@ellipsis-dev/sdk 0.6.0 → 0.7.0

package/schema/openapi.v1.json

@@ -472,7 +472,7 @@
       },
       "AgentConfigEnvironment": {
         "additionalProperties": false,
-        "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, how its `image` is customized, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-variables\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
+        "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, how its `image` is customized, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
         "properties": {
           "compute": {
             "$ref": "#/components/schemas/AgentConfigCompute",
@@ -581,7 +581,7 @@
       },
       "AgentConfigEnvironmentVariable": {
         "additionalProperties": false,
-        "description": "One environment variable injected into the agent's sandbox.\n\n`value`, when set, is a literal injected as-is \u2014 use it for non-secret\nconfig (LOG_LEVEL, an API base URL). When `value` is omitted the value is\nresolved at run time from the account's sandbox-variables store (dashboard\n/ `PUT /secrets`) by `name`, so a secret can be injected without\never putting it in the config file. Either way the variable only reaches\nagents that name it.",
+        "description": "One environment variable injected into the agent's sandbox.\n\n`value`, when set, is a literal injected as-is \u2014 use it for non-secret\nconfig (LOG_LEVEL, an API base URL). When `value` is omitted the value is\nresolved at run time from the account's sandbox-secrets store (dashboard\n/ `PUT /secrets`) by `name`, so a secret can be injected without\never putting it in the config file. Either way the variable only reaches\nagents that name it.",
         "properties": {
           "name": {
             "title": "Name",
@@ -2273,58 +2273,6 @@
         "title": "AnalyticsRepoUsage",
         "type": "object"
       },
-      "AssetView": {
-        "description": "An asset's metadata \u2014 the file itself is fetched via a separate\ndownload URL.",
-        "properties": {
-          "agent_session_id": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "The agent session that produced this asset, when it was uploaded from a sandbox. Null for uploads made outside an agent session.",
-            "title": "Agent Session Id"
-          },
-          "content_type": {
-            "description": "The asset's MIME type.",
-            "title": "Content Type",
-            "type": "string"
-          },
-          "created_at": {
-            "description": "When the asset was uploaded.",
-            "format": "date-time",
-            "title": "Created At",
-            "type": "string"
-          },
-          "filename": {
-            "description": "The original file basename, for display.",
-            "title": "Filename",
-            "type": "string"
-          },
-          "id": {
-            "description": "The asset's unique identifier.",
-            "title": "Id",
-            "type": "string"
-          },
-          "size_bytes": {
-            "description": "The size of the stored file in bytes.",
-            "title": "Size Bytes",
-            "type": "integer"
-          }
-        },
-        "required": [
-          "id",
-          "filename",
-          "content_type",
-          "size_bytes",
-          "created_at"
-        ],
-        "title": "AssetView",
-        "type": "object"
-      },
       "AttributionType": {
         "enum": [
           "github_user",
@@ -2588,8 +2536,8 @@
         "title": "CreateAgentConfigRequest",
         "type": "object"
       },
-      "CreateAssetRequest": {
-        "description": "Upload a file as an asset owned by the calling account.",
+      "CreateFileRequest": {
+        "description": "Upload a file owned by the calling account.",
         "properties": {
           "content_type": {
             "description": "The MIME type of the file. Only image/png is currently supported, and the uploaded bytes must actually be a PNG.",
@@ -2612,27 +2560,27 @@
           "content_type",
           "data_b64"
         ],
-        "title": "CreateAssetRequest",
+        "title": "CreateFileRequest",
         "type": "object"
       },
-      "CreateAssetResponse": {
-        "description": "The stored asset and the shareable link to it.",
+      "CreateFileResponse": {
+        "description": "The stored file and the shareable link to it.",
         "properties": {
-          "asset": {
-            "$ref": "#/components/schemas/AssetView",
-            "description": "The stored asset's metadata."
