@ellipsis-dev/sdk 0.31.0 → 0.33.0

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { c as components } from './types-BQxZcD0_.js';
-export { A as AgentConfig, a as AgentIdentity, b as AttributionType, B as BudgetConfig, C as ClaudeAssistantEvent, d as ClaudeAssistantMessage, e as ClaudeConfig, f as ClaudeConversationResetEvent, g as ClaudeNativeEvent, h as ClaudeNativeSessionRecord, i as ClaudeNativeUsage, j as ClaudeRateLimitEvent, k as ClaudeRateLimitInfo, l as ClaudeResultEvent, m as ClaudeSessionRecord, n as ClaudeSystemEvent, o as ClaudeUserEvent, p as ClaudeUserMessage, q as CodexAgentMessage, r as CodexAgentMessageItem, s as CodexAppServerError, t as CodexAppServerEvent, u as CodexAppServerItem, v as CodexAppServerNotification, w as CodexAppServerSessionRecord, x as CodexCommandExecution, y as CodexCommandExecutionItem, z as CodexConfig, D as CodexContextCompaction, E as CodexEffortLevel, F as CodexErrorEvent, G as CodexErrorItem, H as CodexErrorParams, I as CodexEvent, J as CodexFileChange, K as CodexFileChangeItem, L as CodexFileUpdate, M as CodexItem, N as CodexItemCompleted, O as CodexItemCompletedEvent, P as CodexItemParams, Q as CodexItemStarted, R as CodexItemStartedEvent, S as CodexItemUpdatedEvent, T as CodexLocalImageInput, U as CodexMcpToolCall, V as CodexMcpToolCallAppContext, W as CodexMcpToolCallError, X as CodexMcpToolCallItem, Y as CodexMcpToolCallResult, Z as CodexPlan, _ as CodexReasoning, $ as CodexReasoningItem, a0 as CodexSessionRecord, a1 as CodexTextInput, a2 as CodexThread, a3 as CodexThreadStarted, a4 as CodexThreadStartedEvent, a5 as CodexThreadStartedParams, a6 as CodexThreadTokenUsage, a7 as CodexTodoListItem, a8 as CodexTokenUsageBreakdown, a9 as CodexTokenUsageParams, aa as CodexTokenUsageUpdated, ab as CodexTurn, ac as CodexTurnCompleted, ad as CodexTurnCompletedEvent, ae as CodexTurnError, af as CodexTurnFailedEvent, ag as CodexTurnParams, ah as CodexTurnStarted, ai as CodexTurnStartedEvent, aj as CodexUsage, ak as CodexUserInput, al as CodexUserMessage, am as CodexWebSearch, an as CodexWebSearchItem, ao as ComputeConfig, ap as ComputeConfig1, aq as ConfigMetadata, ar as CreateReviewRequest, as as CronTrigger, at as DeltaFrame, au as DoneFrame, av as Duration, aw as EffortLevel, ax as EllipsisGrant, ay as EllipsisPermissions, az as EnvironmentBaseBuild, aA as EnvironmentConfig, aB as EnvironmentHooks, aC as EnvironmentHooks1, aD as EnvironmentOutputPayload, aE as EnvironmentOutputRecord, aF as EnvironmentPhasePayload, aG as EnvironmentPhaseRecord, aH as EnvironmentReadyPayload, aI as EnvironmentReadyRecord, aJ as EnvironmentScript, aK as EnvironmentSource, aL as EnvironmentVariable, aM as ErrorFrame, aN as Finding, aO as GithubAccountFilter, aP as GithubAccountSelector, aQ as GithubAccountSnippet, aR as GithubAccountType, aS as GithubIssueEvent, aT as GithubPermissions, aU as GithubPullRequestEvent, aV as GithubPushEvent, aW as HandlerService, aX as HeartbeatFrame, aY as InputContract, aZ as IssueAction, a_ as LegacyAssistantPayload, a$ as LegacyNativeUsage, b0 as LegacyResultPayload, b1 as Level, b2 as LifecycleSessionRecord, b3 as LinearIssueAction, b4 as LinearIssueEvent, b5 as McpRemoteServer, b6 as McpServerRef, b7 as McpStdioServer, b8 as MemorySize, b9 as MessageDeliveredPayload, ba as MessageDeliveredRecord, bb as MessageReceivedPayload, bc as MessageReceivedRecord, bd as MessageRequeuedPayload, be as MessageRequeuedRecord, bf as OutboxCollectedPayload, bg as OutboxCollectedRecord, bh as OutputConfig, bi as PermissionsConfig, bj as PermissionsConfig1, bk as PlatformSessionRecord, bl as PromptBlockedReason, bm as PullRequestAction, bn as ReactIssue, bo as ReactLinearIssue, bp as ReactPullRequest, bq as ReactPush, br as ReactSentry, bs as ReactSlackChannel, bt as ReactTrigger, bu as RecordsAppendFrame, bv as RepositoryFilter, bw as RepositoryRef, bx as ResolvedReviewScope, by as Review, bz as ReviewConfiguration, bA as ReviewCounters, bB as ReviewFinding, bC as ReviewRequester, bD as ReviewScope, bE as ReviewScopeKind, bF as ReviewStage, bG as ReviewedCommit, bH as ReviewsListResponse, bI as SdkAssistantRecord, bJ as SdkCacheCreation, bK as SdkContentBlock, bL as SdkRateLimitRecord, bM as SdkRecord, bN as SdkResultRecord, bO as SdkServerToolResultBlock, bP as SdkServerToolUseBlock, bQ as SdkSystemRecord, bR as SdkTextBlock, bS as SdkThinkingBlock, bT as SdkToolResultBlock, bU as SdkToolUseBlock, bV as SdkUserRecord, bW as SendSessionMessageRequest, bX as SentryAction, bY as SentryAlertEvent, bZ as Session, b_ as Session1, b$ as SessionAgent, c0 as SessionArchived, c1 as SessionAttribution, c2 as SessionClosedPayload, c3 as SessionClosedRecord, c4 as SessionConfig, c5 as SessionConversation, c6 as SessionCost, c7 as SessionCost1, c8 as SessionEnvironment, c9 as SessionEventActor, ca as SessionFrame, cb as SessionGit, cc as SessionGitCommit, cd as SessionGitFile, ce as SessionGitPr, cf as SessionGitRepo, cg as SessionHandler, ch as SessionMessage, ci as SessionMessageImage, cj as SessionMessageResponse, ck as SessionMessageStatus, cl as SessionParent, cm as SessionPrompting, cn as SessionRecord, co as SessionRecordsListResponse, cp as SessionResponse, cq as SessionSource, cr as SessionState, cs as SessionStopped, ct as SessionStreamFrame, cu as SessionSummary, cv as SessionTokens, cw as SessionTokens1, cx as SessionTurn, cy as SessionTurnResponse, cz as SessionTurnsListResponse, cA as SessionsListResponse, cB as SettingsRef, cC as SkillRef, cD as SlackChannelCreatedEvent, cE as SlackMessageEvent, cF as SnapshotFrame, cG as StreamFrame, cH as TokensInfo, cI as TurnEndedPayload, cJ as TurnEndedRecord, cK as TurnReason, cL as TurnStartedPayload, cM as TurnStartedRecord, cN as TurnStatus, cO as UnknownSessionRecord, cP as UpdateSessionRequest, cQ as paths } from './types-BQxZcD0_.js';
+import { c as components } from './types-CtvhpMyt.js';
+export { A as AgentConfig, a as AgentIdentity, b as AttributionType, B as BudgetConfig, C as CheckRunAction, d as CheckSuiteAction, e as ClaudeAssistantEvent, f as ClaudeAssistantMessage, g as ClaudeConfig, h as ClaudeConversationResetEvent, i as ClaudeNativeEvent, j as ClaudeNativeSessionRecord, k as ClaudeNativeUsage, l as ClaudeRateLimitEvent, m as ClaudeRateLimitInfo, n as ClaudeResultEvent, o as ClaudeSessionRecord, p as ClaudeSystemEvent, q as ClaudeUserEvent, r as ClaudeUserMessage, s as CodexAgentMessage, t as CodexAgentMessageItem, u as CodexAppServerError, v as CodexAppServerEvent, w as CodexAppServerItem, x as CodexAppServerNotification, y as CodexAppServerSessionRecord, z as CodexCommandExecution, D as CodexCommandExecutionItem, E as CodexConfig, F as CodexContextCompaction, G as CodexEffortLevel, H as CodexErrorEvent, I as CodexErrorItem, J as CodexErrorParams, K as CodexEvent, L as CodexFileChange, M as CodexFileChangeItem, N as CodexFileUpdate, O as CodexItem, P as CodexItemCompleted, Q as CodexItemCompletedEvent, R as CodexItemParams, S as CodexItemStarted, T as CodexItemStartedEvent, U as CodexItemUpdatedEvent, V as CodexLocalImageInput, W as CodexMcpToolCall, X as CodexMcpToolCallAppContext, Y as CodexMcpToolCallError, Z as CodexMcpToolCallItem, _ as CodexMcpToolCallResult, $ as CodexPlan, a0 as CodexReasoning, a1 as CodexReasoningItem, a2 as CodexSessionRecord, a3 as CodexTextInput, a4 as CodexThread, a5 as CodexThreadStarted, a6 as CodexThreadStartedEvent, a7 as CodexThreadStartedParams, a8 as CodexThreadTokenUsage, a9 as CodexTodoListItem, aa as CodexTokenUsageBreakdown, ab as CodexTokenUsageParams, ac as CodexTokenUsageUpdated, ad as CodexTurn, ae as CodexTurnCompleted, af as CodexTurnCompletedEvent, ag as CodexTurnError, ah as CodexTurnFailedEvent, ai as CodexTurnParams, aj as CodexTurnStarted, ak as CodexTurnStartedEvent, al as CodexUsage, am as CodexUserInput, an as CodexUserMessage, ao as CodexWebSearch, ap as CodexWebSearchItem, aq as ComputeConfig, ar as ComputeConfig1, as as ConfigMetadata, at as Cost, au as Cost1, av as CronTrigger, aw as DeltaFrame, ax as DoneFrame, ay as Duration, az as EffortLevel, aA as EllipsisGrant, aB as EllipsisPermissions, aC as EnvironmentBaseBuild, aD as EnvironmentConfig, aE as EnvironmentHooks, aF as EnvironmentHooks1, aG as EnvironmentOutputPayload, aH as EnvironmentOutputRecord, aI as EnvironmentPhasePayload, aJ as EnvironmentPhaseRecord, aK as EnvironmentReadyPayload, aL as EnvironmentReadyRecord, aM as EnvironmentScript, aN as EnvironmentSource, aO as