@ellipsis-dev/sdk 0.31.0 → 0.32.0

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { c as components } from './types-BQxZcD0_.js';
-export { A as AgentConfig, a as AgentIdentity, b as AttributionType, B as BudgetConfig, C as ClaudeAssistantEvent, d as ClaudeAssistantMessage, e as ClaudeConfig, f as ClaudeConversationResetEvent, g as ClaudeNativeEvent, h as ClaudeNativeSessionRecord, i as ClaudeNativeUsage, j as ClaudeRateLimitEvent, k as ClaudeRateLimitInfo, l as ClaudeResultEvent, m as ClaudeSessionRecord, n as ClaudeSystemEvent, o as ClaudeUserEvent, p as ClaudeUserMessage, q as CodexAgentMessage, r as CodexAgentMessageItem, s as CodexAppServerError, t as CodexAppServerEvent, u as CodexAppServerItem, v as CodexAppServerNotification, w as CodexAppServerSessionRecord, x as CodexCommandExecution, y as CodexCommandExecutionItem, z as CodexConfig, D as CodexContextCompaction, E as CodexEffortLevel, F as CodexErrorEvent, G as CodexErrorItem, H as CodexErrorParams, I as CodexEvent, J as CodexFileChange, K as CodexFileChangeItem, L as CodexFileUpdate, M as CodexItem, N as CodexItemCompleted, O as CodexItemCompletedEvent, P as CodexItemParams, Q as CodexItemStarted, R as CodexItemStartedEvent, S as CodexItemUpdatedEvent, T as CodexLocalImageInput, U as CodexMcpToolCall, V as CodexMcpToolCallAppContext, W as CodexMcpToolCallError, X as CodexMcpToolCallItem, Y as CodexMcpToolCallResult, Z as CodexPlan, _ as CodexReasoning, $ as CodexReasoningItem, a0 as CodexSessionRecord, a1 as CodexTextInput, a2 as CodexThread, a3 as CodexThreadStarted, a4 as CodexThreadStartedEvent, a5 as CodexThreadStartedParams, a6 as CodexThreadTokenUsage, a7 as CodexTodoListItem, a8 as CodexTokenUsageBreakdown, a9 as CodexTokenUsageParams, aa as CodexTokenUsageUpdated, ab as CodexTurn, ac as CodexTurnCompleted, ad as CodexTurnCompletedEvent, ae as CodexTurnError, af as CodexTurnFailedEvent, ag as CodexTurnParams, ah as CodexTurnStarted, ai as CodexTurnStartedEvent, aj as CodexUsage, ak as CodexUserInput, al as CodexUserMessage, am as CodexWebSearch, an as CodexWebSearchItem, ao as ComputeConfig, ap as ComputeConfig1, aq as ConfigMetadata, ar as CreateReviewRequest, as as CronTrigger, at as DeltaFrame, au as DoneFrame, av as Duration, aw as EffortLevel, ax as EllipsisGrant, ay as EllipsisPermissions, az as EnvironmentBaseBuild, aA as EnvironmentConfig, aB as EnvironmentHooks, aC as EnvironmentHooks1, aD as EnvironmentOutputPayload, aE as EnvironmentOutputRecord, aF as EnvironmentPhasePayload, aG as EnvironmentPhaseRecord, aH as EnvironmentReadyPayload, aI as EnvironmentReadyRecord, aJ as EnvironmentScript, aK as EnvironmentSource, aL as EnvironmentVariable, aM as ErrorFrame, aN as Finding, aO as GithubAccountFilter, aP as GithubAccountSelector, aQ as GithubAccountSnippet, aR as GithubAccountType, aS as GithubIssueEvent, aT as GithubPermissions, aU as GithubPullRequestEvent, aV as GithubPushEvent, aW as HandlerService, aX as HeartbeatFrame, aY as InputContract, aZ as IssueAction, a_ as LegacyAssistantPayload, a$ as LegacyNativeUsage, b0 as LegacyResultPayload, b1 as Level, b2 as LifecycleSessionRecord, b3 as LinearIssueAction, b4 as LinearIssueEvent, b5 as McpRemoteServer, b6 as McpServerRef, b7 as McpStdioServer, b8 as MemorySize, b9 as MessageDeliveredPayload, ba as MessageDeliveredRecord, bb as MessageReceivedPayload, bc as MessageReceivedRecord, bd as MessageRequeuedPayload, be as MessageRequeuedRecord, bf as OutboxCollectedPayload, bg as OutboxCollectedRecord, bh as OutputConfig, bi as PermissionsConfig, bj as PermissionsConfig1, bk as PlatformSessionRecord, bl as PromptBlockedReason, bm as PullRequestAction, bn as ReactIssue, bo as ReactLinearIssue, bp as ReactPullRequest, bq as ReactPush, br as ReactSentry, bs as ReactSlackChannel, bt as ReactTrigger, bu as RecordsAppendFrame, bv as RepositoryFilter, bw as RepositoryRef, bx as ResolvedReviewScope, by as Review, bz as ReviewConfiguration, bA as ReviewCounters, bB as ReviewFinding, bC as ReviewRequester, bD as ReviewScope, bE as ReviewScopeKind, bF as ReviewStage, bG as ReviewedCommit, bH as ReviewsListResponse, bI as SdkAssistantRecord, bJ as SdkCacheCreation, bK as SdkContentBlock, bL as SdkRateLimitRecord, bM as SdkRecord, bN as SdkResultRecord, bO as SdkServerToolResultBlock, bP as SdkServerToolUseBlock, bQ as SdkSystemRecord, bR as SdkTextBlock, bS as SdkThinkingBlock, bT as SdkToolResultBlock, bU as SdkToolUseBlock, bV as SdkUserRecord, bW as SendSessionMessageRequest, bX as SentryAction, bY as SentryAlertEvent, bZ as Session, b_ as Session1, b$ as SessionAgent, c0 as SessionArchived, c1 as SessionAttribution, c2 as SessionClosedPayload, c3 as SessionClosedRecord, c4 as SessionConfig, c5 as SessionConversation, c6 as SessionCost, c7 as SessionCost1, c8 as SessionEnvironment, c9 as SessionEventActor, ca as SessionFrame, cb as SessionGit, cc as SessionGitCommit, cd as SessionGitFile, ce as SessionGitPr, cf as SessionGitRepo, cg as SessionHandler, ch as SessionMessage, ci as SessionMessageImage, cj as SessionMessageResponse, ck as SessionMessageStatus, cl as SessionParent, cm as SessionPrompting, cn as SessionRecord, co as SessionRecordsListResponse, cp as SessionResponse, cq as SessionSource, cr as SessionState, cs as SessionStopped, ct as SessionStreamFrame, cu as SessionSummary, cv as SessionTokens, cw as SessionTokens1, cx as SessionTurn, cy as SessionTurnResponse, cz as SessionTurnsListResponse, cA as SessionsListResponse, cB as SettingsRef, cC as SkillRef, cD as SlackChannelCreatedEvent, cE as SlackMessageEvent, cF as SnapshotFrame, cG as StreamFrame, cH as TokensInfo, cI as TurnEndedPayload, cJ as TurnEndedRecord, cK as TurnReason, cL as TurnStartedPayload, cM as TurnStartedRecord, cN as TurnStatus, cO as UnknownSessionRecord, cP as UpdateSessionRequest, cQ as paths } from './types-BQxZcD0_.js';
+import { c as components } from './types-DjY1VcOe.js';
