@ellipsis-dev/sdk 0.31.0 → 0.33.0

package/schema/collection_frames.schema.json

@@ -126,6 +126,11 @@
           "description": "The open pull request that adds this agent's file. Non-null means the agent is not live yet: it starts running once the pull request merges and syncs.",
           "title": "Pending Pull Request Url"
         },
+        "raw_yaml": {
+          "description": "The agent's YAML: the file as written for agents defined in a repository, or the definition rendered as YAML for agents managed through the API. A failed sync keeps the last valid YAML.",
+          "title": "Raw Yaml",
+          "type": "string"
+        },
         "sha": {
           "description": "The definition's content identity: the version fingerprint frozen onto each session that runs it.",
           "title": "Sha",
@@ -163,6 +168,7 @@
         "managed_by",
         "name",
         "pending_pull_request_url",
+        "raw_yaml",
         "sha",
         "source_details",
         "updated_at"
@@ -229,7 +235,7 @@
     },
     "AgentIdentity": {
       "additionalProperties": false,
-      "description": "The Ellipsis product namespace for a config file: which schema this is\n(`version`), the human-facing identity (`name`/`description`), freeform\norganizational `metadata`, and whether the agent is `enabled`. The\npresence of a top-level `ellipsis:` mapping is what marks a YAML file as\nan Ellipsis agent (vs arbitrary YAML that merely lives under a\nconfig directory) \u2014 see `yaml_is_ellipsis_config`.\n\n`enabled` is agent behavior, not freeform metadata, so it stays inside\nthe config `sha` (only `metadata` is sha-excluded). Whether a session\naccepts messages is a per-run choice (POST /v1/sessions `interactive`),\nnot a config one.",
+      "description": "The Ellipsis product namespace for a config file: which schema this is\n(`version`), the human-facing identity (`name`/`description`), freeform\norganizational `metadata`, and whether the agent is `enabled`. The\npresence of a top-level `ellipsis:` mapping is what marks a YAML file as\nan Ellipsis agent (vs arbitrary YAML that merely lives under a\nconfig directory) \u2014 see `yaml_is_ellipsis_config`.\n\n`enabled` is agent behavior, not freeform metadata, so it stays inside\nthe config `sha` (only `metadata` is sha-excluded).",
       "properties": {
         "description": {
           "anyOf": [
@@ -324,6 +330,7 @@
     },
     "BudgetConfig": {
       "additionalProperties": false,
+      "description": "A saved agent's spend limits: the per-session cap plus its total spend\nover the trailing 1, 7, and 28 days.",
       "properties": {
         "day": {
           "anyOf": [
@@ -335,6 +342,7 @@
             }
           ],
           "default": null,
+          "description": "The most the agent may spend over the last day, in US dollars.",
           "title": "Day"
         },
         "month": {
@@ -347,6 +355,7 @@
             }
           ],
           "default": null,
+          "description": "The most the agent may spend over the last 28 days, in US dollars.",
           "title": "Month"
         },
         "session": {
@@ -360,6 +369,7 @@
             }
           ],
           "default": null,
+          "description": "The most one session may spend, in US dollars.",
           "title": "Session"
         },
         "week": {
@@ -372,6 +382,7 @@
             }
           ],
           "default": null,
+          "description": "The most the agent may spend over the last 7 days, in US dollars.",
           "title": "Week"
         }
       },
@@ -384,6 +395,42 @@
       "title": "BudgetConfig",
       "type": "object"
     },
+    "CheckRunAction": {
+      "description": "The state of a check run when GitHub reports it. A run created before it finishes fires its status, and `in_progress` is `started`. A finished run fires its conclusion, `success` is `passed` and `failure` is `failed`. Every other value is the GitHub word.",
+      "enum": [
+        "requested",
+        "queued",
+        "waiting",
+        "pending",
+        "started",
+        "passed",
+        "failed",
+        "timed_out",
+        "cancelled",
+        "skipped",
+        "neutral",
+        "action_required",
+        "stale"
+      ],
+      "title": "CheckRunAction",
+      "type": "string"
+    },
+    "CheckSuiteAction": {
+      "description": "The conclusion of a finished check suite. `success` is `passed` and `failure` is `failed`. Every other value is the GitHub word.",
+      "enum": [
+        "passed",
+        "failed",
+        "timed_out",
+        "cancelled",
+        "skipped",
+        "neutral",
+        "action_required",
+        "stale",
+        "startup_failure"
+      ],
+      "title": "CheckSuiteAction",
+      "type": "string"
+    },
     "ClaudeConfig": {
       "additionalProperties": false,
       "description": "Native Claude Code options for an explicitly selected harness.",
@@ -425,16 +472,9 @@
           "title": "Max Turns"
         },
         "model": {
-          "anyOf": [
-            {
-              "type": "string"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "default": null,
-          "title": "Model"
+          "description": "The model the session runs on: an alias or canonical id from the models table. Required.",
+          "title": "Model",
+          "type": "string"
         },
         "prompt": {
           "anyOf": [
@@ -474,7 +514,7 @@
     },
     "CodexConfig": {
       "additionalProperties": false,
-      "description": "Native options supported by the current Codex adapter.\n\nOptions and capabilities expand only when their runtime behavior is tested.\nUnknown options are rejected instead of silently ignored.",
+      "description": "Native options supported by the current Codex adapter.",
       "properties": {
         "effort": {
           "anyOf": [
@@ -489,7 +529,7 @@
           "description": "Reasoning effort for every turn. Omit to use the model default."
         },
         "model": {
-          "default": "gpt-6-sol",
+          "description": "The model the session runs on: a Responses-capable id from the models table. Required.",
           "title": "Model",
           "type": "string"
         },
@@ -635,9 +675,64 @@
       "title": "ConfigMetadata",
       "type": "object"
     },
+    "Cost": {
+      "description": "What something cost, in millicents.",
+      "properties": {
+        "charged": {
+          "default": 0,
+          "description": "What Ellipsis charged to credit, in millicents. It is everything except subscription tokens, and it is what the budget caps.",
+          "title": "Charged",
+          "type": "integer"
+        },
+        "cpu": {
+          "default": 0,
+          "description": "CPU spend in millicents.",
+          "title": "Cpu",
+          "type": "integer"
+        },
+        "fee": {
+          "default": 0,
+          "description": "Platform fee in millicents.",
+          "title": "Fee",
+          "type": "integer"
+        },
+        "llm": {
+          "$ref": "#/$defs/LlmCost",
+          "description": "LLM token cost, in total and by model, split by who paid."
