@mutagent/sdk 0.3.37 → 0.3.39

package/src/models/operations/post-api-sandbox.ts

@@ -4,177 +4,10 @@
 
 import * as z from "zod/v4-mini";
 import { safeParse } from "../../lib/schemas.js";
-import * as openEnums from "../../types/enums.js";
-import { OpenEnum } from "../../types/enums.js";
 import { Result as SafeParseResult } from "../../types/fp.js";
 import * as types from "../../types/primitives.js";
 import { SDKValidationError } from "../errors/sdk-validation-error.js";
-
-/**
- * CPU architecture the image was built for. Validated against the provider at preflight.
- */
-export enum PostApiSandboxArchRequest {
-  X8664 = "x86_64",
-  Arm64 = "arm64",
-}
-
-/**
- * Requested resources. A provider that does not expose a given dial REJECTS a definition that sets it, at preflight — never a silent downgrade.
- */
-export type PostApiSandboxResources = {
-  /**
-   * Requested vCPU count
-   */
-  vcpu?: number | undefined;
-  /**
-   * Requested memory in MB
-   */
-  memoryMb?: number | undefined;
-  /**
-   * Requested disk in MB
-   */
-  diskMb?: number | undefined;
-  /**
-   * Whether a GPU is required
-   */
-  gpu?: boolean | undefined;
-};
-
-/**
- * Outbound policy. Defaults to deny — opening egress is explicit.
- */
-export enum PostApiSandboxEgress {
-  Deny = "deny",
-  Allowlist = "allowlist",
-  Allow = "allow",
-}
-
-/**
- * What this rule constrains
- */
-export enum PostApiSandboxKind {
-  Port = "port",
-  Cidr = "cidr",
-  Domain = "domain",
-}
-
-/**
- * A single outbound-access allowance
- */
-export type PostApiSandboxAllow = {
-  /**
-   * What this rule constrains
-   */
-  kind?: PostApiSandboxKind | undefined;
-  /**
-   * Port, CIDR block, or domain
-   */
-  value: string;
-};
-
-/**
- * Network policy for the sandbox
- */
-export type PostApiSandboxNetwork = {
-  /**
-   * Outbound policy. Defaults to deny — opening egress is explicit.
-   */
-  egress?: PostApiSandboxEgress | undefined;
-  /**
-   * Allowances, when egress is "allowlist". Requires provider egressControl support.
-   */
-  allow?: Array<PostApiSandboxAllow> | undefined;
-};
-
-/**
- * Non-secret environment variables. Secret material must come from an Environment.
- */
-export type PostApiSandboxVars = {};
-
-/**
- * Sandbox configuration. Separate artifact from the image content (R-C20).
- */
-export type PostApiSandboxDefinition = {
-  /**
-   * Human-readable definition name
-   */
-  name: string;
-  /**
-   * Image reference (repository:tag or @digest). The image content is a separate artifact.
-   */
-  image: string;
-  /**
-   * CPU architecture the image was built for. Validated against the provider at preflight.
-   */
-  arch?: PostApiSandboxArchRequest | undefined;
-  /**
-   * Requested resources. A provider that does not expose a given dial REJECTS a definition that sets it, at preflight — never a silent downgrade.
-   */
-  resources?: PostApiSandboxResources | undefined;
-  /**
-   * Network policy for the sandbox
-   */
-  network?: PostApiSandboxNetwork | undefined;
-  /**
-   * Name of the Environment (secrets + variables) to load at spawn. Distinct from `provider`.
-   */
-  environment?: string | undefined;
-  /**
-   * Provider registry key. When omitted the backend default applies.
-   */
-  provider?: string | undefined;
-  /**
-   * Requested max lifetime. Rejected at preflight if it exceeds the provider ceiling.
-   */
-  timeoutMs?: number | undefined;
-  /**
-   * Working directory inside the sandbox
-   */
-  workdir?: string | undefined;
-  /**
-   * Non-secret environment variables. Secret material must come from an Environment.
-   */
-  vars?: PostApiSandboxVars | undefined;
-};
-
-/**
- * Spawn a sandbox from a definition
- */
-export type PostApiSandboxRequest = {
-  /**
-   * Sandbox configuration. Separate artifact from the image content (R-C20).
-   */
-  definition: PostApiSandboxDefinition;
-  /**
-   * Correlation id for trace attribution
-   */
-  runId?: string | undefined;
-};
-
-/**
- * CPU architecture the image was built for. Validated against the provider at preflight.
- */
-export enum PostApiSandboxArchResponse {
-  X8664 = "x86_64",
-  Arm64 = "arm64",
-}
-/**
- * CPU architecture the image was built for. Validated against the provider at preflight.
- */
-export type PostApiSandboxArchResponseOpen = OpenEnum<
-  typeof PostApiSandboxArchResponse
->;
-
-export enum PostApiSandboxStatus {
-  Pending = "pending",
-  Starting = "starting",
-  Running = "running",
-  Paused = "paused",
-  Stopping = "stopping",
-  Stopped = "stopped",
-  Failed = "failed",
-}
-export type PostApiSandboxStatusOpen = OpenEnum<typeof PostApiSandboxStatus>;
+import * as models from "../index.js";
 