+          "file": {
+            "$ref": "#/components/schemas/FileView",
+            "description": "The stored file's metadata."
           },
           "url": {
-            "description": "The asset's dashboard URL (app.ellipsis.dev/assets/{id}). Access is gated to members of the owning organization, so this link is safe to share, e.g. in a pull request comment.",
+            "description": "The file's dashboard URL (app.ellipsis.dev/files/{id}). Access is gated to members of the owning organization, so this link is safe to share, e.g. in a pull request comment.",
             "title": "Url",
             "type": "string"
           }
         },
         "required": [
-          "asset",
+          "file",
           "url"
         ],
-        "title": "CreateAssetResponse",
+        "title": "CreateFileResponse",
         "type": "object"
       },
       "CreateReviewRequest": {
@@ -2781,7 +2729,7 @@
       "ErrorInfo": {
         "properties": {
           "code": {
-            "description": "Stable machine-readable error code. Open vocabulary \u2014 handle unknown codes by HTTP status. Known values: account_blocked, asset_quota_exceeded, conflict, default_config_broken, failed_dependency, forbidden, internal_error, invalid_request, not_found, rate_limited, review_in_flight, session_closed, session_ephemeral_trigger, session_finished, session_harness_single_turn, session_laptop, session_mention_surface, session_non_interactive, unauthorized, unavailable.",
+            "description": "Stable machine-readable error code. Open vocabulary \u2014 handle unknown codes by HTTP status. Known values: account_blocked, conflict, default_config_broken, failed_dependency, file_quota_exceeded, forbidden, internal_error, invalid_request, not_found, rate_limited, review_in_flight, session_closed, session_ephemeral_trigger, session_finished, session_harness_single_turn, session_laptop, session_mention_surface, session_non_interactive, unauthorized, unavailable.",
             "title": "Code",
             "type": "string"
           },
@@ -2833,6 +2781,58 @@
         "title": "ExecutionStatus",
         "type": "string"
       },
+      "FileView": {
+        "description": "A file's metadata \u2014 the file itself is fetched via a separate\ndownload URL.",
+        "properties": {
+          "agent_session_id": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The agent session that produced this file, when it was uploaded from a sandbox. Null for uploads made outside an agent session.",
+            "title": "Agent Session Id"
+          },
+          "content_type": {
+            "description": "The file's MIME type.",
+            "title": "Content Type",
+            "type": "string"
+          },
+          "created_at": {
+            "description": "When the file was uploaded.",
+            "format": "date-time",
+            "title": "Created At",
+            "type": "string"
+          },
+          "filename": {
+            "description": "The original file basename, for display.",
+            "title": "Filename",
+            "type": "string"
+          },
+          "id": {
+            "description": "The file's unique identifier.",
+            "title": "Id",
+            "type": "string"
+          },
+          "size_bytes": {
+            "description": "The size of the stored file in bytes.",
+            "title": "Size Bytes",
+            "type": "integer"
+          }
+        },
+        "required": [
+          "id",
+          "filename",
+          "content_type",
+          "size_bytes",
+          "created_at"
+        ],
+        "title": "FileView",
+        "type": "object"
+      },
       "FindingAnchor": {
         "description": "Where a finding's line anchor landed relative to the PR diff.",
         "enum": [
@@ -3000,30 +3000,30 @@
         "title": "GetAnalyticsReviewsResponse",
         "type": "object"
       },
-      "GetAssetResponse": {
-        "description": "One asset's metadata plus its shareable link and a short-lived\ndownload URL.",
+      "GetFileResponse": {
+        "description": "One file's metadata plus its shareable link and a short-lived\ndownload URL.",
         "properties": {
-          "asset": {
-            "$ref": "#/components/schemas/AssetView",
-            "description": "The asset's metadata."
-          },
           "download_url": {
             "description": "A short-lived presigned URL for downloading the file bytes. Fetch it immediately \u2014 it expires within about a minute.",
             "title": "Download Url",
             "type": "string"
           },
+          "file": {
+            "$ref": "#/components/schemas/FileView",
+            "description": "The file's metadata."