+        },
+        "memory": {
+          "default": 0,
+          "description": "Memory spend in millicents.",
+          "title": "Memory",
+          "type": "integer"
+        },
+        "total": {
+          "default": 0,
+          "description": "Everything it cost, whoever paid, in millicents. It is the sum of llm.all.total, cpu, memory, and fee.",
+          "title": "Total",
+          "type": "integer"
+        }
+      },
+      "required": [
+        "charged",
+        "cpu",
+        "fee",
+        "llm",
+        "memory",
+        "total"
+      ],
+      "title": "Cost",
+      "type": "object"
+    },
     "CronTrigger": {
       "additionalProperties": false,
+      "description": "A schedule: `schedule` is a five-field cron expression in UTC.\n\n`enabled: false` pauses the trigger and keeps its definition: the schedule\nstops firing while the agent stays live for on-demand starts and open\nsessions keep taking follow-ups (`ellipsis.enabled: false` pauses the\nwhole file instead). Re-enabling resumes at the next scheduled time; runs\nmissed while paused are not made up.",
       "properties": {
+        "enabled": {
+          "default": true,
+          "title": "Enabled",
+          "type": "boolean"
+        },
         "schedule": {
           "title": "Schedule",
           "type": "string"
@@ -650,6 +745,7 @@
         }
       },
       "required": [
+        "enabled",
         "schedule",
         "type"
       ],
@@ -721,7 +817,7 @@
     },
     "EllipsisGrant": {
       "additionalProperties": false,
-      "description": "One grant entry: a level, optionally narrowed to instances whose\nnatural key (a file's name, a memory's path, a secret's name, a config's\nname, a session's id) matches any of the `match` globs.",
+      "description": "One grant entry: a level, optionally narrowed to instances whose\nnatural key (a file's name, a secret's name, a config's name, a session's\nid) matches any of the `match` globs.",
       "properties": {
         "level": {
           "$ref": "#/$defs/Level"
@@ -1080,17 +1176,26 @@
     },
     "GithubAccountSelector": {
       "additionalProperties": false,
-      "description": "A selector of GitHub accounts \u2014 the `for:` audience gate on react\nsurfaces and code review pipelines, classified on the stable entity author\n(the pusher for `push`, the PR author for a review). `users` selects human\naccounts, `bots` selects bot accounts; each is a `GithubAccountFilter`\n(include minus exclude, with bare bool/list shorthand).",
+      "description": "A selector of GitHub accounts \u2014 the `for:` audience gate on react\nsurfaces, classified on the stable entity author (the pusher for `push`,\nthe PR author for a pull request). `users` selects human\naccounts, `bots` selects bot accounts; each is a `GithubAccountFilter`\n(include minus exclude, with bare bool/list shorthand).\n\n`teams` narrows further to members of any of the listed GitHub teams of\nthe installation's organization, by slug (`platform` for\n`@org/platform`). It applies on top of `users`: the author must pass the\nusers filter AND belong to a listed team. A bot is never a team member,\nso a selector with `teams` never admits one. Membership is resolved live\nat match time (see `TriggerEventContext.is_author_team_member`), and the\nconfig sync refuses a team that does not exist when the file is\naccepted.",
       "properties": {
         "bots": {
           "$ref": "#/$defs/GithubAccountFilter"
         },
+        "teams": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Teams",
+          "type": "array"
+        },
         "users": {
           "$ref": "#/$defs/GithubAccountFilter"
         }
       },
       "required": [
         "bots",
+        "teams",
         "users"
       ],
       "title": "GithubAccountSelector",
@@ -1111,6 +1216,18 @@
           "title": "Login",
           "type": "string"
         },
+        "name": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Name"
+        },
         "type": {
           "$ref": "#/$defs/GithubAccountType"
         }
@@ -1119,6 +1236,7 @@
         "avatar_url",
         "id",
         "login",
+        "name",
         "type"
       ],
       "title": "GithubAccountSnippet",
@@ -1134,6 +1252,194 @@
       "title": "GithubAccountType",
       "type": "string"
     },
+    "GithubCheckRunEvent": {
+      "properties": {
+        "action": {
+          "$ref": "#/$defs/CheckRunAction"
+        },
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "branch": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Branch"
+        },
+        "conclusion": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Conclusion"
+        },
+        "head_sha": {
+          "title": "Head Sha",
+          "type": "string"
+        },
+        "name": {
+          "title": "Name",
+          "type": "string"
+        },
+        "pull_request_number": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Pull Request Number"
+        },
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.check_run",
+          "default": "github.check_run",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "branch",
+        "conclusion",
+        "head_sha",
+        "name",
+        "pull_request_number",
+        "repository",
+        "type",
+        "url"
+      ],
+      "title": "GithubCheckRunEvent",
+      "type": "object"
+    },
+    "GithubCheckSuiteEvent": {
+      "properties": {
+        "action": {
+          "$ref": "#/$defs/CheckSuiteAction"
+        },
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "app": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "App"
+        },
+        "branch": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Branch"
+        },
+        "conclusion": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Conclusion"
+        },
+        "head_sha": {
+          "title": "Head Sha",
+          "type": "string"
+        },
+        "pull_request_number": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Pull Request Number"
+        },
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.check_suite",
+          "default": "github.check_suite",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "app",
+        "branch",
+        "conclusion",
+        "head_sha",
+        "pull_request_number",
+        "repository",
+        "type",
+        "url"
+      ],
+      "title": "GithubCheckSuiteEvent",
+      "type": "object"
+    },
     "GithubIssueEvent": {
       "properties": {
         "action": {
@@ -1187,7 +1493,7 @@
     },
     "GithubPermissions": {
       "additionalProperties": false,
-      "description": "The agent's GitHub access: the scope of the installation token minted for\nits session's environment \u2014 the credential `git`, `gh`, and the GitHub MCP\nserver authenticate with.\n\nBy default the token carries the installation's full permissions on all of\nthe installation's repositories. `permissions` narrows what it may do:\nthe string `read_only` grants read access to contents, issues, metadata and\npull requests; a map requests explicit levels per GitHub App permission\nscope (e.g. `{contents: read, pull_requests: write}`) and may never exceed\nwhat the installation granted. `repositories` scopes the token to exactly\nthe listed repos, by name (they must belong to the installation).\n\nRestriction is enforced by GitHub, not by Ellipsis: the token itself is\nminted with the reduced scope, so nothing running in the environment can\nexceed it.",
+      "description": "The agent's GitHub access: the scope of the installation token minted for\nits session's environment \u2014 the credential `git` and `gh` authenticate\nwith.\n\nBy default the token carries the installation's full permissions on all of\nthe installation's repositories. `permissions` narrows what it may do:\nthe string `read_only` grants read access to every scope the installation\ngranted; a map requests explicit levels per GitHub App permission\nscope (e.g. `{contents: read, pull_requests: write}`) and may never exceed\nwhat the installation granted. `repositories` scopes the token to exactly\nthe listed repos, by name (they must belong to the installation).\n\nRestriction is enforced by GitHub, not by Ellipsis: the token itself is\nminted with the reduced scope, so nothing running in the environment can\nexceed it.",
