@breign/client 1.0.127 → 1.0.128

package/dist/apis/ConversationsApi.d.ts

@@ -10,7 +10,7 @@
  * Do not edit the class manually.
  */
 import * as runtime from '../runtime';
-import type { AttachmentCreateRequestUio, AttachmentCreateResponseUio, AttachmentDetailsResponseUio, AttachmentProcessedRequestUio, BodyWithMessageUio, ContextLocationRequestUio, ContextUio, ConversationSummaryUio, CreateCustomVariable200ResponseUio, UpdateConversationTitleRequestUio } from '../models/index';
+import type { AttachmentCreateRequestUio, AttachmentCreateResponseUio, AttachmentDetailsResponseUio, AttachmentProcessedRequestUio, BodyWithMessageUio, ContextLocationRequestUio, ContextUio, ConversationSummaryUio, CreateCustomVariable200ResponseUio, UpdateConversationTitleRequestUio, WorkspaceFileContentUio, WorkspaceFileEntryUio } from '../models/index';
 export interface ArchiveConversationByIdRequest {
     conversationId: string;
 }
@@ -35,6 +35,10 @@ export interface DeleteContextCustomVariableKeyRequest {
     conversationId: string;
     key: string;
 }
+export interface DeleteConversationWorkspaceFileRequest {
+    conversationId: string;
+    path: string;
+}
 export interface GetAttachmentRequest {
     conversationId: string;
     attachmentId: string;
@@ -45,6 +49,10 @@ export interface GetContextRequest {
 export interface GetContextCustomVariableRequest {
     conversationId: string;
 }
+export interface GetConversationWorkspaceFileContentRequest {
+    conversationId: string;
+    path: string;
+}
 export interface GetConversationsRequest {
     providerSource: GetConversationsProviderSourceEnum;
     organizationId?: string;
@@ -53,6 +61,9 @@ export interface GetConversationsRequest {
     period?: GetConversationsPeriodEnum;
     messageReaction?: GetConversationsMessageReactionEnum;
 }
+export interface ListConversationWorkspaceFilesRequest {
+    conversationId: string;
+}
 export interface MarkAttachmentProcessedRequest {
     conversationId: string;
     attachmentId: string;
@@ -140,6 +151,16 @@ export declare class ConversationsApi extends runtime.BaseAPI {
      * Delete a custom variable key from the context of a conversation
      */
     deleteContextCustomVariableKey(conversationId: string, key: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Manual purge by the user. Deletes the path and, when it is a directory, everything below it. Any running sandbox session for this conversation is discarded at the same time, so the agent cannot write the file back from a stale in-memory copy.
+     * Delete a file from a conversation workspace
+     */
+    deleteConversationWorkspaceFileRaw(requestParameters: DeleteConversationWorkspaceFileRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Manual purge by the user. Deletes the path and, when it is a directory, everything below it. Any running sandbox session for this conversation is discarded at the same time, so the agent cannot write the file back from a stale in-memory copy.
+     * Delete a file from a conversation workspace
+     */
+    deleteConversationWorkspaceFile(conversationId: string, path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
      * Get a specific attachment by its ID from the context of a conversation.
      * Retrieve an attachment from a conversation context
@@ -174,6 +195,16 @@ export declare class ConversationsApi extends runtime.BaseAPI {
     getContextCustomVariable(conversationId: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<{
         [key: string]: string;
     }>;
+    /**
+     * Returns the CURRENT state of the file, read straight from the store. There is no versioning, so consulting an older message still returns the file as it is now. The content is always UTF-8 text.
+     * Read the content of a conversation workspace file
+     */
+    getConversationWorkspaceFileContentRaw(requestParameters: GetConversationWorkspaceFileContentRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<WorkspaceFileContentUio>>;
+    /**
+     * Returns the CURRENT state of the file, read straight from the store. There is no versioning, so consulting an older message still returns the file as it is now. The content is always UTF-8 text.
+     * Read the content of a conversation workspace file
+     */
+    getConversationWorkspaceFileContent(conversationId: string, path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<WorkspaceFileContentUio>;
     /**
      * Retrieve a list of conversations for the authenticated user.
      * List conversations
@@ -184,6 +215,16 @@ export declare class ConversationsApi extends runtime.BaseAPI {
      * List conversations
      */
     getConversations(providerSource: GetConversationsProviderSourceEnum, organizationId?: string, page?: number, limit?: number, period?: GetConversationsPeriodEnum, messageReaction?: GetConversationsMessageReactionEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ConversationSummaryUio>>;
+    /**
+     * Reads the persisted workspace of the conversation directly from the store — no sandbox is started. The content is never returned here; use the content endpoint for that. Files whose name starts with a dot are persisted but hidden from this listing. The current usage is returned in the X-Workspace-File-Count and X-Workspace-Total-Bytes headers.
+     * List the files of a conversation workspace
+     */
+    listConversationWorkspaceFilesRaw(requestParameters: ListConversationWorkspaceFilesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<WorkspaceFileEntryUio>>>;
+    /**
+     * Reads the persisted workspace of the conversation directly from the store — no sandbox is started. The content is never returned here; use the content endpoint for that. Files whose name starts with a dot are persisted but hidden from this listing. The current usage is returned in the X-Workspace-File-Count and X-Workspace-Total-Bytes headers.
+     * List the files of a conversation workspace
+     */
+    listConversationWorkspaceFiles(conversationId: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<WorkspaceFileEntryUio>>;
     /**
      * Internal callback endpoint called when attachment processing is complete. Réservé au service de documents : tout autre appelant reçoit un 403. L\'attachment doit être en état `PROCESSING`.
      * Mark a conversation attachment as processed

