@boatdev/sdk 1.9.4 → 1.9.6

package/src/apis/BoatApi.ts

@@ -13,6 +13,11 @@
  */
 
 import * as runtime from '../runtime';
+import {
+    type AccountAiUsageResponse,
+    AccountAiUsageResponseFromJSON,
+    AccountAiUsageResponseToJSON,
+} from '../models/AccountAiUsageResponse';
 import {
     type ActiveOrgResponse,
     ActiveOrgResponseFromJSON,
@@ -28,6 +33,11 @@ import {
     AddEnvironmentRepoRequestFromJSON,
     AddEnvironmentRepoRequestToJSON,
 } from '../models/AddEnvironmentRepoRequest';
+import {
+    type AiProxySettings,
+    AiProxySettingsFromJSON,
+    AiProxySettingsToJSON,
+} from '../models/AiProxySettings';
 import {
     type ApiKeyRevokeResponse,
     ApiKeyRevokeResponseFromJSON,
@@ -98,6 +108,11 @@ import {
     ConversationsResponseFromJSON,
     ConversationsResponseToJSON,
 } from '../models/ConversationsResponse';
+import {
+    type CreateCredentialProfileRequest,
+    CreateCredentialProfileRequestFromJSON,
+    CreateCredentialProfileRequestToJSON,
+} from '../models/CreateCredentialProfileRequest';
 import {
     type CreateSandboxEnvironmentRequest,
     CreateSandboxEnvironmentRequestFromJSON,
@@ -123,6 +138,26 @@ import {
     CreateScopedApiKeyRequestFromJSON,
     CreateScopedApiKeyRequestToJSON,
 } from '../models/CreateScopedApiKeyRequest';
+import {
+    type CredentialId,
+    CredentialIdFromJSON,
+    CredentialIdToJSON,
+} from '../models/CredentialId';
+import {
+    type CredentialProfileDeletedResponse,
+    CredentialProfileDeletedResponseFromJSON,
+    CredentialProfileDeletedResponseToJSON,
+} from '../models/CredentialProfileDeletedResponse';
+import {
+    type CredentialProfileListResponse,
+    CredentialProfileListResponseFromJSON,
+    CredentialProfileListResponseToJSON,
+} from '../models/CredentialProfileListResponse';
+import {
+    type CredentialProfileResponse,
+    CredentialProfileResponseFromJSON,
+    CredentialProfileResponseToJSON,
+} from '../models/CredentialProfileResponse';
 import {
     type DataRetentionPolicyResponse,
     DataRetentionPolicyResponseFromJSON,
@@ -173,6 +208,16 @@ import {
     FileReadResponseFromJSON,
     FileReadResponseToJSON,
 } from '../models/FileReadResponse';
+import {
+    type FileUrlRequest,
+    FileUrlRequestFromJSON,
+    FileUrlRequestToJSON,
+} from '../models/FileUrlRequest';
+import {
+    type FileUrlResponse,
+    FileUrlResponseFromJSON,
+    FileUrlResponseToJSON,
+} from '../models/FileUrlResponse';
 import {
     type FileWriteRequest,
     FileWriteRequestFromJSON,
@@ -308,6 +353,16 @@ import {
     SandboxActionResponseFromJSON,
     SandboxActionResponseToJSON,
 } from '../models/SandboxActionResponse';
+import {
+    type SandboxAiAccessResponse,
+    SandboxAiAccessResponseFromJSON,
+    SandboxAiAccessResponseToJSON,
+} from '../models/SandboxAiAccessResponse';
+import {
+    type SandboxAiUsageResponse,
+    SandboxAiUsageResponseFromJSON,
+    SandboxAiUsageResponseToJSON,
+} from '../models/SandboxAiUsageResponse';
 import {
     type SandboxEnvironmentListResponse,
     SandboxEnvironmentListResponseFromJSON,
@@ -343,6 +398,16 @@ import {
     SecretsUpdateRequestFromJSON,
     SecretsUpdateRequestToJSON,
 } from '../models/SecretsUpdateRequest';
+import {
+    type SetCredentialKeyRequest,
+    SetCredentialKeyRequestFromJSON,
+    SetCredentialKeyRequestToJSON,
+} from '../models/SetCredentialKeyRequest';
+import {
+    type SetCustomApiRequest,
+    SetCustomApiRequestFromJSON,
+    SetCustomApiRequestToJSON,
+} from '../models/SetCustomApiRequest';
 import {
     type SetEnvironmentSecretFileRequest,
     SetEnvironmentSecretFileRequestFromJSON,
@@ -353,6 +418,11 @@ import {
     SetEnvironmentVarRequestFromJSON,
     SetEnvironmentVarRequestToJSON,
 } from '../models/SetEnvironmentVarRequest';
+import {
+    type SetSandboxAiAccessRequest,
+    SetSandboxAiAccessRequestFromJSON,
+    SetSandboxAiAccessRequestToJSON,
+} from '../models/SetSandboxAiAccessRequest';
 import {
     type Share200Response,
     Share200ResponseFromJSON,
@@ -423,6 +493,16 @@ import {
     TelemetrySetResponseFromJSON,
     TelemetrySetResponseToJSON,
 } from '../models/TelemetrySetResponse';
+import {
+    type UpdateAiProxyRequest,
+    UpdateAiProxyRequestFromJSON,
+    UpdateAiProxyRequestToJSON,
+} from '../models/UpdateAiProxyRequest';
+import {
+    type UpdateCredentialProfileRequest,
+    UpdateCredentialProfileRequestFromJSON,
+    UpdateCredentialProfileRequestToJSON,
+} from '../models/UpdateCredentialProfileRequest';
 import {
     type UpdateSandboxEnvironmentRequest,
     UpdateSandboxEnvironmentRequestFromJSON,
@@ -477,6 +557,7 @@ import {
 export interface AddEnvironmentRepoOperationRequest {
     environmentId: string;
     addEnvironmentRepoRequest: AddEnvironmentRepoRequest;
+    org?: string;
 }
 
 export interface ApiKeyUsageRequest {
@@ -536,8 +617,18 @@ export interface CreateRequest {
     createSandboxRequest?: CreateSandboxRequest;
 }
 
+export interface CreateCredentialProfileOperationRequest {
+    createCredentialProfileRequest: CreateCredentialProfileRequest;
+}
+
+export interface CreateDownloadUrlRequest {
+    sandboxId: string;
+    fileUrlRequest: FileUrlRequest;
+}
+
 export interface CreateEnvironmentRequest {
     createSandboxEnvironmentRequest: CreateSandboxEnvironmentRequest;
+    org?: string;
 }
 
 export interface CreateScopedApiKeyOperationRequest {
@@ -548,27 +639,50 @@ export interface CreateSnapshotShareRequest {
     name: string;
 }
 
+export interface CreateUploadUrlRequest {
+    sandboxId: string;
+    fileUrlRequest: FileUrlRequest;
+}
+
 export interface CreateWebhookRequest {
     webhookCreateRequest: WebhookCreateRequest;
 }
 
+export interface DeleteCredentialProfileRequest {
+    profile: string;
+}
+
+export interface DeleteCredentialProfileCustomApiRequest {
+    profile: string;
+    name: string;
+}
+
+export interface DeleteCredentialProfileKeyRequest {
+    profile: string;
+    credential: CredentialId;
+}
+
 export interface DeleteEnvironmentRequest {
     environmentId: string;
+    org?: string;
 }
 
 export interface DeleteEnvironmentRepoRequest {
     environmentId: string;
     repositoryId: string;
+    org?: string;
 }
 
 export interface DeleteEnvironmentSecretFileRequest {
     path: string;
     environmentId: string;
+    org?: string;
 }
 
 export interface DeleteEnvironmentVarRequest {
     environmentId: string;
     key: string;
+    org?: string;
 }
 
 export interface DeleteNamedSnapshotRequest {
@@ -601,6 +715,10 @@ export interface DesktopOperationRequest {
     desktopRequest?: DesktopRequest;
 }
 
+export interface EnvironmentsRequest {
+    org?: string;
+}
+
 export interface EventsRequest {
     sandboxId: string;
     limit?: number;
@@ -620,6 +738,18 @@ export interface GetRequest {
     sandboxId: string;
 }
 
+export interface GetAiProxyRequest {
+    org?: string;
+    xBoatOrg?: string;
+}
+
+export interface GetAiUsageRequest {
+    days?: number;
+    profile?: string;
+    org?: string;
+    xBoatOrg?: string;
+}
+
 export interface GetCommandRequest {
     sandboxId: string;
     commandId: string;
@@ -637,6 +767,11 @@ export interface GetNamedSnapshotRequest {
     name: string;
 }
 
+export interface GetSandboxAiUsageRequest {
+    sandboxId: string;
+    days?: number;
+}
+
 export interface GetSnapshotDownloadRequest {
     snapshotId: string;
 }
@@ -768,15 +903,34 @@ export interface SetActiveOrganizationRequest {
     activeOrgUpdateRequest: ActiveOrgUpdateRequest;
 }
 
