@ellipsis-dev/sdk 0.9.0 → 0.11.0

package/schema/openapi.v1.json

@@ -480,6 +480,37 @@
         "title": "AgentConfigEllipsis",
         "type": "object"
       },
+      "AgentConfigEllipsisPermissions": {
+        "additionalProperties": {
+          "anyOf": [
+            {
+              "$ref": "#/components/schemas/Level"
+            },
+            {
+              "$ref": "#/components/schemas/EllipsisGrant"
+            },
+            {
+              "items": {
+                "anyOf": [
+                  {
+                    "$ref": "#/components/schemas/Level"
+                  },
+                  {
+                    "$ref": "#/components/schemas/EllipsisGrant"
+                  }
+                ]
+              },
+              "type": "array"
+            }
+          ]
+        },
+        "description": "`permissions.ellipsis` as a map: resource \u2192 level | grant | list of\ngrants. Levels are hierarchical (read < write < delete), so `write`\nincludes `read`. An unlisted resource is denied. The whole block is\nintersected with the platform's sandbox ceiling at token mint \u2014 it can\nnarrow what a sandbox token may do, never exceed it.",
+        "propertyNames": {
+          "$ref": "#/components/schemas/Resource"
+        },
+        "title": "AgentConfigEllipsisPermissions",
+        "type": "object"
+      },
       "AgentConfigEnvironment": {
         "additionalProperties": false,
         "description": "Everything about the environment (the sandbox) the agent runs in: which\n`repositories` are cloned into it, which environment `variables` it gets,\nits `compute` sizing, how its `image` is customized, and lifecycle `hooks`.\nWhat the agent may *do* from that environment is the top-level\n`permissions:` block, not this one.\n\nEach `variables` entry names a variable to inject; with an inline `value` it\nis hardcoded, without one it is resolved from the account's sandbox-secrets\nstore. Only the named variables reach this agent; the rest of the account's\nstored variables never do. This is how a config brings in the config and\ncredentials a custom CLI needs.",
@@ -824,14 +855,21 @@
       },
       "AgentConfigPermissions": {
         "additionalProperties": false,
-        "description": "What the agent is allowed to touch, per credential the platform mints\ninto its sandbox. Distinct from `environment:`, which is where the agent\nruns; this is what it may do from there.\n\n`ellipsis` scopes the sandbox's Ellipsis API token\n(`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates\nwith). Only full access exists today \u2014 `true` or the string `all`, both\nmeaning the token may call any Ellipsis API a sandbox token can. The key\nis declarative for now; it reserves the spot for narrowing later, and\nanything other than true/`all` (including `false`) fails validation.\n\n`github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) \u2014\nsee `AgentConfigGithubPermissions`. GitHub enforces it at mint time.",
+        "description": "What the agent is allowed to touch, per credential the platform mints\ninto its sandbox. Distinct from `environment:`, which is where the agent\nruns; this is what it may do from there.\n\n`ellipsis` scopes the sandbox's Ellipsis API token\n(`ELLIPSIS_API_TOKEN`, what the in-sandbox `agent` CLI authenticates\nwith). `true` / the string `all` (the default) grant the full sandbox\nceiling \u2014 everything a sandbox token can ever do. A map narrows it per\nresource (see `AgentConfigEllipsisPermissions`); the minted token carries\nthe intersection, so a config can only ever reduce access. `false` fails\nvalidation \u2014 an agent with no API token cannot report its own progress.\n\n`github` scopes the sandbox's GitHub installation token (`GH_TOKEN`) \u2014\nsee `AgentConfigGithubPermissions`. GitHub enforces it at mint time.",
         "properties": {
           "ellipsis": {
-            "default": true,
-            "enum": [
-              true,
-              "all"
+            "anyOf": [
+              {
+                "enum": [
+                  true,
+                  "all"
+                ]
+              },
+              {
+                "$ref": "#/components/schemas/AgentConfigEllipsisPermissions"
+              }
             ],
+            "default": true,
             "title": "Ellipsis"
           },
           "github": {
@@ -1045,6 +1083,16 @@
           "file": {
             "title": "File",
             "type": "string"
+          },
+          "repository": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/AgentConfigRepository"
+              },
+              {
+                "type": "null"
+              }
+            ]
           }
         },
         "required": [
@@ -1936,6 +1984,10 @@
             "description": "The last commit the config was synced from.",
             "title": "Last Synced Commit Sha"
           },
+          "managed_by": {
+            "$ref": "#/components/schemas/ConfigManagedBy",
+            "description": "Which writer owns this agent. \"github\" agents are defined by a file in a repository and are changed by editing that file; \"api\" agents have no file and are changed through this API."
