@mutagent/sdk 0.3.10 → 0.3.12

package/src/models/name-provider-api-key.ts

@@ -5,37 +5,26 @@
 import * as z from "zod/v4-mini";
 
 /**
- * Provider type (openai, anthropic, google, azure, bedrock, xai, glm, moonshot, custom)
+ * Provider type (openai, anthropic, google, moonshot, glm, deepseek, xai, azure, vertex, bedrock, custom)
  */
 export enum Provider {
   Openai = "openai",
   Anthropic = "anthropic",
   Google = "google",
+  Moonshot = "moonshot",
+  Glm = "glm",
+  Deepseek = "deepseek",
+  Xai = "xai",
   Azure = "azure",
+  Vertex = "vertex",
   Bedrock = "bedrock",
-  Xai = "xai",
-  Glm = "glm",
-  Moonshot = "moonshot",
   Custom = "custom",
 }
 
 /**
- * Scope specification - exactly one must be provided
+ * Per-entry credential material keyed by the catalog wire names for this provider. GET /providers/catalog declares which fields each entry accepts. The secret is extracted and encrypted; only the non-secret remainder is stored.
  */
-export type Scope = {
-  /**
-   * Organization ID for org-level config
-   */
-  organizationId?: string | undefined;
-  /**
-   * Workspace ID for workspace-level config
-   */
-  workspaceId?: string | undefined;
-  /**
-   * User ID for personal config (UUID format)
-   */
-  userId?: string | undefined;
-};
+export type CredentialFields = {};
 
 /**
  * Model name mappings (e.g., {"gpt-4": "custom-gpt-4"})
@@ -76,17 +65,21 @@ export type NameProviderApiKey = {
    */
   name: string;
   /**
-   * Provider type (openai, anthropic, google, azure, bedrock, xai, glm, moonshot, custom)
+   * Provider type (openai, anthropic, google, moonshot, glm, deepseek, xai, azure, vertex, bedrock, custom)
    */
   provider?: Provider | undefined;
   /**
-   * API key for the provider (will be encrypted)
+   * The entry's single secret, when sent in this top-level slot. OPTIONAL because the secret's wire name is per-entry — ten entries call it 'apiKey', Google Vertex calls it 'serviceAccountKey'. Send it here or as the correspondingly-named key in credentialFields.
    */
-  apiKey: string;
+  apiKey?: string | undefined;
   /**
-   * Scope specification - exactly one must be provided
+   * Per-entry credential material keyed by the catalog wire names for this provider. GET /providers/catalog declares which fields each entry accepts. The secret is extracted and encrypted; only the non-secret remainder is stored.
    */
-  scope: Scope;
+  credentialFields?: CredentialFields | undefined;
+  /**
+   * Which hosted model family a gateway configuration targets. Required for gateways hosting more than one (Azure, Google Vertex); derived for single-family gateways (AWS Bedrock); not accepted for direct providers.
+   */
+  hostedFamily?: string | undefined;
   /**
    * Custom base URL for the provider API
    */
@@ -99,10 +92,6 @@ export type NameProviderApiKey = {
    * Set as default provider for this scope
    */
   isDefault?: boolean | undefined;
-  /**
-   * Azure/custom wire-format family: 'openai' | 'anthropic' | 'inference'
-   */
-  family?: string | undefined;
   /**
    * Declared models this provider serves
    */
@@ -123,22 +112,20 @@ export const Provider$outboundSchema: z.ZodMiniEnum<typeof Provider> = z.enum(
 );
 
 /** @internal */
-export type Scope$Outbound = {
-  organizationId?: string | undefined;
-  workspaceId?: string | undefined;
-  userId?: string | undefined;
-};
+export type CredentialFields$Outbound = {};
 
 /** @internal */
-export const Scope$outboundSchema: z.ZodMiniType<Scope$Outbound, Scope> = z
-  .object({
-    organizationId: z.optional(z.string()),
-    workspaceId: z.optional(z.string()),
-    userId: z.optional(z.string()),
-  });
+export const CredentialFields$outboundSchema: z.ZodMiniType<
+  CredentialFields$Outbound,
+  CredentialFields
+> = z.object({});
 
-export function scopeToJSON(scope: Scope): string {
-  return JSON.stringify(Scope$outboundSchema.parse(scope));
+export function credentialFieldsToJSON(
+  credentialFields: CredentialFields,
+): string {
+  return JSON.stringify(
+    CredentialFields$outboundSchema.parse(credentialFields),
+  );
 }
 
