@ellipsis-dev/sdk 0.38.0 → 0.44.0

package/schema/openapi.v1.json

@@ -5623,7 +5623,7 @@
       },
       "ComputeConfig-Input": {
         "additionalProperties": false,
-        "description": "Environment compute sizing. Every field is optional; an omitted field\ninherits the platform default (2 vCPU / 4096 MiB / 3600s). A resolved value\noutside the platform bounds fails validation loudly (a sync error on the\nconfig) rather than being clamped silently.\n\n`memory` and `timeout` each accept a shorthand string (\"8GB\", \"30m\") or an\nexplicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /\n`timeout_seconds` properties resolve either form to the canonical integer\nthe environment is sized with.\n\n`timeout` is the max wall-clock the agent may run in one environment before\nit is stopped, capped at 1h (equal to the default, so today the knob only\nshortens a session; the cap matches the 1-hour validity of the session's\nGitHub token).\n\nCompute currently uses a temporary flat one-cent amount each time an\nenvironment is started for a session, subject to the account's existing\nfree-compute exemptions.",
+        "description": "The size and lifetime of the environment. Every field is optional. An\nomitted field takes the platform default (2 vCPUs, 4096 MiB, a 4h timeout,\n10m idle). A value outside the platform bounds fails validation.\n\n`memory` accepts a string such as `8GB` or an object such as `{gb: 8}`.\n`timeout` and `idle` accept a duration string such as `30m`, `8h`, or\n`1h30m`.\n\n`timeout` is the longest one message's work may run before it is stopped,\n1m to 22h, default 4h. The message ends `stopped` with reason `timeout`.\n\n`idle` is how long the environment stays awake after the agent finishes\nwith no message waiting, 10s to 1h, default 10m. Then it pauses, and the\nnext message resumes it. Only an interactive session pauses. A session\nthat runs once ends when its message ends.",
         "properties": {
           "cpu": {
             "anyOf": [
@@ -5638,6 +5638,17 @@
             ],
             "title": "Cpu"
           },
+          "idle": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Idle"
+          },
           "memory": {
             "anyOf": [
               {
@@ -5657,9 +5668,6 @@
               {
                 "type": "string"
               },
-              {
-                "$ref": "#/components/schemas/Duration-Input"
-              },
               {
                 "type": "null"
               }
@@ -5672,7 +5680,7 @@
       },
       "ComputeConfig-Output": {
         "additionalProperties": false,
-        "description": "Environment compute sizing. Every field is optional; an omitted field\ninherits the platform default (2 vCPU / 4096 MiB / 3600s). A resolved value\noutside the platform bounds fails validation loudly (a sync error on the\nconfig) rather than being clamped silently.\n\n`memory` and `timeout` each accept a shorthand string (\"8GB\", \"30m\") or an\nexplicit units object ({gb: 8}, {minutes: 30}); the `memory_mib` /\n`timeout_seconds` properties resolve either form to the canonical integer\nthe environment is sized with.\n\n`timeout` is the max wall-clock the agent may run in one environment before\nit is stopped, capped at 1h (equal to the default, so today the knob only\nshortens a session; the cap matches the 1-hour validity of the session's\nGitHub token).\n\nCompute currently uses a temporary flat one-cent amount each time an\nenvironment is started for a session, subject to the account's existing\nfree-compute exemptions.",
+        "description": "The size and lifetime of the environment. Every field is optional. An\nomitted field takes the platform default (2 vCPUs, 4096 MiB, a 4h timeout,\n10m idle). A value outside the platform bounds fails validation.\n\n`memory` accepts a string such as `8GB` or an object such as `{gb: 8}`.\n`timeout` and `idle` accept a duration string such as `30m`, `8h`, or\n`1h30m`.\n\n`timeout` is the longest one message's work may run before it is stopped,\n1m to 22h, default 4h. The message ends `stopped` with reason `timeout`.\n\n`idle` is how long the environment stays awake after the agent finishes\nwith no message waiting, 10s to 1h, default 10m. Then it pauses, and the\nnext message resumes it. Only an interactive session pauses. A session\nthat runs once ends when its message ends.",
         "properties": {
           "cpu": {
             "anyOf": [
@@ -5687,6 +5695,17 @@
             ],
             "title": "Cpu"
           },
+          "idle": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Idle"
+          },
           "memory": {
             "anyOf": [
               {
