@ellipsis-dev/sdk 0.6.0 → 0.8.0

package/schema/openapi.v1.json

@@ -472,7 +472,7 @@
       },
       "AgentConfigEnvironment": {
         "additionalProperties": false,
-        "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, how its `image` is customized, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-variables\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
+        "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, how its `image` is customized, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
         "properties": {
           "compute": {
             "$ref": "#/components/schemas/AgentConfigCompute",
@@ -581,7 +581,7 @@
       },
       "AgentConfigEnvironmentVariable": {
         "additionalProperties": false,
-        "description": "One environment variable injected into the agent's sandbox.\n\n`value`, when set, is a literal injected as-is \u2014 use it for non-secret\nconfig (LOG_LEVEL, an API base URL). When `value` is omitted the value is\nresolved at run time from the account's sandbox-variables store (dashboard\n/ `PUT /secrets`) by `name`, so a secret can be injected without\never putting it in the config file. Either way the variable only reaches\nagents that name it.",
+        "description": "One environment variable injected into the agent's sandbox.\n\n`value`, when set, is a literal injected as-is \u2014 use it for non-secret\nconfig (LOG_LEVEL, an API base URL). When `value` is omitted the value is\nresolved at run time from the account's sandbox-secrets store (dashboard\n/ `PUT /secrets`) by `name`, so a secret can be injected without\never putting it in the config file. Either way the variable only reaches\nagents that name it.",
         "properties": {
           "name": {
             "title": "Name",
@@ -2273,58 +2273,6 @@
         "title": "AnalyticsRepoUsage",
         "type": "object"
       },
-      "AssetView": {
-        "description": "An asset's metadata \u2014 the file itself is fetched via a separate\ndownload URL.",
-        "properties": {
-          "agent_session_id": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "The agent session that produced this asset, when it was uploaded from a sandbox. Null for uploads made outside an agent session.",
-            "title": "Agent Session Id"
-          },
-          "content_type": {
-            "description": "The asset's MIME type.",
-            "title": "Content Type",
-            "type": "string"
-          },
-          "created_at": {
-            "description": "When the asset was uploaded.",
-            "format": "date-time",
-            "title": "Created At",
-            "type": "string"
-          },
-          "filename": {
-            "description": "The original file basename, for display.",
-            "title": "Filename",
-            "type": "string"
-          },
-          "id": {
-            "description": "The asset's unique identifier.",
-            "title": "Id",
-            "type": "string"
-          },
-          "size_bytes": {
-            "description": "The size of the stored file in bytes.",
-            "title": "Size Bytes",
-            "type": "integer"
-          }
-        },
-        "required": [
-          "id",
-          "filename",
-          "content_type",
-          "size_bytes",
-          "created_at"
-        ],
-        "title": "AssetView",
-        "type": "object"
-      },
       "AttributionType": {
         "enum": [
           "github_user",
@@ -2588,8 +2536,8 @@
         "title": "CreateAgentConfigRequest",
         "type": "object"
       },
-      "CreateAssetRequest": {
-        "description": "Upload a file as an asset owned by the calling account.",
+      "CreateFileRequest": {
+        "description": "Upload a file owned by the calling account.",
         "properties": {
           "content_type": {
             "description": "The MIME type of the file. Only image/png is currently supported, and the uploaded bytes must actually be a PNG.",
@@ -2612,27 +2560,54 @@
           "content_type",
           "data_b64"
         ],
-        "title": "CreateAssetRequest",
+        "title": "CreateFileRequest",
         "type": "object"
       },
-      "CreateAssetResponse": {
-        "description": "The stored asset and the shareable link to it.",
+      "CreateFileResponse": {
+        "description": "The stored file and the shareable link to it.",
         "properties": {
-          "asset": {
-            "$ref": "#/components/schemas/AssetView",
-            "description": "The stored asset's metadata."
+          "file": {
+            "$ref": "#/components/schemas/FileView",
+            "description": "The stored file's metadata."