package/dist/apis/ConversationsApi.js

@@ -239,6 +239,40 @@ class ConversationsApi extends runtime.BaseAPI {
     async deleteContextCustomVariableKey(conversationId, key, initOverrides) {
         await this.deleteContextCustomVariableKeyRaw({ conversationId: conversationId, key: key }, initOverrides);
     }
+    /**
+     * Manual purge by the user. Deletes the path and, when it is a directory, everything below it. Any running sandbox session for this conversation is discarded at the same time, so the agent cannot write the file back from a stale in-memory copy.
+     * Delete a file from a conversation workspace
+     */
+    async deleteConversationWorkspaceFileRaw(requestParameters, initOverrides) {
+        if (requestParameters['conversationId'] == null) {
+            throw new runtime.RequiredError('conversationId', 'Required parameter "conversationId" was null or undefined when calling deleteConversationWorkspaceFile().');
+        }
+        if (requestParameters['path'] == null) {
+            throw new runtime.RequiredError('path', 'Required parameter "path" was null or undefined when calling deleteConversationWorkspaceFile().');
+        }
+        const queryParameters = {};
+        if (requestParameters['path'] != null) {
+            queryParameters['path'] = requestParameters['path'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+        }
+        const response = await this.request({
+            path: `/conversations/{conversationId}/workspace/files`.replace(`{${"conversationId"}}`, encodeURIComponent(String(requestParameters['conversationId']))),
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Manual purge by the user. Deletes the path and, when it is a directory, everything below it. Any running sandbox session for this conversation is discarded at the same time, so the agent cannot write the file back from a stale in-memory copy.
+     * Delete a file from a conversation workspace
+     */
+    async deleteConversationWorkspaceFile(conversationId, path, initOverrides) {
+        await this.deleteConversationWorkspaceFileRaw({ conversationId: conversationId, path: path }, initOverrides);
+    }
     /**
      * Get a specific attachment by its ID from the context of a conversation.
      * Retrieve an attachment from a conversation context
@@ -329,6 +363,41 @@ class ConversationsApi extends runtime.BaseAPI {
         const response = await this.getContextCustomVariableRaw({ conversationId: conversationId }, initOverrides);
         return await response.value();
     }
+    /**
+     * Returns the CURRENT state of the file, read straight from the store. There is no versioning, so consulting an older message still returns the file as it is now. The content is always UTF-8 text.
+     * Read the content of a conversation workspace file
+     */
+    async getConversationWorkspaceFileContentRaw(requestParameters, initOverrides) {
+        if (requestParameters['conversationId'] == null) {
+            throw new runtime.RequiredError('conversationId', 'Required parameter "conversationId" was null or undefined when calling getConversationWorkspaceFileContent().');
+        }
+        if (requestParameters['path'] == null) {
+            throw new runtime.RequiredError('path', 'Required parameter "path" was null or undefined when calling getConversationWorkspaceFileContent().');
+        }
+        const queryParameters = {};
+        if (requestParameters['path'] != null) {
+            queryParameters['path'] = requestParameters['path'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+        }
+        const response = await this.request({
+            path: `/conversations/{conversationId}/workspace/files/content`.replace(`{${"conversationId"}}`, encodeURIComponent(String(requestParameters['conversationId']))),
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.WorkspaceFileContentUioFromJSON)(jsonValue));
+    }
+    /**
+     * Returns the CURRENT state of the file, read straight from the store. There is no versioning, so consulting an older message still returns the file as it is now. The content is always UTF-8 text.
+     * Read the content of a conversation workspace file
+     */
+    async getConversationWorkspaceFileContent(conversationId, path, initOverrides) {
+        const response = await this.getConversationWorkspaceFileContentRaw({ conversationId: conversationId, path: path }, initOverrides);
+        return await response.value();
+    }
     /**
      * Retrieve a list of conversations for the authenticated user.
      * List conversations
@@ -376,6 +445,35 @@ class ConversationsApi extends runtime.BaseAPI {
         const response = await this.getConversationsRaw({ providerSource: providerSource, organizationId: organizationId, page: page, limit: limit, period: period, messageReaction: messageReaction }, initOverrides);
         return await response.value();
     }
+    /**
+     * Reads the persisted workspace of the conversation directly from the store — no sandbox is started. The content is never returned here; use the content endpoint for that. Files whose name starts with a dot are persisted but hidden from this listing. The current usage is returned in the X-Workspace-File-Count and X-Workspace-Total-Bytes headers.
+     * List the files of a conversation workspace
+     */
+    async listConversationWorkspaceFilesRaw(requestParameters, initOverrides) {
+        if (requestParameters['conversationId'] == null) {
+            throw new runtime.RequiredError('conversationId', 'Required parameter "conversationId" was null or undefined when calling listConversationWorkspaceFiles().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+        }
+        const response = await this.request({
+            path: `/conversations/{conversationId}/workspace/files`.replace(`{${"conversationId"}}`, encodeURIComponent(String(requestParameters['conversationId']))),
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(index_1.WorkspaceFileEntryUioFromJSON));
+    }
+    /**
+     * Reads the persisted workspace of the conversation directly from the store — no sandbox is started. The content is never returned here; use the content endpoint for that. Files whose name starts with a dot are persisted but hidden from this listing. The current usage is returned in the X-Workspace-File-Count and X-Workspace-Total-Bytes headers.
+     * List the files of a conversation workspace
+     */
+    async listConversationWorkspaceFiles(conversationId, initOverrides) {
+        const response = await this.listConversationWorkspaceFilesRaw({ conversationId: conversationId }, initOverrides);
+        return await response.value();
+    }
     /**
      * Internal callback endpoint called when attachment processing is complete. Réservé au service de documents : tout autre appelant reçoit un 403. L\'attachment doit être en état `PROCESSING`.
      * Mark a conversation attachment as processed

package/dist/models/AgentPatchUio.d.ts

@@ -16,6 +16,7 @@ import type { PromptInitUio } from './PromptInitUio';
 import type { SpeechToTextConfigUio } from './SpeechToTextConfigUio';
 import type { AgentMemoryConfigurationUio } from './AgentMemoryConfigurationUio';
 import type { AgentPatchEngineUio } from './AgentPatchEngineUio';
+import type { AgentSandboxConfigurationUio } from './AgentSandboxConfigurationUio';
 import type { AgentTypeUio } from './AgentTypeUio';
 /**
  *
@@ -171,6 +172,12 @@ export interface AgentPatchUio {
      * @memberof AgentPatchUio
      */
     speechToText?: SpeechToTextConfigUio;
+    /**
+     *
+     * @type {AgentSandboxConfigurationUio}
+     * @memberof AgentPatchUio
+     */
+    sandboxConfiguration?: AgentSandboxConfigurationUio | null;
 }
 /**
  * Check if a given object implements the AgentPatchUio interface.