@@ -5706,9 +5725,6 @@
               {
                 "type": "string"
               },
-              {
-                "$ref": "#/components/schemas/Duration-Output"
-              },
               {
                 "type": "null"
               }
@@ -5718,6 +5734,7 @@
         },
         "required": [
           "cpu",
+          "idle",
           "memory",
           "timeout"
         ],
@@ -6165,7 +6182,9 @@
           "github_installation_unsuspended",
           "credit_granted",
           "refund_issued",
-          "auto_recharge_updated"
+          "auto_recharge_updated",
+          "platform_fee_updated",
+          "github_proxy_updated"
         ],
         "title": "CustomerAuditLogEventType",
         "type": "string"
@@ -6543,99 +6562,6 @@
         "title": "DeveloperUsage",
         "type": "object"
       },
-      "Duration-Input": {
-        "additionalProperties": false,
-        "description": "A duration as explicit units, summed. Set any of `hours`/`minutes`/\n`seconds` (at least one). The alternative to the `30m`-style shorthand\nstring wherever a duration is accepted.",
-        "properties": {
-          "hours": {
-            "anyOf": [
-              {
-                "minimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Hours"
-          },
-          "minutes": {
-            "anyOf": [
-              {
-                "minimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Minutes"
-          },
-          "seconds": {
-            "anyOf": [
-              {
-                "minimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Seconds"
-          }
-        },
-        "title": "Duration",
-        "type": "object"
-      },
-      "Duration-Output": {
-        "additionalProperties": false,
-        "description": "A duration as explicit units, summed. Set any of `hours`/`minutes`/\n`seconds` (at least one). The alternative to the `30m`-style shorthand\nstring wherever a duration is accepted.",
-        "properties": {
-          "hours": {
-            "anyOf": [
-              {
-                "minimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Hours"
-          },
-          "minutes": {
-            "anyOf": [
-              {
-                "minimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Minutes"
-          },
-          "seconds": {
-            "anyOf": [
-              {
-                "minimum": 0.0,
-                "type": "integer"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "title": "Seconds"
-          }
-        },
-        "required": [
-          "hours",
-          "minutes",
-          "seconds"
-        ],
-        "title": "Duration",
-        "type": "object"
-      },
       "EffortLevel": {
         "enum": [
           "low",
@@ -8145,7 +8071,8 @@
           "unsupported_configuration",
           "execution_disabled",
           "interrupted",
-          "stopped"
+          "stopped",
+          "timeout"
         ],
         "title": "ErrorReason",
         "type": "string"
@@ -13983,6 +13910,68 @@
         "title": "PatchAccountSettingsRequest",
         "type": "object"
       },
+      "PatchUserSettingsRequest": {
+        "additionalProperties": false,
+        "description": "Change the keys sent; every other key stays as it is.",
+        "properties": {
+          "web": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/PatchUserSettingsWeb"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "title": "PatchUserSettingsRequest",
+        "type": "object"
+      },
+      "PatchUserSettingsWeb": {
+        "additionalProperties": false,
+        "properties": {
+          "ui": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/PatchUserSettingsWebUi"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "title": "PatchUserSettingsWeb",
+        "type": "object"
+      },
+      "PatchUserSettingsWebUi": {
+        "additionalProperties": false,
+        "properties": {
+          "density": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/UiSize"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "font_size": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/UiSize"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "title": "PatchUserSettingsWebUi",
+        "type": "object"
+      },
       "PermissionsConfig-Input": {
         "additionalProperties": false,
