@workos/openapi-spec 0.71.0 → 0.73.0

package/dist/types.d.ts

@@ -4,6 +4,78 @@
  */
 
 export interface paths {
+    "/agents/blueprints": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List agent blueprints
+         * @description Lists the agent blueprints in the current environment.
+         */
+        get: operations["AgentBlueprintsController_list"];
+        put?: never;
+        /**
+         * Create an agent blueprint
+         * @description Creates an agent blueprint: the template describing what an agent may do (its permission ceiling), who may invoke it, and the lifetimes of its sessions.
+         */
+        post: operations["AgentBlueprintsController_create"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/agents/blueprints/{agent_blueprint_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get an agent blueprint
+         * @description Retrieves an agent blueprint by ID.
+         */
+        get: operations["AgentBlueprintsController_get"];
+        put?: never;
+        post?: never;
+        /**
+         * Delete an agent blueprint
+         * @description Deletes an agent blueprint along with its configuration, instances, and sessions.
+         */
+        delete: operations["AgentBlueprintsController_delete"];
+        options?: never;
+        head?: never;
+        /**
+         * Update an agent blueprint
+         * @description Updates an agent blueprint. Omitted fields are left unchanged; provided lists replace the existing configuration.
+         */
+        patch: operations["AgentBlueprintsController_update"];
+        trace?: never;
+    };
+    "/agents/blueprints/{agent_blueprint_id}/tokens": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Mint an agent token
+         * @description Mint an agent access token (and backing session) from an agent blueprint. The session can be user-delegated (exchanging a user access token), autonomous (the agent acting as itself in an organization), agent-delegated (the agent exchanging its own access token for a new session on the same instance), or a refresh of a previously issued refresh token.
+         */
+        post: operations["AgentBlueprintsTokenController_mintToken"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/agents/claims/attempts": {
         parameters: {
             query?: never;
@@ -44,6 +116,50 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/agents/instances": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List agent instances
+         * @description Lists the agent instances in the current environment. Instances are created implicitly when tokens are minted.
+         */
+        get: operations["AgentInstancesController_list"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/agents/instances/{agent_instance_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get an agent instance
+         * @description Retrieves an agent instance by ID.
+         */
+        get: operations["AgentInstancesController_get"];
+        put?: never;
+        post?: never;
+        /**
+         * Delete an agent instance
+         * @description Deletes an agent instance along with its sessions, invalidating their refresh tokens.
+         */
+        delete: operations["AgentInstancesController_delete"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/agents/registrations/{id}": {
         parameters: {
             query?: never;
@@ -64,6 +180,66 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/agents/sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List agent instance sessions
+         * @description Lists the agent instance sessions in the current environment. Sessions are created when tokens are minted.
+         */
+        get: operations["AgentInstanceSessionsController_list"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/agents/sessions/{agent_instance_session_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get an agent instance session
+         * @description Retrieves an agent instance session by ID.
+         */
+        get: operations["AgentInstanceSessionsController_get"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/agents/sessions/{agent_instance_session_id}/revoke": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Revoke an agent instance session
+         * @description Revokes an agent instance session, invalidating its refresh token and every access token minted under it. Revocation is idempotent: revoking an already-revoked session keeps the original `revoked_at`, and revoking an already-expired session returns the session with `status: expired` and a null `revoked_at`.
+         */
+        post: operations["AgentInstanceSessionsController_revoke"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api_keys/validations": {
         parameters: {
             query?: never;
@@ -3733,6 +3909,11 @@ export interface components {
             /** @description Array of [User Consent Options](/reference/workos-connect/standalone/user-consent-options) to store with the session. */
             user_consent_options?: components["schemas"]["UserConsentOption"][];
         };
+        /**
+         * @example desc
+         * @enum {string}
+         */
+        PaginationOrder: "normal" | "desc" | "asc";
         ValidateApiKeyDto: {
             /**
              * @description The value for an API key.
@@ -3748,11 +3929,6 @@ export interface components {
              */
             expires_at?: string | null;
         };
-        /**
-         * @example desc
-         * @enum {string}
-         */
-        PaginationOrder: "normal" | "desc" | "asc";
         RedirectUriDto: {
             /**
              * @description The redirect URI.
@@ -4042,7 +4218,15 @@ export interface components {
         };
         UpdateAuditLogsRetentionDto: {
             /**
-             * @description The number of days Audit Log events will be retained. Valid values are `30` and `365`.
+             * @description The period Audit Log events will be retained. Valid values are `1_MONTH` through `11_MONTHS` in one-month increments and `1_YEAR` through `10_YEARS` in one-year increments. Mutually exclusive with `retention_period_in_days`.
+             * @example 1_MONTH
+             * @enum {string}
+             */
+            retention_period: "1_MONTH" | "2_MONTHS" | "3_MONTHS" | "4_MONTHS" | "5_MONTHS" | "6_MONTHS" | "7_MONTHS" | "8_MONTHS" | "9_MONTHS" | "10_MONTHS" | "11_MONTHS" | "1_YEAR" | "2_YEARS" | "3_YEARS" | "4_YEARS" | "5_YEARS" | "6_YEARS" | "7_YEARS" | "8_YEARS" | "9_YEARS" | "10_YEARS";
+        } | {
+            /**
+             * @deprecated
+             * @description The number of days Audit Log events will be retained. Valid values are `30` through `330` in 30-day increments and `365` through `3650` in 365-day increments. Deprecated: use `retention_period` instead. Mutually exclusive with `retention_period`.
              * @example 30
              */
             retention_period_in_days: number;
@@ -6299,130 +6483,341 @@ export interface components {
                 name: string;
             }[];
         };
-        ApiKey: {
+        AgentBlueprint: {
             /**
-             * @description Distinguishes the API Key object.
