@mutagent/sdk 0.4.0 → 0.4.1

package/dist/esm/models/workspace-model-listing.js

@@ -0,0 +1,39 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+import * as z from "zod/v4-mini";
+import { safeParse } from "../lib/schemas.js";
+import * as openEnums from "../types/enums.js";
+import * as types from "../types/primitives.js";
+/**
+ * 'live' — listed from the provider just now; 'stored' — the persisted allow-list
+ */
+export var Source;
+(function (Source) {
+    Source["Live"] = "live";
+    Source["Stored"] = "stored";
+})(Source || (Source = {}));
+/** @internal */
+export const Model$inboundSchema = z.object({
+    id: types.string(),
+    displayName: types.string(),
+    enabled: types.boolean(),
+    roles: z.array(types.string()),
+    modelVerified: types.boolean(),
+});
+export function modelFromJSON(jsonString) {
+    return safeParse(jsonString, (x) => Model$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'Model' from JSON`);
+}
+/** @internal */
+export const Source$inboundSchema = openEnums.inboundSchema(Source);
+/** @internal */
+export const WorkspaceModelListing$inboundSchema = z.object({
+    models: z.array(z.lazy(() => Model$inboundSchema)),
+    source: z._default(Source$inboundSchema, Source.Live),
+    degraded: types.boolean(),
+    message: types.nullable(types.string()),
+});
+export function workspaceModelListingFromJSON(jsonString) {
+    return safeParse(jsonString, (x) => WorkspaceModelListing$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'WorkspaceModelListing' from JSON`);
+}
+//# sourceMappingURL=workspace-model-listing.js.map

package/dist/esm/models/workspace-model-listing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-model-listing.js","sourceRoot":"","sources":["../../../src/models/workspace-model-listing.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AA0BhD;;GAEG;AACH,MAAM,CAAN,IAAY,MAGX;AAHD,WAAY,MAAM;IAChB,uBAAa,CAAA;IACb,2BAAiB,CAAA;AACnB,CAAC,EAHW,MAAM,KAAN,MAAM,QAGjB;AAyBD,gBAAgB;AAChB,MAAM,CAAC,MAAM,mBAAmB,GAAkC,CAAC,CAAC,MAAM,CAAC;IACzE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE;IAClB,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE;IAC3B,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACxB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9B,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAC3B,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC/C,mCAAmC,CACpC,CAAC;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,oBAAoB,GAC/B,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;AAElC,gBAAgB;AAChB,MAAM,CAAC,MAAM,mCAAmC,GAG5C,CAAC,CAAC,MAAM,CAAC;IACX,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC;IACrD,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE;IACzB,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;CACxC,CAAC,CAAC;AAEH,MAAM,UAAU,6BAA6B,CAC3C,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,mCAAmC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC/D,mDAAmD,CACpD,CAAC;AACJ,CAAC"}

package/dist/esm/models/workspace.d.ts

@@ -1,14 +1,6 @@
 import * as z from "zod/v4-mini";
 import { Result as SafeParseResult } from "../types/fp.js";
 import { SDKValidationError } from "./errors/sdk-validation-error.js";
-/**
- * Workspace settings
- */
-export type WorkspaceSettings = {};
-/**
- * Arbitrary metadata
- */
-export type WorkspaceMetadata = {};
 /**
  * Workspace object with all metadata
  */
@@ -44,11 +36,15 @@ export type Workspace = {
     /**
      * Workspace settings
      */
-    settings: WorkspaceSettings | null;
+    settings: {
+        [k: string]: any;
+    } | null;
     /**
      * Arbitrary metadata
      */
-    metadata: WorkspaceMetadata | null;
+    metadata: {
+        [k: string]: any;
+    } | null;
     /**
      * User ID of the creator
      */
@@ -63,12 +59,6 @@ export type Workspace = {
     updatedAt: Date;
 };
 /** @internal */
-export declare const WorkspaceSettings$inboundSchema: z.ZodMiniType<WorkspaceSettings, unknown>;
-export declare function workspaceSettingsFromJSON(jsonString: string): SafeParseResult<WorkspaceSettings, SDKValidationError>;
-/** @internal */
-export declare const WorkspaceMetadata$inboundSchema: z.ZodMiniType<WorkspaceMetadata, unknown>;
-export declare function workspaceMetadataFromJSON(jsonString: string): SafeParseResult<WorkspaceMetadata, SDKValidationError>;
-/** @internal */
 export declare const Workspace$inboundSchema: z.ZodMiniType<Workspace, unknown>;
 export declare function workspaceFromJSON(jsonString: string): SafeParseResult<Workspace, SDKValidationError>;
 //# sourceMappingURL=workspace.d.ts.map

package/dist/esm/models/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../../src/models/workspace.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEnC;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEnC;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB;;OAEG;IACH,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACnC;;OAEG;IACH,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACnC;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,+BAA+B,EAAE,CAAC,CAAC,WAAW,CACzD,iBAAiB,EACjB,OAAO,CACO,CAAC;AAEjB,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAMxD;AAED,gBAAgB;AAChB,eAAO,MAAM,+BAA+B,EAAE,CAAC,CAAC,WAAW,CACzD,iBAAiB,EACjB,OAAO,CACO,CAAC;AAEjB,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAMxD;AAED,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAclE,CAAC;AAEL,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAMhD"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../../src/models/workspace.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB;;OAEG;IACH,QAAQ,EAAE;QAAE,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,GAAG,IAAI,CAAC;IACtC;;OAEG;IACH,QAAQ,EAAE;QAAE,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,GAAG,IAAI,CAAC;IACtC;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAclE,CAAC;AAEL,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAMhD"}