 /** @internal */
@@ -212,12 +199,12 @@ export function nameProviderApiKeyMetadataToJSON(
 export type NameProviderApiKey$Outbound = {
   name: string;
   provider: string;
-  apiKey: string;
-  scope: Scope$Outbound;
+  apiKey?: string | undefined;
+  credentialFields?: CredentialFields$Outbound | undefined;
+  hostedFamily?: string | undefined;
   baseUrl?: string | undefined;
   modelOverrides?: NameProviderApiKeyModelOverrides$Outbound | undefined;
   isDefault: boolean;
-  family?: string | undefined;
   supportedModels?:
     | Array<NameProviderApiKeySupportedModel$Outbound>
     | undefined;
@@ -232,14 +219,14 @@ export const NameProviderApiKey$outboundSchema: z.ZodMiniType<
 > = z.object({
   name: z.string(),
   provider: z._default(Provider$outboundSchema, Provider.Openai),
-  apiKey: z.string(),
-  scope: z.lazy(() => Scope$outboundSchema),
+  apiKey: z.optional(z.string()),
+  credentialFields: z.optional(z.lazy(() => CredentialFields$outboundSchema)),
+  hostedFamily: z.optional(z.string()),
   baseUrl: z.optional(z.string()),
   modelOverrides: z.optional(
     z.lazy(() => NameProviderApiKeyModelOverrides$outboundSchema),
   ),
   isDefault: z._default(z.boolean(), false),
-  family: z.optional(z.string()),
   supportedModels: z.optional(
     z.array(z.lazy(() => NameProviderApiKeySupportedModel$outboundSchema)),
   ),

package/src/models/name-slug-description2.ts

@@ -34,6 +34,10 @@ export type NameSlugDescription2 = {
    * Arbitrary metadata
    */
   metadata?: NameSlugDescription2Metadata | undefined;
+  /**
+   * When true, a slug conflict is resolved by deriving a unique suffixed slug (<base>-<rand6>) instead of returning 409. Intended for auto-bootstrap flows.
+   */
+  autoSuffixSlug?: boolean | undefined;
 };
 
 /** @internal */
@@ -63,6 +67,7 @@ export type NameSlugDescription2$Outbound = {
   logoUrl?: string | undefined;
   billingEmail?: string | undefined;
   metadata?: NameSlugDescription2Metadata$Outbound | undefined;
+  autoSuffixSlug?: boolean | undefined;
 };
 
 /** @internal */
@@ -78,6 +83,7 @@ export const NameSlugDescription2$outboundSchema: z.ZodMiniType<
   metadata: z.optional(
     z.lazy(() => NameSlugDescription2Metadata$outboundSchema),
   ),
+  autoSuffixSlug: z.optional(z.boolean()),
 });
 
 export function nameSlugDescription2ToJSON(

package/src/models/operations/index.ts

@@ -29,6 +29,7 @@ export * from "./list-available-models.js";
 export * from "./list-invitations.js";
 export * from "./list-organization-members.js";
 export * from "./list-organizations.js";
+export * from "./list-provider-models.js";
 export * from "./list-providers.js";
 export * from "./list-sessions.js";
 export * from "./list-workspace-members.js";

package/src/models/operations/list-provider-models.ts

@@ -0,0 +1,30 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+
+export type ListProviderModelsRequest = {
+  id: string;
+};
+
+/** @internal */
+export type ListProviderModelsRequest$Outbound = {
+  id: string;
+};
+
+/** @internal */
+export const ListProviderModelsRequest$outboundSchema: z.ZodMiniType<
+  ListProviderModelsRequest$Outbound,
+  ListProviderModelsRequest
+> = z.object({
+  id: z.string(),
+});
+
+export function listProviderModelsRequestToJSON(
+  listProviderModelsRequest: ListProviderModelsRequest,
+): string {
+  return JSON.stringify(
+    ListProviderModelsRequest$outboundSchema.parse(listProviderModelsRequest),
+  );
+}

package/src/models/operations/list-providers.ts

@@ -5,18 +5,12 @@
 import * as z from "zod/v4-mini";
 
 export type ListProvidersRequest = {
-  organizationId?: string | undefined;
-  workspaceId?: string | undefined;
-  userId?: string | undefined;
   provider?: string | undefined;
   includeInactive?: boolean | undefined;
 };
 