+          },
           "url": {
-            "description": "The asset's dashboard URL \u2014 the same shareable link returned when the asset was created.",
+            "description": "The file's dashboard URL \u2014 the same shareable link returned when the file was created.",
             "title": "Url",
             "type": "string"
           }
         },
         "required": [
-          "asset",
+          "file",
           "url",
           "download_url"
         ],
-        "title": "GetAssetResponse",
+        "title": "GetFileResponse",
         "type": "object"
       },
       "GetIntegrationsResponse": {
@@ -4194,22 +4194,22 @@
         "title": "ListAlertsResponse",
         "type": "object"
       },
-      "ListAssetsResponse": {
-        "description": "The calling account's assets, newest first. Metadata only \u2014 fetch an\nindividual asset to get a download URL.",
+      "ListFilesResponse": {
+        "description": "The calling account's files, newest first. Metadata only \u2014 fetch an\nindividual file to get a download URL.",
         "properties": {
-          "assets": {
-            "description": "The account's assets, newest first.",
+          "files": {
+            "description": "The account's files, newest first.",
             "items": {
-              "$ref": "#/components/schemas/AssetView"
+              "$ref": "#/components/schemas/FileView"
             },
-            "title": "Assets",
+            "title": "Files",
             "type": "array"
           }
         },
         "required": [
-          "assets"
+          "files"
         ],
-        "title": "ListAssetsResponse",
+        "title": "ListFilesResponse",
         "type": "object"
       },
       "ListGithubMembersResponse": {
@@ -4577,11 +4577,13 @@
         "type": "object"
       },
       "ModelManufacturer": {
-        "description": "Who BUILT a model. Never who serves it.\n\nServing path is irrelevant here. Anthropic built every Claude model, so all of\nthem are ANTHROPIC whether we reach them through the first-party Anthropic API\nor through Bedrock -- a choice made per deployment by ELLIPSIS_LLM_PROVIDER, so\nit is not even a fixed property of the model. Likewise the `bedrock-gpt-5.6-*`\nrows are OPENAI (OpenAI's models, served by AWS), and GLM is ZAI (Z.ai's model,\nserved by Wafer over an OpenAI-compatible API).\n\nSo this is deliberately NOT derived from `EgressRoute.provider`: routing is an\ninfrastructure fact that changes when we move a model between providers, while\nthe manufacturer is a property of the model itself and never changes.\n\nThe frontend renders a vendor logo per model, which is why it needs the maker.\nKeying that UI off the egress provider would put an AWS logo on a GPT model and\nan OpenAI logo on GLM.",
+        "description": "Who BUILT a model. Never who serves it.\n\nServing path is irrelevant here. Anthropic built every Claude model, so all of\nthem are ANTHROPIC whether we reach them through the first-party Anthropic API\nor through Bedrock -- a choice made per request by the llm_providers chain, so\nit is not even a fixed property of the model. Likewise the `bedrock-gpt-5.6-*`\nrows are OPENAI (OpenAI's models, served by AWS), and GLM is ZAI (Z.ai's model,\nserved by Wafer or Concentrate over an OpenAI-compatible API).\n\nSo this is deliberately NOT derived from `EgressRoute.provider`: routing is an\ninfrastructure fact that changes when we move a model between providers, while\nthe manufacturer is a property of the model itself and never changes.\n\nThe frontend renders a vendor logo per model, which is why it needs the maker.\nKeying that UI off the egress provider would put an AWS logo on a GPT model and\nan OpenAI logo on GLM.",
         "enum": [
           "anthropic",
           "openai",
-          "zai"
+          "zai",
+          "minimax",
+          "moonshot"
         ],
         "title": "ModelManufacturer",
         "type": "string"
@@ -10753,60 +10755,26 @@
         ]
       }
     },
-    "/assets": {
-      "get": {
-        "description": "List uploaded assets, newest first.\n\nMetadata only \u2014 download URLs are minted per explicit GET, not\nper row. agent_session_id scopes the list to one run's uploads.",
-        "operationId": "list_assets",
-        "parameters": [