package/dist/esm/models/workspace.js

@@ -5,16 +5,6 @@ import * as z from "zod/v4-mini";
 import { safeParse } from "../lib/schemas.js";
 import * as types from "../types/primitives.js";
 /** @internal */
-export const WorkspaceSettings$inboundSchema = z.object({});
-export function workspaceSettingsFromJSON(jsonString) {
-    return safeParse(jsonString, (x) => WorkspaceSettings$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'WorkspaceSettings' from JSON`);
-}
-/** @internal */
-export const WorkspaceMetadata$inboundSchema = z.object({});
-export function workspaceMetadataFromJSON(jsonString) {
-    return safeParse(jsonString, (x) => WorkspaceMetadata$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'WorkspaceMetadata' from JSON`);
-}
-/** @internal */
 export const Workspace$inboundSchema = z
     .object({
     id: types.string(),
@@ -24,8 +14,8 @@ export const Workspace$inboundSchema = z
     description: types.nullable(types.string()),
     isDefault: types.boolean(),
     isActive: types.boolean(),
-    settings: types.nullable(z.lazy(() => WorkspaceSettings$inboundSchema)),
-    metadata: types.nullable(z.lazy(() => WorkspaceMetadata$inboundSchema)),
+    settings: types.nullable(z.record(z.string(), z.any())),
+    metadata: types.nullable(z.record(z.string(), z.any())),
     createdBy: types.nullable(types.string()),
     createdAt: types.date(),
     updatedAt: types.date(),

package/dist/esm/models/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../../src/models/workspace.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAmEhD,gBAAgB;AAChB,MAAM,CAAC,MAAM,+BAA+B,GAGxC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjB,MAAM,UAAU,yBAAyB,CACvC,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC3D,+CAA+C,CAChD,CAAC;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,+BAA+B,GAGxC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjB,MAAM,UAAU,yBAAyB,CACvC,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC3D,+CAA+C,CAChD,CAAC;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,uBAAuB,GAAsC,CAAC;KACxE,MAAM,CAAC;IACN,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE;IAClB,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE;IAC9B,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC3C,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE;IAC1B,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE;IACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,+BAA+B,CAAC,CAAC;IACvE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,+BAA+B,CAAC,CAAC;IACvE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACzC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;IACvB,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;CACxB,CAAC,CAAC;AAEL,MAAM,UAAU,iBAAiB,CAC/B,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACnD,uCAAuC,CACxC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../../src/models/workspace.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAyDhD,gBAAgB;AAChB,MAAM,CAAC,MAAM,uBAAuB,GAAsC,CAAC;KACxE,MAAM,CAAC;IACN,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE;IAClB,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE;IAC9B,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC3C,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE;IAC1B,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE;IACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACzC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;IACvB,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;CACxB,CAAC,CAAC;AAEL,MAAM,UAAU,iBAAiB,CAC/B,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACnD,uCAAuC,CACxC,CAAC;AACJ,CAAC"}

package/dist/esm/models/workspaces-list.d.ts

@@ -2,14 +2,6 @@ import * as z from "zod/v4-mini";
 import { OpenEnum } from "../types/enums.js";
 import { Result as SafeParseResult } from "../types/fp.js";
 import { SDKValidationError } from "./errors/sdk-validation-error.js";
-/**
- * Workspace settings
- */
-export type WorkspacesListSettings = {};
-/**
- * Arbitrary metadata
- */
-export type WorkspacesListMetadata = {};
 /**
  * Current user's role in this workspace
  */
@@ -57,11 +49,15 @@ export type WorkspacesListWorkspace = {
     /**
      * Workspace settings
      */
-    settings: WorkspacesListSettings | null;
+    settings: {
+        [k: string]: any;
+    } | null;
     /**
      * Arbitrary metadata
      */
-    metadata: WorkspacesListMetadata | null;
+    metadata: {
+        [k: string]: any;
+    } | null;
     /**
      * User ID of the creator
      */
@@ -93,12 +89,6 @@ export type WorkspacesList = {
     total: number;
 };
 /** @internal */
-export declare const WorkspacesListSettings$inboundSchema: z.ZodMiniType<WorkspacesListSettings, unknown>;
-export declare function workspacesListSettingsFromJSON(jsonString: string): SafeParseResult<WorkspacesListSettings, SDKValidationError>;
-/** @internal */
-export declare const WorkspacesListMetadata$inboundSchema: z.ZodMiniType<WorkspacesListMetadata, unknown>;
-export declare function workspacesListMetadataFromJSON(jsonString: string): SafeParseResult<WorkspacesListMetadata, SDKValidationError>;
-/** @internal */
 export declare const WorkspacesListRole$inboundSchema: z.ZodMiniType<WorkspacesListRoleOpen, unknown>;
 /** @internal */
 export declare const WorkspacesListWorkspace$inboundSchema: z.ZodMiniType<WorkspacesListWorkspace, unknown>;

package/dist/esm/models/workspaces-list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces-list.d.ts","sourceRoot":"","sources":["../../../src/models/workspaces-list.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAExC;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAExC;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AACD;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEzE;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB;;OAEG;IACH,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACxC;;OAEG;IACH,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACxC;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,IAAI,EAAE,sBAAsB,CAAC;CAC9B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B;;OAEG;IACH,UAAU,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,oCAAoC,EAAE,CAAC,CAAC,WAAW,CAC9D,sBAAsB,EACtB,OAAO,CACO,CAAC;AAEjB,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAM7D;AAED,gBAAgB;AAChB,eAAO,MAAM,oCAAoC,EAAE,CAAC,CAAC,WAAW,CAC9D,sBAAsB,EACtB,OAAO,CACO,CAAC;AAEjB,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAM7D;AAED,gBAAgB;AAChB,eAAO,MAAM,gCAAgC,EAAE,CAAC,CAAC,WAAW,CAC1D,sBAAsB,EACtB,OAAO,CACsC,CAAC;AAEhD,gBAAgB;AAChB,eAAO,MAAM,qCAAqC,EAAE,CAAC,CAAC,WAAW,CAC/D,uBAAuB,EACvB,OAAO,CAeP,CAAC;AAEH,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAM9D;AAED,gBAAgB;AAChB,eAAO,MAAM,4BAA4B,EAAE,CAAC,CAAC,WAAW,CACtD,cAAc,EACd,OAAO,CAIP,CAAC;AAEH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAMrD"}
+{"version":3,"file":"workspaces-list.d.ts","sourceRoot":"","sources":["../../../src/models/workspaces-list.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AACD;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEzE;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB;;OAEG;IACH,QAAQ,EAAE;QAAE,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,GAAG,IAAI,CAAC;IACtC;;OAEG;IACH,QAAQ,EAAE;QAAE,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,GAAG,IAAI,CAAC;IACtC;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,IAAI,EAAE,sBAAsB,CAAC;CAC9B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B;;OAEG;IACH,UAAU,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,gCAAgC,EAAE,CAAC,CAAC,WAAW,CAC1D,sBAAsB,EACtB,OAAO,CACsC,CAAC;AAEhD,gBAAgB;AAChB,eAAO,MAAM,qCAAqC,EAAE,CAAC,CAAC,WAAW,CAC/D,uBAAuB,EACvB,OAAO,CAeP,CAAC;AAEH,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAM9D;AAED,gBAAgB;AAChB,eAAO,MAAM,4BAA4B,EAAE,CAAC,CAAC,WAAW,CACtD,cAAc,EACd,OAAO,CAIP,CAAC;AAEH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAMrD"}

