@ellipsis-dev/sdk 0.34.1 → 0.35.0

package/README.md

@@ -6,7 +6,7 @@ Three subpath exports, all dependency-free at runtime:
 - **`@ellipsis-dev/sdk`** — generated `/v1` REST types + `EllipsisClient`, a thin
   typed client over an injected `fetchJson`.
 - **`@ellipsis-dev/sdk/stream`** — the session stream WebSocket client
-  (`streamSession`): protocol negotiation, heartbeat liveness,
+  (`streamSession`): heartbeat liveness,
   reconnect-with-backoff, and lossless resume via the `after_seq` record
   cursor. Transport is an injected `openSocket`, so the same machinery runs in
   a browser, a terminal, or a server.
@@ -31,13 +31,11 @@ server stream loop (ids and timestamps normalized); the store's tests replay
 it, so client behavior is validated against real emissions, not hand-written
 examples.
 
-## Protocol
+## Stream
 
-The stream protocol (frame taxonomy, delivery classes, resume/close-code
-contract) is documented at https://www.ellipsis.dev/docs. The compatibility
-rule clients must follow: **ignore unknown frame types and unknown
-`source`/`record_type`/`kind` values** — additive server changes are not a
-protocol break.
+The stream (frame taxonomy, delivery classes, resume/close-code contract) is
+documented at https://www.ellipsis.dev/docs. Clients **ignore unknown frame
+types and unknown `source`/`record_type`/`kind` values**.
 
 ## Shared chat work sections
 

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { c as components } from './types-DV2H5ZsR.js';
-export { A as AgentConfig, a as AgentIdentity, b as AttributionType, B as BudgetConfig, C as CheckRunAction, d as CheckSuiteAction, e as ClaudeAssistantEvent, f as ClaudeAssistantMessage, g as ClaudeConfig, h as ClaudeConversationResetEvent, i as ClaudeNativeEvent, j as ClaudeNativeSessionRecord, k as ClaudeNativeUsage, l as ClaudeRateLimitEvent, m as ClaudeRateLimitInfo, n as ClaudeResultEvent, o as ClaudeSessionRecord, p as ClaudeSystemEvent, q as ClaudeUserEvent, r as ClaudeUserMessage, s as CodexAgentMessage, t as CodexAgentMessageItem, u as CodexAppServerError, v as CodexAppServerEvent, w as CodexAppServerItem, x as CodexAppServerNotification, y as CodexAppServerSessionRecord, z as CodexCommandExecution, D as CodexCommandExecutionItem, E as CodexConfig, F as CodexContextCompaction, G as CodexEffortLevel, H as CodexErrorEvent, I as CodexErrorItem, J as CodexErrorParams, K as CodexEvent, L as CodexFileChange, M as CodexFileChangeItem, N as CodexFileUpdate, O as CodexItem, P as CodexItemCompleted, Q as CodexItemCompletedEvent, R as CodexItemParams, S as CodexItemStarted, T as CodexItemStartedEvent, U as CodexItemUpdatedEvent, V as CodexLocalImageInput, W as CodexMcpToolCall, X as CodexMcpToolCallAppContext, Y as CodexMcpToolCallError, Z as CodexMcpToolCallItem, _ as CodexMcpToolCallResult, $ as CodexPlan, a0 as CodexReasoning, a1 as CodexReasoningItem, a2 as CodexSessionRecord, a3 as CodexTextInput, a4 as CodexThread, a5 as CodexThreadStarted, a6 as CodexThreadStartedEvent, a7 as CodexThreadStartedParams, a8 as CodexThreadTokenUsage, a9 as CodexTodoListItem, aa as CodexTokenUsageBreakdown, ab as CodexTokenUsageParams, ac as CodexTokenUsageUpdated, ad as CodexTurn, ae as CodexTurnCompleted, af as CodexTurnCompletedEvent, ag as CodexTurnError, ah as CodexTurnFailedEvent, ai as CodexTurnParams, aj as CodexTurnStarted, ak as CodexTurnStartedEvent, al as CodexUsage, am as CodexUserInput, an as CodexUserMessage, ao as CodexWebSearch, ap as CodexWebSearchItem, aq as ComputeConfig, ar as ComputeConfig1, as as ConfigMetadata, at as Cost, au as Cost1, av as CronTrigger, aw as DeltaFrame, ax as DoneFrame, ay as