       "properties": {
         "permissions": {
           "anyOf": [
@@ -1348,20 +1654,84 @@
       "title": "GithubPushEvent",
       "type": "object"
     },
-    "GithubSourceDetails": {
-      "description": "Identifies the file a GitHub-sourced agent is synced from.\n\nIdentified by the repository ID (not owner/name) so repository and org renames\ndon't orphan the config; resolve display names from gh_repositories at\nread time.",
+    "GithubReleaseEvent": {
       "properties": {
-        "branch": {
-          "title": "Branch",
-          "type": "string"
-        },
-        "path": {
-          "title": "Path",
-          "type": "string"
+        "action": {
+          "$ref": "#/$defs/ReleaseAction"
         },
-        "repo_id": {
-          "title": "Repo Id",
-          "type": "integer"
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "name": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Name"
+        },
+        "prerelease": {
+          "title": "Prerelease",
+          "type": "boolean"
+        },
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "tag": {
+          "title": "Tag",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.release",
+          "default": "github.release",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "name",
+        "prerelease",
+        "repository",
+        "tag",
+        "type",
+        "url"
+      ],
+      "title": "GithubReleaseEvent",
+      "type": "object"
+    },
+    "GithubSourceDetails": {
+      "description": "Identifies the file a GitHub-sourced agent is synced from.\n\nIdentified by the repository ID (not owner/name) so repository and org renames\ndon't orphan the config; resolve display names from gh_repositories at\nread time.",
+      "properties": {
+        "branch": {
+          "title": "Branch",
+          "type": "string"
+        },
+        "path": {
+          "title": "Path",
+          "type": "string"
+        },
+        "repo_id": {
+          "title": "Repo Id",
+          "type": "integer"
         }
       },
       "required": [
@@ -1372,6 +1742,183 @@
       "title": "GithubSourceDetails",
       "type": "object"
     },
+    "GithubStatusEvent": {
+      "properties": {
+        "action": {
+          "$ref": "#/$defs/StatusAction"
+        },
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "branch": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Branch"
+        },
+        "context": {
+          "title": "Context",
+          "type": "string"
+        },
+        "head_sha": {
+          "title": "Head Sha",
+          "type": "string"
+        },
+        "pull_request_number": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Pull Request Number"
+        },
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "state": {
+          "title": "State",
+          "type": "string"
+        },
+        "type": {
+          "const": "github.status",
+          "default": "github.status",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "branch",
+        "context",
+        "head_sha",
+        "pull_request_number",
+        "repository",
+        "state",
+        "type",
+        "url"
+      ],
+      "title": "GithubStatusEvent",
+      "type": "object"
+    },
+    "GithubWorkflowRunEvent": {
+      "properties": {
+        "action": {
+          "$ref": "#/$defs/WorkflowRunAction"
+        },
+        "actor": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/SessionEventActor"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "branch": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Branch"
+        },
+        "conclusion": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Conclusion"
+        },
+        "head_sha": {
+          "title": "Head Sha",
+          "type": "string"
+        },
+        "name": {
+          "title": "Name",
+          "type": "string"
+        },
+        "pull_request_number": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Pull Request Number"
+        },
+        "repository": {
+          "title": "Repository",
+          "type": "string"
+        },
+        "run_number": {
+          "title": "Run Number",
+          "type": "integer"
+        },
+        "type": {
+          "const": "github.workflow_run",
+          "default": "github.workflow_run",
+          "title": "Type",
+          "type": "string"
+        },
+        "url": {
+          "title": "Url",
+          "type": "string"
+        }
+      },
+      "required": [
+        "action",
+        "actor",
+        "branch",
+        "conclusion",
+        "head_sha",
+        "name",
+        "pull_request_number",
+        "repository",
+        "run_number",
+        "type",
+        "url"
+      ],
+      "title": "GithubWorkflowRunEvent",
+      "type": "object"
+    },
     "HandlerService": {
       "description": "The service whose events a handler responds to.",
       "enum": [
@@ -1385,7 +1932,7 @@
     },
     "InputContract": {
       "additionalProperties": false,
-      "description": "The typed input contract: what goes INTO a session (the trigger is\nwhen it happens; this is what goes in).\n\n`json_schema` validates customer data sent as `input` to\n`POST /v1/agents/{id}/sessions` and stored as `session.input`.\nInvocations require input when a schema is declared. React agents\ncannot declare schemas: the platform defines their event payloads.\n\n`message` is the initial-message template: exact `{{path}}` substitution\nover the caller payload (or, on a react agent, over the surface's\npublished fields), no conditionals/loops/filters. Refs are validated at\ndeploy time against the governing field set (see AgentConfig's\n`_check_input`).",
+      "description": "The typed input contract: what goes INTO a session (the trigger is\nwhen it happens; this is what goes in).\n\n`json_schema` validates customer data sent as `input` to\n`POST /v1/agents/{id}/sessions` (the dashboard and the CLI start\nthrough the same door) and stored as `session.input`. An on-demand\nstart requires input when a schema is declared. A trigger fires\nwithout it: a cron fire has no payload and a react fire carries the\nplatform-shaped event, so an agent may declare a schema alongside\neither trigger and the schema governs only its on-demand starts.\n\n`message` is the initial-message template: exact `{{path}}` substitution\nover the payload the session has (the caller payload on an on-demand\nstart, the surface's published fields on a react fire, the empty\nobject on a cron fire), no conditionals/loops/filters. Refs are\nvalidated at deploy time against every governing field set (see\nAgentConfig's `_check_input`): the caller schema's paths, the react\nsurface's published fields, and both when the agent has a react trigger\nand a schema, so one template renders fully on either door (declare the\nsurface's field names in the schema). Omit `message` to let each door\nrender its default. An unresolved ref renders as the empty string (a\ncron fire, an optional field the payload omitted).",
       "properties": {
         "json_schema": {
           "anyOf": [
@@ -1454,7 +2001,10 @@
               "$ref": "#/$defs/LinearIssueAction"
             },
             {
-              "const": "commented",
+              "enum": [
+                "commented",
+                "delegated"
+              ],
               "type": "string"
             }
           ],
@@ -1514,6 +2064,66 @@
       "title": "LinearIssueEvent",
       "type": "object"
     },
+    "LlmCost": {
+      "description": "What LLM tokens cost, in total and by model.",
+      "properties": {
+        "all": {
+          "$ref": "#/$defs/LlmCostSplit",
+          "description": "Token cost across every model."
