@intentic/sandbox-contract 1.232.0 → 1.233.0

package/dist/schemas/provider-oauth.d.ts

@@ -0,0 +1,128 @@
+import { z } from "zod";
+export declare const OauthAccountSchema: z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    email: z.ZodOptional<z.ZodString>;
+    organization: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    connectedAt: z.ZodNumber;
+    needsReauth: z.ZodOptional<z.ZodBoolean>;
+    detail: z.ZodOptional<z.ZodString>;
+    usage: z.ZodOptional<z.ZodObject<{
+        windows: z.ZodArray<z.ZodObject<{
+            kind: z.ZodString;
+            label: z.ZodOptional<z.ZodString>;
+            utilization: z.ZodNumber;
+            resetsAt: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        measuredAt: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type OauthAccount = z.infer<typeof OauthAccountSchema>;
+export declare const OauthAccountListSchema: z.ZodObject<{
+    accounts: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        email: z.ZodOptional<z.ZodString>;
+        organization: z.ZodOptional<z.ZodString>;
+        scope: z.ZodOptional<z.ZodString>;
+        connectedAt: z.ZodNumber;
+        needsReauth: z.ZodOptional<z.ZodBoolean>;
+        detail: z.ZodOptional<z.ZodString>;
+        usage: z.ZodOptional<z.ZodObject<{
+            windows: z.ZodArray<z.ZodObject<{
+                kind: z.ZodString;
+                label: z.ZodOptional<z.ZodString>;
+                utilization: z.ZodNumber;
+                resetsAt: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+            measuredAt: z.ZodNumber;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type OauthAccountList = z.infer<typeof OauthAccountListSchema>;
+export declare const AccountListQuerySchema: z.ZodObject<{
+    force: z.ZodDefault<z.ZodCodec<z.ZodString, z.ZodBoolean>>;
+}, z.core.$strip>;
+export declare const AccountIdSchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export declare const AccountRenameSchema: z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+}, z.core.$strip>;
+export declare const OauthExchangeSchema: z.ZodObject<{
+    code: z.ZodString;
+    verifier: z.ZodString;
+    state: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const AuthorizeChallengeSchema: z.ZodObject<{
+    authorizeUrl: z.ZodString;
+    verifier: z.ZodString;
+    state: z.ZodString;
+}, z.core.$strip>;
+export declare const CursorLoginStartSchema: z.ZodObject<{
+    url: z.ZodString;
+    handshake: z.ZodString;
+    expiresAt: z.ZodNumber;
+}, z.core.$strip>;
+export type CursorLoginStart = z.infer<typeof CursorLoginStartSchema>;
+export declare const CursorLoginCancelSchema: z.ZodObject<{
+    handshake: z.ZodString;
+}, z.core.$strip>;
+export declare const DeviceStartSchema: z.ZodObject<{
+    url: z.ZodString;
+    code: z.ZodString;
+}, z.core.$strip>;
+export declare const TranslatorStartSchema: z.ZodObject<{
+    url: z.ZodString;
+    code: z.ZodString;
+    state: z.ZodString;
+    flow: z.ZodEnum<{
+        device: "device";
+        redirect: "redirect";
+    }>;
+}, z.core.$strip>;
+export declare const TranslatorCompleteSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        codex: "codex";
+        gemini: "gemini";
+        grok: "grok";
+        kimi: "kimi";
+    }>;
+    redirectUrl: z.ZodString;
+    state: z.ZodString;
+}, z.core.$strip>;
+export declare const ModelBadgeSchema: z.ZodEnum<{
+    fast: "fast";
+    reasoning: "reasoning";
+}>;
+export type ModelBadge = z.infer<typeof ModelBadgeSchema>;
+export declare const ModelSchema: z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    efforts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    description: z.ZodOptional<z.ZodString>;
+    badges: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        fast: "fast";
+        reasoning: "reasoning";
+    }>>>;
+    contextWindow: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type Model = z.infer<typeof ModelSchema>;
+export declare const ModelsSchema: z.ZodObject<{
+    models: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        efforts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        description: z.ZodOptional<z.ZodString>;
+        badges: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            fast: "fast";
+            reasoning: "reasoning";
+        }>>>;
+        contextWindow: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    default: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=provider-oauth.d.ts.map

