@ellipsis-dev/sdk 0.30.0 → 0.32.0

package/schema/collection_frames.schema.json

@@ -229,7 +229,7 @@
     },
     "AgentIdentity": {
       "additionalProperties": false,
-      "description": "The Ellipsis product namespace for a config file: which schema this is\n(`version`), the human-facing identity (`name`/`description`), freeform\norganizational `metadata`, and whether the agent is `enabled`. The\npresence of a top-level `ellipsis:` mapping is what marks a YAML file as\nan Ellipsis agent (vs arbitrary YAML that merely lives under a\nconfig directory) \u2014 see `yaml_is_ellipsis_config`.\n\n`enabled` is agent behavior, not freeform metadata, so it stays inside\nthe config `sha` (only `metadata` is sha-excluded). Whether a session\naccepts messages is a per-run choice (POST /v1/sessions `interactive`),\nnot a config one.",
+      "description": "The Ellipsis product namespace for a config file: which schema this is\n(`version`), the human-facing identity (`name`/`description`), freeform\norganizational `metadata`, and whether the agent is `enabled`. The\npresence of a top-level `ellipsis:` mapping is what marks a YAML file as\nan Ellipsis agent (vs arbitrary YAML that merely lives under a\nconfig directory) \u2014 see `yaml_is_ellipsis_config`.\n\n`enabled` is agent behavior, not freeform metadata, so it stays inside\nthe config `sha` (only `metadata` is sha-excluded).",
       "properties": {
         "description": {
           "anyOf": [
@@ -324,6 +324,7 @@
     },
     "BudgetConfig": {
       "additionalProperties": false,
+      "description": "A saved agent's spend limits: the per-session cap plus its total spend\nover the trailing 1, 7, and 28 days.",
       "properties": {
         "day": {
           "anyOf": [
@@ -335,6 +336,7 @@
             }
           ],
           "default": null,
+          "description": "The most the agent may spend over the last day, in US dollars.",
           "title": "Day"
         },
         "month": {
@@ -347,6 +349,7 @@
             }
           ],
           "default": null,
+          "description": "The most the agent may spend over the last 28 days, in US dollars.",
           "title": "Month"
         },
         "session": {
@@ -360,6 +363,7 @@
             }
           ],
           "default": null,
+          "description": "The most one session may spend, in US dollars.",
           "title": "Session"
         },
         "week": {
@@ -372,6 +376,7 @@
             }
           ],
           "default": null,
+          "description": "The most the agent may spend over the last 7 days, in US dollars.",
           "title": "Week"
         }
       },
@@ -384,6 +389,14 @@
       "title": "BudgetConfig",
       "type": "object"
     },
+    "CheckRunAction": {
+      "description": "What a completed check run did. `failed` covers the conclusions that\nmean the check did not pass on its own merits (`failure`, `timed_out`); a\ncancelled, skipped, neutral or stale check is not a failure and never\nfires (see FAILED_CHECK_RUN_CONCLUSIONS).",
+      "enum": [
+        "failed"
+      ],
+      "title": "CheckRunAction",
+      "type": "string"
+    },
     "ClaudeConfig": {
       "additionalProperties": false,
       "description": "Native Claude Code options for an explicitly selected harness.",
@@ -425,16 +438,9 @@
           "title": "Max Turns"
         },
         "model": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "title": "Model"
+          "description": "The model the session runs on: an alias or canonical id from the models table. Required.",
+          "title": "Model",
+          "type": "string"
         },
         "prompt": {
           "anyOf": [
@@ -446,7 +452,7 @@
             }
           ],
           "default": null,
-          "description": "The initial user message, passed verbatim. Omit to start an interactive session idle.",
+          "description": "The initial user message, passed verbatim. Omit to start an interactive session with no turn, waiting for a message.",
           "title": "Prompt"
         },
         "settings": {
@@ -474,7 +480,7 @@
     },
     "CodexConfig": {
       "additionalProperties": false,
-      "description": "Native options supported by the current Codex adapter.\n\nOptions and capabilities expand only when their runtime behavior is tested.\nUnknown options are rejected instead of silently ignored.",
+      "description": "Native options supported by the current Codex adapter.",
       "properties": {
         "effort": {
           "anyOf": [
@@ -489,7 +495,7 @@
           "description": "Reasoning effort for every turn. Omit to use the model default."
         },
         "model": {
-          "default": "gpt-5.6-terra",
+          "description": "The model the session runs on: a Responses-capable id from the models table. Required.",
           "title": "Model",
           "type": "string"
         },
@@ -503,7 +509,7 @@
             }
           ],
           "default": null,
-          "description": "The initial user message, passed verbatim. Omit to start an interactive session idle.",
+          "description": "The initial user message, passed verbatim. Omit to start an interactive session with no turn, waiting for a message.",
           "title": "Prompt"
         }
       },
@@ -544,7 +550,7 @@
     },
     "ComputeConfig": {
       "additionalProperties": false,
-      "description": "Sandbox compute sizing. Every field is optional; None inherits the\nplatform default (2 vCPU / 4096 MiB / 3600s \u2014 see DEFAULT_SANDBOX_* in\nmodels/ellipsis/vms/vm_execution.py). A resolved value outside the platform\nbounds fails validation loudly (a sync error on the config) rather than\nbeing clamped silently.\n\n`memory` and `timeout` each accept a shorthand string (\"8GB\", \"30m\") or an\nexplicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /\n`timeout_seconds` properties resolve either form to the canonical integer\nthe sandbox driver consumes.\n\n`timeout` is the max wall-clock the agent may run before its execution is\nstopped, capped at 1h (MAX_SANDBOX_TIMEOUT_SECONDS \u2014 equal to the default, so\ntoday the knob only shortens a session; the cap matches the 1-hour validity\nof the sandbox's GitHub token). The worker's lease/visibility heartbeat\nceiling is derived from that cap, so a run at the max stays owned by its\nworker for its whole life.\n\nCompute currently uses a temporary flat one-cent amount per allocated\nexecution, subject to the account's existing free-compute exemptions.",
+      "description": "Environment compute sizing. Every field is optional; an omitted field\ninherits the platform default (2 vCPU / 4096 MiB / 3600s). A resolved value\noutside the platform bounds fails validation loudly (a sync error on the\nconfig) rather than being clamped silently.\n\n`memory` and `timeout` each accept a shorthand string (\"8GB\", \"30m\") or an\nexplicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /\n`timeout_seconds` properties resolve either form to the canonical integer\nthe environment is sized with.\n\n`timeout` is the max wall-clock the agent may run in one environment before\nit is stopped, capped at 1h (equal to the default, so today the knob only\nshortens a session; the cap matches the 1-hour validity of the session's\nGitHub token).\n\nCompute currently uses a temporary flat one-cent amount each time an\nenvironment is started for a session, subject to the account's existing\nfree-compute exemptions.",
       "properties": {
         "cpu": {
           "anyOf": [
@@ -635,17 +641,15 @@