EnvironmentVariable, aP as ErrorFrame, aQ as GithubAccountFilter, aR as GithubAccountSelector, aS as GithubAccountSnippet, aT as GithubAccountType, aU as GithubCheckRunEvent, aV as GithubCheckSuiteEvent, aW as GithubIssueEvent, aX as GithubPermissions, aY as GithubPullRequestEvent, aZ as GithubPushEvent, a_ as GithubReleaseEvent, a$ as GithubStatusEvent, b0 as GithubWorkflowRunEvent, b1 as HandlerService, b2 as HeartbeatFrame, b3 as InputContract, b4 as IssueAction, b5 as LegacyAssistantPayload, b6 as LegacyNativeUsage, b7 as LegacyResultPayload, b8 as Level, b9 as LifecycleSessionRecord, ba as LinearIssueAction, bb as LinearIssueEvent, bc as LlmCost, bd as LlmCostSplit, be as McpRemoteServer, bf as McpServerRef, bg as McpStdioServer, bh as MemorySize, bi as MessageDeliveredPayload, bj as MessageDeliveredRecord, bk as MessageReceivedPayload, bl as MessageReceivedRecord, bm as MessageRequeuedPayload, bn as MessageRequeuedRecord, bo as ModelLlmCostSplit, bp as ModelTokenCounts, bq as OutputConfig, br as PermissionsConfig, bs as PermissionsConfig1, bt as PlatformSessionRecord, bu as PromptBlockedReason, bv as PullRequestAction, bw as ReactCheckRun, bx as ReactCheckSuite, by as ReactIssue, bz as ReactLinearIssue, bA as ReactPullRequest, bB as ReactPush, bC as ReactRelease, bD as ReactSentry, bE as ReactSlackChannel, bF as ReactStatus, bG as ReactTrigger, bH as ReactWorkflowRun, bI as RecordsAppendFrame, bJ as ReleaseAction, bK as RepositoryFilter, bL as RepositoryRef, bM as Review, bN as ReviewComment, bO as ReviewConfig, bP as ReviewConfigsListResponse, bQ as ReviewPullRequest, bR as ReviewPullRequestAuthor, bS as ReviewReviewer, bT as ReviewSummary, bU as ReviewsListResponse, bV as SdkAssistantRecord, bW as SdkCacheCreation, bX as SdkContentBlock, bY as SdkRateLimitRecord, bZ as SdkRecord, b_ as SdkResultRecord, b$ as SdkServerToolResultBlock, c0 as SdkServerToolUseBlock, c1 as SdkSystemRecord, c2 as SdkTextBlock, c3 as SdkThinkingBlock, c4 as SdkToolResultBlock, c5 as SdkToolUseBlock, c6 as SdkUserRecord, c7 as SendSessionMessageRequest, c8 as SentryAction, c9 as SentryAlertEvent, ca as Session, cb as Session1, cc as SessionAgent, cd as SessionArchived, ce as SessionAttribution, cf as SessionClosedPayload, cg as SessionClosedRecord, ch as SessionConfig, ci as SessionConversation, cj as SessionConversationConfig, ck as SessionEnvironment, cl as SessionEventActor, cm as SessionFrame, cn as SessionGit, co as SessionGitCommit, cp as SessionGitFile, cq as SessionGitPr, cr as SessionGitRepo, cs as SessionHandler, ct as SessionMessage, cu as SessionMessageImage, cv as SessionMessageResponse, cw as SessionMessageStatus, cx as SessionOutput, cy as SessionParent, cz as SessionPrompting, cA as SessionRecord, cB as SessionRecordsListResponse, cC as SessionResponse, cD as SessionSource, cE as SessionState, cF as SessionStopped, cG as SessionStreamFrame, cH as SessionSummary, cI as SessionTurn, cJ as SessionTurnResponse, cK as SessionTurnsListResponse, cL as SessionsListResponse, cM as SettingsRef, cN as SkillRef, cO as SlackChannelCreatedEvent, cP as SlackMessageEvent, cQ as SnapshotFrame, cR as StatusAction, cS as StreamFrame, cT as TokenCounts, cU as Tokens, cV as Tokens1, cW as TokensInfo, cX as TurnEndedPayload, cY as TurnEndedRecord, cZ as TurnReason, c_ as TurnStartedPayload, c$ as TurnStartedRecord, d0 as TurnStatus, d1 as UnknownSessionRecord, d2 as UpdateSessionRequest, d3 as WorkflowRunAction, d4 as paths } from './types-CtvhpMyt.js';
 
 /**
  * Frames on /v1/sessions/stream, /v1/agents/stream and /v1/vm-executions/{id}/stream. Ignore unknown frame types.
@@ -22,7 +22,7 @@ type Session = {
     archived: SessionArchived | null;
     attribution: SessionAttribution;
     /**
-     * The spend budget enforced for this session, in US dollars, after resolving defaults and ceilings.
+     * The spend budget enforced for this session, in millicents, after resolving defaults and ceilings.
      */
     budget: number;
     /**
@@ -34,7 +34,7 @@ type Session = {
      */
     codex: CodexConfig | null;
     conversation: SessionConversation;
-    cost: SessionCost;
+    cost: Cost;
     /**
      * When the session was created.
      */
@@ -43,7 +43,7 @@ type Session = {
     /**
      * The typed external event that started the session; null for direct and scheduled starts.
      */
-    event: (GithubPullRequestEvent | GithubIssueEvent | GithubPushEvent | LinearIssueEvent | SlackMessageEvent | SlackChannelCreatedEvent | SentryAlertEvent) | null;
+    event: (GithubPullRequestEvent | GithubIssueEvent | GithubPushEvent | GithubCheckRunEvent | GithubCheckSuiteEvent | GithubWorkflowRunEvent | GithubStatusEvent | GithubReleaseEvent | LinearIssueEvent | SlackMessageEvent | SlackChannelCreatedEvent | SentryAlertEvent) | null;
     /**
      * What the session did to git, one entry per repository in its workspace: the commit and branch it sits on, per-file line counts for its uncommitted changes, and the pull requests it opened. Null if nothing was ever captured.
      */
@@ -63,9 +63,9 @@ type Session = {
         [k: string]: string;
     };
     /**
-     * The structured-output exit contract for this session.
+     * The session's structured output: the `json_schema` the agent must satisfy and, once a turn has submitted it, the `result`.
      */
-    output: OutputConfig | null;
+    output: SessionOutput | null;
     /**
      * The predecessor session this session continues; null when there is none.
      */
@@ -80,7 +80,7 @@ type Session = {
      * The latest live summary of the session's progress while it runs, and when it was generated.
      */
     summary: SessionSummary | null;
-    tokens: SessionTokens;
+    tokens: Tokens;
     /**
      * The turn in progress, or the latest one when none is running. Null until the session has a message. Wait on it: the message you sent is answered when the turn with your message's `turn_id` reaches a final status.
      */
@@ -123,7 +123,14 @@ type SessionConfig = {
      * Codex input and native options. Set exactly one of claude_code or codex.
      */
     codex: CodexConfig | null;
+    conversation: SessionConversationConfig;
     environment: string | EnvironmentConfig;
+    /**
+     * Arbitrary string key/value metadata stored on every session.
+     */
+    metadata: {
+        [k: string]: string;
+    };
     output: OutputConfig | null;
     permissions: PermissionsConfig;
     skills: SkillRef[];
@@ -150,20 +157,42 @@ type GithubAccountFilter = {
     exclude: string[];
     include: string[] | boolean;
 } | boolean | string[];
-type IssueAction = 'opened' | 'closed' | 'commented';
+/**
+ * The state of a check run when GitHub reports it. A run created before it finishes fires its status, and `in_progress` is `started`. A finished run fires its conclusion, `success` is `passed` and `failure` is `failed`. Every other value is the GitHub word.
+ */
+type CheckRunAction = 'requested' | 'queued' | 'waiting' | 'pending' | 'started' | 'passed' | 'failed' | 'timed_out' | 'cancelled' | 'skipped' | 'neutral' | 'action_required' | 'stale';
 type RepositoryFilter = {
     exclude: string[];
     include: string[];
 } | string[];
+/**
+ * The conclusion of a finished check suite. `success` is `passed` and `failure` is `failed`. Every other value is the GitHub word.
+ */
+type CheckSuiteAction = 'passed' | 'failed' | 'timed_out' | 'cancelled' | 'skipped' | 'neutral' | 'action_required' | 'stale' | 'startup_failure';
+type IssueAction = 'opened' | 'closed' | 'commented';
 type LinearIssueAction = 'opened';
 type PullRequestAction = 'opened' | 'pushed' | 'merged' | 'closed' | 'review_submitted' | 'commented';
+/**
+ * What happened to a GitHub release. `published` is the one moment a
+ * release becomes visible: a release or prerelease published directly, or a
+ * draft published later. Edits, deletions, and unpublishes never fire.
+ */
+type ReleaseAction = 'published';
 type SentryAction = 'issue_alert' | 'metric_alert';
+/**
+ * The state of a commit status. `success` is `passed`, `failure` is `failed`, and `error` is `errored`.
+ */
+type StatusAction = 'pending' | 'passed' | 'failed' | 'errored';
+/**
+ * The state of a GitHub Actions workflow run when GitHub reports it. Before the run finishes it is the status, and `in_progress` is `started`. After it finishes it is the conclusion, `success` is `passed` and `failure` is `failed`. Every other value is the GitHub word.