+        },
+        "by_model": {
+          "description": "Token cost for each model that used tokens.",
+          "items": {
+            "$ref": "#/$defs/ModelLlmCostSplit"
+          },
+          "title": "By Model",
+          "type": "array"
+        }
+      },
+      "required": [
+        "all",
+        "by_model"
+      ],
+      "title": "LlmCost",
+      "type": "object"
+    },
+    "LlmCostSplit": {
+      "description": "What LLM tokens cost, in millicents, split by who paid (Ellipsis credit or the user's own subscription).",
+      "properties": {
+        "claude_subscription": {
+          "default": 0,
+          "description": "Token cost paid by a Claude subscription, at Ellipsis rates, in millicents.",
+          "title": "Claude Subscription",
+          "type": "integer"
+        },
+        "codex_subscription": {
+          "default": 0,
+          "description": "Token cost paid by a Codex subscription, at Ellipsis rates, in millicents.",
+          "title": "Codex Subscription",
+          "type": "integer"
+        },
+        "platform": {
+          "default": 0,
+          "description": "Token cost charged to Ellipsis credit, in millicents.",
+          "title": "Platform",
+          "type": "integer"
+        },
+        "total": {
+          "default": 0,
+          "description": "All token cost, in millicents. It is the sum of platform, claude_subscription, and codex_subscription.",
+          "title": "Total",
+          "type": "integer"
+        }
+      },
+      "required": [
+        "claude_subscription",
+        "codex_subscription",
+        "platform",
+        "total"
+      ],
+      "title": "LlmCostSplit",
+      "type": "object"
+    },
     "McpRemoteServer": {
       "additionalProperties": false,
       "description": "A bring-your-own remote MCP server: the harness talks HTTP to `url`.\nNothing runs in the environment image. `headers` carry static auth (e.g.\n`Authorization: Bearer ${TOKEN}`); values may embed `${NAME}` secret\nreferences, resolved at run time from the account's secrets store.",
@@ -1545,7 +2155,7 @@
     },
     "McpServerRef": {
       "additionalProperties": false,
-      "description": "One built-in MCP server this agent opts into by name (`linear`/`slack`).\nA name reference over the connected built-in set \u2014 the platform manages the\nserver's transport and credentials. It only matters when the named\nintegration is set to `opt_in` inclusion; an integration in the default\n`all_sessions` mode is added regardless. For a server the platform does not\nprovide, define it instead (`McpStdioServer` /\n`McpRemoteServer`).",
+      "description": "One built-in MCP server this agent attaches by name (`linear`/`slack`).\nA name reference over the connected built-in set \u2014 the platform manages the\nserver's transport and credentials. A session gets a built-in server only\nwhen its config names it here or the session started from that server's\nown surface. For a server the platform does not provide, define it instead\n(`McpStdioServer` / `McpRemoteServer`).",
       "properties": {
         "name": {
           "title": "Name",
@@ -1634,6 +2244,99 @@
       "title": "MemorySize",
       "type": "object"
     },
+    "ModelLlmCostSplit": {
+      "description": "What one model's tokens cost, in millicents, split by who paid.",
+      "properties": {
+        "claude_subscription": {
+          "default": 0,
+          "description": "Token cost paid by a Claude subscription, at Ellipsis rates, in millicents.",
+          "title": "Claude Subscription",
+          "type": "integer"
+        },
+        "codex_subscription": {
+          "default": 0,
+          "description": "Token cost paid by a Codex subscription, at Ellipsis rates, in millicents.",
+          "title": "Codex Subscription",
+          "type": "integer"
+        },
+        "model": {
+          "description": "The model that used these tokens.",
+          "title": "Model",
+          "type": "string"
+        },
+        "platform": {
+          "default": 0,
+          "description": "Token cost charged to Ellipsis credit, in millicents.",
+          "title": "Platform",
+          "type": "integer"
+        },
+        "total": {
+          "default": 0,
+          "description": "All token cost, in millicents. It is the sum of platform, claude_subscription, and codex_subscription.",
+          "title": "Total",
+          "type": "integer"
+        }
+      },
+      "required": [
+        "claude_subscription",
+        "codex_subscription",
+        "model",
+        "platform",
+        "total"
+      ],
+      "title": "ModelLlmCostSplit",
+      "type": "object"
+    },
+    "ModelTokenCounts": {
+      "description": "Token counts for one model.",
+      "properties": {
+        "cache_creation": {
+          "default": 0,
+          "description": "Tokens written to the prompt cache.",
+          "title": "Cache Creation",
+          "type": "integer"
+        },
+        "cache_read": {
+          "default": 0,
+          "description": "Tokens read from the prompt cache.",
+          "title": "Cache Read",
+          "type": "integer"
+        },
+        "input": {
+          "default": 0,
+          "description": "Input tokens used.",
+          "title": "Input",
+          "type": "integer"
+        },
+        "model": {
+          "description": "The model that used these tokens.",
+          "title": "Model",
+          "type": "string"
+        },
+        "output": {
+          "default": 0,
+          "description": "Output tokens used.",
+          "title": "Output",
+          "type": "integer"
+        },
+        "total": {
+          "default": 0,
+          "description": "All tokens used, including prompt cache reads and writes. Token cost is priced on this.",
+          "title": "Total",
+          "type": "integer"
+        }
+      },
+      "required": [
+        "cache_creation",
+        "cache_read",
+        "input",
+        "model",
+        "output",
+        "total"
+      ],
+      "title": "ModelTokenCounts",
+      "type": "object"
+    },
     "OutputConfig": {
       "additionalProperties": false,
       "description": "JSON Schema for the harness's structured result, when certified.",
@@ -1652,7 +2355,7 @@
     },
     "PermissionsConfig": {
       "additionalProperties": false,
-      "description": "What the agent is allowed to touch, per credential the platform mints\ninto its session's environment. Distinct from `environment:`, which is\nwhere the agent runs; this is what it may do from there.\n\n`ellipsis` scopes the session's Ellipsis API token (`ELLIPSIS_API_TOKEN`,\nwhat the `agent` CLI running inside the session authenticates with).\n`true` / the string `all` (the default) grant the full session token\nceiling \u2014 everything a session token can ever do. A map narrows it per\nresource (see `EllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the session's GitHub installation token (`GH_TOKEN`) \u2014\nsee `GithubPermissions`. GitHub enforces it at mint time.",
