@mutagent/sdk 0.3.47 → 0.3.49

package/src/sdk/sandbox.ts

@@ -3,14 +3,18 @@
  */
 
 import { sandboxDeleteApiSandboxById } from "../funcs/sandbox-delete-api-sandbox-by-id.js";
+import { sandboxDeleteApiSandboxEnvironmentsByName } from "../funcs/sandbox-delete-api-sandbox-environments-by-name.js";
 import { sandboxGetApiSandboxByIdCheckpoints } from "../funcs/sandbox-get-api-sandbox-by-id-checkpoints.js";
 import { sandboxGetApiSandboxByIdSessions } from "../funcs/sandbox-get-api-sandbox-by-id-sessions.js";
 import { sandboxGetApiSandboxByIdStream } from "../funcs/sandbox-get-api-sandbox-by-id-stream.js";
 import { sandboxGetApiSandboxByIdTraces } from "../funcs/sandbox-get-api-sandbox-by-id-traces.js";
 import { sandboxGetApiSandboxById } from "../funcs/sandbox-get-api-sandbox-by-id.js";
+import { sandboxGetApiSandboxEnvironmentsByName } from "../funcs/sandbox-get-api-sandbox-environments-by-name.js";
+import { sandboxGetApiSandboxEnvironments } from "../funcs/sandbox-get-api-sandbox-environments.js";
 import { sandboxGetApiSandboxPresets } from "../funcs/sandbox-get-api-sandbox-presets.js";
 import { sandboxGetApiSandboxProviders } from "../funcs/sandbox-get-api-sandbox-providers.js";
 import { sandboxGetApiSandbox } from "../funcs/sandbox-get-api-sandbox.js";
+import { sandboxPatchApiSandboxEnvironmentsByName } from "../funcs/sandbox-patch-api-sandbox-environments-by-name.js";
 import { sandboxPostApiSandboxAgentRun } from "../funcs/sandbox-post-api-sandbox-agent-run.js";
 import { sandboxPostApiSandboxByIdCheckpoint } from "../funcs/sandbox-post-api-sandbox-by-id-checkpoint.js";
 import { sandboxPostApiSandboxByIdExec } from "../funcs/sandbox-post-api-sandbox-by-id-exec.js";
@@ -23,6 +27,7 @@ import { sandboxPostApiSandboxRun } from "../funcs/sandbox-post-api-sandbox-run.
 import { sandboxPostApiSandboxTelemetryV1Traces } from "../funcs/sandbox-post-api-sandbox-telemetry-v1-traces.js";
 import { sandboxPostApiSandboxToken } from "../funcs/sandbox-post-api-sandbox-token.js";
 import { sandboxPostApiSandbox } from "../funcs/sandbox-post-api-sandbox.js";
+import { sandboxPutApiSandboxEnvironmentsByName } from "../funcs/sandbox-put-api-sandbox-environments-by-name.js";
 import { ClientSDK, RequestOptions } from "../lib/sdks.js";
 import * as models from "../models/index.js";
 import * as operations from "../models/operations/index.js";
@@ -219,6 +224,89 @@ export class Sandbox extends ClientSDK {
     ));
   }
 