+          },
           "name": {
             "anyOf": [
               {
@@ -1977,11 +2029,21 @@
           "sha",
           "created_at",
           "updated_at",
+          "managed_by",
           "agent_config"
         ],
         "title": "Config",
         "type": "object"
       },
+      "ConfigManagedBy": {
+        "description": "Which writer owns an agent: the repository file it is defined in, or\nthis API. Every agent has exactly one owner, fixed when it is created and\nchanged only by linking or unlinking it.",
+        "enum": [
+          "github",
+          "api"
+        ],
+        "title": "ConfigManagedBy",
+        "type": "string"
+      },
       "ContributorUsage": {
         "description": "An author who merged a pull request in the window. The pull-request and\nline counts cover their merged pull requests; `reviews` counts reviews this\nperson also submitted.",
         "properties": {
@@ -2041,7 +2103,7 @@
         "type": "object"
       },
       "CreateAgentConfigRequest": {
-        "description": "Parameters for creating an agent config via a pull request. Exactly\none of config or template_id must be set.",
+        "description": "Parameters for creating an agent config. Exactly one of config or\ntemplate_id must be set.",
         "properties": {
           "config": {
             "anyOf": [
@@ -2063,13 +2125,20 @@
                 "type": "null"
               }
             ],
-            "description": "File path within the repo. Omit for the default agents/<slug>.yaml; if set it must be a location the config sync scans (a .yaml/.yml file under agents/, .agents/, ellipsis/, or .ellipsis/ at any depth).",
+            "description": "File path within the repo, when a repository is named. Omit for the default agents/<slug>.yaml; if set it must be a location the config sync scans (a .yaml/.yml file under agents/, .agents/, ellipsis/, or .ellipsis/ at any depth).",
             "title": "Path"
           },
           "repository": {
-            "description": "Target repository name within the caller's account; the owner is always the account, so pass a bare name (e.g. \"my-service\"), not \"owner/my-service\".",
-            "title": "Repository",
-            "type": "string"
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Define the agent as a file in this repository: Ellipsis opens a pull request adding it, and the agent goes live when that merges. Repository name within the caller's account; the owner is always the account, so pass a bare name (e.g. \"my-service\"), not \"owner/my-service\". Omit to create the agent through the API alone, with no file and live immediately.",
+            "title": "Repository"
           },
           "template_id": {
             "anyOf": [
@@ -2084,34 +2153,43 @@
             "title": "Template Id"
           }
         },
-        "required": [
-          "repository"
-        ],
         "title": "CreateAgentConfigRequest",
         "type": "object"
       },
       "CreateAgentConfigResponse": {
-        "description": "The created agent config and the pull request that adds its file.",
+        "description": "The created agent config, plus the pull request that adds its file when\none was opened.",
         "properties": {
           "config": {
             "$ref": "#/components/schemas/Config",
             "description": "The created agent config."