 /** @internal */
 export type ListProvidersRequest$Outbound = {
-  organizationId?: string | undefined;
-  workspaceId?: string | undefined;
-  userId?: string | undefined;
   provider?: string | undefined;
   includeInactive?: boolean | undefined;
 };
@@ -26,9 +20,6 @@ export const ListProvidersRequest$outboundSchema: z.ZodMiniType<
   ListProvidersRequest$Outbound,
   ListProvidersRequest
 > = z.object({
-  organizationId: z.optional(z.string()),
-  workspaceId: z.optional(z.string()),
-  userId: z.optional(z.string()),
   provider: z.optional(z.string()),
   includeInactive: z.optional(z.boolean()),
 });

package/src/models/provider-config.ts

@@ -50,17 +50,9 @@ export type ProviderConfig = {
    */
   apiKeyMasked: string;
   /**
-   * Organization ID if org-scoped
+   * Workspace this configuration belongs to
    */
-  organizationId: string | null;
-  /**
-   * Workspace ID if workspace-scoped
-   */
-  workspaceId: string | null;
-  /**
-   * User ID if personal
-   */
-  userId: string | null;
+  workspaceId: string;
   /**
    * Custom base URL
    */
@@ -74,13 +66,13 @@ export type ProviderConfig = {
    */
   isActive: boolean;
   /**
-   * Whether this is the default for its scope
+   * Whether this is the default for its workspace
    */
   isDefault: boolean;
   /**
-   * Azure/custom wire-format family: 'openai' | 'anthropic' | 'inference'
+   * Hosted model family for gateway entries: 'openai' | 'anthropic' | 'inference'; null for direct providers
    */
-  family: string | null;
+  hostedFamily: string | null;
   /**
    * Declared models this provider serves
    */
@@ -170,16 +162,14 @@ export const ProviderConfig$inboundSchema: z.ZodMiniType<
   name: types.string(),
   provider: types.string(),
   apiKeyMasked: types.string(),
-  organizationId: types.nullable(types.string()),
-  workspaceId: types.nullable(types.string()),
-  userId: types.nullable(types.string()),
+  workspaceId: types.string(),
   baseUrl: types.nullable(types.string()),
   modelOverrides: types.nullable(
     z.lazy(() => ProviderConfigModelOverrides$inboundSchema),
   ),
   isActive: types.boolean(),
   isDefault: types.boolean(),
-  family: types.nullable(types.string()),
+  hostedFamily: types.nullable(types.string()),
   supportedModels: types.nullable(
     z.array(z.lazy(() => ProviderConfigSupportedModel$inboundSchema)),
   ),

package/src/models/provider-configs-list.ts

@@ -50,17 +50,9 @@ export type Config = {
    */
   apiKeyMasked: string;
   /**
-   * Organization ID if org-scoped
+   * Workspace this configuration belongs to
    */
-  organizationId: string | null;
-  /**
-   * Workspace ID if workspace-scoped
-   */
-  workspaceId: string | null;
-  /**
-   * User ID if personal
-   */
-  userId: string | null;
+  workspaceId: string;
   /**
    * Custom base URL
    */
@@ -74,13 +66,13 @@ export type Config = {
    */
   isActive: boolean;
   /**
-   * Whether this is the default for its scope
+   * Whether this is the default for its workspace
    */
   isDefault: boolean;
   /**
-   * Azure/custom wire-format family: 'openai' | 'anthropic' | 'inference'
+   * Hosted model family for gateway entries: 'openai' | 'anthropic' | 'inference'; null for direct providers
    */
-  family: string | null;
+  hostedFamily: string | null;
   /**
    * Declared models this provider serves
    */
@@ -181,16 +173,14 @@ export const Config$inboundSchema: z.ZodMiniType<Config, unknown> = z.object({
   name: types.string(),
   provider: types.string(),
   apiKeyMasked: types.string(),
-  organizationId: types.nullable(types.string()),
-  workspaceId: types.nullable(types.string()),
-  userId: types.nullable(types.string()),
+  workspaceId: types.string(),
   baseUrl: types.nullable(types.string()),
   modelOverrides: types.nullable(
     z.lazy(() => ProviderConfigsListModelOverrides$inboundSchema),
   ),
   isActive: types.boolean(),
   isDefault: types.boolean(),
-  family: types.nullable(types.string()),
+  hostedFamily: types.nullable(types.string()),
   supportedModels: types.nullable(
     z.array(z.lazy(() => ProviderConfigsListSupportedModel$inboundSchema)),
   ),