Duration, az as EffortLevel, aA as EllipsisGrant, aB as EllipsisPermissions, aC as EnvironmentBaseBuild, aD as EnvironmentConfig, aE as EnvironmentHooks, aF as EnvironmentHooks1, aG as EnvironmentOutputPayload, aH as EnvironmentOutputRecord, aI as EnvironmentPhasePayload, aJ as EnvironmentPhaseRecord, aK as EnvironmentReadyPayload, aL as EnvironmentReadyRecord, aM as EnvironmentScript, aN as EnvironmentSource, aO as EnvironmentVariable, aP as ErrorFrame, aQ as GithubAccountFilter, aR as GithubAccountSelector, aS as GithubAccountSnippet, aT as GithubAccountType, aU as GithubCheckRunEvent, aV as GithubCheckSuiteEvent, aW as GithubIssueEvent, aX as GithubPermissions, aY as GithubPullRequestEvent, aZ as GithubPushEvent, a_ as GithubReleaseEvent, a$ as GithubStatusEvent, b0 as GithubWorkflowRunEvent, b1 as HandlerService, b2 as HeartbeatFrame, b3 as InputContract, b4 as IssueAction, b5 as LegacyAssistantPayload, b6 as LegacyNativeUsage, b7 as LegacyResultPayload, b8 as Level, b9 as LifecycleSessionRecord, ba as LinearIssueAction, bb as LinearIssueEvent, bc as LlmCost, bd as LlmCostSplit, be as McpRemoteServer, bf as McpServerRef, bg as McpStdioServer, bh as MemorySize, bi as MessageDeliveredPayload, bj as MessageDeliveredRecord, bk as MessageReceivedPayload, bl as MessageReceivedRecord, bm as MessageRequeuedPayload, bn as MessageRequeuedRecord, bo as ModelLlmCostSplit, bp as ModelTokenCounts, bq as OutputConfig, br as PermissionsConfig, bs as PermissionsConfig1, bt as PlatformSessionRecord, bu as PromptBlockedReason, bv as PullRequestAction, bw as ReactCheckRun, bx as ReactCheckSuite, by as ReactIssue, bz as ReactLinearIssue, bA as ReactPullRequest, bB as ReactPush, bC as ReactRelease, bD as ReactSentry, bE as ReactSlackChannel, bF as ReactStatus, bG as ReactTrigger, bH as ReactWorkflowRun, bI as RecordsAppendFrame, bJ as ReleaseAction, bK as RepositoryFilter, bL as RepositoryRef, bM as Review, bN as ReviewComment, bO as ReviewConfig, bP as ReviewConfigsListResponse, bQ as ReviewPullRequest, bR as ReviewPullRequestAuthor, bS as ReviewReviewer, bT as ReviewSummary, bU as ReviewsListResponse, bV as SdkAssistantRecord, bW as SdkCacheCreation, bX as SdkContentBlock, bY as SdkRateLimitRecord, bZ as SdkRecord, b_ as SdkResultRecord, b$ as SdkServerToolResultBlock, c0 as SdkServerToolUseBlock, c1 as SdkSystemRecord, c2 as SdkTextBlock, c3 as SdkThinkingBlock, c4 as SdkToolResultBlock, c5 as SdkToolUseBlock, c6 as SdkUserRecord, c7 as SendSessionMessageRequest, c8 as SentryAction, c9 as SentryAlertEvent, ca as Session, cb as Session1, cc as SessionAgent, cd as SessionArchived, ce as SessionAttribution, cf as SessionClosedPayload, cg as SessionClosedRecord, ch as SessionConfig, ci as SessionConversation, cj as SessionConversationConfig, ck as SessionEnvironment, cl as SessionEventActor, cm as SessionFrame, cn as SessionGit, co as SessionGitCommit, cp as SessionGitFile, cq as SessionGitPr, cr as SessionGitRepo, cs as SessionHandler, ct as SessionMessage, cu as SessionMessageImage, cv as SessionMessageResponse, cw as SessionMessageStatus, cx as SessionOutput, cy as SessionParent, cz as SessionPrompting, cA as SessionRecord, cB as SessionRecordsListResponse, cC as SessionResponse, cD as SessionSource, cE as SessionState, cF as SessionStopped, cG as SessionStreamFrame, cH as SessionSummary, cI as SessionTurn, cJ as SessionTurnResponse, cK as SessionTurnsListResponse, cL as SessionsListResponse, cM as SettingsRef, cN as SkillRef, cO as SlackChannelCreatedEvent, cP as SlackMessageEvent, cQ as SnapshotFrame, cR as StatusAction, cS as StreamFrame, cT as TokenCounts, cU as Tokens, cV as Tokens1, cW as TokensInfo, cX as TurnEndedPayload, cY as TurnEndedRecord, cZ as TurnQueuedPayload, c_ as TurnQueuedRecord, c$ as TurnReason, d0 as TurnStartedPayload, d1 as TurnStartedRecord, d2 as TurnStatus, d3 as UnknownSessionRecord, d4 as UpdateSessionRequest, d5 as WorkflowRunAction, d6 as paths } from './types-DV2H5ZsR.js';