package/dist/models/AgentPatchUio.js

@@ -25,6 +25,7 @@ const PromptInitUio_1 = require("./PromptInitUio");
 const SpeechToTextConfigUio_1 = require("./SpeechToTextConfigUio");
 const AgentMemoryConfigurationUio_1 = require("./AgentMemoryConfigurationUio");
 const AgentPatchEngineUio_1 = require("./AgentPatchEngineUio");
+const AgentSandboxConfigurationUio_1 = require("./AgentSandboxConfigurationUio");
 const AgentTypeUio_1 = require("./AgentTypeUio");
 /**
  * Check if a given object implements the AgentPatchUio interface.
@@ -64,6 +65,7 @@ function AgentPatchUioFromJSONTyped(json, ignoreDiscriminator) {
         'memoryConfiguration': json['memoryConfiguration'] == null ? undefined : (0, AgentMemoryConfigurationUio_1.AgentMemoryConfigurationUioFromJSON)(json['memoryConfiguration']),
         'contextualKnowledgeConversation': json['contextualKnowledgeConversation'] == null ? undefined : (0, ContextualKnowledgeConversationUio_1.ContextualKnowledgeConversationUioFromJSON)(json['contextualKnowledgeConversation']),
         'speechToText': json['speechToText'] == null ? undefined : (0, SpeechToTextConfigUio_1.SpeechToTextConfigUioFromJSON)(json['speechToText']),
+        'sandboxConfiguration': json['sandboxConfiguration'] == null ? undefined : (0, AgentSandboxConfigurationUio_1.AgentSandboxConfigurationUioFromJSON)(json['sandboxConfiguration']),
     };
 }
 function AgentPatchUioToJSON(json) {
@@ -98,5 +100,6 @@ function AgentPatchUioToJSONTyped(value, ignoreDiscriminator = false) {
         'memoryConfiguration': (0, AgentMemoryConfigurationUio_1.AgentMemoryConfigurationUioToJSON)(value['memoryConfiguration']),
         'contextualKnowledgeConversation': (0, ContextualKnowledgeConversationUio_1.ContextualKnowledgeConversationUioToJSON)(value['contextualKnowledgeConversation']),
         'speechToText': (0, SpeechToTextConfigUio_1.SpeechToTextConfigUioToJSON)(value['speechToText']),
+        'sandboxConfiguration': (0, AgentSandboxConfigurationUio_1.AgentSandboxConfigurationUioToJSON)(value['sandboxConfiguration']),
     };
 }

package/dist/models/AgentSandboxConfigurationUio.d.ts

@@ -0,0 +1,58 @@
+/**
+ * brain-client
+ * Api ands models for brain-app and brain-app
+ *
+ * The version of the OpenAPI document: 0.0.0-SNAPSHOT
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { AgentSandboxNetworkConfigurationUio } from './AgentSandboxNetworkConfigurationUio';
+/**
+ * Per-agent activation of the bash sandbox and of its two risky capabilities. Three separate switches because the three risk surfaces are unrelated. The server configuration can only narrow this: an agent may enable, never widen.
+ * @export
+ * @interface AgentSandboxConfigurationUio
+ */
+export interface AgentSandboxConfigurationUio {
+    /**
+     * Enables the Bash_exec tool for this agent.
+     * @type {boolean}
+     * @memberof AgentSandboxConfigurationUio
+     */
+    enabled?: boolean;
+    /**
+     * Enables python3 inside the sandbox. Also requires the server-side lock; the cost is arbitrary code execution.
+     * @type {boolean}
+     * @memberof AgentSandboxConfigurationUio
+     */
+    pythonEnabled?: boolean;
+    /**
+     *
+     * @type {AgentSandboxNetworkConfigurationUio}
+     * @memberof AgentSandboxConfigurationUio
+     */
+    network?: AgentSandboxNetworkConfigurationUio;
+    /**
+     * Scope of the persisted workspace. Defaults to conversation, which is the only value accepted today: storage supports an agent-and-user scope so enabling it later needs no migration, but the API keeps it closed until that path has run against real traffic.
+     * @type {string}
+     * @memberof AgentSandboxConfigurationUio
+     */
+    workspaceScope?: AgentSandboxConfigurationUioWorkspaceScopeEnum;
+}
+/**
+ * @export
+ */
+export declare const AgentSandboxConfigurationUioWorkspaceScopeEnum: {
+    readonly Conversation: "conversation";
+};
+export type AgentSandboxConfigurationUioWorkspaceScopeEnum = typeof AgentSandboxConfigurationUioWorkspaceScopeEnum[keyof typeof AgentSandboxConfigurationUioWorkspaceScopeEnum];
+/**
+ * Check if a given object implements the AgentSandboxConfigurationUio interface.
+ */
+export declare function instanceOfAgentSandboxConfigurationUio(value: object): value is AgentSandboxConfigurationUio;
+export declare function AgentSandboxConfigurationUioFromJSON(json: any): AgentSandboxConfigurationUio;
+export declare function AgentSandboxConfigurationUioFromJSONTyped(json: any, ignoreDiscriminator: boolean): AgentSandboxConfigurationUio;
+export declare function AgentSandboxConfigurationUioToJSON(json: any): AgentSandboxConfigurationUio;
+export declare function AgentSandboxConfigurationUioToJSONTyped(value?: AgentSandboxConfigurationUio | null, ignoreDiscriminator?: boolean): any;

package/dist/models/AgentSandboxConfigurationUio.js

@@ -0,0 +1,62 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * brain-client
+ * Api ands models for brain-app and brain-app
+ *
+ * The version of the OpenAPI document: 0.0.0-SNAPSHOT
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentSandboxConfigurationUioWorkspaceScopeEnum = void 0;
+exports.instanceOfAgentSandboxConfigurationUio = instanceOfAgentSandboxConfigurationUio;
+exports.AgentSandboxConfigurationUioFromJSON = AgentSandboxConfigurationUioFromJSON;
+exports.AgentSandboxConfigurationUioFromJSONTyped = AgentSandboxConfigurationUioFromJSONTyped;
+exports.AgentSandboxConfigurationUioToJSON = AgentSandboxConfigurationUioToJSON;
+exports.AgentSandboxConfigurationUioToJSONTyped = AgentSandboxConfigurationUioToJSONTyped;
+const AgentSandboxNetworkConfigurationUio_1 = require("./AgentSandboxNetworkConfigurationUio");
+/**
+ * @export
+ */
+exports.AgentSandboxConfigurationUioWorkspaceScopeEnum = {
+    Conversation: 'conversation'
+};
+/**
+ * Check if a given object implements the AgentSandboxConfigurationUio interface.
+ */
+function instanceOfAgentSandboxConfigurationUio(value) {
+    return true;
+}
+function AgentSandboxConfigurationUioFromJSON(json) {
+    return AgentSandboxConfigurationUioFromJSONTyped(json, false);
+}
+function AgentSandboxConfigurationUioFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'enabled': json['enabled'] == null ? undefined : json['enabled'],
+        'pythonEnabled': json['pythonEnabled'] == null ? undefined : json['pythonEnabled'],
+        'network': json['network'] == null ? undefined : (0, AgentSandboxNetworkConfigurationUio_1.AgentSandboxNetworkConfigurationUioFromJSON)(json['network']),
+        'workspaceScope': json['workspaceScope'] == null ? undefined : json['workspaceScope'],
+    };
+}
+function AgentSandboxConfigurationUioToJSON(json) {
+    return AgentSandboxConfigurationUioToJSONTyped(json, false);
+}
+function AgentSandboxConfigurationUioToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'enabled': value['enabled'],
+        'pythonEnabled': value['pythonEnabled'],
+        'network': (0, AgentSandboxNetworkConfigurationUio_1.AgentSandboxNetworkConfigurationUioToJSON)(value['network']),
+        'workspaceScope': value['workspaceScope'],
+    };
+}

