@boatdev/sdk 1.9.4 → 1.9.6

package/docs/BoatApi.md

@@ -15,10 +15,16 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**commandStatus**](BoatApi.md#commandstatus) | **GET** /sandboxes/{sandboxId}/commands/{processId} | Get detached command status and logs |
 | [**conversations**](BoatApi.md#conversations) | **GET** /sandboxes/{sandboxId}/conversations | List boat conversations |
 | [**create**](BoatApi.md#create) | **POST** /sandboxes | Create sandbox |
+| [**createCredentialProfile**](BoatApi.md#createcredentialprofileoperation) | **POST** /credential-profiles | Create a credential profile |
+| [**createDownloadUrl**](BoatApi.md#createdownloadurl) | **POST** /sandboxes/{sandboxId}/files/download-url | Get a download URL for a sandbox file |
 | [**createEnvironment**](BoatApi.md#createenvironment) | **POST** /environments | Create a sandbox environment |
 | [**createScopedApiKey**](BoatApi.md#createscopedapikeyoperation) | **POST** /api-keys/scoped | Create a scoped API key |
 | [**createSnapshotShare**](BoatApi.md#createsnapshotshare) | **POST** /named-snapshots/{name}/shares | Share a named snapshot |
+| [**createUploadUrl**](BoatApi.md#createuploadurl) | **POST** /sandboxes/{sandboxId}/files/upload-url | Get an upload URL for a sandbox file |
 | [**createWebhook**](BoatApi.md#createwebhook) | **POST** /webhooks | Create webhook |
+| [**deleteCredentialProfile**](BoatApi.md#deletecredentialprofile) | **DELETE** /credential-profiles/{profile} | Delete a credential profile |
+| [**deleteCredentialProfileCustomApi**](BoatApi.md#deletecredentialprofilecustomapi) | **DELETE** /credential-profiles/{profile}/custom-apis/{name} | Remove a custom API |
+| [**deleteCredentialProfileKey**](BoatApi.md#deletecredentialprofilekey) | **DELETE** /credential-profiles/{profile}/keys/{credential} | Remove a credential profile credential |
 | [**deleteEnvironment**](BoatApi.md#deleteenvironment) | **DELETE** /environments/{environmentId} | Delete a sandbox environment |
 | [**deleteEnvironmentRepo**](BoatApi.md#deleteenvironmentrepo) | **DELETE** /environments/{environmentId}/repos/{repositoryId} | Remove a repository from an environment |
 | [**deleteEnvironmentSecretFile**](BoatApi.md#deleteenvironmentsecretfile) | **DELETE** /environments/{environmentId}/secret-files | Remove one secret file |
@@ -34,11 +40,14 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**events**](BoatApi.md#events) | **GET** /sandboxes/{sandboxId}/events | List boat events |
 | [**fork**](BoatApi.md#forkoperation) | **POST** /sandboxes/{sandboxId}/fork | Fork sandbox |
 | [**get**](BoatApi.md#get) | **GET** /sandboxes/{sandboxId} | Get sandbox |
+| [**getAiProxy**](BoatApi.md#getaiproxy) | **GET** /ai-proxy | Get AI credentials proxy |
+| [**getAiUsage**](BoatApi.md#getaiusage) | **GET** /ai-usage | Get AI usage |
 | [**getCommand**](BoatApi.md#getcommand) | **GET** /sandboxes/{sandboxId}/command-history/{commandId} | Get one command from the history |
 | [**getDataRetention**](BoatApi.md#getdataretention) | **GET** /account/data-retention | Get account data-retention policy |
 | [**getDeletionOperation**](BoatApi.md#getdeletionoperation) | **GET** /deletion-operations/{operationId} | Get deletion operation |
 | [**getLatestSandboxSnapshot**](BoatApi.md#getlatestsandboxsnapshot) | **GET** /sandboxes/{sandboxId}/snapshots/latest | Get latest boat snapshot |
 | [**getNamedSnapshot**](BoatApi.md#getnamedsnapshot) | **GET** /named-snapshots/{name} | Get a named snapshot |
+| [**getSandboxAiUsage**](BoatApi.md#getsandboxaiusage) | **GET** /sandboxes/{sandboxId}/ai-usage | Get sandbox AI usage |
 | [**getSnapshotDownload**](BoatApi.md#getsnapshotdownload) | **GET** /snapshots/{snapshotId}/download | Get snapshot download |
 | [**getSnapshotFile**](BoatApi.md#getsnapshotfile) | **GET** /snapshots/{snapshotId}/files | Download a file or folder from a snapshot |
 | [**getSnapshotTree**](BoatApi.md#getsnapshottree) | **GET** /snapshots/{snapshotId}/tree | Get snapshot file tree |
@@ -48,6 +57,7 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**hostPort**](BoatApi.md#hostportoperation) | **POST** /sandboxes/{sandboxId}/host | Expose a sandbox port on a public HTTPS URL |
 | [**interrupt**](BoatApi.md#interrupt) | **POST** /sandboxes/{sandboxId}/interrupt | Interrupt running work |
 | [**limits**](BoatApi.md#limits) | **GET** /limits | Get Boat limits |
+| [**listCredentialProfiles**](BoatApi.md#listcredentialprofiles) | **GET** /credential-profiles | List credential profiles |
 | [**listNamedSnapshots**](BoatApi.md#listnamedsnapshots) | **GET** /named-snapshots | List named snapshots |
 | [**listOrganizations**](BoatApi.md#listorganizations) | **GET** /orgs | List organizations |
 | [**listSandboxSnapshots**](BoatApi.md#listsandboxsnapshots) | **GET** /sandboxes/{sandboxId}/snapshots | List boat snapshots |
@@ -71,8 +81,11 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**secrets**](BoatApi.md#secrets) | **GET** /secrets | Get Boat secrets setup |
 | [**selectRepo**](BoatApi.md#selectrepo) | **POST** /repos | Select repository for sandboxes |
 | [**setActiveOrganization**](BoatApi.md#setactiveorganization) | **PATCH** /orgs/active | Set the active organization |
+| [**setCredentialProfileCustomApi**](BoatApi.md#setcredentialprofilecustomapi) | **PUT** /credential-profiles/{profile}/custom-apis/{name} | Set a custom API |
+| [**setCredentialProfileKey**](BoatApi.md#setcredentialprofilekey) | **PUT** /credential-profiles/{profile}/keys/{credential} | Set a credential profile API key |
 | [**setEnvironmentSecretFile**](BoatApi.md#setenvironmentsecretfileoperation) | **PUT** /environments/{environmentId}/secret-files | Write one secret file |
 | [**setEnvironmentVar**](BoatApi.md#setenvironmentvaroperation) | **PUT** /environments/{environmentId}/vars/{key} | Set one environment variable |
+| [**setSandboxAiAccess**](BoatApi.md#setsandboxaiaccessoperation) | **PUT** /sandboxes/{sandboxId}/ai-access | Block or unblock sandbox AI access |
 | [**setTelemetry**](BoatApi.md#settelemetry) | **PUT** /telemetry | Set OpenTelemetry export |
 | [**share**](BoatApi.md#share) | **POST** /sandboxes/{sandboxId}/share | Share sandbox with the organization |
 | [**sshKey**](BoatApi.md#sshkeyoperation) | **POST** /sandboxes/{sandboxId}/sshkey | Configure sandbox SSH key |
@@ -80,6 +93,8 @@ All URIs are relative to *https://boat.dev/api/v1*
 | [**stop**](BoatApi.md#stopoperation) | **POST** /sandboxes/{sandboxId}/stop | Stop and archive sandbox |
 | [**stopCommand**](BoatApi.md#stopcommand) | **DELETE** /sandboxes/{sandboxId}/commands/{processId} | Stop a detached command |
 | [**update**](BoatApi.md#update) | **PATCH** /sandboxes/{sandboxId} | Update sandbox |
+| [**updateAiProxy**](BoatApi.md#updateaiproxyoperation) | **PUT** /ai-proxy | Turn the AI credentials proxy on or off |
+| [**updateCredentialProfile**](BoatApi.md#updatecredentialprofileoperation) | **PUT** /credential-profiles/{profile} | Update a credential profile |
 | [**updateDataRetention**](BoatApi.md#updatedataretention) | **PATCH** /account/data-retention | Update account data-retention policy |
 | [**updateEnvironment**](BoatApi.md#updateenvironment) | **PUT** /environments/{environmentId} | Update a sandbox environment |
 | [**updateSecrets**](BoatApi.md#updatesecrets) | **POST** /secrets | Update Boat secrets setup |
@@ -92,7 +107,7 @@ All URIs are relative to *https://boat.dev/api/v1*
 
 ## addEnvironmentRepo
 
-> EnvironmentItemChangeResponse addEnvironmentRepo(environmentId, addEnvironmentRepoRequest)
+> EnvironmentItemChangeResponse addEnvironmentRepo(environmentId, addEnvironmentRepoRequest, org)
 
