": {
+      "additionalProperties": false,
+      "description": "An inline shell script run as the environment's user, with the workspace\ndirectory `/sandbox` as cwd.",
+      "properties": {
+        "run": {
+          "description": "Shell script to run in the workspace directory `/sandbox`.",
+          "minLength": 1,
+          "title": "Run",
+          "type": "string"
         }
       },
       "required": [
-        "dockerfile_append",
-        "setup"
+        "run"
       ],
-      "title": "EnvironmentImage",
+      "title": "EnvironmentScript",
       "type": "object"
     },
     "EnvironmentSource": {
-      "description": "How a session's environment was chosen. None (the field is nullable)\nwhen the config carried an inline environment block and no resolution ran \u2014\nan inline environment is not a reference, so there is nothing to record.\n\nNot derivable from the row: `environment_id` says WHICH environment, not\nhow it was chosen, and is null for the built-in basic sandbox.",
+      "description": "How a session's environment was chosen. None (the field is nullable)\nwhen the config carried an inline environment block and no resolution ran \u2014\nan inline environment is not a reference, so there is nothing to record.\n\nNot derivable from the row: `environment_id` says WHICH environment, not\nhow it was chosen, and is null for the built-in basic environment.",
       "enum": [
         "request",
-        "automation",
+        "agent",
         "repo_default",
         "account_default",
         "platform_default"
@@ -939,7 +1004,7 @@
     },
     "EnvironmentVariable": {
       "additionalProperties": false,
-      "description": "One environment variable injected into the agent's sandbox.\n\n`value`, when set, is a literal injected as-is \u2014 use it for non-secret\nconfig (LOG_LEVEL, an API base URL). When `value` is omitted the value is\nresolved at run time from the account's sandbox-secrets store (dashboard\n/ `PUT /v1/secrets`) by `name`, so a secret can be injected without\never putting it in the config file. Either way the variable only reaches\nagents that name it.",
+      "description": "One environment variable injected into the session's environment.\n\n`value`, when set, is a literal injected as-is \u2014 use it for non-secret\nconfig (LOG_LEVEL, an API base URL). When `value` is omitted the value is\nresolved at run time from the account's secrets store (dashboard\n/ `PUT /v1/secrets`) by `name`, so a secret can be injected without\never putting it in the config file. Either way the variable only reaches\nagents that name it.",
       "properties": {
         "name": {
           "title": "Name",
@@ -995,6 +1060,10 @@
               "title": "Include"
             }
           },
+          "required": [
+            "exclude",
+            "include"
+          ],
           "title": "GithubAccountFilter",
           "type": "object"
         },
@@ -1065,9 +1134,60 @@
       "title": "GithubAccountType",
       "type": "string"
     },
+    "GithubIssueEvent": {
+      "properties": {
+        "action": {
+          "$ref": "#/$defs/IssueAction"
+        },
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "number": {
+          "title": "Number",
+          "type": "integer"
+        },
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "title": {
+          "title": "Title",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.issue",
+          "default": "github.issue",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "number",
+        "repository",
+        "title",
+        "type",
+        "url"
+      ],
+      "title": "GithubIssueEvent",
+      "type": "object"
+    },
     "GithubPermissions": {
       "additionalProperties": false,
-      "description": "The agent's GitHub access: the scope of the installation token minted for\nits sandbox \u2014 the credential `git`, `gh`, and the GitHub MCP server\nauthenticate with.\n\nBy default the token carries the installation's full permissions on all of\nthe installation's repositories. `permissions` narrows what it may do:\nthe string `read_only` grants read access to contents, issues, metadata and\npull requests; a map requests explicit levels per GitHub App permission\nscope (e.g. `{contents: read, pull_requests: write}`) and may never exceed\nwhat the installation granted. `repositories` scopes the token to exactly\nthe listed repos, by name (they must belong to the installation).\n\nRestriction is enforced by GitHub, not by Ellipsis: the token itself is\nminted with the reduced scope, so nothing running in the sandbox can\nexceed it.",
+      "description": "The agent's GitHub access: the scope of the installation token minted for\nits session's environment \u2014 the credential `git`, `gh`, and the GitHub MCP\nserver authenticate with.\n\nBy default the token carries the installation's full permissions on all of\nthe installation's repositories. `permissions` narrows what it may do:\nthe string `read_only` grants read access to contents, issues, metadata and\npull requests; a map requests explicit levels per GitHub App permission\nscope (e.g. `{contents: read, pull_requests: write}`) and may never exceed\nwhat the installation granted. `repositories` scopes the token to exactly\nthe listed repos, by name (they must belong to the installation).\n\nRestriction is enforced by GitHub, not by Ellipsis: the token itself is\nminted with the reduced scope, so nothing running in the environment can\nexceed it.",
       "properties": {
         "permissions": {
           "anyOf": [
@@ -1111,114 +1231,194 @@
       "title": "GithubPermissions",
       "type": "object"
     },
-    "GithubSourceDetails": {
-      "description": "Identifies the file a GitHub-sourced automation is synced from.\n\nKeyed on the repository ID (not owner/name) so repository and org renames\ndon't orphan the config; resolve display names from gh_repositories at\nread time.",
-      "properties": {
-        "branch": {
-          "title": "Branch",
-          "type": "string"
-        },
-        "path": {
-          "title": "Path",
-          "type": "string"
-        },
-        "repo_id": {
-          "title": "Repo Id",
-          "type": "integer"
-        }
-      },
-      "required": [
-        "branch",
-        "path",
-        "repo_id"
-      ],
-      "title": "GithubSourceDetails",
-      "type": "object"
-    },
-    "Harness": {
-      "enum": [
-        "claude_code",
-        "codex"
-      ],
-      "title": "Harness",
-      "type": "string"
-    },
-    "HarnessOptions": {
-      "discriminator": {
-        "mapping": {
-          "claude_code": "#/$defs/ClaudeConfig",
-          "codex": "#/$defs/CodexConfig"
-        },
-        "propertyName": "type"
-      },
-      "oneOf": [
-        {
-          "$ref": "#/$defs/ClaudeConfig"
-        },
-        {
-          "$ref": "#/$defs/CodexConfig"
-        }
-      ]
-    },
-    "InputContract": {
-      "additionalProperties": false,
-      "description": "The typed input contract: what goes INTO a session (the trigger is\nwhen it happens; this is what goes in).\n\n`json_schema` types the payload a caller-started session takes\n(`POST /v1/sessions` `input`, validated at the door; required when\ndeclared). It is illegal on a react-triggered agent \u2014 react payloads are\nplatform-shaped (the published surface field sets), not caller-shaped.\n\n`message` is the initial-message template: exact `{{path}}` substitution\nover the caller payload (or, on a react agent, over the surface's\npublished fields), no conditionals/loops/filters. Refs are validated at\ndeploy time against the governing field set (see AutomationConfig's\n`_check_input`).",
+    "GithubPullRequestEvent": {
       "properties": {
-        "json_schema": {
+        "action": {
           "anyOf": [
             {
-              "additionalProperties": true,
-              "type": "object"
+              "$ref": "#/$defs/PullRequestAction"
             },
             {
-              "type": "null"
+              "const": "review_commented",
+              "type": "string"
             }
           ],
-          "default": null,
-          "title": "Json Schema"
+          "title": "Action"
         },
-        "message": {
+        "actor": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/SessionEventActor"
             },
             {
               "type": "null"
             }
           ],
-          "default": null,
-          "title": "Message"
-        }
-      },
-      "required": [
-        "json_schema",
-        "message"
-      ],
-      "title": "InputContract",
-      "type": "object"
-    },
-    "Instructions": {
-      "anyOf": [
-        {
+          "default": null
+        },
+        "branch": {
+          "title": "Branch",
           "type": "string"
         },
-        {
-          "$ref": "#/$defs/SystemFileRef"
+        "number": {
+          "title": "Number",
+          "type": "integer"
         },
-        {
-          "items": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "$ref": "#/$defs/SystemFileRef"
-              }
-            ]
-          },
-          "type": "array"
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "title": {
+          "title": "Title",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.pull_request",
+          "default": "github.pull_request",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
         }
-      ]
+      },
+      "required": [
+        "action",
+        "actor",
+        "branch",
+        "number",
+        "repository",
+        "title",
+        "type",
+        "url"
+      ],
+      "title": "GithubPullRequestEvent",
+      "type": "object"
+    },
+    "GithubPushEvent": {
+      "properties": {
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "after": {
+          "title": "After",
+          "type": "string"
+        },
+        "before": {
+          "title": "Before",
+          "type": "string"
+        },
+        "branch": {
+          "title": "Branch",
+          "type": "string"
+        },
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.push",
+          "default": "github.push",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "actor",