+ */
+type WorkflowRunAction = 'requested' | 'queued' | 'waiting' | 'pending' | 'started' | 'passed' | 'failed' | 'timed_out' | 'cancelled' | 'skipped' | 'neutral' | 'action_required' | 'stale' | 'startup_failure';
 type GithubAccountType = 'User' | 'Organization' | 'Bot' | 'Mannequin';
 type AttributionType = 'github_user' | 'linear_user' | 'slack_user' | 'api_key';
 /**
  * Why direct prompting is refused. Absent when prompting is allowed.
  */
-type PromptBlockedReason = 'mention_surface' | 'ephemeral_trigger' | 'non_interactive' | 'harness_single_turn' | 'budget_exhausted' | 'closed';
+type PromptBlockedReason = 'mention_surface' | 'non_interactive' | 'harness_single_turn' | 'budget_exhausted' | 'closed';
 /**
  * `open` while the session can take messages; `closed` is permanent.
  */
@@ -184,7 +213,7 @@ type HandlerService = 'slack' | 'github' | 'linear' | 'sentry';
 /**
  * Where the session came from (e.g. react, web, api, cli, mention, cron).
  */
-type SessionSource = 'react' | 'web' | 'api' | 'cli' | 'mention' | 'cron';
+type SessionSource = 'react' | 'code_review' | 'web' | 'api' | 'cli' | 'mention' | 'cron';
 /**
  * Why a turn failed or was cancelled. Null on every other outcome.
  */
@@ -203,7 +232,7 @@ type ConfigManagedBy = 'github' | 'api';
  * Rides on `Sandbox.cache_tier` and the sandbox_ready lifecycle record.
  */
 type SandboxCacheTier = 'exact' | 'incremental' | 'full';
-type SandboxSource = 'cli' | 'web_ui' | 'ingest_pull_request_job_run' | 'session' | 'image_refresh' | 'test' | 'script';
+type SandboxSource = 'session' | 'image_refresh' | 'environment_check' | 'test' | 'script';
 type SandboxStatus = 'scheduled' | 'building' | 'running' | 'released' | 'terminating' | 'terminated' | 'failed';
 type SandboxType = 'claude_code';
 interface SessionListStreamMessage {
@@ -219,7 +248,7 @@ interface SessionListStreamMessage {
 interface SessionAgent {
     config: AgentConfig;
     /**
-     * Identifier of the saved agent this session's snapshot was taken from. Null for a routing-file agent, a code-review stage agent, or the built-in mention agent, which have no saved agent behind them. Points at the agent as it exists now, which may have changed since.
+     * Identifier of the saved agent this session's snapshot was taken from. Null for a routing-file agent or the built-in mention agent, which have no saved agent behind them. Points at the agent as it exists now, which may have changed since.
      */
     id: string | null;
 }
@@ -241,9 +270,7 @@ interface AgentConfig {
  * config directory) — see `yaml_is_ellipsis_config`.
  *
  * `enabled` is agent behavior, not freeform metadata, so it stays inside
- * the config `sha` (only `metadata` is sha-excluded). Whether a session
- * accepts messages is a per-run choice (POST /v1/sessions `interactive`),
- * not a config one.
+ * the config `sha` (only `metadata` is sha-excluded).
  */
 interface AgentIdentity {
     description: string | null;
@@ -264,15 +291,24 @@ interface ConfigMetadata {
  * when it happens; this is what goes in).
  *
  * `json_schema` validates customer data sent as `input` to
- * `POST /v1/agents/{id}/sessions` and stored as `session.input`.
- * Invocations require input when a schema is declared. React agents
- * cannot declare schemas: the platform defines their event payloads.
+ * `POST /v1/agents/{id}/sessions` (the dashboard and the CLI start
+ * through the same door) and stored as `session.input`. An on-demand
+ * start requires input when a schema is declared. A trigger fires
+ * without it: a cron fire has no payload and a react fire carries the
+ * platform-shaped event, so an agent may declare a schema alongside
+ * either trigger and the schema governs only its on-demand starts.
  *
  * `message` is the initial-message template: exact `{{path}}` substitution
- * over the caller payload (or, on a react agent, over the surface's
- * published fields), no conditionals/loops/filters. Refs are validated at
- * deploy time against the governing field set (see AgentConfig's
- * `_check_input`).
+ * over the payload the session has (the caller payload on an on-demand
+ * start, the surface's published fields on a react fire, the empty
+ * object on a cron fire), no conditionals/loops/filters. Refs are
+ * validated at deploy time against every governing field set (see
+ * AgentConfig's `_check_input`): the caller schema's paths, the react
+ * surface's published fields, and both when the agent has a react trigger
+ * and a schema, so one template renders fully on either door (declare the
+ * surface's field names in the schema). Omit `message` to let each door
+ * render its default. An unresolved ref renders as the empty string (a
+ * cron fire, an optional field the payload omitted).
  */
 interface InputContract {
     json_schema: {
@@ -280,10 +316,26 @@ interface InputContract {
     } | null;
     message: string | null;
 }
+/**
+ * A saved agent's spend limits: the per-session cap plus its total spend
+ * over the trailing 1, 7, and 28 days.
+ */
 interface BudgetConfig {
+    /**
+     * The most the agent may spend over the last day, in US dollars.
+     */
     day: number | null;
+    /**
+     * The most the agent may spend over the last 28 days, in US dollars.
+     */
     month: number | null;
+    /**
+     * The most one session may spend, in US dollars.
+     */
     session: number | null;
+    /**
+     * The most the agent may spend over the last 7 days, in US dollars.
+     */
     week: number | null;
 }
 /**
@@ -293,7 +345,10 @@ interface ClaudeConfig {
     effort: EffortLevel | null;
     fallback_model: string | null;
     max_turns: number | null;
-    model: string | null;
+    /**
+     * The model the session runs on: an alias or canonical id from the models table. Required.
+     */
+    model: string;
     /**
      * The initial user message, passed verbatim. Omit to start an interactive session with no turn, waiting for a message.
      */
@@ -301,12 +356,10 @@ interface ClaudeConfig {
     settings: SettingsRef | null;
 }
 /**
- * A config-declared Claude Code settings.json, resolved at run start and
- * passed to `claude --settings <path>`. That is the CLI settings tier — BELOW
- * Ellipsis's managed-settings.json floor — so it customizes behavior (model
- * permissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a
- * security setting. Lets a team point the cloud agent at the same settings file
- * they already use with Claude Code locally instead of re-encoding it as YAML.
+ * A Claude Code settings.json read from a repository and applied to the
+ * session. It adds permission rules and other Claude Code settings; rules the
+ * platform sets stay in force. Supported models list `settings` in
+ * `/v1/account/models`.
  */
 interface SettingsRef {
     path: string;
@@ -319,21 +372,30 @@ interface RepositoryRef {
 }
 /**
  * Native options supported by the current Codex adapter.
- *
- * Options and capabilities expand only when their runtime behavior is tested.
- * Unknown options are rejected instead of silently ignored.
  */
 interface CodexConfig {
     /**
      * Reasoning effort for every turn. Omit to use the model default.
      */
     effort: CodexEffortLevel | null;
+    /**
+     * The model the session runs on: a Responses-capable id from the models table. Required.
+     */
     model: string;
     /**
      * The initial user message, passed verbatim. Omit to start an interactive session with no turn, waiting for a message.
      */
     prompt: string | null;
 }
+/**
+ * Conversation settings for a session, set on a saved agent or sent when starting a session or running an agent.
+ */
+interface SessionConversationConfig {
+    /**
+     * Whether the session stays open after its first turn. Defaults to true; false runs once and requires a prompt. Requires the model's interactive capability when true. Direct message acceptance is reported separately in conversation.prompting.
+     */
+    interactive: boolean;
+}
 /**
  * Everything about the environment the agent runs in: which
  * `repositories` are cloned into it, which environment `variables` it gets,
@@ -454,13 +516,12 @@ interface EnvironmentBaseBuild {
     run: string;
 }
 /**
- * One built-in MCP server this agent opts into by name (`linear`/`slack`).
+ * One built-in MCP server this agent attaches by name (`linear`/`slack`).
  * A name reference over the connected built-in set — the platform manages the
- * server's transport and credentials. It only matters when the named
- * integration is set to `opt_in` inclusion; an integration in the default
- * `all_sessions` mode is added regardless. For a server the platform does not
- * provide, define it instead (`McpStdioServer` /
- * `McpRemoteServer`).
+ * server's transport and credentials. A session gets a built-in server only
+ * when its config names it here or the session started from that server's
+ * own surface. For a server the platform does not provide, define it instead
+ * (`McpStdioServer` / `McpRemoteServer`).
  */
 interface McpServerRef {
     name: string;
@@ -524,7 +585,7 @@ interface OutputConfig {
  * where the agent runs; this is what it may do from there.
  *
  * `ellipsis` scopes the session's Ellipsis API token (`ELLIPSIS_API_TOKEN`,
- * what the `agent` CLI running inside the session authenticates with).
+ * what the `ellipsis` CLI running inside the session authenticates with).
  * `true` / the string `all` (the default) grant the full session token
  * ceiling — everything a session token can ever do. A map narrows it per
  * resource (see `EllipsisPermissions`); the minted token carries
@@ -550,8 +611,8 @@ interface EllipsisPermissions {
 }
 /**
  * One grant entry: a level, optionally narrowed to instances whose
- * natural key (a file's name, a memory's path, a secret's name, a config's
- * name, a session's id) matches any of the `match` globs.
+ * natural key (a file's name, a secret's name, a config's name, a session's
+ * id) matches any of the `match` globs.
  */
 interface EllipsisGrant {
     level: Level;
@@ -559,13 +620,13 @@ interface EllipsisGrant {
 }
 /**
  * The agent's GitHub access: the scope of the installation token minted for
- * its session's environment — the credential `git`, `gh`, and the GitHub MCP
- * server authenticate with.