+import { c as components } from './types-BrLpRRde.js';
+export { A as AgentConfig, a as AgentIdentity, b as AttributionType, B as BudgetConfig, C as CheckRunAction, d as CheckSuiteAction, e as ClaudeAssistantEvent, f as ClaudeAssistantMessage, g as ClaudeConfig, h as ClaudeConversationResetEvent, i as ClaudeNativeEvent, j as ClaudeNativeSessionRecord, k as ClaudeNativeUsage, l as ClaudeRateLimitEvent, m as ClaudeRateLimitInfo, n as ClaudeResultEvent, o as ClaudeSessionRecord, p as ClaudeSystemEvent, q as ClaudeUserEvent, r as ClaudeUserMessage, s as CodexAgentMessage, t as CodexAgentMessageItem, u as CodexAppServerError, v as CodexAppServerEvent, w as CodexAppServerItem, x as CodexAppServerNotification, y as CodexAppServerSessionRecord, z as CodexCommandExecution, D as CodexCommandExecutionItem, E as CodexConfig, F as CodexContextCompaction, G as CodexEffortLevel, H as CodexErrorEvent, I as CodexErrorItem, J as CodexErrorParams, K as CodexEvent, L as CodexFileChange, M as CodexFileChangeItem, N as CodexFileUpdate, O as CodexItem, P as CodexItemCompleted, Q as CodexItemCompletedEvent, R as CodexItemParams, S as CodexItemStarted, T as CodexItemStartedEvent, U as CodexItemUpdatedEvent, V as CodexLocalImageInput, W as CodexMcpToolCall, X as CodexMcpToolCallAppContext, Y as CodexMcpToolCallError, Z as CodexMcpToolCallItem, _ as CodexMcpToolCallResult, $ as CodexPlan, a0 as CodexReasoning, a1 as CodexReasoningItem, a2 as CodexSessionRecord, a3 as CodexTextInput, a4 as CodexThread, a5 as CodexThreadStarted, a6 as CodexThreadStartedEvent, a7 as CodexThreadStartedParams, a8 as CodexThreadTokenUsage, a9 as CodexTodoListItem, aa as CodexTokenUsageBreakdown, ab as CodexTokenUsageParams, ac as CodexTokenUsageUpdated, ad as CodexTurn, ae as CodexTurnCompleted, af as CodexTurnCompletedEvent, ag as CodexTurnError, ah as CodexTurnFailedEvent, ai as CodexTurnParams, aj as CodexTurnStarted, ak as CodexTurnStartedEvent, al as CodexUsage, am as CodexUserInput, an as CodexUserMessage, ao as CodexWebSearch, ap as CodexWebSearchItem, aq as ComputeConfig, ar as ComputeConfig1, as as ConfigMetadata, at as Cost, au as Cost1, av as CronTrigger, aw as DeltaFrame, ax as DoneFrame, ay as Duration, az as EffortLevel, aA as EllipsisGrant, aB as EllipsisPermissions, aC as EnvironmentBaseBuild, aD as EnvironmentConfig, aE as EnvironmentHooks, aF as EnvironmentHooks1, aG as EnvironmentOutputPayload, aH as EnvironmentOutputRecord, aI as EnvironmentPhasePayload, aJ as EnvironmentPhaseRecord, aK as EnvironmentReadyPayload, aL as EnvironmentReadyRecord, aM as EnvironmentScript, aN as EnvironmentSource, aO as EnvironmentVariable, aP as ErrorFrame, aQ as GeminiConfig, aR as GeminiErrorEvent, aS as GeminiInitEvent, aT as GeminiMessageEvent, aU as GeminiModelStats, aV as GeminiResultEvent, aW as GeminiSessionRecord, aX as GeminiStreamEvent, aY as GeminiStreamStats, aZ as GeminiToolError, a_ as GeminiToolResultEvent, a$ as GeminiToolUseEvent, b0 as GithubAccountFilter, b1 as GithubAccountSelector, b2 as GithubAccountSnippet, b3 as GithubAccountType, b4 as GithubCheckRunEvent, b5 as GithubCheckSuiteEvent, b6 as GithubIssueEvent, b7 as GithubPermissions, b8 as GithubPullRequestEvent, b9 as GithubPushEvent, ba as GithubReleaseEvent, bb as GithubStatusEvent, bc as GithubWorkflowRunEvent, bd as HandlerService, be as