+        "after",
+        "before",
+        "branch",
+        "repository",
+        "type",
+        "url"
+      ],
+      "title": "GithubPushEvent",
+      "type": "object"
+    },
+    "GithubSourceDetails": {
+      "description": "Identifies the file a GitHub-sourced agent is synced from.\n\nIdentified by the repository ID (not owner/name) so repository and org renames\ndon't orphan the config; resolve display names from gh_repositories at\nread time.",
+      "properties": {
+        "branch": {
+          "title": "Branch",
+          "type": "string"
+        },
+        "path": {
+          "title": "Path",
+          "type": "string"
+        },
+        "repo_id": {
+          "title": "Repo Id",
+          "type": "integer"
+        }
+      },
+      "required": [
+        "branch",
+        "path",
+        "repo_id"
+      ],
+      "title": "GithubSourceDetails",
+      "type": "object"
+    },
+    "HandlerService": {
+      "description": "The service whose events a handler responds to.",
+      "enum": [
+        "slack",
+        "github",
+        "linear",
+        "sentry"
+      ],
+      "title": "HandlerService",
+      "type": "string"
+    },
+    "InputContract": {
+      "additionalProperties": false,
+      "description": "The typed input contract: what goes INTO a session (the trigger is\nwhen it happens; this is what goes in).\n\n`json_schema` validates customer data sent as `input` to\n`POST /v1/agents/{id}/sessions` and stored as `session.input`.\nInvocations require input when a schema is declared. React agents\ncannot declare schemas: the platform defines their event payloads.\n\n`message` is the initial-message template: exact `{{path}}` substitution\nover the caller payload (or, on a react agent, over the surface's\npublished fields), no conditionals/loops/filters. Refs are validated at\ndeploy time against the governing field set (see AgentConfig's\n`_check_input`).",
+      "properties": {
+        "json_schema": {
+          "anyOf": [
+            {
+              "additionalProperties": true,
+              "type": "object"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Json Schema"
+        },
+        "message": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Message"
+        }
+      },
+      "required": [
+        "json_schema",
+        "message"
+      ],
+      "title": "InputContract",
+      "type": "object"
     },
     "IssueAction": {
       "enum": [
@@ -1246,9 +1446,77 @@
       "title": "LinearIssueAction",
       "type": "string"
     },
+    "LinearIssueEvent": {
+      "properties": {
+        "action": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/LinearIssueAction"
+            },
+            {
+              "const": "commented",
+              "type": "string"
+            }
+          ],
+          "title": "Action"
+        },
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "identifier": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Identifier"
+        },
+        "number": {
+          "title": "Number",
+          "type": "integer"
+        },
+        "title": {
+          "title": "Title",
+          "type": "string"
+        },
+        "type": {
+          "const": "linear.issue",
+          "default": "linear.issue",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "identifier",
+        "number",
+        "title",
+        "type",
+        "url"
+      ],
+      "title": "LinearIssueEvent",
+      "type": "object"
+    },
     "McpRemoteServer": {
       "additionalProperties": false,
-      "description": "A bring-your-own remote MCP server: the harness talks HTTP to `url`.\nNothing runs in the sandbox image. `headers` carry static auth (e.g.\n`Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret\nreferences, resolved at run time from the account's secrets store.",
+      "description": "A bring-your-own remote MCP server: the harness talks HTTP to `url`.\nNothing runs in the environment image. `headers` carry static auth (e.g.\n`Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret\nreferences, resolved at run time from the account's secrets store.",
       "properties": {
         "headers": {
           "additionalProperties": {
@@ -1292,7 +1560,7 @@
     },
     "McpStdioServer": {
       "additionalProperties": false,
-      "description": "A bring-your-own stdio MCP server: the harness spawns `command` inside\nthe sandbox and speaks JSON-RPC over its stdin/stdout. The command must be\nrunnable in the sandbox image \u2014 install its runtime via `image.setup` /\n`image.dockerfile_append` if the base image lacks it.\n\n`env` values may embed `${NAME}` references, resolved at run time from the\naccount's secrets store (see `mcp_secret_refs`); everything else is passed\nliterally.",
+      "description": "A bring-your-own stdio MCP server: the harness spawns `command` inside\nthe environment and speaks JSON-RPC over its stdin/stdout. The command must\nbe runnable in the environment image \u2014 install its runtime via `hooks.build_base` /\n`hooks.after_checkout` if the managed environment lacks it.\n\n`env` values may embed `${NAME}` references, resolved at run time from the\naccount's secrets store (see `mcp_secret_refs`); everything else is passed\nliterally.",
       "properties": {
         "args": {
           "default": [],
@@ -1382,18 +1650,9 @@
       "title": "OutputConfig",
       "type": "object"
     },
-    "ParentKind": {
-      "description": "How a session relates to its predecessor (parent_agent_session_id) \u2014\nthe ONE \"preceded-by\" chain for every predecessor relationship. Routing\nreads this when the distinction matters.\n\nCONTINUATION \u2014 a follow-up in the same conversation surface (e.g. a Slack\nthread reply spawning a fresh session on the same thread).\nRESUME \u2014 a conversation re-hosted on a new box after its sandbox was torn\ndown (interactive platform; later phase).",
-      "enum": [
-        "continuation",
-        "resume"
-      ],
-      "title": "ParentKind",
-      "type": "string"
-    },
     "PermissionsConfig": {
       "additionalProperties": false,
-      "description": "What the agent is allowed to touch, per credential the platform mints\ninto its sandbox. Distinct from `environment:`, which is where the agent\nruns; this is what it may do from there.\n\n`ellipsis` scopes the sandbox's Ellipsis API token\n(`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates\nwith). `true` / the string `all` (the default) grant the full sandbox\nceiling \u2014 everything a sandbox token can ever do. A map narrows it per\nresource (see `EllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) \u2014\nsee `GithubPermissions`. GitHub enforces it at mint time.",
+      "description": "What the agent is allowed to touch, per credential the platform mints\ninto its session's environment. Distinct from `environment:`, which is\nwhere the agent runs; this is what it may do from there.\n\n`ellipsis` scopes the session's Ellipsis API token (`ELLIPSIS_API_TOKEN`,\nwhat the `agent` CLI running inside the session authenticates with).\n`true` / the string `all` (the default) grant the full session token\nceiling \u2014 everything a session token can ever do. A map narrows it per\nresource (see `EllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the session's GitHub installation token (`GH_TOKEN`) \u2014\nsee `GithubPermissions`. GitHub enforces it at mint time.",
       "properties": {
         "ellipsis": {
           "anyOf": [
@@ -1432,6 +1691,7 @@
         "ephemeral_trigger",
         "non_interactive",
         "harness_single_turn",
+        "budget_exhausted",
         "closed"
       ],
       "title": "PromptBlockedReason",
@@ -1759,6 +2019,10 @@
               "type": "array"
             }
           },
+          "required": [
+            "exclude",
+            "include"
+          ],
           "title": "RepositoryFilter",
           "type": "object"
         },
@@ -1816,7 +2080,6 @@
         "account",
         "alerts",
         "sessions",
-        "files",
         "memories",
         "reviews",
         "configs",
@@ -1832,22 +2095,6 @@
       "title": "Resource",
       "type": "string"
     },
-    "RunStatus": {
-      "description": "What the current (or most recent) execution is doing (backs `run`).",
-      "enum": [
-        "scheduled",
-        "starting",
-        "working",
-        "waiting",
-        "done",
-        "failed",
-        "stopped",
-        "cancelled",
-        "retrying"
-      ],
-      "title": "RunStatus",
-      "type": "string"
-    },
     "SandboxCacheTier": {
       "description": "Which image-cache tier a sandbox creation took \u2014 the customer-facing\nnames for `create_sandbox_from_default`'s exact / latest / default tiers.\nRides on `Sandbox.cache_tier` and the sandbox_ready lifecycle record.",
       "enum": [
@@ -1971,237 +2218,10 @@
       "title": "SandboxRepository",
       "type": "object"
     },
-    "SandboxResponse": {
+    "SandboxSnapshotFrame": {
       "properties": {
-        "cache_tier": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/SandboxCacheTier"
-            },
-            {
-              "type": "null"
-            }
-          ]
-        },
-        "cost_sandbox_cpu": {
-          "title": "Cost Sandbox Cpu",
-          "type": "integer"
-        },
-        "cost_sandbox_memory": {
-          "title": "Cost Sandbox Memory",
-          "type": "integer"
-        },
-        "cpu": {
-          "title": "Cpu",
-          "type": "number"
-        },
-        "dockerfile": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Dockerfile"
-        },
-        "encrypted_ports": {
-          "items": {
-            "type": "integer"
-          },
-          "title": "Encrypted Ports",
-          "type": "array"
-        },
-        "environment_variable_keys": {
-          "items": {
-            "type": "string"
-          },
-          "title": "Environment Variable Keys",
-          "type": "array"
-        },
-        "failed_at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Failed At"
-        },
-        "id": {
-          "title": "Id",
-          "type": "string"