+export interface SetCredentialProfileCustomApiRequest {
+    profile: string;
+    name: string;
+    setCustomApiRequest: SetCustomApiRequest;
+}
+
+export interface SetCredentialProfileKeyRequest {
+    profile: string;
+    credential: CredentialId;
+    setCredentialKeyRequest: SetCredentialKeyRequest;
+}
+
 export interface SetEnvironmentSecretFileOperationRequest {
     environmentId: string;
     setEnvironmentSecretFileRequest: SetEnvironmentSecretFileRequest;
+    org?: string;
 }
 
 export interface SetEnvironmentVarOperationRequest {
     environmentId: string;
     key: string;
     setEnvironmentVarRequest: SetEnvironmentVarRequest;
+    org?: string;
+}
+
+export interface SetSandboxAiAccessOperationRequest {
+    sandboxId: string;
+    setSandboxAiAccessRequest: SetSandboxAiAccessRequest;
 }
 
 export interface SetTelemetryRequest {
@@ -813,6 +967,17 @@ export interface UpdateRequest {
     updateSandboxRequest: UpdateSandboxRequest;
 }
 
+export interface UpdateAiProxyOperationRequest {
+    updateAiProxyRequest: UpdateAiProxyRequest;
+    org?: string;
+    xBoatOrg?: string;
+}
+
+export interface UpdateCredentialProfileOperationRequest {
+    profile: string;
+    updateCredentialProfileRequest: UpdateCredentialProfileRequest;
+}
+
 export interface UpdateDataRetentionRequest {
     dataRetentionUpdateRequest: DataRetentionUpdateRequest;
 }
@@ -820,6 +985,7 @@ export interface UpdateDataRetentionRequest {
 export interface UpdateEnvironmentRequest {
     environmentId: string;
     updateSandboxEnvironmentRequest: UpdateSandboxEnvironmentRequest;
+    org?: string;
 }
 
 export interface UpdateSecretsRequest {
@@ -833,6 +999,7 @@ export interface UpdateWebhookRequest {
 
 export interface UpgradeEnvironmentRequest {
     environmentId: string;
+    org?: string;
     upgradeSandboxEnvironmentRequest?: UpgradeSandboxEnvironmentRequest;
 }
 
@@ -856,7 +1023,7 @@ export class BoatApi extends runtime.BaseAPI {
      * Creates request options for addEnvironmentRepo without sending the request
      */
     async addEnvironmentRepoRequestOpts(input: AddEnvironmentRepoOperationRequest | runtime.FlatBody<AddEnvironmentRepoOperationRequest, 'addEnvironmentRepoRequest'>): Promise<runtime.RequestOpts> {
-        const requestParameters = runtime.unflattenBody<AddEnvironmentRepoOperationRequest>(input, 'addEnvironmentRepoRequest', ['environmentId'], []);
+        const requestParameters = runtime.unflattenBody<AddEnvironmentRepoOperationRequest>(input, 'addEnvironmentRepoRequest', ['environmentId', 'org'], []);
         if (requestParameters['environmentId'] == null) {
             throw new runtime.RequiredError(
                 'environmentId',
@@ -873,6 +1040,10 @@ export class BoatApi extends runtime.BaseAPI {
 
         const queryParameters: any = {};
 
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
         const headerParameters: runtime.HTTPHeaders = {};
 
         headerParameters['Content-Type'] = 'application/json';
@@ -1566,11 +1737,135 @@ export class BoatApi extends runtime.BaseAPI {
         return await response.value();
     }
 
+    /**
+     * Creates request options for createCredentialProfile without sending the request
+     */
+    async createCredentialProfileRequestOpts(input: CreateCredentialProfileOperationRequest | runtime.FlatBody<CreateCredentialProfileOperationRequest, 'createCredentialProfileRequest'>): Promise<runtime.RequestOpts> {
+        const requestParameters = runtime.unflattenBody<CreateCredentialProfileOperationRequest>(input, 'createCredentialProfileRequest', [], []);
+        if (requestParameters['createCredentialProfileRequest'] == null) {
+            throw new runtime.RequiredError(
+                'createCredentialProfileRequest',
+                'Required parameter "createCredentialProfileRequest" was null or undefined when calling createCredentialProfile().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/credential-profiles`;
+
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: CreateCredentialProfileRequestToJSON(requestParameters['createCredentialProfileRequest']),
+        };
+    }
+
+    /**
+     * Creates an empty profile, or a copy of `copyFrom`. With `org`, the profile belongs to that organization and only its owners can create it. Needs an API key with `account.admin`.
+     * Create a credential profile
+     */
+    async createCredentialProfileRaw(requestParameters: CreateCredentialProfileOperationRequest | runtime.FlatBody<CreateCredentialProfileOperationRequest, 'createCredentialProfileRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CredentialProfileResponse>> {
+        const requestOptions = await this.createCredentialProfileRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => CredentialProfileResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Creates an empty profile, or a copy of `copyFrom`. With `org`, the profile belongs to that organization and only its owners can create it. Needs an API key with `account.admin`.
+     * Create a credential profile
+     */
+    async createCredentialProfile(requestParameters: CreateCredentialProfileOperationRequest | runtime.FlatBody<CreateCredentialProfileOperationRequest, 'createCredentialProfileRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CredentialProfileResponse> {
+        const response = await this.createCredentialProfileRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Creates request options for createDownloadUrl without sending the request
+     */
+    async createDownloadUrlRequestOpts(input: CreateDownloadUrlRequest | runtime.FlatBody<CreateDownloadUrlRequest, 'fileUrlRequest'>): Promise<runtime.RequestOpts> {
+        const requestParameters = runtime.unflattenBody<CreateDownloadUrlRequest>(input, 'fileUrlRequest', ['sandboxId'], []);
+        if (requestParameters['sandboxId'] == null) {
+            throw new runtime.RequiredError(
+                'sandboxId',
+                'Required parameter "sandboxId" was null or undefined when calling createDownloadUrl().'
+            );
+        }
+
+        if (requestParameters['fileUrlRequest'] == null) {
+            throw new runtime.RequiredError(
+                'fileUrlRequest',
+                'Required parameter "fileUrlRequest" was null or undefined when calling createDownloadUrl().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/sandboxes/{sandboxId}/files/download-url`;
+        urlPath = urlPath.replace('{sandboxId}', encodeURIComponent(String(requestParameters['sandboxId'])));
+
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: FileUrlRequestToJSON(requestParameters['fileUrlRequest']),
+        };
+    }
+
+    /**
+     * Returns a short-lived URL that the sandbox serves itself. GET it to download the file as raw bytes, with no size limit and no Authorization header. The URL is bound to this path and expires after `ttlSeconds` (default 15 minutes, at most 1 hour). Needs `file.read`. Treat the URL as a secret until it expires.
+     * Get a download URL for a sandbox file
+     */
+    async createDownloadUrlRaw(requestParameters: CreateDownloadUrlRequest | runtime.FlatBody<CreateDownloadUrlRequest, 'fileUrlRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<FileUrlResponse>> {
+        const requestOptions = await this.createDownloadUrlRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => FileUrlResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Returns a short-lived URL that the sandbox serves itself. GET it to download the file as raw bytes, with no size limit and no Authorization header. The URL is bound to this path and expires after `ttlSeconds` (default 15 minutes, at most 1 hour). Needs `file.read`. Treat the URL as a secret until it expires.
+     * Get a download URL for a sandbox file
+     */
+    async createDownloadUrl(requestParameters: CreateDownloadUrlRequest | runtime.FlatBody<CreateDownloadUrlRequest, 'fileUrlRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<FileUrlResponse> {
+        const response = await this.createDownloadUrlRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Creates request options for createEnvironment without sending the request
      */
     async createEnvironmentRequestOpts(input: CreateEnvironmentRequest | runtime.FlatBody<CreateEnvironmentRequest, 'createSandboxEnvironmentRequest'>): Promise<runtime.RequestOpts> {
-        const requestParameters = runtime.unflattenBody<CreateEnvironmentRequest>(input, 'createSandboxEnvironmentRequest', [], []);
+        const requestParameters = runtime.unflattenBody<CreateEnvironmentRequest>(input, 'createSandboxEnvironmentRequest', ['org'], []);
         if (requestParameters['createSandboxEnvironmentRequest'] == null) {
             throw new runtime.RequiredError(
                 'createSandboxEnvironmentRequest',
@@ -1580,6 +1875,10 @@ export class BoatApi extends runtime.BaseAPI {
 
         const queryParameters: any = {};
 
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
         const headerParameters: runtime.HTTPHeaders = {};
 
         headerParameters['Content-Type'] = 'application/json';
@@ -1737,6 +2036,72 @@ export class BoatApi extends runtime.BaseAPI {
         return await response.value();
     }
 