+export { A as AgentConfig, a as AgentIdentity, b as AttributionType, B as BudgetConfig, C as CheckRunAction, d as ClaudeAssistantEvent, e as ClaudeAssistantMessage, f as ClaudeConfig, g as ClaudeConversationResetEvent, h as ClaudeNativeEvent, i as ClaudeNativeSessionRecord, j as ClaudeNativeUsage, k as ClaudeRateLimitEvent, l as ClaudeRateLimitInfo, m as ClaudeResultEvent, n as ClaudeSessionRecord, o as ClaudeSystemEvent, p as ClaudeUserEvent, q as ClaudeUserMessage, r as CodexAgentMessage, s as CodexAgentMessageItem, t as CodexAppServerError, u as CodexAppServerEvent, v as CodexAppServerItem, w as CodexAppServerNotification, x as CodexAppServerSessionRecord, y as CodexCommandExecution, z as CodexCommandExecutionItem, D as CodexConfig, E as CodexContextCompaction, F as CodexEffortLevel, G as CodexErrorEvent, H as CodexErrorItem, I as CodexErrorParams, J as CodexEvent, K as CodexFileChange, L as CodexFileChangeItem, M as CodexFileUpdate, N as CodexItem, O as CodexItemCompleted, P as CodexItemCompletedEvent, Q as CodexItemParams, R as CodexItemStarted, S as CodexItemStartedEvent, T as CodexItemUpdatedEvent, U as CodexLocalImageInput, V as CodexMcpToolCall, W as CodexMcpToolCallAppContext, X as CodexMcpToolCallError, Y as CodexMcpToolCallItem, Z as CodexMcpToolCallResult, _ as CodexPlan, $ as CodexReasoning, a0 as CodexReasoningItem, a1 as CodexSessionRecord, a2 as CodexTextInput, a3 as CodexThread, a4 as CodexThreadStarted, a5 as CodexThreadStartedEvent, a6 as CodexThreadStartedParams, a7 as CodexThreadTokenUsage, a8 as CodexTodoListItem, a9 as CodexTokenUsageBreakdown, aa as CodexTokenUsageParams, ab as CodexTokenUsageUpdated, ac as CodexTurn, ad as CodexTurnCompleted, ae as CodexTurnCompletedEvent, af as CodexTurnError, ag as CodexTurnFailedEvent, ah as CodexTurnParams, ai as CodexTurnStarted, aj as CodexTurnStartedEvent, ak as CodexUsage, al as CodexUserInput, am as CodexUserMessage, an as CodexWebSearch, ao as CodexWebSearchItem, ap as ComputeConfig, aq as ComputeConfig1, ar as ConfigMetadata, as as CronTrigger, at as DeltaFrame, au as DoneFrame, av as Duration, aw as EffortLevel, ax as EllipsisGrant, ay as EllipsisPermissions, az as EnvironmentBaseBuild, aA as EnvironmentConfig, aB as EnvironmentHooks, aC as EnvironmentHooks1, aD as EnvironmentOutputPayload, aE as EnvironmentOutputRecord, aF as EnvironmentPhasePayload, aG as EnvironmentPhaseRecord, aH as EnvironmentReadyPayload, aI as EnvironmentReadyRecord, aJ as EnvironmentScript, aK as EnvironmentSource, aL as EnvironmentVariable, aM as ErrorFrame, aN as GithubAccountFilter, aO as GithubAccountSelector, aP as GithubAccountSnippet, aQ as GithubAccountType, aR as GithubCheckRunEvent, aS as GithubIssueEvent, aT as GithubPermissions, aU as GithubPullRequestEvent, aV as GithubPushEvent, aW as GithubReleaseEvent, aX as HandlerService, aY as HeartbeatFrame, aZ as InputContract, a_ as IssueAction, a$ as LegacyAssistantPayload, b0 as LegacyNativeUsage, b1 as LegacyResultPayload, b2 as Level, b3 as LifecycleSessionRecord, b4 as LinearIssueAction, b5 as LinearIssueEvent, b6 as McpRemoteServer, b7 as McpServerRef, b8 as McpStdioServer, b9 as MemorySize, ba as MessageDeliveredPayload, bb as MessageDeliveredRecord, bc as MessageReceivedPayload, bd as MessageReceivedRecord, be as MessageRequeuedPayload, bf as MessageRequeuedRecord, bg as OutputConfig, bh as PermissionsConfig, bi as PermissionsConfig1, bj as PlatformSessionRecord, bk as PromptBlockedReason, bl as PullRequestAction, bm as ReactCheckRun, bn as ReactIssue, bo as ReactLinearIssue, bp as ReactPullRequest, bq as ReactPush, br as ReactRelease, bs as ReactSentry, bt as ReactSlackChannel, bu as ReactTrigger, bv as RecordsAppendFrame, bw as ReleaseAction, bx as RepositoryFilter, by as RepositoryRef, bz as Review, bA as ReviewComment, bB as ReviewConfig, bC as ReviewConfigsListResponse, bD as ReviewPullRequest, bE as ReviewPullRequestAuthor, bF as ReviewReviewer, bG as ReviewSummary, bH as ReviewsListResponse, bI as SdkAssistantRecord, bJ as SdkCacheCreation, bK as SdkContentBlock, bL as SdkRateLimitRecord, bM as SdkRecord, bN as SdkResultRecord, bO as SdkServerToolResultBlock, bP as SdkServerToolUseBlock, bQ as SdkSystemRecord, bR as SdkTextBlock, bS as SdkThinkingBlock, bT as SdkToolResultBlock, bU as SdkToolUseBlock, bV as SdkUserRecord, bW as SendSessionMessageRequest, bX as SentryAction, bY as SentryAlertEvent, bZ as Session, b_ as Session1, b$ as SessionAgent, c0 as SessionArchived, c1 as SessionAttribution, c2 as SessionClosedPayload, c3 as SessionClosedRecord, c4 as SessionConfig, c5 as SessionConversation, c6 as SessionConversationConfig, c7 as SessionCost, c8 as SessionCost1, c9 as SessionEnvironment, ca as SessionEventActor, cb as SessionFrame, cc as SessionGit, cd as SessionGitCommit, ce as SessionGitFile, cf as SessionGitPr, cg as SessionGitRepo, ch as SessionHandler, ci as SessionMessage, cj as SessionMessageImage, ck as SessionMessageResponse, cl as SessionMessageStatus, cm as SessionOutput, cn as SessionParent, co as SessionPrompting, cp as SessionRecord, cq as SessionRecordsListResponse, cr as SessionResponse, cs as SessionSource, ct as SessionState, cu as SessionStopped, cv as SessionStreamFrame, cw as SessionSummary, cx as SessionTokens, cy as SessionTokens1, cz as SessionTurn, cA as SessionTurnResponse, cB as SessionTurnsListResponse, cC as SessionsListResponse, cD as SettingsRef, cE as SkillRef, cF as SlackChannelCreatedEvent, cG as SlackMessageEvent, cH as SnapshotFrame, cI as StreamFrame, cJ as TokensInfo, cK as TurnEndedPayload, cL as TurnEndedRecord, cM as TurnReason, cN as TurnStartedPayload, cO as TurnStartedRecord, cP as TurnStatus, cQ as UnknownSessionRecord, cR as UpdateSessionRequest, cS as paths } from './types-DjY1VcOe.js';
 
 /**
  * Frames on /v1/sessions/stream, /v1/agents/stream and /v1/vm-executions/{id}/stream. Ignore unknown frame types.