+ * its session's environment — the credential `git` and `gh` authenticate
+ * with.
  *
  * By default the token carries the installation's full permissions on all of
  * the installation's repositories. `permissions` narrows what it may do:
- * the string `read_only` grants read access to contents, issues, metadata and
- * pull requests; a map requests explicit levels per GitHub App permission
+ * the string `read_only` grants read access to every scope the installation
+ * granted; a map requests explicit levels per GitHub App permission
  * scope (e.g. `{contents: read, pull_requests: write}`) and may never exceed
  * what the installation granted. `repositories` scopes the token to exactly
  * the listed repos, by name (they must belong to the installation).
@@ -589,36 +650,90 @@ interface SkillRef {
     path: string;
     repository: RepositoryRef | null;
 }
+/**
+ * A schedule: `schedule` is a five-field cron expression in UTC.
+ *
+ * `enabled: false` pauses the trigger and keeps its definition: the schedule
+ * stops firing while the agent stays live for on-demand starts and open
+ * sessions keep taking follow-ups (`ellipsis.enabled: false` pauses the
+ * whole file instead). Re-enabling resumes at the next scheduled time; runs
+ * missed while paused are not made up.
+ */
 interface CronTrigger {
+    enabled: boolean;
     schedule: string;
     type: 'cron';
 }
+/**
+ * An event trigger: exactly one surface block names the events to match.
+ *
+ * `enabled: false` pauses the trigger and keeps its definition: events stop
+ * matching while the agent stays live for on-demand starts and open
+ * sessions keep taking follow-ups (`ellipsis.enabled: false` pauses the
+ * whole file instead).
+ */
 interface ReactTrigger {
+    check_run: ReactCheckRun | null;
+    check_suite: ReactCheckSuite | null;
+    enabled: boolean;
     issue: ReactIssue | null;
     linear_issue: ReactLinearIssue | null;
     pull_request: ReactPullRequest | null;
     push: ReactPush | null;
+    release: ReactRelease | null;
     sentry: ReactSentry | null;
     slack_channel: ReactSlackChannel | null;
+    status: ReactStatus | null;
     type: 'react';
+    workflow_run: ReactWorkflowRun | null;
 }
-interface ReactIssue {
+/**
+ * A check run changing state on a commit. A check run is a GitHub Actions job or a check another CI app reports. `on` lists the states that fire. `names` matches check names exactly or by a prefix ending in `*`. `branch` is the branch the check ran on. `for` is the author of the commit the check ran on. Needs the Checks permission.
+ */
+interface ReactCheckRun {
+    branch: string[];
     for: GithubAccountSelector;
-    labels: string[];
-    on: IssueAction[];
+    names: string[];
+    on: CheckRunAction[];
     repositories: RepositoryFilter;
 }
 /**
  * A selector of GitHub accounts — the `for:` audience gate on react
- * surfaces and code review pipelines, classified on the stable entity author
- * (the pusher for `push`, the PR author for a review). `users` selects human
+ * surfaces, classified on the stable entity author (the pusher for `push`,
+ * the PR author for a pull request). `users` selects human
  * accounts, `bots` selects bot accounts; each is a `GithubAccountFilter`
  * (include minus exclude, with bare bool/list shorthand).
+ *
+ * `teams` narrows further to members of any of the listed GitHub teams of
+ * the installation's organization, by slug (`platform` for
+ * `@org/platform`). It applies on top of `users`: the author must pass the
+ * users filter AND belong to a listed team. A bot is never a team member,
+ * so a selector with `teams` never admits one. Membership is resolved live
+ * at match time (see `TriggerEventContext.is_author_team_member`), and the
+ * config sync refuses a team that does not exist when the file is
+ * accepted.
  */
 interface GithubAccountSelector {
     bots: GithubAccountFilter;
+    teams: string[];
     users: GithubAccountFilter;
 }
+/**
+ * Every check one CI app reported on a commit finishing. GitHub reports a check suite only when it finishes, so `on` takes only finished states. `apps` matches the reporting app slug, such as `github-actions`, exactly or by a prefix ending in `*`. `branch` and `for` work as on `check_run`. Needs the Checks permission.
+ */
+interface ReactCheckSuite {
+    apps: string[];
+    branch: string[];
+    for: GithubAccountSelector;
+    on: CheckSuiteAction[];
+    repositories: RepositoryFilter;
+}
+interface ReactIssue {
+    for: GithubAccountSelector;
+    labels: string[];
+    on: IssueAction[];
+    repositories: RepositoryFilter;
+}
 interface ReactLinearIssue {
     for: GithubAccountSelector;
     on: LinearIssueAction[];
@@ -639,12 +754,47 @@ interface ReactPush {
     paths: string[];
     repositories: RepositoryFilter;
 }
+/**
+ * A GitHub release being published — a release or prerelease published
+ * directly, or a draft published later. `tag` narrows to the release tags
+ * that match (exact, or a prefix ending in `*`, so `v*`); `prerelease`
+ * selects prereleases or full releases, like `draft` on pull requests. The
+ * `for:` audience is the release's author, which for a release cut by CI is
+ * a bot and needs `bots` to opt in.
+ */
+interface ReactRelease {
+    for: GithubAccountSelector;
+    on: ReleaseAction[];
+    prerelease: boolean | null;
+    repositories: RepositoryFilter;
+    tag: string[];
+}
 interface ReactSentry {
     on: SentryAction[];
     projects: string[];
 }
 interface ReactSlackChannel {
 }
+/**
+ * A commit status changing state, from CI that posts statuses instead of checks. `names` matches status contexts exactly or by a prefix ending in `*`. `branch` matches when any branch GitHub lists for the commit matches. `for` works as on `check_run`. Needs the Commit statuses permission.
+ */
+interface ReactStatus {
+    branch: string[];
+    for: GithubAccountSelector;
+    names: string[];
+    on: StatusAction[];
+    repositories: RepositoryFilter;
+}
+/**
+ * A GitHub Actions workflow run changing state. `names` matches workflow names exactly or by a prefix ending in `*`. `branch` is the branch the run is for. `for` works as on `check_run`. Needs the Actions permission.
+ */
+interface ReactWorkflowRun {
+    branch: string[];
+    for: GithubAccountSelector;
+    names: string[];
+    on: WorkflowRunAction[];
+    repositories: RepositoryFilter;
+}
 /**
  * When the session was archived and the GitHub user who archived it.
  */
@@ -669,6 +819,7 @@ interface GithubAccountSnippet {
     avatar_url: string;
     id: number;
     login: string;
+    name: string | null;
     type: GithubAccountType;
 }
 /**
@@ -713,9 +864,13 @@ interface SessionPrompting {
     surface_name: string | null;
 }
 /**
- * What the session has cost so far, in millicents, broken down by leg and carrying its own total.
+ * What the session has cost so far.
  */
-interface SessionCost {
+interface Cost {
+    /**
+     * What Ellipsis charged to credit, in millicents. It is everything except subscription tokens, and it is what the budget caps.
+     */
+    charged: number;
     /**
      * CPU spend in millicents.
      */
@@ -724,16 +879,69 @@ interface SessionCost {
      * Platform fee in millicents.
      */
     fee: number;
-    /**
-     * LLM spend in millicents.
-     */
-    llm: number;
+    llm: LlmCost;
     /**
      * Memory spend in millicents.
      */
     memory: number;
     /**
-     * The grand total in millicents: llm + cpu + memory + fee.
+     * Everything it cost, whoever paid, in millicents. It is the sum of llm.all.total, cpu, memory, and fee.
+     */
+    total: number;
+}
+/**
+ * LLM token cost, in total and by model, split by who paid.
+ */
+interface LlmCost {
+    all: LlmCostSplit;
+    /**
+     * Token cost for each model that used tokens.
+     */
+    by_model: ModelLlmCostSplit[];
+}
+/**
+ * Token cost across every model.
+ */
+interface LlmCostSplit {
+    /**
+     * Token cost paid by a Claude subscription, at Ellipsis rates, in millicents.
+     */
+    claude_subscription: number;
+    /**
+     * Token cost paid by a Codex subscription, at Ellipsis rates, in millicents.
+     */
+    codex_subscription: number;
+    /**
+     * Token cost charged to Ellipsis credit, in millicents.
+     */
+    platform: number;
+    /**
+     * All token cost, in millicents. It is the sum of platform, claude_subscription, and codex_subscription.
+     */
+    total: number;
+}
+/**
+ * What one model's tokens cost, in millicents, split by who paid.
+ */
+interface ModelLlmCostSplit {
+    /**
+     * Token cost paid by a Claude subscription, at Ellipsis rates, in millicents.
+     */
+    claude_subscription: number;
+    /**
+     * Token cost paid by a Codex subscription, at Ellipsis rates, in millicents.
+     */
+    codex_subscription: number;
+    /**
+     * The model that used these tokens.
+     */
+    model: string;
+    /**
+     * Token cost charged to Ellipsis credit, in millicents.
+     */
+    platform: number;
+    /**
+     * All token cost, in millicents. It is the sum of platform, claude_subscription, and codex_subscription.