+             * @description Distinguishes the agent blueprint object.
              * @constant
              */
-            object: "api_key";
+            object: "agent_blueprint";
             /**
-             * @description Unique identifier of the API Key.
-             * @example api_key_01EHZNVPK3SFK441A1RGBFSHRT
+             * @description Unique identifier of the agent blueprint.
+             * @example agent_blueprint_01EHWNCE74X7JSDV0X3SZ3KJNY
              */
             id: string;
             /**
-             * @description The entity that owns the API Key.
-             * @example {
-             *       "type": "organization",
-             *       "id": "org_01EHZNVPK3SFK441A1RGBFSHRT"
-             *     }
+             * @description Human-readable name of the agent blueprint.
+             * @example Prospecting Agent
              */
-            owner: {
+            name: string;
+            /**
+             * @description Human-readable description of the agent blueprint.
+             * @example Finds and qualifies sales prospects.
+             */
+            description: string | null;
+            /**
+             * @description Permission slugs forming the ceiling on what sessions minted from this blueprint may do.
+             * @example [
+             *       "crm:read",
+             *       "email:send"
+             *     ]
+             */
+            permissions: string[];
+            /** @description Who may mint sessions from this blueprint. */
+            invocable_by: {
                 /**
-                 * @description The type of the API Key owner.
-                 * @example organization
-                 * @constant
+                 * @description Role slugs whose members may mint user-delegated sessions from this blueprint.
+                 * @example [
+                 *       "manager"
+                 *     ]
                  */
-                type: "organization";
+                role_slugs: string[];
                 /**
-                 * @description Unique identifier of the API Key owner.
-                 * @example org_01EHZNVPK3SFK441A1RGBFSHRT
+                 * @description Organizations in which sessions may be minted from this blueprint, enforced on user-delegated, autonomous, and agent-delegated mints.
+                 * @example [
+                 *       "org_01EHWNCE74X7JSDV0X3SZ3KJNY"
+                 *     ]
                  */
-                id: string;
-            } | {
+                organization_ids: string[];
+            };
+            /** @description Token and session lifetimes for sessions minted from this blueprint. */
+            session_settings: {
                 /**
-                 * @description The type of the API Key owner.
-                 * @example user
-                 * @constant
+                 * @description Maximum lifetime of a session in seconds; refreshes never extend a session past this.
+                 * @example 3600
                  */
-                type: "user";
+                max_age_seconds: number;
                 /**
-                 * @description Unique identifier of the API Key owner.
-                 * @example user_01EHZNVPK3SFK441A1RGBFSHRT
+                 * @description Lifetime of each minted access token in seconds.
+                 * @example 300
                  */
-                id: string;
+                access_token_ttl_seconds: number;
                 /**
-                 * @description Unique identifier of the organization the API Key can access.
-                 * @example org_01EHZNVPK3SFK441A1RGBFSHRT
+                 * @description Lifetime of each rotated refresh token in seconds.
+                 * @example 3600
                  */
-                organization_id: string;
+                refresh_token_ttl_seconds: number;
             };
             /**
-             * @description A descriptive name for the API Key.
-             * @example Production API Key
+             * Format: date-time
+             * @description Timestamp when the agent blueprint was created.
+             * @example 2026-01-15T12:00:00.000Z
              */
-            name: string;
+            created_at: string;
             /**
-             * @description An obfuscated representation of the API Key value.
-             * @example sk_...3456
+             * Format: date-time
+             * @description Timestamp when the agent blueprint was last updated.
+             * @example 2026-01-15T12:00:00.000Z
              */
-            obfuscated_value: string;
+            updated_at: string;
+        };
+        AgentInstance: {
             /**
-             * Format: date-time
-             * @description Timestamp of when the API Key was last used.
-             * @example null
+             * @description Distinguishes the agent instance object.
+             * @constant
              */
-            last_used_at: string | null;
+            object: "agent_instance";
             /**
-             * Format: date-time
-             * @description Timestamp when the API Key expires. Null means the key does not expire.
-             * @example null
+             * @description Unique identifier of the agent instance.
+             * @example agent_01EHWNCE74X7JSDV0X3SZ3KJNY
              */
-            expires_at: string | null;
+            id: string;
             /**
-             * @description The permission slugs assigned to the API Key.
-             * @example [
-             *       "posts:read",
-             *       "posts:write"
-             *     ]
+             * @description The blueprint this instance was minted from.
+             * @example agent_blueprint_01EHWNCE74X7JSDV0X3SZ3KJNY
              */
-            permissions: string[];
+            agent_blueprint_id: string;
+            /**
+             * @description The organization the instance acts within.
+             * @example org_01EHWNCE74X7JSDV0X3SZ3KJNY
+             */
+            organization_id: string;
+            /**
+             * @description The organization membership of the delegating user; `null` for autonomous instances.
+             * @example om_01EHWNCE74X7JSDV0X3SZ3KJNY
+             */
+            organization_membership_id: string | null;
+            /**
+             * @description Whether the instance acts on behalf of a specific user (`delegated`) or as itself (`autonomous`).
+             * @enum {string}
+             */
+            type: "delegated" | "autonomous";
             /**
              * Format: date-time
-             * @description An ISO 8601 timestamp.
+             * @description Timestamp when the agent instance was created.
              * @example 2026-01-15T12:00:00.000Z
              */
             created_at: string;
             /**
              * Format: date-time
-             * @description An ISO 8601 timestamp.
+             * @description Timestamp when the agent instance was last updated.