@@ -43,7 +43,7 @@ type Session = {
     /**
      * The typed external event that started the session; null for direct and scheduled starts.
      */
-    event: (GithubPullRequestEvent | GithubIssueEvent | GithubPushEvent | LinearIssueEvent | SlackMessageEvent | SlackChannelCreatedEvent | SentryAlertEvent) | null;
+    event: (GithubPullRequestEvent | GithubIssueEvent | GithubPushEvent | GithubCheckRunEvent | GithubReleaseEvent | LinearIssueEvent | SlackMessageEvent | SlackChannelCreatedEvent | SentryAlertEvent) | null;
     /**
      * What the session did to git, one entry per repository in its workspace: the commit and branch it sits on, per-file line counts for its uncommitted changes, and the pull requests it opened. Null if nothing was ever captured.
      */
@@ -63,9 +63,9 @@ type Session = {
         [k: string]: string;
     };
     /**
-     * The structured-output exit contract for this session.
+     * The session's structured output: the `json_schema` the agent must satisfy and, once a turn has submitted it, the `result`.
      */
-    output: OutputConfig | null;
+    output: SessionOutput | null;
     /**
      * The predecessor session this session continues; null when there is none.
      */
@@ -123,7 +123,14 @@ type SessionConfig = {
      * Codex input and native options. Set exactly one of claude_code or codex.
      */
     codex: CodexConfig | null;
+    conversation: SessionConversationConfig;
     environment: string | EnvironmentConfig;
+    /**
+     * Arbitrary string key/value metadata stored on every session.
+     */
+    metadata: {
+        [k: string]: string;
+    };
     output: OutputConfig | null;
     permissions: PermissionsConfig;
     skills: SkillRef[];
@@ -150,20 +157,33 @@ type GithubAccountFilter = {
     exclude: string[];
     include: string[] | boolean;
 } | boolean | string[];
-type IssueAction = 'opened' | 'closed' | 'commented';
+/**
+ * What a completed check run did. `failed` covers the conclusions that
+ * mean the check did not pass on its own merits (`failure`, `timed_out`); a
+ * cancelled, skipped, neutral or stale check is not a failure and never
+ * fires (see FAILED_CHECK_RUN_CONCLUSIONS).
+ */
+type CheckRunAction = 'failed';
 type RepositoryFilter = {
     exclude: string[];
     include: string[];
 } | string[];
+type IssueAction = 'opened' | 'closed' | 'commented';
 type LinearIssueAction = 'opened';
 type PullRequestAction = 'opened' | 'pushed' | 'merged' | 'closed' | 'review_submitted' | 'commented';
+/**
+ * What happened to a GitHub release. `published` is the one moment a
+ * release becomes visible: a release or prerelease published directly, or a
+ * draft published later. Edits, deletions, and unpublishes never fire.
+ */
+type ReleaseAction = 'published';
 type SentryAction = 'issue_alert' | 'metric_alert';
 type GithubAccountType = 'User' | 'Organization' | 'Bot' | 'Mannequin';
 type AttributionType = 'github_user' | 'linear_user' | 'slack_user' | 'api_key';
 /**
  * Why direct prompting is refused. Absent when prompting is allowed.
  */
-type PromptBlockedReason = 'mention_surface' | 'ephemeral_trigger' | 'non_interactive' | 'harness_single_turn' | 'budget_exhausted' | 'closed';
+type PromptBlockedReason = 'mention_surface' | 'non_interactive' | 'harness_single_turn' | 'budget_exhausted' | 'closed';
 /**
  * `open` while the session can take messages; `closed` is permanent.
  */
@@ -184,7 +204,7 @@ type HandlerService = 'slack' | 'github' | 'linear' | 'sentry';
 /**
  * Where the session came from (e.g. react, web, api, cli, mention, cron).
  */
-type SessionSource = 'react' | 'web' | 'api' | 'cli' | 'mention' | 'cron';
+type SessionSource = 'react' | 'code_review' | 'web' | 'api' | 'cli' | 'mention' | 'cron';
 /**
  * Why a turn failed or was cancelled. Null on every other outcome.
  */
@@ -203,7 +223,7 @@ type ConfigManagedBy = 'github' | 'api';
  * Rides on `Sandbox.cache_tier` and the sandbox_ready lifecycle record.
  */
 type SandboxCacheTier = 'exact' | 'incremental' | 'full';
-type SandboxSource = 'cli' | 'web_ui' | 'ingest_pull_request_job_run' | 'session' | 'image_refresh' | 'test' | 'script';
+type SandboxSource = 'session' | 'image_refresh' | 'environment_check' | 'test' | 'script';
 type SandboxStatus = 'scheduled' | 'building' | 'running' | 'released' | 'terminating' | 'terminated' | 'failed';
 type SandboxType = 'claude_code';
 interface SessionListStreamMessage {
@@ -219,7 +239,7 @@ interface SessionListStreamMessage {
 interface SessionAgent {
     config: AgentConfig;
     /**
-     * Identifier of the saved agent this session's snapshot was taken from. Null for a routing-file agent, a code-review stage agent, or the built-in mention agent, which have no saved agent behind them. Points at the agent as it exists now, which may have changed since.
+     * Identifier of the saved agent this session's snapshot was taken from. Null for a routing-file agent or the built-in mention agent, which have no saved agent behind them. Points at the agent as it exists now, which may have changed since.
      */
     id: string | null;
 }
@@ -241,9 +261,7 @@ interface AgentConfig {
  * config directory) — see `yaml_is_ellipsis_config`.