package/dist/schemas/provider-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-oauth.d.ts","sourceRoot":"","sources":["../../src/schemas/provider-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;iBAiC7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;iBAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAOtE,eAAO,MAAM,sBAAsB;;iBAOjC,CAAC;AAEH,eAAO,MAAM,eAAe;;iBAAiE,CAAC;AAI9F,eAAO,MAAM,mBAAmB;;;iBAG9B,CAAC;AAGH,eAAO,MAAM,mBAAmB;;;;;iBAK9B,CAAC;AACH,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AAcH,eAAO,MAAM,sBAAsB;;;;iBAQjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAGtE,eAAO,MAAM,uBAAuB;;iBAA2F,CAAC;AAShI,eAAO,MAAM,iBAAiB;;;iBAO5B,CAAC;AAIH,eAAO,MAAM,qBAAqB;;;;;;;;iBAShC,CAAC;AAGH,eAAO,MAAM,wBAAwB;;;;;;;;;iBAInC,CAAC;AAgBH,eAAO,MAAM,gBAAgB;;;EAAgC,CAAC;AAC9D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,eAAO,MAAM,WAAW;;;;;;;;;;iBAoBtB,CAAC;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAChD,eAAO,MAAM,YAAY;;;;;;;;;;;;;iBAGvB,CAAC"}