              * @example 2026-01-15T12:00:00.000Z
              */
             updated_at: string;
         };
-        ApiKeyValidationResponse: {
-            api_key: components["schemas"]["ApiKey"] | null;
+        AgentToken: {
             /**
-             * @description The ID of the agent registration this API Key was issued for. Present only when the API Key is assigned to an agent registration.
-             * @example agent_reg_01EHZNVPK3SFK441A1RGBFSHRT
+             * @description The agent access token (a JWT) carrying the effective permissions.
+             * @example eyJhbGciOiJSUzI1NiIsImtpZCI6...
              */
-            agent_registration_id?: string;
-        };
-        ConnectApplication: {
+            access_token: string;
             /**
-             * @description Distinguishes the connect application object.
-             * @example connect_application
+             * @description Always `Bearer`.
              * @constant
              */
-            object: "connect_application";
+            token_type: "Bearer";
             /**
-             * @description The unique ID of the connect application.
-             * @example conn_app_01HXYZ123456789ABCDEFGHIJ
+             * @description Number of seconds until the access token expires.
+             * @example 300
              */
-            id: string;
+            expires_in: number;
             /**
-             * @description The client ID of the connect application.
-             * @example client_01HXYZ123456789ABCDEFGHIJ
+             * @description Single-use refresh token for rotating the access token within the session lifetime.
+             * @example njGkA8Wyht0GBEGGA0Zh1Q3wZzL2...
              */
-            client_id: string;
+            refresh_token: string;
             /**
-             * @description A description of the connect application.
-             * @example An application for managing user access
+             * @description The agent instance the session belongs to.
+             * @example agent_01EHWNCE74X7JSDV0X3SZ3KJNY
              */
-            description: string | null;
+            agent_instance_id: string;
             /**
-             * @description The name of the connect application.
-             * @example My Application
+             * @description Whether this mint created the agent instance: `true` only for the mint that inserted the row, `false` when an existing instance was reused (including when a concurrent mint inserted it first).
+             * @example false
+             */
+            new_instance: boolean;
+            /**
+             * @description The backing agent instance session.
+             * @example agent_session_01EHWNCE74X7JSDV0X3SZ3KJNY
+             */
+            agent_instance_session_id: string;
+            /**
+             * @description The effective permission slugs carried by the token.
+             * @example [
+             *       "crm:read"
+             *     ]
+             */
+            permissions: string[];
+        };
+        AgentInstanceSession: {
+            /**
+             * @description Distinguishes the agent instance session object.
+             * @constant
+             */
+            object: "agent_instance_session";
+            /**
+             * @description Unique identifier of the agent instance session.
+             * @example agent_session_01EHWNCE74X7JSDV0X3SZ3KJNY
+             */
+            id: string;
+            /**
+             * @description The agent instance the session belongs to.
+             * @example agent_01EHWNCE74X7JSDV0X3SZ3KJNY
+             */
+            agent_instance_id: string;
+            /**
+             * @description Derived from `revoked_at` and `expires_at` at read time; a revoked session stays `revoked` even after it expires.
+             * @enum {string}
+             */
+            status: "active" | "revoked" | "expired";
+            /**
+             * Format: date-time
+             * @description Timestamp when the session expires.
+             * @example 2026-01-15T13:00:00.000Z
+             */
+            expires_at: string;
+            /**
+             * Format: date-time
+             * @description Timestamp when the session was revoked; `null` if it has not been revoked.
+             * @example null
+             */
+            revoked_at: string | null;
+            /**
+             * Format: date-time
+             * @description Timestamp when the session was created.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            created_at: string;
+            /**
+             * Format: date-time
+             * @description Timestamp when the session was last updated.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            updated_at: string;
+        };
+        ApiKey: {
+            /**
+             * @description Distinguishes the API Key object.
+             * @constant
+             */
+            object: "api_key";
+            /**
+             * @description Unique identifier of the API Key.
+             * @example api_key_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            id: string;
+            /**
+             * @description The entity that owns the API Key.
+             * @example {
+             *       "type": "organization",
+             *       "id": "org_01EHZNVPK3SFK441A1RGBFSHRT"
+             *     }
+             */
+            owner: {
+                /**
+                 * @description The type of the API Key owner.
+                 * @example organization
+                 * @constant
+                 */
+                type: "organization";
+                /**
+                 * @description Unique identifier of the API Key owner.
+                 * @example org_01EHZNVPK3SFK441A1RGBFSHRT
+                 */
+                id: string;
+            } | {
+                /**
+                 * @description The type of the API Key owner.
+                 * @example user
+                 * @constant
+                 */
+                type: "user";
+                /**
+                 * @description Unique identifier of the API Key owner.
+                 * @example user_01EHZNVPK3SFK441A1RGBFSHRT
+                 */
+                id: string;
+                /**
+                 * @description Unique identifier of the organization the API Key can access.
+                 * @example org_01EHZNVPK3SFK441A1RGBFSHRT
+                 */
+                organization_id: string;
+            };
+            /**
+             * @description A descriptive name for the API Key.
+             * @example Production API Key
+             */
+            name: string;
+            /**
+             * @description An obfuscated representation of the API Key value.
+             * @example sk_...3456
+             */
+            obfuscated_value: string;
+            /**
+             * Format: date-time
+             * @description Timestamp of when the API Key was last used.
+             * @example null
+             */
+            last_used_at: string | null;
+            /**
+             * Format: date-time
+             * @description Timestamp when the API Key expires. Null means the key does not expire.
+             * @example null
+             */
+            expires_at: string | null;
+            /**
+             * @description The permission slugs assigned to the API Key.
