@synsci/sdk 2.0.2-test.42.1 → 2.0.2-test.43.1

package/dist/src/v2/gen/sdk.gen.d.ts

@@ -1,5 +1,5 @@
 import { type Client, type Options as Options2, type TDataShape } from "./client/index.js";
-import type { AccountBalanceResponses, AccountBillingModeGetResponses, AccountBillingModeSetResponses, AccountDeviceRevokeResponses, AccountDevicesResponses, AccountGetResponses, AccountLoginKeyResponses, AccountLogoutResponses, AccountSessionResponses, AgentPartInput, AppAgentsResponses, AppLogErrors, AppLogResponses, AppSkillDeleteResponses, AppSkillsResponses, AppSkillWriteResponses, Auth as Auth3, AuthRemoveErrors, AuthRemoveResponses, AuthSetErrors, AuthSetResponses, CommandListResponses, Config as Config4, ConfigGetResponses, ConfigProvidersResponses, ConfigUpdateErrors, ConfigUpdateResponses, EventSubscribeResponses, ExperimentalResourceListResponses, FileAnnotationsCreateResponses, FileAnnotationsDeleteResponses, FileAnnotationsHistoryResponses, FileAnnotationsListResponses, FileAnnotationsUpdateResponses, FileArtifactSaveErrors, FileArtifactSaveResponses, FileArtifactsResponses, FileInspectResponses, FileLineageResponses, FileListResponses, FileManifestResponses, FilePartInput, FilePartSource, FileProvenanceResponses, FilePublicationCapabilitiesResponses, FilePublicationResponses, FileRawResponses, FileReadResponses, FileReproducibilityResponses, FileReviewsCurrentErrors, FileReviewsCurrentResponses, FileReviewsFinalizeErrors, FileReviewsFinalizeResponses, FileReviewsHistoryResponses, FileReviewsResolveErrors, FileReviewsResolveResponses, FileReviewsRunResponses, FileStarterResponses, FileStatusResponses, FileWriteResponses, FindFilesResponses, FindSymbolsResponses, FindTextResponses, FormatterStatusResponses, GlobalConfigGetResponses, GlobalConfigRawGetResponses, GlobalConfigRawSetErrors, GlobalConfigRawSetResponses, GlobalConfigUnsetErrors, GlobalConfigUnsetResponses, GlobalConfigUpdateErrors, GlobalConfigUpdateResponses, GlobalDisposeResponses, GlobalEventResponses, GlobalHealthResponses, GlobalProjectCreateErrors, GlobalProjectCreateResponses, GlobalSyncResponses, InstanceDisposeResponses, LspStatusResponses, McpAddErrors, McpAddResponses, McpAuthAuthenticateErrors, McpAuthAuthenticateResponses, McpAuthCallbackErrors, McpAuthCallbackResponses, McpAuthRemoveErrors, McpAuthRemoveResponses, McpAuthStartErrors, McpAuthStartResponses, McpConfigRemoveErrors, McpConfigRemoveResponses, McpConfigSetErrors, McpConfigSetResponses, McpConnectResponses, McpDisconnectResponses, McpLocalConfig, McpRemoteConfig, McpStatusResponses, NotebookExecuteResponses, NotebookInterruptResponses, NotebookKernelDeleteResponses, NotebookKernelInterruptResponses, NotebookKernelRestartResponses, NotebookKernelsResponses, NotebookKernelStopResponses, NotebookRestartResponses, NotebookStatusResponses, NotebookStopResponses, Part as Part2, PartDeleteErrors, PartDeleteResponses, PartUpdateErrors, PartUpdateResponses, PathGetResponses, PermissionListResponses, PermissionReplyErrors, PermissionReplyResponses, PermissionRespondErrors, PermissionRespondResponses, PermissionRuleset, PermissionStandingListResponses, PermissionStandingRevokeResponses, PostSettingsLocalModelsResponses, PostSettingsLocalResponses, PostSettingsLocalStartResponses, ProjectCurrentResponses, ProjectListResponses, ProjectTrustGetErrors, ProjectTrustGetResponses, ProjectTrustUpdateErrors, ProjectTrustUpdateResponses, ProjectUpdateErrors, ProjectUpdateResponses, ProvenanceExportResponses, ProvenanceListResponses, ProvenanceRecordErrors, ProvenanceRecordResponses, ProvenanceReviewErrors, ProvenanceReviewResponses, ProvenanceReviewsListResponses, ProvenanceReviewsResolveErrors, ProvenanceReviewsResolveResponses, ProvenanceTraceErrors, ProvenanceTraceResponses, ProviderAuthResponses, ProviderListResponses, ProviderOauthAuthorizeErrors, ProviderOauthAuthorizeResponses, ProviderOauthCallbackErrors, ProviderOauthCallbackResponses, PtyConnectErrors, PtyConnectResponses, PtyCreateErrors, PtyCreateResponses, PtyGetErrors, PtyGetResponses, PtyListResponses, PtyRemoveErrors, PtyRemoveResponses, PtyUpdateErrors, PtyUpdateResponses, PutSettingsSandboxResponses, QuestionAnswer, QuestionListResponses, QuestionRejectErrors, QuestionRejectResponses, QuestionReplyErrors, QuestionReplyResponses, SearchQueryResponses, SessionAbortErrors, SessionAbortResponses, SessionChildrenErrors, SessionChildrenResponses, SessionCommandErrors, SessionCommandResponses, SessionCreateErrors, SessionCreateResponses, SessionDeleteErrors, SessionDeleteResponses, SessionDiffResponses, SessionFilesystemGrantErrors, SessionFilesystemGrantResponses, SessionFilesystemListErrors, SessionFilesystemListResponses, SessionFilesystemRevokeErrors, SessionFilesystemRevokeResponses, SessionForkResponses, SessionGetErrors, SessionGetResponses, SessionInitErrors, SessionInitResponses, SessionListResponses, SessionMessageErrors, SessionMessageResponses, SessionMessagesErrors, SessionMessagesResponses, SessionPromptAsyncErrors, SessionPromptAsyncResponses, SessionPromptErrors, SessionPromptResponses, SessionRevertErrors, SessionRevertResponses, SessionReviewErrors, SessionReviewResponses, SessionShellErrors, SessionShellResponses, SessionStatusErrors, SessionStatusResponses, SessionSummarizeErrors, SessionSummarizeResponses, SessionTodoErrors, SessionTodoResponses, SessionUnrevertErrors, SessionUnrevertResponses, SessionUpdateErrors, SessionUpdateResponses, SettingsBillingGetResponses, SettingsBillingUpdateResponses, SettingsComputeGetResponses, SettingsComputeJobsCancelErrors, SettingsComputeJobsCancelResponses, SettingsComputeJobsClearResponses, SettingsComputeJobsListResponses, SettingsComputeJobsLogErrors, SettingsComputeJobsLogResponses, SettingsComputeJobsStartErrors, SettingsComputeJobsStartResponses, SettingsComputeProviderConnectErrors, SettingsComputeProviderConnectResponses, SettingsComputeProviderDisconnectResponses, SettingsComputeSshAddErrors, SettingsComputeSshAddResponses, SettingsComputeSshRemoveResponses, SettingsComputeSshTestErrors, SettingsComputeSshTestResponses, SettingsCredentialsListResponses, SettingsCredentialsRemoveResponses, SettingsCredentialsSetResponses, SettingsMemoryGetResponses, SettingsMemorySearchResponses, SettingsMemorySetResponses, SettingsNetworkGetResponses, SettingsNetworkSetResponses, SettingsPreferencesGetResponses, SettingsPreferencesUpdateResponses, SettingsReviewGetResponses, SettingsReviewSetResponses, SettingsSkillsInstallErrors, SettingsSkillsInstallResponses, SettingsStorageRelocateResponses, SettingsStorageResetLocationResponses, SettingsStorageUsageResponses, SettingsUsageGetResponses, SettingsWalletGetResponses, SubtaskPartInput, TextPartInput, ToolIdsErrors, ToolIdsResponses, ToolListErrors, ToolListResponses, VcsGetResponses, WorktreeCreateErrors, WorktreeCreateInput, WorktreeCreateResponses, WorktreeListResponses, WorktreeRemoveErrors, WorktreeRemoveInput, WorktreeRemoveResponses, WorktreeResetErrors, WorktreeResetInput, WorktreeResetResponses } from "./types.gen.js";
+import type { AccountBalanceResponses, AccountBillingModeGetResponses, AccountBillingModeSetResponses, AccountDeviceRevokeResponses, AccountDevicesResponses, AccountGetResponses, AccountLoginKeyResponses, AccountLogoutResponses, AccountSessionResponses, AgentPartInput, AppAgentsResponses, AppLogErrors, AppLogResponses, AppSkillDeleteResponses, AppSkillsResponses, AppSkillWriteResponses, Auth as Auth3, AuthRemoveErrors, AuthRemoveResponses, AuthSetErrors, AuthSetResponses, CommandListResponses, Config as Config4, ConfigGetResponses, ConfigProvidersResponses, ConfigUpdateErrors, ConfigUpdateResponses, EventSubscribeResponses, ExperimentalResourceListResponses, FileAnnotationsCreateResponses, FileAnnotationsDeleteResponses, FileAnnotationsHistoryResponses, FileAnnotationsListResponses, FileAnnotationsUpdateResponses, FileArtifactSaveErrors, FileArtifactSaveResponses, FileArtifactsResponses, FileInspectResponses, FileLineageResponses, FileListResponses, FileManifestResponses, FilePartInput, FilePartSource, FileProvenanceResponses, FilePublicationCapabilitiesResponses, FilePublicationResponses, FileRawResponses, FileReadResponses, FileReproducibilityResponses, FileReviewsCurrentErrors, FileReviewsCurrentResponses, FileReviewsFinalizeErrors, FileReviewsFinalizeResponses, FileReviewsHistoryResponses, FileReviewsResolveErrors, FileReviewsResolveResponses, FileReviewsRunResponses, FileStarterResponses, FileStatusResponses, FileWriteResponses, FindFilesResponses, FindSymbolsResponses, FindTextResponses, FormatterStatusResponses, GlobalConfigGetResponses, GlobalConfigRawGetResponses, GlobalConfigRawSetErrors, GlobalConfigRawSetResponses, GlobalConfigUnsetErrors, GlobalConfigUnsetResponses, GlobalConfigUpdateErrors, GlobalConfigUpdateResponses, GlobalDisposeResponses, GlobalEventResponses, GlobalHealthResponses, GlobalProjectCreateErrors, GlobalProjectCreateResponses, GlobalSyncResponses, InstanceDisposeResponses, LspStatusResponses, McpAddErrors, McpAddResponses, McpAuthAuthenticateErrors, McpAuthAuthenticateResponses, McpAuthCallbackErrors, McpAuthCallbackResponses, McpAuthRemoveErrors, McpAuthRemoveResponses, McpAuthStartErrors, McpAuthStartResponses, McpConfigRemoveErrors, McpConfigRemoveResponses, McpConfigSetErrors, McpConfigSetResponses, McpConnectResponses, McpDisconnectResponses, McpLocalConfig, McpRemoteConfig, McpStatusResponses, NotebookExecuteResponses, NotebookInterruptResponses, NotebookKernelDeleteResponses, NotebookKernelInterruptResponses, NotebookKernelRestartResponses, NotebookKernelsResponses, NotebookKernelStopResponses, NotebookRestartResponses, NotebookStatusResponses, NotebookStopResponses, Part as Part2, PartDeleteErrors, PartDeleteResponses, PartUpdateErrors, PartUpdateResponses, PathGetResponses, PermissionListResponses, PermissionReplyErrors, PermissionReplyResponses, PermissionRespondErrors, PermissionRespondResponses, PermissionRuleset, PermissionStandingListResponses, PermissionStandingRevokeResponses, PostSettingsLocalModelsResponses, PostSettingsLocalResponses, PostSettingsLocalStartResponses, ProjectCurrentResponses, ProjectExecutionErrors, ProjectExecutionResponses, ProjectListResponses, ProjectTrustGetErrors, ProjectTrustGetResponses, ProjectTrustUpdateErrors, ProjectTrustUpdateResponses, ProjectUpdateErrors, ProjectUpdateResponses, ProvenanceExportResponses, ProvenanceListResponses, ProvenanceRecordErrors, ProvenanceRecordResponses, ProvenanceReviewErrors, ProvenanceReviewResponses, ProvenanceReviewsListResponses, ProvenanceReviewsResolveErrors, ProvenanceReviewsResolveResponses, ProvenanceTraceErrors, ProvenanceTraceResponses, ProviderAuthResponses, ProviderListResponses, ProviderOauthAuthorizeErrors, ProviderOauthAuthorizeResponses, ProviderOauthCallbackErrors, ProviderOauthCallbackResponses, PtyConnectErrors, PtyConnectResponses, PtyCreateErrors, PtyCreateResponses, PtyGetErrors, PtyGetResponses, PtyListResponses, PtyRemoveErrors, PtyRemoveResponses, PtyUpdateErrors, PtyUpdateResponses, PutSettingsSandboxResponses, QuestionAnswer, QuestionListResponses, QuestionRejectErrors, QuestionRejectResponses, QuestionReplyErrors, QuestionReplyResponses, SearchQueryResponses, SessionAbortErrors, SessionAbortResponses, SessionChildrenErrors, SessionChildrenResponses, SessionCommandErrors, SessionCommandResponses, SessionCreateErrors, SessionCreateResponses, SessionDeleteErrors, SessionDeleteResponses, SessionDiffResponses, SessionFilesystemGrantErrors, SessionFilesystemGrantResponses, SessionFilesystemListErrors, SessionFilesystemListResponses, SessionFilesystemRevokeErrors, SessionFilesystemRevokeResponses, SessionForkResponses, SessionGetErrors, SessionGetResponses, SessionInitErrors, SessionInitResponses, SessionListResponses, SessionMessageErrors, SessionMessageResponses, SessionMessagesErrors, SessionMessagesResponses, SessionPromptAsyncErrors, SessionPromptAsyncResponses, SessionPromptErrors, SessionPromptResponses, SessionRevertErrors, SessionRevertResponses, SessionReviewErrors, SessionReviewResponses, SessionShellErrors, SessionShellResponses, SessionStatusErrors, SessionStatusResponses, SessionSummarizeErrors, SessionSummarizeResponses, SessionTodoErrors, SessionTodoResponses, SessionUnrevertErrors, SessionUnrevertResponses, SessionUpdateErrors, SessionUpdateResponses, SettingsBillingGetResponses, SettingsBillingUpdateResponses, SettingsComputeGetResponses, SettingsComputeJobsCancelErrors, SettingsComputeJobsCancelResponses, SettingsComputeJobsClearResponses, SettingsComputeJobsListResponses, SettingsComputeJobsLogErrors, SettingsComputeJobsLogResponses, SettingsComputeJobsStartErrors, SettingsComputeJobsStartResponses, SettingsComputeProviderConnectErrors, SettingsComputeProviderConnectResponses, SettingsComputeProviderDisconnectResponses, SettingsComputeSshAddErrors, SettingsComputeSshAddResponses, SettingsComputeSshRemoveResponses, SettingsComputeSshTestErrors, SettingsComputeSshTestResponses, SettingsCredentialsListResponses, SettingsCredentialsRemoveResponses, SettingsCredentialsSetResponses, SettingsMemoryGetResponses, SettingsMemorySearchResponses, SettingsMemorySetResponses, SettingsNetworkGetResponses, SettingsNetworkSetResponses, SettingsPreferencesGetResponses, SettingsPreferencesUpdateResponses, SettingsReviewGetResponses, SettingsReviewSetResponses, SettingsSkillsInstallErrors, SettingsSkillsInstallResponses, SettingsStorageRelocateResponses, SettingsStorageResetLocationResponses, SettingsStorageUsageResponses, SettingsUsageGetResponses, SettingsWalletGetResponses, SubtaskPartInput, TextPartInput, ToolIdsErrors, ToolIdsResponses, ToolListErrors, ToolListResponses, VcsGetResponses, WorktreeCreateErrors, WorktreeCreateInput, WorktreeCreateResponses, WorktreeListResponses, WorktreeRemoveErrors, WorktreeRemoveInput, WorktreeRemoveResponses, WorktreeResetErrors, WorktreeResetInput, WorktreeResetResponses } from "./types.gen.js";
 export type Options<TData extends TDataShape = TDataShape, ThrowOnError extends boolean = boolean> = Options2<TData, ThrowOnError> & {
     /**
      * You can provide a client instance returned by `createClient()` instead of
@@ -281,6 +281,7 @@ export declare class Jobs extends HeyApiClient {
         container?: string;
         artifacts?: Array<string>;
         checkpoint?: string;
+        sessionID?: string;
     }, options?: Options<never, ThrowOnError>): import("./client/types.gen.js").RequestResult<SettingsComputeJobsStartResponses, SettingsComputeJobsStartErrors, ThrowOnError, "fields">;
     /**
      * Clear completed compute jobs
@@ -533,6 +534,17 @@ export declare class Project2 extends HeyApiClient {
     current<ThrowOnError extends boolean = false>(parameters?: {
         directory?: string;
     }, options?: Options<never, ThrowOnError>): import("./client/types.gen.js").RequestResult<ProjectCurrentResponses, unknown, ThrowOnError, "fields">;
+    /**
+     * Inspect session execution authority
+     *
+     * Return the trust, filesystem-grant, and sandbox revisions that would govern a session process without starting one.
+     */
+    execution<ThrowOnError extends boolean = false>(parameters: {
+        projectID: string;
+        directory?: string;
+        sessionID: string;
+        capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+    }, options?: Options<never, ThrowOnError>): import("./client/types.gen.js").RequestResult<ProjectExecutionResponses, ProjectExecutionErrors, ThrowOnError, "fields">;
     /**
      * Update project
      *
@@ -573,13 +585,8 @@ export declare class Pty extends HeyApiClient {
      */
     create<ThrowOnError extends boolean = false>(parameters?: {
         directory?: string;
-        command?: string;
-        args?: Array<string>;
-        cwd?: string;
+        sessionID?: string;
         title?: string;
-        env?: {
-            [key: string]: string;
-        };
     }, options?: Options<never, ThrowOnError>): import("./client/types.gen.js").RequestResult<PtyCreateResponses, PtyCreateErrors, ThrowOnError, "fields">;
     /**
      * Remove PTY session

package/dist/src/v2/gen/sdk.gen.js

@@ -498,6 +498,7 @@ export class Jobs extends HeyApiClient {
                     { in: "body", key: "container" },
                     { in: "body", key: "artifacts" },
                     { in: "body", key: "checkpoint" },
+                    { in: "body", key: "sessionID" },
                 ],
             },
         ]);
@@ -1005,6 +1006,28 @@ export class Project2 extends HeyApiClient {
             ...params,
         });
     }
+    /**
+     * Inspect session execution authority
+     *
+     * Return the trust, filesystem-grant, and sandbox revisions that would govern a session process without starting one.