           },
           "url": {
-            "description": "The asset's dashboard URL (app.ellipsis.dev/assets/{id}). Access is gated to members of the owning organization, so this link is safe to share, e.g. in a pull request comment.",
+            "description": "The file's dashboard URL (app.ellipsis.dev/files/{id}). Access is gated to members of the owning organization, so this link is safe to share, e.g. in a pull request comment.",
             "title": "Url",
             "type": "string"
           }
         },
         "required": [
-          "asset",
+          "file",
           "url"
         ],
-        "title": "CreateAssetResponse",
+        "title": "CreateFileResponse",
+        "type": "object"
+      },
+      "CreateMemoryRequest": {
+        "description": "Create a memory at a path that does not exist yet.",
+        "properties": {
+          "content": {
+            "description": "The memory's markdown content, at most 100 KB of UTF-8.",
+            "title": "Content",
+            "type": "string"
+          },
+          "description": {
+            "description": "A one-line summary, at most 200 characters and no newlines. This is the only thing a reader sees in the index, so make it say what the memory is for.",
+            "title": "Description",
+            "type": "string"
+          },
+          "path": {
+            "description": "Where to store the memory. A memory path is slash-separated segments of [a-z0-9._-], with no leading or trailing slash, no empty segments, no '.' or '..' segments, at most 512 characters, ending in '.md'.",
+            "title": "Path",
+            "type": "string"
+          }
+        },
+        "required": [
+          "path",
+          "description",
+          "content"
+        ],
+        "title": "CreateMemoryRequest",
         "type": "object"
       },
       "CreateReviewRequest": {
@@ -2746,6 +2721,49 @@
         "title": "DurationPercentiles",
         "type": "object"
       },
+      "EditMemoryRequest": {
+        "description": "Update an existing memory. At least one of description or content is\nrequired; this never creates a memory, and never moves it.",
+        "properties": {
+          "content": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Replacement markdown content. Omit to keep it.",
+            "title": "Content"
+          },
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Replacement one-line summary. Omit to keep it.",
+            "title": "Description"
+          },
+          "if_sha256": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Only apply the edit if the memory's current content_sha256 matches. Returns 409 if it doesn't, so a concurrent write is a visible conflict rather than a silent overwrite.",
+            "title": "If Sha256"
+          }
+        },
+        "title": "EditMemoryRequest",
+        "type": "object"
+      },
       "EffortLevel": {
         "enum": [
           "low",
@@ -2781,7 +2799,7 @@
       "ErrorInfo": {
         "properties": {
           "code": {
-            "description": "Stable machine-readable error code. Open vocabulary \u2014 handle unknown codes by HTTP status. Known values: account_blocked, asset_quota_exceeded, conflict, default_config_broken, failed_dependency, forbidden, internal_error, invalid_request, not_found, rate_limited, review_in_flight, session_closed, session_ephemeral_trigger, session_finished, session_harness_single_turn, session_laptop, session_mention_surface, session_non_interactive, unauthorized, unavailable.",
+            "description": "Stable machine-readable error code. Open vocabulary \u2014 handle unknown codes by HTTP status. Known values: account_blocked, conflict, default_config_broken, failed_dependency, file_quota_exceeded, forbidden, internal_error, invalid_request, not_found, rate_limited, review_in_flight, session_closed, session_ephemeral_trigger, session_finished, session_harness_single_turn, session_laptop, session_mention_surface, session_non_interactive, unauthorized, unavailable.",
             "title": "Code",
             "type": "string"
           },
@@ -2833,6 +2851,58 @@
         "title": "ExecutionStatus",
         "type": "string"
       },
+      "FileView": {
+        "description": "A file's metadata \u2014 the file itself is fetched via a separate\ndownload URL.",
+        "properties": {
+          "agent_session_id": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The agent session that produced this file, when it was uploaded from a sandbox. Null for uploads made outside an agent session.",
+            "title": "Agent Session Id"
+          },
+          "content_type": {
+            "description": "The file's MIME type.",
+            "title": "Content Type",
+            "type": "string"
+          },
+          "created_at": {
+            "description": "When the file was uploaded.",
+            "format": "date-time",
+            "title": "Created At",
+            "type": "string"
+          },
+          "filename": {
+            "description": "The original file basename, for display.",
+            "title": "Filename",
+            "type": "string"
+          },
+          "id": {
+            "description": "The file's unique identifier.",
+            "title": "Id",
+            "type": "string"
+          },
+          "size_bytes": {
+            "description": "The size of the stored file in bytes.",
+            "title": "Size Bytes",
+            "type": "integer"
+          }
+        },
+        "required": [
+          "id",
+          "filename",
+          "content_type",
+          "size_bytes",
+          "created_at"
+        ],
+        "title": "FileView",
+        "type": "object"
+      },
       "FindingAnchor": {
         "description": "Where a finding's line anchor landed relative to the PR diff.",
         "enum": [
@@ -3000,30 +3070,30 @@
         "title": "GetAnalyticsReviewsResponse",
         "type": "object"
       },
-      "GetAssetResponse": {
-        "description": "One asset's metadata plus its shareable link and a short-lived\ndownload URL.",
+      "GetFileResponse": {
+        "description": "One file's metadata plus its shareable link and a short-lived\ndownload URL.",
         "properties": {
-          "asset": {
-            "$ref": "#/components/schemas/AssetView",
-            "description": "The asset's metadata."
-          },
           "download_url": {
             "description": "A short-lived presigned URL for downloading the file bytes. Fetch it immediately \u2014 it expires within about a minute.",
             "title": "Download Url",
             "type": "string"
           },
+          "file": {
+            "$ref": "#/components/schemas/FileView",
+            "description": "The file's metadata."