 Add a repository to an environment
 
@@ -120,6 +135,8 @@ async function example() {
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
     // AddEnvironmentRepoRequest
     addEnvironmentRepoRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
   } satisfies AddEnvironmentRepoOperationRequest;
 
   try {
@@ -141,6 +158,7 @@ example().catch(console.error);
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` |  | [Defaults to `undefined`] |
 | **addEnvironmentRepoRequest** | [AddEnvironmentRepoRequest](AddEnvironmentRepoRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -905,7 +923,7 @@ async function example() {
   const body = {
     // string | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. (optional)
     idempotencyKey: idempotencyKey_example,
-    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. (optional)
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
     org: org_example,
     // string | Same as the `org` query parameter. Query wins when both are set. (optional)
     xBoatOrg: xBoatOrg_example,
@@ -931,7 +949,7 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **idempotencyKey** | `string` | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. | [Optional] [Defaults to `undefined`] |
-| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. | [Optional] [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 | **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
 | **createSandboxRequest** | [CreateSandboxRequest](CreateSandboxRequest.md) |  | [Optional] |
 
@@ -962,13 +980,13 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## createEnvironment
+## createCredentialProfile
 
-> SandboxEnvironmentListResponse createEnvironment(createSandboxEnvironmentRequest)
+> CredentialProfileResponse createCredentialProfile(createCredentialProfileRequest)
 
-Create a sandbox environment
+Create a credential profile
 
-Create a new named environment. It starts on version 1 with all fine-grained flags on and `safeForThirdParties` off.
+Creates an empty profile, or a copy of `copyFrom`. With `org`, the profile belongs to that organization and only its owners can create it. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -977,7 +995,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { CreateEnvironmentRequest } from '@boatdev/sdk';
+import type { CreateCredentialProfileOperationRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -988,12 +1006,12 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // CreateSandboxEnvironmentRequest
-    createSandboxEnvironmentRequest: ...,
-  } satisfies CreateEnvironmentRequest;
+    // CreateCredentialProfileRequest
+    createCredentialProfileRequest: {"name":"work","copyFrom":"default"},
+  } satisfies CreateCredentialProfileOperationRequest;
 
   try {
-    const data = await api.createEnvironment(body);
+    const data = await api.createCredentialProfile(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1009,11 +1027,11 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **createSandboxEnvironmentRequest** | [CreateSandboxEnvironmentRequest](CreateSandboxEnvironmentRequest.md) |  | |
+| **createCredentialProfileRequest** | [CreateCredentialProfileRequest](CreateCredentialProfileRequest.md) |  | |
 
 ### Return type
 
-[**SandboxEnvironmentListResponse**](SandboxEnvironmentListResponse.md)
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
 
 ### Authorization
 
@@ -1028,21 +1046,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Environment created; full list returned. |  -  |
+| **201** | Profile created. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## createScopedApiKey
+## createDownloadUrl
 
-> ApiKeySecretResponse createScopedApiKey(createScopedApiKeyRequest)
+> FileUrlResponse createDownloadUrl(sandboxId, fileUrlRequest)
 
-Create a scoped API key
+Get a download URL for a sandbox file
 
-Creates a scoped, expiring API key. Requires a dashboard/CLI session or an admin-scoped token. The secret is returned once. This dedicated path returns a typed 503 until scoped credential creation is activated.
+Returns a short-lived URL that the sandbox serves itself. GET it to download the file as raw bytes, with no size limit and no Authorization header. The URL is bound to this path and expires after `ttlSeconds` (default 15 minutes, at most 1 hour). Needs `file.read`. Treat the URL as a secret until it expires.
 
 ### Example
 
@@ -1051,7 +1070,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { CreateScopedApiKeyOperationRequest } from '@boatdev/sdk';
+import type { CreateDownloadUrlRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1062,12 +1081,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // CreateScopedApiKeyRequest
-    createScopedApiKeyRequest: ...,
-  } satisfies CreateScopedApiKeyOperationRequest;
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // FileUrlRequest
+    fileUrlRequest: ...,
+  } satisfies CreateDownloadUrlRequest;
 
   try {
-    const data = await api.createScopedApiKey(body);
+    const data = await api.createDownloadUrl(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1083,11 +1104,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **createScopedApiKeyRequest** | [CreateScopedApiKeyRequest](CreateScopedApiKeyRequest.md) |  | |
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **fileUrlRequest** | [FileUrlRequest](FileUrlRequest.md) |  | |
 
 ### Return type
 
-[**ApiKeySecretResponse**](ApiKeySecretResponse.md)
+[**FileUrlResponse**](FileUrlResponse.md)
 
 ### Authorization
 
@@ -1102,22 +1124,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **201** | Created key metadata plus the one-time secret. |  -  |
+| **200** | Signed download URL. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **403** | Authenticated token is not allowed to perform this action. |  -  |
-| **503** | Scoped credential creation has not been activated yet. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## createSnapshotShare
+## createEnvironment
 
-> NamedSnapshotShareCreatedResponse createSnapshotShare(name)
+> SandboxEnvironmentListResponse createEnvironment(createSandboxEnvironmentRequest, org)
 
-Share a named snapshot
+Create a sandbox environment
 
-Make a secret code that lets any Boat account create a sandbox from this named snapshot (`boat snapshot share <name>` in the CLI). The response shows the code once; Boat stores only a hash. Re-saving the name changes what the code deploys. Removing the name removes its codes. Everything on the disk is shared, so do not keep secrets in files on it. Needs `snapshot.write`.
+Create a new named environment. It starts on version 1 with all fine-grained flags on and `safeForThirdParties` off.
 
 ### Example
 
@@ -1126,7 +1148,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { CreateSnapshotShareRequest } from '@boatdev/sdk';
+import type { CreateEnvironmentRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1137,12 +1159,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    name: name_example,
-  } satisfies CreateSnapshotShareRequest;
+    // CreateSandboxEnvironmentRequest
+    createSandboxEnvironmentRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies CreateEnvironmentRequest;
 
   try {
-    const data = await api.createSnapshotShare(body);
+    const data = await api.createEnvironment(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1158,11 +1182,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **name** | `string` |  | [Defaults to `undefined`] |
+| **createSandboxEnvironmentRequest** | [CreateSandboxEnvironmentRequest](CreateSandboxEnvironmentRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**NamedSnapshotShareCreatedResponse**](NamedSnapshotShareCreatedResponse.md)
+[**SandboxEnvironmentListResponse**](SandboxEnvironmentListResponse.md)
 
 ### Authorization
 
@@ -1170,27 +1195,28 @@ example().catch(console.error);
 
 ### HTTP request headers
 
-- **Content-Type**: Not defined
+- **Content-Type**: `application/json`
 - **Accept**: `application/json`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **201** | Code created. Store `shareCode` now; Boat does not show it again. |  -  |
+| **200** | Environment created; full list returned. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## createWebhook
+## createScopedApiKey
 
-> WebhookSecretResponse createWebhook(webhookCreateRequest)
+> ApiKeySecretResponse createScopedApiKey(createScopedApiKeyRequest)
 
-Create webhook
+Create a scoped API key
 
-Registers an account-wide endpoint for sandbox lifecycle events. The endpoint must use HTTPS on port 443 and resolve only to public addresses. Redirects are not followed during delivery.  The signing secret is returned only in this response. An account can register at most 10 unique endpoint URLs. 
+Creates a scoped, expiring API key. Requires a dashboard/CLI session or an admin-scoped token. The secret is returned once. This dedicated path returns a typed 503 until scoped credential creation is activated.
 
 ### Example
 
@@ -1199,7 +1225,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { CreateWebhookRequest } from '@boatdev/sdk';
+import type { CreateScopedApiKeyOperationRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1210,12 +1236,12 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // WebhookCreateRequest
-    webhookCreateRequest: {"name":"Production automation","url":"https://example.com/hooks/sandbox","events":["sandbox.ready","sandbox.error"]},
-  } satisfies CreateWebhookRequest;
+    // CreateScopedApiKeyRequest
+    createScopedApiKeyRequest: ...,
+  } satisfies CreateScopedApiKeyOperationRequest;
 
   try {
-    const data = await api.createWebhook(body);
+    const data = await api.createScopedApiKey(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1231,11 +1257,11 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **webhookCreateRequest** | [WebhookCreateRequest](WebhookCreateRequest.md) |  | |
+| **createScopedApiKeyRequest** | [CreateScopedApiKeyRequest](CreateScopedApiKeyRequest.md) |  | |
 
 ### Return type
 
-[**WebhookSecretResponse**](WebhookSecretResponse.md)
+[**ApiKeySecretResponse**](ApiKeySecretResponse.md)
 
 ### Authorization
 
@@ -1250,21 +1276,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **201** | Webhook created. Store the one-time signing secret now. |  -  |
+| **201** | Created key metadata plus the one-time secret. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **503** | Scoped credential creation has not been activated yet. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironment
+## createSnapshotShare
 
-> SandboxEnvironmentResponse deleteEnvironment(environmentId)
+> NamedSnapshotShareCreatedResponse createSnapshotShare(name)
 
-Delete a sandbox environment
+Share a named snapshot
 
-Soft-deletes an environment. The default environment cannot be deleted, and at least one environment is always kept.
+Make a secret code that lets any Boat account create a sandbox from this named snapshot (`boat snapshot share <name>` in the CLI). The response shows the code once; Boat stores only a hash. Re-saving the name changes what the code deploys. Removing the name removes its codes. Everything on the disk is shared, so do not keep secrets in files on it. Needs `snapshot.write`.
 