      */
     total: number;
 }
@@ -848,8 +1056,67 @@ interface GithubPushEvent {
     type: 'github.push';
     url: string;
 }
+interface GithubCheckRunEvent {
+    action: CheckRunAction;
+    actor: SessionEventActor | null;
+    branch: string | null;
+    conclusion: string | null;
+    head_sha: string;
+    name: string;
+    pull_request_number: number | null;
+    repository: string;
+    type: 'github.check_run';
+    url: string;
+}
+interface GithubCheckSuiteEvent {
+    action: CheckSuiteAction;
+    actor: SessionEventActor | null;
+    app: string | null;
+    branch: string | null;
+    conclusion: string | null;
+    head_sha: string;
+    pull_request_number: number | null;
+    repository: string;
+    type: 'github.check_suite';
+    url: string;
+}
+interface GithubWorkflowRunEvent {
+    action: WorkflowRunAction;
+    actor: SessionEventActor | null;
+    branch: string | null;
+    conclusion: string | null;
+    head_sha: string;
+    name: string;
+    pull_request_number: number | null;
+    repository: string;
+    run_number: number;
+    type: 'github.workflow_run';
+    url: string;
+}
+interface GithubStatusEvent {
+    action: StatusAction;
+    actor: SessionEventActor | null;
+    branch: string | null;
+    context: string;
+    head_sha: string;
+    pull_request_number: number | null;
+    repository: string;
+    state: string;
+    type: 'github.status';
+    url: string;
+}
+interface GithubReleaseEvent {
+    action: ReleaseAction;
+    actor: SessionEventActor | null;
+    name: string | null;
+    prerelease: boolean;
+    repository: string;
+    tag: string;
+    type: 'github.release';
+    url: string;
+}
 interface LinearIssueEvent {
-    action: LinearIssueAction | 'commented';
+    action: LinearIssueAction | ('commented' | 'delegated');
     actor: SessionEventActor | null;
     identifier: string | null;
     number: number;
@@ -957,6 +1224,26 @@ interface SessionHandler {
      */
     sha: string;
 }
+/**
+ * Structured output on the wire: the contract and, when a turn has
+ * submitted one, the payload. `result` is None while the session runs and
+ * when no turn submitted anything; it is the agent's own JSON, in the
+ * shape of `json_schema`.
+ */
+interface SessionOutput {
+    /**
+     * JSON Schema the agent's result must satisfy.
+     */
+    json_schema: {
+        [k: string]: unknown;
+    };
+    /**
+     * The payload the agent submitted, or null until a turn submits one.
+     */
+    result: {
+        [k: string]: unknown;
+    } | null;
+}
 /**
  * The predecessor session this session continues.
  */
@@ -988,9 +1275,19 @@ interface SessionSummary {
     description: string;
 }
 /**
- * The tokens the session spent and the model they went to. `total` includes the prompt-cache lanes.
+ * The tokens the session has used so far.
  */
-interface SessionTokens {
+interface Tokens {
+    all: TokenCounts;
+    /**
+     * Token counts for each model that used tokens.
+     */
+    by_model: ModelTokenCounts[];
+}
+/**
+ * Token counts across every model.
+ */
+interface TokenCounts {
     /**
      * Tokens written to the prompt cache.
      */
@@ -1004,7 +1301,32 @@ interface SessionTokens {
      */
     input: number;
     /**
-     * The model the token counts are attributed to.
+     * Output tokens used.
+     */
+    output: number;
+    /**
+     * All tokens used, including prompt cache reads and writes. Token cost is priced on this.
+     */
+    total: number;
+}
+/**
+ * Token counts for one model.
+ */
+interface ModelTokenCounts {
+    /**
+     * Tokens written to the prompt cache.
+     */
+    cache_creation: number;
+    /**
+     * Tokens read from the prompt cache.
+     */
+    cache_read: number;
+    /**
+     * Input tokens used.
+     */
+    input: number;
+    /**
+     * The model that used these tokens.
      */
     model: string;
     /**
@@ -1012,7 +1334,7 @@ interface SessionTokens {
      */
     output: number;
     /**
-     * Total tokens consumed, INCLUDING the prompt-cache reads and writes — the same basis the token cost is priced on.
+     * All tokens used, including prompt cache reads and writes. Token cost is priced on this.
      */
     total: number;
 }
@@ -1023,7 +1345,7 @@ interface SessionTokens {
  * `cancelled`.
  */
 interface SessionTurn {
-    cost: SessionCost1;
+    cost: Cost1;
     /**
      * When the turn's message was received.
      */
@@ -1057,12 +1379,16 @@ interface SessionTurn {
      * When and by whom a stop was requested; null when none was.
      */
     stopped: SessionStopped | null;
-    tokens: SessionTokens1;
+    tokens: Tokens1;
 }
 /**
  * What the turn cost so far, in millicents, broken down by leg.
  */
-interface SessionCost1 {
+interface Cost1 {
+    /**
+     * What Ellipsis charged to credit, in millicents. It is everything except subscription tokens, and it is what the budget caps.
+     */
+    charged: number;
     /**
      * CPU spend in millicents.
      */
@@ -1071,16 +1397,13 @@ interface SessionCost1 {
      * Platform fee in millicents.
      */
     fee: number;
-    /**
-     * LLM spend in millicents.
-     */
-    llm: number;
+    llm: LlmCost;
     /**
      * Memory spend in millicents.
      */
     memory: number;
     /**
-     * The grand total in millicents: llm + cpu + memory + fee.
+     * Everything it cost, whoever paid, in millicents. It is the sum of llm.all.total, cpu, memory, and fee.
      */
     total: number;
 }
@@ -1100,31 +1423,12 @@ interface SessionStopped {
 /**
  * The tokens the turn spent and the model they went to.
  */
-interface SessionTokens1 {
+interface Tokens1 {
+    all: TokenCounts;
     /**
-     * Tokens written to the prompt cache.
+     * Token counts for each model that used tokens.
      */
-    cache_creation: number;
-    /**
-     * Tokens read from the prompt cache.
-     */
-    cache_read: number;
-    /**
-     * Input tokens used.
-     */
-    input: number;
-    /**
-     * The model the token counts are attributed to.
-     */
-    model: string;
-    /**
-     * Output tokens used.
-     */
-    output: number;
-    /**
-     * Total tokens consumed, INCLUDING the prompt-cache reads and writes — the same basis the token cost is priced on.
-     */
-    total: number;
+    by_model: ModelTokenCounts[];
 }
 interface AgentListStreamMessage {
     agents: Agent[];
@@ -1177,6 +1481,10 @@ interface Agent {
      * The open pull request that adds this agent's file. Non-null means the agent is not live yet: it starts running once the pull request merges and syncs.
      */
     pending_pull_request_url: string | null;
+    /**
+     * The agent's YAML: the file as written for agents defined in a repository, or the definition rendered as YAML for agents managed through the API. A failed sync keeps the last valid YAML.
+     */
+    raw_yaml: string;
     /**
      * The definition's content identity: the version fingerprint frozen onto each session that runs it.
      */
@@ -1411,7 +1719,7 @@ declare class EllipsisAccountApiKeys {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    revoke(api_key_id: string): Promise<S['TokenRevokedResponse']>;
+    revoke(id: string): Promise<S['TokenRevokedResponse']>;
 }
 declare class EllipsisAccountBillingAutoRecharge {
     private readonly transport;
@@ -1439,8 +1747,8 @@ declare class EllipsisAccountBillingAutoRecharge {
      * Requires a human account administrator; API keys and session tokens
      * cannot change this policy. Supply enabled explicitly. Saving amounts
      * with enabled=false keeps recharge off; enabling requires a saved card.
-     * A recharge buys amount_cents of credit and charges the platform fee
-     * in addition. Amounts and thresholds preserve exact cents.
+     * A recharge buys `amount` of credit and charges the platform fee in
+     * addition. Amounts and thresholds are millicents in whole cents.
      *
      * Required permissions: write:account.
      * API key: Requires a CLI user token belonging to an account administrator.
@@ -1449,9 +1757,9 @@ declare class EllipsisAccountBillingAutoRecharge {
      * Higher permission levels include lower levels: read < write < delete.
      */
     set(options: {
-        amount_cents: number;
+        amount: number;
         enabled: boolean;
-        threshold_cents: number;
+        threshold: number;
     }): Promise<S['AutoRechargeSettings']>;
 }
 declare class EllipsisAccountBilling {
@@ -1481,7 +1789,7 @@ declare class EllipsisAccountBilling {
      *
      * Requires a human account administrator. Open the returned URL to
      * complete payment. Credit is granted only after payment succeeds;
-     * the platform fee is charged in addition to amount_cents. Returning
+     * the platform fee is charged in addition to `amount`. Returning
      * to Billing carries the checkout session ID for receipt lookup.
      *
      * Required permissions: write:account.
@@ -1491,7 +1799,7 @@ declare class EllipsisAccountBilling {
      * Higher permission levels include lower levels: read < write < delete.
      */
     checkout(options: {
-        amount_cents: number;
+        amount: number;
     }): Promise<S['BillingCheckout']>;
     /**
      * Claim Signup Credit
@@ -1511,7 +1819,7 @@ declare class EllipsisAccountBilling {
     /**
      * Get Fee Schedule
      *
-     * Get the account's rate card, in US dollars.
+     * Get the account's rate card, in millicents.
      *
      * Required permissions: read:account.
      * API key: Supported.
@@ -1549,13 +1857,13 @@ declare class EllipsisAccountBilling {
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    purchase(checkout_id: string): Promise<S['CreditPurchaseReceipt']>;
+    purchase(id: string): Promise<S['CreditPurchaseReceipt']>;
     /**
      * Get Credit Purchase Options
      *
      * Get credit purchase bounds and the platform fee.
      *
-     * All amounts are integer US cents. The fee is added to the credit
+     * All amounts are in millicents. The fee is added to the credit
      * amount; it does not reduce the credit granted.
      *
      * Required permissions: read:account.
@@ -1571,7 +1879,7 @@ declare class EllipsisAccountBilling {
      * Explain whether your account can start sessions.
      *
      * Uses the same account gate as session admission, including credit,
-     * contact email, and personal Claude subscription eligibility. Scoped
+     * contact email, and personal subscription eligibility. Scoped
      * spend limits are reported separately by /v1/account/budget.
      *
      * Required permissions: read:account.
@@ -1591,13 +1899,11 @@ declare class EllipsisAccountModels {
      * List selectable agent models.
      *
      * Grouped by manufacturer and model family, newest versions first
-     * within each family, with the organization's default model
-     * flagged (`is_default_agent_model`: the `default_model` of
-     * `GET /v1/account/settings`).
+     * within each family.
      *
      * Reads the same registry as the dashboard's rate table, so a
      * client's model picker can never drift from what's offered. The
-     * selectable set is global; only the flag is account-scoped.
+     * selectable set is global.
      *
      * Required permissions: read:templates.
      * API key: Supported.