+          },
           "url": {
-            "description": "The asset's dashboard URL \u2014 the same shareable link returned when the asset was created.",
+            "description": "The file's dashboard URL \u2014 the same shareable link returned when the file was created.",
             "title": "Url",
             "type": "string"
           }
         },
         "required": [
-          "asset",
+          "file",
           "url",
           "download_url"
         ],
-        "title": "GetAssetResponse",
+        "title": "GetFileResponse",
         "type": "object"
       },
       "GetIntegrationsResponse": {
@@ -4194,22 +4264,22 @@
         "title": "ListAlertsResponse",
         "type": "object"
       },
-      "ListAssetsResponse": {
-        "description": "The calling account's assets, newest first. Metadata only \u2014 fetch an\nindividual asset to get a download URL.",
+      "ListFilesResponse": {
+        "description": "The calling account's files, newest first. Metadata only \u2014 fetch an\nindividual file to get a download URL.",
         "properties": {
-          "assets": {
-            "description": "The account's assets, newest first.",
+          "files": {
+            "description": "The account's files, newest first.",
             "items": {
-              "$ref": "#/components/schemas/AssetView"
+              "$ref": "#/components/schemas/FileView"
             },
-            "title": "Assets",
+            "title": "Files",
             "type": "array"
           }
         },
         "required": [
-          "assets"
+          "files"
         ],
-        "title": "ListAssetsResponse",
+        "title": "ListFilesResponse",
         "type": "object"
       },
       "ListGithubMembersResponse": {
@@ -4272,6 +4342,30 @@
         "title": "ListLinearTeamsResponse",
         "type": "object"
       },
+      "ListMemoriesWireResponse": {
+        "description": "The organization's memories: the rendered index a reader scans, plus the\nsame entries structured. Content is fetched per memory.",
+        "properties": {
+          "index": {
+            "description": "The memories rendered as a markdown index \u2014 one line per memory carrying its id, path, and description, grouped by top-level prefix. Read this, then fetch the ids that matter.",
+            "title": "Index",
+            "type": "string"
+          },
+          "memories": {
+            "description": "The same memories as structured entries, ordered by path.",
+            "items": {
+              "$ref": "#/components/schemas/MemoryStubWire"
+            },
+            "title": "Memories",
+            "type": "array"
+          }
+        },
+        "required": [
+          "index",
+          "memories"
+        ],
+        "title": "ListMemoriesWireResponse",
+        "type": "object"
+      },
       "ListReviewsResponse": {
         "description": "Reviews matching the query, newest first. `findings` are omitted\n(counters only); automatically-triggered reviews are included, so this\nanswers \"show me every review on this pull request\".",
         "properties": {
@@ -4576,12 +4670,163 @@
         "title": "LogSearchHit",
         "type": "object"
       },
+      "MemoryActorType": {
+        "enum": [
+          "agent_session",
+          "api_key",
+          "user"
+        ],
+        "title": "MemoryActorType",
+        "type": "string"
+      },
+      "MemoryActorWire": {
+        "description": "Who wrote a memory, derived from their credential.",
+        "properties": {
+          "id": {
+            "description": "The writer's identifier: the agent session id, the API key id, or the GitHub account id, matching `type`.",
+            "title": "Id",
+            "type": "string"
+          },
+          "type": {
+            "$ref": "#/components/schemas/MemoryActorType",
+            "description": "The kind of credential that wrote the memory: agent_session (an agent writing from inside its sandbox), api_key, or user."
+          }
+        },
+        "required": [
+          "type",
+          "id"
+        ],
+        "title": "MemoryActorWire",
+        "type": "object"
+      },
+      "MemoryStubWire": {
+        "description": "One entry in the index: a memory with every field except `content`.\n\nContent is the only omission, and it's the whole reason this shape exists \u2014\nan account can hold 2,000 memories of 100 KB each, so a listing that carried\ncontent would be a 200 MB response.",
+        "properties": {
+          "content_sha256": {
+            "description": "Hex SHA-256 of the content, usable as an `if_sha256` precondition.",
+            "title": "Content Sha256",
+            "type": "string"
+          },
+          "created_at": {
+            "description": "When the memory was created.",
+            "format": "date-time",
+            "title": "Created At",
+            "type": "string"
+          },
+          "created_by": {
+            "$ref": "#/components/schemas/MemoryActorWire",
+            "description": "The credential that created the memory."
+          },
+          "description": {
+            "description": "The one-line summary of the memory.",
+            "title": "Description",
+            "type": "string"
+          },
+          "id": {
+            "description": "The memory's unique identifier.",
+            "title": "Id",
+            "type": "string"
+          },
+          "path": {
+            "description": "The memory's address within the organization.",
+            "title": "Path",
+            "type": "string"
+          },
+          "updated_at": {
+            "description": "When the memory was last written.",
+            "format": "date-time",
+            "title": "Updated At",
+            "type": "string"
+          },
+          "updated_by": {
+            "$ref": "#/components/schemas/MemoryActorWire",
+            "description": "The credential that last wrote the memory."
+          }
+        },
+        "required": [
+          "id",
+          "path",
+          "description",
+          "content_sha256",
+          "created_by",
+          "updated_by",
+          "created_at",
+          "updated_at"
+        ],
+        "title": "MemoryStubWire",
+        "type": "object"
+      },
+      "MemoryWire": {
+        "description": "One memory, including its full markdown content.",
+        "properties": {
+          "content": {
+            "description": "The memory's markdown content.",
+            "title": "Content",
+            "type": "string"
+          },
+          "content_sha256": {
+            "description": "Hex SHA-256 of the content, computed server-side. Pass it back as `if_sha256` on an edit or delete to fail instead of overwriting a change someone else made in the meantime.",
+            "title": "Content Sha256",
+            "type": "string"
+          },
+          "created_at": {
+            "description": "When the memory was created.",
+            "format": "date-time",
+            "title": "Created At",
+            "type": "string"
+          },
+          "created_by": {
+            "$ref": "#/components/schemas/MemoryActorWire",
+            "description": "The credential that created the memory."
