@mutagent/sdk 0.3.37 → 0.3.38

package/src/models/definition-provider.ts

@@ -0,0 +1,296 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+
+/**
+ * CPU architecture the image was built for. Validated against the provider at preflight.
+ */
+export enum DefinitionProviderArch {
+  X8664 = "x86_64",
+  Arm64 = "arm64",
+}
+
+/**
+ * Requested resources. A provider that does not expose a given dial REJECTS a definition that sets it, at preflight — never a silent downgrade.
+ */
+export type DefinitionProviderResources = {
+  /**
+   * Requested vCPU count
+   */
+  vcpu?: number | undefined;
+  /**
+   * Requested memory in MB
+   */
+  memoryMb?: number | undefined;
+  /**
+   * Requested disk in MB
+   */
+  diskMb?: number | undefined;
+  /**
+   * Whether a GPU is required
+   */
+  gpu?: boolean | undefined;
+};
+
+/**
+ * Outbound policy. Defaults to deny — opening egress is explicit.
+ */
+export enum DefinitionProviderEgress {
+  Deny = "deny",
+  Allowlist = "allowlist",
+  Allow = "allow",
+}
+
+/**
+ * What this rule constrains
+ */
+export enum DefinitionProviderKind {
+  Port = "port",
+  Cidr = "cidr",
+  Domain = "domain",
+}
+
+/**
+ * A single outbound-access allowance
+ */
+export type DefinitionProviderAllow = {
+  /**
+   * What this rule constrains
+   */
+  kind?: DefinitionProviderKind | undefined;
+  /**
+   * Port, CIDR block, or domain
+   */
+  value: string;
+};
+
+/**
+ * Network policy for the sandbox
+ */
+export type DefinitionProviderNetwork = {
+  /**
+   * Outbound policy. Defaults to deny — opening egress is explicit.
+   */
+  egress?: DefinitionProviderEgress | undefined;
+  /**
+   * Allowances, when egress is "allowlist". Requires provider egressControl support.
+   */
+  allow?: Array<DefinitionProviderAllow> | undefined;
+};
+
+/**
+ * Sandbox configuration. Separate artifact from the image content (R-C20).
+ */
+export type Definition = {
+  /**
+   * Human-readable definition name
+   */
+  name: string;
+  /**
+   * Image reference (repository:tag or @digest). The image content is a separate artifact.
+   */
+  image: string;
+  /**
+   * CPU architecture the image was built for. Validated against the provider at preflight.
+   */
+  arch?: DefinitionProviderArch | undefined;
+  /**
+   * Requested resources. A provider that does not expose a given dial REJECTS a definition that sets it, at preflight — never a silent downgrade.
+   */
+  resources?: DefinitionProviderResources | undefined;
+  /**
+   * Network policy for the sandbox
+   */
+  network?: DefinitionProviderNetwork | undefined;
+  /**
+   * Name of the Environment (secrets + variables) to load at spawn. Distinct from `provider`.
+   */
+  environment?: string | undefined;
+  /**
+   * Provider registry key. When omitted the backend default applies.
+   */
+  provider?: string | undefined;
+  /**
+   * Requested max lifetime. Rejected at preflight if it exceeds the provider ceiling.
+   */
+  timeoutMs?: number | undefined;
+  /**
+   * Working directory inside the sandbox
+   */
+  workdir?: string | undefined;
+  /**
+   * Non-secret environment variables. Secret material must come from an Environment.
+   */
+  vars?: { [k: string]: string } | undefined;
+};
+
+export type DefinitionProvider = {
+  /**
+   * Sandbox configuration. Separate artifact from the image content (R-C20).
+   */
+  definition: Definition;
+  provider?: string | undefined;
+};
+
+/** @internal */
+export const DefinitionProviderArch$outboundSchema: z.ZodMiniEnum<
+  typeof DefinitionProviderArch
+> = z.enum(DefinitionProviderArch);
+
+/** @internal */
+export type DefinitionProviderResources$Outbound = {
+  vcpu?: number | undefined;
+  memoryMb?: number | undefined;
+  diskMb?: number | undefined;
+  gpu?: boolean | undefined;
+};
+
+/** @internal */
+export const DefinitionProviderResources$outboundSchema: z.ZodMiniType<
+  DefinitionProviderResources$Outbound,
+  DefinitionProviderResources
+> = z.object({
