@breign/client 1.0.148 → 1.0.150

package/dist/models/AgentSandboxConfigurationUio.d.ts

@@ -11,7 +11,7 @@
  */
 import type { AgentSandboxNetworkConfigurationUio } from './AgentSandboxNetworkConfigurationUio';
 /**
- * Per-agent activation of the bash sandbox and of its two risky capabilities. Three separate switches because the three risk surfaces are unrelated. The server configuration can only narrow this: an agent may enable, never widen.
+ * Per-agent activation of the bash sandbox and of its three risky capabilities. Separate switches because the risk surfaces are unrelated. The server configuration can only narrow this: an agent may enable, never widen.
  * @export
  * @interface AgentSandboxConfigurationUio
  */
@@ -23,11 +23,17 @@ export interface AgentSandboxConfigurationUio {
      */
     enabled?: boolean;
     /**
-     * Enables python3 inside the sandbox. Also requires the server-side lock; the cost is arbitrary code execution.
+     * Enables python3 inside the sandbox. Also requires the server-side lock; the cost is arbitrary code execution, so every python command is approved by the user before it runs.
      * @type {boolean}
      * @memberof AgentSandboxConfigurationUio
      */
     pythonEnabled?: boolean;
+    /**
+     * Enables js-exec (JavaScript and TypeScript, in QuickJS) inside the sandbox. Same two extra locks as pythonEnabled, and the same per-command approval: running code IS the effect, so there is nothing to refuse afterwards.
+     * @type {boolean}
+     * @memberof AgentSandboxConfigurationUio
+     */
+    javascriptEnabled?: boolean;
     /**
      *
      * @type {AgentSandboxNetworkConfigurationUio}

package/dist/models/AgentSandboxConfigurationUio.js

@@ -42,6 +42,7 @@ function AgentSandboxConfigurationUioFromJSONTyped(json, ignoreDiscriminator) {
     return {
         'enabled': json['enabled'] == null ? undefined : json['enabled'],
         'pythonEnabled': json['pythonEnabled'] == null ? undefined : json['pythonEnabled'],
+        'javascriptEnabled': json['javascriptEnabled'] == null ? undefined : json['javascriptEnabled'],
         'network': json['network'] == null ? undefined : (0, AgentSandboxNetworkConfigurationUio_1.AgentSandboxNetworkConfigurationUioFromJSON)(json['network']),
         'workspaceScope': json['workspaceScope'] == null ? undefined : json['workspaceScope'],
     };
@@ -56,6 +57,7 @@ function AgentSandboxConfigurationUioToJSONTyped(value, ignoreDiscriminator = fa
     return {
         'enabled': value['enabled'],
         'pythonEnabled': value['pythonEnabled'],
+        'javascriptEnabled': value['javascriptEnabled'],
         'network': (0, AgentSandboxNetworkConfigurationUio_1.AgentSandboxNetworkConfigurationUioToJSON)(value['network']),
         'workspaceScope': value['workspaceScope'],
     };

package/dist/models/ChatUio.d.ts

@@ -9,6 +9,7 @@
  * https://openapi-generator.tech
  * Do not edit the class manually.
  */
+import type { ConversationContextUsageUio } from './ConversationContextUsageUio';
 import type { TokenUsageUio } from './TokenUsageUio';
 import type { ChatContextUio } from './ChatContextUio';
 import type { ChatMessageUio } from './ChatMessageUio';
@@ -96,6 +97,12 @@ export interface ChatUio {
      * @memberof ChatUio
      */
     usage?: TokenUsageUio;
+    /**
+     *
+     * @type {ConversationContextUsageUio}
+     * @memberof ChatUio
+     */
+    contextUsage?: ConversationContextUsageUio;
     /**
      *
      * @type {string}