package/dist/schemas/provider-oauth.js

@@ -0,0 +1,91 @@
+import { z } from "zod";
+import { AccountUsageSchema } from "./plan-limits.js";
+import { KeyedProviderSchema } from "./provider-subscriptions.js";
+export const OauthAccountSchema = z.object({
+    id: z.string().describe("The account's id, which is what a turn names to spend on it and what disconnecting takes."),
+    label: z.string().describe("What it is called here, which somebody can change."),
+    email: z
+        .string()
+        .optional()
+        .describe("Who it signs in as, in the provider's own words. Kept beside the label rather than folded into it, so a renamed account can still say whose it is. Absent when the provider says nothing, which is exactly when renaming is the only answer."),
+    organization: z.string().optional().describe("Which organisation it belongs to, where the provider says."),
+    scope: z.string().optional().describe("What the credential is permitted to do, in the provider's terms."),
+    connectedAt: z.number().describe("When it was connected, in milliseconds."),
+    needsReauth: z
+        .boolean()
+        .optional()
+        .describe("Its stored credential can no longer be renewed and somebody has to sign in again. Absent means healthy, or not checked yet."),
+    detail: z.string().optional().describe("Why, in words a person can act on."),
+    usage: AccountUsageSchema.optional().describe("How full its plan limits were when last measured, so a picker can show what is left before committing work to it. Absent until a reading exists, which reads as unknown rather than as nothing left."),
+});
+export const OauthAccountListSchema = z.object({
+    accounts: z
+        .array(OauthAccountSchema)
+        .describe("The connected accounts. Tokens never travel in this shape: being in this list is what connected means."),
+});
+export const AccountListQuerySchema = z.object({
+    force: z
+        .stringbool()
+        .default(false)
+        .describe("Measure the plan limits again before answering, rather than serving a recent reading. Slower, and the right thing when somebody has just changed a plan and is asking whether what they can see is still true."),
+});
+export const AccountIdSchema = z.object({ id: z.string().min(1).describe("Which account.") });
+export const AccountRenameSchema = z.object({
+    id: z.string().min(1).describe("Which account."),
+    label: z.string().max(80).describe("The new name. Blank restores the one derived from the sign-in, rather than leaving a nameless row."),
+});
+export const OauthExchangeSchema = z.object({
+    code: z.string().min(1).describe("The code the sign-in handed back."),
+    verifier: z.string().min(1).describe("The proof from the start of the handshake, which is what stops somebody else's code being redeemed here."),
+    state: z.string().min(1).describe("The handshake this belongs to. A mismatch is refused."),
+    label: z.string().optional().describe("What to call the account. Blank derives one from the sign-in."),
+});
+export const AuthorizeChallengeSchema = z.object({
+    authorizeUrl: z.string().describe("Where to send somebody to sign in."),
+    verifier: z.string().describe("Keep this and send it back when finishing. It is what proves the code that comes back belongs to this handshake."),
+    state: z.string().describe("The handshake's own id, sent back with it."),
+});
+export const CursorLoginStartSchema = z.object({
+    url: z.string().describe("The page to open and sign in on. It is already addressed to this attempt, so there is no code to type."),
+    handshake: z
+        .string()
+        .describe("This attempt's id, for abandoning it. Not a credential and not redeemable: the proof that finishes the sign-in never leaves the sandbox."),
+    expiresAt: z.number().describe("When this attempt stops being answerable, in milliseconds, so a card can stop waiting instead of spinning."),
+});
+export const CursorLoginCancelSchema = z.object({ handshake: z.string().min(1).describe("Which attempt to stop waiting on.") });
+export const DeviceStartSchema = z.object({
+    url: z.string().describe("The page to open, which already has the code in it."),
+    code: z
+        .string()
+        .describe("The one-time code, shown as well so the page and the card say the same thing. Nothing is pasted back: the sandbox waits for the sign-in to complete on its own."),
+});
+export const TranslatorStartSchema = z.object({
+    url: z.string().describe("The page to open."),
+    code: z.string().describe("The one-time code, where the provider uses one."),
+    state: z.string().describe("The handshake's id, which the finishing call sends back."),
+    flow: z
+        .enum(["device", "redirect"])
+        .describe("Which shape this is. A device sign-in finishes by itself and you poll the account list; a redirect needs the address it landed on handed back. Said outright rather than guessed at from whether a code happens to exist."),
+});
+export const TranslatorCompleteSchema = z.object({
+    provider: KeyedProviderSchema.describe("Which provider."),
+    redirectUrl: z.string().min(1).describe("The address the browser was sent to, whole. The grant is inside it."),
+    state: z.string().min(1).describe("The handshake this belongs to. A mismatch is refused."),
+});
+export const ModelBadgeSchema = z.enum(["reasoning", "fast"]);
+export const ModelSchema = z.object({
+    id: z.string().describe("What to name when asking for this model."),
+    label: z.string().describe("What to call it on screen."),
+    efforts: z.array(z.string()).optional().describe("The thinking levels it accepts, where the provider says. Empty means use your own defaults."),
+    description: z
+        .string()
+        .optional()
+        .describe("What it is good for, in the provider's own words. Absent where the provider publishes only ids, which is the honest answer rather than something to paper over with a hand-written table."),
+    badges: z.array(ModelBadgeSchema).optional().describe("What it is known for, where the provider says so."),
+    contextWindow: z.number().optional().describe("How many tokens this model will accept in one request, where the server publishes it."),
+});
+export const ModelsSchema = z.object({
+    models: z.array(ModelSchema).describe("What this provider serves, in its own preference order, which is not rearranged here. Never empty."),
+    default: z.string().describe("Which one a fresh conversation starts on. Always present."),
+});
+//# sourceMappingURL=provider-oauth.js.map

package/dist/schemas/provider-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-oauth.js","sourceRoot":"","sources":["../../src/schemas/provider-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAOlE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2FAA2F,CAAC;IACpH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAOhF,KAAK,EAAE,CAAC;SACH,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACL,8OAA8O,CACjP;IACL,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;IAC1G,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kEAAkE,CAAC;IACzG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAI3E,WAAW,EAAE,CAAC;SACT,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,6HAA6H,CAAC;IAC5I,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAK5E,KAAK,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACzC,sMAAsM,CACzM;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC;SACN,KAAK,CAAC,kBAAkB,CAAC;SACzB,QAAQ,CAAC,wGAAwG,CAAC;CAC1H,CAAC,CAAC;AAQH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC;SACH,UAAU,EAAE;SACZ,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACL,gNAAgN,CACnN;CACR,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;AAI9F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,oGAAoG,CAAC;CAC3I,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACrE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0GAA0G,CAAC;IAChJ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC1F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;CACzG,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACvE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kHAAkH,CAAC;IACjJ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;CAC3E,CAAC,CAAC;AAcH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wGAAwG,CAAC;IAClI,SAAS,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,CACL,0IAA0I,CAC7I;IACL,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4GAA4G,CAAC;CAC/I,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC,CAAC;AAShI,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IAC/E,IAAI,EAAE,CAAC;SACF,MAAM,EAAE;SACR,QAAQ,CACL,iKAAiK,CACpK;CACR,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC5E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACtF,IAAI,EAAE,CAAC;SACF,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;SAC5B,QAAQ,CACL,2NAA2N,CAC9N;CACR,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC;IAC9G,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;CAC7F,CAAC,CAAC;AAgBH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACnE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6FAA6F,CAAC;IAC/I,WAAW,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACL,2LAA2L,CAC9L;IACL,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAS1G,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uFAAuF,CAAC;CACzI,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,oGAAoG,CAAC;IAC3I,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;CAC5F,CAAC,CAAC"}