  *
  * `enabled` is agent behavior, not freeform metadata, so it stays inside
- * the config `sha` (only `metadata` is sha-excluded). Whether a session
- * accepts messages is a per-run choice (POST /v1/sessions `interactive`),
- * not a config one.
+ * the config `sha` (only `metadata` is sha-excluded).
  */
 interface AgentIdentity {
     description: string | null;
@@ -264,15 +282,24 @@ interface ConfigMetadata {
  * when it happens; this is what goes in).
  *
  * `json_schema` validates customer data sent as `input` to
- * `POST /v1/agents/{id}/sessions` and stored as `session.input`.
- * Invocations require input when a schema is declared. React agents
- * cannot declare schemas: the platform defines their event payloads.
+ * `POST /v1/agents/{id}/sessions` (the dashboard and the CLI start
+ * through the same door) and stored as `session.input`. An on-demand
+ * start requires input when a schema is declared. A trigger fires
+ * without it: a cron fire has no payload and a react fire carries the
+ * platform-shaped event, so an agent may declare a schema alongside
+ * either trigger and the schema governs only its on-demand starts.
  *
  * `message` is the initial-message template: exact `{{path}}` substitution
- * over the caller payload (or, on a react agent, over the surface's
- * published fields), no conditionals/loops/filters. Refs are validated at
- * deploy time against the governing field set (see AgentConfig's
- * `_check_input`).
+ * over the payload the session has (the caller payload on an on-demand
+ * start, the surface's published fields on a react fire, the empty
+ * object on a cron fire), no conditionals/loops/filters. Refs are
+ * validated at deploy time against every governing field set (see
+ * AgentConfig's `_check_input`): the caller schema's paths, the react
+ * surface's published fields, and both when the agent has a react trigger
+ * and a schema, so one template renders fully on either door (declare the
+ * surface's field names in the schema). Omit `message` to let each door
+ * render its default. An unresolved ref renders as the empty string (a
+ * cron fire, an optional field the payload omitted).
  */
 interface InputContract {
     json_schema: {
@@ -280,10 +307,26 @@ interface InputContract {
     } | null;
     message: string | null;
 }
+/**
+ * A saved agent's spend limits: the per-session cap plus its total spend
+ * over the trailing 1, 7, and 28 days.
+ */
 interface BudgetConfig {
+    /**
+     * The most the agent may spend over the last day, in US dollars.
+     */
     day: number | null;
+    /**
+     * The most the agent may spend over the last 28 days, in US dollars.
+     */
     month: number | null;
+    /**
+     * The most one session may spend, in US dollars.
+     */
     session: number | null;
+    /**
+     * The most the agent may spend over the last 7 days, in US dollars.
+     */
     week: number | null;
 }
 /**
@@ -293,7 +336,10 @@ interface ClaudeConfig {
     effort: EffortLevel | null;
     fallback_model: string | null;
     max_turns: number | null;
-    model: string | null;
+    /**
+     * The model the session runs on: an alias or canonical id from the models table. Required.
+     */
+    model: string;
     /**
      * The initial user message, passed verbatim. Omit to start an interactive session with no turn, waiting for a message.
      */
@@ -301,12 +347,10 @@ interface ClaudeConfig {
     settings: SettingsRef | null;
 }
 /**
- * A config-declared Claude Code settings.json, resolved at run start and
- * passed to `claude --settings <path>`. That is the CLI settings tier — BELOW
- * Ellipsis's managed-settings.json floor — so it customizes behavior (model
- * permissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a
- * security setting. Lets a team point the cloud agent at the same settings file
- * they already use with Claude Code locally instead of re-encoding it as YAML.
+ * A Claude Code settings.json read from a repository and applied to the
+ * session. It adds permission rules and other Claude Code settings; rules the
+ * platform sets stay in force. Supported models list `settings` in
+ * `/v1/account/models`.
  */
 interface SettingsRef {
     path: string;
@@ -319,21 +363,30 @@ interface RepositoryRef {
 }
 /**
  * Native options supported by the current Codex adapter.
- *
- * Options and capabilities expand only when their runtime behavior is tested.
- * Unknown options are rejected instead of silently ignored.
  */
 interface CodexConfig {
     /**
      * Reasoning effort for every turn. Omit to use the model default.
      */
     effort: CodexEffortLevel | null;
+    /**
+     * The model the session runs on: a Responses-capable id from the models table. Required.
+     */
     model: string;
     /**
      * The initial user message, passed verbatim. Omit to start an interactive session with no turn, waiting for a message.
      */
     prompt: string | null;
 }
+/**
+ * Conversation settings for a session, set on a saved agent or sent when starting a session or running an agent.
+ */
+interface SessionConversationConfig {
+    /**
+     * Whether the session stays open after its first turn. Defaults to true; false runs once and requires a prompt. Requires the model's interactive capability when true. Direct message acceptance is reported separately in conversation.prompting.
+     */
+    interactive: boolean;
+}
 /**
  * Everything about the environment the agent runs in: which
  * `repositories` are cloned into it, which environment `variables` it gets,
@@ -454,13 +507,12 @@ interface EnvironmentBaseBuild {
     run: string;
 }
 /**
- * One built-in MCP server this agent opts into by name (`linear`/`slack`).
+ * One built-in MCP server this agent attaches by name (`linear`/`slack`).
  * A name reference over the connected built-in set — the platform manages the
- * server's transport and credentials. It only matters when the named
- * integration is set to `opt_in` inclusion; an integration in the default
- * `all_sessions` mode is added regardless. For a server the platform does not
- * provide, define it instead (`McpStdioServer` /
- * `McpRemoteServer`).
+ * server's transport and credentials. A session gets a built-in server only
+ * when its config names it here or the session started from that server's
+ * own surface. For a server the platform does not provide, define it instead
+ * (`McpStdioServer` / `McpRemoteServer`).
  */
 interface McpServerRef {
     name: string;
@@ -524,7 +576,7 @@ interface OutputConfig {
  * where the agent runs; this is what it may do from there.
  *
  * `ellipsis` scopes the session's Ellipsis API token (`ELLIPSIS_API_TOKEN`,
- * what the `agent` CLI running inside the session authenticates with).
+ * what the `ellipsis` CLI running inside the session authenticates with).
  * `true` / the string `all` (the default) grant the full session token
  * ceiling — everything a session token can ever do. A map narrows it per
  * resource (see `EllipsisPermissions`); the minted token carries
@@ -550,8 +602,8 @@ interface EllipsisPermissions {
 }
 /**
  * One grant entry: a level, optionally narrowed to instances whose
- * natural key (a file's name, a memory's path, a secret's name, a config's
- * name, a session's id) matches any of the `match` globs.
+ * natural key (a file's name, a secret's name, a config's name, a session's
+ * id) matches any of the `match` globs.