 ### Example
 
@@ -1273,7 +1300,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentRequest } from '@boatdev/sdk';
+import type { CreateSnapshotShareRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1284,12 +1311,12 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Environment id returned by `GET /environments`.
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-  } satisfies DeleteEnvironmentRequest;
+    // string
+    name: name_example,
+  } satisfies CreateSnapshotShareRequest;
 
   try {
-    const data = await api.deleteEnvironment(body);
+    const data = await api.createSnapshotShare(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1305,11 +1332,11 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` | Environment id returned by `GET /environments`. | [Defaults to `undefined`] |
+| **name** | `string` |  | [Defaults to `undefined`] |
 
 ### Return type
 
-[**SandboxEnvironmentResponse**](SandboxEnvironmentResponse.md)
+[**NamedSnapshotShareCreatedResponse**](NamedSnapshotShareCreatedResponse.md)
 
 ### Authorization
 
@@ -1324,21 +1351,20 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Environment soft-deleted. |  -  |
+| **201** | Code created. Store `shareCode` now; Boat does not show it again. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
 | **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironmentRepo
+## createUploadUrl
 
-> EnvironmentItemChangeResponse deleteEnvironmentRepo(environmentId, repositoryId)
+> FileUrlResponse createUploadUrl(sandboxId, fileUrlRequest)
 
-Remove a repository from an environment
+Get an upload URL for a sandbox file
 
-Removes one repository from the environment\'s selection. Mints a new immutable version.
+Returns a short-lived URL that the sandbox serves itself. PUT the file as the raw request body to write it, with no size limit and no Authorization header. Missing directories are created; an existing file is replaced only once the upload completes. The URL is bound to this path and expires after `ttlSeconds` (default 15 minutes, at most 1 hour). Needs `file.write`. Treat the URL as a secret until it expires.
 
 ### Example
 
@@ -1347,7 +1373,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentRepoRequest } from '@boatdev/sdk';
+import type { CreateUploadUrlRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1358,14 +1384,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // string | The repository `databaseId`.
-    repositoryId: repositoryId_example,
-  } satisfies DeleteEnvironmentRepoRequest;
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // FileUrlRequest
+    fileUrlRequest: ...,
+  } satisfies CreateUploadUrlRequest;
 
   try {
-    const data = await api.deleteEnvironmentRepo(body);
+    const data = await api.createUploadUrl(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1381,12 +1407,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **repositoryId** | `string` | The repository `databaseId`. | [Defaults to `undefined`] |
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **fileUrlRequest** | [FileUrlRequest](FileUrlRequest.md) |  | |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**FileUrlResponse**](FileUrlResponse.md)
 
 ### Authorization
 
@@ -1394,27 +1420,29 @@ example().catch(console.error);
 
 ### HTTP request headers
 
-- **Content-Type**: Not defined
+- **Content-Type**: `application/json`
 - **Accept**: `application/json`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **200** | Signed upload URL. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
 | **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironmentSecretFile
+## createWebhook
 
-> EnvironmentItemChangeResponse deleteEnvironmentSecretFile(path, environmentId)
+> WebhookSecretResponse createWebhook(webhookCreateRequest)
 
-Remove one secret file
+Create webhook
 
-Removes the secret file at `path`. Mints a new immutable version.
+Registers an account-wide endpoint for sandbox lifecycle events. The endpoint must use HTTPS on port 443 and resolve only to public addresses. Redirects are not followed during delivery.  The signing secret is returned only in this response. An account can register at most 10 unique endpoint URLs. 
 
 ### Example
 
@@ -1423,7 +1451,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentSecretFileRequest } from '@boatdev/sdk';
+import type { CreateWebhookRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1434,14 +1462,12 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    path: path_example,
-    // string
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-  } satisfies DeleteEnvironmentSecretFileRequest;
+    // WebhookCreateRequest
+    webhookCreateRequest: {"name":"Production automation","url":"https://example.com/hooks/sandbox","events":["sandbox.ready","sandbox.error"]},
+  } satisfies CreateWebhookRequest;
 
   try {
-    const data = await api.deleteEnvironmentSecretFile(body);
+    const data = await api.createWebhook(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1457,12 +1483,11 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **path** | `string` |  | [Defaults to `undefined`] |
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **webhookCreateRequest** | [WebhookCreateRequest](WebhookCreateRequest.md) |  | |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**WebhookSecretResponse**](WebhookSecretResponse.md)
 
 ### Authorization
 
@@ -1470,27 +1495,28 @@ example().catch(console.error);
 
 ### HTTP request headers
 
-- **Content-Type**: Not defined
+- **Content-Type**: `application/json`
 - **Accept**: `application/json`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **201** | Webhook created. Store the one-time signing secret now. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteEnvironmentVar
+## deleteCredentialProfile
 
-> EnvironmentItemChangeResponse deleteEnvironmentVar(environmentId, key)
+> CredentialProfileDeletedResponse deleteCredentialProfile(profile)
 
-Remove one environment variable
+Delete a credential profile
 
-Removes a single variable. Mints a new immutable version.
+Deletes the profile. A default profile returns `409 is_default`. A profile that an environment names returns `409 in_use`. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -1499,7 +1525,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteEnvironmentVarRequest } from '@boatdev/sdk';
+import type { DeleteCredentialProfileRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1510,14 +1536,12 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // string | Environment variable name.
-    key: key_example,
-  } satisfies DeleteEnvironmentVarRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+  } satisfies DeleteCredentialProfileRequest;
 
   try {
-    const data = await api.deleteEnvironmentVar(body);
+    const data = await api.deleteCredentialProfile(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1533,12 +1557,11 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**CredentialProfileDeletedResponse**](CredentialProfileDeletedResponse.md)
 
 ### Authorization
 
@@ -1553,20 +1576,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **200** | Profile deleted. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteNamedSnapshot
+## deleteCredentialProfileCustomApi
 
-> NamedSnapshotDeletedResponse deleteNamedSnapshot(name)
+> CredentialProfileResponse deleteCredentialProfileCustomApi(profile, name)
 
-Remove a named snapshot
+Remove a custom API
 
-Remove a named snapshot and release its storage (`boat snapshot rm <name>` in the CLI). Sandboxes already deployed from it are unaffected.
+Removes one custom API from the profile. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -1575,7 +1600,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteNamedSnapshotRequest } from '@boatdev/sdk';
+import type { DeleteCredentialProfileCustomApiRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1586,12 +1611,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
+    // string | Profile id or name.
+    profile: profile_example,
+    // string | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved.
     name: name_example,
-  } satisfies DeleteNamedSnapshotRequest;
+  } satisfies DeleteCredentialProfileCustomApiRequest;
 
   try {
-    const data = await api.deleteNamedSnapshot(body);
+    const data = await api.deleteCredentialProfileCustomApi(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1607,11 +1634,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **name** | `string` |  | [Defaults to `undefined`] |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **name** | `string` | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved. | [Defaults to `undefined`] |
 
 ### Return type
 
-[**NamedSnapshotDeletedResponse**](NamedSnapshotDeletedResponse.md)
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
 
 ### Authorization
 
@@ -1626,21 +1654,21 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Removed. |  -  |
+| **200** | The updated profile. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
-| **409** | `save_in_progress`: a save under this name is still running. Wait for it to settle before removing it. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteSandbox
+## deleteCredentialProfileKey
 
-> DeletionOperationResponse deleteSandbox(xAsciiConfirmDelete, sandboxId)
+> CredentialProfileResponse deleteCredentialProfileKey(profile, credential)
 
-Permanently delete sandbox data
+Remove a credential profile credential
 
-Accept irreversible background deletion of the sandbox machine, snapshots, and content-bearing records. This is not archive: the sandbox cannot be resumed. Named snapshots and other shared artifacts remain independent. Poll the returned operation until `completed`.
+Removes one credential, an API key or a sign-in. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -1649,7 +1677,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteSandboxRequest } from '@boatdev/sdk';
+import type { DeleteCredentialProfileKeyRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1660,14 +1688,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
-    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
-    // string | Public Sandbox id returned by create/list/get sandbox calls.
-    sandboxId: sandboxId_example,
-  } satisfies DeleteSandboxRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+    // CredentialId
+    credential: ...,
+  } satisfies DeleteCredentialProfileKeyRequest;
 
   try {
-    const data = await api.deleteSandbox(body);
+    const data = await api.deleteCredentialProfileKey(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1683,12 +1711,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **credential** | `CredentialId` |  | [Defaults to `undefined`] [Enum: anthropic-api-key, openai-api-key, openrouter-api-key, llmgateway-api-key, deepseek-api-key, moonshot-api-key, mistral-api-key, claude-subscription, chatgpt-subscription, kimi-subscription, mistral-vibe-subscription, claude-bedrock, codex-bedrock] |
 
 ### Return type
 
-[**DeletionOperationResponse**](DeletionOperationResponse.md)
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
 
 ### Authorization
 
@@ -1703,22 +1731,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **202** | Deletion confirmed and accepted for background processing. |  -  |
+| **200** | The updated profile. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
 | **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteSandboxSnapshots
+## deleteEnvironment
 
-> DeletionOperationListResponse deleteSandboxSnapshots(sandboxId, xAsciiConfirmDelete)
+> SandboxEnvironmentResponse deleteEnvironment(environmentId, org)
 
-Permanently delete all snapshots of a sandbox
+Delete a sandbox environment
 
-Accept irreversible deletion of every unpinned snapshot of this sandbox. The sandbox itself and its named snapshots stay. Snapshots disappear from lists, restores and forks immediately; their stored data is purged in the background. Set `X-Ascii-Confirm-Delete` to the sandbox id.
+Soft-deletes an environment. The default environment cannot be deleted, and at least one environment is always kept.
 