package/dist/models/ChatUio.js

@@ -19,6 +19,7 @@ exports.ChatUioFromJSON = ChatUioFromJSON;
 exports.ChatUioFromJSONTyped = ChatUioFromJSONTyped;
 exports.ChatUioToJSON = ChatUioToJSON;
 exports.ChatUioToJSONTyped = ChatUioToJSONTyped;
+const ConversationContextUsageUio_1 = require("./ConversationContextUsageUio");
 const TokenUsageUio_1 = require("./TokenUsageUio");
 const ChatContextUio_1 = require("./ChatContextUio");
 const ChatMessageUio_1 = require("./ChatMessageUio");
@@ -70,6 +71,7 @@ function ChatUioFromJSONTyped(json, ignoreDiscriminator) {
         'init': json['init'] == null ? undefined : json['init'],
         'messages': (json['messages'].map(ChatMessageUio_1.ChatMessageUioFromJSON)),
         'usage': json['usage'] == null ? undefined : (0, TokenUsageUio_1.TokenUsageUioFromJSON)(json['usage']),
+        'contextUsage': json['contextUsage'] == null ? undefined : (0, ConversationContextUsageUio_1.ConversationContextUsageUioFromJSON)(json['contextUsage']),
         'createdAt': json['createdAt'],
         'updatedAt': json['updatedAt'],
         'context': (0, ChatContextUio_1.ChatContextUioFromJSON)(json['context']),
@@ -96,6 +98,7 @@ function ChatUioToJSONTyped(value, ignoreDiscriminator = false) {
         'init': value['init'],
         'messages': (value['messages'].map(ChatMessageUio_1.ChatMessageUioToJSON)),
         'usage': (0, TokenUsageUio_1.TokenUsageUioToJSON)(value['usage']),
+        'contextUsage': (0, ConversationContextUsageUio_1.ConversationContextUsageUioToJSON)(value['contextUsage']),
         'createdAt': value['createdAt'],
         'updatedAt': value['updatedAt'],
         'context': (0, ChatContextUio_1.ChatContextUioToJSON)(value['context']),

package/dist/models/ConversationContextUsageUio.d.ts

@@ -0,0 +1,59 @@
+/**
+ * brain-client
+ * Api ands models for brain-app and brain-app
+ *
+ * The version of the OpenAPI document: 0.0.0-SNAPSHOT
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * How much of the model's context window this conversation occupies: the prompt of the last generation call, not the conversation's cumulated token count. Absent until a turn has been measured — an unmeasured conversation has an unknown occupancy, not an empty window.
+ * @export
+ * @interface ConversationContextUsageUio
+ */
+export interface ConversationContextUsageUio {
+    /**
+     * Prompt of the last generation call, in tokens, as reported by the provider. Always > 0.
+     * @type {number}
+     * @memberof ConversationContextUsageUio
+     */
+    usedTokens: number;
+    /**
+     * Context window of the conversation's model, in tokens. Always greater than 0.
+     * @type {number}
+     * @memberof ConversationContextUsageUio
+     */
+    contextWindow: number;
+    /**
+     * Where the window above comes from. `declared`: carried by the model definition. `catalog`: known to the backend only. `fallback`: unknown, shown as an approximation.
+     * @type {string}
+     * @memberof ConversationContextUsageUio
+     */
+    contextWindowConfidence: ConversationContextUsageUioContextWindowConfidenceEnum;
+    /**
+     * Model the conversation runs on, absent when its engine reference resolves to none.
+     * @type {string}
+     * @memberof ConversationContextUsageUio
+     */
+    modelName?: string;
+}
+/**
+ * @export
+ */
+export declare const ConversationContextUsageUioContextWindowConfidenceEnum: {
+    readonly Declared: "declared";
+    readonly Catalog: "catalog";
+    readonly Fallback: "fallback";
+};
+export type ConversationContextUsageUioContextWindowConfidenceEnum = typeof ConversationContextUsageUioContextWindowConfidenceEnum[keyof typeof ConversationContextUsageUioContextWindowConfidenceEnum];
+/**
+ * Check if a given object implements the ConversationContextUsageUio interface.
+ */
+export declare function instanceOfConversationContextUsageUio(value: object): value is ConversationContextUsageUio;
+export declare function ConversationContextUsageUioFromJSON(json: any): ConversationContextUsageUio;
+export declare function ConversationContextUsageUioFromJSONTyped(json: any, ignoreDiscriminator: boolean): ConversationContextUsageUio;
+export declare function ConversationContextUsageUioToJSON(json: any): ConversationContextUsageUio;
+export declare function ConversationContextUsageUioToJSONTyped(value?: ConversationContextUsageUio | null, ignoreDiscriminator?: boolean): any;