package/dist/schemas/provider-subscriptions.d.ts

@@ -0,0 +1,9 @@
+import { z } from "zod";
+export declare const KeyedProviderSchema: z.ZodEnum<{
+    codex: "codex";
+    gemini: "gemini";
+    grok: "grok";
+    kimi: "kimi";
+}>;
+export type KeyedProvider = z.infer<typeof KeyedProviderSchema>;
+//# sourceMappingURL=provider-subscriptions.d.ts.map

package/dist/schemas/provider-subscriptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-subscriptions.d.ts","sourceRoot":"","sources":["../../src/schemas/provider-subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,mBAAmB;;;;;EAA8C,CAAC;AAC/E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/schemas/provider-subscriptions.js

@@ -0,0 +1,3 @@
+import { z } from "zod";
+export const KeyedProviderSchema = z.enum(["codex", "grok", "kimi", "gemini"]);
+//# sourceMappingURL=provider-subscriptions.js.map

package/dist/schemas/provider-subscriptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-subscriptions.js","sourceRoot":"","sources":["../../src/schemas/provider-subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC"}

package/dist/schemas/public.d.ts

@@ -0,0 +1,32 @@
+import { z } from "zod";
+export declare const PublicFileSchema: z.ZodObject<{
+    path: z.ZodString;
+    size: z.ZodNumber;
+    modifiedAt: z.ZodNumber;
+    url: z.ZodOptional<z.ZodString>;
+    blocked: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PublicFile = z.infer<typeof PublicFileSchema>;
+export declare const PublicListSchema: z.ZodObject<{
+    url: z.ZodOptional<z.ZodString>;
+    files: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        size: z.ZodNumber;
+        modifiedAt: z.ZodNumber;
+        url: z.ZodOptional<z.ZodString>;
+        blocked: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type PublicList = z.infer<typeof PublicListSchema>;
+export declare const PublishSchema: z.ZodObject<{
+    path: z.ZodString;
+}, z.core.$strip>;
+export declare const UnpublishSchema: z.ZodObject<{
+    path: z.ZodString;
+}, z.core.$strip>;
+export declare const PublishResultSchema: z.ZodObject<{
+    path: z.ZodString;
+    url: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PublishResult = z.infer<typeof PublishResultSchema>;
+//# sourceMappingURL=public.d.ts.map

package/dist/schemas/public.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../src/schemas/public.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,gBAAgB;;;;;;iBAgB3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,gBAAgB;;;;;;;;;iBAG3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,aAAa;;iBAOxB,CAAC;AAEH,eAAO,MAAM,eAAe;;iBAE1B,CAAC;AACH,eAAO,MAAM,mBAAmB;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/schemas/public.js

@@ -0,0 +1,29 @@
+import { z } from "zod";
+export const PublicFileSchema = z.object({
+    path: z.string().describe("Where it sits inside the outbox."),
+    size: z.number().describe("Size in bytes."),
+    modifiedAt: z.number().describe("When it last changed, in milliseconds."),
+    url: z.string().optional().describe("Its public address. Absent when this sandbox has no outside address, or when the file is being refused."),
+    blocked: z
+        .string()
+        .optional()
+        .describe("Why a file sitting in the outbox is not being served: a hidden name, a credential-shaped name, contents that look like a token, or sheer size. Only the publisher sees this; a stranger asking for the same file gets the same nothing every other miss gets."),
+});
+export const PublicListSchema = z.object({
+    url: z.string().optional().describe("Your public address, which every file's own hangs off. Absent on a sandbox with nowhere to publish to."),
+    files: z.array(PublicFileSchema).describe("What the outbox holds."),
+});
+export const PublishSchema = z.object({
+    path: z
+        .string()
+        .min(1)
+        .describe("What to publish, as a workspace path. It is copied rather than moved, so a repository does not lose its build output because somebody shared it."),
+});
+export const UnpublishSchema = z.object({
+    path: z.string().min(1).describe("What to withdraw, as a path inside the outbox rather than a workspace path."),
+});
+export const PublishResultSchema = z.object({
+    path: z.string().describe("Where it landed inside the outbox."),
+    url: z.string().optional().describe("Its public address. Absent on a sandbox with nowhere to publish to."),
+});
+//# sourceMappingURL=public.js.map