+    /**
+     * Creates request options for createUploadUrl without sending the request
+     */
+    async createUploadUrlRequestOpts(input: CreateUploadUrlRequest | runtime.FlatBody<CreateUploadUrlRequest, 'fileUrlRequest'>): Promise<runtime.RequestOpts> {
+        const requestParameters = runtime.unflattenBody<CreateUploadUrlRequest>(input, 'fileUrlRequest', ['sandboxId'], []);
+        if (requestParameters['sandboxId'] == null) {
+            throw new runtime.RequiredError(
+                'sandboxId',
+                'Required parameter "sandboxId" was null or undefined when calling createUploadUrl().'
+            );
+        }
+
+        if (requestParameters['fileUrlRequest'] == null) {
+            throw new runtime.RequiredError(
+                'fileUrlRequest',
+                'Required parameter "fileUrlRequest" was null or undefined when calling createUploadUrl().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/sandboxes/{sandboxId}/files/upload-url`;
+        urlPath = urlPath.replace('{sandboxId}', encodeURIComponent(String(requestParameters['sandboxId'])));
+
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: FileUrlRequestToJSON(requestParameters['fileUrlRequest']),
+        };
+    }
+
+    /**
+     * Returns a short-lived URL that the sandbox serves itself. PUT the file as the raw request body to write it, with no size limit and no Authorization header. Missing directories are created; an existing file is replaced only once the upload completes. The URL is bound to this path and expires after `ttlSeconds` (default 15 minutes, at most 1 hour). Needs `file.write`. Treat the URL as a secret until it expires.
+     * Get an upload URL for a sandbox file
+     */
+    async createUploadUrlRaw(requestParameters: CreateUploadUrlRequest | runtime.FlatBody<CreateUploadUrlRequest, 'fileUrlRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<FileUrlResponse>> {
+        const requestOptions = await this.createUploadUrlRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => FileUrlResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Returns a short-lived URL that the sandbox serves itself. PUT the file as the raw request body to write it, with no size limit and no Authorization header. Missing directories are created; an existing file is replaced only once the upload completes. The URL is bound to this path and expires after `ttlSeconds` (default 15 minutes, at most 1 hour). Needs `file.write`. Treat the URL as a secret until it expires.
+     * Get an upload URL for a sandbox file
+     */
+    async createUploadUrl(requestParameters: CreateUploadUrlRequest | runtime.FlatBody<CreateUploadUrlRequest, 'fileUrlRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<FileUrlResponse> {
+        const response = await this.createUploadUrlRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Creates request options for createWebhook without sending the request
      */
@@ -1796,13 +2161,13 @@ export class BoatApi extends runtime.BaseAPI {
     }
 
     /**
-     * Creates request options for deleteEnvironment without sending the request
+     * Creates request options for deleteCredentialProfile without sending the request
      */
-    async deleteEnvironmentRequestOpts(requestParameters: DeleteEnvironmentRequest): Promise<runtime.RequestOpts> {
-        if (requestParameters['environmentId'] == null) {
+    async deleteCredentialProfileRequestOpts(requestParameters: DeleteCredentialProfileRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['profile'] == null) {
             throw new runtime.RequiredError(
-                'environmentId',
-                'Required parameter "environmentId" was null or undefined when calling deleteEnvironment().'
+                'profile',
+                'Required parameter "profile" was null or undefined when calling deleteCredentialProfile().'
             );
         }
 
@@ -1819,8 +2184,8 @@ export class BoatApi extends runtime.BaseAPI {
             }
         }
 
-        let urlPath = `/environments/{environmentId}`;
-        urlPath = urlPath.replace('{environmentId}', encodeURIComponent(String(requestParameters['environmentId'])));
+        let urlPath = `/credential-profiles/{profile}`;
+        urlPath = urlPath.replace('{profile}', encodeURIComponent(String(requestParameters['profile'])));
 
         return {
             path: urlPath,
@@ -1831,40 +2196,40 @@ export class BoatApi extends runtime.BaseAPI {
     }
 
     /**
-     * Soft-deletes an environment. The default environment cannot be deleted, and at least one environment is always kept.
-     * Delete a sandbox environment
+     * Deletes the profile. A default profile returns `409 is_default`. A profile that an environment names returns `409 in_use`. Needs an API key with `account.admin`.
+     * Delete a credential profile
      */
-    async deleteEnvironmentRaw(requestParameters: DeleteEnvironmentRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SandboxEnvironmentResponse>> {
-        const requestOptions = await this.deleteEnvironmentRequestOpts(requestParameters);
+    async deleteCredentialProfileRaw(requestParameters: DeleteCredentialProfileRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CredentialProfileDeletedResponse>> {
+        const requestOptions = await this.deleteCredentialProfileRequestOpts(requestParameters);
         const response = await this.request(requestOptions, initOverrides);
 
-        return new runtime.JSONApiResponse(response, (jsonValue) => SandboxEnvironmentResponseFromJSON(jsonValue));
+        return new runtime.JSONApiResponse(response, (jsonValue) => CredentialProfileDeletedResponseFromJSON(jsonValue));
     }
 
     /**
-     * Soft-deletes an environment. The default environment cannot be deleted, and at least one environment is always kept.
-     * Delete a sandbox environment
+     * Deletes the profile. A default profile returns `409 is_default`. A profile that an environment names returns `409 in_use`. Needs an API key with `account.admin`.
+     * Delete a credential profile
      */
-    async deleteEnvironment(requestParameters: DeleteEnvironmentRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SandboxEnvironmentResponse> {
-        const response = await this.deleteEnvironmentRaw(requestParameters, initOverrides);
+    async deleteCredentialProfile(requestParameters: DeleteCredentialProfileRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CredentialProfileDeletedResponse> {
+        const response = await this.deleteCredentialProfileRaw(requestParameters, initOverrides);
         return await response.value();
     }
 
     /**
-     * Creates request options for deleteEnvironmentRepo without sending the request
+     * Creates request options for deleteCredentialProfileCustomApi without sending the request
      */
-    async deleteEnvironmentRepoRequestOpts(requestParameters: DeleteEnvironmentRepoRequest): Promise<runtime.RequestOpts> {
-        if (requestParameters['environmentId'] == null) {
+    async deleteCredentialProfileCustomApiRequestOpts(requestParameters: DeleteCredentialProfileCustomApiRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['profile'] == null) {
             throw new runtime.RequiredError(
-                'environmentId',
-                'Required parameter "environmentId" was null or undefined when calling deleteEnvironmentRepo().'
+                'profile',
+                'Required parameter "profile" was null or undefined when calling deleteCredentialProfileCustomApi().'
             );
         }
 
-        if (requestParameters['repositoryId'] == null) {
+        if (requestParameters['name'] == null) {
             throw new runtime.RequiredError(
-                'repositoryId',
-                'Required parameter "repositoryId" was null or undefined when calling deleteEnvironmentRepo().'
+                'name',
+                'Required parameter "name" was null or undefined when calling deleteCredentialProfileCustomApi().'
             );
         }
 
@@ -1881,9 +2246,9 @@ export class BoatApi extends runtime.BaseAPI {
             }
         }
 
-        let urlPath = `/environments/{environmentId}/repos/{repositoryId}`;
-        urlPath = urlPath.replace('{environmentId}', encodeURIComponent(String(requestParameters['environmentId'])));
-        urlPath = urlPath.replace('{repositoryId}', encodeURIComponent(String(requestParameters['repositoryId'])));
+        let urlPath = `/credential-profiles/{profile}/custom-apis/{name}`;
+        urlPath = urlPath.replace('{profile}', encodeURIComponent(String(requestParameters['profile'])));
+        urlPath = urlPath.replace('{name}', encodeURIComponent(String(requestParameters['name'])));
 
         return {
             path: urlPath,
@@ -1894,30 +2259,219 @@ export class BoatApi extends runtime.BaseAPI {
     }
 
     /**
-     * Removes one repository from the environment\'s selection. Mints a new immutable version.
-     * Remove a repository from an environment
+     * Removes one custom API from the profile. Needs an API key with `account.admin`.
+     * Remove a custom API
      */
-    async deleteEnvironmentRepoRaw(requestParameters: DeleteEnvironmentRepoRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<EnvironmentItemChangeResponse>> {
-        const requestOptions = await this.deleteEnvironmentRepoRequestOpts(requestParameters);
+    async deleteCredentialProfileCustomApiRaw(requestParameters: DeleteCredentialProfileCustomApiRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CredentialProfileResponse>> {
+        const requestOptions = await this.deleteCredentialProfileCustomApiRequestOpts(requestParameters);
         const response = await this.request(requestOptions, initOverrides);
 
-        return new runtime.JSONApiResponse(response, (jsonValue) => EnvironmentItemChangeResponseFromJSON(jsonValue));
+        return new runtime.JSONApiResponse(response, (jsonValue) => CredentialProfileResponseFromJSON(jsonValue));
     }
 