 ### Example
 
@@ -1727,7 +1755,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteSandboxSnapshotsRequest } from '@boatdev/sdk';
+import type { DeleteEnvironmentRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1738,14 +1766,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Public Sandbox id returned by create/list/get sandbox calls.
-    sandboxId: sandboxId_example,
-    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
-    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
-  } satisfies DeleteSandboxSnapshotsRequest;
+    // string | Environment id returned by `GET /environments`.
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentRequest;
 
   try {
-    const data = await api.deleteSandboxSnapshots(body);
+    const data = await api.deleteEnvironment(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -1761,12 +1789,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
-| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
+| **environmentId** | `string` | Environment id returned by `GET /environments`. | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**DeletionOperationListResponse**](DeletionOperationListResponse.md)
+[**SandboxEnvironmentResponse**](SandboxEnvironmentResponse.md)
 
 ### Authorization
 
@@ -1781,22 +1809,21 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **202** | One accepted deletion operation per snapshot. |  -  |
+| **200** | Environment soft-deleted. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
 | **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## deleteSnapshot
+## deleteEnvironmentRepo
 
-> DeletionOperationResponse deleteSnapshot(snapshotId, xAsciiConfirmDelete)
+> EnvironmentItemChangeResponse deleteEnvironmentRepo(environmentId, repositoryId, org)
 
-Permanently delete snapshot data
+Remove a repository from an environment
 
-Accept irreversible deletion of an unpinned snapshot owned by the authenticated account. Any such snapshot is accepted: it disappears from lists, restores and forks immediately, and its stored data is purged in the background once nothing still reads it (see the operation\'s `stage`). `409` only means `X-Ascii-Confirm-Delete` is missing or wrong.
+Removes one repository from the environment\'s selection. Mints a new immutable version.
 
 ### Example
 
@@ -1805,7 +1832,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { DeleteSnapshotRequest } from '@boatdev/sdk';
+import type { DeleteEnvironmentRepoRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -1816,15 +1843,482 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Snapshot id returned by the snapshot list/latest calls.
-    snapshotId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
-    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
-  } satisfies DeleteSnapshotRequest;
-
-  try {
-    const data = await api.deleteSnapshot(body);
-    console.log(data);
+    // string
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | The repository `databaseId`.
+    repositoryId: repositoryId_example,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentRepoRequest;
+
+  try {
+    const data = await api.deleteEnvironmentRepo(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **repositoryId** | `string` | The repository `databaseId`. | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | New version minted. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteEnvironmentSecretFile
+
+> EnvironmentItemChangeResponse deleteEnvironmentSecretFile(path, environmentId, org)
+
+Remove one secret file
+
+Removes the secret file at `path`. Mints a new immutable version.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteEnvironmentSecretFileRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string
+    path: path_example,
+    // string
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentSecretFileRequest;
+
+  try {
+    const data = await api.deleteEnvironmentSecretFile(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **path** | `string` |  | [Defaults to `undefined`] |
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | New version minted. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteEnvironmentVar
+
+> EnvironmentItemChangeResponse deleteEnvironmentVar(environmentId, key, org)
+
+Remove one environment variable
+
+Removes a single variable. Mints a new immutable version.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteEnvironmentVarRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Environment variable name.
+    key: key_example,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies DeleteEnvironmentVarRequest;
+
+  try {
+    const data = await api.deleteEnvironmentVar(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | New version minted. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteNamedSnapshot
+
+> NamedSnapshotDeletedResponse deleteNamedSnapshot(name)
+
+Remove a named snapshot
+
+Remove a named snapshot and release its storage (`boat snapshot rm <name>` in the CLI). Sandboxes already deployed from it are unaffected.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteNamedSnapshotRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string
+    name: name_example,
+  } satisfies DeleteNamedSnapshotRequest;
+
+  try {
+    const data = await api.deleteNamedSnapshot(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **name** | `string` |  | [Defaults to `undefined`] |
+
+### Return type
+
+[**NamedSnapshotDeletedResponse**](NamedSnapshotDeletedResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | Removed. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | `save_in_progress`: a save under this name is still running. Wait for it to settle before removing it. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteSandbox
+
+> DeletionOperationResponse deleteSandbox(xAsciiConfirmDelete, sandboxId)
+
+Permanently delete sandbox data
+
+Accept irreversible background deletion of the sandbox machine, snapshots, and content-bearing records. This is not archive: the sandbox cannot be resumed. Named snapshots and other shared artifacts remain independent. Poll the returned operation until `completed`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteSandboxRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
+    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+  } satisfies DeleteSandboxRequest;
+
+  try {
+    const data = await api.deleteSandbox(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+
+### Return type
+
+[**DeletionOperationResponse**](DeletionOperationResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **202** | Deletion confirmed and accepted for background processing. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteSandboxSnapshots
+
+> DeletionOperationListResponse deleteSandboxSnapshots(sandboxId, xAsciiConfirmDelete)
+
+Permanently delete all snapshots of a sandbox
+
+Accept irreversible deletion of every unpinned snapshot of this sandbox. The sandbox itself and its named snapshots stay. Snapshots disappear from lists, restores and forks immediately; their stored data is purged in the background. Set `X-Ascii-Confirm-Delete` to the sandbox id.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteSandboxSnapshotsRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
+    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
+  } satisfies DeleteSandboxSnapshotsRequest;
+
+  try {
+    const data = await api.deleteSandboxSnapshots(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **xAsciiConfirmDelete** | `string` | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion. | [Defaults to `undefined`] |
+
+### Return type
+
+[**DeletionOperationListResponse**](DeletionOperationListResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **202** | One accepted deletion operation per snapshot. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## deleteSnapshot
+
+> DeletionOperationResponse deleteSnapshot(snapshotId, xAsciiConfirmDelete)
+
+Permanently delete snapshot data
+
+Accept irreversible deletion of an unpinned snapshot owned by the authenticated account. Any such snapshot is accepted: it disappears from lists, restores and forks immediately, and its stored data is purged in the background once nothing still reads it (see the operation\'s `stage`). `409` only means `X-Ascii-Confirm-Delete` is missing or wrong.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { DeleteSnapshotRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Snapshot id returned by the snapshot list/latest calls.
+    snapshotId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Must exactly equal the target `sandboxId` or `snapshotId`. A missing or mismatched value returns `409` without accepting deletion.
+    xAsciiConfirmDelete: xAsciiConfirmDelete_example,
+  } satisfies DeleteSnapshotRequest;
+
+  try {
+    const data = await api.deleteSnapshot(body);
+    console.log(data);
   } catch (error) {
     console.error(error);
   }
@@ -2074,15 +2568,176 @@ example().catch(console.error);
 
 ### HTTP request headers
 
-- **Content-Type**: `application/json`
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | Desktop streaming URL, or provisioning state for VNC setup. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## environments
+
+> SandboxEnvironmentListResponse environments(org)
+
+List Sandbox environments
+
+Returns every non-deleted sandbox environment with its latest-version flags, contents, and per-version sandbox usage. A default environment named `base` is created on first access if none exists.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { EnvironmentsRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies EnvironmentsRequest;
+
+  try {
+    const data = await api.environments(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**SandboxEnvironmentListResponse**](SandboxEnvironmentListResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The account\'s sandbox environments. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## events
+
+> EventsResponse events(sandboxId, limit, cursor, sort, type, conversation)
+
+List boat events
+
+Return Sandbox work, lifecycle, and progress events so product UIs can show what the sandbox is doing. A Sandbox runs many conversations in parallel; this streams **all** of them by default and every event carries a `conversationId`. Filter to one or more with `conversation`. Event payloads are extensible. Clients can long-poll this endpoint with `sort=asc` and a cursor to stream responses. Response events expose agent text, streaming partials via `data.is_streaming`, and tool calls/results via `data.tools`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { EventsRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // number | Maximum items to return. (optional)
+    limit: 56,
+    // string | Opaque pagination cursor returned as `pageInfo.nextCursor`. (optional)
+    cursor: cursor_example,
+    // 'asc' | 'desc' | Sort direction for cursor pagination. (optional)
+    sort: sort_example,
+    // string | Comma-separated event type filter, for example `prompt,response,steer`. (optional)
+    type: type_example,
+    // string | Only return events for this conversation id. Repeat the parameter (or comma-separate) for several. Omit to stream every conversation on the sandbox. See [Integrated agents](/integrated-agents). (optional)
+    conversation: conversation_example,
+  } satisfies EventsRequest;
+
+  try {
+    const data = await api.events(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **limit** | `number` | Maximum items to return. | [Optional] [Defaults to `100`] |
+| **cursor** | `string` | Opaque pagination cursor returned as `pageInfo.nextCursor`. | [Optional] [Defaults to `undefined`] |
+| **sort** | `asc`, `desc` | Sort direction for cursor pagination. | [Optional] [Defaults to `'desc'`] [Enum: asc, desc] |
+| **type** | `string` | Comma-separated event type filter, for example `prompt,response,steer`. | [Optional] [Defaults to `undefined`] |
+| **conversation** | `string` | Only return events for this conversation id. Repeat the parameter (or comma-separate) for several. Omit to stream every conversation on the sandbox. See [Integrated agents](/integrated-agents). | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**EventsResponse**](EventsResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
 - **Accept**: `application/json`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Desktop streaming URL, or provisioning state for VNC setup. |  -  |
-| **400** | Invalid request body or parameters. |  -  |
+| **200** | The agent\'s work on the sandbox (prompts, responses), not sandbox lifecycle. A sandbox that was never prompted returns an empty list even though it started, stopped and resumed. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
 | **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
 | **404** | Resource not found. |  -  |
@@ -2090,13 +2745,13 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## environments
+## fork
 