-        },
-        "image_setup": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Image Setup"
-        },
-        "memory_mib": {
-          "title": "Memory Mib",
-          "type": "integer"
-        },
-        "phase_timings": {
-          "additionalProperties": {
-            "type": "number"
-          },
-          "title": "Phase Timings",
-          "type": "object"
-        },
-        "post_clone": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Post Clone"
-        },
-        "post_start": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Post Start"
-        },
-        "repositories": {
-          "items": {
-            "$ref": "#/$defs/SandboxRepository"
-          },
-          "title": "Repositories",
-          "type": "array"
-        },
-        "running_at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Running At"
-        },
-        "scheduled_at": {
-          "format": "date-time",
-          "title": "Scheduled At",
-          "type": "string"
-        },
-        "source": {
-          "$ref": "#/$defs/SandboxSource"
-        },
-        "source_session_id": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Source Session Id"
-        },
-        "status": {
-          "$ref": "#/$defs/SandboxStatus"
-        },
-        "terminated_at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Terminated At"
-        },
-        "terminating_at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Terminating At"
-        },
-        "timeout_seconds": {
-          "title": "Timeout Seconds",
-          "type": "integer"
-        },
-        "tunnels": {
-          "items": {
-            "$ref": "#/$defs/SandboxPort"
-          },
-          "title": "Tunnels",
-          "type": "array"
-        },
-        "type": {
-          "$ref": "#/$defs/SandboxType"
-        },
-        "unencrypted_ports": {
-          "items": {
-            "type": "integer"
-          },
-          "title": "Unencrypted Ports",
-          "type": "array"
-        }
-      },
-      "required": [
-        "cache_tier",
-        "cost_sandbox_cpu",
-        "cost_sandbox_memory",
-        "cpu",
-        "dockerfile",
-        "encrypted_ports",
-        "environment_variable_keys",
-        "failed_at",
-        "id",
-        "image_setup",
-        "memory_mib",
-        "phase_timings",
-        "post_clone",
-        "post_start",
-        "repositories",
-        "running_at",
-        "scheduled_at",
-        "source",
-        "source_session_id",
-        "status",
-        "terminated_at",
-        "terminating_at",
-        "timeout_seconds",
-        "tunnels",
-        "type",
-        "unencrypted_ports"
-      ],
-      "title": "SandboxResponse",
-      "type": "object"
-    },
-    "SandboxSnapshotFrame": {
-      "properties": {
-        "sandbox": {
-          "$ref": "#/$defs/SandboxResponse"
+        "sandbox": {
+          "$ref": "#/$defs/VMExecutionResponse"
         },
         "type": {
           "const": "snapshot",
@@ -2222,7 +2242,7 @@
         "cli",
         "web_ui",
         "ingest_pull_request_job_run",
-        "agent_session",
+        "session",
         "image_refresh",
         "test",
         "script"
@@ -2253,7 +2273,7 @@
     "SandboxUpdateFrame": {
       "properties": {
         "sandbox": {
-          "$ref": "#/$defs/SandboxResponse"
+          "$ref": "#/$defs/VMExecutionResponse"
         },
         "type": {
           "const": "sandbox",
@@ -2277,97 +2297,59 @@
       "title": "SentryAction",
       "type": "string"
     },
-    "Session": {
-      "description": "An agent session: one conversation with an agent, from trigger to\nterminal state. Returned by `GET /v1/sessions/{id}` and carried by the\nsession stream's `session`/`snapshot` frames \u2014 REST and stream never\ndisagree about what a session looks like.",
+    "SentryAlertEvent": {
       "properties": {
-        "attribution": {
-          "$ref": "#/$defs/SessionAttribution",
-          "description": "The principal this session is attributed to."
-        },
-        "automation": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/SessionAutomation"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "The automation the session was started from, or null for a raw session started with POST /v1/sessions."
-        },
-        "budget": {
-          "$ref": "#/$defs/SessionBudget",
-          "description": "The spend budget enforced for this session."
-        },
-        "config": {
-          "$ref": "#/$defs/SessionConfig",
-          "description": "What the session ran on, frozen when it was created: the harness block, the resolved environment, permissions, skills, output contract, and budget."
+        "action": {
+          "$ref": "#/$defs/SentryAction"
         },
-        "context_repository": {
+        "actor": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/SessionEventActor"
             },
             {
               "type": "null"
             }
           ],
-          "default": null,
-          "description": "The \"owner/name\" repository context the session was started in, if any.",
-          "title": "Context Repository"
-        },
-        "cost": {
-          "$ref": "#/$defs/SessionCost",
-          "description": "What the session cost, in millicents, broken down by leg and carrying its own total."
+          "default": null
         },
-        "created_at": {
-          "description": "When the session was created.",
-          "format": "date-time",
-          "title": "Created At",
+        "organization_slug": {
+          "title": "Organization Slug",
           "type": "string"
         },
-        "environment": {
-          "$ref": "#/$defs/SessionEnvironment",
-          "description": "The environment the session resolved: the saved environment's id and how it was chosen. The environment's frozen body is `config.environment`."
-        },
-        "exit_status": {
+        "project_slug": {
           "anyOf": [
             {
-              "$ref": "#/$defs/SessionExitStatus"
+              "type": "string"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "How the session ended; null until it is terminal."
+          "title": "Project Slug"
         },
-        "git": {
+        "title": {
           "anyOf": [
             {
-              "$ref": "#/$defs/SessionGit"
+              "type": "string"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "What the session did to git, one entry per repository in its workspace: the commit and branch it sits on, per-file line counts for its uncommitted changes, and the pull requests it opened. Null if nothing was ever captured."
-        },
-        "harness": {
-          "$ref": "#/$defs/Harness",
-          "description": "The coding-agent harness the session runs on."
+          "title": "Title"
         },
-        "id": {
-          "description": "Unique identifier of the session.",
-          "title": "Id",
+        "type": {
+          "const": "sentry.alert",
+          "default": "sentry.alert",
+          "title": "Type",
           "type": "string"
         },
-        "last_activity_at": {
+        "url": {
           "anyOf": [
             {
-              "format": "date-time",
               "type": "string"
             },
             {
@@ -2375,89 +2357,261 @@
             }
           ],
           "default": null,
-          "description": "When the session last showed activity.",
-          "title": "Last Activity At"
-        },
-        "last_message_at": {
-          "anyOf": [
+          "title": "Url"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "organization_slug",
+        "project_slug",
+        "title",
+        "type",
+        "url"
+      ],
+      "title": "SentryAlertEvent",
+      "type": "object"
+    },
+    "Session": {
+      "additionalProperties": false,
+      "allOf": [
+        {
+          "oneOf": [
             {
-              "format": "date-time",
-              "type": "string"
+              "properties": {
+                "claude_code": {
+                  "additionalProperties": true,
+                  "type": "object"
+                },
+                "codex": {
+                  "type": "null"
+                }
+              },
+              "required": [
+                "claude_code",
+                "codex"
+              ]
             },
             {
-              "type": "null"
+              "properties": {
+                "claude_code": {
+                  "type": "null"
+                },
+                "codex": {
+                  "additionalProperties": true,
+                  "type": "object"
+                }
+              },
+              "required": [
+                "claude_code",
+                "codex"
+              ]
+            }
+          ]
+        }
+      ],
+      "description": "An agent session: one conversation with an agent. Returned by\n`GET /v1/sessions/{id}` and carried by the session stream's\n`session`/`snapshot` frames; REST and stream never disagree about what a\nsession looks like.",
+      "properties": {
+        "agent": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionAgent"
+            },
+            {
+              "type": "null"
             }
           ],
           "default": null,
-          "description": "When the session last received a message.",
-          "title": "Last Message At"
+          "description": "The agent the session was started from, or null for a raw session started with POST /v1/sessions."
         },
-        "metadata": {
-          "additionalProperties": {
-            "type": "string"
-          },
-          "default": {},
-          "description": "Caller-supplied metadata key-value pairs.",
-          "title": "Metadata",
-          "type": "object"
+        "archived": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionArchived"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "When and by whom the session was archived; null when unarchived. Archiving does not stop or close a session."
         },
-        "parent": {
-          "$ref": "#/$defs/SessionParent",
-          "description": "What preceded this session, if anything."