  */
 interface EllipsisGrant {
     level: Level;
@@ -559,8 +611,8 @@ interface EllipsisGrant {
 }
 /**
  * The agent's GitHub access: the scope of the installation token minted for
- * its session's environment — the credential `git`, `gh`, and the GitHub MCP
- * server authenticate with.
+ * its session's environment — the credential `git` and `gh` authenticate
+ * with.
  *
  * By default the token carries the installation's full permissions on all of
  * the installation's repositories. `permissions` narrows what it may do:
@@ -589,36 +641,86 @@ interface SkillRef {
     path: string;
     repository: RepositoryRef | null;
 }
+/**
+ * A schedule: `schedule` is a five-field cron expression in UTC.
+ *
+ * `enabled: false` pauses the trigger and keeps its definition: the schedule
+ * stops firing while the agent stays live for on-demand starts and open
+ * sessions keep taking follow-ups (`ellipsis.enabled: false` pauses the
+ * whole file instead). Re-enabling resumes at the next scheduled time; runs
+ * missed while paused are not made up.
+ */
 interface CronTrigger {
+    enabled: boolean;
     schedule: string;
     type: 'cron';
 }
+/**
+ * An event trigger: exactly one surface block names the events to match.
+ *
+ * `enabled: false` pauses the trigger and keeps its definition: events stop
+ * matching while the agent stays live for on-demand starts and open
+ * sessions keep taking follow-ups (`ellipsis.enabled: false` pauses the
+ * whole file instead).
+ */
 interface ReactTrigger {
+    check_run: ReactCheckRun | null;
+    enabled: boolean;
     issue: ReactIssue | null;
     linear_issue: ReactLinearIssue | null;
     pull_request: ReactPullRequest | null;
     push: ReactPush | null;
+    release: ReactRelease | null;
     sentry: ReactSentry | null;
     slack_channel: ReactSlackChannel | null;
     type: 'react';
 }
-interface ReactIssue {
+/**
+ * A CI/CD check completing on a commit — a `check_run` from GitHub
+ * Actions or any other app that reports checks. `names` narrows to the check
+ * runs whose name matches (exact, or a prefix ending in `*`); `branch` is the
+ * check suite's head branch. The `for:` audience is the commit's author (the
+ * pull request author when the check is attached to one), never the CI app
+ * that completed the check — a check run's sender is always a bot.
+ *
+ * Delivery needs the Ellipsis GitHub App's `checks` permission on the
+ * installation; without it GitHub sends no check events and the webhook
+ * handler refuses the ones it does see.
+ */
+interface ReactCheckRun {
+    branch: string[];
     for: GithubAccountSelector;
-    labels: string[];
-    on: IssueAction[];
+    names: string[];
+    on: CheckRunAction[];
     repositories: RepositoryFilter;
 }
 /**
  * A selector of GitHub accounts — the `for:` audience gate on react
- * surfaces and code review pipelines, classified on the stable entity author
- * (the pusher for `push`, the PR author for a review). `users` selects human
+ * surfaces, classified on the stable entity author (the pusher for `push`,
+ * the PR author for a pull request). `users` selects human
  * accounts, `bots` selects bot accounts; each is a `GithubAccountFilter`
  * (include minus exclude, with bare bool/list shorthand).
+ *
+ * `teams` narrows further to members of any of the listed GitHub teams of
+ * the installation's organization, by slug (`platform` for
+ * `@org/platform`). It applies on top of `users`: the author must pass the
+ * users filter AND belong to a listed team. A bot is never a team member,
+ * so a selector with `teams` never admits one. Membership is resolved live
+ * at match time (see `TriggerEventContext.is_author_team_member`), and the
+ * config sync refuses a team that does not exist when the file is
+ * accepted.
  */
 interface GithubAccountSelector {
     bots: GithubAccountFilter;
+    teams: string[];
     users: GithubAccountFilter;
 }
+interface ReactIssue {
+    for: GithubAccountSelector;
+    labels: string[];
+    on: IssueAction[];
+    repositories: RepositoryFilter;
+}
 interface ReactLinearIssue {
     for: GithubAccountSelector;
     on: LinearIssueAction[];
@@ -639,6 +741,21 @@ interface ReactPush {
     paths: string[];
     repositories: RepositoryFilter;
 }
+/**
+ * A GitHub release being published — a release or prerelease published
+ * directly, or a draft published later. `tag` narrows to the release tags
+ * that match (exact, or a prefix ending in `*`, so `v*`); `prerelease`
+ * selects prereleases or full releases, like `draft` on pull requests. The
+ * `for:` audience is the release's author, which for a release cut by CI is
+ * a bot and needs `bots` to opt in.
+ */
+interface ReactRelease {
+    for: GithubAccountSelector;
+    on: ReleaseAction[];
+    prerelease: boolean | null;
+    repositories: RepositoryFilter;
+    tag: string[];
+}
 interface ReactSentry {
     on: SentryAction[];
     projects: string[];
@@ -669,6 +786,7 @@ interface GithubAccountSnippet {
     avatar_url: string;
     id: number;
     login: string;
+    name: string | null;
     type: GithubAccountType;
 }
 /**
@@ -848,8 +966,30 @@ interface GithubPushEvent {
     type: 'github.push';
     url: string;
 }
+interface GithubCheckRunEvent {
+    action: CheckRunAction;
+    actor: SessionEventActor | null;
+    branch: string | null;
+    conclusion: string | null;
+    head_sha: string;
+    name: string;
+    pull_request_number: number | null;
+    repository: string;
+    type: 'github.check_run';
+    url: string;
+}
+interface GithubReleaseEvent {
+    action: ReleaseAction;
+    actor: SessionEventActor | null;
+    name: string | null;
+    prerelease: boolean;
+    repository: string;
+    tag: string;
+    type: 'github.release';
+    url: string;
+}
 interface LinearIssueEvent {
-    action: LinearIssueAction | 'commented';
+    action: LinearIssueAction | ('commented' | 'delegated');
     actor: SessionEventActor | null;
     identifier: string | null;
     number: number;
@@ -957,6 +1097,26 @@ interface SessionHandler {
      */
     sha: string;
 }
+/**
+ * Structured output on the wire: the contract and, when a turn has
+ * submitted one, the payload. `result` is None while the session runs and
+ * when no turn submitted anything; it is the agent's own JSON, in the
+ * shape of `json_schema`.
+ */
+interface SessionOutput {
+    /**
+     * JSON Schema the agent's result must satisfy.
+     */
+    json_schema: {
+        [k: string]: unknown;
+    };
+    /**
+     * The payload the agent submitted, or null until a turn submits one.
+     */
+    result: {
+        [k: string]: unknown;
+    } | null;
+}
 /**
  * The predecessor session this session continues.
  */
@@ -1571,7 +1731,7 @@ declare class EllipsisAccountBilling {
      * Explain whether your account can start sessions.