+          },
+          "description": {
+            "description": "The one-line summary shown in the index. This is what a reader sees before deciding to open the memory.",
+            "title": "Description",
+            "type": "string"
+          },
+          "id": {
+            "description": "The memory's unique identifier.",
+            "title": "Id",
+            "type": "string"
+          },
+          "path": {
+            "description": "The memory's address, unique within the organization, e.g. repos/acme/deploys.md.",
+            "title": "Path",
+            "type": "string"
+          },
+          "updated_at": {
+            "description": "When the memory was last written.",
+            "format": "date-time",
+            "title": "Updated At",
+            "type": "string"
+          },
+          "updated_by": {
+            "$ref": "#/components/schemas/MemoryActorWire",
+            "description": "The credential that last wrote the memory."
+          }
+        },
+        "required": [
+          "id",
+          "path",
+          "description",
+          "content",
+          "content_sha256",
+          "created_by",
+          "updated_by",
+          "created_at",
+          "updated_at"
+        ],
+        "title": "MemoryWire",
+        "type": "object"
+      },
       "ModelManufacturer": {
-        "description": "Who BUILT a model. Never who serves it.\n\nServing path is irrelevant here. Anthropic built every Claude model, so all of\nthem are ANTHROPIC whether we reach them through the first-party Anthropic API\nor through Bedrock -- a choice made per deployment by ELLIPSIS_LLM_PROVIDER, so\nit is not even a fixed property of the model. Likewise the `bedrock-gpt-5.6-*`\nrows are OPENAI (OpenAI's models, served by AWS), and GLM is ZAI (Z.ai's model,\nserved by Wafer over an OpenAI-compatible API).\n\nSo this is deliberately NOT derived from `EgressRoute.provider`: routing is an\ninfrastructure fact that changes when we move a model between providers, while\nthe manufacturer is a property of the model itself and never changes.\n\nThe frontend renders a vendor logo per model, which is why it needs the maker.\nKeying that UI off the egress provider would put an AWS logo on a GPT model and\nan OpenAI logo on GLM.",
+        "description": "Who BUILT a model. Never who serves it.\n\nServing path is irrelevant here. Anthropic built every Claude model, so all of\nthem are ANTHROPIC whether we reach them through the first-party Anthropic API\nor through Bedrock -- a choice made per request by the llm_providers chain, so\nit is not even a fixed property of the model. Likewise the `bedrock-gpt-5.6-*`\nrows are OPENAI (OpenAI's models, served by AWS), and GLM is ZAI (Z.ai's model,\nserved by Concentrate).\n\nSo this is deliberately NOT derived from `EgressRoute.provider`: routing is an\ninfrastructure fact that changes when we move a model between providers, while\nthe manufacturer is a property of the model itself and never changes.\n\nThe frontend renders a vendor logo per model, which is why it needs the maker.\nKeying that UI off the egress provider would put an AWS logo on a GPT model and\nan OpenAI logo on GLM.",
         "enum": [
           "anthropic",
           "openai",
-          "zai"
+          "zai",
+          "minimax",
+          "moonshot"
         ],
         "title": "ModelManufacturer",
         "type": "string"
@@ -10753,11 +10998,200 @@
         ]
       }
     },
-    "/assets": {
-      "get": {
-        "description": "List uploaded assets, newest first.\n\nMetadata only \u2014 download URLs are minted per explicit GET, not\nper row. agent_session_id scopes the list to one run's uploads.",
-        "operationId": "list_assets",
-        "parameters": [
+    "/auth/cli/poll": {
+      "post": {
+        "description": "Poll a device-code auth flow for its token.\n\nUnauthenticated; the device code identifies the flow.",
+        "operationId": "cli_auth_poll",
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CliAuthPollRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PollCliAuthResponse"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "Unknown device code."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
+        },
+        "summary": "Cli Auth Poll",
+        "tags": [
+          "v1"
+        ]
+      }
+    },
+    "/auth/cli/start": {
+      "post": {
+        "description": "Start a device-code auth flow for the CLI.\n\nUnauthenticated: the CLI has no credential yet \u2014 that's what\nit's obtaining. The human authorizes out-of-band in the\ndashboard.",
+        "operationId": "cli_auth_start",
+        "responses": {
+          "201": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/StartCliAuthResponse"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          }
+        },
+        "summary": "Cli Auth Start",
+        "tags": [
+          "v1"
+        ]
+      }
+    },
+    "/budget": {
+      "get": {
+        "description": "Return the caller's current budget summary.",
+        "operationId": "get_budget",
+        "parameters": [
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BudgetSummary"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Get Budget",
+        "tags": [
+          "v1"
+        ]
+      }
+    },
+    "/files": {
+      "get": {
+        "description": "List uploaded files, newest first.\n\nMetadata only \u2014 download URLs are minted per explicit GET, not\nper row. agent_session_id scopes the list to one run's uploads.",
+        "operationId": "list_files",
+        "parameters": [
           {
             "in": "query",
             "name": "agent_session_id",
@@ -10806,7 +11240,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ListAssetsResponse"
+                  "$ref": "#/components/schemas/ListFilesResponse"
                 }
               }
             },
@@ -10848,14 +11282,14 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "List Assets",
+        "summary": "List Files",
         "tags": [
           "v1"
         ]
       },
       "post": {
-        "description": "Upload a file that outlives the sandbox.\n\nv1: PNG images only, base64 in the JSON body, 10 MiB cap. The\nprimary caller is the in-sandbox `agent asset upload` CLI (an\nagent persisting a screenshot to link on a PR), but all\ncredential types work. Returns the org-membership-gated\ndashboard URL so callers never hard-code URL shapes.",
-        "operationId": "create_asset",
+        "description": "Upload a file that outlives the sandbox.\n\nv1: PNG images only, base64 in the JSON body, 10 MiB cap. The\nprimary caller is the in-sandbox `agent file upload` CLI (an\nagent persisting a screenshot to link on a PR), but all\ncredential types work. Returns the org-membership-gated\ndashboard URL so callers never hard-code URL shapes.",
+        "operationId": "create_file",
         "parameters": [
           {
             "in": "header",
@@ -10878,7 +11312,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/CreateAssetRequest"
+                "$ref": "#/components/schemas/CreateFileRequest"
               }
             }
           },
@@ -10889,7 +11323,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/CreateAssetResponse"
+                  "$ref": "#/components/schemas/CreateFileResponse"
                 }
               }
             },
@@ -10943,7 +11377,7 @@
                 }
               }
             },
-            "description": "An asset quota was exceeded (per-session, per-day, or account-wide)."