+        "attribution": {
+          "$ref": "#/$defs/SessionAttribution",
+          "description": "The principal this session is attributed to."
         },
-        "prompt": {
+        "budget": {
+          "default": 0,
+          "description": "The spend budget enforced for this session, in US dollars, after resolving defaults and ceilings.",
+          "title": "Budget",
+          "type": "number"
+        },
+        "claude_code": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/ClaudeConfig"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "The per-session prompt the session was started with.",
-          "title": "Prompt"
+          "description": "Claude Code input and native options. Set exactly one of claude_code or codex."
         },
-        "prompting": {
-          "$ref": "#/$defs/SessionPrompting",
-          "description": "Whether a client may send this session a message and, when it may not, the reason to show instead of a composer."
+        "codex": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/CodexConfig"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Codex input and native options. Set exactly one of claude_code or codex."
+        },
+        "conversation": {
+          "$ref": "#/$defs/SessionConversation",
+          "description": "Whether the session can take more messages, and whether an agent is warm to answer one."
+        },
+        "cost": {
+          "$ref": "#/$defs/SessionCost",
+          "description": "What the session has cost so far, in millicents, broken down by leg and carrying its own total."
+        },
+        "created_at": {
+          "description": "When the session was created.",
+          "format": "date-time",
+          "title": "Created At",
+          "type": "string"
+        },
+        "environment": {
+          "$ref": "#/$defs/SessionEnvironment",
+          "description": "The full environment configuration frozen when the session was created, with the saved environment's id and how it was chosen."
+        },
+        "event": {
+          "anyOf": [
+            {
+              "discriminator": {
+                "mapping": {
+                  "github.issue": "#/$defs/GithubIssueEvent",
+                  "github.pull_request": "#/$defs/GithubPullRequestEvent",
+                  "github.push": "#/$defs/GithubPushEvent",
+                  "linear.issue": "#/$defs/LinearIssueEvent",
+                  "sentry.alert": "#/$defs/SentryAlertEvent",
+                  "slack.channel_created": "#/$defs/SlackChannelCreatedEvent",
+                  "slack.message": "#/$defs/SlackMessageEvent"
+                },
+                "propertyName": "type"
+              },
+              "oneOf": [
+                {
+                  "$ref": "#/$defs/GithubPullRequestEvent"
+                },
+                {
+                  "$ref": "#/$defs/GithubIssueEvent"
+                },
+                {
+                  "$ref": "#/$defs/GithubPushEvent"
+                },
+                {
+                  "$ref": "#/$defs/LinearIssueEvent"
+                },
+                {
+                  "$ref": "#/$defs/SlackMessageEvent"
+                },
+                {
+                  "$ref": "#/$defs/SlackChannelCreatedEvent"
+                },
+                {
+                  "$ref": "#/$defs/SentryAlertEvent"
+                }
+              ]
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The typed external event that started the session; null for direct and scheduled starts.",
+          "title": "Event"
         },
-        "session_state": {
+        "git": {
           "anyOf": [
             {
-              "$ref": "#/$defs/SessionState"
+              "$ref": "#/$defs/SessionGit"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "Lifecycle state of the durable conversation, or null for sessions without one."
+          "description": "What the session did to git, one entry per repository in its workspace: the commit and branch it sits on, per-file line counts for its uncommitted changes, and the pull requests it opened. Null if nothing was ever captured."
         },
-        "source": {
-          "$ref": "#/$defs/SessionSource",
-          "description": "Where the session came from (e.g. react, web, api, cli, mention, cron)."
+        "handler": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionHandler"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The saved handler and its effective display name when this session started, frozen at creation. Null for built-in responders, legacy sessions, and sessions started without a handler."
         },
-        "status": {
-          "$ref": "#/$defs/SessionStatus",
-          "description": "Execution status of the session."
+        "id": {
+          "description": "Unique identifier of the session.",
+          "title": "Id",
+          "type": "string"
+        },
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "default": {},
+          "description": "Caller-supplied metadata key-value pairs.",
+          "title": "Metadata",
+          "type": "object"
         },
-        "status_reason": {
+        "output": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/OutputConfig"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "Human-readable reason for the current status, when there is one.",
-          "title": "Status Reason"
+          "description": "The structured-output exit contract for this session."
         },
-        "stopped": {
-          "$ref": "#/$defs/SessionStopped",
-          "description": "The stop request, if the session was stopped."
+        "parent": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionParent"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The predecessor session this session continues; null when there is none."
+        },
+        "permissions": {
+          "$ref": "#/$defs/PermissionsConfig",
+          "description": "What the session may touch, per minted credential."
+        },
+        "skills": {
+          "description": "Skills installed for this session.",
+          "items": {
+            "$ref": "#/$defs/SkillRef"
+          },
+          "title": "Skills",
+          "type": "array"
+        },
+        "source": {
+          "$ref": "#/$defs/SessionSource",
+          "description": "Where the session came from (e.g. react, web, api, cli, mention, cron)."
         },
         "summary": {
           "anyOf": [
@@ -2471,25 +2625,21 @@
           "default": null,
           "description": "The latest live summary of the session's progress while it runs, and when it was generated."
         },
-        "surface": {
-          "$ref": "#/$defs/SessionSurface",
-          "description": "The public status projection: the durable conversation (`session`), the current execution (`run`), and the one derived `status` word."
-        },
         "tokens": {
           "$ref": "#/$defs/SessionTokens",
           "description": "The tokens the session spent and the model they went to. `total` includes the prompt-cache lanes."
         },
-        "trigger": {
+        "turn": {
           "anyOf": [
             {
-              "$ref": "#/$defs/SessionTrigger"
+              "$ref": "#/$defs/SessionTurn"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "The external event that started the session."
+          "description": "The turn in progress, or the latest one when none is running. Null until the session has a message. Wait on it: the message you sent is answered when the turn with your message's `turn_id` reaches a final status."
         },
         "updated_at": {
           "description": "When the session was last updated.",
@@ -2499,38 +2649,91 @@
         }
       },
       "required": [
+        "agent",
+        "archived",
         "attribution",
-        "automation",
         "budget",
-        "config",
-        "context_repository",
+        "claude_code",
+        "codex",
+        "conversation",
         "cost",
         "created_at",
         "environment",
-        "exit_status",
+        "event",
         "git",
-        "harness",
+        "handler",
         "id",
-        "last_activity_at",
-        "last_message_at",
         "metadata",
+        "output",
         "parent",
-        "prompt",
-        "prompting",
-        "session_state",
+        "permissions",
+        "skills",
         "source",
-        "status",
-        "status_reason",
-        "stopped",
         "summary",
-        "surface",
         "tokens",
-        "trigger",
+        "turn",
         "updated_at"
       ],
       "title": "Session",
       "type": "object"
     },
+    "SessionAgent": {
+      "description": "The agent this session was started from: the definition frozen\nwhen the session was created, and the saved agent it came from as it\nexists NOW. They diverge legitimately \u2014 a YAML edit after the session\nstarted leaves the pointer describing something the session never ran.",
+      "properties": {
+        "config": {
+          "$ref": "#/$defs/AgentConfig",
+          "description": "The agent definition the session was started from, frozen when the session was created."
+        },
+        "id": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Identifier of the saved agent this session's snapshot was taken from. Null for a routing-file agent, a code-review stage agent, or the built-in mention agent, which have no saved agent behind them. Points at the agent as it exists now, which may have changed since.",
+          "title": "Id"
+        }
+      },
+      "required": [
+        "config",
+        "id"
+      ],
+      "title": "SessionAgent",
+      "type": "object"
+    },
+    "SessionArchived": {
+      "description": "When the session was archived and the GitHub user who archived it.",
+      "properties": {
+        "at": {
+          "description": "When the session was archived.",
+          "format": "date-time",
+          "title": "At",
+          "type": "string"
+        },
+        "by": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/GithubAccountSnippet"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The GitHub user who archived the session; null if unknown or unavailable."
+        }
+      },
+      "required": [
+        "at",
+        "by"
+      ],
+      "title": "SessionArchived",
+      "type": "object"
+    },
     "SessionAttribution": {
       "description": "The principal a session is attributed to: what kind, its id, and \u2014 when\nthe kind is a GitHub user \u2014 the resolved display snippet.",
       "properties": {
@@ -2580,59 +2783,45 @@
       "title": "SessionAttribution",
       "type": "object"
     },
-    "SessionAutomation": {
-      "description": "The automation this session was started from: the definition frozen\nwhen the session was created, and the saved automation it came from as it\nexists NOW. They diverge legitimately \u2014 a YAML edit after the session\nstarted leaves the pointer describing something the session never ran.",
-      "properties": {
-        "config": {
-          "$ref": "#/$defs/AutomationConfig",
-          "description": "The automation definition the session was started from, frozen when the session was created."