+  /**
+   * List workspace Environments
+   *
+   * @remarks
+   * Every Environment in the token's workspace: its name, the names of its variables and secrets with a `sha256(value)[:8]` fingerprint each, and timestamps. No value is ever returned — compare fingerprints to tell whether what you hold is what is stored. Environments carry the variables and secrets an agent's TOOLS need; LLM provider credentials are `/api/providers`, a different thing. 503 when the deployment has not migrated the table.
+   */
+  async getApiSandboxEnvironments(
+    options?: RequestOptions,
+  ): Promise<operations.GetApiSandboxEnvironmentsResponse> {
+    return unwrapAsync(sandboxGetApiSandboxEnvironments(
+      this,
+      options,
+    ));
+  }
+
+  /**
+   * Describe one workspace Environment
+   *
+   * @remarks
+   * Names and fingerprints only — the same shape as one entry of the list. 404 for a name this workspace does not have, including one another workspace does.
+   */
+  async getApiSandboxEnvironmentsByName(
+    request: operations.GetApiSandboxEnvironmentsByNameRequest,
+    options?: RequestOptions,
+  ): Promise<models.NameVarsSecrets> {
+    return unwrapAsync(sandboxGetApiSandboxEnvironmentsByName(
+      this,
+      request,
+      options,
+    ));
+  }
+
+  /**
+   * Create or replace a workspace Environment
+   *
+   * @remarks
+   * The whole Environment. Entries the body omits are REMOVED, secrets included. Values are accepted here and never returned by any route; secrets are encrypted at rest with the same key as provider credentials. Names: Environment `^[A-Za-z0-9._-]{1,64}$`, variables `^[A-Z_][A-Z0-9_]*$`, 64 KiB per Environment. 409 for a variable named like a harness provider key unless `?allowProviderKey=1`.
+   */
+  async putApiSandboxEnvironmentsByName(
+    request: operations.PutApiSandboxEnvironmentsByNameRequest,
+    options?: RequestOptions,
+  ): Promise<models.NameVarsSecrets> {
+    return unwrapAsync(sandboxPutApiSandboxEnvironmentsByName(
+      this,
+      request,
+      options,
+    ));
+  }
+
+  /**
+   * Set or unset entries of a workspace Environment
+   *
+   * @remarks
+   * Merges into the existing Environment: a string value sets the entry, `null` unsets it, entries not mentioned stay. Creates the Environment when it does not exist yet, so `mutagent env set` is one step. Same rules and the same 409 as PUT.
+   */
+  async patchApiSandboxEnvironmentsByName(
+    request: operations.PatchApiSandboxEnvironmentsByNameRequest,
+    options?: RequestOptions,
+  ): Promise<models.NameVarsSecrets> {
+    return unwrapAsync(sandboxPatchApiSandboxEnvironmentsByName(
+      this,
+      request,
+      options,
+    ));
+  }
+
+  /**
+   * Delete a workspace Environment
+   *
+   * @remarks
+   * Removes the Environment and its encrypted secrets. Boxes already running keep what they were handed; the next spawn naming this Environment answers 404. 404 when there is nothing to delete — a retried delete is not a success.
+   */
+  async deleteApiSandboxEnvironmentsByName(
+    request: operations.DeleteApiSandboxEnvironmentsByNameRequest,
+    options?: RequestOptions,
+  ): Promise<operations.DeleteApiSandboxEnvironmentsByNameResponse> {
+    return unwrapAsync(sandboxDeleteApiSandboxEnvironmentsByName(
+      this,
+      request,
+      options,
+    ));
+  }
+
   /**
    * Start a Helix session in a sandbox
    *
@@ -325,7 +413,7 @@ export class Sandbox extends ClientSDK {
    * Rebuild this sandbox from a checkpoint, with full state
    *
    * @remarks
-   * A cloud equivalent of a local `/resume`, and it does NOT require the old box to still exist — a reaped or torn-down sandbox is the ordinary input. In order: a fresh box is spawned for the SAME sandbox id at generation+1 with the same secret NAMES (values are re-minted, never stored); the relay's seq counter is seeded from the persisted high-water mark so a client's `?since=` cursor stays valid; the workspace and `$HOME/.mutagent` are extracted BEFORE Helix starts; a session is started in the checkpoint's cwd; the conversation is written in, its sha256 compared against the box's own, and only then switched onto; the runtime settings and pending queue are replayed; and a `session {status:"restored"}` frame is appended to the stream with a real seq. A digest mismatch is a 422 and the session is NOT switched. 404 if the snapshot is not in this workspace. Read `notRestored` — a restore that carried only the conversation is legitimate and says so there. A DEFAULTED restore uses the newest checkpoint that has a manifest and lists newer rows it passed over in `skippedSnapshots`. `partial: true` restores the incremental transcript prefix beyond the checkpoint when one exists (the frame then carries `partial: true`); its tail may end on a tool call with no result, which the harness answers with a synthetic error on the next turn — the accepted risk of asking for it.
+   * A cloud equivalent of a local `/resume`, and it does NOT require the old box to still exist — a reaped or torn-down sandbox is the ordinary input. In order: a fresh box is spawned for the SAME sandbox id at generation+1 with the same secret NAMES (values are re-minted, never stored); the relay's seq counter is seeded from the persisted high-water mark so a client's `?since=` cursor stays valid; the workspace and `$HOME/.mutagent` are extracted BEFORE Helix starts; a session is started in the checkpoint's cwd; the conversation is written in, its sha256 compared against the box's own, and only then switched onto; the runtime settings and pending queue are replayed; and a `session {status:"restored"}` frame is appended to the stream with a real seq. A digest mismatch is a 422 and the session is NOT switched. 404 if the snapshot is not in this workspace. Read `notRestored` — a restore that carried only the conversation is legitimate and says so there. A DEFAULTED restore uses the newest checkpoint that has a manifest and lists newer rows it passed over in `skippedSnapshots`. `partial: true` restores the incremental transcript prefix beyond the checkpoint when one exists (the frame then carries `partial: true`); its tail may end on a tool call with no result, which the harness answers with a synthetic error on the next turn — the accepted risk of asking for it. ENVIRONMENT: `environment` and `env` layer onto the restored session exactly as on session start (provider keys, then the Environment, then per-call `env`, then platform-owned variables). The Environment a session was started with is recorded by NAME in the checkpoint manifest and re-resolved when `environment` is omitted; a name in the body wins, and an unknown one is a 404 before the old box is touched. Per-call `env` values are NEVER stored, so a restore that omits `env` does not bring them back — send a model key given as `env` again.
    */
   async postApiSandboxByIdRestore(
     request: operations.PostApiSandboxByIdRestoreRequest,