@@ -1662,62 +1968,12 @@ declare class EllipsisAccountOnboarding {
      * Higher permission levels include lower levels: read < write < delete.
      */
     update(options?: {
+        finished?: boolean;
         other_use_case?: string | null;
         use_cases?: (S['AccountOnboardingUseCase'])[];
         work_email?: string | null;
     }): Promise<S['AccountOnboardingResponse']>;
 }
-declare class EllipsisAccountProvidersAnthropic {
-    private readonly transport;
-    constructor(transport: Transport);
-    /**
-     * Delete Anthropic Config
-     *
-     * Required permissions: delete:account.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    delete(): Promise<void>;
-    /**
-     * Get Anthropic Config
-     *
-     * Required permissions: read:account.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    get(): Promise<S['AnthropicConfigResponse']>;
-    /**
-     * Put Anthropic Config
-     *
-     * Required permissions: write:account.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    set(options: {
-        api_key: string;
-    }): Promise<S['AnthropicConfigResponse']>;
-    /**
-     * Validate Anthropic Config
-     *
-     * Required permissions: write:account.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    validate(): Promise<S['ValidateAnthropicConfigResponse']>;
-}
-declare class EllipsisAccountProviders {
-    private readonly transport;
-    readonly anthropic: EllipsisAccountProvidersAnthropic;
-    constructor(transport: Transport);
-}
 declare class EllipsisAccountSettings {
     private readonly transport;
     constructor(transport: Transport);
@@ -1726,9 +1982,9 @@ declare class EllipsisAccountSettings {
      *
      * Get the organization settings.
      *
-     * Session model and budget defaults, code review and mention behavior,
-     * analytics, retention, and notification contacts. PATCH replaces
-     * supplied sections; PUT preserves its model-and-budget-only behavior.
+     * Session budget ceiling, mention behavior, analytics,
+     * retention, and notification contacts. PATCH replaces
+     * supplied sections; PUT sets the budget ceiling only.
      *
      * Required permissions: read:defaults.
      * API key: Supported.
@@ -1742,13 +1998,10 @@ declare class EllipsisAccountSettings {
      *
      * Set the organization settings.
      *
-     * Replaces both: `default_model` accepts an alias or canonical id
-     * and is stored canonical, and cannot be cleared (it is the only
-     * default a session's model resolves against);
-     * `budget_ceiling.session` is in US dollars, at most the platform
+     * `budget_ceiling.session` is in millicents, at most the platform
      * ceiling, and null clears it.
      * Refused for session tokens (potentially prompt-injected code must
-     * not repoint the organization's defaults).
+     * not raise the organization's ceiling).
      *
      * Required permissions: write:defaults.
      * API key: Requires a CLI user token belonging to an account administrator.
@@ -1756,29 +2009,26 @@ declare class EllipsisAccountSettings {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    set(options: {
+    set(options?: {
         budget_ceiling?: S['BudgetCeiling'];
-        default_model: string;
     }): Promise<S['OrganizationSettings']>;
     /**
      * Patch Account Settings
      *
      * Replace supplied settings sections without changing omitted sections.
      *
-     * Changes to model or budget defaults require a GitHub administrator.
+     * Changes to the budget ceiling require a GitHub administrator.
      *
      * Required permissions: write:defaults.
-     * API key: Cannot set budget_ceiling, default_model to a non-null value; those changes require a CLI user token belonging to an account administrator.
-     * CLI user token: Requires an account administrator when setting budget_ceiling, default_model to a non-null value.
+     * API key: Cannot set budget_ceiling to a non-null value; those changes require a CLI user token belonging to an account administrator.
+     * CLI user token: Requires an account administrator when setting budget_ceiling to a non-null value.
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
     update(options?: {
-        analytics?: S['AnalyticsSettings'] | null;
+        analytics?: S['AnalyticsSettings-Input'] | null;
         budget_ceiling?: S['BudgetCeiling'] | null;
-        code_review?: S['CodeReviewSettings'] | null;
-        data_retention?: S['DataRetentionSettings'] | null;
-        default_model?: string | null;
+        data_retention?: S['DataRetentionSettings-Input'] | null;
         notifications?: S['NotificationSettings'] | null;
     }): Promise<S['AccountSettings']>;
 }
@@ -1789,7 +2039,6 @@ declare class EllipsisAccount {
     readonly models: EllipsisAccountModels;
     readonly notifications: EllipsisAccountNotifications;
     readonly onboarding: EllipsisAccountOnboarding;
-    readonly providers: EllipsisAccountProviders;
     readonly settings: EllipsisAccountSettings;
     constructor(transport: Transport);
     /**
@@ -1873,13 +2122,13 @@ declare class EllipsisAccount {
     /**
      * Get Usage
      *
-     * Get usage for a calendar month, including its funding sources.
+     * Get usage for a calendar month, split by billing source.
      *
-     * Omit period_start for the current UTC month; select a period returned
-     * in billing_periods to view history. Credit debits are distinct from
-     * rated token usage through BYOK or a developer's Claude or Codex
-     * subscription. Rated usage estimates are not provider invoices.
-     * Pending and unresolved requests identify missing measurements.
+     * Omit period_start for the current UTC month. Pass a period from
+     * billing_periods to view history. Platform usage is charged to
+     * Ellipsis credit. Tokens paid by a developer's Claude or Codex
+     * subscription show their cost at Ellipsis rates and charge no
+     * credit. Pending and unresolved requests are missing measurements.
      *
      * Required permissions: read:account.
      * API key: Supported.
@@ -1899,7 +2148,7 @@ declare class EllipsisAgents {
      *
      * Create an agent, managed through the API: no file, live
      * immediately. To put its definition in a repository instead, create
-     * it here and then POST /v1/agents/{agent_id}/link.
+     * it here and then POST /v1/agents/{id}/link.
      *
      * 409 when another live agent already holds the name.
      *
@@ -1929,7 +2178,7 @@ declare class EllipsisAgents {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    delete(agent_id: string): Promise<void>;
+    delete(id: string): Promise<void>;
     /**
      * Get Agent
      *
@@ -1942,7 +2191,7 @@ declare class EllipsisAgents {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    get(agent_id: string): Promise<S['AgentResponse']>;
+    get(id: string): Promise<S['AgentResponse']>;
     /**
      * Link Agent
      *
@@ -1960,7 +2209,7 @@ declare class EllipsisAgents {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    link(agent_id: string, options: {
+    link(id: string, options: {
         path?: string | null;
         repository: string;
     }): Promise<S['LinkAgentResponse']>;
@@ -1995,21 +2244,23 @@ declare class EllipsisAgents {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    metrics(agent_id: string): Promise<S['AgentMetricsResponse']>;
+    metrics(id: string): Promise<S['AgentMetricsResponse']>;
     /**
      * Start Agent Session
      *
-     * Invoke an agent.
+     * Start an agent session.
      *
-     * Runs a certified agent with its configured instructions, model,
-     * environment, permissions, skills, and budget, and returns
-     * the session it started. The session runs once and does not accept
-     * follow-up messages. If the agent declares input.json_schema,
-     * send only `input` for its initial message. Otherwise send a non-empty
-     * `prompt`, which becomes the initial message verbatim. Both fields
-     * together, neither field, and input that renders an empty message are
-     * rejected with 422. An optional `budget` lowers the session cap;
-     * `metadata` tags the session. Codex invocations are not supported.
+     * Starts a session from the agent's saved `session` settings and
+     * returns it. The body takes the fields of POST /v1/sessions, all
+     * optional: each field you send replaces the agent's value for that
+     * field, and each field you leave out keeps it. `metadata` is merged
+     * into the agent's key by key, and a `null` value removes a key.
+     * Other lists and maps, and `environment`, are replaced whole;
+     * naming the other harness replaces the agent's. An empty body starts
+     * the agent as written. If the agent declares input.json_schema, send
+     * `input`; its rendered message is added after the prompt. A run-once
+     * session needs a prompt or `input` from the agent or the request, or
+     * the call is a 400.
      *
      * Required permissions: write:sessions.
      * API key: Supported.
@@ -2018,11 +2269,19 @@ declare class EllipsisAgents {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    run(agent_id: string, options?: {
-        budget?: number | null;
+    start(id: string, options?: {
+        budget?: S['RunBudget'] | null;
+        claude_code?: S['ClaudeOverrides'] | null;
+        codex?: S['CodexOverrides'] | null;
+        conversation?: S['SessionConversationConfig-Input'];
+        environment?: string | S['EnvironmentConfig-Input'] | null;
+        force_rebuild?: boolean;
+        images?: (S['ImageAttachment'])[];
         input?: Record<string, unknown> | null;
-        metadata?: Record<string, string>;
-        prompt?: string | null;
+        metadata?: Record<string, string | null>;
+        output?: S['OutputConfig'] | null;
+        permissions?: S['PermissionsConfig-Input'] | null;
+        skills?: (S['SkillRef-Input'])[] | null;
     }): Promise<S['SessionResponse']>;
     /**
      * Get Agents Stream Ticket
@@ -2051,7 +2310,7 @@ declare class EllipsisAgents {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    unlink(agent_id: string): Promise<S['AgentResponse']>;
+    unlink(id: string): Promise<S['AgentResponse']>;
     /**
      * Update Agent
      *
@@ -2069,7 +2328,7 @@ declare class EllipsisAgents {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    update(agent_id: string, options: {
+    update(id: string, options: {
         agent: S['AgentConfig-Input'];
     }): Promise<S['AgentResponse']>;
 }
@@ -2089,7 +2348,7 @@ declare class EllipsisAlerts {
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    dismiss(alert_id: string): Promise<S['AlertResponse']>;
+    dismiss(id: string): Promise<S['AlertResponse']>;
     /**
      * Get Alert
      *
@@ -2103,7 +2362,7 @@ declare class EllipsisAlerts {
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    get(alert_id: string): Promise<S['AlertResponse']>;
+    get(id: string): Promise<S['AlertResponse']>;
     /**
      * List Alerts
      *
@@ -2184,7 +2443,7 @@ declare class EllipsisAnalytics {
     /**
      * Get Analytics Reviews
      *
-     * Return code-review analytics.