       "title": "ConfigMetadata",
       "type": "object"
     },
-    "ConversationState": {
-      "enum": [
-        "open",
-        "closed"
-      ],
-      "title": "ConversationState",
-      "type": "string"
-    },
     "CronTrigger": {
       "additionalProperties": false,
+      "description": "A schedule: `schedule` is a five-field cron expression in UTC.\n\n`enabled: false` pauses the trigger and keeps its definition: the schedule\nstops firing while the agent stays live for on-demand starts and open\nsessions keep taking follow-ups (`ellipsis.enabled: false` pauses the\nwhole file instead). Re-enabling resumes at the next scheduled time; runs\nmissed while paused are not made up.",
       "properties": {
+        "enabled": {
+          "default": true,
+          "title": "Enabled",
+          "type": "boolean"
+        },
         "schedule": {
           "title": "Schedule",
           "type": "string"
@@ -658,6 +662,7 @@
         }
       },
       "required": [
+        "enabled",
         "schedule",
         "type"
       ],
@@ -729,7 +734,7 @@
     },
     "EllipsisGrant": {
       "additionalProperties": false,
-      "description": "One grant entry: a level, optionally narrowed to instances whose\nnatural key (a file's name, a memory's path, a secret's name, a config's\nname, a session's id) matches any of the `match` globs.",
+      "description": "One grant entry: a level, optionally narrowed to instances whose\nnatural key (a file's name, a secret's name, a config's name, a session's\nid) matches any of the `match` globs.",
       "properties": {
         "level": {
           "$ref": "#/$defs/Level"
@@ -781,7 +786,7 @@
           }
         ]
       },
-      "description": "`permissions.ellipsis` as a map: resource \u2192 level | grant | list of\ngrants. Levels are hierarchical (read < write < delete), so `write`\nincludes `read`. An unlisted resource is denied. The whole block is\nintersected with the platform's sandbox ceiling at token mint \u2014 it can\nnarrow what a sandbox token may do, never exceed it.",
+      "description": "`permissions.ellipsis` as a map: resource \u2192 level | grant | list of\ngrants. Levels are hierarchical (read < write < delete), so `write`\nincludes `read`. An unlisted resource is denied. The whole block is\nintersected with the platform's session token ceiling at token mint \u2014 it can\nnarrow what a session token may do, never exceed it.",
       "propertyNames": {
         "$ref": "#/$defs/Resource"
       },
@@ -805,11 +810,11 @@
             }
           ],
           "default": null,
-          "description": "Exact files relative to /sandbox, including the repository name. Only these files are available during build_base and their contents and modes determine reuse. Omit to use all repositories and invalidate on any source change; [] means no repository files.",
+          "description": "Exact files relative to the workspace directory `/sandbox`, including the repository name. Only these files are available during build_base and their contents and modes determine reuse. Omit to use all repositories and invalidate on any source change; [] means no repository files.",
           "title": "Inputs"
         },
         "run": {
-          "description": "Shell script to run in /sandbox.",
+          "description": "Shell script to run in the workspace directory `/sandbox`.",
           "minLength": 1,
           "title": "Run",
           "type": "string"
@@ -824,7 +829,7 @@
     },
     "EnvironmentConfig": {
       "additionalProperties": false,
-      "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
+      "description": "Everything about the environment the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
       "properties": {
         "compute": {
           "$ref": "#/$defs/ComputeConfig",
@@ -894,7 +899,7 @@
     },
     "EnvironmentHooks": {
       "additionalProperties": false,
-      "description": "Environment lifecycle scripts, in order: build_base, after_checkout,\nbefore_start. The first two produce reusable snapshots; before_start runs\nbefore an agent starts or resumes its session. Scripts run as the sandbox\nuser in /sandbox. A nonzero exit fails the session.\n\nLegacy post_start/post_clone scripts remain supported for existing configs;\nboth run after workspace preparation, before the agent starts or resumes.\nThey cannot be combined with the new lifecycle fields.",
+      "description": "Environment lifecycle scripts, in order: build_base, after_checkout,\nbefore_start. The first two produce reusable snapshots; before_start runs\nbefore an agent starts or resumes its session. Scripts run as the environment's\nuser in the workspace directory `/sandbox`. A nonzero exit fails the session.\n\nLegacy post_start/post_clone scripts remain supported for existing configs;\nboth run after workspace preparation, before the agent starts or resumes.\nThey cannot be combined with the new lifecycle fields.",
       "properties": {
         "after_checkout": {
           "anyOf": [
@@ -909,7 +914,7 @@
             }
           ],
           "default": null,
-          "description": "Prepare the requested source revision after Ellipsis checks out all repositories, before saving the prepared sandbox. Skipped when that prepared sandbox is reused.",
+          "description": "Prepare the requested source revision after Ellipsis checks out all repositories, before saving the prepared environment. Skipped when that prepared environment is reused.",
           "title": "After Checkout"
         },
         "before_start": {
@@ -925,7 +930,7 @@
             }
           ],
           "default": null,
-          "description": "Run before the agent starts or resumes a session, after the sandbox is ready. This hook is not cached and adds to session startup time.",
+          "description": "Run before the agent starts or resumes a session, after the environment is ready. This hook is not cached and adds to session startup time.",
           "title": "Before Start"
         },
         "build_base": {
@@ -983,10 +988,10 @@
     },
     "EnvironmentScript": {
       "additionalProperties": false,
-      "description": "An inline shell script run as the sandbox user, with /sandbox as cwd.",
+      "description": "An inline shell script run as the environment's user, with the workspace\ndirectory `/sandbox` as cwd.",
       "properties": {
         "run": {
-          "description": "Shell script to run in /sandbox.",
+          "description": "Shell script to run in the workspace directory `/sandbox`.",
           "minLength": 1,
           "title": "Run",
           "type": "string"
@@ -999,7 +1004,7 @@
       "type": "object"
     },
     "EnvironmentSource": {
-      "description": "How a session's environment was chosen. None (the field is nullable)\nwhen the config carried an inline environment block and no resolution ran \u2014\nan inline environment is not a reference, so there is nothing to record.\n\nNot derivable from the row: `environment_id` says WHICH environment, not\nhow it was chosen, and is null for the built-in basic sandbox.",
+      "description": "How a session's environment was chosen. None (the field is nullable)\nwhen the config carried an inline environment block and no resolution ran \u2014\nan inline environment is not a reference, so there is nothing to record.\n\nNot derivable from the row: `environment_id` says WHICH environment, not\nhow it was chosen, and is null for the built-in basic environment.",
       "enum": [
         "request",
         "agent",