+             * @example [
+             *       "posts:read",
+             *       "posts:write"
+             *     ]
+             */
+            permissions: string[];
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            created_at: string;
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            updated_at: string;
+        };
+        ApiKeyValidationResponse: {
+            api_key: components["schemas"]["ApiKey"] | null;
+            /**
+             * @description The ID of the agent registration this API Key was issued for. Present only when the API Key is assigned to an agent registration.
+             * @example agent_reg_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            agent_registration_id?: string;
+        };
+        ConnectApplication: {
+            /**
+             * @description Distinguishes the connect application object.
+             * @example connect_application
+             * @constant
+             */
+            object: "connect_application";
+            /**
+             * @description The unique ID of the connect application.
+             * @example conn_app_01HXYZ123456789ABCDEFGHIJ
+             */
+            id: string;
+            /**
+             * @description The client ID of the connect application.
+             * @example client_01HXYZ123456789ABCDEFGHIJ
+             */
+            client_id: string;
+            /**
+             * @description A description of the connect application.
+             * @example An application for managing user access
+             */
+            description: string | null;
+            /**
+             * @description The name of the connect application.
+             * @example My Application
              */
             name: string;
             /**
@@ -14959,7 +15354,7 @@ export interface components {
                  * @example users
                  * @enum {string}
                  */
-                resource_type: "users" | "organizations" | "events" | "sessions";
+                resource_type: "users" | "organizations" | "events" | "sessions" | "auditLogEvents";
             };
             /**
              * Format: date-time
@@ -14993,7 +15388,7 @@ export interface components {
                  * @example users
                  * @enum {string}
                  */
-                resource_type: "users" | "organizations" | "events" | "sessions";
+                resource_type: "users" | "organizations" | "events" | "sessions" | "auditLogEvents";
             };
             /**
              * Format: date-time
@@ -15027,7 +15422,7 @@ export interface components {
                  * @example users
                  * @enum {string}
                  */
-                resource_type: "users" | "organizations" | "events" | "sessions";
+                resource_type: "users" | "organizations" | "events" | "sessions" | "auditLogEvents";
             };
             /**
              * Format: date-time
@@ -15061,7 +15456,7 @@ export interface components {
                  * @example users
                  * @enum {string}
                  */
-                resource_type: "users" | "organizations" | "events" | "sessions";
+                resource_type: "users" | "organizations" | "events" | "sessions" | "auditLogEvents";
             };
             /**
              * Format: date-time
@@ -18891,136 +19286,156 @@ export interface components {
 }
 export type $defs = Record<string, never>;
 export interface operations {
-    AgentAdminController_linkClaimAttemptToExternalUser: {
+    AgentBlueprintsController_list: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */
+                before?: string;
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */
+                after?: string;
+                /** @description Upper limit on the number of objects to return, between `1` and `100`. */
+                limit?: number;
+                /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */
+                order?: components["schemas"]["PaginationOrder"];
+            };
             header?: never;
             path?: never;
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": {
-                    /**
-                     * @description The operation to perform on the claim attempt. Currently only `link_external_user` is supported.
-                     * @example link_external_user
-                     * @constant
-                     */
-                    type: "link_external_user";
-                    /**
-                     * @description The token identifying the claim attempt.
-                     * @example cla_tkn_01EHWNCE74X7JSDV0X3SZ3KJNY
-                     */
-                    claim_attempt_token: string;
-                    /**
-                     * @description The user to attach to the claim attempt, identified by email and external ID.
-                     * @example {
-                     *       "email": "alice@example.com",
-                     *       "external_id": "user_abc123"
-                     *     }
-                     */
-                    user: {
-                        /**
-                         * Format: email
-                         * @description The email address of the user.
-                         * @example alice@example.com
-                         */
-                        email: string;
-                        /**
-                         * @description The external ID of the user.
-                         * @example user_abc123
-                         */
-                        external_id: string;
-                    };
-                    /**
-                     * @description The organization to place the agent in. Required when the user belongs to more than one organization.
-                     * @example org_01EHWNCE74X7JSDV0X3SZ3KJNY
-                     */
-                    organization_id?: string;
-                };
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description Claim attempt linked to external user. */
+            /** @description OK */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ClaimViewResponse"];
+                    "application/json": {
+                        /**
+                         * @description Indicates this is a list response.
+                         * @constant
+                         */
+                        object?: "list";
+                        /** @description Pagination cursors for navigating between pages of results. */
+                        list_metadata?: {
+                            /**
+                             * @description An object ID that defines your place in the list. When the ID is not present, you are at the start of the list.
+                             * @example agent_blueprint_01HXYZ123456789ABCDEFGHIJ
+                             */
+                            before: string | null;
+                            /**
+                             * @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
+                             * @example agent_blueprint_01HXYZ987654321KJIHGFEDCBA
+                             */
+                            after: string | null;
+                        };
+                    } & {
+                        /** @description The list of records for the current page. */
+                        data?: components["schemas"]["AgentBlueprint"][];
+                    };
                 };
             };
-            /** @description Invalid request, email mismatch, invalid claim, invalid organization, or wrong account. */
-            400: {
+            /** @description Unauthorized */
+            401: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
                     "application/json": {
-                        /**
-                         * @description The error code identifying the type of error.
-                         * @example invalid_request
-                         * @constant
-                         */
-                        code: "invalid_request";
                         /**
                          * @description A human-readable description of the error.
-                         * @example Request could not be processed.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
                          */
                         message: string;
-                    } | {
-                        /**
-                         * @description The error code identifying the type of error.
-                         * @example invalid_claim
-                         * @constant
-                         */
-                        code: "invalid_claim";
-                        /**
-                         * @description A human-readable description of the error.