-> SandboxEnvironmentListResponse environments()
+> SandboxActionResponse fork(sandboxId, idempotencyKey, forkRequest)
 
-List Sandbox environments
+Fork sandbox
 
-Returns every non-deleted sandbox environment with its latest-version flags, contents, and per-version sandbox usage. A default environment named `base` is created on first access if none exists.
+Provision a new sandbox from an existing one. Send an `Idempotency-Key` header to make this call safe to retry after a lost response without creating a second billable fork.
 
 ### Example
 
@@ -2105,7 +2760,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { EnvironmentsRequest } from '@boatdev/sdk';
+import type { ForkOperationRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -2115,8 +2770,17 @@ async function example() {
   });
   const api = new BoatApi(config);
 
+  const body = {
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // string | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. (optional)
+    idempotencyKey: idempotencyKey_example,
+    // ForkRequest (optional)
+    forkRequest: ...,
+  } satisfies ForkOperationRequest;
+
   try {
-    const data = await api.environments();
+    const data = await api.fork(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -2129,11 +2793,16 @@ example().catch(console.error);
 
 ### Parameters
 
-This endpoint does not need any parameter.
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **idempotencyKey** | `string` | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. | [Optional] [Defaults to `undefined`] |
+| **forkRequest** | [ForkRequest](ForkRequest.md) |  | [Optional] |
 
 ### Return type
 
-[**SandboxEnvironmentListResponse**](SandboxEnvironmentListResponse.md)
+[**SandboxActionResponse**](SandboxActionResponse.md)
 
 ### Authorization
 
@@ -2141,26 +2810,31 @@ This endpoint does not need any parameter.
 
 ### HTTP request headers
 
-- **Content-Type**: Not defined
+- **Content-Type**: `application/json`
 - **Accept**: `application/json`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | The account\'s sandbox environments. |  -  |
+| **202** | Fork started. The response `id` is the new forked sandbox id. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+| **429** | Machine start or concurrent-sandbox limit reached. Create, fork and resume each count as one machine start against your plan\'s start limits (see the Billing guide; `rate_limited`, naming the window you hit). A sandbox that would exceed your plan\'s concurrent-sandbox cap is refused with `limit_reached`, or `member_limit_reached` when an organization owner has capped you below the plan. |  -  |
+| **503** | No capacity. `no_ready_machine`: a `failFast` create, fork or resume found no ready machine of that type; nothing was started, billed, or counted, and a resumed sandbox stays stopped. `out_of_capacity`: creates and forks are paused until the provisioning queue drains. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## events
+## get
 
-> EventsResponse events(sandboxId, limit, cursor, sort, type, conversation)
+> SandboxInfoResponse get(sandboxId)
 
-List boat events
+Get sandbox
 
-Return Sandbox work, lifecycle, and progress events so product UIs can show what the sandbox is doing. A Sandbox runs many conversations in parallel; this streams **all** of them by default and every event carries a `conversationId`. Filter to one or more with `conversation`. Event payloads are extensible. Clients can long-poll this endpoint with `sort=asc` and a cursor to stream responses. Response events expose agent text, streaming partials via `data.is_streaming`, and tool calls/results via `data.tools`.
+Poll this endpoint after create, stop, resume, or fork operations.
 
 ### Example
 
@@ -2169,7 +2843,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { EventsRequest } from '@boatdev/sdk';
+import type { GetRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -2182,20 +2856,10 @@ async function example() {
   const body = {
     // string | Public Sandbox id returned by create/list/get sandbox calls.
     sandboxId: sandboxId_example,
-    // number | Maximum items to return. (optional)
-    limit: 56,
-    // string | Opaque pagination cursor returned as `pageInfo.nextCursor`. (optional)
-    cursor: cursor_example,
-    // 'asc' | 'desc' | Sort direction for cursor pagination. (optional)
-    sort: sort_example,
-    // string | Comma-separated event type filter, for example `prompt,response,steer`. (optional)
-    type: type_example,
-    // string | Only return events for this conversation id. Repeat the parameter (or comma-separate) for several. Omit to stream every conversation on the sandbox. See [Integrated agents](/integrated-agents). (optional)
-    conversation: conversation_example,
-  } satisfies EventsRequest;
+  } satisfies GetRequest;
 
   try {
-    const data = await api.events(body);
+    const data = await api.get(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -2212,15 +2876,10 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
-| **limit** | `number` | Maximum items to return. | [Optional] [Defaults to `100`] |
-| **cursor** | `string` | Opaque pagination cursor returned as `pageInfo.nextCursor`. | [Optional] [Defaults to `undefined`] |
-| **sort** | `asc`, `desc` | Sort direction for cursor pagination. | [Optional] [Defaults to `'desc'`] [Enum: asc, desc] |
-| **type** | `string` | Comma-separated event type filter, for example `prompt,response,steer`. | [Optional] [Defaults to `undefined`] |
-| **conversation** | `string` | Only return events for this conversation id. Repeat the parameter (or comma-separate) for several. Omit to stream every conversation on the sandbox. See [Integrated agents](/integrated-agents). | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**EventsResponse**](EventsResponse.md)
+[**SandboxInfoResponse**](SandboxInfoResponse.md)
 
 ### Authorization
 
@@ -2235,21 +2894,20 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | The agent\'s work on the sandbox (prompts, responses), not sandbox lifecycle. A sandbox that was never prompted returns an empty list even though it started, stopped and resumed. |  -  |
+| **200** | Boat details. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
 | **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## fork
+## getAiProxy
 
-> SandboxActionResponse fork(sandboxId, idempotencyKey, forkRequest)
+> AiProxySettings getAiProxy(org, xBoatOrg)
 
-Fork sandbox
+Get AI credentials proxy
 
-Provision a new sandbox from an existing one. Send an `Idempotency-Key` header to make this call safe to retry after a lost response without creating a second billable fork.
+Returns the AI credentials proxy switch of the account in scope, a person or an organization, with its price. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -2258,7 +2916,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { ForkOperationRequest } from '@boatdev/sdk';
+import type { GetAiProxyRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -2269,16 +2927,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Public Sandbox id returned by create/list/get sandbox calls.
-    sandboxId: sandboxId_example,
-    // string | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. (optional)
-    idempotencyKey: idempotencyKey_example,
-    // ForkRequest (optional)
-    forkRequest: ...,
-  } satisfies ForkOperationRequest;
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+  } satisfies GetAiProxyRequest;
 
   try {
-    const data = await api.fork(body);
+    const data = await api.getAiProxy(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -2294,13 +2950,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
-| **idempotencyKey** | `string` | Optional exactly-once key for creating a sandbox. Send your own opaque, account-unique value (a UUID) to make `POST /sandboxes` safe to retry when the response is lost (network timeout, 5xx): the first request creates the sandbox and binds it to the key; every later request with the **same account, key, and request body** returns that same sandbox instead of creating a second, billable one. Behavior: keys are retained for **24 hours**; a concurrent or early retry while the first sandbox is still being minted returns `409` `idempotency_in_progress` (retry shortly, same key); reusing a key with a **different body** returns `409` `idempotency_key_reused`; timeouts and 5xx are safe to retry with the same key; a create that fails before the sandbox exists releases the key within ~2 minutes so a retry can create the sandbox. Omit the header to keep the default (non-idempotent) behavior. | [Optional] [Defaults to `undefined`] |
-| **forkRequest** | [ForkRequest](ForkRequest.md) |  | [Optional] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**SandboxActionResponse**](SandboxActionResponse.md)
+[**AiProxySettings**](AiProxySettings.md)
 
 ### Authorization
 
@@ -2308,31 +2963,26 @@ example().catch(console.error);
 
 ### HTTP request headers
 
-- **Content-Type**: `application/json`
+- **Content-Type**: Not defined
 - **Accept**: `application/json`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **202** | Fork started. The response `id` is the new forked sandbox id. |  -  |
+| **200** | The switch and its price. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
-| **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
-| **429** | Machine start or concurrent-sandbox limit reached. Create, fork and resume each count as one machine start against your plan\'s start limits (see the Billing guide; `rate_limited`, naming the window you hit). A sandbox that would exceed your plan\'s concurrent-sandbox cap is refused with `limit_reached`, or `member_limit_reached` when an organization owner has capped you below the plan. |  -  |
-| **503** | No capacity. `no_ready_machine`: a `failFast` create, fork or resume found no ready machine of that type; nothing was started, billed, or counted, and a resumed sandbox stays stopped. `out_of_capacity`: creates and forks are paused until the provisioning queue drains. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## get
+## getAiUsage
 
-> SandboxInfoResponse get(sandboxId)
+> AccountAiUsageResponse getAiUsage(days, profile, org, xBoatOrg)
 
-Get sandbox
+Get AI usage
 
-Poll this endpoint after create, stop, resume, or fork operations.
+Proxied AI usage, per sandbox and in total, per UTC day, credential and model. Without `profile`, the usage charged to the wallet in scope. With `profile`, the requests made with that profile\'s credentials, whoever pays; only its managers can read it. Needs an API key with `account.read`.
 