@@ -1012,7 +1017,7 @@
     },
     "EnvironmentVariable": {
       "additionalProperties": false,
-      "description": "One environment variable injected into the agent's sandbox.\n\n`value`, when set, is a literal injected as-is \u2014 use it for non-secret\nconfig (LOG_LEVEL, an API base URL). When `value` is omitted the value is\nresolved at run time from the account's sandbox-secrets store (dashboard\n/ `PUT /v1/secrets`) by `name`, so a secret can be injected without\never putting it in the config file. Either way the variable only reaches\nagents that name it.",
+      "description": "One environment variable injected into the session's environment.\n\n`value`, when set, is a literal injected as-is \u2014 use it for non-secret\nconfig (LOG_LEVEL, an API base URL). When `value` is omitted the value is\nresolved at run time from the account's secrets store (dashboard\n/ `PUT /v1/secrets`) by `name`, so a secret can be injected without\never putting it in the config file. Either way the variable only reaches\nagents that name it.",
       "properties": {
         "name": {
           "title": "Name",
@@ -1088,17 +1093,26 @@
     },
     "GithubAccountSelector": {
       "additionalProperties": false,
-      "description": "A selector of GitHub accounts \u2014 the `for:` audience gate on react\nsurfaces and code review pipelines, classified on the stable entity author\n(the pusher for `push`, the PR author for a review). `users` selects human\naccounts, `bots` selects bot accounts; each is a `GithubAccountFilter`\n(include minus exclude, with bare bool/list shorthand).",
+      "description": "A selector of GitHub accounts \u2014 the `for:` audience gate on react\nsurfaces, classified on the stable entity author (the pusher for `push`,\nthe PR author for a pull request). `users` selects human\naccounts, `bots` selects bot accounts; each is a `GithubAccountFilter`\n(include minus exclude, with bare bool/list shorthand).\n\n`teams` narrows further to members of any of the listed GitHub teams of\nthe installation's organization, by slug (`platform` for\n`@org/platform`). It applies on top of `users`: the author must pass the\nusers filter AND belong to a listed team. A bot is never a team member,\nso a selector with `teams` never admits one. Membership is resolved live\nat match time (see `TriggerEventContext.is_author_team_member`), and the\nconfig sync refuses a team that does not exist when the file is\naccepted.",
       "properties": {
         "bots": {
           "$ref": "#/$defs/GithubAccountFilter"
         },
+        "teams": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Teams",
+          "type": "array"
+        },
         "users": {
           "$ref": "#/$defs/GithubAccountFilter"
         }
       },
       "required": [
         "bots",
+        "teams",
         "users"
       ],
       "title": "GithubAccountSelector",
@@ -1119,6 +1133,18 @@
           "title": "Login",
           "type": "string"
         },
+        "name": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Name"
+        },
         "type": {
           "$ref": "#/$defs/GithubAccountType"
         }
@@ -1127,6 +1153,7 @@
         "avatar_url",
         "id",
         "login",
+        "name",
         "type"
       ],
       "title": "GithubAccountSnippet",
@@ -1142,6 +1169,96 @@
       "title": "GithubAccountType",
       "type": "string"
     },
+    "GithubCheckRunEvent": {
+      "properties": {
+        "action": {
+          "$ref": "#/$defs/CheckRunAction"
+        },
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "branch": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Branch"
+        },
+        "conclusion": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Conclusion"
+        },
+        "head_sha": {
+          "title": "Head Sha",
+          "type": "string"
+        },
+        "name": {
+          "title": "Name",
+          "type": "string"
+        },
+        "pull_request_number": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Pull Request Number"
+        },
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.check_run",
+          "default": "github.check_run",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "branch",
+        "conclusion",
+        "head_sha",
+        "name",
+        "pull_request_number",
+        "repository",
+        "type",
+        "url"
+      ],
+      "title": "GithubCheckRunEvent",
+      "type": "object"
+    },
     "GithubIssueEvent": {
       "properties": {
         "action": {
@@ -1195,7 +1312,7 @@
     },
     "GithubPermissions": {
       "additionalProperties": false,
-      "description": "The agent's GitHub access: the scope of the installation token minted for\nits sandbox \u2014 the credential `git`, `gh`, and the GitHub MCP server\nauthenticate with.\n\nBy default the token carries the installation's full permissions on all of\nthe installation's repositories. `permissions` narrows what it may do:\nthe string `read_only` grants read access to contents, issues, metadata and\npull requests; a map requests explicit levels per GitHub App permission\nscope (e.g. `{contents: read, pull_requests: write}`) and may never exceed\nwhat the installation granted. `repositories` scopes the token to exactly\nthe listed repos, by name (they must belong to the installation).\n\nRestriction is enforced by GitHub, not by Ellipsis: the token itself is\nminted with the reduced scope, so nothing running in the sandbox can\nexceed it.",
+      "description": "The agent's GitHub access: the scope of the installation token minted for\nits session's environment \u2014 the credential `git` and `gh` authenticate\nwith.\n\nBy default the token carries the installation's full permissions on all of\nthe installation's repositories. `permissions` narrows what it may do:\nthe string `read_only` grants read access to contents, issues, metadata and\npull requests; a map requests explicit levels per GitHub App permission\nscope (e.g. `{contents: read, pull_requests: write}`) and may never exceed\nwhat the installation granted. `repositories` scopes the token to exactly\nthe listed repos, by name (they must belong to the installation).\n\nRestriction is enforced by GitHub, not by Ellipsis: the token itself is\nminted with the reduced scope, so nothing running in the environment can\nexceed it.",
       "properties": {
         "permissions": {
           "anyOf": [
@@ -1356,8 +1473,72 @@
       "title": "GithubPushEvent",
       "type": "object"
     },
+    "GithubReleaseEvent": {
+      "properties": {
+        "action": {
+          "$ref": "#/$defs/ReleaseAction"
+        },
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "name": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Name"
+        },
+        "prerelease": {
+          "title": "Prerelease",
+          "type": "boolean"
+        },
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "tag": {
+          "title": "Tag",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.release",
+          "default": "github.release",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "name",
+        "prerelease",
+        "repository",
+        "tag",
+        "type",
+        "url"
+      ],
+      "title": "GithubReleaseEvent",
+      "type": "object"
+    },
     "GithubSourceDetails": {
-      "description": "Identifies the file a GitHub-sourced agent is synced from.\n\nKeyed on the repository ID (not owner/name) so repository and org renames\ndon't orphan the config; resolve display names from gh_repositories at\nread time.",