 /**
  * A sandbox as recorded by the service — one record whether spawned from CLI or platform
@@ -195,8 +28,8 @@ export type PostApiSandboxResponse = {
   /**
    * CPU architecture the image was built for. Validated against the provider at preflight.
    */
-  arch: PostApiSandboxArchResponseOpen;
-  status: PostApiSandboxStatusOpen;
+  arch: models.SchemadefaulOpen;
+  status: models.Schemadefaul4Open;
   definitionName: string;
   environmentName?: string | undefined;
   /**
@@ -205,191 +38,6 @@ export type PostApiSandboxResponse = {
   createdAt: string;
 };
 
-/** @internal */
-export const PostApiSandboxArchRequest$outboundSchema: z.ZodMiniEnum<
-  typeof PostApiSandboxArchRequest
-> = z.enum(PostApiSandboxArchRequest);
-
-/** @internal */
-export type PostApiSandboxResources$Outbound = {
-  vcpu?: number | undefined;
-  memoryMb?: number | undefined;
-  diskMb?: number | undefined;
-  gpu?: boolean | undefined;
-};
-
-/** @internal */
-export const PostApiSandboxResources$outboundSchema: z.ZodMiniType<
-  PostApiSandboxResources$Outbound,
-  PostApiSandboxResources
-> = z.object({
-  vcpu: z.optional(z.number()),
-  memoryMb: z.optional(z.number()),
-  diskMb: z.optional(z.number()),
-  gpu: z.optional(z.boolean()),
-});
-
-export function postApiSandboxResourcesToJSON(
-  postApiSandboxResources: PostApiSandboxResources,
-): string {
-  return JSON.stringify(
-    PostApiSandboxResources$outboundSchema.parse(postApiSandboxResources),
-  );
-}
-
-/** @internal */
-export const PostApiSandboxEgress$outboundSchema: z.ZodMiniEnum<
-  typeof PostApiSandboxEgress
-> = z.enum(PostApiSandboxEgress);
-
-/** @internal */
-export const PostApiSandboxKind$outboundSchema: z.ZodMiniEnum<
-  typeof PostApiSandboxKind
-> = z.enum(PostApiSandboxKind);
-
-/** @internal */
-export type PostApiSandboxAllow$Outbound = {
-  kind: string;
-  value: string;
-};
-
-/** @internal */
-export const PostApiSandboxAllow$outboundSchema: z.ZodMiniType<
-  PostApiSandboxAllow$Outbound,
-  PostApiSandboxAllow
-> = z.object({
-  kind: z._default(PostApiSandboxKind$outboundSchema, PostApiSandboxKind.Port),
-  value: z.string(),
-});
-
-export function postApiSandboxAllowToJSON(
-  postApiSandboxAllow: PostApiSandboxAllow,
-): string {
-  return JSON.stringify(
-    PostApiSandboxAllow$outboundSchema.parse(postApiSandboxAllow),
-  );
-}
-
-/** @internal */
-export type PostApiSandboxNetwork$Outbound = {
-  egress: string;
-  allow?: Array<PostApiSandboxAllow$Outbound> | undefined;
-};
-
-/** @internal */
-export const PostApiSandboxNetwork$outboundSchema: z.ZodMiniType<
-  PostApiSandboxNetwork$Outbound,
-  PostApiSandboxNetwork
-> = z.object({
-  egress: z._default(
-    PostApiSandboxEgress$outboundSchema,
-    PostApiSandboxEgress.Deny,
-  ),
-  allow: z.optional(z.array(z.lazy(() => PostApiSandboxAllow$outboundSchema))),
-});
-
-export function postApiSandboxNetworkToJSON(
-  postApiSandboxNetwork: PostApiSandboxNetwork,
-): string {
-  return JSON.stringify(
-    PostApiSandboxNetwork$outboundSchema.parse(postApiSandboxNetwork),
-  );
-}
-
-/** @internal */
-export type PostApiSandboxVars$Outbound = {};
-
-/** @internal */
-export const PostApiSandboxVars$outboundSchema: z.ZodMiniType<
-  PostApiSandboxVars$Outbound,
-  PostApiSandboxVars
-> = z.object({});
-