+      "description": "What the agent is allowed to touch, per credential the platform mints\ninto its session's environment. Distinct from `environment:`, which is\nwhere the agent runs; this is what it may do from there.\n\n`ellipsis` scopes the session's Ellipsis API token (`ELLIPSIS_API_TOKEN`,\nwhat the `ellipsis` CLI running inside the session authenticates with).\n`true` / the string `all` (the default) grant the full session token\nceiling \u2014 everything a session token can ever do. A map narrows it per\nresource (see `EllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the session's GitHub installation token (`GH_TOKEN`) \u2014\nsee `GithubPermissions`. GitHub enforces it at mint time.",
       "properties": {
         "ellipsis": {
           "anyOf": [
@@ -1688,7 +2391,6 @@
       "description": "Why direct prompting is refused. Absent when prompting is allowed.",
       "enum": [
         "mention_surface",
-        "ephemeral_trigger",
         "non_interactive",
         "harness_single_turn",
         "budget_exhausted",
@@ -1709,6 +2411,100 @@
       "title": "PullRequestAction",
       "type": "string"
     },
+    "ReactCheckRun": {
+      "additionalProperties": false,
+      "description": "A check run changing state on a commit. A check run is a GitHub Actions job or a check another CI app reports. `on` lists the states that fire. `names` matches check names exactly or by a prefix ending in `*`. `branch` is the branch the check ran on. `for` is the author of the commit the check ran on. Needs the Checks permission.",
+      "properties": {
+        "branch": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Branch",
+          "type": "array"
+        },
+        "for": {
+          "$ref": "#/$defs/GithubAccountSelector"
+        },
+        "names": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Names",
+          "type": "array"
+        },
+        "on": {
+          "default": [
+            "failed"
+          ],
+          "items": {
+            "$ref": "#/$defs/CheckRunAction"
+          },
+          "title": "On",
+          "type": "array"
+        },
+        "repositories": {
+          "$ref": "#/$defs/RepositoryFilter"
+        }
+      },
+      "required": [
+        "branch",
+        "for",
+        "names",
+        "on",
+        "repositories"
+      ],
+      "title": "ReactCheckRun",
+      "type": "object"
+    },
+    "ReactCheckSuite": {
+      "additionalProperties": false,
+      "description": "Every check one CI app reported on a commit finishing. GitHub reports a check suite only when it finishes, so `on` takes only finished states. `apps` matches the reporting app slug, such as `github-actions`, exactly or by a prefix ending in `*`. `branch` and `for` work as on `check_run`. Needs the Checks permission.",
+      "properties": {
+        "apps": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Apps",
+          "type": "array"
+        },
+        "branch": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Branch",
+          "type": "array"
+        },
+        "for": {
+          "$ref": "#/$defs/GithubAccountSelector"
+        },
+        "on": {
+          "default": [
+            "failed"
+          ],
+          "items": {
+            "$ref": "#/$defs/CheckSuiteAction"
+          },
+          "title": "On",
+          "type": "array"
+        },
+        "repositories": {
+          "$ref": "#/$defs/RepositoryFilter"
+        }
+      },
+      "required": [
+        "apps",
+        "branch",
+        "for",
+        "on",
+        "repositories"
+      ],
+      "title": "ReactCheckSuite",
+      "type": "object"
+    },
     "ReactIssue": {
       "additionalProperties": false,
       "properties": {
@@ -1876,6 +2672,57 @@
       "title": "ReactPush",
       "type": "object"
     },
+    "ReactRelease": {
+      "additionalProperties": false,
+      "description": "A GitHub release being published \u2014 a release or prerelease published\ndirectly, or a draft published later. `tag` narrows to the release tags\nthat match (exact, or a prefix ending in `*`, so `v*`); `prerelease`\nselects prereleases or full releases, like `draft` on pull requests. The\n`for:` audience is the release's author, which for a release cut by CI is\na bot and needs `bots` to opt in.",
+      "properties": {
+        "for": {
+          "$ref": "#/$defs/GithubAccountSelector"
+        },
+        "on": {
+          "default": [
+            "published"
+          ],
+          "items": {
+            "$ref": "#/$defs/ReleaseAction"
+          },
+          "title": "On",
+          "type": "array"
+        },
+        "prerelease": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Prerelease"
+        },
+        "repositories": {
+          "$ref": "#/$defs/RepositoryFilter"
+        },
+        "tag": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Tag",
+          "type": "array"
+        }
+      },
+      "required": [
+        "for",
+        "on",
+        "prerelease",
+        "repositories",
+        "tag"
+      ],
+      "title": "ReactRelease",
+      "type": "object"
+    },
     "ReactSentry": {
       "additionalProperties": false,
       "properties": {
@@ -1908,9 +2755,84 @@
       "title": "ReactSlackChannel",
       "type": "object"
     },
+    "ReactStatus": {
+      "additionalProperties": false,
+      "description": "A commit status changing state, from CI that posts statuses instead of checks. `names` matches status contexts exactly or by a prefix ending in `*`. `branch` matches when any branch GitHub lists for the commit matches. `for` works as on `check_run`. Needs the Commit statuses permission.",
+      "properties": {
+        "branch": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Branch",
+          "type": "array"
+        },
+        "for": {
+          "$ref": "#/$defs/GithubAccountSelector"
+        },
+        "names": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Names",
+          "type": "array"
+        },
+        "on": {
+          "default": [
+            "failed"
+          ],
+          "items": {
+            "$ref": "#/$defs/StatusAction"
+          },
+          "title": "On",
+          "type": "array"
+        },
+        "repositories": {
+          "$ref": "#/$defs/RepositoryFilter"
+        }
+      },
+      "required": [
+        "branch",
+        "for",
+        "names",
+        "on",
+        "repositories"
+      ],
+      "title": "ReactStatus",
+      "type": "object"
+    },
     "ReactTrigger": {
       "additionalProperties": false,
+      "description": "An event trigger: exactly one surface block names the events to match.\n\n`enabled: false` pauses the trigger and keeps its definition: events stop\nmatching while the agent stays live for on-demand starts and open\nsessions keep taking follow-ups (`ellipsis.enabled: false` pauses the\nwhole file instead).",
       "properties": {