-          {
-            "in": "query",
-            "name": "agent_session_id",
-            "required": false,
-            "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "Agent Session Id"
-            }
-          },
-          {
-            "in": "query",
-            "name": "limit",
-            "required": false,
-            "schema": {
-              "default": 50,
-              "title": "Limit",
-              "type": "integer"
+    "/auth/cli/poll": {
+      "post": {
+        "description": "Poll a device-code auth flow for its token.\n\nUnauthenticated; the device code identifies the flow.",
+        "operationId": "cli_auth_poll",
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CliAuthPollRequest"
+              }
             }
           },
-          {
-            "in": "header",
-            "name": "user-agent",
-            "required": false,
-            "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "User-Agent"
-            }
-          }
-        ],
+          "required": true
+        },
         "responses": {
           "200": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ListAssetsResponse"
+                  "$ref": "#/components/schemas/PollCliAuthResponse"
                 }
               }
             },
@@ -10832,6 +10800,16 @@
             },
             "description": "The credential may not perform this action, or the account is blocked."
           },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "Unknown device code."
+          },
           "422": {
             "content": {
               "application/json": {
@@ -10843,68 +10821,27 @@
             "description": "Validation Error"
           }
         },
-        "security": [
-          {
-            "HTTPBearer": []
-          }
-        ],
-        "summary": "List Assets",
+        "summary": "Cli Auth Poll",
         "tags": [
           "v1"
         ]
-      },
+      }
+    },
+    "/auth/cli/start": {
       "post": {
-        "description": "Upload a file that outlives the sandbox.\n\nv1: PNG images only, base64 in the JSON body, 10 MiB cap. The\nprimary caller is the in-sandbox `agent asset upload` CLI (an\nagent persisting a screenshot to link on a PR), but all\ncredential types work. Returns the org-membership-gated\ndashboard URL so callers never hard-code URL shapes.",
-        "operationId": "create_asset",
-        "parameters": [
-          {
-            "in": "header",
-            "name": "user-agent",
-            "required": false,
-            "schema": {
-              "anyOf": [
-                {
-                  "type": "string"
-                },
-                {
-                  "type": "null"
-                }
-              ],
-              "title": "User-Agent"
-            }
-          }
-        ],
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/CreateAssetRequest"
-              }
-            }
-          },
-          "required": true
-        },
+        "description": "Start a device-code auth flow for the CLI.\n\nUnauthenticated: the CLI has no credential yet \u2014 that's what\nit's obtaining. The human authorizes out-of-band in the\ndashboard.",
+        "operationId": "cli_auth_start",
         "responses": {
           "201": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/CreateAssetResponse"
+                  "$ref": "#/components/schemas/StartCliAuthResponse"
                 }
               }
             },
             "description": "Successful Response"
           },
-          "400": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "The upload is not a valid PNG, is empty, exceeds the size limit, or is not valid base64."
-          },
           "401": {
             "content": {
               "application/json": {
@@ -10924,53 +10861,19 @@
               }
             },
             "description": "The credential may not perform this action, or the account is blocked."
-          },
-          "422": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/HTTPValidationError"
-                }
-              }
-            },
-            "description": "Validation Error"
-          },
-          "429": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "An asset quota was exceeded (per-session, per-day, or account-wide)."