+            "description": "A file quota was exceeded (per-session, per-day, or account-wide)."
           }
         },
         "security": [
@@ -10951,23 +11385,23 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Create Asset",
+        "summary": "Create File",
         "tags": [
           "v1"
         ]
       }
     },
-    "/assets/{asset_id}": {
+    "/files/{file_id}": {
       "delete": {
-        "description": "Delete an asset.\n\nA foreign, missing, or already-deleted id is an\nindistinguishable 404, so ids can't be enumerated. Sandbox\ntokens get a 403 (a sandbox token sits next to\npotentially-untrusted code and must not be able to destroy the\naccount's assets \u2014 uploading is fine, destruction is not); API\nkeys and user tokens may delete.",
-        "operationId": "delete_asset",
+        "description": "Delete a file.\n\nA foreign, missing, or already-deleted id is an\nindistinguishable 404, so ids can't be enumerated. Sandbox\ntokens get a 403 (a sandbox token sits next to\npotentially-untrusted code and must not be able to destroy the\naccount's files \u2014 uploading is fine, destruction is not); API\nkeys and user tokens may delete.",
+        "operationId": "delete_file",
         "parameters": [
           {
             "in": "path",
-            "name": "asset_id",
+            "name": "file_id",
             "required": true,
             "schema": {
-              "title": "Asset Id",
+              "title": "File Id",
               "type": "string"
             }
           },
@@ -11020,7 +11454,7 @@
                 }
               }
             },
-            "description": "No such asset in your account."
+            "description": "No such file in your account."
           },
           "422": {
             "content": {
@@ -11038,21 +11472,21 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Delete Asset",
+        "summary": "Delete File",
         "tags": [
           "v1"
         ]
       },
       "get": {
-        "description": "Return one asset's metadata and download link.\n\nIncludes the gated dashboard URL and a short-lived presigned\n`download_url`.\n\nTo fetch the bytes locally, call this and then GET download_url\nimmediately \u2014 the JSON API never carries the file. The CLI's\n`agent asset get` wraps exactly that two-step.",
-        "operationId": "get_asset",
+        "description": "Return one file's metadata and download link.\n\nIncludes the gated dashboard URL and a short-lived presigned\n`download_url`.\n\nTo fetch the bytes locally, call this and then GET download_url\nimmediately \u2014 the JSON API never carries the file. The CLI's\n`agent file get` wraps exactly that two-step.",
+        "operationId": "get_file",
         "parameters": [
           {
             "in": "path",
-            "name": "asset_id",
+            "name": "file_id",
             "required": true,
             "schema": {
-              "title": "Asset Id",
+              "title": "File Id",
               "type": "string"
             }
           },
@@ -11078,7 +11512,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetAssetResponse"
+                  "$ref": "#/components/schemas/GetFileResponse"
                 }
               }
             },
@@ -11112,7 +11546,7 @@
                 }
               }
             },
-            "description": "No such asset in your account."
+            "description": "No such file in your account."
           },
           "422": {
             "content": {
@@ -11130,32 +11564,115 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Get Asset",
+        "summary": "Get File",
         "tags": [
           "v1"
         ]
       }
     },
-    "/auth/cli/poll": {
-      "post": {
-        "description": "Poll a device-code auth flow for its token.\n\nUnauthenticated; the device code identifies the flow.",
-        "operationId": "cli_auth_poll",
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/CliAuthPollRequest"
-              }
+    "/integrations": {
+      "get": {
+        "description": "List connected integrations.\n\nA read-only view, so an agent authoring another agent's\nconfig can learn which repositories, channels, teams, and\norganizations it may name before POST /agents/configs.\n\nAvailable to all credential types including sandbox tokens: the\nresponses never include OAuth tokens or any other secret.",
+        "operationId": "get_integrations",
+        "parameters": [
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
             }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetIntegrationsResponse"
+                }
+              }
+            },
+            "description": "Successful Response"
           },
-          "required": true
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
         },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Get Integrations",
+        "tags": [
+          "v1"
+        ]
+      }
+    },
+    "/integrations/github/members": {
+      "get": {
+        "description": "List the GitHub organization roster.\n\n(Or the account itself for a personal workspace) \u2014 the universe of author_id values for\n/sessions and /sessions/search.\n\nMembers carry their linked Slack identity when a Slack-GitHub\nlink exists, and /slack/members carries the reverse link.",
+        "operationId": "list_github_members",
+        "parameters": [
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
         "responses": {
           "200": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PollCliAuthResponse"
+                  "$ref": "#/components/schemas/ListGithubMembersResponse"
                 }
               }
             },
@@ -11181,7 +11698,62 @@
             },
             "description": "The credential may not perform this action, or the account is blocked."