         "description": "What the agent is allowed to touch, per credential the platform mints\ninto its session's environment. Distinct from `environment:`, which is\nwhere the agent runs; this is what it may do from there.\n\n`ellipsis` scopes the session's Ellipsis API token (`ELLIPSIS_API_TOKEN`,\nwhat the `ellipsis` CLI running inside the session authenticates with).\n`true` / the string `all` (the default) grant the full session token\nceiling \u2014 everything a session token can ever do. A map narrows it per\nresource (see `EllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the session's GitHub installation token (`GH_TOKEN`) \u2014\nsee `GithubPermissions`. GitHub enforces it at mint time.",
@@ -14124,6 +14113,135 @@
         "title": "PromptBlockedReason",
         "type": "string"
       },
+      "ProxyRequest": {
+        "description": "One request an environment sent through Ellipsis to GitHub, as the\nproxy recorded it.",
+        "properties": {
+          "connection": {
+            "description": "Where it went. `github` today.",
+            "title": "Connection",
+            "type": "string"
+          },
+          "created_at": {
+            "description": "When the request ended.",
+            "format": "date-time",
+            "title": "Created At",
+            "type": "string"
+          },
+          "customer_id": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The account.",
+            "title": "Customer Id"
+          },
+          "duration_ms": {
+            "description": "Milliseconds from arrival to the end.",
+            "title": "Duration Ms",
+            "type": "integer"
+          },
+          "id": {
+            "title": "Id",
+            "type": "string"
+          },
+          "method": {
+            "description": "The HTTP method as the environment sent it.",
+            "title": "Method",
+            "type": "string"
+          },
+          "path": {
+            "description": "The path as the environment sent it.",
+            "title": "Path",
+            "type": "string"
+          },
+          "reason": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Why Ellipsis answered itself or the transfer ended early, null when GitHub answered in full.",
+            "title": "Reason"
+          },
+          "request_bytes": {
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Body bytes sent, null when none was read.",
+            "title": "Request Bytes"
+          },
+          "response_bytes": {
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Body bytes received, null when nothing was forwarded.",
+            "title": "Response Bytes"
+          },
+          "sandbox_id": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The environment that sent it, the id `GET /v1/vms/{id}` reads.",
+            "title": "Sandbox Id"
+          },
+          "status_code": {
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The status the environment received.",
+            "title": "Status Code"
+          },
+          "upstream_host": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The host Ellipsis forwarded it to, null when Ellipsis answered itself.",
+            "title": "Upstream Host"
+          }
+        },
+        "required": [
+          "id",
+          "connection",
+          "method",
+          "path",
+          "duration_ms",
+          "created_at"
+        ],
+        "title": "ProxyRequest",
+        "type": "object"
+      },
       "PublicFeeSchedule": {
         "description": "Rates in millicents. purchase_fee_fraction is a fraction, for example 0.10.",
         "properties": {
@@ -15737,6 +15855,11 @@
             "title": "Base Sha",
             "type": "string"
           },
+          "blocking": {
+            "description": "Blocking comments posted to GitHub.",
+            "title": "Blocking",
+            "type": "integer"
+          },
           "budget": {
             "description": "The reviewer sessions' spend budgets together, in millicents.",
             "title": "Budget",
@@ -15792,11 +15915,6 @@
             ],
             "title": "Finalized At"
           },
-          "findings": {
-            "description": "Comments the reviewers returned, posted to GitHub or not.",
-            "title": "Findings",
-            "type": "integer"
-          },
           "github_review_id": {
             "anyOf": [
               {
@@ -15818,6 +15936,11 @@
             "title": "Id",
             "type": "string"
           },
+          "non_blocking": {
+            "description": "Comments posted to GitHub that do not block.",
+            "title": "Non Blocking",
+            "type": "integer"
+          },
           "pull_request": {
             "anyOf": [
               {
@@ -15855,7 +15978,8 @@
           "base_sha",
           "head_sha",
           "status",
-          "findings",
+          "blocking",
+          "non_blocking",
           "created_at",