     /**
-     * Removes one repository from the environment\'s selection. Mints a new immutable version.
-     * Remove a repository from an environment
+     * Removes one custom API from the profile. Needs an API key with `account.admin`.
+     * Remove a custom API
      */
-    async deleteEnvironmentRepo(requestParameters: DeleteEnvironmentRepoRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<EnvironmentItemChangeResponse> {
-        const response = await this.deleteEnvironmentRepoRaw(requestParameters, initOverrides);
+    async deleteCredentialProfileCustomApi(requestParameters: DeleteCredentialProfileCustomApiRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CredentialProfileResponse> {
+        const response = await this.deleteCredentialProfileCustomApiRaw(requestParameters, initOverrides);
         return await response.value();
     }
 
     /**
-     * Creates request options for deleteEnvironmentSecretFile without sending the request
+     * Creates request options for deleteCredentialProfileKey without sending the request
      */
-    async deleteEnvironmentSecretFileRequestOpts(requestParameters: DeleteEnvironmentSecretFileRequest): Promise<runtime.RequestOpts> {
-        if (requestParameters['path'] == null) {
+    async deleteCredentialProfileKeyRequestOpts(requestParameters: DeleteCredentialProfileKeyRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['profile'] == null) {
+            throw new runtime.RequiredError(
+                'profile',
+                'Required parameter "profile" was null or undefined when calling deleteCredentialProfileKey().'
+            );
+        }
+
+        if (requestParameters['credential'] == null) {
+            throw new runtime.RequiredError(
+                'credential',
+                'Required parameter "credential" was null or undefined when calling deleteCredentialProfileKey().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/credential-profiles/{profile}/keys/{credential}`;
+        urlPath = urlPath.replace('{profile}', encodeURIComponent(String(requestParameters['profile'])));
+        urlPath = urlPath.replace('{credential}', encodeURIComponent(String(requestParameters['credential'])));
+
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+
+    /**
+     * Removes one credential, an API key or a sign-in. Needs an API key with `account.admin`.
+     * Remove a credential profile credential
+     */
+    async deleteCredentialProfileKeyRaw(requestParameters: DeleteCredentialProfileKeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CredentialProfileResponse>> {
+        const requestOptions = await this.deleteCredentialProfileKeyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => CredentialProfileResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Removes one credential, an API key or a sign-in. Needs an API key with `account.admin`.
+     * Remove a credential profile credential
+     */
+    async deleteCredentialProfileKey(requestParameters: DeleteCredentialProfileKeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CredentialProfileResponse> {
+        const response = await this.deleteCredentialProfileKeyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Creates request options for deleteEnvironment without sending the request
+     */
+    async deleteEnvironmentRequestOpts(requestParameters: DeleteEnvironmentRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['environmentId'] == null) {
+            throw new runtime.RequiredError(
+                'environmentId',
+                'Required parameter "environmentId" was null or undefined when calling deleteEnvironment().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/environments/{environmentId}`;
+        urlPath = urlPath.replace('{environmentId}', encodeURIComponent(String(requestParameters['environmentId'])));
+
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+
+    /**
+     * Soft-deletes an environment. The default environment cannot be deleted, and at least one environment is always kept.
+     * Delete a sandbox environment
+     */
+    async deleteEnvironmentRaw(requestParameters: DeleteEnvironmentRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SandboxEnvironmentResponse>> {
+        const requestOptions = await this.deleteEnvironmentRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => SandboxEnvironmentResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Soft-deletes an environment. The default environment cannot be deleted, and at least one environment is always kept.
+     * Delete a sandbox environment
+     */
+    async deleteEnvironment(requestParameters: DeleteEnvironmentRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SandboxEnvironmentResponse> {
+        const response = await this.deleteEnvironmentRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Creates request options for deleteEnvironmentRepo without sending the request
+     */
+    async deleteEnvironmentRepoRequestOpts(requestParameters: DeleteEnvironmentRepoRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['environmentId'] == null) {
+            throw new runtime.RequiredError(
+                'environmentId',
+                'Required parameter "environmentId" was null or undefined when calling deleteEnvironmentRepo().'
+            );
+        }
+
+        if (requestParameters['repositoryId'] == null) {
+            throw new runtime.RequiredError(
+                'repositoryId',
+                'Required parameter "repositoryId" was null or undefined when calling deleteEnvironmentRepo().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/environments/{environmentId}/repos/{repositoryId}`;
+        urlPath = urlPath.replace('{environmentId}', encodeURIComponent(String(requestParameters['environmentId'])));
+        urlPath = urlPath.replace('{repositoryId}', encodeURIComponent(String(requestParameters['repositoryId'])));
+
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+
+    /**
+     * Removes one repository from the environment\'s selection. Mints a new immutable version.
+     * Remove a repository from an environment
+     */
+    async deleteEnvironmentRepoRaw(requestParameters: DeleteEnvironmentRepoRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<EnvironmentItemChangeResponse>> {
+        const requestOptions = await this.deleteEnvironmentRepoRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => EnvironmentItemChangeResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Removes one repository from the environment\'s selection. Mints a new immutable version.
+     * Remove a repository from an environment
+     */
+    async deleteEnvironmentRepo(requestParameters: DeleteEnvironmentRepoRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<EnvironmentItemChangeResponse> {
+        const response = await this.deleteEnvironmentRepoRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Creates request options for deleteEnvironmentSecretFile without sending the request
+     */
+    async deleteEnvironmentSecretFileRequestOpts(requestParameters: DeleteEnvironmentSecretFileRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['path'] == null) {
             throw new runtime.RequiredError(
                 'path',
                 'Required parameter "path" was null or undefined when calling deleteEnvironmentSecretFile().'
@@ -1937,6 +2491,10 @@ export class BoatApi extends runtime.BaseAPI {
             queryParameters['path'] = requestParameters['path'];
         }
 
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.accessToken) {
@@ -1999,6 +2557,10 @@ export class BoatApi extends runtime.BaseAPI {
 
         const queryParameters: any = {};
 
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.accessToken) {
@@ -2467,9 +3029,13 @@ export class BoatApi extends runtime.BaseAPI {
     /**
      * Creates request options for environments without sending the request
      */
-    async environmentsRequestOpts(): Promise<runtime.RequestOpts> {
+    async environmentsRequestOpts(requestParameters: EnvironmentsRequest): Promise<runtime.RequestOpts> {
         const queryParameters: any = {};
 
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.accessToken) {
@@ -2495,8 +3061,8 @@ export class BoatApi extends runtime.BaseAPI {
      * Returns every non-deleted sandbox environment with its latest-version flags, contents, and per-version sandbox usage. A default environment named `base` is created on first access if none exists.
      * List Sandbox environments
      */
-    async environmentsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SandboxEnvironmentListResponse>> {
-        const requestOptions = await this.environmentsRequestOpts();
+    async environmentsRaw(requestParameters: EnvironmentsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SandboxEnvironmentListResponse>> {
+        const requestOptions = await this.environmentsRequestOpts(requestParameters);
         const response = await this.request(requestOptions, initOverrides);
 
         return new runtime.JSONApiResponse(response, (jsonValue) => SandboxEnvironmentListResponseFromJSON(jsonValue));
@@ -2506,8 +3072,8 @@ export class BoatApi extends runtime.BaseAPI {
      * Returns every non-deleted sandbox environment with its latest-version flags, contents, and per-version sandbox usage. A default environment named `base` is created on first access if none exists.
      * List Sandbox environments
      */
-    async environments(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SandboxEnvironmentListResponse> {
-        const response = await this.environmentsRaw(initOverrides);
+    async environments(requestParameters: EnvironmentsRequest = {}, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SandboxEnvironmentListResponse> {
+        const response = await this.environmentsRaw(requestParameters, initOverrides);
         return await response.value();
     }
 
@@ -2704,6 +3270,124 @@ export class BoatApi extends runtime.BaseAPI {
         return await response.value();
     }
 