+      "description": "Identifies the file a GitHub-sourced agent is synced from.\n\nIdentified by the repository ID (not owner/name) so repository and org renames\ndon't orphan the config; resolve display names from gh_repositories at\nread time.",
       "properties": {
         "branch": {
           "title": "Branch",
@@ -1393,7 +1574,7 @@
     },
     "InputContract": {
       "additionalProperties": false,
-      "description": "The typed input contract: what goes INTO a session (the trigger is\nwhen it happens; this is what goes in).\n\n`json_schema` validates customer data sent as `input` to\n`POST /v1/agents/{id}/sessions` and stored as `session.input`.\nInvocations require input when a schema is declared. React agents\ncannot declare schemas: the platform defines their event payloads.\n\n`message` is the initial-message template: exact `{{path}}` substitution\nover the caller payload (or, on a react agent, over the surface's\npublished fields), no conditionals/loops/filters. Refs are validated at\ndeploy time against the governing field set (see AgentConfig's\n`_check_input`).",
+      "description": "The typed input contract: what goes INTO a session (the trigger is\nwhen it happens; this is what goes in).\n\n`json_schema` validates customer data sent as `input` to\n`POST /v1/agents/{id}/sessions` (the dashboard and the CLI start\nthrough the same door) and stored as `session.input`. An on-demand\nstart requires input when a schema is declared. A trigger fires\nwithout it: a cron fire has no payload and a react fire carries the\nplatform-shaped event, so an agent may declare a schema alongside\neither trigger and the schema governs only its on-demand starts.\n\n`message` is the initial-message template: exact `{{path}}` substitution\nover the payload the session has (the caller payload on an on-demand\nstart, the surface's published fields on a react fire, the empty\nobject on a cron fire), no conditionals/loops/filters. Refs are\nvalidated at deploy time against every governing field set (see\nAgentConfig's `_check_input`): the caller schema's paths, the react\nsurface's published fields, and both when the agent has a react trigger\nand a schema, so one template renders fully on either door (declare the\nsurface's field names in the schema). Omit `message` to let each door\nrender its default. An unresolved ref renders as the empty string (a\ncron fire, an optional field the payload omitted).",
       "properties": {
         "json_schema": {
           "anyOf": [
@@ -1462,7 +1643,10 @@
               "$ref": "#/$defs/LinearIssueAction"
             },
             {
-              "const": "commented",
+              "enum": [
+                "commented",
+                "delegated"
+              ],
               "type": "string"
             }
           ],
@@ -1524,7 +1708,7 @@
     },
     "McpRemoteServer": {
       "additionalProperties": false,
-      "description": "A bring-your-own remote MCP server: the harness talks HTTP to `url`.\nNothing runs in the sandbox image. `headers` carry static auth (e.g.\n`Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret\nreferences, resolved at run time from the account's secrets store.",
+      "description": "A bring-your-own remote MCP server: the harness talks HTTP to `url`.\nNothing runs in the environment image. `headers` carry static auth (e.g.\n`Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret\nreferences, resolved at run time from the account's secrets store.",
       "properties": {
         "headers": {
           "additionalProperties": {
@@ -1553,7 +1737,7 @@
     },
     "McpServerRef": {
       "additionalProperties": false,
-      "description": "One built-in MCP server this agent opts into by name (`linear`/`slack`).\nA name reference over the connected built-in set \u2014 the platform manages the\nserver's transport and credentials. It only matters when the named\nintegration is set to `opt_in` inclusion; an integration in the default\n`all_sessions` mode is added regardless. For a server the platform does not\nprovide, define it instead (`McpStdioServer` /\n`McpRemoteServer`).",
+      "description": "One built-in MCP server this agent attaches by name (`linear`/`slack`).\nA name reference over the connected built-in set \u2014 the platform manages the\nserver's transport and credentials. A session gets a built-in server only\nwhen its config names it here or the session started from that server's\nown surface. For a server the platform does not provide, define it instead\n(`McpStdioServer` / `McpRemoteServer`).",
       "properties": {
         "name": {
           "title": "Name",
@@ -1568,7 +1752,7 @@
     },
     "McpStdioServer": {
       "additionalProperties": false,
-      "description": "A bring-your-own stdio MCP server: the harness spawns `command` inside\nthe sandbox and speaks JSON-RPC over its stdin/stdout. The command must be\nrunnable in the sandbox image \u2014 install its runtime via `hooks.build_base` /\n`hooks.after_checkout` if the managed environment lacks it.\n\n`env` values may embed `${NAME}` references, resolved at run time from the\naccount's secrets store (see `mcp_secret_refs`); everything else is passed\nliterally.",
+      "description": "A bring-your-own stdio MCP server: the harness spawns `command` inside\nthe environment and speaks JSON-RPC over its stdin/stdout. The command must\nbe runnable in the environment image \u2014 install its runtime via `hooks.build_base` /\n`hooks.after_checkout` if the managed environment lacks it.\n\n`env` values may embed `${NAME}` references, resolved at run time from the\naccount's secrets store (see `mcp_secret_refs`); everything else is passed\nliterally.",
       "properties": {
         "args": {
           "default": [],
@@ -1660,7 +1844,7 @@
     },
     "PermissionsConfig": {
       "additionalProperties": false,
-      "description": "What the agent is allowed to touch, per credential the platform mints\ninto its sandbox. Distinct from `environment:`, which is where the agent\nruns; this is what it may do from there.\n\n`ellipsis` scopes the sandbox's Ellipsis API token\n(`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates\nwith). `true` / the string `all` (the default) grant the full sandbox\nceiling \u2014 everything a sandbox token can ever do. A map narrows it per\nresource (see `EllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) \u2014\nsee `GithubPermissions`. GitHub enforces it at mint time.",
+      "description": "What the agent is allowed to touch, per credential the platform mints\ninto its session's environment. Distinct from `environment:`, which is\nwhere the agent runs; this is what it may do from there.\n\n`ellipsis` scopes the session's Ellipsis API token (`ELLIPSIS_API_TOKEN`,\nwhat the `ellipsis` CLI running inside the session authenticates with).\n`true` / the string `all` (the default) grant the full session token\nceiling \u2014 everything a session token can ever do. A map narrows it per\nresource (see `EllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the session's GitHub installation token (`GH_TOKEN`) \u2014\nsee `GithubPermissions`. GitHub enforces it at mint time.",
       "properties": {
         "ellipsis": {
           "anyOf": [
@@ -1696,9 +1880,9 @@
       "description": "Why direct prompting is refused. Absent when prompting is allowed.",
       "enum": [
         "mention_surface",
-        "ephemeral_trigger",
         "non_interactive",
         "harness_single_turn",
+        "budget_exhausted",
         "closed"
       ],