+  vcpu: z.optional(z.number()),
+  memoryMb: z.optional(z.number()),
+  diskMb: z.optional(z.number()),
+  gpu: z.optional(z.boolean()),
+});
+
+export function definitionProviderResourcesToJSON(
+  definitionProviderResources: DefinitionProviderResources,
+): string {
+  return JSON.stringify(
+    DefinitionProviderResources$outboundSchema.parse(
+      definitionProviderResources,
+    ),
+  );
+}
+
+/** @internal */
+export const DefinitionProviderEgress$outboundSchema: z.ZodMiniEnum<
+  typeof DefinitionProviderEgress
+> = z.enum(DefinitionProviderEgress);
+
+/** @internal */
+export const DefinitionProviderKind$outboundSchema: z.ZodMiniEnum<
+  typeof DefinitionProviderKind
+> = z.enum(DefinitionProviderKind);
+
+/** @internal */
+export type DefinitionProviderAllow$Outbound = {
+  kind: string;
+  value: string;
+};
+
+/** @internal */
+export const DefinitionProviderAllow$outboundSchema: z.ZodMiniType<
+  DefinitionProviderAllow$Outbound,
+  DefinitionProviderAllow
+> = z.object({
+  kind: z._default(
+    DefinitionProviderKind$outboundSchema,
+    DefinitionProviderKind.Port,
+  ),
+  value: z.string(),
+});
+
+export function definitionProviderAllowToJSON(
+  definitionProviderAllow: DefinitionProviderAllow,
+): string {
+  return JSON.stringify(
+    DefinitionProviderAllow$outboundSchema.parse(definitionProviderAllow),
+  );
+}
+
+/** @internal */
+export type DefinitionProviderNetwork$Outbound = {
+  egress: string;
+  allow?: Array<DefinitionProviderAllow$Outbound> | undefined;
+};
+
+/** @internal */
+export const DefinitionProviderNetwork$outboundSchema: z.ZodMiniType<
+  DefinitionProviderNetwork$Outbound,
+  DefinitionProviderNetwork
+> = z.object({
+  egress: z._default(
+    DefinitionProviderEgress$outboundSchema,
+    DefinitionProviderEgress.Deny,
+  ),
+  allow: z.optional(
+    z.array(z.lazy(() => DefinitionProviderAllow$outboundSchema)),
+  ),
+});
+
+export function definitionProviderNetworkToJSON(
+  definitionProviderNetwork: DefinitionProviderNetwork,
+): string {
+  return JSON.stringify(
+    DefinitionProviderNetwork$outboundSchema.parse(definitionProviderNetwork),
+  );
+}
+
+/** @internal */
+export type Definition$Outbound = {
+  name: string;
+  image: string;
+  arch: string;
+  resources?: DefinitionProviderResources$Outbound | undefined;
+  network?: DefinitionProviderNetwork$Outbound | undefined;
+  environment?: string | undefined;
+  provider?: string | undefined;
+  timeoutMs?: number | undefined;
+  workdir?: string | undefined;
+  vars?: { [k: string]: string } | undefined;
+};
+
+/** @internal */
+export const Definition$outboundSchema: z.ZodMiniType<
+  Definition$Outbound,
+  Definition
+> = z.object({
+  name: z.string(),
+  image: z.string(),
+  arch: z._default(
+    DefinitionProviderArch$outboundSchema,
+    DefinitionProviderArch.X8664,
+  ),
+  resources: z.optional(
+    z.lazy(() => DefinitionProviderResources$outboundSchema),
+  ),
+  network: z.optional(z.lazy(() => DefinitionProviderNetwork$outboundSchema)),
+  environment: z.optional(z.string()),
+  provider: z.optional(z.string()),
+  timeoutMs: z.optional(z.number()),
+  workdir: z.optional(z.string()),
+  vars: z.optional(z.record(z.string(), z.string())),
+});
+
+export function definitionToJSON(definition: Definition): string {
+  return JSON.stringify(Definition$outboundSchema.parse(definition));
+}
+
+/** @internal */
+export type DefinitionProvider$Outbound = {
+  definition: Definition$Outbound;
+  provider?: string | undefined;
+};
+
+/** @internal */
+export const DefinitionProvider$outboundSchema: z.ZodMiniType<
+  DefinitionProvider$Outbound,
+  DefinitionProvider
+> = z.object({
+  definition: z.lazy(() => Definition$outboundSchema),
+  provider: z.optional(z.string()),
+});
+
+export function definitionProviderToJSON(
+  definitionProvider: DefinitionProvider,
+): string {
+  return JSON.stringify(
+    DefinitionProvider$outboundSchema.parse(definitionProvider),
+  );
+}