package/dist/models/ConversationContextUsageUio.js

@@ -0,0 +1,69 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * brain-client
+ * Api ands models for brain-app and brain-app
+ *
+ * The version of the OpenAPI document: 0.0.0-SNAPSHOT
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConversationContextUsageUioContextWindowConfidenceEnum = void 0;
+exports.instanceOfConversationContextUsageUio = instanceOfConversationContextUsageUio;
+exports.ConversationContextUsageUioFromJSON = ConversationContextUsageUioFromJSON;
+exports.ConversationContextUsageUioFromJSONTyped = ConversationContextUsageUioFromJSONTyped;
+exports.ConversationContextUsageUioToJSON = ConversationContextUsageUioToJSON;
+exports.ConversationContextUsageUioToJSONTyped = ConversationContextUsageUioToJSONTyped;
+/**
+ * @export
+ */
+exports.ConversationContextUsageUioContextWindowConfidenceEnum = {
+    Declared: 'declared',
+    Catalog: 'catalog',
+    Fallback: 'fallback'
+};
+/**
+ * Check if a given object implements the ConversationContextUsageUio interface.
+ */
+function instanceOfConversationContextUsageUio(value) {
+    if (!('usedTokens' in value) || value['usedTokens'] === undefined)
+        return false;
+    if (!('contextWindow' in value) || value['contextWindow'] === undefined)
+        return false;
+    if (!('contextWindowConfidence' in value) || value['contextWindowConfidence'] === undefined)
+        return false;
+    return true;
+}
+function ConversationContextUsageUioFromJSON(json) {
+    return ConversationContextUsageUioFromJSONTyped(json, false);
+}
+function ConversationContextUsageUioFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'usedTokens': json['usedTokens'],
+        'contextWindow': json['contextWindow'],
+        'contextWindowConfidence': json['contextWindowConfidence'],
+        'modelName': json['modelName'] == null ? undefined : json['modelName'],
+    };
+}
+function ConversationContextUsageUioToJSON(json) {
+    return ConversationContextUsageUioToJSONTyped(json, false);
+}
+function ConversationContextUsageUioToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'usedTokens': value['usedTokens'],
+        'contextWindow': value['contextWindow'],
+        'contextWindowConfidence': value['contextWindowConfidence'],
+        'modelName': value['modelName'],
+    };
+}

package/dist/models/ConversationMessageApprovalUio.d.ts

@@ -16,7 +16,7 @@
  */
 export interface ConversationMessageApprovalUio {
     /**
-     * The tool whose use was submitted for approval. It also says which family the decision belongs to: bash_network_approval an address, bash_python_approval a command.
+     * The tool whose use was submitted for approval. It also says which family the decision belongs to: bash_network_approval an address, bash_command_approval a command (and bash_python_approval, its former name, on decisions taken before the rename).
      * @type {string}
      * @memberof ConversationMessageApprovalUio
      */

package/dist/models/MessageStatusUio.d.ts

@@ -10,6 +10,7 @@
  * Do not edit the class manually.
  */
 import type { MessageStatusErrorUio } from './MessageStatusErrorUio';
+import type { ConversationContextUsageUio } from './ConversationContextUsageUio';
 import type { MessageStatusToolCallUio } from './MessageStatusToolCallUio';
 import type { ToolUsedUio } from './ToolUsedUio';
 /**
@@ -18,6 +19,12 @@ import type { ToolUsedUio } from './ToolUsedUio';
  * @interface MessageStatusUio
  */
 export interface MessageStatusUio {
+    /**
+     *
+     * @type {ConversationContextUsageUio}
+     * @memberof MessageStatusUio
+     */
+    contextUsage?: ConversationContextUsageUio;
     /**
      *
      * @type {string}