HeartbeatFrame, bf as InputContract, bg as IssueAction, bh as LegacyAssistantPayload, bi as LegacyNativeUsage, bj as LegacyResultPayload, bk as Level, bl as LifecycleSessionRecord, bm as LinearIssueAction, bn as LinearIssueEvent, bo as LlmCost, bp as LlmCostSplit, bq as McpRemoteServer, br as McpServerRef, bs as McpStdioServer, bt as MemorySize, bu as MessageDeliveredPayload, bv as MessageDeliveredRecord, bw as MessageReceivedPayload, bx as MessageReceivedRecord, by as MessageRequeuedPayload, bz as MessageRequeuedRecord, bA as ModelLlmCostSplit, bB as ModelTokenCounts, bC as OutputConfig, bD as PermissionsConfig, bE as PermissionsConfig1, bF as PlatformSessionRecord, bG as PromptBlockedReason, bH as PullRequestAction, bI as ReactCheckRun, bJ as ReactCheckSuite, bK as ReactIssue, bL as ReactLinearIssue, bM as ReactPullRequest, bN as ReactPush, bO as ReactRelease, bP as ReactSentry, bQ as ReactSlackChannel, bR as ReactStatus, bS as ReactTrigger, bT as ReactWorkflowRun, bU as RecordsAppendFrame, bV as ReleaseAction, bW as RepositoryFilter, bX as RepositoryRef, bY as Review, bZ as ReviewComment, b_ as ReviewConfig, b$ as ReviewConfigsListResponse, c0 as ReviewPullRequest, c1 as ReviewPullRequestAuthor, c2 as ReviewReviewer, c3 as ReviewSummary, c4 as ReviewsListResponse, c5 as SdkAssistantRecord, c6 as SdkCacheCreation, c7 as SdkContentBlock, c8 as SdkRateLimitRecord, c9 as SdkRecord, ca as SdkResultRecord, cb as SdkServerToolResultBlock, cc as SdkServerToolUseBlock, cd as SdkSystemRecord, ce as SdkTextBlock, cf as SdkThinkingBlock, cg as SdkToolResultBlock, ch as SdkToolUseBlock, ci as SdkUserRecord, cj as SendSessionMessageRequest, ck as SentryAction, cl as SentryAlertEvent, cm as Session, cn as Session1, co as SessionAgent, cp as SessionArchived, cq as SessionAttribution, cr as SessionClosedPayload, cs as SessionClosedRecord, ct as SessionConfig, cu as SessionConversation, cv as SessionConversationConfig, cw as SessionEnvironment, cx as SessionEventActor, cy as SessionFrame, cz as SessionGit, cA as SessionGitCommit, cB as SessionGitFile, cC as SessionGitPr, cD as SessionGitRepo, cE as SessionHandler, cF as SessionMessage, cG as SessionMessageImage, cH as SessionMessageResponse, cI as SessionMessageStatus, cJ as SessionOutput, cK as SessionParent, cL as SessionPrompting, cM as SessionRecord, cN as SessionRecordsListResponse, cO as SessionResponse, cP as SessionSource, cQ as SessionState, cR as SessionStopped, cS as SessionStreamFrame, cT as SessionSummary, cU as SessionTurn, cV as SessionTurnResponse, cW as SessionTurnsListResponse, cX as SessionsListResponse, cY as SettingsRef, cZ as SkillRef, c_ as SlackChannelCreatedEvent, c$ as SlackMessageEvent, d0 as SnapshotFrame, d1 as StatusAction, d2 as StreamFrame, d3 as TokenCounts, d4 as Tokens, d5 as Tokens1, d6 as TokensInfo, d7 as TurnEndedPayload, d8 as TurnEndedRecord, d9 as TurnQueuedPayload, da as TurnQueuedRecord, db as TurnReason, dc as TurnStartedPayload, dd as TurnStartedRecord, de as TurnStatus, df as UnknownSessionRecord, dg as UpdateSessionRequest, dh as WorkflowRunAction, di as paths } from './types-BrLpRRde.js';
 
 /**
  * Frames on /v1/sessions/stream, /v1/agents/stream and /v1/vm-executions/{id}/stream. Ignore unknown frame types.
@@ -26,11 +26,11 @@ type Session = {
      */
     budget: number;
     /**
-     * Claude Code input and native options. Set exactly one of claude_code or codex.
+     * Claude Code input and native options. Set exactly one of claude_code, codex, or gemini.
      */
     claude_code: ClaudeConfig | null;
     /**
-     * Codex input and native options. Set exactly one of claude_code or codex.