+     * Return pull request review analytics.
      *
      * account_type scopes reviewers (bot|user|all) — e.g. "what apps
      * review the most PRs?" is the reviewer facets here with
@@ -2278,7 +2537,7 @@ declare class EllipsisEnvironments {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    delete(environment_id: string): Promise<void>;
+    delete(id: string): Promise<void>;
     /**
      * Get Environment
      *
@@ -2290,7 +2549,7 @@ declare class EllipsisEnvironments {
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    get(environment_id: string): Promise<S['EnvironmentResponse']>;
+    get(id: string): Promise<S['EnvironmentResponse']>;
     /**
      * List Environments
      *
@@ -2319,7 +2578,7 @@ declare class EllipsisEnvironments {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    update(environment_id: string, options: {
+    update(id: string, options: {
         environment: S['EnvironmentDocument-Input'];
     }): Promise<S['EnvironmentResponse']>;
 }
@@ -2373,7 +2632,7 @@ declare class EllipsisHandlers {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    metrics(handler_id: string, options?: {
+    metrics(id: string, options?: {
         start?: string | null;
         end?: string | null;
     }): Promise<S['HandlerMetricsResponse']>;
@@ -2459,7 +2718,6 @@ declare class EllipsisIntegrationsLinear {
      * Higher permission levels include lower levels: read < write < delete.
      */
     updateSettings(options: {
-        mcp_inclusion?: S['McpInclusionMode'] | null;
         teams: (S['LinearTeamUpdate'])[];
     }): Promise<S['AccountActionResponse']>;
 }
@@ -2475,7 +2733,7 @@ declare class EllipsisIntegrationsSentry {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    delete(integration_id: string): Promise<S['AccountActionResponse']>;
+    delete(id: string): Promise<S['AccountActionResponse']>;
     /**
      * List Sentry Organizations
      *
@@ -2538,18 +2796,6 @@ declare class EllipsisIntegrationsSlack {
      * Higher permission levels include lower levels: read < write < delete.
      */
     members(): Promise<S['SlackMembersListResponse']>;
-    /**
-     * Update Slack Settings
-     *
-     * Required permissions: write:integrations.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    updateSettings(options: {
-        mcp_inclusion: S['McpInclusionMode'];
-    }): Promise<S['AccountActionResponse']>;
 }
 declare class EllipsisIntegrations {
     private readonly transport;
@@ -2578,166 +2824,30 @@ declare class EllipsisIntegrations {
      */
     list(): Promise<S['GetIntegrationsResponse']>;
 }
-declare class EllipsisMemories {
+declare class EllipsisReviewsConfigs {
     private readonly transport;
     constructor(transport: Transport);
     /**
-     * Create Memory
-     *
-     * Save a memory for future agent sessions.
-     *
-     * Memories are durable lessons shared across the whole
-     * organization — conventions, past decisions, known gotchas that an
-     * agent cannot derive from the repository itself. One concise fact
-     * per memory; the description is what a reader sees in the index.
-     *
-     * Creating never overwrites: a path that already exists is a 409, so
-     * correcting an existing memory is an explicit edit.
-     *
-     * Required permissions: write:memories.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     * Grant match patterns can further restrict access to individual resources.
-     */
-    create(options: {
-        content: string;
-        description: string;
-        path: string;
-    }): Promise<S['MemoryResponse']>;
-    /**
-     * Delete Memory
-     *
-     * Delete a memory that is no longer true.
-     *
-     * Available to every credential type, agents included — a wrong
-     * memory is worse than a missing one. The deleted content is kept in
-     * the memory's history for forensics, not for an undo API.
-     *
-     * Required permissions: delete:memories.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     * Grant match patterns can further restrict access to individual resources.
-     */
-    delete(memory_id: string, options?: {
-        if_sha256?: string | null;
-    }): Promise<void>;
-    /**
-     * Edit Memory
-     *
-     * Correct an existing memory in place.
-     *
-     * Pass description, content, or both. This never creates a memory (an
-     * unknown id is a 404) and never moves one — the path is immutable, so
-     * relocating a memory is a delete plus a create.
-     *
-     * Pass `if_sha256` (from a previous read) to make a concurrent write
-     * a 409 instead of silently overwriting it.
-     *
-     * Required permissions: write:memories.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     * Grant match patterns can further restrict access to individual resources.
-     */
-    edit(memory_id: string, options?: {
-        content?: string | null;
-        description?: string | null;
-        if_sha256?: string | null;
-    }): Promise<S['MemoryResponse']>;
-    /**
-     * Get Memory
-     *
-     * Read one memory's full content.
-     *
-     * The id comes from the index returned by listing memories.
-     *
-     * Required permissions: read:memories.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     * Grant match patterns can further restrict access to individual resources.
-     */
-    get(memory_id: string): Promise<S['MemoryResponse']>;
-    /**
-     * List Memories
-     *
-     * List the organization's memories as a readable index.
+     * List Review Configs
      *
-     * Returns the memories rendered as a markdown index (one line per
-     * memory, carrying its id, path, and description) plus the same
-     * entries structured, each with every field except `content`. Read
-     * the index, then fetch the ids whose content you want.
+     * List code review configs: every kind: code_review file synced from a repository, newest first.
      *
-     * Required permissions: read:memories.
+     * Required permissions: read:reviews.
      * API key: Supported.
      * CLI user token: Supported.
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
      * Higher permission levels include lower levels: read < write < delete.
-     * Grant match patterns can further restrict access to individual resources.
      */
-    list(options?: {
-        prefix?: string | null;
-    }): Promise<S['MemoriesListResponse']>;
+    list(): Promise<S['ReviewConfigsListResponse']>;
 }
 declare class EllipsisReviews {
     private readonly transport;
+    readonly configs: EllipsisReviewsConfigs;
     constructor(transport: Transport);
-    /**
-     * List Review Configs
-     *
-     * Required permissions: read:reviews.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    configs(): Promise<S['GetCodeReviewConfigsResponse']>;
-    /**
-     * Create Review
-     *
-     * Run a code review on demand.
-     *
-     * Reviews an open pull request. Which pipeline runs is not a
-     * parameter: it resolves from the repository's files exactly as
-     * it does for a push, so an on-demand review never disagrees with
-     * the automatic one.
-     *
-     * A review is one pipeline run over one commit range, with one
-     * agent session per stage: `review.id` is the review id, and
-     * `stages[].session_id` is where a client streams
-     * (/sessions/{id}/stream on a stage session), since the review
-     * itself is a pipeline rather than one process.
-     *
-     * Required permissions: write:reviews.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    create(options: {
-        owner: string;
-        post?: boolean;
-        pull_request_number: number;
-        repo: string;
-        scope?: S['ReviewScope'];
-    }): Promise<S['Review']>;
     /**
      * Get Review
      *
-     * Return one review with findings and outcome.
-     *
-     * Includes its scope, the per-stage sessions, the parsed findings,
-     * the finding counters, and the posting outcome.
-     *
-     * Findings only exist after a stage session finalizes — a running
-     * review honestly reports [] / null, which is why a client
-     * streams a stage session and then re-fetches the review.
+     * Get a code review: its reviewers and every comment they returned, posted or held back.
      *
      * Required permissions: read:reviews.
      * API key: Supported.
@@ -2745,20 +2855,12 @@ declare class EllipsisReviews {
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    get(review_id: string): Promise<S['Review']>;
+    get(id: string): Promise<S['Review']>;
     /**
      * List Reviews
      *
      * List code reviews, newest first.
      *
-     * `findings` and `configuration` are omitted (counters only). Each
-     * filter is a set: repeat `repository`, `pull_request_number`, or
-     * `status` to match any of several values. `start` and `end` bound
-     * the review's creation time.
-     *
-     * Webhook-created reviews appear here too, so this answers "show
-     * me every review on this PR".
-     *
      * Required permissions: read:reviews.
      * API key: Supported.
      * CLI user token: Supported.
@@ -2766,14 +2868,14 @@ declare class EllipsisReviews {
      * Higher permission levels include lower levels: read < write < delete.
      */
     list(options?: {
-        repository?: (string)[];
-        pull_request_number?: (number)[];
-        status?: (S['CodeReviewRunStatus'])[];
+        repository?: (string)[] | null;
+        pull_request_number?: (number)[] | null;
+        status?: (S['CodeReviewStatus'])[] | null;
         start?: string | null;
         end?: string | null;
         limit?: number;
         cursor?: string | null;
-    }): Promise<Page<S['Review'], S['ReviewsListResponse']>>;
+    }): Promise<Page<S['ReviewSummary'], S['ReviewsListResponse']>>;
 }
 declare class EllipsisSecrets {
     private readonly transport;
@@ -2849,7 +2951,7 @@ declare class EllipsisSessionsTurns {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    get(session_id: string, turn_id: string): Promise<S['SessionTurnResponse']>;
+    get(session_id: string, id: string): Promise<S['SessionTurnResponse']>;
     /**
      * Get Session Turns
      *
@@ -2866,7 +2968,7 @@ declare class EllipsisSessionsTurns {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    list(session_id: string): Promise<S['SessionTurnsListResponse']>;
+    list(id: string): Promise<S['SessionTurnsListResponse']>;
 }
 declare class EllipsisSessions {
     private readonly transport;
@@ -2892,7 +2994,7 @@ declare class EllipsisSessions {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    analytics(session_id: string): Promise<S['SessionAnalytics']>;
+    analytics(id: string): Promise<S['SessionAnalytics']>;
     /**
      * Get Session Diff
      *
@@ -2911,7 +3013,7 @@ declare class EllipsisSessions {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    diff(session_id: string): Promise<S['SessionDiffResponse']>;
+    diff(id: string): Promise<S['SessionDiffResponse']>;
     /**
      * Download Session
      *
@@ -2933,7 +3035,7 @@ declare class EllipsisSessions {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    download(session_id: string): Promise<S['GetSessionLogResponse']>;
+    download(id: string): Promise<S['GetSessionLogResponse']>;
     /**
      * Get Session
      *
@@ -2953,7 +3055,7 @@ declare class EllipsisSessions {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    get(session_id: string): Promise<S['SessionResponse']>;
+    get(id: string): Promise<S['SessionResponse']>;
     /**
      * Get Session Git
      *
@@ -2969,7 +3071,7 @@ declare class EllipsisSessions {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    git(session_id: string): Promise<S['SessionGitResponse']>;
+    git(id: string): Promise<S['SessionGitResponse']>;
     /**
      * Ingest Session Transcript
      *
@@ -2988,7 +3090,7 @@ declare class EllipsisSessions {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    ingestTranscript(session_id: string, options: {
+    ingestTranscript(id: string, options: {
         lines: (string)[];
         offset?: number;
     }): Promise<S['TranscriptIngestResult']>;
@@ -3021,27 +3123,23 @@ declare class EllipsisSessions {
         author_id?: number | null;
         repo?: string | null;
         unfinished?: boolean;
-        exclude_code_review?: boolean;
     }): Promise<Page<S['Session'], S['SessionsListResponse']>>;
     /**
-     * Get Session Output
+     * Get Session Metrics
      *
-     * Return the session's typed output.