package/dist/schemas/public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.js","sourceRoot":"","sources":["../../src/schemas/public.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAErC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC7D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAEzE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yGAAyG,CAAC;IAI9I,OAAO,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACL,+PAA+P,CAClQ;CACR,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wGAAwG,CAAC;IAC7I,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CACtE,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACL,kJAAkJ,CACrJ;CACR,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6EAA6E,CAAC;CAClH,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAC/D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;CAC7G,CAAC,CAAC"}

package/dist/schemas/push.d.ts

@@ -0,0 +1,55 @@
+import { z } from "zod";
+export declare const WebPushChannelSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"webpush">;
+    endpoint: z.ZodURL;
+    keys: z.ZodObject<{
+        p256dh: z.ZodString;
+        auth: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type WebPushChannel = z.infer<typeof WebPushChannelSchema>;
+export declare const RelayChannelSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"relay">;
+    url: z.ZodURL;
+    deviceId: z.ZodString;
+    secret: z.ZodString;
+}, z.core.$strip>;
+export type RelayChannel = z.infer<typeof RelayChannelSchema>;
+export declare const PushChannelSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"webpush">;
+    endpoint: z.ZodURL;
+    keys: z.ZodObject<{
+        p256dh: z.ZodString;
+        auth: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"relay">;
+    url: z.ZodURL;
+    deviceId: z.ZodString;
+    secret: z.ZodString;
+}, z.core.$strip>], "kind">;
+export type PushChannel = z.infer<typeof PushChannelSchema>;
+export declare const channelId: (channel: PushChannel) => string;
+export declare const PushNotificationSchema: z.ZodObject<{
+    title: z.ZodString;
+    body: z.ZodString;
+    url: z.ZodOptional<z.ZodString>;
+    tag: z.ZodOptional<z.ZodString>;
+    requireInteraction: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type PushNotification = z.infer<typeof PushNotificationSchema>;
+export declare const PushConfigSchema: z.ZodObject<{
+    publicKey: z.ZodString;
+    subscribed: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const PushChannelIdSchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export declare const PushConfigQuerySchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const PushTestSchema: z.ZodObject<{
+    delivered: z.ZodNumber;
+}, z.core.$strip>;
+export type PushTest = z.infer<typeof PushTestSchema>;
+//# sourceMappingURL=push.d.ts.map

package/dist/schemas/push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../src/schemas/push.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,eAAO,MAAM,oBAAoB;;;;;;;iBAS/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE,eAAO,MAAM,kBAAkB;;;;;iBAU7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;2BAA2E,CAAC;AAC1G,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAI5D,eAAO,MAAM,SAAS,YAAa,WAAW,KAAG,MAA4E,CAAC;AAO9H,eAAO,MAAM,sBAAsB;;;;;;iBAoBjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE,eAAO,MAAM,gBAAgB;;;iBAO3B,CAAC;AACH,eAAO,MAAM,mBAAmB;;iBAE9B,CAAC;AAGH,eAAO,MAAM,qBAAqB;;iBAMhC,CAAC;AAIH,eAAO,MAAM,cAAc;;iBAQzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/schemas/push.js