           "reviewers",
           "comments",
@@ -16208,9 +16332,14 @@
             "title": "Base Sha",
             "type": "string"
           },
-          "created_at": {
-            "format": "date-time",
-            "title": "Created At",
+          "blocking": {
+            "description": "Blocking comments posted to GitHub.",
+            "title": "Blocking",
+            "type": "integer"
+          },
+          "created_at": {
+            "format": "date-time",
+            "title": "Created At",
             "type": "string"
           },
           "error": {
@@ -16247,11 +16376,6 @@
             ],
             "title": "Finalized At"
           },
-          "findings": {
-            "description": "Comments the reviewers returned, posted to GitHub or not.",
-            "title": "Findings",
-            "type": "integer"
-          },
           "github_review_id": {
             "anyOf": [
               {
@@ -16273,6 +16397,11 @@
             "title": "Id",
             "type": "string"
           },
+          "non_blocking": {
+            "description": "Comments posted to GitHub that do not block.",
+            "title": "Non Blocking",
+            "type": "integer"
+          },
           "pull_request": {
             "anyOf": [
               {
@@ -16299,7 +16428,8 @@
           "base_sha",
           "head_sha",
           "status",
-          "findings",
+          "blocking",
+          "non_blocking",
           "created_at"
         ],
         "title": "ReviewSummary",
@@ -19330,6 +19460,18 @@
       "SessionMessageImage": {
         "description": "One image on a message, metadata only. `index` is the N in the\n`[Image #N]` placeholder in the message body.",
         "properties": {
+          "id": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The image's ID. `GET /v1/sessions/{session_id}/images/{id}` returns its bytes. Null when the image can't be fetched.",
+            "title": "Id"
+          },
           "index": {
             "description": "1-based position: the N in `[Image #N]`.",
             "title": "Index",
@@ -19506,6 +19648,40 @@
         "title": "SessionPrompting",
         "type": "object"
       },
+      "SessionProxyResponse": {
+        "properties": {
+          "has_more": {
+            "default": false,
+            "description": "Whether more results exist past this page.",
+            "title": "Has More",
+            "type": "boolean"
+          },
+          "next_cursor": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Pass as `cursor` to fetch the next page. Null on the last page. Opaque \u2014 echo it back rather than parsing it.",
+            "title": "Next Cursor"
+          },
+          "proxy_requests": {
+            "items": {
+              "$ref": "#/components/schemas/ProxyRequest"
+            },
+            "title": "Proxy Requests",
+            "type": "array"
+          }
+        },
+        "required": [
+          "proxy_requests"
+        ],
+        "title": "SessionProxyResponse",
+        "type": "object"
+      },
       "SessionPullRequestReview": {
         "properties": {
           "body": {
@@ -21056,6 +21232,18 @@
         "title": "TokensInfo",
         "type": "object"
       },
+      "UiSize": {
+        "description": "A step on the dashboard's five-step scale, shared by every size setting.",
+        "enum": [
+          "xs",
+          "sm",
+          "md",
+          "lg",
+          "xl"
+        ],
+        "title": "UiSize",
+        "type": "string"
+      },
       "UninstallGithubAppRequest": {
         "properties": {
           "confirm_account_login": {
@@ -21255,17 +21443,35 @@
       },
       "UpdateSessionRequest": {
         "additionalProperties": false,
-        "description": "Set the session's archive state.",
+        "description": "Set the session's archive state, its summary, or both.",
         "properties": {
           "archived": {
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "type": "null"
+              }
+            ],
             "description": "True to archive the session; false to unarchive it.",
-            "title": "Archived",
-            "type": "boolean"
+            "title": "Archived"
+          },
+          "summary": {
+            "anyOf": [
+              {
+                "maxLength": 1000,
+                "minLength": 1,
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "A name for the session. It becomes the summary with source `user`, and Ellipsis never replaces it with a generated one.",
+            "title": "Summary"
           }
         },
-        "required": [
-          "archived"
-        ],