package/dist/models/MessageStatusUio.js

@@ -20,6 +20,7 @@ exports.MessageStatusUioFromJSONTyped = MessageStatusUioFromJSONTyped;
 exports.MessageStatusUioToJSON = MessageStatusUioToJSON;
 exports.MessageStatusUioToJSONTyped = MessageStatusUioToJSONTyped;
 const MessageStatusErrorUio_1 = require("./MessageStatusErrorUio");
+const ConversationContextUsageUio_1 = require("./ConversationContextUsageUio");
 const MessageStatusToolCallUio_1 = require("./MessageStatusToolCallUio");
 const ToolUsedUio_1 = require("./ToolUsedUio");
 /**
@@ -45,6 +46,7 @@ function MessageStatusUioFromJSONTyped(json, ignoreDiscriminator) {
         return json;
     }
     return {
+        'contextUsage': json['contextUsage'] == null ? undefined : (0, ConversationContextUsageUio_1.ConversationContextUsageUioFromJSON)(json['contextUsage']),
         'status': json['status'],
         'content': json['content'] == null ? undefined : json['content'],
         'reasoning': json['reasoning'] == null ? undefined : json['reasoning'],
@@ -62,6 +64,7 @@ function MessageStatusUioToJSONTyped(value, ignoreDiscriminator = false) {
         return value;
     }
     return {
+        'contextUsage': (0, ConversationContextUsageUio_1.ConversationContextUsageUioToJSON)(value['contextUsage']),
         'status': value['status'],
         'content': value['content'],
         'reasoning': value['reasoning'],

package/dist/models/ToolApprovalUio.d.ts

@@ -10,7 +10,7 @@
  * Do not edit the class manually.
  */
 /**
- * One operation the user has authorised an agent to perform. Two families share this shape: an address the agent sandbox may reach, and a python command it may run. An address is stored normalised — query string, fragment and credentials removed — so a token carried by the URL the user saw is not kept here; a command is stored as it was approved, since the command itself is what was judged.
+ * One operation the user has authorised an agent to perform. Two families share this shape: an address the agent sandbox may reach, and a command it may run through one of its interpreters — python3 or js-exec. An address is stored normalised — query string, fragment and credentials removed — so a token carried by the URL the user saw is not kept here; a command is stored as it was approved, since the command itself is what was judged.
  * @export
  * @interface ToolApprovalUio
  */

package/dist/models/ToolCallResultRequestUio.d.ts

@@ -41,13 +41,13 @@ export interface ToolCallResultRequestUio {
      */
     error?: string;
     /**
-     * Only read when resolving a bash_network_approval or bash_python_approval call with status completed: how far the approval reaches. once — the suspended reply and nothing after it, so the same request is asked about again next time — is the default, and nothing is stored. agentUser covers this agent, for this user, across all of their conversations, and is kept until revoked. Any other value is refused with a 400. Never widens what the agent is allowed to do: the server-side lock and the per-agent switch remain prerequisites. Only the user the question was asked of may answer it: an approval is a personal consent, so another caller — an admin included — gets a 403.
+     * Only read when resolving a bash_network_approval or bash_command_approval call with status completed: how far the approval reaches. once — the suspended reply and nothing after it, so the same request is asked about again next time — is the default, and nothing is stored. agentUser covers this agent, for this user, across all of their conversations, and is kept until revoked. Any other value is refused with a 400. Never widens what the agent is allowed to do: the server-side lock and the per-agent switch remain prerequisites. Only the user the question was asked of may answer it: an approval is a personal consent, so another caller — an admin included — gets a 403.
      * @type {string}
      * @memberof ToolCallResultRequestUio
      */
     approvalScope?: ToolCallResultRequestUioApprovalScopeEnum;
     /**
-     * Only read when resolving a bash_network_approval call with status completed: how wide the approval is. prefix (the default) grants the prefix shown in the request — origin plus first path segment; origin grants the whole domain. Nothing narrower is offered: nobody can predict the paths an API will serve, and an approval that is too fine is paid for in repeated questions. The server recomputes both from the URL it recorded, so a client cannot submit a prefix of its own. Ignored on a bash_python_approval call, which has a single width: the exact command the server already recorded.
+     * Only read when resolving a bash_network_approval call with status completed: how wide the approval is. prefix (the default) grants the prefix shown in the request — origin plus first path segment; origin grants the whole domain. Nothing narrower is offered: nobody can predict the paths an API will serve, and an approval that is too fine is paid for in repeated questions. The server recomputes both from the URL it recorded, so a client cannot submit a prefix of its own. Ignored on a bash_command_approval call, which has a single width: the exact command the server already recorded.
      * @type {string}
      * @memberof ToolCallResultRequestUio
      */