@@ -0,0 +1,60 @@
+import { z } from "zod";
+export const WebPushChannelSchema = z.object({
+    kind: z.literal("webpush").describe("A browser, which the sandbox can reach directly and encrypt end to end."),
+    endpoint: z.url().describe("Where that browser's push service accepts sends. It also identifies the device everywhere else in this group."),
+    keys: z
+        .object({
+        p256dh: z.string().min(1).describe("The browser's public key, for encrypting what is sent."),
+        auth: z.string().min(1).describe("The browser's secret, for the same."),
+    })
+        .describe("What the browser handed you when it subscribed. Post it back exactly as it came; nothing reshapes it."),
+});
+export const RelayChannelSchema = z.object({
+    kind: z
+        .literal("relay")
+        .describe("A native app, whose operating system only accepts sends from the app's publisher, so the sandbox posts through a relay instead. The message passes through that relay readable, which is the price of the publisher having to be in the loop."),
+    url: z.url().describe("Where to post a send. Recorded rather than assumed, so the sandbox need not know any platform by name."),
+    deviceId: z.string().min(1).describe("The device's id, which also identifies this registration everywhere else in this group."),
+    secret: z.string().min(1).describe("Proof that this sandbox may notify this device. The relay never learns which sandbox is calling."),
+});
+export const PushChannelSchema = z.discriminatedUnion("kind", [WebPushChannelSchema, RelayChannelSchema]);
+export const channelId = (channel) => (channel.kind === "webpush" ? channel.endpoint : channel.deviceId);
+export const PushNotificationSchema = z.object({
+    title: z.string().min(1).describe("The headline."),
+    body: z
+        .string()
+        .describe("The line under it. Push services cap the whole payload at a few kilobytes, which is why nothing here carries a transcript or a diff: a notification is a pointer back, not a delivery."),
+    url: z.string().optional().describe("Where tapping it goes. An existing tab is focused rather than a new one opened."),
+    tag: z
+        .string()
+        .optional()
+        .describe("Collapses repeats: a second notification with the same tag replaces the first instead of stacking beside it."),
+    requireInteraction: z
+        .boolean()
+        .optional()
+        .describe("Keep it on screen until it is dismissed. Used when the agent is waiting for you, where one that fades away is a question that went unanswered in silence."),
+});
+export const PushConfigSchema = z.object({
+    publicKey: z.string().describe("The key a browser needs in order to subscribe. Native apps ignore it."),
+    subscribed: z
+        .boolean()
+        .describe("Whether the asking device is already registered, so a toggle can show its real state instead of trusting the device's own permission, which can be granted with nothing behind it."),
+});
+export const PushChannelIdSchema = z.object({
+    id: z.string().min(1).describe("Which device: a browser's push address, or a native install's device id."),
+});
+export const PushConfigQuerySchema = z.object({
+    id: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Which device is asking. Without it the answer can only speak for the sandbox as a whole, which is rarely the question."),
+});
+export const PushTestSchema = z.object({
+    delivered: z
+        .number()
+        .int()
+        .nonnegative()
+        .describe("How many devices actually accepted it. A count rather than a yes, because this button exists to prove a chain nobody can inspect, and the sandbox having accepted the request is not the question being asked."),
+});
+//# sourceMappingURL=push.js.map

package/dist/schemas/push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../../src/schemas/push.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,yEAAyE,CAAC;IAC9G,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,+GAA+G,CAAC;IAC3I,IAAI,EAAE,CAAC;SACF,MAAM,CAAC;QACJ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wDAAwD,CAAC;QAC5F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;KAC1E,CAAC;SACD,QAAQ,CAAC,uGAAuG,CAAC;CACzH,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC;SACF,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CACL,+OAA+O,CAClP;IAEL,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,wGAAwG,CAAC;IAC/H,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yFAAyF,CAAC;IAC/H,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kGAAkG,CAAC;CACzI,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAK1G,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAoB,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAO9H,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;IAClD,IAAI,EAAE,CAAC;SACF,MAAM,EAAE;SACR,QAAQ,CACL,wLAAwL,CAC3L;IACL,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iFAAiF,CAAC;IACtH,GAAG,EAAE,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,8GAA8G,CAAC;IAG7H,kBAAkB,EAAE,CAAC;SAChB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACL,2JAA2J,CAC9J;CACR,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC;IACvG,UAAU,EAAE,CAAC;SACR,OAAO,EAAE;SACT,QAAQ,CACL,oLAAoL,CACvL;CACR,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0EAA0E,CAAC;CAC7G,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC;SACA,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,wHAAwH,CAAC;CAC1I,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,SAAS,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,CACL,gNAAgN,CACnN;CACR,CAAC,CAAC"}