         "title": "UpdateSessionRequest",
         "type": "object"
       },
@@ -21341,6 +21547,53 @@
         "title": "UserPlan",
         "type": "object"
       },
+      "UserSettings": {
+        "description": "One user's own settings.",
+        "properties": {
+          "web": {
+            "$ref": "#/components/schemas/UserSettingsWeb"
+          }
+        },
+        "required": [
+          "web"
+        ],
+        "title": "UserSettings",
+        "type": "object"
+      },
+      "UserSettingsWeb": {
+        "description": "Settings for the web dashboard.",
+        "properties": {
+          "ui": {
+            "$ref": "#/components/schemas/UserSettingsWebUi"
+          }
+        },
+        "required": [
+          "ui"
+        ],
+        "title": "UserSettingsWeb",
+        "type": "object"
+      },
+      "UserSettingsWebUi": {
+        "description": "How the web dashboard looks.",
+        "properties": {
+          "density": {
+            "$ref": "#/components/schemas/UiSize",
+            "default": "md",
+            "description": "How much padding the dashboard uses."
+          },
+          "font_size": {
+            "$ref": "#/components/schemas/UiSize",
+            "default": "md",
+            "description": "How large the dashboard's text is."
+          }
+        },
+        "required": [
+          "density",
+          "font_size"
+        ],
+        "title": "UserSettingsWebUi",
+        "type": "object"
+      },
       "UserTokenApi": {
         "description": "A user token as shown in listings -- never includes the secret.",
         "properties": {
@@ -31428,7 +31681,7 @@
         "x-ellipsis-sdk-method": "sessions.get"
       },
       "put": {
-        "description": "Archive or unarchive a session and return it.\n\nSet archived to true to record the current server time and the\nauthenticated GitHub user. API-key requests record no user.\nRepeated archive requests preserve the original time and user.\nArchiving stops the message in progress. An archived session takes\nno messages (409 `session_archived`), and a reply on the Slack\nthread, pull request, issue, or Linear issue it answers starts a\nnew session. A session is also archived when it closes and after\nthe account's `archive_inactive_sessions_days` without a message.\nWhen the account sets session log retention, the session's\nrecords, messages, and prompt are deleted that many days after it\nwas archived (`archived.deletes_at`). The session itself stays.\n\nSet archived to false to clear both fields and let the session\ntake messages again. 409 `session_superseded` when a newer session\nnow answers the same thread.\n\nChanges are delivered to session and session-list streams.",
+        "description": "Archive or unarchive a session, or set its summary, and return it.\n\nSet archived to true to record the current server time and the\nauthenticated GitHub user. API-key requests record no user.\nRepeated archive requests preserve the original time and user.\nArchiving stops the message in progress. An archived session takes\nno messages (409 `session_archived`), and a reply on the Slack\nthread, pull request, issue, or Linear issue it answers starts a\nnew session. A session is also archived when it closes and after\nthe account's `archive_inactive_sessions_days` without a message.\nWhen the account sets session log retention, the session's\nrecords, messages, and prompt are deleted that many days after it\nwas archived (`archived.deletes_at`). The session itself stays.\n\nSet archived to false to clear both fields and let the session\ntake messages again. 409 `session_superseded` when a newer session\nnow answers the same thread.\n\nSet summary to name the session. The summary's source becomes\n`user`, and Ellipsis never replaces it with a generated one. With\nboth fields, the archive change applies first, and a refused\narchive change leaves the summary as it was.\n\nChanges are delivered to session and session-list streams.",
         "operationId": "update_session",
         "parameters": [
           {
@@ -32411,6 +32664,164 @@
         "x-ellipsis-undocumented": true
       }
     },
+    "/v1/sessions/{id}/proxy": {
+      "get": {
+        "description": "The requests the session's environment sent to GitHub through\nEllipsis, newest first. Each is one `proxy_requests` row as stored.",
+        "operationId": "get_session_proxy",
+        "parameters": [
+          {
+            "in": "path",
+            "name": "id",
+            "required": true,
+            "schema": {
+              "title": "Id",
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "limit",
+            "required": false,