package/dist/esm/models/workspaces-list.js

@@ -15,16 +15,6 @@ export var WorkspacesListRole;
     WorkspacesListRole["Viewer"] = "viewer";
 })(WorkspacesListRole || (WorkspacesListRole = {}));
 /** @internal */
-export const WorkspacesListSettings$inboundSchema = z.object({});
-export function workspacesListSettingsFromJSON(jsonString) {
-    return safeParse(jsonString, (x) => WorkspacesListSettings$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'WorkspacesListSettings' from JSON`);
-}
-/** @internal */
-export const WorkspacesListMetadata$inboundSchema = z.object({});
-export function workspacesListMetadataFromJSON(jsonString) {
-    return safeParse(jsonString, (x) => WorkspacesListMetadata$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'WorkspacesListMetadata' from JSON`);
-}
-/** @internal */
 export const WorkspacesListRole$inboundSchema = openEnums.inboundSchema(WorkspacesListRole);
 /** @internal */
 export const WorkspacesListWorkspace$inboundSchema = z.object({
@@ -35,8 +25,8 @@ export const WorkspacesListWorkspace$inboundSchema = z.object({
     description: types.nullable(types.string()),
     isDefault: types.boolean(),
     isActive: types.boolean(),
-    settings: types.nullable(z.lazy(() => WorkspacesListSettings$inboundSchema)),
-    metadata: types.nullable(z.lazy(() => WorkspacesListMetadata$inboundSchema)),
+    settings: types.nullable(z.record(z.string(), z.any())),
+    metadata: types.nullable(z.record(z.string(), z.any())),
     createdBy: types.nullable(types.string()),
     createdAt: types.date(),
     updatedAt: types.date(),

package/dist/esm/models/workspaces-list.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces-list.js","sourceRoot":"","sources":["../../../src/models/workspaces-list.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAahD;;GAEG;AACH,MAAM,CAAN,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,qCAAe,CAAA;IACf,uCAAiB,CAAA;IACjB,uCAAiB,CAAA;AACnB,CAAC,EAJW,kBAAkB,KAAlB,kBAAkB,QAI7B;AA8ED,gBAAgB;AAChB,MAAM,CAAC,MAAM,oCAAoC,GAG7C,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjB,MAAM,UAAU,8BAA8B,CAC5C,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChE,oDAAoD,CACrD,CAAC;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,oCAAoC,GAG7C,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjB,MAAM,UAAU,8BAA8B,CAC5C,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChE,oDAAoD,CACrD,CAAC;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,gCAAgC,GAGzC,SAAS,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;AAEhD,gBAAgB;AAChB,MAAM,CAAC,MAAM,qCAAqC,GAG9C,CAAC,CAAC,MAAM,CAAC;IACX,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE;IAClB,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE;IAC9B,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC3C,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE;IAC1B,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE;IACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,oCAAoC,CAAC,CAAC;IAC5E,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,oCAAoC,CAAC,CAAC;IAC5E,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACzC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;IACvB,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,gCAAgC,EAAE,kBAAkB,CAAC,KAAK,CAAC;CAC7E,CAAC,CAAC;AAEH,MAAM,UAAU,+BAA+B,CAC7C,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,qCAAqC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACjE,qDAAqD,CACtD,CAAC;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,4BAA4B,GAGrC,CAAC,CAAC,MAAM,CAAC;IACX,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,qCAAqC,CAAC,CAAC;IACxE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,UAAU,sBAAsB,CACpC,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACxD,4CAA4C,CAC7C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"workspaces-list.js","sourceRoot":"","sources":["../../../src/models/workspaces-list.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAGhD;;GAEG;AACH,MAAM,CAAN,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,qCAAe,CAAA;IACf,uCAAiB,CAAA;IACjB,uCAAiB,CAAA;AACnB,CAAC,EAJW,kBAAkB,KAAlB,kBAAkB,QAI7B;AA8ED,gBAAgB;AAChB,MAAM,CAAC,MAAM,gCAAgC,GAGzC,SAAS,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;AAEhD,gBAAgB;AAChB,MAAM,CAAC,MAAM,qCAAqC,GAG9C,CAAC,CAAC,MAAM,CAAC;IACX,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE;IAClB,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE;IAC9B,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC3C,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE;IAC1B,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE;IACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACzC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;IACvB,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,gCAAgC,EAAE,kBAAkB,CAAC,KAAK,CAAC;CAC7E,CAAC,CAAC;AAEH,MAAM,UAAU,+BAA+B,CAC7C,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,qCAAqC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACjE,qDAAqD,CACtD,CAAC;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,4BAA4B,GAGrC,CAAC,CAAC,MAAM,CAAC;IACX,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,qCAAqC,CAAC,CAAC;IACxE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,UAAU,sBAAsB,CACpC,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACxD,4CAA4C,CAC7C,CAAC;AACJ,CAAC"}