package/src/models/workspace-model-listing.ts

@@ -0,0 +1,109 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+import { safeParse } from "../lib/schemas.js";
+import * as openEnums from "../types/enums.js";
+import { OpenEnum } from "../types/enums.js";
+import { Result as SafeParseResult } from "../types/fp.js";
+import * as types from "../types/primitives.js";
+import { SDKValidationError } from "./errors/sdk-validation-error.js";
+
+export type Model = {
+  /**
+   * Model identifier, as the provider addresses it
+   */
+  id: string;
+  /**
+   * Human-readable name
+   */
+  displayName: string;
+  /**
+   * Whether this workspace exposes the model. An empty allow-list enables everything.
+   */
+  enabled: boolean;
+  /**
+   * Role list: exec, eval, opt
+   */
+  roles: Array<string>;
+  /**
+   * False when the provider hides which model an identifier serves (an Azure deployment name), so admission was by shape alone.
+   */
+  modelVerified: boolean;
+};
+
+/**
+ * 'live' — listed from the provider just now; 'stored' — the persisted allow-list
+ */
+export enum Source {
+  Live = "live",
+  Stored = "stored",
+}
+/**
+ * 'live' — listed from the provider just now; 'stored' — the persisted allow-list
+ */
+export type SourceOpen = OpenEnum<typeof Source>;
+
+/**
+ * A provider configuration's models, with this workspace's enablement applied
+ */
+export type WorkspaceModelListing = {
+  models: Array<Model>;
+  /**
+   * 'live' — listed from the provider just now; 'stored' — the persisted allow-list
+   */
+  source: SourceOpen;
+  /**
+   * True when the live listing failed and the stored allow-list is being shown
+   */
+  degraded: boolean;
+  /**
+   * Why the listing degraded, or a provider-stated caveat. Null when neither.
+   */
+  message: string | null;
+};
+
+/** @internal */
+export const Model$inboundSchema: z.ZodMiniType<Model, unknown> = z.object({
+  id: types.string(),
+  displayName: types.string(),
+  enabled: types.boolean(),
+  roles: z.array(types.string()),
+  modelVerified: types.boolean(),
+});
+
+export function modelFromJSON(
+  jsonString: string,
+): SafeParseResult<Model, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => Model$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'Model' from JSON`,
+  );
+}
+
+/** @internal */
+export const Source$inboundSchema: z.ZodMiniType<SourceOpen, unknown> =
+  openEnums.inboundSchema(Source);
+
+/** @internal */
+export const WorkspaceModelListing$inboundSchema: z.ZodMiniType<
+  WorkspaceModelListing,
+  unknown
+> = z.object({
+  models: z.array(z.lazy(() => Model$inboundSchema)),
+  source: z._default(Source$inboundSchema, Source.Live),
+  degraded: types.boolean(),
+  message: types.nullable(types.string()),
+});
+
+export function workspaceModelListingFromJSON(
+  jsonString: string,
+): SafeParseResult<WorkspaceModelListing, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => WorkspaceModelListing$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'WorkspaceModelListing' from JSON`,
+  );
+}

package/src/sdk/provider-configs.ts

@@ -7,6 +7,7 @@ import { providerConfigsDeleteProvider } from "../funcs/provider-configs-delete-
 import { providerConfigsGetModelsCatalog } from "../funcs/provider-configs-get-models-catalog.js";
 import { providerConfigsGetProvider } from "../funcs/provider-configs-get-provider.js";
 import { providerConfigsListAvailableModels } from "../funcs/provider-configs-list-available-models.js";
+import { providerConfigsListProviderModels } from "../funcs/provider-configs-list-provider-models.js";
 import { providerConfigsListProviders } from "../funcs/provider-configs-list-providers.js";
 import { providerConfigsTestProvider } from "../funcs/provider-configs-test-provider.js";
 import { providerConfigsUpdateProvider } from "../funcs/provider-configs-update-provider.js";
@@ -37,7 +38,7 @@ export class ProviderConfigs extends ClientSDK {
    * Create provider config
    *
    * @remarks
-   * Create a new provider configuration. API key is encrypted before storage and never returned in plain text.
+   * Create a new provider configuration. The credential is tested against the live provider BEFORE it is persisted — a failed test returns the provider's own error, scrubbed of the submitted secret, and writes no row. On success the API key is encrypted before storage and is never returned in plain text.
    */
   async createProvider(
     request: models.NameProviderApiKey,
@@ -131,6 +132,23 @@ export class ProviderConfigs extends ClientSDK {
     ));
   }
 
+  /**
+   * List a provider configuration models
+   *
+   * @remarks
+   * The models this provider configuration offers, listed live from the provider and narrowed to the catalog's allow-list policy, with this workspace's per-model enablement applied. When the provider cannot be reached the stored allow-list is returned with `degraded: true` and the reason — an empty list is never presented as 'no models'.
+   */
+  async listProviderModels(
+    request: operations.ListProviderModelsRequest,
+    options?: RequestOptions,
+  ): Promise<models.WorkspaceModelListing> {
+    return unwrapAsync(providerConfigsListProviderModels(
+      this,
+      request,
+      options,
+    ));
+  }
+
   /**
    * Test provider connection
    *