           }
         },
-        "security": [
-          {
-            "HTTPBearer": []
-          }
-        ],
-        "summary": "Create Asset",
+        "summary": "Cli Auth Start",
         "tags": [
           "v1"
         ]
       }
     },
-    "/assets/{asset_id}": {
-      "delete": {
-        "description": "Delete an asset.\n\nA foreign, missing, or already-deleted id is an\nindistinguishable 404, so ids can't be enumerated. Sandbox\ntokens get a 403 (a sandbox token sits next to\npotentially-untrusted code and must not be able to destroy the\naccount's assets \u2014 uploading is fine, destruction is not); API\nkeys and user tokens may delete.",
-        "operationId": "delete_asset",
+    "/budget": {
+      "get": {
+        "description": "Return the caller's current budget summary.",
+        "operationId": "get_budget",
         "parameters": [
-          {
-            "in": "path",
-            "name": "asset_id",
-            "required": true,
-            "schema": {
-              "title": "Asset Id",
-              "type": "string"
-            }
-          },
           {
             "in": "header",
             "name": "user-agent",
@@ -10989,20 +10892,17 @@
           }
         ],
         "responses": {
-          "204": {
-            "description": "Successful Response"
-          },
-          "401": {
+          "200": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
+                  "$ref": "#/components/schemas/BudgetSummary"
                 }
               }
             },
-            "description": "The bearer token is missing, invalid, or revoked."
+            "description": "Successful Response"
           },
-          "403": {
+          "401": {
             "content": {
               "application/json": {
                 "schema": {
@@ -11010,9 +10910,9 @@
                 }
               }
             },
-            "description": "The credential may not perform this action, or the account is blocked."
+            "description": "The bearer token is missing, invalid, or revoked."
           },
-          "404": {
+          "403": {
             "content": {
               "application/json": {
                 "schema": {
@@ -11020,7 +10920,7 @@
                 }
               }
             },
-            "description": "No such asset in your account."
+            "description": "The credential may not perform this action, or the account is blocked."
           },
           "422": {
             "content": {
@@ -11038,22 +10938,41 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Delete Asset",
+        "summary": "Get Budget",
         "tags": [
           "v1"
         ]
-      },
+      }
+    },
+    "/files": {
       "get": {
-        "description": "Return one asset's metadata and download link.\n\nIncludes the gated dashboard URL and a short-lived presigned\n`download_url`.\n\nTo fetch the bytes locally, call this and then GET download_url\nimmediately \u2014 the JSON API never carries the file. The CLI's\n`agent asset get` wraps exactly that two-step.",
-        "operationId": "get_asset",
+        "description": "List uploaded files, newest first.\n\nMetadata only \u2014 download URLs are minted per explicit GET, not\nper row. agent_session_id scopes the list to one run's uploads.",
+        "operationId": "list_files",
         "parameters": [
           {
-            "in": "path",
-            "name": "asset_id",
-            "required": true,
+            "in": "query",
+            "name": "agent_session_id",
+            "required": false,
             "schema": {
-              "title": "Asset Id",
-              "type": "string"
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "Agent Session Id"
+            }
+          },
+          {
+            "in": "query",
+            "name": "limit",
+            "required": false,
+            "schema": {
+              "default": 50,
+              "title": "Limit",
+              "type": "integer"
             }
           },
           {
@@ -11078,7 +10997,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetAssetResponse"
+                  "$ref": "#/components/schemas/ListFilesResponse"
                 }
               }
             },
@@ -11104,16 +11023,6 @@
             },
             "description": "The credential may not perform this action, or the account is blocked."
           },
-          "404": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "No such asset in your account."
