@mutagent/sdk 0.3.34 → 0.3.36

package/src/models/operations/post-api-sandbox-preflight.ts

@@ -0,0 +1,373 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import * as types from "../../types/primitives.js";
+import { SDKValidationError } from "../errors/sdk-validation-error.js";
+
+/**
+ * CPU architecture the image was built for. Validated against the provider at preflight.
+ */
+export enum PostApiSandboxPreflightArch {
+  X8664 = "x86_64",
+  Arm64 = "arm64",
+}
+
+/**
+ * Requested resources. A provider that does not expose a given dial REJECTS a definition that sets it, at preflight — never a silent downgrade.
+ */
+export type PostApiSandboxPreflightResources = {
+  /**
+   * Requested vCPU count
+   */
+  vcpu?: number | undefined;
+  /**
+   * Requested memory in MB
+   */
+  memoryMb?: number | undefined;
+  /**
+   * Requested disk in MB
+   */
+  diskMb?: number | undefined;
+  /**
+   * Whether a GPU is required
+   */
+  gpu?: boolean | undefined;
+};
+
+/**
+ * Outbound policy. Defaults to deny — opening egress is explicit.
+ */
+export enum PostApiSandboxPreflightEgress {
+  Deny = "deny",
+  Allowlist = "allowlist",
+  Allow = "allow",
+}
+
+/**
+ * What this rule constrains
+ */
+export enum PostApiSandboxPreflightKind {
+  Port = "port",
+  Cidr = "cidr",
+  Domain = "domain",
+}
+
+/**
+ * A single outbound-access allowance
+ */
+export type PostApiSandboxPreflightAllow = {
+  /**
+   * What this rule constrains
+   */
+  kind?: PostApiSandboxPreflightKind | undefined;
+  /**
+   * Port, CIDR block, or domain
+   */
+  value: string;
+};
+
+/**
+ * Network policy for the sandbox
+ */
+export type PostApiSandboxPreflightNetwork = {
+  /**
+   * Outbound policy. Defaults to deny — opening egress is explicit.
+   */
+  egress?: PostApiSandboxPreflightEgress | undefined;
+  /**
+   * Allowances, when egress is "allowlist". Requires provider egressControl support.
+   */
+  allow?: Array<PostApiSandboxPreflightAllow> | undefined;
+};
+
+/**
+ * Non-secret environment variables. Secret material must come from an Environment.
+ */
+export type PostApiSandboxPreflightVars = {};
+
+/**
+ * Sandbox configuration. Separate artifact from the image content (R-C20).
+ */
+export type PostApiSandboxPreflightDefinition = {
+  /**
+   * Human-readable definition name
+   */
+  name: string;
+  /**
+   * Image reference (repository:tag or @digest). The image content is a separate artifact.
+   */
+  image: string;
+  /**
+   * CPU architecture the image was built for. Validated against the provider at preflight.
+   */
+  arch?: PostApiSandboxPreflightArch | undefined;
+  /**
+   * Requested resources. A provider that does not expose a given dial REJECTS a definition that sets it, at preflight — never a silent downgrade.
+   */
+  resources?: PostApiSandboxPreflightResources | undefined;
+  /**
+   * Network policy for the sandbox
+   */
+  network?: PostApiSandboxPreflightNetwork | undefined;
+  /**
+   * Name of the Environment (secrets + variables) to load at spawn. Distinct from `provider`.
+   */
+  environment?: string | undefined;
+  /**
+   * Provider registry key. When omitted the backend default applies.
+   */
+  provider?: string | undefined;
+  /**
+   * Requested max lifetime. Rejected at preflight if it exceeds the provider ceiling.
+   */
+  timeoutMs?: number | undefined;
+  /**
+   * Working directory inside the sandbox
+   */
+  workdir?: string | undefined;
+  /**
+   * Non-secret environment variables. Secret material must come from an Environment.
+   */
+  vars?: PostApiSandboxPreflightVars | undefined;
+};
+
+/**
+ * Check a definition against a provider without creating anything
+ */
+export type PostApiSandboxPreflightRequest = {
+  /**
+   * Sandbox configuration. Separate artifact from the image content (R-C20).
+   */
+  definition: PostApiSandboxPreflightDefinition;
+  provider?: string | undefined;
+};
+
+/**
+ * Preflight verdict
+ */
+export type PostApiSandboxPreflightResponse = {
+  provider: string;
+  compatible: boolean;
+  /**
+   * Empty when compatible. Each entry names a concrete incompatibility.
+   */
+  violations: Array<string>;
+};
+
+/** @internal */
+export const PostApiSandboxPreflightArch$outboundSchema: z.ZodMiniEnum<
+  typeof PostApiSandboxPreflightArch
+> = z.enum(PostApiSandboxPreflightArch);
+
+/** @internal */
+export type PostApiSandboxPreflightResources$Outbound = {
+  vcpu?: number | undefined;
+  memoryMb?: number | undefined;
+  diskMb?: number | undefined;
+  gpu?: boolean | undefined;
+};
+
+/** @internal */
+export const PostApiSandboxPreflightResources$outboundSchema: z.ZodMiniType<
+  PostApiSandboxPreflightResources$Outbound,
+  PostApiSandboxPreflightResources
+> = z.object({
+  vcpu: z.optional(z.number()),
+  memoryMb: z.optional(z.number()),
+  diskMb: z.optional(z.number()),
+  gpu: z.optional(z.boolean()),
+});
+
+export function postApiSandboxPreflightResourcesToJSON(
+  postApiSandboxPreflightResources: PostApiSandboxPreflightResources,
+): string {
+  return JSON.stringify(
+    PostApiSandboxPreflightResources$outboundSchema.parse(
+      postApiSandboxPreflightResources,
+    ),
+  );
+}
+
+/** @internal */
+export const PostApiSandboxPreflightEgress$outboundSchema: z.ZodMiniEnum<