+     */
+    execution(parameters, options) {
+        const params = buildClientParams([parameters], [
+            {
+                args: [
+                    { in: "path", key: "projectID" },
+                    { in: "query", key: "directory" },
+                    { in: "query", key: "sessionID" },
+                    { in: "query", key: "capability" },
+                ],
+            },
+        ]);
+        return (options?.client ?? this.client).get({
+            url: "/project/{projectID}/execution",
+            ...options,
+            ...params,
+        });
+    }
     /**
      * Update project
      *
@@ -1062,11 +1085,8 @@ export class Pty extends HeyApiClient {
             {
                 args: [
                     { in: "query", key: "directory" },
-                    { in: "body", key: "command" },
-                    { in: "body", key: "args" },
-                    { in: "body", key: "cwd" },
+                    { in: "body", key: "sessionID" },
                     { in: "body", key: "title" },
-                    { in: "body", key: "env" },
                 ],
             },
         ]);

package/dist/src/v2/gen/types.gen.d.ts

@@ -65,6 +65,34 @@ export type EventServerInstanceDisposed = {
         directory: string;
     };
 };
+export type EventProjectTrustChanged = {
+    type: "project.trust.changed";
+    properties: {
+        status: {
+            projectID: string;
+            root: string;
+            revision: number;
+            state: "trusted" | "untrusted" | "revoked";
+            source: "default" | "persisted";
+            canExecuteProjectCode: boolean;
+            time?: {
+                updated: number;
+                trusted?: number;
+                revoked?: number;
+            };
+            remediation?: {
+                code: "trust_project_required";
+                message: string;
+                method: "PUT";
+                path: string;
+                body: {
+                    trusted: true;
+                    root: string;
+                };
+            };
+        };
+    };
+};
 export type EventLspClientDiagnostics = {
     type: "lsp.client.diagnostics";
     properties: {
@@ -751,6 +779,40 @@ export type Pty = {
     command: string;
     args: Array<string>;
     cwd: string;
+    projectID: string;
+    sessionID: string;
+    authority: {
+        allowed: boolean;
+        reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+        capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+        mode: "read_only" | "sandboxed" | "host";
+        projectID: string;
+        sessionID: string;
+        trustRevision: number;
+        grantRevision: number;
+        generation: string;
+        workspace: string;
+        writable: Array<string>;
+        sandbox: {
+            enabled: boolean;
+            network: "allow" | "deny";
+            allowWrite: Array<string>;
+            onUnavailable: "warn" | "error" | "allow";
+            backend: "seatbelt" | "bubblewrap" | "none";
+            available: boolean;
+            enforced: boolean;
+        };
+        remediation?: {
+            code: "trust_project_required";
+            message: string;
+            method: "PUT";
+            path: string;
+            body: {
+                trusted: true;
+                root: string;
+            };
+        };
+    };
     status: "running" | "exited";
     pid: number;
 };
@@ -792,7 +854,7 @@ export type EventWorktreeFailed = {
         message: string;
     };
 };
-export type Event = EventServerConnected | EventGlobalDisposed | EventInstallationUpdated | EventInstallationUpdateAvailable | EventProjectUpdated | EventServerInstanceDisposed | EventLspClientDiagnostics | EventLspUpdated | EventFileWatcherUpdated | EventSessionFilesystemChanged | EventFileEdited | EventVcsBranchUpdated | EventMessageUpdated | EventMessageRemoved | EventMessagePartUpdated | EventMessagePartRemoved | EventPermissionAsked | EventPermissionReplied | EventSessionStatus | EventSessionIdle | EventQuestionAsked | EventQuestionReplied | EventQuestionRejected | EventSessionContext | EventSessionCompaction | EventSessionCompacted | EventTodoUpdated | EventMcpToolsChanged | EventMcpBrowserOpenFailed | EventCommandExecuted | EventSessionCreated | EventSessionUpdated | EventSessionDeleted | EventSessionDiff | EventSessionError | EventSkillUpdated | EventPtyCreated | EventPtyUpdated | EventPtyExited | EventPtyDeleted | EventWorktreeReady | EventWorktreeFailed;
+export type Event = EventServerConnected | EventGlobalDisposed | EventInstallationUpdated | EventInstallationUpdateAvailable | EventProjectUpdated | EventServerInstanceDisposed | EventProjectTrustChanged | EventLspClientDiagnostics | EventLspUpdated | EventFileWatcherUpdated | EventSessionFilesystemChanged | EventFileEdited | EventVcsBranchUpdated | EventMessageUpdated | EventMessageRemoved | EventMessagePartUpdated | EventMessagePartRemoved | EventPermissionAsked | EventPermissionReplied | EventSessionStatus | EventSessionIdle | EventQuestionAsked | EventQuestionReplied | EventQuestionRejected | EventSessionContext | EventSessionCompaction | EventSessionCompacted | EventTodoUpdated | EventMcpToolsChanged | EventMcpBrowserOpenFailed | EventCommandExecuted | EventSessionCreated | EventSessionUpdated | EventSessionDeleted | EventSessionDiff | EventSessionError | EventSkillUpdated | EventPtyCreated | EventPtyUpdated | EventPtyExited | EventPtyDeleted | EventWorktreeReady | EventWorktreeFailed;
 export type GlobalEvent = {
     directory: string;
     payload: Event;
@@ -1462,11 +1524,11 @@ export type LayoutConfig = "auto" | "stretch";
  */
 export type SandboxConfig = {
     /**
-     * Run the agent's shell commands inside an OS sandbox (macOS Seatbelt / Linux bubblewrap) that confines writes to the workspace. Off by default.
+     * Run local terminals, kernels, and shell commands inside an OS sandbox (macOS Seatbelt / Linux bubblewrap) that confines writes to authorized project roots. Enabled by default.
      */
     enabled?: boolean;
     /**
-     * Whether sandboxed commands may reach the network. Default: allow.
+     * Whether sandboxed commands may reach the network. Default: deny.
      */
     network?: "allow" | "deny";
     /**
@@ -1474,7 +1536,7 @@ export type SandboxConfig = {
      */
     allowWrite?: Array<string>;
     /**
-     * Behaviour when no sandbox backend exists on this platform: 'warn' (default) runs unsandboxed with a notice, 'error' refuses to run the command, 'allow' runs unsandboxed silently.