package/src/models/definition-run-id.ts

@@ -0,0 +1,42 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+import {
+  NameImageArch,
+  NameImageArch$Outbound,
+  NameImageArch$outboundSchema,
+} from "./name-image-arch.js";
+
+export type DefinitionRunId = {
+  /**
+   * Sandbox configuration. Separate artifact from the image content (R-C20).
+   */
+  definition: NameImageArch;
+  /**
+   * Correlation id for trace attribution
+   */
+  runId?: string | undefined;
+};
+
+/** @internal */
+export type DefinitionRunId$Outbound = {
+  definition: NameImageArch$Outbound;
+  runId?: string | undefined;
+};
+
+/** @internal */
+export const DefinitionRunId$outboundSchema: z.ZodMiniType<
+  DefinitionRunId$Outbound,
+  DefinitionRunId
+> = z.object({
+  definition: NameImageArch$outboundSchema,
+  runId: z.optional(z.string()),
+});
+
+export function definitionRunIdToJSON(
+  definitionRunId: DefinitionRunId,
+): string {
+  return JSON.stringify(DefinitionRunId$outboundSchema.parse(definitionRunId));
+}

package/src/models/errors/index.ts

@@ -2,24 +2,10 @@
  * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
  */
 
-export * from "./delete-api-sandbox-by-id.js";
 export * from "./error-message-status-code.js";
 export * from "./error-message.js";
-export * from "./get-api-sandbox-by-id-stream.js";
-export * from "./get-api-sandbox-by-id-traces.js";
-export * from "./get-api-sandbox-by-id.js";
-export * from "./get-api-sandbox-presets.js";
-export * from "./get-api-sandbox-providers.js";
-export * from "./get-api-sandbox.js";
 export * from "./http-client-errors.js";
 export * from "./mutagent-error.js";
-export * from "./post-api-sandbox-agent-run.js";
-export * from "./post-api-sandbox-by-id-exec.js";
-export * from "./post-api-sandbox-preflight.js";
-export * from "./post-api-sandbox-run.js";
-export * from "./post-api-sandbox-telemetry-v1-traces.js";
-export * from "./post-api-sandbox-token.js";
-export * from "./post-api-sandbox.js";
 export * from "./provider-error.js";
 export * from "./response-validation-error.js";
 export * from "./sdk-error.js";

package/src/models/index.ts

@@ -5,16 +5,22 @@
 export * from "./agent-list.js";
 export * from "./agent-success-response.js";
 export * from "./agent.js";
+export * from "./array-of-trace-id-session-id-name.js";
+export * from "./command-cwd-timeout-ms.js";
 export * from "./current-password-new-password.js";
+export * from "./definition-provider.js";
+export * from "./definition-run-id.js";
 export * from "./email-role-expires-in-days.js";
 export * from "./id-display-name-family.js";
 export * from "./id-name-email.js";
 export * from "./id-organization-id-email.js";
 export * from "./id-user-id-role.js";
 export * from "./id-user-id-role2.js";
+export * from "./mode-args-env.js";
 export * from "./name-api-key-credential-fields.js";
 export * from "./name-description-system-prompt.js";
 export * from "./name-email-avatar-url.js";
+export * from "./name-image-arch.js";
 export * from "./name-provider-api-key.js";
 export * from "./name-slug-description.js";
 export * from "./name-slug-description2.js";
@@ -25,12 +31,19 @@ export * from "./org-member-count-or-error-union.js";
 export * from "./org-success-or-error-union.js";
 export * from "./organization-list-or-error-union.js";
 export * from "./organization-or-error-union.js";
+export * from "./preset-timeout-ms-keep.js";
+export * from "./preset-timeout-ms-keep2.js";
 export * from "./provider-config.js";
 export * from "./provider-configs-list.js";
 export * from "./provider-success.js";
 export * from "./schemadefaul.js";
-export * from "./schemadefaul3.js";
+export * from "./schemadefaul4.js";
+export * from "./schemadefaul5.js";
+export * from "./schemadefaul6.js";
+export * from "./schemadefaul8.js";
 export * from "./security.js";
+export * from "./session-id-line.js";
+export * from "./session-id-signal.js";
 export * from "./success-message.js";
 export * from "./test-connection-result.js";
 export * from "./user-id-role-status.js";