package/dist/schemas/secrets.d.ts

@@ -0,0 +1,86 @@
+import { z } from "zod";
+export declare const SecretSetSchema: z.ZodObject<{
+    key: z.ZodString;
+    value: z.ZodString;
+}, z.core.$strip>;
+export declare const SecretKeysSchema: z.ZodObject<{
+    keys: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export declare const SecretKeyParamSchema: z.ZodObject<{
+    key: z.ZodString;
+}, z.core.$strip>;
+export declare const SecretRevealSchema: z.ZodObject<{
+    value: z.ZodString;
+}, z.core.$strip>;
+export declare const SecretInventoryEntrySchema: z.ZodObject<{
+    key: z.ZodString;
+    kind: z.ZodEnum<{
+        capability: "capability";
+        env: "env";
+        generated: "generated";
+        provider: "provider";
+    }>;
+    label: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        connected: "connected";
+        missing: "missing";
+        set: "set";
+    }>;
+    requiredBy: z.ZodArray<z.ZodObject<{
+        resourceId: z.ZodString;
+        type: z.ZodString;
+    }, z.core.$strip>>;
+    storedAt: z.ZodString;
+    revealable: z.ZodBoolean;
+    ci: z.ZodOptional<z.ZodObject<{
+        synced: z.ZodBoolean;
+        pushedAt: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    lastUse: z.ZodOptional<z.ZodObject<{
+        at: z.ZodNumber;
+        lane: z.ZodEnum<{
+            browser: "browser";
+            code: "code";
+            shell: "shell";
+        }>;
+        detail: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type SecretInventoryEntry = z.infer<typeof SecretInventoryEntrySchema>;
+export declare const SecretInventorySchema: z.ZodObject<{
+    entries: z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        kind: z.ZodEnum<{
+            capability: "capability";
+            env: "env";
+            generated: "generated";
+            provider: "provider";
+        }>;
+        label: z.ZodOptional<z.ZodString>;
+        status: z.ZodEnum<{
+            connected: "connected";
+            missing: "missing";
+            set: "set";
+        }>;
+        requiredBy: z.ZodArray<z.ZodObject<{
+            resourceId: z.ZodString;
+            type: z.ZodString;
+        }, z.core.$strip>>;
+        storedAt: z.ZodString;
+        revealable: z.ZodBoolean;
+        ci: z.ZodOptional<z.ZodObject<{
+            synced: z.ZodBoolean;
+            pushedAt: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        lastUse: z.ZodOptional<z.ZodObject<{
+            at: z.ZodNumber;
+            lane: z.ZodEnum<{
+                browser: "browser";
+                code: "code";
+                shell: "shell";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/schemas/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/schemas/secrets.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,eAAe;;;iBAO1B,CAAC;AACH,eAAO,MAAM,gBAAgB;;iBAE3B,CAAC;AACH,eAAO,MAAM,oBAAoB;;iBAAmE,CAAC;AACrG,eAAO,MAAM,kBAAkB;;iBAAiH,CAAC;AAIjJ,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwCrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIhC,CAAC"}