 ### Example
 
@@ -2341,7 +2991,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { GetRequest } from '@boatdev/sdk';
+import type { GetAiUsageRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -2352,12 +3002,18 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Public Sandbox id returned by create/list/get sandbox calls.
-    sandboxId: sandboxId_example,
-  } satisfies GetRequest;
+    // number | Days of history, today included. (optional)
+    days: 56,
+    // string | A credential profile id. Counts that profile\'s requests instead of a wallet\'s. (optional)
+    profile: profile_example,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+  } satisfies GetAiUsageRequest;
 
   try {
-    const data = await api.get(body);
+    const data = await api.getAiUsage(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -2373,11 +3029,14 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **days** | `number` | Days of history, today included. | [Optional] [Defaults to `30`] |
+| **profile** | `string` | A credential profile id. Counts that profile\'s requests instead of a wallet\'s. | [Optional] [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**SandboxInfoResponse**](SandboxInfoResponse.md)
+[**AccountAiUsageResponse**](AccountAiUsageResponse.md)
 
 ### Authorization
 
@@ -2392,9 +3051,8 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Boat details. |  -  |
+| **200** | The usage. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
@@ -2755,6 +3413,82 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
+## getSandboxAiUsage
+
+> SandboxAiUsageResponse getSandboxAiUsage(sandboxId, days)
+
+Get sandbox AI usage
+
+One sandbox\'s proxied AI usage per UTC day, credential and model, and whether it is blocked. Needs an API key with `box.read` on the sandbox.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { GetSandboxAiUsageRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // number | Days of history, today included. (optional)
+    days: 56,
+  } satisfies GetSandboxAiUsageRequest;
+
+  try {
+    const data = await api.getSandboxAiUsage(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **days** | `number` | Days of history, today included. | [Optional] [Defaults to `30`] |
+
+### Return type
+
+[**SandboxAiUsageResponse**](SandboxAiUsageResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The usage. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## getSnapshotDownload
 
 > SnapshotDownloadResponse getSnapshotDownload(snapshotId)
@@ -3302,7 +4036,87 @@ async function example() {
   } satisfies InterruptRequest;
 
   try {
-    const data = await api.interrupt(body);
+    const data = await api.interrupt(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **conversation** | `string` | Interrupt only this conversation id. Omit to interrupt the whole sandbox. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**SandboxActionResponse**](SandboxActionResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | Interrupt requested. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## limits
+
+> LimitsResponse limits(org, xBoatOrg, teamId)
+
+Get Boat limits
+
+Check remaining machine starts, compute time, credits, access readiness, and concurrent-sandbox capacity for the wallet a create would bill: the `org` / `X-Boat-Org` you pass (id or name), else the account\'s active wallet, else personal. The response carries `teamId` when an organization wallet was read.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { LimitsRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+    // string | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. (optional)
+    teamId: teamId_example,
+  } satisfies LimitsRequest;
+
+  try {
+    const data = await api.limits(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -3318,12 +4132,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
-| **conversation** | `string` | Interrupt only this conversation id. Omit to interrupt the whole sandbox. | [Optional] [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
+| **teamId** | `string` | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**SandboxActionResponse**](SandboxActionResponse.md)
+[**LimitsResponse**](LimitsResponse.md)
 
 ### Authorization
 
@@ -3338,22 +4153,19 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Interrupt requested. |  -  |
+| **200** | Current creation and concurrent-boat limits. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **402** | Account cannot currently create or operate sandboxes. The error body may include a dashboard billing URL, but billing actions are not part of the v1 API. |  -  |
-| **404** | Resource not found. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## limits
+## listCredentialProfiles
 
-> LimitsResponse limits(org, xBoatOrg, teamId)
+> CredentialProfileListResponse listCredentialProfiles()
 
-Get Boat limits
+List credential profiles
 
-Check remaining machine starts, compute time, credits, access readiness, and concurrent-sandbox capacity for the wallet a create would bill: the `org` / `X-Boat-Org` you pass (id or name), else the account\'s active wallet, else personal. The response carries `teamId` when an organization wallet was read.
+Returns every AI credential profile you can use, yours and your organizations\'. Secret values are never returned. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -3362,7 +4174,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { LimitsRequest } from '@boatdev/sdk';
+import type { ListCredentialProfilesRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -3372,17 +4184,8 @@ async function example() {
   });
   const api = new BoatApi(config);
 
-  const body = {
-    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. (optional)
-    org: org_example,
-    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
-    xBoatOrg: xBoatOrg_example,
-    // string | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. (optional)
-    teamId: teamId_example,
-  } satisfies LimitsRequest;
-
   try {
-    const data = await api.limits(body);
+    const data = await api.listCredentialProfiles();
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -3395,16 +4198,11 @@ example().catch(console.error);
 
 ### Parameters
 
-
-| Name | Type | Description  | Notes |
-|------------- | ------------- | ------------- | -------------|
-| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. | [Optional] [Defaults to `undefined`] |
-| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
-| **teamId** | `string` | Legacy alias for `org`. Takes precedence over `org` / `X-Boat-Org` when set. | [Optional] [Defaults to `undefined`] |
+This endpoint does not need any parameter.
 
 ### Return type
 
-[**LimitsResponse**](LimitsResponse.md)
+[**CredentialProfileListResponse**](CredentialProfileListResponse.md)
 
 ### Authorization
 
@@ -3419,7 +4217,7 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Current creation and concurrent-boat limits. |  -  |
+| **200** | The profiles. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
@@ -4150,7 +4948,7 @@ example().catch(console.error);
 
 Read a file from a sandbox
 
-Files up to 5 MiB. Use `GET /sandboxes/{sandboxId}/artifacts` for files up to 50 MiB, and SCP over SSH for larger ones.
+Files up to 5 MiB. For a larger file, use `POST /sandboxes/{sandboxId}/files/download-url`.
 
 ### Example
 
@@ -4786,7 +5584,7 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. (optional)
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
     org: org_example,
     // string | Same as the `org` query parameter. Query wins when both are set. (optional)
     xBoatOrg: xBoatOrg_example,
@@ -4817,7 +5615,7 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes, snapshots, and environments stay creator-private. | [Optional] [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 | **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
 | **limit** | `number` | Maximum items to return. | [Optional] [Defaults to `100`] |
 | **cursor** | `string` | Opaque pagination cursor returned as `pageInfo.nextCursor`. | [Optional] [Defaults to `undefined`] |
@@ -4878,7 +5676,221 @@ async function example() {
   } satisfies SaveNamedSnapshotRequest;
 
   try {
-    const data = await api.saveNamedSnapshot(body);
+    const data = await api.saveNamedSnapshot(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **namedSnapshotSaveRequest** | [NamedSnapshotSaveRequest](NamedSnapshotSaveRequest.md) |  | |
+
+### Return type
+
+[**NamedSnapshotSavingResponse**](NamedSnapshotSavingResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **202** | Save accepted and running in the background. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **404** | Resource not found. |  -  |
+| **402** | `credit_required`: the wallet already keeps 10 or more named snapshots and has no credit left. Each named snapshot above the free 10 costs $1.70 a month, charged daily. Add credit or remove one. |  -  |
+| **409** | `save_in_progress` when a save under this name is already running; wait for it to settle rather than retrying immediately. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## secrets
+
+> SecretsResponse secrets()
+
+Get Boat secrets setup
+
+Returns the environment variables and secret files configured for sandboxes.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { SecretsRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  try {
+    const data = await api.secrets();
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+This endpoint does not need any parameter.
+
+### Return type
+
+[**SecretsResponse**](SecretsResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | Current secret setup metadata. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## selectRepo
+
+> RepoSelectionResponse selectRepo(repoSelectionRequest)
+
+Select repository for sandboxes
+
+Idempotently selects one repository for the sandbox environment. Use `databaseId` from `GET /repos` as `repositoryId`; selecting an already-selected repository updates its `baseBranch`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { SelectRepoRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // RepoSelectionRequest
+    repoSelectionRequest: ...,
+  } satisfies SelectRepoRequest;
+
+  try {
+    const data = await api.selectRepo(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **repoSelectionRequest** | [RepoSelectionRequest](RepoSelectionRequest.md) |  | |
+
+### Return type
+
+[**RepoSelectionResponse**](RepoSelectionResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | Updated repository selection. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## setActiveOrganization
+
+> ActiveOrgResponse setActiveOrganization(activeOrgUpdateRequest)
+
+Set the active organization
+
+Set the wallet new sandboxes bill when a request names none, for this account on every client: the API, the CLI (`boat org switch` sets the same value) and the dashboard. Pass an organization id or name you belong to, or `personal` (or `null`) for your own account. `GET /limits` follows it. Sandboxes already running keep the wallet they were created with; leaving or deleting the organization resets the account to personal.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { SetActiveOrganizationRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // ActiveOrgUpdateRequest
+    activeOrgUpdateRequest: {"org":"acme"},
+  } satisfies SetActiveOrganizationRequest;
+
+  try {
+    const data = await api.setActiveOrganization(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -4894,11 +5906,11 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **namedSnapshotSaveRequest** | [NamedSnapshotSaveRequest](NamedSnapshotSaveRequest.md) |  | |
+| **activeOrgUpdateRequest** | [ActiveOrgUpdateRequest](ActiveOrgUpdateRequest.md) |  | |
 