           },
           "path": {
-            "description": "The file path the config was written to.",
-            "title": "Path",
-            "type": "string"
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The file path the config was written to, or null when the agent has no file.",
+            "title": "Path"
           },
           "pull_request_url": {
-            "description": "The pull request that adds the config file. The agent becomes live once it merges and syncs.",
-            "title": "Pull Request Url",
-            "type": "string"
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The pull request that adds the config file. The agent becomes live once it merges and syncs. Null when no repository was named: the agent is already live.",
+            "title": "Pull Request Url"
           }
         },
         "required": [
-          "config",
-          "path",
-          "pull_request_url"
+          "config"
         ],
         "title": "CreateAgentConfigResponse",
         "type": "object"
@@ -2333,6 +2411,34 @@
         "title": "EffortLevel",
         "type": "string"
       },
+      "EllipsisGrant": {
+        "additionalProperties": false,
+        "description": "One grant entry: a level, optionally narrowed to instances whose\nnatural key (a file's name, a memory's path, a secret's name, a config's\nname, a session's id) matches any of the `match` globs.",
+        "properties": {
+          "level": {
+            "$ref": "#/components/schemas/Level"
+          },
+          "match": {
+            "anyOf": [
+              {
+                "items": {
+                  "type": "string"
+                },
+                "type": "array"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Match"
+          }
+        },
+        "required": [
+          "level"
+        ],
+        "title": "EllipsisGrant",
+        "type": "object"
+      },
       "ErrorInfo": {
         "properties": {
           "code": {
@@ -3676,6 +3782,16 @@
         "title": "JiraIntegrationSummary",
         "type": "object"
       },
+      "Level": {
+        "description": "What may be done to a resource. Strictly ordered: a grant at one level\nincludes every level below it (write-only would be a phantom capability \u2014\nno real client can create what it cannot read back).",
+        "enum": [
+          "read",
+          "write",
+          "delete"
+        ],
+        "title": "Level",
+        "type": "string"
+      },
       "LinearIntegrationSummary": {
         "description": "The account's connected Linear organization and its teams.",
         "properties": {
@@ -3770,6 +3886,59 @@
         "title": "LinearTeamsListResponse",
         "type": "object"
       },
+      "LinkAgentConfigRequest": {
+        "description": "Where to put the config file of an agent being moved into a repository.",
+        "properties": {
+          "path": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "File path within the repo. Omit for the default agents/<slug>.yaml; if set it must be a location the config sync scans (a .yaml/.yml file under agents/, .agents/, ellipsis/, or .ellipsis/ at any depth).",
+            "title": "Path"
+          },
+          "repository": {
+            "description": "Repository name within the caller's account; the owner is always the account, so pass a bare name (e.g. \"my-service\"), not \"owner/my-service\".",
+            "title": "Repository",
+            "type": "string"
+          }
+        },
+        "required": [
+          "repository"
+        ],
+        "title": "LinkAgentConfigRequest",
+        "type": "object"
+      },
+      "LinkAgentConfigResponse": {
+        "description": "The agent and the pull request that would put it in a repository.",
+        "properties": {
+          "config": {
+            "$ref": "#/components/schemas/Config",
+            "description": "The agent, still managed through the API until the pull request merges."
+          },
+          "path": {
+            "description": "The file path the config will be written to.",
+            "title": "Path",
+            "type": "string"
+          },
+          "pull_request_url": {
+            "description": "The pull request that adds the config file. The agent becomes managed by that file once it merges.",
+            "title": "Pull Request Url",
+            "type": "string"
+          }
+        },
+        "required": [
+          "config",
+          "path",
+          "pull_request_url"
+        ],
+        "title": "LinkAgentConfigResponse",
+        "type": "object"
+      },
       "LinkedGithubIdentity": {
         "description": "The GitHub identity linked to a Slack member.",
         "properties": {
@@ -5127,6 +5296,25 @@
         "title": "ResolvedReviewScope",
         "type": "object"
       },
+      "Resource": {
+        "description": "Everything a credential can be granted access to, one value per /v1\nresource family. `TOKENS` is reserved for the future token-management\nroutes; nothing maps to it yet.",
+        "enum": [
+          "account",
+          "alerts",
+          "sessions",
+          "files",
+          "memories",
+          "reviews",
+          "configs",
+          "defaults",
+          "secrets",
+          "templates",
+          "integrations",
+          "tokens"
+        ],
+        "title": "Resource",
+        "type": "string"
+      },
       "Review": {
         "description": "One code review: one pipeline iteration over one commit range of a pull\nrequest.\n\n`review_body`, `findings`, and `counters` are produced as each stage\nsession finishes \u2014 while a review is running they are null/empty. Stream a\nstage's session to follow it live, then re-fetch the review.",
         "properties": {
@@ -6612,39 +6800,13 @@
       "Session": {
         "description": "An agent session: one conversation with an agent, from trigger to\nterminal state. Returned by `GET /sessions/{id}` and carried by the\nsession stream's `session`/`snapshot` frames \u2014 REST and stream never\ndisagree about what a session looks like.",
         "properties": {
-          "attributed_user": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/GithubAccountSnippet"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "The GitHub user the session is attributed to, when the attribution is a GitHub user."