+  typeof PostApiSandboxPreflightEgress
+> = z.enum(PostApiSandboxPreflightEgress);
+
+/** @internal */
+export const PostApiSandboxPreflightKind$outboundSchema: z.ZodMiniEnum<
+  typeof PostApiSandboxPreflightKind
+> = z.enum(PostApiSandboxPreflightKind);
+
+/** @internal */
+export type PostApiSandboxPreflightAllow$Outbound = {
+  kind: string;
+  value: string;
+};
+
+/** @internal */
+export const PostApiSandboxPreflightAllow$outboundSchema: z.ZodMiniType<
+  PostApiSandboxPreflightAllow$Outbound,
+  PostApiSandboxPreflightAllow
+> = z.object({
+  kind: z._default(
+    PostApiSandboxPreflightKind$outboundSchema,
+    PostApiSandboxPreflightKind.Port,
+  ),
+  value: z.string(),
+});
+
+export function postApiSandboxPreflightAllowToJSON(
+  postApiSandboxPreflightAllow: PostApiSandboxPreflightAllow,
+): string {
+  return JSON.stringify(
+    PostApiSandboxPreflightAllow$outboundSchema.parse(
+      postApiSandboxPreflightAllow,
+    ),
+  );
+}
+
+/** @internal */
+export type PostApiSandboxPreflightNetwork$Outbound = {
+  egress: string;
+  allow?: Array<PostApiSandboxPreflightAllow$Outbound> | undefined;
+};
+
+/** @internal */
+export const PostApiSandboxPreflightNetwork$outboundSchema: z.ZodMiniType<
+  PostApiSandboxPreflightNetwork$Outbound,
+  PostApiSandboxPreflightNetwork
+> = z.object({
+  egress: z._default(
+    PostApiSandboxPreflightEgress$outboundSchema,
+    PostApiSandboxPreflightEgress.Deny,
+  ),
+  allow: z.optional(
+    z.array(z.lazy(() => PostApiSandboxPreflightAllow$outboundSchema)),
+  ),
+});
+
+export function postApiSandboxPreflightNetworkToJSON(
+  postApiSandboxPreflightNetwork: PostApiSandboxPreflightNetwork,
+): string {
+  return JSON.stringify(
+    PostApiSandboxPreflightNetwork$outboundSchema.parse(
+      postApiSandboxPreflightNetwork,
+    ),
+  );
+}
+
+/** @internal */
+export type PostApiSandboxPreflightVars$Outbound = {};
+
+/** @internal */
+export const PostApiSandboxPreflightVars$outboundSchema: z.ZodMiniType<
+  PostApiSandboxPreflightVars$Outbound,
+  PostApiSandboxPreflightVars
+> = z.object({});
+
+export function postApiSandboxPreflightVarsToJSON(
+  postApiSandboxPreflightVars: PostApiSandboxPreflightVars,
+): string {
+  return JSON.stringify(
+    PostApiSandboxPreflightVars$outboundSchema.parse(
+      postApiSandboxPreflightVars,
+    ),
+  );
+}
+
+/** @internal */
+export type PostApiSandboxPreflightDefinition$Outbound = {
+  name: string;
+  image: string;
+  arch: string;
+  resources?: PostApiSandboxPreflightResources$Outbound | undefined;
+  network?: PostApiSandboxPreflightNetwork$Outbound | undefined;
+  environment?: string | undefined;
+  provider?: string | undefined;
+  timeoutMs?: number | undefined;
+  workdir?: string | undefined;
+  vars?: PostApiSandboxPreflightVars$Outbound | undefined;
+};
+
+/** @internal */
+export const PostApiSandboxPreflightDefinition$outboundSchema: z.ZodMiniType<
+  PostApiSandboxPreflightDefinition$Outbound,
+  PostApiSandboxPreflightDefinition
+> = z.object({
+  name: z.string(),
+  image: z.string(),
+  arch: z._default(
+    PostApiSandboxPreflightArch$outboundSchema,
+    PostApiSandboxPreflightArch.X8664,
+  ),
+  resources: z.optional(
+    z.lazy(() => PostApiSandboxPreflightResources$outboundSchema),
+  ),
+  network: z.optional(
+    z.lazy(() => PostApiSandboxPreflightNetwork$outboundSchema),
+  ),
+  environment: z.optional(z.string()),
+  provider: z.optional(z.string()),
+  timeoutMs: z.optional(z.number()),
+  workdir: z.optional(z.string()),
+  vars: z.optional(z.lazy(() => PostApiSandboxPreflightVars$outboundSchema)),
+});
+
+export function postApiSandboxPreflightDefinitionToJSON(
+  postApiSandboxPreflightDefinition: PostApiSandboxPreflightDefinition,
+): string {
+  return JSON.stringify(
+    PostApiSandboxPreflightDefinition$outboundSchema.parse(
+      postApiSandboxPreflightDefinition,
+    ),
+  );
+}
+
+/** @internal */
+export type PostApiSandboxPreflightRequest$Outbound = {
+  definition: PostApiSandboxPreflightDefinition$Outbound;
+  provider?: string | undefined;
+};
+
+/** @internal */
+export const PostApiSandboxPreflightRequest$outboundSchema: z.ZodMiniType<
+  PostApiSandboxPreflightRequest$Outbound,
+  PostApiSandboxPreflightRequest
+> = z.object({
+  definition: z.lazy(() => PostApiSandboxPreflightDefinition$outboundSchema),
+  provider: z.optional(z.string()),
+});
+
+export function postApiSandboxPreflightRequestToJSON(
+  postApiSandboxPreflightRequest: PostApiSandboxPreflightRequest,
+): string {
+  return JSON.stringify(
+    PostApiSandboxPreflightRequest$outboundSchema.parse(
+      postApiSandboxPreflightRequest,
+    ),
+  );
+}
+
+/** @internal */
+export const PostApiSandboxPreflightResponse$inboundSchema: z.ZodMiniType<
+  PostApiSandboxPreflightResponse,
+  unknown
+> = z.object({
+  provider: types.string(),
+  compatible: types.boolean(),
+  violations: z.array(types.string()),
+});
+
+export function postApiSandboxPreflightResponseFromJSON(
+  jsonString: string,
+): SafeParseResult<PostApiSandboxPreflightResponse, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => PostApiSandboxPreflightResponse$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'PostApiSandboxPreflightResponse' from JSON`,
+  );
+}