package/dist/commonjs/models/schemadefaul11.d.ts

@@ -1,9 +0,0 @@
-import * as z from "zod/v4-mini";
-export declare enum Schemadefaul11 {
-    Admin = "admin",
-    Editor = "editor",
-    Viewer = "viewer"
-}
-/** @internal */
-export declare const Schemadefaul11$outboundSchema: z.ZodMiniEnum<typeof Schemadefaul11>;
-//# sourceMappingURL=schemadefaul11.d.ts.map

package/dist/commonjs/models/schemadefaul9.d.ts

@@ -1,10 +0,0 @@
-import * as z from "zod/v4-mini";
-export declare enum Schemadefaul9 {
-    Owner = "owner",
-    Admin = "admin",
-    Editor = "editor",
-    Viewer = "viewer"
-}
-/** @internal */
-export declare const Schemadefaul9$outboundSchema: z.ZodMiniEnum<typeof Schemadefaul9>;
-//# sourceMappingURL=schemadefaul9.d.ts.map

package/dist/commonjs/models/schemadefaul9.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemadefaul9.d.ts","sourceRoot":"","sources":["../../../src/models/schemadefaul9.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,oBAAY,aAAa;IACvB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED,gBAAgB;AAChB,eAAO,MAAM,4BAA4B,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,aAAa,CACtD,CAAC"}

package/dist/commonjs/models/schemadefaul9.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemadefaul9.js","sourceRoot":"","sources":["../../../src/models/schemadefaul9.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AAEjC,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,gCAAe,CAAA;IACf,gCAAe,CAAA;IACf,kCAAiB,CAAA;IACjB,kCAAiB,CAAA;AACnB,CAAC,EALW,aAAa,6BAAb,aAAa,QAKxB;AAED,gBAAgB;AACH,QAAA,4BAA4B,GACvC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC"}

package/dist/esm/models/schemadefaul11.d.ts

@@ -1,9 +0,0 @@
-import * as z from "zod/v4-mini";
-export declare enum Schemadefaul11 {
-    Admin = "admin",
-    Editor = "editor",
-    Viewer = "viewer"
-}
-/** @internal */
-export declare const Schemadefaul11$outboundSchema: z.ZodMiniEnum<typeof Schemadefaul11>;
-//# sourceMappingURL=schemadefaul11.d.ts.map

package/dist/esm/models/schemadefaul11.js

@@ -1,13 +0,0 @@
-/*
- * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
- */
-import * as z from "zod/v4-mini";
-export var Schemadefaul11;
-(function (Schemadefaul11) {
-    Schemadefaul11["Admin"] = "admin";
-    Schemadefaul11["Editor"] = "editor";
-    Schemadefaul11["Viewer"] = "viewer";
-})(Schemadefaul11 || (Schemadefaul11 = {}));
-/** @internal */
-export const Schemadefaul11$outboundSchema = z.enum(Schemadefaul11);
-//# sourceMappingURL=schemadefaul11.js.map

package/dist/esm/models/schemadefaul9.d.ts

@@ -1,10 +0,0 @@
-import * as z from "zod/v4-mini";
-export declare enum Schemadefaul9 {
-    Owner = "owner",
-    Admin = "admin",
-    Editor = "editor",
-    Viewer = "viewer"
-}
-/** @internal */
-export declare const Schemadefaul9$outboundSchema: z.ZodMiniEnum<typeof Schemadefaul9>;
-//# sourceMappingURL=schemadefaul9.d.ts.map

package/dist/esm/models/schemadefaul9.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemadefaul9.d.ts","sourceRoot":"","sources":["../../../src/models/schemadefaul9.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,oBAAY,aAAa;IACvB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED,gBAAgB;AAChB,eAAO,MAAM,4BAA4B,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,aAAa,CACtD,CAAC"}

package/dist/esm/models/schemadefaul9.js

@@ -1,14 +0,0 @@
-/*
- * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
- */
-import * as z from "zod/v4-mini";
-export var Schemadefaul9;
-(function (Schemadefaul9) {
-    Schemadefaul9["Owner"] = "owner";
-    Schemadefaul9["Admin"] = "admin";
-    Schemadefaul9["Editor"] = "editor";
-    Schemadefaul9["Viewer"] = "viewer";
-})(Schemadefaul9 || (Schemadefaul9 = {}));
-/** @internal */
-export const Schemadefaul9$outboundSchema = z.enum(Schemadefaul9);
-//# sourceMappingURL=schemadefaul9.js.map

package/dist/esm/models/schemadefaul9.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemadefaul9.js","sourceRoot":"","sources":["../../../src/models/schemadefaul9.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,MAAM,CAAN,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,gCAAe,CAAA;IACf,gCAAe,CAAA;IACf,kCAAiB,CAAA;IACjB,kCAAiB,CAAA;AACnB,CAAC,EALW,aAAa,KAAb,aAAa,QAKxB;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,4BAA4B,GACvC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC"}