+            "schema": {
+              "default": 50,
+              "maximum": 200,
+              "minimum": 1,
+              "title": "Limit",
+              "type": "integer"
+            }
+          },
+          {
+            "description": "The `next_cursor` of the previous page.",
+            "in": "query",
+            "name": "cursor",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "The `next_cursor` of the previous page.",
+              "title": "Cursor"
+            }
+          },
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SessionProxyResponse"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Get Session Proxy",
+        "tags": [
+          "v1"
+        ],
+        "x-ellipsis-permissions": {
+          "constraints": [
+            {
+              "account_admin_fields": [],
+              "identity": null,
+              "sandbox_scope": "own_session"
+            }
+          ],
+          "description": "Required permissions: read:sessions.\nAPI key: Supported.\nCLI user token: Supported.\nSession token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration. Only the token's own session.\nHigher permission levels include lower levels: read < write < delete.\nGrant match patterns can further restrict access to individual resources.",
+          "notes": [
+            "Higher permission levels include lower levels: read < write < delete.",
+            "Grant match patterns can further restrict access to individual resources."
+          ],
+          "required": [
+            {
+              "level": "read",
+              "resource": "sessions"
+            }
+          ],
+          "tokens": [
+            {
+              "available": true,
+              "conditions": [],
+              "kind": "api_key",
+              "label": "API key"
+            },
+            {
+              "available": true,
+              "conditions": [],
+              "kind": "user_token",
+              "label": "CLI user token"
+            },
+            {
+              "available": true,
+              "conditions": [
+                "Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.",
+                "Only the token's own session."
+              ],
+              "kind": "sandbox_token",
+              "label": "Session token"
+            }
+          ]
+        },
+        "x-ellipsis-sdk-method": "sessions.proxy"
+      }
+    },
     "/v1/sessions/{id}/records": {
       "get": {
         "description": "Return the session's stored transcript records, oldest first.\n\nPagination is opt-in (cursor/limit); a bare call returns the\nfull retained transcript. Available to session tokens too: an\nagent answering \"did X look into Y?\" needs to read the sessions\nit finds, and any org member sees the same transcript in the\ndashboard.",
@@ -32874,6 +33285,400 @@
         "x-ellipsis-undocumented": true
       }
     },
+    "/v1/sessions/{session_id}/images/{id}": {
+      "get": {
+        "description": "Return an image sent with a message to the session.\n\nEach message lists its images, with their IDs, in `images`.",
+        "operationId": "get_session_image",
+        "parameters": [
+          {
+            "in": "path",
+            "name": "session_id",
+            "required": true,
+            "schema": {
+              "title": "Session Id",
+              "type": "string"
+            }
+          },
+          {
+            "in": "path",
+            "name": "id",
+            "required": true,
+            "schema": {
+              "title": "Id",
+              "type": "string"
+            }
+          },
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ImageAttachment"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "No such session or image in your account."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Get Session Image",
+        "tags": [
+          "v1"
+        ],
+        "x-ellipsis-permissions": {
+          "constraints": [
+            {
+              "account_admin_fields": [],
+              "identity": null,
+              "sandbox_scope": null
+            }
+          ],
+          "description": "Required permissions: read:sessions.\nAPI key: Supported.\nCLI user token: Supported.\nSession token: Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration.\nHigher permission levels include lower levels: read < write < delete.\nGrant match patterns can further restrict access to individual resources.",
+          "notes": [
+            "Higher permission levels include lower levels: read < write < delete.",
+            "Grant match patterns can further restrict access to individual resources."