+    /**
+     * Creates request options for getAiProxy without sending the request
+     */
+    async getAiProxyRequestOpts(requestParameters: GetAiProxyRequest): Promise<runtime.RequestOpts> {
+        const queryParameters: any = {};
+
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (requestParameters['xBoatOrg'] != null) {
+            headerParameters['X-Boat-Org'] = String(requestParameters['xBoatOrg']);
+        }
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/ai-proxy`;
+
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+
+    /**
+     * Returns the AI credentials proxy switch of the account in scope, a person or an organization, with its price. Needs an API key with `account.admin`.
+     * Get AI credentials proxy
+     */
+    async getAiProxyRaw(requestParameters: GetAiProxyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AiProxySettings>> {
+        const requestOptions = await this.getAiProxyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => AiProxySettingsFromJSON(jsonValue));
+    }
+
+    /**
+     * Returns the AI credentials proxy switch of the account in scope, a person or an organization, with its price. Needs an API key with `account.admin`.
+     * Get AI credentials proxy
+     */
+    async getAiProxy(requestParameters: GetAiProxyRequest = {}, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AiProxySettings> {
+        const response = await this.getAiProxyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Creates request options for getAiUsage without sending the request
+     */
+    async getAiUsageRequestOpts(requestParameters: GetAiUsageRequest): Promise<runtime.RequestOpts> {
+        const queryParameters: any = {};
+
+        if (requestParameters['days'] != null) {
+            queryParameters['days'] = requestParameters['days'];
+        }
+
+        if (requestParameters['profile'] != null) {
+            queryParameters['profile'] = requestParameters['profile'];
+        }
+
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (requestParameters['xBoatOrg'] != null) {
+            headerParameters['X-Boat-Org'] = String(requestParameters['xBoatOrg']);
+        }
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/ai-usage`;
+
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+
+    /**
+     * Proxied AI usage, per sandbox and in total, per UTC day, credential and model. Without `profile`, the usage charged to the wallet in scope. With `profile`, the requests made with that profile\'s credentials, whoever pays; only its managers can read it. Needs an API key with `account.read`.
+     * Get AI usage
+     */
+    async getAiUsageRaw(requestParameters: GetAiUsageRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountAiUsageResponse>> {
+        const requestOptions = await this.getAiUsageRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => AccountAiUsageResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Proxied AI usage, per sandbox and in total, per UTC day, credential and model. Without `profile`, the usage charged to the wallet in scope. With `profile`, the requests made with that profile\'s credentials, whoever pays; only its managers can read it. Needs an API key with `account.read`.
+     * Get AI usage
+     */
+    async getAiUsage(requestParameters: GetAiUsageRequest = {}, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountAiUsageResponse> {
+        const response = await this.getAiUsageRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Creates request options for getCommand without sending the request
      */
@@ -2975,6 +3659,65 @@ export class BoatApi extends runtime.BaseAPI {
         return await response.value();
     }
 
+    /**
+     * Creates request options for getSandboxAiUsage without sending the request
+     */
+    async getSandboxAiUsageRequestOpts(requestParameters: GetSandboxAiUsageRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['sandboxId'] == null) {
+            throw new runtime.RequiredError(
+                'sandboxId',
+                'Required parameter "sandboxId" was null or undefined when calling getSandboxAiUsage().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        if (requestParameters['days'] != null) {
+            queryParameters['days'] = requestParameters['days'];
+        }
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/sandboxes/{sandboxId}/ai-usage`;
+        urlPath = urlPath.replace('{sandboxId}', encodeURIComponent(String(requestParameters['sandboxId'])));
+
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+
+    /**
+     * One sandbox\'s proxied AI usage per UTC day, credential and model, and whether it is blocked. Needs an API key with `box.read` on the sandbox.
+     * Get sandbox AI usage
+     */
+    async getSandboxAiUsageRaw(requestParameters: GetSandboxAiUsageRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SandboxAiUsageResponse>> {
+        const requestOptions = await this.getSandboxAiUsageRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => SandboxAiUsageResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * One sandbox\'s proxied AI usage per UTC day, credential and model, and whether it is blocked. Needs an API key with `box.read` on the sandbox.
+     * Get sandbox AI usage
+     */
+    async getSandboxAiUsage(requestParameters: GetSandboxAiUsageRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SandboxAiUsageResponse> {
+        const response = await this.getSandboxAiUsageRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Creates request options for getSnapshotDownload without sending the request
      */
@@ -3493,6 +4236,53 @@ export class BoatApi extends runtime.BaseAPI {
         return await response.value();
     }
 
+    /**
+     * Creates request options for listCredentialProfiles without sending the request
+     */
+    async listCredentialProfilesRequestOpts(): Promise<runtime.RequestOpts> {
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/credential-profiles`;
+
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+
+    /**
+     * Returns every AI credential profile you can use, yours and your organizations\'. Secret values are never returned. Needs an API key with `account.admin`.
+     * List credential profiles
+     */
+    async listCredentialProfilesRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CredentialProfileListResponse>> {
+        const requestOptions = await this.listCredentialProfilesRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => CredentialProfileListResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Returns every AI credential profile you can use, yours and your organizations\'. Secret values are never returned. Needs an API key with `account.admin`.
+     * List credential profiles
+     */
+    async listCredentialProfiles(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CredentialProfileListResponse> {
+        const response = await this.listCredentialProfilesRaw(initOverrides);
+        return await response.value();
+    }
+
     /**
      * Creates request options for listNamedSnapshots without sending the request
      */
@@ -4097,7 +4887,7 @@ export class BoatApi extends runtime.BaseAPI {
     }
 
     /**
-     * Files up to 5 MiB. Use `GET /sandboxes/{sandboxId}/artifacts` for files up to 50 MiB, and SCP over SSH for larger ones.
+     * Files up to 5 MiB. For a larger file, use `POST /sandboxes/{sandboxId}/files/download-url`.
      * Read a file from a sandbox
      */
     async readFileRaw(requestParameters: ReadFileRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<FileReadResponse>> {
@@ -4108,7 +4898,7 @@ export class BoatApi extends runtime.BaseAPI {
     }
 
     /**
-     * Files up to 5 MiB. Use `GET /sandboxes/{sandboxId}/artifacts` for files up to 50 MiB, and SCP over SSH for larger ones.
+     * Files up to 5 MiB. For a larger file, use `POST /sandboxes/{sandboxId}/files/download-url`.
      * Read a file from a sandbox
      */
     async readFile(requestParameters: ReadFileRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<FileReadResponse> {
@@ -4651,19 +5441,134 @@ export class BoatApi extends runtime.BaseAPI {
      * Freeze a sandbox\'s current state under a name (`boat snapshot <id> <name>` in the CLI). Answers `202` immediately with the snapshot in `saving`; a running sandbox takes a fresh capture first, which can run minutes. Poll `GET /named-snapshots/{name}` until the status settles at `ready` or `failed`. Reusing one of your existing names replaces that snapshot\'s artifact once the new save is ready.
      * Save a named snapshot
      */
-    async saveNamedSnapshot(requestParameters: SaveNamedSnapshotRequest | runtime.FlatBody<SaveNamedSnapshotRequest, 'namedSnapshotSaveRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<NamedSnapshotSavingResponse> {
-        const response = await this.saveNamedSnapshotRaw(requestParameters, initOverrides);
+    async saveNamedSnapshot(requestParameters: SaveNamedSnapshotRequest | runtime.FlatBody<SaveNamedSnapshotRequest, 'namedSnapshotSaveRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<NamedSnapshotSavingResponse> {
+        const response = await this.saveNamedSnapshotRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Creates request options for secrets without sending the request
+     */
+    async secretsRequestOpts(): Promise<runtime.RequestOpts> {
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/secrets`;
+
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+
+    /**
+     * Returns the environment variables and secret files configured for sandboxes.
+     * Get Boat secrets setup
+     */
+    async secretsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SecretsResponse>> {
+        const requestOptions = await this.secretsRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => SecretsResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Returns the environment variables and secret files configured for sandboxes.
+     * Get Boat secrets setup
+     */
+    async secrets(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SecretsResponse> {
+        const response = await this.secretsRaw(initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Creates request options for selectRepo without sending the request
+     */
+    async selectRepoRequestOpts(input: SelectRepoRequest | runtime.FlatBody<SelectRepoRequest, 'repoSelectionRequest'>): Promise<runtime.RequestOpts> {
+        const requestParameters = runtime.unflattenBody<SelectRepoRequest>(input, 'repoSelectionRequest', [], []);
+        if (requestParameters['repoSelectionRequest'] == null) {
+            throw new runtime.RequiredError(
+                'repoSelectionRequest',
+                'Required parameter "repoSelectionRequest" was null or undefined when calling selectRepo().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/repos`;
+
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: RepoSelectionRequestToJSON(requestParameters['repoSelectionRequest']),
+        };
+    }
+
+    /**
+     * Idempotently selects one repository for the sandbox environment. Use `databaseId` from `GET /repos` as `repositoryId`; selecting an already-selected repository updates its `baseBranch`.
+     * Select repository for sandboxes
+     */
+    async selectRepoRaw(requestParameters: SelectRepoRequest | runtime.FlatBody<SelectRepoRequest, 'repoSelectionRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<RepoSelectionResponse>> {
+        const requestOptions = await this.selectRepoRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => RepoSelectionResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Idempotently selects one repository for the sandbox environment. Use `databaseId` from `GET /repos` as `repositoryId`; selecting an already-selected repository updates its `baseBranch`.
+     * Select repository for sandboxes
+     */
+    async selectRepo(requestParameters: SelectRepoRequest | runtime.FlatBody<SelectRepoRequest, 'repoSelectionRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<RepoSelectionResponse> {
+        const response = await this.selectRepoRaw(requestParameters, initOverrides);
         return await response.value();
     }
 
     /**
-     * Creates request options for secrets without sending the request
+     * Creates request options for setActiveOrganization without sending the request
      */
-    async secretsRequestOpts(): Promise<runtime.RequestOpts> {
+    async setActiveOrganizationRequestOpts(input: SetActiveOrganizationRequest | runtime.FlatBody<SetActiveOrganizationRequest, 'activeOrgUpdateRequest'>): Promise<runtime.RequestOpts> {
+        const requestParameters = runtime.unflattenBody<SetActiveOrganizationRequest>(input, 'activeOrgUpdateRequest', [], []);
+        if (requestParameters['activeOrgUpdateRequest'] == null) {
+            throw new runtime.RequiredError(
+                'activeOrgUpdateRequest',
+                'Required parameter "activeOrgUpdateRequest" was null or undefined when calling setActiveOrganization().'
+            );
+        }
+
         const queryParameters: any = {};
 
         const headerParameters: runtime.HTTPHeaders = {};
 