      *
      * Uses the same account gate as session admission, including credit,
-     * contact email, and personal Claude subscription eligibility. Scoped
+     * contact email, and personal subscription eligibility. Scoped
      * spend limits are reported separately by /v1/account/budget.
      *
      * Required permissions: read:account.
@@ -1591,13 +1751,11 @@ declare class EllipsisAccountModels {
      * List selectable agent models.
      *
      * Grouped by manufacturer and model family, newest versions first
-     * within each family, with the organization's default model
-     * flagged (`is_default_agent_model`: the `default_model` of
-     * `GET /v1/account/settings`).
+     * within each family.
      *
      * Reads the same registry as the dashboard's rate table, so a
      * client's model picker can never drift from what's offered. The
-     * selectable set is global; only the flag is account-scoped.
+     * selectable set is global.
      *
      * Required permissions: read:templates.
      * API key: Supported.
@@ -1662,62 +1820,12 @@ declare class EllipsisAccountOnboarding {
      * Higher permission levels include lower levels: read < write < delete.
      */
     update(options?: {
+        finished?: boolean;
         other_use_case?: string | null;
         use_cases?: (S['AccountOnboardingUseCase'])[];
         work_email?: string | null;
     }): Promise<S['AccountOnboardingResponse']>;
 }
-declare class EllipsisAccountProvidersAnthropic {
-    private readonly transport;
-    constructor(transport: Transport);
-    /**
-     * Delete Anthropic Config
-     *
-     * Required permissions: delete:account.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    delete(): Promise<void>;
-    /**
-     * Get Anthropic Config
-     *
-     * Required permissions: read:account.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    get(): Promise<S['AnthropicConfigResponse']>;
-    /**
-     * Put Anthropic Config
-     *
-     * Required permissions: write:account.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    set(options: {
-        api_key: string;
-    }): Promise<S['AnthropicConfigResponse']>;
-    /**
-     * Validate Anthropic Config
-     *
-     * Required permissions: write:account.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    validate(): Promise<S['ValidateAnthropicConfigResponse']>;
-}
-declare class EllipsisAccountProviders {
-    private readonly transport;
-    readonly anthropic: EllipsisAccountProvidersAnthropic;
-    constructor(transport: Transport);
-}
 declare class EllipsisAccountSettings {
     private readonly transport;
     constructor(transport: Transport);
@@ -1726,9 +1834,9 @@ declare class EllipsisAccountSettings {
      *
      * Get the organization settings.
      *
-     * Session model and budget defaults, code review and mention behavior,
-     * analytics, retention, and notification contacts. PATCH replaces
-     * supplied sections; PUT preserves its model-and-budget-only behavior.
+     * Session budget ceiling, mention behavior, analytics,
+     * retention, and notification contacts. PATCH replaces
+     * supplied sections; PUT sets the budget ceiling only.
      *
      * Required permissions: read:defaults.
      * API key: Supported.
@@ -1742,13 +1850,10 @@ declare class EllipsisAccountSettings {
      *
      * Set the organization settings.
      *
-     * Replaces both: `default_model` accepts an alias or canonical id
-     * and is stored canonical, and cannot be cleared (it is the only
-     * default a session's model resolves against);
      * `budget_ceiling.session` is in US dollars, at most the platform
      * ceiling, and null clears it.
      * Refused for session tokens (potentially prompt-injected code must
-     * not repoint the organization's defaults).
+     * not raise the organization's ceiling).
      *
      * Required permissions: write:defaults.
      * API key: Requires a CLI user token belonging to an account administrator.
@@ -1756,29 +1861,26 @@ declare class EllipsisAccountSettings {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    set(options: {
+    set(options?: {
         budget_ceiling?: S['BudgetCeiling'];
-        default_model: string;
     }): Promise<S['OrganizationSettings']>;
     /**
      * Patch Account Settings
      *
      * Replace supplied settings sections without changing omitted sections.
      *
-     * Changes to model or budget defaults require a GitHub administrator.
+     * Changes to the budget ceiling require a GitHub administrator.
      *
      * Required permissions: write:defaults.
-     * API key: Cannot set budget_ceiling, default_model to a non-null value; those changes require a CLI user token belonging to an account administrator.
-     * CLI user token: Requires an account administrator when setting budget_ceiling, default_model to a non-null value.
+     * API key: Cannot set budget_ceiling to a non-null value; those changes require a CLI user token belonging to an account administrator.
+     * CLI user token: Requires an account administrator when setting budget_ceiling to a non-null value.
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
     update(options?: {
-        analytics?: S['AnalyticsSettings'] | null;
+        analytics?: S['AnalyticsSettings-Input'] | null;
         budget_ceiling?: S['BudgetCeiling'] | null;
-        code_review?: S['CodeReviewSettings'] | null;
-        data_retention?: S['DataRetentionSettings'] | null;
-        default_model?: string | null;
+        data_retention?: S['DataRetentionSettings-Input'] | null;
         notifications?: S['NotificationSettings'] | null;
     }): Promise<S['AccountSettings']>;
 }
@@ -1789,7 +1891,6 @@ declare class EllipsisAccount {
     readonly models: EllipsisAccountModels;
     readonly notifications: EllipsisAccountNotifications;
     readonly onboarding: EllipsisAccountOnboarding;
-    readonly providers: EllipsisAccountProviders;
     readonly settings: EllipsisAccountSettings;
     constructor(transport: Transport);
     /**
@@ -1877,7 +1978,7 @@ declare class EllipsisAccount {
      *
      * Omit period_start for the current UTC month; select a period returned
      * in billing_periods to view history. Credit debits are distinct from
-     * rated token usage through BYOK or a developer's Claude or Codex
+     * rated token usage through a developer's Claude or Codex
      * subscription. Rated usage estimates are not provider invoices.
      * Pending and unresolved requests identify missing measurements.
      *
@@ -1999,17 +2100,19 @@ declare class EllipsisAgents {
     /**
      * Start Agent Session
      *
-     * Invoke an agent.
+     * Start an agent session.
      *
-     * Runs a certified agent with its configured instructions, model,
-     * environment, permissions, skills, and budget, and returns
-     * the session it started. The session runs once and does not accept
-     * follow-up messages. If the agent declares input.json_schema,
-     * send only `input` for its initial message. Otherwise send a non-empty
-     * `prompt`, which becomes the initial message verbatim. Both fields
-     * together, neither field, and input that renders an empty message are
-     * rejected with 422. An optional `budget` lowers the session cap;
-     * `metadata` tags the session. Codex invocations are not supported.
+     * Starts a session from the agent's saved `session` settings and
+     * returns it. The body takes the fields of POST /v1/sessions, all
+     * optional: each field you send replaces the agent's value for that
+     * field, and each field you leave out keeps it. `metadata` is merged
+     * into the agent's key by key, and a `null` value removes a key.