-export function postApiSandboxVarsToJSON(
-  postApiSandboxVars: PostApiSandboxVars,
-): string {
-  return JSON.stringify(
-    PostApiSandboxVars$outboundSchema.parse(postApiSandboxVars),
-  );
-}
-
-/** @internal */
-export type PostApiSandboxDefinition$Outbound = {
-  name: string;
-  image: string;
-  arch: string;
-  resources?: PostApiSandboxResources$Outbound | undefined;
-  network?: PostApiSandboxNetwork$Outbound | undefined;
-  environment?: string | undefined;
-  provider?: string | undefined;
-  timeoutMs?: number | undefined;
-  workdir?: string | undefined;
-  vars?: PostApiSandboxVars$Outbound | undefined;
-};
-
-/** @internal */
-export const PostApiSandboxDefinition$outboundSchema: z.ZodMiniType<
-  PostApiSandboxDefinition$Outbound,
-  PostApiSandboxDefinition
-> = z.object({
-  name: z.string(),
-  image: z.string(),
-  arch: z._default(
-    PostApiSandboxArchRequest$outboundSchema,
-    PostApiSandboxArchRequest.X8664,
-  ),
-  resources: z.optional(z.lazy(() => PostApiSandboxResources$outboundSchema)),
-  network: z.optional(z.lazy(() => PostApiSandboxNetwork$outboundSchema)),
-  environment: z.optional(z.string()),
-  provider: z.optional(z.string()),
-  timeoutMs: z.optional(z.number()),
-  workdir: z.optional(z.string()),
-  vars: z.optional(z.lazy(() => PostApiSandboxVars$outboundSchema)),
-});
-
-export function postApiSandboxDefinitionToJSON(
-  postApiSandboxDefinition: PostApiSandboxDefinition,
-): string {
-  return JSON.stringify(
-    PostApiSandboxDefinition$outboundSchema.parse(postApiSandboxDefinition),
-  );
-}
-
-/** @internal */
-export type PostApiSandboxRequest$Outbound = {
-  definition: PostApiSandboxDefinition$Outbound;
-  runId?: string | undefined;
-};
-
-/** @internal */
-export const PostApiSandboxRequest$outboundSchema: z.ZodMiniType<
-  PostApiSandboxRequest$Outbound,
-  PostApiSandboxRequest
-> = z.object({
-  definition: z.lazy(() => PostApiSandboxDefinition$outboundSchema),
-  runId: z.optional(z.string()),
-});
-
-export function postApiSandboxRequestToJSON(
-  postApiSandboxRequest: PostApiSandboxRequest,
-): string {
-  return JSON.stringify(
-    PostApiSandboxRequest$outboundSchema.parse(postApiSandboxRequest),
-  );
-}
-
-/** @internal */
-export const PostApiSandboxArchResponse$inboundSchema: z.ZodMiniType<
-  PostApiSandboxArchResponseOpen,
-  unknown
-> = openEnums.inboundSchema(PostApiSandboxArchResponse);
-
-/** @internal */
-export const PostApiSandboxStatus$inboundSchema: z.ZodMiniType<
-  PostApiSandboxStatusOpen,
-  unknown
-> = openEnums.inboundSchema(PostApiSandboxStatus);
-
 /** @internal */
 export const PostApiSandboxResponse$inboundSchema: z.ZodMiniType<
   PostApiSandboxResponse,
@@ -399,12 +47,12 @@ export const PostApiSandboxResponse$inboundSchema: z.ZodMiniType<
   generation: types.number(),
   provider: types.string(),
   arch: z._default(
-    PostApiSandboxArchResponse$inboundSchema,
-    PostApiSandboxArchResponse.X8664,
+    models.Schemadefaul$inboundSchema,
+    models.Schemadefaul.X8664,
   ),
   status: z._default(
-    PostApiSandboxStatus$inboundSchema,
-    PostApiSandboxStatus.Pending,
+    models.Schemadefaul4$inboundSchema,
+    models.Schemadefaul4.Pending,
   ),
   definitionName: types.string(),
   environmentName: types.optional(types.string()),