-                         * @example Request could not be processed.
-                         */
-                        message: string;
-                    } | {
-                        /**
-                         * @description The error code identifying the type of error.
-                         * @example invalid_organization
-                         * @constant
-                         */
-                        code: "invalid_organization";
+                    };
+                };
+            };
+        };
+    };
+    AgentBlueprintsController_create: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /**
+                     * @description Human-readable name of the agent blueprint.
+                     * @example Prospecting Agent
+                     */
+                    name: string;
+                    /**
+                     * @description Human-readable description of the agent blueprint.
+                     * @example Finds and qualifies sales prospects.
+                     */
+                    description?: string;
+                    /**
+                     * @description Permission slugs forming the ceiling on what sessions minted from this blueprint may do. Each slug must exist in the environment.
+                     * @default []
+                     * @example [
+                     *       "crm:read",
+                     *       "email:send"
+                     *     ]
+                     */
+                    permissions?: string[];
+                    /**
+                     * @description Who may mint sessions from this blueprint.
+                     * @default {}
+                     */
+                    invocable_by?: {
                         /**
-                         * @description A human-readable description of the error.
-                         * @example Request could not be processed.
+                         * @description Role slugs whose members may mint user-delegated sessions from this blueprint. An empty list allows any member.
+                         * @default []
+                         * @example [
+                         *       "manager"
+                         *     ]
                          */
-                        message: string;
-                    } | {
+                        role_slugs?: string[];
                         /**
-                         * @description The error code identifying the type of error.
-                         * @example email_mismatch
-                         * @constant
+                         * @description Organizations in which sessions may be minted from this blueprint, enforced on user-delegated, autonomous, and agent-delegated mints. An empty list allows any organization in the environment.
+                         * @default []
+                         * @example [
+                         *       "org_01EHWNCE74X7JSDV0X3SZ3KJNY"
+                         *     ]
                          */
-                        code: "email_mismatch";
+                        organization_ids?: string[];
+                    };
+                    /** @description Token and session lifetimes for sessions minted from this blueprint. */
+                    session_settings: {
                         /**
-                         * @description A human-readable description of the error.
-                         * @example Request could not be processed.
+                         * @description Maximum lifetime of a session in seconds; refreshes never extend a session past this. At most 31,536,000 (365 days).
+                         * @example 3600
                          */
-                        message: string;
-                    } | {
+                        max_age_seconds: number;
                         /**
-                         * @description The error code identifying the type of error.
-                         * @example wrong_account
-                         * @constant
+                         * @description Lifetime of each minted access token in seconds. At most 3,600 (1 hour).
+                         * @example 300
                          */
-                        code: "wrong_account";
+                        access_token_ttl_seconds: number;
                         /**
-                         * @description A human-readable description of the error.
-                         * @example Request could not be processed.
+                         * @description Lifetime of each rotated refresh token in seconds. At most 5,184,000 (60 days).
+                         * @example 3600
                          */
-                        message: string;
+                        refresh_token_ttl_seconds: number;
                     };
                 };
             };
-            /** @description Claim denied or auth method disabled. */
-            403: {
+        };
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentBlueprint"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -19028,22 +19443,30 @@ export interface operations {
                     "application/json": {
                         /**
                          * @description The error code identifying the type of error.
-                         * @example claim_denied
+                         * @example invalid_request
                          * @constant
                          */
-                        code: "claim_denied";
+                        code: "invalid_request";
                         /**
                          * @description A human-readable description of the error.
                          * @example Request could not be processed.
                          */
                         message: string;
-                    } | {
+                    };
+                };
+            };
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
                         /**
                          * @description The error code identifying the type of error.
-                         * @example auth_method_disabled
+                         * @example name_already_in_use
                          * @constant
                          */
-                        code: "auth_method_disabled";
+                        code: "name_already_in_use";
                         /**
                          * @description A human-readable description of the error.
                          * @example Request could not be processed.
@@ -19052,8 +19475,8 @@ export interface operations {
                     };
                 };
             };
-            /** @description Organization selection required, email already in use, or claim already completed. */
-            409: {
+            /** @description Unprocessable Entity */
+            422: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -19061,35 +19484,22 @@ export interface operations {
                     "application/json": {
                         /**
                          * @description The error code identifying the type of error.
-                         * @example organization_selection_required
+                         * @example permission_not_found
                          * @constant
                          */
-                        code: "organization_selection_required";
+                        code: "permission_not_found";
                         /**
                          * @description A human-readable description of the error.
                          * @example Request could not be processed.
                          */
                         message: string;
-                        /** @description Organizations the user belongs to. Pick one and retry with organization_id. */
-                        organizations: {
-                            /**
-                             * @description The organization ID.
-                             * @example org_01EHWNCE74X7JSDV0X3SZ3KJNY
-                             */
-                            id: string;
-                            /**
-                             * @description The organization name.
-                             * @example Acme Corp
-                             */
-                            name: string;
-                        }[];
                     } | {
                         /**
                          * @description The error code identifying the type of error.
-                         * @example email_already_in_use
+                         * @example role_not_found
                          * @constant
                          */
-                        code: "email_already_in_use";
+                        code: "role_not_found";
                         /**
                          * @description A human-readable description of the error.
                          * @example Request could not be processed.
@@ -19098,10 +19508,10 @@ export interface operations {
                     } | {
                         /**
                          * @description The error code identifying the type of error.
-                         * @example already_claimed
+                         * @example organization_not_found
                          * @constant
                          */
-                        code: "already_claimed";
+                        code: "organization_not_found";
                         /**
                          * @description A human-readable description of the error.