package/dist/models/AgentSandboxNetworkConfigurationUio.d.ts

@@ -0,0 +1,57 @@
+/**
+ * brain-client
+ * Api ands models for brain-app and brain-app
+ *
+ * The version of the OpenAPI document: 0.0.0-SNAPSHOT
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * Enables curl inside the sandbox. Without at least one entry in allowedUrlPrefixes the network stays cut. Private address ranges are always denied, server-side.
+ * @export
+ * @interface AgentSandboxNetworkConfigurationUio
+ */
+export interface AgentSandboxNetworkConfigurationUio {
+    /**
+     *
+     * @type {boolean}
+     * @memberof AgentSandboxNetworkConfigurationUio
+     */
+    enabled?: boolean;
+    /**
+     *
+     * @type {Array<string>}
+     * @memberof AgentSandboxNetworkConfigurationUio
+     */
+    allowedUrlPrefixes?: Array<string>;
+    /**
+     *
+     * @type {Array<string>}
+     * @memberof AgentSandboxNetworkConfigurationUio
+     */
+    allowedMethods?: Array<AgentSandboxNetworkConfigurationUioAllowedMethodsEnum>;
+}
+/**
+ * @export
+ */
+export declare const AgentSandboxNetworkConfigurationUioAllowedMethodsEnum: {
+    readonly Get: "GET";
+    readonly Head: "HEAD";
+    readonly Post: "POST";
+    readonly Put: "PUT";
+    readonly Delete: "DELETE";
+    readonly Patch: "PATCH";
+    readonly Options: "OPTIONS";
+};
+export type AgentSandboxNetworkConfigurationUioAllowedMethodsEnum = typeof AgentSandboxNetworkConfigurationUioAllowedMethodsEnum[keyof typeof AgentSandboxNetworkConfigurationUioAllowedMethodsEnum];
+/**
+ * Check if a given object implements the AgentSandboxNetworkConfigurationUio interface.
+ */
+export declare function instanceOfAgentSandboxNetworkConfigurationUio(value: object): value is AgentSandboxNetworkConfigurationUio;
+export declare function AgentSandboxNetworkConfigurationUioFromJSON(json: any): AgentSandboxNetworkConfigurationUio;
+export declare function AgentSandboxNetworkConfigurationUioFromJSONTyped(json: any, ignoreDiscriminator: boolean): AgentSandboxNetworkConfigurationUio;
+export declare function AgentSandboxNetworkConfigurationUioToJSON(json: any): AgentSandboxNetworkConfigurationUio;
+export declare function AgentSandboxNetworkConfigurationUioToJSONTyped(value?: AgentSandboxNetworkConfigurationUio | null, ignoreDiscriminator?: boolean): any;

package/dist/models/AgentSandboxNetworkConfigurationUio.js

@@ -0,0 +1,65 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * brain-client
+ * Api ands models for brain-app and brain-app
+ *
+ * The version of the OpenAPI document: 0.0.0-SNAPSHOT
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentSandboxNetworkConfigurationUioAllowedMethodsEnum = void 0;
+exports.instanceOfAgentSandboxNetworkConfigurationUio = instanceOfAgentSandboxNetworkConfigurationUio;
+exports.AgentSandboxNetworkConfigurationUioFromJSON = AgentSandboxNetworkConfigurationUioFromJSON;
+exports.AgentSandboxNetworkConfigurationUioFromJSONTyped = AgentSandboxNetworkConfigurationUioFromJSONTyped;
+exports.AgentSandboxNetworkConfigurationUioToJSON = AgentSandboxNetworkConfigurationUioToJSON;
+exports.AgentSandboxNetworkConfigurationUioToJSONTyped = AgentSandboxNetworkConfigurationUioToJSONTyped;
+/**
+ * @export
+ */
+exports.AgentSandboxNetworkConfigurationUioAllowedMethodsEnum = {
+    Get: 'GET',
+    Head: 'HEAD',
+    Post: 'POST',
+    Put: 'PUT',
+    Delete: 'DELETE',
+    Patch: 'PATCH',
+    Options: 'OPTIONS'
+};
+/**
+ * Check if a given object implements the AgentSandboxNetworkConfigurationUio interface.
+ */
+function instanceOfAgentSandboxNetworkConfigurationUio(value) {
+    return true;
+}
+function AgentSandboxNetworkConfigurationUioFromJSON(json) {
+    return AgentSandboxNetworkConfigurationUioFromJSONTyped(json, false);
+}
+function AgentSandboxNetworkConfigurationUioFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'enabled': json['enabled'] == null ? undefined : json['enabled'],
+        'allowedUrlPrefixes': json['allowedUrlPrefixes'] == null ? undefined : json['allowedUrlPrefixes'],
+        'allowedMethods': json['allowedMethods'] == null ? undefined : json['allowedMethods'],
+    };
+}
+function AgentSandboxNetworkConfigurationUioToJSON(json) {
+    return AgentSandboxNetworkConfigurationUioToJSONTyped(json, false);
+}
+function AgentSandboxNetworkConfigurationUioToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'enabled': value['enabled'],
+        'allowedUrlPrefixes': value['allowedUrlPrefixes'],
+        'allowedMethods': value['allowedMethods'],
+    };
+}

package/dist/models/AgentUio.d.ts

@@ -19,6 +19,7 @@ import type { EngineUio } from './EngineUio';
 import type { PromptInitUio } from './PromptInitUio';
 import type { SpeechToTextConfigUio } from './SpeechToTextConfigUio';
 import type { AgentMemoryConfigurationUio } from './AgentMemoryConfigurationUio';
+import type { AgentSandboxConfigurationUio } from './AgentSandboxConfigurationUio';
 import type { AgentTypeUio } from './AgentTypeUio';
 /**
  *
@@ -192,6 +193,12 @@ export interface AgentUio {
      * @memberof AgentUio
      */
     speechToText?: SpeechToTextConfigUio;
+    /**
+     *
+     * @type {AgentSandboxConfigurationUio}
+     * @memberof AgentUio
+     */
+    sandboxConfiguration?: AgentSandboxConfigurationUio | null;
     /**
      *
      * @type {AgentCreatorUio}