package/src/models/operations/update-organization-member.ts

@@ -9,7 +9,7 @@ export type UpdateOrganizationMemberRequestBody = {
   /**
    * The new role for the member
    */
-  role?: models.Schemadefaul | undefined;
+  role?: models.Schemadefaul6 | undefined;
 };
 
 export type UpdateOrganizationMemberRequest = {
@@ -29,8 +29,8 @@ export const UpdateOrganizationMemberRequestBody$outboundSchema: z.ZodMiniType<
   UpdateOrganizationMemberRequestBody
 > = z.object({
   role: z._default(
-    models.Schemadefaul$outboundSchema,
-    models.Schemadefaul.Owner,
+    models.Schemadefaul6$outboundSchema,
+    models.Schemadefaul6.Owner,
   ),
 });
 

package/src/models/operations/update-workspace-member.ts

@@ -9,7 +9,7 @@ export type UpdateWorkspaceMemberRequestBody = {
   /**
    * The new role for the member
    */
-  role?: models.Schemadefaul3 | undefined;
+  role?: models.Schemadefaul8 | undefined;
 };
 
 export type UpdateWorkspaceMemberRequest = {
@@ -29,8 +29,8 @@ export const UpdateWorkspaceMemberRequestBody$outboundSchema: z.ZodMiniType<
   UpdateWorkspaceMemberRequestBody
 > = z.object({
   role: z._default(
-    models.Schemadefaul3$outboundSchema,
-    models.Schemadefaul3.Admin,
+    models.Schemadefaul8$outboundSchema,
+    models.Schemadefaul8.Admin,
   ),
 });
 

package/src/models/preset-timeout-ms-keep.ts

@@ -0,0 +1,60 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+
+export type PresetTimeoutMsKeep = {
+  /**
+   * Named preset to run on. Omitted means the backend default — see GET /api/sandbox/presets.
+   */
+  preset?: string | undefined;
+  /**
+   * Per-command timeout. The provider invocation timeout also applies and may be lower — a one-shot call is not the way to run something long.
+   */
+  timeoutMs?: number | undefined;
+  /**
+   * Keep the sandbox after the run instead of tearing it down. Defaults to false; the returned sandboxId is then usable with /api/sandbox/:id/exec.
+   */
+  keep?: boolean | undefined;
+  /**
+   * Correlation id for trace attribution
+   */
+  runId?: string | undefined;
+  /**
+   * argv. Not a shell string — no shell is involved unless you name one.
+   */
+  command: Array<string>;
+  cwd?: string | undefined;
+};
+
+/** @internal */
+export type PresetTimeoutMsKeep$Outbound = {
+  preset?: string | undefined;
+  timeoutMs?: number | undefined;
+  keep?: boolean | undefined;
+  runId?: string | undefined;
+  command: Array<string>;
+  cwd?: string | undefined;
+};
+
+/** @internal */
+export const PresetTimeoutMsKeep$outboundSchema: z.ZodMiniType<
+  PresetTimeoutMsKeep$Outbound,
+  PresetTimeoutMsKeep
+> = z.object({
+  preset: z.optional(z.string()),
+  timeoutMs: z.optional(z.number()),
+  keep: z.optional(z.boolean()),
+  runId: z.optional(z.string()),
+  command: z.array(z.string()),
+  cwd: z.optional(z.string()),
+});
+
+export function presetTimeoutMsKeepToJSON(
+  presetTimeoutMsKeep: PresetTimeoutMsKeep,
+): string {
+  return JSON.stringify(
+    PresetTimeoutMsKeep$outboundSchema.parse(presetTimeoutMsKeep),
+  );
+}