+     * Codex input and native options. Set exactly one of claude_code, codex, or gemini.
      */
     codex: CodexConfig | null;
     conversation: SessionConversation;
@@ -44,6 +44,10 @@ type Session = {
      * The typed external event that started the session; null for direct and scheduled starts.
      */
     event: (GithubPullRequestEvent | GithubIssueEvent | GithubPushEvent | GithubCheckRunEvent | GithubCheckSuiteEvent | GithubWorkflowRunEvent | GithubStatusEvent | GithubReleaseEvent | LinearIssueEvent | SlackMessageEvent | SlackChannelCreatedEvent | SentryAlertEvent) | null;
+    /**
+     * Gemini CLI input and native options. Set exactly one of claude_code, codex, or gemini.
+     */
+    gemini: GeminiConfig | null;
     /**
      * What the session did to git, one entry per repository in its workspace: the commit and branch it sits on, per-file line counts for its uncommitted changes, and the pull requests it opened. Null if nothing was ever captured.
      */
@@ -94,11 +98,19 @@ type Session = {
         [k: string]: unknown;
     };
     codex: null;
+    gemini: null;
 } | {
     claude_code: null;
     codex: {
         [k: string]: unknown;
     };
+    gemini: null;
+} | {
+    claude_code: null;
+    codex: null;
+    gemini: {
+        [k: string]: unknown;
+    };
 });
 /**
  * What one session runs on: its selected harness, where it runs, what it
@@ -116,15 +128,19 @@ type Session = {
 type SessionConfig = {
     budget: BudgetConfig;
     /**
-     * Claude Code input and native options. Set exactly one of claude_code or codex.
+     * Claude Code input and native options. Set exactly one of claude_code, codex, or gemini.
      */
     claude_code: ClaudeConfig | null;
     /**
-     * Codex input and native options. Set exactly one of claude_code or codex.
+     * Codex input and native options. Set exactly one of claude_code, codex, or gemini.
      */
     codex: CodexConfig | null;
     conversation: SessionConversationConfig;
     environment: string | EnvironmentConfig;
+    /**
+     * Gemini CLI input and native options. Set exactly one of claude_code, codex, or gemini.
+     */
+    gemini: GeminiConfig | null;
     /**
      * Arbitrary string key/value metadata stored on every session.
      */
@@ -139,11 +155,19 @@ type SessionConfig = {
         [k: string]: unknown;
     };
     codex: null;
+    gemini: null;
 } | {
     claude_code: null;
     codex: {
         [k: string]: unknown;
     };
+    gemini: null;
+} | {
+    claude_code: null;
+    codex: null;
+    gemini: {
+        [k: string]: unknown;
+    };
 });
 type EffortLevel = 'low' | 'medium' | 'high' | 'xhigh' | 'max';
 type CodexEffortLevel = 'none' | 'low' | 'medium' | 'high' | 'xhigh' | 'max';
@@ -462,9 +486,11 @@ interface Duration {
 }
 /**
  * Environment lifecycle scripts, in order: build_base, after_checkout,
- * before_start. The first two produce reusable snapshots; before_start runs
- * before an agent starts or resumes its session. Scripts run as the environment's
- * user in the workspace directory `/sandbox`. A nonzero exit fails the session.
+ * before_start, validate. The first two produce reusable snapshots;
+ * before_start runs before an agent starts or resumes its session, and
+ * validate runs last to check that the environment has what the agent needs.
+ * Scripts run as the environment's user in the workspace directory
+ * `/sandbox`. A nonzero exit fails the session.
  *
  * Legacy post_start/post_clone scripts remain supported for existing configs;
  * both run after workspace preparation, before the agent starts or resumes.
@@ -491,6 +517,10 @@ interface EnvironmentHooks {
      * Legacy session startup script. Use before_start in new configurations.
      */
     post_start: string | null;
+    /**
+     * Check that the environment works, for example that required tools are on PATH. Runs last, after before_start, each time a session starts or resumes and each time the environment is built after a change. A nonzero exit fails the session or the build. Not cached.
+     */
+    validate: EnvironmentScript | string | null;
 }
 /**
  * An inline shell script run as the environment's user, with the workspace
@@ -571,6 +601,19 @@ interface EnvironmentVariable {
     name: string;
     value: string | null;
 }
+/**
+ * Native options supported by the current Gemini CLI adapter.
+ */
+interface GeminiConfig {
+    /**
+     * The model the session runs on: a Gemini id from the models table. Required.
+     */
+    model: string;
+    /**
+     * The initial user message, passed verbatim. Omit to start an interactive session with no turn, waiting for a message.