+        "check_run": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactCheckRun"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "check_suite": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactCheckSuite"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "enabled": {
+          "default": true,
+          "title": "Enabled",
+          "type": "boolean"
+        },
         "issue": {
           "anyOf": [
             {
@@ -1955,6 +2877,17 @@
           ],
           "default": null
         },
+        "release": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactRelease"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
         "sentry": {
           "anyOf": [
             {
@@ -1966,10 +2899,21 @@
           ],
           "default": null
         },
-        "slack_channel": {
+        "slack_channel": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactSlackChannel"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
+        },
+        "status": {
           "anyOf": [
             {
-              "$ref": "#/$defs/ReactSlackChannel"
+              "$ref": "#/$defs/ReactStatus"
             },
             {
               "type": "null"
@@ -1982,20 +2926,92 @@
           "default": "react",
           "title": "Type",
           "type": "string"
+        },
+        "workflow_run": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/ReactWorkflowRun"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null
         }
       },
       "required": [
+        "check_run",
+        "check_suite",
+        "enabled",
         "issue",
         "linear_issue",
         "pull_request",
         "push",
+        "release",
         "sentry",
         "slack_channel",
-        "type"
+        "status",
+        "type",
+        "workflow_run"
       ],
       "title": "ReactTrigger",
       "type": "object"
     },
+    "ReactWorkflowRun": {
+      "additionalProperties": false,
+      "description": "A GitHub Actions workflow run changing state. `names` matches workflow names exactly or by a prefix ending in `*`. `branch` is the branch the run is for. `for` works as on `check_run`. Needs the Actions permission.",
+      "properties": {
+        "branch": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Branch",
+          "type": "array"
+        },
+        "for": {
+          "$ref": "#/$defs/GithubAccountSelector"
+        },
+        "names": {
+          "default": [],
+          "items": {
+            "type": "string"
+          },
+          "title": "Names",
+          "type": "array"
+        },
+        "on": {
+          "default": [
+            "failed"
+          ],
+          "items": {
+            "$ref": "#/$defs/WorkflowRunAction"
+          },
+          "title": "On",
+          "type": "array"
+        },
+        "repositories": {
+          "$ref": "#/$defs/RepositoryFilter"
+        }
+      },
+      "required": [
+        "branch",
+        "for",
+        "names",
+        "on",
+        "repositories"
+      ],
+      "title": "ReactWorkflowRun",
+      "type": "object"
+    },
+    "ReleaseAction": {
+      "description": "What happened to a GitHub release. `published` is the one moment a\nrelease becomes visible: a release or prerelease published directly, or a\ndraft published later. Edits, deletions, and unpublishes never fire.",
+      "enum": [
+        "published"
+      ],
+      "title": "ReleaseAction",
+      "type": "string"
+    },
     "RepositoryFilter": {
       "anyOf": [
         {
@@ -2080,14 +3096,13 @@
         "account",
         "alerts",
         "sessions",
-        "memories",
-        "reviews",
         "configs",
         "defaults",
         "environments",
         "secrets",
         "templates",
         "integrations",
+        "reviews",
         "tokens",
         "webhooks",
         "user"
@@ -2239,11 +3254,9 @@
     },
     "SandboxSource": {
       "enum": [
-        "cli",
-        "web_ui",
-        "ingest_pull_request_job_run",
         "session",
         "image_refresh",
+        "environment_check",
         "test",
         "script"
       ],
@@ -2442,9 +3455,9 @@
         },
         "budget": {
           "default": 0,
-          "description": "The spend budget enforced for this session, in US dollars, after resolving defaults and ceilings.",
+          "description": "The spend budget enforced for this session, in millicents, after resolving defaults and ceilings.",
           "title": "Budget",
-          "type": "number"
+          "type": "integer"
         },
         "claude_code": {
           "anyOf": [
@@ -2475,8 +3488,8 @@
           "description": "Whether the session can take more messages, and whether an agent is warm to answer one."
         },
         "cost": {
-          "$ref": "#/$defs/SessionCost",
-          "description": "What the session has cost so far, in millicents, broken down by leg and carrying its own total."
+          "$ref": "#/$defs/Cost",
+          "description": "What the session has cost so far."
         },
         "created_at": {
           "description": "When the session was created.",
@@ -2493,9 +3506,14 @@
             {
               "discriminator": {
                 "mapping": {
+                  "github.check_run": "#/$defs/GithubCheckRunEvent",
+                  "github.check_suite": "#/$defs/GithubCheckSuiteEvent",
                   "github.issue": "#/$defs/GithubIssueEvent",
                   "github.pull_request": "#/$defs/GithubPullRequestEvent",
                   "github.push": "#/$defs/GithubPushEvent",
+                  "github.release": "#/$defs/GithubReleaseEvent",
+                  "github.status": "#/$defs/GithubStatusEvent",
+                  "github.workflow_run": "#/$defs/GithubWorkflowRunEvent",
                   "linear.issue": "#/$defs/LinearIssueEvent",
                   "sentry.alert": "#/$defs/SentryAlertEvent",
                   "slack.channel_created": "#/$defs/SlackChannelCreatedEvent",
@@ -2513,6 +3531,21 @@
                 {
                   "$ref": "#/$defs/GithubPushEvent"
                 },
+                {
+                  "$ref": "#/$defs/GithubCheckRunEvent"
+                },
+                {
+                  "$ref": "#/$defs/GithubCheckSuiteEvent"
+                },
+                {
+                  "$ref": "#/$defs/GithubWorkflowRunEvent"
+                },
+                {
+                  "$ref": "#/$defs/GithubStatusEvent"
+                },
+                {
+                  "$ref": "#/$defs/GithubReleaseEvent"
+                },
                 {
                   "$ref": "#/$defs/LinearIssueEvent"
                 },
@@ -2576,14 +3609,14 @@
         "output": {
           "anyOf": [
             {
-              "$ref": "#/$defs/OutputConfig"
+              "$ref": "#/$defs/SessionOutput"
             },
             {
               "type": "null"
             }
           ],
           "default": null,
-          "description": "The structured-output exit contract for this session."