package/dist/models/AgentUio.js

@@ -29,6 +29,7 @@ const EngineUio_1 = require("./EngineUio");
 const PromptInitUio_1 = require("./PromptInitUio");
 const SpeechToTextConfigUio_1 = require("./SpeechToTextConfigUio");
 const AgentMemoryConfigurationUio_1 = require("./AgentMemoryConfigurationUio");
+const AgentSandboxConfigurationUio_1 = require("./AgentSandboxConfigurationUio");
 const AgentTypeUio_1 = require("./AgentTypeUio");
 /**
  * @export
@@ -97,6 +98,7 @@ function AgentUioFromJSONTyped(json, ignoreDiscriminator) {
         'memoryConfiguration': json['memoryConfiguration'] == null ? undefined : (0, AgentMemoryConfigurationUio_1.AgentMemoryConfigurationUioFromJSON)(json['memoryConfiguration']),
         'contextualKnowledgeConversation': json['contextualKnowledgeConversation'] == null ? undefined : (0, ContextualKnowledgeConversationUio_1.ContextualKnowledgeConversationUioFromJSON)(json['contextualKnowledgeConversation']),
         'speechToText': json['speechToText'] == null ? undefined : (0, SpeechToTextConfigUio_1.SpeechToTextConfigUioFromJSON)(json['speechToText']),
+        'sandboxConfiguration': json['sandboxConfiguration'] == null ? undefined : (0, AgentSandboxConfigurationUio_1.AgentSandboxConfigurationUioFromJSON)(json['sandboxConfiguration']),
         'creator': json['creator'] == null ? undefined : (0, AgentCreatorUio_1.AgentCreatorUioFromJSON)(json['creator']),
         'engineSource': json['engineSource'] == null ? undefined : json['engineSource'],
         'providerSource': json['providerSource'] == null ? undefined : json['providerSource'],
@@ -138,6 +140,7 @@ function AgentUioToJSONTyped(value, ignoreDiscriminator = false) {
         'memoryConfiguration': (0, AgentMemoryConfigurationUio_1.AgentMemoryConfigurationUioToJSON)(value['memoryConfiguration']),
         'contextualKnowledgeConversation': (0, ContextualKnowledgeConversationUio_1.ContextualKnowledgeConversationUioToJSON)(value['contextualKnowledgeConversation']),
         'speechToText': (0, SpeechToTextConfigUio_1.SpeechToTextConfigUioToJSON)(value['speechToText']),
+        'sandboxConfiguration': (0, AgentSandboxConfigurationUio_1.AgentSandboxConfigurationUioToJSON)(value['sandboxConfiguration']),
         'creator': (0, AgentCreatorUio_1.AgentCreatorUioToJSON)(value['creator']),
         'engineSource': value['engineSource'],
         'providerSource': value['providerSource'],

package/dist/models/ChatMessageUio.d.ts

@@ -71,6 +71,12 @@ export interface ChatMessageUio {
      * @memberof ChatMessageUio
      */
     suggestions?: Array<SuggestionUio>;
+    /**
+     * Workspace paths written or deleted during the turn that produced this message. Granularity is the turn, not the tool call. Only the last state of a file is kept, so the file reads as it is now, not as it was at this message.
+     * @type {Array<string>}
+     * @memberof ChatMessageUio
+     */
+    workspaceFiles?: Array<string>;
     /**
      *
      * @type {string}

package/dist/models/ChatMessageUio.js

@@ -64,6 +64,7 @@ function ChatMessageUioFromJSONTyped(json, ignoreDiscriminator) {
         'confirmationLink': json['confirmationLink'] == null ? undefined : json['confirmationLink'],
         'toolResults': json['toolResults'] == null ? undefined : (json['toolResults'].map(ToolResultsUio_1.ToolResultsUioFromJSON)),
         'suggestions': json['suggestions'] == null ? undefined : (json['suggestions'].map(SuggestionUio_1.SuggestionUioFromJSON)),
+        'workspaceFiles': json['workspaceFiles'] == null ? undefined : json['workspaceFiles'],
         'flowNode': json['flowNode'] == null ? undefined : json['flowNode'],
         'flowNodeRequirementsChecked': json['flowNodeRequirementsChecked'] == null ? undefined : json['flowNodeRequirementsChecked'],
         'flowNodeRequirementsMet': json['flowNodeRequirementsMet'] == null ? undefined : json['flowNodeRequirementsMet'],
@@ -94,6 +95,7 @@ function ChatMessageUioToJSONTyped(value, ignoreDiscriminator = false) {
         'confirmationLink': value['confirmationLink'],
         'toolResults': value['toolResults'] == null ? undefined : (value['toolResults'].map(ToolResultsUio_1.ToolResultsUioToJSON)),
         'suggestions': value['suggestions'] == null ? undefined : (value['suggestions'].map(SuggestionUio_1.SuggestionUioToJSON)),
+        'workspaceFiles': value['workspaceFiles'],
         'flowNode': value['flowNode'],
         'flowNodeRequirementsChecked': value['flowNodeRequirementsChecked'],
         'flowNodeRequirementsMet': value['flowNodeRequirementsMet'],

package/dist/models/ConversationMessagesInnerUio.d.ts

@@ -82,6 +82,12 @@ export interface ConversationMessagesInnerUio {
      * @memberof ConversationMessagesInnerUio
      */
     toolResults?: Array<ToolResultsUio>;
+    /**
+     *
+     * @type {Array<string>}
+     * @memberof ConversationMessagesInnerUio
+     */
+    workspaceFiles?: Array<string>;
 }
 /**
  * Check if a given object implements the ConversationMessagesInnerUio interface.

package/dist/models/ConversationMessagesInnerUio.js

@@ -55,6 +55,7 @@ function ConversationMessagesInnerUioFromJSONTyped(json, ignoreDiscriminator) {
         'audio': json['audio'] == null ? undefined : (json['audio'].map(ChatMessageAudioInnerUio_1.ChatMessageAudioInnerUioFromJSON)),
         'usage': json['usage'] == null ? undefined : (0, TokenUsageUio_1.TokenUsageUioFromJSON)(json['usage']),
         'toolResults': json['toolResults'] == null ? undefined : (json['toolResults'].map(ToolResultsUio_1.ToolResultsUioFromJSON)),
+        'workspaceFiles': json['workspaceFiles'] == null ? undefined : json['workspaceFiles'],
     };
 }
 function ConversationMessagesInnerUioToJSON(json) {
@@ -75,5 +76,6 @@ function ConversationMessagesInnerUioToJSONTyped(value, ignoreDiscriminator = fa
         'audio': value['audio'] == null ? undefined : (value['audio'].map(ChatMessageAudioInnerUio_1.ChatMessageAudioInnerUioToJSON)),
         'usage': (0, TokenUsageUio_1.TokenUsageUioToJSON)(value['usage']),
         'toolResults': value['toolResults'] == null ? undefined : (value['toolResults'].map(ToolResultsUio_1.ToolResultsUioToJSON)),
+        'workspaceFiles': value['workspaceFiles'],
     };
 }