-          },
           "422": {
             "content": {
               "application/json": {
@@ -11130,38 +11039,54 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Get Asset",
+        "summary": "List Files",
         "tags": [
           "v1"
         ]
-      }
-    },
-    "/auth/cli/poll": {
+      },
       "post": {
-        "description": "Poll a device-code auth flow for its token.\n\nUnauthenticated; the device code identifies the flow.",
-        "operationId": "cli_auth_poll",
+        "description": "Upload a file that outlives the sandbox.\n\nv1: PNG images only, base64 in the JSON body, 10 MiB cap. The\nprimary caller is the in-sandbox `agent file upload` CLI (an\nagent persisting a screenshot to link on a PR), but all\ncredential types work. Returns the org-membership-gated\ndashboard URL so callers never hard-code URL shapes.",
+        "operationId": "create_file",
+        "parameters": [
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
         "requestBody": {
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/CliAuthPollRequest"
+                "$ref": "#/components/schemas/CreateFileRequest"
               }
             }
           },
           "required": true
         },
         "responses": {
-          "200": {
+          "201": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PollCliAuthResponse"
+                  "$ref": "#/components/schemas/CreateFileResponse"
                 }
               }
             },
             "description": "Successful Response"
           },
-          "401": {
+          "400": {
             "content": {
               "application/json": {
                 "schema": {
@@ -11169,9 +11094,9 @@
                 }
               }
             },
-            "description": "The bearer token is missing, invalid, or revoked."
+            "description": "The upload is not a valid PNG, is empty, exceeds the size limit, or is not valid base64."
           },
-          "403": {
+          "401": {
             "content": {
               "application/json": {
                 "schema": {
@@ -11179,9 +11104,9 @@
                 }
               }
             },
-            "description": "The credential may not perform this action, or the account is blocked."
+            "description": "The bearer token is missing, invalid, or revoked."
           },
-          "404": {
+          "403": {
             "content": {
               "application/json": {
                 "schema": {
@@ -11189,7 +11114,7 @@
                 }
               }
             },
-            "description": "Unknown device code."
+            "description": "The credential may not perform this action, or the account is blocked."
           },
           "422": {
             "content": {
@@ -11200,30 +11125,75 @@
               }
             },
             "description": "Validation Error"
+          },
+          "429": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "A file quota was exceeded (per-session, per-day, or account-wide)."
           }
         },
-        "summary": "Cli Auth Poll",
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Create File",
         "tags": [
           "v1"
         ]
       }
     },
-    "/auth/cli/start": {
-      "post": {
-        "description": "Start a device-code auth flow for the CLI.\n\nUnauthenticated: the CLI has no credential yet \u2014 that's what\nit's obtaining. The human authorizes out-of-band in the\ndashboard.",
-        "operationId": "cli_auth_start",
+    "/files/{file_id}": {
+      "delete": {
+        "description": "Delete a file.\n\nA foreign, missing, or already-deleted id is an\nindistinguishable 404, so ids can't be enumerated. Sandbox\ntokens get a 403 (a sandbox token sits next to\npotentially-untrusted code and must not be able to destroy the\naccount's files \u2014 uploading is fine, destruction is not); API\nkeys and user tokens may delete.",
+        "operationId": "delete_file",
+        "parameters": [
+          {
+            "in": "path",
+            "name": "file_id",
+            "required": true,
+            "schema": {
+              "title": "File Id",
+              "type": "string"
+            }
+          },
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
         "responses": {
-          "201": {
+          "204": {
+            "description": "Successful Response"
+          },
+          "401": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/StartCliAuthResponse"
+                  "$ref": "#/components/schemas/ErrorResponse"
                 }
               }
             },
-            "description": "Successful Response"
+            "description": "The bearer token is missing, invalid, or revoked."
           },
-          "401": {
+          "403": {
             "content": {
               "application/json": {
                 "schema": {
@@ -11231,9 +11201,9 @@
                 }
               }
             },
-            "description": "The bearer token is missing, invalid, or revoked."
+            "description": "The credential may not perform this action, or the account is blocked."
           },
-          "403": {
+          "404": {
             "content": {
               "application/json": {
                 "schema": {
@@ -11241,20 +11211,42 @@
                 }
               }
             },
-            "description": "The credential may not perform this action, or the account is blocked."