+        headerParameters['Content-Type'] = 'application/json';
+
         if (this.configuration && this.configuration.accessToken) {
             const token = this.configuration.accessToken;
             const tokenString = await token("BoatBearerAuth", []);
@@ -4673,45 +5578,60 @@ export class BoatApi extends runtime.BaseAPI {
             }
         }
 
-        let urlPath = `/secrets`;
+        let urlPath = `/orgs/active`;
 
         return {
             path: urlPath,
-            method: 'GET',
+            method: 'PATCH',
             headers: headerParameters,
             query: queryParameters,
+            body: ActiveOrgUpdateRequestToJSON(requestParameters['activeOrgUpdateRequest']),
         };
     }
 
     /**
-     * Returns the environment variables and secret files configured for sandboxes.
-     * Get Boat secrets setup
+     * Set the wallet new sandboxes bill when a request names none, for this account on every client: the API, the CLI (`boat org switch` sets the same value) and the dashboard. Pass an organization id or name you belong to, or `personal` (or `null`) for your own account. `GET /limits` follows it. Sandboxes already running keep the wallet they were created with; leaving or deleting the organization resets the account to personal.
+     * Set the active organization
      */
-    async secretsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SecretsResponse>> {
-        const requestOptions = await this.secretsRequestOpts();
+    async setActiveOrganizationRaw(requestParameters: SetActiveOrganizationRequest | runtime.FlatBody<SetActiveOrganizationRequest, 'activeOrgUpdateRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ActiveOrgResponse>> {
+        const requestOptions = await this.setActiveOrganizationRequestOpts(requestParameters);
         const response = await this.request(requestOptions, initOverrides);
 
-        return new runtime.JSONApiResponse(response, (jsonValue) => SecretsResponseFromJSON(jsonValue));
+        return new runtime.JSONApiResponse(response, (jsonValue) => ActiveOrgResponseFromJSON(jsonValue));
     }
 
     /**
-     * Returns the environment variables and secret files configured for sandboxes.
-     * Get Boat secrets setup
+     * Set the wallet new sandboxes bill when a request names none, for this account on every client: the API, the CLI (`boat org switch` sets the same value) and the dashboard. Pass an organization id or name you belong to, or `personal` (or `null`) for your own account. `GET /limits` follows it. Sandboxes already running keep the wallet they were created with; leaving or deleting the organization resets the account to personal.
+     * Set the active organization
      */
-    async secrets(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SecretsResponse> {
-        const response = await this.secretsRaw(initOverrides);
+    async setActiveOrganization(requestParameters: SetActiveOrganizationRequest | runtime.FlatBody<SetActiveOrganizationRequest, 'activeOrgUpdateRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ActiveOrgResponse> {
+        const response = await this.setActiveOrganizationRaw(requestParameters, initOverrides);
         return await response.value();
     }
 
     /**
-     * Creates request options for selectRepo without sending the request
+     * Creates request options for setCredentialProfileCustomApi without sending the request
      */
-    async selectRepoRequestOpts(input: SelectRepoRequest | runtime.FlatBody<SelectRepoRequest, 'repoSelectionRequest'>): Promise<runtime.RequestOpts> {
-        const requestParameters = runtime.unflattenBody<SelectRepoRequest>(input, 'repoSelectionRequest', [], []);
-        if (requestParameters['repoSelectionRequest'] == null) {
+    async setCredentialProfileCustomApiRequestOpts(input: SetCredentialProfileCustomApiRequest | runtime.FlatBody<SetCredentialProfileCustomApiRequest, 'setCustomApiRequest'>): Promise<runtime.RequestOpts> {
+        const requestParameters = runtime.unflattenBody<SetCredentialProfileCustomApiRequest>(input, 'setCustomApiRequest', ['profile', 'name'], []);
+        if (requestParameters['profile'] == null) {
             throw new runtime.RequiredError(
-                'repoSelectionRequest',
-                'Required parameter "repoSelectionRequest" was null or undefined when calling selectRepo().'
+                'profile',
+                'Required parameter "profile" was null or undefined when calling setCredentialProfileCustomApi().'
+            );
+        }
+
+        if (requestParameters['name'] == null) {
+            throw new runtime.RequiredError(
+                'name',
+                'Required parameter "name" was null or undefined when calling setCredentialProfileCustomApi().'
+            );
+        }
+
+        if (requestParameters['setCustomApiRequest'] == null) {
+            throw new runtime.RequiredError(
+                'setCustomApiRequest',
+                'Required parameter "setCustomApiRequest" was null or undefined when calling setCredentialProfileCustomApi().'
             );
         }
 
@@ -4730,46 +5650,62 @@ export class BoatApi extends runtime.BaseAPI {
             }
         }
 
-        let urlPath = `/repos`;
+        let urlPath = `/credential-profiles/{profile}/custom-apis/{name}`;
+        urlPath = urlPath.replace('{profile}', encodeURIComponent(String(requestParameters['profile'])));
+        urlPath = urlPath.replace('{name}', encodeURIComponent(String(requestParameters['name'])));
 
         return {
             path: urlPath,
-            method: 'POST',
+            method: 'PUT',
             headers: headerParameters,
             query: queryParameters,
-            body: RepoSelectionRequestToJSON(requestParameters['repoSelectionRequest']),
+            body: SetCustomApiRequestToJSON(requestParameters['setCustomApiRequest']),
         };
     }
 
     /**
-     * Idempotently selects one repository for the sandbox environment. Use `databaseId` from `GET /repos` as `repositoryId`; selecting an already-selected repository updates its `baseBranch`.
-     * Select repository for sandboxes
+     * Adds or replaces one custom API. The sandbox gets `<NAME>` and `<NAME>_BASE_URL`. Needs an API key with `account.admin`.
+     * Set a custom API
      */
-    async selectRepoRaw(requestParameters: SelectRepoRequest | runtime.FlatBody<SelectRepoRequest, 'repoSelectionRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<RepoSelectionResponse>> {
-        const requestOptions = await this.selectRepoRequestOpts(requestParameters);
+    async setCredentialProfileCustomApiRaw(requestParameters: SetCredentialProfileCustomApiRequest | runtime.FlatBody<SetCredentialProfileCustomApiRequest, 'setCustomApiRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CredentialProfileResponse>> {
+        const requestOptions = await this.setCredentialProfileCustomApiRequestOpts(requestParameters);
         const response = await this.request(requestOptions, initOverrides);
 
-        return new runtime.JSONApiResponse(response, (jsonValue) => RepoSelectionResponseFromJSON(jsonValue));
+        return new runtime.JSONApiResponse(response, (jsonValue) => CredentialProfileResponseFromJSON(jsonValue));
     }
 
     /**
-     * Idempotently selects one repository for the sandbox environment. Use `databaseId` from `GET /repos` as `repositoryId`; selecting an already-selected repository updates its `baseBranch`.
-     * Select repository for sandboxes
+     * Adds or replaces one custom API. The sandbox gets `<NAME>` and `<NAME>_BASE_URL`. Needs an API key with `account.admin`.
+     * Set a custom API
      */
-    async selectRepo(requestParameters: SelectRepoRequest | runtime.FlatBody<SelectRepoRequest, 'repoSelectionRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<RepoSelectionResponse> {
-        const response = await this.selectRepoRaw(requestParameters, initOverrides);
+    async setCredentialProfileCustomApi(requestParameters: SetCredentialProfileCustomApiRequest | runtime.FlatBody<SetCredentialProfileCustomApiRequest, 'setCustomApiRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CredentialProfileResponse> {
+        const response = await this.setCredentialProfileCustomApiRaw(requestParameters, initOverrides);
         return await response.value();
     }
 