       "title": "PromptBlockedReason",
@@ -1716,6 +1900,53 @@
       "title": "PullRequestAction",
       "type": "string"
     },
+    "ReactCheckRun": {
+      "additionalProperties": false,
+      "description": "A CI/CD check completing on a commit \u2014 a `check_run` from GitHub\nActions or any other app that reports checks. `names` narrows to the check\nruns whose name matches (exact, or a prefix ending in `*`); `branch` is the\ncheck suite's head branch. The `for:` audience is the commit's author (the\npull request author when the check is attached to one), never the CI app\nthat completed the check \u2014 a check run's sender is always a bot.\n\nDelivery needs the Ellipsis GitHub App's `checks` permission on the\ninstallation; without it GitHub sends no check events and the webhook\nhandler refuses the ones it does see.",
+      "properties": {
+        "branch": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Branch",
+          "type": "array"
+        },
+        "for": {
+          "$ref": "#/$defs/GithubAccountSelector"
+        },
+        "names": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Names",
+          "type": "array"
+        },
+        "on": {
+          "default": [
+            "failed"
+          ],
+          "items": {
+            "$ref": "#/$defs/CheckRunAction"
+          },
+          "title": "On",
+          "type": "array"
+        },
+        "repositories": {
+          "$ref": "#/$defs/RepositoryFilter"
+        }
+      },
+      "required": [
+        "branch",
+        "for",
+        "names",
+        "on",
+        "repositories"
+      ],
+      "title": "ReactCheckRun",
+      "type": "object"
+    },
     "ReactIssue": {
       "additionalProperties": false,
       "properties": {
@@ -1883,6 +2114,57 @@
       "title": "ReactPush",
       "type": "object"
     },
+    "ReactRelease": {
+      "additionalProperties": false,
+      "description": "A GitHub release being published \u2014 a release or prerelease published\ndirectly, or a draft published later. `tag` narrows to the release tags\nthat match (exact, or a prefix ending in `*`, so `v*`); `prerelease`\nselects prereleases or full releases, like `draft` on pull requests. The\n`for:` audience is the release's author, which for a release cut by CI is\na bot and needs `bots` to opt in.",
+      "properties": {
+        "for": {
+          "$ref": "#/$defs/GithubAccountSelector"
+        },
+        "on": {
+          "default": [
+            "published"
+          ],
+          "items": {
+            "$ref": "#/$defs/ReleaseAction"
+          },
+          "title": "On",
+          "type": "array"
+        },
+        "prerelease": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Prerelease"
+        },
+        "repositories": {
+          "$ref": "#/$defs/RepositoryFilter"
+        },
+        "tag": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Tag",
+          "type": "array"
+        }
+      },
+      "required": [
+        "for",
+        "on",
+        "prerelease",
+        "repositories",
+        "tag"
+      ],
+      "title": "ReactRelease",
+      "type": "object"
+    },
     "ReactSentry": {
       "additionalProperties": false,
       "properties": {
@@ -1917,7 +2199,24 @@
     },
     "ReactTrigger": {
       "additionalProperties": false,
+      "description": "An event trigger: exactly one surface block names the events to match.\n\n`enabled: false` pauses the trigger and keeps its definition: events stop\nmatching while the agent stays live for on-demand starts and open\nsessions keep taking follow-ups (`ellipsis.enabled: false` pauses the\nwhole file instead).",
       "properties": {
+        "check_run": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactCheckRun"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "enabled": {
+          "default": true,
+          "title": "Enabled",
+          "type": "boolean"
+        },
         "issue": {
           "anyOf": [
             {
@@ -1962,6 +2261,17 @@
           ],
           "default": null
         },
+        "release": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactRelease"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
         "sentry": {
           "anyOf": [
             {
@@ -1992,10 +2302,13 @@
         }
       },
       "required": [
+        "check_run",
+        "enabled",
         "issue",
         "linear_issue",
         "pull_request",
         "push",
+        "release",
         "sentry",
         "slack_channel",
         "type"
@@ -2003,6 +2316,14 @@
       "title": "ReactTrigger",
       "type": "object"
     },
+    "ReleaseAction": {
+      "description": "What happened to a GitHub release. `published` is the one moment a\nrelease becomes visible: a release or prerelease published directly, or a\ndraft published later. Edits, deletions, and unpublishes never fire.",
+      "enum": [
+        "published"
+      ],
+      "title": "ReleaseAction",
+      "type": "string"
+    },
     "RepositoryFilter": {
       "anyOf": [
         {
@@ -2087,15 +2408,13 @@
         "account",
         "alerts",
         "sessions",
-        "files",
-        "memories",
-        "reviews",
         "configs",
         "defaults",
         "environments",
         "secrets",
         "templates",
         "integrations",
+        "reviews",
         "tokens",
         "webhooks",
         "user"
@@ -2247,11 +2566,9 @@
     },
     "SandboxSource": {
       "enum": [
-        "cli",
-        "web_ui",
-        "ingest_pull_request_job_run",
         "session",
         "image_refresh",
+        "environment_check",
         "test",
         "script"
       ],
@@ -2418,7 +2735,7 @@
           ]
         }
       ],
-      "description": "An agent session: one conversation with an agent, from trigger to\nterminal state. Returned by `GET /v1/sessions/{id}` and carried by the\nsession stream's `session`/`snapshot` frames \u2014 REST and stream never\ndisagree about what a session looks like.",
+      "description": "An agent session: one conversation with an agent. Returned by\n`GET /v1/sessions/{id}` and carried by the session stream's\n`session`/`snapshot` frames; REST and stream never disagree about what a\nsession looks like.",
       "properties": {
         "agent": {
           "anyOf": [
@@ -2432,6 +2749,18 @@
           "default": null,
           "description": "The agent the session was started from, or null for a raw session started with POST /v1/sessions."
         },
+        "archived": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionArchived"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "When and by whom the session was archived; null when unarchived. Archiving does not stop or close a session."
+        },
         "attribution": {
           "$ref": "#/$defs/SessionAttribution",
           "description": "The principal this session is attributed to."
@@ -2466,9 +2795,19 @@
           "default": null,
           "description": "Codex input and native options. Set exactly one of claude_code or codex."
         },
+        "conversation": {
+          "$ref": "#/$defs/SessionConversation",
+          "description": "Whether the session can take more messages, and whether an agent is warm to answer one."
+        },
         "cost": {
           "$ref": "#/$defs/SessionCost",
-          "description": "What the session cost, in millicents, broken down by leg and carrying its own total."
+          "description": "What the session has cost so far, in millicents, broken down by leg and carrying its own total."