package/dist/models/WorkspaceFileContentUio.d.ts

@@ -0,0 +1,62 @@
+/**
+ * brain-client
+ * Api ands models for brain-app and brain-app
+ *
+ * The version of the OpenAPI document: 0.0.0-SNAPSHOT
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * The current state of a workspace file. There is no versioning: consulting an older message still returns the file as it is now.
+ * @export
+ * @interface WorkspaceFileContentUio
+ */
+export interface WorkspaceFileContentUio {
+    /**
+     *
+     * @type {string}
+     * @memberof WorkspaceFileContentUio
+     */
+    path: string;
+    /**
+     * UTF-8 text. Binary is never stored in a workspace.
+     * @type {string}
+     * @memberof WorkspaceFileContentUio
+     */
+    content: string;
+    /**
+     *
+     * @type {string}
+     * @memberof WorkspaceFileContentUio
+     */
+    mimeType: string;
+    /**
+     *
+     * @type {number}
+     * @memberof WorkspaceFileContentUio
+     */
+    size: number;
+    /**
+     *
+     * @type {number}
+     * @memberof WorkspaceFileContentUio
+     */
+    version: number;
+    /**
+     *
+     * @type {string}
+     * @memberof WorkspaceFileContentUio
+     */
+    updatedAt: string;
+}
+/**
+ * Check if a given object implements the WorkspaceFileContentUio interface.
+ */
+export declare function instanceOfWorkspaceFileContentUio(value: object): value is WorkspaceFileContentUio;
+export declare function WorkspaceFileContentUioFromJSON(json: any): WorkspaceFileContentUio;
+export declare function WorkspaceFileContentUioFromJSONTyped(json: any, ignoreDiscriminator: boolean): WorkspaceFileContentUio;
+export declare function WorkspaceFileContentUioToJSON(json: any): WorkspaceFileContentUio;
+export declare function WorkspaceFileContentUioToJSONTyped(value?: WorkspaceFileContentUio | null, ignoreDiscriminator?: boolean): any;

package/dist/models/WorkspaceFileContentUio.js

@@ -0,0 +1,70 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * brain-client
+ * Api ands models for brain-app and brain-app
+ *
+ * The version of the OpenAPI document: 0.0.0-SNAPSHOT
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.instanceOfWorkspaceFileContentUio = instanceOfWorkspaceFileContentUio;
+exports.WorkspaceFileContentUioFromJSON = WorkspaceFileContentUioFromJSON;
+exports.WorkspaceFileContentUioFromJSONTyped = WorkspaceFileContentUioFromJSONTyped;
+exports.WorkspaceFileContentUioToJSON = WorkspaceFileContentUioToJSON;
+exports.WorkspaceFileContentUioToJSONTyped = WorkspaceFileContentUioToJSONTyped;
+/**
+ * Check if a given object implements the WorkspaceFileContentUio interface.
+ */
+function instanceOfWorkspaceFileContentUio(value) {
+    if (!('path' in value) || value['path'] === undefined)
+        return false;
+    if (!('content' in value) || value['content'] === undefined)
+        return false;
+    if (!('mimeType' in value) || value['mimeType'] === undefined)
+        return false;
+    if (!('size' in value) || value['size'] === undefined)
+        return false;
+    if (!('version' in value) || value['version'] === undefined)
+        return false;
+    if (!('updatedAt' in value) || value['updatedAt'] === undefined)
+        return false;
+    return true;
+}
+function WorkspaceFileContentUioFromJSON(json) {
+    return WorkspaceFileContentUioFromJSONTyped(json, false);
+}
+function WorkspaceFileContentUioFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'path': json['path'],
+        'content': json['content'],
+        'mimeType': json['mimeType'],
+        'size': json['size'],
+        'version': json['version'],
+        'updatedAt': json['updatedAt'],
+    };
+}
+function WorkspaceFileContentUioToJSON(json) {
+    return WorkspaceFileContentUioToJSONTyped(json, false);
+}
+function WorkspaceFileContentUioToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'path': value['path'],
+        'content': value['content'],
+        'mimeType': value['mimeType'],
+        'size': value['size'],
+        'version': value['version'],
+        'updatedAt': value['updatedAt'],
+    };
+}

package/dist/models/WorkspaceFileEntryUio.d.ts

@@ -0,0 +1,56 @@
+/**
+ * brain-client
+ * Api ands models for brain-app and brain-app
+ *
+ * The version of the OpenAPI document: 0.0.0-SNAPSHOT
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * One file of a persisted agent workspace. Listing entry only — it never carries the content.
+ * @export
+ * @interface WorkspaceFileEntryUio
+ */
+export interface WorkspaceFileEntryUio {
+    /**
+     * Absolute path inside the sandbox, always under /home/user.
+     * @type {string}
+     * @memberof WorkspaceFileEntryUio
+     */
+    path: string;
+    /**
+     * UTF-8 byte length of the content.
+     * @type {number}
+     * @memberof WorkspaceFileEntryUio
+     */
+    size: number;
+    /**
+     * Derived from the extension. Always a text type.
+     * @type {string}
+     * @memberof WorkspaceFileEntryUio
+     */
+    mimeType: string;
+    /**
+     * Incremented on every write. Doubles as an ETag: a client already holding this version does not need to fetch the content again.
+     * @type {number}
+     * @memberof WorkspaceFileEntryUio
+     */
+    version: number;
+    /**
+     *
+     * @type {string}
+     * @memberof WorkspaceFileEntryUio
+     */
+    updatedAt: string;
+}
+/**
+ * Check if a given object implements the WorkspaceFileEntryUio interface.
+ */
+export declare function instanceOfWorkspaceFileEntryUio(value: object): value is WorkspaceFileEntryUio;
+export declare function WorkspaceFileEntryUioFromJSON(json: any): WorkspaceFileEntryUio;
+export declare function WorkspaceFileEntryUioFromJSONTyped(json: any, ignoreDiscriminator: boolean): WorkspaceFileEntryUio;
+export declare function WorkspaceFileEntryUioToJSON(json: any): WorkspaceFileEntryUio;
+export declare function WorkspaceFileEntryUioToJSONTyped(value?: WorkspaceFileEntryUio | null, ignoreDiscriminator?: boolean): any;