-          },
-          "attribution_id": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Identifier of the principal the session is attributed to.",
-            "title": "Attribution Id"
+          "attribution": {
+            "$ref": "#/components/schemas/SessionAttribution",
+            "description": "The principal this session is attributed to."
           },
-          "attribution_type": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/AttributionType"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Kind of principal the session is attributed to (e.g. a GitHub user or an API key)."
+          "budget": {
+            "$ref": "#/components/schemas/SessionBudget",
+            "description": "The spend budget enforced for this session."
           },
           "client_version": {
             "anyOf": [
@@ -6695,28 +6857,9 @@
             "description": "The \"owner/name\" repository context the session was started in, if any.",
             "title": "Context Repository"
           },
-          "cost_fee": {
-            "default": 0,
-            "description": "Platform fee in millicents.",
-            "title": "Cost Fee",
-            "type": "integer"
-          },
-          "cost_sandbox_cpu": {
-            "default": 0,
-            "description": "Sandbox CPU spend in millicents.",
-            "title": "Cost Sandbox Cpu",
-            "type": "integer"
-          },
-          "cost_sandbox_memory": {
-            "default": 0,
-            "description": "Sandbox memory spend in millicents.",
-            "title": "Cost Sandbox Memory",
-            "type": "integer"
-          },
-          "cost_tokens": {
-            "description": "Token spend in millicents. The session's grand total cost is the sum of cost_tokens, cost_sandbox_cpu, cost_sandbox_memory, and cost_fee.",
-            "title": "Cost Tokens",
-            "type": "integer"
+          "cost": {
+            "$ref": "#/components/schemas/SessionCost",
+            "description": "What the session cost, in millicents, broken down by leg and carrying its own total."
           },
           "created_at": {
             "description": "When the session was created.",
@@ -6817,28 +6960,9 @@
             "description": "Pull requests the session created or updated.",
             "title": "Output Prs"
           },
-          "parent_kind": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/ParentKind"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "How this session relates to its parent session, if any."
-          },
-          "parent_session_id": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Identifier of the parent session that spawned this one, if any.",
-            "title": "Parent Session Id"
+          "parent": {
+            "$ref": "#/components/schemas/SessionParent",
+            "description": "What preceded this session, if anything."
           },
           "prompt": {
             "anyOf": [
@@ -6856,27 +6980,6 @@
             "$ref": "#/components/schemas/SessionPrompting",
             "description": "Whether a client may send this session a message and, when it may not, the reason to show instead of a composer."
           },
-          "replayed_from_session_id": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Identifier of the original session this one was replayed from, if it was started via replay.",
-            "title": "Replayed From Session Id"
-          },
-          "resolved_budget_cents": {
-            "description": "The spend budget resolved for this session, in cents.",
-            "title": "Resolved Budget Cents",
-            "type": "integer"
-          },
-          "resolved_budget_source": {
-            "$ref": "#/components/schemas/BudgetSource",
-            "description": "Where the resolved budget came from."
-          },
           "sandbox_id": {
             "anyOf": [
               {
@@ -6932,132 +7035,161 @@
             "description": "Human-readable reason for the current status, when there is one.",
             "title": "Status Reason"
           },
-          "stopped_at": {
+          "stopped": {
+            "$ref": "#/components/schemas/SessionStopped",
+            "description": "The stop request, if the session was stopped."
+          },
+          "surface": {
             "anyOf": [
               {
-                "format": "date-time",
-                "type": "string"
+                "$ref": "#/components/schemas/SessionSurface"
               },
               {
                 "type": "null"
               }
             ],
-            "description": "When a stop was requested, if one was.",
-            "title": "Stopped At"
+            "description": "The public status projection; null for laptop-synced sessions."
+          },
+          "tokens": {
+            "$ref": "#/components/schemas/SessionTokens",
+            "description": "The tokens the session spent and the model they went to. `total` includes the prompt-cache lanes."