package/dist/schemas/secrets.js

@@ -0,0 +1,51 @@
+import { z } from "zod";
+export const SecretSetSchema = z.object({
+    key: z
+        .string()
+        .regex(/^[A-Za-z_][A-Za-z0-9_]*$/)
+        .max(128)
+        .describe("The name to store it under, which is the name a process will find it by."),
+    value: z.string().min(1).describe("The value. It goes straight to your sandbox and never through the platform."),
+});
+export const SecretKeysSchema = z.object({
+    keys: z.array(z.string()).describe("The names that exist here. Only the names: the values never leave the sandbox."),
+});
+export const SecretKeyParamSchema = z.object({ key: z.string().describe("Which secret, by name.") });
+export const SecretRevealSchema = z.object({ value: z.string().describe("The value itself. The only place in this API one is ever returned.") });
+export const SecretInventoryEntrySchema = z.object({
+    key: z.string().describe("What identifies it. Unique across the whole inventory, so several accounts of one provider each get their own entry."),
+    kind: z
+        .enum(["env", "generated", "capability", "provider"])
+        .describe("Where it came from: you set it, the sandbox generated it, a connection needs it, or it is a model account's credential."),
+    label: z.string().optional().describe("A friendlier name, for entries that have one."),
+    status: z.enum(["missing", "set", "connected"]).describe("Whether it exists and, for a connection, whether it is working."),
+    requiredBy: z
+        .array(z.object({ resourceId: z.string().describe("Which resource."), type: z.string().describe("What kind of resource it is.") }))
+        .describe("What is waiting on it. Empty for a connection's or an account's own credential."),
+    storedAt: z.string().describe("Where it actually lives, in words."),
+    revealable: z.boolean().describe("Whether its value can be shown at all. Everything except a model account's credential can be."),
+    ci: z
+        .object({
+        synced: z.boolean().describe("Whether the pipeline has it."),
+        pushedAt: z.string().optional().describe("When it was last sent there."),
+    })
+        .optional()
+        .describe("Whether a copy has been given to the build pipeline."),
+    lastUse: z
+        .object({
+        at: z.number().describe("When, in milliseconds."),
+        lane: z.enum(["shell", "code", "browser"]).describe("How it was used: a command, a script, or typed into a page."),
+        detail: z
+            .string()
+            .optional()
+            .describe("Where it went: the start of the command or script, or the site. Names and destinations only, never values."),
+    })
+        .optional()
+        .describe("The last time an agent actually spent this secret. Absent while it never has been, which most never are."),
+});
+export const SecretInventorySchema = z.object({
+    entries: z
+        .array(SecretInventoryEntrySchema)
+        .describe("One entry per secret this sandbox knows about, from every place they live. No values, ever."),
+});
+//# sourceMappingURL=secrets.js.map

package/dist/schemas/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/schemas/secrets.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,GAAG,EAAE,CAAC;SACD,MAAM,EAAE;SACR,KAAK,CAAC,0BAA0B,CAAC;SACjC,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,CAAC,0EAA0E,CAAC;IACzF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6EAA6E,CAAC;CACnH,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,gFAAgF,CAAC;CACvH,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;AACrG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC,EAAE,CAAC,CAAC;AAIjJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAG/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sHAAsH,CAAC;IAChJ,IAAI,EAAE,CAAC;SACF,IAAI,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;SACpD,QAAQ,CAAC,yHAAyH,CAAC;IAExI,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IACtF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAE3H,UAAU,EAAE,CAAC;SACR,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;SAClI,QAAQ,CAAC,iFAAiF,CAAC;IAEhG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACnE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,+FAA+F,CAAC;IAEjI,EAAE,EAAE,CAAC;SACA,MAAM,CAAC;QACJ,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;KAC3E,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CAAC,sDAAsD,CAAC;IAKrE,OAAO,EAAE,CAAC;SACL,MAAM,CAAC;QACJ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QACjD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,6DAA6D,CAAC;QAClH,MAAM,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,4GAA4G,CAAC;KAC9H,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CAAC,0GAA0G,CAAC;CAC5H,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC;SACL,KAAK,CAAC,0BAA0B,CAAC;SACjC,QAAQ,CAAC,6FAA6F,CAAC;CAC/G,CAAC,CAAC"}

package/dist/schemas/sessions.d.ts

@@ -0,0 +1,32 @@
+import { z } from "zod";
+export declare const SessionIdParamSchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export declare const SessionSummarySchema: z.ZodObject<{
+    id: z.ZodString;
+    title: z.ZodString;
+    updatedAt: z.ZodNumber;
+    snippet: z.ZodOptional<z.ZodObject<{
+        text: z.ZodString;
+        speaker: z.ZodEnum<{
+            agent: "agent";
+            user: "user";
+        }>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type SessionSummary = z.infer<typeof SessionSummarySchema>;
+export declare const SessionsListSchema: z.ZodObject<{
+    sessions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        updatedAt: z.ZodNumber;
+        snippet: z.ZodOptional<z.ZodObject<{
+            text: z.ZodString;
+            speaker: z.ZodEnum<{
+                agent: "agent";
+                user: "user";
+            }>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/schemas/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/schemas/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB;;iBAAoE,CAAC;AACtG,eAAO,MAAM,oBAAoB;;;;;;;;;;;iBAU/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;iBAAsG,CAAC"}