 ### Return type
 
-[**NamedSnapshotSavingResponse**](NamedSnapshotSavingResponse.md)
+[**ActiveOrgResponse**](ActiveOrgResponse.md)
 
 ### Authorization
 
@@ -4913,23 +5925,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **202** | Save accepted and running in the background. |  -  |
+| **200** | The wallet now active. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **404** | Resource not found. |  -  |
-| **402** | `credit_required`: the wallet already keeps 10 or more named snapshots and has no credit left. Each named snapshot above the free 10 costs $1.70 a month, charged daily. Add credit or remove one. |  -  |
-| **409** | `save_in_progress` when a save under this name is already running; wait for it to settle rather than retrying immediately. |  -  |
+| **403** | `not_org_member`: no organization with that id or name that you belong to. |  -  |
+| **409** | `ambiguous_org`: several of your organizations share that name; pass the id. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## secrets
+## setCredentialProfileCustomApi
 
-> SecretsResponse secrets()
+> CredentialProfileResponse setCredentialProfileCustomApi(profile, name, setCustomApiRequest)
 
-Get Boat secrets setup
+Set a custom API
 
-Returns the environment variables and secret files configured for sandboxes.
+Adds or replaces one custom API. The sandbox gets `<NAME>` and `<NAME>_BASE_URL`. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -4938,7 +5949,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SecretsRequest } from '@boatdev/sdk';
+import type { SetCredentialProfileCustomApiRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -4948,8 +5959,17 @@ async function example() {
   });
   const api = new BoatApi(config);
 
+  const body = {
+    // string | Profile id or name.
+    profile: profile_example,
+    // string | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved.
+    name: name_example,
+    // SetCustomApiRequest
+    setCustomApiRequest: {"value":"sk_live_123","baseUrl":"https://api.stripe.com/v1"},
+  } satisfies SetCredentialProfileCustomApiRequest;
+
   try {
-    const data = await api.secrets();
+    const data = await api.setCredentialProfileCustomApi(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -4962,11 +5982,16 @@ example().catch(console.error);
 
 ### Parameters
 
-This endpoint does not need any parameter.
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **name** | `string` | Environment variable name of the custom API, for example `STRIPE_KEY`. Provider names (`ANTHROPIC_*`, `OPENAI_*`, and so on) and names that end in `_BASE_URL` are reserved. | [Defaults to `undefined`] |
+| **setCustomApiRequest** | [SetCustomApiRequest](SetCustomApiRequest.md) |  | |
 
 ### Return type
 
-[**SecretsResponse**](SecretsResponse.md)
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
 
 ### Authorization
 
@@ -4974,26 +5999,29 @@ This endpoint does not need any parameter.
 
 ### HTTP request headers
 
-- **Content-Type**: Not defined
+- **Content-Type**: `application/json`
 - **Accept**: `application/json`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Current secret setup metadata. |  -  |
+| **200** | The updated profile. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## selectRepo
+## setCredentialProfileKey
 
-> RepoSelectionResponse selectRepo(repoSelectionRequest)
+> CredentialProfileResponse setCredentialProfileKey(profile, credential, setCredentialKeyRequest)
 
-Select repository for sandboxes
+Set a credential profile API key
 
-Idempotently selects one repository for the sandbox environment. Use `databaseId` from `GET /repos` as `repositoryId`; selecting an already-selected repository updates its `baseBranch`.
+Sets one API key. A sign-in id returns `400 not_an_api_key`; connect sign-ins on the dashboard Agents page. Running sandboxes that use the profile get the new key. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -5002,7 +6030,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SelectRepoRequest } from '@boatdev/sdk';
+import type { SetCredentialProfileKeyRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -5013,12 +6041,16 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // RepoSelectionRequest
-    repoSelectionRequest: ...,
-  } satisfies SelectRepoRequest;
+    // string | Profile id or name.
+    profile: profile_example,
+    // CredentialId
+    credential: ...,
+    // SetCredentialKeyRequest
+    setCredentialKeyRequest: ...,
+  } satisfies SetCredentialProfileKeyRequest;
 
   try {
-    const data = await api.selectRepo(body);
+    const data = await api.setCredentialProfileKey(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5034,11 +6066,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **repoSelectionRequest** | [RepoSelectionRequest](RepoSelectionRequest.md) |  | |
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **credential** | `CredentialId` |  | [Defaults to `undefined`] [Enum: anthropic-api-key, openai-api-key, openrouter-api-key, llmgateway-api-key, deepseek-api-key, moonshot-api-key, mistral-api-key, claude-subscription, chatgpt-subscription, kimi-subscription, mistral-vibe-subscription, claude-bedrock, codex-bedrock] |
+| **setCredentialKeyRequest** | [SetCredentialKeyRequest](SetCredentialKeyRequest.md) |  | |
 
 ### Return type
 
-[**RepoSelectionResponse**](RepoSelectionResponse.md)
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
 
 ### Authorization
 
@@ -5053,21 +6087,22 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Updated repository selection. |  -  |
+| **200** | The updated profile. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **409** | Request conflicts with current account or sandbox state. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## setActiveOrganization
+## setEnvironmentSecretFile
 
-> ActiveOrgResponse setActiveOrganization(activeOrgUpdateRequest)
+> EnvironmentItemChangeResponse setEnvironmentSecretFile(environmentId, setEnvironmentSecretFileRequest, org)
 
-Set the active organization
+Write one secret file
 
-Set the wallet new sandboxes bill when a request names none, for this account on every client: the API, the CLI (`boat org switch` sets the same value) and the dashboard. Pass an organization id or name you belong to, or `personal` (or `null`) for your own account. `GET /limits` follows it. Sandboxes already running keep the wallet they were created with; leaving or deleting the organization resets the account to personal.
+Adds or replaces a single secret file by path. Mints a new immutable version.
 
 ### Example
 
@@ -5076,7 +6111,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SetActiveOrganizationRequest } from '@boatdev/sdk';
+import type { SetEnvironmentSecretFileOperationRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -5087,12 +6122,16 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // ActiveOrgUpdateRequest
-    activeOrgUpdateRequest: {"org":"acme"},
-  } satisfies SetActiveOrganizationRequest;
+    // string
+    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // SetEnvironmentSecretFileRequest
+    setEnvironmentSecretFileRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies SetEnvironmentSecretFileOperationRequest;
 
   try {
-    const data = await api.setActiveOrganization(body);
+    const data = await api.setEnvironmentSecretFile(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5108,11 +6147,13 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **activeOrgUpdateRequest** | [ActiveOrgUpdateRequest](ActiveOrgUpdateRequest.md) |  | |
+| **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **setEnvironmentSecretFileRequest** | [SetEnvironmentSecretFileRequest](SetEnvironmentSecretFileRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
-[**ActiveOrgResponse**](ActiveOrgResponse.md)
+[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
 
 ### Authorization
 
@@ -5127,22 +6168,21 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | The wallet now active. |  -  |
+| **200** | New version minted. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
-| **403** | `not_org_member`: no organization with that id or name that you belong to. |  -  |
-| **409** | `ambiguous_org`: several of your organizations share that name; pass the id. |  -  |
+| **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## setEnvironmentSecretFile
+## setEnvironmentVar
 
-> EnvironmentItemChangeResponse setEnvironmentSecretFile(environmentId, setEnvironmentSecretFileRequest)
+> EnvironmentItemChangeResponse setEnvironmentVar(environmentId, key, setEnvironmentVarRequest, org)
 
-Write one secret file
+Set one environment variable
 
-Adds or replaces a single secret file by path. Mints a new immutable version.
+Sets or replaces a single variable without reading or rewriting the rest. Mints a new immutable version.
 