package/src/models/preset-timeout-ms-keep2.ts

@@ -0,0 +1,69 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+
+export type PresetTimeoutMsKeep2 = {
+  /**
+   * Named preset to run on. Omitted means the backend default — see GET /api/sandbox/presets.
+   */
+  preset?: string | undefined;
+  /**
+   * Per-command timeout. The provider invocation timeout also applies and may be lower — a one-shot call is not the way to run something long.
+   */
+  timeoutMs?: number | undefined;
+  /**
+   * Keep the sandbox after the run instead of tearing it down. Defaults to false; the returned sandboxId is then usable with /api/sandbox/:id/exec.
+   */
+  keep?: boolean | undefined;
+  /**
+   * Correlation id for trace attribution
+   */
+  runId?: string | undefined;
+  /**
+   * WHO the agent is — the agent definition, passed as `helix agent --prompt`.
+   */
+  prompt: string;
+  /**
+   * WHAT to do this turn — the task, passed as `-p`. A different prompt from `prompt`.
+   */
+  task: string;
+  /**
+   * Run the agent on the ASPS-Prime scaffold instead of the default ASPS one — leaner, code-first, no orchestrator persona. Forwarded to the binary as `--prime`.
+   */
+  prime?: boolean | undefined;
+};
+
+/** @internal */
+export type PresetTimeoutMsKeep2$Outbound = {
+  preset?: string | undefined;
+  timeoutMs?: number | undefined;
+  keep?: boolean | undefined;
+  runId?: string | undefined;
+  prompt: string;
+  task: string;
+  prime?: boolean | undefined;
+};
+
+/** @internal */
+export const PresetTimeoutMsKeep2$outboundSchema: z.ZodMiniType<
+  PresetTimeoutMsKeep2$Outbound,
+  PresetTimeoutMsKeep2
+> = z.object({
+  preset: z.optional(z.string()),
+  timeoutMs: z.optional(z.number()),
+  keep: z.optional(z.boolean()),
+  runId: z.optional(z.string()),
+  prompt: z.string(),
+  task: z.string(),
+  prime: z.optional(z.boolean()),
+});
+
+export function presetTimeoutMsKeep2ToJSON(
+  presetTimeoutMsKeep2: PresetTimeoutMsKeep2,
+): string {
+  return JSON.stringify(
+    PresetTimeoutMsKeep2$outboundSchema.parse(presetTimeoutMsKeep2),
+  );
+}

package/src/models/provider-config.ts

@@ -75,6 +75,10 @@ export type ProviderConfig = {
    * Additional metadata
    */
   metadata: { [k: string]: any } | null;
+  /**
+   * Non-secret per-entry credential material for this provider (region, projectId, deploymentName, etc.), keyed by the catalog wire names. Never carries the secret — that stays masked in apiKeyMasked. Exposed so an edit form can show what is actually stored: both create and update (#1388) persist non-column catalog fields here, and before this the column was write-only from the API's perspective, so an edited value vanished from the dialog on the next load even though the row held it.
+   */
+  credentialFields: { [k: string]: string } | null;
   /**
    * User ID of the creator
    */
@@ -131,6 +135,7 @@ export const ProviderConfig$inboundSchema: z.ZodMiniType<
   ),
   apiVersion: types.nullable(types.string()),
   metadata: types.nullable(z.record(z.string(), z.any())),
+  credentialFields: types.nullable(z.record(z.string(), types.string())),
   createdBy: types.nullable(types.string()),
   createdAt: types.date(),
   updatedAt: types.date(),