package/dist/esm/sdk/provider-configs.d.ts

@@ -13,7 +13,7 @@ export declare class ProviderConfigs extends ClientSDK {
      * Create provider config
      *
      * @remarks
-     * Create a new provider configuration. API key is encrypted before storage and never returned in plain text.
+     * Create a new provider configuration. The credential is tested against the live provider BEFORE it is persisted — a failed test returns the provider's own error, scrubbed of the submitted secret, and writes no row. On success the API key is encrypted before storage and is never returned in plain text.
      */
     createProvider(request: models.NameProviderApiKey, options?: RequestOptions): Promise<models.ProviderConfig>;
     /**
@@ -34,7 +34,7 @@ export declare class ProviderConfigs extends ClientSDK {
      * Update provider config
      *
      * @remarks
-     * Update an existing provider configuration. If API key is provided, it will be re-encrypted.
+     * Update an existing provider configuration. When the patch replaces the SECRET — the apiKey field, or the catalog-named secret inside credentialFields — the new credential is connection-tested BEFORE it is written, the same guarantee POST /providers makes on create. A failed test writes nothing: the existing configuration, including fields elsewhere in the same request, is left exactly as it was. Non-secret changes (baseUrl, hostedFamily, apiVersion, other credentialFields entries) are applied without a live probe.
      */
     updateProvider(request: operations.UpdateProviderRequest, options?: RequestOptions): Promise<models.ProviderConfig>;
     /**
@@ -48,9 +48,16 @@ export declare class ProviderConfigs extends ClientSDK {
      * Get models catalog
      *
      * @remarks
-     * Returns the union of static known models and declared provider models for a workspace. Used by the optimizer dropdown.
+     * Returns the union of static known models and declared provider models for a workspace.
      */
     getModelsCatalog(options?: RequestOptions): Promise<operations.GetModelsCatalogResponse>;
+    /**
+     * List a provider configuration models
+     *
+     * @remarks
+     * The models this provider configuration offers, listed live from the provider and narrowed to the catalog's allow-list policy, with this workspace's per-model enablement applied. When the provider cannot be reached the stored allow-list is returned with `degraded: true` and the reason — an empty list is never presented as 'no models'. Responses are cached for 60s per (workspace, configuration) and the route is additionally rate-limited, since a cache miss decrypts a credential and calls the live provider.
+     */
+    listProviderModels(request: operations.ListProviderModelsRequest, options?: RequestOptions): Promise<models.WorkspaceModelListing>;
     /**
      * Test provider connection
      *

package/dist/esm/sdk/provider-configs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-configs.d.ts","sourceRoot":"","sources":["../../../src/sdk/provider-configs.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,eAAgB,SAAQ,SAAS;IAC5C;;;;;OAKG;IACG,aAAa,CACjB,OAAO,CAAC,EAAE,UAAU,CAAC,oBAAoB,GAAG,SAAS,EACrD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAQtC;;;;;OAKG;IACG,cAAc,CAClB,OAAO,EAAE,MAAM,CAAC,kBAAkB,EAClC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;IAQjC;;;;;OAKG;IACG,mBAAmB,CACvB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC;IAOlD;;;;;OAKG;IACG,WAAW,CACf,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;IAQjC;;;;;OAKG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,CAAC,qBAAqB,EACzC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;IAQjC;;;;;OAKG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,CAAC,qBAAqB,EACzC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;IAQlC;;;;;OAKG;IACG,gBAAgB,CACpB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC;IAO/C;;;;;OAKG;IACG,YAAY,CAChB,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC;CAOxC"}
+{"version":3,"file":"provider-configs.d.ts","sourceRoot":"","sources":["../../../src/sdk/provider-configs.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,eAAgB,SAAQ,SAAS;IAC5C;;;;;OAKG;IACG,aAAa,CACjB,OAAO,CAAC,EAAE,UAAU,CAAC,oBAAoB,GAAG,SAAS,EACrD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAQtC;;;;;OAKG;IACG,cAAc,CAClB,OAAO,EAAE,MAAM,CAAC,kBAAkB,EAClC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;IAQjC;;;;;OAKG;IACG,mBAAmB,CACvB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC;IAOlD;;;;;OAKG;IACG,WAAW,CACf,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;IAQjC;;;;;OAKG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,CAAC,qBAAqB,EACzC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;IAQjC;;;;;OAKG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,CAAC,qBAAqB,EACzC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;IAQlC;;;;;OAKG;IACG,gBAAgB,CACpB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC;IAO/C;;;;;OAKG;IACG,kBAAkB,CACtB,OAAO,EAAE,UAAU,CAAC,yBAAyB,EAC7C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC;IAQxC;;;;;OAKG;IACG,YAAY,CAChB,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC;CAOxC"}

package/dist/esm/sdk/provider-configs.js

@@ -6,6 +6,7 @@ import { providerConfigsDeleteProvider } from "../funcs/provider-configs-delete-
 import { providerConfigsGetModelsCatalog } from "../funcs/provider-configs-get-models-catalog.js";
 import { providerConfigsGetProvider } from "../funcs/provider-configs-get-provider.js";
 import { providerConfigsListAvailableModels } from "../funcs/provider-configs-list-available-models.js";
+import { providerConfigsListProviderModels } from "../funcs/provider-configs-list-provider-models.js";
 import { providerConfigsListProviders } from "../funcs/provider-configs-list-providers.js";
 import { providerConfigsTestProvider } from "../funcs/provider-configs-test-provider.js";
 import { providerConfigsUpdateProvider } from "../funcs/provider-configs-update-provider.js";
@@ -25,7 +26,7 @@ export class ProviderConfigs extends ClientSDK {
      * Create provider config
      *
      * @remarks
-     * Create a new provider configuration. API key is encrypted before storage and never returned in plain text.
+     * Create a new provider configuration. The credential is tested against the live provider BEFORE it is persisted — a failed test returns the provider's own error, scrubbed of the submitted secret, and writes no row. On success the API key is encrypted before storage and is never returned in plain text.
      */
     async createProvider(request, options) {
         return unwrapAsync(providerConfigsCreateProvider(this, request, options));
@@ -52,7 +53,7 @@ export class ProviderConfigs extends ClientSDK {
      * Update provider config
      *
      * @remarks
-     * Update an existing provider configuration. If API key is provided, it will be re-encrypted.
+     * Update an existing provider configuration. When the patch replaces the SECRET — the apiKey field, or the catalog-named secret inside credentialFields — the new credential is connection-tested BEFORE it is written, the same guarantee POST /providers makes on create. A failed test writes nothing: the existing configuration, including fields elsewhere in the same request, is left exactly as it was. Non-secret changes (baseUrl, hostedFamily, apiVersion, other credentialFields entries) are applied without a live probe.
      */
     async updateProvider(request, options) {
         return unwrapAsync(providerConfigsUpdateProvider(this, request, options));
@@ -70,11 +71,20 @@ export class ProviderConfigs extends ClientSDK {
      * Get models catalog
      *
      * @remarks
-     * Returns the union of static known models and declared provider models for a workspace. Used by the optimizer dropdown.
+     * Returns the union of static known models and declared provider models for a workspace.
      */
     async getModelsCatalog(options) {
         return unwrapAsync(providerConfigsGetModelsCatalog(this, options));
     }
+    /**
+     * List a provider configuration models
+     *
+     * @remarks
+     * The models this provider configuration offers, listed live from the provider and narrowed to the catalog's allow-list policy, with this workspace's per-model enablement applied. When the provider cannot be reached the stored allow-list is returned with `degraded: true` and the reason — an empty list is never presented as 'no models'. Responses are cached for 60s per (workspace, configuration) and the route is additionally rate-limited, since a cache miss decrypts a credential and calls the live provider.
+     */
+    async listProviderModels(request, options) {
+        return unwrapAsync(providerConfigsListProviderModels(this, request, options));
+    }
     /**
      * Test provider connection
      *