+     */
+    prompt: string | null;
+}
 /**
  * JSON Schema for the harness's structured result, when certified.
  */
@@ -868,7 +911,7 @@ interface SessionPrompting {
  */
 interface Cost {
     /**
-     * What Ellipsis charged to credit, in millicents. It is everything except subscription tokens, and it is what the budget caps.
+     * What Ellipsis charged to credit, in millicents. It is everything except subscription tokens.
      */
     charged: number;
     /**
@@ -885,7 +928,7 @@ interface Cost {
      */
     memory: number;
     /**
-     * Everything it cost, whoever paid, in millicents. It is the sum of llm.all.total, cpu, memory, and fee.
+     * Everything it cost, whoever paid, in millicents. It is the sum of llm.all.total, cpu, memory, and fee, and it is what the budget caps.
      */
     total: number;
 }
@@ -990,9 +1033,11 @@ interface ComputeConfig1 {
 }
 /**
  * Environment lifecycle scripts, in order: build_base, after_checkout,
- * before_start. The first two produce reusable snapshots; before_start runs
- * before an agent starts or resumes its session. Scripts run as the environment's
- * user in the workspace directory `/sandbox`. A nonzero exit fails the session.
+ * before_start, validate. The first two produce reusable snapshots;
+ * before_start runs before an agent starts or resumes its session, and
+ * validate runs last to check that the environment has what the agent needs.
+ * Scripts run as the environment's user in the workspace directory
+ * `/sandbox`. A nonzero exit fails the session.
  *
  * Legacy post_start/post_clone scripts remain supported for existing configs;
  * both run after workspace preparation, before the agent starts or resumes.
@@ -1019,6 +1064,10 @@ interface EnvironmentHooks1 {
      * Legacy session startup script. Use before_start in new configurations.
      */
     post_start: string | null;
+    /**
+     * Check that the environment works, for example that required tools are on PATH. Runs last, after before_start, each time a session starts or resumes and each time the environment is built after a change. A nonzero exit fails the session or the build. Not cached.
+     */
+    validate: EnvironmentScript | string | null;
 }
 interface GithubPullRequestEvent {
     action: PullRequestAction | 'review_commented';
@@ -1386,7 +1435,7 @@ interface SessionTurn {
  */
 interface Cost1 {
     /**
-     * What Ellipsis charged to credit, in millicents. It is everything except subscription tokens, and it is what the budget caps.
+     * What Ellipsis charged to credit, in millicents. It is everything except subscription tokens.
      */
     charged: number;
     /**
@@ -1403,7 +1452,7 @@ interface Cost1 {
      */
     memory: number;
     /**
-     * Everything it cost, whoever paid, in millicents. It is the sum of llm.all.total, cpu, memory, and fee.
+     * Everything it cost, whoever paid, in millicents. It is the sum of llm.all.total, cpu, memory, and fee, and it is what the budget caps.
      */
     total: number;
 }
@@ -1477,6 +1526,10 @@ interface Agent {
      * The agent's account-unique addressable name (a slug of its display name); usable anywhere an agent is referenced, interchangeably with the id.
      */
     name: string | null;
+    /**
+     * When the agent's cron trigger next starts a session. Null when the agent has no cron trigger, its trigger is paused, or the agent is disabled.
+     */
+    next_run_at: string | null;
     /**
      * The open pull request that adds this agent's file. Non-null means the agent is not live yet: it starts running once the pull request merges and syncs.
      */
@@ -1557,9 +1610,11 @@ interface VMExecutionResponse {
 }
 /**
  * Environment lifecycle scripts, in order: build_base, after_checkout,
- * before_start. The first two produce reusable snapshots; before_start runs
- * before an agent starts or resumes its session. Scripts run as the environment's
- * user in the workspace directory `/sandbox`. A nonzero exit fails the session.
+ * before_start, validate. The first two produce reusable snapshots;
+ * before_start runs before an agent starts or resumes its session, and
+ * validate runs last to check that the environment has what the agent needs.
+ * Scripts run as the environment's user in the workspace directory
+ * `/sandbox`. A nonzero exit fails the session.
  *
  * Legacy post_start/post_clone scripts remain supported for existing configs;
  * both run after workspace preparation, before the agent starts or resumes.
@@ -1586,6 +1641,10 @@ interface EnvironmentHooks2 {
      * Legacy session startup script. Use before_start in new configurations.
      */
     post_start: string | null;
+    /**
+     * Check that the environment works, for example that required tools are on PATH. Runs last, after before_start, each time a session starts or resumes and each time the environment is built after a change. A nonzero exit fails the session or the build. Not cached.