+     * Behaviour when no sandbox backend exists on this platform: 'error' (default) refuses to run, 'warn' runs unsandboxed with a notice, and 'allow' runs unsandboxed silently.
      */
     onUnavailable?: "warn" | "error" | "allow";
 };
@@ -3054,6 +3116,39 @@ export type SettingsComputeJobsListResponses = {
             };
         };
         capture_error?: string;
+        session_id?: string;
+        authority?: {
+            allowed: boolean;
+            reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+            capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+            mode: "read_only" | "sandboxed" | "host";
+            projectID: string;
+            sessionID: string;
+            trustRevision: number;
+            grantRevision: number;
+            generation: string;
+            workspace: string;
+            writable: Array<string>;
+            sandbox: {
+                enabled: boolean;
+                network: "allow" | "deny";
+                allowWrite: Array<string>;
+                onUnavailable: "warn" | "error" | "allow";
+                backend: "seatbelt" | "bubblewrap" | "none";
+                available: boolean;
+                enforced: boolean;
+            };
+            remediation?: {
+                code: "trust_project_required";
+                message: string;
+                method: "PUT";
+                path: string;
+                body: {
+                    trusted: true;
+                    root: string;
+                };
+            };
+        };
         scope?: {
             directory: string;
             key: string;
@@ -3090,6 +3185,7 @@ export type SettingsComputeJobsStartData = {
         container?: string;
         artifacts?: Array<string>;
         checkpoint?: string;
+        sessionID: string;
     };
     path?: never;
     query?: {
@@ -3389,6 +3485,39 @@ export type SettingsComputeJobsStartResponses = {
             };
         };
         capture_error?: string;
+        session_id?: string;
+        authority?: {
+            allowed: boolean;
+            reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+            capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+            mode: "read_only" | "sandboxed" | "host";
+            projectID: string;
+            sessionID: string;
+            trustRevision: number;
+            grantRevision: number;
+            generation: string;
+            workspace: string;
+            writable: Array<string>;
+            sandbox: {
+                enabled: boolean;
+                network: "allow" | "deny";
+                allowWrite: Array<string>;
+                onUnavailable: "warn" | "error" | "allow";
+                backend: "seatbelt" | "bubblewrap" | "none";
+                available: boolean;
+                enforced: boolean;
+            };
+            remediation?: {
+                code: "trust_project_required";
+                message: string;
+                method: "PUT";
+                path: string;
+                body: {
+                    trusted: true;
+                    root: string;
+                };
+            };
+        };
         scope?: {
             directory: string;
             key: string;
@@ -3748,6 +3877,39 @@ export type SettingsComputeJobsCancelResponses = {
             };
         };
         capture_error?: string;
+        session_id?: string;
+        authority?: {
+            allowed: boolean;
+            reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+            capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+            mode: "read_only" | "sandboxed" | "host";
+            projectID: string;
+            sessionID: string;
+            trustRevision: number;
+            grantRevision: number;
+            generation: string;
+            workspace: string;
+            writable: Array<string>;
+            sandbox: {
+                enabled: boolean;
+                network: "allow" | "deny";
+                allowWrite: Array<string>;
+                onUnavailable: "warn" | "error" | "allow";
+                backend: "seatbelt" | "bubblewrap" | "none";
+                available: boolean;
+                enforced: boolean;
+            };
+            remediation?: {
+                code: "trust_project_required";
+                message: string;
+                method: "PUT";
+                path: string;
+                body: {
+                    trusted: true;
+                    root: string;
+                };
+            };
+        };
         scope?: {
             directory: string;
             key: string;
@@ -4067,6 +4229,7 @@ export type ProjectTrustGetResponses = {
     200: {
         projectID: string;
         root: string;
+        revision: number;
         state: "trusted" | "untrusted" | "revoked";
         source: "default" | "persisted";
         canExecuteProjectCode: boolean;
@@ -4124,6 +4287,7 @@ export type ProjectTrustUpdateResponses = {
     200: {
         projectID: string;
         root: string;
+        revision: number;
         state: "trusted" | "untrusted" | "revoked";
         source: "default" | "persisted";
         canExecuteProjectCode: boolean;
@@ -4145,6 +4309,63 @@ export type ProjectTrustUpdateResponses = {
     };
 };
 export type ProjectTrustUpdateResponse = ProjectTrustUpdateResponses[keyof ProjectTrustUpdateResponses];
+export type ProjectExecutionData = {
+    body?: never;
+    path: {
+        projectID: string;
+    };
+    query: {
+        directory?: string;
+        sessionID: string;
+        capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+    };
+    url: "/project/{projectID}/execution";
+};
+export type ProjectExecutionErrors = {
+    /**
+     * Not found
+     */
+    404: NotFoundError;
+};
+export type ProjectExecutionError = ProjectExecutionErrors[keyof ProjectExecutionErrors];
+export type ProjectExecutionResponses = {
+    /**
+     * Effective process authority
+     */
+    200: {
+        allowed: boolean;
+        reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+        capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+        mode: "read_only" | "sandboxed" | "host";
+        projectID: string;
+        sessionID: string;
+        trustRevision: number;
+        grantRevision: number;
+        generation: string;
+        workspace: string;
+        writable: Array<string>;
+        sandbox: {
+            enabled: boolean;
+            network: "allow" | "deny";
+            allowWrite: Array<string>;