+          "description": "The session's structured output: the `json_schema` the agent must satisfy and, once a turn has submitted it, the `result`."
         },
         "parent": {
           "anyOf": [
@@ -2626,8 +3659,8 @@
           "description": "The latest live summary of the session's progress while it runs, and when it was generated."
         },
         "tokens": {
-          "$ref": "#/$defs/SessionTokens",
-          "description": "The tokens the session spent and the model they went to. `total` includes the prompt-cache lanes."
+          "$ref": "#/$defs/Tokens",
+          "description": "The tokens the session has used so far."
         },
         "turn": {
           "anyOf": [
@@ -2694,7 +3727,7 @@
             }
           ],
           "default": null,
-          "description": "Identifier of the saved agent this session's snapshot was taken from. Null for a routing-file agent, a code-review stage agent, or the built-in mention agent, which have no saved agent behind them. Points at the agent as it exists now, which may have changed since.",
+          "description": "Identifier of the saved agent this session's snapshot was taken from. Null for a routing-file agent or the built-in mention agent, which have no saved agent behind them. Points at the agent as it exists now, which may have changed since.",
           "title": "Id"
         }
       },
@@ -2856,6 +3889,12 @@
           "default": null,
           "description": "Codex input and native options. Set exactly one of claude_code or codex."
         },
+        "conversation": {
+          "$ref": "#/$defs/SessionConversationConfig",
+          "default": {
+            "interactive": true
+          }
+        },
         "environment": {
           "anyOf": [
             {
@@ -2884,6 +3923,15 @@
           },
           "title": "Environment"
         },
+        "metadata": {
+          "additionalProperties": {
+            "type": "string"
+          },
+          "default": {},
+          "description": "Arbitrary string key/value metadata stored on every session.",
+          "title": "Metadata",
+          "type": "object"
+        },
         "output": {
           "anyOf": [
             {
@@ -2918,7 +3966,9 @@
         "budget",
         "claude_code",
         "codex",
+        "conversation",
         "environment",
+        "metadata",
         "output",
         "permissions",
         "skills"
@@ -2957,48 +4007,21 @@
       "title": "SessionConversation",
       "type": "object"
     },
-    "SessionCost": {
-      "description": "What a session (or one turn of it) cost, in millicents.\n\n`llm` is deliberately NOT called `tokens`: it would sit beside the `tokens`\nobject and read as \"the token count's cost\" rather than \"the cost of the\nLLM leg\".",
+    "SessionConversationConfig": {
+      "additionalProperties": false,
+      "description": "Conversation settings for a session, set on a saved agent or sent when starting a session or running an agent.",
       "properties": {
-        "cpu": {
-          "default": 0,
-          "description": "CPU spend in millicents.",
-          "title": "Cpu",
-          "type": "integer"
-        },
-        "fee": {
-          "default": 0,
-          "description": "Platform fee in millicents.",
-          "title": "Fee",
-          "type": "integer"
-        },
-        "llm": {
-          "default": 0,
-          "description": "LLM spend in millicents.",
-          "title": "Llm",
-          "type": "integer"
-        },
-        "memory": {
-          "default": 0,
-          "description": "Memory spend in millicents.",
-          "title": "Memory",
-          "type": "integer"
-        },
-        "total": {
-          "default": 0,
-          "description": "The grand total in millicents: llm + cpu + memory + fee.",
-          "title": "Total",
-          "type": "integer"
+        "interactive": {
+          "default": true,
+          "description": "Whether the session stays open after its first turn. Defaults to true; false runs once and requires a prompt. Requires the model's interactive capability when true. Direct message acceptance is reported separately in conversation.prompting.",
+          "title": "Interactive",
+          "type": "boolean"
         }
       },
       "required": [
-        "cpu",
-        "fee",
-        "llm",
-        "memory",
-        "total"
+        "interactive"
       ],
-      "title": "SessionCost",
+      "title": "SessionConversationConfig",
       "type": "object"
     },
     "SessionEnvironment": {
@@ -3400,6 +4423,37 @@
       "title": "SessionListStreamMessage",
       "type": "object"
     },
+    "SessionOutput": {
+      "description": "Structured output on the wire: the contract and, when a turn has\nsubmitted one, the payload. `result` is None while the session runs and\nwhen no turn submitted anything; it is the agent's own JSON, in the\nshape of `json_schema`.",
+      "properties": {
+        "json_schema": {
+          "additionalProperties": true,
+          "description": "JSON Schema the agent's result must satisfy.",
+          "title": "Json Schema",
+          "type": "object"
+        },
+        "result": {
+          "anyOf": [
+            {
+              "additionalProperties": true,
+              "type": "object"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "The payload the agent submitted, or null until a turn submits one.",
+          "title": "Result"
+        }
+      },
+      "required": [
+        "json_schema",
+        "result"
+      ],
+      "title": "SessionOutput",
+      "type": "object"
+    },
     "SessionParent": {
       "description": "The predecessor session this session continues.",
       "properties": {
@@ -3476,9 +4530,10 @@
       "type": "object"
     },
     "SessionSource": {
-      "description": "Where a session came from: the credential that started it (web app,\nAPI key, CLI) or the trigger that fired (react, mention, cron). Never\ntaken from a request body.",
+      "description": "Where a session came from: the credential that started it (web app,\nAPI key, CLI) or the trigger that fired (react, mention, cron, code\nreview). Never taken from a request body.",
       "enum": [
         "react",
+        "code_review",
         "web",
         "api",
         "cli",
@@ -3556,62 +4611,11 @@
       "title": "SessionSummary",
       "type": "object"
     },
-    "SessionTokens": {