package/src/models/mode-args-env.ts

@@ -0,0 +1,52 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+import {
+  Schemadefaul5,
+  Schemadefaul5$outboundSchema,
+  Schemadefaul5Open,
+} from "./schemadefaul5.js";
+
+export type ModeArgsEnv = {
+  /**
+   * Defaults to `oneshot` — the pre-existing behaviour. `rpc` starts a duplex session that emits `rpc` events on the stream and accepts `POST /:id/input`.
+   */
+  mode?: Schemadefaul5Open | undefined;
+  /**
+   * Arguments for the Helix binary. Omitted starts it with none.
+   */
+  args?: Array<string> | undefined;
+  /**
+   * Per-call environment, merged OVER the sandbox's own scoped material. Rides the invocation payload, so it does not mint a new Runtime.
+   */
+  env?: { [k: string]: string } | undefined;
+  /**
+   * Working directory for the agent. Omitted, an `rpc` session runs in `$HOME` (writable by construction); `oneshot` inherits the server cwd exactly as it always has.
+   */
+  cwd?: string | undefined;
+};
+
+/** @internal */
+export type ModeArgsEnv$Outbound = {
+  mode: string;
+  args?: Array<string> | undefined;
+  env?: { [k: string]: string } | undefined;
+  cwd?: string | undefined;
+};
+
+/** @internal */
+export const ModeArgsEnv$outboundSchema: z.ZodMiniType<
+  ModeArgsEnv$Outbound,
+  ModeArgsEnv
+> = z.object({
+  mode: z._default(Schemadefaul5$outboundSchema, Schemadefaul5.Oneshot),
+  args: z.optional(z.array(z.string())),
+  env: z.optional(z.record(z.string(), z.string())),
+  cwd: z.optional(z.string()),
+});
+
+export function modeArgsEnvToJSON(modeArgsEnv: ModeArgsEnv): string {
+  return JSON.stringify(ModeArgsEnv$outboundSchema.parse(modeArgsEnv));
+}

package/src/models/name-api-key-credential-fields.ts

@@ -9,11 +9,6 @@ import {
   IdDisplayNameFamily$outboundSchema,
 } from "./id-display-name-family.js";
 
-/**
- * Per-entry credential material to merge over the stored values, keyed by the catalog wire names for this provider. Keys you omit are left untouched; an explicit null clears the field, and is refused if the catalog declares it required. The merged result is validated as a whole, so a patch that leaves the configuration incomplete is refused even when every value it carries is individually valid. A secret sent here is extracted and encrypted, never stored in the clear.
- */
-export type CredentialFields = {};
-
 export type NameApiKeyCredentialFields = {
   /**
    * Updated display name
@@ -26,7 +21,7 @@ export type NameApiKeyCredentialFields = {
   /**
    * Per-entry credential material to merge over the stored values, keyed by the catalog wire names for this provider. Keys you omit are left untouched; an explicit null clears the field, and is refused if the catalog declares it required. The merged result is validated as a whole, so a patch that leaves the configuration incomplete is refused even when every value it carries is individually valid. A secret sent here is extracted and encrypted, never stored in the clear.
    */
-  credentialFields?: CredentialFields | undefined;
+  credentialFields?: { [k: string]: string | null } | undefined;
   /**
    * Updated base URL (null to clear)
    */
@@ -61,28 +56,11 @@ export type NameApiKeyCredentialFields = {
   metadata?: { [k: string]: any } | null | undefined;
 };
 
-/** @internal */
-export type CredentialFields$Outbound = {};
-
-/** @internal */
-export const CredentialFields$outboundSchema: z.ZodMiniType<
-  CredentialFields$Outbound,
-  CredentialFields
-> = z.object({});
-
-export function credentialFieldsToJSON(
-  credentialFields: CredentialFields,
-): string {
-  return JSON.stringify(
-    CredentialFields$outboundSchema.parse(credentialFields),
-  );
-}
-
 /** @internal */
 export type NameApiKeyCredentialFields$Outbound = {
   name?: string | undefined;
   apiKey?: string | undefined;
-  credentialFields?: CredentialFields$Outbound | undefined;
+  credentialFields?: { [k: string]: string | null } | undefined;
   baseUrl?: string | null | undefined;
   modelOverrides?: { [k: string]: string } | null | undefined;
   isActive?: boolean | undefined;
@@ -100,7 +78,7 @@ export const NameApiKeyCredentialFields$outboundSchema: z.ZodMiniType<
 > = z.object({
   name: z.optional(z.string()),
   apiKey: z.optional(z.string()),
-  credentialFields: z.optional(z.lazy(() => CredentialFields$outboundSchema)),
+  credentialFields: z.optional(z.record(z.string(), z.nullable(z.string()))),
   baseUrl: z.optional(z.nullable(z.string())),
   modelOverrides: z.optional(z.nullable(z.record(z.string(), z.string()))),
   isActive: z.optional(z.boolean()),