+     * Other lists and maps, and `environment`, are replaced whole;
+     * naming the other harness replaces the agent's. An empty body starts
+     * the agent as written. If the agent declares input.json_schema, send
+     * `input`; its rendered message is added after the prompt. A run-once
+     * session needs a prompt or `input` from the agent or the request, or
+     * the call is a 400.
      *
      * Required permissions: write:sessions.
      * API key: Supported.
@@ -2018,11 +2121,19 @@ declare class EllipsisAgents {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    run(agent_id: string, options?: {
-        budget?: number | null;
+    start(agent_id: string, options?: {
+        budget?: S['RunBudget'] | null;
+        claude_code?: S['ClaudeOverrides'] | null;
+        codex?: S['CodexOverrides'] | null;
+        conversation?: S['SessionConversationConfig-Input'];
+        environment?: string | S['EnvironmentConfig-Input'] | null;
+        force_rebuild?: boolean;
+        images?: (S['ImageAttachment'])[];
         input?: Record<string, unknown> | null;
-        metadata?: Record<string, string>;
-        prompt?: string | null;
+        metadata?: Record<string, string | null>;
+        output?: S['OutputConfig'] | null;
+        permissions?: S['PermissionsConfig-Input'] | null;
+        skills?: (S['SkillRef-Input'])[] | null;
     }): Promise<S['SessionResponse']>;
     /**
      * Get Agents Stream Ticket
@@ -2184,7 +2295,7 @@ declare class EllipsisAnalytics {
     /**
      * Get Analytics Reviews
      *
-     * Return code-review analytics.
+     * Return pull request review analytics.
      *
      * account_type scopes reviewers (bot|user|all) — e.g. "what apps
      * review the most PRs?" is the reviewer facets here with
@@ -2459,7 +2570,6 @@ declare class EllipsisIntegrationsLinear {
      * Higher permission levels include lower levels: read < write < delete.
      */
     updateSettings(options: {
-        mcp_inclusion?: S['McpInclusionMode'] | null;
         teams: (S['LinearTeamUpdate'])[];
     }): Promise<S['AccountActionResponse']>;
 }
@@ -2538,18 +2648,6 @@ declare class EllipsisIntegrationsSlack {
      * Higher permission levels include lower levels: read < write < delete.
      */
     members(): Promise<S['SlackMembersListResponse']>;
-    /**
-     * Update Slack Settings
-     *
-     * Required permissions: write:integrations.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    updateSettings(options: {
-        mcp_inclusion: S['McpInclusionMode'];
-    }): Promise<S['AccountActionResponse']>;
 }
 declare class EllipsisIntegrations {
     private readonly transport;
@@ -2578,166 +2676,30 @@ declare class EllipsisIntegrations {
      */
     list(): Promise<S['GetIntegrationsResponse']>;
 }
-declare class EllipsisMemories {
+declare class EllipsisReviewsConfigs {
     private readonly transport;
     constructor(transport: Transport);
     /**
-     * Create Memory
-     *
-     * Save a memory for future agent sessions.
-     *
-     * Memories are durable lessons shared across the whole
-     * organization — conventions, past decisions, known gotchas that an
-     * agent cannot derive from the repository itself. One concise fact
-     * per memory; the description is what a reader sees in the index.
-     *
-     * Creating never overwrites: a path that already exists is a 409, so
-     * correcting an existing memory is an explicit edit.
-     *
-     * Required permissions: write:memories.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     * Grant match patterns can further restrict access to individual resources.
-     */
-    create(options: {
-        content: string;
-        description: string;
-        path: string;
-    }): Promise<S['MemoryResponse']>;
-    /**
-     * Delete Memory
-     *
-     * Delete a memory that is no longer true.
-     *
-     * Available to every credential type, agents included — a wrong
-     * memory is worse than a missing one. The deleted content is kept in
-     * the memory's history for forensics, not for an undo API.
-     *
-     * Required permissions: delete:memories.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     * Grant match patterns can further restrict access to individual resources.
-     */
-    delete(memory_id: string, options?: {
-        if_sha256?: string | null;
-    }): Promise<void>;
-    /**
-     * Edit Memory
-     *
-     * Correct an existing memory in place.
-     *
-     * Pass description, content, or both. This never creates a memory (an
-     * unknown id is a 404) and never moves one — the path is immutable, so
-     * relocating a memory is a delete plus a create.
-     *
-     * Pass `if_sha256` (from a previous read) to make a concurrent write
-     * a 409 instead of silently overwriting it.
-     *
-     * Required permissions: write:memories.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     * Grant match patterns can further restrict access to individual resources.
-     */
-    edit(memory_id: string, options?: {
-        content?: string | null;
-        description?: string | null;
-        if_sha256?: string | null;
-    }): Promise<S['MemoryResponse']>;
-    /**
-     * Get Memory
-     *
-     * Read one memory's full content.
-     *
-     * The id comes from the index returned by listing memories.
-     *
-     * Required permissions: read:memories.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     * Grant match patterns can further restrict access to individual resources.
-     */
-    get(memory_id: string): Promise<S['MemoryResponse']>;
-    /**
-     * List Memories
-     *
-     * List the organization's memories as a readable index.
+     * List Review Configs
      *
-     * Returns the memories rendered as a markdown index (one line per
-     * memory, carrying its id, path, and description) plus the same
-     * entries structured, each with every field except `content`. Read
-     * the index, then fetch the ids whose content you want.
+     * List code review configs: every kind: code_review file synced from a repository, newest first.
      *
-     * Required permissions: read:memories.
+     * Required permissions: read:reviews.
      * API key: Supported.
      * CLI user token: Supported.
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
      * Higher permission levels include lower levels: read < write < delete.
-     * Grant match patterns can further restrict access to individual resources.
      */
-    list(options?: {
-        prefix?: string | null;
-    }): Promise<S['MemoriesListResponse']>;
+    list(): Promise<S['ReviewConfigsListResponse']>;
 }
 declare class EllipsisReviews {
     private readonly transport;
+    readonly configs: EllipsisReviewsConfigs;
     constructor(transport: Transport);
-    /**
-     * List Review Configs
-     *
-     * Required permissions: read:reviews.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    configs(): Promise<S['GetCodeReviewConfigsResponse']>;
-    /**
-     * Create Review
-     *
-     * Run a code review on demand.
-     *
-     * Reviews an open pull request. Which pipeline runs is not a
-     * parameter: it resolves from the repository's files exactly as
-     * it does for a push, so an on-demand review never disagrees with
-     * the automatic one.
-     *
-     * A review is one pipeline run over one commit range, with one
-     * agent session per stage: `review.id` is the review id, and
-     * `stages[].session_id` is where a client streams
-     * (/sessions/{id}/stream on a stage session), since the review
-     * itself is a pipeline rather than one process.