-        },
-        "id": {
-          "anyOf": [
+    "SessionConfig": {
+      "additionalProperties": false,
+      "allOf": [
+        {
+          "oneOf": [
             {
-              "type": "string"
+              "properties": {
+                "claude_code": {
+                  "additionalProperties": true,
+                  "type": "object"
+                },
+                "codex": {
+                  "type": "null"
+                }
+              },
+              "required": [
+                "claude_code",
+                "codex"
+              ]
             },
             {
-              "type": "null"
+              "properties": {
+                "claude_code": {
+                  "type": "null"
+                },
+                "codex": {
+                  "additionalProperties": true,
+                  "type": "object"
+                }
+              },
+              "required": [
+                "claude_code",
+                "codex"
+              ]
             }
-          ],
-          "default": null,
-          "description": "Identifier of the saved automation this session's snapshot was taken from. Null for a routing-file agent, a code-review stage agent, or the built-in mention agent, which have no saved automation behind them. Points at the automation as it exists now, which may have changed since.",
-          "title": "Id"
-        }
-      },
-      "required": [
-        "config",
-        "id"
-      ],
-      "title": "SessionAutomation",
-      "type": "object"
-    },
-    "SessionBudget": {
-      "description": "The spend budget actually enforced for this session, and which layer of\nthe cascade set it.",
-      "properties": {
-        "cents": {
-          "default": 0,
-          "description": "The spend budget resolved for this session, in cents.",
-          "title": "Cents",
-          "type": "integer"
-        },
-        "source": {
-          "$ref": "#/$defs/BudgetSource",
-          "default": "account",
-          "description": "Where the resolved budget came from."
+          ]
         }
-      },
-      "required": [
-        "cents",
-        "source"
       ],
-      "title": "SessionBudget",
-      "type": "object"
-    },
-    "SessionConfig": {
-      "additionalProperties": false,
-      "description": "What one session runs on: its selected harness, where it runs, what it\nmay touch, its skills, its exit contract, and its spend cap. Every session\nfreezes one of these (`agent_sessions.session_config`); an automation\ncarries one under `session:` (`AutomationConfig.session`); and\n`POST /v1/sessions` is this shape flattened onto the request body, plus the\nrun settings. Nothing in here is an automation's identity or trigger \u2014\nthose belong to `AutomationConfig`.\n\nField order is the canonical key order for `session:` blocks and YAML\nexports: what runs (`harness`, `instructions`), where (`environment`), what it may\ntouch (`permissions`), then the rest.",
+      "description": "What one session runs on: its selected harness, where it runs, what it\nmay touch, its skills, its exit contract, and its spend cap. Every session\nfreezes one of these (`sessions.session_config`); an agent\ncarries one under `session:` (`AgentConfig.session`); and\n`POST /v1/sessions` is this shape flattened onto the request body, plus the\nrun settings. Nothing in here is an agent's identity or trigger \u2014\nthose belong to `AgentConfig`.\n\nField order is the canonical key order for `session:` blocks and YAML\nexports: what runs (`claude_code` or `codex`), where (`environment`), what it may\ntouch (`permissions`), then the rest.",
       "properties": {
         "budget": {
           "$ref": "#/$defs/BudgetConfig",
@@ -2643,28 +2832,51 @@
             "week": null
           }
         },
-        "environment": {
+        "claude_code": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/ClaudeConfig"
             },
             {
-              "$ref": "#/$defs/EnvironmentConfig"
+              "type": "null"
             }
           ],
-          "default": {
-            "compute": {
-              "cpu": null,
-              "memory": null,
-              "timeout": null
+          "default": null,
+          "description": "Claude Code input and native options. Set exactly one of claude_code or codex."
+        },
+        "codex": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/CodexConfig"
             },
-            "hooks": {
-              "post_clone": null,
-              "post_start": null
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Codex input and native options. Set exactly one of claude_code or codex."
+        },
+        "environment": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "$ref": "#/$defs/EnvironmentConfig"
+            }
+          ],
+          "default": {
+            "compute": {
+              "cpu": null,
+              "memory": null,
+              "timeout": null
             },
-            "image": {
-              "dockerfile_append": null,
-              "setup": null
+            "hooks": {
+              "after_checkout": null,
+              "before_start": null,
+              "build_base": null,
+              "post_clone": null,
+              "post_start": null
             },
             "mcp_servers": [],
             "repositories": [],
@@ -2672,15 +2884,6 @@
           },
           "title": "Environment"
         },
-        "harness": {
-          "$ref": "#/$defs/HarnessOptions",
-          "description": "The explicitly selected harness and its native options."
-        },
-        "instructions": {
-          "$ref": "#/$defs/Instructions",
-          "default": "",
-          "description": "Instructions appended to the harness's own prompt. Text and repository file references are resolved in order."
-        },
         "output": {
           "anyOf": [
             {
@@ -2713,9 +2916,9 @@
       },
       "required": [
         "budget",
+        "claude_code",
+        "codex",
         "environment",
-        "harness",
-        "instructions",
         "output",
         "permissions",
         "skills"
@@ -2723,9 +2926,46 @@
       "title": "SessionConfig",
       "type": "object"
     },
+    "SessionConversation": {
+      "description": "Whether the session can take more messages, and how quickly it would\nanswer one.",
+      "properties": {
+        "interactive": {
+          "description": "Whether the session stays open after its first turn.",
+          "title": "Interactive",
+          "type": "boolean"
+        },
+        "prompting": {
+          "$ref": "#/$defs/SessionPrompting",
+          "description": "The session's policy for direct messages. Caller authorization and message validation are checked separately."
+        },
+        "state": {
+          "$ref": "#/$defs/SessionState",
+          "description": "`open` while the session can take messages; `closed` is permanent."
+        },
+        "warm": {
+          "description": "Whether an agent is ready to answer the next message right away. When false, the next message first prepares an environment, which takes longer. A hint only; clients need no logic on it.",
+          "title": "Warm",
+          "type": "boolean"
+        }
+      },
+      "required": [
+        "interactive",
+        "prompting",
+        "state",
+        "warm"
+      ],
+      "title": "SessionConversation",
+      "type": "object"
+    },
     "SessionCost": {
       "description": "What a session (or one turn of it) cost, in millicents.\n\n`llm` is deliberately NOT called `tokens`: it would sit beside the `tokens`\nobject and read as \"the token count's cost\" rather than \"the cost of the\nLLM leg\".",
       "properties": {
+        "cpu": {
+          "default": 0,
+          "description": "CPU spend in millicents.",
+          "title": "Cpu",
+          "type": "integer"
+        },
         "fee": {
           "default": 0,
           "description": "Platform fee in millicents.",
@@ -2738,39 +2978,52 @@
           "title": "Llm",
           "type": "integer"
         },
-        "sandbox_cpu": {
-          "default": 0,
-          "description": "Sandbox CPU spend in millicents.",
-          "title": "Sandbox Cpu",
-          "type": "integer"
-        },
-        "sandbox_memory": {
+        "memory": {
           "default": 0,
-          "description": "Sandbox memory spend in millicents.",
-          "title": "Sandbox Memory",
+          "description": "Memory spend in millicents.",
+          "title": "Memory",
           "type": "integer"
         },
         "total": {
           "default": 0,
-          "description": "The grand total in millicents: llm + sandbox_cpu + sandbox_memory + fee.",
+          "description": "The grand total in millicents: llm + cpu + memory + fee.",
           "title": "Total",
           "type": "integer"
         }
       },
       "required": [
+        "cpu",
         "fee",
         "llm",
-        "sandbox_cpu",
-        "sandbox_memory",
+        "memory",
         "total"
       ],
       "title": "SessionCost",
       "type": "object"
     },
     "SessionEnvironment": {
-      "description": "The environment this session resolved: which saved environment (as it\nexists now) and how it was chosen. The environment's frozen BODY rides\ninside `config.environment` \u2014 substitution happens before the config\nsnapshot freezes \u2014 so this object is provenance, not payload.",
+      "additionalProperties": false,
+      "description": "The environment configuration frozen at session creation, enriched with\nthe saved environment's identity and how it was chosen.",
       "properties": {
-        "environment_id": {
+        "compute": {
+          "$ref": "#/$defs/ComputeConfig",
+          "default": {
+            "cpu": null,
+            "memory": null,
+            "timeout": null
+          }
+        },
+        "hooks": {
+          "$ref": "#/$defs/EnvironmentHooks",
+          "default": {
+            "after_checkout": null,
+            "before_start": null,
+            "build_base": null,
+            "post_clone": null,
+            "post_start": null
+          }
+        },
+        "id": {
           "anyOf": [
             {
               "type": "string"
@@ -2780,8 +3033,37 @@
             }
           ],
           "default": null,
-          "description": "Identifier of the saved environment the session's config resolved. Null for an inline environment block or the built-in basic sandbox.",
-          "title": "Environment Id"
+          "description": "Identifier of the saved environment the session's config resolved. Null for an inline environment block or the built-in basic environment.",
+          "title": "Id"
+        },
+        "mcp_servers": {
+          "default": [],
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "$ref": "#/$defs/McpServerRef"
+              },
+              {
+                "$ref": "#/$defs/McpStdioServer"
+              },
+              {
+                "$ref": "#/$defs/McpRemoteServer"
+              }
+            ]
+          },
+          "title": "Mcp Servers",
+          "type": "array"
+        },
+        "repositories": {
+          "default": [],
+          "items": {
+            "$ref": "#/$defs/RepositoryRef"
+          },
+          "title": "Repositories",
+          "type": "array"
         },
         "source": {
           "anyOf": [
@@ -2793,39 +3075,71 @@
             }
           ],
           "default": null,
-          "description": "How the environment was chosen (request, automation, platform_default; repo_default and account_default on sessions from before those ladders were removed). Null when the config carried its own inline environment."