package/src/models/provider-configs-list.ts

@@ -75,6 +75,10 @@ export type Config = {
    * Additional metadata
    */
   metadata: { [k: string]: any } | null;
+  /**
+   * Non-secret per-entry credential material for this provider (region, projectId, deploymentName, etc.), keyed by the catalog wire names. Never carries the secret — that stays masked in apiKeyMasked. Exposed so an edit form can show what is actually stored: both create and update (#1388) persist non-column catalog fields here, and before this the column was write-only from the API's perspective, so an edited value vanished from the dialog on the next load even though the row held it.
+   */
+  credentialFields: { [k: string]: string } | null;
   /**
    * User ID of the creator
    */
@@ -142,6 +146,7 @@ export const Config$inboundSchema: z.ZodMiniType<Config, unknown> = z.object({
   ),
   apiVersion: types.nullable(types.string()),
   metadata: types.nullable(z.record(z.string(), z.any())),
+  credentialFields: types.nullable(z.record(z.string(), types.string())),
   createdBy: types.nullable(types.string()),
   createdAt: types.date(),
   updatedAt: types.date(),

package/src/models/schemadefaul.ts

@@ -3,14 +3,17 @@
  */
 
 import * as z from "zod/v4-mini";
+import * as openEnums from "../types/enums.js";
+import { OpenEnum } from "../types/enums.js";
 
 export enum Schemadefaul {
-  Owner = "owner",
-  Admin = "admin",
-  Editor = "editor",
-  Viewer = "viewer",
+  X8664 = "x86_64",
+  Arm64 = "arm64",
 }
+export type SchemadefaulOpen = OpenEnum<typeof Schemadefaul>;
 
 /** @internal */
-export const Schemadefaul$outboundSchema: z.ZodMiniEnum<typeof Schemadefaul> = z
-  .enum(Schemadefaul);
+export const Schemadefaul$inboundSchema: z.ZodMiniType<
+  SchemadefaulOpen,
+  unknown
+> = openEnums.inboundSchema(Schemadefaul);

package/src/models/schemadefaul4.ts

@@ -0,0 +1,24 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+import * as openEnums from "../types/enums.js";
+import { OpenEnum } from "../types/enums.js";
+
+export enum Schemadefaul4 {
+  Pending = "pending",
+  Starting = "starting",
+  Running = "running",
+  Paused = "paused",
+  Stopping = "stopping",
+  Stopped = "stopped",
+  Failed = "failed",
+}
+export type Schemadefaul4Open = OpenEnum<typeof Schemadefaul4>;
+
+/** @internal */
+export const Schemadefaul4$inboundSchema: z.ZodMiniType<
+  Schemadefaul4Open,
+  unknown
+> = openEnums.inboundSchema(Schemadefaul4);

package/src/models/schemadefaul5.ts

@@ -0,0 +1,24 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+import * as openEnums from "../types/enums.js";
+import { OpenEnum } from "../types/enums.js";
+
+export enum Schemadefaul5 {
+  Oneshot = "oneshot",
+  Rpc = "rpc",
+}
+export type Schemadefaul5Open = OpenEnum<typeof Schemadefaul5>;
+
+/** @internal */
+export const Schemadefaul5$inboundSchema: z.ZodMiniType<
+  Schemadefaul5Open,
+  unknown
+> = openEnums.inboundSchema(Schemadefaul5);
+/** @internal */
+export const Schemadefaul5$outboundSchema: z.ZodMiniType<
+  string,
+  Schemadefaul5Open
+> = openEnums.outboundSchema(Schemadefaul5);

package/src/models/schemadefaul6.ts

@@ -0,0 +1,16 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+
+export enum Schemadefaul6 {
+  Owner = "owner",
+  Admin = "admin",
+  Editor = "editor",
+  Viewer = "viewer",
+}
+
+/** @internal */
+export const Schemadefaul6$outboundSchema: z.ZodMiniEnum<typeof Schemadefaul6> =
+  z.enum(Schemadefaul6);