+        },
+        "created_at": {
+          "description": "When the session was created.",
+          "format": "date-time",
+          "title": "Created At",
+          "type": "string"
         },
         "environment": {
           "$ref": "#/$defs/SessionEnvironment",
@@ -2479,9 +2818,11 @@
             {
               "discriminator": {
                 "mapping": {
+                  "github.check_run": "#/$defs/GithubCheckRunEvent",
                   "github.issue": "#/$defs/GithubIssueEvent",
                   "github.pull_request": "#/$defs/GithubPullRequestEvent",
                   "github.push": "#/$defs/GithubPushEvent",
+                  "github.release": "#/$defs/GithubReleaseEvent",
                   "linear.issue": "#/$defs/LinearIssueEvent",
                   "sentry.alert": "#/$defs/SentryAlertEvent",
                   "slack.channel_created": "#/$defs/SlackChannelCreatedEvent",
@@ -2499,6 +2840,12 @@
                 {
                   "$ref": "#/$defs/GithubPushEvent"
                 },
+                {
+                  "$ref": "#/$defs/GithubCheckRunEvent"
+                },
+                {
+                  "$ref": "#/$defs/GithubReleaseEvent"
+                },
                 {
                   "$ref": "#/$defs/LinearIssueEvent"
                 },
@@ -2550,10 +2897,6 @@
           "title": "Id",
           "type": "string"
         },
-        "lifecycle": {
-          "$ref": "#/$defs/SessionLifecycle",
-          "description": "The session's activity, conversation state, messaging policy, outcomes, and timestamps."
-        },
         "metadata": {
           "additionalProperties": {
             "type": "string"
@@ -2566,14 +2909,14 @@
         "output": {
           "anyOf": [
             {
-              "$ref": "#/$defs/OutputConfig"
+              "$ref": "#/$defs/SessionOutput"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "The structured-output exit contract for this session."
+          "description": "The session's structured output: the `json_schema` the agent must satisfy and, once a turn has submitted it, the `result`."
         },
         "parent": {
           "anyOf": [
@@ -2618,21 +2961,41 @@
         "tokens": {
           "$ref": "#/$defs/SessionTokens",
           "description": "The tokens the session spent and the model they went to. `total` includes the prompt-cache lanes."
+        },
+        "turn": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionTurn"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The turn in progress, or the latest one when none is running. Null until the session has a message. Wait on it: the message you sent is answered when the turn with your message's `turn_id` reaches a final status."
+        },
+        "updated_at": {
+          "description": "When the session was last updated.",
+          "format": "date-time",
+          "title": "Updated At",
+          "type": "string"
         }
       },
       "required": [
         "agent",
+        "archived",
         "attribution",
         "budget",
         "claude_code",
         "codex",
+        "conversation",
         "cost",
+        "created_at",
         "environment",
         "event",
         "git",
         "handler",
         "id",
-        "lifecycle",
         "metadata",
         "output",
         "parent",
@@ -2640,7 +3003,9 @@
         "skills",
         "source",
         "summary",
-        "tokens"
+        "tokens",
+        "turn",
+        "updated_at"
       ],
       "title": "Session",
       "type": "object"
@@ -2662,7 +3027,7 @@
             }
           ],
           "default": null,
-          "description": "Identifier of the saved agent this session's snapshot was taken from. Null for a routing-file agent, a code-review stage agent, or the built-in mention agent, which have no saved agent behind them. Points at the agent as it exists now, which may have changed since.",
+          "description": "Identifier of the saved agent this session's snapshot was taken from. Null for a routing-file agent or the built-in mention agent, which have no saved agent behind them. Points at the agent as it exists now, which may have changed since.",
           "title": "Id"
         }
       },
@@ -2824,6 +3189,12 @@
           "default": null,
           "description": "Codex input and native options. Set exactly one of claude_code or codex."
         },
+        "conversation": {
+          "$ref": "#/$defs/SessionConversationConfig",
+          "default": {
+            "interactive": true
+          }
+        },
         "environment": {
           "anyOf": [
             {
@@ -2852,6 +3223,15 @@
           },
           "title": "Environment"
         },
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "default": {},
+          "description": "Arbitrary string key/value metadata stored on every session.",
+          "title": "Metadata",
+          "type": "object"
+        },
         "output": {
           "anyOf": [
             {
@@ -2886,7 +3266,9 @@
         "budget",
         "claude_code",
         "codex",
+        "conversation",
         "environment",
+        "metadata",
         "output",
         "permissions",
         "skills"
@@ -2894,12 +3276,60 @@
       "title": "SessionConfig",
       "type": "object"
     },
+    "SessionConversation": {
+      "description": "Whether the session can take more messages, and how quickly it would\nanswer one.",
+      "properties": {
+        "interactive": {
+          "description": "Whether the session stays open after its first turn.",
+          "title": "Interactive",
+          "type": "boolean"
+        },
+        "prompting": {
+          "$ref": "#/$defs/SessionPrompting",
+          "description": "The session's policy for direct messages. Caller authorization and message validation are checked separately."
+        },
+        "state": {
+          "$ref": "#/$defs/SessionState",
+          "description": "`open` while the session can take messages; `closed` is permanent."
+        },
+        "warm": {
+          "description": "Whether an agent is ready to answer the next message right away. When false, the next message first prepares an environment, which takes longer. A hint only; clients need no logic on it.",
+          "title": "Warm",
+          "type": "boolean"
+        }
+      },
+      "required": [
+        "interactive",
+        "prompting",
+        "state",
+        "warm"
+      ],
+      "title": "SessionConversation",
+      "type": "object"
+    },
+    "SessionConversationConfig": {
+      "additionalProperties": false,
+      "description": "Conversation settings for a session, set on a saved agent or sent when starting a session or running an agent.",
+      "properties": {
+        "interactive": {
+          "default": true,
+          "description": "Whether the session stays open after its first turn. Defaults to true; false runs once and requires a prompt. Requires the model's interactive capability when true. Direct message acceptance is reported separately in conversation.prompting.",
+          "title": "Interactive",
+          "type": "boolean"
+        }
+      },
+      "required": [
+        "interactive"
+      ],
+      "title": "SessionConversationConfig",
+      "type": "object"
+    },
     "SessionCost": {
       "description": "What a session (or one turn of it) cost, in millicents.\n\n`llm` is deliberately NOT called `tokens`: it would sit beside the `tokens`\nobject and read as \"the token count's cost\" rather than \"the cost of the\nLLM leg\".",
       "properties": {
         "cpu": {
           "default": 0,
-          "description": "Sandbox CPU spend in millicents.",
+          "description": "CPU spend in millicents.",
           "title": "Cpu",
           "type": "integer"
         },
@@ -2917,7 +3347,7 @@
         },
         "memory": {
           "default": 0,
-          "description": "Sandbox memory spend in millicents.",
+          "description": "Memory spend in millicents.",
           "title": "Memory",
           "type": "integer"
         },
@@ -2970,7 +3400,7 @@
             }
           ],
           "default": null,
-          "description": "Identifier of the saved environment the session's config resolved. Null for an inline environment block or the built-in basic sandbox.",
+          "description": "Identifier of the saved environment the session's config resolved. Null for an inline environment block or the built-in basic environment.",
           "title": "Id"
         },
         "mcp_servers": {
@@ -3075,55 +3505,6 @@
       "title": "SessionEventActor",
       "type": "object"
     },
-    "SessionExecutionResult": {
-      "description": "Outcome of the last finished execution, retained across subsequent resumes.\n\nAn execution spans a start or resume through parking or termination, and may\ncontain several turns. Admission failures also produce a result, even when\nprovisioning never starts.",
-      "properties": {
-        "completion_reason": {
-          "$ref": "#/$defs/SessionExitStatus",
-          "description": "Why the last execution ended; completed also includes parking an open conversation."