     /**
-     * Creates request options for setActiveOrganization without sending the request
+     * Creates request options for setCredentialProfileKey without sending the request
      */
-    async setActiveOrganizationRequestOpts(input: SetActiveOrganizationRequest | runtime.FlatBody<SetActiveOrganizationRequest, 'activeOrgUpdateRequest'>): Promise<runtime.RequestOpts> {
-        const requestParameters = runtime.unflattenBody<SetActiveOrganizationRequest>(input, 'activeOrgUpdateRequest', [], []);
-        if (requestParameters['activeOrgUpdateRequest'] == null) {
+    async setCredentialProfileKeyRequestOpts(input: SetCredentialProfileKeyRequest | runtime.FlatBody<SetCredentialProfileKeyRequest, 'setCredentialKeyRequest'>): Promise<runtime.RequestOpts> {
+        const requestParameters = runtime.unflattenBody<SetCredentialProfileKeyRequest>(input, 'setCredentialKeyRequest', ['profile', 'credential'], []);
+        if (requestParameters['profile'] == null) {
             throw new runtime.RequiredError(
-                'activeOrgUpdateRequest',
-                'Required parameter "activeOrgUpdateRequest" was null or undefined when calling setActiveOrganization().'
+                'profile',
+                'Required parameter "profile" was null or undefined when calling setCredentialProfileKey().'
+            );
+        }
+
+        if (requestParameters['credential'] == null) {
+            throw new runtime.RequiredError(
+                'credential',
+                'Required parameter "credential" was null or undefined when calling setCredentialProfileKey().'
+            );
+        }
+
+        if (requestParameters['setCredentialKeyRequest'] == null) {
+            throw new runtime.RequiredError(
+                'setCredentialKeyRequest',
+                'Required parameter "setCredentialKeyRequest" was null or undefined when calling setCredentialProfileKey().'
             );
         }
 
@@ -4788,34 +5724,36 @@ export class BoatApi extends runtime.BaseAPI {
             }
         }
 
-        let urlPath = `/orgs/active`;
+        let urlPath = `/credential-profiles/{profile}/keys/{credential}`;
+        urlPath = urlPath.replace('{profile}', encodeURIComponent(String(requestParameters['profile'])));
+        urlPath = urlPath.replace('{credential}', encodeURIComponent(String(requestParameters['credential'])));
 
         return {
             path: urlPath,
-            method: 'PATCH',
+            method: 'PUT',
             headers: headerParameters,
             query: queryParameters,
-            body: ActiveOrgUpdateRequestToJSON(requestParameters['activeOrgUpdateRequest']),
+            body: SetCredentialKeyRequestToJSON(requestParameters['setCredentialKeyRequest']),
         };
     }
 
     /**
-     * Set the wallet new sandboxes bill when a request names none, for this account on every client: the API, the CLI (`boat org switch` sets the same value) and the dashboard. Pass an organization id or name you belong to, or `personal` (or `null`) for your own account. `GET /limits` follows it. Sandboxes already running keep the wallet they were created with; leaving or deleting the organization resets the account to personal.
-     * Set the active organization
+     * Sets one API key. A sign-in id returns `400 not_an_api_key`; connect sign-ins on the dashboard Agents page. Running sandboxes that use the profile get the new key. Needs an API key with `account.admin`.
+     * Set a credential profile API key
      */
-    async setActiveOrganizationRaw(requestParameters: SetActiveOrganizationRequest | runtime.FlatBody<SetActiveOrganizationRequest, 'activeOrgUpdateRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ActiveOrgResponse>> {
-        const requestOptions = await this.setActiveOrganizationRequestOpts(requestParameters);
+    async setCredentialProfileKeyRaw(requestParameters: SetCredentialProfileKeyRequest | runtime.FlatBody<SetCredentialProfileKeyRequest, 'setCredentialKeyRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CredentialProfileResponse>> {
+        const requestOptions = await this.setCredentialProfileKeyRequestOpts(requestParameters);
         const response = await this.request(requestOptions, initOverrides);
 
-        return new runtime.JSONApiResponse(response, (jsonValue) => ActiveOrgResponseFromJSON(jsonValue));
+        return new runtime.JSONApiResponse(response, (jsonValue) => CredentialProfileResponseFromJSON(jsonValue));
     }
 
     /**
-     * Set the wallet new sandboxes bill when a request names none, for this account on every client: the API, the CLI (`boat org switch` sets the same value) and the dashboard. Pass an organization id or name you belong to, or `personal` (or `null`) for your own account. `GET /limits` follows it. Sandboxes already running keep the wallet they were created with; leaving or deleting the organization resets the account to personal.
-     * Set the active organization
+     * Sets one API key. A sign-in id returns `400 not_an_api_key`; connect sign-ins on the dashboard Agents page. Running sandboxes that use the profile get the new key. Needs an API key with `account.admin`.
+     * Set a credential profile API key
      */
-    async setActiveOrganization(requestParameters: SetActiveOrganizationRequest | runtime.FlatBody<SetActiveOrganizationRequest, 'activeOrgUpdateRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ActiveOrgResponse> {
-        const response = await this.setActiveOrganizationRaw(requestParameters, initOverrides);
+    async setCredentialProfileKey(requestParameters: SetCredentialProfileKeyRequest | runtime.FlatBody<SetCredentialProfileKeyRequest, 'setCredentialKeyRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CredentialProfileResponse> {
+        const response = await this.setCredentialProfileKeyRaw(requestParameters, initOverrides);
         return await response.value();
     }
 
@@ -4823,7 +5761,7 @@ export class BoatApi extends runtime.BaseAPI {
      * Creates request options for setEnvironmentSecretFile without sending the request
      */
     async setEnvironmentSecretFileRequestOpts(input: SetEnvironmentSecretFileOperationRequest | runtime.FlatBody<SetEnvironmentSecretFileOperationRequest, 'setEnvironmentSecretFileRequest'>): Promise<runtime.RequestOpts> {
-        const requestParameters = runtime.unflattenBody<SetEnvironmentSecretFileOperationRequest>(input, 'setEnvironmentSecretFileRequest', ['environmentId'], []);
+        const requestParameters = runtime.unflattenBody<SetEnvironmentSecretFileOperationRequest>(input, 'setEnvironmentSecretFileRequest', ['environmentId', 'org'], []);
         if (requestParameters['environmentId'] == null) {
             throw new runtime.RequiredError(
                 'environmentId',
@@ -4840,6 +5778,10 @@ export class BoatApi extends runtime.BaseAPI {
 
         const queryParameters: any = {};
 
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
         const headerParameters: runtime.HTTPHeaders = {};
 
         headerParameters['Content-Type'] = 'application/json';
@@ -4889,7 +5831,7 @@ export class BoatApi extends runtime.BaseAPI {
      * Creates request options for setEnvironmentVar without sending the request
      */
     async setEnvironmentVarRequestOpts(input: SetEnvironmentVarOperationRequest | runtime.FlatBody<SetEnvironmentVarOperationRequest, 'setEnvironmentVarRequest'>): Promise<runtime.RequestOpts> {
-        const requestParameters = runtime.unflattenBody<SetEnvironmentVarOperationRequest>(input, 'setEnvironmentVarRequest', ['environmentId', 'key'], []);
+        const requestParameters = runtime.unflattenBody<SetEnvironmentVarOperationRequest>(input, 'setEnvironmentVarRequest', ['environmentId', 'key', 'org'], []);
         if (requestParameters['environmentId'] == null) {
             throw new runtime.RequiredError(
                 'environmentId',
@@ -4913,6 +5855,10 @@ export class BoatApi extends runtime.BaseAPI {
 
         const queryParameters: any = {};
 
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
         const headerParameters: runtime.HTTPHeaders = {};
 
         headerParameters['Content-Type'] = 'application/json';
@@ -4959,6 +5905,72 @@ export class BoatApi extends runtime.BaseAPI {
         return await response.value();
     }
 
+    /**
+     * Creates request options for setSandboxAiAccess without sending the request
+     */
+    async setSandboxAiAccessRequestOpts(input: SetSandboxAiAccessOperationRequest | runtime.FlatBody<SetSandboxAiAccessOperationRequest, 'setSandboxAiAccessRequest'>): Promise<runtime.RequestOpts> {
+        const requestParameters = runtime.unflattenBody<SetSandboxAiAccessOperationRequest>(input, 'setSandboxAiAccessRequest', ['sandboxId'], []);
+        if (requestParameters['sandboxId'] == null) {
+            throw new runtime.RequiredError(
+                'sandboxId',
+                'Required parameter "sandboxId" was null or undefined when calling setSandboxAiAccess().'
+            );
+        }
+
+        if (requestParameters['setSandboxAiAccessRequest'] == null) {
+            throw new runtime.RequiredError(
+                'setSandboxAiAccessRequest',
+                'Required parameter "setSandboxAiAccessRequest" was null or undefined when calling setSandboxAiAccess().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/sandboxes/{sandboxId}/ai-access`;
+        urlPath = urlPath.replace('{sandboxId}', encodeURIComponent(String(requestParameters['sandboxId'])));
+
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: SetSandboxAiAccessRequestToJSON(requestParameters['setSandboxAiAccessRequest']),
+        };
+    }
+
+    /**
+     * Blocks or unblocks the sandbox\'s AI placeholders, running or stopped. The proxy refuses a blocked sandbox\'s requests with `403`. It has no effect on a sandbox that holds real keys. The sandbox creator, or a manager of its credential profile, can call it. Needs an API key with `account.admin`.
+     * Block or unblock sandbox AI access
+     */
+    async setSandboxAiAccessRaw(requestParameters: SetSandboxAiAccessOperationRequest | runtime.FlatBody<SetSandboxAiAccessOperationRequest, 'setSandboxAiAccessRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SandboxAiAccessResponse>> {
+        const requestOptions = await this.setSandboxAiAccessRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => SandboxAiAccessResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Blocks or unblocks the sandbox\'s AI placeholders, running or stopped. The proxy refuses a blocked sandbox\'s requests with `403`. It has no effect on a sandbox that holds real keys. The sandbox creator, or a manager of its credential profile, can call it. Needs an API key with `account.admin`.
+     * Block or unblock sandbox AI access
+     */
+    async setSandboxAiAccess(requestParameters: SetSandboxAiAccessOperationRequest | runtime.FlatBody<SetSandboxAiAccessOperationRequest, 'setSandboxAiAccessRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SandboxAiAccessResponse> {
+        const response = await this.setSandboxAiAccessRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Creates request options for setTelemetry without sending the request
      */
@@ -5394,6 +6406,138 @@ export class BoatApi extends runtime.BaseAPI {
         return await response.value();
     }
 