package/dist/models/WorkspaceFileEntryUio.js

@@ -0,0 +1,66 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * brain-client
+ * Api ands models for brain-app and brain-app
+ *
+ * The version of the OpenAPI document: 0.0.0-SNAPSHOT
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.instanceOfWorkspaceFileEntryUio = instanceOfWorkspaceFileEntryUio;
+exports.WorkspaceFileEntryUioFromJSON = WorkspaceFileEntryUioFromJSON;
+exports.WorkspaceFileEntryUioFromJSONTyped = WorkspaceFileEntryUioFromJSONTyped;
+exports.WorkspaceFileEntryUioToJSON = WorkspaceFileEntryUioToJSON;
+exports.WorkspaceFileEntryUioToJSONTyped = WorkspaceFileEntryUioToJSONTyped;
+/**
+ * Check if a given object implements the WorkspaceFileEntryUio interface.
+ */
+function instanceOfWorkspaceFileEntryUio(value) {
+    if (!('path' in value) || value['path'] === undefined)
+        return false;
+    if (!('size' in value) || value['size'] === undefined)
+        return false;
+    if (!('mimeType' in value) || value['mimeType'] === undefined)
+        return false;
+    if (!('version' in value) || value['version'] === undefined)
+        return false;
+    if (!('updatedAt' in value) || value['updatedAt'] === undefined)
+        return false;
+    return true;
+}
+function WorkspaceFileEntryUioFromJSON(json) {
+    return WorkspaceFileEntryUioFromJSONTyped(json, false);
+}
+function WorkspaceFileEntryUioFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'path': json['path'],
+        'size': json['size'],
+        'mimeType': json['mimeType'],
+        'version': json['version'],
+        'updatedAt': json['updatedAt'],
+    };
+}
+function WorkspaceFileEntryUioToJSON(json) {
+    return WorkspaceFileEntryUioToJSONTyped(json, false);
+}
+function WorkspaceFileEntryUioToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'path': value['path'],
+        'size': value['size'],
+        'mimeType': value['mimeType'],
+        'version': value['version'],
+        'updatedAt': value['updatedAt'],
+    };
+}

package/dist/models/index.d.ts

@@ -39,6 +39,8 @@ export * from './AgentPatchUio';
 export * from './AgentRefUio';
 export * from './AgentRequestUio';
 export * from './AgentRoleDetailsUio';
+export * from './AgentSandboxConfigurationUio';
+export * from './AgentSandboxNetworkConfigurationUio';
 export * from './AgentSubscriptionTextInteractionsUio';
 export * from './AgentSubscriptionUio';
 export * from './AgentTokenBreakdownUio';
@@ -380,3 +382,5 @@ export * from './UserIdentifierRequestUio';
 export * from './UserIdentifierUio';
 export * from './UserLockRequestUio';
 export * from './UserUpdateRequestUio';
+export * from './WorkspaceFileContentUio';
+export * from './WorkspaceFileEntryUio';

package/dist/models/index.js

@@ -57,6 +57,8 @@ __exportStar(require("./AgentPatchUio"), exports);
 __exportStar(require("./AgentRefUio"), exports);
 __exportStar(require("./AgentRequestUio"), exports);
 __exportStar(require("./AgentRoleDetailsUio"), exports);
+__exportStar(require("./AgentSandboxConfigurationUio"), exports);
+__exportStar(require("./AgentSandboxNetworkConfigurationUio"), exports);
 __exportStar(require("./AgentSubscriptionTextInteractionsUio"), exports);
 __exportStar(require("./AgentSubscriptionUio"), exports);
 __exportStar(require("./AgentTokenBreakdownUio"), exports);
@@ -398,3 +400,5 @@ __exportStar(require("./UserIdentifierRequestUio"), exports);
 __exportStar(require("./UserIdentifierUio"), exports);
 __exportStar(require("./UserLockRequestUio"), exports);
 __exportStar(require("./UserUpdateRequestUio"), exports);
+__exportStar(require("./WorkspaceFileContentUio"), exports);
+__exportStar(require("./WorkspaceFileEntryUio"), exports);