package/dist/models/ToolCallUio.d.ts

@@ -22,7 +22,7 @@ export interface ToolCallUio {
      */
     callId: string;
     /**
-     * Name of the tool the model called. Three values are produced by the server today. take_screenshot asks the client to capture the screen. bash_network_approval is an agent sandbox asking permission to reach an address: arguments carries url (the full address, to be shown as-is), urlPrefix (what a yes actually grants), origin, host and method. bash_python_approval is an agent sandbox asking permission to run a python command: arguments carries command, which is both what has to be shown in full and exactly what a yes grants — nothing ran, so a refusal leaves the sandbox untouched.
+     * Name of the tool the model called. Three values are produced by the server today. take_screenshot asks the client to capture the screen. bash_network_approval is an agent sandbox asking permission to reach an address: arguments carries url (the full address, to be shown as-is), urlPrefix (what a yes actually grants), origin, host and method. bash_command_approval is an agent sandbox asking permission to run a command through one of its interpreters — python3 or js-exec: arguments carries command, which is both what has to be shown in full and exactly what a yes grants — nothing ran, so a refusal leaves the sandbox untouched. Calls named bash_python_approval, the name this last one carried while python was the only interpreter, may still be waiting in older conversations and resolve exactly the same way.
      * @type {string}
      * @memberof ToolCallUio
      */

package/dist/models/index.d.ts

@@ -170,6 +170,7 @@ export * from './ContextUio';
 export * from './ContextualKnowledgeConversationEmbeddingUio';
 export * from './ContextualKnowledgeConversationUio';
 export * from './ConversationAttachmentDownloadUrlUio';
+export * from './ConversationContextUsageUio';
 export * from './ConversationDetailUio';
 export * from './ConversationMessageApprovalUio';
 export * from './ConversationMessagesInnerFlowNodeEntrypointsUio';

package/dist/models/index.js

@@ -188,6 +188,7 @@ __exportStar(require("./ContextUio"), exports);
 __exportStar(require("./ContextualKnowledgeConversationEmbeddingUio"), exports);
 __exportStar(require("./ContextualKnowledgeConversationUio"), exports);
 __exportStar(require("./ConversationAttachmentDownloadUrlUio"), exports);
+__exportStar(require("./ConversationContextUsageUio"), exports);
 __exportStar(require("./ConversationDetailUio"), exports);
 __exportStar(require("./ConversationMessageApprovalUio"), exports);
 __exportStar(require("./ConversationMessagesInnerFlowNodeEntrypointsUio"), exports);