package/dist/esm/sdk/provider-configs.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-configs.js","sourceRoot":"","sources":["../../../src/sdk/provider-configs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,iDAAiD,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,kCAAkC,EAAE,MAAM,oDAAoD,CAAC;AACxG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,OAAO,eAAgB,SAAQ,SAAS;IAC5C;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,OAAqD,EACrD,OAAwB;QAExB,OAAO,WAAW,CAAC,4BAA4B,CAC7C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAClB,OAAkC,EAClC,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAwB;QAExB,OAAO,WAAW,CAAC,kCAAkC,CACnD,IAAI,EACJ,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CACf,OAAsC,EACtC,OAAwB;QAExB,OAAO,WAAW,CAAC,0BAA0B,CAC3C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAClB,OAAyC,EACzC,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAClB,OAAyC,EACzC,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAwB;QAExB,OAAO,WAAW,CAAC,+BAA+B,CAChD,IAAI,EACJ,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,OAAuC,EACvC,OAAwB;QAExB,OAAO,WAAW,CAAC,2BAA2B,CAC5C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"provider-configs.js","sourceRoot":"","sources":["../../../src/sdk/provider-configs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,iDAAiD,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,kCAAkC,EAAE,MAAM,oDAAoD,CAAC;AACxG,OAAO,EAAE,iCAAiC,EAAE,MAAM,mDAAmD,CAAC;AACtG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,OAAO,eAAgB,SAAQ,SAAS;IAC5C;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,OAAqD,EACrD,OAAwB;QAExB,OAAO,WAAW,CAAC,4BAA4B,CAC7C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAClB,OAAkC,EAClC,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAwB;QAExB,OAAO,WAAW,CAAC,kCAAkC,CACnD,IAAI,EACJ,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CACf,OAAsC,EACtC,OAAwB;QAExB,OAAO,WAAW,CAAC,0BAA0B,CAC3C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAClB,OAAyC,EACzC,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAClB,OAAyC,EACzC,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAwB;QAExB,OAAO,WAAW,CAAC,+BAA+B,CAChD,IAAI,EACJ,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAA6C,EAC7C,OAAwB;QAExB,OAAO,WAAW,CAAC,iCAAiC,CAClD,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,OAAuC,EACvC,OAAwB;QAExB,OAAO,WAAW,CAAC,2BAA2B,CAC5C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/esm/sdk/sandbox.d.ts