-     *
-     * Required permissions: write:reviews.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    create(options: {
-        owner: string;
-        post?: boolean;
-        pull_request_number: number;
-        repo: string;
-        scope?: S['ReviewScope'];
-    }): Promise<S['Review']>;
     /**
      * Get Review
      *
-     * Return one review with findings and outcome.
-     *
-     * Includes its scope, the per-stage sessions, the parsed findings,
-     * the finding counters, and the posting outcome.
-     *
-     * Findings only exist after a stage session finalizes — a running
-     * review honestly reports [] / null, which is why a client
-     * streams a stage session and then re-fetches the review.
+     * Get a code review: its reviewers and every comment they returned, posted or held back.
      *
      * Required permissions: read:reviews.
      * API key: Supported.
@@ -2751,14 +2713,6 @@ declare class EllipsisReviews {
      *
      * List code reviews, newest first.
      *
-     * `findings` and `configuration` are omitted (counters only). Each
-     * filter is a set: repeat `repository`, `pull_request_number`, or
-     * `status` to match any of several values. `start` and `end` bound
-     * the review's creation time.
-     *
-     * Webhook-created reviews appear here too, so this answers "show
-     * me every review on this PR".
-     *
      * Required permissions: read:reviews.
      * API key: Supported.
      * CLI user token: Supported.
@@ -2766,14 +2720,14 @@ declare class EllipsisReviews {
      * Higher permission levels include lower levels: read < write < delete.
      */
     list(options?: {
-        repository?: (string)[];
-        pull_request_number?: (number)[];
-        status?: (S['CodeReviewRunStatus'])[];
+        repository?: (string)[] | null;
+        pull_request_number?: (number)[] | null;
+        status?: (S['CodeReviewStatus'])[] | null;
         start?: string | null;
         end?: string | null;
         limit?: number;
         cursor?: string | null;
-    }): Promise<Page<S['Review'], S['ReviewsListResponse']>>;
+    }): Promise<Page<S['ReviewSummary'], S['ReviewsListResponse']>>;
 }
 declare class EllipsisSecrets {
     private readonly transport;
@@ -3021,27 +2975,23 @@ declare class EllipsisSessions {
         author_id?: number | null;
         repo?: string | null;
         unfinished?: boolean;
-        exclude_code_review?: boolean;
     }): Promise<Page<S['Session'], S['SessionsListResponse']>>;
     /**
-     * Get Session Output
+     * Get Session Metrics
      *
-     * Return the session's typed output.
+     * List the CPU, memory, swap, and disk readings of every VM the
+     * session ran on, oldest first.
      *
-     * The payload the agent submitted through its config-declared
-     * output.json_schema, as the raw JSON body with no envelope. 404
-     * while the session is still running (poll GET /v1/sessions/{id}),
-     * when the agent declares no output block, or when no turn
-     * produced output.
+     * A reading is taken every 5 seconds while the session runs.
      *
      * Required permissions: read:sessions.
      * API key: Supported.
      * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
+     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration. Only the token's own session.
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    output(session_id: string): Promise<Record<string, unknown>>;
+    metrics(session_id: string): Promise<S['VMMetricsResponse']>;
     /**
      * Get Session Records
      *
@@ -3094,7 +3044,7 @@ declare class EllipsisSessions {
      *
      * Send a message to a session.
      *
-     * 409 for react/cron, non-interactive, closed, and out-of-budget
+     * 409 for mention, non-interactive, closed, and out-of-budget
      * sessions. Returns the created message and its turn; a retried send
      * with the same idempotency_key returns the original ones.
      *
@@ -3135,9 +3085,9 @@ declare class EllipsisSessions {
      * Set exactly one of `claude_code` or `codex`. Its `prompt` is the
      * first message; omit the prompt and the session starts with no
      * turn, waiting for one. 400 when `conversation.interactive` is false
-     * and there is no prompt, or when `budget` exceeds the organization's
-     * per-session ceiling. To run a saved agent, use
-     * POST /v1/agents/{agent_id}/sessions.
+     * and there is no prompt, or when `budget.session` exceeds the
+     * organization's per-session ceiling. To start a session from a saved
+     * agent, use POST /v1/agents/{agent_id}/sessions.
      *
      * Required permissions: write:sessions.
      * API key: Supported.
@@ -3147,17 +3097,16 @@ declare class EllipsisSessions {
      * Grant match patterns can further restrict access to individual resources.
      */
     start(options?: {
-        budget?: number | null;
+        budget?: S['RunBudget'] | null;
         claude_code?: S['ClaudeConfig-Input'] | null;
         codex?: S['CodexConfig-Input'] | null;
-        conversation?: S['SessionConversationConfig'];
+        conversation?: S['SessionConversationConfig-Input'];
         environment?: string | S['EnvironmentConfig-Input'] | null;
         force_rebuild?: boolean;
         images?: (S['ImageAttachment'])[];
         metadata?: Record<string, string>;
         output?: S['OutputConfig'] | null;
         permissions?: S['PermissionsConfig-Input'] | null;
-        repositories?: (string)[] | null;
         skills?: (S['SkillRef-Input'])[] | null;
     }): Promise<S['SessionResponse']>;
     /**
@@ -3528,6 +3477,23 @@ declare class EllipsisVms {
         limit?: number;
         offset?: number;
     }): Promise<S['VMListResponse']>;
+    /**
+     * List Vm Metrics
+     *
+     * List a VM's CPU, memory, swap, and disk readings, oldest first.
+     *
+     * A reading is taken every 5 seconds while a session runs on the VM.
+     *
+     * Required permissions: read:environments.
+     * API key: Supported.
+     * CLI user token: Supported.
+     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration. Only the token's own VM.
+     * Higher permission levels include lower levels: read < write < delete.
+     */
+    metrics(vm_id: string, options?: {
+        start?: string | null;
+        end?: string | null;
+    }): Promise<S['VMMetricsResponse']>;
 }
 declare class EllipsisWebhooksDeliveries {
     private readonly transport;
@@ -3683,7 +3649,6 @@ declare class Ellipsis {
     readonly environments: EllipsisEnvironments;
     readonly handlers: EllipsisHandlers;
     readonly integrations: EllipsisIntegrations;
-    readonly memories: EllipsisMemories;
     readonly reviews: EllipsisReviews;
     readonly secrets: EllipsisSecrets;
     readonly sessions: EllipsisSessions;
@@ -3700,10 +3665,12 @@ declare class Ellipsis {
      *
      * Return the identity behind the caller's credential.
      *
-     * Required permissions: read:account.
+     * Any valid credential may call this; no permission grant is needed.
+     *
+     * Required permissions: none; any valid credential.
      * API key: Supported.
      * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
+     * Session token: Requires the ellipsis:api scope; no permissions.ellipsis grant is needed.
      * Higher permission levels include lower levels: read < write < delete.
      */
     identity(): Promise<S['Identity']>;