+          },
+          "updated_at": {
+            "description": "When the session was last updated.",
+            "format": "date-time",
+            "title": "Updated At",
+            "type": "string"
           },
-          "stopped_by": {
+          "webhook_id": {
             "anyOf": [
               {
-                "type": "integer"
+                "type": "string"
               },
               {
                 "type": "null"
               }
             ],
-            "description": "GitHub account id of the user who stopped the session, if known.",
-            "title": "Stopped By"
+            "description": "Identifier of the webhook event that triggered the session, if any.",
+            "title": "Webhook Id"
           },
-          "stopped_by_user": {
+          "webhook_type": {
             "anyOf": [
               {
-                "$ref": "#/components/schemas/GithubAccountSnippet"
+                "$ref": "#/components/schemas/WebhookType"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Type of the webhook event that triggered the session, if any."
+          }
+        },
+        "required": [
+          "id",
+          "created_at",
+          "updated_at",
+          "harness",
+          "source",
+          "status",
+          "prompting"
+        ],
+        "title": "Session",
+        "type": "object"
+      },
+      "SessionAttribution": {
+        "description": "The principal a session is attributed to: what kind, its id, and \u2014 when\nthe kind is a GitHub user \u2014 the resolved display snippet.",
+        "properties": {
+          "id": {
+            "anyOf": [
+              {
+                "type": "string"
               },
               {
                 "type": "null"
               }
             ],
-            "description": "The GitHub user who stopped the session, if it was stopped."
+            "description": "Identifier of the principal the session is attributed to.",
+            "title": "Id"
           },
-          "surface": {
+          "type": {
             "anyOf": [
               {
-                "$ref": "#/components/schemas/SessionSurface"
+                "$ref": "#/components/schemas/AttributionType"
               },
               {
                 "type": "null"
               }
             ],
-            "description": "The public status projection; null for laptop-synced sessions."
+            "description": "Kind of principal the session is attributed to (e.g. a GitHub user or an API key)."
           },
-          "tokens_cache_creation": {
+          "user": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/GithubAccountSnippet"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The GitHub user the session is attributed to, resolved at read time. Null when the attribution is not a GitHub user."
+          }
+        },
+        "title": "SessionAttribution",
+        "type": "object"
+      },
+      "SessionBudget": {
+        "description": "The spend budget actually enforced for this session, and which layer of\nthe cascade set it.",
+        "properties": {
+          "cents": {
             "default": 0,
-            "description": "Tokens written to the prompt cache.",
-            "title": "Tokens Cache Creation",
+            "description": "The spend budget resolved for this session, in cents.",
+            "title": "Cents",
             "type": "integer"
           },
-          "tokens_cache_read": {
+          "source": {
+            "$ref": "#/components/schemas/BudgetSource",
+            "default": "account",
+            "description": "Where the resolved budget came from."
+          }
+        },
+        "title": "SessionBudget",
+        "type": "object"
+      },
+      "SessionCost": {
+        "description": "What a session (or one turn of it) cost, in millicents.\n\n`llm` is deliberately NOT called `tokens`: it would sit beside the `tokens`\nobject and read as \"the token count's cost\" rather than \"the cost of the\nLLM leg\".",
+        "properties": {
+          "fee": {
             "default": 0,
-            "description": "Tokens read from the prompt cache.",
-            "title": "Tokens Cache Read",
+            "description": "Platform fee in millicents.",
+            "title": "Fee",
             "type": "integer"
           },
-          "tokens_input": {
+          "llm": {
             "default": 0,
-            "description": "Input tokens used.",
-            "title": "Tokens Input",
+            "description": "LLM spend in millicents.",
+            "title": "Llm",
             "type": "integer"
           },
-          "tokens_model": {
-            "description": "The model the token counts are attributed to.",
-            "title": "Tokens Model",
-            "type": "string"
-          },
-          "tokens_output": {
+          "sandbox_cpu": {
             "default": 0,
-            "description": "Output tokens used.",
-            "title": "Tokens Output",
+            "description": "Sandbox CPU spend in millicents.",
+            "title": "Sandbox Cpu",
             "type": "integer"
           },
-          "tokens_total": {
+          "sandbox_memory": {
             "default": 0,
-            "description": "Total tokens used by the session.",
-            "title": "Tokens Total",
+            "description": "Sandbox memory spend in millicents.",
+            "title": "Sandbox Memory",
             "type": "integer"
           },
-          "updated_at": {
-            "description": "When the session was last updated.",
-            "format": "date-time",
-            "title": "Updated At",
-            "type": "string"
-          },
-          "webhook_id": {
-            "anyOf": [
-              {
-                "type": "string"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Identifier of the webhook event that triggered the session, if any.",
-            "title": "Webhook Id"
-          },
-          "webhook_type": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/WebhookType"
-              },
-              {
-                "type": "null"
-              }
-            ],
-            "description": "Type of the webhook event that triggered the session, if any."