@@ -0,0 +1,196 @@
+import { ClientSDK, RequestOptions } from "../lib/sdks.js";
+import * as models from "../models/index.js";
+import * as operations from "../models/operations/index.js";
+export declare class Sandbox extends ClientSDK {
+    /**
+     * List sandbox providers
+     *
+     * @remarks
+     * Providers this backend can reach and which is the default. A CLI that has no provider configured uses the default.
+     */
+    getApiSandboxProviders(options?: RequestOptions): Promise<operations.GetApiSandboxProvidersResponse>;
+    /**
+     * Preflight a sandbox definition
+     *
+     * @remarks
+     * Validate a definition against a provider without creating anything. Returns every violation, not just the first.
+     */
+    postApiSandboxPreflight(request: models.DefinitionProvider, options?: RequestOptions): Promise<operations.PostApiSandboxPreflightResponse>;
+    /**
+     * List sandbox presets
+     *
+     * @remarks
+     * Named definitions a one-shot run can name. A preset is what lets a caller run something without knowing our registry, region or image tag. Image references are deliberately not returned.
+     */
+    getApiSandboxPresets(options?: RequestOptions): Promise<operations.GetApiSandboxPresetsResponse>;
+    /**
+     * Run one command in a fresh sandbox
+     *
+     * @remarks
+     * Spawns from a preset, runs the command, tears the sandbox down. Requires an operator token — a one-shot run creates a sandbox. 200, not 201: the durable outcome is a result, and the sandbox it names is already gone unless `keep` was set. Blocking, and therefore bounded by the provider invocation timeout — long or interactive runs belong on POST /api/sandbox + /:id/exec.
+     */
+    postApiSandboxRun(request: models.PresetTimeoutMsKeep, options?: RequestOptions): Promise<operations.PostApiSandboxRunResponse>;
+    /**
+     * Spawn a sandbox
+     *
+     * @remarks
+     * Requires an operator token. A session or task token is rejected with 403.
+     */
+    postApiSandbox(request: models.DefinitionRunId, options?: RequestOptions): Promise<operations.PostApiSandboxResponse>;
+    /**
+     * List sandboxes
+     *
+     * @remarks
+     * Always tenant-scoped. There is no unscoped listing path.
+     */
+    getApiSandbox(options?: RequestOptions): Promise<Array<operations.GetApiSandboxResponse>>;
+    /**
+     * Get sandbox status
+     */
+    getApiSandboxById(request: operations.GetApiSandboxByIdRequest, options?: RequestOptions): Promise<operations.GetApiSandboxByIdResponse>;
+    /**
+     * Tear down a sandbox
+     *
+     * @remarks
+     * Idempotent. The record is forgotten even if the provider teardown fails.
+     */
+    deleteApiSandboxById(request: operations.DeleteApiSandboxByIdRequest, options?: RequestOptions): Promise<operations.DeleteApiSandboxByIdResponse>;
+    /**
+     * Watch a sandbox's output live
+     *
+     * @remarks
+     * Server-sent events: `stdout`, `stderr`, `rpc`, `unrecognised`, `session`, `live`, `status`, `ping` (every 15s), `error`. `rpc` carries one complete NDJSON frame from a Helix session running in RPC mode, verbatim — parse it client-side. `unrecognised` carries a line the backend could not classify; receiving one means this server and the sandbox image disagree about the protocol, and it is forwarded rather than dropped so that drift is visible instead of silent. Those four output events share the `{seq, ts, text}` shape and one sequence counter, so their interleaving is the order the box produced them. `session` shares that counter too but carries flat fields instead of `text` — `{sessionId, status: "started"|"exited", exitCode, lastSeq, generation}` — and is how a client learns a Helix session began or ended; it is persisted and replayed like any output event, and `exitCode` is the session's real code (the terminal `status` event describes the SANDBOX and reports null by contract). `live` is emitted at most once, before the opening `status`, and only when this instance cannot follow the sandbox: it replays the log and ends rather than tailing. `seq` is monotonic per sandbox and starts at 1, and every seq-bearing event also carries it as the SSE `id:` field; pass the last one seen as `?since=` to resume. A resume is served from the persisted event log first and the live buffer only for the tail, so it survives a restart and can be answered by an instance that never spawned the box. If the requested range has been TRIMMED from that log, an `error` event names the lost range rather than skipping it silently — it carries `code: 'gap'` with the inclusive `from`/`to` wire seqs, and the stream continues past the gap; a source failure instead carries `code: 'upstream'` and is the end of the stream. Branch on `code`, never on `message`. Disconnecting tears down the upstream.
+     */
+    getApiSandboxByIdStream(request: operations.GetApiSandboxByIdStreamRequest, options?: RequestOptions): Promise<operations.GetApiSandboxByIdStreamResponse>;
+    /**
+     * Run a command in a sandbox
+     *
+     * @remarks
+     * Returns the command's real exit code. A task token is rejected — in-sandbox code reports on itself, it does not drive the box. With `?stream=1` the same result comes back as the event stream of `GET /:id/stream`, scoped to this one invocation and terminated by a `status` event carrying the exit code.
+     */
+    postApiSandboxByIdExec(request: operations.PostApiSandboxByIdExecRequest, options?: RequestOptions): Promise<operations.PostApiSandboxByIdExecResponse>;
+    /**
+     * Ingest OTLP spans from inside a sandbox
+     *
+     * @remarks
+     * OTLP/HTTP JSON. Requires a task token; spans are attributed to the sandbox the token is bound to, never to the sandbox named in the payload.
+     */
+    postApiSandboxTelemetryV1Traces(options?: RequestOptions): Promise<operations.PostApiSandboxTelemetryV1TracesResponse>;
+    /**
+     * Read a sandbox's captured spans
+     */
+    getApiSandboxByIdTraces(request: operations.GetApiSandboxByIdTracesRequest, options?: RequestOptions): Promise<operations.GetApiSandboxByIdTracesResponse>;
+    /**
+     * List workspace Environments
+     *
+     * @remarks
+     * Every Environment in the token's workspace: its name, the names of its variables and secrets with a `sha256(value)[:8]` fingerprint each, and timestamps. No value is ever returned — compare fingerprints to tell whether what you hold is what is stored. Environments carry the variables and secrets an agent's TOOLS need; LLM provider credentials are `/api/providers`, a different thing. 503 when the deployment has not migrated the table.
+     */
+    getApiSandboxEnvironments(options?: RequestOptions): Promise<operations.GetApiSandboxEnvironmentsResponse>;
+    /**
+     * Describe one workspace Environment
+     *
+     * @remarks
+     * Names and fingerprints only — the same shape as one entry of the list. 404 for a name this workspace does not have, including one another workspace does.
+     */