           },
-          "404": {
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "List Github Members",
+        "tags": [
+          "v1"
+        ]
+      }
+    },
+    "/integrations/github/repos": {
+      "get": {
+        "description": "List GitHub repositories connected to the installation.",
+        "operationId": "list_github_repositories",
+        "parameters": [
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ListGithubRepositoriesResponse"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
             "content": {
               "application/json": {
                 "schema": {
@@ -11189,7 +11761,17 @@
                 }
               }
             },
-            "description": "Unknown device code."
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
           },
           "422": {
             "content": {
@@ -11202,22 +11784,45 @@
             "description": "Validation Error"
           }
         },
-        "summary": "Cli Auth Poll",
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "List Github Repositories",
         "tags": [
           "v1"
         ]
       }
     },
-    "/auth/cli/start": {
-      "post": {
-        "description": "Start a device-code auth flow for the CLI.\n\nUnauthenticated: the CLI has no credential yet \u2014 that's what\nit's obtaining. The human authorizes out-of-band in the\ndashboard.",
-        "operationId": "cli_auth_start",
+    "/integrations/linear/teams": {
+      "get": {
+        "description": "List the teams of the connected Linear workspace.",
+        "operationId": "list_linear_teams",
+        "parameters": [
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
         "responses": {
-          "201": {
+          "200": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/StartCliAuthResponse"
+                  "$ref": "#/components/schemas/ListLinearTeamsResponse"
                 }
               }
             },
@@ -11242,18 +11847,43 @@
               }
             },
             "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "Linear is not connected for this account."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
           }
         },
-        "summary": "Cli Auth Start",
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "List Linear Teams",
         "tags": [
           "v1"
         ]
       }
     },
-    "/budget": {
+    "/integrations/sentry/organizations": {
       "get": {
-        "description": "Return the caller's current budget summary.",
-        "operationId": "get_budget",
+        "description": "List the connected Sentry organizations.",
+        "operationId": "list_sentry_organizations",
         "parameters": [
           {
             "in": "header",
@@ -11277,7 +11907,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/BudgetSummary"
+                  "$ref": "#/components/schemas/ListSentryOrganizationsResponse"
                 }
               }
             },
@@ -11319,16 +11949,16 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Get Budget",
+        "summary": "List Sentry Organizations",
         "tags": [
           "v1"
         ]
       }
     },
-    "/integrations": {
+    "/integrations/slack/channels": {
       "get": {
-        "description": "List connected integrations.\n\nA read-only view, so an agent authoring another agent's\nconfig can learn which repositories, channels, teams, and\norganizations it may name before POST /agents/configs.\n\nAvailable to all credential types including sandbox tokens: the\nresponses never include OAuth tokens or any other secret.",
-        "operationId": "get_integrations",
+        "description": "List the channels of the connected Slack workspace, fetched\nlive from the Slack API.",
+        "operationId": "list_slack_channels",
         "parameters": [
           {
             "in": "header",
@@ -11352,7 +11982,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetIntegrationsResponse"
+                  "$ref": "#/components/schemas/ListSlackChannelsResponse"
                 }
               }
             },
@@ -11378,6 +12008,16 @@
             },
             "description": "The credential may not perform this action, or the account is blocked."
           },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "Slack is not connected for this account."
+          },
           "422": {
             "content": {
               "application/json": {
@@ -11394,16 +12034,16 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Get Integrations",
+        "summary": "List Slack Channels",
         "tags": [
           "v1"
         ]
       }
     },
-    "/integrations/github/members": {
+    "/integrations/slack/members": {
       "get": {
-        "description": "List the GitHub organization roster.\n\n(Or the account itself for a personal workspace) \u2014 the universe of author_id values for\n/sessions and /sessions/search.\n\nMembers carry their linked Slack identity when a Slack-GitHub\nlink exists, and /slack/members carries the reverse link.",
-        "operationId": "list_github_members",
+        "description": "List the members of the connected Slack workspace, fetched\nlive from the Slack API.",
+        "operationId": "list_slack_members",
         "parameters": [
           {
             "in": "header",
@@ -11427,7 +12067,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ListGithubMembersResponse"
+                  "$ref": "#/components/schemas/ListSlackMembersResponse"
                 }
               }
             },
@@ -11453,6 +12093,16 @@
             },
             "description": "The credential may not perform this action, or the account is blocked."
           },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "Slack is not connected for this account."