+          "total": {
+            "default": 0,
+            "description": "The grand total in millicents: llm + sandbox_cpu + sandbox_memory + fee.",
+            "title": "Total",
+            "type": "integer"
           }
         },
-        "required": [
-          "id",
-          "created_at",
-          "updated_at",
-          "harness",
-          "source",
-          "cost_tokens",
-          "tokens_model",
-          "resolved_budget_cents",
-          "resolved_budget_source",
-          "status",
-          "prompting"
-        ],
-        "title": "Session",
+        "title": "SessionCost",
         "type": "object"
       },
       "SessionExecution": {
@@ -7390,6 +7522,48 @@
         "title": "SessionMessageStatus",
         "type": "string"
       },
+      "SessionParent": {
+        "description": "The ONE \"preceded-by\" chain: the predecessor session and how this one\nrelates to it. Not a parent that orchestrates children \u2014 a session never\nspawns sub-sessions.",
+        "properties": {
+          "kind": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/ParentKind"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "How this session relates to its parent session, if any."
+          },
+          "replayed_from_session_id": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Identifier of the original session this one was replayed from, if it was started via replay.",
+            "title": "Replayed From Session Id"
+          },
+          "session_id": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Identifier of the parent session that spawned this one, if any.",
+            "title": "Session Id"
+          }
+        },
+        "title": "SessionParent",
+        "type": "object"
+      },
       "SessionPr": {
         "description": "A pull request this session created, denormalized at capture time so\nsession surfaces render a labeled link without joining gh_prs. Live PR\nstate (open/merged/closed) is not stored here \u2014 read it from gh_prs where\na view needs it.",
         "properties": {
@@ -7827,6 +8001,49 @@
         "title": "SessionStatus",
         "type": "string"
       },
+      "SessionStopped": {
+        "description": "The stop request, if there was one: when, by which GitHub account id,\nand that account resolved to a display snippet.",
+        "properties": {
+          "at": {
+            "anyOf": [
+              {
+                "format": "date-time",
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "When a stop was requested, if one was.",
+            "title": "At"
+          },
+          "by": {
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "GitHub account id of the user who stopped the session, if known.",
+            "title": "By"
+          },
+          "by_user": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/GithubAccountSnippet"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "The GitHub user who stopped the session, resolved at read time."