package/dist/openapi.json

@@ -16033,14 +16033,18 @@
         "type" : "object"
       },
       "AgentSandboxConfiguration" : {
-        "description" : "Per-agent activation of the bash sandbox and of its two risky capabilities. Three separate switches because the three risk surfaces are unrelated. The server configuration can only narrow this: an agent may enable, never widen.",
+        "description" : "Per-agent activation of the bash sandbox and of its three risky capabilities. Separate switches because the risk surfaces are unrelated. The server configuration can only narrow this: an agent may enable, never widen.",
         "properties" : {
           "enabled" : {
             "description" : "Enables the Bash_exec tool for this agent.",
             "type" : "boolean"
           },
           "pythonEnabled" : {
-            "description" : "Enables python3 inside the sandbox. Also requires the server-side lock; the cost is arbitrary code execution.",
+            "description" : "Enables python3 inside the sandbox. Also requires the server-side lock; the cost is arbitrary code execution, so every python command is approved by the user before it runs.",
+            "type" : "boolean"
+          },
+          "javascriptEnabled" : {
+            "description" : "Enables js-exec (JavaScript and TypeScript, in QuickJS) inside the sandbox. Same two extra locks as pythonEnabled, and the same per-command approval: running code IS the effect, so there is nothing to refuse afterwards.",
             "type" : "boolean"
           },
           "network" : {
@@ -17250,6 +17254,9 @@
           "usage" : {
             "$ref" : "#/components/schemas/TokenUsage"
           },
+          "contextUsage" : {
+            "$ref" : "#/components/schemas/ConversationContextUsage"
+          },
           "createdAt" : {
             "type" : "string"
           },
@@ -17422,7 +17429,7 @@
         "description" : "One authorisation decision taken during this message: which tool, over what, by whom, when. Carried by the message so the history reads as it stands, with no extra request. For a decision granted once it is the only lasting trace there is — a one-off creates no standing approval. Deliberately beside toolResults rather than inside it: toolResults is replayed to the model every turn, and a one-off appearing there would later suggest a right that has expired.",
         "properties" : {
           "tool" : {
-            "description" : "The tool whose use was submitted for approval. It also says which family the decision belongs to: bash_network_approval an address, bash_python_approval a command.",
+            "description" : "The tool whose use was submitted for approval. It also says which family the decision belongs to: bash_network_approval an address, bash_command_approval a command (and bash_python_approval, its former name, on decisions taken before the rename).",
             "type" : "string"
           },
           "granted" : {
@@ -17536,6 +17543,34 @@
         "required" : [ "inputTokens", "outputTokens", "reasoningTokens", "totalTokens" ],
         "type" : "object"
       },
+      "ConversationContextUsage" : {
+        "additionalProperties" : false,
+        "description" : "How much of the model's context window this conversation occupies: the prompt of the last generation call, not the conversation's cumulated token count. Absent until a turn has been measured — an unmeasured conversation has an unknown occupancy, not an empty window.",
+        "properties" : {
+          "usedTokens" : {
+            "description" : "Prompt of the last generation call, in tokens, as reported by the provider. Always > 0.",
+            "example" : 18342,
+            "type" : "number"
+          },
+          "contextWindow" : {
+            "description" : "Context window of the conversation's model, in tokens. Always greater than 0.",
+            "example" : 128000,
+            "type" : "number"
+          },
+          "contextWindowConfidence" : {
+            "description" : "Where the window above comes from. `declared`: carried by the model definition. `catalog`: known to the backend only. `fallback`: unknown, shown as an approximation.",
+            "enum" : [ "declared", "catalog", "fallback" ],
+            "type" : "string"
+          },
+          "modelName" : {
+            "description" : "Model the conversation runs on, absent when its engine reference resolves to none.",
+            "type" : "string"
+          }
+        },
+        "required" : [ "contextWindow", "contextWindowConfidence", "usedTokens" ],
+        "title" : "ConversationContextUsage",
+        "type" : "object"
+      },
       "ChatContext" : {
         "properties" : {
           "attachments" : {
@@ -20246,7 +20281,7 @@
       },
       "ToolApproval" : {
         "additionalProperties" : false,
-        "description" : "One operation the user has authorised an agent to perform. Two families share this shape: an address the agent sandbox may reach, and a python command it may run. An address is stored normalised — query string, fragment and credentials removed — so a token carried by the URL the user saw is not kept here; a command is stored as it was approved, since the command itself is what was judged.",