+     */
+    validate: EnvironmentScript | string | null;
 }
 interface SandboxRepository {
     id: number;
@@ -1878,9 +1937,9 @@ declare class EllipsisAccountBilling {
      *
      * Explain whether your account can start sessions.
      *
-     * Uses the same account gate as session admission, including credit,
-     * contact email, and personal subscription eligibility. Scoped
-     * spend limits are reported separately by /v1/account/budget.
+     * Uses the same account gate as session admission, including credit
+     * and contact email. Scoped spend limits are reported separately by
+     * /v1/account/budget.
      *
      * Required permissions: read:account.
      * API key: Supported.
@@ -1905,7 +1964,7 @@ declare class EllipsisAccountModels {
      * client's model picker can never drift from what's offered. The
      * selectable set is global.
      *
-     * Required permissions: read:templates.
+     * Required permissions: read:account.
      * API key: Supported.
      * CLI user token: Supported.
      * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
@@ -2275,6 +2334,7 @@ declare class EllipsisAgents {
         conversation?: S['SessionConversationConfig-Input'];
         environment?: string | S['EnvironmentConfig-Input'] | null;
         force_rebuild?: boolean;
+        gemini?: S['GeminiOverrides'] | null;
         images?: (S['ImageAttachment'])[];
         input?: Record<string, unknown> | null;
         metadata?: Record<string, string | null>;
@@ -2396,10 +2456,11 @@ declare class EllipsisAnalytics {
      * The same data as the analytics dashboard.
      *
      * Windowing: pass explicit start/end, or days (default: the last
-     * 30 days). account_type in all|user|bot scopes the authors (bot =
-     * the apps/agents). Available to all credential types: the
-     * responses expose the organization's own GitHub PR/review activity,
-     * no secrets.
+     * 30 days). `interval` names the width of each entry in `series`,
+     * chosen from the window's length. account_type in all|user|bot
+     * scopes the authors (bot = the apps/agents). Available to all
+     * credential types: the responses expose the organization's own
+     * GitHub PR/review activity, no secrets.
      *
      * Required permissions: read:account.
      * API key: Supported.
@@ -2422,7 +2483,9 @@ declare class EllipsisAnalytics {
      * Return pull-request analytics.
      *
      * Windowing: pass explicit start/end, or days (default: the last
-     * 30 days). account_type in all|user|bot scopes the authors.
+     * 30 days). `interval` names the width of each entry in `series`,
+     * chosen from the window's length. account_type in all|user|bot
+     * scopes the authors.
      *
      * Required permissions: read:account.
      * API key: Supported.
@@ -2447,7 +2510,8 @@ declare class EllipsisAnalytics {
      * account_type scopes reviewers (bot|user|all) — e.g. "what apps
      * review the most PRs?" is the reviewer facets here with
      * account_type=bot. Windowing: pass explicit start/end, or days
-     * (default: the last 30 days).
+     * (default: the last 30 days). `interval` names the width of each
+     * entry in `series`, chosen from the window's length.
      *
      * Required permissions: read:account.
      * API key: Supported.
@@ -2617,8 +2681,9 @@ declare class EllipsisHandlers {
      * Only sessions carrying this exact saved handler id are counted;
      * legacy sessions without handler provenance are excluded.
      *
-     * spend_windows reports current trailing 1-, 7-, and 28-day credit
-     * debits and effective handler budgets across all attributed sessions.
+     * spend_windows reports current trailing 1-, 7-, and 28-day spend,
+     * including subscription tokens, and effective handler budgets across
+     * all attributed sessions.
      * Those windows use usage timestamps and are independent of start/end.
      *
      * Requires configs:read matching handlers/{service} and unrestricted
@@ -3250,6 +3315,7 @@ declare class EllipsisSessions {
         conversation?: S['SessionConversationConfig-Input'];
         environment?: string | S['EnvironmentConfig-Input'] | null;
         force_rebuild?: boolean;
+        gemini?: S['GeminiConfig-Input'] | null;
         images?: (S['ImageAttachment'])[];
         metadata?: Record<string, string>;
         output?: S['OutputConfig'] | null;
@@ -3357,144 +3423,6 @@ declare class EllipsisSupport {
     readonly slack: EllipsisSupportSlack;
     constructor(transport: Transport);
 }
-declare class EllipsisTemplates {
-    private readonly transport;
-    constructor(transport: Transport);
-    /**
-     * Get Agent Template
-     *
-     * Return one built-in agent template by slug.
-     *
-     * Required permissions: read:templates.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    get(id: string): Promise<S['AgentTemplate']>;
-    /**
-     * List Agent Templates
-     *
-     * List the built-in starter agent templates.