                          * @example Request could not be processed.
@@ -19110,34 +19520,75 @@ export interface operations {
                     };
                 };
             };
-            /** @description Claim or user code has expired. */
-            410: {
+        };
+    };
+    AgentBlueprintsController_get: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique ID of the agent blueprint. */
+                agent_blueprint_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentBlueprint"];
+                };
+            };
+            /** @description Not Found */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
                     "application/json": {
-                        /**
-                         * @description The error code identifying the type of error.
-                         * @example claim_expired
-                         * @constant
-                         */
-                        code: "claim_expired";
                         /**
                          * @description A human-readable description of the error.
-                         * @example Request could not be processed.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
                          */
                         message: string;
-                    } | {
-                        /**
-                         * @description The error code identifying the type of error.
-                         * @example user_code_expired
-                         * @constant
-                         */
-                        code: "user_code_expired";
+                    };
+                };
+            };
+        };
+    };
+    AgentBlueprintsController_delete: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique ID of the agent blueprint. */
+                agent_blueprint_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Agent blueprint deleted. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
                         /**
                          * @description A human-readable description of the error.
-                         * @example Request could not be processed.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
                          */
                         message: string;
                     };
@@ -19145,42 +19596,72 @@ export interface operations {
             };
         };
     };
-    AgentAdminController_validateCredential: {
+    AgentBlueprintsController_update: {
         parameters: {
             query?: never;
             header?: never;
-            path?: never;
+            path: {
+                /** @description The unique ID of the agent blueprint. */
+                agent_blueprint_id: string;
+            };
             cookie?: never;
         };
         requestBody: {
             content: {
                 "application/json": {
                     /**
-                     * @description The kind of credential being validated — an agent API key or an agent access token.
-                     * @constant
-                     */
-                    type: "api_key";
-                    /**
-                     * @description The credential value to validate: the API key value for `api_key`, or the access token (JWT) for `access_token`.
-                     * @example sk_agent_example_1234567890
-                     */
-                    credential: string;
-                } | {
-                    /**
-                     * @description The kind of credential being validated — an agent API key or an agent access token.
-                     * @constant
+                     * @description Human-readable name of the agent blueprint.
+                     * @example Prospecting Agent
                      */
-                    type: "access_token";
+                    name?: string;
                     /**
-                     * @description The credential value to validate: the API key value for `api_key`, or the access token (JWT) for `access_token`.
-                     * @example eyJhbGciOiJSUzI1NiIsImtpZCI6...
+                     * @description Human-readable description of the agent blueprint. Pass `null` to clear it.
+                     * @example Finds and qualifies sales prospects.
                      */
-                    credential: string;
+                    description?: string | null;
                     /**
-                     * @description When provided, the access token's `aud` claim is verified against this value. Tokens issued for a different resource are rejected.
-                     * @example https://api.example.com
+                     * @description Permission slugs forming the ceiling on what sessions minted from this blueprint may do. Each slug must exist in the environment.
+                     * @example [
+                     *       "crm:read",
+                     *       "email:send"
+                     *     ]
                      */
-                    audience?: string;
+                    permissions?: string[];
+                    /** @description Who may mint sessions from this blueprint. Omitted lists are left unchanged. */
+                    invocable_by?: {
+                        /**
+                         * @description Role slugs whose members may mint user-delegated sessions from this blueprint. An empty list allows any member.
+                         * @example [
+                         *       "manager"
+                         *     ]
+                         */
+                        role_slugs?: string[];
+                        /**
+                         * @description Organizations in which sessions may be minted from this blueprint, enforced on user-delegated, autonomous, and agent-delegated mints. An empty list allows any organization in the environment.
+                         * @example [
+                         *       "org_01EHWNCE74X7JSDV0X3SZ3KJNY"
+                         *     ]
+                         */
+                        organization_ids?: string[];
+                    };
+                    /** @description Token and session lifetimes for sessions minted from this blueprint. Omitted fields are left unchanged. */
+                    session_settings?: {
+                        /**
+                         * @description Maximum lifetime of a session in seconds; refreshes never extend a session past this. At most 31,536,000 (365 days).
+                         * @example 3600
+                         */
+                        max_age_seconds?: number;
+                        /**
+                         * @description Lifetime of each minted access token in seconds. At most 3,600 (1 hour).
+                         * @example 300
+                         */
+                        access_token_ttl_seconds?: number;
+                        /**
+                         * @description Lifetime of each rotated refresh token in seconds. At most 5,184,000 (60 days).
+                         * @example 3600
+                         */
+                        refresh_token_ttl_seconds?: number;
+                    };
                 };
             };
         };
@@ -19191,7 +19672,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["AgentCredentialValidation"];
+                    "application/json": components["schemas"]["AgentBlueprint"];
                 };
             };
             /** @description Bad Request */
@@ -19215,27 +19696,1031 @@ export interface operations {
                     };
                 };
             };
-        };
-    };
-    AgentAdminController_getRegistration: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path: {
-                /** @description The unique ID of the agent registration. */
-                id: string;
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description OK */
-            200: {
+            /** @description Not Found */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["AgentRegistration"];
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example name_already_in_use
+                         * @constant
+                         */
+                        code: "name_already_in_use";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example permission_not_found
+                         * @constant
+                         */
+                        code: "permission_not_found";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example role_not_found
+                         * @constant
+                         */
+                        code: "role_not_found";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example organization_not_found
+                         * @constant
+                         */
+                        code: "organization_not_found";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AgentBlueprintsTokenController_mintToken: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique ID of the agent blueprint. */
+                agent_blueprint_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /**
+                     * @description How the session is minted: `user_delegated`, `autonomous`, `agent_delegated`, or `refresh`.