+    getApiSandboxEnvironmentsByName(request: operations.GetApiSandboxEnvironmentsByNameRequest, options?: RequestOptions): Promise<models.NameVarsSecrets>;
+    /**
+     * Create or replace a workspace Environment
+     *
+     * @remarks
+     * The whole Environment. Entries the body omits are REMOVED, secrets included. Values are accepted here and never returned by any route; secrets are encrypted at rest with the same key as provider credentials. Names: Environment `^[A-Za-z0-9._-]{1,64}$`, variables `^[A-Z_][A-Z0-9_]*$`, 64 KiB per Environment. 409 for a variable named like a harness provider key unless `?allowProviderKey=1`.
+     */
+    putApiSandboxEnvironmentsByName(request: operations.PutApiSandboxEnvironmentsByNameRequest, options?: RequestOptions): Promise<models.NameVarsSecrets>;
+    /**
+     * Set or unset entries of a workspace Environment
+     *
+     * @remarks
+     * Merges into the existing Environment: a string value sets the entry, `null` unsets it, entries not mentioned stay. Creates the Environment when it does not exist yet, so `mutagent env set` is one step. Same rules and the same 409 as PUT.
+     */
+    patchApiSandboxEnvironmentsByName(request: operations.PatchApiSandboxEnvironmentsByNameRequest, options?: RequestOptions): Promise<models.NameVarsSecrets>;
+    /**
+     * Delete a workspace Environment
+     *
+     * @remarks
+     * Removes the Environment and its encrypted secrets. Boxes already running keep what they were handed; the next spawn naming this Environment answers 404. 404 when there is nothing to delete — a retried delete is not a success.
+     */
+    deleteApiSandboxEnvironmentsByName(request: operations.DeleteApiSandboxEnvironmentsByNameRequest, options?: RequestOptions): Promise<operations.DeleteApiSandboxEnvironmentsByNameResponse>;
+    /**
+     * Start a Helix session in a sandbox
+     *
+     * @remarks
+     * Returns as soon as the session is running — the run continues in the background and its output arrives on `GET /:id/stream`, not in this response. With `mode: "rpc"` the session is duplex: it emits `rpc` events on the stream and accepts `POST /:id/input`. `mode` defaults to `oneshot`, which is the pre-existing behaviour and has no stdin. A task token is rejected: starting an agent is driving the box.
+     */
+    postApiSandboxByIdSession(request: operations.PostApiSandboxByIdSessionRequest, options?: RequestOptions): Promise<operations.PostApiSandboxByIdSessionResponse>;
+    /**
+     * List the workspace's Helix Cloud models and its default
+     *
+     * @remarks
+     * The platform model catalog restricted to the workspace’s active LLM providers, each as `provider/model` in the harness spelling, plus the stored ordered defaults and the one a run naming no model would use now. Providers the box cannot credential are named in `unmapped`. `sandbox:read`.
+     */
+    getApiSandboxHelixDefaults(options?: RequestOptions): Promise<operations.GetApiSandboxHelixDefaultsResponse>;
+    /**
+     * Set the workspace's default Helix Cloud models
+     *
+     * @remarks
+     * Replaces the ordered list; the first entry becomes the default for session starts and agent runs that name no model. Every entry must be in the workspace’s list (422 names the list). `[]` clears the defaults, after which such runs answer 428 NO_PROVIDER_CONFIGURED. Operator tokens only. 409 `HELIX_DEFAULTS_UNAVAILABLE` when this server has no Helix Cloud model source configured.
+     */
+    putApiSandboxHelixDefaults(request: operations.PutApiSandboxHelixDefaultsRequest, options?: RequestOptions): Promise<operations.PutApiSandboxHelixDefaultsResponse>;
+    /**
+     * List the Helix sessions a sandbox is hosting
+     *
+     * @remarks
+     * Ids only — attach to one for detail. `sandbox:read`, unlike the other two session routes: asking which sessions exist is not driving the box.
+     */
+    getApiSandboxByIdSessions(request: operations.GetApiSandboxByIdSessionsRequest, options?: RequestOptions): Promise<operations.GetApiSandboxByIdSessionsResponse>;
+    /**
+     * Write one line to a Helix session's stdin
+     *
+     * @remarks
+     * The write half of the duplex session channel — the read half is the `rpc` events on `GET /:id/stream`. Use it to answer a HITL request or send a follow-up turn to a session started in RPC mode. `line` must be exactly one JSON object with no newline in it: the channel is newline-delimited, so one call carries one command. A 200 means the line reached the session, nothing more — whether the agent accepted it comes back on the stream, asynchronously. 400 if the line is not a single JSON object, 409 if the session is not running.
+     */
+    postApiSandboxByIdInput(request: operations.PostApiSandboxByIdInputRequest, options?: RequestOptions): Promise<operations.PostApiSandboxByIdInputResponse>;
+    /**
+     * Stop a running Helix session without destroying its sandbox
+     *
+     * @remarks
+     * The remote equivalent of Ctrl-C on a local agent: the SESSION stops and the box — its filesystem, its other sessions, its event log — stays up. `DELETE /:id` remains the only thing that destroys a sandbox. Distinct from sending an `abort` command via `POST /:id/input`, which politely asks a cooperating agent to end its turn and only works while it is still reading stdin; a signal reaches a process that has stopped listening. 200 means the signal was delivered to a LIVE process, never merely that the request was well-formed. 409 if the session has already ended, 404 if the box has never heard of it.
+     */
+    postApiSandboxByIdSignal(request: operations.PostApiSandboxByIdSignalRequest, options?: RequestOptions): Promise<operations.PostApiSandboxByIdSignalResponse>;
+    /**
+     * Capture a Helix session's own transcript
+     *
+     * @remarks
+     * Copies the HARNESS's session file off the box, verbatim, and stores it. This is what a NEW box needs to CONTINUE the conversation — distinct from `GET /:id/stream?since=`, which replays what the client observed and restores no agent state at all. 409 when the session has not completed a turn: the harness writes its file lazily, so there is genuinely nothing to capture yet, and storing an empty snapshot would produce a restore that succeeds and restores nothing. 503 when the deployment has no snapshot store.
+     */
+    postApiSandboxByIdCheckpoint(request: operations.PostApiSandboxByIdCheckpointRequest, options?: RequestOptions): Promise<operations.PostApiSandboxByIdCheckpointResponse>;
+    /**
+     * List checkpoints captured from this sandbox
+     *
+     * @remarks
+     * Newest first, tenant-scoped, WITHOUT the stored bytes. `messageCount` is how much conversation each one holds.
+     */
+    getApiSandboxByIdCheckpoints(request: operations.GetApiSandboxByIdCheckpointsRequest, options?: RequestOptions): Promise<operations.GetApiSandboxByIdCheckpointsResponse>;
+    /**
+     * Rebuild this sandbox from a checkpoint, with full state
+     *
+     * @remarks