+        "description" : "One operation the user has authorised an agent to perform. Two families share this shape: an address the agent sandbox may reach, and a command it may run through one of its interpreters — python3 or js-exec. An address is stored normalised — query string, fragment and credentials removed — so a token carried by the URL the user saw is not kept here; a command is stored as it was approved, since the command itself is what was judged.",
         "properties" : {
           "id" : {
             "description" : "Identifier to revoke the approval with.",
@@ -22033,6 +22068,9 @@
       },
       "MessageStatus" : {
         "properties" : {
+          "contextUsage" : {
+            "$ref" : "#/components/schemas/ConversationContextUsage"
+          },
           "status" : {
             "type" : "string"
           },
@@ -22085,7 +22123,7 @@
             "type" : "string"
           },
           "tool" : {
-            "description" : "Name of the tool the model called. Three values are produced by the server today. take_screenshot asks the client to capture the screen. bash_network_approval is an agent sandbox asking permission to reach an address: arguments carries url (the full address, to be shown as-is), urlPrefix (what a yes actually grants), origin, host and method. bash_python_approval is an agent sandbox asking permission to run a python command: arguments carries command, which is both what has to be shown in full and exactly what a yes grants — nothing ran, so a refusal leaves the sandbox untouched.",
+            "description" : "Name of the tool the model called. Three values are produced by the server today. take_screenshot asks the client to capture the screen. bash_network_approval is an agent sandbox asking permission to reach an address: arguments carries url (the full address, to be shown as-is), urlPrefix (what a yes actually grants), origin, host and method. bash_command_approval is an agent sandbox asking permission to run a command through one of its interpreters — python3 or js-exec: arguments carries command, which is both what has to be shown in full and exactly what a yes grants — nothing ran, so a refusal leaves the sandbox untouched. Calls named bash_python_approval, the name this last one carried while python was the only interpreter, may still be waiting in older conversations and resolve exactly the same way.",
             "type" : "string"
           },
           "status" : {
@@ -22148,12 +22186,12 @@
             "type" : "string"
           },
           "approvalScope" : {
-            "description" : "Only read when resolving a bash_network_approval or bash_python_approval call with status completed: how far the approval reaches. once — the suspended reply and nothing after it, so the same request is asked about again next time — is the default, and nothing is stored. agentUser covers this agent, for this user, across all of their conversations, and is kept until revoked. Any other value is refused with a 400. Never widens what the agent is allowed to do: the server-side lock and the per-agent switch remain prerequisites. Only the user the question was asked of may answer it: an approval is a personal consent, so another caller — an admin included — gets a 403.",
+            "description" : "Only read when resolving a bash_network_approval or bash_command_approval call with status completed: how far the approval reaches. once — the suspended reply and nothing after it, so the same request is asked about again next time — is the default, and nothing is stored. agentUser covers this agent, for this user, across all of their conversations, and is kept until revoked. Any other value is refused with a 400. Never widens what the agent is allowed to do: the server-side lock and the per-agent switch remain prerequisites. Only the user the question was asked of may answer it: an approval is a personal consent, so another caller — an admin included — gets a 403.",
             "enum" : [ "once", "agentUser" ],
             "type" : "string"
           },
           "approvalWidth" : {
-            "description" : "Only read when resolving a bash_network_approval call with status completed: how wide the approval is. prefix (the default) grants the prefix shown in the request — origin plus first path segment; origin grants the whole domain. Nothing narrower is offered: nobody can predict the paths an API will serve, and an approval that is too fine is paid for in repeated questions. The server recomputes both from the URL it recorded, so a client cannot submit a prefix of its own. Ignored on a bash_python_approval call, which has a single width: the exact command the server already recorded.",
+            "description" : "Only read when resolving a bash_network_approval call with status completed: how wide the approval is. prefix (the default) grants the prefix shown in the request — origin plus first path segment; origin grants the whole domain. Nothing narrower is offered: nobody can predict the paths an API will serve, and an approval that is too fine is paid for in repeated questions. The server recomputes both from the URL it recorded, so a client cannot submit a prefix of its own. Ignored on a bash_command_approval call, which has a single width: the exact command the server already recorded.",
             "enum" : [ "prefix", "origin" ],
             "type" : "string"
           }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@breign/client",
-  "version": "1.0.148",
+  "version": "1.0.150",
   "main": "dist/index.js",
   "exports": {
     ".": "./dist/index.js",