+                     * @constant
+                     */
+                    type: "user_delegated";
+                    /**
+                     * @description The access token of the user delegating to the agent. The token identifies the user and organization; effective permissions are resolved server-side.
+                     * @example eyJhbGciOiJSUzI1NiIsImtpZCI6...
+                     */
+                    user_access_token: string;
+                    /**
+                     * @description Optional caller-supplied context, echoed as an object with a `text` field in the `intent` claim of the minted access token.
+                     * @example renew-contract-123
+                     */
+                    intent?: string;
+                } | {
+                    /**
+                     * @description How the session is minted: `user_delegated`, `autonomous`, `agent_delegated`, or `refresh`.
+                     * @constant
+                     */
+                    type: "autonomous";
+                    /**
+                     * @description The organization the agent acts within when operating as itself.
+                     * @example org_01EHWNCE74X7JSDV0X3SZ3KJNY
+                     */
+                    organization_id: string;
+                    /**
+                     * @description Optional caller-supplied context, echoed as an object with a `text` field in the `intent` claim of the minted access token.
+                     * @example renew-contract-123
+                     */
+                    intent?: string;
+                } | {
+                    /**
+                     * @description How the session is minted: `user_delegated`, `autonomous`, `agent_delegated`, or `refresh`.
+                     * @constant
+                     */
+                    type: "agent_delegated";
+                    /**
+                     * @description The agent's own access token to exchange for a new session on the same instance. The token must have been minted from this blueprint; permissions are re-derived from current authority.
+                     * @example eyJhbGciOiJSUzI1NiIsImtpZCI6...
+                     */
+                    agent_access_token: string;
+                    /**
+                     * @description Optional caller-supplied context, echoed as an object with a `text` field in the `intent` claim of the minted access token.
+                     * @example renew-contract-123
+                     */
+                    intent?: string;
+                } | {
+                    /**
+                     * @description How the session is minted: `user_delegated`, `autonomous`, `agent_delegated`, or `refresh`.
+                     * @constant
+                     */
+                    type: "refresh";
+                    /**
+                     * @description The refresh token issued with a previous agent access token. Refresh tokens are single-use: each refresh rotates it.
+                     * @example njGkA8Wyht0GBEGGA0Zh1Q3wZzL2...
+                     */
+                    refresh_token: string;
+                    /**
+                     * @description Optional caller-supplied context, echoed as an object with a `text` field in the `intent` claim of the minted access token.
+                     * @example renew-contract-123
+                     */
+                    intent?: string;
+                };
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentToken"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example invalid_request
+                         * @constant
+                         */
+                        code: "invalid_request";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example invalid_user_access_token
+                         * @constant
+                         */
+                        code: "invalid_user_access_token";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example invalid_agent_access_token
+                         * @constant
+                         */
+                        code: "invalid_agent_access_token";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example invalid_refresh_token
+                         * @constant
+                         */
+                        code: "invalid_refresh_token";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example session_revoked
+                         * @constant
+                         */
+                        code: "session_revoked";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example session_expired
+                         * @constant
+                         */
+                        code: "session_expired";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example user_session_ended
+                         * @constant
+                         */
+                        code: "user_session_ended";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example max_age_exceeded
+                         * @constant
+                         */
+                        code: "max_age_exceeded";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example session_settings_not_found
+                         * @constant
+                         */
+                        code: "session_settings_not_found";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example chain_depth_exceeded
+                         * @constant
+                         */
+                        code: "chain_depth_exceeded";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example user_not_member_of_organization
+                         * @constant
+                         */
+                        code: "user_not_member_of_organization";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example organization_not_invocable
+                         * @constant
+                         */
+                        code: "organization_not_invocable";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example role_not_invocable
+                         * @constant
+                         */
+                        code: "role_not_invocable";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AgentAdminController_linkClaimAttemptToExternalUser: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /**
+                     * @description The operation to perform on the claim attempt. Currently only `link_external_user` is supported.
+                     * @example link_external_user
+                     * @constant
+                     */
+                    type: "link_external_user";
+                    /**
+                     * @description The token identifying the claim attempt.
+                     * @example cla_tkn_01EHWNCE74X7JSDV0X3SZ3KJNY
+                     */
+                    claim_attempt_token: string;
+                    /**
+                     * @description The user to attach to the claim attempt, identified by email and external ID.
+                     * @example {
+                     *       "email": "alice@example.com",
+                     *       "external_id": "user_abc123"
+                     *     }
+                     */
+                    user: {
+                        /**
+                         * Format: email
+                         * @description The email address of the user.
+                         * @example alice@example.com
+                         */
+                        email: string;
+                        /**
+                         * @description The external ID of the user.
+                         * @example user_abc123
+                         */
+                        external_id: string;
+                    };
+                    /**
+                     * @description The organization to place the agent in. Required when the user belongs to more than one organization.
+                     * @example org_01EHWNCE74X7JSDV0X3SZ3KJNY
+                     */
+                    organization_id?: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Claim attempt linked to external user. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ClaimViewResponse"];
+                };
+            };
+            /** @description Invalid request, email mismatch, invalid claim, invalid organization, or wrong account. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example invalid_request
+                         * @constant
+                         */
+                        code: "invalid_request";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example invalid_claim
+                         * @constant
+                         */
+                        code: "invalid_claim";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example invalid_organization
+                         * @constant
+                         */
+                        code: "invalid_organization";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example email_mismatch
+                         * @constant
+                         */
+                        code: "email_mismatch";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example wrong_account
+                         * @constant
+                         */
+                        code: "wrong_account";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Claim denied or auth method disabled. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example claim_denied
+                         * @constant
+                         */
+                        code: "claim_denied";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example auth_method_disabled
+                         * @constant
+                         */
+                        code: "auth_method_disabled";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Organization selection required, email already in use, or claim already completed. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example organization_selection_required
+                         * @constant
+                         */
+                        code: "organization_selection_required";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                        /** @description Organizations the user belongs to. Pick one and retry with organization_id. */
+                        organizations: {
+                            /**
+                             * @description The organization ID.