-      "description": "The token counts a session (or turn) spent, and the model they went to.\n\n`total` INCLUDES the cache lanes, unlike the old flat `tokens_total` which\ncounted input+output+thinking only and left callers to add cache reads and\nwrites back themselves (the deleted `tokensTotalAll` helper). Cache tokens\ndominate an agent run's token bill, so a \"total\" that omits them is the\nwrong default and produced two competing totals in the dashboard.",
-      "properties": {
-        "cache_creation": {
-          "default": 0,
-          "description": "Tokens written to the prompt cache.",
-          "title": "Cache Creation",
-          "type": "integer"
-        },
-        "cache_read": {
-          "default": 0,
-          "description": "Tokens read from the prompt cache.",
-          "title": "Cache Read",
-          "type": "integer"
-        },
-        "input": {
-          "default": 0,
-          "description": "Input tokens used.",
-          "title": "Input",
-          "type": "integer"
-        },
-        "model": {
-          "default": "",
-          "description": "The model the token counts are attributed to.",
-          "title": "Model",
-          "type": "string"
-        },
-        "output": {
-          "default": 0,
-          "description": "Output tokens used.",
-          "title": "Output",
-          "type": "integer"
-        },
-        "total": {
-          "default": 0,
-          "description": "Total tokens consumed, INCLUDING the prompt-cache reads and writes \u2014 the same basis the token cost is priced on.",
-          "title": "Total",
-          "type": "integer"
-        }
-      },
-      "required": [
-        "cache_creation",
-        "cache_read",
-        "input",
-        "model",
-        "output",
-        "total"
-      ],
-      "title": "SessionTokens",
-      "type": "object"
-    },
     "SessionTurn": {
       "description": "One message and the agent's answer to it. A turn is `pending` from the\nmoment its message is received until the agent starts on it, `running`\nwhile the agent works, then `completed`, `failed`, `stopped`, or\n`cancelled`.",
       "properties": {
         "cost": {
-          "$ref": "#/$defs/SessionCost",
+          "$ref": "#/$defs/Cost",
           "description": "What the turn cost so far, in millicents, broken down by leg."
         },
         "created_at": {
@@ -3700,7 +4704,7 @@
           "description": "When and by whom a stop was requested; null when none was."
         },
         "tokens": {
-          "$ref": "#/$defs/SessionTokens",
+          "$ref": "#/$defs/Tokens",
           "description": "The tokens the turn spent and the model they went to."
         }
       },
@@ -3722,7 +4726,7 @@
     },
     "SettingsRef": {
       "additionalProperties": false,
-      "description": "A config-declared Claude Code settings.json, resolved at run start and\npassed to `claude --settings <path>`. That is the CLI settings tier \u2014 BELOW\nEllipsis's managed-settings.json floor \u2014 so it customizes behavior (model\npermissions, includeCoAuthoredBy, statusLine, ...) but can never weaken a\nsecurity setting. Lets a team point the cloud agent at the same settings file\nthey already use with Claude Code locally instead of re-encoding it as YAML.",
+      "description": "A Claude Code settings.json read from a repository and applied to the\nsession. It adds permission rules and other Claude Code settings; rules the\nplatform sets stay in force. Supported models list `settings` in\n`/v1/account/models`.",
       "properties": {
         "path": {
           "title": "Path",
@@ -3901,6 +4905,84 @@
       "title": "SlackMessageEvent",
       "type": "object"
     },
+    "StatusAction": {
+      "description": "The state of a commit status. `success` is `passed`, `failure` is `failed`, and `error` is `errored`.",
+      "enum": [
+        "pending",
+        "passed",
+        "failed",
+        "errored"
+      ],
+      "title": "StatusAction",
+      "type": "string"
+    },
+    "TokenCounts": {
+      "description": "Token counts.",
+      "properties": {
+        "cache_creation": {
+          "default": 0,
+          "description": "Tokens written to the prompt cache.",
+          "title": "Cache Creation",
+          "type": "integer"
+        },
+        "cache_read": {
+          "default": 0,
+          "description": "Tokens read from the prompt cache.",
+          "title": "Cache Read",
+          "type": "integer"
+        },
+        "input": {
+          "default": 0,
+          "description": "Input tokens used.",
+          "title": "Input",
+          "type": "integer"
+        },
+        "output": {
+          "default": 0,
+          "description": "Output tokens used.",
+          "title": "Output",
+          "type": "integer"
+        },
+        "total": {
+          "default": 0,
+          "description": "All tokens used, including prompt cache reads and writes. Token cost is priced on this.",
+          "title": "Total",
+          "type": "integer"
+        }
+      },
+      "required": [
+        "cache_creation",
+        "cache_read",
+        "input",
+        "output",
+        "total"
+      ],
+      "title": "TokenCounts",
+      "type": "object"
+    },
+    "Tokens": {
+      "description": "Tokens used, in total and by model.",
+      "properties": {
+        "all": {
+          "$ref": "#/$defs/TokenCounts",
+          "description": "Token counts across every model."
+        },
+        "by_model": {
+          "description": "Token counts for each model that used tokens.",
+          "items": {
+            "$ref": "#/$defs/ModelTokenCounts"
+          },
+          "title": "By Model",
+          "type": "array"
+        }
+      },
+      "required": [
+        "all",
+        "by_model"
+      ],
+      "title": "Tokens",
+      "type": "object"
+    },
     "TurnReason": {
       "description": "Why a turn failed or was cancelled. Null on every other outcome.",
       "enum": [
@@ -4150,6 +5232,27 @@
       ],
       "title": "VMExecutionResponse",
       "type": "object"
+    },
+    "WorkflowRunAction": {
+      "description": "The state of a GitHub Actions workflow run when GitHub reports it. Before the run finishes it is the status, and `in_progress` is `started`. After it finishes it is the conclusion, `success` is `passed` and `failure` is `failed`. Every other value is the GitHub word.",
+      "enum": [
+        "requested",
+        "queued",
+        "waiting",
+        "pending",
+        "started",
+        "passed",
+        "failed",
+        "timed_out",
+        "cancelled",
+        "skipped",
+        "neutral",
+        "action_required",
+        "stale",
+        "startup_failure"
+      ],
+      "title": "WorkflowRunAction",
+      "type": "string"
     }
   },
   "$schema": "https://json-schema.org/draft/2020-12/schema",