+          ],
+          "required": [
+            {
+              "level": "read",
+              "resource": "sessions"
+            }
+          ],
+          "tokens": [
+            {
+              "available": true,
+              "conditions": [],
+              "kind": "api_key",
+              "label": "API key"
+            },
+            {
+              "available": true,
+              "conditions": [],
+              "kind": "user_token",
+              "label": "CLI user token"
+            },
+            {
+              "available": true,
+              "conditions": [
+                "Requires the ellipsis:api scope and the required grants in the token's permissions.ellipsis configuration."
+              ],
+              "kind": "sandbox_token",
+              "label": "Session token"
+            }
+          ]
+        },
+        "x-ellipsis-sdk-method": "sessions.image"
+      }
+    },
+    "/v1/user/settings": {
+      "get": {
+        "description": "Get the signed in user's own settings.",
+        "operationId": "get_user_settings",
+        "parameters": [
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/UserSettings"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Get User Settings",
+        "tags": [
+          "v1"
+        ],
+        "x-ellipsis-permissions": {
+          "constraints": [
+            {
+              "account_admin_fields": [],
+              "identity": "human",
+              "sandbox_scope": null
+            }
+          ],
+          "description": "Required permissions: read:user.\nAPI key: Requires a CLI user token.\nCLI user token: Supported.\nSession token: Not supported by session tokens, even with permissions.ellipsis enabled.\nHigher permission levels include lower levels: read < write < delete.",
+          "notes": [
+            "Higher permission levels include lower levels: read < write < delete."
+          ],
+          "required": [
+            {
+              "level": "read",
+              "resource": "user"
+            }
+          ],
+          "tokens": [
+            {
+              "available": false,
+              "conditions": [
+                "Requires a CLI user token."
+              ],
+              "kind": "api_key",
+              "label": "API key"
+            },
+            {
+              "available": true,
+              "conditions": [],
+              "kind": "user_token",
+              "label": "CLI user token"
+            },
+            {
+              "available": false,
+              "conditions": [
+                "Not supported by session tokens, even with permissions.ellipsis enabled."
+              ],
+              "kind": "sandbox_token",
+              "label": "Session token"
+            }
+          ]
+        },
+        "x-ellipsis-sdk-method": "user.settings.get",
+        "x-ellipsis-undocumented": true
+      },
+      "patch": {
+        "description": "Change the signed in user's own settings.\n\nOnly the keys sent change, and the response is every setting.",
+        "operationId": "patch_user_settings",
+        "parameters": [
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchUserSettingsRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/UserSettings"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Patch User Settings",
+        "tags": [
+          "v1"
+        ],
+        "x-ellipsis-permissions": {
+          "constraints": [
+            {
+              "account_admin_fields": [],
+              "identity": "human",
+              "sandbox_scope": null
+            }
+          ],
+          "description": "Required permissions: write:user.\nAPI key: Requires a CLI user token.\nCLI user token: Supported.\nSession token: Not supported by session tokens, even with permissions.ellipsis enabled.\nHigher permission levels include lower levels: read < write < delete.",
+          "notes": [
+            "Higher permission levels include lower levels: read < write < delete."
+          ],
+          "required": [
+            {
+              "level": "write",
+              "resource": "user"
+            }
+          ],
+          "tokens": [
+            {
+              "available": false,
+              "conditions": [
+                "Requires a CLI user token."
+              ],
+              "kind": "api_key",
+              "label": "API key"
+            },
+            {
+              "available": true,
+              "conditions": [],
+              "kind": "user_token",
+              "label": "CLI user token"
+            },
+            {
+              "available": false,
+              "conditions": [
+                "Not supported by session tokens, even with permissions.ellipsis enabled."
+              ],
+              "kind": "sandbox_token",
+              "label": "Session token"
+            }
+          ]
+        },
+        "x-ellipsis-sdk-method": "user.settings.update",
+        "x-ellipsis-undocumented": true
+      }
+    },
     "/v1/user/tokens": {
       "get": {
         "operationId": "list_user_tokens",