+                             * @example org_01EHWNCE74X7JSDV0X3SZ3KJNY
+                             */
+                            id: string;
+                            /**
+                             * @description The organization name.
+                             * @example Acme Corp
+                             */
+                            name: string;
+                        }[];
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example email_already_in_use
+                         * @constant
+                         */
+                        code: "email_already_in_use";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example already_claimed
+                         * @constant
+                         */
+                        code: "already_claimed";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Claim or user code has expired. */
+            410: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example claim_expired
+                         * @constant
+                         */
+                        code: "claim_expired";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    } | {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example user_code_expired
+                         * @constant
+                         */
+                        code: "user_code_expired";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AgentAdminController_validateCredential: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /**
+                     * @description The kind of credential being validated — an agent API key or an agent access token.
+                     * @constant
+                     */
+                    type: "api_key";
+                    /**
+                     * @description The credential value to validate: the API key value for `api_key`, or the access token (JWT) for `access_token`.
+                     * @example sk_agent_example_1234567890
+                     */
+                    credential: string;
+                } | {
+                    /**
+                     * @description The kind of credential being validated — an agent API key or an agent access token.
+                     * @constant
+                     */
+                    type: "access_token";
+                    /**
+                     * @description The credential value to validate: the API key value for `api_key`, or the access token (JWT) for `access_token`.
+                     * @example eyJhbGciOiJSUzI1NiIsImtpZCI6...
+                     */
+                    credential: string;
+                    /**
+                     * @description When provided, the access token's `aud` claim is verified against this value. Tokens issued for a different resource are rejected.
+                     * @example https://api.example.com
+                     */
+                    audience?: string;
+                };
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentCredentialValidation"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example invalid_request
+                         * @constant
+                         */
+                        code: "invalid_request";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AgentInstancesController_list: {
+        parameters: {
+            query?: {
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */
+                before?: string;
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */
+                after?: string;
+                /** @description Upper limit on the number of objects to return, between `1` and `100`. */
+                limit?: number;
+                /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */
+                order?: components["schemas"]["PaginationOrder"];
+                /** @description Only return instances acting within this organization. */
+                organization_id?: string;
+                /** @description Only return instances minted from this blueprint. */
+                agent_blueprint_id?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description Indicates this is a list response.
+                         * @constant
+                         */
+                        object?: "list";
+                        /** @description Pagination cursors for navigating between pages of results. */
+                        list_metadata?: {
+                            /**
+                             * @description An object ID that defines your place in the list. When the ID is not present, you are at the start of the list.
+                             * @example agent_01HXYZ123456789ABCDEFGHIJ
+                             */
+                            before: string | null;
+                            /**
+                             * @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
+                             * @example agent_01HXYZ987654321KJIHGFEDCBA
+                             */
+                            after: string | null;
+                        };
+                    } & {
+                        /** @description The list of records for the current page. */
+                        data?: components["schemas"]["AgentInstance"][];
+                    };
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AgentInstancesController_get: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique ID of the agent instance. */
+                agent_instance_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentInstance"];
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AgentInstancesController_delete: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique ID of the agent instance. */
+                agent_instance_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Agent instance deleted. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AgentAdminController_getRegistration: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique ID of the agent registration. */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentRegistration"];
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AgentInstanceSessionsController_list: {
+        parameters: {
+            query?: {
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */
+                before?: string;
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */
+                after?: string;
+                /** @description Upper limit on the number of objects to return, between `1` and `100`. */
+                limit?: number;
+                /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */
+                order?: components["schemas"]["PaginationOrder"];
+                /** @description Only return sessions of instances minted from this blueprint. */
+                agent_blueprint_id?: string;
+                /** @description Only return sessions belonging to this agent instance. */
+                agent_instance_id?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description Indicates this is a list response.
+                         * @constant
+                         */
+                        object?: "list";
+                        /** @description Pagination cursors for navigating between pages of results. */
+                        list_metadata?: {
+                            /**
+                             * @description An object ID that defines your place in the list. When the ID is not present, you are at the start of the list.
+                             * @example agent_session_01HXYZ123456789ABCDEFGHIJ
+                             */
+                            before: string | null;
+                            /**
+                             * @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
+                             * @example agent_session_01HXYZ987654321KJIHGFEDCBA
+                             */
+                            after: string | null;
+                        };
+                    } & {
+                        /** @description The list of records for the current page. */
+                        data?: components["schemas"]["AgentInstanceSession"][];
+                    };
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Validation failed.
+                         */
+                        message: string;
+                        /** @description The list of validation errors. */
+                        errors: {
+                            /**
+                             * @description The validation error code.
+                             * @example required
+                             */
+                            code: string;
+                            /**
+                             * @description The field that failed validation.
+                             * @example event.action
+                             */
+                            field: string;
+                        }[];
+                    };
+                };
+            };
+        };
+    };
+    AgentInstanceSessionsController_get: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique ID of the agent instance session. */
+                agent_instance_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentInstanceSession"];
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AgentInstanceSessionsController_revoke: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique ID of the agent instance session. */
+                agent_instance_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentInstanceSession"];
                 };
             };
             /** @description Not Found */