+            onUnavailable: "warn" | "error" | "allow";
+            backend: "seatbelt" | "bubblewrap" | "none";
+            available: boolean;
+            enforced: boolean;
+        };
+        remediation?: {
+            code: "trust_project_required";
+            message: string;
+            method: "PUT";
+            path: string;
+            body: {
+                trusted: true;
+                root: string;
+            };
+        };
+    };
+};
+export type ProjectExecutionResponse = ProjectExecutionResponses[keyof ProjectExecutionResponses];
 export type ProjectUpdateData = {
     body?: {
         name?: string;
@@ -4203,13 +4424,8 @@ export type PtyListResponses = {
 export type PtyListResponse = PtyListResponses[keyof PtyListResponses];
 export type PtyCreateData = {
     body?: {
-        command?: string;
-        args?: Array<string>;
-        cwd?: string;
+        sessionID: string;
         title?: string;
-        env?: {
-            [key: string]: string;
-        };
     };
     path?: never;
     query?: {
@@ -6993,6 +7209,38 @@ export type NotebookKernelsResponses = {
             process_identity_verified: boolean | null;
             started_at: number | null;
             last_activity_at: number | null;
+            authority: {
+                allowed: boolean;
+                reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+                capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+                mode: "read_only" | "sandboxed" | "host";
+                projectID: string;
+                sessionID: string;
+                trustRevision: number;
+                grantRevision: number;
+                generation: string;
+                workspace: string;
+                writable: Array<string>;
+                sandbox: {
+                    enabled: boolean;
+                    network: "allow" | "deny";
+                    allowWrite: Array<string>;
+                    onUnavailable: "warn" | "error" | "allow";
+                    backend: "seatbelt" | "bubblewrap" | "none";
+                    available: boolean;
+                    enforced: boolean;
+                };
+                remediation?: {
+                    code: "trust_project_required";
+                    message: string;
+                    method: "PUT";
+                    path: string;
+                    body: {
+                        trusted: true;
+                        root: string;
+                    };
+                };
+            } | null;
             resources?: {
                 cpu_percent?: number;
                 memory_bytes?: number;
@@ -7052,6 +7300,38 @@ export type NotebookKernelRestartResponses = {
         process_identity_verified: boolean | null;
         started_at: number | null;
         last_activity_at: number | null;
+        authority: {
+            allowed: boolean;
+            reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+            capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+            mode: "read_only" | "sandboxed" | "host";
+            projectID: string;
+            sessionID: string;
+            trustRevision: number;
+            grantRevision: number;
+            generation: string;
+            workspace: string;
+            writable: Array<string>;
+            sandbox: {
+                enabled: boolean;
+                network: "allow" | "deny";
+                allowWrite: Array<string>;
+                onUnavailable: "warn" | "error" | "allow";
+                backend: "seatbelt" | "bubblewrap" | "none";
+                available: boolean;
+                enforced: boolean;
+            };
+            remediation?: {
+                code: "trust_project_required";
+                message: string;
+                method: "PUT";
+                path: string;
+                body: {
+                    trusted: true;
+                    root: string;
+                };
+            };
+        } | null;
         resources?: {
             cpu_percent?: number;
             memory_bytes?: number;
@@ -7110,6 +7390,38 @@ export type NotebookKernelStopResponses = {
         process_identity_verified: boolean | null;
         started_at: number | null;
         last_activity_at: number | null;
+        authority: {
+            allowed: boolean;
+            reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+            capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+            mode: "read_only" | "sandboxed" | "host";
+            projectID: string;
+            sessionID: string;
+            trustRevision: number;
+            grantRevision: number;
+            generation: string;
+            workspace: string;
+            writable: Array<string>;
+            sandbox: {
+                enabled: boolean;
+                network: "allow" | "deny";
+                allowWrite: Array<string>;
+                onUnavailable: "warn" | "error" | "allow";
+                backend: "seatbelt" | "bubblewrap" | "none";
+                available: boolean;
+                enforced: boolean;
+            };
+            remediation?: {
+                code: "trust_project_required";
+                message: string;
+                method: "PUT";
+                path: string;
+                body: {
+                    trusted: true;
+                    root: string;
+                };
+            };
+        } | null;
         resources?: {
             cpu_percent?: number;
             memory_bytes?: number;
@@ -7168,6 +7480,38 @@ export type NotebookKernelInterruptResponses = {
         process_identity_verified: boolean | null;
         started_at: number | null;
         last_activity_at: number | null;
+        authority: {
+            allowed: boolean;
+            reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+            capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+            mode: "read_only" | "sandboxed" | "host";
+            projectID: string;
+            sessionID: string;
+            trustRevision: number;
+            grantRevision: number;
+            generation: string;
+            workspace: string;
+            writable: Array<string>;
+            sandbox: {
+                enabled: boolean;
+                network: "allow" | "deny";
+                allowWrite: Array<string>;
+                onUnavailable: "warn" | "error" | "allow";
+                backend: "seatbelt" | "bubblewrap" | "none";
+                available: boolean;
+                enforced: boolean;