-     *
-     * Behind auth but not account-scoped — the data is static
-     * product content shared by the dashboard, landing site, and CLI.
-     *
-     * Required permissions: read:templates.
-     * API key: Supported.
-     * CLI user token: Supported.
-     * Session token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    list(): Promise<S['AgentTemplatesListResponse']>;
-}
-declare class EllipsisUserSubscriptionTokens {
-    private readonly transport;
-    constructor(transport: Transport);
-    /**
-     * Delete Subscription Token
-     *
-     * Delete your subscription token for a provider.
-     *
-     * Your sessions stop billing your subscription immediately, and the
-     * usage reading goes with it — it described that token's plan.
-     *
-     * Required permissions: delete:user.
-     * API key: Requires a CLI user token.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    delete(provider: S['SubscriptionProvider']): Promise<void>;
-    /**
-     * Get Subscription Token
-     *
-     * Get one provider's subscription token.
-     *
-     * `configured` is false when nothing is saved. The token itself is
-     * never returned, only `token_last4`.
-     *
-     * Required permissions: read:user.
-     * API key: Requires a CLI user token.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    get(provider: S['SubscriptionProvider']): Promise<S['SubscriptionToken']>;
-    /**
-     * List Subscription Tokens
-     *
-     * List your subscription tokens.
-     *
-     * One entry per supported provider, whether or not you have saved a
-     * token for it. Tokens are write-only: the response carries only
-     * `token_last4`, never the token.
-     *
-     * Required permissions: read:user.
-     * API key: Requires a CLI user token.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    list(): Promise<S['SubscriptionTokensListResponse']>;
-    /**
-     * Set Subscription Token
-     *
-     * Save your subscription token for a provider.
-     *
-     * Replaces whatever was stored. The token is saved DISABLED and
-     * routes nothing until `POST /v1/user/subscription_tokens/{provider}/verify`
-     * succeeds. For Claude, use `claude setup-token`. For Codex, paste
-     * the auth.json credentials from a ChatGPT login. Each subscription
-     * pays only for models from its corresponding provider.
-     *
-     * Required permissions: write:user.
-     * API key: Requires a CLI user token.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    set(provider: S['SubscriptionProvider'], options: {
-        token: string;
-    }): Promise<S['SubscriptionToken']>;
-    /**
-     * Get Subscription Usage
-     *
-     * Get your plan's last-observed rate-limit windows.
-     *
-     * Display-only, and only as fresh as your last call through Ellipsis
-     * (`observed_at`) — the same plan used outside Ellipsis moves the
-     * real windows without us seeing them. Null unless a token is
-     * enabled for the provider: a disabled token routes nothing, so any
-     * reading behind it is stale by construction.
-     *
-     * Required permissions: read:user.
-     * API key: Requires a CLI user token.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    usage(provider: S['SubscriptionProvider']): Promise<S['SubscriptionUsageResponse']>;
-    /**
-     * Verify Subscription Token
-     *
-     * Verify the stored token by using it.
-     *
-     * Makes one minimal call on the exact runtime path, so a pass proves
-     * the token is what will pay. This is the gate on routing: success
-     * enables the token, failure disables it, so verifying a revoked
-     * token is how you stop it routing. A 200 with `ok: false` is the
-     * normal way a bad token is reported — it is an answer, not a
-     * transport failure.
-     *
-     * Required permissions: write:user.
-     * API key: Requires a CLI user token.
-     * CLI user token: Supported.
-     * Session token: Not supported by session tokens, even with permissions.ellipsis enabled.
-     * Higher permission levels include lower levels: read < write < delete.
-     */
-    verify(provider: S['SubscriptionProvider']): Promise<S['VerifySubscriptionTokenResponse']>;
-}
 declare class EllipsisUserTokens {
     private readonly transport;
     constructor(transport: Transport);
@@ -3521,7 +3449,6 @@ declare class EllipsisUserTokens {
 }
 declare class EllipsisUser {
     private readonly transport;
-    readonly subscriptionTokens: EllipsisUserSubscriptionTokens;
     readonly tokens: EllipsisUserTokens;
     constructor(transport: Transport);
 }
@@ -3800,7 +3727,6 @@ declare class Ellipsis {
     readonly secrets: EllipsisSecrets;
     readonly sessions: EllipsisSessions;
     readonly support: EllipsisSupport;
-    readonly templates: EllipsisTemplates;
     readonly user: EllipsisUser;
     readonly vmExecutions: EllipsisVmExecutions;
     readonly vmImages: EllipsisVmImages;