 ### Example
 
@@ -5151,7 +6191,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SetEnvironmentSecretFileOperationRequest } from '@boatdev/sdk';
+import type { SetEnvironmentVarOperationRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -5164,12 +6204,16 @@ async function example() {
   const body = {
     // string
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // SetEnvironmentSecretFileRequest
-    setEnvironmentSecretFileRequest: ...,
-  } satisfies SetEnvironmentSecretFileOperationRequest;
+    // string | Environment variable name.
+    key: key_example,
+    // SetEnvironmentVarRequest
+    setEnvironmentVarRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+  } satisfies SetEnvironmentVarOperationRequest;
 
   try {
-    const data = await api.setEnvironmentSecretFile(body);
+    const data = await api.setEnvironmentVar(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5186,7 +6230,9 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **setEnvironmentSecretFileRequest** | [SetEnvironmentSecretFileRequest](SetEnvironmentSecretFileRequest.md) |  | |
+| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
+| **setEnvironmentVarRequest** | [SetEnvironmentVarRequest](SetEnvironmentVarRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -5213,13 +6259,13 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## setEnvironmentVar
+## setSandboxAiAccess
 
-> EnvironmentItemChangeResponse setEnvironmentVar(environmentId, key, setEnvironmentVarRequest)
+> SandboxAiAccessResponse setSandboxAiAccess(sandboxId, setSandboxAiAccessRequest)
 
-Set one environment variable
+Block or unblock sandbox AI access
 
-Sets or replaces a single variable without reading or rewriting the rest. Mints a new immutable version.
+Blocks or unblocks the sandbox\'s AI placeholders, running or stopped. The proxy refuses a blocked sandbox\'s requests with `403`. It has no effect on a sandbox that holds real keys. The sandbox creator, or a manager of its credential profile, can call it. Needs an API key with `account.admin`.
 
 ### Example
 
@@ -5228,7 +6274,7 @@ import {
   Configuration,
   BoatApi,
 } from '@boatdev/sdk';
-import type { SetEnvironmentVarOperationRequest } from '@boatdev/sdk';
+import type { SetSandboxAiAccessOperationRequest } from '@boatdev/sdk';
 
 async function example() {
   console.log("🚀 Testing @boatdev/sdk SDK...");
@@ -5239,16 +6285,14 @@ async function example() {
   const api = new BoatApi(config);
 
   const body = {
-    // string
-    environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
-    // string | Environment variable name.
-    key: key_example,
-    // SetEnvironmentVarRequest
-    setEnvironmentVarRequest: ...,
-  } satisfies SetEnvironmentVarOperationRequest;
+    // string | Public Sandbox id returned by create/list/get sandbox calls.
+    sandboxId: sandboxId_example,
+    // SetSandboxAiAccessRequest
+    setSandboxAiAccessRequest: ...,
+  } satisfies SetSandboxAiAccessOperationRequest;
 
   try {
-    const data = await api.setEnvironmentVar(body);
+    const data = await api.setSandboxAiAccess(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -5264,13 +6308,12 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **environmentId** | `string` |  | [Defaults to `undefined`] |
-| **key** | `string` | Environment variable name. | [Defaults to `undefined`] |
-| **setEnvironmentVarRequest** | [SetEnvironmentVarRequest](SetEnvironmentVarRequest.md) |  | |
+| **sandboxId** | `string` | Public Sandbox id returned by create/list/get sandbox calls. | [Defaults to `undefined`] |
+| **setSandboxAiAccessRequest** | [SetSandboxAiAccessRequest](SetSandboxAiAccessRequest.md) |  | |
 
 ### Return type
 
-[**EnvironmentItemChangeResponse**](EnvironmentItemChangeResponse.md)
+[**SandboxAiAccessResponse**](SandboxAiAccessResponse.md)
 
 ### Authorization
 
@@ -5285,9 +6328,10 @@ example().catch(console.error);
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | New version minted. |  -  |
+| **200** | The new state. |  -  |
 | **400** | Invalid request body or parameters. |  -  |
 | **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
 | **404** | Resource not found. |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
@@ -5831,6 +6875,165 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
+## updateAiProxy
+
+> AiProxySettings updateAiProxy(updateAiProxyRequest, org, xBoatOrg)
+
+Turn the AI credentials proxy on or off
+
+With the proxy on, sandboxes get placeholder keys and base URLs that point at Boat. Boat swaps in the real key on each request. Real keys never enter the sandbox.  Running sandboxes switch at their next start. While on, the account pays $1 of Boat time for each UTC day, plus $1 per 1,000 proxied requests, charged to the wallet each sandbox bills. For an organization, only its owner can change the switch. Needs an API key with `account.admin`. 
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { UpdateAiProxyOperationRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // UpdateAiProxyRequest
+    updateAiProxyRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
+    // string | Same as the `org` query parameter. Query wins when both are set. (optional)
+    xBoatOrg: xBoatOrg_example,
+  } satisfies UpdateAiProxyOperationRequest;
+
+  try {
+    const data = await api.updateAiProxy(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **updateAiProxyRequest** | [UpdateAiProxyRequest](UpdateAiProxyRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
+| **xBoatOrg** | `string` | Same as the `org` query parameter. Query wins when both are set. | [Optional] [Defaults to `undefined`] |
+
+### Return type
+
+[**AiProxySettings**](AiProxySettings.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The new state. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
+## updateCredentialProfile
+
+> CredentialProfileResponse updateCredentialProfile(profile, updateCredentialProfileRequest)
+
+Update a credential profile
+
+Renames the profile, or makes it its owner\'s default. Sandboxes that use the owner\'s default switch to the new default at their next start. Needs an API key with `account.admin`.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  BoatApi,
+} from '@boatdev/sdk';
+import type { UpdateCredentialProfileOperationRequest } from '@boatdev/sdk';
+
+async function example() {
+  console.log("🚀 Testing @boatdev/sdk SDK...");
+  const config = new Configuration({ 
+    // Configure HTTP bearer authorization: BoatBearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new BoatApi(config);
+
+  const body = {
+    // string | Profile id or name.
+    profile: profile_example,
+    // UpdateCredentialProfileRequest
+    updateCredentialProfileRequest: {"isDefault":true},
+  } satisfies UpdateCredentialProfileOperationRequest;
+
+  try {
+    const data = await api.updateCredentialProfile(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **profile** | `string` | Profile id or name. | [Defaults to `undefined`] |
+| **updateCredentialProfileRequest** | [UpdateCredentialProfileRequest](UpdateCredentialProfileRequest.md) |  | |
+
+### Return type
+
+[**CredentialProfileResponse**](CredentialProfileResponse.md)
+
+### Authorization
+
+[BoatBearerAuth](../README.md#BoatBearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | The updated profile. |  -  |
+| **400** | Invalid request body or parameters. |  -  |
+| **401** | Missing or invalid bearer token. |  -  |
+| **403** | Authenticated token is not allowed to perform this action. |  -  |
+| **404** | Resource not found. |  -  |
+| **409** | Request conflicts with current account or sandbox state. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## updateDataRetention
 
 > DataRetentionPolicyResponse updateDataRetention(dataRetentionUpdateRequest)
@@ -5908,7 +7111,7 @@ example().catch(console.error);
 
 ## updateEnvironment
 
-> SandboxEnvironmentResponse updateEnvironment(environmentId, updateSandboxEnvironmentRequest)
+> SandboxEnvironmentResponse updateEnvironment(environmentId, updateSandboxEnvironmentRequest, org)
 
 Update a sandbox environment
 
@@ -5936,6 +7139,8 @@ async function example() {
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
     // UpdateSandboxEnvironmentRequest
     updateSandboxEnvironmentRequest: ...,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
   } satisfies UpdateEnvironmentRequest;
 
   try {
@@ -5957,6 +7162,7 @@ example().catch(console.error);
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` | Environment id returned by `GET /environments`. | [Defaults to `undefined`] |
 | **updateSandboxEnvironmentRequest** | [UpdateSandboxEnvironmentRequest](UpdateSandboxEnvironmentRequest.md) |  | |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -6133,7 +7339,7 @@ example().catch(console.error);
 
 ## upgradeEnvironment
 
-> UpgradeSandboxEnvironmentResponse upgradeEnvironment(environmentId, upgradeSandboxEnvironmentRequest)
+> UpgradeSandboxEnvironmentResponse upgradeEnvironment(environmentId, org, upgradeSandboxEnvironmentRequest)
 
 Upgrade sandboxes to an environment\'s latest version
 
@@ -6159,6 +7365,8 @@ async function example() {
   const body = {
     // string
     environmentId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. (optional)
+    org: org_example,
     // UpgradeSandboxEnvironmentRequest (optional)
     upgradeSandboxEnvironmentRequest: ...,
   } satisfies UpgradeEnvironmentRequest;
@@ -6181,6 +7389,7 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **environmentId** | `string` |  | [Defaults to `undefined`] |
+| **org** | `string` | Billing wallet for this request: an organization you belong to, by id (`team_…`) or by name as `GET /orgs` lists it (case-insensitive), or `personal`. Omitted, the account\'s active wallet applies (`PATCH /orgs/active`; personal until set). Two organizations sharing the name answer `409 ambiguous_org` and need the id. Sandboxes and snapshots stay creator-private. On `/environments` routes, only this query parameter selects the organization\'s shared environments; the `X-Boat-Org` header and the active wallet do not apply there. Members read them, owners and admins change them. | [Optional] [Defaults to `undefined`] |
 | **upgradeSandboxEnvironmentRequest** | [UpgradeSandboxEnvironmentRequest](UpgradeSandboxEnvironmentRequest.md) |  | [Optional] |
 
 ### Return type
@@ -6293,7 +7502,7 @@ example().catch(console.error);
 
 Write a file in a sandbox
 
-Files up to 5 MiB after decoding. Use SCP over SSH for larger files.
+Files up to 5 MiB after decoding. For a larger file, use `POST /sandboxes/{sandboxId}/files/upload-url`.
 
 ### Example