package/dist/openapi.json

@@ -5666,6 +5666,161 @@
         "tags" : [ "conversations" ]
       }
     },
+    "/conversations/{conversationId}/workspace/files" : {
+      "delete" : {
+        "description" : "Manual purge by the user. Deletes the path and, when it is a directory, everything below it. Any running sandbox session for this conversation is discarded at the same time, so the agent cannot write the file back from a stale in-memory copy.",
+        "operationId" : "deleteConversationWorkspaceFile",
+        "parameters" : [ {
+          "description" : "The ID of the conversation",
+          "in" : "path",
+          "name" : "conversationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "description" : "Absolute path of the workspace file, always under /home/user. Rejected with 400 when it leaves that root, contains a traversal, or uses characters outside [A-Za-z0-9._-].",
+          "example" : "/home/user/rapport.md",
+          "in" : "query",
+          "name" : "path",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "204" : {
+            "description" : "Successfully deleted the workspace file."
+          },
+          "400" : {
+            "description" : "Missing or invalid path"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "403" : {
+            "description" : "Forbidden - User cannot access this conversation"
+          },
+          "404" : {
+            "description" : "Conversation not found"
+          },
+          "500" : {
+            "description" : "Server error"
+          }
+        },
+        "summary" : "Delete a file from a conversation workspace",
+        "tags" : [ "conversations" ]
+      },
+      "get" : {
+        "description" : "Reads the persisted workspace of the conversation directly from the store — no sandbox is started. The content is never returned here; use the content endpoint for that. Files whose name starts with a dot are persisted but hidden from this listing. The current usage is returned in the X-Workspace-File-Count and X-Workspace-Total-Bytes headers.",
+        "operationId" : "listConversationWorkspaceFiles",
+        "parameters" : [ {
+          "description" : "The ID of the conversation",
+          "in" : "path",
+          "name" : "conversationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "items" : {
+                    "$ref" : "#/components/schemas/WorkspaceFileEntry"
+                  },
+                  "type" : "array"
+                }
+              }
+            },
+            "description" : "Successfully retrieved the workspace listing.",
+            "headers" : {
+              "X-Workspace-File-Count" : {
+                "description" : "Number of files currently persisted for this workspace.",
+                "schema" : {
+                  "type" : "integer"
+                }
+              },
+              "X-Workspace-Total-Bytes" : {
+                "description" : "Total UTF-8 byte size currently persisted for this workspace.",
+                "schema" : {
+                  "type" : "integer"
+                }
+              }
+            }
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "403" : {
+            "description" : "Forbidden - User cannot access this conversation"
+          },
+          "404" : {
+            "description" : "Conversation not found"
+          },
+          "500" : {
+            "description" : "Server error"
+          }
+        },
+        "summary" : "List the files of a conversation workspace",
+        "tags" : [ "conversations" ]
+      }
+    },
+    "/conversations/{conversationId}/workspace/files/content" : {
+      "get" : {
+        "description" : "Returns the CURRENT state of the file, read straight from the store. There is no versioning, so consulting an older message still returns the file as it is now. The content is always UTF-8 text.",
+        "operationId" : "getConversationWorkspaceFileContent",
+        "parameters" : [ {
+          "description" : "The ID of the conversation",
+          "in" : "path",
+          "name" : "conversationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "description" : "Absolute path of the workspace file, always under /home/user. Rejected with 400 when it leaves that root, contains a traversal, or uses characters outside [A-Za-z0-9._-].",
+          "example" : "/home/user/rapport.md",
+          "in" : "query",
+          "name" : "path",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/WorkspaceFileContent"
+                }
+              }
+            },
+            "description" : "Successfully retrieved the file content."
+          },
+          "400" : {
+            "description" : "Missing or invalid path"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "403" : {
+            "description" : "Forbidden - User cannot access this conversation"
+          },
+          "404" : {
+            "description" : "Conversation or workspace file not found"
+          },
+          "500" : {
+            "description" : "Server error"
+          }
+        },
+        "summary" : "Read the content of a conversation workspace file",
+        "tags" : [ "conversations" ]
+      }
+    },
     "/engines/default" : {
       "put" : {
         "description" : "Update the default engine for an organization",
@@ -12848,6 +13003,16 @@
           "type" : "string"
         }
       },
+      "workspacePathQuery" : {
+        "description" : "Absolute path of the workspace file, always under /home/user. Rejected with 400 when it leaves that root, contains a traversal, or uses characters outside [A-Za-z0-9._-].",
+        "example" : "/home/user/rapport.md",
+        "in" : "query",
+        "name" : "path",
+        "required" : true,
+        "schema" : {
+          "type" : "string"
+        }
+      },
       "organizationIdPath" : {
         "description" : "ID of the organization",
         "in" : "path",
@@ -13336,6 +13501,12 @@
           "speechToText" : {
             "$ref" : "#/components/schemas/SpeechToTextConfig"
           },
+          "sandboxConfiguration" : {
+            "allOf" : [ {
+              "$ref" : "#/components/schemas/AgentSandboxConfiguration"
+            } ],
+            "nullable" : true
+          },
           "creator" : {
             "$ref" : "#/components/schemas/Agent_creator"
           },
@@ -13478,6 +13649,52 @@
         "required" : [ "backend", "enabled", "ttlDays" ],
         "type" : "object"
       },
+      "AgentSandboxConfiguration" : {
+        "description" : "Per-agent activation of the bash sandbox and of its two risky capabilities. Three separate switches because the three risk surfaces are unrelated. The server configuration can only narrow this: an agent may enable, never widen.",
+        "properties" : {
+          "enabled" : {
+            "description" : "Enables the Bash_exec tool for this agent.",
+            "type" : "boolean"
+          },
+          "pythonEnabled" : {
+            "description" : "Enables python3 inside the sandbox. Also requires the server-side lock; the cost is arbitrary code execution.",
+            "type" : "boolean"
+          },
+          "network" : {
+            "$ref" : "#/components/schemas/AgentSandboxNetworkConfiguration"
+          },
+          "workspaceScope" : {
+            "description" : "Scope of the persisted workspace. Defaults to conversation, which is the only value accepted today: storage supports an agent-and-user scope so enabling it later needs no migration, but the API keeps it closed until that path has run against real traffic.",
+            "enum" : [ "conversation" ],
+            "type" : "string"
+          }
+        },
+        "type" : "object"
+      },
+      "AgentSandboxNetworkConfiguration" : {
+        "description" : "Enables curl inside the sandbox. Without at least one entry in allowedUrlPrefixes the network stays cut. Private address ranges are always denied, server-side.",
+        "properties" : {
+          "enabled" : {
+            "type" : "boolean"
+          },
+          "allowedUrlPrefixes" : {
+            "items" : {
+              "description" : "Full origin, path prefix allowed (e.g. https://api.exemple.com/v1/).",
+              "type" : "string"
+            },
+            "maxItems" : 20,
+            "type" : "array"
+          },
+          "allowedMethods" : {
+            "items" : {
+              "enum" : [ "GET", "HEAD", "POST", "PUT", "DELETE", "PATCH", "OPTIONS" ],
+              "type" : "string"
+            },
+            "type" : "array"
+          }
+        },
+        "type" : "object"
+      },
       "AgentTool" : {
         "properties" : {
           "id" : {
@@ -13643,6 +13860,12 @@
           },
           "speechToText" : {
             "$ref" : "#/components/schemas/SpeechToTextConfig"
+          },
+          "sandboxConfiguration" : {
+            "allOf" : [ {
+              "$ref" : "#/components/schemas/AgentSandboxConfiguration"
+            } ],
+            "nullable" : true
           }
         },
         "type" : "object"
@@ -14632,6 +14855,13 @@
             },
             "type" : "array"
           },
+          "workspaceFiles" : {
+            "description" : "Workspace paths written or deleted during the turn that produced this message. Granularity is the turn, not the tool call. Only the last state of a file is kept, so the file reads as it is now, not as it was at this message.",
+            "items" : {
+              "type" : "string"
+            },
+            "type" : "array"
+          },
           "flowNode" : {
             "type" : "string"
           },
@@ -16552,6 +16782,60 @@
         "required" : [ "latitude", "longitude" ],
         "type" : "object"
       },
+      "WorkspaceFileEntry" : {
+        "description" : "One file of a persisted agent workspace. Listing entry only — it never carries the content.",
+        "properties" : {
+          "path" : {
+            "description" : "Absolute path inside the sandbox, always under /home/user.",
+            "example" : "/home/user/rapport.md",
+            "type" : "string"
+          },
+          "size" : {
+            "description" : "UTF-8 byte length of the content.",
+            "type" : "integer"
+          },
+          "mimeType" : {
+            "description" : "Derived from the extension. Always a text type.",
+            "example" : "text/markdown",
+            "type" : "string"
+          },
+          "version" : {
+            "description" : "Incremented on every write. Doubles as an ETag: a client already holding this version does not need to fetch the content again.",
+            "type" : "integer"
+          },
+          "updatedAt" : {
+            "type" : "string"
+          }
+        },
+        "required" : [ "mimeType", "path", "size", "updatedAt", "version" ],
+        "type" : "object"
+      },
+      "WorkspaceFileContent" : {
+        "description" : "The current state of a workspace file. There is no versioning: consulting an older message still returns the file as it is now.",
+        "properties" : {
+          "path" : {
+            "type" : "string"
+          },
+          "content" : {
+            "description" : "UTF-8 text. Binary is never stored in a workspace.",
+            "type" : "string"
+          },
+          "mimeType" : {
+            "type" : "string"
+          },
+          "size" : {
+            "type" : "integer"
+          },
+          "version" : {
+            "type" : "integer"
+          },
+          "updatedAt" : {
+            "type" : "string"
+          }
+        },
+        "required" : [ "content", "mimeType", "path", "size", "updatedAt", "version" ],
+        "type" : "object"
+      },
       "DefaultEngineRequest" : {
         "properties" : {
           "providerId" : {
@@ -20216,6 +20500,12 @@
               "$ref" : "#/components/schemas/ToolResults"
             },
             "type" : "array"
+          },
+          "workspaceFiles" : {
+            "items" : {
+              "type" : "string"
+            },
+            "type" : "array"
           }
         },
         "required" : [ "content", "id", "role", "timestamp" ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@breign/client",
-  "version": "1.0.127",
+  "version": "1.0.128",
   "main": "dist/index.js",
   "exports": {
     ".": "./dist/index.js",