+          }
+        },
+        "title": "SessionStopped",
+        "type": "object"
+      },
       "SessionSurface": {
         "description": "The three fields we expose. All `None` for an un-keyed (laptop) session.\n\n`use_enum_values=True` (from CustomBaseModel) stores the members as their\nstring values, so this serializes to `{\"session\": \"alive\", \"run\": \"waiting\",\n\"status\": \"waiting\"}` \u2014 a plain object, not enum names.",
         "properties": {
@@ -7870,6 +8087,49 @@
         "title": "SessionSurface",
         "type": "object"
       },
+      "SessionTokens": {
+        "description": "The token counts a session (or turn) spent, and the model they went to.\n\n`total` INCLUDES the cache lanes, unlike the old flat `tokens_total` which\ncounted input+output+thinking only and left callers to add cache reads and\nwrites back themselves (the deleted `tokensTotalAll` helper). Cache tokens\ndominate an agent run's token bill, so a \"total\" that omits them is the\nwrong default and produced two competing totals in the dashboard.",
+        "properties": {
+          "cache_creation": {
+            "default": 0,
+            "description": "Tokens written to the prompt cache.",
+            "title": "Cache Creation",
+            "type": "integer"
+          },
+          "cache_read": {
+            "default": 0,
+            "description": "Tokens read from the prompt cache.",
+            "title": "Cache Read",
+            "type": "integer"
+          },
+          "input": {
+            "default": 0,
+            "description": "Input tokens used.",
+            "title": "Input",
+            "type": "integer"
+          },
+          "model": {
+            "default": "",
+            "description": "The model the token counts are attributed to.",
+            "title": "Model",
+            "type": "string"
+          },
+          "output": {
+            "default": 0,
+            "description": "Output tokens used.",
+            "title": "Output",
+            "type": "integer"
+          },
+          "total": {
+            "default": 0,
+            "description": "Total tokens consumed, INCLUDING the prompt-cache reads and writes \u2014 the same basis the token cost is priced on.",
+            "title": "Total",
+            "type": "integer"
+          }
+        },
+        "title": "SessionTokens",
+        "type": "object"
+      },
       "SessionsListResponse": {
         "description": "A page of sessions in the lean wire shape.",
         "properties": {
@@ -8508,6 +8768,20 @@
         "title": "TranscriptIngestResult",
         "type": "object"
       },
+      "UpdateAgentConfigRequest": {
+        "description": "A replacement definition for an agent managed through the API.",
+        "properties": {
+          "config": {
+            "$ref": "#/components/schemas/AgentConfig",
+            "description": "The agent's new definition. Replaces the previous one wholesale \u2014 this is not a partial update."
+          }
+        },
+        "required": [
+          "config"
+        ],
+        "title": "UpdateAgentConfigRequest",
+        "type": "object"
+      },
       "UsageDailyPoint": {
         "description": "One day's usage: tokens split by type, and cost split into the four\nbilled categories. `tokens` is the sum of the four token types.",
         "properties": {
@@ -8829,7 +9103,7 @@
         "x-ellipsis-sdk-method": "agents.configs.list"
       },
       "post": {
-        "description": "Create an agent config via pull request.\n\nThe PR adds the config file to agents/ on the target\nrepository; the agent goes live when it merges.\n\nAccepts an inline config or a gallery template slug. 409 when\nanother live agent already holds the name.",
+        "description": "Create an agent config.\n\nName a repository and Ellipsis opens a pull request adding the\nconfig file to agents/ there; the agent goes live when it\nmerges. Omit it and the agent is created here, with no file,\nlive immediately \u2014 and every file reference in it must name the\nrepository it lives in.\n\nAccepts an inline config or a gallery template slug. 409 when\nanother live agent already holds the name.",
         "operationId": "create_agent_config",
         "parameters": [
           {
@@ -8928,7 +9202,7 @@
                 }
               }
             },
-            "description": "The agent's name contains no usable characters."
+            "description": "The agent's name contains no usable characters, or a file reference names no repository."
           }
         },
         "security": [
@@ -8944,9 +9218,9 @@
       }
     },
     "/agents/configs/{config_id}": {
-      "get": {
-        "description": "Return one saved agent config, by id or by the agent's name.",
-        "operationId": "get_agent_config",
+      "delete": {
+        "description": "Delete an agent, by id or by the agent's name.\n\nThe agent stops running and its name is freed immediately; its\npast sessions remain readable. Only for agents managed through\nthis API \u2014 delete the file to remove one defined by a\nrepository.",
+        "operationId": "delete_agent_config",
         "parameters": [
           {
             "in": "path",
@@ -8975,14 +9249,7 @@
           }
         ],
         "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/AgentConfigResponse"
-                }
-              }
-            },
+          "204": {
             "description": "Successful Response"
           },
           "401": {
@@ -9015,6 +9282,16 @@
             },
             "description": "No such config in your account."
           },
+          "409": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The agent is defined by a file in a repository; delete that file instead."