+          },
           "422": {
             "content": {
               "application/json": {
@@ -11469,16 +12119,16 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "List Github Members",
+        "summary": "List Slack Members",
         "tags": [
           "v1"
         ]
       }
     },
-    "/integrations/github/repos": {
+    "/me": {
       "get": {
-        "description": "List GitHub repositories connected to the installation.",
-        "operationId": "list_github_repositories",
+        "description": "Return the identity behind the caller's credential.",
+        "operationId": "whoami",
         "parameters": [
           {
             "in": "header",
@@ -11502,7 +12152,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ListGithubRepositoriesResponse"
+                  "$ref": "#/components/schemas/WhoAmIResponse"
                 }
               }
             },
@@ -11544,17 +12194,35 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "List Github Repositories",
+        "summary": "Whoami",
         "tags": [
           "v1"
         ]
       }
     },
-    "/integrations/linear/teams": {
+    "/memories": {
       "get": {
-        "description": "List the teams of the connected Linear workspace.",
-        "operationId": "list_linear_teams",
+        "description": "List the organization's memories as a readable index.\n\nReturns the memories rendered as a markdown index (one line per\nmemory, carrying its id, path, and description) plus the same\nentries structured, each with every field except `content`. Read\nthe index, then fetch the ids whose content you want.",
+        "operationId": "list_memories",
         "parameters": [
+          {
+            "description": "Limit to memories under this path prefix, matched on whole segments \u2014 repos/acme matches repos/acme/x.md but not repos/acme2/x.md.",
+            "in": "query",
+            "name": "prefix",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Limit to memories under this path prefix, matched on whole segments \u2014 repos/acme matches repos/acme/x.md but not repos/acme2/x.md.",
+              "title": "Prefix"
+            }
+          },
           {
             "in": "header",
             "name": "user-agent",
@@ -11577,7 +12245,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ListLinearTeamsResponse"
+                  "$ref": "#/components/schemas/ListMemoriesWireResponse"
                 }
               }
             },
@@ -11603,16 +12271,6 @@
             },
             "description": "The credential may not perform this action, or the account is blocked."
           },
-          "404": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            },
-            "description": "Linear is not connected for this account."
-          },
           "422": {
             "content": {
               "application/json": {
@@ -11629,16 +12287,14 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "List Linear Teams",
+        "summary": "List Memories",
         "tags": [
           "v1"
         ]
-      }
-    },
-    "/integrations/sentry/organizations": {
-      "get": {
-        "description": "List the connected Sentry organizations.",
-        "operationId": "list_sentry_organizations",
+      },
+      "post": {
+        "description": "Save a memory for future agent sessions.\n\nMemories are durable lessons shared across the whole\norganization \u2014 conventions, past decisions, known gotchas that an\nagent cannot derive from the repository itself. One concise fact\nper memory; the description is what a reader sees in the index.\n\nCreating never overwrites: a path that already exists is a 409, so\ncorrecting an existing memory is an explicit edit.",
+        "operationId": "create_memory",
         "parameters": [
           {
             "in": "header",
@@ -11657,12 +12313,22 @@
             }
           }
         ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateMemoryRequest"
+              }
+            }
+          },
+          "required": true
+        },
         "responses": {
-          "200": {
+          "201": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ListSentryOrganizationsResponse"
+                  "$ref": "#/components/schemas/MemoryWire"
                 }
               }
             },
@@ -11688,15 +12354,25 @@
             },
             "description": "The credential may not perform this action, or the account is blocked."
           },
+          "409": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "A memory already exists at that path."
+          },
           "422": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/HTTPValidationError"
+                  "$ref": "#/components/schemas/ErrorResponse"
                 }
               }
             },
-            "description": "Validation Error"
+            "description": "The path violates the path grammar, the description or content exceeds its limit, or the organization is at the memory cap."
           }
         },
         "security": [
@@ -11704,17 +12380,44 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "List Sentry Organizations",
+        "summary": "Create Memory",
         "tags": [
           "v1"
         ]
       }
     },
-    "/integrations/slack/channels": {
-      "get": {
-        "description": "List the channels of the connected Slack workspace, fetched\nlive from the Slack API.",
-        "operationId": "list_slack_channels",
+    "/memories/{memory_id}": {
+      "delete": {
+        "description": "Delete a memory that is no longer true.\n\nAvailable to every credential type, agents included \u2014 a wrong\nmemory is worse than a missing one. The deleted content is kept in\nthe memory's history for forensics, not for an undo API.",
+        "operationId": "delete_memory",
         "parameters": [
+          {
+            "in": "path",
+            "name": "memory_id",
+            "required": true,
+            "schema": {
+              "title": "Memory Id",
+              "type": "string"
+            }
+          },
+          {
+            "description": "Only delete if the memory's current content_sha256 matches.",
+            "in": "query",
+            "name": "if_sha256",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Only delete if the memory's current content_sha256 matches.",
+              "title": "If Sha256"
+            }
+          },
           {
             "in": "header",
             "name": "user-agent",
@@ -11733,14 +12436,7 @@
           }
         ],
         "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ListSlackChannelsResponse"
-                }
-              }
-            },
+          "204": {
             "description": "Successful Response"
           },
           "401": {
@@ -11771,7 +12467,17 @@
                 }
               }
             },
-            "description": "Slack is not connected for this account."
+            "description": "No such memory in your account."
+          },
+          "409": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "if_sha256 does not match the memory's current content."