-        },
-        "detail": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "Human-readable explanation of that outcome.",
-          "title": "Detail"
-        }
-      },
-      "required": [
-        "completion_reason",
-        "detail"
-      ],
-      "title": "SessionExecutionResult",
-      "type": "object"
-    },
-    "SessionExitStatus": {
-      "description": "Why a terminal agent session ended \u2014 a finer-grained reason than `status`.\n\n`status` (SessionStatus) is the lifecycle state: COMPLETED / ERROR /\nCANCELLED. `exit_status` explains *why* a run reached that terminal state, so\nthe UI and metrics can tell a budget cutoff apart from a crashed tool call or\na deliberate cancellation. It is None until the run reaches a terminal state.",
-      "enum": [
-        "completed",
-        "budget_hit",
-        "payment_required",
-        "tool_call_failed",
-        "lifecycle_hook_failed",
-        "missing_repo_access",
-        "missing_token_permissions",
-        "missing_sandbox_variables",
-        "blocked",
-        "contact_email_required",
-        "cancelled",
-        "interrupted",
-        "error",
-        "stopped"
-      ],
-      "title": "SessionExitStatus",
-      "type": "string"
-    },
     "SessionGit": {
       "description": "Every repo the session touched. Small enough to ride on `sessions`\nand be returned by every session read.",
       "properties": {
@@ -3143,7 +3524,7 @@
       "type": "object"
     },
     "SessionGitCommit": {
-      "description": "One commit the session created in this repo (everything past the\nprovisioning checkout's sha), captured from the sandbox rather than the\ntranscript so it stays correct through amends, rebases, and commits made by\nscripts. The repo is the parent object, so it is not repeated here.",
+      "description": "One commit the session created in this repo (everything past the\nprovisioning checkout's sha), captured from the environment rather than the\ntranscript so it stays correct through amends, rebases, and commits made by\nscripts. The repo is the parent object, so it is not repeated here.",
       "properties": {
         "committed_at": {
           "format": "date-time",
@@ -3247,7 +3628,7 @@
       "type": "object"
     },
     "SessionGitRepo": {
-      "description": "One checkout in the session's sandbox and everything the session did to\nit, split by whether it survived the sandbox.",
+      "description": "One checkout in the session's environment and everything the session did\nto it, split by whether it survived the environment.",
       "properties": {
         "commits": {
           "default": [],
@@ -3367,109 +3748,6 @@
       "title": "SessionHandler",
       "type": "object"
     },
-    "SessionLifecycle": {
-      "description": "Current activity, conversation state, messaging policy, and lifecycle history.",
-      "properties": {
-        "archived": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/SessionArchived"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "When and by whom the session was archived; null when unarchived. Archiving does not stop or close a session."
-        },
-        "conversation": {
-          "$ref": "#/$defs/ConversationState",
-          "description": "Whether the conversation is open or permanently closed. Open does not imply direct messages are permitted."
-        },
-        "detail": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "Explanation of the current status, when applicable.",
-          "title": "Detail"
-        },
-        "interactive": {
-          "description": "Whether the session stays open after its first turn.",
-          "title": "Interactive",
-          "type": "boolean"
-        },
-        "last_execution_result": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/SessionExecutionResult"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "The last finished execution's outcome, retained across resumes; null until an outcome has been recorded."
-        },
-        "prompting": {
-          "$ref": "#/$defs/SessionPrompting",
-          "description": "The session's policy for direct messages. Caller authorization and message validation are checked separately."
-        },
-        "status": {
-          "$ref": "#/$defs/SessionLifecycleStatus",
-          "description": "Canonical current activity. working means a turn is in progress; waiting means the worker is warm and awaiting input; idle means parked. A failed, stopped, or cancelled execution may leave an open conversation."
-        },
-        "stopped": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/SessionStopped"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "When and by whom a stop was requested; null when no stop is pending for this execution."
-        },
-        "timestamps": {
-          "$ref": "#/$defs/SessionTimestamps"
-        }
-      },
-      "required": [
-        "archived",
-        "conversation",
-        "detail",
-        "interactive",
-        "last_execution_result",
-        "prompting",
-        "status",
-        "stopped",
-        "timestamps"
-      ],
-      "title": "SessionLifecycle",
-      "type": "object"
-    },
-    "SessionLifecycleStatus": {
-      "enum": [
-        "scheduled",
-        "starting",
-        "working",
-        "waiting",
-        "retrying",
-        "idle",
-        "closed",
-        "failed",
-        "stopped",
-        "cancelled"
-      ],
-      "title": "SessionLifecycleStatus",
-      "type": "string"
-    },
     "SessionListStreamMessage": {
       "properties": {
         "session": {
@@ -3489,6 +3767,37 @@
       "title": "SessionListStreamMessage",
       "type": "object"
     },
+    "SessionOutput": {
+      "description": "Structured output on the wire: the contract and, when a turn has\nsubmitted one, the payload. `result` is None while the session runs and\nwhen no turn submitted anything; it is the agent's own JSON, in the\nshape of `json_schema`.",
+      "properties": {
+        "json_schema": {
+          "additionalProperties": true,
+          "description": "JSON Schema the agent's result must satisfy.",
+          "title": "Json Schema",
+          "type": "object"
+        },
+        "result": {
+          "anyOf": [
+            {
+              "additionalProperties": true,
+              "type": "object"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The payload the agent submitted, or null until a turn submits one.",
+          "title": "Result"
+        }
+      },
+      "required": [
+        "json_schema",
+        "result"
+      ],
+      "title": "SessionOutput",
+      "type": "object"
+    },
     "SessionParent": {
       "description": "The predecessor session this session continues.",
       "properties": {
@@ -3565,9 +3874,10 @@
       "type": "object"
     },
     "SessionSource": {
-      "description": "Where a session came from: the credential that started it (web app,\nAPI key, CLI) or the trigger that fired (react, mention, cron). Never\ntaken from a request body.",
+      "description": "Where a session came from: the credential that started it (web app,\nAPI key, CLI) or the trigger that fired (react, mention, cron, code\nreview). Never taken from a request body.",
       "enum": [
         "react",
+        "code_review",
         "web",
         "api",
         "cli",
@@ -3577,6 +3887,15 @@
       "title": "SessionSource",
       "type": "string"
     },
+    "SessionState": {
+      "description": "Whether the conversation can still take messages. `closed` is permanent:\na session with interactive false closes when its turn ends, and a conversation closes\nafter its closing message's turn.",