+          },
           "422": {
             "content": {
               "application/json": {
@@ -9031,11 +9308,457 @@
             "HTTPBearer": []
           }
         ],
-        "summary": "Get Agent Config",
+        "summary": "Delete Agent Config",
+        "tags": [
+          "v1"
+        ],
+        "x-ellipsis-sdk-method": "agents.configs.delete"
+      },
+      "get": {
+        "description": "Return one saved agent config, by id or by the agent's name.",
+        "operationId": "get_agent_config",
+        "parameters": [
+          {
+            "in": "path",
+            "name": "config_id",
+            "required": true,
+            "schema": {
+              "title": "Config Id",
+              "type": "string"
+            }
+          },
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AgentConfigResponse"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "No such config in your account."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HTTPValidationError"
+                }
+              }
+            },
+            "description": "Validation Error"
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Get Agent Config",
         "tags": [
           "v1"
         ],
         "x-ellipsis-sdk-method": "agents.configs.get"
+      },
+      "put": {
+        "description": "Replace an agent's definition, by id or by the agent's name.\n\nThe whole definition is replaced, and the change is live at\nonce. Only for agents managed through this API: one defined by a\nrepository file is a 409, since the next push to that file would\nrevert the change \u2014 unlink it first to take ownership.",
+        "operationId": "update_agent_config",
+        "parameters": [
+          {
+            "in": "path",
+            "name": "config_id",
+            "required": true,
+            "schema": {
+              "title": "Config Id",
+              "type": "string"
+            }
+          },
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateAgentConfigRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AgentConfigResponse"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The config is invalid (for example an unschedulable cron expression)."
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "No such config in your account."
+          },
+          "409": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The agent is defined by a file in a repository, or another live agent already holds the new name."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The agent's name is missing or malformed, or a file reference names no repository."
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Update Agent Config",
+        "tags": [
+          "v1"
+        ],
+        "x-ellipsis-sdk-method": "agents.configs.update"
+      }
+    },
+    "/agents/configs/{config_id}/link": {
+      "post": {
+        "description": "Move an agent into a repository, by id or by the agent's name.\n\nOpens a pull request adding the agent's config file. The agent\nkeeps running unchanged meanwhile; merging hands it over to the\nfile, after which the file is what changes it. Nothing happens\nif the pull request is never merged.",
+        "operationId": "link_agent_config",
+        "parameters": [
+          {
+            "in": "path",
+            "name": "config_id",
+            "required": true,
+            "schema": {
+              "title": "Config Id",
+              "type": "string"
+            }
+          },
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/LinkAgentConfigRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/LinkAgentConfigResponse"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The path is not a synced config location, or the repository has no commits."
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The config or repository was not found in your account."
+          },
+          "409": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The agent is already defined by a file, a link is already open for it, a file already exists at that path, or another agent syncs from it."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "GitHub rejected the pull request."
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Link Agent Config",
+        "tags": [
+          "v1"
+        ],
+        "x-ellipsis-sdk-method": "agents.configs.link"
+      }
+    },
+    "/agents/configs/{config_id}/unlink": {
+      "post": {
+        "description": "Take over an agent from its file, by id or by the agent's name.\n\nThe file stops governing the agent immediately and further\nchanges go through this API. The file is left in place, inert \u2014\ndelete it whenever you like.",
+        "operationId": "unlink_agent_config",
+        "parameters": [
+          {
+            "in": "path",
+            "name": "config_id",
+            "required": true,
+            "schema": {
+              "title": "Config Id",
+              "type": "string"
+            }
+          },
+          {
+            "in": "header",
+            "name": "user-agent",
+            "required": false,
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "title": "User-Agent"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AgentConfigResponse"
+                }
+              }
+            },
+            "description": "Successful Response"
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The bearer token is missing, invalid, or revoked."
+          },
+          "403": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The credential may not perform this action, or the account is blocked."
+          },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "No such config in your account."
+          },
+          "409": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The agent is already managed through the API."
+          },
+          "422": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            },
+            "description": "The config has a file reference that names no repository, so it cannot resolve without its source repository."
+          }
+        },
+        "security": [
+          {
+            "HTTPBearer": []
+          }
+        ],
+        "summary": "Unlink Agent Config",
+        "tags": [
+          "v1"
+        ],
+        "x-ellipsis-sdk-method": "agents.configs.unlink"
       }
     },
     "/agents/defaults": {