+          "description": "How the environment was chosen (request, agent, platform_default; repo_default and account_default on sessions from before those ladders were removed). An inline request uses request; an inline environment declared in session configuration has no source."
+        },
+        "variables": {
+          "default": [],
+          "items": {
+            "$ref": "#/$defs/EnvironmentVariable"
+          },
+          "title": "Variables",
+          "type": "array"
         }
       },
       "required": [
-        "environment_id",
-        "source"
+        "compute",
+        "hooks",
+        "id",
+        "mcp_servers",
+        "repositories",
+        "source",
+        "variables"
       ],
       "title": "SessionEnvironment",
       "type": "object"
     },
-    "SessionExitStatus": {
-      "description": "Why a terminal agent session ended \u2014 a finer-grained reason than `status`.\n\n`status` (SessionStatus) is the lifecycle state: COMPLETED / ERROR /\nCANCELLED. `exit_status` explains *why* a run reached that terminal state, so\nthe UI and metrics can tell a budget cutoff apart from a crashed tool call or\na deliberate cancellation. It is None until the run reaches a terminal state.",
-      "enum": [
-        "completed",
-        "budget_hit",
-        "payment_required",
-        "tool_call_failed",
-        "lifecycle_hook_failed",
-        "missing_repo_access",
-        "missing_token_permissions",
-        "missing_sandbox_variables",
-        "blocked",
-        "contact_email_required",
-        "cancelled",
-        "interrupted",
-        "error",
-        "stopped"
+    "SessionEventActor": {
+      "description": "The event's initiator, when known; never inferred from resource ownership.",
+      "properties": {
+        "avatar_url": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Avatar Url"
+        },
+        "is_bot": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Is Bot"
+        },
+        "name": {
+          "title": "Name",
+          "type": "string"
+        }
+      },
+      "required": [
+        "avatar_url",
+        "is_bot",
+        "name"
       ],
-      "title": "SessionExitStatus",
-      "type": "string"
+      "title": "SessionEventActor",
+      "type": "object"
     },
     "SessionGit": {
-      "description": "Every repo the session touched. Small enough to ride on `agent_sessions`\nand be returned by every session read.",
+      "description": "Every repo the session touched. Small enough to ride on `sessions`\nand be returned by every session read.",
       "properties": {
         "repos": {
           "default": [],
@@ -2843,7 +3157,7 @@
       "type": "object"
     },
     "SessionGitCommit": {
-      "description": "One commit the session created in this repo (everything past the\nprovisioning checkout's sha), captured from the sandbox rather than the\ntranscript so it stays correct through amends, rebases, and commits made by\nscripts. The repo is the parent object, so it is not repeated here.",
+      "description": "One commit the session created in this repo (everything past the\nprovisioning checkout's sha), captured from the environment rather than the\ntranscript so it stays correct through amends, rebases, and commits made by\nscripts. The repo is the parent object, so it is not repeated here.",
       "properties": {
         "committed_at": {
           "format": "date-time",
@@ -2947,7 +3261,7 @@
       "type": "object"
     },
     "SessionGitRepo": {
-      "description": "One checkout in the session's sandbox and everything the session did to\nit, split by whether it survived the sandbox.",
+      "description": "One checkout in the session's environment and everything the session did\nto it, split by whether it survived the environment.",
       "properties": {
         "commits": {
           "default": [],
@@ -3032,6 +3346,41 @@
       "title": "SessionGitRepo",
       "type": "object"
     },
+    "SessionHandler": {
+      "description": "The saved handler and its display name when the session started.",
+      "properties": {
+        "agent_name": {
+          "description": "The handler's effective display name when the session started: ellipsis.name, or the service default (Slack, GitHub, Linear, or sentry).",
+          "minLength": 1,
+          "title": "Agent Name",
+          "type": "string"
+        },
+        "id": {
+          "description": "Identifier of the saved handler.",
+          "minLength": 1,
+          "title": "Id",
+          "type": "string"
+        },
+        "service": {
+          "$ref": "#/$defs/HandlerService",
+          "description": "The service the handler responds to."
+        },
+        "sha": {
+          "description": "Content fingerprint of the validated handler configuration used when the session started. This is not the Git commit SHA.",
+          "minLength": 1,
+          "title": "Sha",
+          "type": "string"
+        }
+      },
+      "required": [
+        "agent_name",
+        "id",
+        "service",
+        "sha"
+      ],
+      "title": "SessionHandler",
+      "type": "object"
+    },
     "SessionListStreamMessage": {
       "properties": {
         "session": {
@@ -3051,44 +3400,9 @@
       "title": "SessionListStreamMessage",
       "type": "object"
     },
-    "SessionLiveness": {
-      "description": "The durable conversation axis (backs the surfaced `session` field).",
-      "enum": [
-        "alive",
-        "idle",
-        "closed"
-      ],
-      "title": "SessionLiveness",
-      "type": "string"
-    },
     "SessionParent": {
-      "description": "The ONE \"preceded-by\" chain: the predecessor session and how this one\nrelates to it. Not a parent that orchestrates children \u2014 a session never\nspawns sub-sessions.",
+      "description": "The predecessor session this session continues.",
       "properties": {
-        "kind": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/ParentKind"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "How this session relates to its parent session, if any."
-        },
-        "replayed_from_session_id": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "Identifier of the original session this one was replayed from, if it was started via replay.",
-          "title": "Replayed From Session Id"
-        },
         "session_id": {
           "anyOf": [
             {
@@ -3099,13 +3413,11 @@
             }
           ],
           "default": null,
-          "description": "Identifier of the parent session that spawned this one, if any.",
+          "description": "Identifier of the predecessor session this session continues, if any.",
           "title": "Session Id"
         }
       },
       "required": [
-        "kind",
-        "replayed_from_session_id",
         "session_id"
       ],
       "title": "SessionParent",
@@ -3177,60 +3489,24 @@
       "type": "string"
     },
     "SessionState": {
-      "description": "Lifecycle of a keyed (multi-turn) session \u2014 the durable conversation.\nDistinct from SessionStatus, which is per-execution (one turn's run) and\nmoves to agent_turns in a later slice. IDLE: alive, waiting for the next\nmessage. RUNNING: a turn is executing. CLOSED: the conversation is done and\nits sandbox/snapshots are torn down.",
+      "description": "Whether the conversation can still take messages. `closed` is permanent:\na session with interactive false closes when its turn ends, and a conversation closes\nafter its closing message's turn.",
       "enum": [
-        "idle",
-        "running",
+        "open",
         "closed"
       ],
       "title": "SessionState",
       "type": "string"
     },
-    "SessionStatus": {
-      "enum": [
-        "scheduled",
-        "creating_sandbox",
-        "running",
-        "retrying",
-        "completed",
-        "error",
-        "cancelled",
-        "stopped"
-      ],
-      "title": "SessionStatus",
-      "type": "string"
-    },
     "SessionStopped": {
-      "description": "The stop request, if there was one: when, by which GitHub account id,\nand that account resolved to a display snippet.",
+      "description": "When a stop was requested and the GitHub user who requested it.",
       "properties": {
         "at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "When a stop was requested, if one was.",
-          "title": "At"
+          "description": "When a stop was requested.",
+          "format": "date-time",
+          "title": "At",
+          "type": "string"
         },
         "by": {
-          "anyOf": [
-            {
-              "type": "integer"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "GitHub account id of the user who stopped the session, if known.",
-          "title": "By"
-        },
-        "by_user": {
           "anyOf": [
             {
               "$ref": "#/$defs/GithubAccountSnippet"
@@ -3240,19 +3516,18 @@
             }
           ],
           "default": null,
-          "description": "The GitHub user who stopped the session, resolved at read time."