+            };
+            remediation?: {
+                code: "trust_project_required";
+                message: string;
+                method: "PUT";
+                path: string;
+                body: {
+                    trusted: true;
+                    root: string;
+                };
+            };
+        } | null;
         resources?: {
             cpu_percent?: number;
             memory_bytes?: number;
@@ -7264,6 +7608,38 @@ export type NotebookStatusResponses = {
         process_identity_verified: boolean | null;
         started_at: number | null;
         last_activity_at: number | null;
+        authority: {
+            allowed: boolean;
+            reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+            capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+            mode: "read_only" | "sandboxed" | "host";
+            projectID: string;
+            sessionID: string;
+            trustRevision: number;
+            grantRevision: number;
+            generation: string;
+            workspace: string;
+            writable: Array<string>;
+            sandbox: {
+                enabled: boolean;
+                network: "allow" | "deny";
+                allowWrite: Array<string>;
+                onUnavailable: "warn" | "error" | "allow";
+                backend: "seatbelt" | "bubblewrap" | "none";
+                available: boolean;
+                enforced: boolean;
+            };
+            remediation?: {
+                code: "trust_project_required";
+                message: string;
+                method: "PUT";
+                path: string;
+                body: {
+                    trusted: true;
+                    root: string;
+                };
+            };
+        } | null;
         resources?: {
             cpu_percent?: number;
             memory_bytes?: number;
@@ -7322,6 +7698,38 @@ export type NotebookRestartResponses = {
         process_identity_verified: boolean | null;
         started_at: number | null;
         last_activity_at: number | null;
+        authority: {
+            allowed: boolean;
+            reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+            capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+            mode: "read_only" | "sandboxed" | "host";
+            projectID: string;
+            sessionID: string;
+            trustRevision: number;
+            grantRevision: number;
+            generation: string;
+            workspace: string;
+            writable: Array<string>;
+            sandbox: {
+                enabled: boolean;
+                network: "allow" | "deny";
+                allowWrite: Array<string>;
+                onUnavailable: "warn" | "error" | "allow";
+                backend: "seatbelt" | "bubblewrap" | "none";
+                available: boolean;
+                enforced: boolean;
+            };
+            remediation?: {
+                code: "trust_project_required";
+                message: string;
+                method: "PUT";
+                path: string;
+                body: {
+                    trusted: true;
+                    root: string;
+                };
+            };
+        } | null;
         resources?: {
             cpu_percent?: number;
             memory_bytes?: number;
@@ -7380,6 +7788,38 @@ export type NotebookStopResponses = {
         process_identity_verified: boolean | null;
         started_at: number | null;
         last_activity_at: number | null;
+        authority: {
+            allowed: boolean;
+            reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+            capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+            mode: "read_only" | "sandboxed" | "host";
+            projectID: string;
+            sessionID: string;
+            trustRevision: number;
+            grantRevision: number;
+            generation: string;
+            workspace: string;
+            writable: Array<string>;
+            sandbox: {
+                enabled: boolean;
+                network: "allow" | "deny";
+                allowWrite: Array<string>;
+                onUnavailable: "warn" | "error" | "allow";
+                backend: "seatbelt" | "bubblewrap" | "none";
+                available: boolean;
+                enforced: boolean;
+            };
+            remediation?: {
+                code: "trust_project_required";
+                message: string;
+                method: "PUT";
+                path: string;
+                body: {
+                    trusted: true;
+                    root: string;
+                };
+            };
+        } | null;
         resources?: {
             cpu_percent?: number;
             memory_bytes?: number;
@@ -7438,6 +7878,38 @@ export type NotebookInterruptResponses = {
         process_identity_verified: boolean | null;
         started_at: number | null;
         last_activity_at: number | null;
+        authority: {
+            allowed: boolean;
+            reason: "allowed" | "project_untrusted" | "sandbox_unavailable";
+            capability: "terminal" | "kernel" | "shell" | "local_job" | "remote_job" | "package_install" | "project_plugin" | "project_mcp" | "project_formatter" | "project_lsp" | "provider_token_command";
+            mode: "read_only" | "sandboxed" | "host";
+            projectID: string;
+            sessionID: string;
+            trustRevision: number;
+            grantRevision: number;
+            generation: string;
+            workspace: string;
+            writable: Array<string>;
+            sandbox: {
+                enabled: boolean;
+                network: "allow" | "deny";
+                allowWrite: Array<string>;
+                onUnavailable: "warn" | "error" | "allow";
+                backend: "seatbelt" | "bubblewrap" | "none";
+                available: boolean;
+                enforced: boolean;
+            };
+            remediation?: {
+                code: "trust_project_required";
+                message: string;
+                method: "PUT";
+                path: string;
+                body: {
+                    trusted: true;
+                    root: string;
+                };
+            };
+        } | null;
         resources?: {
             cpu_percent?: number;
             memory_bytes?: number;

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@synsci/sdk",
-  "version": "2.0.2-test.42.1",
+  "version": "2.0.2-test.43.1",
   "type": "module",
   "license": "Apache-2.0",
   "scripts": {