+     * List the CPU, memory, swap, and disk readings of every VM the
+     * session ran on, oldest first.
      *
-     * The payload the agent submitted through its config-declared
-     * output.json_schema, as the raw JSON body with no envelope. 404
-     * while the session is still running (poll GET /v1/sessions/{id}),
-     * when the agent declares no output block, or when no turn
-     * produced output.
+     * A reading is taken every 5 seconds while the session runs.
      *
      * Required permissions: read:sessions.
      * API key: Supported.
      * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
+     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration. Only the token's own session.
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    output(session_id: string): Promise<Record<string, unknown>>;
+    metrics(id: string): Promise<S['VMMetricsResponse']>;
     /**
      * Get Session Records
      *
@@ -3060,7 +3158,7 @@ declare class EllipsisSessions {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    records(session_id: string, options?: {
+    records(id: string, options?: {
         cursor?: string | null;
         limit?: number | null;
     }): Promise<Page<S['SessionRecord'], S['SessionRecordsListResponse']>>;
@@ -3094,7 +3192,7 @@ declare class EllipsisSessions {
      *
      * Send a message to a session.
      *
-     * 409 for react/cron, non-interactive, closed, and out-of-budget
+     * 409 for mention, non-interactive, closed, and out-of-budget
      * sessions. Returns the created message and its turn; a retried send
      * with the same idempotency_key returns the original ones.
      *
@@ -3105,7 +3203,7 @@ declare class EllipsisSessions {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    sendMessage(session_id: string, options: {
+    sendMessage(id: string, options: {
         idempotency_key?: string | null;
         images?: (S['ImageAttachment'])[];
         message: string;
@@ -3120,7 +3218,7 @@ declare class EllipsisSessions {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    sessionStreamTicket(session_id: string): Promise<S['StreamTicketResponse']>;
+    sessionStreamTicket(id: string): Promise<S['StreamTicketResponse']>;
     /**
      * Start Session
      *
@@ -3135,9 +3233,9 @@ declare class EllipsisSessions {
      * Set exactly one of `claude_code` or `codex`. Its `prompt` is the
      * first message; omit the prompt and the session starts with no
      * turn, waiting for one. 400 when `conversation.interactive` is false
-     * and there is no prompt, or when `budget` exceeds the organization's
-     * per-session ceiling. To run a saved agent, use
-     * POST /v1/agents/{agent_id}/sessions.
+     * and there is no prompt, or when `budget.session` exceeds the
+     * organization's per-session ceiling. To start a session from a saved
+     * agent, use POST /v1/agents/{id}/sessions.
      *
      * Required permissions: write:sessions.
      * API key: Supported.
@@ -3147,17 +3245,16 @@ declare class EllipsisSessions {
      * Grant match patterns can further restrict access to individual resources.
      */
     start(options?: {
-        budget?: number | null;
+        budget?: S['RunBudget'] | null;
         claude_code?: S['ClaudeConfig-Input'] | null;
         codex?: S['CodexConfig-Input'] | null;
-        conversation?: S['SessionConversationConfig'];
+        conversation?: S['SessionConversationConfig-Input'];
         environment?: string | S['EnvironmentConfig-Input'] | null;
         force_rebuild?: boolean;
         images?: (S['ImageAttachment'])[];
         metadata?: Record<string, string>;
         output?: S['OutputConfig'] | null;
         permissions?: S['PermissionsConfig-Input'] | null;
-        repositories?: (string)[] | null;
         skills?: (S['SkillRef-Input'])[] | null;
     }): Promise<S['SessionResponse']>;
     /**
@@ -3176,7 +3273,7 @@ declare class EllipsisSessions {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    stop(session_id: string): Promise<S['SessionResponse']>;
+    stop(id: string): Promise<S['SessionResponse']>;
     /**
      * Get Sessions Stream Ticket
      *
@@ -3208,7 +3305,7 @@ declare class EllipsisSessions {
      * Higher permission levels include lower levels: read < write < delete.
      * Grant match patterns can further restrict access to individual resources.
      */
-    update(session_id: string, options: {
+    update(id: string, options: {
         archived: boolean;
     }): Promise<S['SessionResponse']>;
     /** Start a session and return a handle over it. */
@@ -3275,7 +3372,7 @@ declare class EllipsisTemplates {
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    get(template_id: string): Promise<S['AgentTemplate']>;
+    get(id: string): Promise<S['AgentTemplate']>;
     /**
      * List Agent Templates
      *
@@ -3421,7 +3518,7 @@ declare class EllipsisUserTokens {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    revoke(token_id: string): Promise<S['TokenRevokedResponse']>;
+    revoke(id: string): Promise<S['TokenRevokedResponse']>;
 }
 declare class EllipsisUser {
     private readonly transport;
@@ -3441,7 +3538,7 @@ declare class EllipsisVmExecutions {
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration. Only the token's own sandbox.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    get(vm_execution_id: string): Promise<S['VMExecutionResponse']>;
+    get(id: string): Promise<S['VMExecutionResponse']>;
     /**
      * Get Vm Executions
      *
@@ -3461,7 +3558,7 @@ declare class EllipsisVmExecutions {
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration. Only the token's own sandbox.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    streamTicket(vm_execution_id: string): Promise<S['StreamTicketResponse']>;
+    streamTicket(id: string): Promise<S['StreamTicketResponse']>;
 }
 declare class EllipsisVmImages {
     private readonly transport;
@@ -3477,7 +3574,7 @@ declare class EllipsisVmImages {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    get(image_id: string): Promise<S['VMImageResponse']>;
+    get(id: string): Promise<S['VMImageResponse']>;
     /**
      * List Vm Images
      *
@@ -3510,7 +3607,7 @@ declare class EllipsisVms {
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration. Only the token's own VM.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    get(vm_id: string): Promise<S['VM']>;
+    get(id: string): Promise<S['VM']>;
     /**
      * List Vms
      *
@@ -3528,6 +3625,23 @@ declare class EllipsisVms {
         limit?: number;
         offset?: number;
     }): Promise<S['VMListResponse']>;
+    /**
+     * List Vm Metrics
+     *
+     * List a VM's CPU, memory, swap, and disk readings, oldest first.
+     *
+     * A reading is taken every 5 seconds while a session runs on the VM.
+     *
+     * Required permissions: read:environments.
+     * API key: Supported.
+     * CLI user token: Supported.
+     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration. Only the token's own VM.
+     * Higher permission levels include lower levels: read < write < delete.
+     */
+    metrics(id: string, options?: {
+        start?: string | null;
+        end?: string | null;
+    }): Promise<S['VMMetricsResponse']>;
 }
 declare class EllipsisWebhooksDeliveries {
     private readonly transport;
@@ -3546,7 +3660,7 @@ declare class EllipsisWebhooksDeliveries {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    get(delivery_id: string): Promise<S['WebhookDeliveryResponse']>;
+    get(id: string): Promise<S['WebhookDeliveryResponse']>;
     /**
      * List Webhook Deliveries
      *
@@ -3610,7 +3724,7 @@ declare class EllipsisWebhooks {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    delete(webhook_id: string): Promise<void>;
+    delete(id: string): Promise<void>;
     /**
      * Get Webhook
      *
@@ -3622,7 +3736,7 @@ declare class EllipsisWebhooks {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    get(webhook_id: string): Promise<S['WebhookResponse']>;
+    get(id: string): Promise<S['WebhookResponse']>;
     /**
      * List Webhooks
      *
@@ -3651,7 +3765,7 @@ declare class EllipsisWebhooks {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    ping(webhook_id: string): Promise<void>;
+    ping(id: string): Promise<void>;
     /**
      * Update Webhook
      *
@@ -3667,7 +3781,7 @@ declare class EllipsisWebhooks {
      * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
      * Higher permission levels include lower levels: read < write < delete.
      */
-    update(webhook_id: string, options: {
+    update(id: string, options: {
         description?: string | null;
         events: ("session.create")[];
         url: string;
@@ -3683,7 +3797,6 @@ declare class Ellipsis {
     readonly environments: EllipsisEnvironments;
     readonly handlers: EllipsisHandlers;
     readonly integrations: EllipsisIntegrations;
-    readonly memories: EllipsisMemories;
     readonly reviews: EllipsisReviews;
     readonly secrets: EllipsisSecrets;
     readonly sessions: EllipsisSessions;
@@ -3700,10 +3813,12 @@ declare class Ellipsis {
      *
      * Return the identity behind the caller's credential.
      *
-     * Required permissions: read:account.
+     * Any valid credential may call this; no permission grant is needed.
+     *
+     * Required permissions: none; any valid credential.
      * API key: Supported.
      * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
+     * Session token: Requires the ellipsis:api scope; no permissions.ellipsis grant is needed.
      * Higher permission levels include lower levels: read < write < delete.
      */
     identity(): Promise<S['Identity']>;