+          "description": "The GitHub user who stopped the session, resolved at read time. Null if the user is unknown or unavailable."
         }
       },
       "required": [
         "at",
-        "by",
-        "by_user"
+        "by"
       ],
       "title": "SessionStopped",
       "type": "object"
     },
     "SessionSummary": {
-      "description": "A live one-line summary of what the session is working on, refreshed\nevery few steps while it runs.",
+      "description": "A live one-line summary of what the session is doing, refreshed\nevery few steps while it runs.",
       "properties": {
         "created_at": {
           "anyOf": [
@@ -3269,7 +3544,7 @@
           "title": "Created At"
         },
         "description": {
-          "description": "One-line description of what the session is working on.",
+          "description": "One-line description of what the session is doing.",
           "title": "Description",
           "type": "string"
         }
@@ -3281,57 +3556,14 @@
       "title": "SessionSummary",
       "type": "object"
     },
-    "SessionSurface": {
-      "description": "The three fields we expose.\n\n`use_enum_values=True` (from CustomBaseModel) stores the members as their\nstring values, so this serializes to `{\"session\": \"alive\", \"run\": \"waiting\",\n\"status\": \"waiting\"}` \u2014 a plain object, not enum names.",
+    "SessionTokens": {
+      "description": "The token counts a session (or turn) spent, and the model they went to.\n\n`total` INCLUDES the cache lanes, unlike the old flat `tokens_total` which\ncounted input+output+thinking only and left callers to add cache reads and\nwrites back themselves (the deleted `tokensTotalAll` helper). Cache tokens\ndominate an agent run's token bill, so a \"total\" that omits them is the\nwrong default and produced two competing totals in the dashboard.",
       "properties": {
-        "run": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/RunStatus"
-            },
-            {
-              "type": "null"
-            }
-          ]
-        },
-        "session": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/SessionLiveness"
-            },
-            {
-              "type": "null"
-            }
-          ]
-        },
-        "status": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "title": "Status"
-        }
-      },
-      "required": [
-        "run",
-        "session",
-        "status"
-      ],
-      "title": "SessionSurface",
-      "type": "object"
-    },
-    "SessionTokens": {
-      "description": "The token counts a session (or turn) spent, and the model they went to.\n\n`total` INCLUDES the cache lanes, unlike the old flat `tokens_total` which\ncounted input+output+thinking only and left callers to add cache reads and\nwrites back themselves (the deleted `tokensTotalAll` helper). Cache tokens\ndominate an agent run's token bill, so a \"total\" that omits them is the\nwrong default and produced two competing totals in the dashboard.",
-      "properties": {
-        "cache_creation": {
-          "default": 0,
-          "description": "Tokens written to the prompt cache.",
-          "title": "Cache Creation",
-          "type": "integer"
+        "cache_creation": {
+          "default": 0,
+          "description": "Tokens written to the prompt cache.",
+          "title": "Cache Creation",
+          "type": "integer"
         },
         "cache_read": {
           "default": 0,
@@ -3375,10 +3607,20 @@
       "title": "SessionTokens",
       "type": "object"
     },
-    "SessionTrigger": {
-      "description": "The external event that started a session, without raw webhook payloads.",
+    "SessionTurn": {
+      "description": "One message and the agent's answer to it. A turn is `pending` from the\nmoment its message is received until the agent starts on it, `running`\nwhile the agent works, then `completed`, `failed`, `stopped`, or\n`cancelled`.",
       "properties": {
-        "action": {
+        "cost": {
+          "$ref": "#/$defs/SessionCost",
+          "description": "What the turn cost so far, in millicents, broken down by leg."
+        },
+        "created_at": {
+          "description": "When the turn's message was received.",
+          "format": "date-time",
+          "title": "Created At",
+          "type": "string"
+        },
+        "detail": {
           "anyOf": [
             {
               "type": "string"
@@ -3388,22 +3630,13 @@
             }
           ],
           "default": null,
-          "title": "Action"
-        },
-        "actor": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/SessionTriggerActor"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null
+          "description": "A human-readable explanation of a failed, stopped, or cancelled turn.",
+          "title": "Detail"
         },
-        "branch": {
+        "ended_at": {
           "anyOf": [
             {
+              "format": "date-time",
               "type": "string"
             },
             {
@@ -3411,23 +3644,35 @@
             }
           ],
           "default": null,
-          "title": "Branch"
+          "description": "When the turn reached its final status.",
+          "title": "Ended At"
         },
-        "number": {
+        "id": {
+          "description": "Unique identifier of the turn.",
+          "title": "Id",
+          "type": "string"
+        },
+        "index": {
+          "description": "Position in the session, starting at 0.",
+          "title": "Index",
+          "type": "integer"
+        },
+        "reason": {
           "anyOf": [
             {
-              "type": "integer"
+              "$ref": "#/$defs/TurnReason"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "title": "Number"
+          "description": "Why the turn failed or was cancelled; null on every other status."
         },
-        "repository": {
+        "started_at": {
           "anyOf": [
             {
+              "format": "date-time",
               "type": "string"
             },
             {
@@ -3435,61 +3680,118 @@
             }
           ],
           "default": null,
-          "title": "Repository"
+          "description": "When the agent started on the message.",
+          "title": "Started At"
         },
-        "surface": {
+        "status": {
+          "$ref": "#/$defs/TurnStatus",
+          "description": "Where the turn is."
+        },
+        "stopped": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/SessionStopped"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "title": "Surface"
+          "description": "When and by whom a stop was requested; null when none was."
         },
-        "title": {
+        "tokens": {
+          "$ref": "#/$defs/SessionTokens",
+          "description": "The tokens the turn spent and the model they went to."
+        }
+      },
+      "required": [
+        "cost",
+        "created_at",
+        "detail",
+        "ended_at",
+        "id",
+        "index",
+        "reason",
+        "started_at",
+        "status",
+        "stopped",
+        "tokens"
+      ],
+      "title": "SessionTurn",
+      "type": "object"
+    },
+    "SettingsRef": {
+      "additionalProperties": false,
+      "description": "A config-declared Claude Code settings.json, resolved at run start and\npassed to `claude --settings <path>`. That is the CLI settings tier \u2014 BELOW\nEllipsis's managed-settings.json floor \u2014 so it customizes behavior (model\npermissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a\nsecurity setting. Lets a team point the cloud agent at the same settings file\nthey already use with Claude Code locally instead of re-encoding it as YAML.",
+      "properties": {
+        "path": {
+          "title": "Path",
+          "type": "string"
+        },
+        "repository": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/RepositoryRef"
             },
             {
               "type": "null"
             }
           ],
-          "default": null,
-          "title": "Title"
+          "default": null
+        }
+      },
+      "required": [
+        "path",
+        "repository"
+      ],
+      "title": "SettingsRef",
+      "type": "object"
+    },
+    "SkillRef": {
+      "additionalProperties": false,
+      "description": "A repository directory containing SKILL.md and supporting UTF-8 files.\nResolved at run start and installed in the selected harness's skill directory.\nExplicit skill references require a model with the skills capability.",
+      "properties": {
+        "path": {
+          "title": "Path",
+          "type": "string"
         },
-        "url": {
+        "repository": {
           "anyOf": [
             {
-              "type": "string"
+              "$ref": "#/$defs/RepositoryRef"
             },
             {
               "type": "null"
             }
           ],
-          "default": null,
-          "title": "Url"
+          "default": null
         }
       },
       "required": [
-        "action",
-        "actor",
-        "branch",
-        "number",
-        "repository",
-        "surface",
-        "title",
-        "url"
+        "path",
+        "repository"
       ],
-      "title": "SessionTrigger",
+      "title": "SkillRef",
       "type": "object"
     },
-    "SessionTriggerActor": {
+    "SlackChannelCreatedEvent": {
       "properties": {
-        "avatar_url": {
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "channel_id": {
+          "title": "Channel Id",
+          "type": "string"
+        },
+        "channel_name": {
           "anyOf": [
             {
               "type": "string"
@@ -3499,115 +3801,365 @@
             }
           ],
           "default": null,
-          "title": "Avatar Url"
+          "title": "Channel Name"
         },
-        "is_bot": {
-          "default": false,
-          "title": "Is Bot",
-          "type": "boolean"
+        "type": {