+            "description": "No such file in your account."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
           }
         },
-        "summary": "Cli Auth Start",
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Delete File",
         "tags": [
           "v1"
         ]
-      }
-    },
-    "/budget": {
+      },
       "get": {
-        "description": "Return the caller's current budget summary.",
-        "operationId": "get_budget",
+        "description": "Return one file's metadata and download link.\n\nIncludes the gated dashboard URL and a short-lived presigned\n`download_url`.\n\nTo fetch the bytes locally, call this and then GET download_url\nimmediately \u2014 the JSON API never carries the file. The CLI's\n`agent file get` wraps exactly that two-step.",
+        "operationId": "get_file",
         "parameters": [
+          {
+            "in": "path",
+            "name": "file_id",
+            "required": true,
+            "schema": {
+              "title": "File Id",
+              "type": "string"
+            }
+          },
           {
             "in": "header",
             "name": "user-agent",
@@ -11277,7 +11269,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/BudgetSummary"
+                  "$ref": "#/components/schemas/GetFileResponse"
                 }
               }
             },
@@ -11303,6 +11295,16 @@
             },
             "description": "The credential may not perform this action, or the account is blocked."
           },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "No such file in your account."
+          },
           "422": {
             "content": {
               "application/json": {
@@ -11319,7 +11321,7 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Get Budget",
+        "summary": "Get File",
         "tags": [
           "v1"
         ]
@@ -12662,7 +12664,7 @@
     },
     "/sessions": {
       "get": {
-        "description": "List cloud agent sessions.\n\nOptionally filtered by config, source, time window, and\nattributed author.",
+        "description": "List cloud agent sessions.\n\nOptionally filtered by config, source, time window, attributed\nauthor, repository, and whether the session is still going.",
         "operationId": "list_agent_sessions",
         "parameters": [
           {
@@ -12778,6 +12780,36 @@
               "title": "Author Id"
             }
           },
+          {
+            "description": "\"owner/name\" (exact) or a bare repo name, matched the same way as on GET /v1/sessions/search. Sessions whose repository is named only inside their agent config \u2014 dashboard starts, cron, handoffs \u2014 do not match.",
+            "in": "query",
+            "name": "repo",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "\"owner/name\" (exact) or a bare repo name, matched the same way as on GET /v1/sessions/search. Sessions whose repository is named only inside their agent config \u2014 dashboard starts, cron, handoffs \u2014 do not match.",
+              "title": "Repo"
+            }
+          },
+          {
+            "description": "Keep only sessions whose conversation is still going \u2014 live or sleeping \u2014 dropping the ones that completed, errored, or were stopped or cancelled. A session parked between turns counts as unfinished.",
+            "in": "query",
+            "name": "unfinished",
+            "required": false,
+            "schema": {
+              "default": false,
+              "description": "Keep only sessions whose conversation is still going \u2014 live or sleeping \u2014 dropping the ones that completed, errored, or were stopped or cancelled. A session parked between turns counts as unfinished.",
+              "title": "Unfinished",
+              "type": "boolean"
+            }
+          },
           {
             "in": "header",
             "name": "user-agent",
@@ -13624,7 +13656,7 @@
     },
     "/sessions/{session_id}/log": {
       "get": {
-        "description": "Download the complete session log.\n\nThe complete, ordered history of the session (agent output, tool calls, thinking,\nlifecycle events, sandbox output, message events) as an ordered\nmanifest of presigned segment URLs.\n\nSegments are gzip members: download in order and concatenate\nfor one file. The JSON API never carries the bytes (same\ntwo-step as assets). /records is the paged live view of the\nsame data.",
+        "description": "Download the complete session log.\n\nThe complete, ordered history of the session (agent output, tool calls, thinking,\nlifecycle events, sandbox output, message events) as an ordered\nmanifest of presigned segment URLs.\n\nSegments are gzip members: download in order and concatenate\nfor one file. The JSON API never carries the bytes (same\ntwo-step as files). /records is the paged live view of the\nsame data.",
         "operationId": "get_agent_session_log",
         "parameters": [
           {