+    /**
+     * Creates request options for updateAiProxy without sending the request
+     */
+    async updateAiProxyRequestOpts(input: UpdateAiProxyOperationRequest | runtime.FlatBody<UpdateAiProxyOperationRequest, 'updateAiProxyRequest'>): Promise<runtime.RequestOpts> {
+        const requestParameters = runtime.unflattenBody<UpdateAiProxyOperationRequest>(input, 'updateAiProxyRequest', ['org', 'xBoatOrg'], []);
+        if (requestParameters['updateAiProxyRequest'] == null) {
+            throw new runtime.RequiredError(
+                'updateAiProxyRequest',
+                'Required parameter "updateAiProxyRequest" was null or undefined when calling updateAiProxy().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (requestParameters['xBoatOrg'] != null) {
+            headerParameters['X-Boat-Org'] = String(requestParameters['xBoatOrg']);
+        }
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/ai-proxy`;
+
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: UpdateAiProxyRequestToJSON(requestParameters['updateAiProxyRequest']),
+        };
+    }
+
+    /**
+     * With the proxy on, sandboxes get placeholder keys and base URLs that point at Boat. Boat swaps in the real key on each request. Real keys never enter the sandbox.  Running sandboxes switch at their next start. While on, the account pays $1 of Boat time for each UTC day, plus $1 per 1,000 proxied requests, charged to the wallet each sandbox bills. For an organization, only its owner can change the switch. Needs an API key with `account.admin`. 
+     * Turn the AI credentials proxy on or off
+     */
+    async updateAiProxyRaw(requestParameters: UpdateAiProxyOperationRequest | runtime.FlatBody<UpdateAiProxyOperationRequest, 'updateAiProxyRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AiProxySettings>> {
+        const requestOptions = await this.updateAiProxyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => AiProxySettingsFromJSON(jsonValue));
+    }
+
+    /**
+     * With the proxy on, sandboxes get placeholder keys and base URLs that point at Boat. Boat swaps in the real key on each request. Real keys never enter the sandbox.  Running sandboxes switch at their next start. While on, the account pays $1 of Boat time for each UTC day, plus $1 per 1,000 proxied requests, charged to the wallet each sandbox bills. For an organization, only its owner can change the switch. Needs an API key with `account.admin`. 
+     * Turn the AI credentials proxy on or off
+     */
+    async updateAiProxy(requestParameters: UpdateAiProxyOperationRequest | runtime.FlatBody<UpdateAiProxyOperationRequest, 'updateAiProxyRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AiProxySettings> {
+        const response = await this.updateAiProxyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Creates request options for updateCredentialProfile without sending the request
+     */
+    async updateCredentialProfileRequestOpts(input: UpdateCredentialProfileOperationRequest | runtime.FlatBody<UpdateCredentialProfileOperationRequest, 'updateCredentialProfileRequest'>): Promise<runtime.RequestOpts> {
+        const requestParameters = runtime.unflattenBody<UpdateCredentialProfileOperationRequest>(input, 'updateCredentialProfileRequest', ['profile'], []);
+        if (requestParameters['profile'] == null) {
+            throw new runtime.RequiredError(
+                'profile',
+                'Required parameter "profile" was null or undefined when calling updateCredentialProfile().'
+            );
+        }
+
+        if (requestParameters['updateCredentialProfileRequest'] == null) {
+            throw new runtime.RequiredError(
+                'updateCredentialProfileRequest',
+                'Required parameter "updateCredentialProfileRequest" was null or undefined when calling updateCredentialProfile().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/credential-profiles/{profile}`;
+        urlPath = urlPath.replace('{profile}', encodeURIComponent(String(requestParameters['profile'])));
+
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: UpdateCredentialProfileRequestToJSON(requestParameters['updateCredentialProfileRequest']),
+        };
+    }
+
+    /**
+     * Renames the profile, or makes it its owner\'s default. Sandboxes that use the owner\'s default switch to the new default at their next start. Needs an API key with `account.admin`.
+     * Update a credential profile
+     */
+    async updateCredentialProfileRaw(requestParameters: UpdateCredentialProfileOperationRequest | runtime.FlatBody<UpdateCredentialProfileOperationRequest, 'updateCredentialProfileRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CredentialProfileResponse>> {
+        const requestOptions = await this.updateCredentialProfileRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => CredentialProfileResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Renames the profile, or makes it its owner\'s default. Sandboxes that use the owner\'s default switch to the new default at their next start. Needs an API key with `account.admin`.
+     * Update a credential profile
+     */
+    async updateCredentialProfile(requestParameters: UpdateCredentialProfileOperationRequest | runtime.FlatBody<UpdateCredentialProfileOperationRequest, 'updateCredentialProfileRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CredentialProfileResponse> {
+        const response = await this.updateCredentialProfileRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Creates request options for updateDataRetention without sending the request
      */
@@ -5456,7 +6600,7 @@ export class BoatApi extends runtime.BaseAPI {
      * Creates request options for updateEnvironment without sending the request
      */
     async updateEnvironmentRequestOpts(input: UpdateEnvironmentRequest | runtime.FlatBody<UpdateEnvironmentRequest, 'updateSandboxEnvironmentRequest'>): Promise<runtime.RequestOpts> {
-        const requestParameters = runtime.unflattenBody<UpdateEnvironmentRequest>(input, 'updateSandboxEnvironmentRequest', ['environmentId'], []);
+        const requestParameters = runtime.unflattenBody<UpdateEnvironmentRequest>(input, 'updateSandboxEnvironmentRequest', ['environmentId', 'org'], []);
         if (requestParameters['environmentId'] == null) {
             throw new runtime.RequiredError(
                 'environmentId',
@@ -5473,6 +6617,10 @@ export class BoatApi extends runtime.BaseAPI {
 
         const queryParameters: any = {};
 
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
         const headerParameters: runtime.HTTPHeaders = {};
 
         headerParameters['Content-Type'] = 'application/json';
@@ -5644,7 +6792,7 @@ export class BoatApi extends runtime.BaseAPI {
      * Creates request options for upgradeEnvironment without sending the request
      */
     async upgradeEnvironmentRequestOpts(input: UpgradeEnvironmentRequest | runtime.FlatBody<UpgradeEnvironmentRequest, 'upgradeSandboxEnvironmentRequest'>): Promise<runtime.RequestOpts> {
-        const requestParameters = runtime.unflattenBody<UpgradeEnvironmentRequest>(input, 'upgradeSandboxEnvironmentRequest', ['environmentId'], []);
+        const requestParameters = runtime.unflattenBody<UpgradeEnvironmentRequest>(input, 'upgradeSandboxEnvironmentRequest', ['environmentId', 'org'], []);
         if (requestParameters['environmentId'] == null) {
             throw new runtime.RequiredError(
                 'environmentId',
@@ -5654,6 +6802,10 @@ export class BoatApi extends runtime.BaseAPI {
 
         const queryParameters: any = {};
 
+        if (requestParameters['org'] != null) {
+            queryParameters['org'] = requestParameters['org'];
+        }
+
         const headerParameters: runtime.HTTPHeaders = {};
 
         headerParameters['Content-Type'] = 'application/json';
@@ -5809,7 +6961,7 @@ export class BoatApi extends runtime.BaseAPI {
     }
 
     /**
-     * Files up to 5 MiB after decoding. Use SCP over SSH for larger files.
+     * Files up to 5 MiB after decoding. For a larger file, use `POST /sandboxes/{sandboxId}/files/upload-url`.
      * Write a file in a sandbox
      */
     async writeFileRaw(requestParameters: WriteFileRequest | runtime.FlatBody<WriteFileRequest, 'fileWriteRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<FileWriteResponse>> {
@@ -5820,7 +6972,7 @@ export class BoatApi extends runtime.BaseAPI {
     }
 
     /**
-     * Files up to 5 MiB after decoding. Use SCP over SSH for larger files.
+     * Files up to 5 MiB after decoding. For a larger file, use `POST /sandboxes/{sandboxId}/files/upload-url`.
      * Write a file in a sandbox
      */
     async writeFile(requestParameters: WriteFileRequest | runtime.FlatBody<WriteFileRequest, 'fileWriteRequest'>, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<FileWriteResponse> {