+     * A cloud equivalent of a local `/resume`, and it does NOT require the old box to still exist — a reaped or torn-down sandbox is the ordinary input. In order: a fresh box is spawned for the SAME sandbox id at generation+1 with the same secret NAMES (values are re-minted, never stored); the relay's seq counter is seeded from the persisted high-water mark so a client's `?since=` cursor stays valid; the workspace and `$HOME/.mutagent` are extracted BEFORE Helix starts; a session is started in the checkpoint's cwd; the conversation is written in, its sha256 compared against the box's own, and only then switched onto; the runtime settings and pending queue are replayed; and a `session {status:"restored"}` frame is appended to the stream with a real seq. A digest mismatch is a 422 and the session is NOT switched. 404 if the snapshot is not in this workspace. Read `notRestored` — a restore that carried only the conversation is legitimate and says so there. A DEFAULTED restore uses the newest checkpoint that has a manifest and lists newer rows it passed over in `skippedSnapshots`. `partial: true` restores the incremental transcript prefix beyond the checkpoint when one exists (the frame then carries `partial: true`); its tail may end on a tool call with no result, which the harness answers with a synthetic error on the next turn — the accepted risk of asking for it. ENVIRONMENT: `environment` and `env` layer onto the restored session exactly as on session start (provider keys, then the Environment, then per-call `env`, then platform-owned variables). The Environment a session was started with is recorded by NAME in the checkpoint manifest and re-resolved when `environment` is omitted; a name in the body wins, and an unknown one is a 404 before the old box is touched. Per-call `env` values are NEVER stored, so a restore that omits `env` does not bring them back — send a model key given as `env` again.
+     */
+    postApiSandboxByIdRestore(request: operations.PostApiSandboxByIdRestoreRequest, options?: RequestOptions): Promise<operations.PostApiSandboxByIdRestoreResponse>;
+    /**
+     * Run one agent turn in a fresh sandbox
+     *
+     * @remarks
+     * `prompt` is WHO the agent is (the agent definition) and `task` is WHAT to do this turn. They are two different prompts and are never concatenated. `prompt` may be omitted when `args` carries `--name <agent>` instead — the box's own helix then resolves the name against the image's bundled roster and its agent dirs; exactly one of the two is required (422 otherwise). The turn's output comes back on stdout with the agent's real exit code. With `?stream=1` the same turn is delivered as it happens, in the event framing of `GET /:id/stream`: a `sandbox` event naming the box, then `stdout`/`stderr` as the agent produces them, then a `result` event carrying the exit code and whether the sandbox was torn down, then the terminal `status`. Disconnecting mid-stream releases the sandbox.
+     */
+    postApiSandboxAgentRun(request: operations.PostApiSandboxAgentRunRequest, options?: RequestOptions): Promise<operations.PostApiSandboxAgentRunResponse>;
+    /**
+     * Exchange a platform API key for a sandbox operator token
+     *
+     * @remarks
+     * Trades a platform API key (`x-api-key: mg_live_…`) for a short-lived operator token scoped to one workspace. The caller must be able to create resources in that workspace.
+     */
+    postApiSandboxToken(request: operations.PostApiSandboxTokenRequest, options?: RequestOptions): Promise<operations.PostApiSandboxTokenResponse>;
+}
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/esm/sdk/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/sdk/sandbox.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACG,sBAAsB,CAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,8BAA8B,CAAC;IAOrD;;;;;OAKG;IACG,uBAAuB,CAC3B,OAAO,EAAE,MAAM,CAAC,kBAAkB,EAClC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,+BAA+B,CAAC;IAQtD;;;;;OAKG;IACG,oBAAoB,CACxB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,4BAA4B,CAAC;IAOnD;;;;;OAKG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,CAAC,mBAAmB,EACnC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC;IAQhD;;;;;OAKG;IACG,cAAc,CAClB,OAAO,EAAE,MAAM,CAAC,eAAe,EAC/B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC;IAQ7C;;;;;OAKG;IACG,aAAa,CACjB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAOnD;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,UAAU,CAAC,wBAAwB,EAC5C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC;IAQhD;;;;;OAKG;IACG,oBAAoB,CACxB,OAAO,EAAE,UAAU,CAAC,2BAA2B,EAC/C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,4BAA4B,CAAC;IAQnD;;;;;OAKG;IACG,uBAAuB,CAC3B,OAAO,EAAE,UAAU,CAAC,8BAA8B,EAClD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,+BAA+B,CAAC;IAQtD;;;;;OAKG;IACG,sBAAsB,CAC1B,OAAO,EAAE,UAAU,CAAC,6BAA6B,EACjD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,8BAA8B,CAAC;IAQrD;;;;;OAKG;IACG,+BAA+B,CACnC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,uCAAuC,CAAC;IAO9D;;OAEG;IACG,uBAAuB,CAC3B,OAAO,EAAE,UAAU,CAAC,8BAA8B,EAClD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,+BAA+B,CAAC;IAQtD;;;;;OAKG;IACG,yBAAyB,CAC7B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,iCAAiC,CAAC;IAOxD;;;;;OAKG;IACG,+BAA+B,CACnC,OAAO,EAAE,UAAU,CAAC,sCAAsC,EAC1D,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;IAQlC;;;;;OAKG;IACG,+BAA+B,CACnC,OAAO,EAAE,UAAU,CAAC,sCAAsC,EAC1D,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;IAQlC;;;;;OAKG;IACG,iCAAiC,CACrC,OAAO,EAAE,UAAU,CAAC,wCAAwC,EAC5D,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;IAQlC;;;;;OAKG;IACG,kCAAkC,CACtC,OAAO,EAAE,UAAU,CAAC,yCAAyC,EAC7D,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,0CAA0C,CAAC;IAQjE;;;;;OAKG;IACG,yBAAyB,CAC7B,OAAO,EAAE,UAAU,CAAC,gCAAgC,EACpD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,iCAAiC,CAAC;IAQxD;;;;;OAKG;IACG,0BAA0B,CAC9B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,kCAAkC,CAAC;IAOzD;;;;;OAKG;IACG,0BAA0B,CAC9B,OAAO,EAAE,UAAU,CAAC,iCAAiC,EACrD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,kCAAkC,CAAC;IAQzD;;;;;OAKG;IACG,yBAAyB,CAC7B,OAAO,EAAE,UAAU,CAAC,gCAAgC,EACpD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,iCAAiC,CAAC;IAQxD;;;;;OAKG;IACG,uBAAuB,CAC3B,OAAO,EAAE,UAAU,CAAC,8BAA8B,EAClD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,+BAA+B,CAAC;IAQtD;;;;;OAKG;IACG,wBAAwB,CAC5B,OAAO,EAAE,UAAU,CAAC,+BAA+B,EACnD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,gCAAgC,CAAC;IAQvD;;;;;OAKG;IACG,4BAA4B,CAChC,OAAO,EAAE,UAAU,CAAC,mCAAmC,EACvD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oCAAoC,CAAC;IAQ3D;;;;;OAKG;IACG,4BAA4B,CAChC,OAAO,EAAE,UAAU,CAAC,mCAAmC,EACvD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oCAAoC,CAAC;IAQ3D;;;;;OAKG;IACG,yBAAyB,CAC7B,OAAO,EAAE,UAAU,CAAC,gCAAgC,EACpD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,iCAAiC,CAAC;IAQxD;;;;;OAKG;IACG,sBAAsB,CAC1B,OAAO,EAAE,UAAU,CAAC,6BAA6B,EACjD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,8BAA8B,CAAC;IAQrD;;;;;OAKG;IACG,mBAAmB,CACvB,OAAO,EAAE,UAAU,CAAC,0BAA0B,EAC9C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC;CAOnD"}