+          "const": "slack.channel_created",
+          "default": "slack.channel_created",
+          "title": "Type",
+          "type": "string"
         },
-        "name": {
-          "title": "Name",
+        "url": {
+          "title": "Url",
           "type": "string"
         }
       },
       "required": [
-        "avatar_url",
-        "is_bot",
-        "name"
+        "actor",
+        "channel_id",
+        "channel_name",
+        "type",
+        "url"
       ],
-      "title": "SessionTriggerActor",
+      "title": "SlackChannelCreatedEvent",
       "type": "object"
     },
-    "SettingsRef": {
-      "additionalProperties": false,
-      "description": "A config-declared Claude Code settings.json, resolved at run start and\npassed to `claude --settings <path>`. That is the CLI settings tier \u2014 BELOW\nEllipsis's managed-settings.json floor \u2014 so it customizes behavior (model\npermissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a\nsecurity setting. Lets a team point the cloud agent at the same settings file\nthey already use with Claude Code locally instead of re-encoding it as YAML.",
+    "SlackMessageEvent": {
       "properties": {
-        "path": {
-          "title": "Path",
+        "action": {
+          "enum": [
+            "message",
+            "app_mention"
+          ],
+          "title": "Action",
           "type": "string"
         },
-        "repository": {
+        "actor": {
           "anyOf": [
             {
-              "$ref": "#/$defs/RepositoryRef"
+              "$ref": "#/$defs/SessionEventActor"
             },
             {
               "type": "null"
             }
           ],
           "default": null
-        }
-      },
-      "required": [
-        "path",
-        "repository"
-      ],
-      "title": "SettingsRef",
-      "type": "object"
-    },
-    "SkillRef": {
-      "additionalProperties": false,
-      "description": "A repository directory containing SKILL.md and supporting UTF-8 files.\nResolved at run start and installed in the selected harness's skill directory.\nExplicit skill references require a model with the skills capability.",
-      "properties": {
-        "path": {
-          "title": "Path",
+        },
+        "channel_id": {
+          "title": "Channel Id",
           "type": "string"
         },
-        "repository": {
+        "channel_name": {
           "anyOf": [
             {
-              "$ref": "#/$defs/RepositoryRef"
+              "type": "string"
             },
             {
               "type": "null"
             }
           ],
-          "default": null
+          "default": null,
+          "title": "Channel Name"
+        },
+        "message_ts": {
+          "title": "Message Ts",
+          "type": "string"
+        },
+        "thread_ts": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Thread Ts"
+        },
+        "type": {
+          "const": "slack.message",
+          "default": "slack.message",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
         }
       },
       "required": [
-        "path",
-        "repository"
+        "action",
+        "actor",
+        "channel_id",
+        "channel_name",
+        "message_ts",
+        "thread_ts",
+        "type",
+        "url"
       ],
-      "title": "SkillRef",
+      "title": "SlackMessageEvent",
       "type": "object"
     },
-    "SystemFileRef": {
-      "additionalProperties": false,
+    "TurnReason": {
+      "description": "Why a turn failed or was cancelled. Null on every other outcome.",
+      "enum": [
+        "error",
+        "tool_call_failed",
+        "budget_hit",
+        "payment_required",
+        "blocked",
+        "contact_email_required",
+        "lifecycle_hook_failed",
+        "missing_repo_access",
+        "missing_token_permissions",
+        "missing_environment_variables",
+        "missing_github_integration",
+        "agent_unavailable",
+        "upstream_unavailable",
+        "unsupported_configuration",
+        "execution_disabled",
+        "interrupted"
+      ],
+      "title": "TurnReason",
+      "type": "string"
+    },
+    "TurnStatus": {
+      "description": "Where one turn is: queued for an agent, being answered, or over.\n\n`pending` covers everything before the agent starts on the message: queued\nbehind another turn, waiting to start, or preparing the environment.\n`stopped` and `cancelled` are their own outcomes; `reason` explains a\n`failed` or `cancelled` turn.",
+      "enum": [
+        "pending",
+        "running",
+        "completed",
+        "failed",
+        "stopped",
+        "cancelled"
+      ],
+      "title": "TurnStatus",
+      "type": "string"
+    },
+    "VMExecutionResponse": {
       "properties": {
-        "file": {
-          "title": "File",
+        "cache_tier": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SandboxCacheTier"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "cost_sandbox_cpu": {
+          "title": "Cost Sandbox Cpu",
+          "type": "integer"
+        },
+        "cost_sandbox_memory": {
+          "title": "Cost Sandbox Memory",
+          "type": "integer"
+        },
+        "cpu": {
+          "title": "Cpu",
+          "type": "number"
+        },
+        "encrypted_ports": {
+          "items": {
+            "type": "integer"
+          },
+          "title": "Encrypted Ports",
+          "type": "array"
+        },
+        "environment_variable_keys": {
+          "items": {
+            "type": "string"
+          },
+          "title": "Environment Variable Keys",
+          "type": "array"
+        },
+        "failed_at": {
+          "anyOf": [
+            {
+              "format": "date-time",
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "title": "Failed At"
+        },
+        "hooks": {
+          "$ref": "#/$defs/EnvironmentHooks",
+          "default": {
+            "after_checkout": null,
+            "before_start": null,
+            "build_base": null,
+            "post_clone": null,
+            "post_start": null
+          }
+        },
+        "id": {
+          "title": "Id",
           "type": "string"
         },
-        "repository": {
+        "memory_mib": {
+          "title": "Memory Mib",
+          "type": "integer"
+        },
+        "phase_timings": {
+          "additionalProperties": {
+            "type": "number"
+          },
+          "title": "Phase Timings",
+          "type": "object"
+        },
+        "post_clone": {
           "anyOf": [
             {
-              "$ref": "#/$defs/RepositoryRef"
+              "type": "string"
             },
             {
               "type": "null"
             }
           ],
-          "default": null
+          "title": "Post Clone"
+        },
+        "post_start": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "title": "Post Start"
+        },
+        "repositories": {
+          "items": {
+            "$ref": "#/$defs/SandboxRepository"
+          },
+          "title": "Repositories",
+          "type": "array"
+        },
+        "running_at": {
+          "anyOf": [
+            {
+              "format": "date-time",
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "title": "Running At"
+        },
+        "scheduled_at": {
+          "format": "date-time",
+          "title": "Scheduled At",
+          "type": "string"
+        },
+        "source": {
+          "$ref": "#/$defs/SandboxSource"
+        },
+        "source_session_id": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "title": "Source Session Id"
+        },
+        "status": {
+          "$ref": "#/$defs/SandboxStatus"
+        },
+        "terminated_at": {
+          "anyOf": [
+            {
+              "format": "date-time",
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "title": "Terminated At"
+        },
+        "terminating_at": {
+          "anyOf": [
+            {
+              "format": "date-time",
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "title": "Terminating At"
+        },
+        "timeout_seconds": {
+          "title": "Timeout Seconds",
+          "type": "integer"
+        },
+        "tunnels": {
+          "items": {
+            "$ref": "#/$defs/SandboxPort"
+          },
+          "title": "Tunnels",
+          "type": "array"
+        },
+        "type": {
+          "$ref": "#/$defs/SandboxType"
+        },
+        "unencrypted_ports": {
+          "items": {
+            "type": "integer"
+          },
+          "title": "Unencrypted Ports",
+          "type": "array"
         }
       },
       "required": [
-        "file",
-        "repository"
+        "cache_tier",
+        "cost_sandbox_cpu",
+        "cost_sandbox_memory",
+        "cpu",
+        "encrypted_ports",
+        "environment_variable_keys",
+        "failed_at",
+        "hooks",
+        "id",
+        "memory_mib",
+        "phase_timings",
+        "post_clone",
+        "post_start",
+        "repositories",
+        "running_at",
+        "scheduled_at",
+        "source",
+        "source_session_id",
+        "status",
+        "terminated_at",
+        "terminating_at",
+        "timeout_seconds",
+        "tunnels",
+        "type",
+        "unencrypted_ports"
       ],
-      "title": "SystemFileRef",
+      "title": "VMExecutionResponse",
       "type": "object"
     }
   },
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "description": "Frames on /v1/sessions/stream, /v1/automations/stream and /v1/sandboxes/{id}/stream. Ignore unknown frame types.",
+  "description": "Frames on /v1/sessions/stream, /v1/agents/stream and /v1/vm-executions/{id}/stream. Ignore unknown frame types.",
   "oneOf": [
     {
       "$ref": "#/$defs/SessionListStreamMessage"
     },
     {
-      "$ref": "#/$defs/AutomationListStreamMessage"
+      "$ref": "#/$defs/AgentListStreamMessage"
     },
     {
       "$ref": "#/$defs/CollectionStreamHeartbeat"