           },
           "422": {
             "content": {
@@ -11789,17 +12495,24 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "List Slack Channels",
+        "summary": "Delete Memory",
         "tags": [
           "v1"
         ]
-      }
-    },
-    "/integrations/slack/members": {
+      },
       "get": {
-        "description": "List the members of the connected Slack workspace, fetched\nlive from the Slack API.",
-        "operationId": "list_slack_members",
+        "description": "Read one memory's full content.\n\nThe id comes from the index returned by listing memories.",
+        "operationId": "get_memory",
         "parameters": [
+          {
+            "in": "path",
+            "name": "memory_id",
+            "required": true,
+            "schema": {
+              "title": "Memory Id",
+              "type": "string"
+            }
+          },
           {
             "in": "header",
             "name": "user-agent",
@@ -11822,7 +12535,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ListSlackMembersResponse"
+                  "$ref": "#/components/schemas/MemoryWire"
                 }
               }
             },
@@ -11856,7 +12569,7 @@
                 }
               }
             },
-            "description": "Slack is not connected for this account."
+            "description": "No such memory in your account."
           },
           "422": {
             "content": {
@@ -11874,17 +12587,24 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "List Slack Members",
+        "summary": "Get Memory",
         "tags": [
           "v1"
         ]
-      }
-    },
-    "/me": {
-      "get": {
-        "description": "Return the identity behind the caller's credential.",
-        "operationId": "whoami",
+      },
+      "put": {
+        "description": "Correct an existing memory in place.\n\nPass description, content, or both. This never creates a memory (an\nunknown id is a 404) and never moves one \u2014 the path is immutable, so\nrelocating a memory is a delete plus a create.\n\nPass `if_sha256` (from a previous read) to make a concurrent write\na 409 instead of silently overwriting it.",
+        "operationId": "edit_memory",
         "parameters": [
+          {
+            "in": "path",
+            "name": "memory_id",
+            "required": true,
+            "schema": {
+              "title": "Memory Id",
+              "type": "string"
+            }
+          },
           {
             "in": "header",
             "name": "user-agent",
@@ -11902,12 +12622,22 @@
             }
           }
         ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/EditMemoryRequest"
+              }
+            }
+          },
+          "required": true
+        },
         "responses": {
           "200": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/WhoAmIResponse"
+                  "$ref": "#/components/schemas/MemoryWire"
                 }
               }
             },
@@ -11933,15 +12663,35 @@
             },
             "description": "The credential may not perform this action, or the account is blocked."
           },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "No such memory in your account."
+          },
+          "409": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "if_sha256 does not match the memory's current content."
+          },
           "422": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/HTTPValidationError"
+                  "$ref": "#/components/schemas/ErrorResponse"
                 }
               }
             },
-            "description": "Validation Error"
+            "description": "Neither description nor content was provided, or one of them exceeds its limit."
           }
         },
         "security": [
@@ -11949,7 +12699,7 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Whoami",
+        "summary": "Edit Memory",
         "tags": [
           "v1"
         ]
@@ -12662,7 +13412,7 @@
     },
     "/sessions": {
       "get": {
-        "description": "List cloud agent sessions.\n\nOptionally filtered by config, source, time window, and\nattributed author.",
+        "description": "List cloud agent sessions.\n\nOptionally filtered by config, source, time window, attributed\nauthor, repository, and whether the session is still going.",
         "operationId": "list_agent_sessions",
         "parameters": [
           {
@@ -12778,6 +13528,36 @@
               "title": "Author Id"
             }
           },
+          {
+            "description": "\"owner/name\" (exact) or a bare repo name, matched the same way as on GET /v1/sessions/search. Sessions whose repository is named only inside their agent config \u2014 dashboard starts, cron, handoffs \u2014 do not match.",
+            "in": "query",
+            "name": "repo",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "\"owner/name\" (exact) or a bare repo name, matched the same way as on GET /v1/sessions/search. Sessions whose repository is named only inside their agent config \u2014 dashboard starts, cron, handoffs \u2014 do not match.",
+              "title": "Repo"
+            }
+          },
+          {
+            "description": "Keep only sessions whose conversation is still going \u2014 live or sleeping \u2014 dropping the ones that completed, errored, or were stopped or cancelled. A session parked between turns counts as unfinished.",
+            "in": "query",
+            "name": "unfinished",
+            "required": false,
+            "schema": {
+              "default": false,
+              "description": "Keep only sessions whose conversation is still going \u2014 live or sleeping \u2014 dropping the ones that completed, errored, or were stopped or cancelled. A session parked between turns counts as unfinished.",
+              "title": "Unfinished",
+              "type": "boolean"
+            }
+          },
           {
             "in": "header",
             "name": "user-agent",
@@ -13624,7 +14404,7 @@
     },
     "/sessions/{session_id}/log": {
       "get": {
-        "description": "Download the complete session log.\n\nThe complete, ordered history of the session (agent output, tool calls, thinking,\nlifecycle events, sandbox output, message events) as an ordered\nmanifest of presigned segment URLs.\n\nSegments are gzip members: download in order and concatenate\nfor one file. The JSON API never carries the bytes (same\ntwo-step as assets). /records is the paged live view of the\nsame data.",
+        "description": "Download the complete session log.\n\nThe complete, ordered history of the session (agent output, tool calls, thinking,\nlifecycle events, sandbox output, message events) as an ordered\nmanifest of presigned segment URLs.\n\nSegments are gzip members: download in order and concatenate\nfor one file. The JSON API never carries the bytes (same\ntwo-step as files). /records is the paged live view of the\nsame data.",
         "operationId": "get_agent_session_log",
         "parameters": [
           {