package/src/models/operations/post-api-sandbox-run.ts

@@ -0,0 +1,116 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import * as types from "../../types/primitives.js";
+import { SDKValidationError } from "../errors/sdk-validation-error.js";
+
+/**
+ * Run one command in a fresh sandbox and tear it down
+ */
+export type PostApiSandboxRunRequest = {
+  /**
+   * Named preset to run on. Omitted means the backend default — see GET /api/sandbox/presets.
+   */
+  preset?: string | undefined;
+  /**
+   * Per-command timeout. The provider invocation timeout also applies and may be lower — a one-shot call is not the way to run something long.
+   */
+  timeoutMs?: number | undefined;
+  /**
+   * Keep the sandbox after the run instead of tearing it down. Defaults to false; the returned sandboxId is then usable with /api/sandbox/:id/exec.
+   */
+  keep?: boolean | undefined;
+  /**
+   * Correlation id for trace attribution
+   */
+  runId?: string | undefined;
+  /**
+   * argv. Not a shell string — no shell is involved unless you name one.
+   */
+  command: Array<string>;
+  cwd?: string | undefined;
+};
+
+/**
+ * Result of a one-shot run
+ */
+export type PostApiSandboxRunResponse = {
+  /**
+   * The sandbox the run happened in. Already gone unless `keep` was true.
+   */
+  sandboxId: string;
+  /**
+   * Preset that was resolved — useful when the default was taken.
+   */
+  preset: string;
+  /**
+   * The command's real exit code. Never synthesised.
+   */
+  exitCode: number;
+  stdout: string;
+  stderr: string;
+  timedOut: boolean;
+  /**
+   * Whether teardown was CONFIRMED. False with `keep` false means the release failed and the box may still exist — the run result is still valid.
+   */
+  tornDown: boolean;
+};
+
+/** @internal */
+export type PostApiSandboxRunRequest$Outbound = {
+  preset?: string | undefined;
+  timeoutMs?: number | undefined;
+  keep?: boolean | undefined;
+  runId?: string | undefined;
+  command: Array<string>;
+  cwd?: string | undefined;
+};
+
+/** @internal */
+export const PostApiSandboxRunRequest$outboundSchema: z.ZodMiniType<
+  PostApiSandboxRunRequest$Outbound,
+  PostApiSandboxRunRequest
+> = z.object({
+  preset: z.optional(z.string()),
+  timeoutMs: z.optional(z.number()),
+  keep: z.optional(z.boolean()),
+  runId: z.optional(z.string()),
+  command: z.array(z.string()),
+  cwd: z.optional(z.string()),
+});
+
+export function postApiSandboxRunRequestToJSON(
+  postApiSandboxRunRequest: PostApiSandboxRunRequest,
+): string {
+  return JSON.stringify(
+    PostApiSandboxRunRequest$outboundSchema.parse(postApiSandboxRunRequest),
+  );
+}
+
+/** @internal */
+export const PostApiSandboxRunResponse$inboundSchema: z.ZodMiniType<
+  PostApiSandboxRunResponse,
+  unknown
+> = z.object({
+  sandboxId: types.string(),
+  preset: types.string(),
+  exitCode: types.number(),
+  stdout: types.string(),
+  stderr: types.string(),
+  timedOut: types.boolean(),
+  tornDown: types.boolean(),
+});
+
+export function postApiSandboxRunResponseFromJSON(
+  jsonString: string,
+): SafeParseResult<PostApiSandboxRunResponse, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => PostApiSandboxRunResponse$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'PostApiSandboxRunResponse' from JSON`,
+  );
+}