+      "enum": [
+        "open",
+        "closed"
+      ],
+      "title": "SessionState",
+      "type": "string"
+    },
     "SessionStopped": {
       "description": "When a stop was requested and the GitHub user who requested it.",
       "properties": {
@@ -3607,7 +3926,7 @@
       "type": "object"
     },
     "SessionSummary": {
-      "description": "A live one-line summary of what the session is working on, refreshed\nevery few steps while it runs.",
+      "description": "A live one-line summary of what the session is doing, refreshed\nevery few steps while it runs.",
       "properties": {
         "created_at": {
           "anyOf": [
@@ -3624,7 +3943,7 @@
           "title": "Created At"
         },
         "description": {
-          "description": "One-line description of what the session is working on.",
+          "description": "One-line description of what the session is doing.",
           "title": "Description",
           "type": "string"
         }
@@ -3636,58 +3955,6 @@
       "title": "SessionSummary",
       "type": "object"
     },
-    "SessionTimestamps": {
-      "properties": {
-        "created_at": {
-          "description": "When the session was created.",
-          "format": "date-time",
-          "title": "Created At",
-          "type": "string"
-        },
-        "last_activity_at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "When the session last showed agent activity.",
-          "title": "Last Activity At"
-        },
-        "last_message_at": {
-          "anyOf": [
-            {
-              "format": "date-time",
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "description": "When the session last received a message.",
-          "title": "Last Message At"
-        },
-        "updated_at": {
-          "description": "When the session was last updated.",
-          "format": "date-time",
-          "title": "Updated At",
-          "type": "string"
-        }
-      },
-      "required": [
-        "created_at",
-        "last_activity_at",
-        "last_message_at",
-        "updated_at"
-      ],
-      "title": "SessionTimestamps",
-      "type": "object"
-    },
     "SessionTokens": {
       "description": "The token counts a session (or turn) spent, and the model they went to.\n\n`total` INCLUDES the cache lanes, unlike the old flat `tokens_total` which\ncounted input+output+thinking only and left callers to add cache reads and\nwrites back themselves (the deleted `tokensTotalAll` helper). Cache tokens\ndominate an agent run's token bill, so a \"total\" that omits them is the\nwrong default and produced two competing totals in the dashboard.",
       "properties": {
@@ -3739,9 +4006,122 @@
       "title": "SessionTokens",
       "type": "object"
     },
+    "SessionTurn": {
+      "description": "One message and the agent's answer to it. A turn is `pending` from the\nmoment its message is received until the agent starts on it, `running`\nwhile the agent works, then `completed`, `failed`, `stopped`, or\n`cancelled`.",
+      "properties": {
+        "cost": {
+          "$ref": "#/$defs/SessionCost",
+          "description": "What the turn cost so far, in millicents, broken down by leg."
+        },
+        "created_at": {
+          "description": "When the turn's message was received.",
+          "format": "date-time",
+          "title": "Created At",
+          "type": "string"
+        },
+        "detail": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "A human-readable explanation of a failed, stopped, or cancelled turn.",
+          "title": "Detail"
+        },
+        "ended_at": {
+          "anyOf": [
+            {
+              "format": "date-time",
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "When the turn reached its final status.",
+          "title": "Ended At"
+        },
+        "id": {
+          "description": "Unique identifier of the turn.",
+          "title": "Id",
+          "type": "string"
+        },
+        "index": {
+          "description": "Position in the session, starting at 0.",
+          "title": "Index",
+          "type": "integer"
+        },
+        "reason": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/TurnReason"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Why the turn failed or was cancelled; null on every other status."
+        },
+        "started_at": {
+          "anyOf": [
+            {
+              "format": "date-time",
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "When the agent started on the message.",
+          "title": "Started At"
+        },
+        "status": {
+          "$ref": "#/$defs/TurnStatus",
+          "description": "Where the turn is."
+        },
+        "stopped": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionStopped"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "When and by whom a stop was requested; null when none was."
+        },
+        "tokens": {
+          "$ref": "#/$defs/SessionTokens",
+          "description": "The tokens the turn spent and the model they went to."
+        }
+      },
+      "required": [
+        "cost",
+        "created_at",
+        "detail",
+        "ended_at",
+        "id",
+        "index",
+        "reason",
+        "started_at",
+        "status",
+        "stopped",
+        "tokens"
+      ],
+      "title": "SessionTurn",
+      "type": "object"
+    },
     "SettingsRef": {
       "additionalProperties": false,
-      "description": "A config-declared Claude Code settings.json, resolved at run start and\npassed to `claude --settings <path>`. That is the CLI settings tier \u2014 BELOW\nEllipsis's managed-settings.json floor \u2014 so it customizes behavior (model\npermissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a\nsecurity setting. Lets a team point the cloud agent at the same settings file\nthey already use with Claude Code locally instead of re-encoding it as YAML.",
+      "description": "A Claude Code settings.json read from a repository and applied to the\nsession. It adds permission rules and other Claude Code settings; rules the\nplatform sets stay in force. Supported models list `settings` in\n`/v1/account/models`.",
       "properties": {
         "path": {
           "title": "Path",
@@ -3920,6 +4300,42 @@
       "title": "SlackMessageEvent",
       "type": "object"
     },
+    "TurnReason": {
+      "description": "Why a turn failed or was cancelled. Null on every other outcome.",
+      "enum": [
+        "error",
+        "tool_call_failed",
+        "budget_hit",
+        "payment_required",
+        "blocked",
+        "contact_email_required",
+        "lifecycle_hook_failed",
+        "missing_repo_access",
+        "missing_token_permissions",
+        "missing_environment_variables",
+        "missing_github_integration",
+        "agent_unavailable",
+        "upstream_unavailable",
+        "unsupported_configuration",
+        "execution_disabled",
+        "interrupted"
+      ],
+      "title": "TurnReason",
+      "type": "string"
+    },
+    "TurnStatus": {
+      "description": "Where one turn is: queued for an agent, being answered, or over.\n\n`pending` covers everything before the agent starts on the message: queued\nbehind another turn, waiting to start, or preparing the environment.\n`stopped` and `cancelled` are their own outcomes; `reason` explains a\n`failed` or `cancelled` turn.",
+      "enum": [
+        "pending",
+        "running",
+        "completed",
+        "failed",
+        "stopped",
+        "cancelled"
+      ],
+      "title": "TurnStatus",
+      "type": "string"
+    },
     "VMExecutionResponse": {
       "properties": {
         "cache_tier": {