package/src/models/operations/post-api-sandbox-telemetry-v1-traces.ts

@@ -0,0 +1,38 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import * as types from "../../types/primitives.js";
+import { SDKValidationError } from "../errors/sdk-validation-error.js";
+
+/**
+ * Response for status 200
+ */
+export type PostApiSandboxTelemetryV1TracesResponse = {
+  accepted: number;
+};
+
+/** @internal */
+export const PostApiSandboxTelemetryV1TracesResponse$inboundSchema:
+  z.ZodMiniType<PostApiSandboxTelemetryV1TracesResponse, unknown> = z.object({
+    accepted: types.number(),
+  });
+
+export function postApiSandboxTelemetryV1TracesResponseFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  PostApiSandboxTelemetryV1TracesResponse,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      PostApiSandboxTelemetryV1TracesResponse$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'PostApiSandboxTelemetryV1TracesResponse' from JSON`,
+  );
+}

package/src/models/operations/post-api-sandbox-token.ts

@@ -0,0 +1,73 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import * as types from "../../types/primitives.js";
+import { SDKValidationError } from "../errors/sdk-validation-error.js";
+
+/**
+ * Exchange a platform API key for a short-lived sandbox operator token. The platform key itself is never a sandbox credential.
+ */
+export type PostApiSandboxTokenRequest = {
+  /**
+   * The workspace to mint an operator token for. The caller must be able to create resources in it.
+   */
+  workspaceId: string;
+};
+
+/**
+ * A minted operator token, scoped to one workspace.
+ */
+export type PostApiSandboxTokenResponse = {
+  /**
+   * A sandbox operator token. Send as `Authorization: Bearer <token>`.
+   */
+  token: string;
+  /**
+   * Seconds until the token expires. Re-exchange after this; do not persist it beyond the lifetime.
+   */
+  expiresIn: number;
+};
+
+/** @internal */
+export type PostApiSandboxTokenRequest$Outbound = {
+  workspaceId: string;
+};
+
+/** @internal */
+export const PostApiSandboxTokenRequest$outboundSchema: z.ZodMiniType<
+  PostApiSandboxTokenRequest$Outbound,
+  PostApiSandboxTokenRequest
+> = z.object({
+  workspaceId: z.string(),
+});
+
+export function postApiSandboxTokenRequestToJSON(
+  postApiSandboxTokenRequest: PostApiSandboxTokenRequest,
+): string {
+  return JSON.stringify(
+    PostApiSandboxTokenRequest$outboundSchema.parse(postApiSandboxTokenRequest),
+  );
+}
+
+/** @internal */
+export const PostApiSandboxTokenResponse$inboundSchema: z.ZodMiniType<
+  PostApiSandboxTokenResponse,
+  unknown
+> = z.object({
+  token: types.string(),
+  expiresIn: types.number(),
+});
+
+export function postApiSandboxTokenResponseFromJSON(
+  jsonString: string,
+): SafeParseResult<PostApiSandboxTokenResponse, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => PostApiSandboxTokenResponse$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'PostApiSandboxTokenResponse' from JSON`,
+  );
+}